@hasna/nopen 0.0.1

package/dist/db/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,UAAU,kJASrB,CAAC;AAEH,eAAO,MAAM,SAAS,iGAMpB,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAahB,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQhB,CAAC;AAEH;mFACmF;AACnF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASrB,CAAC;AAEJ;;uDAEuD;AACvD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQjB,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWnB,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQvB,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWpB,CAAC;AAEH;2EAC2E;AAC3E,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQtB,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAchB,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlB,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWtB,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOjB,CAAC;AAEH,oEAAoE;AACpE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYpB,CAAC;AAEH,4DAA4D;AAC5D,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQjB,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOjB,CAAC;AAEH,8DAA8D;AAC9D,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUpB,CAAC;AAIH,eAAO,MAAM,eAAe,8EAAsE,CAAC;AACnG,eAAO,MAAM,aAAa,0IASxB,CAAC;AACH,eAAO,MAAM,eAAe,6DAAqD,CAAC;AAElF,iFAAiF;AACjF,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAchB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCnB,CAAC;AAEH,+CAA+C;AAC/C,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQxB,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ3B,CAAC;AAEH,+EAA+E;AAC/E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYlB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @hasna/nopen — library entry point.
+ * Re-exports the public surface for embedding the nopen engine.
+ */
+export { config } from "./lib/config.js";
+export type { Config } from "./lib/config.js";
+export type { Site, SiteStatus, SiteKind, AgentRun, AgentRunStatus, DomainPurchase, Deployment, } from "./types/index.js";
+export declare const VERSION = "0.0.1";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EACV,IAAI,EACJ,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,cAAc,EACd,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,85 @@
+// @bun
+// src/lib/config.ts
+function cleanSecret(v) {
+  let s = v.trim();
+  if (s.length >= 2 && (s[0] === '"' && s.endsWith('"') || s[0] === "'" && s.endsWith("'"))) {
+    s = s.slice(1, -1).trim();
+  }
+  return s;
+}
+function env(key, fallback) {
+  const raw = process.env[key];
+  const v = raw != null ? cleanSecret(raw) : undefined;
+  return v && v.length > 0 ? v : fallback;
+}
+function intEnv(key, fallback, min = 1) {
+  const raw = env(key);
+  const n = raw != null ? Number(raw) : NaN;
+  return Number.isInteger(n) && n >= min ? n : fallback;
+}
+var config = {
+  appName: "nopen",
+  appDomain: env("NOPEN_DOMAIN", "nopen.co"),
+  port: Number(env("NOPEN_PORT", "3340")),
+  publicUrl: env("NOPEN_PUBLIC_URL", "http://localhost:3340"),
