@agentsean/hosted 1.0.0

package/dist/erasure.d.ts

@@ -0,0 +1,27 @@
+import { type SqliteDatabase } from "@agentsean/db";
+/** GDPR erasure runbook. Deletes tenant-owned rows; sites cascade via FK. */
+export declare function eraseTenant(db: SqliteDatabase, tenantId: string, now?: Date): {
+    sitesRemoved: number;
+};
+export declare const SUBPROCESSORS: readonly [{
+    readonly name: "Stripe";
+    readonly purpose: "Billing and metered article usage";
+    readonly region: "US";
+}, {
+    readonly name: "Hetzner";
+    readonly purpose: "App and Postgres compute";
+    readonly region: "EU";
+}, {
+    readonly name: "Cloudflare R2";
+    readonly purpose: "Object storage (crawl artifacts, reports)";
+    readonly region: "global";
+}, {
+    readonly name: "Google";
+    readonly purpose: "Search Console / Analytics OAuth (refresh tokens)";
+    readonly region: "US";
+}, {
+    readonly name: "DataForSEO";
+    readonly purpose: "Licensed rank snapshots when a customer key is present";
+    readonly region: "US";
+}];
+//# sourceMappingURL=erasure.d.ts.map

package/dist/erasure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erasure.d.ts","sourceRoot":"","sources":["../src/erasure.ts"],"names":[],"mappings":"AAEA,OAAO,EAWL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAEvB,6EAA6E;AAC7E,wBAAgB,WAAW,CACzB,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,OAAa,GACf;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CA6B1B;AAED,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;EAkBhB,CAAC"}

package/dist/erasure.js

@@ -0,0 +1,54 @@
+import { randomUUID } from "node:crypto";
+import { eq } from "drizzle-orm";
+import { connectorPairings, envelopeKeys, erasureRequests, meteredUsage, quotaWindows, sites, subscriptions, tenantSeats, tenantSites, tenants, } from "@agentsean/db";
+/** GDPR erasure runbook. Deletes tenant-owned rows; sites cascade via FK. */
+export function eraseTenant(db, tenantId, now = new Date()) {
+    const links = db
+        .select()
+        .from(tenantSites)
+        .where(eq(tenantSites.tenantId, tenantId))
+        .all();
+    const siteIds = links.map((l) => l.siteId);
+    for (const siteId of siteIds) {
+        db.delete(sites).where(eq(sites.id, siteId)).run();
+    }
+    db.delete(connectorPairings).where(eq(connectorPairings.tenantId, tenantId)).run();
+    db.delete(quotaWindows).where(eq(quotaWindows.tenantId, tenantId)).run();
+    db.delete(meteredUsage).where(eq(meteredUsage.tenantId, tenantId)).run();
+    db.delete(envelopeKeys).where(eq(envelopeKeys.tenantId, tenantId)).run();
+    db.delete(subscriptions).where(eq(subscriptions.tenantId, tenantId)).run();
+    db.delete(tenantSeats).where(eq(tenantSeats.tenantId, tenantId)).run();
+    db.delete(tenantSites).where(eq(tenantSites.tenantId, tenantId)).run();
+    db.delete(tenants).where(eq(tenants.id, tenantId)).run();
+    db.insert(erasureRequests)
+        .values({
+        id: randomUUID(),
+        tenantId,
+        status: "completed",
+        requestedAt: now.toISOString(),
+        completedAt: now.toISOString(),
+        notes: `Removed ${siteIds.length} site(s), seats, keys, usage, and subscription.`,
+    })
+        .run();
+    return { sitesRemoved: siteIds.length };
+}
+export const SUBPROCESSORS = [
+    { name: "Stripe", purpose: "Billing and metered article usage", region: "US" },
+    { name: "Hetzner", purpose: "App and Postgres compute", region: "EU" },
+    {
+        name: "Cloudflare R2",
+        purpose: "Object storage (crawl artifacts, reports)",
+        region: "global",
+    },
+    {
+        name: "Google",
+        purpose: "Search Console / Analytics OAuth (refresh tokens)",
+        region: "US",
+    },
+    {
+        name: "DataForSEO",
+        purpose: "Licensed rank snapshots when a customer key is present",
+        region: "US",
+    },
+];
+//# sourceMappingURL=erasure.js.map

