@corelicense/node 0.2.0

package/README.md

@@ -0,0 +1,126 @@
+# @corelicense/node
+
+CoreLicense Node.js SDK — runtime license và policy layer cho ứng dụng Node.js.
+
+> **Trạng thái:** v0.2 — auto-fetch public key, offline grace, key rotation retry.
+
+## Triết lý
+
+CoreLicense không chỉ là middleware. SDK được thiết kế như một **Runtime Layer** nằm sâu trong bootstrap, runtime config, module registry, service guard, worker/CLI guard và quota enforcement.
+
+## Cài đặt
+
+```bash
+npm install @corelicense/node
+```
+
+Peer dependencies tùy chọn (chỉ cài khi dùng integration tương ứng):
+
+```bash
+npm install express          # Express middleware
+npm install fastify          # Fastify plugin
+npm install @nestjs/common     # NestJS module/guard
+```
+
+## Quick start
+
+Chỉ cần **2 biến môi trường** — license key mới (CL1.*) đã nhúng domain license server:
+
+```env
+CORELICENSE_KEY=CL1.xxxxx.CL-AAAAA-BBBBB-...
+CORELICENSE_PRODUCT_ID=demo
+```
+
+`CORELICENSE_PUBLIC_KEY` **optional** — pin public key (enterprise / air-gapped).
+`CORELICENSE_API_URL` **optional** — override thủ công (legacy key hoặc dev).
+
+```ts
+import express from 'express';
+import { CoreLicense, loadOptionsFromEnv } from '@corelicense/node';
+
+const app = express();
+
+const license = new CoreLicense(loadOptionsFromEnv({
+  cachePath: './storage/corelicense',
+  instance: {
+    strategy: 'install-id-domain-hash',
+    domain: process.env.APP_DOMAIN,
+  },
+}));
+
+async function main() {
+  await license.boot();
+
+  app.use(license.express({
+    allowPaths: ['/health', '/license/status'],
+  }));
+
+  app.get('/license/status', async (_req, res) => {
+    res.json(await license.getStatus());
+  });
+
+  app.listen(3000);
+}
+
+main().catch(console.error);
+```
+
+### Pin public key (optional)
+
+```ts
+const license = new CoreLicense(loadOptionsFromEnv({
+  publicKey: process.env.CORELICENSE_PUBLIC_KEY, // pinned mode
+}));
+```
+
+Khi pin, SDK không fetch keys từ server. Nếu verify fail sau key rotation, cập nhật `CORELICENSE_PUBLIC_KEY` thủ công.
+
+## Public API
+
+| Method | Mô tả |
+|--------|-------|
+| `boot()` | Khởi tạo SDK, fetch/cache public keys, load cache, verify token |
+| `refresh()` | Refresh policy token từ server |
+| `requireActive()` | Yêu cầu license active |
+| `requireFeature(name)` | Kiểm tra feature flag |
+| `checkLimit(name, value)` | Kiểm tra limit |
+| `consumeQuota(name, amount?)` | Tiêu thụ quota local |
+| `getStatus()` | Trạng thái license hiện tại |
+| `getPolicy()` | Policy đang active |
+| `getRuntimeConfig()` | Runtime config cho app bootstrap |
+| `express(options?)` | Express middleware |
+| `fastifyPlugin(options?)` | Fastify plugin |
+| `guardWorker(name)` | Guard worker |
+| `guardCommand(name)` | Guard CLI/cron command |
+
+## Cấu trúc module
+
+```txt
+src/
+  core-license.ts       # Class chính
+  types/                # TypeScript interfaces
+  errors/               # Error hierarchy
+  crypto/               # Policy token verification + public key resolver
+  client/               # License API + public keys client
+  cache/                # File/memory cache
+  instance/             # Instance ID resolution
+  guards/               # Express, Fastify, NestJS, worker, CLI
+  runtime/              # Runtime config, module registry, DI container
+  audit/                # Local audit log
+  events/               # Event bus
+```
+
+## Tài liệu thiết kế
+
+Xem [CoreLicense Node.js SDK — Tài liệu thiết kế & tích hợp sâu](../../docs/CoreLicense_NodeJS_SDK_Deep_Integration.md).
+
+## Roadmap
+
+- **v0.1** — Types, errors, boot, express middleware, file cache, local audit
+- **v0.2** — Auto-fetch public keys, key rotation retry, worker/CLI guard, offline grace
+- **v0.3** — Fastify, NestJS, module registry helper, quota usage
+- **v1.0** — Stable API, production-ready, security review
+
+## License
+
+MIT

