@nehorai/credits 1.0.2 → 1.3.0

package/dist/adapters/index.js

@@ -1,2 +1,436 @@
-export { createGenericAdapter } from "./generic.js";
+// src/config/index.ts
+import { z } from "zod";
+
+// src/config/provider.ts
+var configProvider = null;
+function getConfigProvider() {
+  return configProvider;
+}
+
+// src/config/index.ts
+var tierConfigSchema = z.object({
+  tier: z.enum(["free", "basic", "premium", "unlimited"]),
+  monthlyCredits: z.number().min(0),
+  priceUsd: z.number().min(0),
+  features: z.array(z.string())
+});
+var creditSystemConfigSchema = z.object({
+  /**
+   * Operation costs in credits
+   * Keys are operation type names (any non-empty string)
+   * Values are positive numbers representing credit cost
+   */
+  operationCosts: z.record(
+    z.string().min(1),
+    z.number().positive()
+  ),
+  /**
+   * Display labels for operation types (English canonical labels).
+   * Falls back to auto-generating from snake_case keys if not provided.
+   */
+  operationLabels: z.record(
+    z.string().min(1),
+    z.string().min(1)
+  ).optional().default({}),
+  /**
+   * Tier configurations
+   */
+  tierConfigs: z.record(
+    z.enum(["free", "basic", "premium", "unlimited"]),
+    tierConfigSchema
+  ),
+  /**
+   * Reservation expiry time in milliseconds
+   */
+  reservationExpiryMs: z.number().positive().default(5 * 60 * 1e3),
+  /**
+   * Default credits for new users (free tier)
+   */
+  defaultFreeCredits: z.number().positive().default(25),
+  /**
+   * Grace period in days after subscription expires before downgrade
+   */
+  subscriptionGracePeriodDays: z.number().min(0).default(3),
+  /**
+   * Low balance notification threshold
+   */
+  lowBalanceThreshold: z.number().min(0).default(10),
+  /**
+   * Cooldown in hours between low balance notifications
+   */
+  lowBalanceNotificationCooldownHours: z.number().positive().default(24),
+  /**
+   * Feature flags for optional features
+   */
+  features: z.object({
+    journalEntries: z.boolean().default(true),
+    notifications: z.boolean().default(true),
+    subscriptionExpiry: z.boolean().default(true),
+    usageHistory: z.boolean().default(true)
+  }).default({
+    journalEntries: true,
+    notifications: true,
+    subscriptionExpiry: true,
+    usageHistory: true
+  })
+});
+var DEFAULT_CONFIG = {
+  operationCosts: {
+    story_generation: 5,
+    conversation: 2,
+    image_generation: 10,
+    template_generation: 10
+  },
+  operationLabels: {
+    story_generation: "Story generation",
+    conversation: "Conversation",
+    image_generation: "Image generation",
+    template_generation: "Template generation"
+  },
+  tierConfigs: {
+    free: {
+      tier: "free",
+      monthlyCredits: 25,
+      priceUsd: 0,
+      features: [
+        "25 credits per month",
+        "Basic story generation",
+        "Standard image quality"
+      ]
+    },
+    basic: {
+      tier: "basic",
+      monthlyCredits: 200,
+      priceUsd: 9.99,
+      features: [
+        "200 credits per month",
+        "All story features",
+        "High quality images",
+        "Priority support"
+      ]
+    },
+    premium: {
+      tier: "premium",
+      monthlyCredits: 500,
+      priceUsd: 19.99,
+      features: [
+        "500 credits per month",
+        "All features",
+        "Highest quality images",
+        "Early access to new features",
+        "Priority support"
+      ]
+    },
+    unlimited: {
+      tier: "unlimited",
+      monthlyCredits: 0,
+      // 0 = unlimited
+      priceUsd: 49.99,
+      features: [
+        "Unlimited credits",
+        "All features",
+        "Highest quality images",
+        "Early access to new features",
+        "Dedicated support"
+      ]
+    }
+  },
+  reservationExpiryMs: 5 * 60 * 1e3,
+  // 5 minutes
+  defaultFreeCredits: 25,
+  subscriptionGracePeriodDays: 3,
+  lowBalanceThreshold: 10,
+  lowBalanceNotificationCooldownHours: 24,
+  features: {
+    journalEntries: true,
+    notifications: true,
+    subscriptionExpiry: true,
+    usageHistory: true
+  }
+};
+var currentConfig = DEFAULT_CONFIG;
+function loadConfigFromEnv() {
+  const envConfig = {};
+  const operationCostsEnv = process.env.CREDITS_OPERATION_COSTS;
+  if (operationCostsEnv) {
+    try {
+      const parsed = JSON.parse(operationCostsEnv);
+      if (typeof parsed === "object" && parsed !== null) {
+        envConfig.operationCosts = {
+          ...DEFAULT_CONFIG.operationCosts,
+          ...parsed
+        };
+      }
+    } catch {
+      console.warn("[Credits Config] Failed to parse CREDITS_OPERATION_COSTS env var as JSON");
+    }
+  }
+  const reservationExpiry = process.env.CREDITS_RESERVATION_EXPIRY_MS;
+  if (reservationExpiry) {
+    envConfig.reservationExpiryMs = parseInt(reservationExpiry, 10);
+  }
+  const defaultCredits = process.env.CREDITS_DEFAULT_FREE;