package/dist/erasure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erasure.js","sourceRoot":"","sources":["../src/erasure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,OAAO,GAER,MAAM,eAAe,CAAC;AAEvB,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CACzB,EAAkB,EAClB,QAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,KAAK,GAAG,EAAE;SACb,MAAM,EAAE;SACR,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SACzC,GAAG,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACzE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACzE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACzE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3E,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACzD,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC;QACN,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ;QACR,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE,WAAW,OAAO,CAAC,MAAM,iDAAiD;KAClF,CAAC;SACD,GAAG,EAAE,CAAC;IACT,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,EAAE;IAC9E,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE;IACtE;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,IAAI;KACb;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,IAAI;KACb;CACO,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { PLAN_IDS, PLANS, NON_LLM_COGS_USD, BYOK_REQUIRED, isPlanId, planOf, grossMargin, isHostedMode, type PlanId, type Plan, type RankCadence, } from "./plans.js";
+export { EnvelopeError, masterKeyFromEnv, encryptSecret, decryptSecret, loadOrCreateDek, } from "./envelope.js";
+export { JOBS_PER_MIN, CONCURRENT_JOBS, CRAWL_PAGES_PER_DAY, NeighbourLimitError, allowTenantJob, allowTenantCrawlPages, acquireConcurrency, releaseConcurrency, } from "./neighbour.js";
+export { CMS_WRITE_KINDS, HostedCredentialError, isCmsWriteKind, refuseHostedCmsCredential, createConnectorPairing, activateConnector, listConnectors, } from "./connector.js";
+export { SiteQuotaError, ByokRequiredError, createTenant, getTenant, tenantSiteCount, addTenantSite, listTenantSites, tenantIdForSite, assertByok, rankCadenceForTenant, } from "./tenants.js";
+export { fakeStripe, applyStripeEvent, activateSubscription, reportArticleUsage, articlesThisMonth, type StripeEvent, type StripeLike, } from "./billing.js";
+export { tenantCostVisibility, type TenantCost } from "./cost.js";
+export { eraseTenant, SUBPROCESSORS } from "./erasure.js";
+export { hostedPublicOrigin, hostedOauthRedirectUri, assertOauthRedirect, } from "./oauth.js";
+export { traceLlm, type LlmTrace } from "./tracing.js";
+export { EntitlementError, hasFeature, assertEntitlement, type EntitlementFeature, } from "./entitlements.js";
+export { signupTenant, completeCheckout, hostedStatus } from "./engine.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,EACZ,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,WAAW,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+export { PLAN_IDS, PLANS, NON_LLM_COGS_USD, BYOK_REQUIRED, isPlanId, planOf, grossMargin, isHostedMode, } from "./plans.js";
+export { EnvelopeError, masterKeyFromEnv, encryptSecret, decryptSecret, loadOrCreateDek, } from "./envelope.js";
+export { JOBS_PER_MIN, CONCURRENT_JOBS, CRAWL_PAGES_PER_DAY, NeighbourLimitError, allowTenantJob, allowTenantCrawlPages, acquireConcurrency, releaseConcurrency, } from "./neighbour.js";
+export { CMS_WRITE_KINDS, HostedCredentialError, isCmsWriteKind, refuseHostedCmsCredential, createConnectorPairing, activateConnector, listConnectors, } from "./connector.js";
+export { SiteQuotaError, ByokRequiredError, createTenant, getTenant, tenantSiteCount, addTenantSite, listTenantSites, tenantIdForSite, assertByok, rankCadenceForTenant, } from "./tenants.js";
+export { fakeStripe, applyStripeEvent, activateSubscription, reportArticleUsage, articlesThisMonth, } from "./billing.js";
+export { tenantCostVisibility } from "./cost.js";
+export { eraseTenant, SUBPROCESSORS } from "./erasure.js";
+export { hostedPublicOrigin, hostedOauthRedirectUri, assertOauthRedirect, } from "./oauth.js";
+export { traceLlm } from "./tracing.js";
+export { EntitlementError, hasFeature, assertEntitlement, } from "./entitlements.js";
+export { signupTenant, completeCheckout, hostedStatus } from "./engine.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,WAAW,EACX,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,eAAe,EACf,UAAU,EACV,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAmB,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAiB,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/neighbour.d.ts