package/dist/audit/local-audit.d.ts

@@ -0,0 +1,22 @@
+export interface AuditEntry {
+    time: string;
+    event: string;
+    status?: string;
+    policyVersion?: string;
+    feature?: string;
+    quotaName?: string;
+    amount?: number;
+    total?: number;
+    offline?: boolean;
+    message?: string;
+}
+export interface LocalAuditOptions {
+    enabled?: boolean;
+    path?: string;
+}
+export declare class LocalAudit {
+    private readonly options;
+    constructor(options: LocalAuditOptions);
+    log(entry: Pick<AuditEntry, 'event'> & Partial<Omit<AuditEntry, 'time' | 'event'>>): Promise<void>;
+}
+//# sourceMappingURL=local-audit.d.ts.map

package/dist/audit/local-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-audit.d.ts","sourceRoot":"","sources":["../../src/audit/local-audit.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,iBAAiB;IAEjD,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAczG"}

package/dist/audit/local-audit.js

@@ -0,0 +1,21 @@
+import { appendFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+export class LocalAudit {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async log(entry) {
+        if (this.options.enabled === false) {
+            return;
+        }
+        const path = this.options.path ?? './storage/logs/corelicense.log';
+        const record = {
+            time: new Date().toISOString(),
+            ...entry,
+        };
+        await mkdir(dirname(path), { recursive: true });
+        await appendFile(path, `${JSON.stringify(record)}\n`, 'utf8');
+    }
+}
+//# sourceMappingURL=local-audit.js.map

package/dist/audit/local-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-audit.js","sourceRoot":"","sources":["../../src/audit/local-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D,KAAK,CAAC,GAAG,CAAC,KAA8E;QACtF,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,gCAAgC,CAAC;QACnE,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,GAAG,KAAK;SACT,CAAC;QAEF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/cache/cache-store.d.ts

@@ -0,0 +1,8 @@
+export type CacheKey = 'policy.token' | 'instance.json' | 'runtime.json' | 'usage.json' | 'public.keys.json' | 'sdk.endpoint.json';
+export interface CacheStore {
+    get<T>(key: CacheKey): Promise<T | null>;
+    set<T>(key: CacheKey, value: T): Promise<void>;
+    delete(key: CacheKey): Promise<void>;
+    has(key: CacheKey): Promise<boolean>;
+}
+//# sourceMappingURL=cache-store.d.ts.map

package/dist/cache/cache-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-store.d.ts","sourceRoot":"","sources":["../../src/cache/cache-store.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAChB,cAAc,GACd,eAAe,GACf,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,mBAAmB,CAAC;AAExB,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtC"}

package/dist/cache/cache-store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cache-store.js.map

package/dist/cache/cache-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-store.js","sourceRoot":"","sources":["../../src/cache/cache-store.ts"],"names":[],"mappings":""}

package/dist/cache/file-cache-store.d.ts

@@ -0,0 +1,12 @@
+import type { CacheKey, CacheStore } from './cache-store.js';
+export declare class FileCacheStore implements CacheStore {
+    private readonly basePath;
+    constructor(basePath: string);
+    private resolvePath;
+    private ensureDir;
+    get<T>(key: CacheKey): Promise<T | null>;
+    set<T>(key: CacheKey, value: T): Promise<void>;
+    delete(key: CacheKey): Promise<void>;
+    has(key: CacheKey): Promise<boolean>;
+}
+//# sourceMappingURL=file-cache-store.d.ts.map