+  appUrl: env("NOPEN_APP_URL", env("NOPEN_PUBLIC_URL", "http://localhost:3340")),
+  databaseUrl: env("NOPEN_DATABASE_URL", "postgresql://localhost:5432/nopen"),
+  databaseHost: env("NOPEN_DATABASE_HOST"),
+  databaseSsl: env("NOPEN_DATABASE_SSL"),
+  anthropicApiKey: env("ANTHROPIC_API_KEY") ?? env("HASNAXYZ_ANTHROPIC_LIVE_API_KEY"),
+  openaiApiKey: env("OPENAI_API_KEY") ?? env("HASNAXYZ_OPENAI_LIVE_API_KEY"),
+  zhipuApiKey: env("ZHIPU_API_KEY") ?? env("HASNAXYZ_ZHIPU_LIVE_API_KEY"),
+  openrouterApiKey: env("OPENROUTER_API_KEY") ?? env("HASNAXYZ_OPENROUTER_LIVE_API_KEY"),
+  models: {
+    architect: env("NOPEN_MODEL_ARCHITECT", "claude-opus-4-8"),
+    builder: env("NOPEN_MODEL_BUILDER", "claude-sonnet-4-6"),
+    fast: env("NOPEN_MODEL_FAST", "gpt-5.4-mini"),
+    cheap: env("NOPEN_MODEL_CHEAP", "glm-5.2")
+  },
+  autopilot: {
+    enabled: env("NOPEN_AUTOPILOT_ENABLED", "auto") !== "off",
+    maxTasksPerCycle: Number(env("NOPEN_AUTOPILOT_MAX_TASKS", "12")),
+    defaultDailyCapCredits: Number(env("NOPEN_AUTOPILOT_DAILY_CAP", "0")),
+    buyDomains: env("NOPEN_AUTOPILOT_BUY_DOMAINS", "0") === "1",
+    paused: env("NOPEN_AUTOPILOT_PAUSED", "0") === "1",
+    globalDailyCapCredits: Number(env("NOPEN_AUTOPILOT_GLOBAL_DAILY_CAP", "0"))
+  },
+  e2bApiKey: env("E2B_API_KEY") ?? env("HASNAXYZ_E2B_LIVE_API_KEY"),
+  sandbox: {
+    enabled: env("NOPEN_SANDBOX_ENABLED", "auto") !== "off",
+    template: env("NOPEN_SANDBOX_TEMPLATE", "base"),
+    timeoutMs: Number(env("NOPEN_SANDBOX_TIMEOUT_MS", "300000")),
+    commandTimeoutMs: Number(env("NOPEN_SANDBOX_CMD_TIMEOUT_MS", "180000"))
+  },
+  review: {
+    enabled: env("NOPEN_REVIEW_ENABLED", "auto") !== "off",
+    maxFixes: intEnv("NOPEN_REVIEW_MAX_FIXES", 2, 0)
+  },
+  builder: {
+    goalLoop: env("NOPEN_GOAL_BUILD", "auto") !== "off",
+    maxIters: intEnv("NOPEN_GOAL_BUILD_MAX_ITERS", 4, 1)
+  },
+  cloudflareApiToken: env("CLOUDFLARE_API_TOKEN"),
+  cloudflareEmail: env("CLOUDFLARE_EMAIL") ?? env("HASNAXYZ_CLOUDFLARE_LIVE_EMAIL"),
+  cloudflareGlobalKey: env("CLOUDFLARE_GLOBAL_API_KEY") ?? env("HASNAXYZ_CLOUDFLARE_LIVE_API_KEY"),
+  cloudflareAccountId: env("CLOUDFLARE_ACCOUNT_ID"),
+  stripeSecretKey: env("STRIPE_SECRET_KEY") ?? env("HASNATOOLS_NOPEN_STRIPE_LIVE_SECRET_KEY"),
+  stripeWebhookSecret: env("STRIPE_WEBHOOK_SECRET"),
+  takeRateBps: Number(env("NOPEN_TAKE_RATE_BPS", "1000")),
+  forwardEmail: env("NOPEN_FORWARD_EMAIL", "andrei@hasna.com"),
+  jwtSecret: env("NOPEN_JWT_SECRET", "dev-insecure-change-me"),
+  adminSecret: env("NOPEN_ADMIN_SECRET"),
+  ingestSecret: env("NOPEN_INGEST_SECRET") ?? env("NOPEN_JWT_SECRET", "dev-insecure-change-me"),
+  googleClientId: env("GOOGLE_CLIENT_ID"),
+  googleClientSecret: env("GOOGLE_CLIENT_SECRET"),
+  resendApiKey: env("RESEND_API_KEY"),
+  emailFrom: env("NOPEN_EMAIL_FROM", "Nopen <noreply@todos.md>"),
+  isDev: /localhost|127\.0\.0\.1/.test(env("NOPEN_PUBLIC_URL", "http://localhost:3340"))
+};
+
+// src/index.ts
+var VERSION = "0.0.1";
+export {
+  config,
+  VERSION
+};

