cursedbelt 2.7.0 → 3.0.0

package/dist/server/services/assetSources.d.ts

@@ -1,95 +0,0 @@
-/**
- * The AssetService source registry (04 §2b) — the consolidation blocker.
- *
- * Before this, `AssetService` read one hardcoded table (`media_files`). AssetStudio
- * could therefore never REPLACE Media Vault, because vault assets (`mv_assets`)
- * lived in a table the service did not know about. Here every origin — the file
- * catalogue AND the content-addressed vault — is an {@link AssetSource}, and the
- * service UNIONS over the registered sources instead of naming a table. Adding the
- * vault is registering a source, not branching the service; `plugin-media-vault`
- * can finally die because its data shows up through the same engine surface.
- *
- * Two laws every source upholds, the same ones the single-table service did:
- *
- *   * **The public door cannot open a private item.** `resolvePublic` returns
- *     `null` for a sealed-at-rest item BY CONSTRUCTION (its query carries
- *     `encryption IS NULL`), so §4.3 holds no matter how many sources exist.
- *   * **`revealPrivate` is a server decision.** A locked listing excludes private
- *     items in SQL, per source, so no post-filter can be forgotten.
- *
- * Ids are namespaced at mint (`file_…`, `asset_…`), but the service does NOT
- * rely on prefixes to route a read: it asks each source to `resolve` and takes
- * the first hit, so a source that does not own an id simply returns `null`. That
- * keeps routing robust against migrated ids that predate today's prefixes.
- */
-import { type RepoScope } from 'cwip/repositories';
-import type { StorageProvider } from 'cwip/storage';
-/** A media item as a source yields it, before the service attaches transport URLs. */
-export interface AssetItem {
-    id: string;
-    kind: 'video' | 'photo' | 'file';
-    title?: string;
-    /** Sealed at rest ⇒ reachable only through the private door. */
-    private: boolean;
-    /** An HLS ladder exists (catalogue only; the vault serves progressive bytes). */
-    hasHls: boolean;
-}
-export interface AssetSourcePage {
-    items: readonly AssetItem[];
-    /** Opaque per-source continuation; absent on the last page. */
-    cursor?: string;
-}
-/** Where the bytes for a resolved item live. */
-export interface AssetObjectRef {
-    objectKey: string;
-    /** Envelope scheme when sealed at rest; absent ⇒ plaintext. */
-    encryption?: string;
-}
-/**
- * One registered origin the AssetService unions over. Each method is scoped to
- * the caller's tenant by construction (the repo ops it runs carry the predicate),
- * and returns `null`/empty for ids it does not own rather than throwing.
- */
-export interface AssetSource {
-    readonly id: string;
-    list(scope: RepoScope, opts: {
-        revealPrivate: boolean;
-        limit: number;
-        cursor?: string;
-    }): Promise<AssetSourcePage>;
-    /**
-     * Metadata for ONE public item — the detail read (03 §1e's `video-detail`).
-     *
-     * It goes through the same door as {@link AssetSource.resolvePublic}, and for
-     * the same reason: a detail surface that could describe a sealed item would
-     * leak its title and kind through a route with no `requirePrivateScope`, which
-     * is §4.3 wearing a different hat. A private id therefore reads as `null` here
-     * exactly as an unknown one does, and the mixin turns both into the same 404.
-     */
-    get(scope: RepoScope, id: string): Promise<AssetItem | null>;
-    /** Resolve bytes for a PUBLIC item (excludes private by construction). */
-    resolvePublic(scope: RepoScope, id: string): Promise<AssetObjectRef | null>;
-    /** Resolve bytes for a PRIVATE item — only reached behind `requirePrivateScope`. */
-    resolvePrivate(scope: RepoScope, id: string): Promise<AssetObjectRef | null>;
-    /** Soft-delete + report freed bytes so the service posts the storage credit; `null` if absent. */
-    remove(scope: RepoScope, id: string): Promise<{
-        objectKey: string;
-        byteSize: number;
-    } | null>;
-}
-/**
- * The file catalogue (`media_files`) as a source. This is source[0] in every
- * asset service — the default origin uploads land in and the one that carries HLS
- * renditions. It simply wraps the existing catalogue repo ops behind the registry
- * shape, so the union path is the ONLY read path even for a single-source app.
- */
-export declare function createCatalogueMediaSource(storage: StorageProvider): AssetSource;
-/**
- * The content-addressed vault (`mv_assets`) as a source — the adapter that lets
- * AssetStudio replace Media Vault (§2b). Vault assets have no renditions, so they
- * always serve progressive bytes (`hasHls: false`); `revealPrivate` and the
- * public/private door split hold exactly as they do for the catalogue, because
- * `mv_assets` carries the same `encryption` column.
- */
-export declare function createVaultMediaSource(storage: StorageProvider): AssetSource;
-//# sourceMappingURL=assetSources.d.ts.map

