@diegoaltoworks/chatter 0.24.0 → 0.26.0

package/dist/mcp-server.js

@@ -106,6 +106,37 @@ async function answerOnce({
   return completeOnce({ client, system, messages, temperature, model });
 }
 
+// src/core/buckets.ts
+function defaultBuckets(mode) {
+  return ["base", mode];
+}
+function isIdentified(sender) {
+  return typeof sender === "string" && sender.trim().length > 0;
+}
+function normalize(buckets) {
+  const out = [];
+  for (const raw of buckets) {
+    if (typeof raw !== "string") continue;
+    const bucket = raw.trim();
+    if (bucket && !out.includes(bucket)) out.push(bucket);
+  }
+  return out;
+}
+async function resolveBuckets({
+  mode,
+  sender,
+  bucketsFor
+}) {
+  if (!bucketsFor) return void 0;
+  const identified = isIdentified(sender);
+  const requested = await bucketsFor(identified ? { mode, sender } : { mode });
+  if (!Array.isArray(requested)) return void 0;
+  const cleaned = normalize(requested);
+  if (identified) return cleaned;
+  const ceiling = new Set(defaultBuckets(mode));
+  return cleaned.filter((bucket) => ceiling.has(bucket));
+}
+
 // src/core/prompts.ts
 var import_node_fs = require("node:fs");
 var import_node_path = require("node:path");
@@ -314,8 +345,19 @@ var VectorStore = class _VectorStore {
     }
     return dot / (Math.sqrt(na) * Math.sqrt(nb));
   }
-  // Retrieve top-k across allowed buckets; compute similarity in app (simple & portable).
+  /**
+   * Retrieve top-k across allowed buckets; compute similarity in app (simple
+   * & portable).
+   *
+   * `allowed` is a bucket-name list rather than the {@link Bucket} union: the
+   * `chunks` table constrains nothing, so a deployment that ingests its own
+   * buckets can query them (`build` only writes and prunes the three the
+   * knowledge loader walks). Names are bound as query parameters, never
+   * interpolated. An empty list retrieves nothing, and short-circuits before
+   * the embedding call.
+   */
   async query(q, k = 6, allowed = ["base"]) {
+    if (allowed.length === 0) return [];
     const qv = (await this.client.embeddings.create({ model: EMB_MODEL, input: [q] })).data[0].embedding;
     const placeholders = allowed.map(() => "?").join(",");
     const res = await this.db.execute({
@@ -560,7 +602,8 @@ async function createMCPServer(config) {
         if (!lastUserMsg) {
           throw new Error("No user message found in conversation");
         }
-        const ctx = await store.query(lastUserMsg.content, 6, ["base", "public"]);
+        const buckets = await resolveBuckets({ mode: "public", bucketsFor: config.bucketsFor }) ?? defaultBuckets("public");
+        const ctx = await store.query(lastUserMsg.content, 6, buckets);
         const system = [
           prompts.baseSystemRules,
           prompts.publicPersona,
@@ -646,7 +689,8 @@ ${ctx.join("\n\n")}`
         if (!lastUserMsg) {
           throw new Error("No user message found in conversation");
         }
-        const ctx = await store.query(lastUserMsg.content, 8, ["base", "private"]);
+        const buckets = await resolveBuckets({ mode: "private", bucketsFor: config.bucketsFor }) ?? defaultBuckets("private");
+        const ctx = await store.query(lastUserMsg.content, 8, buckets);
         const system = [
           prompts.baseSystemRules,
           prompts.privatePersona,

package/dist/mcp-server.mjs

@@ -72,6 +72,37 @@ async function answerOnce({
   return completeOnce({ client, system, messages, temperature, model });
 }
 