+  if (defaultCredits) {
+    envConfig.defaultFreeCredits = parseInt(defaultCredits, 10);
+  }
+  const gracePeriod = process.env.CREDITS_GRACE_PERIOD_DAYS;
+  if (gracePeriod) {
+    envConfig.subscriptionGracePeriodDays = parseInt(gracePeriod, 10);
+  }
+  const lowBalanceThreshold = process.env.CREDITS_LOW_BALANCE_THRESHOLD;
+  if (lowBalanceThreshold) {
+    envConfig.lowBalanceThreshold = parseInt(lowBalanceThreshold, 10);
+  }
+  const featuresEnv = process.env.CREDITS_FEATURES;
+  if (featuresEnv) {
+    try {
+      const features = JSON.parse(featuresEnv);
+      envConfig.features = {
+        ...DEFAULT_CONFIG.features,
+        ...features
+      };
+    } catch {
+      console.warn("[Credits Config] Failed to parse CREDITS_FEATURES env var");
+    }
+  }
+  return envConfig;
+}
+function initializeConfig(overrides) {
+  const envConfig = loadConfigFromEnv();
+  const mergedConfig = {
+    ...DEFAULT_CONFIG,
+    ...envConfig,
+    ...overrides,
+    operationCosts: {
+      ...DEFAULT_CONFIG.operationCosts,
+      ...envConfig.operationCosts,
+      ...overrides?.operationCosts
+    },
+    operationLabels: {
+      ...DEFAULT_CONFIG.operationLabels,
+      ...envConfig.operationLabels,
+      ...overrides?.operationLabels
+    },
+    tierConfigs: {
+      ...DEFAULT_CONFIG.tierConfigs,
+      ...envConfig.tierConfigs,
+      ...overrides?.tierConfigs
+    },
+    features: {
+      ...DEFAULT_CONFIG.features,
+      ...envConfig.features,
+      ...overrides?.features
+    }
+  };
+  const result = creditSystemConfigSchema.safeParse(mergedConfig);
+  if (!result.success) {
+    console.error("[Credits Config] Invalid configuration:", result.error.issues);
+    throw new Error("Invalid credit system configuration");
+  }
+  currentConfig = result.data;
+  return currentConfig;
+}
+function getConfig() {
+  const provider = getConfigProvider();
+  if (provider) {
+    return provider.getConfig();
+  }
+  return currentConfig;
+}
+function snakeCaseToTitleCase(str) {
+  return str.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
+}
+function getOperationLabel(operationType) {
+  const labels = getConfig().operationLabels;
+  if (labels && operationType in labels) {
+    return labels[operationType];
+  }
+  return snakeCaseToTitleCase(operationType);
+}
+initializeConfig();
+
+// src/core/operations.ts
+async function commitReservationWithJournal(repository, userId, reservationId) {
+  const reservation = await repository.getReservation(userId, reservationId);
+  if (!reservation) {
+    throw new Error(`Reservation ${reservationId} not found`);
+  }
+  await repository.commitReservationAtomic(userId, reservationId);
+  const credits = await repository.getUserCredits(userId);
+  if (credits) {
+    await repository.createJournalEntry({
+      userId,
+      entryType: "debit",
+      amount: reservation.amount,
+      balanceAfter: credits.balance,
+      source: "operation_commit",
+      referenceId: reservationId,
+      referenceType: "reservation",
+      description: `Committed ${reservation.amount} credits for ${getOperationLabel(reservation.operationType)}`,
+      metadata: {
+        operationType: reservation.operationType
+      }
+    });
+  }
+}
+async function releaseReservationWithJournal(repository, userId, reservationId) {
+  const reservation = await repository.getReservation(userId, reservationId);
+  await repository.releaseReservationAtomic(userId, reservationId);
+  if (reservation?.status === "reserved") {
+    const credits = await repository.getUserCredits(userId);
+    if (credits) {
+      await repository.createJournalEntry({
+        userId,
+        entryType: "credit",
+        amount: 0,
+        // No actual credits returned (they were reserved, not spent)
+        balanceAfter: credits.balance,
+        source: "operation_release",
+        referenceId: reservationId,
+        referenceType: "reservation",
+        description: `Released ${reservation.amount} reserved credits for ${getOperationLabel(reservation.operationType)}`,
+        metadata: {
+          operationType: reservation.operationType,
+          amount: reservation.amount
+        }
+      });
+    }
+  }
+}
+async function reserveCreditsForOperation(repository, userId, amount, operationType, expiryMs = 5 * 60 * 1e3) {
+  const expiresAt = new Date(Date.now() + expiryMs);
+  return repository.reserveCreditsAtomic(userId, amount, operationType, expiresAt);
+}
+
+// src/adapters/generic.ts
+function generateRequestId() {
+  const timestamp = Date.now();
+  const randomPart = Math.random().toString(36).substring(2, 14);
+  return `req_${timestamp}_${randomPart}`;
+}
+function createGenericAdapter(config) {
+  const { repository, authProvider, deferred, operationCosts } = config;
+  function getOperationCost(operationType) {
+    const cost = operationCosts[operationType];