package/dist/server/services/assetSources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"assetSources.d.ts","sourceRoot":"","sources":["../../../src/server/services/assetSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAML,KAAK,SAAS,EAGf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnH;;;;;;;;OAQG;IACH,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC7D,0EAA0E;IAC1E,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC5E,oFAAoF;IACpF,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7E,kGAAkG;IAClG,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC/F;AA+BD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CA+BhF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAoC5E"}

package/dist/server/services/assetSources.js

@@ -1,131 +0,0 @@
-/**
- * The AssetService source registry (04 §2b) — the consolidation blocker.
- *
- * Before this, `AssetService` read one hardcoded table (`media_files`). AssetStudio
- * could therefore never REPLACE Media Vault, because vault assets (`mv_assets`)
- * lived in a table the service did not know about. Here every origin — the file
- * catalogue AND the content-addressed vault — is an {@link AssetSource}, and the
- * service UNIONS over the registered sources instead of naming a table. Adding the
- * vault is registering a source, not branching the service; `plugin-media-vault`
- * can finally die because its data shows up through the same engine surface.
- *
- * Two laws every source upholds, the same ones the single-table service did:
- *
- *   * **The public door cannot open a private item.** `resolvePublic` returns
- *     `null` for a sealed-at-rest item BY CONSTRUCTION (its query carries
- *     `encryption IS NULL`), so §4.3 holds no matter how many sources exist.
- *   * **`revealPrivate` is a server decision.** A locked listing excludes private
- *     items in SQL, per source, so no post-filter can be forgotten.
- *
- * Ids are namespaced at mint (`file_…`, `asset_…`), but the service does NOT
- * rely on prefixes to route a read: it asks each source to `resolve` and takes
- * the first hit, so a source that does not own an id simply returns `null`. That
- * keeps routing robust against migrated ids that predate today's prefixes.
- */
-import { deleteMediaFile, listMediaFiles, readPrivateMediaFile, readPublicMediaFile, scopedExec, vaultRepo, } from 'cwip/repositories';
-/** MIME → the three view kinds AssetStudio renders. */
-const kindOf = (mimeType) => {
-    if (mimeType.startsWith('video/'))
-        return 'video';
-    if (mimeType.startsWith('image/'))
-        return 'photo';
-    return 'file';
-};
-const catalogueItem = (file) => ({
-    id: file.id,
-    kind: file.kind,
-    title: file.title,
-    private: file.private,
-    hasHls: file.hasHls,
-});
-/**
- * One `mv_assets` row as a catalogue item. Written once and shared by `list` and
- * `get` so the detail read and the listing can never describe the same asset
- * differently — the drift that made the union listing miss a CDC channel for two
- * arcs (03 §1c) started as exactly this kind of duplicated mapping.
- */
-const vaultItem = (asset) => ({
-    id: asset.id,
-    kind: kindOf(asset.mimeType),
-    title: asset.title || undefined,
-    private: asset.encryption !== undefined,
-    hasHls: false,
-});
-/**
- * The file catalogue (`media_files`) as a source. This is source[0] in every
- * asset service — the default origin uploads land in and the one that carries HLS
- * renditions. It simply wraps the existing catalogue repo ops behind the registry
- * shape, so the union path is the ONLY read path even for a single-source app.
- */
-export function createCatalogueMediaSource(storage) {
-    const domain = () => storage.domain('media');
-    return {
-        id: 'catalogue',
-        async list(scope, opts) {
-            const page = await scopedExec(domain(), scope, listMediaFiles(scope, { revealPrivate: opts.revealPrivate, cursor: opts.cursor, limit: opts.limit }));
-            return { items: page.items.map(catalogueItem), cursor: page.cursor };
-        },
-        async get(scope, id) {
-            // Same SQL as the bytes door (`encryption IS NULL`), so the two cannot
-            // drift into disagreeing about what "public" means.
-            const file = await scopedExec(domain(), scope, readPublicMediaFile(scope, id));
-            return file ? catalogueItem(file) : null;
-        },
-        async resolvePublic(scope, id) {
-            const file = await scopedExec(domain(), scope, readPublicMediaFile(scope, id));
-            return file ? { objectKey: file.objectKey } : null;
-        },
-        async resolvePrivate(scope, id) {
-            const file = await scopedExec(domain(), scope, readPrivateMediaFile(scope, id));
-            return file ? { objectKey: file.objectKey, encryption: file.encryption } : null;
-        },
-        async remove(scope, id) {
-            const deleted = await scopedExec(domain(), scope, deleteMediaFile(scope, id));
-            return deleted ? { objectKey: deleted.objectKey, byteSize: deleted.byteSize } : null;
-        },
-    };
-}
-/**
- * The content-addressed vault (`mv_assets`) as a source — the adapter that lets
- * AssetStudio replace Media Vault (§2b). Vault assets have no renditions, so they
- * always serve progressive bytes (`hasHls: false`); `revealPrivate` and the
- * public/private door split hold exactly as they do for the catalogue, because
- * `mv_assets` carries the same `encryption` column.
- */
-export function createVaultMediaSource(storage) {
-    const domain = () => storage.domain('media');
-    return {
-        id: 'vault',
-        async list(scope, opts) {
-            const page = await scopedExec(domain(), scope, vaultRepo.listAssets(scope, { revealPrivate: opts.revealPrivate, cursor: opts.cursor, limit: opts.limit }));
-            return { items: page.items.map(vaultItem), cursor: page.cursor };
-        },
-        async get(scope, id) {
-            const asset = await scopedExec(domain(), scope, vaultRepo.getAsset(scope, id));
-            // Fail closed on a sealed asset, exactly as `resolvePublic` does — a detail
-            // read is a read.
-            if (!asset || asset.encryption !== undefined)
-                return null;
-            return vaultItem(asset);
-        },
-        async resolvePublic(scope, id) {
-            const asset = await scopedExec(domain(), scope, vaultRepo.getAsset(scope, id));
-            // Fail closed on a private asset through the public door — the same law the
-            // catalogue's `readPublicMediaFile` enforces in SQL.
-            if (!asset || asset.encryption !== undefined)
-                return null;
-            return { objectKey: asset.objectKey };
-        },
-        async resolvePrivate(scope, id) {
-            const asset = await scopedExec(domain(), scope, vaultRepo.getAsset(scope, id));
-            if (!asset || asset.encryption === undefined)
-                return null;
-            return { objectKey: asset.objectKey, encryption: asset.encryption };
-        },
-        async remove(scope, id) {
-            const trashed = await scopedExec(domain(), scope, vaultRepo.trashAsset(scope, id));
-            return trashed ? { objectKey: trashed.objectKey, byteSize: trashed.byteSize } : null;
-        },
-    };
-}
-//# sourceMappingURL=assetSources.js.map

