@akira-io/billing-js 0.1.9 → 0.3.1

package/dist/desktop.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/browser.ts","../src/desktop/fingerprint.ts","../src/desktop/keyring.ts","../src/desktop/session.ts","../src/desktop/use-auth.ts"],"names":["spawn","hostname","platform","createHash"],"mappings":";;;;;;;AAGO,SAAS,YAAY,GAAA,EAA4B;AACpD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,QAAQ,QAAA;AAAU,MACtB,KAAK,QAAA;AACD,QAAA,GAAA,GAAM,MAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AACX,QAAA;AAAA,MACJ,KAAK,OAAA;AACD,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,+BAA+B,GAAG,CAAA;AAC1C,QAAA;AAAA,MACJ;AACI,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AAAA;AAEnB,IAAA,MAAM,KAAA,GAAQA,oBAAM,GAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU,IAAA,EAAM,CAAA;AAClE,IAAA,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA;AAC1B,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AChBA,eAAe,SAAA,GAA6B;AACxC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,IAAI;AACA,IAAA,MAAM,MAAO,MAAM,GAAA,CAAI,iBAAiB,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC1D,IAAA,IAAI,GAAA,EAAK,aAAA,EAAe,OAAO,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAOC,WAAA,EAAS;AACpB;AAEA,eAAsB,kBAAkB,UAAA,EAAgD;AACpF,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU;AAC3B,EAAA,MAAM,OAAOC,WAAA,EAAS;AACtB,EAAA,MAAM,IAAA,GAAOC,kBAAW,QAAQ,CAAA;AAChC,EAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AACd,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,UAAU,CAAA;AACtB,EAAA,OAAO;AAAA,IACH,WAAA,EAAa,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAAA,IAC9B,QAAA,EAAU,IAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACjB;AACJ;;;AClBA,eAAe,UAAA,GAA8B;AAIzC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,MAAM,MAAO,MAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACjD,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mEAAmE,CAAA;AAC7F,EAAA,OAAO,IAAI,OAAA,IAAY,GAAA;AAC3B;AAEO,IAAM,eAAN,MAAmB;AAAA,EACL,OAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,IAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AACpB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AAAA,EACxB;AAAA,EAEA,MAAM,GAAA,GAA8B;AAChC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,OAAO,CAAA,CAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,IAAI,KAAA,EAA8B;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,EAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,SAAS,KAAK,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,CAAA,CAAE,cAAA,CAAe,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AACJ;;;AC9CO,IAAM,eAAN,MAAmB;AAAA,EACtB,YAA6B,OAAA,EAAuB;AAAvB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAAwB;AAAA,EAAxB,OAAA;AAAA,EAE7B,MAAM,QAAQ,MAAA,EAAyC;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACrC,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAC7B,IAAA,OAAO,IAAA;AAAA,EACX;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAuB,KAAA,EAA8B;AAC/D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AAC5B,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,MAAA,EAAsC;AAC9C,IAAA,MAAM,IAAA,CAAK,QAAQ,MAAA,EAAO;AAC1B,IAAA,MAAA,CAAO,iBAAiB,EAAE,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAA,GAA6B;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACjC,IAAA,OAAO,CAAC,CAAC,CAAA;AAAA,EACb;AACJ;;;ACNO,IAAM,iBAAN,MAAqB;AAAA,EAIxB,YAA6B,IAAA,EAA6B;AAA7B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA8B;AAAA,EAA9B,IAAA;AAAA,EAHrB,SAAA,uBAAgB,GAAA,EAAkC;AAAA,EAClD,OAAA,GAA2B,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA,EAItD,UAAU,QAAA,EAAoD;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC/C;AAAA,EAEA,QAAA,GAA4B;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEQ,KAAK,IAAA,EAA6B;AACtC,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC7B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,KAAK,MAAM,CAAA;AAChD,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACvB;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC3B,IAAA,IAAI,CAAE,MAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,UAAS,EAAI;AACvC,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,MAAA;AAAA,IACJ;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,UAAA,EAAW;AACnD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,YAAA,GACrB,MAAM,IAAA,CAAK,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,GAC7C,MAAM,KAAK,sBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,KAAK,EAAE,KAAA,EAAO,eAAA,EAAiB,QAAA,EAAU,UAAU,CAAA;AAAA,IAC5D,SAAS,CAAA,EAAG;AACR,MAAA,IAAK,CAAA,CAA0B,WAAW,GAAA,EAAK;AAC3C,QAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,CAAA;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,sBAAA,GAA2C;AACrD,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,YAAA,CAAa;AAAA,QAC7C,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,OAAA,IAAW;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,OAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,KAAA;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,UAAA,CAAW,KAAA,EAAe,QAAA,EAAkC;AAC9D,IAAA,MAAM,IAAA,CAAK,KAAK,MAAA,CAAO,UAAA,CAAW,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,IAAY,EAAA,EAAI,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAe,IAAA,EAAc,QAAA,EAAsC;AAC/E,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,SAAA,CAAU;AAAA,MAC1C,KAAA;AAAA,MACA,IAAA;AAAA,MACA,WAAW,QAAA,IAAY;AAAA,KAC1B,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,YAAY,CAAA;AACnE,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAA,EAAW;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAAA,EAAkD;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,IAAA,CAAK,cAAc,QAAQ,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA;AAC/E,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAO,OAAA,CAAQ,QAAA;AAAA,EACnB;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EAChC;AACJ","file":"desktop.cjs","sourcesContent":["import { spawn } from 'node:child_process';\n\n/** Launch the system default browser. Node-only. */\nexport function openBrowser(url: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        let cmd: string;\n        let args: string[];\n        switch (process.platform) {\n            case 'darwin':\n                cmd = 'open';\n                args = [url];\n                break;\n            case 'win32':\n                cmd = 'rundll32';\n                args = ['url.dll,FileProtocolHandler', url];\n                break;\n            default:\n                cmd = 'xdg-open';\n                args = [url];\n        }\n        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });\n        child.once('error', reject);\n        child.unref();\n        resolve();\n    });\n}\n","import { createHash } from 'node:crypto';\nimport { hostname, platform } from 'node:os';\n\nexport interface DeviceFingerprint {\n    fingerprint: string;\n    platform: string;\n    app_version: string;\n}\n\nasync function machineId(): Promise<string> {\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    try {\n        const mod = (await dyn('node-machine-id').catch(() => null)) as { machineIdSync?: (orig?: boolean) => string } | null;\n        if (mod?.machineIdSync) return mod.machineIdSync(true);\n    } catch {\n        // fallthrough\n    }\n    return hostname();\n}\n\nexport async function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint> {\n    const id = await machineId();\n    const plat = platform();\n    const hash = createHash('sha256');\n    hash.update(id);\n    hash.update('::');\n    hash.update(plat);\n    hash.update('::');\n    hash.update(appVersion);\n    return {\n        fingerprint: hash.digest('hex'),\n        platform: plat,\n        app_version: appVersion,\n    };\n}\n","/**\n * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as\n * an optional dependency; this module dynamically imports it so server-side\n * bundles never see it.\n */\nexport interface TokenKeyringOptions {\n    service: string;\n    account: string;\n}\n\ntype Keytar = {\n    getPassword: (service: string, account: string) => Promise<string | null>;\n    setPassword: (service: string, account: string, password: string) => Promise<void>;\n    deletePassword: (service: string, account: string) => Promise<boolean>;\n};\n\nasync function loadKeytar(): Promise<Keytar> {\n    // Use Function constructor so tsup/typescript don't try to resolve the\n    // optional module at build time. Consumers add `keytar` as a peer/optional\n    // dependency.\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    const mod = (await dyn('keytar').catch(() => null)) as { default?: Keytar } | null;\n    if (!mod) throw new Error('TokenKeyring: install `keytar` to use the desktop keyring helper.');\n    return mod.default ?? (mod as unknown as Keytar);\n}\n\nexport class TokenKeyring {\n    private readonly service: string;\n    private readonly account: string;\n\n    constructor(opts: TokenKeyringOptions) {\n        this.service = opts.service;\n        this.account = opts.account;\n    }\n\n    async get(): Promise<string | null> {\n        const k = await loadKeytar();\n        return k.getPassword(this.service, this.account);\n    }\n\n    async set(value: string): Promise<void> {\n        const k = await loadKeytar();\n        await k.setPassword(this.service, this.account, value);\n    }\n\n    async delete(): Promise<void> {\n        const k = await loadKeytar();\n        await k.deletePassword(this.service, this.account);\n    }\n}\n","import { BillingClient } from '../client';\nimport { TokenKeyring } from './keyring';\n\nexport class SessionStore {\n    constructor(private readonly keyring: TokenKeyring) {}\n\n    async hydrate(client: BillingClient): Promise<boolean> {\n        const token = await this.keyring.get();\n        if (!token) return false;\n        client.setCustomerToken(token);\n        return true;\n    }\n\n    async persist(client: BillingClient, token: string): Promise<void> {\n        await this.keyring.set(token);\n        client.setCustomerToken(token);\n    }\n\n    async clear(client: BillingClient): Promise<void> {\n        await this.keyring.delete();\n        client.setCustomerToken('');\n    }\n\n    async hasToken(): Promise<boolean> {\n        const v = await this.keyring.get();\n        return !!v;\n    }\n}\n","import type { BillingClient } from '../client';\nimport type { Customer, OauthExchangeResponse } from '../client-types';\nimport type { LoopbackOutcome } from '../loopback';\nimport type { SessionStore } from './session';\n\nexport type AuthStatusState =\n    | { state: 'loading' }\n    | { state: 'guest' }\n    | { state: 'authenticated'; customer: Customer; licensed: boolean };\n\nexport interface