@geotechcli/core 0.2.0

package/dist/db/redis.js

@@ -0,0 +1,204 @@
+// ---------------------------------------------------------------------------
+// Upstash Redis Usage Store — persistent metering for geotechCLI
+//
+// Replaces InMemoryUsageStore for production deployments.
+// Uses Upstash Redis (HTTP-based) which works on Cloudflare Workers,
+// Vercel Edge, and any serverless environment.
+//
+// Keys structure:
+//   usage:{identifier}:llmCalls     — monthly LLM call count
+//   usage:{identifier}:visionCalls  — monthly vision call count
+//   usage:{identifier}:agentCalls   — monthly agent call count
+//   usage:{identifier}:meta         — JSON: {tier, periodStart, lastCall}
+//   ratelimit:{ip}                  — sliding window counter
+// ---------------------------------------------------------------------------
+function getRedisConfig() {
+    const url = process.env.UPSTASH_REDIS_REST_URL ?? '';
+    const token = process.env.UPSTASH_REDIS_REST_TOKEN ?? '';
+    if (!url || !token) {
+        throw new Error('Missing Upstash Redis configuration. Set UPSTASH_REDIS_REST_URL and UPSTASH_REDIS_REST_TOKEN.');
+    }
+    return { url, token };
+}
+async function redisCommand(args) {
+    const config = getRedisConfig();
+    try {
+        const res = await fetch(`${config.url}`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${config.token}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(args),
+            signal: AbortSignal.timeout(5_000),
+        });
+        if (!res.ok) {
+            console.error(`[redis] Error ${res.status}: ${await res.text().catch(() => '')}`);
+            return null;
+        }
+        const data = await res.json();
+        return data.result ?? null;
+    }
+    catch (err) {
+        console.error(`[redis] Request failed: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+/**
+ * Execute multiple Redis commands in a single HTTP request (pipeline).
+ */
+async function redisPipeline(commands) {
+    const config = getRedisConfig();
+    try {
+        const res = await fetch(`${config.url}/pipeline`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${config.token}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(commands),
+            signal: AbortSignal.timeout(5_000),
+        });
+        if (!res.ok) {
+            console.error(`[redis] Pipeline error ${res.status}`);
+            return [];
+        }
+        const data = await res.json();
+        return data.map((r) => r.result);
+    }
+    catch (err) {
+        console.error(`[redis] Pipeline failed: ${err instanceof Error ? err.message : String(err)}`);
+        return [];
+    }
+}
+// ---------------------------------------------------------------------------
+// Monthly period helpers
+// ---------------------------------------------------------------------------
+function getCurrentPeriodStart() {
+    const now = new Date();
+    return new Date(now.getFullYear(), now.getMonth(), 1).getTime();
+}
+function getCurrentPeriodKey() {
+    const now = new Date();
+    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`;
+}
+// TTL: 35 days (covers the full month + a few days buffer)
+const PERIOD_TTL_SECONDS = 35 * 24 * 60 * 60;
+// ---------------------------------------------------------------------------
+// RedisUsageStore — implements UsageStore interface
+// ---------------------------------------------------------------------------
+export class RedisUsageStore {
+    keyPrefix(identifier) {
+        const period = getCurrentPeriodKey();
+        return `usage:${period}:${identifier}`;
+    }
+    async get(identifier) {
+        const prefix = this.keyPrefix(identifier);
+        const results = await redisPipeline([
+            ['GET', `${prefix}:llmCalls`],
+            ['GET', `${prefix}:visionCalls`],
+            ['GET', `${prefix}:agentCalls`],
+            ['GET', `${prefix}:meta`],
+        ]);
+        const llmCalls = Number(results[0]) || 0;
+        const visionCalls = Number(results[1]) || 0;
+        const agentCalls = Number(results[2]) || 0;
+        const metaStr = results[3];
+        let meta = null;
+        if (metaStr) {
+            try {
+                meta = JSON.parse(metaStr);
+            }
+            catch { /* ignore */ }
+        }
+        if (!meta && llmCalls === 0 && visionCalls === 0 && agentCalls === 0) {
+            return null;
+        }
+        return {
+            identifier,
+            tier: meta?.tier ?? 'free',
+            llmCalls,
+            visionCalls,
+            agentCalls,
+            periodStart: meta?.periodStart ?? getCurrentPeriodStart(),
+            lastCallTimestamp: meta?.lastCallTimestamp ?? Date.now(),
+        };
+    }
+    async set(identifier, record) {
+        const prefix = this.keyPrefix(identifier);
+        const meta = JSON.stringify({
+            tier: record.tier,
+            periodStart: record.periodStart,
+            lastCallTimestamp: record.lastCallTimestamp,
+        });
+        await redisPipeline([
+            ['SET', `${prefix}:llmCalls`, record.llmCalls, 'EX', PERIOD_TTL_SECONDS],
+            ['SET', `${prefix}:visionCalls`, record.visionCalls, 'EX', PERIOD_TTL_SECONDS],
+            ['SET', `${prefix}:agentCalls`, record.agentCalls, 'EX', PERIOD_TTL_SECONDS],
+            ['SET', `${prefix}:meta`, meta, 'EX', PERIOD_TTL_SECONDS],
+        ]);
+    }
+    async increment(identifier, field) {
+        const prefix = this.keyPrefix(identifier);
+        const fieldKey = `${prefix}:${field}`;
+        const metaKey = `${prefix}:meta`;
+        const results = await redisPipeline([
+            ['INCR', fieldKey],
+            ['EXPIRE', fieldKey, PERIOD_TTL_SECONDS],
+            ['GET', `${prefix}:llmCalls`],
+            ['GET', `${prefix}:visionCalls`],
+            ['GET', `${prefix}:agentCalls`],
+            ['SET', metaKey, JSON.stringify({
+                    tier: 'free',
+                    periodStart: getCurrentPeriodStart(),
+                    lastCallTimestamp: Date.now(),
+                }), 'EX', PERIOD_TTL_SECONDS],
+        ]);
+        return {
+            identifier,
+            tier: 'free',
+            llmCalls: Number(results[2]) || 0,
+            visionCalls: Number(results[3]) || 0,
+            agentCalls: Number(results[4]) || 0,
+            periodStart: getCurrentPeriodStart(),
+            lastCallTimestamp: Date.now(),
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// IP Rate Limiter — sliding window using Redis
+// ---------------------------------------------------------------------------
+/**
+ * Check if an IP is rate-limited using Redis sliding window.
+ * Returns true if the IP should be blocked.
+ */
+export async function isIPRateLimitedRedis(ip, maxRequests = 15, windowMs = 60_000) {
+    // PRIVACY: Hash IP before using as Redis key — never store raw IPs
+    const encoder = new TextEncoder();
+    const hashBuf = await crypto.subtle.digest('SHA-256', encoder.encode(ip));
+    const ipHash = Array.from(new Uint8Array(hashBuf)).map(b => b.toString(16).padStart(2, '0')).join('').slice(0, 16);
+    const key = `ratelimit:${ipHash}`;
+    const now = Date.now();
+    const windowStart = now - windowMs;
+    // Sorted set: score = timestamp, member = unique request ID
+    const results = await redisPipeline([
+        // Remove entries outside the window
+        ['ZREMRANGEBYSCORE', key, 0, windowStart],
+        // Count entries in the window
+        ['ZCARD', key],
+        // Add current request
+        ['ZADD', key, now, `${now}-${Math.random().toString(36).slice(2, 8)}`],
+        // Set TTL so the key auto-expires
+        ['EXPIRE', key, Math.ceil(windowMs / 1000) + 5],
+    ]);
+    const count = Number(results[1]) || 0;
+    return count >= maxRequests;
+}
+// ---------------------------------------------------------------------------
+// Health check
+// ---------------------------------------------------------------------------
+export async function redisHealthCheck() {
+    const result = await redisCommand(['PING']);
+    return result === 'PONG';
+}
+//# sourceMappingURL=redis.js.map