package/dist/server/services/assetSources.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assetSources.js","sourceRoot":"","sources":["../../../src/server/services/assetSources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,eAAe,EACf,cAAc,EAEd,oBAAoB,EACpB,mBAAmB,EAEnB,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAqD3B,uDAAuD;AACvD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAqB,EAAE;IACrD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAClD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAAe,EAAa,EAAE,CAAC,CAAC;IACrD,EAAE,EAAE,IAAI,CAAC,EAAE;IACX,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,MAAM,EAAE,IAAI,CAAC,MAAM;CACpB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,SAAS,GAAG,CAAC,KAA2B,EAAa,EAAE,CAAC,CAAC;IAC7D,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;IAC/B,OAAO,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS;IACvC,MAAM,EAAE,KAAK;CACd,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAwB;IACjE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,WAAW;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;YACpB,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,MAAM,EAAE,EACR,KAAK,EACL,cAAc,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CACrG,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE;YACjB,uEAAuE;YACvE,oDAAoD;YACpD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAwB;IAC7D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,OAAO;QACX,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;YACpB,MAAM,IAAI,GAAG,MAAM,UAAU,CAC3B,MAAM,EAAE,EACR,KAAK,EACL,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAC3G,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE;YACjB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,4EAA4E;YAC5E,kBAAkB;YAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1D,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,4EAA4E;YAC5E,qDAAqD;YACrD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1D,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1D,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/services/billingService.d.ts