AuthControllerOptions {\n    client: BillingClient;\n    session: SessionStore;\n    product: string;\n    feature?: string;\n    /** Loopback flow used by `oauthLogin`. */\n    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;\n    /** Override the runtime license check (e.g. cache, custom feature key). */\n    checkLicense?: (client: BillingClient) => Promise<boolean>;\n}\n\nexport class AuthController {\n    private listeners = new Set<(s: AuthStatusState) => void>();\n    private current: AuthStatusState = { state: 'loading' };\n\n    constructor(private readonly opts: AuthControllerOptions) {}\n\n    subscribe(listener: (s: AuthStatusState) => void): () => void {\n        this.listeners.add(listener);\n        listener(this.current);\n        return () => this.listeners.delete(listener);\n    }\n\n    snapshot(): AuthStatusState {\n        return this.current;\n    }\n\n    private emit(next: AuthStatusState): void {\n        this.current = next;\n        this.listeners.forEach((l) => l(next));\n    }\n\n    async bootstrap(): Promise<void> {\n        await this.opts.session.hydrate(this.opts.client);\n        await this.refresh();\n    }\n\n    async refresh(): Promise<void> {\n        if (!(await this.opts.session.hasToken())) {\n            this.emit({ state: 'guest' });\n            return;\n        }\n        try {\n            const customer = await this.opts.client.customerMe();\n            const licensed = this.opts.checkLicense\n                ? await this.opts.checkLicense(this.opts.client)\n                : await this.runDefaultLicenseCheck();\n            this.emit({ state: 'authenticated', customer, licensed });\n        } catch (e) {\n            if ((e as { status?: number }).status === 401) {\n                await this.opts.session.clear(this.opts.client);\n                this.emit({ state: 'guest' });\n                return;\n            }\n            throw e;\n        }\n    }\n\n    private async runDefaultLicenseCheck(): Promise<boolean> {\n        try {\n            const resp = await this.opts.client.licenseCheck({\n                product: this.opts.product,\n                feature: this.opts.feature ?? 'general',\n            });\n            return resp.allowed;\n        } catch {\n            return false;\n        }\n    }\n\n    async requestOtp(email: string, deviceFp?: string): Promise<void> {\n        await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? '' });\n    }\n\n    async verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer> {\n        const resp = await this.opts.client.verifyOtp({\n            email,\n            code,\n            device_fp: deviceFp ?? '',\n        });\n        await this.opts.session.persist(this.opts.client, resp.access_token);\n        await this.refresh();\n        return (await this.opts.client.customerMe());\n    }\n\n    async oauthLogin(provider: string): Promise<OauthExchangeResponse> {\n        const outcome = await this.opts.loopbackLogin(provider);\n        await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);\n        await this.refresh();\n        return outcome.exchange;\n    }\n\n    async logout(): Promise<void> {\n        await this.opts.session.clear(this.opts.client);\n        this.emit({ state: 'guest' });\n    }\n}\n"]}

package/dist/desktop.d.cts

@@ -0,0 +1,16 @@
+export { A as AuthController, a as AuthControllerOptions, b as AuthStatusState, S as SessionStore, T as TokenKeyring, c as TokenKeyringOptions } from './use-auth-BzN6Wcpm.cjs';
+import './client.cjs';
+import './client-types-CtRkHWna.cjs';
+import './loopback.cjs';
+
+/** Launch the system default browser. Node-only. */
+declare function openBrowser(url: string): Promise<void>;
+
+interface DeviceFingerprint {
+    fingerprint: string;
+    platform: string;
+    app_version: string;
+}
+declare function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint>;
+
+export { type DeviceFingerprint, deviceFingerprint, openBrowser };

package/dist/desktop.d.ts

@@ -0,0 +1,16 @@
+export { A as AuthController, a as AuthControllerOptions, b as AuthStatusState, S as SessionStore, T as TokenKeyring, c as TokenKeyringOptions } from './use-auth-Bf4NrNdE.js';
+import './client.js';
+import './client-types-CtRkHWna.js';
+import './loopback.js';
+
+/** Launch the system default browser. Node-only. */
+declare function openBrowser(url: string): Promise<void>;
+
+interface DeviceFingerprint {
+    fingerprint: string;
+    platform: string;
+    app_version: string;
+}
+declare function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint>;
+
+export { type DeviceFingerprint, deviceFingerprint, openBrowser };

package/dist/desktop.js

@@ -0,0 +1,188 @@
+import { spawn } from 'child_process';
+import { createHash } from 'crypto';
+import { platform, hostname } from 'os';
+
+// src/desktop/browser.ts
+function openBrowser(url) {
+  return new Promise((resolve, reject) => {
+    let cmd;
+    let args;
+    switch (process.platform) {
+      case "darwin":
+        cmd = "open";
+        args = [url];
+        break;
+      case "win32":
+        cmd = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+        break;
+      default:
+        cmd = "xdg-open";
+        args = [url];
+    }
+    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.once("error", reject);