package/dist/cache/file-cache-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-cache-store.d.ts","sourceRoot":"","sources":["../../src/cache/file-cache-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW7D,qBAAa,cAAe,YAAW,UAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C,OAAO,CAAC,WAAW;YAIL,SAAS;IAIjB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAgBxC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9C,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAU3C"}

package/dist/cache/file-cache-store.js

@@ -0,0 +1,64 @@
+import { mkdir, readFile, writeFile, unlink, access } from 'node:fs/promises';
+import { join } from 'node:path';
+const KEY_TO_FILENAME = {
+    'policy.token': 'policy.token',
+    'instance.json': 'instance.json',
+    'runtime.json': 'runtime.json',
+    'usage.json': 'usage.json',
+    'public.keys.json': 'public.keys.json',
+    'sdk.endpoint.json': 'sdk.endpoint.json',
+};
+export class FileCacheStore {
+    basePath;
+    constructor(basePath) {
+        this.basePath = basePath;
+    }
+    resolvePath(key) {
+        return join(this.basePath, KEY_TO_FILENAME[key]);
+    }
+    async ensureDir() {
+        await mkdir(this.basePath, { recursive: true });
+    }
+    async get(key) {
+        const filePath = this.resolvePath(key);
+        try {
+            const raw = await readFile(filePath, 'utf8');
+            if (key === 'policy.token') {
+                return raw;
+            }
+            return JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+    async set(key, value) {
+        await this.ensureDir();
+        const filePath = this.resolvePath(key);
+        if (key === 'policy.token') {
+            await writeFile(filePath, String(value), 'utf8');
+            return;
+        }
+        await writeFile(filePath, JSON.stringify(value, null, 2), 'utf8');
+    }
+    async delete(key) {
+        const filePath = this.resolvePath(key);
+        try {
+            await unlink(filePath);
+        }
+        catch {
+            // ignore missing file
+        }
+    }
+    async has(key) {
+        const filePath = this.resolvePath(key);
+        try {
+            await access(filePath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=file-cache-store.js.map

package/dist/cache/file-cache-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-cache-store.js","sourceRoot":"","sources":["../../src/cache/file-cache-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,eAAe,GAA6B;IAChD,cAAc,EAAE,cAAc;IAC9B,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,cAAc;IAC9B,YAAY,EAAE,YAAY;IAC1B,kBAAkB,EAAE,kBAAkB;IACtC,mBAAmB,EAAE,mBAAmB;CACzC,CAAC;AAEF,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEzC,WAAW,CAAC,GAAa;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAa;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAE7C,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;gBAC3B,OAAO,GAAQ,CAAC;YAClB,CAAC;YAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAa,EAAE,KAAQ;QAClC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAa;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAa;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/cache/memory-cache-store.d.ts

@@ -0,0 +1,9 @@
+import type { CacheKey, CacheStore } from './cache-store.js';
+export declare class MemoryCacheStore implements CacheStore {
+    private readonly store;
+    get<T>(key: CacheKey): Promise<T | null>;
+    set<T>(key: CacheKey, value: T): Promise<void>;
+    delete(key: CacheKey): Promise<void>;
+    has(key: CacheKey): Promise<boolean>;
+}
+//# sourceMappingURL=memory-cache-store.d.ts.map

package/dist/cache/memory-cache-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-cache-store.d.ts","sourceRoot":"","sources":["../../src/cache/memory-cache-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE7D,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEhD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAKxC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;CAG3C"}

package/dist/cache/memory-cache-store.js

@@ -0,0 +1,17 @@
+export class MemoryCacheStore {
+    store = new Map();
+    async get(key) {
+        const value = this.store.get(key);
+        return value !== undefined ? value : null;
+    }
+    async set(key, value) {
+        this.store.set(key, value);
+    }
+    async delete(key) {
+        this.store.delete(key);
+    }
+    async has(key) {
+        return this.store.has(key);
+    }
+}
+//# sourceMappingURL=memory-cache-store.js.map

package/dist/cache/memory-cache-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-cache-store.js","sourceRoot":"","sources":["../../src/cache/memory-cache-store.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,gBAAgB;IACV,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEtD,KAAK,CAAC,GAAG,CAAI,GAAa;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAa,EAAE,KAAQ;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAa;QACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAa;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/client/license-api-client.d.ts