@@ -1,106 +0,0 @@
-/**
- * `BillingService` over real `meter_events` (03 §7.4, 01 §4).
- *
- * `billingMixin` and `assertWithinPlan` were landed as an interface with no
- * implementation, which left the whole billing path asserted and unproven. This
- * evaluates a plan against what the telemetry tier actually recorded.
- *
- * Two properties the naive version gets wrong:
- *
- *   * **Usage is read from `meter_events`, not from a counter the app maintains.**
- *     The meter is the durable, never-dropped record (01 §4.1); a parallel
- *     counter is a second source of truth that drifts the first time a process
- *     restarts mid-flush, and it drifts in the direction of under-billing.
- *   * **A metric with no plan limit is UNLIMITED, not zero.** Defaulting an
- *     unknown metric to 0 would make every newly-metered feature instantly
- *     "over limit" for every existing tenant — a plan change should be a
- *     deliberate act, not a side effect of adding a meter.
- *
- * ## WHICH meter (04 item 4e, owner decision D26)
- *
- * The read goes through a {@link MeterUsageReader}, not through a handle this
- * service opens, and that indirection is the whole of the multi-node fix. Under
- * the local profile the reader is the node's own `meter_events`; under saas it
- * is the SHARED `cc_meter_events` every node's rollup ships into. Before the
- * port existed this file read the local table unconditionally, so two API nodes
- * enforced one plan limit twice — a tenant on a 100 GB plan could use ~200 GB
- * with neither node noticing, and the quota gate inherited it exactly.
- *
- * The seam is a PORT rather than a profile branch here on purpose: a service
- * that knew about both meters is a service that can be wired to the wrong one
- * silently, and "silently" is the operative word — the wrong wiring returns
- * plausible numbers.
- */
-import type { SqliteWritableDatabase } from 'cwip/sqlite';
-import { type MeterUsageReader } from 'cwip/telemetry';
-import type { BillingService, PlanUsage } from '../mixins/billing.mixin';
-/** A plan: its identity plus per-metric ceilings for one billing window. */
-export interface PlanDefinition {
-    id: string;
-    title: string;
-    /** metric → ceiling for the window. A metric absent here is unlimited. */
-    limits: Readonly<Record<string, number>>;
-    /**
-     * The ENTITLEMENT allowlist (P2, 2026-07-28): qualified `'engine.feature'`
-     * keys this plan includes. The field ABSENT means every feature is included
-     * — the exact mirror of `limits`' "absent metric is unlimited", so the two
-     * halves of a plan degrade the same generous way and a legacy plan object
-     * keeps meaning what it meant. Deployment-wide feature config still decides
-     * what is MOUNTED; this decides which tenants may call the tier-gated
-     * routes that are mounted (`requirePlanFeature`).
-     */
-    features?: readonly string[];
-}
-/**
- * Does `plan` include `engine.feature`? Absent allowlist ⇒ yes (see
- * {@link PlanDefinition.features}).
- */
-export declare const planIncludesFeature: (plan: PlanDefinition, engine: string, feature: string) => boolean;
-/**
- * Refuse a tier-gated request whose tenant's plan lacks the feature — the
- * entitlement twin of {@link assertMetricWithinPlan}, and the same 402 family:
- * the shell already renders 402 as the upgrade dialog, and "your plan does not
- * include this" IS an upgrade prompt, not a permission failure (403 would read
- * as an RBAC problem to both the user and the audit trail).
- */
-export declare const assertFeatureWithinPlan: (plan: PlanDefinition, engine: string, feature: string) => void;
-export interface BillingServiceOptions {
-    /**
-     * The node's own telemetry handle holding `meter_events` (01 §4). Read-only
-     * here. The LOCAL profile's meter — supply exactly one of this or `usage`.
-     */
-    telemetryDb?: SqliteWritableDatabase;
-    /**
-     * Where usage is read from. The SAAS profile supplies the shared reader
-     * (`createSaasHostServices(…).meter.usage`); the local profile supplies
-     * `telemetryDb` instead and this is built from it.
-     *
-     * Supplying BOTH is refused rather than resolved by precedence: a host that
-     * passes a shared reader and a local handle has two different beliefs about
-     * where the money is counted, and silently honoring one of them is how a
-     * multi-node deployment ends up enforcing per-node ceilings while its wiring
-     * says otherwise.
-     */
-    usage?: MeterUsageReader;
-    /** Which plan a tenant is on. A host reads this from its own subscription store. */
-    resolvePlan: (tenantId: string) => PlanDefinition | Promise<PlanDefinition>;
-    /**
-     * Start of the current billing window, as ISO-8601. Defaults to the first
-     * instant of the current UTC month — the usual monthly meter reset.
-     */
-    windowStart?: (tenantId: string) => string;
-}
-/** No ceiling. Kept as a named constant so a reader never reads it as "zero allowed". */
-export declare const UNLIMITED: number;
-export declare function createBillingService(options: BillingServiceOptions): BillingService;
-/**
- * Assert a single metric is within its ceiling BEFORE doing metered work.
- *
- * The pre-check exists because `assertWithinPlan` on the usage view is a
- * post-hoc read: a route that only checked afterwards would already have spent
- * the tokens. `cost` is the amount this operation is about to consume, so a
- * request that would cross the line is refused instead of being the one that
- * crosses it.
- */
-export declare const assertMetricWithinPlan: (usage: readonly PlanUsage[], metric: string, cost?: number) => void;
-//# sourceMappingURL=billingService.d.ts.map

