@vxil/cli 0.7.0 → 0.8.0

package/dist/vxil.js

@@ -8,7 +8,7 @@ var __export = (target, all) => {
 // bin/vxil.ts
 import { writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync8, appendFileSync as appendFileSync2, readFileSync as readFileSync8, chmodSync as chmodSync2, openSync, closeSync, fstatSync, renameSync } from "node:fs";
 import { spawnSync } from "node:child_process";
-import { resolve as resolve7, dirname as dirname5 } from "node:path";
+import { resolve as resolve7, dirname as dirname5, basename as basename4 } from "node:path";
 import { createInterface } from "node:readline";
 import { watch } from "node:fs";
 import { createServer } from "node:http";
@@ -2767,7 +2767,7 @@ function sameStringSet(a, b2) {
   return A.size === B.size && [...A].every((x) => B.has(x));
 }
 function planWebhookSubscriptions(declared, live) {
-  const plan = { create: [], recreate: [], unchanged: [], undeclared: [] };
+  const plan = { create: [], update: [], unchanged: [], undeclared: [] };
   const declaredUrls = new Set(declared.map((d) => d.target_url));
   const matched = /* @__PURE__ */ new Set();
   for (const d of declared) {
@@ -2781,7 +2781,7 @@ function planWebhookSubscriptions(declared, live) {
     const chosen = exact ?? rows[0];
     matched.add(chosen.sub_id);
     if (exact) plan.unchanged.push(d.target_url);
-    else plan.recreate.push({ sub_id: chosen.sub_id, target_url: d.target_url, declared: d });
+    else plan.update.push({ sub_id: chosen.sub_id, target_url: d.target_url, event_prefixes: [...want] });
   }
   for (const l of live) {
     if (matched.has(l.sub_id)) continue;
@@ -2876,9 +2876,11 @@ function canonicalJson(v) {
 if (!format_exports.Has("email")) {
   format_exports.Set("email", (v) => /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v));
 }
+var FN_RETRY_MAX_ATTEMPTS = 5;
 var NOTIF_OVERRIDE_SUBJECT_MAX = 500;
 var NOTIF_OVERRIDE_BODY_MAX = 2e4;
 var NOTIF_OVERRIDE_MAX_BYTES = 64 * 1024;
+var SNS_TOPIC_ARN_PATTERN = "^arn:aws(-[a-z]+)?:sns:[a-z0-9-]+:\\d{12}:[A-Za-z0-9_-]{1,256}$";
 var SES_REGION_PATTERN = "^[a-z]{2}(-[a-z]+)+-\\d$";
 var NotificationsConfigSchema = Type.Object({
   enabled: Type.Boolean({ default: true }),
@@ -2915,7 +2917,14 @@ var NotificationsConfigSchema = Type.Object({
   ses: Type.Optional(Type.Object({
     region: Type.String({ pattern: SES_REGION_PATTERN, maxLength: 32 }),
     accessKeyIdRef: Type.String({ minLength: 1 }),
-    secretAccessKeyRef: Type.String({ minLength: 1 })
+    secretAccessKeyRef: Type.String({ minLength: 1 }),
+    // Bounce/complaint intake (2026-09-25): the SNS topic SES publishes its
+    // bounce/complaint events to; its HTTPS subscription posts to the worker's
+    // `/v1/notifications/webhooks/ses/<tenant>/<tag>` route, which accepts a
+    // message ONLY when its TopicArn equals this value (fail closed: unset ⇒
+    // the lane answers 404). Plain config, not a secret — the AWS signature is
+    // the proof. Inside the Optional bag ⇒ zero leaf cost.
+    snsTopicArn: Type.Optional(Type.String({ pattern: SNS_TOPIC_ARN_PATTERN, maxLength: 320 }))
   })),
   defaultLocale: Type.String({ default: "en-US" }),
   // nested objects carry `default: {}` so Value.Default can materialize them
@@ -3012,6 +3021,28 @@ var NotificationsConfigSchema = Type.Object({
     freqCapPerUserPerDay: Type.Integer({ default: 5, minimum: 0 })
   }))
 });
+var GENERATION_DEFAULTS = {
+  /** per-tenant in-flight generation cap (separate budget from queue jobs) */
+  maxConcurrent: 20,
+  /** default expiry/timeout when the descriptor omits one — 5 min */
+  defaultTimeoutMs: 5 * 6e4,
+  /** hard ceiling a tenant-supplied timeout is clamped to — 1 h */
+  maxTimeoutMs: 60 * 6e4,
+  /** poll-mode: how many poll cycles before giving up (→ terminal-fail) */
+  pollMaxAttempts: 60,
+  /** MANDATORY per-hold cap on a `reserve_credits.amount` (clamped, never rejected) */
+  maxReserveCredits: 1e3,
+  /** MANDATORY per-tenant ceiling on the sum of un-settled provisional holds */
+  maxOutstandingReserveCredits: 1e5
+};
+var GENERATION_BOUNDS = {
+  maxConcurrent: { min: 1, max: 200 },
+  defaultTimeoutMs: { min: 1e3, max: 36e5 },
+  maxTimeoutMs: { min: 1e3, max: 36e5 },
+  pollMaxAttempts: { min: 1, max: 1e3 },
+  maxReserveCredits: { min: 1, max: 1e6 },
+  maxOutstandingReserveCredits: { min: 1, max: 1e8 }
+};
 var JobsConfigSchema = Type.Object({
   enabled: Type.Boolean({ default: true }),
   retry: Type.Object(
@@ -3039,32 +3070,33 @@ var JobsConfigSchema = Type.Object({
     { maxConcurrent: Type.Integer({ default: 10, minimum: 1, maximum: 100 }) },
     { default: {} }
   ),
-  // 2.F6 generation lifecycle knobs (jobs.md §11) — mirrors the worker-local
-  // GENERATION_DEFAULTS in workers/jobs-v1/src/generation.ts (its
-  // resolveGenerationConfig reads `loaded.generation` and clamps to these same
-  // bounds when a field is absent).
+  // 2.F6 generation lifecycle knobs (jobs.md §11). The defaults and bounds are
+  // declared ONCE, as GENERATION_DEFAULTS / GENERATION_BOUNDS below this schema
+  // (2026-09-25): jobs-v1's resolveGenerationConfig imports them and clamps a
+  // pre-fold manifest to the same numbers — a hand-mirrored copy used to live
+  // in workers/jobs-v1/src/generation.ts.
   generation: Type.Object(
     {
       /** per-tenant in-flight generation cap (separate budget from queue jobs) */
-      maxConcurrent: Type.Integer({ default: 20, minimum: 1, maximum: 200 }),
+      maxConcurrent: Type.Integer({ default: GENERATION_DEFAULTS.maxConcurrent, minimum: GENERATION_BOUNDS.maxConcurrent.min, maximum: GENERATION_BOUNDS.maxConcurrent.max }),
       /** default expiry/timeout when the descriptor omits one */
-      defaultTimeoutMs: Type.Integer({ default: 3e5, minimum: 1e3, maximum: 36e5 }),
+      defaultTimeoutMs: Type.Integer({ default: GENERATION_DEFAULTS.defaultTimeoutMs, minimum: GENERATION_BOUNDS.defaultTimeoutMs.min, maximum: GENERATION_BOUNDS.defaultTimeoutMs.max }),
       /** hard ceiling a tenant-supplied timeout is clamped to */
-      maxTimeoutMs: Type.Integer({ default: 36e5, minimum: 1e3, maximum: 36e5 }),
+      maxTimeoutMs: Type.Integer({ default: GENERATION_DEFAULTS.maxTimeoutMs, minimum: GENERATION_BOUNDS.maxTimeoutMs.min, maximum: GENERATION_BOUNDS.maxTimeoutMs.max }),
       /** poll-mode: how many poll cycles before giving up (→ terminal-fail) */
-      pollMaxAttempts: Type.Integer({ default: 60, minimum: 1, maximum: 1e3 }),
+      pollMaxAttempts: Type.Integer({ default: GENERATION_DEFAULTS.pollMaxAttempts, minimum: GENERATION_BOUNDS.pollMaxAttempts.min, maximum: GENERATION_BOUNDS.pollMaxAttempts.max }),
       /** MANDATORY per-hold cap on a generation `reserve_credits.amount` (jobs.md
        * §11.8). Every requested amount is CLAMPED to this (never rejected) — a
        * conservative default so an untrusted deployed function that carries a
        * reserve block can never hold more than a bounded amount per run without
        * any tenant action. */
-      maxReserveCredits: Type.Integer({ default: 1e3, minimum: 1, maximum: 1e6 }),
+      maxReserveCredits: Type.Integer({ default: GENERATION_DEFAULTS.maxReserveCredits, minimum: GENERATION_BOUNDS.maxReserveCredits.min, maximum: GENERATION_BOUNDS.maxReserveCredits.max }),
       /** MANDATORY per-tenant ceiling on the SUM of un-settled provisional
        * reserve holds across all in-flight generation runs (jobs.md §11.8): a
        * reserve whose amount would push the tenant's outstanding-holds total over
        * this is rejected 429, so a runaway function cannot hold every user at
        * once. Defaulted so no tenant action is required to be safe. */
-      maxOutstandingReserveCredits: Type.Integer({ default: 1e5, minimum: 1, maximum: 1e8 })
+      maxOutstandingReserveCredits: Type.Integer({ default: GENERATION_DEFAULTS.maxOutstandingReserveCredits, minimum: GENERATION_BOUNDS.maxOutstandingReserveCredits.min, maximum: GENERATION_BOUNDS.maxOutstandingReserveCredits.max })
     },
     { default: {} }
   )
@@ -3422,9 +3454,9 @@ var WebhooksConfigSchema = Type.Object({
   })),
   // DECLARED API STATE (roadmap §4.11 P0-3, 2026-09-23): the tenant's OUTBOUND
   // subscriptions as config. Keyed by `target_url` — the only stable identity a
-  // subscription has (there is no name column and no update route, so a changed
-  // prefix set is delete+recreate, exactly what the function-trigger reconciler
-  // does). `vxil push` / `POST /v1/apply` converge public.webhook_subscriptions
+  // subscription has (there is no name column). A changed prefix set is an
+  // in-place update — PATCH /v1/webhooks/subscriptions/:subId, same sub_id and
+  // cursor (2026-09-25). `vxil push` / `POST /v1/apply` converge public.webhook_subscriptions
   // onto this list (handlers/apiState.ts); undeclared live rows are LEFT and
   // reported (deleted only under --allow-destructive). Rows on the platform's
   // signed function-delivery lanes (/v1/internal/fn/…) are NEVER declared here
@@ -4006,17 +4038,31 @@ var PaymentsConfigSchema = Type.Object({
   // analyzer's top level; productMap/tierMap are tenant-supplied Type.Record
   // MAPS (one typed leaf each), so catalog size never inflates the flag count.
   ledger: Type.Optional(Type.Object({
-    productMap: Type.Record(Type.String(), Type.Object({
-      // product_id → grant rule
-      creditType: Type.String({ minLength: 1 }),
-      amount: Type.Integer({ minimum: 1 }),
-      // #128: a grant only ADDS
-      period: Type.Union([
-        Type.Literal("once"),
-        Type.Literal("monthly"),
-        Type.Literal("annual")
-      ])
-    })),
+    // product_id → what the purchase GRANTS. ONE Type.Record leaf (the rag
+    // `boosts` Record-of-Union precedent) with two rule shapes:
+    //   { creditType, amount, period }  a credit grant (the original rule)
+    //   { tier, durationDays }          (2026-09-25 F35+) a TIME-BOXED
+    //     ENTITLEMENT: the buyer gets `tier` (a tierMap key — cross-checked
+    //     below) for `durationDays`, as a charge-linked manual-style row that
+    //     STACKS on the user's live purchases of the same tier and is ENDED by
+    //     that charge's full refund / chargeback. No defaults in either shape,
+    //     so an existing manifest is byte-identical after Value.Default.
+    productMap: Type.Record(Type.String(), Type.Union([
+      Type.Object({
+        creditType: Type.String({ minLength: 1 }),
+        amount: Type.Integer({ minimum: 1 }),
+        // #128: a grant only ADDS
+        period: Type.Union([
+          Type.Literal("once"),
+          Type.Literal("monthly"),
+          Type.Literal("annual")
+        ])
+      }),
+      Type.Object({
+        tier: Type.String({ minLength: 1 }),
+        durationDays: Type.Integer({ minimum: 1, maximum: 3650 })
+      })
+    ])),
     tierMap: Type.Record(Type.String(), Type.Object({
       // tier → entitlement/quota/grant
       entitlements: Type.Array(Type.String()),
@@ -4150,8 +4196,17 @@ var FunctionsConfigSchema = Type.Object({
               // webhook/queue: source/queue id
               collection: Type.Optional(Type.String()),
               // cmsHook: the CMS collection slug
-              event: Type.Optional(Type.String())
+              event: Type.Optional(Type.String()),
               // cmsHook: beforeCreate|beforeUpdate|beforeWrite · authHook: 'user.created'
+              // F33 (2026-09-25): the per-binding opt-in to re-delivery on
+              // queue / webhook / cmsHook / authHook (the cross-field rule
+              // rejects it on http / cron). Absent = the ACK-200 default. The
+              // receiver answers a failed attempt as an enveloped 503 (ladder)
+              // and the last one as a terminal 409 (dead + job.dead_lettered);
+              // effective attempts = min(maxAttempts, jobs.retry.defaultMaxAttempts).
+              retry: Type.Optional(Type.Object({
+                maxAttempts: Type.Integer({ minimum: 1, maximum: FN_RETRY_MAX_ATTEMPTS })
+              }))
             }),
             { maxItems: 8 }
           )
@@ -4307,6 +4362,7 @@ var CopilotConfigSchema = Type.Object({
 var DENY_FUNCTION_SCOPES = /* @__PURE__ */ new Set(["admin", "*", "features:write", "functions:write", "secrets:write"]);
 
 // src/lib.ts
+var MAX_FN_BINDINGS = 8;
 var FN_LIMIT_BOUNDS = {
   cpuMs: { min: 5, max: 3e5 },
   timeoutMs: { min: 1e3, max: 12e4 }
@@ -4325,24 +4381,39 @@ function normalizeFnLimits(raw) {
 function lowerTriggerBindings(trigger) {
   const t = trigger?.kind ?? "http";
   const str2 = (k) => typeof trigger?.[k] === "string" ? trigger[k] : void 0;
-  if (t === "cron") return [{ kind: "cron", ...str2("schedule") ? { schedule: str2("schedule") } : {} }];
-  if (t === "queue") return [{ kind: "queue", ...str2("source") ? { source: str2("source") } : {} }];
-  if (t === "webhook") return [{ kind: "webhook", ...str2("source") ? { source: str2("source") } : {} }];
+  const retryOf = () => {
+    const r = trigger?.retry;
+    const n = r && typeof r === "object" ? r.maxAttempts : void 0;
+    return typeof n === "number" && Number.isInteger(n) ? { retry: { maxAttempts: n } } : {};
+  };
+  if (t === "cron") return [{ kind: "cron", ...str2("schedule") ? { schedule: str2("schedule") } : {}, ...retryOf() }];
+  if (t === "queue") return [{ kind: "queue", ...str2("source") ? { source: str2("source") } : {}, ...retryOf() }];
+  if (t === "webhook") return [{ kind: "webhook", ...str2("source") ? { source: str2("source") } : {}, ...retryOf() }];
   if (t === "cmsHook" || t === "cms-hook") {
     return [{
       kind: "cmsHook",
       ...str2("collection") ? { collection: str2("collection") } : {},
-      ...str2("event") ? { event: str2("event") } : {}
+      ...str2("event") ? { event: str2("event") } : {},
+      ...retryOf()
     }];
   }
   if (t === "authHook" || t === "auth-hook") {
-    return [{ kind: "authHook", ...str2("event") ? { event: str2("event") } : {} }];
+    return [{ kind: "authHook", ...str2("event") ? { event: str2("event") } : {}, ...retryOf() }];
+  }
+  return [{ kind: "http", ...str2("path") ? { path: str2("path") } : {}, ...retryOf() }];
+}
+function lowerAllTriggerBindings(def, name) {
+  const declared = [def.trigger, ...def.triggers ?? []].filter((t) => Boolean(t));
+  if (!declared.length) return lowerTriggerBindings(void 0);
+  const bindings = declared.flatMap((t) => lowerTriggerBindings(t));
+  if (bindings.length > MAX_FN_BINDINGS) {
+    throw new Error(`functions${name ? `.${name}` : ""}: ${bindings.length} trigger bindings declared (trigger + triggers[]) \u2014 the cap is ${MAX_FN_BINDINGS}`);
   }
-  return [{ kind: "http", ...str2("path") ? { path: str2("path") } : {} }];
+  return bindings;
 }
 var CONFIG_FILENAMES = ["vxil.config.ts", "vxil.config.mjs", "vxil.config.js"];
-var VXIL_CONFIG_PKG_VERSION = "0.5.1";
-var VXIL_SDK_PKG_VERSION = "0.7.0";
+var VXIL_CONFIG_PKG_VERSION = "0.6.0";
+var VXIL_SDK_PKG_VERSION = "0.8.0";
 function ensureScaffoldPackageJson(cwd, opts = {}) {
   const file = resolve(cwd, "package.json");
   const wanted = {
@@ -4377,6 +4448,12 @@ function ensureScaffoldPackageJson(cwd, opts = {}) {
   writeFileSync(file, JSON.stringify(pkg, null, 2) + "\n");
   return { action: "added" };
 }
+function apiErrText(r) {
+  const e = r.body.error;
+  if (!e) return `${r.status}`;
+  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
+hint: ${e.hint}` : ""}`;
+}
 var CONFIG_IMPORT_SPECIFIERS = ["@vxil/config", "vxil/config"];
 function ownConfigImpl() {
   try {
@@ -4566,7 +4643,7 @@ function assembleApplyBundle(cfg, fnSources) {
   const functions = Object.entries(cfg.functions ?? {}).map(([name, def]) => {
     const source = fnSources[name];
     if (source === void 0) throw new Error(`functions: no bundled source for '${name}'`);
-    const bindings = lowerTriggerBindings(def.trigger);
+    const bindings = lowerAllTriggerBindings(def, name);
     const limits = normalizeFnLimits(def.limits);
     return {
       name,
@@ -4703,616 +4780,320 @@ function formatNotCompared(u, hint) {
   return `  ! not compared: ${u.route} \u2192 ${u.code ?? u.status}${u.message ? ` \u2014 ${u.message}` : ""}${hint ? ` (${hint})` : ""}`;
 }
 
-// ../types/src/ulid.ts
-var ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-function ulid(now = Date.now()) {
-  let time = "";
-  let t = now;
-  for (let i = 0; i < 10; i++) {
-    time = ALPHABET[t % 32] + time;
-    t = Math.floor(t / 32);
+// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/index.js
+import os from "os";
+import fs from "fs";
+
+// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/query.js
+var originCache = /* @__PURE__ */ new Map();
+var originStackCache = /* @__PURE__ */ new Map();
+var originError = /* @__PURE__ */ Symbol("OriginError");
+var CLOSE = {};
+var Query = class extends Promise {
+  constructor(strings, args, handler, canceller, options = {}) {
+    let resolve8, reject;
+    super((a, b2) => {
+      resolve8 = a;
+      reject = b2;
+    });
+    this.tagged = Array.isArray(strings.raw);
+    this.strings = strings;
+    this.args = args;
+    this.handler = handler;
+    this.canceller = canceller;
+    this.options = options;
+    this.state = null;
+    this.statement = null;
+    this.resolve = (x) => (this.active = false, resolve8(x));
+    this.reject = (x) => (this.active = false, reject(x));
+    this.active = false;
+    this.cancelled = null;
+    this.executed = false;
+    this.signature = "";
+    this[originError] = this.handler.debug ? new Error() : this.tagged && cachedError(this.strings);
   }
-  const rand = new Uint8Array(16);
-  crypto.getRandomValues(rand);
-  let out = time;
-  for (let i = 0; i < 16; i++) {
-    out += ALPHABET[rand[i] % 32];
+  get origin() {
+    return (this.handler.debug ? this[originError].stack : this.tagged && originStackCache.has(this.strings) ? originStackCache.get(this.strings) : originStackCache.set(this.strings, this[originError].stack).get(this.strings)) || "";
   }
-  return out;
+  static get [Symbol.species]() {
+    return Promise;
+  }
+  cancel() {
+    return this.canceller && (this.canceller(this), this.canceller = null);
+  }
+  simple() {
+    this.options.simple = true;
+    this.options.prepare = false;
+    return this;
+  }
+  async readable() {
+    this.simple();
+    this.streaming = true;
+    return this;
+  }
+  async writable() {
+    this.simple();
+    this.streaming = true;
+    return this;
+  }
+  cursor(rows = 1, fn) {
+    this.options.simple = false;
+    if (typeof rows === "function") {
+      fn = rows;
+      rows = 1;
+    }
+    this.cursorRows = rows;
+    if (typeof fn === "function")
+      return this.cursorFn = fn, this;
+    let prev;
+    return {
+      [Symbol.asyncIterator]: () => ({
+        next: () => {
+          if (this.executed && !this.active)
+            return { done: true };
+          prev && prev();
+          const promise = new Promise((resolve8, reject) => {
+            this.cursorFn = (value) => {
+              resolve8({ value, done: false });
+              return new Promise((r) => prev = r);
+            };
+            this.resolve = () => (this.active = false, resolve8({ done: true }));
+            this.reject = (x) => (this.active = false, reject(x));
+          });
+          this.execute();
+          return promise;
+        },
+        return() {
+          prev && prev(CLOSE);
+          return { done: true };
+        }
+      })
+    };
+  }
+  describe() {
+    this.options.simple = false;
+    this.onlyDescribe = this.options.prepare = true;
+    return this;
+  }
+  stream() {
+    throw new Error(".stream has been renamed to .forEach");
+  }
+  forEach(fn) {
+    this.forEachFn = fn;
+    this.handle();
+    return this;
+  }
+  raw() {
+    this.isRaw = true;
+    return this;
+  }
+  values() {
+    this.isRaw = "values";
+    return this;
+  }
+  async handle() {
+    !this.executed && (this.executed = true) && await 1 && this.handler(this);
+  }
+  execute() {
+    this.handle();
+    return this;
+  }
+  then() {
+    this.handle();
+    return super.then.apply(this, arguments);
+  }
+  catch() {
+    this.handle();
+    return super.catch.apply(this, arguments);
+  }
+  finally() {
+    this.handle();
+    return super.finally.apply(this, arguments);
+  }
+};
+function cachedError(xs) {
+  if (originCache.has(xs))
+    return originCache.get(xs);
+  const x = Error.stackTraceLimit;
+  Error.stackTraceLimit = 4;
+  originCache.set(xs, new Error());
+  Error.stackTraceLimit = x;
+  return originCache.get(xs);
 }
-function newId(prefix) {
-  return `${prefix}_${ulid()}`;
+
+// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/errors.js
+var PostgresError = class extends Error {
+  constructor(x) {
+    super(x.message);
+    this.name = this.constructor.name;
+    Object.assign(this, x);
+  }
+};
+var Errors = {
+  connection,
+  postgres,
+  generic,
+  notSupported
+};
+function connection(x, options, socket) {
+  const { host, port } = socket || options;
+  const error = Object.assign(
+    new Error("write " + x + " " + (options.path || host + ":" + port)),
+    {
+      code: x,
+      errno: x,
+      address: options.path || host
+    },
+    options.path ? {} : { port }
+  );
+  Error.captureStackTrace(error, connection);
+  return error;
+}
+function postgres(x) {
+  const error = new PostgresError(x);
+  Error.captureStackTrace(error, postgres);
+  return error;
+}
+function generic(code, message) {
+  const error = Object.assign(new Error(code + ": " + message), { code });
+  Error.captureStackTrace(error, generic);
+  return error;
+}
+function notSupported(x) {
+  const error = Object.assign(
+    new Error(x + " (B) is not supported"),
+    {
+      code: "MESSAGE_NOT_SUPPORTED",
+      name: x
+    }
+  );
+  Error.captureStackTrace(error, notSupported);
+  return error;
 }
 
-// ../types/src/index.ts
-var KNOWN_SCOPES = [
-  "features:read",
-  "features:write",
-  // Dedicated write scope for the BYO-secret path. PUT /v1/secrets/:feature/:name
-  // requires THIS (or 'admin') as of 2026-07-17 (audit H2 — 'features:write' is no
-  // longer secret-write-equivalent). GET/DELETE /v1/secrets still also accept
-  // 'features:write'.
-  "secrets:write",
-  "users:read",
-  "users:write",
-  "notifications:send",
-  "notifications:read",
-  "jobs:read",
-  "jobs:write",
-  "auth:read",
-  "auth:write",
-  // Narrow least-privilege scope for the SIGN-IN surface only (2026-09-10,
-  // F4-25/F8-56): every auth route an anonymous or self-authenticating client
-  // must call to obtain, renew, verify or end ITS OWN session (sign-up/sign-in,
-  // magic-link, OTP, anonymous, step-up, OAuth, refresh, by-token revoke,
-  // sessions/verify, password reset). It does NOT reach the administrative
-  // routes — GET /v1/auth/sessions (auth:read), POST /v1/auth/sessions/:id/
-  // revoke and POST /v1/auth/users/:id/erase (auth:write). This is the scope a
-  // key baked into a browser/mobile bundle carries for sign-in; 'auth:write'
-  // still satisfies every route (any-of, the usage:read idiom) so existing keys
-  // keep working.
-  "auth:signin",
-  "ratelimits:read",
-  "ratelimits:write",
-  "ratelimits:check",
-  "files:read",
-  "files:write",
-  "webhooks:read",
-  "webhooks:write",
-  "comments:read",
-  "comments:write",
-  "cms:read",
-  "cms:write",
-  "realtime:read",
-  "realtime:write",
-  "presence:read",
-  "orgs:read",
-  "orgs:write",
-  "payments:read",
-  "payments:write",
-  "vector-search:read",
-  "vector-search:write",
-  "ai:read",
-  "ai:write",
-  "rag:read",
-  "rag:write",
-  "activity-feed:read",
-  "activity-feed:write",
-  "functions:invoke",
-  "functions:read",
-  "functions:write",
-  "copilot:read",
-  "copilot:write",
-  // Narrow least-privilege read for GET /v1/usage (2026-08-05, parity P0#4).
-  // The route ALSO accepts 'features:read' (any-of, the secrets:write idiom)
-  // so pre-existing keys keep working; mint this when a key should see usage
-  // and nothing else.
-  "usage:read",
-  "admin"
-];
-var FUNCTION_SCOPE_AUDIENCE = {
-  cms: "cms",
-  payments: "payments",
-  notifications: "notifications",
-  comments: "comments",
-  files: "files",
-  ai: "ai",
-  rag: "rag",
-  "vector-search": "vector-search",
-  "activity-feed": "activity-feed",
-  orgs: "orgs",
-  auth: "auth",
-  jobs: "jobs",
-  realtime: "realtime",
-  presence: "realtime",
-  // presence:read is served by the realtime worker
-  ratelimits: "rate-limits",
-  // the worker checks `ratelimits:*`; its audience is 'rate-limits'
-  // The end-user REGISTRY (/v1/users*) and the usage meter (/v1/usage) are
-  // control-plane routes. The edge already re-mints a function's bearer for
-  // aud='control-plane' exactly as it does for a feature worker, and the
-  // control plane verifies that audience + scope-checks per route — so this
-  // is a contained audience. The minted claim is CONFINED to
-  // CONTROL_PLANE_FUNCTION_SCOPES (scopesForFunctionAudience) so the same token
-  // can never satisfy any other scope-gated control-plane route.
-  users: "control-plane",
-  usage: "control-plane"
+// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/types.js
+var types = {
+  string: {
+    to: 25,
+    from: null,
+    // defaults to string
+    serialize: (x) => "" + x
+  },
+  number: {
+    to: 0,
+    from: [21, 23, 26, 700, 701],
+    serialize: (x) => "" + x,
+    parse: (x) => +x
+  },
+  json: {
+    to: 114,
+    from: [114, 3802],
+    serialize: (x) => JSON.stringify(x),
+    parse: (x) => JSON.parse(x)
+  },
+  boolean: {
+    to: 16,
+    from: 16,
+    serialize: (x) => x === true ? "t" : "f",
+    parse: (x) => x === "t"
+  },
+  date: {
+    to: 1184,
+    from: [1082, 1114, 1184],
+    serialize: (x) => (x instanceof Date ? x : new Date(x)).toISOString(),
+    parse: (x) => new Date(x)
+  },
+  bytea: {
+    to: 17,
+    from: 17,
+    serialize: (x) => "\\x" + Buffer.from(x).toString("hex"),
+    parse: (x) => Buffer.from(x.slice(2), "hex")
+  }
 };
-var FUNCTION_SCOPE_PREFIX_ALIASES = {
-  "rate-limits": "ratelimits",
-  search: "vector-search",
-  vector: "vector-search",
-  feeds: "activity-feed"
+var NotTagged = class {
+  then() {
+    notTagged();
+  }
+  catch() {
+    notTagged();
+  }
+  finally() {
+    notTagged();
+  }
 };
-var CONTROL_PLANE_FUNCTION_SCOPES = ["users:read", "users:write", "usage:read"];
-function canonicalFunctionScope(scope) {
-  const i = scope.indexOf(":");
-  if (i <= 0) return scope;
-  const prefix = scope.slice(0, i);
-  const canonical2 = FUNCTION_SCOPE_PREFIX_ALIASES[prefix];
-  return canonical2 ? `${canonical2}${scope.slice(i)}` : scope;
-}
-function functionScopeAudience(scope) {
-  const c = canonicalFunctionScope(scope);
-  const i = c.indexOf(":");
-  if (i <= 0) return null;
-  return FUNCTION_SCOPE_AUDIENCE[c.slice(0, i)] ?? null;
+var Identifier = class extends NotTagged {
+  constructor(value) {
+    super();
+    this.value = escapeIdentifier(value);
+  }
+};
+var Parameter = class extends NotTagged {
+  constructor(value, type, array) {
+    super();
+    this.value = value;
+    this.type = type;
+    this.array = array;
+  }
+};
+var Builder = class extends NotTagged {
+  constructor(first, rest2) {
+    super();
+    this.first = first;
+    this.rest = rest2;
+  }
+  build(before, parameters, types2, options) {
+    const keyword = builders.map(([x, fn]) => ({ fn, i: before.search(x) })).sort((a, b2) => a.i - b2.i).pop();
+    return keyword.i === -1 ? escapeIdentifiers(this.first, options) : keyword.fn(this.first, this.rest, parameters, types2, options);
+  }
+};
+function handleValue(x, parameters, types2, options) {
+  let value = x instanceof Parameter ? x.value : x;
+  if (value === void 0) {
+    x instanceof Parameter ? x.value = options.transform.undefined : value = x = options.transform.undefined;
+    if (value === void 0)
+      throw Errors.generic("UNDEFINED_VALUE", "Undefined values are not allowed");
+  }
+  return "$" + types2.push(
+    x instanceof Parameter ? (parameters.push(x.value), x.array ? x.array[x.type || inferType(x.value)] || x.type || firstIsString(x.value) : x.type) : (parameters.push(x), inferType(x))
+  );
 }
-function functionCallbackAudiences(scopes) {
-  const out = [];
-  for (const s of scopes) {
-    const a = functionScopeAudience(s);
-    if (a && !out.includes(a)) out.push(a);
+var defaultHandlers = typeHandlers(types);
+function stringify(q, string, value, parameters, types2, options) {
+  for (let i = 1; i < q.strings.length; i++) {
+    string += stringifyValue(string, value, parameters, types2, options) + q.strings[i];
+    value = q.args[i];
   }
-  return out;
+  return string;
 }
-function scopesForFunctionAudience(aud, scopes) {
-  const canon = [...new Set(scopes.map(canonicalFunctionScope))];
-  if (aud === "control-plane") return canon.filter((s) => CONTROL_PLANE_FUNCTION_SCOPES.includes(s));
-  return canon;
+function stringifyValue(string, value, parameters, types2, o) {
+  return value instanceof Builder ? value.build(string, parameters, types2, o) : value instanceof Query ? fragment(value, parameters, types2, o) : value instanceof Identifier ? value.value : value && value[0] instanceof Query ? value.reduce((acc, x) => acc + " " + fragment(x, parameters, types2, o), "") : handleValue(value, parameters, types2, o);
 }
-var FUNCTION_SOURCE_MAX_BYTES = 512e3;
-
-// ../runtime/src/hash.ts
-async function sha256Hex(input) {
-  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input));
-  return [...new Uint8Array(digest)].map((b2) => b2.toString(16).padStart(2, "0")).join("");
+function fragment(q, parameters, types2, options) {
+  q.fragment = true;
+  return stringify(q, q.strings[0], q.args[0], parameters, types2, options);
 }
-async function hmacSha256Hex(secret, data4) {
-  const key = await crypto.subtle.importKey(
-    "raw",
-    new TextEncoder().encode(secret),
-    { name: "HMAC", hash: "SHA-256" },
-    false,
-    ["sign"]
-  );
-  const sig = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(data4));
-  return [...new Uint8Array(sig)].map((b2) => b2.toString(16).padStart(2, "0")).join("");
+function valuesBuilder(first, parameters, types2, columns, options) {
+  return first.map(
+    (row2) => "(" + columns.map(
+      (column) => stringifyValue("values", row2[column], parameters, types2, options)
+    ).join(",") + ")"
+  ).join(",");
 }
-var AI_TEMPLATE_SCHEMA_MAX_DEPTH = 64;
-async function aiTemplateContentSha256(t) {
-  const canon = (v, depth) => {
-    if (v === null || typeof v !== "object") return v;
-    if (depth > AI_TEMPLATE_SCHEMA_MAX_DEPTH) throw new RangeError(`schema nests deeper than ${AI_TEMPLATE_SCHEMA_MAX_DEPTH} levels`);
-    if (Array.isArray(v)) return v.map((x) => canon(x, depth + 1));
-    const o = v;
-    return Object.fromEntries(Object.keys(o).sort().map((k) => [k, canon(o[k], depth + 1)]));
-  };
-  return sha256Hex(JSON.stringify({
-    schema: canon(t.schema ?? null, 1),
-    system: t.system ?? null,
-    user: t.user
-  }));
+function values(first, rest2, parameters, types2, options) {
+  const multi = Array.isArray(first[0]);
+  const columns = rest2.length ? rest2.flat() : Object.keys(multi ? first[0] : first);
+  return valuesBuilder(multi ? first : [first], parameters, types2, columns, options);
 }
-
-// ../runtime/src/egress.ts
-function isPrivateIPv4(host) {
-  const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
-  if (!m) return false;
-  const o = m.slice(1).map(Number);
-  if (o.some((n) => n > 255)) return false;
-  const [a, b2] = o;
-  return a === 10 || // 10.0.0.0/8        RFC1918
-  a === 172 && b2 >= 16 && b2 <= 31 || // 172.16.0.0/12 RFC1918
-  a === 192 && b2 === 168 || // 192.168.0.0/16   RFC1918
-  a === 127 || // 127.0.0.0/8       loopback
-  a === 169 && b2 === 254 || // 169.254.0.0/16   link-local (incl. metadata)
-  a === 100 && b2 >= 64 && b2 <= 127 || // 100.64.0.0/10 CGNAT / shared
-  a === 0 || // 0.0.0.0/8         "this host"
-  a >= 224;
-}
-function expandIPv6(host) {
-  if (!/^[0-9a-f:.]+$/.test(host) || !host.includes(":")) return null;
-  let h = host;
-  let tail = [];
-  const lastColon = h.lastIndexOf(":");
-  const maybeV4 = h.slice(lastColon + 1);
-  if (maybeV4.includes(".")) {
-    const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(maybeV4);
-    if (!m) return null;
-    const q = m.slice(1).map(Number);
-    if (q.some((n) => n > 255)) return null;
-    tail = [q[0] << 8 | q[1], q[2] << 8 | q[3]];
-    h = h.slice(0, lastColon + 1) + "0:0";
-  }
-  const parts = h.split("::");
-  if (parts.length > 2) return null;
-  const head = parts[0] ? parts[0].split(":") : [];
-  const rest2 = parts.length === 2 ? parts[1] ? parts[1].split(":") : [] : null;
-  let groups;
-  if (rest2 === null) {
-    groups = head;
-  } else {
-    const fill = 8 - head.length - rest2.length - tail.length;
-    if (fill < 0) return null;
-    groups = [...head, ...Array(fill).fill("0"), ...rest2];
-  }
-  const nums = groups.map((g) => g === "" ? 0 : parseInt(g, 16));
-  const all = [...nums, ...tail];
-  if (all.length !== 8 || all.some((n) => !Number.isFinite(n) || n < 0 || n > 65535)) {
-    return null;
-  }
-  return all.map((n) => n.toString(16));
-}
-function isPrivateIPv6(host) {
-  const hextets = expandIPv6(host);
-  if (!hextets) return false;
-  const n = hextets.map((x) => parseInt(x, 16));
-  const [h0, h1] = n;
-  if (n.every((x) => x === 0)) return true;
-  if (n.slice(0, 7).every((x) => x === 0) && n[7] === 1) return true;
-  if ((h0 & 65024) === 64512) return true;
-  if ((h0 & 65472) === 65152) return true;
-  if (n.slice(0, 5).every((x) => x === 0) && h0 === 0 && n[5] === 65535) {
-    const a = n[6] >> 8 & 255;
-    const b2 = n[6] & 255;
-    const c = n[7] >> 8 & 255;
-    const d = n[7] & 255;
-    return isPrivateIPv4(`${a}.${b2}.${c}.${d}`);
-  }
-  if (h0 === 100 && h1 === 65435) {
-    const a = n[6] >> 8 & 255;
-    const b2 = n[6] & 255;
-    const c = n[7] >> 8 & 255;
-    const d = n[7] & 255;
-    return isPrivateIPv4(`${a}.${b2}.${c}.${d}`);
-  }
-  return false;
-}
-var VXIL_API_HOSTS = /* @__PURE__ */ new Set(["api.vxil.com", "api.vxil.org"]);
-function egressDecision(targetUrl, allowHosts = []) {
-  let u;
-  try {
-    u = new URL(targetUrl);
-  } catch {
-    return { allow: false, reason: "invalid-url" };
-  }
-  if (u.protocol !== "https:") return { allow: false, reason: `non-https:${u.protocol}` };
-  if (u.username !== "" || u.password !== "") return { allow: false, reason: "embedded-credentials" };
-  const host = u.hostname.toLowerCase().replace(/^\[/, "").replace(/\]$/, "").replace(/\.$/, "");
-  if (host === "") return { allow: false, reason: "empty-host" };
-  if (isPrivateIPv4(host) || isPrivateIPv6(host)) return { allow: false, reason: `private-ip:${host}` };
-  if (host === "localhost" || host.endsWith(".localhost") || host === "metadata.google.internal" || host.endsWith(".internal") || host.endsWith(".local")) {
-    return { allow: false, reason: `internal-host:${host}` };
-  }
-  if (host.endsWith(".workers.dev")) return { allow: false, reason: `sibling-worker:${host}` };
-  if (VXIL_API_HOSTS.has(host)) return { allow: true, reason: "vxil-api" };
-  for (const a of allowHosts) {
-    const h = a.toLowerCase().trim();
-    if (h && (host === h || host.endsWith("." + h))) return { allow: true, reason: `allowlist:${h}` };
-  }
-  return { allow: false, reason: `not-allowlisted:${host}` };
-}
-
-// ../runtime/src/jobsCallbackSig.ts
-var JOBS_SIG_HEADER = "X-Vxil-Jobs-Signature";
-function signedString(runId, tenantId, issuedAt, bodyHashHex) {
-  return `${runId}.${tenantId}.${issuedAt}.${bodyHashHex}`;
-}
-async function signJobsCallbackWithTenantSecret(tenantSecret, params) {
-  const t = params.issuedAt ?? Math.floor(Date.now() / 1e3);
-  const bodyHash = await sha256Hex(params.body);
-  const v1 = await hmacSha256Hex(
-    tenantSecret,
-    signedString(params.runId, params.tenantId, t, bodyHash)
-  );
-  return `t=${t},v1=${v1}`;
-}
-
-// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/index.js
-import os from "os";
-import fs from "fs";
-
-// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/query.js
-var originCache = /* @__PURE__ */ new Map();
-var originStackCache = /* @__PURE__ */ new Map();
-var originError = /* @__PURE__ */ Symbol("OriginError");
-var CLOSE = {};
-var Query = class extends Promise {
-  constructor(strings, args, handler, canceller, options = {}) {
-    let resolve8, reject;
-    super((a, b2) => {
-      resolve8 = a;
-      reject = b2;
-    });
-    this.tagged = Array.isArray(strings.raw);
-    this.strings = strings;
-    this.args = args;
-    this.handler = handler;
-    this.canceller = canceller;
-    this.options = options;
-    this.state = null;
-    this.statement = null;
-    this.resolve = (x) => (this.active = false, resolve8(x));
-    this.reject = (x) => (this.active = false, reject(x));
-    this.active = false;
-    this.cancelled = null;
-    this.executed = false;
-    this.signature = "";
-    this[originError] = this.handler.debug ? new Error() : this.tagged && cachedError(this.strings);
-  }
-  get origin() {
-    return (this.handler.debug ? this[originError].stack : this.tagged && originStackCache.has(this.strings) ? originStackCache.get(this.strings) : originStackCache.set(this.strings, this[originError].stack).get(this.strings)) || "";
-  }
-  static get [Symbol.species]() {
-    return Promise;
-  }
-  cancel() {
-    return this.canceller && (this.canceller(this), this.canceller = null);
-  }
-  simple() {
-    this.options.simple = true;
-    this.options.prepare = false;
-    return this;
-  }
-  async readable() {
-    this.simple();
-    this.streaming = true;
-    return this;
-  }
-  async writable() {
-    this.simple();
-    this.streaming = true;
-    return this;
-  }
-  cursor(rows = 1, fn) {
-    this.options.simple = false;
-    if (typeof rows === "function") {
-      fn = rows;
-      rows = 1;
-    }
-    this.cursorRows = rows;
-    if (typeof fn === "function")
-      return this.cursorFn = fn, this;
-    let prev;
-    return {
-      [Symbol.asyncIterator]: () => ({
-        next: () => {
-          if (this.executed && !this.active)
-            return { done: true };
-          prev && prev();
-          const promise = new Promise((resolve8, reject) => {
-            this.cursorFn = (value) => {
-              resolve8({ value, done: false });
-              return new Promise((r) => prev = r);
-            };
-            this.resolve = () => (this.active = false, resolve8({ done: true }));
-            this.reject = (x) => (this.active = false, reject(x));
-          });
-          this.execute();
-          return promise;
-        },
-        return() {
-          prev && prev(CLOSE);
-          return { done: true };
-        }
-      })
-    };
-  }
-  describe() {
-    this.options.simple = false;
-    this.onlyDescribe = this.options.prepare = true;
-    return this;
-  }
-  stream() {
-    throw new Error(".stream has been renamed to .forEach");
-  }
-  forEach(fn) {
-    this.forEachFn = fn;
-    this.handle();
-    return this;
-  }
-  raw() {
-    this.isRaw = true;
-    return this;
-  }
-  values() {
-    this.isRaw = "values";
-    return this;
-  }
-  async handle() {
-    !this.executed && (this.executed = true) && await 1 && this.handler(this);
-  }
-  execute() {
-    this.handle();
-    return this;
-  }
-  then() {
-    this.handle();
-    return super.then.apply(this, arguments);
-  }
-  catch() {
-    this.handle();
-    return super.catch.apply(this, arguments);
-  }
-  finally() {
-    this.handle();
-    return super.finally.apply(this, arguments);
-  }
-};
-function cachedError(xs) {
-  if (originCache.has(xs))
-    return originCache.get(xs);
-  const x = Error.stackTraceLimit;
-  Error.stackTraceLimit = 4;
-  originCache.set(xs, new Error());
-  Error.stackTraceLimit = x;
-  return originCache.get(xs);
-}
-
-// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/errors.js
-var PostgresError = class extends Error {
-  constructor(x) {
-    super(x.message);
-    this.name = this.constructor.name;
-    Object.assign(this, x);
-  }
-};
-var Errors = {
-  connection,
-  postgres,
-  generic,
-  notSupported
-};
-function connection(x, options, socket) {
-  const { host, port } = socket || options;
-  const error = Object.assign(
-    new Error("write " + x + " " + (options.path || host + ":" + port)),
-    {
-      code: x,
-      errno: x,
-      address: options.path || host
-    },
-    options.path ? {} : { port }
-  );
-  Error.captureStackTrace(error, connection);
-  return error;
-}
-function postgres(x) {
-  const error = new PostgresError(x);
-  Error.captureStackTrace(error, postgres);
-  return error;
-}
-function generic(code, message) {
-  const error = Object.assign(new Error(code + ": " + message), { code });
-  Error.captureStackTrace(error, generic);
-  return error;
-}
-function notSupported(x) {
-  const error = Object.assign(
-    new Error(x + " (B) is not supported"),
-    {
-      code: "MESSAGE_NOT_SUPPORTED",
-      name: x
-    }
-  );
-  Error.captureStackTrace(error, notSupported);
-  return error;
-}
-
-// ../../node_modules/.pnpm/postgres@3.4.9/node_modules/postgres/src/types.js
-var types = {
-  string: {
-    to: 25,
-    from: null,
-    // defaults to string
-    serialize: (x) => "" + x
-  },
-  number: {
-    to: 0,
-    from: [21, 23, 26, 700, 701],
-    serialize: (x) => "" + x,
-    parse: (x) => +x
-  },
-  json: {
-    to: 114,
-    from: [114, 3802],
-    serialize: (x) => JSON.stringify(x),
-    parse: (x) => JSON.parse(x)
-  },
-  boolean: {
-    to: 16,
-    from: 16,
-    serialize: (x) => x === true ? "t" : "f",
-    parse: (x) => x === "t"
-  },
-  date: {
-    to: 1184,
-    from: [1082, 1114, 1184],
-    serialize: (x) => (x instanceof Date ? x : new Date(x)).toISOString(),
-    parse: (x) => new Date(x)
-  },
-  bytea: {
-    to: 17,
-    from: 17,
-    serialize: (x) => "\\x" + Buffer.from(x).toString("hex"),
-    parse: (x) => Buffer.from(x.slice(2), "hex")
-  }
-};
-var NotTagged = class {
-  then() {
-    notTagged();
-  }
-  catch() {
-    notTagged();
-  }
-  finally() {
-    notTagged();
-  }
-};
-var Identifier = class extends NotTagged {
-  constructor(value) {
-    super();
-    this.value = escapeIdentifier(value);
-  }
-};
-var Parameter = class extends NotTagged {
-  constructor(value, type, array) {
-    super();
-    this.value = value;
-    this.type = type;
-    this.array = array;
-  }
-};
-var Builder = class extends NotTagged {
-  constructor(first, rest2) {
-    super();
-    this.first = first;
-    this.rest = rest2;
-  }
-  build(before, parameters, types2, options) {
-    const keyword = builders.map(([x, fn]) => ({ fn, i: before.search(x) })).sort((a, b2) => a.i - b2.i).pop();
-    return keyword.i === -1 ? escapeIdentifiers(this.first, options) : keyword.fn(this.first, this.rest, parameters, types2, options);
-  }
-};
-function handleValue(x, parameters, types2, options) {
-  let value = x instanceof Parameter ? x.value : x;
-  if (value === void 0) {
-    x instanceof Parameter ? x.value = options.transform.undefined : value = x = options.transform.undefined;
-    if (value === void 0)
-      throw Errors.generic("UNDEFINED_VALUE", "Undefined values are not allowed");
-  }
-  return "$" + types2.push(
-    x instanceof Parameter ? (parameters.push(x.value), x.array ? x.array[x.type || inferType(x.value)] || x.type || firstIsString(x.value) : x.type) : (parameters.push(x), inferType(x))
-  );
-}
-var defaultHandlers = typeHandlers(types);
-function stringify(q, string, value, parameters, types2, options) {
-  for (let i = 1; i < q.strings.length; i++) {
-    string += stringifyValue(string, value, parameters, types2, options) + q.strings[i];
-    value = q.args[i];
-  }
-  return string;
-}
-function stringifyValue(string, value, parameters, types2, o) {
-  return value instanceof Builder ? value.build(string, parameters, types2, o) : value instanceof Query ? fragment(value, parameters, types2, o) : value instanceof Identifier ? value.value : value && value[0] instanceof Query ? value.reduce((acc, x) => acc + " " + fragment(x, parameters, types2, o), "") : handleValue(value, parameters, types2, o);
-}
-function fragment(q, parameters, types2, options) {
-  q.fragment = true;
-  return stringify(q, q.strings[0], q.args[0], parameters, types2, options);
-}
-function valuesBuilder(first, parameters, types2, columns, options) {
-  return first.map(
-    (row2) => "(" + columns.map(
-      (column) => stringifyValue("values", row2[column], parameters, types2, options)
-    ).join(",") + ")"
-  ).join(",");
-}
-function values(first, rest2, parameters, types2, options) {
-  const multi = Array.isArray(first[0]);
-  const columns = rest2.length ? rest2.flat() : Object.keys(multi ? first[0] : first);
-  return valuesBuilder(multi ? first : [first], parameters, types2, columns, options);
-}
-function select(first, rest2, parameters, types2, options) {
-  typeof first === "string" && (first = [first].concat(rest2));
-  if (Array.isArray(first))
-    return escapeIdentifiers(first, options);
-  let value;
-  const columns = rest2.length ? rest2.flat() : Object.keys(first);
-  return columns.map((x) => {
-    value = first[x];
-    return (value instanceof Query ? fragment(value, parameters, types2, options) : value instanceof Identifier ? value.value : handleValue(value, parameters, types2, options)) + " as " + escapeIdentifier(options.transform.column.to ? options.transform.column.to(x) : x);
-  }).join(",");
+function select(first, rest2, parameters, types2, options) {
+  typeof first === "string" && (first = [first].concat(rest2));
+  if (Array.isArray(first))
+    return escapeIdentifiers(first, options);
+  let value;
+  const columns = rest2.length ? rest2.flat() : Object.keys(first);
+  return columns.map((x) => {
+    value = first[x];
+    return (value instanceof Query ? fragment(value, parameters, types2, options) : value instanceof Identifier ? value.value : handleValue(value, parameters, types2, options)) + " as " + escapeIdentifier(options.transform.column.to ? options.transform.column.to(x) : x);
+  }).join(",");
 }
 var builders = Object.entries({
   values,
@@ -5813,7 +5594,7 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
   function drain() {
     !query && onopen(connection2);
   }
-  function data4(x) {
+  function data2(x) {
     if (incomings) {
       incomings.push(x);
       remaining -= x.length;
@@ -5867,7 +5648,7 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
       statementId = Math.random().toString(36).slice(2);
       statementCount = 1;
       lifeTimer.start();
-      socket.on("data", data4);
+      socket.on("data", data2);
       keep_alive && socket.setKeepAlive && socket.setKeepAlive(true, 1e3 * keep_alive);
       const s = StartupMessage();
       write(s);
@@ -5910,7 +5691,7 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
       error(Errors.connection("CONNECTION_DESTROYED", options));
     clearImmediate(nextWriteTimer);
     if (socket) {
-      socket.removeListener("data", data4);
+      socket.removeListener("data", data2);
       socket.removeListener("connect", connected);
       socket.readyState === "open" && socket.end(bytes_default().X().end());
     }
@@ -5921,7 +5702,7 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
     remaining = 0;
     incomings = null;
     clearImmediate(nextWriteTimer);
-    socket.removeListener("data", data4);
+    socket.removeListener("data", data2);
     socket.removeListener("connect", connected);
     idleTimer.cancel();
     lifeTimer.cancel();
@@ -6513,14 +6294,14 @@ function Subscribe(postgres2, options) {
     const state2 = {
       lsn: Buffer.concat(x.consistent_point.split("/").map((x2) => Buffer.from(("00000000" + x2).slice(-8), "hex")))
     };
-    stream2.on("data", data4);
+    stream2.on("data", data2);
     stream2.on("error", error);
     stream2.on("close", sql2.close);
     return { stream: stream2, state: xs.state };
     function error(e) {
       console.error("Unexpected error during logical streaming - reconnecting", e);
     }
-    function data4(x2) {
+    function data2(x2) {
       if (x2[0] === 119) {
         parse(x2.subarray(25), state2, sql2.options.parsers, handle, options.transform);
       } else if (x2[0] === 107 && x2[17]) {
@@ -6695,9 +6476,9 @@ function largeObject(sql, oid, mode = 131072 | 262144) {
           async read(size2) {
             const l = size2 > max ? size2 - max : size2;
             max -= size2;
-            const [{ data: data4 }] = await lo.read(l);
-            this.push(data4);
-            if (data4.length < size2)
+            const [{ data: data2 }] = await lo.read(l);
+            this.push(data2);
+            if (data2.length < size2)
               this.push(null);
           }
         });
@@ -7006,119 +6787,416 @@ function Postgres(a, b2) {
     queries.length && connect(c, queries.shift());
   }
 }
-function parseOptions(a, b2) {
-  if (a && a.shared)
-    return a;
-  const env = process.env, o = (!a || typeof a === "string" ? b2 : a) || {}, { url, multihost } = parseUrl(a), query = [...url.searchParams].reduce((a2, [b3, c]) => (a2[b3] = c, a2), {}), host = o.hostname || o.host || multihost || url.hostname || env.PGHOST || "localhost", port = o.port || url.port || env.PGPORT || 5432, user = o.user || o.username || url.username || env.PGUSERNAME || env.PGUSER || osUsername();
-  o.no_prepare && (o.prepare = false);
-  query.sslmode && (query.ssl = query.sslmode, delete query.sslmode);
-  "timeout" in o && (console.log("The timeout option is deprecated, use idle_timeout instead"), o.idle_timeout = o.timeout);
-  query.sslrootcert === "system" && (query.ssl = "verify-full");
-  const ints = ["idle_timeout", "connect_timeout", "max_lifetime", "max_pipeline", "backoff", "keep_alive"];
-  const defaults = {
-    max: globalThis.Cloudflare ? 3 : 10,
-    ssl: false,
-    sslnegotiation: null,
-    idle_timeout: null,
-    connect_timeout: 30,
-    max_lifetime,
-    max_pipeline: 100,
-    backoff,
-    keep_alive: 60,
-    prepare: true,
-    debug: false,
-    fetch_types: true,
-    publications: "alltables",
-    target_session_attrs: null
-  };
-  return {
-    host: Array.isArray(host) ? host : host.split(",").map((x) => x.split(":")[0]),
-    port: Array.isArray(port) ? port : host.split(",").map((x) => parseInt(x.split(":")[1] || port)),
-    path: o.path || host.indexOf("/") > -1 && host + "/.s.PGSQL." + port,
-    database: o.database || o.db || (url.pathname || "").slice(1) || env.PGDATABASE || user,
-    user,
-    pass: o.pass || o.password || url.password || env.PGPASSWORD || "",
-    ...Object.entries(defaults).reduce(
-      (acc, [k, d]) => {
-        const value = k in o ? o[k] : k in query ? query[k] === "disable" || query[k] === "false" ? false : query[k] : env["PG" + k.toUpperCase()] || d;
-        acc[k] = typeof value === "string" && ints.includes(k) ? +value : value;
-        return acc;
-      },
-      {}
-    ),
-    connection: {
-      application_name: env.PGAPPNAME || "postgres.js",
-      ...o.connection,
-      ...Object.entries(query).reduce((acc, [k, v]) => (k in defaults || (acc[k] = v), acc), {})
-    },
-    types: o.types || {},
-    target_session_attrs: tsa(o, url, env),
-    onnotice: o.onnotice,
-    onnotify: o.onnotify,
-    onclose: o.onclose,
-    onparameter: o.onparameter,
-    socket: o.socket,
-    transform: parseTransform(o.transform || { undefined: void 0 }),
-    parameters: {},
-    shared: { retries: 0, typeArrayMap: {} },
-    ...mergeUserTypes(o.types)
-  };
+function parseOptions(a, b2) {
+  if (a && a.shared)
+    return a;
+  const env = process.env, o = (!a || typeof a === "string" ? b2 : a) || {}, { url, multihost } = parseUrl(a), query = [...url.searchParams].reduce((a2, [b3, c]) => (a2[b3] = c, a2), {}), host = o.hostname || o.host || multihost || url.hostname || env.PGHOST || "localhost", port = o.port || url.port || env.PGPORT || 5432, user = o.user || o.username || url.username || env.PGUSERNAME || env.PGUSER || osUsername();
+  o.no_prepare && (o.prepare = false);
+  query.sslmode && (query.ssl = query.sslmode, delete query.sslmode);
+  "timeout" in o && (console.log("The timeout option is deprecated, use idle_timeout instead"), o.idle_timeout = o.timeout);
+  query.sslrootcert === "system" && (query.ssl = "verify-full");
+  const ints = ["idle_timeout", "connect_timeout", "max_lifetime", "max_pipeline", "backoff", "keep_alive"];
+  const defaults = {
+    max: globalThis.Cloudflare ? 3 : 10,
+    ssl: false,
+    sslnegotiation: null,
+    idle_timeout: null,
+    connect_timeout: 30,
+    max_lifetime,
+    max_pipeline: 100,
+    backoff,
+    keep_alive: 60,
+    prepare: true,
+    debug: false,
+    fetch_types: true,
+    publications: "alltables",
+    target_session_attrs: null
+  };
+  return {
+    host: Array.isArray(host) ? host : host.split(",").map((x) => x.split(":")[0]),
+    port: Array.isArray(port) ? port : host.split(",").map((x) => parseInt(x.split(":")[1] || port)),
+    path: o.path || host.indexOf("/") > -1 && host + "/.s.PGSQL." + port,
+    database: o.database || o.db || (url.pathname || "").slice(1) || env.PGDATABASE || user,
+    user,
+    pass: o.pass || o.password || url.password || env.PGPASSWORD || "",
+    ...Object.entries(defaults).reduce(
+      (acc, [k, d]) => {
+        const value = k in o ? o[k] : k in query ? query[k] === "disable" || query[k] === "false" ? false : query[k] : env["PG" + k.toUpperCase()] || d;
+        acc[k] = typeof value === "string" && ints.includes(k) ? +value : value;
+        return acc;
+      },
+      {}
+    ),
+    connection: {
+      application_name: env.PGAPPNAME || "postgres.js",
+      ...o.connection,
+      ...Object.entries(query).reduce((acc, [k, v]) => (k in defaults || (acc[k] = v), acc), {})
+    },
+    types: o.types || {},
+    target_session_attrs: tsa(o, url, env),
+    onnotice: o.onnotice,
+    onnotify: o.onnotify,
+    onclose: o.onclose,
+    onparameter: o.onparameter,
+    socket: o.socket,
+    transform: parseTransform(o.transform || { undefined: void 0 }),
+    parameters: {},
+    shared: { retries: 0, typeArrayMap: {} },
+    ...mergeUserTypes(o.types)
+  };
+}
+function tsa(o, url, env) {
+  const x = o.target_session_attrs || url.searchParams.get("target_session_attrs") || env.PGTARGETSESSIONATTRS;
+  if (!x || ["read-write", "read-only", "primary", "standby", "prefer-standby"].includes(x))
+    return x;
+  throw new Error("target_session_attrs " + x + " is not supported");
+}
+function backoff(retries) {
+  return (0.5 + Math.random() / 2) * Math.min(3 ** retries / 100, 20);
+}
+function max_lifetime() {
+  return 60 * (30 + Math.random() * 30);
+}
+function parseTransform(x) {
+  return {
+    undefined: x.undefined,
+    column: {
+      from: typeof x.column === "function" ? x.column : x.column && x.column.from,
+      to: x.column && x.column.to
+    },
+    value: {
+      from: typeof x.value === "function" ? x.value : x.value && x.value.from,
+      to: x.value && x.value.to
+    },
+    row: {
+      from: typeof x.row === "function" ? x.row : x.row && x.row.from,
+      to: x.row && x.row.to
+    }
+  };
+}
+function parseUrl(url) {
+  if (!url || typeof url !== "string")
+    return { url: { searchParams: /* @__PURE__ */ new Map() } };
+  let host = url;
+  host = host.slice(host.indexOf("://") + 3).split(/[?/]/)[0];
+  host = decodeURIComponent(host.slice(host.indexOf("@") + 1));
+  const urlObj = new URL(url.replace(host, host.split(",")[0]));
+  return {
+    url: {
+      username: decodeURIComponent(urlObj.username),
+      password: decodeURIComponent(urlObj.password),
+      host: urlObj.host,
+      hostname: urlObj.hostname,
+      port: urlObj.port,
+      pathname: urlObj.pathname,
+      searchParams: urlObj.searchParams
+    },
+    multihost: host.indexOf(",") > -1 && host
+  };
+}
+function osUsername() {
+  try {
+    return os.userInfo().username;
+  } catch (_) {
+    return process.env.USERNAME || process.env.USER || process.env.LOGNAME;
+  }
+}
+
+// ../types/src/ulid.ts
+var ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+function ulid(now = Date.now()) {
+  let time = "";
+  let t = now;
+  for (let i = 0; i < 10; i++) {
+    time = ALPHABET[t % 32] + time;
+    t = Math.floor(t / 32);
+  }
+  const rand = new Uint8Array(16);
+  crypto.getRandomValues(rand);
+  let out = time;
+  for (let i = 0; i < 16; i++) {
+    out += ALPHABET[rand[i] % 32];
+  }
+  return out;
+}
+function newId(prefix) {
+  return `${prefix}_${ulid()}`;
+}
+
+// ../types/src/index.ts
+var KNOWN_SCOPES = [
+  "features:read",
+  "features:write",
+  // Dedicated write scope for the BYO-secret path. PUT /v1/secrets/:feature/:name
+  // requires THIS (or 'admin') as of 2026-07-17 (audit H2 — 'features:write' is no
+  // longer secret-write-equivalent). GET/DELETE /v1/secrets still also accept
+  // 'features:write'.
