@gamaze/hicortex 0.7.1 → 0.10.0

package/dist/pro-loader.d.ts

@@ -1,33 +0,0 @@
-/**
- * Pro extension loader.
- *
- * Called from features.ts at boot when a valid paid license is detected.
- * Responsibilities:
- *   1. Check ~/.hicortex/pro/installed.json for the currently-installed
- *      Pro version (if any).
- *   2. Fetch GET /api/pro/meta from hicortex.gamaze.com to discover the
- *      latest available version for the caller's license tier.
- *   3. If the installed version is older (or missing), download the
- *      tarball, verify the sha256 sidecar, and extract to ~/.hicortex/pro/.
- *   4. Dynamic-import ~/.hicortex/pro/package/index.js and call activate()
- *      on its default export with a ProActivationContext.
- *
- * Failure modes (all soft — OSS host keeps running with defaults):
- *   - Network to /api/pro/meta fails → use whatever is already installed
- *   - No cached Pro and network fails → Pro not activated, OSS defaults apply
- *   - Downloaded tarball fails sha256 → abort download, keep old version
- *   - import() of activated module throws → log warning, keep defaults
- *
- * The loader is strictly best-effort. It must NEVER crash the OSS host.
- */
-/**
- * Entry point called from features.ts at boot.
- *
- * @param licenseKey   The Pro license key (hctx-...) from config
- * @param stateDir     Usually ~/.hicortex/
- * @param hostVersion  The version of the OSS host (from package.json) — passed
- *                     to the Pro activate() for compatibility gating
- * @param serverUrl    Override for the Pro meta/download endpoint (defaults
- *                     to https://hicortex.gamaze.com). Useful for testing.
- */
-export declare function loadPro(licenseKey: string, stateDir: string, hostVersion: string, serverUrl?: string): Promise<void>;