package/dist/server/services/billingService.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"billingService.d.ts","sourceRoot":"","sources":["../../../src/server/services/billingService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAgC,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAErF,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzE,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,cAAc,EAAE,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,OACb,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,GAAI,MAAM,cAAc,EAAE,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,IAO/F,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,oFAAoF;IACpF,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5E;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5C;AAOD,yFAAyF;AACzF,eAAO,MAAM,SAAS,QAA2B,CAAC;AAElD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAyBnF;AAwBD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GACjC,OAAO,SAAS,SAAS,EAAE,EAC3B,QAAQ,MAAM,EACd,aAAQ,KACP,IAQF,CAAC"}

package/dist/server/services/billingService.js

@@ -1,89 +0,0 @@
-import { createSqliteMeterUsageReader } from 'cwip/telemetry';
-import { AppError } from '../errors';
-/**
- * Does `plan` include `engine.feature`? Absent allowlist ⇒ yes (see
- * {@link PlanDefinition.features}).
- */
-export const planIncludesFeature = (plan, engine, feature) => plan.features === undefined || plan.features.includes(`${engine}.${feature}`);
-/**
- * Refuse a tier-gated request whose tenant's plan lacks the feature — the
- * entitlement twin of {@link assertMetricWithinPlan}, and the same 402 family:
- * the shell already renders 402 as the upgrade dialog, and "your plan does not
- * include this" IS an upgrade prompt, not a permission failure (403 would read
- * as an RBAC problem to both the user and the audit trail).
- */
-export const assertFeatureWithinPlan = (plan, engine, feature) => {
-    if (planIncludesFeature(plan, engine, feature))
-        return;
-    throw new AppError(`The '${plan.title}' plan does not include '${engine}.${feature}'.`, {
-        code: 'PLAN_FEATURE_NOT_INCLUDED',
-        status: 402,
-        context: { feature: `${engine}.${feature}`, plan: plan.id },
-    });
-};
-const startOfUtcMonth = () => {
-    const now = new Date();
-    return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1)).toISOString();
-};
-/** No ceiling. Kept as a named constant so a reader never reads it as "zero allowed". */
-export const UNLIMITED = Number.POSITIVE_INFINITY;
-export function createBillingService(options) {
-    const windowStart = options.windowStart ?? startOfUtcMonth;
-    const reader = resolveUsageReader(options);
-    return {
-        async usage(tenantId) {
-            const plan = await options.resolvePlan(tenantId);
-            const since = windowStart(tenantId);
-            const used = new Map((await reader.totals({ tenantId, since })).map((total) => [total.metric, total.qty]));
-            // Every metric the plan bounds, plus every metric actually consumed. The
-            // union matters: a tenant burning an unbounded metric still shows up in
-            // the usage view, which is how an operator notices a missing limit.
-            const metrics = new Set([...Object.keys(plan.limits), ...used.keys()]);
-            return [...metrics].sort().map((metric) => ({
-                metric,
-                used: used.get(metric) ?? 0,
-                limit: plan.limits[metric] ?? UNLIMITED,
-            }));
-        },
-        async plan(tenantId) {
-            return await options.resolvePlan(tenantId);
-        },
-    };
-}
-/**
- * Exactly one meter, named at construction.
- *
- * Neither is the failure that used to be impossible to make and is now easy: a
- * saas host that forgets `usage` would fall back to the node's own file and
- * silently enforce per-node ceilings, which is the defect D26 exists to close.
- * So "neither" is a refusal rather than a default, and it names both fixes.
- */
-const resolveUsageReader = (options) => {
-    if (options.usage && options.telemetryDb)
-        throw new AppError('createBillingService was given BOTH a `usage` reader and a `telemetryDb`. Those are two different meters — the shared cross-node one and this node\'s own file — and honoring one silently would make a multi-node deployment enforce per-node ceilings while its wiring says otherwise. Pass `usage` under saas, `telemetryDb` under local.', { code: 'BILLING_METER_AMBIGUOUS', status: 500, isOperational: false });
-    if (options.usage)
-        return options.usage;
-    if (options.telemetryDb)
-        return createSqliteMeterUsageReader(options.telemetryDb);
-    throw new AppError('createBillingService needs a meter to read: `telemetryDb` (this node\'s own `meter_events`, the local profile) or `usage` (a MeterUsageReader over the shared `cc_meter_events`, the saas profile — createSaasHostServices({ …, meter: { nodeId } }).meter.usage).', { code: 'BILLING_METER_UNWIRED', status: 500, isOperational: false });
-};
-/**
- * Assert a single metric is within its ceiling BEFORE doing metered work.
- *
- * The pre-check exists because `assertWithinPlan` on the usage view is a
- * post-hoc read: a route that only checked afterwards would already have spent
- * the tokens. `cost` is the amount this operation is about to consume, so a
- * request that would cross the line is refused instead of being the one that
- * crosses it.
- */
-export const assertMetricWithinPlan = (usage, metric, cost = 1) => {
-    const row = usage.find((u) => u.metric === metric);
-    if (!row || row.used + cost <= row.limit)
-        return;
-    throw new AppError(`Plan limit reached for '${metric}'.`, {
-        code: 'USAGE_LIMIT_EXCEEDED',
-        status: 402,
-        context: { metric, used: row.used, limit: row.limit, requested: cost },
-    });
-};
-//# sourceMappingURL=billingService.js.map

