@micropage-sh/mcp 0.1.0

package/dist/client/session-store.js

@@ -0,0 +1,271 @@
+import { randomBytes } from "node:crypto";
+import { readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { VERSION } from "../version.js";
+import { MicropageError } from "./errors.js";
+import { isJwtExpiring } from "./jwt.js";
+import { withFileLock } from "./lock.js";
+export const LOGIN_HINT = "Run `micropage login` in a terminal, then retry.";
+/** Same location as the CLI (cli/src/auth.js), plus a MICROPAGE_CONFIG_DIR override. */
+export function configDir(env = process.env) {
+    const override = env.MICROPAGE_CONFIG_DIR?.trim();
+    if (override)
+        return override;
+    return join(env.HOME || env.USERPROFILE || homedir(), ".micropage");
+}
+export function sessionFilePath(env = process.env) {
+    return join(configDir(env), "config.json");
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * The CLI's ~/.micropage/config.json. Reads tolerate the CLI's non-atomic
+ * writes; our writes are atomic and only ever replace the token keys, so the
+ * session is never cleared from here.
+ */
+export class SessionStore {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    get lockPath() {
+        return `${this.path}.lock`;
+    }
+    /** The whole config object, or null when there is no file. */
+    async readConfig() {
+        for (let attempt = 0;; attempt++) {
+            let text;
+            try {
+                text = await readFile(this.path, "utf8");
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    return null;
+                throw new MicropageError("SESSION_UNREADABLE", `Could not read ${this.path}: ${err.message}`, {
+                    cause: err,
+                });
+            }
+            try {
+                const parsed = JSON.parse(text);
+                return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+                    ? parsed
+                    : {};
+            }
+            catch (err) {
+                // The CLI writes this file in place, so a read can land mid-write.
+                if (attempt < 3) {
+                    await sleep(25);
+                    continue;
+                }
+                throw new MicropageError("SESSION_UNREADABLE", `${this.path} is not valid JSON. ${LOGIN_HINT}`, { cause: err });
+            }
+        }
+    }
+    async readSession() {
+        const config = await this.readConfig();
+        if (!config || !hasTokens(config))
+            return null;
+        return { access_token: config.access_token, refresh_token: config.refresh_token, user: config.user ?? null };
+    }
+    /**
+     * Replaces the token keys (and user, when given), keeping every other key.
+     * Re-reads the file first and writes nothing when it no longer holds a
+     * session: the user logged out while a refresh was in flight, and writing
+     * the tokens back would undo that. Returns whether it wrote.
+     */
+    async writeTokens(tokens) {
+        const config = await this.readConfig();
+        if (!config || !hasTokens(config))
+            return false;
+        config.access_token = tokens.access_token;
+        config.refresh_token = tokens.refresh_token;
+        if (tokens.user !== undefined && tokens.user !== null)
+            config.user = tokens.user;
+        const mode = (await stat(this.path).catch(() => null))?.mode ?? 0o600;
+        const tmp = `${this.path}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+        try {
+            await writeFile(tmp, JSON.stringify(config, null, 2), { encoding: "utf8", mode: mode & 0o777 });
+            await rename(tmp, this.path);
+        }
+        catch (err) {
+            await unlink(tmp).catch(() => undefined);
+            throw err;
+        }
+        return true;
+    }
+}
+function hasTokens(config) {
+    const { access_token, refresh_token } = config;
+    return typeof access_token === "string" && access_token !== "" && typeof refresh_token === "string" && refresh_token !== "";
+}
+/**
+ * Access tokens from the CLI's login session. Refreshes proactively within
+ * 60 s of expiry; refreshes are single-flight in-process and serialised across
+ * MCP processes by a lockfile next to the config. The CLI does not take that
+ * lock, so a failed refresh re-reads the file and retries once if the CLI
+ * rotated the refresh token meanwhile.
+ */
+export class SessionAuthProvider {
+    mode = "session";
+    store;
+    config;
+    fetchImpl;
+    now;
+    lockOptions;
+    timeoutMs;
+    inflight = null;
+    lastIssued = null;
+    memory = null;
+    warnedWriteFailure = false;
+    log;
+    constructor(options) {
+        this.config = options.config;
+        this.store = new SessionStore(options.path);
+        this.fetchImpl = options.fetch ?? ((input, init) => fetch(input, init));
+        this.now = options.now ?? Date.now;
+        this.lockOptions = options.lock ?? {};
+        this.timeoutMs = options.timeoutMs ?? 20_000;
+        this.log = options.log ?? ((message) => process.stderr.write(`${message}\n`));
+    }
+    get path() {
+        return this.store.path;
+    }
+    async hasSession() {
+        return (await this.currentSession()) !== null;
+    }
+    /** The file's session, or the in-memory one while the file still holds the refresh token it replaced. */
+    async currentSession() {
+        const file = await this.store.readSession();
+        const memory = this.memory;
+        if (memory) {
+            if (file && file.refresh_token === memory.fileRefreshToken)
+                return memory.session;
+            // Logged in again, rotated by the CLI, or logged out: the file wins.
+            this.memory = null;
+        }