+    child.unref();
+    resolve();
+  });
+}
+async function machineId() {
+  const dyn = new Function("m", "return import(m)");
+  try {
+    const mod = await dyn("node-machine-id").catch(() => null);
+    if (mod?.machineIdSync) return mod.machineIdSync(true);
+  } catch {
+  }
+  return hostname();
+}
+async function deviceFingerprint(appVersion) {
+  const id = await machineId();
+  const plat = platform();
+  const hash = createHash("sha256");
+  hash.update(id);
+  hash.update("::");
+  hash.update(plat);
+  hash.update("::");
+  hash.update(appVersion);
+  return {
+    fingerprint: hash.digest("hex"),
+    platform: plat,
+    app_version: appVersion
+  };
+}
+
+// src/desktop/keyring.ts
+async function loadKeytar() {
+  const dyn = new Function("m", "return import(m)");
+  const mod = await dyn("keytar").catch(() => null);
+  if (!mod) throw new Error("TokenKeyring: install `keytar` to use the desktop keyring helper.");
+  return mod.default ?? mod;
+}
+var TokenKeyring = class {
+  service;
+  account;
+  constructor(opts) {
+    this.service = opts.service;
+    this.account = opts.account;
+  }
+  async get() {
+    const k = await loadKeytar();
+    return k.getPassword(this.service, this.account);
+  }
+  async set(value) {
+    const k = await loadKeytar();
+    await k.setPassword(this.service, this.account, value);
+  }
+  async delete() {
+    const k = await loadKeytar();
+    await k.deletePassword(this.service, this.account);
+  }
+};
+
+// src/desktop/session.ts
+var SessionStore = class {
+  constructor(keyring) {
+    this.keyring = keyring;
+  }
+  keyring;
+  async hydrate(client) {
+    const token = await this.keyring.get();
+    if (!token) return false;
+    client.setCustomerToken(token);
+    return true;
+  }
+  async persist(client, token) {
+    await this.keyring.set(token);
+    client.setCustomerToken(token);
+  }
+  async clear(client) {
+    await this.keyring.delete();
+    client.setCustomerToken("");
+  }
+  async hasToken() {
+    const v = await this.keyring.get();
+    return !!v;
+  }
+};
+
+// src/desktop/use-auth.ts
+var AuthController = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  opts;
+  listeners = /* @__PURE__ */ new Set();
+  current = { state: "loading" };
+  subscribe(listener) {
+    this.listeners.add(listener);
+    listener(this.current);
+    return () => this.listeners.delete(listener);
+  }
+  snapshot() {
+    return this.current;
+  }
+  emit(next) {
+    this.current = next;
+    this.listeners.forEach((l) => l(next));
+  }
+  async bootstrap() {
+    await this.opts.session.hydrate(this.opts.client);
+    await this.refresh();
+  }
+  async refresh() {
+    if (!await this.opts.session.hasToken()) {
+      this.emit({ state: "guest" });
+      return;
+    }
+    try {
+      const customer = await this.opts.client.customerMe();
+      const licensed = this.opts.checkLicense ? await this.opts.checkLicense(this.opts.client) : await this.runDefaultLicenseCheck();
+      this.emit({ state: "authenticated", customer, licensed });
+    } catch (e) {
+      if (e.status === 401) {
+        await this.opts.session.clear(this.opts.client);
+        this.emit({ state: "guest" });
+        return;
+      }
+      throw e;
+    }
+  }
+  async runDefaultLicenseCheck() {
+    try {
+      const resp = await this.opts.client.licenseCheck({
+        product: this.opts.product,
+        feature: this.opts.feature ?? "general"
+      });
+      return resp.allowed;
+    } catch {
+      return false;
+    }
+  }
+  async requestOtp(email, deviceFp) {
+    await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? "" });
+  }
+  async verifyOtp(email, code, deviceFp) {
+    const resp = await this.opts.client.verifyOtp({
+      email,
+      code,
+      device_fp: deviceFp ?? ""
+    });
+    await this.opts.session.persist(this.opts.client, resp.access_token);
+    await this.refresh();
+    return await this.opts.client.customerMe();
+  }
+  async oauthLogin(provider) {
+    const outcome = await this.opts.loopbackLogin(provider);
+    await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);
+    await this.refresh();
+    return outcome.exchange;
+  }
+  async logout() {
+    await this.opts.session.clear(this.opts.client);
+    this.emit({ state: "guest" });
+  }
+};
+
+export { AuthController, SessionStore, TokenKeyring, deviceFingerprint, openBrowser };
+//# sourceMappingURL=desktop.js.map
+//# sourceMappingURL=desktop.js.map

package/dist/desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/browser.ts","../src/desktop/fingerprint.ts","../src/desktop/keyring.ts","../src/desktop/session.ts","../src/desktop/use-auth.ts"],"names":[],"mappings":";;;;;AAGO,SAAS,YAAY,GAAA,EAA4B;AACpD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,QAAQ,QAAA;AAAU,MACtB,KAAK,QAAA;AACD,QAAA,GAAA,GAAM,MAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AACX,QAAA;AAAA,MACJ,KAAK,OAAA;AACD,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,+BAA+B,GAAG,CAAA;AAC1C,QAAA;AAAA,MACJ;AACI,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AAAA;AAEnB,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU,IAAA,EAAM,CAAA;AAClE,IAAA,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA;AAC1B,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AChBA,eAAe,SAAA,GAA6B;AACxC