+// src/core/buckets.ts
+function defaultBuckets(mode) {
+  return ["base", mode];
+}
+function isIdentified(sender) {
+  return typeof sender === "string" && sender.trim().length > 0;
+}
+function normalize(buckets) {
+  const out = [];
+  for (const raw of buckets) {
+    if (typeof raw !== "string") continue;
+    const bucket = raw.trim();
+    if (bucket && !out.includes(bucket)) out.push(bucket);
+  }
+  return out;
+}
+async function resolveBuckets({
+  mode,
+  sender,
+  bucketsFor
+}) {
+  if (!bucketsFor) return void 0;
+  const identified = isIdentified(sender);
+  const requested = await bucketsFor(identified ? { mode, sender } : { mode });
+  if (!Array.isArray(requested)) return void 0;
+  const cleaned = normalize(requested);
+  if (identified) return cleaned;
+  const ceiling = new Set(defaultBuckets(mode));
+  return cleaned.filter((bucket) => ceiling.has(bucket));
+}
+
 // src/core/prompts.ts
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
@@ -280,8 +311,19 @@ var VectorStore = class _VectorStore {
     }
     return dot / (Math.sqrt(na) * Math.sqrt(nb));
   }
-  // Retrieve top-k across allowed buckets; compute similarity in app (simple & portable).
+  /**
+   * Retrieve top-k across allowed buckets; compute similarity in app (simple
+   * & portable).
+   *
+   * `allowed` is a bucket-name list rather than the {@link Bucket} union: the
+   * `chunks` table constrains nothing, so a deployment that ingests its own
+   * buckets can query them (`build` only writes and prunes the three the
+   * knowledge loader walks). Names are bound as query parameters, never
+   * interpolated. An empty list retrieves nothing, and short-circuits before
+   * the embedding call.
+   */
   async query(q, k = 6, allowed = ["base"]) {
+    if (allowed.length === 0) return [];
     const qv = (await this.client.embeddings.create({ model: EMB_MODEL, input: [q] })).data[0].embedding;
     const placeholders = allowed.map(() => "?").join(",");
     const res = await this.db.execute({
@@ -526,7 +568,8 @@ async function createMCPServer(config) {
         if (!lastUserMsg) {
           throw new Error("No user message found in conversation");
         }
-        const ctx = await store.query(lastUserMsg.content, 6, ["base", "public"]);
+        const buckets = await resolveBuckets({ mode: "public", bucketsFor: config.bucketsFor }) ?? defaultBuckets("public");
+        const ctx = await store.query(lastUserMsg.content, 6, buckets);
         const system = [
           prompts.baseSystemRules,
           prompts.publicPersona,
@@ -612,7 +655,8 @@ ${ctx.join("\n\n")}`
         if (!lastUserMsg) {
           throw new Error("No user message found in conversation");
         }
-        const ctx = await store.query(lastUserMsg.content, 8, ["base", "private"]);
+        const buckets = await resolveBuckets({ mode: "private", bucketsFor: config.bucketsFor }) ?? defaultBuckets("private");
+        const ctx = await store.query(lastUserMsg.content, 8, buckets);
         const system = [
           prompts.baseSystemRules,
           prompts.privatePersona,

package/dist/middleware/jwt.d.ts

@@ -1,5 +1,15 @@
 import type { Context, Next } from "hono";
 import type { ChatterConfig } from "../types";
+/**
+ * The verified JWT subject attached by {@link createJWTMiddleware}, or
+ * `undefined` when the request carried no identity (unauthenticated route, or
+ * a token whose payload had no `sub`).
+ *
+ * Surfaces use this as the sender identity for per-request policy such as
+ * retrieval bucket gating, where "no identity" must mean anonymous rather
+ * than an empty-string user.
+ */
+export declare function jwtSubject(c: Context): string | undefined;
 /**
  * Create JWT authentication middleware for private API endpoints
  * Supports JWKS and public key PEM verification

package/dist/middleware/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/middleware/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAO9C;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,OAwBZ,OAAO,QAAQ,IAAI;;8BAa/D;AAGD,eAAO,MAAM,iBAAiB,MAhBe,OAAO,QAAQ,IAAI;;6BAgBS,CAAC"}
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/middleware/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAO9C;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGzD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,OAwBZ,OAAO,QAAQ,IAAI;;8BAa/D;AAGD,eAAO,MAAM,iBAAiB,MAhBe,OAAO,QAAQ,IAAI;;6BAgBS,CAAC"}

package/dist/routes/demo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/routes/demo.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsHnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,kBAAkB,8EAiHlD"}
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/routes/demo.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsHnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,kBAAkB,8EAqHlD"}

