@jchat/runtime 1.0.0-alpha.2 → 1.0.0-alpha.21

package/CHANGELOG.md

@@ -1,5 +1,111 @@
 # @jchat/runtime
 
+## 1.0.0-alpha.21
+
+### Patch Changes
+
+- Bumped `@jchat/*` dependencies:
+  - [`shared@1.0.0-alpha.21`](https://github.com/mjjabarullah/jchat/releases/tag/shared@v1.0.0-alpha.21)
+
+## 1.0.0-alpha.20
+
+### Patch Changes
+
+- Bumped `@jchat/*` dependencies:
+  - [`shared@1.0.0-alpha.20`](https://github.com/mjjabarullah/jchat/releases/tag/shared@v1.0.0-alpha.20)
+
+## 1.0.0-alpha.19
+
+### Patch Changes
+
+- Bumped `@jchat/*` dependencies:
+  - [`shared@1.0.0-alpha.19`](https://github.com/mjjabarullah/jchat/releases/tag/shared@v1.0.0-alpha.19)
+
+## 1.0.0-alpha.17
+
+### Patch Changes
+
+- Updated dependency `@jchat/shared` to `v1.0.0-alpha.17`
+
+## 1.0.0-alpha.16
+
+No changes in this release.
+
+## 1.0.0-alpha.15
+
+### Patch Changes
+
+- adba4c7: Remove redundant `prepack` build lifecycle scripts across addon development and runtime packages to eliminate concurrent build race conditions during publication.
+
+## 1.0.0-alpha.14
+
+No changes in this release.
+
+## 1.0.0-alpha.13
+
+No changes in this release.
+
+## 1.0.0-alpha.12
+
+### Patch Changes
+
+- 3db301b: - Improve runtime supervisor reliability and multi-site configuration validation
+  - Enhance lifecycle checks and error handling in the `jchatRuntime` plugin
+  - Optimize server bootstrap and database health checks during initialization
+- a53cd64: - Improve runtime startup performance with faster offline entitlement validation
+  - Streamline local development workflows on `localhost` and loopback environments
+  - Standardize runtime path and data directory resolution
+  - Internal runtime supervisor stability and performance improvements
+- a7f8097: - Improve deployment security integrity and session protection
+  - Enhance runtime startup guards and installation flow routing
+  - Add offline grace period support for license verification during intermittent network interruptions
+  - Improve cross-process license locking reliability and automatic stale lock recovery
+  - Add support for custom runtime data directory configuration via `JCHAT_DATA_DIR`
+
+## 1.0.0-alpha.11
+
+### Patch Changes
+
+- 4cdf5a9: Consolidate `Provider` and `RoutingMode` types and unify runtime type exports across domain, check, install, and plugin modules.
+- 8ce0db9: Add `jchatRuntime` Elysia plugin encapsulating background license supervision, boot check throttling (24h), configurable check intervals (`JCHAT_LICENSE_CHECK_INTERVAL_DAYS`), timer unref on exit, and fail-closed route guards.
+
+## 1.0.0-alpha.10
+
+## 1.0.0-alpha.9
+
+### Patch Changes
+
+- 7aef82c: Refactor runtime registry endpoint defaults to focus strictly on cryptographic licensing and support environment-aware overrides.
+
+## 1.0.0-alpha.8
+
+## 1.0.0-alpha.7
+
+### Minor Changes
+
+- 7cef24c: - Enhance addon package diagnostics with semantic version compatibility validation for JChat host and Addon SDK
+  - Add support for local workspace development, sandbox test harnesses, and distribution packaging
+  - Improve runtime license verification and multi-environment path resolution
+  - Update addon generator templates with 20-language i18n support, standard scripts, and type definitions
+
+## 1.0.0-alpha.6
+
+## 1.0.0-alpha.5
+
+### Patch Changes
+
+- 457b0fc: Refactor server configuration: merged environment schema into `server-context.ts` in `@jchat/runtime` and updated `loadServerContext` to properly accept `publicKeyPem`. Updated `@jchat/chat` to pass `SIGNING_ROOT_KEY` into `loadServerContext`.
+- 93d798f: Fix `ServerConfigSchema` export
+
+## 1.0.0-alpha.4
+
+### Patch Changes
+
+- 457b0fc: Refactor server configuration: merged environment schema into `server-context.ts` in `@jchat/runtime` and updated `loadServerContext` to properly accept `publicKeyPem`. Updated `@jchat/chat` to pass `SIGNING_ROOT_KEY` into `loadServerContext`.
+- 93d798f: Fix `ServerConfigSchema` export
+
+## 1.0.0-alpha.3
+
 ## 1.0.0-alpha.2
 