package/dist/db/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/db/redis.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,0DAA0D;AAC1D,qEAAqE;AACrE,+CAA+C;AAC/C,EAAE;AACF,kBAAkB;AAClB,6DAA6D;AAC7D,gEAAgE;AAChE,+DAA+D;AAC/D,0EAA0E;AAC1E,6DAA6D;AAC7D,8EAA8E;AAa9E,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAEzD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CAAc,IAAyB;IAChE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAQ,IAAsB,CAAC,MAAM,IAAI,IAAI,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAA+B;IAC1D,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,WAAW,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAQ,IAAmC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,SAAS,qBAAqB;IAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7C,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,MAAM,OAAO,eAAe;IAClB,SAAS,CAAC,UAAkB;QAClC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,OAAO,SAAS,MAAM,IAAI,UAAU,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,CAAC,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC;YAC7B,CAAC,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;YAChC,CAAC,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC;YAC/B,CAAC,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAkB,CAAC;QAE5C,IAAI,IAAI,GAA4E,IAAI,CAAC;QACzF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,UAAU;YACV,IAAI,EAAG,IAAI,EAAE,IAA4B,IAAI,MAAM;YACnD,QAAQ;YACR,WAAW;YACX,UAAU;YACV,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,qBAAqB,EAAE;YACzD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,IAAI,CAAC,GAAG,EAAE;SACzD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,MAAmB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QAEH,MAAM,aAAa,CAAC;YAClB,CAAC,KAAK,EAAE,GAAG,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC;YACxE,CAAC,KAAK,EAAE,GAAG,MAAM,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,kBAAkB,CAAC;YAC9E,CAAC,KAAK,EAAE,GAAG,MAAM,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,kBAAkB,CAAC;YAC5E,CAAC,KAAK,EAAE,GAAG,MAAM,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,KAAgD;QAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,MAAM,OAAO,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,CAAC,MAAM,EAAE,QAAQ,CAAC;YAClB,CAAC,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,CAAC;YACxC,CAAC,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC;YAC7B,CAAC,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;YAChC,CAAC,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC;YAC/B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC9B,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,qBAAqB,EAAE;oBACpC,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;iBAC9B,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC;SAC9B,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,WAAW,EAAE,qBAAqB,EAAE;YACpC,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,WAAW,GAAG,EAAE,EAChB,QAAQ,GAAG,MAAM;IAEjB,mEAAmE;IACnE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnH,MAAM,GAAG,GAAG,aAAa,MAAM,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAC;IAEnC,4DAA4D;IAC5D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,oCAAoC;QACpC,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,CAAC;QACzC,8BAA8B;QAC9B,CAAC,OAAO,EAAE,GAAG,CAAC;QACd,sBAAsB;QACtB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACtE,kCAAkC;QAClC,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;KAChD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,IAAI,WAAW,CAAC;AAC9B,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,KAAK,MAAM,CAAC;AAC3B,CAAC"}