@@ -0,0 +1,13 @@
+import { type SqliteDatabase } from "@agentsean/db";
+/** Shared-cluster noisy-neighbour caps. Per-tenant isolated machines are not the $9 path. */
+export declare const JOBS_PER_MIN = 30;
+export declare const CONCURRENT_JOBS = 2;
+export declare const CRAWL_PAGES_PER_DAY = 5000;
+export declare class NeighbourLimitError extends Error {
+    readonly name = "NeighbourLimitError";
+}
+export declare function allowTenantJob(db: SqliteDatabase, tenantId: string, now?: Date): boolean;
+export declare function allowTenantCrawlPages(db: SqliteDatabase, tenantId: string, pages: number, now?: Date): boolean;
+export declare function acquireConcurrency(db: SqliteDatabase, tenantId: string, now?: Date): void;
+export declare function releaseConcurrency(db: SqliteDatabase, tenantId: string, now?: Date): void;
+//# sourceMappingURL=neighbour.d.ts.map

package/dist/neighbour.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neighbour.d.ts","sourceRoot":"","sources":["../src/neighbour.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAElE,6FAA6F;AAC7F,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AAEzC,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAkB,IAAI,yBAAyB;CAChD;AAkDD,wBAAgB,cAAc,CAC5B,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,OAAa,GACf,OAAO,CAOT;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,GAAG,OAAa,GACf,OAAO,CAST;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,OAAa,GACf,IAAI,CAMN;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,OAAa,GACf,IAAI,CAEN"}

package/dist/neighbour.js

@@ -0,0 +1,76 @@
+import { randomUUID } from "node:crypto";
+import { eq } from "drizzle-orm";
+import { quotaWindows } from "@agentsean/db";
+/** Shared-cluster noisy-neighbour caps. Per-tenant isolated machines are not the $9 path. */
+export const JOBS_PER_MIN = 30;
+export const CONCURRENT_JOBS = 2;
+export const CRAWL_PAGES_PER_DAY = 5_000;
+export class NeighbourLimitError extends Error {
+    name = "NeighbourLimitError";
+}
+function minuteBucket(now) {
+    return now.toISOString().slice(0, 16);
+}
+function dayBucket(now) {
+    return now.toISOString().slice(0, 10);
+}
+function bump(db, tenantId, windowStart, field, delta) {
+    const row = db
+        .select()
+        .from(quotaWindows)
+        .where(eq(quotaWindows.tenantId, tenantId))
+        .all()
+        .find((r) => r.windowStart === windowStart);
+    if (!row) {
+        const initial = {
+            jobs: 0,
+            crawlPages: 0,
+            concurrent: 0,
+            [field]: Math.max(0, delta),
+        };
+        db.insert(quotaWindows)
+            .values({
+            id: randomUUID(),
+            tenantId,
+            windowStart,
+            jobs: initial.jobs,
+            crawlPages: initial.crawlPages,
+            concurrent: initial.concurrent,
+        })
+            .run();
+        return initial[field];
+    }
+    const next = Math.max(0, row[field] + delta);
+    db.update(quotaWindows)
+        .set({ [field]: next })
+        .where(eq(quotaWindows.id, row.id))
+        .run();
+    return next;
+}
+export function allowTenantJob(db, tenantId, now = new Date()) {
+    const n = bump(db, tenantId, minuteBucket(now), "jobs", 1);
+    if (n > JOBS_PER_MIN) {
+        bump(db, tenantId, minuteBucket(now), "jobs", -1);
+        throw new NeighbourLimitError(`Tenant job cap is ${JOBS_PER_MIN}/min.`);
+    }
+    return true;
+}
+export function allowTenantCrawlPages(db, tenantId, pages, now = new Date()) {
+    const n = bump(db, tenantId, dayBucket(now), "crawlPages", pages);
+    if (n > CRAWL_PAGES_PER_DAY) {
+        bump(db, tenantId, dayBucket(now), "crawlPages", -pages);
+        throw new NeighbourLimitError(`Tenant crawl cap is ${CRAWL_PAGES_PER_DAY} pages/day.`);
+    }
+    return true;
+}
+export function acquireConcurrency(db, tenantId, now = new Date()) {
+    const n = bump(db, tenantId, dayBucket(now), "concurrent", 1);
+    if (n > CONCURRENT_JOBS) {
+        bump(db, tenantId, dayBucket(now), "concurrent", -1);
+        throw new NeighbourLimitError(`Tenant concurrent-job cap is ${CONCURRENT_JOBS}.`);
+    }
+}
+export function releaseConcurrency(db, tenantId, now = new Date()) {
+    bump(db, tenantId, dayBucket(now), "concurrent", -1);
+}
+//# sourceMappingURL=neighbour.js.map