+  "secrets:write",
+  "users:read",
+  "users:write",
+  "notifications:send",
+  "notifications:read",
+  "jobs:read",
+  "jobs:write",
+  "auth:read",
+  "auth:write",
+  // Narrow least-privilege scope for the SIGN-IN surface only (2026-09-10,
+  // F4-25/F8-56): every auth route an anonymous or self-authenticating client
+  // must call to obtain, renew, verify or end ITS OWN session (sign-up/sign-in,
+  // magic-link, OTP, anonymous, step-up, OAuth, refresh, by-token revoke,
+  // sessions/verify, password reset). It does NOT reach the administrative
+  // routes — GET /v1/auth/sessions (auth:read), POST /v1/auth/sessions/:id/
+  // revoke and POST /v1/auth/users/:id/erase (auth:write). This is the scope a
+  // key baked into a browser/mobile bundle carries for sign-in; 'auth:write'
+  // still satisfies every route (any-of, the usage:read idiom) so existing keys
+  // keep working.
+  "auth:signin",
+  "ratelimits:read",
+  "ratelimits:write",
+  "ratelimits:check",
+  "files:read",
+  "files:write",
+  "webhooks:read",
+  "webhooks:write",
+  "comments:read",
+  "comments:write",
+  "cms:read",
+  "cms:write",
+  "realtime:read",
+  "realtime:write",
+  "presence:read",
+  "orgs:read",
+  "orgs:write",
+  "payments:read",
+  "payments:write",
+  "vector-search:read",
+  "vector-search:write",
+  "ai:read",
+  "ai:write",
+  "rag:read",
+  "rag:write",
+  "activity-feed:read",
+  "activity-feed:write",
+  "functions:invoke",
+  "functions:read",
+  "functions:write",
+  "copilot:read",
+  "copilot:write",
+  // Narrow least-privilege read for GET /v1/usage (2026-08-05, parity P0#4).
+  // The route ALSO accepts 'features:read' (any-of, the secrets:write idiom)
+  // so pre-existing keys keep working; mint this when a key should see usage
+  // and nothing else.
+  "usage:read",
+  "admin"
+];
+var FUNCTION_SCOPE_AUDIENCE = {
+  cms: "cms",
+  payments: "payments",
+  notifications: "notifications",
+  comments: "comments",
+  files: "files",
+  ai: "ai",
+  rag: "rag",
+  "vector-search": "vector-search",
+  "activity-feed": "activity-feed",
+  orgs: "orgs",
+  auth: "auth",
+  jobs: "jobs",
+  realtime: "realtime",
+  presence: "realtime",
+  // presence:read is served by the realtime worker
+  ratelimits: "rate-limits",
+  // the worker checks `ratelimits:*`; its audience is 'rate-limits'
+  // The end-user REGISTRY (/v1/users*) and the usage meter (/v1/usage) are
+  // control-plane routes. The edge already re-mints a function's bearer for
+  // aud='control-plane' exactly as it does for a feature worker, and the
+  // control plane verifies that audience + scope-checks per route — so this
+  // is a contained audience. The minted claim is CONFINED to
+  // CONTROL_PLANE_FUNCTION_SCOPES (scopesForFunctionAudience) so the same token
+  // can never satisfy any other scope-gated control-plane route.
+  users: "control-plane",
+  usage: "control-plane"
+};
+var FUNCTION_SCOPE_PREFIX_ALIASES = {
+  "rate-limits": "ratelimits",
+  search: "vector-search",
+  vector: "vector-search",
+  feeds: "activity-feed"
+};
+var CONTROL_PLANE_FUNCTION_SCOPES = ["users:read", "users:write", "usage:read"];
+function canonicalFunctionScope(scope) {
+  const i = scope.indexOf(":");
+  if (i <= 0) return scope;
+  const prefix = scope.slice(0, i);
+  const canonical2 = FUNCTION_SCOPE_PREFIX_ALIASES[prefix];
+  return canonical2 ? `${canonical2}${scope.slice(i)}` : scope;
+}
+function functionScopeAudience(scope) {
+  const c = canonicalFunctionScope(scope);
+  const i = c.indexOf(":");
+  if (i <= 0) return null;
+  return FUNCTION_SCOPE_AUDIENCE[c.slice(0, i)] ?? null;
 }
-function tsa(o, url, env) {
-  const x = o.target_session_attrs || url.searchParams.get("target_session_attrs") || env.PGTARGETSESSIONATTRS;
-  if (!x || ["read-write", "read-only", "primary", "standby", "prefer-standby"].includes(x))
-    return x;
-  throw new Error("target_session_attrs " + x + " is not supported");
+function functionCallbackAudiences(scopes) {
+  const out = [];
+  for (const s of scopes) {
+    const a = functionScopeAudience(s);
+    if (a && !out.includes(a)) out.push(a);
+  }
+  return out;
 }
-function backoff(retries) {
-  return (0.5 + Math.random() / 2) * Math.min(3 ** retries / 100, 20);
+function scopesForFunctionAudience(aud, scopes) {
+  const canon = [...new Set(scopes.map(canonicalFunctionScope))];
+  if (aud === "control-plane") return canon.filter((s) => CONTROL_PLANE_FUNCTION_SCOPES.includes(s));
+  return canon;
 }
-function max_lifetime() {
-  return 60 * (30 + Math.random() * 30);
+var TENANT_SLUG_RE = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var FUNCTION_SOURCE_MAX_BYTES = 512e3;
+
+// ../runtime/src/hash.ts
+async function sha256Hex(input) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(input));
+  return [...new Uint8Array(digest)].map((b2) => b2.toString(16).padStart(2, "0")).join("");
 }
-function parseTransform(x) {
-  return {
-    undefined: x.undefined,
-    column: {
-      from: typeof x.column === "function" ? x.column : x.column && x.column.from,
-      to: x.column && x.column.to
-    },
-    value: {
-      from: typeof x.value === "function" ? x.value : x.value && x.value.from,
-      to: x.value && x.value.to
-    },
-    row: {
-      from: typeof x.row === "function" ? x.row : x.row && x.row.from,
-      to: x.row && x.row.to
-    }
-  };
+async function hmacSha256Hex(secret, data2) {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    new TextEncoder().encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(data2));
+  return [...new Uint8Array(sig)].map((b2) => b2.toString(16).padStart(2, "0")).join("");
 }
-function parseUrl(url) {
-  if (!url || typeof url !== "string")
-    return { url: { searchParams: /* @__PURE__ */ new Map() } };
-  let host = url;
-  host = host.slice(host.indexOf("://") + 3).split(/[?/]/)[0];
-  host = decodeURIComponent(host.slice(host.indexOf("@") + 1));
-  const urlObj = new URL(url.replace(host, host.split(",")[0]));
-  return {
-    url: {
-      username: decodeURIComponent(urlObj.username),
-      password: decodeURIComponent(urlObj.password),
-      host: urlObj.host,
-      hostname: urlObj.hostname,
-      port: urlObj.port,
-      pathname: urlObj.pathname,
-      searchParams: urlObj.searchParams
-    },
-    multihost: host.indexOf(",") > -1 && host
+var AI_TEMPLATE_SCHEMA_MAX_DEPTH = 64;
+async function aiTemplateContentSha256(t) {
+  const canon = (v, depth) => {
+    if (v === null || typeof v !== "object") return v;
+    if (depth > AI_TEMPLATE_SCHEMA_MAX_DEPTH) throw new RangeError(`schema nests deeper than ${AI_TEMPLATE_SCHEMA_MAX_DEPTH} levels`);
+    if (Array.isArray(v)) return v.map((x) => canon(x, depth + 1));
+    const o = v;
+    return Object.fromEntries(Object.keys(o).sort().map((k) => [k, canon(o[k], depth + 1)]));
   };
+  return sha256Hex(JSON.stringify({
+    schema: canon(t.schema ?? null, 1),
+    system: t.system ?? null,
+    user: t.user
+  }));
 }
-function osUsername() {
+
+// ../runtime/src/egress.ts
+function isPrivateIPv4(host) {
+  const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (!m) return false;
+  const o = m.slice(1).map(Number);
+  if (o.some((n) => n > 255)) return false;
+  const [a, b2] = o;
+  return a === 10 || // 10.0.0.0/8        RFC1918
+  a === 172 && b2 >= 16 && b2 <= 31 || // 172.16.0.0/12 RFC1918
+  a === 192 && b2 === 168 || // 192.168.0.0/16   RFC1918
+  a === 127 || // 127.0.0.0/8       loopback
+  a === 169 && b2 === 254 || // 169.254.0.0/16   link-local (incl. metadata)
+  a === 100 && b2 >= 64 && b2 <= 127 || // 100.64.0.0/10 CGNAT / shared
+  a === 0 || // 0.0.0.0/8         "this host"
+  a >= 224;
+}
+function expandIPv6(host) {
+  if (!/^[0-9a-f:.]+$/.test(host) || !host.includes(":")) return null;
+  let h = host;
+  let tail = [];
+  const lastColon = h.lastIndexOf(":");
+  const maybeV4 = h.slice(lastColon + 1);
+  if (maybeV4.includes(".")) {
+    const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(maybeV4);
+    if (!m) return null;
+    const q = m.slice(1).map(Number);
+    if (q.some((n) => n > 255)) return null;
+    tail = [q[0] << 8 | q[1], q[2] << 8 | q[3]];
+    h = h.slice(0, lastColon + 1) + "0:0";
+  }
+  const parts = h.split("::");
+  if (parts.length > 2) return null;
+  const head = parts[0] ? parts[0].split(":") : [];
+  const rest2 = parts.length === 2 ? parts[1] ? parts[1].split(":") : [] : null;
+  let groups;
+  if (rest2 === null) {
+    groups = head;
+  } else {
+    const fill = 8 - head.length - rest2.length - tail.length;
+    if (fill < 0) return null;
+    groups = [...head, ...Array(fill).fill("0"), ...rest2];
+  }
+  const nums = groups.map((g) => g === "" ? 0 : parseInt(g, 16));
+  const all = [...nums, ...tail];
+  if (all.length !== 8 || all.some((n) => !Number.isFinite(n) || n < 0 || n > 65535)) {
+    return null;
+  }
+  return all.map((n) => n.toString(16));
+}
+function isPrivateIPv6(host) {
+  const hextets = expandIPv6(host);
+  if (!hextets) return false;
+  const n = hextets.map((x) => parseInt(x, 16));
+  const [h0, h1] = n;
+  if (n.every((x) => x === 0)) return true;
+  if (n.slice(0, 7).every((x) => x === 0) && n[7] === 1) return true;
+  if ((h0 & 65024) === 64512) return true;
+  if ((h0 & 65472) === 65152) return true;
+  if (n.slice(0, 5).every((x) => x === 0) && h0 === 0 && n[5] === 65535) {
+    const a = n[6] >> 8 & 255;
+    const b2 = n[6] & 255;
+    const c = n[7] >> 8 & 255;
+    const d = n[7] & 255;
+    return isPrivateIPv4(`${a}.${b2}.${c}.${d}`);
+  }
+  if (h0 === 100 && h1 === 65435) {
+    const a = n[6] >> 8 & 255;
+    const b2 = n[6] & 255;
+    const c = n[7] >> 8 & 255;
+    const d = n[7] & 255;
+    return isPrivateIPv4(`${a}.${b2}.${c}.${d}`);
+  }
+  return false;
+}
+var VXIL_API_HOSTS = /* @__PURE__ */ new Set(["api.vxil.com", "api.vxil.org"]);
+function egressDecision(targetUrl, allowHosts = []) {
+  let u;
   try {
-    return os.userInfo().username;
-  } catch (_) {
-    return process.env.USERNAME || process.env.USER || process.env.LOGNAME;
+    u = new URL(targetUrl);
+  } catch {
+    return { allow: false, reason: "invalid-url" };
+  }
+  if (u.protocol !== "https:") return { allow: false, reason: `non-https:${u.protocol}` };
+  if (u.username !== "" || u.password !== "") return { allow: false, reason: "embedded-credentials" };
+  const host = u.hostname.toLowerCase().replace(/^\[/, "").replace(/\]$/, "").replace(/\.$/, "");
+  if (host === "") return { allow: false, reason: "empty-host" };
+  if (isPrivateIPv4(host) || isPrivateIPv6(host)) return { allow: false, reason: `private-ip:${host}` };
+  if (host === "localhost" || host.endsWith(".localhost") || host === "metadata.google.internal" || host.endsWith(".internal") || host.endsWith(".local")) {
+    return { allow: false, reason: `internal-host:${host}` };
+  }
+  if (host.endsWith(".workers.dev")) return { allow: false, reason: `sibling-worker:${host}` };
+  if (VXIL_API_HOSTS.has(host)) return { allow: true, reason: "vxil-api" };
+  for (const a of allowHosts) {
+    const h = a.toLowerCase().trim();
+    if (h && (host === h || host.endsWith("." + h))) return { allow: true, reason: `allowlist:${h}` };
   }
+  return { allow: false, reason: `not-allowlisted:${host}` };
+}
+
+// ../runtime/src/jobsCallbackSig.ts
+var JOBS_SIG_HEADER = "X-Vxil-Jobs-Signature";
+function signedString(runId, tenantId, issuedAt, bodyHashHex) {
+  return `${runId}.${tenantId}.${issuedAt}.${bodyHashHex}`;
+}
+async function signJobsCallbackWithTenantSecret(tenantSecret, params) {
+  const t = params.issuedAt ?? Math.floor(Date.now() / 1e3);
+  const bodyHash = await sha256Hex(params.body);
+  const v1 = await hmacSha256Hex(
+    tenantSecret,
+    signedString(params.runId, params.tenantId, t, bodyHash)
+  );
+  return `t=${t},v1=${v1}`;
 }
 
 // src/apiState.ts
@@ -7347,14 +7425,14 @@ async function readOnlyPlan(api, block, allowDestructive) {
   }
   const unavailable = readUnavailable(`GET ${route}`, res);
   if (unavailable) return { ...out, remoteUnavailable: unavailable };
-  const data4 = classifyRead(res.status, res.body.error?.code) === "ok" ? res.body.data ?? {} : {};
+  const data2 = classifyRead(res.status, res.body.error?.code) === "ok" ? res.body.data ?? {} : {};
   const s = out.summary;
   const destructive = (recreate, undeclared) => {
     (allowDestructive ? s.recreated : s.pending_destructive).push(...recreate);
     (allowDestructive ? s.deleted : s.undeclared).push(...undeclared);
   };
   if (datum === "policies") {
-    const rows = listOf(data4.policies);
+    const rows = listOf(data2.policies);
     const capped = rlPolicyListCapError(rows.length);
     if (capped) return { ...out, refused: `rate-limits: ${capped}` };
     const plan = planRlPolicies(manifest.policies, rows);
@@ -7364,16 +7442,17 @@ async function readOnlyPlan(api, block, allowDestructive) {
     s.ambiguous.push(...plan.ambiguous.map((a) => a.name));
     destructive(plan.recreate.map((r) => r.name), plan.undeclared.map((u) => u.name));
   } else if (datum === "subscriptions") {
-    const plan = planWebhookSubscriptions(manifest.subscriptions, listOf(data4.subscriptions));
+    const plan = planWebhookSubscriptions(manifest.subscriptions, listOf(data2.subscriptions));
     s.created.push(...plan.create.map((c) => c.target_url));
+    s.updated.push(...plan.update.map((u) => u.target_url));
     s.unchanged.push(...plan.unchanged);
-    destructive(plan.recreate.map((r) => r.target_url), plan.undeclared.map((u) => u.target_url));
+    destructive([], plan.undeclared.map((u) => u.target_url));
   } else {
     const hashed = await Promise.all(manifest.templates.map(async (t) => ({
       template: t.template,
       content_sha256: await aiTemplateContentSha256({ system: t.system ?? null, user: t.user, schema: t.schema ?? null })
     })));
-    const plan = planAiTemplates(hashed, listOf(data4.templates));
+    const plan = planAiTemplates(hashed, listOf(data2.templates));
     s.created.push(...plan.create);
     s.updated.push(...plan.update);
     s.unchanged.push(...plan.unchanged);
@@ -7435,13 +7514,13 @@ async function convergeViaApply(opts, allowDestructive, results, pending) {
       unavailable({ route: "POST /v1/apply", status: 0, code: "network_error", message: firstLine(e) });
       return;
     }
-    const data4 = res.body.data;
-    if (res.status < 200 || res.status >= 300 || !data4 || !Array.isArray(data4.steps)) {
+    const data2 = res.body.data;
+    if (res.status < 200 || res.status >= 300 || !data2 || !Array.isArray(data2.steps)) {
       const e = res.body.error ?? {};
       unavailable({ route: "POST /v1/apply", status: res.status, ...e.code ? { code: e.code } : {}, ...e.message ? { message: e.message } : {} });
       return;
     }
-    view = data4;
+    view = data2;
     const stopped = view.steps.filter((st) => st.status === "pending" && st.error);
     const propagating = view.status === "running" && stopped.length > 0 && stopped.every((st) => st.kind === "api-state" && (st.error ?? "").startsWith("deferred:"));
     if (!propagating || attempt >= DEFERRED_RETRY_ATTEMPTS) break;
@@ -7702,13 +7781,14 @@ async function planFunctions({ api, functions, cwd, apply, onNote }) {
       throw new Error(`functions: invalid name '${name}' (must match /^[a-z][a-z0-9-]{0,47}$/)`);
     }
     const { source, bytes } = await bundleFunction(resolve2(cwd, def.entry), { projectRoot: cwd, ...onNote ? { onNote } : {} });
-    const triggerKind = def.trigger?.kind ?? "http";
+    const bindings = lowerAllTriggerBindings(def, name);
+    const triggerKind = bindings[0]?.kind ?? "http";
     const secrets = normalizeSecretRefs(def.secrets);
-    const bindings = lowerTriggerBindings(def.trigger);
     const limits = normalizeFnLimits(def.limits);
     const remoteFn = remote.get(name);
     const sha = sourceSha12(source);
-    const label = `${name} (${Math.round(bytes / 100) / 10} KB) [${triggerKind}${def.scopes?.length ? " \xB7 " + def.scopes.join(",") : ""}${secrets.length ? " \xB7 secrets:" + secrets.map((s) => s.slice("secret:".length)).join(",") : ""}${limits?.cpuMs !== void 0 ? " \xB7 cpu:" + limits.cpuMs + "ms" : ""}${limits?.timeoutMs !== void 0 ? " \xB7 egress:" + limits.timeoutMs + "ms" : ""}]`;
+    const retryN = bindings.find((b2) => b2.retry)?.retry?.maxAttempts;
+    const label = `${name} (${Math.round(bytes / 100) / 10} KB) [${bindings.map((b2) => b2.kind).join("+")}${retryN !== void 0 ? " \xB7 retry:" + retryN : ""}${def.scopes?.length ? " \xB7 " + def.scopes.join(",") : ""}${secrets.length ? " \xB7 secrets:" + secrets.map((s) => s.slice("secret:".length)).join(",") : ""}${limits?.cpuMs !== void 0 ? " \xB7 cpu:" + limits.cpuMs + "ms" : ""}${limits?.timeoutMs !== void 0 ? " \xB7 egress:" + limits.timeoutMs + "ms" : ""}]`;
     if (remoteFn !== void 0 && remoteFn.scriptRef.endsWith(`-${sha}`) && sameSecretSet(remoteFn.secrets, secrets) && sameStringSet2(clampFunctionScopes(def.scopes), remoteFn.scopes) && sameStringSet2(def.egressAllow ?? [], remoteFn.egressAllow) && stableStringify(remoteFn.bindings) === stableStringify(bindings) && stableStringify(remoteFn.signature) === stableStringify(def.signature ?? null) && stableStringify(remoteFn.limits ?? null) === stableStringify(limits ?? null)) {
       return { change: { name, kind: "unchanged", detail: label }, applied: 0, cmsHooks: null, webhooks: null };
     }
@@ -7725,10 +7805,10 @@ async function planFunctions({ api, functions, cwd, apply, onNote }) {
         const e = res.body.error ?? {};
         throw new Error(`functions: deploy ${name} failed: ${e.code ?? res.status} ${e.message ?? ""} ${e.hint ?? ""}`);
       }
-      const data4 = res.body.data;
-      const cmsHooks = data4?.cms_hook_subscriptions ?? null;
-      const webhooks = data4?.webhook_subscriptions ?? null;
-      const warnings2 = (data4?.warnings ?? []).map((message) => ({ fn: name, message: String(message) }));
+      const data2 = res.body.data;
+      const cmsHooks = data2?.cms_hook_subscriptions ?? null;
+      const webhooks = data2?.webhook_subscriptions ?? null;
+      const warnings2 = (data2?.warnings ?? []).map((message) => ({ fn: name, message: String(message) }));
       return { change, applied: 1, cmsHooks, webhooks, warnings: warnings2 };
     }
     return { change, applied: 0, cmsHooks: null, webhooks: null, warnings: [] };
@@ -8191,7 +8271,7 @@ async function planCmsSchema({ api, collections, apply, allowDestructive = false
   return { changes, applied };
 }
 async function applyDestructive(api, collections, c) {
-  const ok2xx = (status) => status >= 200 && status < 300;
+  const ok2xx2 = (status) => status >= 200 && status < 300;
   if (c.op === "drop-collection") {
     await dropCollection(api, c.collection);
     return 1;
@@ -8199,7 +8279,7 @@ async function applyDestructive(api, collections, c) {
   const path = `/v1/cms/collections/${encodeURIComponent(c.collection)}/fields`;
   if (c.op === "drop-field") {
     const res2 = await api("POST", path, { drop_field: c.field, allow_destructive: true });
-    if (!ok2xx(res2.status) && res2.body.error?.code !== "not_found") {
+    if (!ok2xx2(res2.status) && res2.body.error?.code !== "not_found") {
       const e = res2.body.error ?? {};
       throw new Error(`cms: drop ${c.collection}.${c.field} failed: ${e.code ?? res2.status} ${e.message ?? ""}`);
     }
@@ -8208,7 +8288,7 @@ async function applyDestructive(api, collections, c) {
   if (c.op === "vacate-slot") {
     const rf = c.remote;
     const res2 = await api("POST", path, vacateSlotBody(rf));
-    if (!ok2xx(res2.status) && res2.body.error?.code !== "already_exists") {
+    if (!ok2xx2(res2.status) && res2.body.error?.code !== "already_exists") {
       const e = res2.body.error ?? {};
       throw new Error(`cms: vacate ${c.collection}.${c.field} slot failed: ${e.code ?? res2.status} ${e.message ?? ""}`);
     }
@@ -8216,7 +8296,7 @@ async function applyDestructive(api, collections, c) {
   }
   const fd = collections[c.collection].fields[c.field];
   const res = await api("POST", path, { ...fieldToInput(c.field, fd), allow_destructive: true });
-  if (!ok2xx(res.status)) {
+  if (!ok2xx2(res.status)) {
     const e = res.body.error ?? {};
     throw new Error(`cms: alter ${c.collection}.${c.field} failed: ${e.code ?? res.status} ${e.message ?? ""}`);
   }
@@ -8259,7 +8339,7 @@ function formatCollectionDrop(collection, plan, declaredLocally) {
 
 // src/apiCmd.ts
 var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
-var API_USAGE = "usage: vxil api <GET|POST|PUT|PATCH|DELETE> </v1/...> ['<json body>' | --data '<json body>']";
+var API_USAGE = "usage: vxil api <GET|POST|PUT|PATCH|DELETE> </v1/...> ['<json body>' | --data '<json body>']  (`vxil api --help` lists the operator actions)";
 function parseApiArgs(positionals, dataFlag) {
   const [rawMethod, path, ...extra] = positionals;
   const method = (rawMethod ?? "").toUpperCase();
@@ -8279,6 +8359,760 @@ function parseApiArgs(positionals, dataFlag) {
     throw new Error(`${via} must be valid JSON (got ${JSON.stringify(raw.length > 60 ? `${raw.slice(0, 57)}\u2026` : raw)})`);
   }
 }
+var API_CHEATSHEET = [
+  // cms
+  { feature: "cms", what: "materialize a declared read model now", cmd: "vxil api POST /v1/cms/read-models/<name>/materialize" },
+  { feature: "cms", what: "publish a draft item", cmd: "vxil api POST /v1/cms/items/<collection>/<item_id>/publish" },
+  { feature: "cms", what: "delete one item (soft)", cmd: "vxil api DELETE /v1/cms/items/<collection>/<item_id>" },
+  { feature: "cms", what: "bulk delete by filter (dry-run first, typed confirm)", cmd: `vxil cms bulk-rm <collection> --filter '{"status":"draft"}' [--limit 25] [--dry-run] [--yes]` },
+  { feature: "cms", what: "run a per-record action", cmd: "vxil api POST /v1/cms/items/<collection>/<item_id>/actions/<key>" },
+  { feature: "cms", what: "re-project index slots", cmd: "vxil cms reindex <collection> [--field <field>]" },
+  // users
+  { feature: "users", what: "import users from a file (chunked upsert)", cmd: "vxil users import <users.json|users.csv>" },
+  { feature: "users", what: "set fields on one user", cmd: `vxil api PATCH /v1/users/<id> '{"display_name":"Ada","attributes":{"locale":"fr"}}'` },
+  { feature: "users", what: "remove one user (soft)", cmd: "vxil api DELETE /v1/users/<id>" },
+  // notifications
+  { feature: "notifications", what: "create a campaign (a draft; add schedule_cron to schedule it)", cmd: `vxil api POST /v1/notifications/campaigns '{"name":"launch","template":"transactional","audience_ref":"<ref>"}'` },
+  { feature: "notifications", what: "run / pause / resume / cancel a campaign", cmd: "vxil api POST /v1/notifications/campaigns/<campaign_id>/run   \xB7 POST \u2026/pause \xB7 POST \u2026/resume \xB7 POST \u2026/cancel" },
+  { feature: "notifications", what: "add a suppression", cmd: `vxil api POST /v1/notifications/suppressions '{"email":"a@example.com"}'` },
+  { feature: "notifications", what: "remove a suppression", cmd: "vxil api DELETE /v1/notifications/suppressions/<email>" },
+  { feature: "notifications", what: "replay a dead-lettered delivery", cmd: "vxil api POST /v1/notifications/dead-letters/<delivery_id>/replay" },
+  { feature: "notifications", what: "mute / unmute a user (all templates, or one template_id)", cmd: `vxil api PUT /v1/notifications/preferences '{"user_id":"<id>","muted":true}'` },
+  // payments
+  { feature: "payments", what: "grant a subscription by hand", cmd: `vxil api POST /v1/payments/subscriptions/grant '{"user_id":"<id>","tier":"pro","reason":"support","idempotency_key":"<key>"}'` },
+  { feature: "payments", what: "revoke a manual grant", cmd: "vxil api POST /v1/payments/subscriptions/<subscription_id>/revoke" },
+  { feature: "payments", what: "re-read a customer from the provider (dry_run first)", cmd: `vxil api POST /v1/payments/subscriptions/sync '{"user_id":"<id>","dry_run":true}'` },
+  { feature: "payments", what: "reprocess a webhook event", cmd: "vxil api POST /v1/payments/webhook-events/<event_id>/reprocess" },
+  { feature: "payments", what: "refund (through the project's own provider account)", cmd: `vxil api POST /v1/payments/refunds '{"charge_id":"<id>","reason":"requested_by_customer"}'` },
+  // comments / dm
+  { feature: "comments", what: "moderation delete", cmd: "vxil api DELETE /v1/comments/<comment_id>" },
+  { feature: "dm", what: "block / unblock a user pair", cmd: `vxil api POST /v1/dm/blocks '{"blocker":"<user>","blocked":"<user>","blocked_state":true}'` },
+  // rate-limits
+  { feature: "rate-limits", what: "declare policies in vxil.config (converged by push)", cmd: 'features["rate-limits"].policies[] in vxil.config.ts \u2192 vxil push' },
+  { feature: "rate-limits", what: "create a policy by hand", cmd: `vxil api POST /v1/rate-limits/policies '{"name":"login","key_template":"{tenant_id}:{ip}","limit":10,"window_seconds":60}'` },
+  { feature: "rate-limits", what: "update / delete a policy (key_template is immutable: delete + recreate)", cmd: `vxil api PUT /v1/rate-limits/policies/<policy_id> '{"limit":20}'   \xB7 vxil api DELETE /v1/rate-limits/policies/<policy_id>` },
+  { feature: "rate-limits", what: "add / remove a per-identifier override", cmd: `vxil api POST /v1/rate-limits/policies/<policy_id>/overrides '{"pattern":"user:42","limit":1}'   \xB7 vxil api DELETE /v1/rate-limits/policies/<policy_id>/overrides/<override_id>` },
+  { feature: "rate-limits", what: "reset one rendered counter", cmd: `vxil api POST /v1/rate-limits/reset '{"policy_id":"<id>","key_values":{"ip":"1.2.3.4"}}'` },
+  // ai / rag / search
+  { feature: "ai", what: "declare templates in vxil.config (converged by push)", cmd: "features.ai.templates[] in vxil.config.ts \u2192 vxil push" },
+  { feature: "ai", what: "store a template by hand", cmd: `vxil api POST /v1/ai/templates '{"template":"greet","user":"Say hello to {{name}}."}'` },
+  { feature: "rag", what: "ingest a document", cmd: `vxil api POST /v1/rag/ingest/<collection> '{"doc_id":"kb1","text":"\u2026"}'` },
+  { feature: "vector-search", what: "create a collection", cmd: `vxil api POST /v1/search/collections '{"collection":"docs","dimensions":1536,"embed":{"provider":"mock"}}'` },
+  { feature: "vector-search", what: "run a sync tick / sweep, reset a source / purge its documents", cmd: "vxil search sync run <sourceKey> [--sweep]   \xB7 vxil search sync reset <sourceKey> [--purge] [--yes]" },
+  // realtime
+  { feature: "realtime", what: "publish an event to a channel", cmd: `vxil api POST /v1/realtime/channels/<channel>/publish '{"event":"ping","data":{}}'` },
+  // webhooks
+  { feature: "webhooks", what: "inbound sources add / list / rm / test", cmd: "vxil webhooks sources add --provider stripe --name prod [--forward-url https://\u2026]   \xB7 sources list \xB7 sources rm <id> [--yes] \xB7 sources test <id>" },
+  { feature: "webhooks", what: "replay an inbound event / see its delivery runs", cmd: "vxil webhooks events replay <event_id>   \xB7 vxil webhooks events runs <event_id>" },
+  { feature: "webhooks", what: "declare outbound subscriptions in vxil.config (converged by push)", cmd: "features.webhooks.subscriptions[] in vxil.config.ts \u2192 vxil push" },
+  { feature: "webhooks", what: "add an outbound subscription by hand (undeclared \u2014 `vxil diff --strict-api-state` reports it)", cmd: `vxil api POST /v1/webhooks/subscriptions '{"target_url":"https://\u2026","event_prefixes":["cms."]}'` },
+  { feature: "webhooks", what: "send a test event to a subscription / delete it", cmd: "vxil api POST /v1/webhooks/subscriptions/<sub_id>/test   \xB7 vxil api DELETE /v1/webhooks/subscriptions/<sub_id>" },
+  // jobs
+  { feature: "jobs", what: "enqueue a job", cmd: `vxil api POST /v1/jobs/enqueue '{"job_name":"resize","target_url":"https://\u2026","payload":{}}'` },
+  { feature: "jobs", what: "wake runs waiting on an event", cmd: `vxil api POST /v1/jobs/events '{"event":"order.paid","payload":{}}'` },
+  { feature: "jobs", what: "replay / cancel a run", cmd: "vxil api POST /v1/jobs/runs/<run_id>/replay   \xB7 vxil api POST /v1/jobs/runs/<run_id>/cancel" },
+  { feature: "jobs", what: "create / pause / resume / delete a schedule", cmd: `vxil api POST /v1/jobs/schedules '{"job_name":"digest","target_url":"https://\u2026","cron":"0 8 * * *"}'   \xB7 POST /v1/jobs/schedules/<schedule_id>/pause \xB7 POST \u2026/resume \xB7 vxil api DELETE /v1/jobs/schedules/<schedule_id>` },
+  { feature: "jobs", what: "flow rules (rate + parallelism per endpoint or job)", cmd: `vxil api POST /v1/jobs/flow-rules '{"match_kind":"job_name","match_value":"resize","max_parallel":2}'   \xB7 vxil api DELETE /v1/jobs/flow-rules/<rule_id>` },
+  // files
+  { feature: "files", what: "upload a local file (mint \u2192 PUT the bytes \u2192 complete)", cmd: "vxil files put <path> --user <user_id> [--content-type <t>]" },
+  { feature: "files", what: "delete an object", cmd: "vxil files rm <object_id> [--yes]" },
+  { feature: "files", what: "extract text (OCR / PDF)", cmd: "vxil api POST /v1/files/<object_id>/extract-text '{}'" },
+  { feature: "files", what: "set / clear a TTL", cmd: `vxil api PUT /v1/files/<object_id>/ttl '{"expiresInSeconds":86400}'` },
+  { feature: "files", what: "share / unshare (a public download link; ttl_seconds or expires_at, max_downloads 1 = one-time)", cmd: `vxil api POST /v1/files/<object_id>/shared-links '{"ttl_seconds":3600}'   \xB7 vxil api DELETE /v1/files/shared-links/<link_id>` },
+  // orgs
+  { feature: "orgs", what: "create / patch / delete a workspace", cmd: `vxil api POST /v1/orgs '{"slug":"acme","name":"Acme","owner_user_id":"<id>"}'   \xB7 PATCH /v1/orgs/<org_id> '{"name":"\u2026"}'   \xB7 DELETE /v1/orgs/<org_id>` },
+  { feature: "orgs", what: "add / remove a member", cmd: `vxil api POST /v1/orgs/<org_id>/members '{"user_id":"<id>","role":"member"}'   \xB7 vxil api DELETE /v1/orgs/<org_id>/members/<user_id>` },
+  { feature: "orgs", what: "invite by e-mail (the token is returned once) / revoke", cmd: `vxil api POST /v1/orgs/<org_id>/invitations '{"email":"a@example.com","role":"member"}'   \xB7 vxil api DELETE /v1/orgs/invitations/<invite_id>` },
+  // feeds
+  { feature: "activity-feed", what: "block or mute a feed for a user", cmd: `vxil api POST /v1/feeds/blocks '{"owner":"<user>","blocked":"<user>","mode":"block"}'` },
+  { feature: "activity-feed", what: "remove an activity", cmd: "vxil api DELETE /v1/feeds/<group>/<feed_id>/activities/<ref>" }
+];
+function apiCheatSheet() {
+  const lines = [
+    API_USAGE,
+    "",
+    "Calls any /v1 route with the bound project key (--dev / --target <name> pick the slot). The body is the third",
+    "argument OR --data, never both; the response `data` prints as bare JSON on stdout (`| jq` works), the target",
+    "banner goes to stderr; a GET prints no banner. Exit 1 on an error envelope.",
+    "",
+    "Operator actions from the CLI \u2014 the dashboard's per-feature actions and the line that does each one:"
+  ];
+  let cur = "";
+  for (const l of API_CHEATSHEET) {
+    if (l.feature !== cur) {
+      cur = l.feature;
+      lines.push("", `  ${cur}`);
+    }
+    lines.push(`    ${l.what}`, `      ${l.cmd}`);
+  }
+  lines.push(
+    "",
+    "Declared state (rate-limit policies, outbound subscriptions, ai templates) belongs in vxil.config.ts and is",
+    "converged by `vxil push`; a row added by hand is reported by `vxil diff --strict-api-state`. Session verbs",
+    "(members, projects, billing, account, keys) are dedicated commands \u2014 see `vxil --help`."