package/dist/lib/auth.d.ts

@@ -0,0 +1,65 @@
+export declare const DEVICE_CODE_TTL_MS: number;
+export declare const MAGIC_LINK_TTL_MS: number;
+export declare const SESSION_TTL_MS: number;
+/** Lifetime of an exchanged device (CLI) token. Finite so a leaked token expires. */
+export declare const DEVICE_TOKEN_TTL_MS: number;
+export declare function normalizeUserCode(code: string): string;
+export declare function apiTokenIsActive(expiresAt: Date | null | undefined, now?: Date): boolean;
+export interface DeviceStart {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    expiresInSec: number;
+}
+export declare function startDeviceAuth(verificationBase: string): Promise<DeviceStart>;
+export declare function approveDeviceCode(code: string, userId?: string): Promise<boolean>;
+export declare function exchangeDeviceCode(deviceCode: string): Promise<{
+    status: "pending" | "expired" | "approved";
+    token?: string;
+    userId?: string | null;
+}>;
+export declare function validateToken(token: string): Promise<{
+    id: string;
+    name: string | null;
+    createdAt: Date;
+    userId: string | null;
+    token: string;
+    deviceCode: string | null;
+    userCode: string | null;
+    approved: boolean;
+    expiresAt: Date | null;
+    lastUsedAt: Date | null;
+} | null>;
+export declare function upsertUser(email: string, name?: string | null): Promise<{
+    id: string;
+    name: string | null;
+    email: string;
+    stripeCustomerId: string | null;
+    plan: string;
+    credits: number;
+    role: string;
+    connectAccountId: string | null;
+    connectChargesEnabled: boolean;
+    createdAt: Date;
+}>;
+export declare function getUserById(id: string): Promise<{
+    id: string;
+    name: string | null;
+    email: string;
+    stripeCustomerId: string | null;
+    plan: string;
+    credits: number;
+    role: string;
+    connectAccountId: string | null;
+    connectChargesEnabled: boolean;
+    createdAt: Date;
+} | null>;
+/** Mint a long-lived web session token bound to a user (web/app login). */
+export declare function createSessionToken(userId: string, name?: string): Promise<string>;
+/** Revoke a session/API token (logout). */
+export declare function revokeToken(token: string): Promise<void>;
+/** Create a single-use magic-link token for `email`. Returns the raw token. */
+export declare function createMagicToken(email: string): Promise<string>;
+/** Consume a magic-link token. Returns the bound email, or null if invalid. */
+export declare function consumeMagicToken(token: string): Promise<string | null>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AACjD,eAAO,MAAM,iBAAiB,QAAiB,CAAC;AAChD,eAAO,MAAM,cAAc,QAA2B,CAAC;AACvD,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AAgB5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,OAAa,GAAG,OAAO,CAE9F;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAQpF;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUvF;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAejG;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM;;;;;;;;;;;UAiBhD;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;GAgBnE;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;UAE3C;AAED,2EAA2E;AAC3E,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAYtF;AAED,2CAA2C;AAC3C,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;AAED,+EAA+E;AAC/E,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWrE;AAED,+EAA+E;AAC/E,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAU7E"}

package/dist/lib/build-agents.d.ts

@@ -0,0 +1,81 @@
+export type BuildAgent = "cloud" | "codewith";
+export declare const BUILD_AGENTS: readonly ["cloud", "codewith"];
+/** Default engine when none/invalid is supplied — our premium builder. */
+export declare const DEFAULT_AGENT: BuildAgent;
+/** Internal vendor an engine maps to. NEVER exposed to clients/users. */
+export type BuildEngine = "claude-agent-sdk" | "codewith";
+/** Extra credits added on top of the engine's base price for an "expert" build. */
+export declare const EXPERT_SURCHARGE: number;
+export interface BuildAgentInfo {
+    id: BuildAgent;
+    /** User-facing name (white-label — reveals no vendor). */
+    name: string;
+    /** Internal engine/vendor — for logs + routing only, NEVER sent to clients. */
+    engine: BuildEngine;
+    /** In-sandbox CLI binary used for an expert (real-agent) run. Internal only. */
+    cli: string;
+    /** One-line "what it's good at" for the picker (vendor-neutral). */
+    blurb: string;
+    /** Base credit price for a (non-expert) build with this engine. */
+    baseCredits: number;
+}
+export declare const BUILD_AGENT_INFO: Record<BuildAgent, BuildAgentInfo>;
+/** Validate/normalize an engine id (case-insensitive); unknown → DEFAULT_AGENT. */
+export declare function normalizeAgent(agent: string | null | undefined): BuildAgent;
+/** Map a user's plan to the build engine it grants. */
+export declare function engineForPlan(plan: string | null | undefined): BuildAgent;
+/**
+ * Resolve the build choice for a user. If the request explicitly names a valid
+ * engine, honor it; otherwise default to the engine the user's plan grants
+ * (premium → cloud, everyone else → the economical codewith). This is how the
+ * builder is picked per the user's plan when they don't override it.
+ */
+export declare function buildChoiceForPlan(input: {
+    agent?: unknown;
+    expert?: unknown;
+} | null | undefined, plan: string | null | undefined): BuildChoice;
+/** Credit price for a build with `agent` at the given expert setting. */
+export declare function buildCost(agent: BuildAgent, expert: boolean): number;
+/** The user's build choice persisted on a site and honored by the build worker. */
+export interface BuildChoice {
+    agent: BuildAgent;
+    expert: boolean;
+}
+/** Coerce arbitrary request input into a safe BuildChoice (unknown engine → default). */
+export declare function normalizeBuildChoice(input: {
+    agent?: unknown;
+    expert?: unknown;
+} | null | undefined): BuildChoice;
+/** Credit cost of a build choice. */
+export declare function buildChoiceCost(choice: BuildChoice): number;
+/** The cheapest engine base price — the floor charged when no agent ran (template only). */
+export declare function minBaseCredits(): number;
+/**
+ * The FAIR price actually owed for a build, given what ran. Used to refund the
+ * difference vs the (upfront-charged) requested price so we never overcharge:
+ *  - not downgraded            → the full requested price.
+ *  - expert fell back to std   → the engine's standard (no-surcharge) price.
+ *  - no agent ran (template)   → the cheapest base price.
+ */
+export declare function fairBuildCost(choice: BuildChoice, agentUsed: string, downgraded: boolean): number;
+/** UI-ready descriptor — deliberately OMITS `engine`/`cli` so no vendor leaks to clients. */
+export interface BuildAgentDescriptor {
+    id: BuildAgent;
+    name: string;
+    blurb: string;
+    baseCredits: number;
+    /** Price for an expert build with this engine. */
+    expertCredits: number;
+}
+/** UI-ready list of engines with both price points and NO vendor identity. */
+export declare function listBuildAgents(): BuildAgentDescriptor[];
+export interface AgentAvailability {
+    id: BuildAgent;
+    /** Can do at least a standard build (the shared ai-sdk providers are configured). */
+    available: boolean;
+    /** Can do an EXPERT build (the engine's own real CLI credential is present). */
+    expertAvailable: boolean;
+}
+/** Which engines are usable given the configured credentials (drives the UI picker). */
+export declare function agentAvailability(): AgentAvailability[];
+//# sourceMappingURL=build-agents.d.ts.map