package/dist/routes/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/routes/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,KAAK,eAAe,EAAkC,MAAM,kBAAkB,CAAC;AAGxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,EAAE,GAAG,IAAI,CA8BxE;AASD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAgIpD"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/routes/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,KAAK,eAAe,EAAkC,MAAM,kBAAkB,CAAC;AAGxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,EAAE,GAAG,IAAI,CA8BxE;AASD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAwIpD"}

package/dist/routes/private.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private.d.ts","sourceRoot":"","sources":["../../src/routes/private.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,aAAa,CAAC,IAAI,EAAE,kBAAkB,8EA6DrD"}
+{"version":3,"file":"private.d.ts","sourceRoot":"","sources":["../../src/routes/private.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,aAAa,CAAC,IAAI,EAAE,kBAAkB,8EAoErD"}

package/dist/routes/public.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/routes/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAsEpD"}
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/routes/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EA0EpD"}

package/dist/types.d.ts

@@ -8,6 +8,7 @@ import type { Client as LibsqlClient } from "@libsql/client";
 import type { Hono } from "hono";
 import type OpenAI from "openai";
 import type { AnswerFn } from "./core/answer";
+import type { BucketsFor } from "./core/buckets";
 import type { PromptLoader } from "./core/prompts";
 import type { VectorStore } from "./core/retrieval";
 /**
@@ -156,6 +157,21 @@ export interface ChatterConfig {
      * errors. Unset: the built-in OpenAI completion is used.
      */
     answerFn?: AnswerFn;
+    /**
+     * Decides which knowledge buckets each chat turn may retrieve from, given
+     * the pipeline mode and — where the surface knows it — the sender's
+     * identity. Use it for role-gated knowledge: entitle a signed-in operator
+     * to buckets an anonymous visitor cannot see.
+     *
+     * Consulted by the chat routes, the OpenAI-compatible endpoints, the MCP
+     * chat tools and the demo route. Return `undefined` to keep the mode
+     * defaults (`base` plus the mode's own bucket). For a caller the surface
+     * could not identify, the answer is filtered down to those same defaults —
+     * the hook can narrow retrieval for an unnamed caller but never widen it.
+     *
+     * Unset: the mode defaults apply everywhere.
+     */
+    bucketsFor?: BucketsFor;
     /** Custom route handler for advanced use cases. May be async — see {@link CustomRoutes} */
     customRoutes?: CustomRoutes;
 }