+  );
+  return lines.join("\n");
+}
+
+// src/link.ts
+function data(r) {
+  return r.json.data ?? r.json;
+}
+function errText(r) {
+  const e = r.json.error;
+  if (!e) return `${r.status}`;
+  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
+hint: ${e.hint}` : ""}`;
+}
+async function findTenantViaSession(dash, cookie, slug) {
+  const list = await dash("GET", "/dashboard/tenants", void 0, cookie);
+  if (list.status === 401) return { unauthorized: true };
+  if (list.status !== 200) throw new Error(`could not list projects (${errText(list)})`);
+  const tenants = data(list).tenants ?? [];
+  const t = tenants.find((x) => x.slug === slug);
+  if (!t) {
+    throw new Error(
+      `no project '${slug}' on this account \u2014 run \`vxil quickstart\`, or ask an admin to add you as a member`
+    );
+  }
+  return { tenant: t };
+}
+async function linkViaSession(dash, cookie, slug, keyName) {
+  const found = await findTenantViaSession(dash, cookie, slug);
+  if ("unauthorized" in found) return found;
+  const t = found.tenant;
+  const mint = await dash("POST", `/dashboard/tenants/${t.id}/api-keys`, { name: keyName }, cookie);
+  if (mint.status === 401) return { unauthorized: true };
+  if (mint.status !== 201 && mint.status !== 200) {
+    throw new Error(`could not mint a key for '${slug}' (${errText(mint)})`);
+  }
+  const apiKey = data(mint).api_key;
+  if (!apiKey) throw new Error("mint returned no api_key");
+  return { result: { slug, tenant_id: t.id, api_key: apiKey } };
+}
+async function linkViaDeviceFlow(dash, slug, io) {
+  const now = io.now ?? Date.now;
+  const start = await dash("POST", "/dashboard/cli/link", { slug });
+  if (start.status !== 201 && start.status !== 200) {
+    throw new Error(`could not start the link (${errText(start)})`);
+  }
+  const d = data(start);
+  if (!d.device_code || !d.user_code) throw new Error("link start returned no device_code");
+  io.log("");
+  io.log(`To link '${slug}', approve this request in your browser:`);
+  io.log("");
+  io.log(`  ${d.verification_uri_complete ?? d.verification_uri ?? "(open the dashboard \u2192 CLI link)"}`);
+  io.log(`  code: ${d.user_code}`);
+  io.log("");
+  io.log("Waiting for approval (Ctrl-C to cancel)\u2026");
+  const intervalMs = Math.max(1, d.interval ?? 5) * 1e3;
+  const deadline = now() + Math.max(1, d.expires_in ?? 900) * 1e3;
+  while (now() < deadline) {
+    await io.sleep(intervalMs);
+    const poll = await dash("POST", "/dashboard/cli/link/token", { device_code: d.device_code });
+    if (poll.status === 428) continue;
+    if (poll.status === 200) {
+      const p = data(poll);
+      if (!p.api_key || !p.tenant_id) throw new Error("approval returned no api_key");
+      return { slug: p.slug || slug, tenant_id: p.tenant_id, api_key: p.api_key };
+    }
+    throw new Error(`link failed (${errText(poll)})`);
+  }
+  throw new Error("link timed out waiting for browser approval \u2014 run `vxil link <slug>` again");
+}
+async function linkViaStoredKey(api, slug, storedKey) {
+  let res;
+  try {
+    res = await api("GET", "/v1/features");
+  } catch (e2) {
+    return { invalid: `could not reach the edge (${e2.message})` };
+  }
+  if (res.status === 200) {
+    const tenantId = res.body.meta?.tenant_id;
+    return { result: { slug, tenant_id: tenantId && tenantId.length ? tenantId : "(unknown)", api_key: storedKey } };
+  }
+  const e = res.body.error;
+  return { invalid: `${e?.code ?? res.status}${e?.message ? ` \u2014 ${e.message}` : ""}` };
+}
+
+// src/members.ts
+var MEMBER_ROLES = ["viewer", "developer", "admin", "owner"];
+function parseMemberRole(raw) {
+  if (raw === void 0 || !raw.trim()) return { error: `--role is required \u2014 one of ${MEMBER_ROLES.join("|")}` };
+  const r = raw.trim();
+  if (!MEMBER_ROLES.includes(r)) {
+    return { error: `--role must be one of ${MEMBER_ROLES.join("|")} (got '${r}')` };
+  }
+  return { role: r };
+}
+function parseMemberEmail(raw) {
+  const e = (raw ?? "").trim();
+  if (!e || !e.includes("@")) return { error: "an e-mail address is required, e.g. vxil members invite ada@example.com --role developer" };
+  return { email: e };
+}
+function parseInviteToken(raw) {
+  const s = (raw ?? "").trim();
+  if (!s) return { error: "usage: vxil invites accept <token | invite-url> [--json] \u2014 the token from the invitation e-mail" };
+  if (/^https?:\/\//i.test(s)) {
+    try {
+      const t = new URL(s).searchParams.get("token");
+      if (t && t.trim()) return { token: t.trim() };
+    } catch {
+    }
+    return { error: "that URL carries no ?token= \u2014 paste the invitation link from the e-mail, or the token itself" };
+  }
+  return { token: s };
+}
+async function listMembersViaSession(dash, cookie, tenantId) {
+  const m = await dash("GET", `/dashboard/tenants/${tenantId}/members`, void 0, cookie);
+  if (m.status === 401) return { unauthorized: true };
+  if (m.status !== 200) throw new Error(`could not list the members (${errText(m)})`);
+  const p = await dash("GET", `/dashboard/tenants/${tenantId}/members/pending`, void 0, cookie);
+  if (p.status === 401) return { unauthorized: true };
+  const invites = p.status === 200 ? data(p).invites ?? [] : [];
+  return { members: data(m).members ?? [], invites };
+}
+function inviteExpired(row2, now = Date.now()) {
+  const t = Date.parse(row2.expires_at);
+  return Number.isFinite(t) && t <= now;
+}
+function renderMembers(members, invites, now = Date.now()) {
+  const lines = [];
+  if (!members.length) lines.push("(no members)");
+  for (const m of members) {
+    lines.push(`${m.role.padEnd(9)} ${m.email}${m.display_name ? ` (${m.display_name})` : ""}  ${m.user_id}`);
+  }
+  if (invites.length) {
+    lines.push("");
+    lines.push(`pending invitations (${invites.length}):`);
+    for (const i of invites) {
+      const state = inviteExpired(i, now) ? "EXPIRED" : `expires ${i.expires_at}`;
+      lines.push(`  ${i.role.padEnd(9)} ${i.email}  ${i.id}  ${state}`);
+    }
+  }
+  return lines;
+}
+async function inviteMemberViaSession(dash, cookie, tenantId, req) {
+  const r = await dash("POST", `/dashboard/tenants/${tenantId}/members/invite`, { email: req.email, role: req.role }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 202 && r.status !== 200 && r.status !== 201) {
+    throw new Error(`could not invite ${req.email} (${errText(r)})`);
+  }
+  const d = data(r);
+  return { email: d.email ?? req.email, role: d.role ?? req.role };
+}
+async function addMemberViaSession(dash, cookie, tenantId, req) {
+  const r = await dash("POST", `/dashboard/tenants/${tenantId}/members`, { email: req.email, role: req.role }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 201 && r.status !== 200) throw new Error(`could not add ${req.email} (${errText(r)})`);
+  const d = data(r);
+  if (!d.user_id) throw new Error("the add returned no user_id");
+  return { user_id: d.user_id, role: d.role ?? req.role };
+}
+function findMember(members, ref) {
+  const r = ref.trim();
+  const byId = members.find((m) => m.user_id === r);
+  if (byId) return byId;
+  const lower = r.toLowerCase();
+  return members.find((m) => m.email.toLowerCase() === lower) ?? null;
+}
+async function removeMemberViaSession(dash, cookie, tenantId, userId) {
+  const r = await dash("DELETE", `/dashboard/tenants/${tenantId}/members/${encodeURIComponent(userId)}`, void 0, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200 && r.status !== 204) throw new Error(`could not remove the member (${errText(r)})`);
+  return { removed: userId };
+}
+function findPendingInvite(invites, ref) {
+  const r = ref.trim();
+  const byId = invites.find((i) => i.id === r);
+  if (byId) return byId;
+  const lower = r.toLowerCase();
+  return invites.find((i) => i.email.toLowerCase() === lower) ?? null;
+}
+async function revokeInviteViaSession(dash, cookie, tenantId, inviteId) {
+  const r = await dash("DELETE", `/dashboard/tenants/${tenantId}/members/pending/${encodeURIComponent(inviteId)}`, void 0, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200) throw new Error(`could not revoke the invitation (${errText(r)})`);
+  const d = data(r);
+  return { revoked: d.revoked ?? inviteId };
+}
+async function lookupInvite(dash, token) {
+  const r = await dash("GET", `/dashboard/invites/pending?token=${encodeURIComponent(token)}`);
+  if (r.status !== 200) return { refused: errText(r) };
+  const d = data(r);
+  return {
+    preview: {
+      tenant_display_name: String(d.tenant_display_name ?? "a project"),
+      role: String(d.role ?? ""),
+      expires_at: String(d.expires_at ?? "")
+    }
+  };
+}
+async function acceptInviteViaSession(dash, cookie, token) {
+  const r = await dash("POST", "/dashboard/invites/accept", { token }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200) throw new Error(`could not accept the invitation (${errText(r)})`);
+  const d = data(r);
+  if (!d.tenant_id) throw new Error("the accept returned no tenant_id");
+  return { tenant_id: d.tenant_id, role: d.role ?? "" };
+}
+
+// src/projects.ts
+async function listProjectsViaSession(dash, cookie) {
+  const r = await dash("GET", "/dashboard/tenants", void 0, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200) throw new Error(`could not list projects (${errText(r)})`);
+  return { tenants: data(r).tenants ?? [] };
+}
+function renderProjects(tenants, bound) {
+  if (!tenants.length) return ["(no projects on this account \u2014 `vxil projects create <slug> --name <display>`)"];
+  return tenants.map((t) => {
+    const slot = bound.get(t.slug);
+    const kind = t.kind === "dev" ? ` \xB7 dev${t.expires_at ? `, expires ${t.expires_at}` : ""}` : "";
+    return `${slot ? `[${slot}]`.padEnd(14) : "".padEnd(14)}${t.slug}  ${t.display_name}  ${t.tier}${t.role ? ` \xB7 ${t.role}` : ""}${kind}`;
+  });
+}
+function parseProjectCreate(slug, name) {
+  const s = (slug ?? "").trim();
+  if (!s) return { error: "usage: vxil projects create <slug> [--name <display name>] [--json]" };
+  if (!TENANT_SLUG_RE.test(s)) return { error: `'${s}' is not a valid slug \u2014 lowercase letters, digits and hyphens (${TENANT_SLUG_RE.source})` };
+  const display = (name ?? "").trim() || s;
+  return { body: { slug: s, display_name: display } };
+}
+async function createProjectViaSession(dash, cookie, body) {
+  const r = await dash("POST", "/dashboard/tenants", { slug: body.slug, display_name: body.display_name }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 201 && r.status !== 200) throw new Error(`could not create '${body.slug}' (${errText(r)})`);
+  const d = data(r);
+  if (!d.id) throw new Error("the create returned no project id");
+  return {
+    project: {
+      id: d.id,
+      slug: d.slug ?? body.slug,
+      display_name: d.display_name ?? body.display_name,
+      tier: d.tier ?? "free",
+      kind: d.kind ?? null,
+      expires_at: d.expires_at ?? null
+    }
+  };
+}
+async function deleteProjectViaSession(dash, cookie, tenantId, slug) {
+  const r = await dash("DELETE", `/dashboard/tenants/${tenantId}`, { confirm: slug }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200) throw new Error(`could not delete '${slug}' (${errText(r)})`);
+  const { deleted: _d, ...report } = data(r);
+  void _d;
+  return { report };
+}
+function cleanupAfterDelete(creds, proj, gone) {
+  const cleared = [];
+  let credsChanged = false;
+  if (creds.keys?.[gone.slug] !== void 0) {
+    const keys = { ...creds.keys };
+    delete keys[gone.slug];
+    creds = { ...creds, keys };
+    credsChanged = true;
+    cleared.push("key");
+  }
+  let projChanged = false;
+  let primaryWasIt = false;
+  if (proj) {
+    const next = { ...proj };
+    if (next.dev && next.dev.tenant_id === gone.tenant_id) {
+      delete next.dev;
+      projChanged = true;
+      cleared.push("dev slot");
+    }
+    for (const kind of ["targets", "branches"]) {
+      const map2 = next[kind];
+      if (!map2) continue;
+      const kept = {};
+      for (const [n, s] of Object.entries(map2)) {
+        if (s.tenant_id === gone.tenant_id) {
+          projChanged = true;
+          cleared.push(`${kind === "targets" ? "target" : "branch"} '${n}'`);
+        } else kept[n] = s;
+      }
+      if (Object.keys(kept).length) next[kind] = kept;
+      else delete next[kind];
+    }
+    if (proj.tenant_id === gone.tenant_id) primaryWasIt = true;
+    proj = projChanged ? next : proj;
+  }
+  return { creds, credsChanged, proj, projChanged, primaryWasIt, cleared };
+}
+async function getBillingViaSession(dash, cookie, tenantId) {
+  const r = await dash("GET", `/dashboard/tenants/${tenantId}/billing`, void 0, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200) throw new Error(`could not read the billing status (${errText(r)})`);
+  const d = data(r);
+  return {
+    billing: {
+      tier: d.tier ?? "free",
+      provider: d.provider ?? "(unknown)",
+      plans: d.plans ?? [],
+      subscription: d.subscription ?? null,
+      scheduled_downgrade: d.scheduled_downgrade ?? null,
+      checkouts: d.checkouts ?? []
+    }
+  };
+}
+function renderBilling(b2) {
+  const lines = [`tier: ${b2.tier} \xB7 provider: ${b2.provider}`];
+  const s = b2.subscription;
+  if (s) {
+    lines.push(`subscription: ${s.status ?? "\u2014"}${s.tier ? ` (${s.tier})` : ""}${s.current_period_end ? ` \xB7 current period ends ${s.current_period_end}` : ""}`);
+  } else lines.push("subscription: none");
+  if (b2.scheduled_downgrade) lines.push(`scheduled: moves to ${b2.scheduled_downgrade.tier} at ${b2.scheduled_downgrade.effective_at ?? "(period end)"}`);
+  if (b2.plans.length) lines.push(`plans: ${b2.plans.map((p) => `${p.tier}${p.self_serve === false ? " (contract)" : ""}`).join(" \xB7 ")}`);
+  if (b2.checkouts.length) {
+    lines.push(`recent checkouts (${b2.checkouts.length}):`);
+    for (const c of b2.checkouts.slice(0, 5)) lines.push(`  ${c.created_at}  ${c.tier.padEnd(10)} ${c.status}  ${c.id}`);
+  }
+  return lines;
+}
+async function checkoutViaSession(dash, cookie, tenantId, tier) {
+  const r = await dash("POST", `/dashboard/tenants/${tenantId}/billing/checkout`, { tier }, cookie);
+  if (r.status === 401) return { unauthorized: true };
+  if (r.status !== 200 && r.status !== 201 && r.status !== 202) throw new Error(`could not change the plan (${errText(r)})`);
+  const d = data(r);
+  const checkout_id = d.checkout_id ?? "";
+  const t = d.tier ?? tier;
+  let outcome;
+  if (d.checkout_url) outcome = { kind: "checkout_url", checkout_id, tier: t, checkout_url: d.checkout_url };
+  else if (d.resumed) outcome = { kind: "resumed", checkout_id, tier: t };
+  else if (d.scheduled) outcome = { kind: "scheduled", checkout_id, tier: t, effective_at: d.effective_at ?? null };
+  else if (d.completed) outcome = { kind: "completed", checkout_id, tier: t };
+  else throw new Error(`the checkout answered with an unexpected shape (${JSON.stringify(d).slice(0, 160)})`);
+  return { outcome, raw: d };
+}
+function renderCheckout(o) {
+  switch (o.kind) {
+    case "checkout_url":
+      return { stdout: o.checkout_url, stderr: [`open it in a browser to complete the ${o.tier} checkout; the plan changes when the provider confirms (\`vxil billing status\` shows it)`] };
+    case "completed":
+      return { stdout: `\u2713 now on ${o.tier}`, stderr: [] };
+    case "scheduled":
+      return { stdout: `\u2713 moves to ${o.tier} at ${o.effective_at ?? "the end of the current period"}`, stderr: ["the current plan stays until then; picking it again before that cancels the move"] };
+    case "resumed":
+      return { stdout: `\u2713 staying on ${o.tier} \u2014 the scheduled downgrade is cancelled`, stderr: [] };
+  }
+}
+
+// src/operatorVerbs.ts
+function ok2xx(r) {
+  return r.status >= 200 && r.status < 300;
+}
+function dataOf(r) {
+  return r.body.data ?? {};
+}
+var CONTENT_TYPES = {
+  txt: "text/plain",
+  md: "text/markdown",
+  html: "text/html",
+  css: "text/css",
+  csv: "text/csv",
+  json: "application/json",
+  js: "text/javascript",
+  mjs: "text/javascript",
+  ts: "text/plain",
+  xml: "application/xml",
+  pdf: "application/pdf",
+  zip: "application/zip",
+  gz: "application/gzip",
+  png: "image/png",
+  jpg: "image/jpeg",
+  jpeg: "image/jpeg",
+  gif: "image/gif",
+  webp: "image/webp",
+  svg: "image/svg+xml",
+  mp3: "audio/mpeg",
+  mp4: "video/mp4",
+  webm: "video/webm",
+  wav: "audio/wav"
+};
+function contentTypeFor(filename, override) {
+  if (override && override.trim()) return override.trim();
+  const ext = filename.toLowerCase().split(".").pop() ?? "";
+  return CONTENT_TYPES[ext] ?? "application/octet-stream";
+}
+async function filesPut(api, put, req) {
+  const mint = await api("POST", "/v1/files/upload-url", {
+    user_id: req.user_id,
+    filename: req.filename,
+    content_type: req.content_type,
+    size_bytes: req.bytes.byteLength
+  });
+  if (!ok2xx(mint)) throw new Error(`could not mint an upload URL (${apiErrText(mint)})`);
+  const m = dataOf(mint);
+  if (!m.object_id || !m.upload_url) throw new Error("the upload-url route returned no object_id/upload_url");
+  const r = await put(m.upload_url, (m.upload_method ?? "PUT").toUpperCase(), req.bytes, req.content_type);
+  if (r.status < 200 || r.status >= 300) {
+    throw new Error(`the upload PUT failed (${r.status}${r.text ? ` ${r.text.slice(0, 120)}` : ""}) \u2014 object ${m.object_id} was NOT completed`);
+  }
+  const done = await api("POST", `/v1/files/${encodeURIComponent(m.object_id)}/complete`);
+  if (!ok2xx(done)) throw new Error(`the bytes are uploaded but complete failed (${apiErrText(done)}) \u2014 retry: vxil api POST /v1/files/${m.object_id}/complete`);
+  const d = dataOf(done);
+  return { object_id: d.object_id ?? m.object_id, status: d.status ?? "ready", size_bytes: req.bytes.byteLength, content_type: req.content_type };
+}
+async function filesRm(api, objectId) {
+  const r = await api("DELETE", `/v1/files/${encodeURIComponent(objectId)}`);
+  if (!ok2xx(r)) throw new Error(`could not delete '${objectId}' (${apiErrText(r)})`);
+  return { object_id: objectId, deleted: true };
+}
+var WEBHOOK_PROVIDERS = ["stripe", "paddle", "github", "slack", "revenuecat", "generic"];
+function parseSourceAdd(f) {
+  const provider = (f.provider ?? "").trim();
+  if (!WEBHOOK_PROVIDERS.includes(provider)) {
+    return { error: `--provider must be one of ${WEBHOOK_PROVIDERS.join("|")}${provider ? ` (got '${provider}')` : ""}` };
+  }
+  const name = (f.name ?? "").trim();
+  if (!name) return { error: "--name is required \u2014 a label for this source, e.g. --name stripe-prod" };
+  if (name.length > 200) return { error: `--name is at most 200 characters (got ${name.length})` };
+  const fwd = f.forwardUrl?.trim();
+  if (fwd !== void 0 && fwd !== "" && !/^https:\/\//i.test(fwd)) return { error: "--forward-url must be an https:// URL" };
+  return { body: { provider, name, ...fwd ? { forward_url: fwd } : {} } };
+}
+async function sourcesAdd(api, body) {
+  const r = await api("POST", "/v1/webhooks/sources", body);
+  if (!ok2xx(r)) throw new Error(`could not register the source (${apiErrText(r)})`);
+  const d = dataOf(r);
+  if (!d.source_id || !d.receiver_url_path) throw new Error("the source route returned no source_id/receiver_url_path");
+  return { source_id: d.source_id, receiver_url_path: d.receiver_url_path, provider: d.provider ?? body.provider };
+}
+function sourceAddStdout(s, edgeBase, json2) {
+  if (json2) return JSON.stringify({ source_id: s.source_id, provider: s.provider, receiver_url_path: s.receiver_url_path, receiver_url: `${edgeBase.replace(/\/$/, "")}${s.receiver_url_path}` });
+  return `${edgeBase.replace(/\/$/, "")}${s.receiver_url_path}`;
+}
+function sourceAddNotices(s) {
+  return [
+    `\u2713 registered ${s.provider} source ${s.source_id} \u2014 the receiver URL above is shown ONCE; paste it into the provider's webhook settings`,
+    `a signing secret goes in \`vxil secrets set webhooks/source_${s.source_id}\` (a 'generic' source needs none); \`vxil listen --source ${s.source_id} --forward-to <url>\` forwards its events locally`
+  ];
+}
+async function sourcesList(api) {
+  const r = await api("GET", "/v1/webhooks/sources");
+  if (!ok2xx(r)) throw new Error(`could not list the sources (${apiErrText(r)})`);
+  return dataOf(r).sources ?? [];
+}
+async function sourcesRm(api, sourceId) {
+  const r = await api("DELETE", `/v1/webhooks/sources/${encodeURIComponent(sourceId)}`);
+  if (!ok2xx(r)) throw new Error(`could not delete source '${sourceId}' (${apiErrText(r)})`);
+  return { source_id: sourceId, deleted: true };
+}
+async function sourcesTest(api, sourceId) {
+  const r = await api("POST", `/v1/webhooks/sources/${encodeURIComponent(sourceId)}/test`);
+  if (!ok2xx(r)) throw new Error(`could not send a test event to source '${sourceId}' (${apiErrText(r)})`);
+  return { ...dataOf(r), pending: r.status === 202 };
+}
+async function eventsReplay(api, eventId) {
+  const r = await api("POST", `/v1/webhooks/events/${encodeURIComponent(eventId)}/replay`);
+  if (!ok2xx(r)) throw new Error(`could not replay event '${eventId}' (${apiErrText(r)})`);
+  return { ...dataOf(r), event_id: eventId, replayed: true };
+}
+async function eventsRuns(api, eventId) {
+  const r = await api("GET", `/v1/webhooks/events/${encodeURIComponent(eventId)}/runs`);
+  if (!ok2xx(r)) throw new Error(`could not read the runs of event '${eventId}' (${apiErrText(r)})`);
+  return dataOf(r);
+}
+function parseBulkFilter(raw) {
+  if (raw === void 0) return { error: "--filter '<json>' is required \u2014 the SAME filter grammar as a query; an unselected sweep is refused server-side, so '{}' is refused here too" };
+  let v;
+  try {
+    v = JSON.parse(raw);
+  } catch {
+    return { error: "--filter must be valid JSON" };
+  }
+  if (!v || typeof v !== "object" || Array.isArray(v)) return { error: "--filter must be a JSON object" };
+  if (!Object.keys(v).length) return { error: "an empty filter ('{}') would select every item \u2014 name at least one field (the server refuses an unselected sweep)" };
+  return { filter: v };
+}
+function parseBulkLimit(raw) {
+  if (raw === void 0) return { limit: void 0 };
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n < 1 || n > 100) return { error: `--limit '${raw}': a whole number 1..100 (items per round trip; the server default is 25)` };
+  return { limit: n };
+}
+var BULK_RM_MAX_PAGES = 1e3;
+var BULK_RM_DRY_RUN_PAGE = 100;
+async function bulkPage(api, collection, filter, limit, cursor, dryRun) {
+  const r = await api("POST", `/v1/cms/items/${encodeURIComponent(collection)}/delete`, {
+    filter,
+    ...limit !== void 0 ? { limit } : {},
+    ...cursor ? { cursor } : {},
+    ...dryRun ? { dry_run: true } : {}
+  });
+  if (!ok2xx(r)) throw new Error(`bulk delete on '${collection}' ${dryRun ? "dry run " : ""}failed (${apiErrText(r)})`);
+  const d = dataOf(r);
+  return {
+    matched: d.matched ?? 0,
+    deleted: d.deleted ?? 0,
+    cascaded: d.cascaded ?? 0,
+    set_null: d.set_null ?? 0,
+    dry_run: d.dry_run ?? dryRun,
+    next_cursor: d.next_cursor ?? null
+  };
+}
+async function bulkRmDryRun(api, collection, filter) {
+  let matched = 0;
+  let pages = 0;
+  let cursor;
+  for (; ; ) {
+    const p = await bulkPage(api, collection, filter, BULK_RM_DRY_RUN_PAGE, cursor, true);
+    matched += p.matched;
+    pages++;
+    if (!p.next_cursor) return { matched, pages, truncated: false };
+    if (pages >= BULK_RM_MAX_PAGES) return { matched, pages, truncated: true };
+    cursor = p.next_cursor;
+  }
+}
+async function bulkRmAll(api, collection, filter, limit, onPage) {
+  const totals = { deleted: 0, cascaded: 0, set_null: 0 };
+  let pages = 0;
+  for (; ; ) {
+    let p;
+    try {
+      p = await bulkPage(api, collection, filter, limit, void 0, false);
+    } catch (e) {
+      throw new Error(`${e.message} \u2014 ${totals.deleted} item(s) were already deleted in the pages before it`);
+    }
+    pages++;
+    totals.deleted += p.deleted;
+    totals.cascaded += p.cascaded;
+    totals.set_null += p.set_null;
+    onPage?.(p, totals);
+    if (p.deleted === 0) return { ...totals, pages, truncated: false };
+    if (pages >= BULK_RM_MAX_PAGES) return { ...totals, pages, truncated: true };
+  }
+}
+async function searchSyncRun(api, sourceKey, opts = {}) {
+  const r = await api("POST", `/v1/search/sync/${encodeURIComponent(sourceKey)}/run`, opts.sweep ? { sweep: true } : {});
+  if (!ok2xx(r)) throw new Error(`sync run for '${sourceKey}' failed (${apiErrText(r)})`);
+  return dataOf(r);
+}
+async function searchSyncReset(api, sourceKey, opts = {}) {
+  const r = await api("POST", `/v1/search/sync/${encodeURIComponent(sourceKey)}/reset`, opts.purge ? { purge: true } : {});
+  if (!ok2xx(r)) throw new Error(`sync reset for '${sourceKey}' failed (${apiErrText(r)})`);
+  return dataOf(r);
+}
+function splitCsvLine(line) {
+  const cells = [];
+  let cur = "";
+  let i = 0;
+  while (i <= line.length) {
+    if (i === line.length) {
+      cells.push(cur.trim());
+      break;
+    }
+    const ch = line[i];
+    if (ch === '"' && cur.trim() === "") {
+      let j = i + 1;
+      let val = "";
+      for (; ; ) {
+        if (j >= line.length) return { error: "an unterminated quoted field" };
+        if (line[j] === '"') {
+          if (line[j + 1] === '"') {
+            val += '"';
+            j += 2;
+            continue;
+          }
+          j++;
+          break;
+        }
+        val += line[j];
+        j++;
+      }
+      const rest2 = line.slice(j);
+      const m = /^\s*(,|$)/.exec(rest2);
+      if (!m) return { error: `unexpected text after a closing quote ("${rest2.trim().slice(0, 12)}\u2026")` };
+      cells.push(val);
+      cur = "";
+      i = j + m[0].length;
+      if (m[1] === "") break;
+      if (i === line.length) {
+        cells.push("");
+        break;
+      }
+      continue;
+    }
+    if (ch === ",") {
+      cells.push(cur.trim());
+      cur = "";
+      i++;
+      continue;
+    }
+    cur += ch;
+    i++;
+  }
+  return { cells };
+}
+function parseUsersFile(text, filename) {
+  const lower = filename.toLowerCase();
+  if (lower.endsWith(".json")) {
+    let v;
+    try {
+      v = JSON.parse(text);
+    } catch {
+      return { error: `${filename} is not valid JSON` };
+    }
+    const arr = Array.isArray(v) ? v : v && typeof v === "object" && Array.isArray(v.users) ? v.users : null;
+    if (!arr) return { error: `${filename} must be a JSON array of users or { "users": [...] }` };
+    const users = [];
+    for (const [i, u] of arr.entries()) {
+      const o = u;
+      if (!o || typeof o !== "object" || typeof o.id !== "string" || !o.id.trim()) return { error: `${filename}: users[${i}] has no string id` };
+      users.push({
+        id: o.id.trim(),
+        ...typeof o.email === "string" && o.email ? { email: o.email } : {},
+        ...typeof o.display_name === "string" && o.display_name ? { display_name: o.display_name } : {},
+        ...o.attributes && typeof o.attributes === "object" ? { attributes: o.attributes } : {}
+      });
+    }
+    return users.length ? { users } : { error: `${filename} holds no users` };
+  }
+  if (lower.endsWith(".csv")) {
+    const lines = text.split(/\r?\n/).filter((l) => l.trim());
+    if (lines.length < 2) return { error: `${filename} needs a header row (id[,email[,display_name]]) and at least one user` };
+    const head = splitCsvLine(lines[0]);
+    if ("error" in head) return { error: `${filename}: the header row is not valid CSV (${head.error})` };
+    const header = head.cells.map((h) => h.trim().toLowerCase());
+    const idCol = header.indexOf("id");
+    if (idCol < 0) return { error: `${filename}: the header row has no 'id' column (got: ${header.join(", ")})` };
+    const emailCol = header.indexOf("email");
+    const nameCol = header.indexOf("display_name");
+    const users = [];
+    for (const [i, line] of lines.slice(1).entries()) {
+      const split = splitCsvLine(line);
+      if ("error" in split) return { error: `${filename}: row ${i + 2} is not valid CSV (${split.error}) \u2014 quote a field that holds a comma as "Doe, Jane", or use the .json form` };
+      const { cells } = split;
+      if (cells.length !== header.length) {
+        return { error: `${filename}: row ${i + 2} has ${cells.length} cell(s) but the header has ${header.length} \u2014 a comma inside a value must be quoted ("Doe, Jane"), or use the .json form; nothing was imported` };
+      }
+      const id = cells[idCol] ?? "";
+      if (!id) return { error: `${filename}: row ${i + 2} has an empty id` };
+      const email = emailCol >= 0 ? cells[emailCol] : void 0;
+      const name = nameCol >= 0 ? cells[nameCol] : void 0;
+      users.push({ id, ...email ? { email } : {}, ...name ? { display_name: name } : {} });
+    }
+    return { users };
+  }
+  return { error: `${filename}: expected a .json or .csv file` };
+}
+var USERS_IMPORT_CHUNK = 100;
+async function importUsers(api, users, opts = {}) {
+  const size2 = Math.max(1, Math.min(USERS_IMPORT_CHUNK, opts.chunk ?? USERS_IMPORT_CHUNK));
+  let upserted = 0;
+  let chunks = 0;
+  for (let i = 0; i < users.length; i += size2) {
+    const slice = users.slice(i, i + size2);
+    const r = await api("POST", "/v1/users/bulk", { users: slice });
+    if (!ok2xx(r)) throw new Error(`users import failed at user ${i + 1} of ${users.length} (${apiErrText(r)}) \u2014 ${upserted} already upserted; the call is an upsert, so re-running is safe`);
+    upserted += dataOf(r).upserted ?? slice.length;
+    chunks++;
+    opts.onProgress?.(Math.min(i + size2, users.length), users.length);
+  }
+  return { upserted, chunks };
+}
 
 // src/fnDev.ts
 var DEV_VXIL_BASE = "https://api.vxil.org";
@@ -8554,11 +9388,20 @@ ${relLines.join("\n")}
   lines.push(`    };`);
   return lines.join("\n");
 }
+function compareCodePoints(a, b2) {
+  return a < b2 ? -1 : a > b2 ? 1 : 0;
+}
+function sortKeysDeep(v) {
+  if (Array.isArray(v)) return v.map(sortKeysDeep);
+  if (v === null || typeof v !== "object") return v;
+  const o = v;
+  return Object.fromEntries(Object.keys(o).sort(compareCodePoints).map((k) => [k, sortKeysDeep(o[k])]));
+}
 function lowerSig(sig) {
   if (sig == null) return "unknown";
   if (typeof sig === "string") return sig.trim() || "unknown";
   if (typeof sig === "object" && !Array.isArray(sig)) {
-    const fields = Object.entries(sig).map(([k, v]) => `${quoteKey(k)}: ${typeof v === "string" && v.trim() ? v.trim() : "unknown"}`);
+    const fields = Object.entries(sig).sort(([a], [b2]) => compareCodePoints(a, b2)).map(([k, v]) => `${quoteKey(k)}: ${typeof v === "string" && v.trim() ? v.trim() : "unknown"}`);
     return fields.length ? `{ ${fields.join("; ")} }` : "Record<string, never>";
   }
   return "unknown";
@@ -8569,12 +9412,70 @@ function functionType(f) {
 function apiVersionEntries(input) {
   const map2 = input.apiVersions;
   if (!map2) return [];
-  return Object.entries(map2).sort(([a], [b2]) => a.localeCompare(b2));
+  return Object.entries(map2).sort(([a], [b2]) => compareCodePoints(a, b2));
+}
+var API_VERSIONS_BLOCK_HEAD = "\n\n// The API majors this client was generated against (feature-versioning.md \xA7D10).\n// A new major on the backend surfaces here as `vxil gen --check` drift.\nexport const API_VERSIONS = {\n";
+var API_VERSIONS_BLOCK_TAIL = "\n} as const;";
+function hasApiVersionsBlock(src) {
+  return src.includes(API_VERSIONS_BLOCK_HEAD);
+}
+function stripApiVersionsBlock(src) {
+  const i = src.indexOf(API_VERSIONS_BLOCK_HEAD);
+  if (i < 0) return src;
+  const j = src.indexOf(API_VERSIONS_BLOCK_TAIL, i + API_VERSIONS_BLOCK_HEAD.length);
+  if (j < 0) return src;
+  return src.slice(0, i) + src.slice(j + API_VERSIONS_BLOCK_TAIL.length);
+}
+function canonicalCollections(collections) {
+  return [...collections].sort((a, b2) => compareCodePoints(a.collection, b2.collection)).map((c) => ({ ...c, fields: [...c.fields].sort((a, b2) => compareCodePoints(a.field, b2.field)) }));
+}
+function genInputFromConfig(cfg) {
+  return {
+    ...cfg.env ? { env: cfg.env } : {},
+    features: Object.keys(cfg.features),
+    collections: Object.entries(cfg.cms?.collections ?? {}).map(([collection, def]) => ({
+      collection,
+      ...def.singular ? { singular: def.singular } : {},
+      fields: Object.entries(def.fields).map(([field, f]) => ({
+        field,
+        type: f.type,
+        required: !!f.required,
+        index_slot: f.indexSlot ?? null,
+        ...f.relationTo ? { relation_to: f.relationTo } : {},
+        ...f.computed ? { computed: f.computed } : {},
+        // `validation.enum` becomes a string-literal union in the generated
+        // types, so the OFFLINE collector must carry it too (the online path
+        // gets it from GET /v1/cms/collections, which returns the whole row) —
+        // else `vxil gen --offline` and `vxil gen` would disagree.
+        ...f.validation ? { validation: f.validation } : {}
+      }))
+    })),
+    functions: Object.entries(cfg.functions ?? {}).map(([name, def]) => ({
+      name,
+      ...def.signature ? { signature: def.signature } : {}
+    }))
+  };
+}
+function typesCheckBody(src) {
+  const i = src.indexOf("export interface VxilSchema");
+  return i >= 0 ? src.slice(i) : src;
+}
+function checkGeneratedTypes(existing, generated, opts) {
+  let have = typesCheckBody(existing);
+  let want = typesCheckBody(generated);
+  let unpinnedNotice = false;
+  if (opts.offline) {
+    have = stripApiVersionsBlock(have);
+  } else if (existing && hasApiVersionsBlock(generated) && !hasApiVersionsBlock(existing)) {
+    unpinnedNotice = true;
+    want = stripApiVersionsBlock(want);
+  }
+  return { upToDate: existing !== "" && have === want, unpinnedNotice };
 }
 function generateTypes(input) {
-  const feats = [...input.features].sort();
-  const colls = [...input.collections].sort((a, b2) => a.collection.localeCompare(b2.collection));
-  const fns = [...input.functions].sort((a, b2) => a.name.localeCompare(b2.name));
+  const feats = [...input.features].sort(compareCodePoints);
+  const colls = canonicalCollections(input.collections);
+  const fns = [...input.functions].sort((a, b2) => compareCodePoints(a.name, b2.name));
   const apiVers = apiVersionEntries(input);
   const header = [
     `// vxil.types.ts \u2014 GENERATED by \`vxil gen\`${input.generatedAt ? ` at ${input.generatedAt}` : ""}`,
@@ -8585,13 +9486,7 @@ function generateTypes(input) {
     "// DO NOT EDIT \u2014 re-run `vxil gen`.",
     "/* eslint-disable */"
   ].join("\n");
-  const apiVersionsBlock = apiVers.length ? `
-
-// The API majors this client was generated against (feature-versioning.md \xA7D10).
-// A new major on the backend surfaces here as \`vxil gen --check\` drift.