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,IAAI;AACA,IAAA,MAAM,MAAO,MAAM,GAAA,CAAI,iBAAiB,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC1D,IAAA,IAAI,GAAA,EAAK,aAAA,EAAe,OAAO,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,QAAA,EAAS;AACpB;AAEA,eAAsB,kBAAkB,UAAA,EAAgD;AACpF,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU;AAC3B,EAAA,MAAM,OAAO,QAAA,EAAS;AACtB,EAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAChC,EAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AACd,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,UAAU,CAAA;AACtB,EAAA,OAAO;AAAA,IACH,WAAA,EAAa,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAAA,IAC9B,QAAA,EAAU,IAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACjB;AACJ;;;AClBA,eAAe,UAAA,GAA8B;AAIzC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,MAAM,MAAO,MAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACjD,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mEAAmE,CAAA;AAC7F,EAAA,OAAO,IAAI,OAAA,IAAY,GAAA;AAC3B;AAEO,IAAM,eAAN,MAAmB;AAAA,EACL,OAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,IAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AACpB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AAAA,EACxB;AAAA,EAEA,MAAM,GAAA,GAA8B;AAChC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,OAAO,CAAA,CAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,IAAI,KAAA,EAA8B;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,EAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,SAAS,KAAK,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,CAAA,CAAE,cAAA,CAAe,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AACJ;;;AC9CO,IAAM,eAAN,MAAmB;AAAA,EACtB,YAA6B,OAAA,EAAuB;AAAvB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAAwB;AAAA,EAAxB,OAAA;AAAA,EAE7B,MAAM,QAAQ,MAAA,EAAyC;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACrC,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAC7B,IAAA,OAAO,IAAA;AAAA,EACX;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAuB,KAAA,EAA8B;AAC/D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AAC5B,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,MAAA,EAAsC;AAC9C,IAAA,MAAM,IAAA,CAAK,QAAQ,MAAA,EAAO;AAC1B,IAAA,MAAA,CAAO,iBAAiB,EAAE,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAA,GAA6B;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACjC,IAAA,OAAO,CAAC,CAAC,CAAA;AAAA,EACb;AACJ;;;ACNO,IAAM,iBAAN,MAAqB;AAAA,EAIxB,YAA6B,IAAA,EAA6B;AAA7B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA8B;AAAA,EAA9B,IAAA;AAAA,EAHrB,SAAA,uBAAgB,GAAA,EAAkC;AAAA,EAClD,OAAA,GAA2B,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA,EAItD,UAAU,QAAA,EAAoD;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC/C;AAAA,EAEA,QAAA,GAA4B;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEQ,KAAK,IAAA,EAA6B;AACtC,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC7B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,KAAK,MAAM,CAAA;AAChD,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACvB;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC3B,IAAA,IAAI,CAAE,MAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,UAAS,EAAI;AACvC,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,MAAA;AAAA,IACJ;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,UAAA,EAAW;AACnD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,YAAA,GACrB,MAAM,IAAA,CAAK,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,GAC7C,MAAM,KAAK,sBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,KAAK,EAAE,KAAA,EAAO,eAAA,EAAiB,QAAA,EAAU,UAAU,CAAA;AAAA,IAC5D,SAAS,CAAA,EAAG;AACR,MAAA,IAAK,CAAA,CAA0B,WAAW,GAAA,EAAK;AAC3C,QAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,CAAA;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,sBAAA,GAA2C;AACrD,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,YAAA,CAAa;AAAA,QAC7C,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,OAAA,IAAW;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,OAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,KAAA;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,UAAA,CAAW,KAAA,EAAe,QAAA,EAAkC;AAC9D,IAAA,MAAM,IAAA,CAAK,KAAK,MAAA,CAAO,UAAA,CAAW,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,IAAY,EAAA,EAAI,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAe,IAAA,EAAc,QAAA,EAAsC;AAC/E,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,SAAA,CAAU;AAAA,MAC1C,KAAA;AAAA,MACA,IAAA;AAAA,MACA,WAAW,QAAA,IAAY;AAAA,KAC1B,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,YAAY,CAAA;AACnE,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAA,EAAW;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAAA,EAAkD;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,IAAA,CAAK,cAAc,QAAQ,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA;AAC/E,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAO,OAAA,CAAQ,QAAA;AAAA,EACnB;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EAChC;AACJ","file":"desktop.js","sourcesContent":["import { spawn } from 'node:child_process';\n\n/** Launch the system default browser. Node-only. */\nexport function openBrowser(url: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        let cmd: string;\n        let args: string[];\n        switch (process.platform) {\n            case 'darwin':\n                cmd = 'open';\n                args = [url];\n                break;\n            case 'win32':\n                