package/dist/lib/build-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-agents.d.ts","sourceRoot":"","sources":["../../src/lib/build-agents.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9C,eAAO,MAAM,YAAY,gCAAiC,CAAC;AAE3D,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,UAAoB,CAAC;AAEjD,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAa1D,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,QAA8C,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,UAAU,CAAC;IACf,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAiB/D,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAG3E;AAKD,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAEzE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC/D,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,WAAW,CAOb;AAED,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAGpE;AAED,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAKjH;AAED,qCAAqC;AACrC,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE3D;AAED,4FAA4F;AAC5F,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAIjG;AAED,6FAA6F;AAC7F,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,IAAI,oBAAoB,EAAE,CAKxD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,UAAU,CAAC;IACf,qFAAqF;IACrF,SAAS,EAAE,OAAO,CAAC;IACnB,gFAAgF;IAChF,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,IAAI,iBAAiB,EAAE,CAUvD"}

package/dist/lib/checkout.d.ts

@@ -0,0 +1,24 @@
+export interface StripeCheckoutPayment {
+    sessionId: string;
+    amountCents: number;
+    currency: string;
+}
+export declare function normalizeCurrency(currency: string | null | undefined): string;
+export declare function paidCheckoutFromStripeObject(obj: {
+    id?: string;
+    payment_status?: string;
+    amount_total?: number;
+    currency?: string;
+}): StripeCheckoutPayment | null;
+/**
+ * Outcome of a fulfillment attempt:
+ *  - "fulfilled": credits granted now.
+ *  - "already": the session exists but isn't pending (already fulfilled / replayed).
+ *  - "not_recorded": no such session yet — the webhook likely beat /api/checkout's
+ *    commit. The caller should return a 5xx so Stripe RETRIES rather than dropping
+ *    the payment (otherwise the user pays and is never credited).
+ *  - "invalid": malformed payment payload.
+ */
+export type FulfillResult = "fulfilled" | "already" | "not_recorded" | "invalid";
+export declare function fulfillCreditCheckout(payment: StripeCheckoutPayment, reason: string): Promise<FulfillResult>;
+//# sourceMappingURL=checkout.d.ts.map

package/dist/lib/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../src/lib/checkout.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAE7E;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE;IAChD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,qBAAqB,GAAG,IAAI,CAO/B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,cAAc,GAAG,SAAS,CAAC;AAEjF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA+ClH"}