-export const API_VERSIONS = {
-` + apiVers.map(([f, v]) => `  ${quoteKey(f)}: [${v.map((x) => JSON.stringify(x)).join(", ")}],`).join("\n") + `
-} as const;` : "";
+  const apiVersionsBlock = apiVers.length ? API_VERSIONS_BLOCK_HEAD + apiVers.map(([f, v]) => `  ${quoteKey(f)}: [${v.map((x) => JSON.stringify(x)).join(", ")}],`).join("\n") + API_VERSIONS_BLOCK_TAIL : "";
   const cmsBody = colls.length ? colls.map(collectionType).join("\n") : "    // (no collections \u2014 `vx.from(...)` is empty until you declare one)";
   const enumAliases = colls.some(hasEnumFilter) ? `
 export type VxilFilterEnum<U extends string | number | boolean> = U | { $eq?: U; $in?: U[]; $contains?: string };
@@ -8657,6 +9552,20 @@ var TOOLS = [
     method: "POST",
     path: "/v1/users"
   },
+  {
+    name: "users_merge",
+    description: "Merge a REGISTRY-ONLY end-user (a row created with users_upsert that never signed in) INTO another user of the same tenant: attributes fill the survivor's gaps (the survivor wins on conflicts), the merged id is soft-deleted, its owner-scoped cms/files/payments rows move to the survivor, and auth.user.merged { from, into, method: 'registry_merge' } is audited. Refused 409 has_auth_identity when the id already has a sign-in identity (merge that through the auth flows). Server-only. Needs users:write.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        id: { type: "string", description: "The registry-only user id to fold away (\u2264256 chars)." },
+        into: { type: "string", description: "The surviving user id (same tenant)." }
+      },
+      required: ["id", "into"]
+    },
+    method: "POST",
+    path: (a) => `/v1/users/${encodeURIComponent(String(a.id))}/merge`
+  },
   {
     name: "notifications_send",
     feature: "notifications",
@@ -9700,6 +10609,21 @@ var TOOLS = [
     method: "GET",
     path: "/v1/webhooks/subscriptions"
   },
+  {
+    name: "webhooks_update_subscription",
+    feature: "webhooks",
+    description: "Change a webhook subscription's event filter in place: the sub_id and the delivery position are kept (nothing is replayed or skipped; the new prefixes apply from the next delivery pass). event_prefixes replaces the whole list; empty = every event. target_url is not editable \u2014 subscribe anew for a new endpoint.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        sub_id: { type: "string" },
+        event_prefixes: { type: "array", items: { type: "string" }, description: "the full new list, e.g. ['job.generation.', 'payments.']; [] = every event" }
+      },
+      required: ["sub_id", "event_prefixes"]
+    },
+    method: "PATCH",
+    path: (a) => `/v1/webhooks/subscriptions/${encodeURIComponent(String(a.sub_id))}`
+  },
   {
     name: "webhooks_unsubscribe",
     feature: "webhooks",
@@ -10214,12 +11138,12 @@ function lowerPath(path, inputSchema) {
   return path(sentinels).replace(/__([a-z0-9_]+)__/g, "{$1}");
 }
 function buildMcpCatalog(input, tools = TOOLS) {
-  const features = [...input.features].sort();
+  const features = [...input.features].sort(compareCodePoints);
   const featureSet = new Set(features);
-  const colls = [...input.collections].sort((a, b2) => a.collection.localeCompare(b2.collection));
+  const colls = canonicalCollections(input.collections);
   const collNames = colls.map((c) => c.collection);
-  const fns = [...input.functions].sort((a, b2) => a.name.localeCompare(b2.name));
-  const catalogTools = tools.filter((t) => !t.feature || featureSet.has(t.feature)).sort((a, b2) => a.name.localeCompare(b2.name)).map((t) => {
+  const fns = [...input.functions].sort((a, b2) => compareCodePoints(a.name, b2.name));
+  const catalogTools = tools.filter((t) => !t.feature || featureSet.has(t.feature)).sort((a, b2) => compareCodePoints(a.name, b2.name)).map((t) => {
     let inputSchema = t.inputSchema;
     const props = inputSchema.properties;
     if (collNames.length && props && "collection" in props) {
@@ -10271,10 +11195,27 @@ function buildMcpCatalog(input, tools = TOOLS) {
     functions: fns.map((f) => ({
       name: f.name,
       invoke: `POST /v1/fn/${f.name}`,
-      signature: f.signature ?? null
+      // keys sorted at every depth: online reads the signature back in the
+      // stored manifest's key order, offline in declaration order (F2)
+      signature: f.signature ? sortKeysDeep(f.signature) : null
     }))
   };
 }
+var MCP_CHECK_IGNORED_KEYS = ["generated_at", "tenant", "env"];
+function mcpCatalogUpToDate(existing, catalog) {
+  if (existing === null) return false;
+  const strip = (o) => {
+    for (const k of MCP_CHECK_IGNORED_KEYS) delete o[k];
+    return canonicalJson(o);
+  };
+  try {
+    const cur = JSON.parse(existing);
+    if (!cur || typeof cur !== "object" || Array.isArray(cur)) return false;
+    return strip(cur) === strip(JSON.parse(JSON.stringify(catalog)));
+  } catch {
+    return false;
+  }
+}
 
 // src/exportUrls.ts
 var EXPORT_429_RETRIES = 6;
@@ -11005,96 +11946,8 @@ function devSlotExpiryCheck(dev, now) {
   };
 }
 
-// src/link.ts
-function data(r) {
-  return r.json.data ?? r.json;
-}
-function errText(r) {
-  const e = r.json.error;
-  return e ? `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}` : `${r.status}`;
-}
-async function findTenantViaSession(dash, cookie, slug) {
-  const list = await dash("GET", "/dashboard/tenants", void 0, cookie);
-  if (list.status === 401) return { unauthorized: true };
-  if (list.status !== 200) throw new Error(`could not list projects (${errText(list)})`);
-  const tenants = data(list).tenants ?? [];
-  const t = tenants.find((x) => x.slug === slug);
-  if (!t) {
-    throw new Error(
-      `no project '${slug}' on this account \u2014 run \`vxil quickstart\`, or ask an admin to add you as a member`
-    );
-  }
-  return { tenant: t };
-}
-async function linkViaSession(dash, cookie, slug, keyName) {
-  const found = await findTenantViaSession(dash, cookie, slug);
-  if ("unauthorized" in found) return found;
-  const t = found.tenant;
-  const mint = await dash("POST", `/dashboard/tenants/${t.id}/api-keys`, { name: keyName }, cookie);
-  if (mint.status === 401) return { unauthorized: true };
-  if (mint.status !== 201 && mint.status !== 200) {
-    throw new Error(`could not mint a key for '${slug}' (${errText(mint)})`);
-  }
-  const apiKey = data(mint).api_key;
-  if (!apiKey) throw new Error("mint returned no api_key");
-  return { result: { slug, tenant_id: t.id, api_key: apiKey } };
-}
-async function linkViaDeviceFlow(dash, slug, io) {
-  const now = io.now ?? Date.now;
-  const start = await dash("POST", "/dashboard/cli/link", { slug });
-  if (start.status !== 201 && start.status !== 200) {
-    throw new Error(`could not start the link (${errText(start)})`);
-  }
-  const d = data(start);
-  if (!d.device_code || !d.user_code) throw new Error("link start returned no device_code");
-  io.log("");
-  io.log(`To link '${slug}', approve this request in your browser:`);
-  io.log("");
-  io.log(`  ${d.verification_uri_complete ?? d.verification_uri ?? "(open the dashboard \u2192 CLI link)"}`);
-  io.log(`  code: ${d.user_code}`);
-  io.log("");
-  io.log("Waiting for approval (Ctrl-C to cancel)\u2026");
-  const intervalMs = Math.max(1, d.interval ?? 5) * 1e3;
-  const deadline = now() + Math.max(1, d.expires_in ?? 900) * 1e3;
-  while (now() < deadline) {
-    await io.sleep(intervalMs);
-    const poll = await dash("POST", "/dashboard/cli/link/token", { device_code: d.device_code });
-    if (poll.status === 428) continue;
-    if (poll.status === 200) {
-      const p = data(poll);
-      if (!p.api_key || !p.tenant_id) throw new Error("approval returned no api_key");
-      return { slug: p.slug || slug, tenant_id: p.tenant_id, api_key: p.api_key };
-    }
-    throw new Error(`link failed (${errText(poll)})`);
-  }
-  throw new Error("link timed out waiting for browser approval \u2014 run `vxil link <slug>` again");
-}
-async function linkViaStoredKey(api, slug, storedKey) {
-  let res;
-  try {
-    res = await api("GET", "/v1/features");
-  } catch (e2) {
-    return { invalid: `could not reach the edge (${e2.message})` };
-  }
-  if (res.status === 200) {
-    const tenantId = res.body.meta?.tenant_id;
-    return { result: { slug, tenant_id: tenantId && tenantId.length ? tenantId : "(unknown)", api_key: storedKey } };
-  }
-  const e = res.body.error;
-  return { invalid: `${e?.code ?? res.status}${e?.message ? ` \u2014 ${e.message}` : ""}` };
-}
-
 // src/keys.ts
 var MINTABLE_SCOPES = KNOWN_SCOPES.filter((s) => s !== "admin");
-function data2(r) {
-  return r.json.data ?? r.json;
-}
-function errText2(r) {
-  const e = r.json.error;
-  if (!e) return `${r.status}`;
-  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
-hint: ${e.hint}` : ""}`;
-}
 function parseScopes(raw) {
   const list = (raw ?? "").split(",").map((s) => s.trim()).filter(Boolean);
   if (!list.length) {
@@ -11133,9 +11986,9 @@ async function mintKeyViaSession(dash, cookie, tenantId, req) {
   );
   if (r.status === 401) return { unauthorized: true };
   if (r.status !== 201 && r.status !== 200) {
-    throw new Error(`could not mint the key (${errText2(r)})`);
+    throw new Error(`could not mint the key (${errText(r)})`);
   }
-  const d = data2(r);
+  const d = data(r);
   if (!d.api_key || !d.key_id) throw new Error("mint returned no api_key");
   return {
     result: {
@@ -11151,14 +12004,14 @@ async function mintKeyViaSession(dash, cookie, tenantId, req) {
 async function listKeysViaSession(dash, cookie, tenantId) {
   const r = await dash("GET", `/dashboard/tenants/${tenantId}/api-keys`, void 0, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 200) throw new Error(`could not list keys (${errText2(r)})`);
-  return { keys: data2(r).keys ?? [] };
+  if (r.status !== 200) throw new Error(`could not list keys (${errText(r)})`);
+  return { keys: data(r).keys ?? [] };
 }
 async function revokeKeyViaSession(dash, cookie, tenantId, keyId) {
   const r = await dash("DELETE", `/dashboard/tenants/${tenantId}/api-keys/${encodeURIComponent(keyId)}`, void 0, cookie);
   if (r.status === 401) return { unauthorized: true };
   if (r.status === 404) throw new Error(`no active key '${keyId}' on this project (already revoked, or not this project's) \u2014 \`vxil keys list\` shows the ids`);
-  if (r.status !== 200) throw new Error(`could not revoke the key (${errText2(r)})`);
+  if (r.status !== 200) throw new Error(`could not revoke the key (${errText(r)})`);
   return { revoked: true };
 }
 function parseToolPermsFlags(f) {
@@ -11186,8 +12039,8 @@ async function setKeyToolPermsViaSession(dash, cookie, tenantId, keyId, patch) {
   const r = await dash("PATCH", `/dashboard/tenants/${tenantId}/api-keys/${encodeURIComponent(keyId)}`, patch, cookie);
   if (r.status === 401) return { unauthorized: true };
   if (r.status === 404) throw new Error(`no active key '${keyId}' on this project (revoked, or not this project's) \u2014 \`vxil keys list\` shows the ids`);
-  if (r.status !== 200) throw new Error(`could not update the key's tool permissions (${errText2(r)})`);
-  const d = data2(r);
+  if (r.status !== 200) throw new Error(`could not update the key's tool permissions (${errText(r)})`);
+  const d = data(r);
   return { key_id: d.key_id ?? keyId, allowed_tools: d.allowed_tools ?? null, denied_tools: d.denied_tools ?? null };
 }
 function renderToolPerms(p) {
@@ -11269,20 +12122,11 @@ function renderKeyTable(keys, currentKeyId) {
 }
 
 // src/account.ts
-function data3(r) {
-  return r.json.data ?? r.json;
-}
-function errText3(r) {
-  const e = r.json.error;
-  if (!e) return `${r.status}`;
-  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
-hint: ${e.hint}` : ""}`;
-}
 async function showAccountViaSession(dash, cookie) {
   const r = await dash("GET", "/dashboard/me", void 0, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 200) throw new Error(`could not read the account (${errText3(r)})`);
-  const d = data3(r);
+  if (r.status !== 200) throw new Error(`could not read the account (${errText(r)})`);
+  const d = data(r);
   return {
     account: {
       id: String(d.id ?? ""),
@@ -11311,8 +12155,8 @@ function parseAccountPatch(f) {
 async function updateAccountViaSession(dash, cookie, patch) {
   const r = await dash("PATCH", "/dashboard/me", patch, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 200) throw new Error(`could not update the account (${errText3(r)})`);
-  const d = data3(r);
+  if (r.status !== 200) throw new Error(`could not update the account (${errText(r)})`);
+  const d = data(r);
   return { locale: d.locale ?? patch.locale ?? "en", display_name: d.display_name ?? null };
 }
 function parsePasswordStdin(raw) {
@@ -11325,19 +12169,19 @@ function parsePasswordStdin(raw) {
 async function changePasswordViaSession(dash, cookie, pw) {
   const r = await dash("POST", "/dashboard/password", { current_password: pw.current, new_password: pw.next }, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 200) throw new Error(`password not changed (${errText3(r)})`);
+  if (r.status !== 200) throw new Error(`password not changed (${errText(r)})`);
   return { changed: true };
 }
 async function logoutViaSession(dash, cookie) {
   const r = await dash("POST", "/dashboard/logout", void 0, cookie);
   if (r.status >= 200 && r.status < 300) return { revoked: true };
-  return { revoked: false, detail: errText3(r) };
+  return { revoked: false, detail: errText(r) };
 }
 async function listInvitesViaSession(dash, cookie) {
   const r = await dash("GET", "/dashboard/invites", void 0, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 200) throw new Error(`could not list invite codes (${errText3(r)})`);
-  const d = data3(r);
+  if (r.status !== 200) throw new Error(`could not list invite codes (${errText(r)})`);
+  const d = data(r);
   return {
     codes: d.codes ?? [],
     total: d.total ?? (d.codes ?? []).length,
@@ -11353,8 +12197,8 @@ function parseInviteCount(raw) {
 async function generateInvitesViaSession(dash, cookie, count) {
   const r = await dash("POST", "/dashboard/invites", count === void 0 ? {} : { count }, cookie);
   if (r.status === 401) return { unauthorized: true };
-  if (r.status !== 201 && r.status !== 200) throw new Error(`could not generate invite codes (${errText3(r)})`);
-  const d = data3(r);
+  if (r.status !== 201 && r.status !== 200) throw new Error(`could not generate invite codes (${errText(r)})`);
+  const d = data(r);
   return { codes: d.codes ?? [], count: d.count ?? (d.codes ?? []).length };
 }
 function renderAccount(a, host) {
@@ -11375,17 +12219,11 @@ function renderInvites(l) {
 }
 
 // src/configDrafts.ts
-function errText4(r) {
-  const e = r.body.error;
-  if (!e) return `${r.status}`;
-  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
-hint: ${e.hint}` : ""}`;
-}
 var enc = encodeURIComponent;
 async function showDraft(api, feature) {
   const r = await api("GET", `/v1/config/${enc(feature)}/draft`);
   if (r.status === 404) return { none: true };
-  if (r.status !== 200) throw new Error(`could not read the ${feature} draft (${errText4(r)})`);
+  if (r.status !== 200) throw new Error(`could not read the ${feature} draft (${apiErrText(r)})`);
   const d = r.body.data ?? {};
   const draft = {
     feature,
@@ -11396,7 +12234,7 @@ async function showDraft(api, feature) {
   };
   const cur = await api("GET", `/v1/config/${enc(feature)}`);
   if (cur.status !== 200 && cur.status !== 404) {
-    throw new Error(`could not read the active ${feature} config to compare (${errText4(cur)})`);
+    throw new Error(`could not read the active ${feature} config to compare (${apiErrText(cur)})`);
   }
   const active = cur.status === 200 ? cur.body.data?.manifest ?? {} : {};
   const activeVersion = cur.status === 200 ? cur.body.data?.version ?? null : null;
@@ -11404,13 +12242,13 @@ async function showDraft(api, feature) {
 }
 async function saveDraft(api, feature, manifest) {
   const r = await api("PUT", `/v1/config/${enc(feature)}/draft`, manifest);
-  if (r.status !== 200) throw new Error(`draft not saved (${errText4(r)})`);
+  if (r.status !== 200) throw new Error(`draft not saved (${apiErrText(r)})`);
   return { feature, manifest: r.body.data?.manifest ?? manifest };
 }
 async function publishDraft(api, feature) {
   const r = await api("POST", `/v1/config/${enc(feature)}/draft/publish`);
   if (r.status === 404) throw new Error(`no ${feature} draft to publish \u2014 \`vxil config draft save ${feature}\` stages one`);
-  if (r.status !== 200) throw new Error(`draft not published (${errText4(r)})`);
+  if (r.status !== 200) throw new Error(`draft not published (${apiErrText(r)})`);
   const d = r.body.data ?? {};
   const apiState = d.api_state;
   return {
@@ -11421,7 +12259,7 @@ async function publishDraft(api, feature) {
 async function discardDraft(api, feature) {
   const r = await api("DELETE", `/v1/config/${enc(feature)}/draft`);
   if (r.status === 404) return { discarded: false };
-  if (r.status !== 200) throw new Error(`draft not discarded (${errText4(r)})`);
+  if (r.status !== 200) throw new Error(`draft not discarded (${apiErrText(r)})`);
   return { discarded: true };
 }
 function parseVersion(raw) {
@@ -11433,7 +12271,7 @@ function parseVersion(raw) {
 async function duplicateToDraft(api, feature, version) {
   const r = await api("POST", `/v1/config/${enc(feature)}/versions/${version}/duplicate`);
   if (r.status === 404) throw new Error(`${feature} has no published version ${version} \u2014 \`vxil versions ${feature}\` lists them`);
-  if (r.status !== 200) throw new Error(`could not copy version ${version} into a draft (${errText4(r)})`);
+  if (r.status !== 200) throw new Error(`could not copy version ${version} into a draft (${apiErrText(r)})`);
   return {
     feature,
     manifest: r.body.data?.manifest ?? {},
@@ -11467,21 +12305,15 @@ function draftFromJson(text, file) {
 }
 
 // src/functionsSwitch.ts
-function errText5(r) {
-  const e = r.body.error;
-  if (!e) return `${r.status}`;
-  return `${e.code ?? r.status}${e.message ? ` \u2014 ${e.message}` : ""}${e.hint ? `
-hint: ${e.hint}` : ""}`;
-}
 async function liveFunctionNames(api) {
   const r = await api("GET", "/v1/functions");
-  if (r.status !== 200) throw new Error(`could not list the deployed functions (${errText5(r)})`);
+  if (r.status !== 200) throw new Error(`could not list the deployed functions (${apiErrText(r)})`);
   const fns = r.body.data?.functions ?? [];
   return fns.map((f) => String(f.name ?? "")).filter(Boolean);
 }
 async function enableFunction(api, name) {
   const r = await api("POST", `/v1/functions/${encodeURIComponent(name)}/enable`);
-  if (r.status !== 200) throw new Error(`could not enable '${name}' (${errText5(r)})`);
+  if (r.status !== 200) throw new Error(`could not enable '${name}' (${apiErrText(r)})`);
   const deployed = (await liveFunctionNames(api)).includes(name);
   return { cleared: true, deployed };
 }
@@ -11489,7 +12321,7 @@ async function disableFunction(api, name, opts = {}) {
   if (!(await liveFunctionNames(api)).includes(name)) return { wasDeployed: false };
   if (opts.confirm) await opts.confirm();
   const r = await api("DELETE", `/v1/functions/${encodeURIComponent(name)}`);
-  if (r.status !== 200) throw new Error(`could not disable '${name}' (${errText5(r)})`);
+  if (r.status !== 200) throw new Error(`could not disable '${name}' (${apiErrText(r)})`);
   const v = r.body.data?.version;
   return { wasDeployed: true, version: typeof v === "number" ? v : null };
 }
@@ -12834,9 +13666,9 @@ function buildItem(row2, mapping, state, tableByCollection, resolve8) {
 }
 function holdsContent(stored, item, storageTargets) {
   if (stored === null || typeof stored !== "object" || Array.isArray(stored)) return false;
-  const data4 = stored;
+  const data2 = stored;
   return Object.entries(item.full).every(([k, v]) => {
-    const cur = rowHash(data4[k] ?? null);
+    const cur = rowHash(data2[k] ?? null);
     return cur === rowHash(v) || storageTargets.has(k) && cur === rowHash(item.hashInput[k]);
   });
 }
@@ -12927,8 +13759,8 @@ async function loadCmsTable({ deps, plan, mapping, adapter, state, save, pkColum
               if (holdsContent(stored, item, storageTargets)) {
                 hashes[sourceId] = h;
                 const { patch } = storagePatch(row2, storageFields, resolve8);
-                const data4 = stored;
-                if (Object.entries(patch).every(([k, oid]) => data4[k] === oid)) noteStorage(sourceId, row2);
+                const data2 = stored;
+                if (Object.entries(patch).every(([k, oid]) => data2[k] === oid)) noteStorage(sourceId, row2);
                 unhashedSame++;
                 result.skipped++;
                 continue;
@@ -15859,8 +16691,8 @@ export default defineConfig({
     ],
     "hasFunctions": true,
     "byoKeys": [],
-    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Funnel SaaS\" \u2014 the STUDIO STARTER. A web-first funnel product, declared\n// end-to-end in ONE typed file:\n//\n//   guest session \u2192 guided steps \u2192 e-mail claim \u2192 account \u2192 pass \u2192 AI brief\n//\n// What it composes (every block is a shipped feature; nothing here is a\n// platform primitive you would have to build):\n//   \u2022 auth          \u2192 anonymous sign-in for the visitor, an OTP e-mail claim that\n//                     PROMOTES the guest in place (same id, same rows), a session\n//                     pair the server refreshes behind a long-lived cookie\n//   \u2022 cms           \u2192 two owner-scoped collections behind `strictEndUserScope`:\n//                     a signed-in visitor sees ONLY their own rows, and a\n//                     collection without an owner field is server-only\n//   \u2022 rate-limits   \u2192 two policies DECLARED here, converged by `vxil push`\n//   \u2022 webhooks      \u2192 failure alerts to the owners + ONE declared outbound\n//                     subscription for your ops endpoint\n//   \u2022 ai            \u2192 a stored prompt template DECLARED here; the brief runs on\n//                     the job lane with a `correlation_id` = the session row id\n//   \u2022 payments      \u2192 a payments INTEGRATION: your own provider account (mock\n//                     here), vxil never in the flow of funds\n//   \u2022 functions     \u2192 three event-driven functions (below)\n// Everything here is DATA the tenant owns and edits after `vxil init`.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    auth: {\n      // Visitors never see a password form: a guest session first, an e-mail\n      // code to claim it later (magic link stays on as the alternative).\n      methods: { emailPassword: false, magicLink: true },\n      anonymous: { enabled: true },\n      // The claim rides the OTP machinery (POST /v1/auth/anonymous/link/request\n      // + /verify). `testRecipients` is where your CI address goes \u2014 a listed\n      // address gets no mail and the 202 carries `test_code`.\n      otp: { enabled: true, codeTtlMinutes: 10, maxAttempts: 5, resendCooldownSec: 60 },\n      // The pair your server middleware rotates (README: \"keep the token fresh\").\n      session: { ttlMinutes: 60, refreshTtlDays: 30 },\n    },\n\n    cms: {\n      // A funnel row is live the moment it is written \u2014 no editorial draft step.\n      draftPublish: false,\n      // THE FAIL-SAFE. In end-user mode a collection with no `ownerField` is\n      // server-only (403 server_only on read AND write) instead of\n      // tenant-wide-shared. Every collection below declares an owner, so a\n      // visitor can only ever reach their own rows; a collection you add later\n      // without one is closed to them until you say otherwise.\n      strictEndUserScope: true,\n      hooks: {\n        // Steps only move forward \u2014 a client cannot rewind a completed intake.\n        // (`coalesce` so a row created without a step can still be stepped.)\n        steps_forward_only: {\n          collection: 'funnel_sessions',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: 'coalesce(item.step, 0) >= coalesce(before.step, 0)',\n          message: 'steps only move forward',\n        },\n        // The session state machine: in_progress \u2192 completed, and completed is\n        // terminal (the brief function flips it; nothing flips it back).\n        session_transition: {\n          collection: 'funnel_sessions',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: \"item.status == before.status || (before.status == 'in_progress' && item.status == 'completed')\",\n          message: 'illegal session status transition',\n        },\n        // A pass is bound to the charge that paid for it, forever.\n        pass_charge_immutable: {\n          collection: 'passes',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: 'item.charge_id == before.charge_id',\n          message: 'a pass keeps the charge that paid for it',\n        },\n      },\n    },\n\n    // Auth mail (the claim code) and the \"your brief is ready\" message ride\n    // this. `mock` needs no account; point it at your own provider to go live.\n    notifications: { provider: 'mock', fromEmail: 'hello@studio.example' },\n\n    // DECLARED API STATE #1 \u2014 rate-limit policies. These used to be rows you\n    // created by hand with POST /v1/rate-limits/policies and re-created in every\n    // environment; now `vxil push` converges the live set onto this list by\n    // name (creates what is missing, patches what differs, REPORTS what you did\n    // not declare). Your server checks them with POST /v1/rate-limits/check.\n    'rate-limits': {\n      enabled: true,\n      policies: [\n        // one visitor, thirty step writes a minute \u2014 enough for a human, not a loop\n        { name: 'funnel-step', key_template: '{tenant_id}:{user_id}', limit: 30, window_seconds: 60 },\n        // three claim codes per address per ten minutes; pass a HASH of the\n        // address as `email_hash`, never the address itself (it becomes a key)\n        { name: 'claim-request', key_template: '{tenant_id}:{email_hash}', limit: 3, window_seconds: 600, behavior: 'block' },\n      ],\n    },\n\n    webhooks: {\n      enabled: true,\n      // FAILURE ALERTS. Every error-level failure event in this backend (a dead\n      // delivery, a failed generation, a missed schedule) is digested into a\n      // mail to the project's owner accounts every 15 minutes. Recipients are\n      // deliberately not configurable; `digestMinutes: 0` makes it immediate.\n      alerts: { enabled: true, minLevel: 'error', digestMinutes: 15 },\n      // DECLARED API STATE #2 \u2014 an outbound subscription. Converged by\n      // target_url on push; a live row you did not declare is left and\n      // reported. The three function triggers below are NOT declared here \u2014\n      // their subscriptions derive from the functions manifest.\n      subscriptions: [\n        { target_url: 'https://ops.studio.example/vxil/events', event_prefixes: ['payments.', 'auth.user.'] },\n      ],\n    },\n\n    ai: {\n      enabled: true,\n      defaultProvider: 'mock', // BYO key later: providers.openaiKeyRef / anthropicKeyRef / geminiKeyRef\n      defaults: { maxTokens: 800, temperature: 0.4 },\n      // DECLARED API STATE #3 \u2014 the stored prompt template. Converged by\n      // CONTENT: a push stores a new version only when the text changed, so\n      // pushes are idempotent and versions stay monotonic. vxil stores and\n      // renders it; the wording is yours.\n      templates: [\n        {\n          template: 'studio-brief',\n          system:\n            'You are a senior brand strategist. Write in plain, confident English. ' +\n            'Never invent facts about the client; when something is unknown, say what you would need.',\n          user:\n            'Write a one-page creative brief for a studio client.\\n\\n' +\n            'Goal: {{goal}}\\nAudience: {{audience}}\\nTone: {{tone}}\\nConstraints: {{constraints}}\\n\\n' +\n            'Sections: Objective, Audience insight, Key message, Deliverables, Next steps.',\n        },\n      ],\n    },\n\n    // The job lane the brief runs on. `retry` is the ladder for JOB RUNS \u2014 the\n    // generation itself, and deliveries to your own endpoints. It is NOT a\n    // retry of what a platform-delivered function ANSWERS: the dispatcher ACKs\n    // every trigger delivery with a 200 whatever the function returned (guide\n    // 08, \"What is retried, and what is not\"), so the three functions below\n    // make their failures recoverable through the rows they own \u2014 a 5xx from\n    // one of them is observed (`functions.run.failed` \u2192 `webhooks.alerts`),\n    // never re-delivered.\n    jobs: { enabled: true, retry: { defaultMaxAttempts: 3 } },\n\n    // A payments INTEGRATION: the tenant's own Stripe/Paddle/PayPal/RevenueCat\n    // account; vxil is never in the flow of funds. `mock` needs no account and\n    // runs everything UP TO the paywall \u2014 push, deploy, the intake, the claim\n    // and every refusal (402 pass_required, 409 intake_incomplete). It cannot\n    // put a PAID charge on the ledger: its checkout URL is a placeholder, its\n    // webhooks are signed with the platform's secret, and\n    // `vx.payments.simulate` scripts subscriptions, not one-off charges \u2014 so on\n    // `mock` grant-pass never wakes and start-brief answers 402 to everyone.\n    // The paid path needs your provider's sandbox (README, \"Running the paid\n    // path\"), e.g. a Stripe test-mode account:\n    //   payments: { enabled: true, provider: 'stripe', defaults: { currency: 'usd' },\n    //     stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' } },\n    payments: { enabled: true, provider: 'mock', defaults: { currency: 'usd' } },\n\n    functions: { enabled: true },\n  },\n\n  // \u2500\u2500 Schema-as-code (\u22648 index slots per collection: s1\u2013s4/n1\u2013n2/t1\u2013t2) \u2500\u2500\u2500\u2500\u2500\u2500\n  cms: {\n    collections: {\n      // One row per visitor intake. Created and stepped by the browser as the\n      // (guest, then claimed) end-user; completed and settled by functions.\n      funnel_sessions: {\n        singular: 'funnel_session',\n        // The owner. In end-user mode the platform STAMPS this with the verified\n        // user id on create and scopes every read/patch/delete to it \u2014 a body\n        // naming someone else is a 400, and a foreign row is an honest 404.\n        ownerField: 'user',\n        fields: {\n          user: { type: 'string', required: true, indexSlot: 's1' },\n          status: { type: 'string', indexSlot: 's2', validation: { enum: ['in_progress', 'completed'] } },\n          generation_id: { type: 'string', indexSlot: 's3' }, // the job-lane generation that owns the result\n          result_status: { type: 'string', indexSlot: 's4', validation: { enum: ['queued', 'completed', 'failed'] } },\n          step: { type: 'int', indexSlot: 'n1', validation: { min: 1, max: 4 } }, // 1..4, forward only\n          started_at: { type: 'datetime', indexSlot: 't1' },\n          completed_at: { type: 'datetime', indexSlot: 't2' },\n          answers: { type: 'json' }, // { goal, audience, tone, constraints } \u2014 the template's inputs\n          result: { type: 'text' }, // the settled brief\n          error_hint: { type: 'string' }, // the provider's own words when the brief failed\n        },\n      },\n\n      // One row per PAID pass, written by the grant function on the provider's\n      // charge event. `charge_id` is the dedupe anchor: an at-least-once\n      // redelivery of the same charge is a clean 409 the function treats as\n      // \"already granted\". It is the DISPLAY RECORD, never the entitlement: the\n      // collection is owned, so the visitor's own thin-client key (cms:write)\n      // can create a pass or stretch its expires_at \u2014 start-brief decides from\n      // the owner-bound payments ledger instead.\n      passes: {\n        singular: 'pass',\n        ownerField: 'user',\n        fields: {\n          user: { type: 'string', required: true, indexSlot: 's1' },\n          charge_id: { type: 'string', required: true, unique: true, indexSlot: 's2' },\n          product: { type: 'string', indexSlot: 's3' },\n          amount_cents: { type: 'int', indexSlot: 'n1' },\n          granted_at: { type: 'datetime', indexSlot: 't1' },\n          expires_at: { type: 'datetime', indexSlot: 't2' }, // the brief function's range filter\n        },\n      },\n    },\n  },\n\n  // \u2500\u2500 The domain logic that ISN'T config: three event-driven functions \u2500\u2500\u2500\u2500\u2500\u2500\n  functions: {\n    // THE BRIEF. Invoked by the browser AS THE SIGNED-IN VISITOR\n    // (vx.asEndUser(token).fn['start-brief']({ session_id })): the end-user\n    // principal rides into the function, so its cms reads are owner-scoped and\n    // the generation is billed to that user. Requires a PAID pass, read from\n    // the owner-bound ledger (`payments:read`) on every call \u2014 never from the\n    // visitor-writable `passes` row, which it re-writes as the record when a\n    // grant delivery was lost; CLAIMS the row with If-Match before spending\n    // anything (a double click is one generation);\n    // starts the brief on the ai JOB lane with correlation_id = the session row id.\n    'start-brief': {\n      entry: './functions/start-brief.ts',\n      trigger: { kind: 'http' },\n      scopes: ['cms:read', 'cms:write', 'ai:write', 'payments:read'],\n      egressAllow: [],\n      signature: {\n        input: { session_id: 'string' },\n        // Two 202 answers, so the output is a whole TS type (a union): a new\n        // brief's handle, or `already_queued` when one is running \u2014 whose\n        // generation_id is null while that claim has not recorded its handle.\n        output:\n          '{ generation_id: string; run_id: string; correlation_id: string }' +\n          \" | { generation_id: string | null; status: 'already_queued' }\",\n      },\n    },\n\n    // THE GRANT. Woken by ONE platform event \u2014 `payments.charge.succeeded`, the\n    // full event name as the `source` \u2014 a few seconds after your provider's\n    // webhook folds. Re-reads the charge from the ledger (the event name is a\n    // routing claim, not an attestation), then writes the pass. A 5xx from it\n    // is ACKed and observed, not re-delivered \u2014 start-brief decides from the\n    // same ledger, so a lost grant never blocks a payer.\n    'grant-pass': {\n      entry: './functions/grant-pass.ts',\n      trigger: { kind: 'webhook', source: 'payments.charge.succeeded' },\n      scopes: ['payments:read', 'cms:write'],\n      egressAllow: [],\n    },\n\n    // THE SETTLE. Woken by the `job.generation.` prefix \u2014 completed AND failed \u2014\n    // and finds its own row through the event's `correlation_id` (no run\u2192record\n    // table of your own). On completed: the brief text from the replay buffer\n    // + a \"ready\" message. On failed: `error_hint` \u2014 the provider's own words \u2014\n    // onto the row, so the visitor sees why, not just that. A settle that\n    // cannot complete marks the row `failed` (the retry is one click) \u2014 the\n    // delivery is ACKed whatever it answers, so recovery lives in the row.\n    'settle-brief': {\n      entry: './functions/settle-brief.ts',\n      trigger: { kind: 'webhook', source: 'job.generation.' },\n      scopes: ['cms:read', 'cms:write', 'ai:read', 'notifications:send'],\n      egressAllow: [],\n    },\n  },\n});\n",
-    "readme": "# Funnel SaaS \u2014 the studio starter (saas)\n\nThe **web-first funnel** blueprint: a visitor lands, starts as a **guest**, walks a guided intake,\n**claims** the session with an e-mail code, buys a **pass** through your own payments provider,\nand gets an AI-written brief **settled back onto their record** \u2014 all of it declared in one typed\n`vxil.config.ts`, with three small functions for the parts that are code.\n\nIt is the shape most \"studio\" products have \u2014 a lead magnet, a paid deliverable, an account that\nonly exists once someone cares \u2014 and it is also the blueprint that shows **declared API state**:\nrate-limit policies, an outbound subscription and a stored prompt template live in the config and\nconverge on `vxil push`, so a second environment is a push, not a runbook.\n\n```bash\nvxil init --template funnel-saas\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nvxil push                             # collections + hooks + the three functions + the declared API state\nvxil gen                              # typed SDK: vx.from('funnel_sessions'), vx.fn['start-brief']\n```\n\n**What it provisions:**\n- `funnel_sessions` \u2014 `user` (the **owner field**), `status` (`in_progress \u2192 completed`, hook-guarded),\n  `step` (1\u20134, forward only), `answers` (json), then the brief's `generation_id`, `result_status`\n  (`queued | completed | failed`), `result` and `error_hint`.\n- `passes` \u2014 `user` (owner), `charge_id` (**unique** \u2014 the dedupe anchor), `product`, `amount_cents`,\n  `granted_at`, `expires_at`. The record the page shows \u2014 the payments ledger is the entitlement.\n- Features: `auth` (guest + OTP claim + a refreshable session pair) \xB7 `cms` (**`strictEndUserScope: true`**) \xB7\n  `rate-limits` (two **declared policies**) \xB7 `webhooks` (**`alerts` on** + one **declared subscription**) \xB7\n  `ai` (one **declared template**) \xB7 `jobs` \xB7 `payments` (a payments **integration** \u2014 your provider; `mock`\n  here, which runs everything *up to* the paywall \u2014 [Running the paid path](#running-the-paid-path)) \xB7\n  `notifications` (`mock`) \xB7 `functions`.\n- Functions: `start-brief` (http, invoked as the visitor), `grant-pass` (webhook on\n  `payments.charge.succeeded`), `settle-brief` (webhook on the `job.generation.` prefix).\n\n## The funnel, step by step\n\nEvery call below is the browser talking to your backend \u2014 with **two keys**, the way\nvxil.com/docs/guide/09-security-and-multitenancy prescribes: a **sign-in key** (the ordinary class,\ncarrying only `auth:signin`) for the moment *before* there is a session, and a **thin-client key**\n(`key_class: 'public'` \u2014 `cms:read`, `cms:write`, `functions:invoke`) for everything after, which the\nedge refuses unless it rides with a valid end-user token. A public key *cannot* carry `payments:write`\n(a `422` at mint), so the checkout is the one call your server makes \u2014 the last section.\n\n```ts\nimport { Vxil } from '@vxil/sdk';\nconst signin = Vxil.connect({ apiKey: SIGNIN_KEY });        // auth:signin only \u2014 works with no session\nconst thin = Vxil.connect({ apiKey: THIN_CLIENT_KEY });     // public class \u2014 needs a session on every call\n\n// 1. A guest. Real user id, real session, no e-mail yet (the token carries `anon: true`).\nconst guest = await signin.auth.anonymous.signIn();\nconst me = thin.asEndUser(guest.session.token);\n\n// 2. The intake. Owner-scoped: the platform stamps `user` with the guest's id on create,\n//    and this session (and only this session) can read and step the row.\nconst { item_id: session_id } = await me.from('funnel_sessions').create({\n  status: 'in_progress', step: 1, started_at: new Date().toISOString(),\n  answers: { goal: 'Launch a coffee subscription' },\n});\nawait me.from('funnel_sessions').patch(session_id, { step: 2, answers: { goal: '\u2026', audience: '\u2026' } });\n// \u2026steps 3 and 4. A PATCH that moves `step` backwards is a 422 from the `steps_forward_only` hook.\n\n// 3. The claim. A 6-digit code proves the address; the guest is PROMOTED IN PLACE \u2014\n//    same user id, so the intake rows are already theirs. (Sign-in class: the sign-in key.)\nawait signin.auth.anonymous.link.request({ token: guest.session.token, email: 'ada@example.com' });\nconst claimed = await signin.auth.anonymous.link.verify({ token: guest.session.token, email: 'ada@example.com', code: '123456' });\n// claimed.user_id === guest.user_id \u2014 unless the address already had an account: then\n// `merged: true`, a fresh session, and `rekeyed` says whether the guest's rows moved already.\n\n// 4. The pass \u2014 only after the claim. Your SERVER refuses a guest, creates the hosted checkout\n//    (below) and hands the URL back; the provider's webhook folds the charge \u2192\n//    `payments.charge.succeeded` \u2192 grant-pass writes the pass record.\n\n// 5. The brief. Invoked AS THE VISITOR: the function's reads are owner-scoped and the\n//    generation is metered to them. Until the visitor's ledger holds a paid charge the call\n//    throws a VxilError whose `.code` is 'pass_required' (402); an unfinished intake is\n//    'intake_incomplete' (409).\nconst handle = await me.fn['start-brief']({ session_id });\n// \u2192 { generation_id, run_id, correlation_id } for a new brief, or \u2014 a second click while one\n//    is running \u2014 { generation_id, status: 'already_queued' }: one generation, metered once,\n//    and `generation_id` is null while that attempt has not recorded its handle yet (the\n//    declared signature is that union). Either way, watch the ROW, not the handle:\n// \u2026seconds to minutes later, settle-brief writes `result` (or `error_hint`) onto the row and\n//    notifications delivers \"Your brief is ready\". A failed brief can be started again: the\n//    same call on a row whose result_status is 'failed' queues a new generation.\n```\n\n## What to learn from this\n\n- **`strictEndUserScope: true` is the fail-safe version of owner scoping.** Both collections declare an\n  `ownerField`, so a signed-in visitor reaches exactly their own rows; a collection you add later *without*\n  one is `403 server_only` for end-users on read and write instead of tenant-wide-shared. Nothing about a\n  server call changes \u2014 a server key still sees everything\n  (vxil.com/docs/guide/09-security-and-multitenancy).\n- **A guest is a real end-user.** `vx.auth.anonymous.signIn()` mints a real id; owner-scoped rows written\n  before the claim stay attached because the OTP claim (`POST /v1/auth/anonymous/link/request` + `/verify`)\n  promotes the guest in place. Passing the guest's token as `anonymous_token` on a magic-link request does\n  the same through mail (vxil.com/docs/guide/06-feature-catalog).\n- **Declared API state.** Three things that used to be rows you created by hand \u2014 and re-created in every\n  environment \u2014 are config now, and `vxil push` converges the live rows onto them, reporting (never\n  deleting) what you did not declare:\n\n  | Block | Converged by | The live rows it replaces |\n  |---|---|---|\n  | `features['rate-limits'].policies[]` | `name` | `POST /v1/rate-limits/policies` |\n  | `features.webhooks.subscriptions[]` | `target_url` | `POST /v1/webhooks/subscriptions` |\n  | `features.ai.templates[]` | content hash | `POST /v1/ai/templates` (a new version only when the text changed) |\n\n  The three function triggers are *not* declared here \u2014 a `webhook`-trigger binding on a function is its\n  own declaration, and the platform reconciles that subscription from the functions manifest.\n- **An event-driven grant, done honestly.** `grant-pass` wakes on the full event name\n  `payments.charge.succeeded` a few seconds after your provider's webhook folds. The event name is a\n  *routing claim*, so the function re-reads the ledger (`GET /v1/payments/charges`) before writing; the\n  `passes.charge_id` unique field (the ledger's charge id) turns an at-least-once redelivery into a `409`\n  it reads as \"already granted\". And it is honest about **what is not retried**: the dispatcher ACKs a\n  platform-delivered function with a `200` *whatever it answered*, so a `5xx` from the API is never\n  re-delivered \u2014 it is *observed* (`functions.run.failed`, once per failure streak, in the\n  `webhooks.alerts` digest), and recovery is data, not delivery: `start-brief` decides from the same\n  owner-bound ledger on every request, so a lost grant never blocks a payer, and it writes the missing\n  pass record for that charge (a `409` there just means it is recorded already)\n  (vxil.com/docs/guide/08-running-your-code-functions).\n- **An owned row the visitor can write is never an entitlement.** `passes` declares an `ownerField`, so\n  the thin-client key (`cms:write`) lets a visitor *create* a pass of their own or PATCH its\n  `expires_at` to 2099 \u2014 the platform stamps them as the owner, which proves who wrote the row, not that\n  anyone paid, and a write hook's `caller` is always `null`, so no hook can tell that write from\n  `grant-pass`'s (vxil.com/docs/guide/07-validation-and-hooks). So `start-brief` never reads `passes` to\n  decide: on every call it reads `GET /v1/payments/charges?status=succeeded` as the visitor (bound to\n  the verified principal; no key a browser holds can write the ledger) and needs a succeeded, unrefunded\n  charge from the last 365 days. The pass row is what the page *shows*; the ledger is what it *checks*.\n- **`correlation_id` closes the loop.** `start-brief` sends the session row id as `correlation_id` on\n  `POST /v1/ai/generate` (`mode: 'job'`); the platform echoes it on `job.generation.completed` /\n  `job.generation.failed` next to `generation_id`, so `settle-brief` finds its own row from the event alone.\n  On `failed` it writes **`error_hint`** \u2014 the provider's own status and message \u2014 onto the row, so the\n  visitor sees *why* (and `start-brief` accepts that row again, so a retry is one more click); on\n  `completed` the text comes from the generation's replay buffer\n  (`GET /v1/ai/generations/{generation_id}/stream?since=0`). Every settle write carries\n  `if: { generation_id }`, so a late delivery for an earlier attempt can never overwrite a newer one; and a\n  settle that cannot complete marks the row `failed` with `settle failed: <reason>` instead of answering a\n  status nothing will act on \u2014 the row, not the delivery, is where recovery lives.\n- **The claim comes before the spend.** `start-brief` reads the row's `version`, PATCHes\n  `result_status: 'queued'` with `If-Match: <version>`, and only then calls generate. A double click that\n  lands inside the generate round-trip loses the compare-and-set with `409 version_conflict` and gets a\n  `202 already_queued` \u2014 one generation, one credit reserve. A claim whose generate never recorded, or a\n  queued handle older than the job lane's ceiling, is treated as failed on the next click, so a row can\n  never stick in `queued`. Every write after the claim (recording the handle, marking a failure) carries\n  `If-Match: <the claim's version>`, so an attempt the next click already swept can never overwrite the\n  newer claim \u2014 its `409` means \"the row moved on\", and it steps aside without a write.\n- **Function errors are coded.** Every refusal a function answers is `{ error: { code, message } }` \u2014\n  `POST /v1/fn/:name` hands that body back verbatim, and the SDK raises it as a `VxilError` whose `.code`\n  is the function's own (`pass_required`, `intake_incomplete`, `already_settled`), so a page branches on a\n  code, never on a message. The platform-delivered functions answer `200 { skipped }` for a decision, and a\n  `500` with a code (`unsettled`, `grant_unsettled`) only when not even the row could record the failure \u2014\n  not to be retried (nothing re-delivers it) but to be *seen* through `functions.run.failed`.\n- **Failure alerts are on.** `webhooks.alerts` mails the project's owner accounts every 15 minutes with the\n  error-level failure events \u2014 a dead delivery, a failed generation, a missed schedule. Recipients are\n  deliberately not configurable; `digestMinutes: 0` makes it immediate.\n- **The payments feature is an integration.** Your Stripe, Paddle, PayPal or RevenueCat account, the\n  provider's hosted checkout, the provider's webhook; vxil folds the events and keeps the ledger. The\n  scaffold's `mock` provider stops at the paywall, so the paid path runs on your provider's sandbox \u2014 the\n  next section. To rehearse the grant chain without a card, Paddle's simulator signs with your real endpoint\n  secret and your `payments.` functions run for real (vxil.com/docs/guide/06-feature-catalog).\n\n## Server side: keep the visitor's token fresh\n\nA session token lives `session.ttlMinutes` (60 here); the cookie your app sets lives days. Every sign-in\nreturns a pair \u2014 the token and a `refresh_token` good for `session.refreshTtlDays` (30) \u2014 and\n`POST /v1/auth/sessions/refresh` rotates it. So a server-rendered app needs one root middleware, not a\nredesign (vxil.com/docs/guide/09-security-and-multitenancy):\n\n```ts\n// once per request, before any loader runs\nconst { token, refresh_token, expires_at } = readSessionCookie(request);\nlet session = { token, refresh_token, expires_at };\nif (Date.parse(expires_at) - Date.now() < 5 * 60_000) {          // within 5 min of expiry (or past it)\n  try {\n    session = (await vx.auth.sessions.refresh(refresh_token)).session;   // rotated pair\n    setSessionCookie(response, session);                          // store BOTH halves again\n  } catch {\n    clearSessionCookie(response);                                 // refresh revoked or expired: sign in again\n  }\n}\nconst asUser = vx.asEndUser(session.token);                       // every per-visitor read below is scoped by the platform\n```\n\nStore the refresh token only in the `HttpOnly` cookie; refresh *early* rather than on `401`, so parallel\nloaders do not race to rotate the same token; keep the server key for the tenant-wide rows only.\n\nThe same server owns the **checkout** \u2014 `POST /v1/payments/checkout-sessions` needs `payments:write`, which\na public key cannot carry, and it is server-only (a `403 server_only` in end-user mode). Three rules shape it:\n\n- **The buyer is the session, never a form field.** Ask the platform whose token it is:\n  `vx.auth.sessions.verify` answers with the account *as it is now* (`auth:read` on the server key).\n- **A guest cannot buy \u2014 claim first.** A charge stays with the user id that paid it. When a guest claims an\n  address that already has an account, the merge re-keys the guest's subscriptions, customer links and\n  credit balances onto that account (vxil.com/docs/guide/06-feature-catalog, \"What a merge moves\") \u2014 not its\n  one-off charges \u2014 and `start-brief` decides from the charges ledger. A guest who paid and *then* merged\n  would have paid for a brief the merged account can never start. So refuse the checkout until the claim:\n  `verified` is `false` while the visitor has no proven address \u2014 a guest has none, and the claim *is* the\n  proof (every other way into this blueprint, a magic link or a code, proves one too). Not the token's\n  `anon` claim: that is a snapshot from when the token was minted, not the account as it is now.\n- **One Idempotency-Key per purchase *attempt*, never per visitor.** A key the payments feature has seen\n  replays its first session verbatim, and the key never expires \u2014 so `pass:${user_id}` would hand a visitor\n  whose checkout expired, who was refunded, or who comes back after the 365-day pass the same dead URL\n  forever. Key the attempt: the buy page renders a fresh attempt id into its form, so a double click posts\n  the same id (one session), while a reload, a return from the checkout or next year's renewal renders a\n  new one. The id is not a credential \u2014 the `user_id` next to it is the verified one, so an invented id\n  only ever opens another checkout for the visitor's own account.\n\n```ts\n// the visitor is signed in (the middleware above keeps `session` fresh); the form posts `attempt`\nconst who = await vx.auth.sessions.verify(session.token);         // { user_id, verified, \u2026 } \u2014 the account NOW\nif (!who.verified) {                                              // still a guest: charges never follow a merge\n  return Response.json({ error: { code: 'claim_required', message: 'claim your e-mail before you buy' } }, { status: 409 });\n}\nconst attempt = String(form.get('attempt') ?? '');                // crypto.randomUUID(), rendered with the buy page\nif (!/^[\\w-]{16,64}$/.test(attempt)) {\n  return Response.json({ error: { code: 'bad_attempt', message: 'reload the page and try again' } }, { status: 400 });\n}\nconst { url } = await vx.payments.createCheckoutSession(\n  { user_id: who.user_id, mode: 'payment',\n    line_items: [{ price_ref: 'studio-pass', amount_cents: 4900 }],   // a real provider takes ITS price id \u2014 below\n    success_url: 'https://studio.example/thanks', cancel_url: 'https://studio.example/pass' },\n  { idempotencyKey: `pass:${who.user_id}:${attempt}` },\n);\n// redirect the visitor to `url` \u2014 a hosted checkout on YOUR provider; vxil is never in the flow of funds.\n```\n\nThe same server is where the declared rate-limit policies are checked. `POST /v1/rate-limits/check` takes a\n`policy_id`, never a name \u2014 list the policies once after the first push and keep the two ids:\n\n```ts\nconst policies = await vx.rateLimits.listPolicies();                  // RateLimitPolicy[] \u2014 \u2264100, no cursor\nconst stepPolicy = policies.find((p) => p.name === 'funnel-step')!.policy_id;\n// before forwarding a step write\nawait vx.rateLimits.check({ policy_id: stepPolicy, key_values: { user_id }, cost: 1 });   // 429 + Retry-After when blocked\n// before forwarding a claim request \u2014 a HASH of the address, never the address (it becomes a key)\nawait vx.rateLimits.check({ policy_id: claimPolicy, key_values: { email_hash: sha256(email) } });\n```\n\n## Running the paid path\n\nThe scaffold ships `payments.provider: 'mock'`, so `vxil push` works with no provider account, and\neverything but the payment runs on it: the intake, the claim, the deploy, and every refusal\n(`402 pass_required`, `409 intake_incomplete`, a guest's `claim_required`). What `mock` cannot do is put a\n**paid** charge on the ledger: its checkout URL is a placeholder host nothing serves, its webhooks are\nsigned with the platform's own secret rather than one you hold, and `vx.payments.simulate` scripts\n*subscription* lifecycles, not a one-off charge. So on `mock`, `grant-pass` never wakes and `start-brief`\nanswers `402 pass_required` to every visitor \u2014 the paywall doing its job. To run the brief end to end,\npoint the block at your provider's sandbox, in a project of its own (the signing-secret ref is one per\nprovider \u2014 vxil.com/docs/guide/06-feature-catalog):\n\n```ts\n// vxil.config.ts \u2014 a Stripe TEST-mode account (a Paddle sandbox is `provider: 'paddle'` + `paddle: { \u2026 }`)\npayments: {\n  enabled: true, provider: 'stripe', defaults: { currency: 'usd' },\n  stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' },\n},\n```\n\n```bash\nvxil secrets set payments/stripe_secret       # the test-mode secret key, at the hidden prompt\nvxil secrets set payments/stripe_webhook      # the signing secret of the endpoint below\nvxil push\n```\n\nRegister `https://api.vxil.com/v1/internal/payments/webhook/stripe/<tenantId>` as the endpoint in the\nprovider's dashboard. On a real provider `line_items[].price_ref` is the provider's own price id (Stripe\n`price_\u2026`), not `studio-pass`. Pay with the provider's test card: the charge folds \u2192\n`payments.charge.succeeded` \u2192 `grant-pass` records the pass, and the next `start-brief` queues the brief.\n\n**Go deeper:** vxil.com/docs/guide/09-security-and-multitenancy (end-user mode \xB7 `strictEndUserScope` \xB7 the\nrefresh middleware) \xB7 vxil.com/docs/guide/06-feature-catalog (auth guests and claims \xB7 rate-limits \xB7\nwebhooks alerts and declared subscriptions \xB7 ai `mode: 'job'` \xB7 payments) \xB7\nvxil.com/docs/guide/08-running-your-code-functions (the `webhook` trigger \xB7 at-least-once) \xB7\nvxil.com/docs/guide/04-data-with-cms (owner scoping \xB7 the query DSL).\n\n**Own the shape.** The config is yours after `init` \u2014 nothing is locked.\n",