@@ -0,0 +1,14 @@
+import type { LicenseCheckRequest, LicenseCheckResponse } from '../types/options.js';
+export interface LicenseApiClientOptions {
+    apiUrl: string;
+    requestTimeoutMs?: number;
+}
+export declare class LicenseApiClient {
+    private readonly options;
+    constructor(options: LicenseApiClientOptions);
+    activate(request: LicenseCheckRequest): Promise<LicenseCheckResponse>;
+    check(request: LicenseCheckRequest): Promise<LicenseCheckResponse>;
+    refresh(request: LicenseCheckRequest): Promise<LicenseCheckResponse>;
+    private post;
+}
+//# sourceMappingURL=license-api-client.d.ts.map

package/dist/client/license-api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-api-client.d.ts","sourceRoot":"","sources":["../../src/client/license-api-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAErF,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,uBAAuB;IAEvD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIrE,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIlE,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAI5D,IAAI;CA4BnB"}

package/dist/client/license-api-client.js

@@ -0,0 +1,36 @@
+export class LicenseApiClient {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async activate(request) {
+        return this.post('/v1/client/activate', request);
+    }
+    async check(request) {
+        return this.post('/v1/client/check', request);
+    }
+    async refresh(request) {
+        return this.post('/v1/client/refresh', request);
+    }
+    async post(path, body) {
+        const url = new URL(path, this.options.apiUrl);
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.options.requestTimeoutMs ?? 5000);
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`License API error: ${response.status} ${response.statusText}`);
+            }
+            return (await response.json());
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+//# sourceMappingURL=license-api-client.js.map

package/dist/client/license-api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-api-client.js","sourceRoot":"","sources":["../../src/client/license-api-client.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;IAAG,CAAC;IAEjE,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAA4B;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA4B;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,IAAyB;QAEzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CACtC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAClF,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/client/public-keys-client.d.ts

@@ -0,0 +1,11 @@
+import type { ProductKeysResponse } from '../types/public-keys.js';
+export interface PublicKeysClientOptions {
+    apiUrl: string;
+    requestTimeoutMs?: number;
+}
+export declare class PublicKeysClient {
+    private readonly options;
+    constructor(options: PublicKeysClientOptions);
+    fetchProductKeys(productId: string): Promise<ProductKeysResponse>;
+}
+//# sourceMappingURL=public-keys-client.d.ts.map

package/dist/client/public-keys-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-keys-client.d.ts","sourceRoot":"","sources":["../../src/client/public-keys-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,uBAAuB;IAEvD,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA8BxE"}

package/dist/client/public-keys-client.js

@@ -0,0 +1,31 @@
+export class PublicKeysClient {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async fetchProductKeys(productId) {
+        const path = `/v1/public/products/${encodeURIComponent(productId)}/keys`;
+        const url = new URL(path, this.options.apiUrl);
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.options.requestTimeoutMs ?? 5000);
+        try {
+            const response = await fetch(url, {
+                method: 'GET',
+                headers: { Accept: 'application/json' },
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`Public keys API error: ${response.status} ${response.statusText}`);
+            }
+            const data = (await response.json());
+            if (!data.keys?.length) {
+                throw new Error('Public keys API returned no keys');
+            }
+            return data;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+//# sourceMappingURL=public-keys-client.js.map

package/dist/client/public-keys-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-keys-client.js","sourceRoot":"","sources":["../../src/client/public-keys-client.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;IAAG,CAAC;IAEjE,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,IAAI,GAAG,uBAAuB,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CACtC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/core-license.d.ts