+    if (cost === void 0) {
+      throw new Error(
+        `Unknown operation type: "${operationType}". Configured types: ${Object.keys(operationCosts).join(", ")}`
+      );
+    }
+    return cost;
+  }
+  function logUsage(params) {
+    deferred.defer(async () => {
+      await repository.logUsage({
+        userId: params.userId,
+        operationType: params.operationType,
+        provider: "gemini",
+        creditsUsed: params.creditsUsed,
+        success: params.success,
+        errorMessage: params.errorMessage,
+        resourceId: params.resourceId,
+        resourceType: params.resourceType,
+        requestId: params.requestId
+      });
+    });
+  }
+  return {
+    withCredits(options, handler) {
+      return async (data) => {
+        const requestId = generateRequestId();
+        const user = await authProvider.getCurrentUser();
+        if (!user?.id) {
+          return { success: false, error: "Authentication required" };
+        }
+        if (isPreviewMode(data)) {
+          const dummyReservation = createDummyReservation(user.id, options.operationType);
+          return handler(user, data, dummyReservation);
+        }
+        let reservation;
+        try {
+          const cost = options.customCost ?? getOperationCost(options.operationType);
+          reservation = await reserveCreditsForOperation(
+            repository,
+            user.id,
+            cost,
+            options.operationType
+          );
+        } catch (error) {
+          const message = error instanceof Error ? error.message : "Failed to reserve credits";
+          logUsage({
+            userId: user.id,
+            operationType: options.operationType,
+            creditsUsed: 0,
+            success: false,
+            errorMessage: message,
+            resourceId: options.resourceId,
+            resourceType: options.resourceType,
+            requestId
+          });
+          return { success: false, error: message };
+        }
+        try {
+          const result = await handler(user, data, reservation);
+          if (result.success) {
+            await commitReservationWithJournal(repository, user.id, reservation.id);
+            logUsage({
+              userId: user.id,
+              operationType: options.operationType,
+              creditsUsed: reservation.amount,
+              success: true,
+              resourceId: options.resourceId,
+              resourceType: options.resourceType,
+              requestId
+            });
+          } else {
+            await releaseReservationWithJournal(repository, user.id, reservation.id);
+            logUsage({
+              userId: user.id,
+              operationType: options.operationType,
+              creditsUsed: 0,
+              success: false,
+              errorMessage: result.error,
+              resourceId: options.resourceId,
+              resourceType: options.resourceType,
+              requestId
+            });
+          }
+          return result;
+        } catch (error) {
+          const message = error instanceof Error ? error.message : "An unexpected error occurred";
+          await releaseReservationWithJournal(repository, user.id, reservation.id);
+          logUsage({
+            userId: user.id,
+            operationType: options.operationType,
+            creditsUsed: 0,
+            success: false,
+            errorMessage: message,
+            resourceId: options.resourceId,
+            resourceType: options.resourceType,
+            requestId
+          });
+          console.error("Action error:", error);
+          return { success: false, error: message };
+        }
+      };
+    }
+  };
+}
+function isPreviewMode(data) {
+  return typeof data === "object" && data !== null && "preview" in data && data.preview === true;
+}
+function createDummyReservation(userId, operationType) {
+  return {
+    id: "preview-mode",
+    userId,
+    amount: 0,
+    operationType,
+    status: "released",
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    expiresAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+export {
+  createGenericAdapter
+};
