@curless/hotel-storefront 0.55.8 → 0.56.1

package/dist/account/fake-mall.d.ts

@@ -0,0 +1,42 @@
+export type FakeMember = {
+    id: number;
+    userName: string;
+    password: string;
+    nickname?: string;
+    name?: string;
+    email: string;
+    mobile?: string;
+};
+/** Who is there from the start: `lin` / `Lin-demo-1`. */
+export declare const FAKE_MEMBER: Omit<FakeMember, 'id'>;
+/** What each call was - its path, and the NAMES of the fields it carried (never a value). */
+export type FakeMallCall = {
+    path: string;
+    method: string;
+    tenant?: string;
+    token: boolean;
+    fields: string[];
+};
+export type FakeMall = {
+    fetch: typeof fetch;
+    calls: FakeMallCall[];
+    /** Every request the mall saw, whole - for a test that holds what was sent. */
+    bodies: {
+        path: string;
+        body: Record<string, unknown>;
+    }[];
+    members: Map<string, FakeMember>;
+    /** Signs a member out at the mall, as another device would: their tokens stop working. */
+    revoke: (userName: string) => void;
+    /** The mall stops answering (`true`), or answers again. */
+    down: (on: boolean) => void;
+    /** member/info answers a fault of its own (`code` 500 in an HTTP 200), or answers again. */
+    fault: (on: boolean) => void;
+    /** The next request to this path waits until the function handed back is called - a mall keeping one caller waiting. */
+    holdNext: (path: string) => () => void;
+};
+export declare const createFakeMall: (opts?: {
+    tenant?: string;
+    expireIn?: number;
+}) => FakeMall;
+//# sourceMappingURL=fake-mall.d.ts.map

package/dist/account/fake-mall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-mall.d.ts","sourceRoot":"","sources":["../../src/account/fake-mall.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,yDAAyD;AACzD,eAAO,MAAM,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAO9C,CAAC;AAEF,6FAA6F;AAC7F,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,+EAA+E;IAC/E,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;IAC1D,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjC,0FAA0F;IAC1F,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,2DAA2D;IAC3D,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IAC5B,4FAA4F;IAC5F,KAAK,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7B,wHAAwH;IACxH,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;CACxC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAM;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,KAAG,QA4IlF,CAAC"}