@@ -0,0 +1,56 @@
+import type { RequestHandler } from 'express';
+import type { FastifyPluginAsync } from 'fastify';
+import type { CoreLicenseEvent, CoreLicenseEventHandler, CoreLicenseOptions, ExpressGuardOptions, FastifyGuardOptions } from './types/options.js';
+import type { Policy } from './types/policy.js';
+import type { RuntimeConfig } from './types/runtime.js';
+import type { LicenseStatus } from './types/status.js';
+export declare class CoreLicense {
+    private options;
+    private readonly cache;
+    private apiClient;
+    private publicKeyResolver;
+    private readonly audit;
+    private readonly events;
+    private readonly installIdStore;
+    private instanceId;
+    private resolvedProductId;
+    private policy;
+    private runtimeConfig;
+    private backgroundTimer;
+    private booted;
+    constructor(options: CoreLicenseOptions);
+    boot(): Promise<void>;
+    refresh(): Promise<LicenseStatus>;
+    requireActive(): Promise<void>;
+    requireFeature(feature: string): Promise<void>;
+    checkLimit(limitName: string, currentValue: number): Promise<void>;
+    consumeQuota(quotaName: string, amount?: number): Promise<void>;
+    getStatus(): Promise<LicenseStatus>;
+    getPolicy(): Promise<Policy>;
+    getRuntimeConfig(): Promise<RuntimeConfig>;
+    express(options?: ExpressGuardOptions): RequestHandler;
+    fastifyPlugin(options?: FastifyGuardOptions): FastifyPluginAsync;
+    guardWorker(name: string): Promise<void>;
+    guardCommand(name: string): Promise<void>;
+    startBackgroundCheck(): void;
+    stopBackgroundCheck(): void;
+    on<E extends CoreLicenseEvent>(event: E, handler: CoreLicenseEventHandler): void;
+    private ensureBooted;
+    private resolveStatus;
+    private shouldRefreshToken;
+    private refreshFromServer;
+    private handleOfflineFallback;
+    private applyPolicyToken;
+    private verifyTokenWithResolver;
+    private verifyWithResolvedKeys;
+    private validatePolicyBinding;
+    private buildCheckRequest;
+    private getUsage;
+    private runBackgroundRefresh;
+    private createApiClient;
+    private createPublicKeyResolver;
+    private ensureApiEndpoint;
+    private persistApiUrlFromResponse;
+    private setApiUrl;
+}
+//# sourceMappingURL=core-license.d.ts.map

package/dist/core-license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-license.d.ts","sourceRoot":"","sources":["../src/core-license.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA+BlD,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAsB,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAMvD,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAG2B;IAE1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IAEpD,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,EAAE,kBAAkB;IAwBjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8CrB,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;IAKjC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB9B,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1D,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAKnC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAU5B,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAUhD,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,cAAc;IAItD,aAAa,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,kBAAkB;IAI1D,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/C,oBAAoB,IAAI,IAAI;IAc5B,mBAAmB,IAAI,IAAI;IAO3B,EAAE,CAAC,CAAC,SAAS,gBAAgB,EAC3B,KAAK,EAAE,CAAC,EACR,OAAO,EAAE,uBAAuB,GAC/B,IAAI;IAIP,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,kBAAkB;YAUZ,iBAAiB;YAuBjB,qBAAqB;YAgBrB,gBAAgB;YA0ChB,uBAAuB;YAmBvB,sBAAsB;IASpC,OAAO,CAAC,qBAAqB;YAcf,iBAAiB;YAmBjB,QAAQ;YAaR,oBAAoB;IAWlC,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,uBAAuB;YAajB,iBAAiB;YASjB,yBAAyB;IAavC,OAAO,CAAC,SAAS;CAKlB"}