package/dist/db/supabase.d.ts

@@ -0,0 +1,57 @@
+export interface SupabaseConfig {
+    url: string;
+    serviceRoleKey: string;
+}
+interface QueryOptions {
+    table: string;
+    select?: string;
+    filters?: Array<{
+        column: string;
+        op: 'eq' | 'gt' | 'lt' | 'gte' | 'lte' | 'neq' | 'is';
+        value: string;
+    }>;
+    order?: {
+        column: string;
+        ascending?: boolean;
+    };
+    limit?: number;
+    single?: boolean;
+}
+export declare function dbQuery<T>(opts: QueryOptions): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+export declare function dbInsert<T>(table: string, row: Record<string, unknown>): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+export declare function dbUpdate<T>(table: string, filters: Array<{
+    column: string;
+    op: 'eq';
+    value: string;
+}>, updates: Record<string, unknown>): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+export declare function dbDelete<T>(table: string, filters: Array<{
+    column: string;
+    op: 'eq';
+    value: string;
+}>): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+export declare function dbUpsert<T>(table: string, row: Record<string, unknown>, onConflict: string): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+export declare function dbRpc<T>(fnName: string, args: Record<string, unknown>): Promise<{
+    data: T | null;
+    error: string | null;
+}>;
+/**
+ * Health check — verifies Supabase connection works.
+ */
+export declare function dbHealthCheck(): Promise<boolean>;
+export {};
+//# sourceMappingURL=supabase.d.ts.map