 ### Patch Changes

package/LICENSE

@@ -1,127 +1,23 @@
-JChat Runtime License Agreement - July 29, 2026
+CUSTOM COMMERCIAL END USER LICENSE AGREEMENT (EULA)
 
-Copyright (c) 2026 Md. Jabarullah. All rights reserved.
+Copyright (c) 2026 JChat Project. All rights reserved.
 
-This agreement governs the @jchat/runtime software package (the "Runtime"). The Runtime is
-proprietary software made publicly downloadable only to support authorized JChat deployments.
-Public availability, including availability through the npm public registry, does not make the
-Runtime open-source software and does not grant any rights except those stated below.
+1. DEFINITIONS
+"Software" refers to this npm package and its source code.
+"Authorized Application" refers strictly to the application known as "JChat".
 
-1. Definitions
+2. LICENSE GRANT
+Subject to the terms of this Agreement and payment of any applicable fees, the 
+Licensor grants you a non-exclusive, non-transferable, revocable license to 
+download, install, and use the Software.
 
-"JChat" means the JChat software product and services published by Md. Jabarullah.
+3. RESTRICTIONS ON USE
+You are expressly prohibited from using this Software, in whole or in part, 
+in any application, product, or service other than the Authorized Application (JChat). 
+Any deployment, linking, execution, or inclusion of this Software into an 
+application that is not JChat constitutes a breach of this contract and 
+an infringement of copyright law.
 