+    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Funnel SaaS\" \u2014 the STUDIO STARTER. A web-first funnel product, declared\n// end-to-end in ONE typed file:\n//\n//   guest session \u2192 guided steps \u2192 e-mail claim \u2192 account \u2192 pass \u2192 AI brief\n//\n// What it composes (every block is a shipped feature; nothing here is a\n// platform primitive you would have to build):\n//   \u2022 auth          \u2192 anonymous sign-in for the visitor, an OTP e-mail claim that\n//                     PROMOTES the guest in place (same id, same rows), a session\n//                     pair the server refreshes behind a long-lived cookie\n//   \u2022 cms           \u2192 two owner-scoped collections behind `strictEndUserScope`:\n//                     a signed-in visitor sees ONLY their own rows, and a\n//                     collection without an owner field is server-only\n//   \u2022 rate-limits   \u2192 two policies DECLARED here, converged by `vxil push`\n//   \u2022 webhooks      \u2192 failure alerts to the owners + ONE declared outbound\n//                     subscription for your ops endpoint\n//   \u2022 ai            \u2192 a stored prompt template DECLARED here; the brief runs on\n//                     the job lane with a `correlation_id` = the session row id\n//   \u2022 payments      \u2192 a payments INTEGRATION: your own provider account (mock\n//                     here), vxil never in the flow of funds\n//   \u2022 functions     \u2192 three event-driven functions (below)\n// Everything here is DATA the tenant owns and edits after `vxil init`.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    auth: {\n      // Visitors never see a password form: a guest session first, an e-mail\n      // code to claim it later (magic link stays on as the alternative).\n      methods: { emailPassword: false, magicLink: true },\n      anonymous: { enabled: true },\n      // The claim rides the OTP machinery (POST /v1/auth/anonymous/link/request\n      // + /verify). `testRecipients` is where your CI address goes \u2014 a listed\n      // address gets no mail and the 202 carries `test_code`.\n      otp: { enabled: true, codeTtlMinutes: 10, maxAttempts: 5, resendCooldownSec: 60 },\n      // The pair your server middleware rotates (README: \"keep the token fresh\").\n      session: { ttlMinutes: 60, refreshTtlDays: 30 },\n    },\n\n    cms: {\n      // A funnel row is live the moment it is written \u2014 no editorial draft step.\n      draftPublish: false,\n      // THE FAIL-SAFE. In end-user mode a collection with no `ownerField` is\n      // server-only (403 server_only on read AND write) instead of\n      // tenant-wide-shared. Every collection below declares an owner, so a\n      // visitor can only ever reach their own rows; a collection you add later\n      // without one is closed to them until you say otherwise.\n      strictEndUserScope: true,\n      hooks: {\n        // Steps only move forward \u2014 a client cannot rewind a completed intake.\n        // (`coalesce` so a row created without a step can still be stepped.)\n        steps_forward_only: {\n          collection: 'funnel_sessions',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: 'coalesce(item.step, 0) >= coalesce(before.step, 0)',\n          message: 'steps only move forward',\n        },\n        // The session state machine: in_progress \u2192 completed, and completed is\n        // terminal (the brief function flips it; nothing flips it back).\n        session_transition: {\n          collection: 'funnel_sessions',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: \"item.status == before.status || (before.status == 'in_progress' && item.status == 'completed')\",\n          message: 'illegal session status transition',\n        },\n        // A pass is bound to the charge that paid for it, forever.\n        pass_charge_immutable: {\n          collection: 'passes',\n          event: 'beforeUpdate',\n          kind: 'validate',\n          expr: 'item.charge_id == before.charge_id',\n          message: 'a pass keeps the charge that paid for it',\n        },\n      },\n    },\n\n    // Auth mail (the claim code) and the \"your brief is ready\" message ride\n    // this. `mock` needs no account; point it at your own provider to go live.\n    notifications: { provider: 'mock', fromEmail: 'hello@studio.example' },\n\n    // DECLARED API STATE #1 \u2014 rate-limit policies. These used to be rows you\n    // created by hand with POST /v1/rate-limits/policies and re-created in every\n    // environment; now `vxil push` converges the live set onto this list by\n    // name (creates what is missing, patches what differs, REPORTS what you did\n    // not declare). Your server checks them with POST /v1/rate-limits/check.\n    'rate-limits': {\n      enabled: true,\n      policies: [\n        // one visitor, thirty step writes a minute \u2014 enough for a human, not a loop\n        { name: 'funnel-step', key_template: '{tenant_id}:{user_id}', limit: 30, window_seconds: 60 },\n        // three claim codes per address per ten minutes; pass a HASH of the\n        // address as `email_hash`, never the address itself (it becomes a key)\n        { name: 'claim-request', key_template: '{tenant_id}:{email_hash}', limit: 3, window_seconds: 600, behavior: 'block' },\n      ],\n    },\n\n    webhooks: {\n      enabled: true,\n      // FAILURE ALERTS. Every error-level failure event in this backend (a dead\n      // delivery, a failed generation, a missed schedule) is digested into a\n      // mail to the project's owner accounts every 15 minutes. Recipients are\n      // deliberately not configurable; `digestMinutes: 0` makes it immediate.\n      alerts: { enabled: true, minLevel: 'error', digestMinutes: 15 },\n      // DECLARED API STATE #2 \u2014 an outbound subscription. Converged by\n      // target_url on push; a live row you did not declare is left and\n      // reported. The three function triggers below are NOT declared here \u2014\n      // their subscriptions derive from the functions manifest.\n      subscriptions: [\n        { target_url: 'https://ops.studio.example/vxil/events', event_prefixes: ['payments.', 'auth.user.'] },\n      ],\n    },\n\n    ai: {\n      enabled: true,\n      defaultProvider: 'mock', // BYO key later: providers.openaiKeyRef / anthropicKeyRef / geminiKeyRef\n      defaults: { maxTokens: 800, temperature: 0.4 },\n      // DECLARED API STATE #3 \u2014 the stored prompt template. Converged by\n      // CONTENT: a push stores a new version only when the text changed, so\n      // pushes are idempotent and versions stay monotonic. vxil stores and\n      // renders it; the wording is yours.\n      templates: [\n        {\n          template: 'studio-brief',\n          system:\n            'You are a senior brand strategist. Write in plain, confident English. ' +\n            'Never invent facts about the client; when something is unknown, say what you would need.',\n          user:\n            'Write a one-page creative brief for a studio client.\\n\\n' +\n            'Goal: {{goal}}\\nAudience: {{audience}}\\nTone: {{tone}}\\nConstraints: {{constraints}}\\n\\n' +\n            'Sections: Objective, Audience insight, Key message, Deliverables, Next steps.',\n        },\n      ],\n    },\n\n    // The job lane the brief runs on. `retry` is the ladder for JOB RUNS \u2014 the\n    // generation itself, and deliveries to your own endpoints. It is NOT a\n    // retry of what a platform-delivered function ANSWERS: the dispatcher ACKs\n    // every trigger delivery with a 200 whatever the function returned (guide\n    // 08, \"What is retried, and what is not\"), so the three functions below\n    // make their failures recoverable through the rows they own \u2014 a 5xx from\n    // one of them is observed (`functions.run.failed` \u2192 `webhooks.alerts`),\n    // never re-delivered.\n    jobs: { enabled: true, retry: { defaultMaxAttempts: 3 } },\n\n    // A payments INTEGRATION: the tenant's own Stripe/Paddle/PayPal/RevenueCat\n    // account; vxil is never in the flow of funds. `mock` needs no account and\n    // runs everything UP TO the paywall \u2014 push, deploy, the intake, the claim\n    // and every refusal (402 pass_required, 409 intake_incomplete). It cannot\n    // put a PAID charge on the ledger: its checkout URL is a placeholder, its\n    // webhooks are signed with the platform's secret, and\n    // `vx.payments.simulate` scripts subscriptions, not one-off charges \u2014 so on\n    // `mock` grant-pass never wakes and start-brief answers 402 to everyone.\n    // The paid path needs your provider's sandbox (README, \"Running the paid\n    // path\"), e.g. a Stripe test-mode account:\n    //   payments: { enabled: true, provider: 'stripe', defaults: { currency: 'usd' },\n    //     stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' } },\n    payments: { enabled: true, provider: 'mock', defaults: { currency: 'usd' } },\n\n    functions: { enabled: true },\n  },\n\n  // \u2500\u2500 Schema-as-code (\u22648 index slots per collection: s1\u2013s4/n1\u2013n2/t1\u2013t2) \u2500\u2500\u2500\u2500\u2500\u2500\n  cms: {\n    collections: {\n      // One row per visitor intake. Created and stepped by the browser as the\n      // (guest, then claimed) end-user; completed and settled by functions.\n      funnel_sessions: {\n        singular: 'funnel_session',\n        // The owner. In end-user mode the platform STAMPS this with the verified\n        // user id on create and scopes every read/patch/delete to it \u2014 a body\n        // naming someone else is a 400, and a foreign row is an honest 404.\n        ownerField: 'user',\n        fields: {\n          user: { type: 'string', required: true, indexSlot: 's1' },\n          status: { type: 'string', indexSlot: 's2', validation: { enum: ['in_progress', 'completed'] } },\n          generation_id: { type: 'string', indexSlot: 's3' }, // the job-lane generation that owns the result\n          result_status: { type: 'string', indexSlot: 's4', validation: { enum: ['queued', 'completed', 'failed'] } },\n          step: { type: 'int', indexSlot: 'n1', validation: { min: 1, max: 4 } }, // 1..4, forward only\n          started_at: { type: 'datetime', indexSlot: 't1' },\n          completed_at: { type: 'datetime', indexSlot: 't2' },\n          answers: { type: 'json' }, // { goal, audience, tone, constraints } \u2014 the template's inputs\n          result: { type: 'text' }, // the settled brief\n          error_hint: { type: 'string' }, // the provider's own words when the brief failed\n        },\n      },\n\n      // One row per PAID pass, written by the grant function on the provider's\n      // charge event. `charge_id` is the dedupe anchor: an at-least-once\n      // redelivery of the same charge is a clean 409 the function treats as\n      // \"already granted\". It is the DISPLAY RECORD, never the entitlement: the\n      // collection is owned, so the visitor's own thin-client key (cms:write)\n      // can create a pass or stretch its expires_at \u2014 start-brief decides from\n      // the owner-bound payments ledger instead.\n      passes: {\n        singular: 'pass',\n        ownerField: 'user',\n        fields: {\n          user: { type: 'string', required: true, indexSlot: 's1' },\n          charge_id: { type: 'string', required: true, unique: true, indexSlot: 's2' },\n          product: { type: 'string', indexSlot: 's3' },\n          amount_cents: { type: 'int', indexSlot: 'n1' },\n          granted_at: { type: 'datetime', indexSlot: 't1' },\n          expires_at: { type: 'datetime', indexSlot: 't2' }, // the brief function's range filter\n        },\n      },\n    },\n  },\n\n  // \u2500\u2500 The domain logic that ISN'T config: three event-driven functions \u2500\u2500\u2500\u2500\u2500\u2500\n  functions: {\n    // THE BRIEF. Invoked by the browser AS THE SIGNED-IN VISITOR\n    // (vx.asEndUser(token).fn['start-brief']({ session_id })): the end-user\n    // principal rides into the function, so its cms reads are owner-scoped and\n    // the generation is billed to that user. Requires a PAID pass, read from\n    // the owner-bound ledger (`payments:read`) on every call \u2014 never from the\n    // visitor-writable `passes` row, which it re-writes as the record when a\n    // grant delivery was lost; CLAIMS the row with If-Match before spending\n    // anything (a double click is one generation);\n    // starts the brief on the ai JOB lane with correlation_id = the session row id.\n    'start-brief': {\n      entry: './functions/start-brief.ts',\n      trigger: { kind: 'http' },\n      scopes: ['cms:read', 'cms:write', 'ai:write', 'payments:read'],\n      egressAllow: [],\n      signature: {\n        input: { session_id: 'string' },\n        // Two 202 answers, so the output is a whole TS type (a union): a new\n        // brief's handle, or `already_queued` when one is running \u2014 whose\n        // generation_id is null while that claim has not recorded its handle.\n        output:\n          '{ generation_id: string; run_id: string; correlation_id: string }' +\n          \" | { generation_id: string | null; status: 'already_queued' }\",\n      },\n    },\n\n    // THE GRANT. Woken by ONE platform event \u2014 `payments.charge.succeeded`, the\n    // full event name as the `source` (the prefix `payments.charge.` would wake\n    // it twice per Paddle charge, on `succeeded` and on `completed`) \u2014 a few\n    // seconds after your provider's webhook folds. If your pass were a TIER for\n    // a number of days rather than a count of briefs, you would not write this\n    // function at all: `payments.ledger.productMap['studio-pass'] = { tier: 'pass',\n    // durationDays: 30 }` and the platform writes the pass on the charge event\n    // (stacking, refund-aware). Re-reads the charge from the ledger (the event name is a\n    // routing claim, not an attestation), then writes the pass. A 5xx from it\n    // is ACKed and observed, not re-delivered \u2014 start-brief decides from the\n    // same ledger, so a lost grant never blocks a payer.\n    'grant-pass': {\n      entry: './functions/grant-pass.ts',\n      trigger: { kind: 'webhook', source: 'payments.charge.succeeded' },\n      scopes: ['payments:read', 'cms:write'],\n      egressAllow: [],\n    },\n\n    // THE SETTLE. Woken by the `job.generation.` prefix \u2014 completed AND failed \u2014\n    // and finds its own row through the event's `correlation_id` (no run\u2192record\n    // table of your own). On completed: the brief text from the replay buffer\n    // + a \"ready\" message. On failed: `error_hint` \u2014 the provider's own words \u2014\n    // onto the row, so the visitor sees why, not just that. A settle that\n    // cannot complete marks the row `failed` (the retry is one click) \u2014 the\n    // delivery is ACKed whatever it answers, so recovery lives in the row.\n    'settle-brief': {\n      entry: './functions/settle-brief.ts',\n      trigger: { kind: 'webhook', source: 'job.generation.' },\n      scopes: ['cms:read', 'cms:write', 'ai:read', 'notifications:send'],\n      egressAllow: [],\n    },\n  },\n});\n",
+    "readme": "# Funnel SaaS \u2014 the studio starter (saas)\n\nThe **web-first funnel** blueprint: a visitor lands, starts as a **guest**, walks a guided intake,\n**claims** the session with an e-mail code, buys a **pass** through your own payments provider,\nand gets an AI-written brief **settled back onto their record** \u2014 all of it declared in one typed\n`vxil.config.ts`, with three small functions for the parts that are code.\n\nIt is the shape most \"studio\" products have \u2014 a lead magnet, a paid deliverable, an account that\nonly exists once someone cares \u2014 and it is also the blueprint that shows **declared API state**:\nrate-limit policies, an outbound subscription and a stored prompt template live in the config and\nconverge on `vxil push`, so a second environment is a push, not a runbook.\n\n```bash\nvxil init --template funnel-saas\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nvxil push                             # collections + hooks + the three functions + the declared API state\nvxil gen                              # typed SDK: vx.from('funnel_sessions'), vx.fn['start-brief']\n```\n\n**What it provisions:**\n- `funnel_sessions` \u2014 `user` (the **owner field**), `status` (`in_progress \u2192 completed`, hook-guarded),\n  `step` (1\u20134, forward only), `answers` (json), then the brief's `generation_id`, `result_status`\n  (`queued | completed | failed`), `result` and `error_hint`.\n- `passes` \u2014 `user` (owner), `charge_id` (**unique** \u2014 the dedupe anchor), `product`, `amount_cents`,\n  `granted_at`, `expires_at`. The record the page shows \u2014 the payments ledger is the entitlement.\n- Features: `auth` (guest + OTP claim + a refreshable session pair) \xB7 `cms` (**`strictEndUserScope: true`**) \xB7\n  `rate-limits` (two **declared policies**) \xB7 `webhooks` (**`alerts` on** + one **declared subscription**) \xB7\n  `ai` (one **declared template**) \xB7 `jobs` \xB7 `payments` (a payments **integration** \u2014 your provider; `mock`\n  here, which runs everything *up to* the paywall \u2014 [Running the paid path](#running-the-paid-path)) \xB7\n  `notifications` (`mock`) \xB7 `functions`.\n- Functions: `start-brief` (http, invoked as the visitor), `grant-pass` (webhook on\n  `payments.charge.succeeded`), `settle-brief` (webhook on the `job.generation.` prefix).\n\n> **A simpler pass, if your pass is a tier for a number of days.** Since 2026-09-25 a\n> `ledger.productMap` entry may be `{ tier: 'pass', durationDays: 30 }`: the platform then writes\n> the pass itself on the charge event (stacking behind a live one, ended by a full refund or\n> chargeback), and `GET /v1/payments/entitlements` answers \"is this visitor on a pass, until when\".\n> This blueprint keeps its own `passes` record and `grant-pass` function on purpose \u2014 its pass is a\n> *count of briefs*, decided from the owner-bound charge ledger, not a tier for a duration.\n\n## The funnel, step by step\n\nEvery call below is the browser talking to your backend \u2014 with **two keys**, the way\nvxil.com/docs/guide/09-security-and-multitenancy prescribes: a **sign-in key** (the ordinary class,\ncarrying only `auth:signin`) for the moment *before* there is a session, and a **thin-client key**\n(`key_class: 'public'` \u2014 `cms:read`, `cms:write`, `functions:invoke`) for everything after, which the\nedge refuses unless it rides with a valid end-user token. A public key *cannot* carry `payments:write`\n(a `422` at mint), so the checkout is the one call your server makes \u2014 the last section.\n\n```ts\nimport { Vxil } from '@vxil/sdk';\nconst signin = Vxil.connect({ apiKey: SIGNIN_KEY });        // auth:signin only \u2014 works with no session\nconst thin = Vxil.connect({ apiKey: THIN_CLIENT_KEY });     // public class \u2014 needs a session on every call\n\n// 1. A guest. Real user id, real session, no e-mail yet (the token carries `anon: true`).\nconst guest = await signin.auth.anonymous.signIn();\nconst me = thin.asEndUser(guest.session.token);\n\n// 2. The intake. Owner-scoped: the platform stamps `user` with the guest's id on create,\n//    and this session (and only this session) can read and step the row.\nconst { item_id: session_id } = await me.from('funnel_sessions').create({\n  status: 'in_progress', step: 1, started_at: new Date().toISOString(),\n  answers: { goal: 'Launch a coffee subscription' },\n});\nawait me.from('funnel_sessions').patch(session_id, { step: 2, answers: { goal: '\u2026', audience: '\u2026' } });\n// \u2026steps 3 and 4. A PATCH that moves `step` backwards is a 422 from the `steps_forward_only` hook.\n\n// 3. The claim. A 6-digit code proves the address; the guest is PROMOTED IN PLACE \u2014\n//    same user id, so the intake rows are already theirs. (Sign-in class: the sign-in key.)\nawait signin.auth.anonymous.link.request({ token: guest.session.token, email: 'ada@example.com' });\nconst claimed = await signin.auth.anonymous.link.verify({ token: guest.session.token, email: 'ada@example.com', code: '123456' });\n// claimed.user_id === guest.user_id \u2014 unless the address already had an account: then\n// `merged: true`, a fresh session, and `rekeyed` says whether the guest's rows moved already.\n\n// 4. The pass \u2014 only after the claim. Your SERVER refuses a guest, creates the hosted checkout\n//    (below) and hands the URL back; the provider's webhook folds the charge \u2192\n//    `payments.charge.succeeded` \u2192 grant-pass writes the pass record.\n\n// 5. The brief. Invoked AS THE VISITOR: the function's reads are owner-scoped and the\n//    generation is metered to them. Until the visitor's ledger holds a paid charge the call\n//    throws a VxilError whose `.code` is 'pass_required' (402); an unfinished intake is\n//    'intake_incomplete' (409).\nconst handle = await me.fn['start-brief']({ session_id });\n// \u2192 { generation_id, run_id, correlation_id } for a new brief, or \u2014 a second click while one\n//    is running \u2014 { generation_id, status: 'already_queued' }: one generation, metered once,\n//    and `generation_id` is null while that attempt has not recorded its handle yet (the\n//    declared signature is that union). Either way, watch the ROW, not the handle:\n// \u2026seconds to minutes later, settle-brief writes `result` (or `error_hint`) onto the row and\n//    notifications delivers \"Your brief is ready\". A failed brief can be started again: the\n//    same call on a row whose result_status is 'failed' queues a new generation.\n```\n\n## What to learn from this\n\n- **`strictEndUserScope: true` is the fail-safe version of owner scoping.** Both collections declare an\n  `ownerField`, so a signed-in visitor reaches exactly their own rows; a collection you add later *without*\n  one is `403 server_only` for end-users on read and write instead of tenant-wide-shared. Nothing about a\n  server call changes \u2014 a server key still sees everything\n  (vxil.com/docs/guide/09-security-and-multitenancy).\n- **A guest is a real end-user.** `vx.auth.anonymous.signIn()` mints a real id; owner-scoped rows written\n  before the claim stay attached because the OTP claim (`POST /v1/auth/anonymous/link/request` + `/verify`)\n  promotes the guest in place. Passing the guest's token as `anonymous_token` on a magic-link request does\n  the same through mail (vxil.com/docs/guide/06-feature-catalog).\n- **Declared API state.** Three things that used to be rows you created by hand \u2014 and re-created in every\n  environment \u2014 are config now, and `vxil push` converges the live rows onto them, reporting (never\n  deleting) what you did not declare:\n\n  | Block | Converged by | The live rows it replaces |\n  |---|---|---|\n  | `features['rate-limits'].policies[]` | `name` | `POST /v1/rate-limits/policies` |\n  | `features.webhooks.subscriptions[]` | `target_url` | `POST /v1/webhooks/subscriptions` |\n  | `features.ai.templates[]` | content hash | `POST /v1/ai/templates` (a new version only when the text changed) |\n\n  The three function triggers are *not* declared here \u2014 a `webhook`-trigger binding on a function is its\n  own declaration, and the platform reconciles that subscription from the functions manifest.\n- **An event-driven grant, done honestly.** `grant-pass` wakes on the full event name\n  `payments.charge.succeeded` a few seconds after your provider's webhook folds. The event name is a\n  *routing claim*, so the function re-reads the ledger (`GET /v1/payments/charges`) before writing; the\n  `passes.charge_id` unique field (the ledger's charge id) turns an at-least-once redelivery into a `409`\n  it reads as \"already granted\". And it is honest about **what is not retried**: the dispatcher ACKs a\n  platform-delivered function with a `200` *whatever it answered*, so a `5xx` from the API is never\n  re-delivered \u2014 it is *observed* (`functions.run.failed`, once per failure streak, in the\n  `webhooks.alerts` digest), and recovery is data, not delivery: `start-brief` decides from the same\n  owner-bound ledger on every request, so a lost grant never blocks a payer, and it writes the missing\n  pass record for that charge (a `409` there just means it is recorded already)\n  (vxil.com/docs/guide/08-running-your-code-functions).\n- **An owned row the visitor can write is never an entitlement.** `passes` declares an `ownerField`, so\n  the thin-client key (`cms:write`) lets a visitor *create* a pass of their own or PATCH its\n  `expires_at` to 2099 \u2014 the platform stamps them as the owner, which proves who wrote the row, not that\n  anyone paid, and a write hook's `caller` is always `null`, so no hook can tell that write from\n  `grant-pass`'s (vxil.com/docs/guide/07-validation-and-hooks). So `start-brief` never reads `passes` to\n  decide: on every call it reads `GET /v1/payments/charges?status=succeeded` as the visitor (bound to\n  the verified principal; no key a browser holds can write the ledger) and needs a succeeded, unrefunded\n  charge from the last 365 days. The pass row is what the page *shows*; the ledger is what it *checks*.\n- **`correlation_id` closes the loop.** `start-brief` sends the session row id as `correlation_id` on\n  `POST /v1/ai/generate` (`mode: 'job'`); the platform echoes it on `job.generation.completed` /\n  `job.generation.failed` next to `generation_id`, so `settle-brief` finds its own row from the event alone.\n  On `failed` it writes **`error_hint`** \u2014 the provider's own status and message \u2014 onto the row, so the\n  visitor sees *why* (and `start-brief` accepts that row again, so a retry is one more click); on\n  `completed` the text comes from the generation's replay buffer\n  (`GET /v1/ai/generations/{generation_id}/stream?since=0`). Every settle write carries\n  `if: { generation_id }`, so a late delivery for an earlier attempt can never overwrite a newer one; and a\n  settle that cannot complete marks the row `failed` with `settle failed: <reason>` instead of answering a\n  status nothing will act on \u2014 the row, not the delivery, is where recovery lives.\n- **The claim comes before the spend.** `start-brief` reads the row's `version`, PATCHes\n  `result_status: 'queued'` with `If-Match: <version>`, and only then calls generate. A double click that\n  lands inside the generate round-trip loses the compare-and-set with `409 version_conflict` and gets a\n  `202 already_queued` \u2014 one generation, one credit reserve. A claim whose generate never recorded, or a\n  queued handle older than the job lane's ceiling, is treated as failed on the next click, so a row can\n  never stick in `queued`. Every write after the claim (recording the handle, marking a failure) carries\n  `If-Match: <the claim's version>`, so an attempt the next click already swept can never overwrite the\n  newer claim \u2014 its `409` means \"the row moved on\", and it steps aside without a write.\n- **Function errors are coded.** Every refusal a function answers is `{ error: { code, message } }` \u2014\n  `POST /v1/fn/:name` hands that body back verbatim, and the SDK raises it as a `VxilError` whose `.code`\n  is the function's own (`pass_required`, `intake_incomplete`, `already_settled`), so a page branches on a\n  code, never on a message. The platform-delivered functions answer `200 { skipped }` for a decision, and a\n  `500` with a code (`unsettled`, `grant_unsettled`) only when not even the row could record the failure \u2014\n  not to be retried (nothing re-delivers it) but to be *seen* through `functions.run.failed`.\n- **Failure alerts are on.** `webhooks.alerts` mails the project's owner accounts every 15 minutes with the\n  error-level failure events \u2014 a dead delivery, a failed generation, a missed schedule. Recipients are\n  deliberately not configurable; `digestMinutes: 0` makes it immediate.\n- **The payments feature is an integration.** Your Stripe, Paddle, PayPal or RevenueCat account, the\n  provider's hosted checkout, the provider's webhook; vxil folds the events and keeps the ledger. The\n  scaffold's `mock` provider stops at the paywall, so the paid path runs on your provider's sandbox \u2014 the\n  next section. To rehearse the grant chain without a card, Paddle's simulator signs with your real endpoint\n  secret and your `payments.` functions run for real (vxil.com/docs/guide/06-feature-catalog).\n\n## Server side: keep the visitor's token fresh\n\nA session token lives `session.ttlMinutes` (60 here); the cookie your app sets lives days. Every sign-in\nreturns a pair \u2014 the token and a `refresh_token` good for `session.refreshTtlDays` (30) \u2014 and\n`POST /v1/auth/sessions/refresh` rotates it. So a server-rendered app needs one root middleware, not a\nredesign (vxil.com/docs/guide/09-security-and-multitenancy):\n\n```ts\n// once per request, before any loader runs\nconst { token, refresh_token, expires_at } = readSessionCookie(request);\nlet session = { token, refresh_token, expires_at };\nif (Date.parse(expires_at) - Date.now() < 5 * 60_000) {          // within 5 min of expiry (or past it)\n  try {\n    session = (await vx.auth.sessions.refresh(refresh_token)).session;   // rotated pair\n    setSessionCookie(response, session);                          // store BOTH halves again\n  } catch {\n    clearSessionCookie(response);                                 // refresh revoked or expired: sign in again\n  }\n}\nconst asUser = vx.asEndUser(session.token);                       // every per-visitor read below is scoped by the platform\n```\n\nStore the refresh token only in the `HttpOnly` cookie; refresh *early* rather than on `401`, so parallel\nloaders do not race to rotate the same token; keep the server key for the tenant-wide rows only.\n\nThe same server owns the **checkout** \u2014 `POST /v1/payments/checkout-sessions` needs `payments:write`, which\na public key cannot carry, and it is server-only (a `403 server_only` in end-user mode). Three rules shape it:\n\n- **The buyer is the session, never a form field.** Ask the platform whose token it is:\n  `vx.auth.sessions.verify` answers with the account *as it is now* (`auth:read` on the server key).\n- **A guest cannot buy \u2014 claim first.** A charge stays with the user id that paid it. When a guest claims an\n  address that already has an account, the merge re-keys the guest's subscriptions, customer links and\n  credit balances onto that account (vxil.com/docs/guide/06-feature-catalog, \"What a merge moves\") \u2014 not its\n  one-off charges \u2014 and `start-brief` decides from the charges ledger. A guest who paid and *then* merged\n  would have paid for a brief the merged account can never start. So refuse the checkout until the claim:\n  `verified` is `false` while the visitor has no proven address \u2014 a guest has none, and the claim *is* the\n  proof (every other way into this blueprint, a magic link or a code, proves one too). Not the token's\n  `anon` claim: that is a snapshot from when the token was minted, not the account as it is now.\n- **One Idempotency-Key per purchase *attempt*, never per visitor.** A key the payments feature has seen\n  replays its first session verbatim, and the key never expires \u2014 so `pass:${user_id}` would hand a visitor\n  whose checkout expired, who was refunded, or who comes back after the 365-day pass the same dead URL\n  forever. Key the attempt: the buy page renders a fresh attempt id into its form, so a double click posts\n  the same id (one session), while a reload, a return from the checkout or next year's renewal renders a\n  new one. The id is not a credential \u2014 the `user_id` next to it is the verified one, so an invented id\n  only ever opens another checkout for the visitor's own account.\n\n```ts\n// the visitor is signed in (the middleware above keeps `session` fresh); the form posts `attempt`\nconst who = await vx.auth.sessions.verify(session.token);         // { user_id, verified, \u2026 } \u2014 the account NOW\nif (!who.verified) {                                              // still a guest: charges never follow a merge\n  return Response.json({ error: { code: 'claim_required', message: 'claim your e-mail before you buy' } }, { status: 409 });\n}\nconst attempt = String(form.get('attempt') ?? '');                // crypto.randomUUID(), rendered with the buy page\nif (!/^[\\w-]{16,64}$/.test(attempt)) {\n  return Response.json({ error: { code: 'bad_attempt', message: 'reload the page and try again' } }, { status: 400 });\n}\nconst { url } = await vx.payments.createCheckoutSession(\n  { user_id: who.user_id, mode: 'payment',\n    line_items: [{ price_ref: 'studio-pass', amount_cents: 4900 }],   // a real provider takes ITS price id \u2014 below\n    success_url: 'https://studio.example/thanks', cancel_url: 'https://studio.example/pass' },\n  { idempotencyKey: `pass:${who.user_id}:${attempt}` },\n);\n// redirect the visitor to `url` \u2014 a hosted checkout on YOUR provider; vxil is never in the flow of funds.\n```\n\nThe same server is where the declared rate-limit policies are checked. `POST /v1/rate-limits/check` takes a\n`policy_id`, never a name \u2014 list the policies once after the first push and keep the two ids:\n\n```ts\nconst policies = await vx.rateLimits.listPolicies();                  // RateLimitPolicy[] \u2014 \u2264100, no cursor\nconst stepPolicy = policies.find((p) => p.name === 'funnel-step')!.policy_id;\n// before forwarding a step write\nawait vx.rateLimits.check({ policy_id: stepPolicy, key_values: { user_id }, cost: 1 });   // 429 + Retry-After when blocked\n// before forwarding a claim request \u2014 a HASH of the address, never the address (it becomes a key)\nawait vx.rateLimits.check({ policy_id: claimPolicy, key_values: { email_hash: sha256(email) } });\n```\n\n## Running the paid path\n\nThe scaffold ships `payments.provider: 'mock'`, so `vxil push` works with no provider account, and\neverything but the payment runs on it: the intake, the claim, the deploy, and every refusal\n(`402 pass_required`, `409 intake_incomplete`, a guest's `claim_required`). What `mock` cannot do is put a\n**paid** charge on the ledger: its checkout URL is a placeholder host nothing serves, its webhooks are\nsigned with the platform's own secret rather than one you hold, and `vx.payments.simulate` scripts\n*subscription* lifecycles, not a one-off charge. So on `mock`, `grant-pass` never wakes and `start-brief`\nanswers `402 pass_required` to every visitor \u2014 the paywall doing its job. To run the brief end to end,\npoint the block at your provider's sandbox, in a project of its own (the signing-secret ref is one per\nprovider \u2014 vxil.com/docs/guide/06-feature-catalog):\n\n```ts\n// vxil.config.ts \u2014 a Stripe TEST-mode account (a Paddle sandbox is `provider: 'paddle'` + `paddle: { \u2026 }`)\npayments: {\n  enabled: true, provider: 'stripe', defaults: { currency: 'usd' },\n  stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' },\n},\n```\n\n```bash\nvxil secrets set payments/stripe_secret       # the test-mode secret key, at the hidden prompt\nvxil secrets set payments/stripe_webhook      # the signing secret of the endpoint below\nvxil push\n```\n\nRegister `https://api.vxil.com/v1/internal/payments/webhook/stripe/<tenantId>` as the endpoint in the\nprovider's dashboard. On a real provider `line_items[].price_ref` is the provider's own price id (Stripe\n`price_\u2026`), not `studio-pass`. Pay with the provider's test card: the charge folds \u2192\n`payments.charge.succeeded` \u2192 `grant-pass` records the pass, and the next `start-brief` queues the brief.\n\n**Go deeper:** vxil.com/docs/guide/09-security-and-multitenancy (end-user mode \xB7 `strictEndUserScope` \xB7 the\nrefresh middleware) \xB7 vxil.com/docs/guide/06-feature-catalog (auth guests and claims \xB7 rate-limits \xB7\nwebhooks alerts and declared subscriptions \xB7 ai `mode: 'job'` \xB7 payments) \xB7\nvxil.com/docs/guide/08-running-your-code-functions (the `webhook` trigger \xB7 at-least-once) \xB7\nvxil.com/docs/guide/04-data-with-cms (owner scoping \xB7 the query DSL).\n\n**Own the shape.** The config is yours after `init` \u2014 nothing is locked.\n",
     "functions": {
       "grant-pass.ts": "// grant-pass.ts \u2014 GRANT A PASS ON A SUCCESSFUL CHARGE (a vxil function, \xA77.3).\n//\n// Trigger: webhook, source 'payments.charge.succeeded' \u2014 the FULL event name, so\n// this function wakes for exactly one event: the moment your provider's webhook\n// (Stripe, Paddle, PayPal, RevenueCat, or the mock) folds a succeeded charge.\n// The platform wires the subscription for you on deploy; the first attempt is\n// delivered directly, a few seconds after the event.\n//\n// The envelope's `payload` is the event, flattened:\n//   { event, audit_id, occurred_at, actor, surface, data }\n// and `data` is the payments.charge.succeeded payload:\n//   { end_user_id, provider, provider_charge_id, amount_cents, currency, product_id, environment }\n//\n// THREE RULES this function lives by:\n//   \u2022 The event NAME is a routing claim, not an attestation \u2014 anyone who can\n//     enqueue a job in your own project can produce a delivery with a chosen\n//     name. So the ledger is re-read (GET /v1/payments/charges) before a pass\n//     is written; a charge the ledger does not know is skipped.\n//   \u2022 Delivery is at-least-once. `passes.charge_id` is UNIQUE (the LEDGER's\n//     charge id \u2014 the same key start-brief's record write uses), so a redelivery\n//     is a clean 409 unique_violation treated as \"already granted\".\n//   \u2022 Nothing this function ANSWERS is re-delivered. The dispatcher ACKs every\n//     platform-delivered trigger with a 200 whatever the handler returned\n//     (guide 08, \"What is retried, and what is not\") \u2014 so a 5xx here is not a\n//     retry request, it is the OBSERVATION channel: `functions.run.failed`\n//     (once per failure streak) \u2192 the `webhooks.alerts` digest. Recovery is\n//     data, not delivery: the pass row is a DISPLAY RECORD (an owned row the\n//     visitor's own key could write, so it is never the entitlement) \u2014\n//     start-brief decides from the same owner-bound ledger on every request,\n//     so a grant lost here never blocks a payer, and it re-writes the missing\n//     record. A decision (skip) answers 200 and is a decision.\n\nimport type { WebhookFunctionEnvelope } from '@vxil/sdk';\n\n/** the `payments.charge.succeeded` event payload (the fields read here) */\ninterface ChargeSucceeded {\n  end_user_id?: string | null;\n  provider_charge_id?: string | null;\n  amount_cents?: number | null;\n  currency?: string | null;\n  product_id?: string | null;\n}\ntype Env = WebhookFunctionEnvelope<ChargeSucceeded>;\ninterface Charge { charge_id: string; amount_cents: number; currency: string; status: string }\ninterface ChargeList { data?: { charges?: Charge[] } }\ninterface Created { data?: { item_id?: string } }\ninterface ErrBody { error?: { code?: string } }\n\nconst PASS_DAYS = 365; // mirrored in start-brief.ts (the ledger gate)\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Env;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const pay = env.scoped_jwts?.payments;\n    const cms = env.scoped_jwts?.cms;\n    if (!pay || !cms) return fail(403, 'missing_scopes', 'the function needs payments:read and cms:write');\n    // The binding's `source` already filters deliveries; this stays as belt-and-braces.\n    if (env.payload?.event !== 'payments.charge.succeeded') {\n      return Response.json({ skipped: true, event: env.payload?.event });\n    }\n    const raw = env.payload.data;\n    // Past 64 KiB the whole `data` value is replaced by { truncated: true } \u2014\n    // never a half object. A charge payload is tiny, but the check is free.\n    if (raw && 'truncated' in raw) return Response.json({ skipped: true, reason: 'payload truncated' });\n    const data: ChargeSucceeded = raw ?? {};\n    const userId = data.end_user_id ?? null;\n    const providerChargeId = data.provider_charge_id ?? null;\n    if (!userId || !providerChargeId || data.amount_cents == null) {\n      return Response.json({ skipped: true, reason: 'charge carries no user, id or amount' });\n    }\n\n    // 1. Re-read the LEDGER (the authoritative record) \u2014 a succeeded charge of\n    //    this amount must exist for this user. This is what turns the event\n    //    name from a claim into a fact. (One product, one pass per purchase:\n    //    the match is by amount; the list is newest-first.)\n    const led = await fetch(\n      `${base}/v1/payments/charges?user_id=${encodeURIComponent(userId)}&status=succeeded&limit=50`,\n      { headers: H(pay) },\n    ).catch(() => new Response(null, { status: 599 }));\n    if (led.status >= 500) return unsettled(`ledger read ${led.status}`);\n    if (!led.ok) return Response.json({ skipped: true, reason: `ledger read ${led.status}` });\n    const charges = ((await led.json()) as ChargeList).data?.charges ?? [];\n    const match = charges.find((c) => c.status === 'succeeded' && c.amount_cents === data.amount_cents\n      && (!data.currency || c.currency === data.currency));\n    if (!match) return Response.json({ skipped: true, reason: 'no succeeded charge of that amount on the ledger' });\n\n    // 2. Write the pass RECORD. Server mode, so `user` is set explicitly (in\n    //    end-user mode the platform would stamp it). The ledger's `charge_id` is\n    //    the unique anchor \u2014 start-brief's record write keys on the same id.\n    const now = Date.now();\n    const created = await fetch(`${base}/v1/cms/items/passes`, {\n      method: 'POST',\n      headers: H(cms),\n      body: JSON.stringify({\n        data: {\n          user: userId,\n          charge_id: match.charge_id,\n          product: data.product_id ?? 'studio-pass',\n          amount_cents: data.amount_cents,\n          granted_at: new Date(now).toISOString(),\n          expires_at: new Date(now + PASS_DAYS * 86_400_000).toISOString(),\n        },\n      }),\n    }).catch(() => new Response(null, { status: 599 }));\n    if (created.status === 409) {\n      const code = ((await created.json().catch(() => ({}))) as ErrBody).error?.code;\n      // the redelivery case \u2014 the pass is already there\n      return Response.json({ granted: false, reason: code ?? 'already granted', charge_id: match.charge_id });\n    }\n    if (created.status >= 500) return unsettled(`pass write ${created.status}`);\n    if (!created.ok) return Response.json({ skipped: true, reason: `pass write ${created.status}` });\n    const itemId = ((await created.json()) as Created).data?.item_id;\n    return Response.json({\n      granted: true, pass: itemId, user: userId, charge_id: match.charge_id, provider_charge_id: providerChargeId,\n    });\n  },\n};\n\n// \u2500\u2500 tiny helpers \u2500\u2500\nconst H = (jwt: string) => ({ authorization: `Bearer ${jwt}`, 'content-type': 'application/json' });\nconst fail = (status: number, code: string, message: string) =>\n  Response.json({ error: { code, message } }, { status });\n/** The charge succeeded and no pass was written. Answer 500 so the run is SEEN\n *  (`functions.run.failed` \u2192 the alert digest); it is ACKed, never re-delivered\n *  \u2014 start-brief decides from the ledger (the payer is never blocked) and\n *  re-writes the missing record on the next request. */\nconst unsettled = (reason: string) =>\n  fail(500, 'grant_unsettled', `${reason} \u2014 no pass written; surfaced via functions.run.failed (not re-delivered), repaired by start-brief from the ledger`);\n",
       "settle-brief.ts": "// settle-brief.ts \u2014 SETTLE THE BRIEF ONTO ITS ROW (a vxil function, \xA77.3).\n//\n// Trigger: webhook, source 'job.generation.' \u2014 the PREFIX, so this function\n// wakes for both `job.generation.completed` and `job.generation.failed`. The\n// envelope's `payload.data` is the event payload:\n//   { run_id, generation_id, correlation_id, status, error_class, error_hint, state, level }\n//\n// `correlation_id` is the funnel_sessions row id that start-brief sent with\n// the generate call \u2014 the platform echoes it on the event next to\n// generation_id, so this function needs no run\u2192record table of its own.\n//\n// On COMPLETED: the settled text lives in the generation's replay buffer\n// (GET /v1/ai/generations/{id}/stream?since=0 \u2014 every recorded frame, plus\n// `done`); the token frames are joined and PATCHed onto the row, then the\n// visitor gets a \"ready\" message. On FAILED: `error_hint` carries the\n// provider's own status and message (`Upstream said: \u2026`) and `error_class`\n// the class \u2014 the row gets the hint, so the visitor (and your support inbox)\n// sees WHY, not just that it failed. On completed both are null by contract.\n//\n// THE DELIVERY CONTRACT (guide 08, \"What is retried, and what is not\"): on\n// every platform-delivered trigger the dispatcher ACKs the delivery with a 200\n// WHATEVER this handler returns. A 5xx from here is never re-delivered \u2014 it is\n// OBSERVED (`functions.run.failed`, once per failure streak, digested by\n// `webhooks.alerts`). Only a crash of the dispatch itself is retried. So this\n// function never answers a 5xx hoping for a redelivery; it makes every failure\n// RECOVERABLE THROUGH THE ROW instead:\n//   \u2022 a settle that cannot complete marks the row `result_status: 'failed'`\n//     with `error_hint: 'settle failed: <reason>'` \u2014 start-brief accepts that\n//     row again, so the visitor's retry is one click;\n//   \u2022 only when not even that mark could be written does it answer 500 \u2014 not\n//     for a retry (there is none) but so the failure is SEEN in the alert\n//     digest instead of vanishing behind a 200.\n// The one transient it waits out ITSELF is the replay buffer: `done: false`\n// means the terminal frame is a moment behind the event, so the read is\n// repeated a few times before giving up (the guide's \"retry internally\").\n//\n// Every write carries `if: { generation_id }` \u2014 the row is touched only while\n// it is still waiting on THIS generation, so a late delivery for an earlier\n// attempt can never overwrite a newer one (409 precondition_failed = stale).\n// At-least-once: the same PATCH twice is the same row, and the \"ready\" send\n// carries the delivery's idempotency key, so a redelivery never double-mails.\n\nimport type { JobGenerationSettledEventPayload, WebhookFunctionEnvelope } from '@vxil/sdk';\n\ntype Env = WebhookFunctionEnvelope<JobGenerationSettledEventPayload>;\ninterface SessionData { user?: string; generation_id?: string | null; result_status?: string }\ninterface Item { data?: { data?: SessionData } }\ninterface Replay { data?: { frames?: Array<{ type?: string; delta?: string; done?: boolean }>; done?: boolean } }\n\nconst REPLAY_TRIES = 4;      // reads of the replay buffer before giving up \u2026\nconst REPLAY_WAIT_MS = 500;  // \u2026 and the pause between them (wall time, not CPU)\nconst ROW_TRIES = 3;         // re-reads of a row still inside start-brief's claim\u2192generate\u2192record window\nconst ROW_WAIT_MS = 700;\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Env;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const cms = env.scoped_jwts?.cms;\n    const ai = env.scoped_jwts?.ai;\n    const notif = env.scoped_jwts?.notifications;\n    if (!cms || !ai) return fail(403, 'missing_scopes', 'the function needs cms:read, cms:write and ai:read');\n\n    const event = env.payload?.event ?? '';\n    if (event !== 'job.generation.completed' && event !== 'job.generation.failed') {\n      return Response.json({ skipped: true, event }); // e.g. job.generation.processing\n    }\n    // a truncated payload ({ truncated: true }) carries nothing to settle from\n    const raw = env.payload?.data;\n    const data: Partial<JobGenerationSettledEventPayload> = raw && !('truncated' in raw) ? raw : {};\n    const sessionId = data.correlation_id ?? null;\n    const generationId = data.generation_id ?? null;\n    if (!sessionId || !generationId) {\n      return Response.json({ skipped: true, reason: 'not a funnel generation (no correlation_id)' });\n    }\n    const row = { base, cms, sessionId, generationId };\n\n    // Find our row through the correlation id (server mode: any row). It must\n    // be waiting on THIS generation: another id is a stale delivery (an earlier\n    // attempt settling late) \u2014 unless the row is `queued` with no handle yet,\n    // which is start-brief's claim\u2192generate\u2192record window: the handle is one\n    // PATCH away, so the read is repeated before the delivery is called stale.\n    let session: SessionData | null = null;\n    let readStatus = 0;\n    for (let i = 0; i < ROW_TRIES; i++) {\n      if (i > 0) await sleep(ROW_WAIT_MS);\n      const res = await fetch(`${base}/v1/cms/items/funnel_sessions/${encodeURIComponent(sessionId)}`, { headers: H(cms) });\n      readStatus = res.status;\n      if (res.status === 404) return Response.json({ skipped: true, reason: 'no such session' });\n      if (!res.ok) continue; // a 5xx read: try again, then fall through to the blind mark below\n      const s = ((await res.json()) as Item).data?.data ?? {};\n      if (s.generation_id === generationId) { session = s; break; }\n      if (s.result_status === 'queued' && !s.generation_id) continue; // claimed, handle not recorded yet\n      return Response.json({ skipped: true, reason: 'stale generation', expected: s.generation_id ?? null });\n    }\n    if (!session) {\n      if (readStatus >= 500) {\n        // The row could not be read. Mark it failed anyway \u2014 the `if`\n        // precondition lands the mark only if the row is still waiting on this\n        // generation \u2014 and let the visitor retry.\n        return await settleFailed(row, `session read ${readStatus}`);\n      }\n      return Response.json({ skipped: true, reason: 'stale generation (no handle recorded for it)' });\n    }\n\n    if (event === 'job.generation.failed') {\n      // The provider's own words, bounded (the event caps the hint at 200 chars).\n      const hint = data.error_hint ?? data.error_class ?? 'generation failed';\n      const patch = await patchSession(row, { result_status: 'failed', error_hint: hint });\n      if (patch.status === 409) return Response.json({ skipped: true, reason: 'stale generation' });\n      if (!patch.ok) return unsettled(`session patch ${patch.status}`);\n      return Response.json({ settled: 'failed', session: sessionId, error_class: data.error_class ?? null, error_hint: hint });\n    }\n\n    // COMPLETED \u2014 the text is in the replay buffer. `done: false` means the\n    // buffer has not received its terminal frame yet \u2014 a moment behind the\n    // event \u2014 so the read is repeated a few times before the brief is given\n    // up (never settled empty; never a 5xx-and-hope: nothing re-delivers).\n    let replay: NonNullable<Replay['data']> | null = null;\n    let replayStatus = 0;\n    for (let i = 0; i < REPLAY_TRIES; i++) {\n      if (i > 0) await sleep(REPLAY_WAIT_MS);\n      const rep = await fetch(`${base}/v1/ai/generations/${encodeURIComponent(generationId)}/stream?since=0`, { headers: H(ai) });\n      replayStatus = rep.status;\n      if (rep.status >= 400 && rep.status < 500) break; // not transient \u2014 a 404 generation will not appear\n      if (!rep.ok) continue;\n      const d = ((await rep.json()) as Replay).data ?? {};\n      if (d.done) { replay = d; break; }\n    }\n    if (!replay) {\n      return await settleFailed(row, replayStatus >= 400 ? `replay read ${replayStatus}` : 'replay buffer never reported done');\n    }\n    const text = (replay.frames ?? []).filter((f) => f.type === 'token').map((f) => f.delta ?? '').join('');\n\n    const patch = await patchSession(row, { result_status: 'completed', result: text, error_hint: null });\n    if (patch.status === 409) return Response.json({ skipped: true, reason: 'stale generation' });\n    if (!patch.ok) return await settleFailed(row, `session patch ${patch.status}`);\n\n    // Tell the visitor. Best-effort AFTER the result is on the row: a mail that\n    // fails must not un-settle a brief that is ready. The delivery's\n    // idempotency key rides the send, so a redelivered event never sends twice\n    // (notifications honors Idempotency-Key).\n    let delivery: number | null = null;\n    if (notif && session.user) {\n      const send = await fetch(`${base}/v1/notifications/send`, {\n        method: 'POST',\n        headers: { ...H(notif), ...(env.idempotency_key ? { 'idempotency-key': env.idempotency_key } : {}) },\n        body: JSON.stringify({\n          user_id: session.user,\n          template: 'transactional',\n          data: { subject: 'Your brief is ready', paragraph: 'Open the studio to read your creative brief.' },\n        }),\n      }).catch(() => null);\n      delivery = send?.status ?? null;\n    }\n    return Response.json({ settled: 'completed', session: sessionId, chars: text.length, delivery });\n  },\n};\n\n// \u2500\u2500 tiny helpers \u2500\u2500\ninterface Row { base: string; cms: string; sessionId: string; generationId: string }\nconst H = (jwt: string) => ({ authorization: `Bearer ${jwt}`, 'content-type': 'application/json' });\nconst sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));\nconst fail = (status: number, code: string, message: string) =>\n  Response.json({ error: { code, message } }, { status });\n/** Not even the row could record the failure: answer 500 so the run is SEEN\n *  (`functions.run.failed` \u2192 the alert digest). ACKed, never re-delivered. */\nconst unsettled = (reason: string) =>\n  fail(500, 'unsettled', `${reason} \u2014 the row could not be marked failed; surfaced via functions.run.failed, not re-delivered`);\n/** Every write is guarded by `if: { generation_id }`: the row is touched only\n *  while it still waits on THIS generation (409 precondition_failed = stale). */\nfunction patchSession(row: Row, data: Record<string, unknown>): Promise<Response> {\n  return fetch(`${row.base}/v1/cms/items/funnel_sessions/${encodeURIComponent(row.sessionId)}`, {\n    method: 'PATCH', headers: H(row.cms), body: JSON.stringify({ data, if: { generation_id: row.generationId } }),\n  }).catch(() => new Response(null, { status: 599 }));\n}\n/** The recoverable outcome: mark the row failed with the reason, so start-brief\n *  accepts it again and the visitor's retry is one click. */\nasync function settleFailed(row: Row, reason: string): Promise<Response> {\n  const patch = await patchSession(row, { result_status: 'failed', error_hint: `settle failed: ${reason}`.slice(0, 200) });\n  if (patch.ok) return Response.json({ settled: 'failed', session: row.sessionId, reason });\n  if (patch.status === 409) return Response.json({ skipped: true, reason: 'stale generation' });\n  return unsettled(`${reason}; mark failed \u2192 ${patch.status}`);\n}\n",
@@ -16111,10 +16943,10 @@ const json = (o: unknown, status: number) => Response.json(o, { status });
       "slack_webhook_url",
       "vxil_read_key"
     ],
