@buoy-gg/license 7.0.36 → 7.0.39

package/lib/module/index.js

@@ -15,4 +15,4 @@
  * Pro is $9/mo, and is free every weekend for anyone holding a key —
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
- */export{LicenseManager}from"./LicenseManager.js";export{DeviceRegistrationModal}from"./DeviceRegistrationModal.js";export{useLicense,useFeatureAccess,useIsPro,useProAccess,useTier}from"./hooks.js";export{ANONYMOUS_TIER_ENABLED}from"./config.js";export{LicenseTransportError,isTransientLicenseError}from"./api.js";export{isWeekendFreePro,useWeekendFreePro}from"./weekendPro.js";export async function setLicenseKey(e){const{LicenseManager:r}=await import("./LicenseManager");await r.initialize();return r.setLicenseKey(e)}function n(){const{isWeekendFreePro:e,weekendPassAppliesTo:r}=require("./weekendPro");const{LicenseManager:s}=require("./LicenseManager");return r(s.getTier(),e())}export function isPro(){const{LicenseManager:e}=require("./LicenseManager");if(e.isPro())return true;return n()}export function hasEntitlement(e){const{LicenseManager:r}=require("./LicenseManager");if(r.hasEntitlement(e))return true;return n()}
+ */export{LicenseManager}from"./LicenseManager.js";export{DeviceRegistrationModal}from"./DeviceRegistrationModal.js";export{useLicense,useFeatureAccess,useIsPro,useProAccess,useTier}from"./hooks.js";export{useAccountAccess}from"./hooks.js";export{resolveAccountAccess}from"./accountAccess.js";export{LicenseTransportError,isTransientLicenseError}from"./api.js";export{isBuoyToken}from"./freeToken.js";export{isWeekendFreePro,useWeekendFreePro}from"./weekendPro.js";export async function setLicenseKey(e){const{LicenseManager:r}=await import("./LicenseManager");await r.initialize();return r.setLicenseKey(e)}function n(){const{isWeekendFreePro:e,weekendPassAppliesTo:r}=require("./weekendPro");const{LicenseManager:s}=require("./LicenseManager");return r(s.hasAccountAccess(),e())}export function isPro(){const{LicenseManager:e}=require("./LicenseManager");if(e.isPro())return true;return n()}export function hasEntitlement(e){const{LicenseManager:r}=require("./LicenseManager");if(r.hasEntitlement(e))return true;return n()}

package/lib/module/index.web.js

@@ -15,4 +15,4 @@
  * Pro is $9/mo, and is free every weekend for anyone holding a key —
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
- */export{LicenseManager}from"./LicenseManager.js";export{useLicense,useFeatureAccess,useIsPro,useProAccess,useTier}from"./hooks.js";export{ANONYMOUS_TIER_ENABLED}from"./config.js";export{LicenseTransportError,isTransientLicenseError}from"./api.js";export{isWeekendFreePro,useWeekendFreePro}from"./weekendPro.js";export async function setLicenseKey(e){const{LicenseManager:r}=await import("./LicenseManager");await r.initialize();return r.setLicenseKey(e)}function n(){const{isWeekendFreePro:e,weekendPassAppliesTo:r}=require("./weekendPro");const{LicenseManager:s}=require("./LicenseManager");return r(s.getTier(),e())}export function isPro(){const{LicenseManager:e}=require("./LicenseManager");if(e.isPro())return true;return n()}export function hasEntitlement(e){const{LicenseManager:r}=require("./LicenseManager");if(r.hasEntitlement(e))return true;return n()}
+ */import{LicenseManager as r}from"./LicenseManager.js";import{isWeekendFreePro as n,weekendPassAppliesTo as o}from"./weekendPro.js";export{LicenseManager}from"./LicenseManager.js";export{useLicense,useFeatureAccess,useIsPro,useProAccess,useTier}from"./hooks.js";export{useAccountAccess}from"./hooks.js";export{resolveAccountAccess}from"./accountAccess.js";export{LicenseTransportError,isTransientLicenseError}from"./api.js";export{isBuoyToken}from"./freeToken.js";export{isWeekendFreePro,useWeekendFreePro}from"./weekendPro.js";export async function setLicenseKey(e){const{LicenseManager:s}=await import("./LicenseManager");await s.initialize();return s.setLicenseKey(e)}function t(){return o(r.hasAccountAccess(),n())}export function isPro(){if(r.isPro())return true;return t()}export function hasEntitlement(e){if(r.hasEntitlement(e))return true;return t()}