 //# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"sources":["../../src/config/index.ts","../../src/config/provider.ts","../../src/core/operations.ts","../../src/adapters/generic.ts"],"sourcesContent":["import { z } from \"zod\";\nimport type { SubscriptionTier, TierConfig } from \"../core/types.js\";\nimport { getConfigProvider } from \"./provider.js\";\n\n/**\n * Schema for tier configuration\n */\nconst tierConfigSchema = z.object({\n  tier: z.enum([\"free\", \"basic\", \"premium\", \"unlimited\"]),\n  monthlyCredits: z.number().min(0),\n  priceUsd: z.number().min(0),\n  features: z.array(z.string()),\n});\n\n/**\n * Schema for credit system configuration\n */\nconst creditSystemConfigSchema = z.object({\n  /**\n   * Operation costs in credits\n   * Keys are operation type names (any non-empty string)\n   * Values are positive numbers representing credit cost\n   */\n  operationCosts: z.record(\n    z.string().min(1),\n    z.number().positive()\n  ),\n\n  /**\n   * Display labels for operation types (English canonical labels).\n   * Falls back to auto-generating from snake_case keys if not provided.\n   */\n  operationLabels: z.record(\n    z.string().min(1),\n    z.string().min(1)\n  ).optional().default({}),\n\n  /**\n   * Tier configurations\n   */\n  tierConfigs: z.record(\n    z.enum([\"free\", \"basic\", \"premium\", \"unlimited\"]),\n    tierConfigSchema\n  ),\n\n  /**\n   * Reservation expiry time in milliseconds\n   */\n  reservationExpiryMs: z.number().positive().default(5 * 60 * 1000),\n\n  /**\n   * Default credits for new users (free tier)\n   */\n  defaultFreeCredits: z.number().positive().default(25),\n\n  /**\n   * Grace period in days after subscription expires before downgrade\n   */\n  subscriptionGracePeriodDays: z.number().min(0).default(3),\n\n  /**\n   * Low balance notification threshold\n   */\n  lowBalanceThreshold: z.number().min(0).default(10),\n\n  /**\n   * Cooldown in hours between low balance notifications\n   */\n  lowBalanceNotificationCooldownHours: z.number().positive().default(24),\n\n  /**\n   * Feature flags for optional features\n   */\n  features: z.object({\n    journalEntries: z.boolean().default(true),\n    notifications: z.boolean().default(true),\n    subscriptionExpiry: z.boolean().default(true),\n    usageHistory: z.boolean().default(true),\n  }).default({\n    journalEntries: true,\n    notifications: true,\n    subscriptionExpiry: true,\n    usageHistory: true,\n  }),\n});\n\n/**\n * Credit system configuration type\n */\nexport type CreditSystemConfig = z.infer<typeof creditSystemConfigSchema>;\n\n/**\n * Default configuration\n */\nconst DEFAULT_CONFIG: CreditSystemConfig = {\n  operationCosts: {\n    story_generation: 5,\n    conversation: 2,\n    image_generation: 10,\n    template_generation: 10,\n  },\n  operationLabels: {\n    story_generation: \"Story generation\",\n    conversation: \"Conversation\",\n    image_generation: \"Image generation\",\n    template_generation: \"Template generation\",\n  },\n  tierConfigs: {\n    free: {\n      tier: \"free\",\n      monthlyCredits: 25,\n      priceUsd: 0,\n      features: [\n        \"25 credits per month\",\n        \"Basic story generation\",\n        \"Standard image quality\",\n      ],\n    },\n    basic: {\n      tier: \"basic\",\n      monthlyCredits: 200,\n      priceUsd: 9.99,\n      features: [\n        \"200 credits per month\",\n        \"All story features\",\n        \"High quality images\",\n        \"Priority support\",\n      ],\n    },\n    premium: {\n      tier: \"premium\",\n      monthlyCredits: 500,\n      priceUsd: 19.99,\n      features: [\n        \"500 credits per month\",\n        \"All features\",\n        \"Highest quality images\",\n        \"Early access to new features\",\n        \"Priority support\",\n      ],\n    },\n    unlimited: {\n      tier: \"unlimited\",\n      monthlyCredits: 0, // 0 = unlimited\n      priceUsd: 49.99,\n      features: [\n        \"Unlimited credits\",\n        \"All features\",\n        \"Highest quality images\",\n        \"Early access to new features\",\n        \"Dedicated support\",\n      ],\n    },\n  },\n  reservationExpiryMs: 5 * 60 * 1000, // 5 minutes\n  defaultFreeCredits: 25,\n  subscriptionGracePeriodDays: 3,\n  lowBalanceThreshold: 10,\n  lowBalanceNotificationCooldownHours: 24,\n  features: {\n    journalEntries: true,\n    notifications: true,\n    subscriptionExpiry: true,\n    usageHistory: true,\n  },\n};\n\n/**\n * Current configuration (can be overridden)\n */\nlet currentConfig: CreditSystemConfig = DEFAULT_CONFIG;\n\n/**\n * Load configuration from environment variables\n * Can be extended to load from other sources (file, remote config, etc.)\n *\n * Operation costs are loaded from CREDITS_OPERATION_COSTS as JSON:\n * CREDITS_OPERATION_COSTS={\"story_generation\":5,\"image_generation\":10}\n */\nexport function loadConfigFromEnv(): Partial<CreditSystemConfig> {\n  const envConfig: Partial<CreditSystemConfig> = {};\n\n  // Load operation costs from env as JSON\n  const operationCostsEnv = process.env.CREDITS_OPERATION_COSTS;\n  if (operationCostsEnv) {\n    try {\n      const parsed = JSON.parse(operationCostsEnv);\n      if (typeof parsed === \"object\" && parsed !