-    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Alerts to Slack\" \u2014 failure events \u2192 one chat message per state crossing.\n//\n// There is no vxil \"connectors\" feature and no alert-routing engine, on purpose:\n// every feature already writes its lifecycle to your tenant's audit stream, and\n// a function can read that stream. This blueprint is DISTRIBUTION over that\n// spine \u2014 one cron function, one cms collection as its memory, one BYO webhook:\n//   \u2022 cms       \u2192 `alert_state`: the watermark + per-condition state (ok|stale|\n//                 broken|could_not_check) that makes alerts once-per-crossing\n//   \u2022 functions \u2192 `alerts`: drains the audit stream past the watermark every\n//                 5 minutes, matches an allow-list of failure events, posts\n//                 to Slack (or Discord) through the egress allowlist\n// A permanently-red condition therefore produces ONE message when it turns red,\n// ONE when it recovers, and (optionally) a reminder every REPEAT_AFTER_HOURS.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    cms: {},\n    functions: { enabled: true },\n  },\n\n  cms: {\n    collections: {\n      // The function's memory. One row per alert KEY (e.g. `payments:ingest:stripe`,\n      // `jobs:dead-letter:notifications.deliver`, `functions:checkout`) plus the\n      // reserved `__cursor__` row that holds the audit-stream watermark.\n      alert_state: {\n        singular: 'alert_state',\n        fields: {\n          key: { type: 'string', required: true, indexSlot: 's1', unique: true }, // unique \u21D2 409 on a racing duplicate\n          state: { type: 'string', indexSlot: 's2' }, // ok | stale | broken | could_not_check\n          level: { type: 'string', indexSlot: 's3' }, // info | warn | error\n          event: { type: 'string' }, // the last audit event name seen for this key\n          detail: { type: 'text' }, // last reason/error text (truncated)\n          cursor: { type: 'string' }, // `__cursor__` row only: last processed audit id\n          last_event_id: { type: 'string' },\n          last_alert_at: { type: 'datetime', indexSlot: 't1' },\n          updated_at: { type: 'datetime', indexSlot: 't2' },\n        },\n      },\n    },\n  },\n\n  functions: {\n    // The whole blueprint is this one function. Cron every 5 minutes; also\n    // invocable by hand (`vxil functions invoke alerts --data '{\"test\":true}'`)\n    // to prove the webhook is wired without touching the watermark.\n    alerts: {\n      entry: './functions/alerts.ts',\n      trigger: { kind: 'cron', schedule: '*/5 * * * *' },\n      scopes: ['cms:read', 'cms:write'],\n      // Two BYO secrets, resolved per invocation and injected as env.secrets.<name>:\n      //   slack_webhook_url \u2014 the Slack incoming-webhook (or Discord webhook) URL\n      //   vxil_read_key     \u2014 an API key of YOUR tenant holding ONLY `features:read`;\n      //                       the audit stream is not reachable through the\n      //                       function's scoped callback, so the drain reads it with\n      //                       this least-privilege key instead\n      secrets: ['secret:slack_webhook_url', 'secret:vxil_read_key'],\n      // Deny-by-default egress: only the chat host (add 'discord.com' for Discord).\n      egressAllow: ['hooks.slack.com'],\n    },\n  },\n\n  secrets: {\n    slack_webhook_url: { feature: 'functions', description: 'Slack incoming webhook (or Discord webhook) URL' },\n    vxil_read_key: { feature: 'functions', description: 'a vxil API key with only features:read \u2014 reads the audit stream' },\n  },\n});\n",
-    "readme": "# Alerts to Slack (ops)\n\nFailure events from your backend \u2192 **one Slack (or Discord) message per state crossing**, with a\n\"resolved\" message when the condition clears. No connectors registry, no alert-routing feature \u2014 one\ncron function that drains your tenant's **audit stream** past a watermark, an allow-list of failure\nevents it cares about, and a `cms` collection as its memory so a permanently-red condition never\nspams the channel.\n\n```bash\nvxil init --template alerts-to-slack\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nprintf '%s' \"$SLACK_URL\" | vxil secrets set functions/slack_webhook_url\nprintf '%s' \"$READ_KEY\"  | vxil secrets set functions/vxil_read_key\nvxil push                             # collection + the `alerts` cron function\nvxil functions invoke alerts --data '{\"test\":true}'   # posts a test message\n```\n\n**The two secrets** (references in the config, values only ever in the encrypted secret store):\n\n| Secret | What it is | Where it comes from |\n|---|---|---|\n| `slack_webhook_url` | a Slack *incoming webhook* URL (or a Discord webhook URL) | Slack \u2192 Apps \u2192 Incoming Webhooks; Discord \u2192 channel \u2192 Integrations \u2192 Webhooks |\n| `vxil_read_key` | an API key **of this tenant** holding **only `features:read`** | dashboard \u2192 API keys \u2192 create, tick `features:read` and nothing else |\n\nWhy a key at all? The audit stream (`GET /v1/audit` and its NDJSON export) is a control-plane read that is\n**not** on a function's scoped callback (the callback covers the feature APIs \u2014 cms, payments, jobs\u2026),\nso the drain reads it with the narrowest key that can: read-only, no write scope, revocable in one click.\nFor Discord, add `'discord.com'` to `egressAllow` \u2014 the function sends both Slack's `text` and Discord's\n`content` field, so one message body works on either.\n\n## What it does, every 5 minutes\n\n1. **Watermark.** Reads the `__cursor__` row in `alert_state`. On the very first run it stores the\n   *newest* audit id and stops \u2014 history never becomes an alert storm.\n2. **Drain.** `GET /v1/audit/export?after_id=<cursor>&limit=500` (ascending NDJSON), up to 5 pages a tick.\n3. **Match.** Each row is looked up in `RULES` (the allow-list in `functions/alerts.ts`). Anything not\n   listed is ignored. A match becomes `(key, state, level)` \u2014 e.g. a `payments.webhook_event.failed`\n   row with `provider: stripe, state: broken` \u2192 key `payments:ingest:stripe`, state `broken`.\n4. **Compare + decide.** One `alert_state` row per key. Only a **crossing** posts:\n   - not-ok while the row said ok (or no row yet) \u2192 \u{1F534}/\u{1F7E0} alert\n   - ok while the row said not-ok \u2192 \u{1F7E2} \"RESOLVED\"\n   - same state again \u2192 silence (a \u23F0 reminder after `REPEAT_AFTER_HOURS`, default 24; `0` disables)\n5. **Advance** the watermark with `If-Match` on the cursor row's version. Cron deliveries are\n   at-least-once; if two ticks overlap, the first to move the watermark wins, and the `unique` key plus\n   `If-Match` on every state row mean a racing run gets a 409 and stands down instead of double-posting.\n\n## The events it listens for\n\nEvery name in the table below is an audit event a vxil feature writes **today**. Keys are what collapse\nrepeats: ten dead letters of the same job are one key, one row, one alert.\n\n| Audit event | Level | Key (one row each) | State |\n|---|---|---|---|\n| `payments.webhook_event.failed` | from payload (`error`) | `payments:ingest:<provider>` | from payload (`broken`) |\n| `payments.webhook.rejected` | from payload (`warn`) | `payments:webhook-rejected:<provider>` | from payload (`broken`) |\n| `payments.grant.failed` | from payload (`error`) | `payments:grant:<credit_type>:<source>` | from payload (`broken`) |\n| `payments.subscription.past_due` | warn | `payments:subscription:<end_user_id>` | broken |\n| `payments.subscription.active` | info | `payments:subscription:<end_user_id>` | **ok** \u2192 posts RESOLVED |\n| `payments.charge.disputed` | warn | `payments:disputes:<provider>` | broken |\n| `job.dead_lettered` | error | `jobs:dead-letter:<job_name>` | broken |\n| `job.dead_letter_quota_exceeded` | error | `jobs:dead-letter-quota` | broken |\n| `job.generation.failed` | error | `jobs:generation:<error_class>` | broken |\n| `functions.quarantined` | error | `functions:<name>` | broken |\n| `functions.quarantine.cleared` | info | `functions:<name>` | **ok** \u2192 posts RESOLVED |\n| `functions.deploy.denied` | warn | `functions:deploy-denied` | broken |\n| `notifications.delivery.dead_lettered` | from payload (`error`) | `notifications:dead-letter:<template_id>` | from payload (`broken`) |\n| `webhooks.delivery.dead_lettered` | from payload (`error`) | `webhooks:delivery:<subscription_id>` | from payload (`broken`) |\n| `webhooks.delivery.recovered` | from payload (`info`) | `webhooks:delivery:<subscription_id>` | **ok** \u2192 posts RESOLVED |\n| `webhooks.inbound.rejected` | from payload (`warn`) | `webhooks:inbound:<source_id>:<reason>` | from payload (`broken`) |\n| `jobs.schedule.missed` | from payload (`warn`) | `jobs:schedule:<schedule_id>` | from payload (**`stale`** \u2014 late, not broken) |\n| `jobs.schedule.recovered` | from payload (`info`) | `jobs:schedule:<schedule_id>` | **ok** \u2192 posts RESOLVED |\n| `functions.run.failed` | from payload (`error`) | `functions:run:<name>` | from payload (`broken`) |\n| `functions.run.recovered` | from payload (`info`) | `functions:run:<name>` | **ok** \u2192 posts RESOLVED |\n\n**Levels differ by event, and the table respects that.** The payments failure events and every\nlifecycle failure event (the last nine rows) carry their own `level` and `state` in the payload, so those\nrules defer to the event. The older `job.*` and `functions.quarantine*` events supply both from the rule.\n\n**Five pairs close their own alerts.** `past_due` \u2192 `active`, `quarantined` \u2192 `quarantine.cleared`,\n`webhooks.delivery.dead_lettered` \u2192 `.recovered`, `jobs.schedule.missed` \u2192 `.recovered` and\n`functions.run.failed` \u2192 `.recovered` share a key, so a recovery posts RESOLVED with no extra rule. Events with no natural \"ok\" \u2014 a dead\nletter \u2014 stay red until the reminder window, which is what `REPEAT_AFTER_HOURS` is for.\n\n**The same failure can arrive twice, on purpose.** Notification sends and outbound webhook deliveries\nride the jobs substrate, so a dead letter also arrives as `job.dead_lettered` with `job_name` set to\n`notifications.deliver` / `webhooks.deliver`. The dedicated `*.dead_lettered` events carry the\nfeature-level context (template id, subscription id, target host) that the generic job row lacks; keep\nboth rules, or drop `job.dead_lettered` if you only want the feature-level view.\n\n**Own the table.** `RULES` is data: add an event name, decide its key and level, push.\n\n## The message\n\n```\n\u{1F534} [ERROR] payments ingest (stripe) \u2192 BROKEN \u2014 signature verification failed (at 2026-09-10T06:00:12Z)\n\u{1F534} [ERROR] job dead-lettered: notifications.deliver \u2192 BROKEN (at 2026-09-10T06:03:44Z)\n\u23F0 STILL BROKEN: function quarantined: checkout (since 2026-09-09T06:01:02Z)\n\u{1F7E2} RESOLVED: payments ingest (stripe) is back to ok (was broken)\n```\n\n## What to learn from this\n\n- **The audit stream is the event spine.** Every feature writes its lifecycle there; a webhook\n  subscription fans it out, and a function can drain it. Nothing here needed a new primitive.\n- **Once-per-crossing suppression needs memory \u2014 a cms collection is that memory.** `unique` on `key`\n  and `If-Match` on every write make it correct under the at-least-once cron, not just usually right.\n- **Least privilege has a shape.** The function talks to cms through its scoped callback, reads the\n  audit stream with a `features:read`-only key it holds as a secret, and can reach exactly one external\n  host. Rotate either secret without a redeploy \u2014 refs resolve per invocation.\n\n**Latency:** a failure is posted within one cron interval (5 minutes) of the audit row landing.\n**Pairs with:** `templates/payments-heartbeat/` (the silence detector that emits its own crossings) and\n`templates/push-notifications/`.\n",
+    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Alerts to Slack\" \u2014 failure events \u2192 one chat message per state crossing.\n//\n// There is no vxil \"connectors\" feature and no alert-routing engine, on purpose:\n// every feature already writes its lifecycle to your tenant's audit stream, and\n// a function can read that stream. This blueprint is DISTRIBUTION over that\n// spine \u2014 one cron function, one cms collection as its memory, one BYO webhook:\n//   \u2022 cms       \u2192 `alert_state`: the watermark + per-condition state (ok|stale|\n//                 broken|could_not_check) that makes alerts once-per-crossing\n//   \u2022 functions \u2192 `alerts`: drains the audit stream past the watermark every\n//                 5 minutes, matches an allow-list of failure events, posts\n//                 to Slack (or Discord) through the egress allowlist\n// A permanently-red condition therefore produces ONE message when it turns red,\n// ONE when it recovers, and (optionally) a reminder every REPEAT_AFTER_HOURS.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    cms: {},\n    functions: { enabled: true },\n  },\n\n  cms: {\n    collections: {\n      // The function's memory. One row per alert KEY (e.g. `payments:ingest:stripe`,\n      // `jobs:dead-letter:notifications.deliver`, `functions:checkout`) plus the\n      // reserved `__cursor__` row that holds the audit-stream watermark.\n      alert_state: {\n        singular: 'alert_state',\n        fields: {\n          key: { type: 'string', required: true, indexSlot: 's1', unique: true }, // unique \u21D2 409 on a racing duplicate\n          state: { type: 'string', indexSlot: 's2' }, // ok | stale | broken | could_not_check\n          level: { type: 'string', indexSlot: 's3' }, // info | warn | error\n          event: { type: 'string' }, // the last audit event name seen for this key\n          detail: { type: 'text' }, // last reason/error text (truncated)\n          cursor: { type: 'string' }, // `__cursor__` row only: last processed audit id\n          last_event_id: { type: 'string' },\n          last_alert_at: { type: 'datetime', indexSlot: 't1' },\n          updated_at: { type: 'datetime', indexSlot: 't2' },\n        },\n      },\n    },\n  },\n\n  functions: {\n    // The whole blueprint is this one function. Cron every 5 minutes; also\n    // invocable by hand (`vxil functions invoke alerts --data '{\"test\":true}'`)\n    // to prove the webhook is wired without touching the watermark.\n    alerts: {\n      entry: './functions/alerts.ts',\n      trigger: { kind: 'cron', schedule: '*/5 * * * *' },\n      scopes: ['cms:read', 'cms:write'],\n      // Two BYO secrets, resolved per invocation and injected as env.secrets.<name>:\n      //   slack_webhook_url \u2014 the Slack incoming-webhook URL (or a Discord webhook,\n      //                       or a Google Chat space webhook)\n      //   vxil_read_key     \u2014 an API key of YOUR tenant holding ONLY `features:read`;\n      //                       the audit stream is not reachable through the\n      //                       function's scoped callback, so the drain reads it with\n      //                       this least-privilege key instead\n      secrets: ['secret:slack_webhook_url', 'secret:vxil_read_key'],\n      // Deny-by-default egress: only the chat host (add 'discord.com' for Discord,\n      // 'chat.googleapis.com' for a Google Chat space webhook).\n      egressAllow: ['hooks.slack.com'],\n    },\n  },\n\n  secrets: {\n    slack_webhook_url: { feature: 'functions', description: 'Slack incoming webhook (or Discord / Google Chat space webhook) URL' },\n    vxil_read_key: { feature: 'functions', description: 'a vxil API key with only features:read \u2014 reads the audit stream' },\n  },\n});\n",
+    "readme": "# Alerts to Slack (ops)\n\nFailure events from your backend \u2192 **one Slack (or Discord) message per state crossing**, with a\n\"resolved\" message when the condition clears. No connectors registry, no alert-routing feature \u2014 one\ncron function that drains your tenant's **audit stream** past a watermark, an allow-list of failure\nevents it cares about, and a `cms` collection as its memory so a permanently-red condition never\nspams the channel.\n\n```bash\nvxil init --template alerts-to-slack\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nprintf '%s' \"$SLACK_URL\" | vxil secrets set functions/slack_webhook_url\nprintf '%s' \"$READ_KEY\"  | vxil secrets set functions/vxil_read_key\nvxil push                             # collection + the `alerts` cron function\nvxil functions invoke alerts --data '{\"test\":true}'   # posts a test message\n```\n\n**The two secrets** (references in the config, values only ever in the encrypted secret store):\n\n| Secret | What it is | Where it comes from |\n|---|---|---|\n| `slack_webhook_url` | a Slack *incoming webhook* URL (or a Discord webhook URL, or a Google Chat *space webhook* URL) | Slack \u2192 Apps \u2192 Incoming Webhooks; Discord \u2192 channel \u2192 Integrations \u2192 Webhooks; Google Chat \u2192 space \u2192 Apps & integrations \u2192 Webhooks |\n| `vxil_read_key` | an API key **of this tenant** holding **only `features:read`** | dashboard \u2192 API keys \u2192 create, tick `features:read` and nothing else |\n\nWhy a key at all? The audit stream (`GET /v1/audit` and its NDJSON export) is a control-plane read that is\n**not** on a function's scoped callback (the callback covers the feature APIs \u2014 cms, payments, jobs\u2026),\nso the drain reads it with the narrowest key that can: read-only, no write scope, revocable in one click.\nFor Discord, add `'discord.com'` to `egressAllow` \u2014 the function sends both Slack's `text` and Discord's\n`content` field, so one message body works on either.\nFor Google Chat, add `'chat.googleapis.com'` to `egressAllow` \u2014 a space webhook takes `text` alone, and the\nfunction sends only that field to that host.\n\n## What it does, every 5 minutes\n\n1. **Watermark.** Reads the `__cursor__` row in `alert_state`. On the very first run it stores the\n   *newest* audit id and stops \u2014 history never becomes an alert storm.\n2. **Drain.** `GET /v1/audit/export?after_id=<cursor>&limit=500` (ascending NDJSON), up to 5 pages a tick.\n3. **Match.** Each row is looked up in `RULES` (the allow-list in `functions/alerts.ts`). Anything not\n   listed is ignored. A match becomes `(key, state, level)` \u2014 e.g. a `payments.webhook_event.failed`\n   row with `provider: stripe, state: broken` \u2192 key `payments:ingest:stripe`, state `broken`.\n4. **Compare + decide.** One `alert_state` row per key. Only a **crossing** posts:\n   - not-ok while the row said ok (or no row yet) \u2192 \u{1F534}/\u{1F7E0} alert\n   - ok while the row said not-ok \u2192 \u{1F7E2} \"RESOLVED\"\n   - same state again \u2192 silence (a \u23F0 reminder after `REPEAT_AFTER_HOURS`, default 24; `0` disables)\n5. **Advance** the watermark with `If-Match` on the cursor row's version. Cron deliveries are\n   at-least-once; if two ticks overlap, the first to move the watermark wins, and the `unique` key plus\n   `If-Match` on every state row mean a racing run gets a 409 and stands down instead of double-posting.\n\n## The events it listens for\n\nEvery name in the table below is an audit event a vxil feature writes **today**. Keys are what collapse\nrepeats: ten dead letters of the same job are one key, one row, one alert.\n\n| Audit event | Level | Key (one row each) | State |\n|---|---|---|---|\n| `payments.webhook_event.failed` | from payload (`error`) | `payments:ingest:<provider>` | from payload (`broken`) |\n| `payments.webhook.rejected` | from payload (`warn`) | `payments:webhook-rejected:<provider>` | from payload (`broken`) |\n| `payments.grant.failed` | from payload (`error`) | `payments:grant:<credit_type>:<source>` | from payload (`broken`) |\n| `payments.subscription.past_due` | warn | `payments:subscription:<end_user_id>` | broken |\n| `payments.subscription.active` | info | `payments:subscription:<end_user_id>` | **ok** \u2192 posts RESOLVED |\n| `payments.charge.disputed` | warn | `payments:disputes:<provider>` | broken |\n| `job.dead_lettered` | error | `jobs:dead-letter:<job_name>` | broken |\n| `job.dead_letter_quota_exceeded` | error | `jobs:dead-letter-quota` | broken |\n| `job.generation.failed` | error | `jobs:generation:<error_class>` | broken |\n| `functions.quarantined` | error | `functions:<name>` | broken |\n| `functions.quarantine.cleared` | info | `functions:<name>` | **ok** \u2192 posts RESOLVED |\n| `functions.deploy.denied` | warn | `functions:deploy-denied` | broken |\n| `notifications.delivery.dead_lettered` | from payload (`error`) | `notifications:dead-letter:<template_id>` | from payload (`broken`) |\n| `webhooks.delivery.dead_lettered` | from payload (`error`) | `webhooks:delivery:<subscription_id>` | from payload (`broken`) |\n| `webhooks.delivery.recovered` | from payload (`info`) | `webhooks:delivery:<subscription_id>` | **ok** \u2192 posts RESOLVED |\n| `webhooks.inbound.rejected` | from payload (`warn`) | `webhooks:inbound:<source_id>:<reason>` | from payload (`broken`) |\n| `jobs.schedule.missed` | from payload (`warn`) | `jobs:schedule:<schedule_id>` | from payload (**`stale`** \u2014 late, not broken) |\n| `jobs.schedule.recovered` | from payload (`info`) | `jobs:schedule:<schedule_id>` | **ok** \u2192 posts RESOLVED |\n| `functions.run.failed` | from payload (`error`) | `functions:run:<name>` | from payload (`broken`) |\n| `functions.run.recovered` | from payload (`info`) | `functions:run:<name>` | **ok** \u2192 posts RESOLVED |\n\n**Levels differ by event, and the table respects that.** The payments failure events and every\nlifecycle failure event (the last nine rows) carry their own `level` and `state` in the payload, so those\nrules defer to the event. The older `job.*` and `functions.quarantine*` events supply both from the rule.\n\n**Five pairs close their own alerts.** `past_due` \u2192 `active`, `quarantined` \u2192 `quarantine.cleared`,\n`webhooks.delivery.dead_lettered` \u2192 `.recovered`, `jobs.schedule.missed` \u2192 `.recovered` and\n`functions.run.failed` \u2192 `.recovered` share a key, so a recovery posts RESOLVED with no extra rule. Events with no natural \"ok\" \u2014 a dead\nletter \u2014 stay red until the reminder window, which is what `REPEAT_AFTER_HOURS` is for.\n\n**The same failure can arrive twice, on purpose.** Notification sends and outbound webhook deliveries\nride the jobs substrate, so a dead letter also arrives as `job.dead_lettered` with `job_name` set to\n`notifications.deliver` / `webhooks.deliver`. The dedicated `*.dead_lettered` events carry the\nfeature-level context (template id, subscription id, target host) that the generic job row lacks; keep\nboth rules, or drop `job.dead_lettered` if you only want the feature-level view.\n\n**Own the table.** `RULES` is data: add an event name, decide its key and level, push.\n\n## The message\n\n```\n\u{1F534} [ERROR] payments ingest (stripe) \u2192 BROKEN \u2014 signature verification failed (at 2026-09-10T06:00:12Z)\n\u{1F534} [ERROR] job dead-lettered: notifications.deliver \u2192 BROKEN (at 2026-09-10T06:03:44Z)\n\u23F0 STILL BROKEN: function quarantined: checkout (since 2026-09-09T06:01:02Z)\n\u{1F7E2} RESOLVED: payments ingest (stripe) is back to ok (was broken)\n```\n\n## What to learn from this\n\n- **The audit stream is the event spine.** Every feature writes its lifecycle there; a webhook\n  subscription fans it out, and a function can drain it. Nothing here needed a new primitive.\n- **Once-per-crossing suppression needs memory \u2014 a cms collection is that memory.** `unique` on `key`\n  and `If-Match` on every write make it correct under the at-least-once cron, not just usually right.\n- **Least privilege has a shape.** The function talks to cms through its scoped callback, reads the\n  audit stream with a `features:read`-only key it holds as a secret, and can reach exactly one external\n  host. Rotate either secret without a redeploy \u2014 refs resolve per invocation.\n\n**Latency:** a failure is posted within one cron interval (5 minutes) of the audit row landing.\n**Pairs with:** `templates/payments-heartbeat/` (the silence detector that emits its own crossings) and\n`templates/push-notifications/`.\n",
     "functions": {
-      "alerts.ts": "// alerts.ts \u2014 FAILURE EVENTS \u2192 ONE CHAT MESSAGE PER STATE CROSSING (a vxil function).\n//\n// Trigger: cron `*/5 * * * *`. Each run:\n//   1. reads the watermark (the `__cursor__` row in `alert_state`; first run = \"now\",\n//      so history never produces an alert storm),\n//   2. drains the tenant audit stream past it \u2014 `GET /v1/audit/export?after_id=\u2026`\n//      (ascending, NDJSON) with the `vxil_read_key` secret (a key holding ONLY\n//      `features:read`; the audit stream is not on the scoped callback),\n//   3. matches each row against RULES (the allow-list below) and turns it into a\n//      (key, state, level) \u2014 e.g. `payments:ingest:stripe` \u2192 `broken`,\n//   4. compares with the stored state for that key (cms, one row per key, `unique`\n//      key \u21D2 a racing run gets a 409 and stands down) and posts ONLY on a crossing:\n//      ok\u2192red = alert, red\u2192ok = \"resolved\", red\u2192red = silence (or a reminder after\n//      REPEAT_AFTER_HOURS),\n//   5. advances the watermark (If-Match on the cursor row's version \u2014 a concurrent\n//      run that already advanced it wins; jobs may deliver a cron tick twice).\n//\n// Manual check: `vxil functions invoke alerts --data '{\"test\":true}'` posts a test\n// message and touches nothing else.\n//\n// Tune the constants; own the RULES table \u2014 it is data, not a routing engine.\n\nimport type { CronFunctionEnvelope, HttpFunctionEnvelope } from '@vxil/sdk';\n\nconst REPEAT_AFTER_HOURS = 24; // remind about a still-red condition this often; 0 = never\nconst MAX_PAGES_PER_RUN = 5; // \xD7 500 audit rows \u2014 bounds one cron tick\nconst MAX_POSTS_PER_RUN = 20; // a burst of distinct failures collapses into one summary line\nconst DETAIL_MAX = 240;\n\ntype Level = 'info' | 'warn' | 'error';\ntype State = 'ok' | 'stale' | 'broken' | 'could_not_check';\ntype Payload = Record<string, unknown>;\n\ninterface Rule {\n  /** A literal level, or 'payload' to take `payload.level` (the payments failure\n   *  events carry one; the jobs/functions ones do not). */\n  level: Level | 'payload';\n  key: (p: Payload) => string; // one state row per key \u2014 this is what suppresses repeats\n  title: (p: Payload) => string;\n  /** A literal state, or omitted to take `payload.state` (falling back to 'broken'). */\n  state?: State;\n}\n\nconst str = (v: unknown, fallback = 'unknown') => (typeof v === 'string' && v ? v : fallback);\n\n/** THE ALLOW-LIST. Every name below is an audit event a vxil feature writes;\n *  anything not listed is ignored by the drain. The KEY is what collapses\n *  repeats: ten dead letters of the same job are one key, one row, one alert.\n *\n *  Every name below is emitted today (2026-09-10). A rule for an event nobody\n *  emits would simply never match \u2014 so if you add one, verify the emitter first.\n */\nconst RULES: Record<string, Rule> = {\n  // \u2500\u2500 payments \u2014 the money path. A silent failure here is lost revenue. \u2500\u2500\u2500\u2500\u2500\u2500\n  // These three carry `level` (info|warn|error) and `state` (ok|stale|broken|\n  // could_not_check) in their payload, so the rule defers to the event.\n  'payments.webhook_event.failed': {\n    level: 'payload', // emitted as error/broken\n    key: (p) => `payments:ingest:${str(p.provider, 'all')}`,\n    title: (p) => `payments ingest (${str(p.provider, 'all providers')})`,\n  },\n  'payments.webhook.rejected': {\n    level: 'payload', // emitted as warn/broken\n    key: (p) => `payments:webhook-rejected:${str(p.provider)}`,\n    title: (p) => `payments webhook rejected (${str(p.provider)})`,\n  },\n  // NOTE: grant.failed carries NO `provider` \u2014 it is keyed on the credit type\n  // and the grant source instead (end_user_id/credit_type/amount/grant_key/\n  // source/error). Keying on a field an event does not carry would collapse\n  // every provider into one bucket named \"unknown\".\n  'payments.grant.failed': {\n    level: 'payload', // emitted as error/broken\n    key: (p) => `payments:grant:${str(p.credit_type, 'credits')}:${str(p.source, 'webhook')}`,\n    title: (p) => `entitlement grant failed (${str(p.credit_type, 'credits')} via ${str(p.source, 'webhook')})`,\n  },\n  // Dunning. `past_due` is the red crossing and `active` is its RESOLVED twin \u2014\n  // the same key, so a recovered subscription closes its own alert. Both are\n  // emitted at level info, so the rule forces the level it wants.\n  'payments.subscription.past_due': {\n    level: 'warn',\n    key: (p) => `payments:subscription:${str(p.end_user_id, 'unknown-user')}`,\n    title: (p) => `subscription past due (user ${str(p.end_user_id)})`,\n    state: 'broken',\n  },\n  'payments.subscription.active': {\n    level: 'info',\n    key: (p) => `payments:subscription:${str(p.end_user_id, 'unknown-user')}`,\n    title: (p) => `subscription past due (user ${str(p.end_user_id)})`,\n    state: 'ok',\n  },\n  // A dispute is a chargeback in progress \u2014 money already collected, now at risk.\n  'payments.charge.disputed': {\n    level: 'warn',\n    key: (p) => `payments:disputes:${str(p.provider)}`,\n    title: (p) => `charge disputed (${str(p.provider)})`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 jobs \u2014 the delivery substrate. Notification and outbound-webhook sends\n  //    ride jobs, so THEIR dead letters arrive here too, under `job_name`\n  //    ('notifications.deliver', 'webhooks.deliver', 'fn-cron:<name>', \u2026).\n  //    These payloads carry run_id/attempt/job_name and NO level or state, so\n  //    the rule supplies both. \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  'job.dead_lettered': {\n    level: 'error',\n    key: (p) => `jobs:dead-letter:${str(p.job_name)}`,\n    title: (p) => `job dead-lettered: ${str(p.job_name)}`,\n    state: 'broken',\n  },\n  'job.dead_letter_quota_exceeded': {\n    level: 'error',\n    key: () => 'jobs:dead-letter-quota',\n    title: () => 'daily dead-letter quota exceeded',\n    state: 'broken',\n  },\n  'job.generation.failed': {\n    level: 'error',\n    key: (p) => `jobs:generation:${str(p.error_class, 'failed')}`,\n    title: (p) => `generation job failed (${str(p.error_class, 'unclassified')})`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 functions \u2014 the breaker. Consecutive failures quarantine a function;\n  //    clearing the quarantine is the ok crossing on the SAME key, so this pair\n  //    produces exactly one \u{1F534} and one \u{1F7E2}. Payload: name (+ consecutive_failures).\n  'functions.quarantined': {\n    level: 'error',\n    key: (p) => `functions:${str(p.name)}`,\n    title: (p) => `function quarantined: ${str(p.name)}`,\n    state: 'broken',\n  },\n  'functions.quarantine.cleared': {\n    level: 'info',\n    key: (p) => `functions:${str(p.name)}`,\n    title: (p) => `function quarantined: ${str(p.name)}`,\n    state: 'ok',\n  },\n  'functions.deploy.denied': {\n    level: 'warn',\n    key: () => 'functions:deploy-denied',\n    title: (p) => `function deploy denied (needs the ${str(p.required_tier)} tier)`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 The lifecycle failure events (live since 2026-09-10). Every one of these\n  //    carries `level` + `state` in its payload (the platform's failure-event\n  //    vocabulary gate enforces it), so the rules defer to the event. Each\n  //    failure/recovery pair shares a key, so a recovery posts RESOLVED. \u2500\u2500\u2500\u2500\u2500\u2500\n  'notifications.delivery.dead_lettered': {\n    level: 'payload', // emitted as error/broken; payload: delivery_id, template_id, error_class, attempts\n    key: (p) => `notifications:dead-letter:${str(p.template_id, 'all')}`,\n    title: (p) => `notification delivery dead-lettered (${str(p.template_id, 'all templates')})`,\n  },\n  'webhooks.delivery.dead_lettered': {\n    level: 'payload', // error/broken; payload: subscription_id, target_host, attempts, error_class\n    key: (p) => `webhooks:delivery:${str(p.subscription_id, 'all')}`,\n    title: (p) => `outbound webhook dead-lettered (${str(p.target_host, str(p.subscription_id, 'all subscriptions'))})`,\n  },\n  'webhooks.delivery.recovered': {\n    level: 'payload', // info/ok \u2014 same key as the dead-letter \u2192 RESOLVED\n    key: (p) => `webhooks:delivery:${str(p.subscription_id, 'all')}`,\n    title: (p) => `outbound webhook dead-lettered (${str(p.target_host, str(p.subscription_id, 'all subscriptions'))})`,\n  },\n  'webhooks.inbound.rejected': {\n    level: 'payload', // warn/broken; payload: source_id, provider, reason, fingerprint (never the body)\n    key: (p) => `webhooks:inbound:${str(p.source_id)}:${str(p.reason)}`,\n    title: (p) => `inbound webhook rejected (${str(p.provider, 'source')} ${str(p.source_id)}: ${str(p.reason)})`,\n  },\n  'jobs.schedule.missed': {\n    level: 'payload', // warn/STALE \u2014 a late tick is stale, not broken; payload: schedule_id, job_name, late_seconds\n    key: (p) => `jobs:schedule:${str(p.schedule_id)}`,\n    title: (p) => `scheduled job did not fire on time (${str(p.job_name, str(p.schedule_id))})`,\n  },\n  'jobs.schedule.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED on the next on-time fire\n    key: (p) => `jobs:schedule:${str(p.schedule_id)}`,\n    title: (p) => `scheduled job did not fire on time (${str(p.job_name, str(p.schedule_id))})`,\n  },\n  // A function's cron trigger that produced NO run for 2\xD7 its interval \u2014 the\n  // platform's silent-schedule watch (error/stale), and the recovery on the same\n  // key. Payload: function, schedule_id, cron, last_run_at, expected_by.\n  'functions.schedule.missed': {\n    level: 'payload',\n    key: (p) => `functions:schedule:${str(p.function, str(p.schedule_id))}`,\n    title: (p) => `cron function stopped firing: ${str(p.function, str(p.job_name))} (last run ${str(p.last_run_at, 'never')})`,\n  },\n  'functions.schedule.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED when a run appears again\n    key: (p) => `functions:schedule:${str(p.function, str(p.schedule_id))}`,\n    title: (p) => `cron function stopped firing: ${str(p.function, str(p.job_name))}`,\n  },\n  'functions.run.failed': {\n    level: 'payload', // error/broken; payload: name, trigger, run_id, error_class\n    key: (p) => `functions:run:${str(p.name)}`,\n    title: (p) => `function failing: ${str(p.name)} (${str(p.trigger, 'trigger')})`,\n  },\n  'functions.run.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED\n    key: (p) => `functions:run:${str(p.name)}`,\n    title: (p) => `function failing: ${str(p.name)} (${str(p.trigger, 'trigger')})`,\n  },\n};\n\n// the schedule tick, or a hand invoke (`POST /v1/fn/alerts`) carrying `{ test: true }`\ntype Envelope = CronFunctionEnvelope | HttpFunctionEnvelope<{ test?: boolean }>;\ninterface AuditRow { id: string | number; event: string; payload?: Payload; created_at?: string }\ninterface StateData {\n  key: string; state?: State; level?: Level; event?: string; detail?: string;\n  cursor?: string; last_event_id?: string; last_alert_at?: string; updated_at?: string;\n}\ninterface Item { item_id: string; version?: number; data: StateData }\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Envelope;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const cms = env.scoped_jwts?.cms;\n    const hook = env.secrets?.slack_webhook_url;\n    const readKey = env.secrets?.vxil_read_key;\n    if (!cms) return Response.json({ error: 'missing cms scope' }, { status: 403 });\n    if (!hook || !readKey) return Response.json({ error: 'missing secrets' }, { status: 409 });\n\n    // Manual wiring check \u2014 posts, touches nothing else.\n    if (env.payload?.test) {\n      const r = await post(hook, `\u{1F7E2} [INFO] alerts-to-slack is wired (test message)`);\n      return Response.json({ test: true, posted: r.ok, status: r.status });\n    }\n\n    const store = new Store(base, cms);\n\n    // 1. the watermark (first run: start at the newest audit id \u2014 no history storm)\n    const cursorRow = await store.byKey('__cursor__');\n    if (!cursorRow) {\n      const head = await newestAuditId(base, readKey);\n      await store.create({ key: '__cursor__', cursor: head, updated_at: iso() });\n      return Response.json({ initialized: true, cursor: head });\n    }\n    let cursor = cursorRow.data.cursor ?? '0';\n    const cursorVersion = cursorRow.version;\n\n    // 2\u20134. drain + evaluate\n    const posts: string[] = [];\n    let scanned = 0;\n    let matched = 0;\n    for (let page = 0; page < MAX_PAGES_PER_RUN; page++) {\n      const { rows, next } = await exportAudit(base, readKey, cursor);\n      for (const row of rows) {\n        scanned++;\n        const rule = RULES[row.event];\n        if (rule) {\n          matched++;\n          const msg = await evaluate(store, rule, row);\n          if (msg) posts.push(msg);\n        }\n        cursor = String(row.id);\n      }\n      if (!next) break;\n      cursor = next;\n    }\n\n    // deliver (bounded)\n    let posted = 0;\n    const lines = posts.slice(0, MAX_POSTS_PER_RUN);\n    if (posts.length > MAX_POSTS_PER_RUN) lines.push(`\u2026 and ${posts.length - MAX_POSTS_PER_RUN} more state changes this tick`);\n    for (const text of lines) {\n      const r = await post(hook, text);\n      if (r.ok) posted++;\n    }\n\n    // 5. advance the watermark \u2014 If-Match: a concurrent run that already moved it wins\n    const advanced = await store.patch(cursorRow.item_id, cursorVersion, { cursor, updated_at: iso() });\n\n    return Response.json({ scanned, matched, alerts: posts.length, posted, cursor, advanced });\n  },\n};\n\n/** Decide, for one matched audit row, whether a message is due; persist the state. */\nasync function evaluate(store: Store, rule: Rule, row: AuditRow): Promise<string | null> {\n  const p = row.payload ?? {};\n  const key = rule.key(p);\n  const next: State = rule.state ?? (isState(p.state) ? p.state : 'broken');\n  const level: Level = rule.level === 'payload' ? (isLevel(p.level) ? p.level : 'error') : rule.level;\n  const title = rule.title(p);\n  const detail = str(p.reason ?? p.error ?? p.message ?? p.last_error_msg, '').slice(0, DETAIL_MAX);\n  const now = iso();\n  const eventId = String(row.id);\n  const base: StateData = { key, state: next, level, event: row.event, detail, last_event_id: eventId, updated_at: now };\n\n  const current = await store.byKey(key);\n  if (!current) {\n    // First sighting. A green first sighting is remembered silently \u2014 nothing was red.\n    if (next === 'ok') { await store.create(base); return null; }\n    const created = await store.create({ ...base, last_alert_at: now });\n    return created ? format(level, next, title, detail, row.created_at) : null; // 409 = a racing run owns it\n  }\n  const prev = current.data.state ?? 'ok';\n  if (prev !== next) {\n    // A CROSSING. If-Match: exactly one concurrent run wins the transition.\n    const ok = await store.patch(current.item_id, current.version, { ...base, last_alert_at: now });\n    if (!ok) return null;\n    return next === 'ok'\n      ? `\u{1F7E2} RESOLVED: ${title} is back to ok (was ${prev})`\n      : format(level, next, title, detail, row.created_at);\n  }\n  // Same state. Red stays quiet \u2014 unless a reminder is due.\n  if (next !== 'ok' && REPEAT_AFTER_HOURS > 0) {\n    const last = Date.parse(current.data.last_alert_at ?? '') || 0;\n    if (Date.now() - last >= REPEAT_AFTER_HOURS * 3600e3) {\n      const ok = await store.patch(current.item_id, current.version, { ...base, last_alert_at: now });\n      return ok ? `\u23F0 STILL ${next.toUpperCase()}: ${title} (since ${current.data.last_alert_at ?? '?'})` : null;\n    }\n  }\n  await store.patch(current.item_id, current.version, base); // keep detail/last_event_id fresh, no post\n  return null;\n}\n\nfunction format(level: Level, state: State, title: string, detail: string, at?: string): string {\n  const dot = level === 'error' ? '\u{1F534}' : level === 'warn' ? '\u{1F7E0}' : '\u{1F535}';\n  return `${dot} [${level.toUpperCase()}] ${title} \u2192 ${state.toUpperCase()}${detail ? ` \u2014 ${detail}` : ''}${at ? ` (at ${at})` : ''}`;\n}\n\n// \u2500\u2500 the audit stream (ascending NDJSON export; `x-vxil-next-after-id` continues it) \u2500\u2500\nasync function exportAudit(base: string, key: string, afterId: string): Promise<{ rows: AuditRow[]; next: string | null }> {\n  const res = await fetch(`${base}/v1/audit/export?after_id=${encodeURIComponent(afterId)}&limit=500`, {\n    headers: { authorization: `Bearer ${key}` },\n  });\n  if (!res.ok) throw new Error(`audit export ${res.status}`);\n  const rows = (await res.text()).split('\\n').filter(Boolean).map((l) => JSON.parse(l) as AuditRow);\n  return { rows, next: res.headers.get('x-vxil-next-after-id') };\n}\nasync function newestAuditId(base: string, key: string): Promise<string> {\n  const res = await fetch(`${base}/v1/audit?limit=1`, { headers: { authorization: `Bearer ${key}` } });\n  if (!res.ok) throw new Error(`audit list ${res.status}`);\n  const body = (await res.json()) as { data?: { events?: AuditRow[] } };\n  return String(body.data?.events?.[0]?.id ?? '0');\n}\n\n// \u2500\u2500 the cms state store (the REST envelope: { data: { items:[{item_id, version, data}] } }) \u2500\u2500\nclass Store {\n  constructor(private base: string, private jwt: string) {}\n  private h() { return { authorization: `Bearer ${this.jwt}`, 'content-type': 'application/json' }; }\n  async byKey(key: string): Promise<Item | null> {\n    const filter = encodeURIComponent(JSON.stringify({ key }));\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state?filter=${filter}&limit=1`, { headers: this.h() });\n    const body = (await res.json()) as { data?: { items?: Item[] } };\n    return body.data?.items?.[0] ?? null;\n  }\n  /** false on 409 (unique key already claimed by a concurrent run) */\n  async create(data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state`, {\n      method: 'POST', headers: this.h(), body: JSON.stringify({ data, status: 'published' }),\n    });\n    return res.ok;\n  }\n  /** false on 409 version_conflict (another run transitioned this key first) */\n  async patch(itemId: string, version: number | undefined, data: Partial<StateData>): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state/${itemId}`, {\n      method: 'PATCH',\n      headers: { ...this.h(), ...(version !== undefined ? { 'if-match': String(version) } : {}) },\n      body: JSON.stringify({ data }),\n    });\n    return res.ok;\n  }\n}\n\n// \u2500\u2500 the chat webhook: `text` is Slack's field, `content` is Discord's \u2014 send both \u2500\u2500\nasync function post(url: string, text: string): Promise<{ ok: boolean; status: number }> {\n  const res = await fetch(url, {\n    method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ text, content: text }),\n  }).catch(() => null);\n  return { ok: Boolean(res?.ok), status: res?.status ?? 0 };\n}\n\nconst iso = () => new Date().toISOString();\nconst isState = (v: unknown): v is State => v === 'ok' || v === 'stale' || v === 'broken' || v === 'could_not_check';\nconst isLevel = (v: unknown): v is Level => v === 'info' || v === 'warn' || v === 'error';\n"
+      "alerts.ts": "// alerts.ts \u2014 FAILURE EVENTS \u2192 ONE CHAT MESSAGE PER STATE CROSSING (a vxil function).\n//\n// Trigger: cron `*/5 * * * *`. Each run:\n//   1. reads the watermark (the `__cursor__` row in `alert_state`; first run = \"now\",\n//      so history never produces an alert storm),\n//   2. drains the tenant audit stream past it \u2014 `GET /v1/audit/export?after_id=\u2026`\n//      (ascending, NDJSON) with the `vxil_read_key` secret (a key holding ONLY\n//      `features:read`; the audit stream is not on the scoped callback),\n//   3. matches each row against RULES (the allow-list below) and turns it into a\n//      (key, state, level) \u2014 e.g. `payments:ingest:stripe` \u2192 `broken`,\n//   4. compares with the stored state for that key (cms, one row per key, `unique`\n//      key \u21D2 a racing run gets a 409 and stands down) and posts ONLY on a crossing:\n//      ok\u2192red = alert, red\u2192ok = \"resolved\", red\u2192red = silence (or a reminder after\n//      REPEAT_AFTER_HOURS),\n//   5. advances the watermark (If-Match on the cursor row's version \u2014 a concurrent\n//      run that already advanced it wins; jobs may deliver a cron tick twice).\n//\n// Manual check: `vxil functions invoke alerts --data '{\"test\":true}'` posts a test\n// message and touches nothing else.\n//\n// Tune the constants; own the RULES table \u2014 it is data, not a routing engine.\n\nimport type { CronFunctionEnvelope, HttpFunctionEnvelope } from '@vxil/sdk';\n\nconst REPEAT_AFTER_HOURS = 24; // remind about a still-red condition this often; 0 = never\nconst MAX_PAGES_PER_RUN = 5; // \xD7 500 audit rows \u2014 bounds one cron tick\nconst MAX_POSTS_PER_RUN = 20; // a burst of distinct failures collapses into one summary line\nconst DETAIL_MAX = 240;\n\ntype Level = 'info' | 'warn' | 'error';\ntype State = 'ok' | 'stale' | 'broken' | 'could_not_check';\ntype Payload = Record<string, unknown>;\n\ninterface Rule {\n  /** A literal level, or 'payload' to take `payload.level` (the payments failure\n   *  events carry one; the jobs/functions ones do not). */\n  level: Level | 'payload';\n  key: (p: Payload) => string; // one state row per key \u2014 this is what suppresses repeats\n  title: (p: Payload) => string;\n  /** A literal state, or omitted to take `payload.state` (falling back to 'broken'). */\n  state?: State;\n}\n\nconst str = (v: unknown, fallback = 'unknown') => (typeof v === 'string' && v ? v : fallback);\n\n/** THE ALLOW-LIST. Every name below is an audit event a vxil feature writes;\n *  anything not listed is ignored by the drain. The KEY is what collapses\n *  repeats: ten dead letters of the same job are one key, one row, one alert.\n *\n *  Every name below is emitted today (2026-09-10). A rule for an event nobody\n *  emits would simply never match \u2014 so if you add one, verify the emitter first.\n */\nconst RULES: Record<string, Rule> = {\n  // \u2500\u2500 payments \u2014 the money path. A silent failure here is lost revenue. \u2500\u2500\u2500\u2500\u2500\u2500\n  // These three carry `level` (info|warn|error) and `state` (ok|stale|broken|\n  // could_not_check) in their payload, so the rule defers to the event.\n  'payments.webhook_event.failed': {\n    level: 'payload', // emitted as error/broken\n    key: (p) => `payments:ingest:${str(p.provider, 'all')}`,\n    title: (p) => `payments ingest (${str(p.provider, 'all providers')})`,\n  },\n  'payments.webhook.rejected': {\n    level: 'payload', // emitted as warn/broken\n    key: (p) => `payments:webhook-rejected:${str(p.provider)}`,\n    title: (p) => `payments webhook rejected (${str(p.provider)})`,\n  },\n  // NOTE: grant.failed carries NO `provider` \u2014 it is keyed on the credit type\n  // and the grant source instead (end_user_id/credit_type/amount/grant_key/\n  // source/error). Keying on a field an event does not carry would collapse\n  // every provider into one bucket named \"unknown\".\n  'payments.grant.failed': {\n    level: 'payload', // emitted as error/broken\n    key: (p) => `payments:grant:${str(p.credit_type, 'credits')}:${str(p.source, 'webhook')}`,\n    title: (p) => `entitlement grant failed (${str(p.credit_type, 'credits')} via ${str(p.source, 'webhook')})`,\n  },\n  // Dunning. `past_due` is the red crossing and `active` is its RESOLVED twin \u2014\n  // the same key, so a recovered subscription closes its own alert. Both are\n  // emitted at level info, so the rule forces the level it wants.\n  'payments.subscription.past_due': {\n    level: 'warn',\n    key: (p) => `payments:subscription:${str(p.end_user_id, 'unknown-user')}`,\n    title: (p) => `subscription past due (user ${str(p.end_user_id)})`,\n    state: 'broken',\n  },\n  'payments.subscription.active': {\n    level: 'info',\n    key: (p) => `payments:subscription:${str(p.end_user_id, 'unknown-user')}`,\n    title: (p) => `subscription past due (user ${str(p.end_user_id)})`,\n    state: 'ok',\n  },\n  // A dispute is a chargeback in progress \u2014 money already collected, now at risk.\n  'payments.charge.disputed': {\n    level: 'warn',\n    key: (p) => `payments:disputes:${str(p.provider)}`,\n    title: (p) => `charge disputed (${str(p.provider)})`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 jobs \u2014 the delivery substrate. Notification and outbound-webhook sends\n  //    ride jobs, so THEIR dead letters arrive here too, under `job_name`\n  //    ('notifications.deliver', 'webhooks.deliver', 'fn-cron:<name>', \u2026).\n  //    These payloads carry run_id/attempt/job_name and NO level or state, so\n  //    the rule supplies both. \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  'job.dead_lettered': {\n    level: 'error',\n    key: (p) => `jobs:dead-letter:${str(p.job_name)}`,\n    title: (p) => `job dead-lettered: ${str(p.job_name)}`,\n    state: 'broken',\n  },\n  'job.dead_letter_quota_exceeded': {\n    level: 'error',\n    key: () => 'jobs:dead-letter-quota',\n    title: () => 'daily dead-letter quota exceeded',\n    state: 'broken',\n  },\n  'job.generation.failed': {\n    level: 'error',\n    key: (p) => `jobs:generation:${str(p.error_class, 'failed')}`,\n    title: (p) => `generation job failed (${str(p.error_class, 'unclassified')})`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 functions \u2014 the breaker. Consecutive failures quarantine a function;\n  //    clearing the quarantine is the ok crossing on the SAME key, so this pair\n  //    produces exactly one \u{1F534} and one \u{1F7E2}. Payload: name (+ consecutive_failures).\n  'functions.quarantined': {\n    level: 'error',\n    key: (p) => `functions:${str(p.name)}`,\n    title: (p) => `function quarantined: ${str(p.name)}`,\n    state: 'broken',\n  },\n  'functions.quarantine.cleared': {\n    level: 'info',\n    key: (p) => `functions:${str(p.name)}`,\n    title: (p) => `function quarantined: ${str(p.name)}`,\n    state: 'ok',\n  },\n  'functions.deploy.denied': {\n    level: 'warn',\n    key: () => 'functions:deploy-denied',\n    title: (p) => `function deploy denied (needs the ${str(p.required_tier)} tier)`,\n    state: 'broken',\n  },\n\n  // \u2500\u2500 The lifecycle failure events (live since 2026-09-10). Every one of these\n  //    carries `level` + `state` in its payload (the platform's failure-event\n  //    vocabulary gate enforces it), so the rules defer to the event. Each\n  //    failure/recovery pair shares a key, so a recovery posts RESOLVED. \u2500\u2500\u2500\u2500\u2500\u2500\n  'notifications.delivery.dead_lettered': {\n    level: 'payload', // emitted as error/broken; payload: delivery_id, template_id, error_class, attempts\n    key: (p) => `notifications:dead-letter:${str(p.template_id, 'all')}`,\n    title: (p) => `notification delivery dead-lettered (${str(p.template_id, 'all templates')})`,\n  },\n  'webhooks.delivery.dead_lettered': {\n    level: 'payload', // error/broken; payload: subscription_id, target_host, attempts, error_class\n    key: (p) => `webhooks:delivery:${str(p.subscription_id, 'all')}`,\n    title: (p) => `outbound webhook dead-lettered (${str(p.target_host, str(p.subscription_id, 'all subscriptions'))})`,\n  },\n  'webhooks.delivery.recovered': {\n    level: 'payload', // info/ok \u2014 same key as the dead-letter \u2192 RESOLVED\n    key: (p) => `webhooks:delivery:${str(p.subscription_id, 'all')}`,\n    title: (p) => `outbound webhook dead-lettered (${str(p.target_host, str(p.subscription_id, 'all subscriptions'))})`,\n  },\n  'webhooks.inbound.rejected': {\n    level: 'payload', // warn/broken; payload: source_id, provider, reason, fingerprint (never the body)\n    key: (p) => `webhooks:inbound:${str(p.source_id)}:${str(p.reason)}`,\n    title: (p) => `inbound webhook rejected (${str(p.provider, 'source')} ${str(p.source_id)}: ${str(p.reason)})`,\n  },\n  'jobs.schedule.missed': {\n    level: 'payload', // warn/STALE \u2014 a late tick is stale, not broken; payload: schedule_id, job_name, late_seconds\n    key: (p) => `jobs:schedule:${str(p.schedule_id)}`,\n    title: (p) => `scheduled job did not fire on time (${str(p.job_name, str(p.schedule_id))})`,\n  },\n  'jobs.schedule.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED on the next on-time fire\n    key: (p) => `jobs:schedule:${str(p.schedule_id)}`,\n    title: (p) => `scheduled job did not fire on time (${str(p.job_name, str(p.schedule_id))})`,\n  },\n  // A function's cron trigger that produced NO run for 2\xD7 its interval \u2014 the\n  // platform's silent-schedule watch (error/stale), and the recovery on the same\n  // key. Payload: function, schedule_id, cron, last_run_at, expected_by.\n  'functions.schedule.missed': {\n    level: 'payload',\n    key: (p) => `functions:schedule:${str(p.function, str(p.schedule_id))}`,\n    title: (p) => `cron function stopped firing: ${str(p.function, str(p.job_name))} (last run ${str(p.last_run_at, 'never')})`,\n  },\n  'functions.schedule.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED when a run appears again\n    key: (p) => `functions:schedule:${str(p.function, str(p.schedule_id))}`,\n    title: (p) => `cron function stopped firing: ${str(p.function, str(p.job_name))}`,\n  },\n  'functions.run.failed': {\n    level: 'payload', // error/broken; payload: name, trigger, run_id, error_class\n    key: (p) => `functions:run:${str(p.name)}`,\n    title: (p) => `function failing: ${str(p.name)} (${str(p.trigger, 'trigger')})`,\n  },\n  'functions.run.recovered': {\n    level: 'payload', // info/ok \u2014 same key \u2192 RESOLVED\n    key: (p) => `functions:run:${str(p.name)}`,\n    title: (p) => `function failing: ${str(p.name)} (${str(p.trigger, 'trigger')})`,\n  },\n};\n\n// the schedule tick, or a hand invoke (`POST /v1/fn/alerts`) carrying `{ test: true }`\ntype Envelope = CronFunctionEnvelope | HttpFunctionEnvelope<{ test?: boolean }>;\ninterface AuditRow { id: string | number; event: string; payload?: Payload; created_at?: string }\ninterface StateData {\n  key: string; state?: State; level?: Level; event?: string; detail?: string;\n  cursor?: string; last_event_id?: string; last_alert_at?: string; updated_at?: string;\n}\ninterface Item { item_id: string; version?: number; data: StateData }\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Envelope;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const cms = env.scoped_jwts?.cms;\n    const hook = env.secrets?.slack_webhook_url;\n    const readKey = env.secrets?.vxil_read_key;\n    if (!cms) return Response.json({ error: 'missing cms scope' }, { status: 403 });\n    if (!hook || !readKey) return Response.json({ error: 'missing secrets' }, { status: 409 });\n\n    // Manual wiring check \u2014 posts, touches nothing else.\n    if (env.payload?.test) {\n      const r = await post(hook, `\u{1F7E2} [INFO] alerts-to-slack is wired (test message)`);\n      return Response.json({ test: true, posted: r.ok, status: r.status });\n    }\n\n    const store = new Store(base, cms);\n\n    // 1. the watermark (first run: start at the newest audit id \u2014 no history storm)\n    const cursorRow = await store.byKey('__cursor__');\n    if (!cursorRow) {\n      const head = await newestAuditId(base, readKey);\n      await store.create({ key: '__cursor__', cursor: head, updated_at: iso() });\n      return Response.json({ initialized: true, cursor: head });\n    }\n    let cursor = cursorRow.data.cursor ?? '0';\n    const cursorVersion = cursorRow.version;\n\n    // 2\u20134. drain + evaluate\n    const posts: string[] = [];\n    let scanned = 0;\n    let matched = 0;\n    for (let page = 0; page < MAX_PAGES_PER_RUN; page++) {\n      const { rows, next } = await exportAudit(base, readKey, cursor);\n      for (const row of rows) {\n        scanned++;\n        const rule = RULES[row.event];\n        if (rule) {\n          matched++;\n          const msg = await evaluate(store, rule, row);\n          if (msg) posts.push(msg);\n        }\n        cursor = String(row.id);\n      }\n      if (!next) break;\n      cursor = next;\n    }\n\n    // deliver (bounded)\n    let posted = 0;\n    const lines = posts.slice(0, MAX_POSTS_PER_RUN);\n    if (posts.length > MAX_POSTS_PER_RUN) lines.push(`\u2026 and ${posts.length - MAX_POSTS_PER_RUN} more state changes this tick`);\n    for (const text of lines) {\n      const r = await post(hook, text);\n      if (r.ok) posted++;\n    }\n\n    // 5. advance the watermark \u2014 If-Match: a concurrent run that already moved it wins\n    const advanced = await store.patch(cursorRow.item_id, cursorVersion, { cursor, updated_at: iso() });\n\n    return Response.json({ scanned, matched, alerts: posts.length, posted, cursor, advanced });\n  },\n};\n\n/** Decide, for one matched audit row, whether a message is due; persist the state. */\nasync function evaluate(store: Store, rule: Rule, row: AuditRow): Promise<string | null> {\n  const p = row.payload ?? {};\n  const key = rule.key(p);\n  const next: State = rule.state ?? (isState(p.state) ? p.state : 'broken');\n  const level: Level = rule.level === 'payload' ? (isLevel(p.level) ? p.level : 'error') : rule.level;\n  const title = rule.title(p);\n  const detail = str(p.reason ?? p.error ?? p.message ?? p.last_error_msg, '').slice(0, DETAIL_MAX);\n  const now = iso();\n  const eventId = String(row.id);\n  const base: StateData = { key, state: next, level, event: row.event, detail, last_event_id: eventId, updated_at: now };\n\n  const current = await store.byKey(key);\n  if (!current) {\n    // First sighting. A green first sighting is remembered silently \u2014 nothing was red.\n    if (next === 'ok') { await store.create(base); return null; }\n    const created = await store.create({ ...base, last_alert_at: now });\n    return created ? format(level, next, title, detail, row.created_at) : null; // 409 = a racing run owns it\n  }\n  const prev = current.data.state ?? 'ok';\n  if (prev !== next) {\n    // A CROSSING. If-Match: exactly one concurrent run wins the transition.\n    const ok = await store.patch(current.item_id, current.version, { ...base, last_alert_at: now });\n    if (!ok) return null;\n    return next === 'ok'\n      ? `\u{1F7E2} RESOLVED: ${title} is back to ok (was ${prev})`\n      : format(level, next, title, detail, row.created_at);\n  }\n  // Same state. Red stays quiet \u2014 unless a reminder is due.\n  if (next !== 'ok' && REPEAT_AFTER_HOURS > 0) {\n    const last = Date.parse(current.data.last_alert_at ?? '') || 0;\n    if (Date.now() - last >= REPEAT_AFTER_HOURS * 3600e3) {\n      const ok = await store.patch(current.item_id, current.version, { ...base, last_alert_at: now });\n      return ok ? `\u23F0 STILL ${next.toUpperCase()}: ${title} (since ${current.data.last_alert_at ?? '?'})` : null;\n    }\n  }\n  await store.patch(current.item_id, current.version, base); // keep detail/last_event_id fresh, no post\n  return null;\n}\n\nfunction format(level: Level, state: State, title: string, detail: string, at?: string): string {\n  const dot = level === 'error' ? '\u{1F534}' : level === 'warn' ? '\u{1F7E0}' : '\u{1F535}';\n  return `${dot} [${level.toUpperCase()}] ${title} \u2192 ${state.toUpperCase()}${detail ? ` \u2014 ${detail}` : ''}${at ? ` (at ${at})` : ''}`;\n}\n\n// \u2500\u2500 the audit stream (ascending NDJSON export; `x-vxil-next-after-id` continues it) \u2500\u2500\nasync function exportAudit(base: string, key: string, afterId: string): Promise<{ rows: AuditRow[]; next: string | null }> {\n  const res = await fetch(`${base}/v1/audit/export?after_id=${encodeURIComponent(afterId)}&limit=500`, {\n    headers: { authorization: `Bearer ${key}` },\n  });\n  if (!res.ok) throw new Error(`audit export ${res.status}`);\n  const rows = (await res.text()).split('\\n').filter(Boolean).map((l) => JSON.parse(l) as AuditRow);\n  return { rows, next: res.headers.get('x-vxil-next-after-id') };\n}\nasync function newestAuditId(base: string, key: string): Promise<string> {\n  const res = await fetch(`${base}/v1/audit?limit=1`, { headers: { authorization: `Bearer ${key}` } });\n  if (!res.ok) throw new Error(`audit list ${res.status}`);\n  const body = (await res.json()) as { data?: { events?: AuditRow[] } };\n  return String(body.data?.events?.[0]?.id ?? '0');\n}\n\n// \u2500\u2500 the cms state store (the REST envelope: { data: { items:[{item_id, version, data}] } }) \u2500\u2500\nclass Store {\n  constructor(private base: string, private jwt: string) {}\n  private h() { return { authorization: `Bearer ${this.jwt}`, 'content-type': 'application/json' }; }\n  async byKey(key: string): Promise<Item | null> {\n    const filter = encodeURIComponent(JSON.stringify({ key }));\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state?filter=${filter}&limit=1`, { headers: this.h() });\n    const body = (await res.json()) as { data?: { items?: Item[] } };\n    return body.data?.items?.[0] ?? null;\n  }\n  /** false on 409 (unique key already claimed by a concurrent run) */\n  async create(data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state`, {\n      method: 'POST', headers: this.h(), body: JSON.stringify({ data, status: 'published' }),\n    });\n    return res.ok;\n  }\n  /** false on 409 version_conflict (another run transitioned this key first) */\n  async patch(itemId: string, version: number | undefined, data: Partial<StateData>): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/alert_state/${itemId}`, {\n      method: 'PATCH',\n      headers: { ...this.h(), ...(version !== undefined ? { 'if-match': String(version) } : {}) },\n      body: JSON.stringify({ data }),\n    });\n    return res.ok;\n  }\n}\n\n// \u2500\u2500 the chat webhook: `text` is Slack's field, `content` is Discord's \u2014 send both,\n//    EXCEPT to a Google Chat space webhook (chat.googleapis.com), which takes\n//    `{ text }` alone \u2014 an unknown field can be rejected there, so it is dropped.\nasync function post(url: string, text: string): Promise<{ ok: boolean; status: number }> {\n  let host = '';\n  try { host = new URL(url).hostname; } catch { /* unparseable \u2192 the generic body below */ }\n  const body = host === 'chat.googleapis.com' ? { text } : { text, content: text };\n  const res = await fetch(url, {\n    method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body),\n  }).catch(() => null);\n  return { ok: Boolean(res?.ok), status: res?.status ?? 0 };\n}\n\nconst iso = () => new Date().toISOString();\nconst isState = (v: unknown): v is State => v === 'ok' || v === 'stale' || v === 'broken' || v === 'could_not_check';\nconst isLevel = (v: unknown): v is Level => v === 'info' || v === 'warn' || v === 'error';\n"