package/lib/module/storage.js

@@ -0,0 +1 @@
+"use strict";const m="buoy-license";let c=null;let a=null;const l=new Map;function y(){if(c)return c;try{const e=require("expo-file-system/legacy");c=e?.default||e;if(c?.documentDirectory){return c}c=null}catch{}try{const e=require("expo-file-system");c=e?.default||e;if(c?.documentDirectory){return c}c=null}catch{}return null}function f(){const e=y();if(!e?.documentDirectory)return null;return`${e.documentDirectory}${m}/`}function u(e){const n=f();if(!n)return null;return`${n}${encodeURIComponent(e)}.json`}function g(){try{const e=require("@react-native-async-storage/async-storage");const n=e?.default||e;if(typeof n?.getItem==="function"&&typeof n.setItem==="function"&&typeof n.removeItem==="function"){return n}}catch{}return null}function I(){try{return typeof localStorage!=="undefined"&&!!localStorage}catch{return false}}export async function getLicenseStorage(){if(a)return a;const e=y();let n=null;if(e?.documentDirectory){a={async getItem(t){const r=u(t);if(!r)return null;try{const o=await e.getInfoAsync(r);if(!o.exists)return null;return await e.readAsStringAsync(r)}catch{return null}},async setItem(t,r){const o=f();const s=u(t);if(!o||!s)return;try{const i=await e.getInfoAsync(o);if(!i.exists){await e.makeDirectoryAsync(o,{intermediates:true})}await e.writeAsStringAsync(s,r)}catch(i){console.warn("[Buoy] License storage write failed:",i)}},async removeItem(t){const r=u(t);if(!r)return;try{await e.deleteAsync(r,{idempotent:true})}catch{}}}}else if(n=g()){const t=n;a={async getItem(r){try{return await t.getItem(r)}catch{return null}},async setItem(r,o){try{await t.setItem(r,o)}catch(s){console.warn("[Buoy] License storage write failed:",s)}},async removeItem(r){try{await t.removeItem(r)}catch{}}}}else if(I()){a={async getItem(t){try{return localStorage.getItem(t)}catch{return null}},async setItem(t,r){try{localStorage.setItem(t,r)}catch{}},async removeItem(t){try{localStorage.removeItem(t)}catch{}}}}else{a={async getItem(t){return l.get(t)??null},async setItem(t,r){l.set(t,r)},async removeItem(t){l.delete(t)}}}return a}

package/lib/module/storage.web.js

@@ -0,0 +1 @@
+"use strict";const e=new Map;const c={async getItem(t){try{return localStorage.getItem(t)??e.get(t)??null}catch{return e.get(t)??null}},async setItem(t,r){e.set(t,r);try{localStorage.setItem(t,r)}catch{}},async removeItem(t){e.delete(t);try{localStorage.removeItem(t)}catch{}}};export async function getLicenseStorage(){return c}

package/lib/module/tier.js

@@ -14,4 +14,4 @@
  * Pro is $9/mo, and is free every weekend for anyone holding a key —
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
- */import{KEYGEN_POLICIES as t}from"./config.js";export function resolveTier(r){const e=r.relationships?.policy?.data?.id;if(e===t.free)return"free";if(e===t.solo||e===t.business){return"pro"}const o=r.attributes?.metadata?.plan;if(o==="free")return"free";return"pro"}export function tierAfterFatalError(r){return r==="EXPIRED"?"free":"anonymous"}
+ */import{KEYGEN_CONFIG as n,KEYGEN_POLICIES as e}from"./config.js";export function resolveTier(r){const t=r.relationships?.policy?.data?.id;if(t===e.free)return"free";if(t===e.solo||t===e.business){return"pro"}const o=r.attributes?.metadata?.plan;if(o==="free")return"free";return"pro"}export function tierAfterFatalError(r){return r==="EXPIRED"?"free":null}export function isRecognizedAccount(r){if(!r)return false;const t=r.relationships?.product?.data?.id;if(t)return t===n.productId;const o=r.relationships?.policy?.data?.id;return Object.values(e).some(i=>i===o)}

package/lib/module/weekendPro.js

@@ -15,4 +15,4 @@
  * Pro is $9/mo, and is free every weekend for anyone holding a key —
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
- */import{ANONYMOUS_TIER_ENABLED as s}from"./config.js";import{useEffect as u,useState as i}from"react";export function isWeekendFreePro(t=new Date){const e=t.getDay();return e===0||e===6}export function useWeekendFreePro(){const[t,e]=i(()=>isWeekendFreePro());u(()=>{const o=setInterval(()=>{const r=isWeekendFreePro();e(n=>n===r?n:r)},60*1e3);return()=>clearInterval(o)},[]);return t}export function weekendPassAppliesTo(t,e){if(!e)return false;if(!s)return true;return t!=="anonymous"}
+ */import{useEffect as s,useState as c}from"react";export function isWeekendFreePro(t=new Date){const e=t.getDay();return e===0||e===6}export function useWeekendFreePro(){const[t,e]=c(()=>isWeekendFreePro());s(()=>{const o=setInterval(()=>{const n=isWeekendFreePro();e(r=>r===n?r:n)},60*1e3);return()=>clearInterval(o)},[]);return t}export function weekendPassAppliesTo(t,e){return e&&t}