== null) {\n        envConfig.operationCosts = {\n          ...DEFAULT_CONFIG.operationCosts,\n          ...parsed,\n        };\n      }\n    } catch {\n      console.warn(\"[Credits Config] Failed to parse CREDITS_OPERATION_COSTS env var as JSON\");\n    }\n  }\n\n  // Load other settings from env\n  const reservationExpiry = process.env.CREDITS_RESERVATION_EXPIRY_MS;\n  if (reservationExpiry) {\n    envConfig.reservationExpiryMs = parseInt(reservationExpiry, 10);\n  }\n\n  const defaultCredits = process.env.CREDITS_DEFAULT_FREE;\n  if (defaultCredits) {\n    envConfig.defaultFreeCredits = parseInt(defaultCredits, 10);\n  }\n\n  const gracePeriod = process.env.CREDITS_GRACE_PERIOD_DAYS;\n  if (gracePeriod) {\n    envConfig.subscriptionGracePeriodDays = parseInt(gracePeriod, 10);\n  }\n\n  const lowBalanceThreshold = process.env.CREDITS_LOW_BALANCE_THRESHOLD;\n  if (lowBalanceThreshold) {\n    envConfig.lowBalanceThreshold = parseInt(lowBalanceThreshold, 10);\n  }\n\n  // Load feature flags\n  const featuresEnv = process.env.CREDITS_FEATURES;\n  if (featuresEnv) {\n    try {\n      const features = JSON.parse(featuresEnv);\n      envConfig.features = {\n        ...DEFAULT_CONFIG.features,\n        ...features,\n      };\n    } catch {\n      console.warn(\"[Credits Config] Failed to parse CREDITS_FEATURES env var\");\n    }\n  }\n\n  return envConfig;\n}\n\n/**\n * Initialize configuration\n * Merges default config with environment overrides\n */\nexport function initializeConfig(overrides?: Partial<CreditSystemConfig>): CreditSystemConfig {\n  const envConfig = loadConfigFromEnv();\n\n  const mergedConfig = {\n    ...DEFAULT_CONFIG,\n    ...envConfig,\n    ...overrides,\n    operationCosts: {\n      ...DEFAULT_CONFIG.operationCosts,\n      ...envConfig.operationCosts,\n      ...overrides?.operationCosts,\n    },\n    operationLabels: {\n      ...DEFAULT_CONFIG.operationLabels,\n      ...envConfig.operationLabels,\n      ...overrides?.operationLabels,\n    },\n    tierConfigs: {\n      ...DEFAULT_CONFIG.tierConfigs,\n      ...envConfig.tierConfigs,\n      ...overrides?.tierConfigs,\n    },\n    features: {\n      ...DEFAULT_CONFIG.features,\n      ...envConfig.features,\n      ...overrides?.features,\n    },\n  };\n\n  // Validate configuration\n  const result = creditSystemConfigSchema.safeParse(mergedConfig);\n  if (!result.success) {\n    console.error(\"[Credits Config] Invalid configuration:\", result.error.issues);\n    throw new Error(\"Invalid credit system configuration\");\n  }\n\n  currentConfig = result.data;\n  return currentConfig;\n}\n\n/**\n * Get the current configuration.\n * If an external provider is registered, delegates to it.\n * Otherwise falls back to the local currentConfig.\n */\nexport function getConfig(): CreditSystemConfig {\n  const provider = getConfigProvider();\n  if (provider) {\n    return provider.getConfig();\n  }\n  return currentConfig;\n}\n\n/**\n * Get all valid operation types from configuration\n * Returns the keys of the operationCosts object\n */\nexport function getValidOperationTypes(): string[] {\n  return Object.keys(getConfig().operationCosts);\n}\n\n/**\n * Check if an operation type is valid (configured in the system)\n * @param type - The operation type to check\n * @returns true if the operation type is configured\n */\nexport function isValidOperationType(type: string): boolean {\n  return type in getConfig().operationCosts;\n}\n\n/**\n * Get operation cost from configuration\n * @throws Error if the operation type is not configured\n */\nexport function getConfigOperationCost(operationType: string): number {\n  const cost = getConfig().operationCosts[operationType];\n  if (cost === undefined) {\n    throw new Error(\n      `Unknown operation type: ${operationType}. Valid types: ${getValidOperationTypes().join(\", \")}`\n    );\n  }\n  return cost;\n}\n\n/**\n * Get tier configuration from configuration\n */\nexport function getConfigTierConfig(tier: SubscriptionTier): TierConfig {\n  return getConfig().tierConfigs[tier]!;\n}\n\n/**\n * Get monthly limit for a tier from configuration\n * Returns Infinity for unlimited tier\n */\nexport function getConfigMonthlyLimit(tier: SubscriptionTier): number {\n  const config = getConfig().tierConfigs[tier]!;\n  return config.monthlyCredits === 0 ? Infinity : config.monthlyCredits;\n}\n\n/**\n * Check if a feature is enabled\n */\nexport function isFeatureEnabled(feature: keyof CreditSystemConfig[\"features\"]): boolean {\n  return getConfig().features[feature];\n}\n\n/**\n * Convert a snake_case string to Title Case.\n * E.g., \"story_generation\" -> \"Story Generation\"\n */\nfunction snakeCaseToTitleCase(str: string): string {\n  return str\n    .replace(/_/g, \" \")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase());\n}\n\n/**\n * Get the display label for an operation type.\n * Falls back to converting snake_case to Title Case if no label is configured.\n */\nexport function getOperationLabel(operationType: string): string {\n  const labels = getConfig().operationLabels;\n  if (labels && operationType in labels) {\n    return labels[operationType];\n  }\n  return snakeCaseToTitleCase(operationType);\n}\n\n/**\n * Get all operation labels as a record.