+        return file;
+    }
+    async getAccessToken(options = {}) {
+        // Re-read every call: the CLI may have logged in again or rotated tokens.
+        const session = await this.requireSession();
+        const fresh = !isJwtExpiring(session.access_token, this.now());
+        if (!options.forceRefresh && fresh)
+            return this.issue(session.access_token);
+        // The token being given up on: the expiring one, or after a 401 the one we handed out.
+        const stale = options.forceRefresh ? (this.lastIssued ?? session.access_token) : session.access_token;
+        if (session.access_token !== stale && fresh)
+            return this.issue(session.access_token);
+        this.inflight ??= this.refreshUnderLock(stale).finally(() => {
+            this.inflight = null;
+        });
+        return this.inflight;
+    }
+    issue(token) {
+        this.lastIssued = token;
+        return token;
+    }
+    async requireSession() {
+        const session = await this.currentSession();
+        if (!session) {
+            throw new MicropageError("NOT_LOGGED_IN", `Not logged in to micropage. ${LOGIN_HINT}`);
+        }
+        return session;
+    }
+    refreshUnderLock(stale) {
+        return withFileLock(this.store.lockPath, async () => {
+            const current = await this.requireSession();
+            if (current.access_token !== stale && !isJwtExpiring(current.access_token, this.now())) {
+                return this.issue(current.access_token);
+            }
+            try {
+                return this.issue(await this.exchange(current));
+            }
+            catch (err) {
+                const again = await this.currentSession().catch(() => null);
+                if (!again || again.refresh_token === current.refresh_token)
+                    throw finalError(err);
+                if (again.access_token !== stale && !isJwtExpiring(again.access_token, this.now())) {
+                    return this.issue(again.access_token);
+                }
+                try {
+                    return this.issue(await this.exchange(again));
+                }
+                catch (retryErr) {
+                    throw finalError(retryErr);
+                }
+            }
+        }, this.lockOptions);
+    }
+    async exchange(session) {
+        let res;
+        try {
+            res = await this.fetchImpl(`${this.config.supabaseUrl}/auth/v1/token?grant_type=refresh_token`, {
+                method: "POST",
+                headers: {
+                    apikey: this.config.supabaseAnonKey,
+                    "Content-Type": "application/json",
+                    "User-Agent": `micropage-mcp/${VERSION}`,
+                },
+                body: JSON.stringify({ refresh_token: session.refresh_token }),
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new MicropageError("NETWORK", `Refreshing the micropage login failed before a response arrived (${err instanceof Error ? err.message : String(err)}). Check the network and retry.`, { cause: err });
+        }
+        const text = await res.text().catch(() => "");
+        let data = null;
+        try {
+            data = text ? JSON.parse(text) : null;
+        }
+        catch {
+            data = null;
+        }
+        if (res.status >= 500) {
+            throw new MicropageError("AUTH_UNAVAILABLE", `The micropage auth server returned HTTP ${res.status} while refreshing the login. Retry shortly.`, { status: res.status, data });
+        }
+        if (!res.ok || typeof data?.access_token !== "string" || !data.access_token) {
+            throw new MicropageError("REFRESH_REJECTED", `Token refresh was rejected (HTTP ${res.status}).`, {
+                status: res.status,
+                data,
+            });
+        }
+        const next = {
+            access_token: data.access_token,
+            refresh_token: typeof data.refresh_token === "string" && data.refresh_token ? data.refresh_token : session.refresh_token,
+            user: data.user ?? session.user,
+        };
+        // While the memory session is in use the file still holds the refresh
+        // token it replaced; keep pointing at that one.
+        const fileRefreshToken = this.memory?.session === session ? this.memory.fileRefreshToken : session.refresh_token;
+        let written;
+        try {
+            written = await this.store.writeTokens(next);
+        }
+        catch (err) {
+            this.memory = { session: next, fileRefreshToken };
+            if (!this.warnedWriteFailure) {
+                this.warnedWriteFailure = true;
+                this.log(`micropage-mcp: could not save the refreshed login to ${this.store.path} (${err instanceof Error ? err.message : String(err)}). ` +
+                    "This server keeps using it in memory, but the micropage CLI's session there is now spent and may need `micropage login`.");
+            }
+            return next.access_token;
+        }
+        if (!written) {
+            this.memory = null;
+            throw new MicropageError("NOT_LOGGED_IN", `The micropage CLI was logged out while the login was being refreshed. ${LOGIN_HINT}`);
+        }
+        this.memory = null;
+        return next.access_token;
+    }
+}
+/** Transport trouble stays retryable; anything else means the stored login is no good. */
+function finalError(err) {
+    if (err instanceof MicropageError && (err.code === "NETWORK" || err.code === "AUTH_UNAVAILABLE" || err.code === "NOT_LOGGED_IN")) {
+        return err;
+    }
+    return new MicropageError("SESSION_EXPIRED", `The micropage login session has expired. ${LOGIN_HINT}`, {
+        cause: err,
+    });
+}
+//# sourceMappingURL=session-store.js.map