package/dist/lib/client.d.ts

@@ -0,0 +1,52 @@
+import type { SiteSpec } from "./site-template.js";
+export interface NopenConfig {
+    apiUrl: string;
+    token?: string;
+}
+export interface ClientSite {
+    id: string;
+    name: string | null;
+    status: string;
+    domain: string | null;
+    liveUrl: string | null;
+    prompt: string;
+}
+export interface CreateSiteResponse {
+    siteId: string;
+    runId: string;
+    status: "live" | "failed";
+    url: string | null;
+    domain: string | null;
+    iterations: number;
+    spec: SiteSpec | null;
+}
+export interface ListSitesResponse {
+    sites: ClientSite[];
+}
+export interface SiteStatusResponse {
+    site: ClientSite;
+}
+export interface SuggestDomainsResponse {
+    suggestions: {
+        domain: string;
+        available: boolean;
+        priceCents: number | null;
+        renewCents: number | null;
+        currency: string | null;
+    }[];
+}
+export declare function loadConfig(): NopenConfig;
+export declare function saveToken(apiUrl: string, token: string): void;
+export declare class NopenClient {
+    private cfg;
+    constructor(cfg?: NopenConfig);
+    private headers;
+    /** Fetch + parse JSON; throw an actionable error on non-2xx. */
+    private json;
+    createSite(prompt: string, buyDomain?: boolean, domains?: string[]): Promise<CreateSiteResponse>;
+    listSites(): Promise<ListSitesResponse>;
+    siteStatus(id: string): Promise<SiteStatusResponse>;
+    suggestDomains(q: string): Promise<SuggestDomainsResponse>;
+    deviceLogin(onPrompt: (userCode: string, uri: string) => void): Promise<string>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAMnD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,EAAE,CAAC;CACL;AAED,wBAAgB,UAAU,IAAI,WAAW,CAcxC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAItD;AAED,qBAAa,WAAW;IACV,OAAO,CAAC,GAAG;gBAAH,GAAG,GAAE,WAA0B;IAEnD,OAAO,CAAC,OAAO;IAOf,gEAAgE;YAClD,IAAI;IAQZ,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,UAAQ,EAAE,OAAO,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUlG,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIvC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAInD,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAO1D,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAuBtF"}