package/lib/typescript/commonjs/LicenseManager.d.ts

@@ -14,7 +14,7 @@
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
  */
-import type { BuoyTier, LicenseState, LicenseListener } from "./types";
+import type { BuoyTier, LicenseListener } from "./types";
 /** Info passed to device registration callback */
 export interface DeviceRegistrationInfo {
     fingerprint: string;
@@ -42,6 +42,11 @@ declare class LicenseManagerImpl {
      * it no longer matches.
      */
     private generation;
+    private configuredKey;
+    private persistence;
+    private verifiedAt;
+    private expiryTimer;
+    private removeForegroundListener;
     /**
      * Pending backoff retry after a transient failure (see
      * LICENSE_TRANSIENT_RETRY_DELAYS). At most one is ever outstanding, and it
@@ -49,6 +54,8 @@ declare class LicenseManagerImpl {
      */
     private retryTimer;
     private retryAttempt;
+    /** The hold record, once read. `undefined` until the first read. */
+    private hold;
     private deviceRegistrationCallback;
     private pendingRegistration;
     /**
@@ -59,6 +66,8 @@ declare class LicenseManagerImpl {
      * Internal initialization logic
      */
     private _doInitialize;
+    /** Omitted configuration preserves activation; an explicit blank signs out. */
+    configure(key?: string): Promise<boolean>;
     /**
      * Set and validate a license key.
      *
@@ -86,6 +95,21 @@ declare class LicenseManagerImpl {
      * prop, so without this the next attempt is the daily revalidation timer.
      */
     private scheduleRetry;
+    /**
+     * Admit (or reject) a free-tier token. Verification is a signature check
+     * against the public key in config.ts; the cache is written so the next
+     * launch and the account-admission clock see a validated key, and marked
+     * quiet so nothing ever revalidates it against a server.
+     */
+    private admitToken;
+    /**
+     * "Don't ask right now": serve the trusted cache if it vouches for this
+     * key, otherwise record why the tier can't move, then try exactly once when
+     * the wait is over. Used for server-set backoffs, both fresh and remembered.
+     */
+    private standDown;
+    /** One retry at a server-chosen time. Replaces any ladder step pending. */
+    private scheduleRetryIn;
     /** Drop any pending retry — a newer decision has replaced it. */
     private cancelRetry;
     /**
@@ -93,14 +117,21 @@ declare class LicenseManagerImpl {
      */
     clearLicense(): Promise<void>;
     /**
-     * Set the tier and keep the derived fields in step.
+     * Set the tier a validated key granted and keep the derived fields in step.
      *
      * `isPro` is a mirror of `tier === "pro"` and must never be assigned
      * directly — that is exactly how a free key would end up granting Pro.
      */
     private applyTier;
     /**
-     * The current access tier. This is what gates and caps should read.
+     * Forget whatever the current key had proven. There is no tier for "nothing
+     * validated": the tier falls back to free and `tierSource: "none"` is what
+     * makes `getAccountAccess()` report the manager locked.
+     */
+    private lock;
+    /**
+     * The current tier. This is what caps should read; whether the tools are
+     * usable at all is `getAccountAccess()`.
      */
     getTier(): BuoyTier;
     /**
@@ -114,7 +145,21 @@ declare class LicenseManagerImpl {
     /**
      * Get current license state
      */
-    getState(): Readonly<LicenseState>;
+    getState(): {
+        tier: BuoyTier;
+        isPro: boolean;
+        access: import("./accountAccess").AccountAccess;
+        isInitialized: boolean;
+        isValidating: boolean;
+        tierSource: import("./types").TierSource;
+        licenseKey: string | null;
+        error: string | null;
+        errorKind: "transport" | "verdict" | null;
+        expiresAt: Date | null;
+    };
+    getAccountAccess(): import("./accountAccess").AccountAccess;
+    hasAccountAccess(): boolean;
+    private setVerifiedAt;
     /**
      * Subscribe to license events
      */
@@ -138,12 +183,21 @@ declare class LicenseManagerImpl {
      * launch-time revalidation would add nothing (see LICENSE_LAUNCH_VALIDATION_TTL).
      */
     private isCacheFresh;
+    /**
+     * Whether a cache has anything to learn before it expires. Blobs written
+     * before the flag existed are judged the same way they would be today.
+     */
+    private isQuiet;
+    private loadHold;
+    /** Replace the hold record (null clears it). Never throws: a failed write only costs a request. */
+    private saveHold;
     /**
      * Write the cache with a fresh checksum. Every write goes through here so a
      * blob can never land on disk unsigned — an unsigned blob is treated as
      * untrusted on the next read, which would silently drop a paying customer.
      */
     private persistCache;
+    private saveCache;
     private loadCachedLicense;
     /**
      * The install's stable device fingerprint, created once and persisted under
@@ -160,6 +214,7 @@ declare class LicenseManagerImpl {
      */
     private registerDeviceAsync;
     private validateInBackground;
+    refreshAccess(): void;
     private startRevalidationTimer;
     /**
      * Stop the revalidation timer