     }
   },
   {
@@ -16134,10 +16966,10 @@ const json = (o: unknown, status: number) => Response.json(o, { status });
     "byoKeys": [
       "slack_webhook_url"
     ],
-    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Payments heartbeat\" \u2014 THE SILENT-PROVIDER DETECTOR.\n//\n// Every other payments check answers \"did THIS event fold correctly?\". This one\n// answers the question nobody asks until it is too late: \"has my provider sent\n// me ANYTHING lately?\" A provider that stops posting produces no errors, no\n// failed webhooks, no red dashboard \u2014 just silence, and silence looks exactly\n// like a quiet week. This blueprint turns silence into a signal:\n//   \u2022 payments  \u2192 the webhook-event log (`GET /v1/payments/webhook-events`) is\n//                 already the record of every delivery your integration folded\n//   \u2022 cms       \u2192 `heartbeat_state`: one row per provider, so an alert fires on\n//                 the CROSSING and not once a day forever\n//   \u2022 functions \u2192 `heartbeat`: a daily cron that measures days-since-last-\n//                 processed-event against YOUR OWN cadence and posts to Slack\n//\n// The threshold is not a number somebody picked: it is 3 \xD7 your median\n// inter-event gap, with a 7-day floor. A 100-subscriber app and a 100 000-\n// subscriber app have wildly different \"normal\", and a fixed number of days is\n// wrong for both.\n//\n// \u26A0 THIS IS AN OVERLAY, NOT A FRESH BACKEND. `vxil push` replaces a feature's\n// config wholesale. If you already run the payments feature, copy the\n// `heartbeat_state` collection and the `heartbeat` function into your EXISTING\n// vxil.config.ts rather than pushing this file \u2014 see README.md.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    cms: {},\n\n    // Your payments INTEGRATION \u2014 your own provider account, your own keys;\n    // vxil folds the lifecycle webhooks into a ledger and an entitlement\n    // snapshot and is never in the flow of funds. Shown here so the file is a\n    // coherent whole; if you already have a payments block, keep YOURS.\n    payments: {\n      provider: 'stripe',\n      stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' },\n      defaults: { currency: 'usd' },\n    },\n\n    functions: { enabled: true },\n  },\n\n  cms: {\n    collections: {\n      // The heartbeat's memory: ONE row per provider. `provider` is unique, so\n      // two overlapping cron ticks cannot both create it (the loser gets 409).\n      heartbeat_state: {\n        singular: 'heartbeat_state',\n        fields: {\n          provider: { type: 'string', required: true, indexSlot: 's1', unique: true },\n          state: { type: 'string', indexSlot: 's2' }, // ok | stale | broken | could_not_check\n          detail: { type: 'text' }, // the human sentence that was (or would be) posted\n          days_since: { type: 'float', indexSlot: 'n1' }, // days since the last processed event\n          threshold_days: { type: 'float', indexSlot: 'n2' }, // max(7, 3 \xD7 median gap)\n          last_event_at: { type: 'datetime', indexSlot: 't1' },\n          checked_at: { type: 'datetime', indexSlot: 't2' },\n          last_event_id: { type: 'string', indexSlot: 's3' },\n        },\n      },\n    },\n  },\n\n  functions: {\n    // Once a day is the right cadence for a check measured in DAYS. Also\n    // invocable by hand \u2014 `vxil functions invoke heartbeat` \u2014 which runs the\n    // real check and returns the per-provider verdict as JSON without posting\n    // anything unless a state actually crossed.\n    heartbeat: {\n      entry: './functions/heartbeat.ts',\n      trigger: { kind: 'cron', schedule: '0 7 * * *' },\n      // payments:read = the webhook-event log; cms:* = the state rows. No write\n      // scope on payments: a monitor must never be able to move money-adjacent\n      // records, and this one structurally cannot.\n      scopes: ['payments:read', 'cms:read', 'cms:write'],\n      secrets: ['secret:slack_webhook_url'],\n      egressAllow: ['hooks.slack.com'], // add 'discord.com' for a Discord webhook\n    },\n  },\n\n  secrets: {\n    slack_webhook_url: { feature: 'functions', description: 'Slack incoming webhook (or Discord webhook) URL' },\n    stripe_secret: { feature: 'payments', description: 'Stripe secret key (BYO \u2014 your own account)' },\n    stripe_webhook: { feature: 'payments', description: 'Stripe webhook signing secret' },\n  },\n});\n",
-    "readme": '# Payments heartbeat (ops)\n\nEvery other payments check answers *"did this event fold correctly?"*. This one answers the question\nnobody asks until it is too late: **"has my provider sent me anything lately?"**\n\nA provider that stops posting produces no errors, no failed webhooks, no red dashboard \u2014 just silence,\nand silence looks exactly like a quiet week. One daily cron function measures **days since the last\nprocessed production event, per provider**, against **your own cadence**, keeps a three-state\n`ok | stale | broken` record in `cms`, and posts to Slack (or Discord) **once per crossing**.\n\n```bash\nvxil init --template payments-heartbeat\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nprintf \'%s\' "$SLACK_URL" | vxil secrets set functions/slack_webhook_url\nvxil push                             # the heartbeat_state collection + the cron function\nvxil functions invoke heartbeat       # run the real check now; prints the per-provider verdict\n```\n\n> \u26A0 **This blueprint is an overlay.** `vxil push` writes each feature\'s config as a whole version, so\n> pushing this file at a backend that already runs payments would replace your payments block with the\n> example one below. If you already have a `payments` integration configured, copy just the\n> **`heartbeat_state` collection** and the **`heartbeat` function** into your existing `vxil.config.ts`\n> and push that. On a fresh backend, push this file as-is and edit the payments block to your provider.\n\n## The threshold is derived, not guessed\n\nA fixed "alert after 14 days" is wrong for a 100-subscriber app *and* for a 100 000-subscriber one. So the\nfunction computes it from your own traffic:\n\n```\nthreshold_days = max( 7 , 3 \xD7 median gap between your last 100 processed events )\n```\n\n- **`3 \xD7` the median gap** \u2014 the median, not the mean, because one migration backfill or one Black Friday\n  would inflate a mean for months. Three is the "this is no longer a quiet week" multiple.\n- **A 7-day floor** \u2014 a low-volume integration can legitimately go a week without a single lifecycle\n  event, and alerting on that is how a channel gets muted.\n- **Fewer than 5 gaps sampled** \u2192 there is no meaningful cadence yet, so the floor is used on its own.\n- Past **2 \xD7** the threshold, `stale` becomes `broken`. That severity split is this blueprint\'s choice \u2014\n  tune `BROKEN_MULTIPLE` in `functions/heartbeat.ts`; every constant at the top of that file is policy.\n\n`ALERT_MULTIPLE = 3` and `FLOOR_DAYS = 7` are the numbers the platform\'s own payments-ingest SLO uses for\nits silent-provider detection SLI, so the blueprint and the platform agree by construction.\n\n## What it reads\n\n```\nGET /v1/payments/webhook-events?provider=<p>&environment=production&outcome=processed&limit=100\n```\n\nwith the function\'s `payments:read` scope \u2014 the webhook event log your integration already writes for\nevery delivery it folds. Three details in that URL are the whole design:\n\n| Part | Why |\n|---|---|\n| `provider=<p>` | asked **per provider**, in a loop. A global query would be dominated by your chattiest provider, and a quiet one that went silent months ago would never appear in the newest page at all. |\n| `environment=production` | sandbox traffic is developer noise. A provider can be chatty in test mode while production has been silent for a month \u2014 exactly the outage this exists to catch. |\n| `outcome=processed` | not merely *received*. An event that arrived and never folded is a different failure (`payments.webhook_event.failed`, which `templates/alerts-to-slack/` picks up); this function is about arrival. |\n\nA provider that has **never** delivered a processed production event is skipped entirely \u2014 there is no\ncadence to be silent against. Edit `PROVIDERS` in the function to match the ones you actually use.\n\n## States and messages\n\n| State | When | Message |\n|---|---|---|\n| `ok` | `days_since \u2264 threshold` | (silent \u2014 or \u{1F7E2} RESOLVED if it was not ok before) |\n| `stale` | `threshold < days_since \u2264 2 \xD7 threshold` | \u{1F7E0} `[STALE] payments heartbeat \u2014 \u2026` |\n| `broken` | `days_since > 2 \xD7 threshold` | \u{1F534} `[BROKEN] payments heartbeat \u2014 \u2026` |\n| `could_not_check` | the event-log read itself failed (feature disabled, scope missing, network) | \u{1F535} `[CHECK FAILED] \u2026` \u2014 a monitor that cannot see is not a monitor that says "fine" |\n\n```\n\u{1F534} [BROKEN] payments heartbeat \u2014 stripe has sent no processed production event for 23.4d \u2014\n   expected one within 7d (median gap 1.2d \xD7 3, floor 7d)\n\u{1F7E2} RESOLVED: stripe is delivering again \u2014 last processed event 0.1d ago (was broken)\n```\n\n## Once per crossing\n\nOne `heartbeat_state` row per provider, `provider` declared `unique`. Cron delivery is at-least-once, so\ntwo ticks can overlap: the unique field means only one can *create* the row (the other gets `409`), and\nevery update carries `If-Match: <version>`, so only one can *transition* it (the other gets `409\nversion_conflict` and stands down). A provider that stays broken for a month costs exactly **one**\nmessage, not thirty \u2014 and the row keeps `days_since` / `threshold_days` / `last_event_at` fresh the\nwhole time, so the dashboard always shows the current measurement even while the channel is quiet.\n\n## The scopes\n\n`payments:read`, `cms:read`, `cms:write` \u2014 and deliberately **no** payments write scope. A monitor should\nnot be able to touch money-adjacent records, and this one structurally cannot: the function\'s callback\ntoken is minted from exactly these scopes, so there is no write path to reach for.\n\nEgress is deny-by-default: `egressAllow: [\'hooks.slack.com\']`. Add `\'discord.com\'` for a Discord webhook \u2014\nthe message body carries both Slack\'s `text` and Discord\'s `content`, so one payload works on either.\n\n## What to learn from this\n\n- **A monitor\'s threshold should come from the system it monitors.** Reading your own median gap turns\n  one alert rule into a rule that fits every tenant.\n- **Absence is the hardest signal.** Nothing emits an event when a provider goes quiet, so the check has\n  to be a *sweep*, not a subscription \u2014 which is what cron functions are for.\n- **`could_not_check` is a real state.** Folding "I could not look" into "everything is fine" is how\n  monitoring dies silently; giving it its own state is one line and saves an outage.\n\n**Pairs with:** `templates/alerts-to-slack/` \u2014 the same suppression pattern applied to failure *events*\nrather than to silence, so together they cover both halves of the money path. The two ship the same\nSlack/Discord formatter on purpose: each blueprint is a self-contained clone, and every file under a\ntemplate\'s `functions/` directory must be a declared entry point, so there is nowhere for a shared module\nto live. Copy the file, own the copy.\n',
+    "configSrc": "import { defineConfig } from '@vxil/config';\n\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// \"Payments heartbeat\" \u2014 THE SILENT-PROVIDER DETECTOR.\n//\n// Every other payments check answers \"did THIS event fold correctly?\". This one\n// answers the question nobody asks until it is too late: \"has my provider sent\n// me ANYTHING lately?\" A provider that stops posting produces no errors, no\n// failed webhooks, no red dashboard \u2014 just silence, and silence looks exactly\n// like a quiet week. This blueprint turns silence into a signal:\n//   \u2022 payments  \u2192 the webhook-event log (`GET /v1/payments/webhook-events`) is\n//                 already the record of every delivery your integration folded\n//   \u2022 cms       \u2192 `heartbeat_state`: one row per provider, so an alert fires on\n//                 the CROSSING and not once a day forever\n//   \u2022 functions \u2192 `heartbeat`: a daily cron that measures days-since-last-\n//                 processed-event against YOUR OWN cadence and posts to Slack\n//\n// The threshold is not a number somebody picked: it is 3 \xD7 your median\n// inter-event gap, with a 7-day floor. A 100-subscriber app and a 100 000-\n// subscriber app have wildly different \"normal\", and a fixed number of days is\n// wrong for both.\n//\n// \u26A0 THIS IS AN OVERLAY, NOT A FRESH BACKEND. `vxil push` replaces a feature's\n// config wholesale. If you already run the payments feature, copy the\n// `heartbeat_state` collection and the `heartbeat` function into your EXISTING\n// vxil.config.ts rather than pushing this file \u2014 see README.md.\n// \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nexport default defineConfig({\n  env: 'staging',\n\n  features: {\n    cms: {},\n\n    // Your payments INTEGRATION \u2014 your own provider account, your own keys;\n    // vxil folds the lifecycle webhooks into a ledger and an entitlement\n    // snapshot and is never in the flow of funds. Shown here so the file is a\n    // coherent whole; if you already have a payments block, keep YOURS.\n    payments: {\n      provider: 'stripe',\n      stripe: { secretKeyRef: 'stripe_secret', webhookSecretRef: 'stripe_webhook' },\n      defaults: { currency: 'usd' },\n    },\n\n    functions: { enabled: true },\n  },\n\n  cms: {\n    collections: {\n      // The heartbeat's memory: ONE row per provider. `provider` is unique, so\n      // two overlapping cron ticks cannot both create it (the loser gets 409).\n      heartbeat_state: {\n        singular: 'heartbeat_state',\n        fields: {\n          provider: { type: 'string', required: true, indexSlot: 's1', unique: true },\n          state: { type: 'string', indexSlot: 's2' }, // ok | stale | broken | could_not_check\n          detail: { type: 'text' }, // the human sentence that was (or would be) posted\n          days_since: { type: 'float', indexSlot: 'n1' }, // days since the last processed event\n          threshold_days: { type: 'float', indexSlot: 'n2' }, // max(7, 3 \xD7 median gap)\n          last_event_at: { type: 'datetime', indexSlot: 't1' },\n          checked_at: { type: 'datetime', indexSlot: 't2' },\n          last_event_id: { type: 'string', indexSlot: 's3' },\n        },\n      },\n    },\n  },\n\n  functions: {\n    // Once a day is the right cadence for a check measured in DAYS. Also\n    // invocable by hand \u2014 `vxil functions invoke heartbeat` \u2014 which runs the\n    // real check and returns the per-provider verdict as JSON without posting\n    // anything unless a state actually crossed.\n    heartbeat: {\n      entry: './functions/heartbeat.ts',\n      trigger: { kind: 'cron', schedule: '0 7 * * *' },\n      // payments:read = the webhook-event log; cms:* = the state rows. No write\n      // scope on payments: a monitor must never be able to move money-adjacent\n      // records, and this one structurally cannot.\n      scopes: ['payments:read', 'cms:read', 'cms:write'],\n      secrets: ['secret:slack_webhook_url'],\n      egressAllow: ['hooks.slack.com'], // add 'discord.com' for Discord, 'chat.googleapis.com' for Google Chat\n    },\n  },\n\n  secrets: {\n    slack_webhook_url: { feature: 'functions', description: 'Slack incoming webhook (or Discord / Google Chat space webhook) URL' },\n    stripe_secret: { feature: 'payments', description: 'Stripe secret key (BYO \u2014 your own account)' },\n    stripe_webhook: { feature: 'payments', description: 'Stripe webhook signing secret' },\n  },\n});\n",
+    "readme": "# Payments heartbeat (ops)\n\nEvery other payments check answers *\"did this event fold correctly?\"*. This one answers the question\nnobody asks until it is too late: **\"has my provider sent me anything lately?\"**\n\nA provider that stops posting produces no errors, no failed webhooks, no red dashboard \u2014 just silence,\nand silence looks exactly like a quiet week. One daily cron function measures **days since the last\nprocessed production event, per provider**, against **your own cadence**, keeps a three-state\n`ok | stale | broken` record in `cms`, and posts to Slack (or Discord, or Google Chat) **once per crossing**.\n\n```bash\nvxil init --template payments-heartbeat\nvxil quickstart                       # or `vxil link <slug>` for an existing backend\nprintf '%s' \"$SLACK_URL\" | vxil secrets set functions/slack_webhook_url\nvxil push                             # the heartbeat_state collection + the cron function\nvxil functions invoke heartbeat       # run the real check now; prints the per-provider verdict\n```\n\n> \u26A0 **This blueprint is an overlay.** `vxil push` writes each feature's config as a whole version, so\n> pushing this file at a backend that already runs payments would replace your payments block with the\n> example one below. If you already have a `payments` integration configured, copy just the\n> **`heartbeat_state` collection** and the **`heartbeat` function** into your existing `vxil.config.ts`\n> and push that. On a fresh backend, push this file as-is and edit the payments block to your provider.\n\n## The threshold is derived, not guessed\n\nA fixed \"alert after 14 days\" is wrong for a 100-subscriber app *and* for a 100 000-subscriber one. So the\nfunction computes it from your own traffic:\n\n```\nthreshold_days = max( 7 , 3 \xD7 median gap between your last 100 processed events )\n```\n\n- **`3 \xD7` the median gap** \u2014 the median, not the mean, because one migration backfill or one Black Friday\n  would inflate a mean for months. Three is the \"this is no longer a quiet week\" multiple.\n- **A 7-day floor** \u2014 a low-volume integration can legitimately go a week without a single lifecycle\n  event, and alerting on that is how a channel gets muted.\n- **Fewer than 5 gaps sampled** \u2192 there is no meaningful cadence yet, so the floor is used on its own.\n- Past **2 \xD7** the threshold, `stale` becomes `broken`. That severity split is this blueprint's choice \u2014\n  tune `BROKEN_MULTIPLE` in `functions/heartbeat.ts`; every constant at the top of that file is policy.\n\n`ALERT_MULTIPLE = 3` and `FLOOR_DAYS = 7` are the numbers the platform's own payments-ingest SLO uses for\nits silent-provider detection SLI, so the blueprint and the platform agree by construction.\n\n## What it reads\n\n```\nGET /v1/payments/webhook-events?provider=<p>&environment=production&outcome=processed&limit=100\n```\n\nwith the function's `payments:read` scope \u2014 the webhook event log your integration already writes for\nevery delivery it folds. Three details in that URL are the whole design:\n\n| Part | Why |\n|---|---|\n| `provider=<p>` | asked **per provider**, in a loop. A global query would be dominated by your chattiest provider, and a quiet one that went silent months ago would never appear in the newest page at all. |\n| `environment=production` | sandbox traffic is developer noise. A provider can be chatty in test mode while production has been silent for a month \u2014 exactly the outage this exists to catch. |\n| `outcome=processed` | not merely *received*. An event that arrived and never folded is a different failure (`payments.webhook_event.failed`, which `templates/alerts-to-slack/` picks up); this function is about arrival. |\n\nA provider that has **never** delivered a processed production event is skipped entirely \u2014 there is no\ncadence to be silent against. Edit `PROVIDERS` in the function to match the ones you actually use.\n\n## States and messages\n\n| State | When | Message |\n|---|---|---|\n| `ok` | `days_since \u2264 threshold` | (silent \u2014 or \u{1F7E2} RESOLVED if it was not ok before) |\n| `stale` | `threshold < days_since \u2264 2 \xD7 threshold` | \u{1F7E0} `[STALE] payments heartbeat \u2014 \u2026` |\n| `broken` | `days_since > 2 \xD7 threshold` | \u{1F534} `[BROKEN] payments heartbeat \u2014 \u2026` |\n| `could_not_check` | the event-log read itself failed (feature disabled, scope missing, network) | \u{1F535} `[CHECK FAILED] \u2026` \u2014 a monitor that cannot see is not a monitor that says \"fine\" |\n\n```\n\u{1F534} [BROKEN] payments heartbeat \u2014 stripe has sent no processed production event for 23.4d \u2014\n   expected one within 7d (median gap 1.2d \xD7 3, floor 7d)\n\u{1F7E2} RESOLVED: stripe is delivering again \u2014 last processed event 0.1d ago (was broken)\n```\n\n## Once per crossing\n\nOne `heartbeat_state` row per provider, `provider` declared `unique`. Cron delivery is at-least-once, so\ntwo ticks can overlap: the unique field means only one can *create* the row (the other gets `409`), and\nevery update carries `If-Match: <version>`, so only one can *transition* it (the other gets `409\nversion_conflict` and stands down). A provider that stays broken for a month costs exactly **one**\nmessage, not thirty \u2014 and the row keeps `days_since` / `threshold_days` / `last_event_at` fresh the\nwhole time, so the dashboard always shows the current measurement even while the channel is quiet.\n\n## The scopes\n\n`payments:read`, `cms:read`, `cms:write` \u2014 and deliberately **no** payments write scope. A monitor should\nnot be able to touch money-adjacent records, and this one structurally cannot: the function's callback\ntoken is minted from exactly these scopes, so there is no write path to reach for.\n\nEgress is deny-by-default: `egressAllow: ['hooks.slack.com']`. Add `'discord.com'` for a Discord webhook \u2014\nthe message body carries both Slack's `text` and Discord's `content`, so one payload works on either.\nAdd `'chat.googleapis.com'` for a Google Chat space webhook \u2014 that host takes `text` alone, and the function\nsends only that field to it.\n\n## What to learn from this\n\n- **A monitor's threshold should come from the system it monitors.** Reading your own median gap turns\n  one alert rule into a rule that fits every tenant.\n- **Absence is the hardest signal.** Nothing emits an event when a provider goes quiet, so the check has\n  to be a *sweep*, not a subscription \u2014 which is what cron functions are for.\n- **`could_not_check` is a real state.** Folding \"I could not look\" into \"everything is fine\" is how\n  monitoring dies silently; giving it its own state is one line and saves an outage.\n\n**Pairs with:** `templates/alerts-to-slack/` \u2014 the same suppression pattern applied to failure *events*\nrather than to silence, so together they cover both halves of the money path. The two ship the same\nSlack/Discord formatter on purpose: each blueprint is a self-contained clone, and every file under a\ntemplate's `functions/` directory must be a declared entry point, so there is nowhere for a shared module\nto live. Copy the file, own the copy.\n",
     "functions": {
-      "heartbeat.ts": "// heartbeat.ts \u2014 THE SILENT-PROVIDER DETECTOR (a vxil function, cron trigger).\n//\n// Trigger: cron `0 7 * * *`. For each provider you list in PROVIDERS:\n//   1. read the newest PROCESSED production webhook events \u2014\n//      `GET /v1/payments/webhook-events?provider=<p>&environment=production\n//       &outcome=processed&limit=100` (newest first),\n//   2. days_since = now \u2212 the newest event's received_at,\n//   3. threshold = max(FLOOR_DAYS, ALERT_MULTIPLE \xD7 the MEDIAN gap between\n//      those events) \u2014 your own cadence, not a number somebody picked,\n//   4. ok | stale | broken (or could_not_check when the read itself failed),\n//   5. compare with the stored row for that provider and post to Slack ONLY on\n//      a crossing; a return to ok posts RESOLVED.\n//\n// Why the median and not the mean: one migration backfill or one Black Friday\n// inflates a mean for months. The median is what \"normal\" actually looks like.\n//\n// Why `?environment=production`: sandbox traffic is developer noise. A provider\n// can be chatty in test mode while production has been silent for a month \u2014\n// that is precisely the outage this function exists to catch.\n//\n// Run it by hand any time: `vxil functions invoke heartbeat`. It performs the\n// real check and returns the per-provider verdict as JSON; it still only posts\n// if a state genuinely crossed.\n\n// \u2500\u2500 Tune these. They are the whole policy. \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nimport type { CronFunctionEnvelope } from '@vxil/sdk';\n\n/** Providers to probe. Must be names the payments API accepts. Drop the ones\n *  you do not use \u2014 a provider that has never sent an event is skipped anyway. */\nconst PROVIDERS = ['stripe', 'paddle', 'paypal', 'revenuecat'] as const;\n/** Alert once silence exceeds this multiple of your median inter-event gap. */\nconst ALERT_MULTIPLE = 3;\n/** \u2026but never sooner than this many days, however chatty your integration is.\n *  A low-volume app can legitimately go a week without a single lifecycle event. */\nconst FLOOR_DAYS = 7;\n/** Past this multiple of the threshold, `stale` becomes `broken`. This split is\n *  the blueprint's own choice \u2014 the SLO defines the alert threshold, not the\n *  severity ladder \u2014 so move it wherever your escalation wants it. */\nconst BROKEN_MULTIPLE = 2;\n/** Gaps needed before a median means anything. Below this the floor is used. */\nconst MIN_GAPS_FOR_MEDIAN = 5;\n/** Events sampled per provider (the API caps a page at 100). */\nconst SAMPLE = 100;\n\ntype State = 'ok' | 'stale' | 'broken' | 'could_not_check';\n\ntype Envelope = CronFunctionEnvelope;\ninterface WebhookEvent { event_id: string; provider: string; received_at: string | null }\ninterface StateData {\n  provider: string; state?: State; detail?: string;\n  days_since?: number; threshold_days?: number;\n  last_event_at?: string; checked_at?: string; last_event_id?: string;\n}\ninterface Item { item_id: string; version?: number; data: StateData }\n\ninterface Verdict {\n  provider: string;\n  state: State;\n  detail: string;\n  days_since: number | null;\n  threshold_days: number | null;\n  last_event_at: string | null;\n  last_event_id: string | null;\n}\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Envelope;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const payments = env.scoped_jwts?.payments;\n    const cms = env.scoped_jwts?.cms;\n    const hook = env.secrets?.slack_webhook_url;\n    if (!payments || !cms) return Response.json({ error: 'missing payments:read / cms scope' }, { status: 403 });\n    if (!hook) return Response.json({ error: 'missing secret slack_webhook_url' }, { status: 409 });\n\n    const store = new Store(base, cms);\n    const checked: Verdict[] = [];\n    const crossings: string[] = [];\n\n    for (const provider of PROVIDERS) {\n      const verdict = await check(base, payments, provider);\n      if (!verdict) continue; // never sent an event \u2192 not part of this integration\n      checked.push(verdict);\n      const line = await reconcile(store, verdict);\n      if (line) crossings.push(line);\n    }\n\n    let posted = 0;\n    for (const text of crossings) {\n      const r = await post(hook, text);\n      if (r.ok) posted++;\n    }\n    return Response.json({ checked, crossings: crossings.length, posted });\n  },\n};\n\n/** Measure one provider. `null` = the provider has never delivered a processed\n *  production event, so there is no cadence to be silent against \u2014 the SLO's\n *  \"once the tenant has ever received one\" precondition. */\nasync function check(base: string, jwt: string, provider: string): Promise<Verdict | null> {\n  const url = `${base}/v1/payments/webhook-events`\n    + `?provider=${encodeURIComponent(provider)}&environment=production&outcome=processed&limit=${SAMPLE}`;\n  const res = await fetch(url, { headers: { authorization: `Bearer ${jwt}` } }).catch(() => null);\n  if (!res) {\n    return verdict(provider, 'could_not_check', `could not reach the payments event log for ${provider}`);\n  }\n  if (!res.ok) {\n    // 501 capability_not_enabled / 403 missing scope are configuration, not silence.\n    return verdict(provider, 'could_not_check', `payments event log returned ${res.status} for ${provider}`);\n  }\n  const body = (await res.json().catch(() => ({}))) as { data?: { events?: WebhookEvent[] } };\n  const events = (body.data?.events ?? []).filter((e) => e.received_at);\n  if (events.length === 0) return null;\n\n  // The API orders by received_at DESC, so [0] is the newest.\n  const times = events.map((e) => Date.parse(e.received_at!)).filter(Number.isFinite).sort((a, b) => b - a);\n  if (times.length === 0) return null;\n  const last = times[0]!;\n  const daysSince = round2((Date.now() - last) / 86_400_000);\n\n  const gaps: number[] = [];\n  for (let i = 0; i + 1 < times.length; i++) gaps.push((times[i]! - times[i + 1]!) / 86_400_000);\n  const medianGap = gaps.length >= MIN_GAPS_FOR_MEDIAN ? median(gaps) : null;\n  const threshold = round2(Math.max(FLOOR_DAYS, medianGap === null ? 0 : ALERT_MULTIPLE * medianGap));\n\n  const state: State = daysSince <= threshold ? 'ok'\n    : daysSince <= threshold * BROKEN_MULTIPLE ? 'stale'\n      : 'broken';\n\n  const cadence = medianGap === null\n    ? `only ${gaps.length} gap(s) sampled \u2014 using the ${FLOOR_DAYS}-day floor`\n    : `median gap ${round2(medianGap)}d \xD7 ${ALERT_MULTIPLE}, floor ${FLOOR_DAYS}d`;\n  const detail = state === 'ok'\n    ? `${provider}: last processed event ${daysSince}d ago (threshold ${threshold}d \u2014 ${cadence})`\n    : `${provider} has sent no processed production event for ${daysSince}d \u2014 expected one within ${threshold}d (${cadence})`;\n\n  return {\n    provider, state, detail,\n    days_since: daysSince,\n    threshold_days: threshold,\n    last_event_at: new Date(last).toISOString(),\n    last_event_id: events[0]!.event_id ?? null,\n  };\n}\n\n/** Persist the verdict; return a message ONLY when the state crossed. */\nasync function reconcile(store: Store, v: Verdict): Promise<string | null> {\n  const now = new Date().toISOString();\n  const data: StateData = {\n    provider: v.provider, state: v.state, detail: v.detail, checked_at: now,\n    ...(v.days_since !== null ? { days_since: v.days_since } : {}),\n    ...(v.threshold_days !== null ? { threshold_days: v.threshold_days } : {}),\n    ...(v.last_event_at ? { last_event_at: v.last_event_at } : {}),\n    ...(v.last_event_id ? { last_event_id: v.last_event_id } : {}),\n  };\n\n  const current = await store.byProvider(v.provider);\n  if (!current) {\n    // First run. A healthy first sighting is remembered silently; an unhealthy\n    // one is worth saying out loud immediately \u2014 you were already in the outage.\n    const created = await store.create(data);\n    return created && v.state !== 'ok' ? format(v) : null; // 409 \u21D2 a racing tick owns it\n  }\n\n  const prev = current.data.state ?? 'ok';\n  if (prev === v.state) {\n    // No crossing: refresh the measurement, stay quiet. A permanently-broken\n    // provider therefore costs exactly one message, not one per day.\n    await store.patch(current.item_id, current.version, data);\n    return null;\n  }\n  // A CROSSING. If-Match makes exactly one of two overlapping ticks the winner.\n  const ok = await store.patch(current.item_id, current.version, data);\n  if (!ok) return null;\n  return v.state === 'ok'\n    ? `\u{1F7E2} RESOLVED: ${v.provider} is delivering again \u2014 last processed event ${v.days_since}d ago (was ${prev})`\n    : format(v);\n}\n\nfunction format(v: Verdict): string {\n  const dot = v.state === 'broken' ? '\u{1F534}' : v.state === 'stale' ? '\u{1F7E0}' : '\u{1F535}';\n  const label = v.state === 'could_not_check' ? 'CHECK FAILED' : v.state.toUpperCase();\n  return `${dot} [${label}] payments heartbeat \u2014 ${v.detail}`;\n}\n\n// \u2500\u2500 the cms state store (the REST envelope: { data: { items: [{item_id, version, data}] } }) \u2500\u2500\nclass Store {\n  constructor(private base: string, private jwt: string) {}\n  private h() { return { authorization: `Bearer ${this.jwt}`, 'content-type': 'application/json' }; }\n  async byProvider(provider: string): Promise<Item | null> {\n    const filter = encodeURIComponent(JSON.stringify({ provider }));\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state?filter=${filter}&limit=1`, { headers: this.h() });\n    if (!res.ok) return null;\n    const body = (await res.json()) as { data?: { items?: Item[] } };\n    return body.data?.items?.[0] ?? null;\n  }\n  /** false on 409 \u2014 `provider` is unique, so a concurrent tick already claimed it. */\n  async create(data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state`, {\n      method: 'POST', headers: this.h(), body: JSON.stringify({ status: 'published', data }),\n    });\n    return res.ok;\n  }\n  /** false on 409 version_conflict \u2014 another tick transitioned this provider first. */\n  async patch(itemId: string, version: number | undefined, data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state/${itemId}`, {\n      method: 'PATCH',\n      headers: { ...this.h(), ...(version !== undefined ? { 'if-match': String(version) } : {}) },\n      body: JSON.stringify({ data }),\n    });\n    return res.ok;\n  }\n}\n\n// \u2500\u2500 the chat webhook: `text` is Slack's field, `content` is Discord's \u2014 send both.\n//    (Duplicated from templates/alerts-to-slack on purpose: a blueprint is a\n//    self-contained clone, and every file under functions/ must be a declared\n//    entry point, so there is no place for a shared module to live.) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nasync function post(url: string, text: string): Promise<{ ok: boolean; status: number }> {\n  const res = await fetch(url, {\n    method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ text, content: text }),\n  }).catch(() => null);\n  return { ok: Boolean(res?.ok), status: res?.status ?? 0 };\n}\n\nfunction verdict(provider: string, state: State, detail: string): Verdict {\n  return { provider, state, detail, days_since: null, threshold_days: null, last_event_at: null, last_event_id: null };\n}\nfunction median(xs: number[]): number {\n  const s = [...xs].sort((a, b) => a - b);\n  const mid = s.length >> 1;\n  return s.length % 2 ? s[mid]! : (s[mid - 1]! + s[mid]!) / 2;\n}\nconst round2 = (n: number) => Math.round(n * 100) / 100;\n"
+      "heartbeat.ts": "// heartbeat.ts \u2014 THE SILENT-PROVIDER DETECTOR (a vxil function, cron trigger).\n//\n// Trigger: cron `0 7 * * *`. For each provider you list in PROVIDERS:\n//   1. read the newest PROCESSED production webhook events \u2014\n//      `GET /v1/payments/webhook-events?provider=<p>&environment=production\n//       &outcome=processed&limit=100` (newest first),\n//   2. days_since = now \u2212 the newest event's received_at,\n//   3. threshold = max(FLOOR_DAYS, ALERT_MULTIPLE \xD7 the MEDIAN gap between\n//      those events) \u2014 your own cadence, not a number somebody picked,\n//   4. ok | stale | broken (or could_not_check when the read itself failed),\n//   5. compare with the stored row for that provider and post to Slack ONLY on\n//      a crossing; a return to ok posts RESOLVED.\n//\n// Why the median and not the mean: one migration backfill or one Black Friday\n// inflates a mean for months. The median is what \"normal\" actually looks like.\n//\n// Why `?environment=production`: sandbox traffic is developer noise. A provider\n// can be chatty in test mode while production has been silent for a month \u2014\n// that is precisely the outage this function exists to catch.\n//\n// Run it by hand any time: `vxil functions invoke heartbeat`. It performs the\n// real check and returns the per-provider verdict as JSON; it still only posts\n// if a state genuinely crossed.\n\n// \u2500\u2500 Tune these. They are the whole policy. \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nimport type { CronFunctionEnvelope } from '@vxil/sdk';\n\n/** Providers to probe. Must be names the payments API accepts. Drop the ones\n *  you do not use \u2014 a provider that has never sent an event is skipped anyway. */\nconst PROVIDERS = ['stripe', 'paddle', 'paypal', 'revenuecat'] as const;\n/** Alert once silence exceeds this multiple of your median inter-event gap. */\nconst ALERT_MULTIPLE = 3;\n/** \u2026but never sooner than this many days, however chatty your integration is.\n *  A low-volume app can legitimately go a week without a single lifecycle event. */\nconst FLOOR_DAYS = 7;\n/** Past this multiple of the threshold, `stale` becomes `broken`. This split is\n *  the blueprint's own choice \u2014 the SLO defines the alert threshold, not the\n *  severity ladder \u2014 so move it wherever your escalation wants it. */\nconst BROKEN_MULTIPLE = 2;\n/** Gaps needed before a median means anything. Below this the floor is used. */\nconst MIN_GAPS_FOR_MEDIAN = 5;\n/** Events sampled per provider (the API caps a page at 100). */\nconst SAMPLE = 100;\n\ntype State = 'ok' | 'stale' | 'broken' | 'could_not_check';\n\ntype Envelope = CronFunctionEnvelope;\ninterface WebhookEvent { event_id: string; provider: string; received_at: string | null }\ninterface StateData {\n  provider: string; state?: State; detail?: string;\n  days_since?: number; threshold_days?: number;\n  last_event_at?: string; checked_at?: string; last_event_id?: string;\n}\ninterface Item { item_id: string; version?: number; data: StateData }\n\ninterface Verdict {\n  provider: string;\n  state: State;\n  detail: string;\n  days_since: number | null;\n  threshold_days: number | null;\n  last_event_at: string | null;\n  last_event_id: string | null;\n}\n\nexport default {\n  async fetch(req: Request): Promise<Response> {\n    const env = (await req.json().catch(() => ({}))) as Envelope;\n    const base = env.vxil_base ?? 'https://api.vxil.com';\n    const payments = env.scoped_jwts?.payments;\n    const cms = env.scoped_jwts?.cms;\n    const hook = env.secrets?.slack_webhook_url;\n    if (!payments || !cms) return Response.json({ error: 'missing payments:read / cms scope' }, { status: 403 });\n    if (!hook) return Response.json({ error: 'missing secret slack_webhook_url' }, { status: 409 });\n\n    const store = new Store(base, cms);\n    const checked: Verdict[] = [];\n    const crossings: string[] = [];\n\n    for (const provider of PROVIDERS) {\n      const verdict = await check(base, payments, provider);\n      if (!verdict) continue; // never sent an event \u2192 not part of this integration\n      checked.push(verdict);\n      const line = await reconcile(store, verdict);\n      if (line) crossings.push(line);\n    }\n\n    let posted = 0;\n    for (const text of crossings) {\n      const r = await post(hook, text);\n      if (r.ok) posted++;\n    }\n    return Response.json({ checked, crossings: crossings.length, posted });\n  },\n};\n\n/** Measure one provider. `null` = the provider has never delivered a processed\n *  production event, so there is no cadence to be silent against \u2014 the SLO's\n *  \"once the tenant has ever received one\" precondition. */\nasync function check(base: string, jwt: string, provider: string): Promise<Verdict | null> {\n  const url = `${base}/v1/payments/webhook-events`\n    + `?provider=${encodeURIComponent(provider)}&environment=production&outcome=processed&limit=${SAMPLE}`;\n  const res = await fetch(url, { headers: { authorization: `Bearer ${jwt}` } }).catch(() => null);\n  if (!res) {\n    return verdict(provider, 'could_not_check', `could not reach the payments event log for ${provider}`);\n  }\n  if (!res.ok) {\n    // 501 capability_not_enabled / 403 missing scope are configuration, not silence.\n    return verdict(provider, 'could_not_check', `payments event log returned ${res.status} for ${provider}`);\n  }\n  const body = (await res.json().catch(() => ({}))) as { data?: { events?: WebhookEvent[] } };\n  const events = (body.data?.events ?? []).filter((e) => e.received_at);\n  if (events.length === 0) return null;\n\n  // The API orders by received_at DESC, so [0] is the newest.\n  const times = events.map((e) => Date.parse(e.received_at!)).filter(Number.isFinite).sort((a, b) => b - a);\n  if (times.length === 0) return null;\n  const last = times[0]!;\n  const daysSince = round2((Date.now() - last) / 86_400_000);\n\n  const gaps: number[] = [];\n  for (let i = 0; i + 1 < times.length; i++) gaps.push((times[i]! - times[i + 1]!) / 86_400_000);\n  const medianGap = gaps.length >= MIN_GAPS_FOR_MEDIAN ? median(gaps) : null;\n  const threshold = round2(Math.max(FLOOR_DAYS, medianGap === null ? 0 : ALERT_MULTIPLE * medianGap));\n\n  const state: State = daysSince <= threshold ? 'ok'\n    : daysSince <= threshold * BROKEN_MULTIPLE ? 'stale'\n      : 'broken';\n\n  const cadence = medianGap === null\n    ? `only ${gaps.length} gap(s) sampled \u2014 using the ${FLOOR_DAYS}-day floor`\n    : `median gap ${round2(medianGap)}d \xD7 ${ALERT_MULTIPLE}, floor ${FLOOR_DAYS}d`;\n  const detail = state === 'ok'\n    ? `${provider}: last processed event ${daysSince}d ago (threshold ${threshold}d \u2014 ${cadence})`\n    : `${provider} has sent no processed production event for ${daysSince}d \u2014 expected one within ${threshold}d (${cadence})`;\n\n  return {\n    provider, state, detail,\n    days_since: daysSince,\n    threshold_days: threshold,\n    last_event_at: new Date(last).toISOString(),\n    last_event_id: events[0]!.event_id ?? null,\n  };\n}\n\n/** Persist the verdict; return a message ONLY when the state crossed. */\nasync function reconcile(store: Store, v: Verdict): Promise<string | null> {\n  const now = new Date().toISOString();\n  const data: StateData = {\n    provider: v.provider, state: v.state, detail: v.detail, checked_at: now,\n    ...(v.days_since !== null ? { days_since: v.days_since } : {}),\n    ...(v.threshold_days !== null ? { threshold_days: v.threshold_days } : {}),\n    ...(v.last_event_at ? { last_event_at: v.last_event_at } : {}),\n    ...(v.last_event_id ? { last_event_id: v.last_event_id } : {}),\n  };\n\n  const current = await store.byProvider(v.provider);\n  if (!current) {\n    // First run. A healthy first sighting is remembered silently; an unhealthy\n    // one is worth saying out loud immediately \u2014 you were already in the outage.\n    const created = await store.create(data);\n    return created && v.state !== 'ok' ? format(v) : null; // 409 \u21D2 a racing tick owns it\n  }\n\n  const prev = current.data.state ?? 'ok';\n  if (prev === v.state) {\n    // No crossing: refresh the measurement, stay quiet. A permanently-broken\n    // provider therefore costs exactly one message, not one per day.\n    await store.patch(current.item_id, current.version, data);\n    return null;\n  }\n  // A CROSSING. If-Match makes exactly one of two overlapping ticks the winner.\n  const ok = await store.patch(current.item_id, current.version, data);\n  if (!ok) return null;\n  return v.state === 'ok'\n    ? `\u{1F7E2} RESOLVED: ${v.provider} is delivering again \u2014 last processed event ${v.days_since}d ago (was ${prev})`\n    : format(v);\n}\n\nfunction format(v: Verdict): string {\n  const dot = v.state === 'broken' ? '\u{1F534}' : v.state === 'stale' ? '\u{1F7E0}' : '\u{1F535}';\n  const label = v.state === 'could_not_check' ? 'CHECK FAILED' : v.state.toUpperCase();\n  return `${dot} [${label}] payments heartbeat \u2014 ${v.detail}`;\n}\n\n// \u2500\u2500 the cms state store (the REST envelope: { data: { items: [{item_id, version, data}] } }) \u2500\u2500\nclass Store {\n  constructor(private base: string, private jwt: string) {}\n  private h() { return { authorization: `Bearer ${this.jwt}`, 'content-type': 'application/json' }; }\n  async byProvider(provider: string): Promise<Item | null> {\n    const filter = encodeURIComponent(JSON.stringify({ provider }));\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state?filter=${filter}&limit=1`, { headers: this.h() });\n    if (!res.ok) return null;\n    const body = (await res.json()) as { data?: { items?: Item[] } };\n    return body.data?.items?.[0] ?? null;\n  }\n  /** false on 409 \u2014 `provider` is unique, so a concurrent tick already claimed it. */\n  async create(data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state`, {\n      method: 'POST', headers: this.h(), body: JSON.stringify({ status: 'published', data }),\n    });\n    return res.ok;\n  }\n  /** false on 409 version_conflict \u2014 another tick transitioned this provider first. */\n  async patch(itemId: string, version: number | undefined, data: StateData): Promise<boolean> {\n    const res = await fetch(`${this.base}/v1/cms/items/heartbeat_state/${itemId}`, {\n      method: 'PATCH',\n      headers: { ...this.h(), ...(version !== undefined ? { 'if-match': String(version) } : {}) },\n      body: JSON.stringify({ data }),\n    });\n    return res.ok;\n  }\n}\n\n// \u2500\u2500 the chat webhook: `text` is Slack's field, `content` is Discord's \u2014 send both,\n//    EXCEPT to a Google Chat space webhook (chat.googleapis.com), which takes\n//    `{ text }` alone \u2014 an unknown field can be rejected there, so it is dropped.\n//    (Duplicated from templates/alerts-to-slack on purpose: a blueprint is a\n//    self-contained clone, and every file under functions/ must be a declared\n//    entry point, so there is no place for a shared module to live.)\nasync function post(url: string, text: string): Promise<{ ok: boolean; status: number }> {\n  let host = '';\n  try { host = new URL(url).hostname; } catch { /* unparseable \u2192 the generic body below */ }\n  const body = host === 'chat.googleapis.com' ? { text } : { text, content: text };\n  const res = await fetch(url, {\n    method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body),\n  }).catch(() => null);\n  return { ok: Boolean(res?.ok), status: res?.status ?? 0 };\n}\n\nfunction verdict(provider: string, state: State, detail: string): Verdict {\n  return { provider, state, detail, days_since: null, threshold_days: null, last_event_at: null, last_event_id: null };\n}\nfunction median(xs: number[]): number {\n  const s = [...xs].sort((a, b) => a - b);\n  const mid = s.length >> 1;\n  return s.length % 2 ? s[mid]! : (s[mid - 1]! + s[mid]!) / 2;\n}\nconst round2 = (n: number) => Math.round(n * 100) / 100;\n"
     }
   },
   {
@@ -17673,6 +18505,29 @@ function accountDashBase() {
   const creds = loadCredentials();
   return creds.session && creds.session_host ? dashboardOrigin(creds.session_host) : dashboardBase(DEFAULT_BASE);
 }
+function boundProjectSession() {
+  const t = resolveTargetOrFail(selector());
+  if (!t.tenantSlug) fail("no linked project \u2014 run `vxil link <slug>` (or `vxil quickstart`) first; this verb acts on the bound project");
+  const slug = t.tenantSlug;
+  const dashBase = dashboardBase(t.baseUrl);
+  const dash = makeDash(dashBase);
+  const run = (fn) => withDashSession(dash, dashBase, async (cookie) => {
+    let id = t.tenantId && t.tenantId !== "(unknown)" ? t.tenantId : void 0;
+    if (!id) {
+      const f = await findTenantViaSession(dash, cookie, slug);
+      if ("unauthorized" in f) return f;
+      id = f.tenant.id;
+    }
+    return fn(cookie, id);
+  });
+  return { t, slug, dash, dashBase, run };
+}
+async function confirmTyped(what, question, expected) {
+  if (hasFlag("yes")) return;
+  if (!process.stdin.isTTY) fail(`${what} \u2014 pass --yes to confirm in a non-interactive run`);
+  const ans = await prompt(question);
+  if (ans !== expected) fail("confirmation did not match \u2014 aborted.");
+}
 function requireApi(sel = "prod", opts = {}) {
   const t = resolveTargetOrFail(sel, opts.exitCode ?? 1);
   if (!t.apiKey) fail(noKeyMessage(t), opts.exitCode ?? 1);
@@ -18273,30 +19128,7 @@ async function runGen(sel = "prod", opts = {}) {
   let env;
   let apiVersions;
   if (offline) {
-    const cfg = await loadVxilConfig();
-    env = cfg.env;
-    features = Object.keys(cfg.features);
-    collections = Object.entries(cfg.cms?.collections ?? {}).map(([collection, def]) => ({
-      collection,
-      ...def.singular ? { singular: def.singular } : {},
-      fields: Object.entries(def.fields).map(([field, f]) => ({
-        field,
-        type: f.type,
-        required: !!f.required,
-        index_slot: f.indexSlot ?? null,
-        ...f.relationTo ? { relation_to: f.relationTo } : {},
-        ...f.computed ? { computed: f.computed } : {},
-        // `validation.enum` becomes a string-literal union in the generated
-        // types, so the OFFLINE collector must carry it too (the online path
-        // gets it from GET /v1/cms/collections, which returns the whole row) —
-        // else `vxil gen --offline` and `vxil gen` would disagree.