package/dist/lib/config.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Central configuration for platform-nopen.
+ * All secrets come from the environment (loaded from the vault / ~/.secrets at runtime).
+ * Never hardcode credentials here.
+ */
+/**
+ * Defensive: some secret stores keep surrounding quotes / stray whitespace in a
+ * value (e.g. KEY="abc"), which silently breaks auth headers. Strip one layer of
+ * matching surrounding quotes and trim — credentials never legitimately contain those.
+ */
+export declare function cleanSecret(v: string): string;
+export declare const config: {
+    /** App */
+    readonly appName: "nopen";
+    readonly appDomain: string;
+    readonly port: number;
+    readonly publicUrl: string;
+    /** Where the dashboard SPA lives. Same origin as the API in prod; the Vite
+     *  dev server (:3341) in local dev. OAuth/magic-link redirects land here. */
+    readonly appUrl: string;
+    /** Postgres */
+    readonly databaseUrl: string;
+    /** Optional Postgres host override. Can be a Unix socket dir such as /var/run/postgresql. */
+    readonly databaseHost: string | undefined;
+    /** Postgres TLS mode. RDS Postgres 16 forces SSL (rds.force_ssl=1), so prod sets
+     *  NOPEN_DATABASE_SSL=require — encrypt without CA verification (the in-VPC RDS
+     *  endpoint presents the Amazon RDS CA, which we don't bundle). Unset = no TLS
+     *  (local socket / dev). */
+    readonly databaseSsl: string | undefined;
+    /** AI providers (high-level architecture: Anthropic + OpenAI) */
+    readonly anthropicApiKey: string | undefined;
+    readonly openaiApiKey: string | undefined;
+    /** Zhipu / GLM — the economical "codewith" engine runs GLM-5.2. Optional;
+     *  economical builds fall back to the ai-sdk fast model when absent. */
+    readonly zhipuApiKey: string | undefined;
+    /** OpenRouter — access to free/community models for the economical engine. */
+    readonly openrouterApiKey: string | undefined;
+    /** Default models per role */
+    readonly models: {
+        readonly architect: string;
+        readonly builder: string;
+        readonly fast: string;
+        /** Economical model for the "codewith" engine (GLM-5.2 + free models). */
+        readonly cheap: string;
+    };
+    /** Autopilot — the per-app goal + task-list engine. */
+    readonly autopilot: {
+        /** Off by default; the daemon/cycle only runs apps when enabled. */
+        readonly enabled: boolean;
+        /** Max tasks executed per cycle invocation (safety bound). */
+        readonly maxTasksPerCycle: number;
+        /** Default per-app daily credit cap (0 = no per-app cap, only balance). */
+        readonly defaultDailyCapCredits: number;
+        /** Real domain purchases spend money — opt-in. */
+        readonly buyDomains: boolean;
+        /** Platform-wide kill switch: when set, the cycle does nothing. */
+        readonly paused: boolean;
+        /** Aggregate platform credit ceiling per day (0 = unlimited). */
+        readonly globalDailyCapCredits: number;
+    };
+    /** Sandboxes (e2b) — ALL generated-app building/execution happens here, never
+     *  on the host. The key comes from the vault (hasnaxyz/e2b/live/api_key). */
+    readonly e2bApiKey: string | undefined;
+    readonly sandbox: {
+        /** Sandbox build is on whenever an e2b key is present, unless explicitly off. */
+        readonly enabled: boolean;
+        readonly template: string;
+        /** Hard ceiling for a single build sandbox's lifetime. */
+        readonly timeoutMs: number;
+        /** Per-command ceiling inside the sandbox. */
+        readonly commandTimeoutMs: number;
+    };
+    /** Review gate — our Codewith reviewer double-checks the build before go-live.
+     *  On by default (when an economical-engine credential is present); set "off" to skip. */
+    readonly review: {
+        readonly enabled: boolean;
+        readonly maxFixes: number;
+    };
+    /** Goal-loop builder — the premium "cloud" engine drives one goal-directed agent
+     *  session that iterates until the in-sandbox smoke passes. On by default; "off" to skip. */
+    readonly builder: {
+        readonly goalLoop: boolean;
+        readonly maxIters: number;
+    };
+    /** Cloudflare (domains + Workers deploy + email).
+     * Supports both scoped Bearer tokens and the legacy Global API Key (email + key). */
+    readonly cloudflareApiToken: string | undefined;
+    readonly cloudflareEmail: string | undefined;
+    readonly cloudflareGlobalKey: string | undefined;
+    readonly cloudflareAccountId: string | undefined;
+    /** Stripe (SaaS billing + agent-payment protocol) */
+    readonly stripeSecretKey: string | undefined;
+    readonly stripeWebhookSecret: string | undefined;
+    /** Platform take rate on site sales (basis points; 1000 = 10%). */
+    readonly takeRateBps: number;
+    /** Email — catch-all forward destination for site domains */
+    readonly forwardEmail: string;
+    /** Auth */
+    readonly jwtSecret: string;
+    /** Admin secret required to approve device-code logins (prevents impersonation). */
+    readonly adminSecret: string | undefined;
+    /** Secret used to derive per-site ingest tokens that scope the public
+     *  /subscribe + /px beacons to a specific site. Falls back to the auth secret. */
+    readonly ingestSecret: string;
+    /** Google OAuth (consumer "Continue with Google" login). */
+    readonly googleClientId: string | undefined;
+    readonly googleClientSecret: string | undefined;
+    /** Resend — transactional email used to deliver magic-link sign-in emails. */
+    readonly resendApiKey: string | undefined;
+    readonly emailFrom: string;
+    /** Dev mode: relaxes a few flows (e.g. returns the magic link in the API
+     *  response so local sign-in works without inbox access). */
+    readonly isDev: boolean;
+};
+export type Config = typeof config;
+/** Throws if a required secret is missing — call before operations that need it. */
+export declare function requireSecret(name: keyof Config): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAM7C;AAkBD,eAAO,MAAM,MAAM;IACjB,UAAU;;;;;IAKV;iFAC6E;;IAG7E,eAAe;;IAKf,6FAA6F;;IAE7F;;;gCAG4B;;IAG5B,iEAAiE;;;IAGjE;4EACwE;;IAExE,8EAA8E;;IAE9E,8BAA8B;;;;;QAK5B,0EAA0E;;;IAI5E,uDAAuD;;QAErD,oEAAoE;;QAEpE,8DAA8D;;QAE9D,2EAA2E;;QAE3E,kDAAkD;;QAElD,mEAAmE;;QAEnE,iEAAiE;;;IAInE;iFAC6E;;;QAG3E,iFAAiF;;;QAGjF,0DAA0D;;QAE1D,8CAA8C;;;IAIhD;8FAC0F;;;;;IAO1F;iGAC6F;;;;;IAM7F;yFACqF;;;;;IAOrF,qDAAqD;;;IAGrD,mEAAmE;;IAGnE,6DAA6D;;IAG7D,WAAW;;IAEX,oFAAoF;;IAEpF;sFACkF;;IAGlF,4DAA4D;;;IAI5D,8EAA8E;;;IAI9E;iEAC6D;;CAErD,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC;AAEnC,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,MAAM,GAAG,MAAM,CAQxD"}