-"Vendor License" means a valid standard, extended, or vendor-issued development license for JChat
-obtained from JChat Hub, Envato Market, Codester, or another channel expressly authorized by the
-copyright owner. A one-time marketplace purchase (including from Envato Market or Codester)
-constitutes a perpetual Vendor License for the purchased edition, provided the purchase remains
-valid and compliant with the applicable marketplace terms.
-
-"Authorized Deployment" means a JChat installation that complies with its Vendor License,
-including its domain, installation, environment, and usage restrictions.
-
-"You" means the individual or legal entity that owns a Vendor License or is acting for its
-authorized license holder.
-
-2. Limited License Grant
-
-Subject to continued compliance with this agreement and the applicable Vendor License, you receive
-a limited, non-exclusive, non-transferable except as expressly allowed by Section 2(d),
-non-sublicensable, and revocable license to:
-
-a. download the Runtime from npm or another distribution channel authorized by JChat;
-
-b. install and execute the Runtime solely as an unmodified dependency of an Authorized Deployment;
-
-c. make reasonable technical copies required for private package caches, continuous integration,
-   Docker or other deployment images, staging environments, disaster recovery, and backups for the
-   Authorized Deployment; and
-
-d. provide those copies to a client only as an integral part of an end product and only when that
-   transfer is permitted by the applicable Vendor License. Distributing JChat (including this
-   Runtime as a dependency) as a purchased item on Envato Market or another authorized marketplace
-   constitutes permitted redistribution under this section, provided the recipient is the
-   end-product client and not a downstream redistributor.
-
-A vendor-issued development license may additionally authorize local development use according to
-the conditions encoded in that license. No right is granted to use the Runtime independently from
-JChat or without a valid Vendor License.
-
-3. Restrictions
-
-Except where applicable law does not permit a restriction, you must not:
-
-a. sell, rent, sublicense, republish, publicly mirror, or distribute the Runtime as a standalone or
-   reusable package;
-
-b. modify, adapt, translate, or create derivative works of the Runtime;
-
-c. reverse engineer, decompile, disassemble, or otherwise attempt to discover non-public source
-   code or implementation details;
-
-d. remove or alter copyright, license, attribution, integrity, entitlement, or ownership notices;
-
-e. bypass, disable, interfere with, or misrepresent activation, entitlement, domain, installation,
-   signature, integrity, or registry verification;
-
-f. use the Runtime to build, enable, or operate an unlicensed JChat deployment; or
-
-g. use the Runtime as a component of a competing standalone product or licensing system.
-
-Internal caches and deployment artifacts allowed by Section 2 are not prohibited redistribution,
-provided they remain access-controlled and are used only for the Authorized Deployment.
-
-4. Ownership
-
-The Runtime is licensed, not sold. JChat and its licensors retain all title, copyright, patent,
-trade-secret, and other intellectual-property rights in the Runtime. No implied license is granted.
-
-5. Third-Party Software
-
-Third-party components, if any, remain governed by their respective licenses. This agreement does
-not reduce rights granted under a third-party license.
-
-6. Updates, Services, and Vendor License Terms
-
-This agreement does not promise updates, support, availability, or continued registry access.
-Purchase, activation, installation, replacement, and service terms remain governed by the
-applicable Vendor License and written JChat terms. If those terms conflict with this agreement for
-the Runtime, the more specific written terms supplied by JChat control.
-
-7. Term and Termination
-
-This agreement remains effective while you comply with it and maintain the required Vendor License.
-For one-time marketplace purchases (Envato Market, Codester, or equivalent), the Vendor License
-does not expire; this agreement terminates only if the purchase is invalidated by the marketplace,
-or if you materially breach this agreement. For subscription or time-limited licenses issued
-directly by JChat Hub, this agreement terminates when that license expires or is revoked. On
-termination, you must stop using the Runtime and remove all copies except copies retained solely
-where applicable law requires archival retention.
-
-Sections 3, 4, 5, 8, 9, and 10 survive termination.
-
-8. Disclaimer of Warranty
-
-TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE RUNTIME IS PROVIDED "AS IS" AND "AS
-AVAILABLE", WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY,
-INCLUDING WARRANTIES OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A PARTICULAR
-PURPOSE, ACCURACY, OR RELIABILITY.
-
-9. Limitation of Liability
-
-TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, JCHAT, MD. JABARULLAH, AND THEIR SUPPLIERS WILL
-NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES,
-OR FOR LOSS OF DATA, PROFITS, REVENUE, BUSINESS, OR GOODWILL, ARISING FROM OR RELATED TO THE
-RUNTIME, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
-
-10. General
-
-The governing law, venue, and dispute terms stated in the applicable Vendor License or written
-JChat purchase terms apply to this agreement. If any provision is unenforceable, it will be limited
-to the minimum extent necessary, and the remaining provisions will continue in effect. A waiver
-must be in writing and applies only to the specific instance waived.
-
-The JChat name, logos, and related marks are not licensed except for truthful identification of
-compatible products and services.
-
-For permissions outside this agreement, contact JChat through https://jchat.com.
+4. NO REDISTRIBUTION
+You may not sub-license, rent, lease, or publicly redistribute this Software 
+to any third party without explicit written consent from the Licensor.

package/README.md

@@ -1,13 +1,15 @@
 # @jchat/runtime
 
-Runtime support package for JChat deployments.
+Core runtime environment and instance state management package for JChat platform distributions.
 
-Encapsulates instance validation, local state management, and registry communication used by the
+## Overview
+
+`@jchat/runtime` provides low-level runtime foundations, instance state persistence, and host communication utilities for JChat server applications and licensed environments.
 
 ## Requirements
 
-- Node.js 20+ or Bun 1.3+
+- Bun 1.4.0+
 
 ## License
 
-Proprietary — see the LICENSE file included in this package.
+Proprietary — All rights reserved. See the [LICENSE](./LICENSE) file included in this distribution for full terms and conditions.