\n * For any operation in operationCosts that lacks a label, generates one from the key.\n */\nexport function getOperationLabels(): Record<string, string> {\n  const config = getConfig();\n  const result: Record<string, string> = {};\n  for (const key of Object.keys(config.operationCosts)) {\n    result[key] = config.operationLabels?.[key]\n      ?? snakeCaseToTitleCase(key);\n  }\n  return result;\n}\n\n/**\n * Reset configuration to defaults (for testing)\n */\nexport function resetConfig(): void {\n  currentConfig = DEFAULT_CONFIG;\n}\n\n// Initialize configuration on module load\ninitializeConfig();\n","import type { CreditSystemConfig } from \"./index.js\";\n\n/** Interface for external config providers (e.g. Firestore-backed) */\nexport interface ICreditConfigProvider {\n  getConfig(): CreditSystemConfig;\n}\n\nlet configProvider: ICreditConfigProvider | null = null;\n\n/** Register an external config provider. Called once at app startup. */\nexport function registerConfigProvider(provider: ICreditConfigProvider): void {\n  configProvider = provider;\n}\n\n/** Get the registered provider, or null if none registered. */\nexport function getConfigProvider(): ICreditConfigProvider | null {\n  return configProvider;\n}\n\n/** Clear registered provider (for testing). */\nexport function clearConfigProvider(): void {\n  configProvider = null;\n}\n","/**\n * Core credit operations - framework agnostic\n *\n * Contains the business logic for credit operations that can be\n * used by any adapter or service implementation.\n */\n\nimport type { ICreditRepository } from \"../repository/types.js\";\nimport type { PortableReservation } from \"./types.js\";\nimport { getOperationLabel } from \"../config/index.js\";\n\n/**\n * Commit a reservation with journal entry\n *\n * @param repository - The credit repository\n * @param userId - User ID\n * @param reservationId - Reservation to commit\n */\nexport async function commitReservationWithJournal(\n  repository: ICreditRepository,\n  userId: string,\n  reservationId: string\n): Promise<void> {\n  // Get the reservation to know the amount\n  const reservation = await repository.getReservation(userId, reservationId);\n  if (!reservation) {\n    throw new Error(`Reservation ${reservationId} not found`);\n  }\n\n  // Commit the reservation atomically\n  await repository.commitReservationAtomic(userId, reservationId);\n\n  // Create journal entry\n  const credits = await repository.getUserCredits(userId);\n  if (credits) {\n    await repository.createJournalEntry({\n      userId,\n      entryType: \"debit\",\n      amount: reservation.amount,\n      balanceAfter: credits.balance,\n      source: \"operation_commit\",\n      referenceId: reservationId,\n      referenceType: \"reservation\",\n      description: `Committed ${reservation.amount} credits for ${getOperationLabel(reservation.operationType)}`,\n      metadata: {\n        operationType: reservation.operationType,\n      },\n    });\n  }\n}\n\n/**\n * Release a reservation with journal entry\n *\n * @param repository - The credit repository\n * @param userId - User ID\n * @param reservationId - Reservation to release\n */\nexport async function releaseReservationWithJournal(\n  repository: ICreditRepository,\n  userId: string,\n  reservationId: string\n): Promise<void> {\n  // Get the reservation to check its state\n  const reservation = await repository.getReservation(userId, reservationId);\n\n  // Release the reservation atomically\n  await repository.releaseReservationAtomic(userId, reservationId);\n\n  // Create journal entry only if reservation was in reserved state\n  if (reservation?.status === \"reserved\") {\n    const credits = await repository.getUserCredits(userId);\n    if (credits) {\n      await repository.createJournalEntry({\n        userId,\n        entryType: \"credit\",\n        amount: 0, // No actual credits returned (they were reserved, not spent)\n        balanceAfter: credits.balance,\n        source: \"operation_release\",\n        referenceId: reservationId,\n        referenceType: \"reservation\",\n        description: `Released ${reservation.amount} reserved credits for ${getOperationLabel(reservation.operationType)}`,\n        metadata: {\n          operationType: reservation.operationType,\n          amount: reservation.amount,\n        },\n      });\n    }\n  }\n}\n\n/**\n * Reserve credits for an operation\n *\n * @param repository - The credit repository\n * @param userId - User ID\n * @param amount - Credits to reserve\n * @param operationType - Type of operation\n * @param expiryMs - Reservation expiry time in milliseconds\n * @returns The reservation\n */\nexport async function reserveCreditsForOperation(\n  repository: ICreditRepository,\n  userId: string,\n  amount: number,\n  operationType: string,\n  expiryMs: number = 5 * 60 * 1000\n): Promise<PortableReservation> {\n  const expiresAt = new Date(Date.now() + expiryMs);\n  return repository.reserveCreditsAtomic(userId, amount, operationType, expiresAt);\n}\n","/**\n * Generic credits adapter - framework agnostic\n *\n * This adapter uses standard JavaScript APIs and works in any\n * JavaScript environment (Node.js, browser, etc.).