package/lib/typescript/commonjs/LicenseManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LicenseManager.d.ts","sourceRoot":"","sources":["../../../src/LicenseManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA4QH,OAAO,KAAK,EACV,QAAQ,EAGR,YAAY,EAEZ,eAAe,EAChB,MAAM,SAAS,CAAC;AAEjB,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mDAAmD;AACnD,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,sBAAsB,KAAK,IAAI,CAAC;AAsBhF,cAAM,kBAAkB;IACtB,OAAO,CAAC,KAAK,CAUX;IAEF,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,kBAAkB,CAAgC;IAG1D,OAAO,CAAC,WAAW,CAA8B;IAEjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,YAAY,CAAK;IAGzB,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,mBAAmB,CAAoC;IAE/D;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC;;OAEG;YACW,aAAa;IAiD3B;;;;;;OAMG;IACG,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB;;;;;;;WAOG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GACA,OAAO,CAAC,OAAO,CAAC;IAwOnB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IA2BrB,iEAAiE;IACjE,OAAO,CAAC,WAAW;IAOnB;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBnC;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;IACH,OAAO,IAAI,QAAQ;IAInB;;OAEG;IACH,KAAK,IAAI,OAAO;IAIhB;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOrC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC;IAIlC;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,IAAI;IAKhD;;;;;OAKG;IACH,0BAA0B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,IAAI;IAO5E;;;OAGG;IACG,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCnE,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,YAAY;IAkBpB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;OAIG;YACW,YAAY;YAOZ,iBAAiB;IAc/B;;;;;;OAMG;IACH,OAAO,CAAC,4BAA4B;YAetB,kBAAkB;IAWhC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,oBAAoB;IA6D5B,OAAO,CAAC,sBAAsB;IAmB9B;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAU7B;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;CAevC;AAGD,eAAO,MAAM,cAAc,oBAA2B,CAAC"}
+{"version":3,"file":"LicenseManager.d.ts","sourceRoot":"","sources":["../../../src/LicenseManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiDH,OAAO,KAAK,EACV,QAAQ,EAKR,eAAe,EAChB,MAAM,SAAS,CAAC;AAUjB,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mDAAmD;AACnD,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,sBAAsB,KAAK,IAAI,CAAC;AA0ChF,cAAM,kBAAkB;IACtB,OAAO,CAAC,KAAK,CAUX;IAEF,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,kBAAkB,CAAgC;IAG1D,OAAO,CAAC,WAAW,CAA8B;IAEjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,WAAW,CAAuC;IAC1D,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,WAAW,CAA8C;IACjE,OAAO,CAAC,wBAAwB,CAA6B;IAE7D;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,YAAY,CAAK;IAEzB,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAAgC;IAG5C,OAAO,CAAC,0BAA0B,CAA2C;IAC7E,OAAO,CAAC,mBAAmB,CAAoC;IAE/D;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC;;OAEG;YACW,aAAa;IAsD3B,+EAA+E;IACzE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB/C;;;;;;OAMG;IACG,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB;;;;;;;WAOG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GACA,OAAO,CAAC,OAAO,CAAC;IA6VnB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IA2BrB;;;;;OAKG;YACW,UAAU;IAqCxB;;;;OAIG;IACH,OAAO,CAAC,SAAS;IA0BjB,2EAA2E;IAC3E,OAAO,CAAC,eAAe;IAYvB,iEAAiE;IACjE,OAAO,CAAC,WAAW;IAOnB;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBnC;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAQjB;;;;OAIG;IACH,OAAO,CAAC,IAAI;IASZ;;;OAGG;IACH,OAAO,IAAI,QAAQ;IAMnB;;OAEG;IACH,KAAK,IAAI,OAAO;IAIhB;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIrC;;OAEG;IACH,QAAQ;;;;;;;;;;;;IAMR,gBAAgB;IAOhB,gBAAgB,IAAI,OAAO;IAE3B,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,IAAI;IAKhD;;;;;OAKG;IACH,0BAA0B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,IAAI;IAO5E;;;OAGG;IACG,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCnE,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,YAAY;IAWpB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAKpB;;;OAGG;IACH,OAAO,CAAC,OAAO;YAKD,QAAQ;IAatB,mGAAmG;YACrF,QAAQ;IAWtB;;;;OAIG;YACW,YAAY;IAO1B,OAAO,CAAC,SAAS;YAUH,iBAAiB;IAiB/B;;;;;;OAMG;IACH,OAAO,CAAC,4BAA4B;YAetB,kBAAkB;IAUhC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,oBAAoB;IAK5B,aAAa,IAAI,IAAI;IAErB,OAAO,CAAC,sBAAsB;IA0B9B;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAc7B;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;CAevC;AAGD,eAAO,MAAM,cAAc,oBAA2B,CAAC"}

package/lib/typescript/commonjs/accountAccess.d.ts

@@ -0,0 +1,16 @@
+import type { TierSource } from "./types";
+export type AccountAccess = {
+    status: "initializing" | "locked" | "admitted";
+    reason: "checking" | "account_required" | "verification_expired" | null;
+    validUntil: number | null;
+};
+/** Account admission is independent of paid features and the Weekend Pass. */
+export declare function resolveAccountAccess(input: {
+    initialized: boolean;
+    validating: boolean;
+    key: string | null;
+    /** "none" means nothing has been validated for the current key. */
+    tierSource: TierSource;
+    verifiedAt: number | null;
+}, now?: number): AccountAccess;
+//# sourceMappingURL=accountAccess.d.ts.map

package/lib/typescript/commonjs/accountAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountAccess.d.ts","sourceRoot":"","sources":["../../../src/accountAccess.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/C,MAAM,EAAE,UAAU,GAAG,kBAAkB,GAAG,sBAAsB,GAAG,IAAI,CAAC;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,mEAAmE;IACnE,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,EAAE,GAAG,SAAa,GAAG,aAAa,CAkBlC"}