-        ...f.validation ? { validation: f.validation } : {}
-      }))
-    }));
-    functions = Object.entries(cfg.functions ?? {}).map(([name, def]) => ({
-      name,
-      ...def.signature ? { signature: def.signature } : {}
-    }));
+    ({ env, features, collections, functions } = genInputFromConfig(await loadVxilConfig()));
   } else {
     const { api, slug } = requireApi(sel);
     tenant = slug;
@@ -18327,10 +19159,6 @@ async function runGen(sel = "prod", opts = {}) {
   const catalog = emitMcp ? buildMcpCatalog(genInput) : void 0;
   const mcpPath = resolve7(process.cwd(), mcpOut);
   const outPath = resolve7(process.cwd(), out);
-  const body = (s) => {
-    const i = s.indexOf("export interface VxilSchema");
-    return i >= 0 ? s.slice(i) : s;
-  };
   const counts = {
     features: features.length,
     collections: collections.length,
@@ -18339,25 +19167,15 @@ async function runGen(sel = "prod", opts = {}) {
   };
   if (hasFlag("check")) {
     const existing = existsSync8(outPath) ? readFileSync8(outPath, "utf8") : "";
-    if (body(existing) !== body(src)) {
+    const types2 = checkGeneratedTypes(existing, src, { offline });
+    if (types2.unpinnedNotice) {
+      console.error(`vxil: ${out} was generated --offline, so the API majors are not pinned in it \u2014 run \`vxil gen\` online once to pin them`);
+    }
+    if (!types2.upToDate) {
       fail(`${out} is out of date (drift) \u2014 run \`vxil gen\` and commit. A collection/feature/function changed since it was generated.`);
     }
-    if (catalog) {
-      let upToDate = false;
-      if (existsSync8(mcpPath)) {
-        try {
-          const cur = JSON.parse(readFileSync8(mcpPath, "utf8"));
-          const want = JSON.parse(JSON.stringify(catalog));
-          delete cur.generated_at;
-          delete want.generated_at;
-          upToDate = JSON.stringify(cur) === JSON.stringify(want);
-        } catch {
-          upToDate = false;
-        }
-      }
-      if (!upToDate) {
-        fail(`${mcpOut} is out of date (drift) \u2014 run \`vxil gen\` and commit. A collection/feature/function changed since it was generated.`);
-      }
+    if (catalog && !mcpCatalogUpToDate(existsSync8(mcpPath) ? readFileSync8(mcpPath, "utf8") : null, catalog)) {
+      fail(`${mcpOut} is out of date (drift) \u2014 run \`vxil gen\` and commit. A collection/feature/function changed since it was generated.`);
     }
     if (jsonOut) console.log(JSON.stringify({ ok: true, check: "up-to-date", ...counts }));
     else console.log(`vxil gen --check: ${out}${catalog ? ` + ${mcpOut}` : ""} is up to date.`);
@@ -19059,10 +19877,28 @@ try {
     }
     case "invites": {
       const [sub = "list"] = positional(0);
-      const INVITES_USAGE = "usage: vxil invites [list] [--json] \xB7 vxil invites generate [--count <n>] [--json]";
-      if (sub !== "list" && sub !== "generate") fail(INVITES_USAGE);
+      const INVITES_USAGE = "usage: vxil invites [list] [--json] \xB7 vxil invites generate [--count <n>] [--json] \xB7 vxil invites accept <token | invite-url> [--json]";
+      if (sub !== "list" && sub !== "generate" && sub !== "accept") fail(INVITES_USAGE);
       const base2 = accountDashBase();
       const dash = makeDash(base2);
+      if (sub === "accept") {
+        const tok = parseInviteToken(positional(1)[0]);
+        if ("error" in tok) fail(tok.error);
+        const look = await lookupInvite(dash, tok.token);
+        if ("refused" in look) fail(`this invitation cannot be accepted (${look.refused})`);
+        console.error(`vxil invites accept \u2192 ${dashboardOrigin(base2)} \u2014 ${look.preview.role} on '${look.preview.tenant_display_name}' (expires ${look.preview.expires_at})`);
+        const r = await withDashSession(dash, base2, (c) => acceptInviteViaSession(dash, c, tok.token));
+        let slug;
+        try {
+          const l = await withDashSession(dash, base2, (c) => listProjectsViaSession(dash, c));
+          slug = l.tenants.find((x) => x.id === r.tenant_id)?.slug;
+        } catch {
+        }
+        if (jsonOut) console.log(JSON.stringify({ ...r, slug: slug ?? null, project: look.preview.tenant_display_name }));
+        else console.log(`\u2713 you are now ${r.role} on '${slug ?? look.preview.tenant_display_name}'`);
+        if (slug) console.error(`next: vxil link ${slug}`);
+        break;
+      }
       if (sub === "list") {
         const l = await withDashSession(dash, base2, (c) => listInvitesViaSession(dash, c));
         if (jsonOut) console.log(JSON.stringify(l, null, 2));
@@ -19080,6 +19916,264 @@ try {
       }
       break;
     }
+    case "members": {
+      const [sub = "list", arg] = positional(0);
+      const MEMBERS_USAGE = "usage: vxil members [list] [--json] \xB7 members invite <email> --role viewer|developer|admin|owner \xB7 members add <email> --role <r> \xB7 members rm <user_id|email> [--yes] \xB7 members uninvite <email|invite_id> [--yes]";
+      if (sub === "help" || hasFlag("help")) {
+        console.log(`${MEMBERS_USAGE}
+  list      members with their roles, then the pending e-mail invitations (expired ones badged)
+  invite    invite by e-mail (admin+; owner for the owner role): an address that already has an account is a
+            member at once, any other gets a 7-day e-mail \u2014 the server never says which; re-inviting resends (60 s apart)
+  add       the strict form: the address MUST already have an account (no mail); an upsert, so it is also
+            how you CHANGE an existing member's role
+  rm        remove a member (admin+; owner to remove an owner; the last owner is refused); you may remove yourself
+  uninvite  revoke a pending invitation by e-mail or invite id
+  The project is the bound slot (--dev / --target <name> select another); the session is \`vxil login\`'s.`);
+        break;
+      }
+      if (!["list", "invite", "add", "rm", "uninvite"].includes(sub)) fail(MEMBERS_USAGE);
+      const who = sub === "invite" || sub === "add" ? (() => {
+        const e = parseMemberEmail(arg);
+        if ("error" in e) fail(e.error);
+        const r2 = parseMemberRole(flag("role"));
+        if ("error" in r2) fail(r2.error);
+        return { email: e.email, role: r2.role };
+      })() : void 0;
+      if ((sub === "rm" || sub === "uninvite") && !arg) fail(MEMBERS_USAGE);
+      const { t, slug, dash, dashBase, run } = boundProjectSession();
+      if (sub === "list") {
+        const { members, invites: invites2 } = await run((c, id) => listMembersViaSession(dash, c, id));
+        if (jsonOut) console.log(JSON.stringify({ project: slug, members, invites: invites2 }, null, 2));
+        else for (const l of renderMembers(members, invites2)) console.log(l);
+        break;
+      }
+      if (sub === "invite") {
+        announceTarget(t, `members invite ${who.email}`);
+        const r2 = await run((c, id) => inviteMemberViaSession(dash, c, id, who));
+        if (jsonOut) console.log(JSON.stringify({ ...r2, invited: true }));
+        else console.log(`\u2713 invited ${r2.email} as ${r2.role} \u2014 an existing account is a member now, any other address got an e-mail (valid 7 days); \`vxil members list\` shows which`);
+        break;
+      }
+      if (sub === "add") {
+        announceTarget(t, `members add ${who.email}`);
+        const r2 = await run((c, id) => addMemberViaSession(dash, c, id, who));
+        if (jsonOut) console.log(JSON.stringify(r2));
+        else console.log(`\u2713 ${who.email} is ${r2.role} on '${slug}' (${r2.user_id})`);
+        break;
+      }
+      if (sub === "rm") {
+        const { members } = await run((c, id) => listMembersViaSession(dash, c, id));
+        const row2 = findMember(members, arg);
+        if (!row2) fail(`no member '${arg}' on '${slug}' \u2014 \`vxil members list\` shows the ids and e-mails`);
+        announceTarget(t, `members rm ${row2.email}`);
+        const { account } = await withDashSession(dash, dashBase, (c) => showAccountViaSession(dash, c));
+        const self = account.id === row2.user_id;
+        if (self) console.error(`vxil: warning \u2014 that is YOU (${account.email}); you lose access to '${slug}' and every key this machine holds for it stops being yours to manage`);
+        await confirmTyped("members rm removes their access", `remove ${row2.email} (${row2.role}) from '${slug}'? type the e-mail to confirm: `, row2.email);
+        await run((c, id) => removeMemberViaSession(dash, c, id, row2.user_id));
+        if (jsonOut) console.log(JSON.stringify({ user_id: row2.user_id, email: row2.email, removed: true, self }));
+        else console.log(`\u2713 removed ${row2.email} from '${slug}'`);
+        break;
+      }
+      const { invites } = await run((c, id) => listMembersViaSession(dash, c, id));
+      const inv = findPendingInvite(invites, arg);
+      if (!inv) fail(`no pending invitation '${arg}' on '${slug}' \u2014 \`vxil members list\` shows them`);
+      announceTarget(t, `members uninvite ${inv.email}`);
+      await confirmTyped("members uninvite revokes the e-mailed link", `revoke the invitation for ${inv.email} (${inv.role})? type the e-mail to confirm: `, inv.email);
+      const r = await run((c, id) => revokeInviteViaSession(dash, c, id, inv.id));
+      if (jsonOut) console.log(JSON.stringify({ invite_id: r.revoked, email: inv.email, revoked: true }));
+      else console.log(`\u2713 revoked the invitation for ${inv.email} \u2014 its link no longer works`);
+      break;
+    }
+    case "projects": {
+      const [sub = "list", arg] = positional(0);
+      const PROJECTS_USAGE = "usage: vxil projects [list] [--json] \xB7 projects create <slug> [--name <display>] [--json] \xB7 projects rm <slug> [--yes] [--json]";
+      if (!["list", "create", "rm"].includes(sub)) fail(PROJECTS_USAGE);
+      const base2 = accountDashBase();
+      const dash = makeDash(base2);
+      const host = dashboardOrigin(base2);
+      if (sub === "list") {
+        const { tenants: tenants2 } = await withDashSession(dash, base2, (c) => listProjectsViaSession(dash, c));
+        const bound = new Map(bindingSlots(loadProject()).map((s) => [s.slug, s.label]));
+        if (jsonOut) console.log(JSON.stringify({ dashboard: host, tenants: tenants2.map((x) => ({ ...x, bound: bound.get(x.slug) ?? null })) }, null, 2));
+        else for (const l of renderProjects(tenants2, bound)) console.log(l);
+        break;
+      }
+      if (sub === "create") {
+        const p = parseProjectCreate(arg, flag("name"));
+        if ("error" in p) fail(p.error);
+        console.error(`vxil projects create ${p.body.slug} \u2192 ${host}`);
+        const { project } = await withDashSession(dash, base2, (c) => createProjectViaSession(dash, c, p.body));
+        if (jsonOut) console.log(JSON.stringify(project, null, 2));
+        else console.log(`\u2713 created '${project.slug}' (${project.display_name}, ${project.tier}) \u2014 no key and no features yet`);
+        console.error(`next: vxil link ${project.slug} --mint && vxil push   (this repo's binding is unchanged)`);
+        break;
+      }
+      if (!arg) fail(PROJECTS_USAGE);
+      const { tenants } = await withDashSession(dash, base2, (c) => listProjectsViaSession(dash, c));
+      const victim = tenants.find((x) => x.slug === arg);
+      if (!victim) fail(`no project '${arg}' on this account \u2014 \`vxil projects list\``);
+      const proj = loadProject();
+      if (proj?.slug === arg && !hasFlag("yes")) {
+        fail(`'${arg}' is this repo's PRIMARY binding \u2014 pass --yes to delete it anyway (the binding file stays; \`vxil link <slug>\` re-binds afterwards)`);
+      }
+      console.error(`vxil projects rm ${arg} \u2192 ${host} (${victim.display_name}, ${victim.tier}${victim.role ? `, you are ${victim.role}` : ""})`);
+      await confirmTyped("projects rm is irreversible", `delete project '${arg}' and ALL of its data permanently? type the slug to confirm: `, arg);
+      const { report } = await withDashSession(dash, base2, (c) => deleteProjectViaSession(dash, c, victim.id, arg));
+      const cleanup = cleanupAfterDelete(loadCredentials(), proj, { tenant_id: victim.id, slug: arg });
+      if (cleanup.credsChanged) saveCredentials(cleanup.creds);
+      if (cleanup.projChanged && cleanup.proj) saveProject(cleanup.proj);
+      if (jsonOut) {
+        console.log(JSON.stringify({ slug: arg, tenant_id: victim.id, deleted: true, report, cleared_locally: cleanup.cleared, primary_binding_stale: cleanup.primaryWasIt }, null, 2));
+      } else {
+        console.log(`\u2713 deleted '${arg}'`);
+        for (const [k, v] of Object.entries(report)) console.log(`  ${k}: ${v !== null && typeof v === "object" ? JSON.stringify(v) : String(v)}`);
+      }
+      if (cleanup.cleared.length) console.error(`cleared locally: ${cleanup.cleared.join(", ")}`);
+      if (cleanup.primaryWasIt) console.error(`this repo's primary binding (.vxil/project.json) still names '${arg}' \u2014 run \`vxil link <slug>\` to bind another project`);
+      break;
+    }
+    case "billing": {
+      const [sub = "status"] = positional(0);
+      const BILLING_USAGE = "usage: vxil billing [status] [--json] \xB7 vxil billing upgrade --tier <free|developer|team|business> [--yes] [--json]   (upgrade also downgrades: --tier free)";
+      if (sub !== "status" && sub !== "upgrade") fail(BILLING_USAGE);
+      const tier = sub === "upgrade" ? (flag("tier") ?? "").trim() : "";
+      if (sub === "upgrade" && !tier) fail(BILLING_USAGE);
+      const { t, slug, dash, run } = boundProjectSession();
+      if (sub === "status") {
+        const { billing } = await run((c, id) => getBillingViaSession(dash, c, id));
+        if (jsonOut) console.log(JSON.stringify({ project: slug, ...billing }, null, 2));
+        else for (const l of renderBilling(billing)) console.log(l);
+        break;
+      }
+      announceTarget(t, `billing upgrade --tier ${tier}`);
+      if (tier === "free") {
+        await confirmTyped("moving to Free ends the paid plan", `move '${slug}' to the Free plan (at the end of the current period)? type the slug to confirm: `, slug);
+      }
+      const { outcome, raw } = await run((c, id) => checkoutViaSession(dash, c, id, tier));
+      const view = renderCheckout(outcome);
+      if (jsonOut) console.log(JSON.stringify({ ...raw, outcome: outcome.kind }, null, 2));
+      else console.log(view.stdout);
+      for (const l of view.stderr) console.error(l);
+      break;
+    }
+    case "files": {
+      const [sub, arg] = positional(0);
+      const FILES_USAGE = "usage: vxil files put <path> --user <user_id> [--content-type <type>] [--json] \xB7 vxil files rm <object_id> [--yes] [--json]";
+      if (sub === "put") {
+        if (!arg) fail(FILES_USAGE);
+        const user = flag("user");
+        if (!user) fail("--user <user_id> is required \u2014 the end user who owns the object");
+        const path = resolve7(process.cwd(), arg);
+        let bytes;
+        try {
+          bytes = readFileSync8(path);
+        } catch {
+          fail(`cannot read ${arg}`);
+        }
+        const filename = basename4(path);
+        const contentType = contentTypeFor(filename, flag("content-type"));
+        const { api } = requireApi(selector(), { write: `files put ${filename}` });
+        const put = async (url, method, b2, ct) => {
+          const res = await fetch(url, { method, headers: { "content-type": ct }, body: new Blob([b2]) });
+          return { status: res.status, ...res.ok ? {} : { text: (await res.text()).slice(0, 200) } };
+        };
+        const r = await filesPut(api, put, { user_id: user, filename, content_type: contentType, bytes: new Uint8Array(bytes) });
+        if (jsonOut) console.log(JSON.stringify(r));
+        else console.log(r.object_id);
+        console.error(`\u2713 uploaded ${filename} (${bytes.byteLength} bytes, ${contentType}) for ${user} \u2014 object ${r.object_id}, status ${r.status}`);
+        break;
+      }
+      if (sub === "rm") {
+        if (!arg) fail(FILES_USAGE);
+        const { api } = requireApi(selector(), { write: `files rm ${arg}` });
+        await confirmTyped("files rm is irreversible", `delete object ${arg}? type the object id to confirm: `, arg);
+        const r = await filesRm(api, arg);
+        if (jsonOut) console.log(JSON.stringify(r));
+        else console.log(`\u2713 deleted ${arg}`);
+        break;
+      }
+      fail(FILES_USAGE);
+      break;
+    }
+    case "webhooks": {
+      const [sub, verb, arg] = positional(0);
+      const WEBHOOKS_USAGE = "usage: vxil webhooks sources add --provider <stripe|paddle|github|slack|revenuecat|generic> --name <n> [--forward-url <https>] \xB7 sources list \xB7 sources rm <source_id> [--yes] \xB7 sources test <source_id> \xB7 vxil webhooks events replay <event_id> \xB7 events runs <event_id>";
+      if (sub === "sources") {
+        if (verb === "add") {
+          const p = parseSourceAdd({ provider: flag("provider"), name: flag("name"), forwardUrl: flag("forward-url") });
+          if ("error" in p) fail(p.error);
+          const { api, baseUrl } = requireApi(selector(), { write: `webhooks sources add ${p.body.name}` });
+          const s = await sourcesAdd(api, p.body);
+          console.log(sourceAddStdout(s, baseUrl, jsonOut));
+          for (const l of sourceAddNotices(s)) console.error(l);
+          break;
+        }
+        if (verb === "list") {
+          const { api } = requireApi(selector());
+          const rows = await sourcesList(api);
+          if (jsonOut) console.log(JSON.stringify({ sources: rows }, null, 2));
+          else if (!rows.length) console.log("(no inbound sources \u2014 `vxil webhooks sources add --provider \u2026 --name \u2026`)");
+          else for (const r of rows) console.log(`${r.source_id}  ${String(r.provider).padEnd(10)} ${r.name}`);
+          break;
+        }
+        if (verb === "rm") {
+          if (!arg) fail(WEBHOOKS_USAGE);
+          const { api } = requireApi(selector(), { write: `webhooks sources rm ${arg}` });
+          await confirmTyped("webhooks sources rm stops the receiver URL", `delete source ${arg}? type the source id to confirm: `, arg);
+          const r = await sourcesRm(api, arg);
+          if (jsonOut) console.log(JSON.stringify(r));
+          else console.log(`\u2713 deleted source ${arg} \u2014 its receiver URL answers 404 from now on`);
+          break;
+        }
+        if (verb === "test") {
+          if (!arg) fail(WEBHOOKS_USAGE);
+          const { api } = requireApi(selector(), { write: `webhooks sources test ${arg}` });
+          const r = await sourcesTest(api, arg);
+          if (jsonOut) console.log(JSON.stringify(r, null, 2));
+          else console.log(r.pending ? `\u2026 test event queued (run ${String(r.run_id ?? "?")}) \u2014 \`vxil api GET /v1/jobs/runs/${String(r.run_id ?? "<run_id>")}\` for the outcome` : `${r.delivered ? "\u2713 delivered" : "\u2717 not delivered"} (${String(r.state ?? "?")}${r.last_error_class ? ` \u2014 ${String(r.last_error_class)}: ${String(r.last_error_msg ?? "")}` : ""})`);
+          break;
+        }
+        fail(WEBHOOKS_USAGE);
+      }
+      if (sub === "events") {
+        if (!arg) fail(WEBHOOKS_USAGE);
+        if (verb === "replay") {
+          const { api } = requireApi(selector(), { write: `webhooks events replay ${arg}` });
+          const r = await eventsReplay(api, arg);
+          if (jsonOut) console.log(JSON.stringify(r, null, 2));
+          else console.log(`\u2713 replay queued for ${arg} \u2014 \`vxil webhooks events runs ${arg}\` shows the deliveries`);
+          break;
+        }
+        if (verb === "runs") {
+          const { api } = requireApi(selector());
+          console.log(JSON.stringify(await eventsRuns(api, arg), null, 2));
+          break;
+        }
+      }
+      fail(WEBHOOKS_USAGE);
+      break;
+    }
+    case "search": {
+      const [sub, verb, key] = positional(0);
+      const SEARCH_USAGE = "usage: vxil search sync run <sourceKey> [--sweep] [--json] \xB7 vxil search sync reset <sourceKey> [--purge] [--yes] [--json]";
+      if (sub !== "sync" || !key || verb !== "run" && verb !== "reset") fail(SEARCH_USAGE);
+      if (verb === "run") {
+        const sweep = hasFlag("sweep");
+        const { api: api2 } = requireApi(selector(), { write: `search sync run ${key}${sweep ? " --sweep" : ""}` });
+        const r2 = await searchSyncRun(api2, key, { sweep });
+        if (jsonOut) console.log(JSON.stringify(r2, null, 2));
+        else console.log(`\u2713 ${sweep ? "swept" : "synced"} ${key}: phase ${String(r2.phase ?? "?")} \xB7 processed ${String(r2.processed ?? 0)} \xB7 deleted ${String(r2.deleted ?? 0)} \xB7 unchanged ${String(r2.skipped_unchanged ?? 0)}`);
+        break;
+      }
+      const purge = hasFlag("purge");
+      const { api } = requireApi(selector(), { write: `search sync reset ${key}${purge ? " --purge" : ""}` });
+      if (purge) await confirmTyped("search sync reset --purge hard-deletes every synced document", `reset '${key}' AND purge its documents? type the source key to confirm: `, key);
+      const r = await searchSyncReset(api, key, { purge });
+      if (jsonOut) console.log(JSON.stringify(r, null, 2));
+      else console.log(`\u2713 reset ${key} to a fresh backfill (phase ${String(r.phase ?? "?")})${purge ? ` \u2014 purged ${String(r.purged ?? 0)} document(s)` : ""}`);
+      break;
+    }
     case "listen": {
       const rawUrl = flag("forward-to");
       if (!rawUrl) {
@@ -19451,9 +20545,9 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
           const qs = since ? `?since=${encodeURIComponent(since)}` : "";
           const res = await api("GET", `/v1/functions/${encodeURIComponent(name)}/logs${qs}`);
           if (res.body.error) printEnvelope(res);
-          const data4 = res.body.data;
-          if (data4.lines.length) console.log(formatLogLines(data4.lines));
-          if (data4.next_since) since = data4.next_since;
+          const data2 = res.body.data;
+          if (data2.lines.length) console.log(formatLogLines(data2.lines));
+          if (data2.next_since) since = data2.next_since;
         };
         await fetchPage();
         if (hasFlag("tail")) {
@@ -19566,6 +20660,36 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
         }
         break;
       }
+      if (sub === "bulk-rm") {
+        const [collection] = positional(1);
+        const BULK_USAGE = "usage: vxil cms bulk-rm <collection> --filter '<json>' [--limit <1..100>] [--dry-run] [--yes] [--json]";
+        if (!collection) fail(BULK_USAGE);
+        const filter = parseBulkFilter(flag("filter"));
+        if ("error" in filter) fail(filter.error);
+        const limit = parseBulkLimit(flag("limit"));
+        if ("error" in limit) fail(limit.error);
+        const { api: api2, target } = requireApi(selector(), { write: `cms bulk-rm ${collection}` });
+        const dry = await bulkRmDryRun(api2, collection, filter.filter);
+        const where = `'${collection}' on '${target.tenantSlug ?? "(env key)"}'`;
+        console.error(`${dry.matched}${dry.truncated ? "+" : ""} item(s) in ${where} match ${JSON.stringify(filter.filter)}`);
+        if (hasFlag("dry-run")) {
+          if (jsonOut) console.log(JSON.stringify({ collection, filter: filter.filter, matched: dry.matched, truncated: dry.truncated, dry_run: true, deleted: 0 }));
+          else console.log(`dry run \u2014 nothing deleted; drop --dry-run to soft-delete them (purged after 30 days)`);
+          break;
+        }
+        if (dry.matched === 0) {
+          if (jsonOut) console.log(JSON.stringify({ collection, filter: filter.filter, matched: 0, dry_run: false, deleted: 0 }));
+          else console.log("nothing matches \u2014 nothing to delete");
+          break;
+        }
+        await confirmTyped("cms bulk-rm deletes items", `soft-delete ${dry.matched}${dry.truncated ? "+" : ""} item(s) from ${where}? type the collection name to confirm: `, collection);
+        const done = await bulkRmAll(api2, collection, filter.filter, limit.limit, (p, totals) => {
+          if (p.deleted > 0) console.error(`  \u2026 deleted ${totals.deleted}${p.cascaded ? ` (+${p.cascaded} cascaded)` : ""}`);
+        });
+        if (jsonOut) console.log(JSON.stringify({ collection, filter: filter.filter, matched: dry.matched, dry_run: false, ...done }));
+        else console.log(`\u2713 soft-deleted ${done.deleted} item(s) from ${where}${done.cascaded ? ` (${done.cascaded} cascaded)` : ""}${done.set_null ? ` (${done.set_null} relation(s) set null)` : ""} \u2014 purged after 30 days${done.truncated ? "; stopped at the page cap, re-run to continue" : ""}`);
+        break;
+      }
       const { api } = requireApi(selector());
       if (sub === "status") {
         printEnvelope(await api("GET", "/v1/cms/collections"));
@@ -19586,7 +20710,7 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
           console.log(`  \u26A0 ${done.skipped} row(s) were written while the re-index ran and were NOT re-projected \u2014 re-run \`vxil cms reindex ${collection}\` when writes are quiet`);
         }
       } else {
-        fail("usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--yes]");
+        fail("usage: vxil cms status|pull|reindex <collection> [--field <field>]|drop <collection> [--yes]|bulk-rm <collection> --filter '<json>' [--dry-run] [--yes]");
       }
       break;
     }
@@ -19630,6 +20754,26 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
     }
     case "users": {
       const [sub, id] = rest;
+      if (sub === "import") {
+        const [file] = positional(1);
+        if (!file) fail("usage: vxil users import <users.json|users.csv> [--json]  (csv: a header with id[,email[,display_name]]; RFC 4180 quotes for a comma inside a field)");
+        let text = "";
+        try {
+          text = readFileSync8(resolve7(process.cwd(), file), "utf8");
+        } catch {
+          fail(`cannot read ${file}`);
+        }
+        const parsed = parseUsersFile(text, file);
+        if ("error" in parsed) fail(parsed.error);
+        const { api: api2 } = requireApi(selector(), { write: `users import ${file}` });
+        console.error(`${parsed.users.length} user(s) in ${file}`);
+        const r = await importUsers(api2, parsed.users, { onProgress: (d, total) => {
+          if (total > 100) console.error(`  \u2026 ${d}/${total}`);
+        } });
+        if (jsonOut) console.log(JSON.stringify({ file, users: parsed.users.length, ...r }));
+        else console.log(`\u2713 upserted ${r.upserted} user(s) from ${file} in ${r.chunks} call(s)`);
+        break;
+      }
       const { api } = requireApi(selector(), sub === "add" ? { write: "users add" } : {});
       if (sub === "add") {
         if (!id) fail("usage: vxil users add <id> --email <email>");
@@ -19637,21 +20781,21 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
       } else if (sub === "list") {
         const email = flag("email");
         printEnvelope(await api("GET", `/v1/users${email ? `?email=${encodeURIComponent(email)}` : ""}`));
-      } else fail("usage: vxil users add|list");
+      } else fail("usage: vxil users add|list|import <file>");
       break;
     }
     case "send": {
       const { api } = requireApi(selector(), { write: "send" });
       const [userId, template] = rest;
       if (!userId || !template) fail("usage: vxil send <user_id> <template> --data '<json>'");
-      let data4 = {};
+      let data2 = {};
       const raw = flag("data");
       try {
-        data4 = raw ? JSON.parse(raw) : {};
+        data2 = raw ? JSON.parse(raw) : {};
       } catch {
         fail("--data must be valid JSON");
       }
-      printEnvelope(await api("POST", "/v1/notifications/send", { user_id: userId, template, data: data4 }));
+      printEnvelope(await api("POST", "/v1/notifications/send", { user_id: userId, template, data: data2 }));
       break;
     }
     case "deliveries": {
@@ -19666,6 +20810,10 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
       break;
     }
     case "api": {
+      if (hasFlag("help") || positional(0)[0] === "help") {
+        console.log(apiCheatSheet());
+        break;
+      }
       let parsed;
       try {
         parsed = parseApiArgs(positional(0), flag("data"));
@@ -19679,10 +20827,13 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
     }
     default:
       console.log(`vxil \u2014 a Supabase-grade code-first CLI for the whole platform
-  init [--template <id>] \xB7 templates \xB7 try (keyless sandbox) \xB7 quickstart [--dev --ttl <h>] \xB7 login \xB7 link <slug> [--key <k>] [--as dev|<name>] [--mint]
+  init [--template <id>] \xB7 templates \xB7 try (keyless sandbox) \xB7 quickstart [--features a,b] [--invite <code>] [--env <label>] [--dev [--ttl <h>]] [--no-push] \xB7 login \xB7 link <slug> [--key <k>] [--as dev|<name>] [--env <label>] [--mint]
   keys mint --name <n> --scopes <a,b,c> [--env live|test] [--store] \xB7 keys list \xB7 keys revoke <key_id> [--yes]  \u2014 a NARROW scoped key for a server (shown once; needs a vxil login session)
   keys perms <key_id> [--allow <a,b> | --clear-allow] [--deny <c> | --clear-deny]  \u2014 a key's MCP tool permissions (admin+)
-  account [show] \xB7 account set [--locale <code>] [--display-name <n>] \xB7 account password \xB7 logout \xB7 invites [list] \xB7 invites generate [--count <n>]
+  account [show] \xB7 account set [--locale <code>] [--display-name <n>] \xB7 account password \xB7 logout \xB7 invites [list] \xB7 invites generate [--count <n>] \xB7 invites accept <token|url>
+  members [list] \xB7 members invite <email> --role <r> \xB7 members add <email> --role <r> \xB7 members rm <user_id|email> [--yes] \xB7 members uninvite <email|id> [--yes]  \u2014 the bound project's team (session)
+  projects [list] \xB7 projects create <slug> [--name <n>] \xB7 projects rm <slug> [--yes]  \u2014 the account's projects (rm: owner-only, typed slug, irreversible)
+  billing [status] \xB7 billing upgrade --tier <free|developer|team|business> [--yes]  \u2014 prints the hosted checkout URL (never opens a browser); --tier free downgrades
   architect "<describe your app>" \u2014 plain English in, a reviewed vxil.config.ts draft out
   plan [--explain] \xB7 push [--dev|--target <name>|--prod] [--server [--resume <apply_id>]] [--no-gen] [--skip-functions] \xB7 pull \xB7 gen [--check] [--offline] [--out <f>] [--no-mcp] [--mcp-out <f>]
     push production overrides: --allow-mock-in-prod \xB7 --allow-sandbox-in-prod \xB7 --allow-dev-origins-in-prod \xB7 --yes
@@ -19696,11 +20847,13 @@ export default defineConfig(${JSON.stringify({ features: featBlocks, cms: { coll
   migrate payments --from-provider stripe|paddle|paypal|revenuecat (--customers <f.csv> | --all) [--dry-run]  \u2014 backfill subscriptions via the server sync leg (resumable)
   payments simulate --scenario refund-pair|cross-platform-unlock|renewal|expiry|past-due-grace|transfer --user <id> [--tier <t>]  \u2014 mock/dev projects only
   env pull [--dev] [--file <f>] [--print] [--no-gitignore]
-  functions new|deploy|list|delete|enable|disable [--yes]|invoke [--async]|logs [--tail]|dev <name> [--port <n>] \xB7 cms status|pull|reindex <collection>|drop <collection> [--yes] \xB7 dev up [--ttl <h>] [--new]|down [--yes]|seed|reset
+  functions new|deploy|list|delete|enable|disable [--yes]|invoke [--async]|logs [--tail]|dev <name> [--port <n>] \xB7 cms status|pull|reindex <collection>|drop <collection> [--yes]|bulk-rm <collection> --filter '<json>' [--dry-run] [--yes] \xB7 dev up [--ttl <h>] [--new]|down [--yes]|seed|reset
+  files put <path> --user <id> [--content-type <t>] \xB7 files rm <object_id> [--yes] \xB7 webhooks sources add|list|rm|test \xB7 webhooks events replay|runs <event_id> \xB7 search sync run|reset <sourceKey> [--sweep|--purge] \xB7 users import <file.json|.csv>
+  api --help  \u2014 the operator cheat-sheet: every dashboard action as one 'vxil api' line, grouped by feature
   listen --forward-to <url> [--dev] [--source <id>] [--events <prefix,\u2026>] [--replay-last <n>] [--interval <s>] [--show-runs] [--raw]  \u2014 forward inbound webhook events to a local server
   mcp install [--client cursor|claude|vscode] [--project] [--print] [--key <k>] [--scopes a,b] [--name <server>]  \u2014 connect your editor's agent to this backend's MCP server
   dev branch [<name>] [--ttl <h=24>] [--no-env] [--print] | --list | --rm <name> [--yes]
-  config get \xB7 users \xB7 send \xB7 deliveries \xB7 api <METHOD> <path> ['<json>' | --data '<json>']
+  config get \xB7 users add|list|import \xB7 send \xB7 deliveries \xB7 api <METHOD> <path> ['<json>' | --data '<json>']
   global: --json (machine-readable + exit codes)`);
       process.exit(cmd ? 1 : 0);
   }
@@ -19891,25 +21044,9 @@ async function devTeardown(dashBase, opts) {
   const dash = makeDash(dashBase);
   const cookie = await resolveDashCookie(dash, dashBase);
   const { alreadyGone } = await devDown(dash, cookie, { tenant_id: slot.tenant_id, slug: slot.slug });
-  const creds = loadCredentials();
-  if (creds.keys?.[slot.slug]) {
-    delete creds.keys[slot.slug];
-    saveCredentials(creds);
-  }
-  const cur = loadProject();
-  if (cur) {
-    let changed = false;
-    if (opts.branch !== void 0 && cur.branches?.[opts.branch]) {
-      delete cur.branches[opts.branch];
-      if (!Object.keys(cur.branches).length) delete cur.branches;
-      changed = true;
-    }
-    if (cur.dev && cur.dev.tenant_id === slot.tenant_id) {
-      delete cur.dev;
-      changed = true;
-    }
-    if (changed) saveProject(cur);
-  }
+  const cleanup = cleanupAfterDelete(loadCredentials(), loadProject(), { tenant_id: slot.tenant_id, slug: slot.slug });
+  if (cleanup.credsChanged) saveCredentials(cleanup.creds);
+  if (cleanup.projChanged && cleanup.proj) saveProject(cleanup.proj);
   const what = opts.branch !== void 0 ? `dev branch '${opts.branch}' (tenant '${slot.slug}')` : `dev tenant '${slot.slug}'`;
   console.log(alreadyGone ? `\u2713 ${what} was already gone \u2014 cleared the local binding` : `\u2713 ${what} torn down`);
 }