@curless/hotel-storefront 0.55.7 → 0.56.0

package/dist/account/store.d.ts

@@ -0,0 +1,67 @@
+import { type MallMember, type MallTokens } from './mall.js';
+/** A sign-in untouched this long is forgotten (the members' rule, members.ts). */
+export declare const ACCOUNT_IDLE_MS: number;
+/** What of the member is shown - on the card, on the page, and (name only) to the assistant. */
+export type AccountShown = {
+    id: string;
+    userName?: string;
+    /** The name the account goes by - its nickname, '' where it has none (never the user name). */
+    displayName: string;
+    /** Their real name, where the mall has one. */
+    name?: string;
+    email?: string;
+    mobile?: string;
+};
+export declare const shownOf: (m: MallMember) => AccountShown;
+export type SignedIn = {
+    /** This sign-in, and no other: a web session names it, and dies with it. */
+    sid: string;
+    shown: AccountShown;
+    tokens: MallTokens;
+    signedInAt: number;
+    /** Last asked of the mall whether these tokens are still theirs. */
+    checkedAt: number;
+    at: number;
+};
+export declare class AccountStore {
+    private readonly now;
+    /** A sign-in forgotten here - left too long, or past its tokens: ended at the mall too. */
+    private readonly gone;
+    private readonly max;
+    private readonly byKey;
+    constructor(now?: () => number, 
+    /** A sign-in forgotten here - left too long, or past its tokens: ended at the mall too. */
+    gone?: (s: SignedIn) => void, max?: number);
+    get(key: string): SignedIn | undefined;
+    /**
+     * Signed in now: a new sign-in, whatever was there before - or null.
+     * ⚠️ A FULL TABLE NEVER PUSHES OUT A LIVE SIGN-IN (review P3-3): the lapsed go
+     * first (`sweep`); with only live ones left, the new one is refused.
+     */
+    set(key: string, member: MallMember, tokens: MallTokens): SignedIn | null;
+    /** Signed out: what was kept for this conversation goes. Answers what it was. */
+    clear(key: string): SignedIn | undefined;
+    get size(): number;
+    private sweep;
+}
+export declare const WEB_IDLE_MS: number;
+export type WebSession = {
+    key: string;
+    sid: string;
+    csrf: string;
+    last: number;
+    flash?: string;
+};
+export declare class WebSessions {
+    private readonly now;
+    private readonly max;
+    private readonly m;
+    constructor(now?: () => number, max?: number);
+    open(key: string, sid: string): string | null;
+    get(id: string | null | undefined): WebSession | null;
+    drop(id: string | null | undefined): void;
+    /** Every page open on this sign-in - signed out, they all go. */
+    dropFor(sid: string): void;
+    get size(): number;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/account/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/account/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAyB,MAAM,WAAW,CAAC;AAapF,kFAAkF;AAClF,eAAO,MAAM,eAAe,QAAkB,CAAC;AAG/C,gGAAgG;AAChG,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,GAAG,UAAU,KAAG,YAavC,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,2FAA2F;IAC3F,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;gBAGlC,GAAG,GAAE,MAAM,MAAyB;IACrD,2FAA2F;IAC1E,IAAI,GAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAe,EACtC,GAAG,SAAe;IAGrC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAUtC;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI;IAgBzE,iFAAiF;IACjF,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAMxC,IAAI,IAAI,IAAI,MAAM,CAGjB;IAED,OAAO,CAAC,KAAK;CAcd;AAUD,eAAO,MAAM,WAAW,QAAc,CAAC;AAEvC,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAiC;gBAGhC,GAAG,GAAE,MAAM,MAAyB,EACpC,GAAG,SAAQ;IAG9B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAS7C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI;IAarD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAIzC,iEAAiE;IACjE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI1B,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/account/store.js