package/dist/neighbour.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neighbour.js","sourceRoot":"","sources":["../src/neighbour.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAC;AAElE,6FAA6F;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC1B,IAAI,GAAG,qBAAqB,CAAC;CAChD;AAED,SAAS,YAAY,CAAC,GAAS;IAC7B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,GAAS;IAC1B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,IAAI,CACX,EAAkB,EAClB,QAAgB,EAChB,WAAmB,EACnB,KAA2C,EAC3C,KAAa;IAEb,MAAM,GAAG,GAAG,EAAE;SACX,MAAM,EAAE;SACR,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC1C,GAAG,EAAE;SACL,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,CAAC;YACb,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;SAC5B,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC;YACN,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ;YACR,WAAW;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;SACpB,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;SACtB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;SAClC,GAAG,EAAE,CAAC;IACT,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAkB,EAClB,QAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,YAAY,OAAO,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAkB,EAClB,QAAgB,EAChB,KAAa,EACb,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG,mBAAmB,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,mBAAmB,aAAa,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAkB,EAClB,QAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,eAAe,GAAG,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAkB,EAClB,QAAgB,EAChB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,5 @@
+export declare function hostedPublicOrigin(env?: NodeJS.ProcessEnv): string | null;
+export declare function hostedOauthRedirectUri(env?: NodeJS.ProcessEnv, path?: string): string | null;
+/** Self-host broker stays loopback-only. Hosted OAuth is a web client on our origin. */
+export declare function assertOauthRedirect(uri: string, env?: NodeJS.ProcessEnv): void;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAUf;AAED,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAoB,GACvB,MAAM,GAAG,IAAI,CAIf;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAWN"}

package/dist/oauth.js

@@ -0,0 +1,35 @@
+import { isHostedMode } from "./plans.js";
+export function hostedPublicOrigin(env = process.env) {
+    const raw = env["SEAN_PUBLIC_ORIGIN"]?.trim();
+    if (!raw)
+        return null;
+    try {
+        const u = new URL(raw);
+        if (u.protocol !== "https:" && u.protocol !== "http:")
+            return null;
+        return u.origin;
+    }
+    catch {
+        return null;
+    }
+}
+export function hostedOauthRedirectUri(env = process.env, path = "/oauth/callback") {
+    const origin = hostedPublicOrigin(env);
+    if (!origin)
+        return null;
+    return `${origin}${path.startsWith("/") ? path : `/${path}`}`;
+}
+/** Self-host broker stays loopback-only. Hosted OAuth is a web client on our origin. */
+export function assertOauthRedirect(uri, env = process.env) {
+    if (isHostedMode(env)) {
+        const origin = hostedPublicOrigin(env);
+        if (!origin || !uri.startsWith(origin)) {
+            throw new Error("Hosted OAuth redirect must match SEAN_PUBLIC_ORIGIN.");
+        }
+        return;
+    }
+    if (!uri.startsWith("http://127.0.0.1:")) {
+        throw new Error("Broker will only hand tokens to http://127.0.0.1 loopback.");
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAChC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAyB,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,iBAAiB;IAExB,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/plans.d.ts