package/dist/lib/connect.d.ts

@@ -0,0 +1,14 @@
+export interface ConnectStatus {
+    connected: boolean;
+    chargesEnabled: boolean;
+    accountId: string | null;
+}
+/** Create the connected account if missing; return its id. */
+export declare function ensureConnectAccount(userId: string): Promise<string>;
+/** Hosted onboarding link for the user to finish payout setup. */
+export declare function onboardingLink(userId: string): Promise<string>;
+/** Refresh + persist whether the account can take charges. */
+export declare function refreshConnectStatus(userId: string): Promise<ConnectStatus>;
+/** The platform's application fee for a sale (the take rate). */
+export declare function applicationFeeCents(amountCents: number): number;
+//# sourceMappingURL=connect.d.ts.map

package/dist/lib/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/lib/connect.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,8DAA8D;AAC9D,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO1E;AAED,kEAAkE;AAClE,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQpE;AAED,8DAA8D;AAC9D,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAYjF;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D"}

package/dist/lib/credits.d.ts

@@ -0,0 +1,52 @@
+/** Default credits per plan (monthly grant), polsia-inspired. */
+export declare const PLAN_CREDITS: {
+    readonly free: 5;
+    readonly starter: 30;
+    readonly pro: 120;
+};
+/** Credit cost per action. */
+export declare const COST: {
+    readonly site_build: 1;
+    readonly domain_buy: 2;
+};
+export declare class InsufficientCreditsError extends Error {
+    balance: number;
+    needed: number;
+    constructor(balance: number, needed: number);
+}
+export declare function assertPositiveCreditAmount(amount: number, label?: string): void;
+export declare function getBalance(userId: string): Promise<number>;
+export declare function grantCredits(userId: string, amount: number, reason: string): Promise<number>;
+/**
+ * Spend credits atomically. A single conditional UPDATE (… WHERE credits >= amount)
+ * prevents the read-then-write race (concurrent double-spend / negative balance).
+ * Throws InsufficientCreditsError if the guarded update affects no row.
+ */
+export declare function spendCredits(userId: string, amount: number, reason: string, siteId?: string): Promise<number>;
+/**
+ * Charge a task's credits exactly once. The idempotency key (e.g.
+ * `task:<id>:attempt:<n>:charge`) is used as the ledger reason; a retry with the
+ * same key is a no-op. Throws InsufficientCreditsError when the balance is short.
+ */
+export declare function chargeTaskCredits(userId: string, amount: number, idempotencyKey: string, siteId?: string): Promise<number>;
+/** Refund a task's credits exactly once (e.g. on failure). Idempotent on the key. */
+export declare function refundTaskCredits(userId: string, amount: number, idempotencyKey: string): Promise<number>;
+/** Credits spent on a site today (for per-app daily caps). Counts only debits. */
+export declare function spentTodayForSite(siteId: string): Promise<number>;
+/** Total credits ever spent on a site (for the per-app LIFETIME budget cap). */
+export declare function spentLifetimeForSite(siteId: string): Promise<number>;
+/** Total credits spent across the platform today (for the global circuit breaker). */
+export declare function spentTodayGlobal(): Promise<number>;
+/** Whether a ledger entry with this reason already exists (webhook idempotency). */
+export declare function ledgerReasonExists(reason: string): Promise<boolean>;
+/** Ledger history for a user. */
+export declare function ledger(userId: string, limit?: number): Promise<{
+    id: string;
+    createdAt: Date;
+    userId: string | null;
+    siteId: string | null;
+    delta: number;
+    reason: string;
+    balanceAfter: number;
+}[]>;
+//# sourceMappingURL=credits.d.ts.map

package/dist/lib/credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credits.d.ts","sourceRoot":"","sources":["../../src/lib/credits.ts"],"names":[],"mappings":"AASA,iEAAiE;AACjE,eAAO,MAAM,YAAY;;;;CAOf,CAAC;AAEX,8BAA8B;AAC9B,eAAO,MAAM,IAAI;;;CAGP,CAAC;AAEX,qBAAa,wBAAyB,SAAQ,KAAK;IAC9B,OAAO,EAAE,MAAM;IAAS,MAAM,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAS,MAAM,EAAE,MAAM;CAG1D;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,IAAI,CAIlF;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhE;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlG;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAejB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,qFAAqF;AACrF,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED,kFAAkF;AAClF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYvE;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM1E;AAED,sFAAsF;AACtF,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAMxD;AAED,oFAAoF;AACpF,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGzE;AAED,iCAAiC;AACjC,wBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK;;;;;;;;KAOtD"}