cmd = 'rundll32';\n                args = ['url.dll,FileProtocolHandler', url];\n                break;\n            default:\n                cmd = 'xdg-open';\n                args = [url];\n        }\n        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });\n        child.once('error', reject);\n        child.unref();\n        resolve();\n    });\n}\n","import { createHash } from 'node:crypto';\nimport { hostname, platform } from 'node:os';\n\nexport interface DeviceFingerprint {\n    fingerprint: string;\n    platform: string;\n    app_version: string;\n}\n\nasync function machineId(): Promise<string> {\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    try {\n        const mod = (await dyn('node-machine-id').catch(() => null)) as { machineIdSync?: (orig?: boolean) => string } | null;\n        if (mod?.machineIdSync) return mod.machineIdSync(true);\n    } catch {\n        // fallthrough\n    }\n    return hostname();\n}\n\nexport async function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint> {\n    const id = await machineId();\n    const plat = platform();\n    const hash = createHash('sha256');\n    hash.update(id);\n    hash.update('::');\n    hash.update(plat);\n    hash.update('::');\n    hash.update(appVersion);\n    return {\n        fingerprint: hash.digest('hex'),\n        platform: plat,\n        app_version: appVersion,\n    };\n}\n","/**\n * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as\n * an optional dependency; this module dynamically imports it so server-side\n * bundles never see it.\n */\nexport interface TokenKeyringOptions {\n    service: string;\n    account: string;\n}\n\ntype Keytar = {\n    getPassword: (service: string, account: string) => Promise<string | null>;\n    setPassword: (service: string, account: string, password: string) => Promise<void>;\n    deletePassword: (service: string, account: string) => Promise<boolean>;\n};\n\nasync function loadKeytar(): Promise<Keytar> {\n    // Use Function constructor so tsup/typescript don't try to resolve the\n    // optional module at build time. Consumers add `keytar` as a peer/optional\n    // dependency.\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    const mod = (await dyn('keytar').catch(() => null)) as { default?: Keytar } | null;\n    if (!mod) throw new Error('TokenKeyring: install `keytar` to use the desktop keyring helper.');\n    return mod.default ?? (mod as unknown as Keytar);\n}\n\nexport class TokenKeyring {\n    private readonly service: string;\n    private readonly account: string;\n\n    constructor(opts: TokenKeyringOptions) {\n        this.service = opts.service;\n        this.account = opts.account;\n    }\n\n    async get(): Promise<string | null> {\n        const k = await loadKeytar();\n        return k.getPassword(this.service, this.account);\n    }\n\n    async set(value: string): Promise<void> {\n        const k = await loadKeytar();\n        await k.setPassword(this.service, this.account, value);\n    }\n\n    async delete(): Promise<void> {\n        const k = await loadKeytar();\n        await k.deletePassword(this.service, this.account);\n    }\n}\n","import { BillingClient } from '../client';\nimport { TokenKeyring } from './keyring';\n\nexport class SessionStore {\n    constructor(private readonly keyring: TokenKeyring) {}\n\n    async hydrate(client: BillingClient): Promise<boolean> {\n        const token = await this.keyring.get();\n        if (!token) return false;\n        client.setCustomerToken(token);\n        return true;\n    }\n\n    async persist(client: BillingClient, token: string): Promise<void> {\n        await this.keyring.set(token);\n        client.setCustomerToken(token);\n    }\n\n    async clear(client: BillingClient): Promise<void> {\n        await this.keyring.delete();\n        client.setCustomerToken('');\n    }\n\n    async hasToken(): Promise<boolean> {\n        const v = await this.keyring.get();\n        return !!v;\n    }\n}\n","import type { BillingClient } from '../client';\nimport type { Customer, OauthExchangeResponse } from '../client-types';\nimport type { LoopbackOutcome } from '../loopback';\nimport type { SessionStore } from './session';\n\nexport type AuthStatusState =\n    | { state: 'loading' }\n    | { state: 'guest' }\n    | { state: 'authenticated'; customer: Customer; licensed: boolean };\n\nexport interface AuthControllerOptions {\n    client: BillingClient;\n    session: SessionStore;\n    product: string;\n    feature?: string;\n    /** Loopback flow used by `oauthLogin`. */\n    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;\n    /** Override the runtime license check (e.g. cache, custom feature key). */\n    checkLicense?: (client: BillingClient) => Promise<boolean>;\n}\n\nexport class AuthController {\n    private listeners = new Set<(s: AuthStatusState) => void>();\n    private current: AuthStatusState = { state: 'loading' };\n\n    constructor(private readonly opts: AuthControllerOptions) {}\n\n    subscribe(listener: (s: AuthStatusState) => void): () => void {\n        this.listeners.add(listener);\n        listener(this.current);\n        return () => this.listeners.delete(listener);\n    }\n\n    snapshot(): AuthStatusState {\n        return this.current;\n    }\n\n    private emit(next: AuthStatusState): void {\n        this.current = next;\n        this.listeners.forEach((l) => l(next));\n    }\n\n    async bootstrap(): Promise<void> {\n        await this.opts.session.hydrate(this.opts.client);\n        await this.refresh();\n    }\n\n    async refresh(): Promise<void> {\n        if (!