@@ -0,0 +1,29 @@
+/** Locked packaging from PLAN Phase 10. $8 stays as the per-site agency price. */
+export declare const PLAN_IDS: readonly ["self_host", "cloud_starter", "cloud_pro", "business", "agency"];
+export type PlanId = (typeof PLAN_IDS)[number];
+export type RankCadence = "weekly" | "daily";
+export type Plan = {
+    id: PlanId;
+    name: string;
+    priceUsdMonth: number;
+    sites: number;
+    ranks: RankCadence;
+    aiVisibility: boolean;
+    articlesMetered: boolean;
+    seats: number;
+    whiteLabel: boolean;
+    apiAccess: boolean;
+    hostedOauth: boolean;
+    priorityQueue: boolean;
+    clientSeats: boolean;
+    bulkOps: boolean;
+};
+export declare const PLANS: Record<PlanId, Plan>;
+/** Non-LLM COGS at BYOK. PLAN: $2.29/tenant/month → 71% gross on Starter. */
+export declare const NON_LLM_COGS_USD = 2.29;
+export declare const BYOK_REQUIRED = true;
+export declare function isPlanId(value: string): value is PlanId;
+export declare function planOf(id: string): Plan;
+export declare function grossMargin(priceUsd: number): number;
+export declare function isHostedMode(env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=plans.d.ts.map

package/dist/plans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.d.ts","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,eAAO,MAAM,QAAQ,4EAMX,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,MAAM,MAAM,IAAI,GAAG;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAiFtC,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,MAAM,CAEvD;AAED,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAGvC;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE1E"}

package/dist/plans.js

@@ -0,0 +1,110 @@
+/** Locked packaging from PLAN Phase 10. $8 stays as the per-site agency price. */
+export const PLAN_IDS = [
+    "self_host",
+    "cloud_starter",
+    "cloud_pro",
+    "business",
+    "agency",
+];
+export const PLANS = {
+    self_host: {
+        id: "self_host",
+        name: "Self-host",
+        priceUsdMonth: 0,
+        sites: Number.POSITIVE_INFINITY,
+        ranks: "weekly",
+        aiVisibility: true,
+        articlesMetered: false,
+        seats: Number.POSITIVE_INFINITY,
+        whiteLabel: true,
+        apiAccess: true,
+        hostedOauth: false,
+        priorityQueue: false,
+        clientSeats: true,
+        bulkOps: true,
+    },
+    cloud_starter: {
+        id: "cloud_starter",
+        name: "Cloud Starter",
+        priceUsdMonth: 9,
+        sites: 1,
+        ranks: "weekly",
+        aiVisibility: false,
+        articlesMetered: true,
+        seats: 1,
+        whiteLabel: false,
+        apiAccess: false,
+        hostedOauth: true,
+        priorityQueue: false,
+        clientSeats: false,
+        bulkOps: false,
+    },
+    cloud_pro: {
+        id: "cloud_pro",
+        name: "Cloud Pro",
+        priceUsdMonth: 29,
+        sites: 3,
+        ranks: "daily",
+        aiVisibility: true,
+        articlesMetered: true,
+        seats: 3,
+        whiteLabel: false,
+        apiAccess: false,
+        hostedOauth: true,
+        priorityQueue: false,
+        clientSeats: false,
+        bulkOps: false,
+    },
+    business: {
+        id: "business",
+        name: "Business",
+        priceUsdMonth: 79,
+        sites: 10,
+        ranks: "daily",
+        aiVisibility: true,
+        articlesMetered: true,
+        seats: 10,
+        whiteLabel: false,
+        apiAccess: true,
+        hostedOauth: true,
+        priorityQueue: true,
+        clientSeats: false,
+        bulkOps: false,
+    },
+    agency: {
+        id: "agency",
+        name: "Agency",
+        priceUsdMonth: 249,
+        sites: 50,
+        ranks: "daily",
+        aiVisibility: true,
+        articlesMetered: true,
+        seats: 25,
+        whiteLabel: true,
+        apiAccess: true,
+        hostedOauth: true,
+        priorityQueue: true,
+        clientSeats: true,
+        bulkOps: true,
+    },
+};
+/** Non-LLM COGS at BYOK. PLAN: $2.29/tenant/month → 71% gross on Starter. */
+export const NON_LLM_COGS_USD = 2.29;
+export const BYOK_REQUIRED = true;
+export function isPlanId(value) {
+    return PLAN_IDS.includes(value);
+}
+export function planOf(id) {
+    if (!isPlanId(id))
+        throw new Error(`unknown plan ${id}`);
+    return PLANS[id];
+}
+export function grossMargin(priceUsd) {
+    if (priceUsd <= 0)
+        return 1;
+    return (priceUsd - NON_LLM_COGS_USD) / priceUsd;
+}
+export function isHostedMode(env = process.env) {
+    return env["SEAN_HOSTED"] === "1" || Boolean(env["SEAN_PUBLIC_ORIGIN"]?.trim());
+}
+//# sourceMappingURL=plans.js.map

