@agentsean/hosted 1.0.0 → 1.0.4

package/dist/ee.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Runtime bridge to the commercially-licensed `@agentsean/ee` package.
+ *
+ * `packages/ee` is not AGPL and is deliberately never published to npm. The
+ * open-source build therefore must not require it at *install* time — a static
+ * import would put `@agentsean/ee` in the published dependency tree and every
+ * `npx agentsean` would fail with a 404 on a package that does not exist.
+ *
+ * So the boundary is enforced at runtime instead: every EE call site loads the
+ * module dynamically and degrades to a documented fallback when it is absent.
+ * That is also what the header comment in `packages/ee/src/index.ts` has always
+ * described — AGPL code may reach EE "only behind a runtime entitlement /
+ * hosted-mode check".
+ *
+ * Fallbacks must be chosen so that the *absence* of EE is never less safe than
+ * its presence. Telemetry degrades to a no-op; signature verification degrades
+ * to rejection, never to acceptance.
+ */
+export type EeModule = {
+    isEeBuild(env?: NodeJS.ProcessEnv): boolean;
+    traceLlm(event: unknown): Promise<void>;
+    stripeSignatureValid(payload: string, header: string, secret: string): boolean;
+};
+/** Resolves the EE module, or null in an open-source build. Result is cached. */
+export declare function loadEe(): Promise<EeModule | null>;
+/** Test seam. Pass null to simulate an open-source build. */
+export declare function setEeForTesting(mod: EeModule | null | undefined): void;
+/**
+ * Verify a billing webhook signature.
+ *
+ * Fail-closed: when a secret is configured but no verifier is available, the
+ * webhook is rejected. Accepting an unverified billing event would let anyone
+ * who can reach the endpoint grant themselves a paid plan.
+ */
+export declare function verifyBillingSignature(payload: string, header: string, secret: string): Promise<boolean>;
+//# sourceMappingURL=ee.d.ts.map

package/dist/ee.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ee.d.ts","sourceRoot":"","sources":["../src/ee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,QAAQ,GAAG;IACrB,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAChF,CAAC;AAIF,iFAAiF;AACjF,wBAAsB,MAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CASvD;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAEtE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAIlB"}

package/dist/ee.js

@@ -0,0 +1,50 @@
+/**
+ * Runtime bridge to the commercially-licensed `@agentsean/ee` package.
+ *
+ * `packages/ee` is not AGPL and is deliberately never published to npm. The
+ * open-source build therefore must not require it at *install* time — a static
+ * import would put `@agentsean/ee` in the published dependency tree and every
+ * `npx agentsean` would fail with a 404 on a package that does not exist.
+ *
+ * So the boundary is enforced at runtime instead: every EE call site loads the
+ * module dynamically and degrades to a documented fallback when it is absent.
+ * That is also what the header comment in `packages/ee/src/index.ts` has always
+ * described — AGPL code may reach EE "only behind a runtime entitlement /
+ * hosted-mode check".
+ *
+ * Fallbacks must be chosen so that the *absence* of EE is never less safe than
+ * its presence. Telemetry degrades to a no-op; signature verification degrades
+ * to rejection, never to acceptance.
+ */
+let cached;
+/** Resolves the EE module, or null in an open-source build. Result is cached. */
+export async function loadEe() {
+    if (cached !== undefined)
+        return cached;
+    try {
+        cached = (await import("@agentsean/ee"));
+    }
+    catch {
+        // Not installed. This is the normal, supported open-source path.
+        cached = null;
+    }
+    return cached;
+}
+/** Test seam. Pass null to simulate an open-source build. */
+export function setEeForTesting(mod) {
+    cached = mod;
+}
+/**
+ * Verify a billing webhook signature.
+ *
+ * Fail-closed: when a secret is configured but no verifier is available, the
+ * webhook is rejected. Accepting an unverified billing event would let anyone
+ * who can reach the endpoint grant themselves a paid plan.
+ */
+export async function verifyBillingSignature(payload, header, secret) {
+    const ee = await loadEe();
+    if (!ee)
+        return false;
+    return ee.stripeSignatureValid(payload, header, secret);
+}
+//# sourceMappingURL=ee.js.map

package/dist/ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ee.js","sourceRoot":"","sources":["../src/ee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,IAAI,MAAmC,CAAC;AAExC,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAwB,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,GAAgC;IAC9D,MAAM,GAAG,GAAG,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,MAAc,EACd,MAAc;IAEd,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export { loadEe, setEeForTesting, verifyBillingSignature, type EeModule } from "./ee.js";
 export { PLAN_IDS, PLANS, NON_LLM_COGS_USD, BYOK_REQUIRED, isPlanId, planOf, grossMargin, isHostedMode, type PlanId, type Plan, type RankCadence, } from "./plans.js";
 export { EnvelopeError, masterKeyFromEnv, encryptSecret, decryptSecret, loadOrCreateDek, } from "./envelope.js";
 export { JOBS_PER_MIN, CONCURRENT_JOBS, CRAWL_PAGES_PER_DAY, NeighbourLimitError, allowTenantJob, allowTenantCrawlPages, acquireConcurrency, releaseConcurrency, } from "./neighbour.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,EACZ,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,WAAW,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,EACZ,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,WAAW,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
+export { loadEe, setEeForTesting, verifyBillingSignature } from "./ee.js";
 export { PLAN_IDS, PLANS, NON_LLM_COGS_USD, BYOK_REQUIRED, isPlanId, planOf, grossMargin, isHostedMode, } from "./plans.js";
 export { EnvelopeError, masterKeyFromEnv, encryptSecret, decryptSecret, loadOrCreateDek, } from "./envelope.js";
 export { JOBS_PER_MIN, CONCURRENT_JOBS, CRAWL_PAGES_PER_DAY, NeighbourLimitError, allowTenantJob, allowTenantCrawlPages, acquireConcurrency, releaseConcurrency, } from "./neighbour.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAmB,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAiB,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAiB,MAAM,SAAS,CAAC;AACzF,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAmB,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAiB,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/tracing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,0DAA0D;AAC1D,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,QAAQ,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,IAAI,CAAC,CAGf"}
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,0DAA0D;AAC1D,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,QAAQ,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/tracing.js

@@ -1,9 +1,12 @@
-import { isEeBuild, traceLlm as eeTraceLlm } from "@agentsean/ee";
+import { loadEe } from "./ee.js";
 import { isHostedMode } from "./plans.js";
 /** Langfuse is hosted-tier only. Self-host is a no-op. */
 export async function traceLlm(event, env = process.env) {
-    if (!isHostedMode(env) || !isEeBuild(env))
+    if (!isHostedMode(env))
         return;
-    await eeTraceLlm(event);
+    const ee = await loadEe();
+    if (!ee || !ee.isEeBuild(env))
+        return;
+    await ee.traceLlm(event);
 }
 //# sourceMappingURL=tracing.js.map

package/dist/tracing.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAW1C,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IAClD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAW1C,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO;IAC/B,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IACtC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsean/hosted",
-  "version": "1.0.0",
+  "version": "1.0.4",
   "license": "AGPL-3.0-only",
   "type": "module",
   "exports": {
@@ -17,12 +17,12 @@
   },
   "dependencies": {
     "drizzle-orm": "0.45.2",
-    "@agentsean/db": "1.0.0",
-    "@agentsean/ee": "1.0.0"
+    "@agentsean/db": "1.0.4"
   },
   "devDependencies": {
     "typescript": "~5.9.3",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.11",
+    "@agentsean/ee": "1.0.4"
   },
   "publishConfig": {
     "access": "public"