package/dist/index.d.mts

@@ -1,21 +1,27 @@
+import { Elysia } from "elysia";
 import * as z from "zod";
 //#region src/domain.d.ts
-type Plan = "standard" | "extended";
-type RoutingMode = "path" | "subdomain";
-type DomainScope = "current-host" | "parent-domain";
-type NormalizedDomain = {
+export type Provider = "envato" | "jchat";
+export type Plan = "standard" | "extended";
+export type RoutingMode = "path" | "subdomain";
+export type DomainScope = "current-host" | "parent-domain";
+export type NormalizedDomain = {
   host: string;
   isLocalhost: boolean;
 };
 /** Normalize the host used for instance binding; ports and www are not significant. */
-declare function normalizeDomain(value: string): NormalizedDomain;
-declare function isPublicDomain(value: string): boolean;
-declare function isAllowedConfiguredDomain(value: string): boolean;
-declare function resolveActivationDomain(host: string, plan: Plan, routingMode: RoutingMode, domainScope?: DomainScope): string;
+export declare function normalizeDomain(value: string): NormalizedDomain;
+export declare function isPublicDomain(value: string): boolean;
+export declare function isAllowedConfiguredDomain(value: string): boolean;
+export declare function isLocalhostDomain(value: string): boolean;
+export declare function getRootDomain(value: string): string | null;
+/** Checks if a request domain matches or is an authorized subdomain of the licensed domain. */
+export declare function isMatchingDomain(requestHost: string, licensedDomain: string): boolean;
+export declare function resolveActivationDomain(host: string, plan: Plan, routingMode: RoutingMode, domainScope?: DomainScope): string;
 //#endregion
 //#region src/audit.d.ts
-type AuditEvent = "check_success" | "check_unreachable" | "check_rejected";
-declare function recordAudit(event: AuditEvent, details: {
+export type AuditEvent = "check_success" | "check_unreachable" | "check_rejected";
+export declare function recordAudit(event: AuditEvent, details: {
   domain?: string;
   installationId?: string;
   reference?: string;
@@ -34,18 +40,14 @@ type CheckResult = {
   error: string;
   reference: string;
 };
-type RegistryProvider = "envato" | "jchat";
-type RegistryRoutingMode = "path" | "subdomain";
 type ActivationInput = {
   purchaseCode: string;
   domain: string;
   siteSlug?: string;
   domainScope?: "current-host" | "parent-domain";
-  provider: RegistryProvider;
-  routingMode: RegistryRoutingMode;
+  provider: Provider;
+  routingMode: RoutingMode;
   installationId: string;
-  installationPublicKey: string;
-  machineFingerprint: string;
   registryEndpoint?: string;
   fetchImpl?: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 };
@@ -58,58 +60,47 @@ type ActivationResult = {
   success: false;
   message: string;
 };
-declare function activateRegistry(input: ActivationInput): Promise<ActivationResult>;
+export declare function activateRegistry(input: ActivationInput): Promise<ActivationResult>;
 type CheckInput = {
   token: string;
   domain: string;
-  routingMode: RegistryRoutingMode;
+  routingMode: RoutingMode;
   installationId: string;
-  machineFingerprint: string;
   registryEndpoint?: string;
   runtimeOptions?: RuntimeOptions;
   auditPath?: string;
+  lastSuccessfulCheckAt?: string;
+  gracePeriodDays?: number;
   fetchImpl?: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-  localTokenValidator?: (token: string, domain: string, installationId: string, machineFingerprint: string) => boolean;
+  localTokenValidator?: (token: string, domain: string, installationId: string) => boolean;
 };
-declare function checkRegistry(input: CheckInput): Promise<CheckResult>;
+//#endregion
+//#region src/constants.d.ts
+export declare const DEFAULT_LICENSE_SERVER_URL = "https://license.jchatlive.com";
+export declare const DEFAULT_LICENSE_ISSUER = "https://license.jchatlive.com";
+export declare const DEFAULT_LICENSE_AUDIENCE = "jchat-chat";
 //#endregion
 //#region src/state.d.ts
 type LocalState = {
   version: 1;
   installationId: string;
-  privateKeyPem: string;
-  publicKeyPem: string;
-  machineFingerprint: string;
   instanceToken: string;
+  domain?: string;
   lastSuccessfulCheckAt?: string;
 };
-declare const DEFAULT_STATE_PATH: string;
-declare function createMachineFingerprint(): string;
-declare function createIdentity(machineFingerprint?: string): {
