tapimo 0.2.0 → 0.3.0

package/src/ApiKeys.ts

@@ -97,6 +97,7 @@ export async function mint(state: Store.State, input: MintInput): Promise<MintRe
     orgId: data.orgId ?? id,
     scopes: data.scopes,
     tokenLast4: token.slice(-4),
+    ...(data.billingActive === undefined ? {} : { billingActive: data.billingActive }),
     ...(data.createdBy === undefined ? {} : { createdBy: data.createdBy }),
     ...(data.expiresAt === undefined ? {} : { expiresAt: data.expiresAt }),
     ...(data.name === undefined ? {} : { name: data.name }),
@@ -183,7 +184,7 @@ export declare namespace list {
  *
  * @param state - The KV state store holding key records.
  * @param orgId - The owning organization id (`org_…`).
- * @param options - Optional project filter.
+ * @param options - Optional environment/project filters.
  * @returns The records.
  */
 export async function listByOrg(
@@ -200,6 +201,7 @@ export async function listByOrg(
       await state.delete(name)
       continue
     }
+    if (options.environment && record.environment !== options.environment) continue
     if (!options.projectId || record.projectId === options.projectId) records.push(record)
   }
   return records.sort((a, b) => b.createdAt.localeCompare(a.createdAt))
@@ -208,6 +210,8 @@ export async function listByOrg(
 export declare namespace listByOrg {
   /** Options for {@link listByOrg}. */
   type Options = {
+    /** Restrict results to keys in this environment. */
+    environment?: 'production' | 'sandbox' | undefined
     /** Restrict results to keys attributed to this project. */
     projectId?: string | undefined
   }
@@ -284,6 +288,51 @@ export declare namespace attribute {
   }
 }
 
+/**
+ * Stamps `billingActive` onto every key an organization owns in an environment,
+ * re-syncing the snapshot the auth path reads when billing flips (activation or
+ * lapse). Called off the request path from the billing writer, so the hot path
+ * never reads billing state. Records already carrying the target value are left
+ * untouched.
+ *
+ * @param state - The KV state store holding key records.
+ * @param options - Owner, environment, and the new billing-active value.
+ * @returns The number of records updated.
+ */
+export async function setBillingActive(
+  state: Store.State,
+  options: setBillingActive.Options,
+): Promise<number> {
+  const { active, environment, orgId } = options
+  const records = await listByOrg(state, orgId, { environment })
+  let updated = 0
+  for (const record of records) {
+    if (record.billingActive === active) continue
+    const recordKey = await state.get(idKeyFor(record.id))
+    if (!recordKey) continue
+    const next: Record = { ...record, billingActive: active }
+    const ttl =
+      next.expiresAt === undefined
+        ? undefined
+        : Math.max(1, Date.parse(next.expiresAt) - Date.now())
+    await state.put(recordKey, JSON.stringify(next), { ttl })
+    updated += 1
+  }
+  return updated
+}
+
+export declare namespace setBillingActive {
+  /** Options for {@link setBillingActive}. */
+  type Options = {
+    /** The new billing-active value to stamp. */
+    active: boolean
+    /** Environment whose keys are re-stamped. */
+    environment: 'production' | 'sandbox'
+    /** Owning organization id (`org_…`). */
+    orgId: string
+  }
+}
+
 /**
  * Rebuilds the `id` and `org` index entries for every stored record — the
  * run-once backfill making legacy keys visible to org-scoped listing. Records