package/dist/server/services/billingService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"billingService.js","sourceRoot":"","sources":["../../../src/server/services/billingService.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,4BAA4B,EAAyB,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAqBrC;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAoB,EAAE,MAAc,EAAE,OAAe,EAAW,EAAE,CACpG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAoB,EAAE,MAAc,EAAE,OAAe,EAAQ,EAAE;IACrG,IAAI,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO;IACvD,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,KAAK,4BAA4B,MAAM,IAAI,OAAO,IAAI,EAAE;QACtF,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC,CAAC;AA6BF,MAAM,eAAe,GAAG,GAAW,EAAE;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACtF,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC;AAElD,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC;IAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,QAAgB;YAC1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAE3G,yEAAyE;YACzE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1C,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC3B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS;aACxC,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAgB;YACzB,OAAO,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,CAAC,OAA8B,EAAoB,EAAE;IAC9E,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;QACtC,MAAM,IAAI,QAAQ,CAChB,8UAA8U,EAC9U,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CACvE,CAAC;IACJ,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,4BAA4B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,IAAI,QAAQ,CAChB,oQAAoQ,EACpQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CACrE,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA2B,EAC3B,MAAc,EACd,IAAI,GAAG,CAAC,EACF,EAAE;IACR,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO;IACjD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,MAAM,IAAI,EAAE;QACxD,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;KACvE,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/server/services/devJobs.d.ts