-  installationId: `${string}-${string}-${string}-${string}-${string}`;
-  machineFingerprint: string;
-  privateKeyPem: string;
-  publicKeyPem: string;
-};
-declare function readTokenSync(filePath?: string): string;
-declare function readState(filePath?: string): Promise<LocalState | null>;
-declare function writeState(state: LocalState, filePath?: string): Promise<void>;
-declare function updateInstanceToken(instanceToken: string, statePath?: string): Promise<void>;
-declare function acquireProcessLock(statePath?: string): Promise<() => Promise<void>>;
-//#endregion
-//#region src/runtime.d.ts
-type RuntimeStatus$1 = "valid" | "unreachable-fallback" | "invalid" | "unavailable";
-declare function registerInvalidationHandler(handler: () => void): void;
-declare function setRuntimeStatus(status: RuntimeStatus$1, reference?: string): void;
-declare function getRuntimeStatus(): {
-  status: RuntimeStatus$1;
-  reference: string;
+export declare function resolveDataDir(): string;
+export declare const DEFAULT_STATE_PATH: string;
+export declare function createIdentity(): {
+  installationId: string;
 };
-declare function isApplicationDisabled(): boolean;
+export declare function readTokenSync(filePath?: string): string;
+export declare function readState(filePath?: string): Promise<LocalState | null>;
+export declare function writeState(state: LocalState, filePath?: string): Promise<void>;
+export declare function updateInstanceToken(instanceToken: string, statePath?: string): Promise<void>;
 //#endregion
 //#region src/install.d.ts
-type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-type LicenseVerificationResult = {
+export type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export type LicenseVerificationResult = {
   valid: true;
   buyer: string;
   token: string;
@@ -119,24 +110,89 @@ type LicenseVerificationResult = {
   valid: false;
   error: string;
 };
-declare function installAndActivate(purchaseCode: string, domain: string, siteSlug: string | undefined, domainScope: DomainScope | undefined, routingMode: RoutingMode, provider?: PurchaseProvider, fetchImpl?: FetchLike): Promise<LicenseVerificationResult>;
+export declare function installAndActivate(purchaseCode: string, domain: string, siteSlug: string | undefined, domainScope: DomainScope | undefined, routingMode: RoutingMode, provider?: Provider, fetchImpl?: FetchLike): Promise<LicenseVerificationResult>;
 //#endregion
 //#region src/paths.d.ts
 interface RuntimePathOptions {
   cwd?: string;
   env?: Record<string, string | undefined>;
 }
-declare function resolveRuntimePaths(options?: RuntimePathOptions): {
+export declare function resolveRuntimePaths(options?: RuntimePathOptions): {
   repoRoot: string | null;
   runtimeRoot: string;
   uploadsDir: string;
   addonBundlesDir: string;
   addonSourceDir: string;
   migrationsDir: string;
+  dataDir: string;
+};
+export declare function findRepoRoot(startDir: string): string | null;
+//#endregion
+//#region src/runtime.d.ts
+type RuntimeStatus$1 = "valid" | "unreachable-fallback" | "invalid" | "unavailable";
+export declare function setRuntimeStatus(status: RuntimeStatus$1, reference?: string): void;
+export declare function getRuntimeStatus(): {
+  status: RuntimeStatus$1;
+  reference: string;
+};
+export declare function isApplicationDisabled(): boolean;
+export declare function isRuntimeBlocked(isProduction?: boolean): boolean;
+//#endregion
+//#region src/plugin.d.ts
+export type RuntimePluginOptions = {
+  domain?: string;
+  routingMode?: RoutingMode;
+  checkIntervalDays?: number;
+  signingKey?: string;
+  isBootstrapComplete?: boolean;
+  isPrimaryWorker?: boolean;
+  allowedPaths?: Set<string>;
+  onInvalidate?: () => void;
+  getSiteCount?: () => Promise<number> | number;
 };
+export declare function startRuntimeSupervisor(options?: RuntimePluginOptions): Promise<void>;
+export declare function jchatRuntime(options?: RuntimePluginOptions): Elysia<"", {
+  decorator: {};
+  store: {};
+  derive: {
+    readonly runtimeStatus: {
+      status: RuntimeStatus$1;
+      reference: string;
+    };
+  };
+  resolve: {};
+}, {
+  typebox: {};
+  error: {};
+}, {
+  schema: {};
+  standaloneSchema: {};
+  macro: {};
+  macroFn: {};
+  parser: {};
+  response: {
+    200: {
+      status: string;
+      message: string;