package/dist/lib/doctor.d.ts

@@ -0,0 +1,25 @@
+export type Severity = "critical" | "feature" | "optional";
+export interface Check {
+    key: string;
+    label: string;
+    ok: boolean;
+    severity: Severity;
+    /** What's wrong / what works. */
+    detail: string;
+    /** How to fix it (only when not ok). */
+    fix?: string;
+}
+export interface DoctorReport {
+    checks: Check[];
+    ok: boolean;
+}
+/** Static, no-network configuration inspection. */
+export declare function inspectConfig(): Check[];
+export declare function report(checks: Check[]): DoctorReport;
+/** Human-readable report for the terminal. */
+export declare function formatReport(r: DoctorReport): string;
+/** Throws on critical failures in production; warns (but continues) in dev. Call at boot. */
+export declare function assertBootConfig(log?: (m: string) => void): void;
+/** Live credential checks. Network calls; only run on demand (`nopen doctor --probe`). */
+export declare function probe(): Promise<Check[]>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/lib/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/lib/doctor.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,KAAK;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;CACb;AAID,mDAAmD;AACnD,wBAAgB,aAAa,IAAI,KAAK,EAAE,CA6GvC;AAID,wBAAgB,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAEpD;AAED,8CAA8C;AAC9C,wBAAgB,YAAY,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAgBpD;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAoB,GAAG,IAAI,CAO/E;AAcD,0FAA0F;AAC1F,wBAAsB,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAmF9C"}

package/dist/lib/ingest.d.ts

@@ -0,0 +1,9 @@
+/** Stable per-site ingest token (truncated HMAC of the site id under the secret). */
+export declare function siteIngestToken(siteId: string): string;
+/** Constant-time check that `token` is the valid ingest token for `siteId`. */
+export declare function verifyIngestToken(siteId: string, token: string | undefined | null): boolean;
+/** Public subscribe-ingest URL embedded in a generated site (token-scoped). */
+export declare function subscribeIngestUrl(siteId: string): string;
+/** Public pageview-beacon URL embedded in a generated site (token-scoped). */
+export declare function analyticsIngestUrl(siteId: string): string;
+//# sourceMappingURL=ingest.d.ts.map

package/dist/lib/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/lib/ingest.ts"],"names":[],"mappings":"AAaA,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAM3F;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/lib/iprate.d.ts

@@ -0,0 +1,26 @@
+/**
+ * In-memory IP rate limiting for the public, CORS-open endpoints (/plan, /subscribe,
+ * /px). Two concerns the naive Map approach got wrong:
+ *   1. Trust: keying on a client-supplied X-Forwarded-For lets an attacker rotate the
+ *      header to bypass the limit AND inflate the map without bound.
+ *   2. Memory: an unbounded Map of one entry per source IP is a DoS (OOM) on a public
+ *      endpoint. We prune stale entries and hard-cap the key count.
+ */
+import type { Context } from "hono";
+/**
+ * The only trustworthy client IP behind our Cloudflare proxy is `cf-connecting-ip`
+ * (set by the edge, overwrites any client value). We deliberately do NOT fall back to
+ * the spoofable X-Forwarded-For; with no CF header we use the real socket peer.
+ */
+export declare function clientIp(c: Context): string;
+export interface RateLimiter {
+    (key: string, now?: number): boolean;
+    size(): number;
+}
+/**
+ * Fixed-window limiter (`maxPerWindow` hits per `windowMs` per key) with a hard
+ * `maxKeys` cap: when exceeded we prune expired entries, then evict the oldest, so a
+ * flood of distinct keys can never exhaust memory.
+ */
+export declare function makeRateLimiter(maxPerWindow: number, windowMs?: number, maxKeys?: number): RateLimiter;
+//# sourceMappingURL=iprate.d.ts.map

package/dist/lib/iprate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iprate.d.ts","sourceRoot":"","sources":["../../src/lib/iprate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGpC;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAQ3C;AAED,MAAM,WAAW,WAAW;IAC1B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,IAAI,IAAI,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,SAAS,EAAE,OAAO,SAAS,GAAG,WAAW,CAqBtG"}