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4CAA4C;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAE5B,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,IAAI,CAAC,EAAE,aAAa,CAAC;IAGrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,MAAM,EAAE;QACN,qBAAqB;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,oCAAoC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAGF,QAAQ,EAAE;QACR,yBAAyB;QACzB,GAAG,EAAE,MAAM,CAAC;QACZ,uBAAuB;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAGF,IAAI,CAAC,EAAE;QACL,mDAAmD;QACnD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,qEAAqE;QACrE,aAAa,CAAC,EAAE;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;gBAAE,KAAK,EAAE,OAAO,CAAC;gBAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SAC3F,CAAC;QACF,6CAA6C;QAC7C,GAAG,CAAC,EAAE;YACJ,oCAAoC;YACpC,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,0BAA0B;YAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,4BAA4B;YAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,2CAA2C;YAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,0BAA0B;QAC1B,KAAK,CAAC,EAAE;YACN,4BAA4B;YAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,6BAA6B;YAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;IAGF,QAAQ,CAAC,EAAE;QACT,iDAAiD;QACjD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,kDAAkD;QAClD,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,mDAAmD;QACnD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B;;;;WAIG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAGF,SAAS,CAAC,EAAE;QACV,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,6DAA6D;QAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAGF,MAAM,CAAC,EAAE;QACP,iCAAiC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iCAAiC;QACjC,IAAI,CAAC,EAAE,OAAO,CAAC;QACf;;;;;;;WAOG;QACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IAGF;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAGpB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GACpB,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC,GAC/C,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,EAAE,EAAE,YAAY,CAAC;IACjB,4BAA4B;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,6BAA6B;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,+CAA+C;IAC/C,aAAa,CAAC,EAAE;QACd,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC3F,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,QAAQ,EAAE;QACR,uBAAuB;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,2CAA2C;QAC3C,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;QACrC,8BAA8B;QAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qBAAqB;IACrB,QAAQ,EAAE;QACR,uBAAuB;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,qBAAqB;QACrB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;QACrC,8BAA8B;QAC9B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4CAA4C;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAE5B,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,IAAI,CAAC,EAAE,aAAa,CAAC;IAGrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,MAAM,EAAE;QACN,qBAAqB;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,oCAAoC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAGF,QAAQ,EAAE;QACR,yBAAyB;QACzB,GAAG,EAAE,MAAM,CAAC;QACZ,uBAAuB;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAGF,IAAI,CAAC,EAAE;QACL,mDAAmD;QACnD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,qEAAqE;QACrE,aAAa,CAAC,EAAE;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;gBAAE,KAAK,EAAE,OAAO,CAAC;gBAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SAC3F,CAAC;QACF,6CAA6C;QAC7C,GAAG,CAAC,EAAE;YACJ,oCAAoC;YACpC,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,0BAA0B;YAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,4BAA4B;YAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,2CAA2C;YAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,0BAA0B;QAC1B,KAAK,CAAC,EAAE;YACN,4BAA4B;YAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB,6BAA6B;YAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;IAGF,QAAQ,CAAC,EAAE;QACT,iDAAiD;QACjD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,kDAAkD;QAClD,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,mDAAmD;QACnD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B;;;;WAIG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAGF,SAAS,CAAC,EAAE;QACV,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,6DAA6D;QAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAGF,MAAM,CAAC,EAAE;QACP,iCAAiC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,iCAAiC;QACjC,IAAI,CAAC,EAAE,OAAO,CAAC;QACf;;;;;;;WAOG;QACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IAGF;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAGpB;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IAGxB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GACpB,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC,GAC/C,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,EAAE,EAAE,YAAY,CAAC;IACjB,4BAA4B;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,6BAA6B;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,+CAA+C;IAC/C,aAAa,CAAC,EAAE;QACd,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC3F,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,QAAQ,EAAE;QACR,uBAAuB;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,2CAA2C;QAC3C,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;QACrC,8BAA8B;QAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qBAAqB;IACrB,QAAQ,EAAE;QACR,uBAAuB;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,qBAAqB;QACrB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;QACrC,8BAA8B;QAC9B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH"}

package/dist/usage/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Usage metering — daily spend guards for anything that costs money per call.
+ *
+ * Published as the `@diegoaltoworks/chatter/usage` subpath so the core install
+ * stays untouched by it. The limiter itself is pure; the Turso store is the
+ * shipped persistence binding and needs `@libsql/client`, which chatter
+ * already expects for retrieval.
+ *
+ * @packageDocumentation
+ */
+export type { DailyLimitCheck, DailyLimiter, DailyLimiterDeps, DailyLimitReason, DailyLimitsConfig, DailyLimitsStore, } from "./limits";
+export { createDailyLimiter, GLOBAL_LIMIT_KEY, pickDailyLimit, utcDayKey } from "./limits";
+export { createTursoUsageStore } from "./tursoStore";
+//# sourceMappingURL=index.d.ts.map

package/dist/usage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/usage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/usage/index.js