package/dist/account/fake-mall.js

@@ -0,0 +1,168 @@
+// A stand-in for the Curless mall's member API, for tests and the card
+// preview - never a deployment, and never the dev backend (robin, 2026-11-06:
+// he makes his own account there). Its answers are the shapes Nexva One reads
+// from the same API (marketplace evals/mall.mjs): an envelope with its own
+// `code`, `data.access_token` and `data.user_info` from a sign-in, and
+// member/info answering HTTP 200 with nothing at all to a token that is not a
+// member's - as apidev did on 2026-11-06.
+//
+// One member is there from the start - a made-up person (example.com, a 555
+// number) - and any account made on it is kept in this process only.
+/** Who is there from the start: `lin` / `Lin-demo-1`. */
+export const FAKE_MEMBER = {
+    userName: 'lin',
+    password: 'Lin-demo-1',
+    nickname: 'Lin',
+    name: 'Lin Wei',
+    email: 'lin.wei@example.com',
+    mobile: '+1 555 0134 2288',
+};
+export const createFakeMall = (opts = {}) => {
+    const members = new Map([['lin', { id: 30001, ...FAKE_MEMBER }]]);
+    const tokens = new Map(); // access token → user name
+    const refreshes = new Map(); // refresh token → user name
+    const calls = [];
+    const bodies = [];
+    let seq = 0;
+    let isDown = false;
+    let isFault = false;
+    const holds = new Map();
+    const json = (body, status = 200) => new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
+    const ok = (data) => json({ code: 200, msg: '操作成功', data });
+    const bad = (code, msg) => json({ code, msg, data: null });
+    const info = (m) => ({
+        id: m.id,
+        userName: m.userName,
+        nickname: m.nickname ?? m.userName,
+        name: m.name ?? '',
+        point: 0,
+        email: m.email,
+        mobile: m.mobile ?? '',
+        status: '0',
+    });
+    const issue = (userName) => {
+        seq += 1;
+        const access = `fake-access-${seq}-${Math.random().toString(36).slice(2)}`;
+        const refresh = `fake-refresh-${seq}-${Math.random().toString(36).slice(2)}`;
+        tokens.set(access, userName);
+        refreshes.set(refresh, userName);
+        return {
+            access_token: access,
+            refresh_token: refresh,
+            expire_in: opts.expireIn ?? 7200,
+            refresh_expire_in: 604800,
+            token_type: 'Bearer',
+        };
+    };
+    const fetchFn = async (input, init) => {
+        const url = new URL(typeof input === 'string' ? input : input instanceof URL ? input.href : input.url);
+        const method = (init?.method ?? 'GET').toUpperCase();
+        const headers = new Headers(init?.headers);
+        const tenant = headers.get('x-tenant-id') ?? undefined;
+        const token = headers.get('member-token') ?? '';
+        let body = {};
+        if (typeof init?.body === 'string') {
+            try {
+                body = JSON.parse(init.body);
+            }
+            catch { }
+        }
+        const path = url.pathname;
+        const held = holds.get(path);
+        if (held) {
+            holds.delete(path);
+            await held;
+        }
+        calls.push({
+            path,
+            method,
+            ...(tenant ? { tenant } : {}),
+            token: !!token,
+            fields: Object.keys(body).sort(),
+        });
+        bodies.push({ path, body });
+        if (isDown)
+            throw new TypeError('fetch failed');
+        if (opts.tenant && tenant !== opts.tenant)
+            return bad(500, 'Tenant not found');
+        if (path === '/api/v1/member/login' && method === 'POST') {
+            if (!body.password)
+                return bad(500, 'Password cannot be empty');
+            const m = members.get(String(body.username ?? ''));
+            if (!m || m.password !== body.password)
+                return bad(500, '账号或密码错误');
+            return ok({
+                ...issue(m.userName),
+                user_info: { id: m.id, userName: m.userName, nickname: m.nickname ?? m.userName, point: 0 },
+            });
+        }
+        if (path === '/api/v1/member/register' && method === 'POST') {
+            if (!body.password)
+                return bad(500, 'Password cannot be empty');
+            const u = String(body.username ?? '').trim();
+            if (!u || !body.email)
+                return bad(500, '参数不完整');
+            if (members.has(u))
+                return bad(500, '用户名已存在');
+            const m = {
+                id: 40000 + members.size + 1,
+                userName: u,
+                password: String(body.password),
+                email: String(body.email),
+                ...(typeof body.mobile === 'string' ? { mobile: body.mobile } : {}),
+                ...(typeof body.nickname === 'string' ? { nickname: body.nickname } : {}),
+            };
+            members.set(u, m);
+            return ok(info(m));
+        }
+        if (path === '/api/v1/member/info' && isFault)
+            return bad(500, '系统异常');
+        if (path === '/api/v1/member/info') {
+            const m = members.get(tokens.get(token) ?? '');
+            // Not a member's token: nothing at all, as apidev answers.
+            if (!m)
+                return new Response('', { status: 200 });
+            return ok(info(m));
+        }
+        if (path === '/api/v1/member/refresh' && method === 'POST') {
+            const u = refreshes.get(String(body.refresh_token ?? ''));
+            if (!u)
+                return bad(401, '登录已过期');
+            refreshes.delete(String(body.refresh_token));
+            return ok(issue(u));
+        }
+        if (path === '/api/v1/member/logout' && method === 'POST') {
+            tokens.delete(token);
+            return ok(null);
+        }
+        return bad(404, 'not found');
+    };
+    return {
+        fetch: fetchFn,
+        calls,
+        bodies,
+        members,
+        revoke: (userName) => {
+            for (const [t, u] of [...tokens])
+                if (u === userName)
+                    tokens.delete(t);
+            for (const [t, u] of [...refreshes])
+                if (u === userName)
+                    refreshes.delete(t);
+        },
+        down: (on) => {
+            isDown = on;
+        },
+        fault: (on) => {
+            isFault = on;
+        },
+        holdNext: (path) => {
+            let release = () => { };
+            holds.set(path, new Promise((ok) => {
+                release = ok;
+            }));
+            return () => release();
+        },
+    };
+};
+//# sourceMappingURL=fake-mall.js.map