package/lib/typescript/commonjs/api.d.ts

@@ -25,8 +25,30 @@ export declare class LicenseTransportError extends Error {
     readonly isTransient: true;
     /** HTTP status, or null when the request never got an answer at all. */
     readonly status: number | null;
-    constructor(message: string, status: number | null);
+    /**
+     * How long the server asked us to wait, in ms, or null when it didn't say.
+     * Read from `Retry-After` (seconds or an HTTP date), falling back to
+     * `X-RateLimit-Reset` (epoch seconds). Only ever set on a 429.
+     */
+    readonly retryAfterMs: number | null;
+    constructor(message: string, status: number | null, retryAfterMs?: number | null);
 }
+/**
+ * The server told us to stop asking for a while.
+ *
+ * 429 is Keygen's per-IP throttle; 402 is the account's daily quota, spent —
+ * and on the Dev tier that is a hard stop until it resets. Neither is a
+ * verdict about the key, and neither is a blip a retry ladder can outwait.
+ */
+export declare function isRateLimited(error: unknown): error is LicenseTransportError;
+/**
+ * How long to stay quiet after a rate limit, in ms.
+ *
+ * A 429 says how long (default 60 s when it doesn't). A 402 says nothing, and
+ * Keygen's quota is daily, so there is no right number; LICENSE_QUOTA_COOLDOWN
+ * bounds how often a running app checks whether the day has turned.
+ */
+export declare function backoffAfter(error: LicenseTransportError, quotaCooldown: number, defaultWait: number): number;
 /**
  * True for anything that means "we could not ask", from any realm.
  *
@@ -35,12 +57,22 @@ export declare class LicenseTransportError extends Error {
  * and then the class identity differs from the one the thrower used.
  */
 export declare function isTransientLicenseError(error: unknown): boolean;
+/** Bounds the request AND body read, including fetch implementations that ignore abort. */
+export declare function validateLicense(key: string): Promise<KeygenValidationResponse>;
+/** Machine registration is advisory; unknown or scope/policy errors cannot grant access. */
+export declare function isAcceptedValidation(response: KeygenValidationResponse): boolean;
 /**
- * Validate a license key with Keygen
+ * How many machines the validated license already has, per the response.
+ *
+ * Keygen includes `relationships.machines.meta.count` on the license object,
+ * so this is free to read. Zero when the response doesn't carry it.
  */
-export declare function validateLicense(licenseKey: string): Promise<KeygenValidationResponse>;
+export declare function machineCount(response: KeygenValidationResponse): number;
 /**
- * Activate a machine for a license (for visibility, not enforcement)
+ * Register this device for a license (for visibility, not enforcement).
+ *
+ * Goes through Buoy's endpoint, which holds the product token and forwards
+ * Keygen's answer unchanged, so the same error codes come back.
  */
 export declare function activateMachine(licenseId: string, licenseKey: string, fingerprint: string, name: string, metadata?: Record<string, string>): Promise<KeygenMachineResponse>;
 /**

package/lib/typescript/commonjs/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EAErB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAIjB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAG,IAAI,CAAU;IACrC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;CAKnD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAS/D;AA+CD;;GAEG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,wBAAwB,CAAC,CA0CnC;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAsEhC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,wBAAwB,GACjC,uBAAuB,CAUzB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQzD"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,wBAAwB,EACxB,qBAAqB,EAErB,uBAAuB,EACxB,MAAM,SAAS,CAAC;AAIjB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAG,IAAI,CAAU;IACrC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,YAAY,GAAE,MAAM,GAAG,IAAW;CAMvF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAG5E;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAG7G;AAoBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAS/D;AAiFD,2FAA2F;AAC3F,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAcpF;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAQhF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,CAGvE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,wBAAwB,GACjC,uBAAuB,CAUzB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQzD"}