package/dist/plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,WAAW;IACX,eAAe;IACf,WAAW;IACX,UAAU;IACV,QAAQ;CACA,CAAC;AAuBX,MAAM,CAAC,MAAM,KAAK,GAAyB;IACzC,SAAS,EAAE;QACT,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC,iBAAiB;QAC/B,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,MAAM,CAAC,iBAAiB;QAC/B,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,IAAI;KACd;IACD,aAAa,EAAE;QACb,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,CAAC;QACR,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;KACf;IACD,SAAS,EAAE;QACT,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,CAAC;QACR,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;KACf;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;KACf;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,GAAG;QAClB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAQ,QAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAU;IAC/B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,QAAQ,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/tenants.d.ts

@@ -0,0 +1,48 @@
+import { type SqliteDatabase } from "@agentsean/db";
+import { type PlanId } from "./plans.js";
+export declare class SiteQuotaError extends Error {
+    readonly name = "SiteQuotaError";
+}
+export declare class ByokRequiredError extends Error {
+    readonly name = "ByokRequiredError";
+}
+export declare function createTenant(db: SqliteDatabase, opts: {
+    name: string;
+    email: string;
+    plan: PlanId;
+    now?: Date | undefined;
+}): {
+    id: string;
+};
+export declare function getTenant(db: SqliteDatabase, tenantId: string): {
+    id: string;
+    name: string;
+    email: string;
+    plan: string;
+    status: string;
+    stripeCustomerId: string | null;
+    stripeSubscriptionId: string | null;
+    byok: number;
+    createdAt: string;
+    updatedAt: string;
+} | null;
+export declare function tenantSiteCount(db: SqliteDatabase, tenantId: string): number;
+export declare function addTenantSite(db: SqliteDatabase, opts: {
+    tenantId: string;
+    origin: string;
+    name?: string | undefined;
+    now?: Date | undefined;
+}): {
+    siteId: string;
+};
+export declare function listTenantSites(db: SqliteDatabase, tenantId: string): {
+    id: string;
+    origin: string;
+    name: string | null;
+}[];
+export declare function tenantIdForSite(db: SqliteDatabase, siteId: string): string | null;
+export declare function assertByok(tenant: {
+    byok: number;
+}): void;
+export declare function rankCadenceForTenant(db: SqliteDatabase, tenantId: string): "weekly" | "daily";
+//# sourceMappingURL=tenants.d.ts.map