package/dist/account/fake-mall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-mall.js","sourceRoot":"","sources":["../../src/account/fake-mall.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAC9E,0CAA0C;AAC1C,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AAYrE,yDAAyD;AACzD,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,YAAY;IACtB,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AA2BF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAA+C,EAAE,EAAY,EAAE;IAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAqB,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,2BAA2B;IACrE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,4BAA4B;IACzE,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAsD,EAAE,CAAC;IACrE,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;QAClC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QACtB,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,EAAE;QACjC,GAAG,IAAI,CAAC,CAAC;QACT,MAAM,MAAM,GAAG,eAAe,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,gBAAgB,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO;YACL,YAAY,EAAE,MAAM;YACpB,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAChC,iBAAiB,EAAE,MAAM;YACzB,UAAU,EAAE,QAAQ;SACrB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE;QAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAClF,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAA4B,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC;QACb,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,IAAI,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/E,IAAI,IAAI,KAAK,sBAAsB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC;gBACR,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACpB,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,yBAAyB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAe;gBACpB,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC;gBAC5B,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC/B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACzB,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,KAAK,qBAAqB,IAAI,OAAO;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/C,2DAA2D;YAC3D,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,KAAK,wBAAwB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3D,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,OAAuB;QAC9B,KAAK;QACL,MAAM;QACN,OAAO;QACP,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;YACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;gBAAE,IAAI,CAAC,KAAK,QAAQ;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;gBAAE,IAAI,CAAC,KAAK,QAAQ;oBAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACX,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;YACZ,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;YACjB,IAAI,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YACvB,KAAK,CAAC,GAAG,CACP,IAAI,EACJ,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,EAAE;gBACvB,OAAO,GAAG,EAAE,CAAC;YACf,CAAC,CAAC,CACH,CAAC;YACF,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/account/index.d.ts