+      reference: string;
+    };
+  };
+}, {}, {
+  derive: {};
+  resolve: {};
+  schema: {};
+  standaloneSchema: {};
+  response: {};
+}, {
+  derive: {};
+  resolve: {};
+  schema: {};
+  standaloneSchema: {};
+  response: {};
+}>;
 //#endregion
-//#region src/env.d.ts
-declare const ServerConfigSchema: z.ZodObject<{
+//#region src/server-context.d.ts
+export declare const ServerConfigSchema: z.ZodObject<{
   JCHAT_PORT: z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<number, string>>>;
   JCHAT_COOKIE_SECRET: z.ZodString;
   JCHAT_DATABASE_URL: z.ZodURL;
@@ -176,6 +232,9 @@ declare const ServerConfigSchema: z.ZodObject<{
     subdomain: "subdomain";
   }>>;
   JCHAT_ADDON_ENCRYPTION_KEY: z.ZodString;
+  JCHAT_LICENSE_SERVER_URL: z.ZodOptional<z.ZodURL>;
+  JCHAT_LICENSE_CHECK_INTERVAL_DAYS: z.ZodDefault<z.ZodPipe<z.ZodString, z.ZodTransform<number, string>>>;
+  JCHAT_STORE_SERVER_URL: z.ZodOptional<z.ZodURL>;
   NODE_ENV: z.ZodDefault<z.ZodEnum<{
     development: "development";
     production: "production";
@@ -183,35 +242,35 @@ declare const ServerConfigSchema: z.ZodObject<{
   }>>;
   SYSTEM_BOOTSTRAP_COMPLETE: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
-type ServerConfig = z.infer<typeof ServerConfigSchema>;
+export type ServerConfig = z.infer<typeof ServerConfigSchema>;
+export declare function loadServerContext(environment: Record<string, unknown>, distribution: "production" | "developer-sandbox" | undefined, publicKeyPem: string): ServerConfig;
 //#endregion
 //#region src/index.d.ts
-type PurchaseProvider = "envato" | "jchat";
-type RuntimeEnvironment = "production" | "development";
-type ConfigPayload = {
+export type RuntimeEnvironment = "production" | "development";
+export type ConfigPayload = {
   iss: string;
   aud: string;
   licenseId: string;
   domain: string;
   buyer: string;
   installationId: string;
-  machineFingerprint: string;
   plan: Plan;
   entitlements: string[];
-  purchaseProvider: PurchaseProvider;
+  purchaseProvider: Provider;
   environment: RuntimeEnvironment;
   routingMode: RoutingMode;
   iat: number;
 };
-type RuntimeOptions = {
+export type RuntimeOptions = {
   publicKeyPem: string;
   issuer?: string;
   audience?: string;
 };
-type RuntimeStatus = "valid" | "unreachable-fallback" | "invalid" | "unavailable";
-declare function parsePayload(token: string): ConfigPayload | null;
-declare function verifySignature(token: string, currentDomain: string, options: RuntimeOptions): boolean;
-declare function verifyEntitlement(token: string, currentDomain: string, installationId: string, machineFingerprint: string, options: RuntimeOptions): boolean;
-declare function hasEntitlement(token: string, currentDomain: string, entitlement: string, options: RuntimeOptions): boolean;
+export type RuntimeStatus = "valid" | "unreachable-fallback" | "invalid" | "unavailable";
+export declare function parsePayload(token: string): ConfigPayload | null;
+export declare function verifySignature(token: string, currentDomain: string, options: RuntimeOptions): boolean;
+export declare function verifyEntitlement(token: string, currentDomain: string, installationId: string, options?: RuntimeOptions): boolean;
+export declare function hasEntitlement(token: string, currentDomain: string, entitlement: string, options: RuntimeOptions): boolean;
+export declare function isMultiSiteAllowed(token: string | undefined | null, domain?: string): boolean;
 //#endregion
-export { ActivationInput, ActivationResult, AuditEvent, CheckInput, CheckResult, ConfigPayload, DEFAULT_STATE_PATH, DomainScope, FetchLike, LicenseVerificationResult, LocalState, NormalizedDomain, Plan, PurchaseProvider, RegistryProvider, RegistryRoutingMode, RoutingMode, RuntimeEnvironment, RuntimeOptions, RuntimeStatus, ServerConfig, ServerConfigSchema, acquireProcessLock, activateRegistry, checkRegistry, createIdentity, createMachineFingerprint, getRuntimeStatus, hasEntitlement, installAndActivate, isAllowedConfiguredDomain, isApplicationDisabled, isPublicDomain, normalizeDomain, parsePayload, readState, readTokenSync, recordAudit, registerInvalidationHandler, resolveActivationDomain, resolveRuntimePaths, setRuntimeStatus, updateInstanceToken, verifyEntitlement, verifySignature, writeState };
+export type { ActivationInput, ActivationResult, CheckInput, CheckResult, LocalState };