package/dist/tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../src/tenants.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAExD,qBAAa,cAAe,SAAQ,KAAK;IACvC,SAAkB,IAAI,oBAAoB;CAC3C;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,SAAkB,IAAI,uBAAuB;CAC9C;AAED,wBAAgB,YAAY,CAC1B,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;CAAE,GAC1E;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CA2BhB;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;SAE7D;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG5E;AAED,wBAAgB,aAAa,CAC3B,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACxB,GACA;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CA6CpB;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM;QAM3C,MAAM;YAAU,MAAM;UAAQ,MAAM,GAAG,IAAI;IAMnE;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKjF;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMzD;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,cAAc,EAClB,QAAQ,EAAE,MAAM,GACf,QAAQ,GAAG,OAAO,CAIpB"}

package/dist/tenants.js

@@ -0,0 +1,121 @@
+import { randomUUID } from "node:crypto";
+import { eq } from "drizzle-orm";
+import { sites, tenantSeats, tenantSites, tenants, } from "@agentsean/db";
+import { PLANS, planOf } from "./plans.js";
+export class SiteQuotaError extends Error {
+    name = "SiteQuotaError";
+}
+export class ByokRequiredError extends Error {
+    name = "ByokRequiredError";
+}
+export function createTenant(db, opts) {
+    const now = (opts.now ?? new Date()).toISOString();
+    const id = randomUUID();
+    db.insert(tenants)
+        .values({
+        id,
+        name: opts.name,
+        email: opts.email.toLowerCase(),
+        plan: opts.plan,
+        status: "trialing",
+        stripeCustomerId: null,
+        stripeSubscriptionId: null,
+        byok: 1,
+        createdAt: now,
+        updatedAt: now,
+    })
+        .run();
+    db.insert(tenantSeats)
+        .values({
+        id: randomUUID(),
+        tenantId: id,
+        email: opts.email.toLowerCase(),
+        role: "owner",
+        createdAt: now,
+    })
+        .run();
+    return { id };
+}
+export function getTenant(db, tenantId) {
+    return db.select().from(tenants).where(eq(tenants.id, tenantId)).get() ?? null;
+}
+export function tenantSiteCount(db, tenantId) {
+    return db.select().from(tenantSites).where(eq(tenantSites.tenantId, tenantId)).all()
+        .length;
+}
+export function addTenantSite(db, opts) {
+    const tenant = getTenant(db, opts.tenantId);
+    if (!tenant)
+        throw new Error("unknown_tenant");
+    const plan = planOf(tenant.plan);
+    const used = tenantSiteCount(db, opts.tenantId);
+    if (used >= plan.sites) {
+        throw new SiteQuotaError(`${plan.name} includes ${plan.sites} site${plan.sites === 1 ? "" : "s"}. ${used} already attached.`);
+    }
+    const now = (opts.now ?? new Date()).toISOString();
+    let site = db.select().from(sites).where(eq(sites.origin, opts.origin)).get();
+    if (!site) {
+        const siteId = randomUUID();
+        db.insert(sites)
+            .values({
+            id: siteId,
+            origin: opts.origin,
+            name: opts.name ?? opts.origin,
+            createdAt: now,
+            updatedAt: now,
+        })
+            .run();
+        site = db.select().from(sites).where(eq(sites.id, siteId)).get();
+    }
+    if (!site)
+        throw new Error("site_insert_failed");
+    const existing = db
+        .select()
+        .from(tenantSites)
+        .where(eq(tenantSites.siteId, site.id))
+        .get();
+    if (existing && existing.tenantId !== opts.tenantId) {
+        throw new SiteQuotaError("That origin is already attached to another tenant.");
+    }
+    if (!existing) {
+        db.insert(tenantSites)
+            .values({
+            id: randomUUID(),
+            tenantId: opts.tenantId,
+            siteId: site.id,
+            createdAt: now,
+        })
+            .run();
+    }
+    return { siteId: site.id };
+}
+export function listTenantSites(db, tenantId) {
+    const links = db
+        .select()
+        .from(tenantSites)
+        .where(eq(tenantSites.tenantId, tenantId))
+        .all();
+    const out = [];
+    for (const link of links) {
+        const site = db.select().from(sites).where(eq(sites.id, link.siteId)).get();
+        if (site)
+            out.push({ id: site.id, origin: site.origin, name: site.name });
+    }
+    return out;
+}
+export function tenantIdForSite(db, siteId) {
+    return (db.select().from(tenantSites).where(eq(tenantSites.siteId, siteId)).get()
+        ?.tenantId ?? null);
+}
+export function assertByok(tenant) {
+    if (!tenant.byok) {
+        throw new ByokRequiredError("BYOK is not optional on the hosted tier. Without it, non-LLM COGS still works; LLM spend is $13–16 against $8.");
+    }
+}
+export function rankCadenceForTenant(db, tenantId) {
+    const tenant = getTenant(db, tenantId);
+    if (!tenant)
+        return "weekly";
+    return PLANS[planOf(tenant.plan).id].ranks;
+}
+//# sourceMappingURL=tenants.js.map