package/lib/typescript/commonjs/config.d.ts

@@ -21,18 +21,32 @@
 export declare const KEYGEN_CONFIG: {
     readonly accountId: "b0eba0e8-e904-4906-b644-38f9aab57bed";
     /**
-     * The Keygen PRODUCT id. Currently unread — `api.ts` destructures only
-     * accountId/productToken/apiUrl — but kept correct so it can be trusted.
+     * The Keygen PRODUCT id, used to check that a validated license belongs to
+     * Buoy (see `isAcceptedValidation`).
      *
      * Careful: this field previously held `1037431d-b2fe-48db-aca9-10c5e9c4d944`,
-     * which is not a product at all — it is the ID of the product TOKEN below.
+     * which is not a product at all — it was the ID of a product token.
      * Verified against the Keygen dashboard (Aug 2026): the account has exactly
      * one product, "Buoy", and this is its id.
      */
     readonly productId: "bf67cb43-eeef-40ca-b308-e6e1b22c0eaa";
-    readonly productToken: "prod-4467c14b75b715e91884945cd3e69705846ccbce7dd5e380236a1ab3bc03139fv3";
-    readonly apiUrl: "https://api.keygen.sh/v1/accounts";
+    /**
+     * Buoy's license endpoint. It sits in front of Keygen and answers from a
+     * cache, so the license server hears about a key about once an hour no
+     * matter how many devices hold it; Keygen's response body comes back
+     * unchanged. Device registration goes through it too, which is why no
+     * product token ships in this package any more: the token used to be
+     * embedded here, and anything embedded in an app is public.
+     */
+    readonly apiUrl: "https://buoy.gg/api/license";
 };
+/**
+ * Ed25519 public key that free-tier tokens are verified against (see
+ * freeToken.ts). Not a secret: it can only check signatures, never make them.
+ * The private half lives in the website Worker as BUOY_FREE_TOKEN_PRIVATE_KEY.
+ * Rotating it means a new SDK release, since this ships in the bundle.
+ */
+export declare const FREE_TOKEN_PUBLIC_KEY = "3b546fc717a62683f3236c70167899a271bee3ffc04df6ec1eea60a394a2f1e9";
 /**
  * Keygen policy IDs, which are what decide a key's tier.
  *
@@ -72,22 +86,48 @@ export declare const LICENSE_LAUNCH_VALIDATION_TTL: number;
  */
 export declare const LICENSE_TRANSIENT_RETRY_DELAYS: readonly [number, number, number, number, number];
 /**
- * Master switch for the ANONYMOUS tier.
+ * Server-driven backoff, the way Sentry and PostHog SDKs handle it.
  *
- * Lives here — the lowest-level package — because two separate behaviors have
- * to turn on together, and they sit in different packages:
+ * The retry schedule above exists for blips: a 5xx, a dropped connection, a
+ * proxy in the way. It is the WRONG response to the server saying "stop": a
+ * 429 carries a Retry-After, and a 402 means the account's daily quota is
+ * spent, so every retry is a request that cannot succeed and is billed anyway.
+ * During the August 2026 quota incident each fresh install spent six requests
+ * per launch on exactly that, which made the outage worse the longer it ran.
  *
- *  1. the reduced anonymous limits (`TIER_LIMITS` in @buoy-gg/shared-ui), and
- *  2. the Weekend Pass requiring a claimed key (`hooks.ts` in this package).
+ * The rule: a 429 waits exactly as long as the server said (default 60 s if it
+ * said nothing); a 402 waits LICENSE_QUOTA_COOLDOWN. Either way the wait is
+ * persisted, so a dev reload or a relaunch inside the window makes no request
+ * at all, and one attempt runs when the window ends.
+ */
+export declare const LICENSE_RATE_LIMIT_DEFAULT_WAIT: number;
+export declare const LICENSE_QUOTA_COOLDOWN: number;
+/**
+ * A verdict is an answer, and answers don't change by relaunching.
  *
- * Shipping either one alone would be incoherent: withdrawing free weekend Pro
- * from people whose limits have not changed is a pure takeaway, and reducing
- * limits while still handing out Pro two days a week undercuts the reason to
- * claim a key at all.
+ * NOT_FOUND, SUSPENDED and BANNED clear the cache, so without this the next
+ * launch asks the exact same question, and a key that is dead in a shipped app
+ * costs one request per launch per device forever. The verdict is remembered
+ * for this long; a key typed in by hand always asks again.
+ */
+export declare const LICENSE_VERDICT_CACHE_DURATION: number;
+/**
+ * A key already attached to this many machines is running on a fleet, not a
+ * developer's desk. The device stops registering itself and stops
+ * revalidating: whatever the answer is, it will not change per phone. The
+ * count comes back in the validation response, so this costs nothing to know.
+ */
+export declare const LICENSE_FLEET_MACHINE_THRESHOLD = 50;
+/**
+ * Launch-time revalidation TTL for caches that have nothing to learn.
  *
- * DO NOT flip until `npx buoy login` is PUBLISHED and documented. There is no
- * grace period, so a user who wakes up with less needs a twenty-second way out
- * — and the CLI only exists for them once @buoy-gg/core ships with its bin.
+ * A free key cannot lose a tier it doesn't have, and outside a development
+ * bundle it cannot render anything either, so re-asking every hour (launch) or
+ * every day (timer) is pure quota spend. The same goes for a fleet member. The
+ * 30-day cache expiry is the only clock these caches keep. Pro keys and free
+ * keys on a developer's machine keep the short TTL: an upgrade or an expiry
+ * has to land.
  */
-export declare const ANONYMOUS_TIER_ENABLED = true;
+export declare const LICENSE_QUIET_VALIDATION_TTL: number;
+export declare const LICENSE_HOLD_STORAGE_KEY = "buoy-gg-license-hold";
 //# sourceMappingURL=config.d.ts.map

package/lib/typescript/commonjs/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;GAEG;AAEH,eAAO,MAAM,aAAa;;IAExB;;;;;;;;OAQG;;;;CAMK,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe;IAC1B,iEAAiE;;IAEjE,qEAAqE;;IAErE,oDAAoD;;CAE5C,CAAC;AAGX,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAI/D,eAAO,MAAM,6BAA6B,QAAsB,CAAC;AAIjE,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAMrD,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAM3E,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B,mDAMjC,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;GAEG;AAEH,eAAO,MAAM,aAAa;;IAExB;;;;;;;;OAQG;;IAEH;;;;;;;OAOG;;CAEK,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,qEAAqE,CAAC;AAExG;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe;IAC1B,iEAAiE;;IAEjE,qEAAqE;;IAErE,oDAAoD;;CAE5C,CAAC;AAGX,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAI/D,eAAO,MAAM,6BAA6B,QAAsB,CAAC;AAIjE,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAMrD,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAM3E,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B,mDAMjC,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,+BAA+B,QAAY,CAAC;AACzD,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,QAAsB,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAElD;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,QAAyB,CAAC;AAKnE,eAAO,MAAM,wBAAwB,yBAAyB,CAAC"}

package/lib/typescript/commonjs/device-info.d.ts

@@ -8,6 +8,22 @@
  * Generate a UUID v4
  */
 export declare function generateUUID(): string;
+/**
+ * Whether this bundle was served by Metro — i.e. we are on a developer's
+ * machine, or on a device/simulator tethered to one.
+ *
+ * This is the question the license package actually needs answered, and it
+ * is a better one than `__DEV__`. A store build, a TestFlight build and a CI
+ * artifact all load their JS from a file inside the app; only a dev server
+ * hands out `http://…/index.bundle`. Machine registration exists so a
+ * developer can see their devices on the dashboard, and revalidating a free
+ * key only matters where it can render — both are "on a developer's machine"
+ * questions, and both used to run on every phone an app shipped to.
+ *
+ * When the script URL is unavailable (tests, unusual hosts) fall back to
+ * `__DEV__`, which is right far more often than it is wrong.
+ */
+export declare function isDevBundle(): boolean;
 /**
  * Check if running on a simulator/emulator using Platform constants
  */

package/lib/typescript/commonjs/device-info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-info.d.ts","sourceRoot":"","sources":["../../../src/device-info.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAoCrC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuB1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C"}
+{"version":3,"file":"device-info.d.ts","sourceRoot":"","sources":["../../../src/device-info.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAarC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAoCrC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuB1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAI7C"}