@@ -0,0 +1,109 @@
+import type { Hono } from 'hono';
+export type AccountConfig = {
+    /** The Curless mall's member API - the only kind there is. */
+    source: 'mall';
+    baseUrl?: string;
+    tenant?: string;
+    /** `<envPrefix>_API_URL` / `<envPrefix>_TENANT_ID` win over the two above. Default `ACCOUNT`. */
+    envPrefix?: string;
+};
+/**
+ * The tools, by the deployment's prefix: three the assistant calls -
+ * `sign_in_otaless_account` - and one the card calls (`card`, app-only).
+ *
+ * ⚠️ THE ASSISTANT'S THREE NAME NO CONVERSATION (security review of 0.56.0,
+ * P2-1): they act on the conversation they are called in and no other - a
+ * trip id handed to them by a page or a shop is refused (server.ts). Only the
+ * card names the conversation it was drawn for (its trip), through `card`, a
+ * tool the host keeps from the assistant; a client that draws no card is
+ * refused it.
+ */
+export declare const accountToolNames: (prefix: string) => {
+    readonly signIn: `sign_in_${string}account`;
+    readonly view: `view_${string}account`;
+    readonly signOut: `sign_out_${string}account`;
+    readonly card: `card_${string}account`;
+};
+export type AccountToolNames = ReturnType<typeof accountToolNames>;
+/** Beside every answer of a deployment with an account, for the card's header. */
+export declare const ACCOUNT_META_KEY = "curless/account";
+/** Beside a sign-in's answer where a card is drawn: the link and its short code, the card's alone. */
+export declare const SIGN_IN_META_KEY = "curless/account-sign-in";
+/** The mall is asked at most this often whether a sign-in is still theirs. */
+export declare const CHECK_EVERY_MS: number;
+export declare const COOKIE = "__Host-hotel_account";
+/** How many of what, and over how long - each refusal said as "too many requests". */
+export declare const ACCOUNT_LIMITS: {
+    /** Sign-in links one conversation may ask for in ten minutes. */
+    readonly linksPerConversation: 10;
+    /**
+     * …one address in a minute, and everyone (review P3-2: one address with two
+     * hundred sessions filled the table). Wide per address: every Claude user
+     * arrives from a handful of Anthropic's.
+     */
+    readonly linksPerIp: 120;
+    readonly linksPerMinute: 600;
+    /** Page views from one address in a minute. */
+    readonly pagesPerIp: 120;
+    /** Form posts from one address in ten minutes. */
+    readonly postsPerIp: 30;
+    /** Sign-ins (or accounts made) by one user name in ten minutes. */
+    readonly perName: 8;
+    /** Everyone's sign-ins in a minute, and accounts made. */
+    readonly signInsPerMinute: 180;
+    readonly registersPerMinute: 90;
+};
+/** The largest form our pages post (Caddy is told 16KB). */
+export declare const FORM_MAX_BYTES: number;
+export type AccountCall = {
+    key: string;
+    noCards?: boolean;
+    ip?: string;
+    /** The card's own tool asked (`names.card`), not the assistant. */
+    fromCard?: boolean;
+};
+export type AccountAnswer = {
+    text: string;
+    structured: Record<string, unknown>;
+    /** The card's alone - never the model's. */
+    meta?: Record<string, unknown>;
+    isError?: boolean;
+};
+export type Account = {
+    names: AccountToolNames;
+    tools: () => {
+        name: string;
+        inputSchema: unknown;
+        [k: string]: unknown;
+    }[];
+    outputSchemas: () => Record<string, unknown>;
+    has: (name: string) => boolean;
+    handle: (name: string, args: Record<string, unknown>, call: AccountCall) => Promise<AccountAnswer>;
+    /**
+     * What every answer carries for the card's header. `cards`: the session draws
+     * cards - only there does the name include the user name (0.56.1).
+     */
+    meta: (key: string, cards: boolean) => Record<string, unknown>;
+    instructions: (noCards: boolean) => string;
+    mount: (app: Hono) => void;
+    health: () => Record<string, number>;
+};
+export type AccountOptions = {
+    account: AccountConfig;
+    brand: string;
+    /** The deployment's own name (`server.name`): a card takes only its own account. */
+    from: string;
+    prefix: string;
+    publicUrl: string;
+    env?: Record<string, string | undefined>;
+    fetch?: typeof fetch;
+    now?: () => number;
+    logoUrl?: string;
+    logoDarkUrl?: string;
+    operator?: string;
+    log?: (line: string) => void;
+};
+/** An IPv6 address by its /64 (review P3-1, as Nexva counts it): one machine has a whole /64. */
+export declare const addressKey: (ip: string) => string;
+export declare const makeAccount: (opts: AccountOptions) => Account;
+//# sourceMappingURL=index.d.ts.map

package/dist/account/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AA0E1C,MAAM,MAAM,aAAa,GAAG;IAC1B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM;;;;;CAMlC,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEnE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAClD,sGAAsG;AACtG,eAAO,MAAM,gBAAgB,4BAA4B,CAAC;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,eAAO,MAAM,MAAM,yBAAyB,CAAC;AAE7C,sFAAsF;AACtF,eAAO,MAAM,cAAc;IACzB,iEAAiE;;IAEjE;;;;OAIG;;;IAGH,+CAA+C;;IAE/C,kDAAkD;;IAElD,mEAAmE;;IAEnE,0DAA0D;;;CAGlD,CAAC;AAEX,4DAA4D;AAC5D,eAAO,MAAM,cAAc,QAAW,CAAC;AAEvC,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IAC5E,aAAa,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/B,MAAM,EAAE,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,WAAW,KACd,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B;;;OAGG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,CAAC;AAQF,iGAAiG;AACjG,eAAO,MAAM,UAAU,GAAI,IAAI,MAAM,KAAG,MAuBvC,CAAC;AA4BF,eAAO,MAAM,WAAW,GAAI,MAAM,cAAc,KAAG,OA0zBlD,CAAC"}