package/dist/client/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/client/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAoB,MAAM,WAAW,CAAC;AAE3D,MAAM,CAAC,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAE7E,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAQD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACF;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAErC,IAAI,QAAQ;QACV,OAAO,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC;IAC7B,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,UAAU;QACd,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAClE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,kBAAkB,IAAI,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE;oBACvG,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBACnE,CAAC,CAAE,MAAkC;oBACrC,CAAC,CAAC,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,mEAAmE;gBACnE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,GAAG,IAAI,CAAC,IAAI,uBAAuB,UAAU,EAAE,EAC/C,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE,aAAa,EAAE,MAAM,CAAC,aAAuB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACnI,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,MAAuE;QACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC1C,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEjF,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC;QACtE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;YAChG,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,SAAS,CAAC,MAA+B;IAChD,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAC/C,OAAO,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,EAAE,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,EAAE,CAAC;AAC9H,CAAC;AA+BD;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,SAAkB,CAAC;IAC1B,KAAK,CAAe;IACZ,MAAM,CAA+B;IACrC,SAAS,CAAY;IACrB,GAAG,CAAe;IAClB,WAAW,CAAc;IACzB,SAAS,CAAS;IAC3B,QAAQ,GAA2B,IAAI,CAAC;IACxC,UAAU,GAAkB,IAAI,CAAC;IACjC,MAAM,GAAyB,IAAI,CAAC;IACpC,kBAAkB,GAAG,KAAK,CAAC;IAClB,GAAG,CAA4B;IAEhD,YAAY,OAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,IAAI,CAAC;IAChD,CAAC;IAED,yGAAyG;IACjG,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,CAAC,gBAAgB;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC;YAClF,qEAAqE;YACrE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAsC,EAAE;QAC3D,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE5E,uFAAuF;QACvF,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACtG,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAErF,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,+BAA+B,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,OAAO,YAAY,CACjB,IAAI,CAAC,KAAK,CAAC,QAAQ,EACnB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBACvF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;oBAAE,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACnF,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;oBACnF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAsB;QAC3C,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,yCAAyC,EAAE;gBAC9F,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;oBACnC,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,iBAAiB,OAAO,EAAE;iBACzC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC9D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,SAAS,EACT,oEAAoE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,EACrJ,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,GAAyB,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,2CAA2C,GAAG,CAAC,MAAM,6CAA6C,EAClG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAC7B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5E,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,oCAAoC,GAAG,CAAC,MAAM,IAAI,EAAE;gBAC/F,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG;YACX,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa;YACxH,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;SAChC,CAAC;QACF,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QACjH,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,IAAI,CAAC,GAAG,CACN,wDAAwD,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;oBAC/H,0HAA0H,CAC7H,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,yEAAyE,UAAU,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,YAAY,cAAc,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;QACjI,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,cAAc,CAAC,iBAAiB,EAAE,4CAA4C,UAAU,EAAE,EAAE;QACrG,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;AACL,CAAC"}