\n */\n\nimport type { PortableReservation, WithCreditsOptions } from \"../core/types.js\";\nimport type { ActionResult, CreditsAdapter, CreditsAdapterConfig, CreditActionHandler } from \"./types.js\";\nimport {\n  commitReservationWithJournal,\n  releaseReservationWithJournal,\n  reserveCreditsForOperation,\n} from \"../core/operations.js\";\n\n/**\n * Generate a unique request ID\n */\nfunction generateRequestId(): string {\n  const timestamp = Date.now();\n  const randomPart = Math.random().toString(36).substring(2, 14);\n  return `req_${timestamp}_${randomPart}`;\n}\n\n/**\n * Create a generic credits adapter\n *\n * This adapter:\n * - Authenticates users via the provided auth provider\n * - Reserves credits before action execution\n * - Commits credits on success, releases on failure\n * - Logs usage asynchronously via the deferred executor\n */\nexport function createGenericAdapter(config: CreditsAdapterConfig): CreditsAdapter {\n  const { repository, authProvider, deferred, operationCosts } = config;\n\n  function getOperationCost(operationType: string): number {\n    const cost = operationCosts[operationType];\n    if (cost === undefined) {\n      throw new Error(\n        `Unknown operation type: \"${operationType}\". ` +\n        `Configured types: ${Object.keys(operationCosts).join(\", \")}`\n      );\n    }\n    return cost;\n  }\n\n  function logUsage(params: {\n    userId: string;\n    operationType: string;\n    creditsUsed: number;\n    success: boolean;\n    errorMessage?: string;\n    resourceId?: string;\n    resourceType?: string;\n    requestId: string;\n  }): void {\n    deferred.defer(async () => {\n      await repository.logUsage({\n        userId: params.userId,\n        operationType: params.operationType,\n        provider: \"gemini\",\n        creditsUsed: params.creditsUsed,\n        success: params.success,\n        errorMessage: params.errorMessage,\n        resourceId: params.resourceId,\n        resourceType: params.resourceType,\n        requestId: params.requestId,\n      });\n    });\n  }\n\n  return {\n    withCredits<TInput, TOutput>(\n      options: WithCreditsOptions,\n      handler: CreditActionHandler<TInput, TOutput>\n    ): (data: TInput) => Promise<ActionResult<TOutput>> {\n      return async (data: TInput): Promise<ActionResult<TOutput>> => {\n        const requestId = generateRequestId();\n\n        // Authenticate\n        const user = await authProvider.getCurrentUser();\n        if (!user?.id) {\n          return { success: false, error: \"Authentication required\" };\n        }\n\n        // Handle preview mode - skip credit handling entirely\n        if (isPreviewMode(data)) {\n          const dummyReservation = createDummyReservation(user.id, options.operationType);\n          return handler(user, data, dummyReservation);\n        }\n\n        // Calculate cost and reserve credits\n        let reservation: PortableReservation;\n        try {\n          const cost = options.customCost ?? getOperationCost(options.operationType);\n          reservation = await reserveCreditsForOperation(\n            repository,\n            user.id,\n            cost,\n            options.operationType\n          );\n        } catch (error) {\n          const message = error instanceof Error ? error.message : \"Failed to reserve credits\";\n          logUsage({\n            userId: user.id,\n            operationType: options.operationType,\n            creditsUsed: 0,\n            success: false,\n            errorMessage: message,\n            resourceId: options.resourceId,\n            resourceType: options.resourceType,\n            requestId,\n          });\n          return { success: false, error: message };\n        }\n\n        // Execute action\n        try {\n          const result = await handler(user, data, reservation);\n\n          if (result.success) {\n            await commitReservationWithJournal(repository, user.id, reservation.id);\n            logUsage({\n              userId: user.id,\n              operationType: options.operationType,\n              creditsUsed: reservation.amount,\n              success: true,\n              resourceId: options.resourceId,\n              resourceType: options.resourceType,\n              requestId,\n            });\n          } else {\n            await releaseReservationWithJournal(repository, user.id, reservation.id);\n            logUsage({\n              userId: user.id,\n              