@@ -0,0 +1,116 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/usage/index.ts
+var index_exports = {};
+__export(index_exports, {
+  GLOBAL_LIMIT_KEY: () => GLOBAL_LIMIT_KEY,
+  createDailyLimiter: () => createDailyLimiter,
+  createTursoUsageStore: () => createTursoUsageStore,
+  pickDailyLimit: () => pickDailyLimit,
+  utcDayKey: () => utcDayKey
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/usage/limits.ts
+var GLOBAL_LIMIT_KEY = "global";
+function utcDayKey(now) {
+  return new Date(now).toISOString().slice(0, 10);
+}
+function createDailyLimiter(config, deps) {
+  const now = deps.now ?? Date.now;
+  return {
+    async checkAndReserve(key) {
+      const day = utcDayKey(now());
+      const perKeyCount = await deps.store.incrementAndGet("key", key, day);
+      if (perKeyCount > config.perKeyDailyLimit) {
+        return { allowed: false, reason: "per-key" };
+      }
+      const globalCount = await deps.store.incrementAndGet("global", GLOBAL_LIMIT_KEY, day);
+      if (globalCount > config.globalDailyLimit) {
+        return { allowed: false, reason: "global" };
+      }
+      return { allowed: true, reason: null };
+    }
+  };
+}
+function pickDailyLimit(value, fallback) {
+  const trimmed = value?.trim();
+  if (trimmed === void 0 || trimmed === "") return fallback;
+  const parsed = Number(trimmed);
+  return Number.isInteger(parsed) && parsed >= 0 ? parsed : fallback;
+}
+
+// src/usage/tursoStore.ts
+var schemaReady = /* @__PURE__ */ new WeakMap();
+function ensureUsageSchema(client, tableName) {
+  let perTable = schemaReady.get(client);
+  if (!perTable) {
+    perTable = /* @__PURE__ */ new Map();
+    schemaReady.set(client, perTable);
+  }
+  const tables = perTable;
+  let ready = tables.get(tableName);
+  if (!ready) {
+    ready = client.execute(
+      `CREATE TABLE IF NOT EXISTS ${tableName} (
+          scope TEXT NOT NULL,
+          key TEXT NOT NULL,
+          day TEXT NOT NULL,
+          count INTEGER NOT NULL DEFAULT 0,
+          PRIMARY KEY (scope, key, day)
+        )`
+    ).catch((error) => {
+      tables.delete(tableName);
+      throw error;
+    });
+    tables.set(tableName, ready);
+  }
+  return ready;
+}
+var VALID_TABLE_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function createTursoUsageStore(client, tableName) {
+  if (!VALID_TABLE_NAME.test(tableName)) {
+    throw new Error(`Invalid usage store table name: ${tableName}`);
+  }
+  return {
+    async incrementAndGet(scope, key, day) {
+      await ensureUsageSchema(client, tableName);
+      const result = await client.execute({
+        sql: `INSERT INTO ${tableName} (scope, key, day, count) VALUES (?, ?, ?, 1)
+              ON CONFLICT(scope, key, day) DO UPDATE SET count = count + 1
+              RETURNING count`,
+        args: [scope, key, day]
+      });
+      const row = result.rows[0];
+      if (!row) {
+        throw new Error(`${tableName} returned no row from upsert`);
+      }
+      return Number(row.count);
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GLOBAL_LIMIT_KEY,
+  createDailyLimiter,
+  createTursoUsageStore,
+  pickDailyLimit,
+  utcDayKey
+});