package/dist/client/submissions.d.ts

@@ -0,0 +1,59 @@
+import { type Filters, type Http } from "./http.js";
+export interface FormWithCount {
+    id: string;
+    form_name: string;
+    /** form_name, plus "(n)" for the nth same-named form on one page, as the CLI prints it. */
+    label: string;
+    page_url: string | null;
+    is_footer: boolean;
+    form_ordinal: number;
+    created_at: string | null;
+    submission_count: number;
+}
+/** Occurrence number among same-named forms on the same page, 1-based. */
+export declare function formLabel(form: {
+    form_name: string;
+    form_ordinal?: number | null;
+}): string;
+/**
+ * Forms with non-spam submission counts. form_ordinal is newer than some
+ * deployed databases and selecting a missing column fails the whole request,
+ * so an HTTP error on the first shape retries without it, as the CLI does.
+ */
+export declare function listFormsWithCounts(http: Http, projectId: number): Promise<FormWithCount[]>;
+export declare const MAX_SUBMISSIONS = 50;
+export declare const DEFAULT_SUBMISSIONS = 20;
+export interface SubmissionRow {
+    id: string;
+    form_id: string | null;
+    form_name: string | null;
+    page_url: string | null;
+    form_index: number | null;
+    build_id: number | null;
+    created_at: string | null;
+    /** Visitor-typed data: untrusted, and personal data. */
+    payload: unknown;
+    spam_reason: string | null;
+    flagged_at: string | null;
+    flagged_by: string | null;
+}
+/**
+ * The CLI's applySpamFilter for the inbox: spam is `flagged_at IS NOT NULL`,
+ * so the default view is `flagged_at IS NULL`. Including spam drops the
+ * filter (inbox and spam together) rather than switching to spam only.
+ */
+export declare function spamFilter(includeSpam: boolean): Filters;
+export interface ListSubmissionsOptions {
+    /** A form uuid (matches form_id) or a form name (matches form_name). */
+    form?: string | undefined;
+    includeSpam?: boolean | undefined;
+    limit?: number | undefined;
+}
+export declare function listSubmissions(http: Http, projectId: number, options?: ListSubmissionsOptions): Promise<SubmissionRow[]>;
+/** One submission, scoped to the project so an id from another project reads as not found. */
+export declare function getSubmission(http: Http, projectId: number, id: string): Promise<SubmissionRow>;
+/** The label/value pairs of a payload: `payload.fields` as submit-form stores it, else the raw keys of older rows. */
+export declare function submissionFields(payload: unknown): Array<{
+    label: string;
+    value: unknown;
+}>;