@@ -0,0 +1,151 @@
+import { maskEmail, maskMobile } from './mall.js';
+import { CODE, hashOf, secret } from './requests.js';
+// Who is signed in to their Otaless account, by conversation - and the web
+// sessions of the account page.
+//
+// ⚠️ IN MEMORY ONLY. The mall's tokens are a credential: they are never
+// written to disk, never put in an answer, a URL or a log. A restart signs
+// everybody out, and the card says so the next time it asks.
+//
+// ⚠️ NO EMAIL OR PHONE IS KEPT WHOLE. The page and the card show them masked
+// (`maskEmail` / `maskMobile`); the masked form is all that is kept.
+/** A sign-in untouched this long is forgotten (the members' rule, members.ts). */
+export const ACCOUNT_IDLE_MS = 2 * 60 * 60_000;
+const MAX_ACCOUNTS = 5_000;
+export const shownOf = (m) => {
+    const email = maskEmail(m.email);
+    const mobile = maskMobile(m.mobile);
+    return {
+        id: m.id,
+        ...(m.userName ? { userName: m.userName } : {}),
+        // ⚠️ THE NICKNAME, OR NOTHING (review P2-2): a nickname the mall filled in
+        // with the user name is the user name, which signs in.
+        displayName: m.nickname && m.nickname !== m.userName ? m.nickname : '',
+        ...(m.name ? { name: m.name } : {}),
+        ...(email ? { email } : {}),
+        ...(mobile ? { mobile } : {}),
+    };
+};
+export class AccountStore {
+    now;
+    gone;
+    max;
+    byKey = new Map();
+    constructor(now = () => Date.now(), 
+    /** A sign-in forgotten here - left too long, or past its tokens: ended at the mall too. */
+    gone = () => { }, max = MAX_ACCOUNTS) {
+        this.now = now;
+        this.gone = gone;
+        this.max = max;
+    }
+    get(key) {
+        this.sweep();
+        const s = this.byKey.get(key);
+        if (!s)
+            return undefined;
+        s.at = this.now();
+        this.byKey.delete(key);
+        this.byKey.set(key, s);
+        return s;
+    }
+    /**
+     * Signed in now: a new sign-in, whatever was there before - or null.
+     * ⚠️ A FULL TABLE NEVER PUSHES OUT A LIVE SIGN-IN (review P3-3): the lapsed go
+     * first (`sweep`); with only live ones left, the new one is refused.
+     */
+    set(key, member, tokens) {
+        this.sweep();
+        if (!this.byKey.has(key) && this.byKey.size >= this.max)
+            return null;
+        const s = {
+            sid: secret(),
+            shown: shownOf(member),
+            tokens,
+            signedInAt: this.now(),
+            checkedAt: this.now(),
+            at: this.now(),
+        };
+        this.byKey.delete(key);
+        this.byKey.set(key, s);
+        return s;
+    }
+    /** Signed out: what was kept for this conversation goes. Answers what it was. */
+    clear(key) {
+        const s = this.byKey.get(key);
+        this.byKey.delete(key);
+        return s;
+    }
+    get size() {
+        this.sweep();
+        return this.byKey.size;
+    }
+    sweep() {
+        const t = this.now();
+        for (const [k, s] of this.byKey) {
+            // Untouched too long, or its tokens past renewing: gone.
+            const lapsed = t - s.at > ACCOUNT_IDLE_MS ||
+                (s.tokens.accessExpires < t &&
+                    (!s.tokens.refresh || (s.tokens.refreshExpires ?? Number.POSITIVE_INFINITY) < t));
+            if (lapsed) {
+                this.byKey.delete(k);
+                this.gone(s);
+            }
+        }
+    }
+}
+// ── The account page's web sessions ─────────────────────────────────────────
+// A 256-bit random id in an HttpOnly, Secure, SameSite=Strict cookie with the
+// __Host- prefix, set only on the browser that signed in on our page; its hash
+// names the session here. 30 minutes from its last use; gone with the sign-in
+// it was opened for (another sign-in, or a sign-out anywhere), and when the
+// guest leaves the page. Full: the idle ones go first; with none idle, a new
+// one is refused rather than another guest's ended (Nexva's review).
+export const WEB_IDLE_MS = 30 * 60_000;
+export class WebSessions {
+    now;
+    max;
+    m = new Map();
+    constructor(now = () => Date.now(), max = 5_000) {
+        this.now = now;
+        this.max = max;
+    }
+    open(key, sid) {