package/lib/typescript/commonjs/device-info.web.d.ts

@@ -8,6 +8,13 @@
  * Generate a UUID v4
  */
 export declare function generateUUID(): string;
+/**
+ * Whether this is a development bundle. There is no Metro on the web side,
+ * so the build flag is the only signal. Electron hosts are always "dev" from
+ * the license package's point of view: the desktop app is the developer's
+ * own tool, never something shipped to end users.
+ */
+export declare function isDevBundle(): boolean;
 /**
  * Check if running on a simulator/emulator
  * Always returns false for web/Electron

package/lib/typescript/commonjs/device-info.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device-info.web.d.ts","sourceRoot":"","sources":["../../../src/device-info.web.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAYrC;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AA8HD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA6B1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAc7C"}
+{"version":3,"file":"device-info.web.d.ts","sourceRoot":"","sources":["../../../src/device-info.web.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAYrC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAQrC;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAErC;AA8HD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA6B1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAc7C"}

package/lib/typescript/commonjs/fingerprint.d.ts

@@ -4,5 +4,5 @@
  * The fingerprint is a generated UUID that is stored alongside the license.
  * It's created when the user registers their device and persists with the license data.
  */
-export { generateUUID, isSimulator, getDeviceMetadata, getDefaultDeviceName, } from "./device-info";
+export { generateUUID, isDevBundle, isSimulator, getDeviceMetadata, getDefaultDeviceName, } from "./device-info";
 //# sourceMappingURL=fingerprint.d.ts.map

package/lib/typescript/commonjs/fingerprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../src/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../src/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,eAAe,CAAC"}

package/lib/typescript/commonjs/fingerprint.web.d.ts

@@ -4,5 +4,5 @@
  * The fingerprint is a generated UUID that is stored alongside the license.
  * It's created when the user registers their device and persists with the license data.
  */
-export { generateUUID, isSimulator, getDeviceMetadata, getDefaultDeviceName, } from "./device-info.web";
+export { generateUUID, isDevBundle, isSimulator, getDeviceMetadata, getDefaultDeviceName, } from "./device-info.web";
 //# sourceMappingURL=fingerprint.web.d.ts.map

package/lib/typescript/commonjs/fingerprint.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fingerprint.web.d.ts","sourceRoot":"","sources":["../../../src/fingerprint.web.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"fingerprint.web.d.ts","sourceRoot":"","sources":["../../../src/fingerprint.web.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/lib/typescript/commonjs/foreground.d.ts

@@ -0,0 +1,3 @@
+/** The native host wakes timers on resume; also recheck before rendering tools. */
+export declare function subscribeForeground(refresh: () => void): () => void;
+//# sourceMappingURL=foreground.d.ts.map

package/lib/typescript/commonjs/foreground.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../../src/foreground.ts"],"names":[],"mappings":"AACA,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAGnE"}

package/lib/typescript/commonjs/foreground.web.d.ts

@@ -0,0 +1,2 @@
+export declare function subscribeForeground(refresh: () => void): () => void;
+//# sourceMappingURL=foreground.web.d.ts.map

package/lib/typescript/commonjs/foreground.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground.web.d.ts","sourceRoot":"","sources":["../../../src/foreground.web.ts"],"names":[],"mappings":"AAAA,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAMnE"}

package/lib/typescript/commonjs/freeToken.d.ts

@@ -0,0 +1,34 @@
+/*!
+ * PROPRIETARY — Buoy Pro license enforcement. NOT open source.
+ *
+ * Copyright (c) Buoy. All rights reserved. Licensed under the Buoy EULA
+ * (https://buoy.gg/terms), not an OSS license.
+ */
+export declare const FREE_TOKEN_PREFIX = "BUOY1";
+export interface FreeTokenClaims {
+    tier: "free";
+    /** When the token was issued, ms since epoch. */
+    issuedAt: number;
+    /** Hex of the 16-byte account hash. */
+    accountHash: string;
+}
+/** Whether a key is a Buoy token rather than a Keygen license key. */
+export declare function isBuoyToken(key: string): boolean;
+/** First 16 bytes of sha512(account id): what the token carries instead of an email. */
+export declare function accountHashFor(accountId: string): Uint8Array;
+/**
+ * Issue a token. Server-side only: needs the private key (the 32-byte seed,
+ * hex). Deterministic for a given (account, issuedAt), so an account always
+ * sees the same token.
+ */
+export declare function mintFreeToken(accountId: string, issuedAtMs: number, privateKeyHex: string): string;
+/** The public key for a private seed, hex. Used by tests and the keypair script. */
+export declare function publicKeyFor(privateKeyHex: string): string;
+/** @internal test seam — only free-tier claims ride on this key. */
+export declare function __setFreeTokenPublicKeyForTests(hex: string | null): void;
+/**
+ * Verify a token offline. Null for anything that is not a token this public
+ * key signed: wrong format, wrong version, wrong tier code, bad signature.
+ */
+export declare function verifyFreeToken(key: string, publicKeyHex?: string): FreeTokenClaims | null;
+//# sourceMappingURL=freeToken.d.ts.map

package/lib/typescript/commonjs/freeToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeToken.d.ts","sourceRoot":"","sources":["../../../src/freeToken.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmCH,eAAO,MAAM,iBAAiB,UAAU,CAAC;AASzC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEhD;AAqED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAE5D;AAeD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,MAAM,CAKR;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE1D;AAKD,oEAAoE;AACpE,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAExE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,GAAE,MAAwB,GAAG,eAAe,GAAG,IAAI,CAe3G"}