package/dist/client/submissions.js

@@ -0,0 +1,111 @@
+import { MicropageError, isMicropageError } from "./errors.js";
+import { eq, is } from "./http.js";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+// ---------------------------------------------------------------------------
+// Forms (cli/src/commands/forms.js)
+// ---------------------------------------------------------------------------
+const FORM_COLUMNS = "id,form_name,page_url,is_footer,created_at";
+/** Occurrence number among same-named forms on the same page, 1-based. */
+export function formLabel(form) {
+    const ordinal = Number(form.form_ordinal) || 0;
+    return ordinal > 0 ? `${form.form_name} (${ordinal + 1})` : form.form_name;
+}
+function fetchForms(http, projectId, withOrdinal) {
+    return http.select("forms", {
+        select: withOrdinal ? `${FORM_COLUMNS},form_ordinal` : FORM_COLUMNS,
+        filters: { project_id: eq(projectId) },
+        // Same order strings the CLI's query builder produces.
+        order: withOrdinal ? "page_url,form_ordinal.asc" : "created_at.asc",
+    });
+}
+/**
+ * Forms with non-spam submission counts. form_ordinal is newer than some
+ * deployed databases and selecting a missing column fails the whole request,
+ * so an HTTP error on the first shape retries without it, as the CLI does.
+ */
+export async function listFormsWithCounts(http, projectId) {
+    let forms;
+    try {
+        forms = await fetchForms(http, projectId, true);
+    }
+    catch (err) {
+        if (!isMicropageError(err) || err.code !== "HTTP")
+            throw err;
+        forms = await fetchForms(http, projectId, false);
+    }
+    if (forms.length === 0)
+        return [];
+    // One exact count per form: selecting the rows would stop at PostgREST's max_rows.
+    const totals = await Promise.all(forms.map((f) => http.count("form_submissions", { project_id: eq(projectId), form_id: eq(f.id), flagged_at: is("null") })));
+    const counts = new Map(forms.map((f, i) => [f.id, totals[i]]));
+    return forms.map((f) => ({
+        id: f.id,
+        form_name: f.form_name,
+        label: formLabel(f),
+        page_url: f.page_url ?? null,
+        is_footer: Boolean(f.is_footer),
+        form_ordinal: Number(f.form_ordinal) || 0,
+        created_at: f.created_at ?? null,
+        submission_count: counts.get(f.id) ?? 0,
+    }));
+}
+// ---------------------------------------------------------------------------
+// Submissions (cli/src/commands/submissions.js)
+// ---------------------------------------------------------------------------
+export const MAX_SUBMISSIONS = 50;
+export const DEFAULT_SUBMISSIONS = 20;
+const SUBMISSION_COLUMNS = "id,form_id,form_name,page_url,form_index,build_id,created_at,payload,spam_reason,flagged_at,flagged_by";
+/**
+ * The CLI's applySpamFilter for the inbox: spam is `flagged_at IS NOT NULL`,
+ * so the default view is `flagged_at IS NULL`. Including spam drops the
+ * filter (inbox and spam together) rather than switching to spam only.
+ */
+export function spamFilter(includeSpam) {
+    return includeSpam ? {} : { flagged_at: is("null") };
+}
+export async function listSubmissions(http, projectId, options = {}) {
+    const limit = Math.min(Math.max(1, Math.trunc(options.limit ?? DEFAULT_SUBMISSIONS)), MAX_SUBMISSIONS);
+    const filters = { project_id: eq(projectId), ...spamFilter(Boolean(options.includeSpam)) };
+    const form = options.form?.trim();
+    if (form) {
+        if (UUID_RE.test(form))
+            filters.form_id = eq(form.toLowerCase());
+        else
+            filters.form_name = eq(form);
+    }
+    return http.select("form_submissions", {
+        select: SUBMISSION_COLUMNS,
+        filters,
+        order: "created_at.desc",
+        limit,
+    });
+}
+/** One submission, scoped to the project so an id from another project reads as not found. */
+export async function getSubmission(http, projectId, id) {
+    const trimmed = id.trim();
+    if (!UUID_RE.test(trimmed)) {
+        throw new MicropageError("INVALID_ARGUMENT", `"${id}" is not a submission id (a uuid). Call list_submissions to get ids.`);
+    }
+    const row = await http.selectOne("form_submissions", {
+        select: SUBMISSION_COLUMNS,
+        filters: { id: eq(trimmed.toLowerCase()), project_id: eq(projectId) },
+    });
+    if (!row) {
+        throw new MicropageError("NOT_FOUND", `No submission ${trimmed} in this project. Call list_submissions to see valid ids.`);
+    }
+    return row;
+}
+/** The label/value pairs of a payload: `payload.fields` as submit-form stores it, else the raw keys of older rows. */
+export function submissionFields(payload) {
+    if (!payload || typeof payload !== "object")
+        return [];
+    const fields = payload.fields;
+    if (Array.isArray(fields)) {
+        return fields.map((f) => {
+            const o = (f && typeof f === "object" ? f : {});
+            return { label: String(o.label ?? o.name ?? ""), value: o.value ?? null };
+        });
+    }
+    return Object.entries(payload).map(([label, value]) => ({ label, value }));
+}
+//# sourceMappingURL=submissions.js.map