package/dist/pro-loader.js

@@ -1,187 +0,0 @@
-"use strict";
-/**
- * Pro extension loader.
- *
- * Called from features.ts at boot when a valid paid license is detected.
- * Responsibilities:
- *   1. Check ~/.hicortex/pro/installed.json for the currently-installed
- *      Pro version (if any).
- *   2. Fetch GET /api/pro/meta from hicortex.gamaze.com to discover the
- *      latest available version for the caller's license tier.
- *   3. If the installed version is older (or missing), download the
- *      tarball, verify the sha256 sidecar, and extract to ~/.hicortex/pro/.
- *   4. Dynamic-import ~/.hicortex/pro/package/index.js and call activate()
- *      on its default export with a ProActivationContext.
- *
- * Failure modes (all soft — OSS host keeps running with defaults):
- *   - Network to /api/pro/meta fails → use whatever is already installed
- *   - No cached Pro and network fails → Pro not activated, OSS defaults apply
- *   - Downloaded tarball fails sha256 → abort download, keep old version
- *   - import() of activated module throws → log warning, keep defaults
- *
- * The loader is strictly best-effort. It must NEVER crash the OSS host.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadPro = loadPro;
-const node_crypto_1 = require("node:crypto");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_url_1 = require("node:url");
-const node_child_process_1 = require("node:child_process");
-const extensions_js_1 = require("./extensions.js");
-const VALIDATE_URL = "https://hicortex.gamaze.com";
-/**
- * Entry point called from features.ts at boot.
- *
- * @param licenseKey   The Pro license key (hctx-...) from config
- * @param stateDir     Usually ~/.hicortex/
- * @param hostVersion  The version of the OSS host (from package.json) — passed
- *                     to the Pro activate() for compatibility gating
- * @param serverUrl    Override for the Pro meta/download endpoint (defaults
- *                     to https://hicortex.gamaze.com). Useful for testing.
- */
-async function loadPro(licenseKey, stateDir, hostVersion, serverUrl = VALIDATE_URL) {
-    const proRoot = (0, node_path_1.join)(stateDir, "pro");
-    try {
-        (0, node_fs_1.mkdirSync)(proRoot, { recursive: true });
-    }
-    catch {
-        // If we can't even create the dir, there's nothing to load
-        return;
-    }
-    // Step 1: read installed state (if any)
-    const installedStatePath = (0, node_path_1.join)(proRoot, "installed.json");
-    const installed = readInstalledState(installedStatePath);
-    // Step 2: try to fetch the latest meta. Network failure is soft.
-    let meta = null;
-    try {
-        meta = await fetchProMeta(serverUrl, licenseKey);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`[hicortex][pro] Could not fetch Pro metadata (${msg}) — using cached version if present`);
-    }
-    // Step 3: if meta is newer than installed, download and extract
-    if (meta && (!installed || installed.version !== meta.version)) {
-        try {
-            await downloadAndExtract(serverUrl, licenseKey, meta, proRoot);
-            writeInstalledState(installedStatePath, {
-                version: meta.version,
-                installedAt: new Date().toISOString(),
-                sha256: meta.sha256,
-            });
-            console.log(`[hicortex][pro] Installed Pro v${meta.version}`);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            console.warn(`[hicortex][pro] Pro download failed: ${msg}`);
-        }
-    }
-    // Step 4: activate whatever is installed (if anything)
-    const indexPath = (0, node_path_1.join)(proRoot, "package", "index.js");
-    if (!(0, node_fs_1.existsSync)(indexPath)) {
-        // No Pro installed and meta fetch couldn't install one
-        return;
-    }
-    try {
-        const mod = await import((0, node_url_1.pathToFileURL)(indexPath).href);
-        const pkg = (mod.default ?? mod);
-        if (typeof pkg?.activate !== "function") {
-            console.warn(`[hicortex][pro] Pro package has no activate() function`);
-            return;
-        }
-        const ctx = (0, extensions_js_1.createProActivationContext)(hostVersion);
-        await pkg.activate(ctx);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`[hicortex][pro] Pro activation failed: ${msg}`);
-    }
-}
-// ---------------------------------------------------------------------------
-// Implementation helpers
-// ---------------------------------------------------------------------------
-function readInstalledState(path) {
-    try {
-        const raw = (0, node_fs_1.readFileSync)(path, "utf-8");
-        return JSON.parse(raw);
-    }
-    catch {
-        return null;
-    }
-}
-function writeInstalledState(path, state) {
-    try {
-        (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
-        (0, node_fs_1.writeFileSync)(path, JSON.stringify(state, null, 2));
-    }
-    catch {
-        // Non-fatal — we'll just re-download next boot
-    }
-}
-async function fetchProMeta(serverUrl, licenseKey) {
-    const url = `${serverUrl.replace(/\/$/, "")}/api/pro/meta`;
-    const resp = await fetch(url, {
-        headers: { Authorization: `Bearer ${licenseKey}` },
-        signal: AbortSignal.timeout(10_000),
-    });
-    if (resp.status === 401 || resp.status === 403) {
-        throw new Error(`Pro access denied (HTTP ${resp.status}) — check license key`);
-    }
-    if (resp.status === 404) {
-        throw new Error("No Pro release available yet");
-    }
-    if (!resp.ok) {
-        throw new Error(`HTTP ${resp.status}`);
-    }
-    const data = (await resp.json());
-    if (!data.version || !data.url) {
-        throw new Error("Malformed /api/pro/meta response");
-    }
-    return data;
-}
-async function downloadAndExtract(serverUrl, licenseKey, meta, proRoot) {
-    const downloadUrl = `${serverUrl.replace(/\/$/, "")}${meta.url.startsWith("/") ? "" : "/"}${meta.url}`;
-    const resp = await fetch(downloadUrl, {
-        headers: { Authorization: `Bearer ${licenseKey}` },
-        signal: AbortSignal.timeout(60_000),
-    });
-    if (!resp.ok) {
-        throw new Error(`Download failed with HTTP ${resp.status}`);
-    }
-    // Stream to a temp file so we can verify the hash before extracting
-    const tmpPath = (0, node_path_1.join)(proRoot, `.pro-download-${Date.now()}.tgz`);
-    const buf = Buffer.from(await resp.arrayBuffer());
-    (0, node_fs_1.writeFileSync)(tmpPath, buf);
-    // Verify sha256 if the server provided one
-    if (meta.sha256) {
-        const hash = (0, node_crypto_1.createHash)("sha256").update(buf).digest("hex");
-        if (hash !== meta.sha256) {
-            try {
-                (0, node_fs_1.rmSync)(tmpPath);
-            }
-            catch { /* non-fatal */ }
-            throw new Error(`sha256 mismatch: expected ${meta.sha256}, got ${hash}`);
-        }
-    }
-    // Extract to proRoot (overwrites existing package/ directory)
-    const existingPackageDir = (0, node_path_1.join)(proRoot, "package");
-    if ((0, node_fs_1.existsSync)(existingPackageDir)) {
-        try {
-            (0, node_fs_1.rmSync)(existingPackageDir, { recursive: true, force: true });
-        }
-        catch { /* non-fatal */ }
-    }
-    // Use the system tar to extract (cross-platform, no new dependency)
-    const result = (0, node_child_process_1.spawnSync)("tar", ["-xzf", tmpPath, "-C", proRoot], {
-        encoding: "utf-8",
-    });
-    if (result.status !== 0) {
-        throw new Error(`tar extraction failed: ${result.stderr || "unknown error"}`);
-    }
-    // Clean up the temp tarball
-    try {
-        (0, node_fs_1.rmSync)(tmpPath);
-    }
-    catch { /* non-fatal */ }
-}