package/dist/db/supabase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.d.ts","sourceRoot":"","sources":["../../src/db/supabase.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1G,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA8FD,wBAAsB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAUtG;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAGhI;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAC3D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAQnD;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1D,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAQnD;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAKpJ;AAED,wBAAsB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CA0B/H;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CActD"}

package/dist/db/supabase.js

@@ -0,0 +1,156 @@
+// ---------------------------------------------------------------------------
+// Supabase Client — lightweight REST client for geotechCLI
+//
+// Uses Supabase PostgREST API directly to avoid pulling in the full
+// @supabase/supabase-js SDK (which adds ~200KB to the bundle).
+// Only needs: SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY
+// ---------------------------------------------------------------------------
+function buildConfig() {
+    const url = process.env.SUPABASE_URL ?? '';
+    const key = process.env.SUPABASE_SERVICE_ROLE_KEY ?? '';
+    if (!url || !key) {
+        throw new Error('Missing Supabase configuration. Set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY environment variables.');
+    }
+    return { url, serviceRoleKey: key };
+}
+// ---------------------------------------------------------------------------
+// Core HTTP methods
+// ---------------------------------------------------------------------------
+async function supabaseRequest(method, path, config, body, headers) {
+    const url = `${config.url}/rest/v1/${path}`;
+    const reqHeaders = {
+        'apikey': config.serviceRoleKey,
+        'Authorization': `Bearer ${config.serviceRoleKey}`,
+        'Content-Type': 'application/json',
+        'Prefer': method === 'POST' ? 'return=representation' : method === 'PATCH' ? 'return=representation' : 'return=minimal',
+        ...headers,
+    };
+    try {
+        const res = await fetch(url, {
+            method,
+            headers: reqHeaders,
+            body: body ? JSON.stringify(body) : undefined,
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok) {
+            const errText = await res.text().catch(() => 'Unknown error');
+            return { data: null, error: `Supabase ${res.status}: ${errText.slice(0, 200)}` };
+        }
+        if (res.status === 204 || method === 'DELETE') {
+            return { data: null, error: null };
+        }
+        const data = await res.json();
+        return { data: data, error: null };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { data: null, error: `Supabase request failed: ${msg}` };
+    }
+}
+// ---------------------------------------------------------------------------
+// Query builder
+// ---------------------------------------------------------------------------
+function buildQueryString(opts) {
+    const params = new URLSearchParams();
+    if (opts.select) {
+        params.set('select', opts.select);
+    }
+    if (opts.filters) {
+        for (const f of opts.filters) {
+            params.set(f.column, `${f.op}.${f.value}`);
+        }
+    }
+    if (opts.order) {
+        params.set('order', `${opts.order.column}.${opts.order.ascending ? 'asc' : 'desc'}`);
+    }
+    if (opts.limit) {
+        params.set('limit', String(opts.limit));
+    }
+    const qs = params.toString();
+    return `${opts.table}${qs ? `?${qs}` : ''}`;
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+export async function dbQuery(opts) {
+    const config = buildConfig();
+    const path = buildQueryString(opts);
+    const headers = {};
+    if (opts.single) {
+        headers['Accept'] = 'application/vnd.pgrst.object+json';
+    }
+    return supabaseRequest('GET', path, config, undefined, headers);
+}
+export async function dbInsert(table, row) {
+    const config = buildConfig();
+    return supabaseRequest('POST', table, config, row);
+}
+export async function dbUpdate(table, filters, updates) {
+    const config = buildConfig();
+    const params = new URLSearchParams();
+    for (const f of filters) {
+        params.set(f.column, `${f.op}.${f.value}`);
+    }
+    const path = `${table}?${params.toString()}`;
+    return supabaseRequest('PATCH', path, config, updates);
+}
+export async function dbDelete(table, filters) {
+    const config = buildConfig();
+    const params = new URLSearchParams();
+    for (const f of filters) {
+        params.set(f.column, `${f.op}.${f.value}`);
+    }
+    const path = `${table}?${params.toString()}`;
+    return supabaseRequest('DELETE', path, config);
+}
+export async function dbUpsert(table, row, onConflict) {
+    const config = buildConfig();
+    return supabaseRequest('POST', table, config, row, {
+        'Prefer': 'resolution=merge-duplicates,return=representation',
+    });
+}
+export async function dbRpc(fnName, args) {
+    const config = buildConfig();
+    const url = `${config.url}/rest/v1/rpc/${fnName}`;
+    try {
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'apikey': config.serviceRoleKey,
+                'Authorization': `Bearer ${config.serviceRoleKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(args),
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok) {
+            const errText = await res.text().catch(() => '');
+            return { data: null, error: `RPC ${fnName} failed (${res.status}): ${errText.slice(0, 200)}` };
+        }
+        const data = await res.json();
+        return { data: data, error: null };
+    }
+    catch (err) {
+        return { data: null, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Health check — verifies Supabase connection works.
+ */
+export async function dbHealthCheck() {
+    try {
+        const config = buildConfig();
+        const res = await fetch(`${config.url}/rest/v1/`, {
+            headers: {
+                'apikey': config.serviceRoleKey,
+                'Authorization': `Bearer ${config.serviceRoleKey}`,
+            },
+            signal: AbortSignal.timeout(5_000),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=supabase.js.map