package/dist/client/submissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submissions.js","sourceRoot":"","sources":["../../src/client/submissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAE,EAAE,EAA2B,MAAM,WAAW,CAAC;AAE5D,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAuBlE,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,IAAyD;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CAAC,IAAU,EAAE,SAAiB,EAAE,WAAoB;IACrE,OAAO,IAAI,CAAC,MAAM,CAAU,OAAO,EAAE;QACnC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC,CAAC,CAAC,YAAY;QACnE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;QACtC,uDAAuD;QACvD,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB;KACpE,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,SAAiB;IACrE,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,GAAG,CAAC;QAC7D,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,mFAAmF;IACnF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAC3H,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/B,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;QACzC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QAChC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;KACxC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC,MAAM,kBAAkB,GAAG,wGAAwG,CAAC;AAiBpI;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,WAAoB;IAC7C,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;AACvD,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAU,EAAE,SAAiB,EAAE,UAAkC,EAAE;IACvG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACvG,MAAM,OAAO,GAAY,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;IACpG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;;YAC5D,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAgB,kBAAkB,EAAE;QACpD,MAAM,EAAE,kBAAkB;QAC1B,OAAO;QACP,KAAK,EAAE,iBAAiB;QACxB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,SAAiB,EAAE,EAAU;IAC3E,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,IAAI,EAAE,sEAAsE,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAgB,kBAAkB,EAAE;QAClE,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;KACtE,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,iBAAiB,OAAO,2DAA2D,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,MAAM,GAAI,OAAgC,CAAC,MAAM,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAyD,CAAC;YACxG,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACxG,CAAC"}

package/dist/client/tier.d.ts

@@ -0,0 +1,42 @@
+import type { AuthProvider } from "./auth-provider.js";
+import { type Http } from "./http.js";
+export type PlanTier = "free" | "pro" | "pro_plus";
+export declare const PRICING_URL = "https://micropage.sh/pricing";
+/** Same wording as the CLI (cli/src/plan.js), addressed to the model. */
+export declare const UPGRADE_MESSAGE: string;
+export declare const PLAN_CACHE_TTL_MS: number;
+export declare function isPaidTier(tier: string | null | undefined): tier is "pro" | "pro_plus";
+export interface PlanGateOptions {
+    http: Http;
+    auth: AuthProvider;
+    now?: () => number;
+    ttlMs?: number;
+}
+/**
+ * The CLI's client-side Pro gate: reads customers.plan_tier under RLS and
+ * caches it for 5 minutes per user. A product gate, not a security boundary;
+ * the server enforces its own per-feature limits.
+ */
+export declare class PlanGate {
+    private readonly http;
+    private readonly auth;
+    private readonly now;
+    private readonly ttlMs;
+    private cache;
+    private inflight;
+    constructor(options: PlanGateOptions);
+    /** The signed-in user's id, read from the access token's `sub`. */
+    currentUserId(): Promise<string>;
+    /**
+     * Missing customer row means free, as in the CLI. A failed lookup is not
+     * cached and propagates, so a network blip does not read as "free plan".
+     */
+    getPlanTier(): Promise<PlanTier>;
+    /**
+     * Throws PLAN_REQUIRED unless the account is pro or pro_plus. Deploy-token
+     * mode skips the lookup: deploy tokens can only be created on Pro+
+     * (create-deploy-token), so holding one already implies a paid plan.
+     */
+    requirePaidPlan(): Promise<void>;
+    clearCache(): void;
+}