(await this.opts.session.hasToken())) {\n            this.emit({ state: 'guest' });\n            return;\n        }\n        try {\n            const customer = await this.opts.client.customerMe();\n            const licensed = this.opts.checkLicense\n                ? await this.opts.checkLicense(this.opts.client)\n                : await this.runDefaultLicenseCheck();\n            this.emit({ state: 'authenticated', customer, licensed });\n        } catch (e) {\n            if ((e as { status?: number }).status === 401) {\n                await this.opts.session.clear(this.opts.client);\n                this.emit({ state: 'guest' });\n                return;\n            }\n            throw e;\n        }\n    }\n\n    private async runDefaultLicenseCheck(): Promise<boolean> {\n        try {\n            const resp = await this.opts.client.licenseCheck({\n                product: this.opts.product,\n                feature: this.opts.feature ?? 'general',\n            });\n            return resp.allowed;\n        } catch {\n            return false;\n        }\n    }\n\n    async requestOtp(email: string, deviceFp?: string): Promise<void> {\n        await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? '' });\n    }\n\n    async verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer> {\n        const resp = await this.opts.client.verifyOtp({\n            email,\n            code,\n            device_fp: deviceFp ?? '',\n        });\n        await this.opts.session.persist(this.opts.client, resp.access_token);\n        await this.refresh();\n        return (await this.opts.client.customerMe());\n    }\n\n    async oauthLogin(provider: string): Promise<OauthExchangeResponse> {\n        const outcome = await this.opts.loopbackLogin(provider);\n        await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);\n        await this.refresh();\n        return outcome.exchange;\n    }\n\n    async logout(): Promise<void> {\n        await this.opts.session.clear(this.opts.client);\n        this.emit({ state: 'guest' });\n    }\n}\n"]}

package/dist/index.cjs

@@ -86,6 +86,12 @@ var BillingClient = class {
   setCustomerToken(token) {
     this.customerToken = token;
   }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  getProductSlug() {
+    return this.productSlug;
+  }
   async requestOtp(payload) {
     await this.signed("POST", "/api/auth/customer/otp/request", payload);
   }
@@ -536,17 +542,248 @@ function buildOauthInitUrl(opts) {
   return `${base}/auth/${opts.provider}?${params.toString()}`;
 }
 
+// src/lifecycle.ts
+function computeState(payload, graceWindowMs, now = /* @__PURE__ */ new Date()) {
+  if (!payload) return "none";
+  if (!payload.valid_until) return "invalid";
+  const expiry = Date.parse(payload.valid_until);
+  if (Number.isNaN(expiry)) return "invalid";
+  const nowMs = now.getTime();
+  if (nowMs <= expiry) {
+    return isTrialPayload(payload) ? "trialing" : "active";
+  }
+  const cutoff = expiry + graceWindowMs;
+  if (nowMs <= cutoff) return "grace";
+  return "expired";
+}
+function trialDaysLeft(payload, now = /* @__PURE__ */ new Date()) {
+  if (!payload || !isTrialPayload(payload)) return 0;
+  const expiry = Date.parse(payload.valid_until);
+  if (Number.isNaN(expiry)) return 0;
+  const delta = expiry - now.getTime();
+  if (delta <= 0) return 0;
+  const dayMs = 24 * 60 * 60 * 1e3;
+  return Math.ceil(delta / dayMs);
+}
+function isTrialPayload(payload) {
+  if (payload.features?.__trial === true) return true;
+  if (payload.plan_key && payload.plan_key.endsWith(":trial")) return true;
+  return false;
+}
+
+// src/gate.ts
+var GateDeniedError = class extends Error {
+  access;
+  constructor(access) {
+    super(`billing: feature "${access.feature}" denied (${access.reason})`);
+    this.name = "GateDeniedError";
+    this.access = access;
+  }
+};
+function isGateDenied(err) {
+  return err instanceof GateDeniedError;
+}
+var Gate = class {
+  loader;
+  localConsumption;
+  graceWindowMs;
+  now;
+  inflight = null;
+  constructor(opts) {
+    if (!opts.loader) throw new Error("billing: Gate requires loader");
+    this.loader = opts.loader;
+    this.localConsumption = opts.localConsumption ?? (() => 0);
+    this.graceWindowMs = opts.graceWindowMs ?? 0;
+    this.now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  }
+  async check(feature) {
+    const prev = this.inflight;
+    const run = (async () => {
+      if (prev) {
+        try {
+          await prev;
+        } catch {
+        }
+      }
+      return this.evaluate(feature);
+    })();
+    this.inflight = run.catch(() => ({}));
+    return run;
+  }
+  async require(feature) {
+    const access = await this.check(feature);
+    if (!access.allowed) throw new GateDeniedError(access);
+    return access;
+  }
+  async evaluate(feature) {
+    const access = {
+      feature,
+      allowed: false,
+      hasFeature: false,
+      unlimited: false,
+      remaining: 0,
+      reason: "",
+      plan: "",
+      state: "none"
+    };