package/lib/typescript/commonjs/headless.d.ts

@@ -0,0 +1,10 @@
+/** Platform-neutral licensing policy. Safe to import from plain Node. */
+export { validateLicense, isAcceptedValidation, isTransientLicenseError, LicenseTransportError } from "./api";
+export { resolveTier, isRecognizedAccount } from "./tier";
+export { isBuoyToken, verifyFreeToken, mintFreeToken, accountHashFor, publicKeyFor, __setFreeTokenPublicKeyForTests } from "./freeToken";
+export type { FreeTokenClaims } from "./freeToken";
+export { resolveAccountAccess } from "./accountAccess";
+export { signCache, verifyCacheSignature } from "./cacheSignature";
+export { LICENSE_CACHE_DURATION, LICENSE_REVALIDATION_INTERVAL, LICENSE_LAUNCH_VALIDATION_TTL, LICENSE_TRANSIENT_RETRY_DELAYS, KEYGEN_CONFIG } from "./config";
+export type { CachedLicense, BuoyTier, KeygenValidationResponse } from "./types";
+//# sourceMappingURL=headless.d.ts.map

package/lib/typescript/commonjs/headless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless.d.ts","sourceRoot":"","sources":["../../../src/headless.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAC9G,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AACzI,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC/J,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC"}

package/lib/typescript/commonjs/hooks.d.ts

@@ -15,6 +15,7 @@
  * including a free one (`npx buoy login`). Buy a key at
  * https://buoy.gg or use it free on Saturday and Sunday.
  */
+import { LicenseManager } from "./LicenseManager";
 import type { BuoyTier, LicenseState } from "./types";
 /**
  * Why the user currently has Pro access:
@@ -38,21 +39,24 @@ export type ProAccessReason = "licensed" | "weekend" | null;
  * ```
  */
 export declare function useLicense(): LicenseState & {
+    access: ReturnType<typeof LicenseManager.getAccountAccess>;
     /** Validate and set a license key */
     setLicenseKey: (key: string) => Promise<boolean>;
     /** Clear the current license */
     clearLicense: () => Promise<void>;
 };
+export declare function useAccountAccess(): import("./accountAccess").AccountAccess;
 /**
- * The current access tier: "anonymous" | "free" | "pro".
+ * The current tier: "free" | "pro".
  *
  * This is the value tier-aware limits should read. It reports the tier the
  * user's *credential* grants and deliberately ignores the Weekend Pass — a
  * weekend unlock is temporary Pro *access*, not a change of tier, and callers
  * that care about access should compose this with `useIsPro()`.
  *
- * Returns "anonymous" until the manager has finished initializing, which
- * matches how `useIsPro()` reports false over the same window.
+ * Returns "free" until the manager has finished initializing, which matches
+ * how `useIsPro()` reports false over the same window. Whether the tools are
+ * usable at all is `useAccountAccess()`, not this.
  */
 export declare function useTier(): BuoyTier;
 /**

package/lib/typescript/commonjs/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../src/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAYH,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAgB,MAAM,SAAS,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,IAAI,YAAY,GAAG;IAC3C,qCAAqC;IACrC,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gCAAgC;IAChC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC,CAmCA;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,IAAI,QAAQ,CAGlC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB,CAWA;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CAKlC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI;IAC9B,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;IACpB,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;CACzB,CAaA"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../src/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAgB,MAAM,SAAS,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,IAAI,YAAY,GAAG;IAC3C,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAC3D,qCAAqC;IACrC,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gCAAgC;IAChC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC,CAmCA;AAED,wBAAgB,gBAAgB,4CAAkC;AAElE;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,IAAI,QAAQ,CAGlC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB,CAWA;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,IAAI,OAAO,CAQlC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI;IAC9B,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;IACf,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;IACpB,2CAA2C;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;CACzB,CAcA"}

package/lib/typescript/commonjs/index.d.ts

@@ -30,8 +30,10 @@ export type { DeviceRegistrationInfo, DeviceRegistrationCallback, } from "./Lice
 export { DeviceRegistrationModal } from "./DeviceRegistrationModal";
 export { useLicense, useFeatureAccess, useIsPro, useProAccess, useTier } from "./hooks";
 export type { ProAccessReason } from "./hooks";
-export { ANONYMOUS_TIER_ENABLED } from "./config";
+export { useAccountAccess } from "./hooks";
+export { resolveAccountAccess, type AccountAccess } from "./accountAccess";
 export { LicenseTransportError, isTransientLicenseError } from "./api";
+export { isBuoyToken } from "./freeToken";
 export { isWeekendFreePro, useWeekendFreePro } from "./weekendPro";
 export type { BuoyTier, TierSource, LicenseState, LicenseEvent, LicenseListener, LicenseValidationResult, CachedLicense, } from "./types";
 export declare function setLicenseKey(key: string): Promise<boolean>;

package/lib/typescript/commonjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;GAQG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EACV,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACxF,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAIlD,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGnE,YAAY,EACV,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAIjE;AAaD,wBAAgB,KAAK,IAAI,OAAO,CAI/B;AAGD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIpD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;GAQG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EACV,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACxF,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAI3E,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,OAAO,CAAC;AAGvE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGnE,YAAY,EACV,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAIjE;AAaD,wBAAgB,KAAK,IAAI,OAAO,CAI/B;AAGD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIpD"}