package/dist/usage/index.mjs

@@ -0,0 +1,85 @@
+// src/usage/limits.ts
+var GLOBAL_LIMIT_KEY = "global";
+function utcDayKey(now) {
+  return new Date(now).toISOString().slice(0, 10);
+}
+function createDailyLimiter(config, deps) {
+  const now = deps.now ?? Date.now;
+  return {
+    async checkAndReserve(key) {
+      const day = utcDayKey(now());
+      const perKeyCount = await deps.store.incrementAndGet("key", key, day);
+      if (perKeyCount > config.perKeyDailyLimit) {
+        return { allowed: false, reason: "per-key" };
+      }
+      const globalCount = await deps.store.incrementAndGet("global", GLOBAL_LIMIT_KEY, day);
+      if (globalCount > config.globalDailyLimit) {
+        return { allowed: false, reason: "global" };
+      }
+      return { allowed: true, reason: null };
+    }
+  };
+}
+function pickDailyLimit(value, fallback) {
+  const trimmed = value?.trim();
+  if (trimmed === void 0 || trimmed === "") return fallback;
+  const parsed = Number(trimmed);
+  return Number.isInteger(parsed) && parsed >= 0 ? parsed : fallback;
+}
+
+// src/usage/tursoStore.ts
+var schemaReady = /* @__PURE__ */ new WeakMap();
+function ensureUsageSchema(client, tableName) {
+  let perTable = schemaReady.get(client);
+  if (!perTable) {
+    perTable = /* @__PURE__ */ new Map();
+    schemaReady.set(client, perTable);
+  }
+  const tables = perTable;
+  let ready = tables.get(tableName);
+  if (!ready) {
+    ready = client.execute(
+      `CREATE TABLE IF NOT EXISTS ${tableName} (
+          scope TEXT NOT NULL,
+          key TEXT NOT NULL,
+          day TEXT NOT NULL,
+          count INTEGER NOT NULL DEFAULT 0,
+          PRIMARY KEY (scope, key, day)
+        )`
+    ).catch((error) => {
+      tables.delete(tableName);
+      throw error;
+    });
+    tables.set(tableName, ready);
+  }
+  return ready;
+}
+var VALID_TABLE_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function createTursoUsageStore(client, tableName) {
+  if (!VALID_TABLE_NAME.test(tableName)) {
+    throw new Error(`Invalid usage store table name: ${tableName}`);
+  }
+  return {
+    async incrementAndGet(scope, key, day) {
+      await ensureUsageSchema(client, tableName);
+      const result = await client.execute({
+        sql: `INSERT INTO ${tableName} (scope, key, day, count) VALUES (?, ?, ?, 1)
+              ON CONFLICT(scope, key, day) DO UPDATE SET count = count + 1
+              RETURNING count`,
+        args: [scope, key, day]
+      });
+      const row = result.rows[0];
+      if (!row) {
+        throw new Error(`${tableName} returned no row from upsert`);
+      }
+      return Number(row.count);
+    }
+  };
+}
+export {
+  GLOBAL_LIMIT_KEY,
+  createDailyLimiter,
+  createTursoUsageStore,
+  pickDailyLimit,
+  utcDayKey
+};

package/dist/usage/limits.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Daily spend guards — the counting half of "this feature costs money, cap it".
+ *
+ * Framework-free and storage-free: this module knows how to decide, never how
+ * to persist. A host supplies a {@link DailyLimitsStore} (see ./tursoStore for
+ * the shipped one) and instantiates one limiter per metered resource — image
+ * generation, voice minutes, anything with a per-unit price — by giving each
+ * its own store table. Nothing here is chat-specific.
+ */
+/** The two caps every metered resource is subject to. */
+export interface DailyLimitsConfig {
+    /** Units one key may reserve per UTC day. */
+    perKeyDailyLimit: number;
+    /** Units all keys together may reserve per UTC day. */
+    globalDailyLimit: number;
+}
+/** The key the global counter is stored under — that scope has no caller key. */
+export declare const GLOBAL_LIMIT_KEY = "global";
+/** Which cap blocked the request, or null when it was allowed. */
+export type DailyLimitReason = "per-key" | "global" | null;
+export interface DailyLimitCheck {
+    allowed: boolean;
+    reason: DailyLimitReason;
+}
+/**
+ * Structural dependency — a host implements this against its own storage.
+ *
+ * Must increment and read back atomically. Deployments run multiple instances,
+ * so a read-then-write from this process would race with another instance's
+ * and both would see room under a cap that only had space for one.
+ */
+export interface DailyLimitsStore {
+    /** Increments the counter for (scope, key, day) and returns the count after incrementing. */
+    incrementAndGet(scope: "key" | "global", key: string, day: string): Promise<number>;
+}
+/** The UTC calendar day counters roll over on, e.g. "2026-08-01". */
+export declare function utcDayKey(now: number): string;
+export interface DailyLimiterDeps {
+    store: DailyLimitsStore;
+    /** Clock, injectable so day-rollover tests don't depend on real time. */
+    now?: () => number;
+}
+export interface DailyLimiter {
+    /**
+     * Reserves one unit for `key`, subject to both daily caps.
+     *
+     * Call this exactly once per logical request: the increment is permanent and
+     * unconditional (there is no release path), so a duplicate call — or a retry
+     * after a transient failure — permanently burns a second unit of quota for
+     * one request never delivered. Blocked calls still count: a call that trips
+     * the per-key cap still consumes one of that key's daily units, and (by
+     * design — see below) a call that trips the global cap after passing the
+     * per-key check also consumes one of that key's units, for nothing.
+     *
+     * The per-key counter increments before the global one, so a key blocked at
+     * its own cap never touches the shared global budget. The mirror case is
+     * accepted, not fixed: once the global cap is exhausted for the day, every
+     * further caller still burns one of their own per-key units on the way to
+     * being told no. This favours guarding against the more common cost risk
+     * (one key hammering the endpoint) over the rarer one (the global cap
+     * saturating and clipping everyone's personal quota).
+     *
+     * Reserve before spending, not after: the ordering is what makes the cap a
+     * cap. Callers with a cache should check it first, so a cache hit costs
+     * neither money nor quota.
+     */
+    checkAndReserve(key: string): Promise<DailyLimitCheck>;
+}
+export declare function createDailyLimiter(config: DailyLimitsConfig, deps: DailyLimiterDeps): DailyLimiter;
+/**
+ * Reads a cap out of loosely-typed configuration (an env var, a JSON field).
+ *
+ * A configured non-negative integer wins over the default; anything else —
+ * unset, blank, negative, fractional, unparseable — falls back. A malformed
+ * cap must not silently become `NaN`, which compares false against every
+ * count and would disable the guard entirely.
+ *
+ * Blank is trimmed before parsing rather than compared raw: `Number(" ")` is
+ * `0`, so a config value that is whitespace would otherwise be read as a cap
+ * of zero and switch the feature off entirely instead of falling back.
+ *
+ * This is the supported way to build a {@link DailyLimitsConfig}. The limiter
+ * itself does not validate its caps, so a `NaN` reaching it from somewhere
+ * else fails open.
+ */
+export declare function pickDailyLimit(value: string | undefined, fallback: number): number;
+//# sourceMappingURL=limits.d.ts.map