package/dist/db/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../src/db/supabase.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,uDAAuD;AACvD,8EAA8E;AAgB9E,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC;IAExD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,UAAU,eAAe,CAC5B,MAA2C,EAC3C,IAAY,EACZ,MAAsB,EACtB,IAAc,EACd,OAAgC;IAEhC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,YAAY,IAAI,EAAE,CAAC;IAE5C,MAAM,UAAU,GAA2B;QACzC,QAAQ,EAAE,MAAM,CAAC,cAAc;QAC/B,eAAe,EAAE,UAAU,MAAM,CAAC,cAAc,EAAE;QAClD,cAAc,EAAE,kBAAkB;QAClC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB;QACvH,GAAG,OAAO;KACX,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;YAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACnF,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,IAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,4BAA4B,GAAG,EAAE,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAErC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,IAAkB;IACjD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,QAAQ,CAAC,GAAG,mCAAmC,CAAC;IAC1D,CAAC;IAED,OAAO,eAAe,CAAI,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAI,KAAa,EAAE,GAA4B;IAC3E,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,OAAO,eAAe,CAAI,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAa,EACb,OAA2D,EAC3D,OAAgC;IAEhC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7C,OAAO,eAAe,CAAI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAa,EACb,OAA2D;IAE3D,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7C,OAAO,eAAe,CAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAI,KAAa,EAAE,GAA4B,EAAE,UAAkB;IAC/F,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,OAAO,eAAe,CAAI,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE;QACpD,QAAQ,EAAE,mDAAmD;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAI,MAAc,EAAE,IAA6B;IAC1E,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,gBAAgB,MAAM,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,MAAM,CAAC,cAAc;gBAC/B,eAAe,EAAE,UAAU,MAAM,CAAC,cAAc,EAAE;gBAClD,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,MAAM,YAAY,GAAG,CAAC,MAAM,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,IAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,WAAW,EAAE;YAChD,OAAO,EAAE;gBACP,QAAQ,EAAE,MAAM,CAAC,cAAc;gBAC/B,eAAe,EAAE,UAAU,MAAM,CAAC,cAAc,EAAE;aACnD;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/db/users.d.ts