+    let loaded;
+    try {
+      loaded = await this.loader();
+    } catch (err) {
+      access.reason = "verify_failed";
+      throw Object.assign(err instanceof Error ? err : new Error(String(err)), { access });
+    }
+    if (!loaded) {
+      access.reason = "no_license";
+      return access;
+    }
+    const { payload } = loaded;
+    access.plan = payload.plan_key;
+    access.state = computeState(payload, this.graceWindowMs, this.now());
+    if (access.state === "expired" || access.state === "invalid") {
+      access.reason = `license_${access.state}`;
+      return access;
+    }
+    const featureFlag = payload.features?.[feature];
+    if (featureFlag !== void 0) {
+      access.hasFeature = featureFlag;
+      if (!featureFlag) {
+        access.reason = "feature_disabled";
+        return access;
+      }
+    }
+    let consumed;
+    try {
+      consumed = await this.localConsumption(feature);
+    } catch (err) {
+      access.reason = "local_consumption_failed";
+      throw Object.assign(err instanceof Error ? err : new Error(String(err)), { access });
+    }
+    const remaining = computeRemaining(payload, feature, consumed);
+    if (remaining === null) {
+      if (access.hasFeature) {
+        access.allowed = true;
+        access.unlimited = true;
+        return access;
+      }
+      access.reason = "feature_missing";
+      return access;
+    }
+    if (remaining === Number.POSITIVE_INFINITY) {
+      access.unlimited = true;
+      access.hasFeature = true;
+      access.allowed = true;
+      return access;
+    }
+    access.remaining = remaining;
+    if (remaining > 0) {
+      access.allowed = true;
+      access.hasFeature = true;
+      return access;
+    }
+    access.reason = "limit_reached";
+    return access;
+  }
+};
+
+// src/usage.ts
+var MemoryBuffer = class {
+  state = {};
+  add(feature, delta) {
+    if (delta === 0) return;
+    this.state[feature] = (this.state[feature] ?? 0) + delta;
+  }
+  drain() {
+    const out = this.state;
+    this.state = {};
+    return out;
+  }
+  restore(deltas) {
+    for (const [k, v] of Object.entries(deltas)) {
+      this.state[k] = (this.state[k] ?? 0) + v;
+    }
+  }
+};
+var DEFAULT_FLUSH_INTERVAL_MS = 5 * 60 * 1e3;
+var UsageTracker = class {
+  buffer;
+  sync;
+  serial;
+  onRefresh;
+  flushIntervalMs;
+  timer = null;
+  running = false;
+  constructor(opts) {
+    if (!opts.buffer) throw new Error("billing: tracker requires buffer");
+    if (!opts.sync) throw new Error("billing: tracker requires sync");
+    this.buffer = opts.buffer;
+    this.sync = opts.sync;
+    if (opts.serial !== void 0) this.serial = opts.serial;
+    if (opts.onRefresh !== void 0) this.onRefresh = opts.onRefresh;
+    this.flushIntervalMs = opts.flushIntervalMs && opts.flushIntervalMs > 0 ? opts.flushIntervalMs : DEFAULT_FLUSH_INTERVAL_MS;
+  }
+  async track(feature, delta) {
+    if (delta === 0) return;
+    await this.buffer.add(feature, delta);
+  }
+  async flush() {
+    const deltas = await this.buffer.drain();
+    if (!deltas || Object.keys(deltas).length === 0) return;
+    let serial = 0;
+    if (this.serial) {
+      try {
+        serial = await this.serial();
+      } catch (err) {
+        await this.buffer.restore(deltas);
+        throw err;
+      }
+    }
+    let resp;
+    try {
+      resp = await this.sync(deltas, serial);
+    } catch (err) {
+      await this.buffer.restore(deltas);
+      throw err;
+    }
+    if (this.onRefresh && resp) {
+      await this.onRefresh(resp);
+    }
+  }
+  start() {
+    if (this.running) return;
+    this.running = true;
+    this.timer = setInterval(() => {
+      void this.flush().catch(() => {
+      });
+    }, this.flushIntervalMs);
+  }
+  async stop() {
+    if (!this.running) return;
+    this.running = false;
+    if (this.timer) {
+      clearInterval(this.timer);
+      this.timer = null;
+    }
+    await this.flush();
+  }
+};
+
 exports.BillingApiError = BillingApiError;
 exports.BillingClient = BillingClient;
+exports.Gate = Gate;
+exports.GateDeniedError = GateDeniedError;
 exports.HEADER_NONCE = HEADER_NONCE;
 exports.HEADER_PRODUCT = HEADER_PRODUCT;
 exports.HEADER_SIGNATURE = HEADER_SIGNATURE;
 exports.HEADER_TIMESTAMP = HEADER_TIMESTAMP;
+exports.MemoryBuffer = MemoryBuffer;
+exports.UsageTracker = UsageTracker;
 exports.buildOauthInitUrl = buildOauthInitUrl;
 exports.canUseUpdate = canUseUpdate;
 exports.canonical = canonical;
 exports.checkoutUrl = checkoutUrl;
 exports.computeRemaining = computeRemaining;
+exports.computeState = computeState;
 exports.decodeLicense = decodeLicense;
 exports.defaultInterval = defaultInterval;
 exports.downloadUrl = downloadUrl;
@@ -559,6 +796,7 @@ exports.getCtaProps = getCtaProps;
 exports.hasYearly = hasYearly;
 exports.isExpired = isExpired;
 exports.isFreeTier = isFreeTier;
+exports.isGateDenied = isGateDenied;
 exports.isInGrace = isInGrace;
 exports.isOneTimeTier = isOneTimeTier;
 exports.isUnlimited = isUnlimited;
@@ -567,6 +805,7 @@ exports.newNonce = newNonce;
 exports.periodResetAt = periodResetAt;
 exports.sendCompletionBeacon = sendCompletionBeacon;
 exports.sign = sign;
+exports.trialDaysLeft = trialDaysLeft;
 exports.triggerDownload = triggerDownload;
 exports.verifyLicense = verifyLicense;
 //# sourceMappingURL=index.cjs.map