package/dist/usage/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/usage/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,WAAW,CAAC;AAEzC,kEAAkE;AAClE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6FAA6F;IAC7F,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrF;AAED,qEAAqE;AACrE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,CAAC;IACxB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,gBAAgB,GACrB,YAAY,CAoBd;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKlF"}

package/dist/usage/limits.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Daily limiter tests.
+ *
+ * Two properties matter more than the arithmetic and are asserted directly:
+ * the *order* of the two increments (a key blocked at its own cap must not
+ * burn shared budget), and the reserve-once semantics (every call counts,
+ * including blocked ones — there is no release path to lean on).
+ */
+export {};
+//# sourceMappingURL=limits.test.d.ts.map

package/dist/usage/limits.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.test.d.ts","sourceRoot":"","sources":["../../src/usage/limits.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/usage/tursoStore.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Turso/libsql-backed {@link DailyLimitsStore}.
+ *
+ * Schema and upsert only — error typing and wrapping stay with the caller,
+ * because each metered feature wants its own error contract and this layer
+ * should not invent one for them.
+ *
+ * `@libsql/client` is imported for its type alone, so this module adds no
+ * runtime dependency to anyone importing `./usage` for the pure limiter.
+ */
+import type { Client } from "@libsql/client";
+import type { DailyLimitsStore } from "./limits";
+/**
+ * Creates a store that counts into `tableName` on `client`.
+ *
+ * The upsert is a single atomic statement returning the post-increment count,
+ * so concurrent instances each get a distinct number and the cap holds across
+ * a multi-instance deployment. Table creation is idempotent and happens once
+ * per (client, table).
+ *
+ * Give each metered resource its own table — sharing one would make separate
+ * features compete for a single global counter.
+ */
+export declare function createTursoUsageStore(client: Client, tableName: string): DailyLimitsStore;
+//# sourceMappingURL=tursoStore.d.ts.map

package/dist/usage/tursoStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tursoStore.d.ts","sourceRoot":"","sources":["../../src/usage/tursoStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAyCjD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAuBzF"}

package/dist/usage/tursoStore.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Turso usage store tests.
+ *
+ * Run against a real in-memory libsql client rather than a fake, because the
+ * properties worth proving here are SQL-level: the upsert is atomic, it hands
+ * every concurrent caller a distinct number, and table creation is idempotent.
+ */
+export {};
+//# sourceMappingURL=tursoStore.test.d.ts.map

package/dist/usage/tursoStore.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tursoStore.test.d.ts","sourceRoot":"","sources":["../../src/usage/tursoStore.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}