package/dist/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../src/tenants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,KAAK,EACL,WAAW,EACX,WAAW,EACX,OAAO,GAER,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAe,MAAM,YAAY,CAAC;AAExD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACrB,IAAI,GAAG,gBAAgB,CAAC;CAC3C;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxB,IAAI,GAAG,mBAAmB,CAAC;CAC9C;AAED,MAAM,UAAU,YAAY,CAC1B,EAAkB,EAClB,IAA2E;IAE3E,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC;QACN,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,UAAU;QAClB,gBAAgB,EAAE,IAAI;QACtB,oBAAoB,EAAE,IAAI;QAC1B,IAAI,EAAE,CAAC;QACP,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;SACD,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;SACnB,MAAM,CAAC;QACN,EAAE,EAAE,UAAU,EAAE;QAChB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAC/B,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,GAAG;KACf,CAAC;SACD,GAAG,EAAE,CAAC;IACT,OAAO,EAAE,EAAE,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAkB,EAAE,QAAgB;IAC5D,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAkB,EAAE,QAAgB;IAClE,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE;SACjF,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAkB,EAClB,IAKC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CACtB,GAAG,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,oBAAoB,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,IAAI,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC;YACN,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM;YAC9B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;aACD,GAAG,EAAE,CAAC;QACT,IAAI,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,EAAE;SAChB,MAAM,EAAE;SACR,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;SACtC,GAAG,EAAE,CAAC;IACT,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,oDAAoD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aACnB,MAAM,CAAC;YACN,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,GAAG;SACf,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAkB,EAAE,QAAgB;IAClE,MAAM,KAAK,GAAG,EAAE;SACb,MAAM,EAAE;SACR,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SACzC,GAAG,EAAE,CAAC;IACT,MAAM,GAAG,GAA+D,EAAE,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5E,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAkB,EAAE,MAAc;IAChE,OAAO,CACL,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE;QACvE,EAAE,QAAQ,IAAI,IAAI,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAwB;IACjD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,iBAAiB,CACzB,gHAAgH,CACjH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAkB,EAClB,QAAgB;IAEhB,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC"}

package/dist/tracing.d.ts

@@ -0,0 +1,11 @@
+export type LlmTrace = {
+    tenantId: string;
+    siteId?: string | undefined;
+    model: string;
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+};
+/** Langfuse is hosted-tier only. Self-host is a no-op. */
+export declare function traceLlm(event: LlmTrace, env?: NodeJS.ProcessEnv): Promise<void>;
+//# sourceMappingURL=tracing.d.ts.map

package/dist/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,0DAA0D;AAC1D,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,QAAQ,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,IAAI,CAAC,CAGf"}