@@ -1,93 +0,0 @@
-/**
- * The `deploy` job handler (03 §4b, audit G8).
- *
- * `devService.deploy` has always enqueued `DEV_DEPLOY_JOB` — and until now there
- * was **no handler anywhere**, so a deploy request returned a job id into a void:
- * the boot-time `assertJobKindsHandled` only stayed green because the recipe fell
- * back to a LOUD-unimplemented placeholder. This is the real handler.
- *
- * A deploy is a SEQUENCE of whitelisted OS commands (pull, build, migrate,
- * restart — whatever the host declares), and the three properties that make it
- * safe are the three a "just shell out" version gets wrong:
- *
- *   WHITELISTED   Every step names a `commandId`, never an argv. The
- *                 `ExecutionDriver` resolves it against `cc-manifest.json`
- *                 commands and refuses anything else (`EXEC_COMMAND_NOT_WHITELISTED`),
- *                 so the deploy plan cannot smuggle `rm -rf /` past the jail —
- *                 there is no shell between us and the executable (03 §7.1).
- *
- *   CANCELLABLE   A deploy is long-running, so `ctx.signal` is load-bearing: a
- *                 cancel must actually KILL the running child, not just flip a
- *                 flag while the build keeps burning a core. The handler checks
- *                 the signal between steps AND kills the in-flight child when it
- *                 fires mid-step — the exact failure `cancel()` silently has when
- *                 a handler ignores its signal.
- *
- *   OBSERVABLE    Progress is published on the push hub as it happens
- *                 (`event: 'deploy'`, instance- and tenant-scoped) so a client
- *                 watching `/api/instance/:id/stream` sees each step start and
- *                 finish; the terminal outcome is the handler's return value,
- *                 which the broker records durably (any node can read it).
- *
- * The PLAN itself — which commands a deploy runs for a given app — is host
- * wiring, not framework knowledge, so it is injected exactly like `snapshot` and
- * the `ConfigStore` are on `DevService`. A host with no plan gets no real handler
- * (the recipe keeps the loud placeholder), because a deploy that runs nothing is
- * a success that deployed nothing — worse than an honest 501.
- */
-import type { ExecutionDriver } from '../drivers/executionDriver';
-import type { JobHandler } from '../drivers/jobBroker';
-import type { ServerPushHub } from '../stream/serverPush';
-/** One whitelisted command in a deploy pipeline. */
-export interface DeployStep {
-    /** Key into `cc-manifest.json` commands — the ExecutionDriver validates it. */
-    commandId: string;
-    /** Named params, validated against the command's declared arg schema. */
-    args?: Record<string, string>;
-    /** Optional cwd; must resolve inside the command's declared `cwdRoot`. */
-    cwd?: string;
-    /** Human label for the progress frame. Defaults to the commandId. */
-    label?: string;
-}
-/**
- * Resolve the ordered steps a deploy of `appId` runs. Async so a host can read
- * the app's manifest/registry to decide. Returning `[]` is a refusal, not a
- * no-op success — the handler throws rather than report a deploy that did
- * nothing.
- */
-export type DeployPlan = (input: {
-    appId: string;
-    requestedBy?: string;
-}) => DeployStep[] | Promise<DeployStep[]>;
-/** One step's terminal result, collected into the job's recorded output. */
-export interface DeployStepResult {
-    commandId: string;
-    label: string;
-    exitCode: number;
-    startedAt: number;
-    endedAt: number;
-}
-export interface DeployOutcome {
-    appId: string;
-    steps: DeployStepResult[];
-}
-export interface DevJobHandlerOptions {
-    /** The whitelisted, tracked-PID execution driver (local or saas sandbox). */
-    exec: ExecutionDriver;
-    /** How a deploy of an app expands into ordered whitelisted steps. */
-    plan: DeployPlan;
-    /** Live progress channel. Absent ⇒ the deploy still runs and records; it is just silent. */
-    push?: ServerPushHub;
-    /** How often to poll a running step for completion (ms). Default 250. */
-    pollIntervalMs?: number;
-    /** Injected sleep, so a test drives the poll loop without wall-clock waits. */
-    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
-}
-/** Raised when a deploy is cancelled — the running child is killed first. */
-export declare const DEPLOY_CANCELLED = "DEPLOY_CANCELLED";
-/** Raised when a plan resolves to no steps — a deploy must do something. */
-export declare const DEPLOY_PLAN_EMPTY = "DEPLOY_PLAN_EMPTY";
-/** Raised when a step exits non-zero — the pipeline stops at the first failure. */
-export declare const DEPLOY_STEP_FAILED = "DEPLOY_STEP_FAILED";
-export declare function createDevJobHandlers(options: DevJobHandlerOptions): Readonly<Record<string, JobHandler>>;
-//# sourceMappingURL=devJobs.d.ts.map

package/dist/server/services/devJobs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"devJobs.d.ts","sourceRoot":"","sources":["../../../src/server/services/devJobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAI1D,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;AAElH,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,EAAE,eAAe,CAAC;IACtB,qEAAqE;IACrE,IAAI,EAAE,UAAU,CAAC;IACjB,4FAA4F;IAC5F,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAiBD,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAqGxG"}