@@ -0,0 +1,50 @@
+import type { UserTier } from '../llm/types.js';
+export interface GeotechUser {
+    id: string;
+    email: string;
+    geotech_key: string;
+    tier: UserTier;
+    stripe_customer_id: string | null;
+    stripe_subscription_id: string | null;
+    stripe_price_id: string | null;
+    subscription_status: 'none' | 'active' | 'past_due' | 'canceled' | 'trialing';
+    subscription_end_at: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export interface CreateUserInput {
+    email: string;
+}
+export declare function generateGeotechKey(): string;
+export declare function getUserByKey(geotechKey: string): Promise<GeotechUser | null>;
+export declare function getUserByEmail(email: string): Promise<GeotechUser | null>;
+export declare function getUserById(userId: string): Promise<GeotechUser | null>;
+export declare function getUserByStripeCustomer(stripeCustomerId: string): Promise<GeotechUser | null>;
+export declare function createUser(input: CreateUserInput): Promise<{
+    user: GeotechUser | null;
+    error: string | null;
+}>;
+export declare function updateSubscription(userId: string, updates: {
+    tier: UserTier;
+    stripe_subscription_id?: string | null;
+    stripe_price_id?: string | null;
+    subscription_status: 'active' | 'past_due' | 'canceled' | 'trialing' | 'none';
+    subscription_end_at?: string | null;
+}): Promise<{
+    error: string | null;
+}>;
+export declare function linkStripeCustomer(userId: string, stripeCustomerId: string): Promise<{
+    error: string | null;
+}>;
+export declare function regenerateKey(userId: string): Promise<{
+    key: string | null;
+    error: string | null;
+}>;
+/**
+ * Delete a user and all their data (GDPR right to erasure).
+ */
+export declare function deleteUser(userId: string): Promise<{
+    error: string | null;
+}>;
+export declare function resolveEffectiveTier(user: GeotechUser): UserTier;
+//# sourceMappingURL=users.d.ts.map

package/dist/db/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/db/users.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAMhD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mBAAmB,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;IAC9E,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAMD,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAclF;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAU/E;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAU7E;AAED,wBAAsB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAUnG;AAMD,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAkBpH;AAMD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,IAAI,EAAE,QAAQ,CAAC;IACf,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mBAAmB,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IAC9E,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,GACA,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAMnC;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAMnC;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAQzG;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAKlF;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,CAahE"}