package/dist/client/tier.js

@@ -0,0 +1,76 @@
+import { MicropageError } from "./errors.js";
+import { eq } from "./http.js";
+import { decodeJwtClaims } from "./jwt.js";
+export const PRICING_URL = "https://micropage.sh/pricing";
+/** Same wording as the CLI (cli/src/plan.js), addressed to the model. */
+export const UPGRADE_MESSAGE = "The micropage MCP server, like the micropage CLI, is available on paid plans only. " +
+    `This account is on the free plan. Tell the user they can upgrade at ${PRICING_URL}, then retry.`;
+export const PLAN_CACHE_TTL_MS = 5 * 60 * 1000;
+export function isPaidTier(tier) {
+    return tier === "pro" || tier === "pro_plus";
+}
+/**
+ * The CLI's client-side Pro gate: reads customers.plan_tier under RLS and
+ * caches it for 5 minutes per user. A product gate, not a security boundary;
+ * the server enforces its own per-feature limits.
+ */
+export class PlanGate {
+    http;
+    auth;
+    now;
+    ttlMs;
+    cache = null;
+    inflight = null;
+    constructor(options) {
+        this.http = options.http;
+        this.auth = options.auth;
+        this.now = options.now ?? Date.now;
+        this.ttlMs = options.ttlMs ?? PLAN_CACHE_TTL_MS;
+    }
+    /** The signed-in user's id, read from the access token's `sub`. */
+    async currentUserId() {
+        const sub = decodeJwtClaims(await this.auth.getAccessToken())?.sub;
+        if (typeof sub !== "string" || !sub) {
+            throw new MicropageError("SESSION_EXPIRED", "The micropage access token has no user id. Run `micropage login` in a terminal, then retry.");
+        }
+        return sub;
+    }
+    /**
+     * Missing customer row means free, as in the CLI. A failed lookup is not
+     * cached and propagates, so a network blip does not read as "free plan".
+     */
+    async getPlanTier() {
+        const userId = await this.currentUserId();
+        const hit = this.cache;
+        if (hit && hit.userId === userId && this.now() - hit.at < this.ttlMs)
+            return hit.tier;
+        this.inflight ??= (async () => {
+            const row = await this.http.selectOne("customers", {
+                select: "plan_tier",
+                filters: { user_id: eq(userId) },
+            });
+            const tier = isPaidTier(row?.plan_tier) ? row.plan_tier : "free";
+            this.cache = { userId, tier, at: this.now() };
+            return tier;
+        })().finally(() => {
+            this.inflight = null;
+        });
+        return this.inflight;
+    }
+    /**
+     * Throws PLAN_REQUIRED unless the account is pro or pro_plus. Deploy-token
+     * mode skips the lookup: deploy tokens can only be created on Pro+
+     * (create-deploy-token), so holding one already implies a paid plan.
+     */
+    async requirePaidPlan() {
+        if (this.auth.mode === "deploy_token")
+            return;
+        const tier = await this.getPlanTier();
+        if (!isPaidTier(tier))
+            throw new MicropageError("PLAN_REQUIRED", UPGRADE_MESSAGE);
+    }
+    clearCache() {
+        this.cache = null;
+    }
+}
+//# sourceMappingURL=tier.js.map

package/dist/client/tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier.js","sourceRoot":"","sources":["../../src/client/tier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAa,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAI3C,MAAM,CAAC,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAE1D,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAC1B,qFAAqF;IACrF,uEAAuE,WAAW,eAAe,CAAC;AAEpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,MAAM,UAAU,UAAU,CAAC,IAA+B;IACxD,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,CAAC;AAC/C,CAAC;AASD;;;;GAIG;AACH,MAAM,OAAO,QAAQ;IACF,IAAI,CAAO;IACX,IAAI,CAAe;IACnB,GAAG,CAAe;IAClB,KAAK,CAAS;IACvB,KAAK,GAA0D,IAAI,CAAC;IACpE,QAAQ,GAA6B,IAAI,CAAC;IAElD,YAAY,OAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;IAClD,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,aAAa;QACjB,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,CAAC;QACnE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,6FAA6F,CAAC,CAAC;QAC7I,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QAEtF,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAA+B,WAAW,EAAE;gBAC/E,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,GAAa,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACpF,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;CACF"}

package/dist/content/index.d.ts

@@ -0,0 +1,5 @@
+export declare const GRAMMAR: string;
+export declare const GRAMMAR_FULL: string;
+export declare const AGENT_GUIDE: string;
+export declare const POSTS_FORMAT: string;
+export declare const EXAMPLES: Readonly<Record<string, string>>;