+        if (this.m.size >= this.max)
+            for (const [k, s] of [...this.m])
+                if (this.now() - s.last > WEB_IDLE_MS)
+                    this.m.delete(k);
+        if (this.m.size >= this.max)
+            return null;
+        const id = secret();
+        this.m.set(hashOf(id), { key, sid, csrf: secret(), last: this.now() });
+        return id;
+    }
+    get(id) {
+        if (!id || !CODE.test(id))
+            return null;
+        const k = hashOf(id);
+        const s = this.m.get(k);
+        if (!s)
+            return null;
+        if (this.now() - s.last > WEB_IDLE_MS) {
+            this.m.delete(k);
+            return null;
+        }
+        s.last = this.now();
+        return s;
+    }
+    drop(id) {
+        if (id)
+            this.m.delete(hashOf(id));
+    }
+    /** Every page open on this sign-in - signed out, they all go. */
+    dropFor(sid) {
+        for (const [k, s] of [...this.m])
+            if (s.sid === sid)
+                this.m.delete(k);
+    }
+    get size() {
+        return this.m.size;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/account/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/account/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAErD,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AAErE,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AAC/C,MAAM,YAAY,GAAG,KAAK,CAAC;AAc3B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAa,EAAgB,EAAE;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,uDAAuD;QACvD,WAAW,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;QACtE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC,CAAC;AAaF,MAAM,OAAO,YAAY;IAIJ;IAEA;IACA;IANF,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAErD,YACmB,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrD,2FAA2F;IAC1E,OAA8B,GAAG,EAAE,GAAE,CAAC,EACtC,MAAM,YAAY;QAHlB,QAAG,GAAH,GAAG,CAAiC;QAEpC,SAAI,GAAJ,IAAI,CAAkC;QACtC,QAAG,GAAH,GAAG,CAAe;IAClC,CAAC;IAEJ,GAAG,CAAC,GAAW;QACb,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,GAAW,EAAE,MAAkB,EAAE,MAAkB;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACrE,MAAM,CAAC,GAAa;YAClB,GAAG,EAAE,MAAM,EAAE;YACb,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;SACf,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,GAAW;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAEO,KAAK;QACX,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,yDAAyD;YACzD,MAAM,MAAM,GACV,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,eAAe;gBAC1B,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC;oBACzB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,qEAAqE;AAErE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC;AAIvC,MAAM,OAAO,WAAW;IAIH;IACA;IAJF,CAAC,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEnD,YACmB,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EACpC,MAAM,KAAK;QADX,QAAG,GAAH,GAAG,CAAiC;QACpC,QAAG,GAAH,GAAG,CAAQ;IAC3B,CAAC;IAEJ,IAAI,CAAC,GAAW,EAAE,GAAW;QAC3B,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;gBAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,WAAW;oBAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,EAA6B;QAC/B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,EAA6B;QAChC,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,iEAAiE;IACjE,OAAO,CAAC,GAAW;QACjB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;gBAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACrB,CAAC;CACF"}

package/dist/card.generated.d.ts

@@ -1,6 +1,6 @@
 export declare const HOTEL_CARD_HTML: string;
 /** sha256 of everything the card is built from (card-kit's source-hash.mjs) - the drift guard reads this. */
-export declare const HOTEL_CARD_SOURCE_SHA = "b56b07d92a3d8a806588f58401e43067ac0bb9cb1f0b11761457f061eb583921";
+export declare const HOTEL_CARD_SOURCE_SHA = "457346d97d5d25021551e854e84f5fab99eb80935eba6e0071fd6c9707c675fc";
 /** Versions it was built with (card-kit/built-with.mjs) - the drift guard compares them with the lock. */
 export declare const HOTEL_CARD_BUILT_WITH = "@modelcontextprotocol/ext-apps@1.7.5 @modelcontextprotocol/sdk@1.32.1 esbuild@0.25.12 rollup@4.63.3 vite@6.4.4 vite-plugin-singlefile@2.3.3 zod@4.6.7 zod-to-json-schema@3.25.2";
 //# sourceMappingURL=card.generated.d.ts.map