package/dist/db/users.js

@@ -0,0 +1,132 @@
+// ---------------------------------------------------------------------------
+// User Management — Supabase-backed, privacy-first
+//
+// PRIVACY GUARANTEES:
+//   - We NEVER store user LLM API keys (OpenAI, Anthropic, HF tokens, etc.)
+//   - We NEVER log or store the content of prompts or responses
+//   - We NEVER store IP addresses or device fingerprints in the database
+//   - We store ONLY: email (account recovery), geotech_key (our auth token),
+//     tier, and Stripe billing IDs
+//   - User's LLM keys stay on their machine (~/.geotechcli/config.json)
+//     and are sent DIRECTLY to the LLM provider — never to our servers
+// ---------------------------------------------------------------------------
+import { randomBytes } from 'node:crypto';
+import { dbQuery, dbInsert, dbUpdate, dbDelete } from './supabase.js';
+// ---------------------------------------------------------------------------
+// Key generation — our auth token, NOT an LLM key
+// ---------------------------------------------------------------------------
+export function generateGeotechKey() {
+    return `gtp_${randomBytes(16).toString('hex')}`;
+}
+// ---------------------------------------------------------------------------
+// User lookup — hot path (every proxy request)
+// ---------------------------------------------------------------------------
+export async function getUserByKey(geotechKey) {
+    if (!geotechKey || !geotechKey.startsWith('gtp_') || geotechKey.length < 20) {
+        return null;
+    }
+    const { data, error } = await dbQuery({
+        table: 'users',
+        select: '*',
+        filters: [{ column: 'geotech_key', op: 'eq', value: geotechKey }],
+        limit: 1,
+    });
+    if (error || !data || data.length === 0)
+        return null;
+    return data[0];
+}
+export async function getUserByEmail(email) {
+    const { data, error } = await dbQuery({
+        table: 'users',
+        select: '*',
+        filters: [{ column: 'email', op: 'eq', value: email }],
+        limit: 1,
+    });
+    if (error || !data || data.length === 0)
+        return null;
+    return data[0];
+}
+export async function getUserById(userId) {
+    const { data, error } = await dbQuery({
+        table: 'users',
+        select: '*',
+        filters: [{ column: 'id', op: 'eq', value: userId }],
+        limit: 1,
+    });
+    if (error || !data || data.length === 0)
+        return null;
+    return data[0];
+}
+export async function getUserByStripeCustomer(stripeCustomerId) {
+    const { data, error } = await dbQuery({
+        table: 'users',
+        select: '*',
+        filters: [{ column: 'stripe_customer_id', op: 'eq', value: stripeCustomerId }],
+        limit: 1,
+    });
+    if (error || !data || data.length === 0)
+        return null;
+    return data[0];
+}
+// ---------------------------------------------------------------------------
+// User creation
+// ---------------------------------------------------------------------------
+export async function createUser(input) {
+    const geotechKey = generateGeotechKey();
+    const { data, error } = await dbInsert('users', {
+        email: input.email,
+        geotech_key: geotechKey,
+        tier: 'free',
+        subscription_status: 'none',
+    });
+    if (error) {
+        if (error.includes('duplicate') || error.includes('23505')) {
+            return { user: null, error: 'A user with this email already exists.' };
+        }
+        return { user: null, error };
+    }
+    return { user: data && data.length > 0 ? data[0] : null, error: null };
+}
+// ---------------------------------------------------------------------------
+// Subscription management (called from Stripe webhooks only)
+// ---------------------------------------------------------------------------
+export async function updateSubscription(userId, updates) {
+    const { error } = await dbUpdate('users', [{ column: 'id', op: 'eq', value: userId }], updates);
+    return { error };
+}
+export async function linkStripeCustomer(userId, stripeCustomerId) {
+    const { error } = await dbUpdate('users', [{ column: 'id', op: 'eq', value: userId }], { stripe_customer_id: stripeCustomerId });
+    return { error };
+}
+export async function regenerateKey(userId) {
+    const newKey = generateGeotechKey();
+    const { error } = await dbUpdate('users', [{ column: 'id', op: 'eq', value: userId }], { geotech_key: newKey });
+    if (error)
+        return { key: null, error };
+    return { key: newKey, error: null };
+}
+/**
+ * Delete a user and all their data (GDPR right to erasure).
+ */
+export async function deleteUser(userId) {
+    const { error } = await dbDelete('users', [{ column: 'id', op: 'eq', value: userId }]);
+    return { error: error ?? null };
+}
+// ---------------------------------------------------------------------------
+// Tier resolution
+// ---------------------------------------------------------------------------
+export function resolveEffectiveTier(user) {
+    if (user.subscription_status === 'active' || user.subscription_status === 'trialing') {
+        return user.tier;
+    }
+    if (user.subscription_status === 'past_due') {
+        return user.tier; // Grace period
+    }
+    if (user.subscription_status === 'canceled' && user.subscription_end_at) {
+        if (new Date(user.subscription_end_at) > new Date()) {
+            return user.tier; // Canceled but not yet expired
+        }
+    }
+    return 'free';
+}
+//# sourceMappingURL=users.js.map

package/dist/db/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/db/users.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mDAAmD;AACnD,EAAE;AACF,sBAAsB;AACtB,4EAA4E;AAC5E,gEAAgE;AAChE,yEAAyE;AACzE,6EAA6E;AAC7E,mCAAmC;AACnC,wEAAwE;AACxE,uEAAuE;AACvE,8EAA8E;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAyBtE,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAkB;IACnD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAgB;QACnD,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjE,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAgB;QACnD,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACtD,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAgB;QACnD,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,gBAAwB;IACpE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAgB;QACnD,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAC9E,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IAEH,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IAExC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAgB,OAAO,EAAE;QAC7D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,MAAM;QACZ,mBAAmB,EAAE,MAAM;KAC5B,CAAC,CAAC;IAEH,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,OAMC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EACtC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAC3C,OAAO,CACR,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,gBAAwB;IAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EACtC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAC3C,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CACzC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc;IAChD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EACtC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAC3C,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EACtC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAC5C,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAAC,IAAiB;IACpD,IAAI,IAAI,CAAC,mBAAmB,KAAK,QAAQ,IAAI,IAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,UAAU,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACxE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,+BAA+B;QACnD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}