operationType: options.operationType,\n              creditsUsed: 0,\n              success: false,\n              errorMessage: result.error,\n              resourceId: options.resourceId,\n              resourceType: options.resourceType,\n              requestId,\n            });\n          }\n\n          return result;\n        } catch (error) {\n          const message = error instanceof Error ? error.message : \"An unexpected error occurred\";\n          await releaseReservationWithJournal(repository, user.id, reservation.id);\n          logUsage({\n            userId: user.id,\n            operationType: options.operationType,\n            creditsUsed: 0,\n            success: false,\n            errorMessage: message,\n            resourceId: options.resourceId,\n            resourceType: options.resourceType,\n            requestId,\n          });\n          console.error(\"Action error:\", error);\n          return { success: false, error: message };\n        }\n      };\n    },\n  };\n}\n\nfunction isPreviewMode(data: unknown): boolean {\n  return (\n    typeof data === \"object\" &&\n    data !== null &&\n    \"preview\" in data &&\n    (data as Record<string, unknown>).preview === true\n  );\n}\n\nfunction createDummyReservation(userId: string, operationType: string): PortableReservation {\n  return {\n    id: \"preview-mode\",\n    userId,\n    amount: 0,\n    operationType,\n    status: \"released\",\n    createdAt: new Date().toISOString(),\n    expiresAt: new Date().toISOString(),\n  };\n}\n"],"mappings":";AAAA,SAAS,SAAS;;;ACOlB,IAAI,iBAA+C;AAQ5C,SAAS,oBAAkD;AAChE,SAAO;AACT;;;ADVA,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,QAAQ,SAAS,WAAW,WAAW,CAAC;AAAA,EACtD,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAC9B,CAAC;AAKD,IAAM,2BAA2B,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,gBAAgB,EAAE;AAAA,IAChB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAChB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB,EAAE;AAAA,IACjB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAChB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAClB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAKvB,aAAa,EAAE;AAAA,IACb,EAAE,KAAK,CAAC,QAAQ,SAAS,WAAW,WAAW,CAAC;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,KAAK,GAAI;AAAA;AAAA;AAAA;AAAA,EAKhE,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA,EAKpD,6BAA6B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA;AAAA;AAAA;AAAA,EAKxD,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA,EAKjD,qCAAqC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA,EAKrE,UAAU,EAAE,OAAO;AAAA,IACjB,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,IACxC,eAAe,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,IACvC,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,IAC5C,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EACxC,CAAC,EAAE,QAAQ;AAAA,IACT,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,cAAc;AAAA,EAChB,CAAC;AACH,CAAC;AAUD,IAAM,iBAAqC;AAAA,EACzC,gBAAgB;AAAA,IACd,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,qBAAqB;AAAA,EACvB;AAAA,EACA,iBAAiB;AAAA,IACf,kBAAkB;AAAA,IAClB,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,qBAAqB;AAAA,EACvB;AAAA,EACA,aAAa;AAAA,IACX,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,gBAAgB;AAAA;AAAA,MAChB,UAAU;AAAA,MACV,UAAU;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,qBAAqB,IAAI,KAAK;AAAA;AAAA,EAC9B,oBAAoB;AAAA,EACpB,6BAA6B;AAAA,EAC7B,qBAAqB;AAAA,EACrB,qCAAqC;AAAA,EACrC,UAAU;AAAA,IACR,gBAAgB;AAAA,IAChB,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,cAAc;AAAA,EAChB;AACF;AAKA,IAAI,gBAAoC;AASjC,SAAS,oBAAiD;AAC/D,QAAM,YAAyC,CAAC;AAGhD,QAAM,oBAAoB,QAAQ,IAAI;AACtC,MAAI,mBAAmB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,iBAAiB;AAC3C,UAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,kBAAU,iBAAiB;AAAA,UACzB,GAAG,eAAe;AAAA,UAClB,GAAG;AAAA,QACL;AAAA,MACF;AAAA,IACF,QAAQ;AACN,cAAQ,KAAK,0EAA0E;AAAA,IACzF;AAAA,EACF;AAGA,QAAM,oBAAoB,QAAQ,IAAI;AACtC,MAAI,mBAAmB;AACrB,cAAU,sBAAsB,SAAS,mBAAmB,EAAE;AAAA,EAChE;AAEA,QAAM,iBAAiB,QAAQ,IAAI;AACnC,MAAI,gBAAgB;AAClB,cAAU,qBAAqB,SAAS,gBAAgB,EAAE;AAAA,EAC5D;AAEA,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,aAAa;AACf,cAAU,8BAA8B,SAAS,aAAa,EAAE;AAAA,EAClE;AAEA,QAAM,sBAAsB,QAAQ,IAAI;AACxC,MAAI,qBAAqB;AACvB,cAAU,sBAAsB,SAAS,qBAAqB,EAAE;AAAA,EAClE;AAGA,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,aAAa;AACf,QAAI;AACF,YAAM,WAAW,KAAK,MAAM,WAAW;AACvC,gBAAU,WAAW;AAAA,QACnB,GAAG,eAAe;AAAA,QAClB,GAAG;AAAA,MACL;AAAA,IACF,QAAQ;AACN,cAAQ,KAAK,2DAA2D;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,iBAAiB,WAA6D;AAC5F,QAAM,YAAY,kBAAkB;AAEpC,QAAM,eAAe;AAAA,IACnB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,gBAAgB;AAAA,MACd,GAAG,eAAe;AAAA,MAClB,GAAG,UAAU;AAAA,MACb,GAAG,WAAW;AAAA,IAChB;AAAA,IACA,iBAAiB;AAAA,MACf,GAAG,eAAe;AAAA,MAClB,GAAG,UAAU;AAAA,MACb,GAAG,WAAW;AAAA,IAChB;AAAA,IACA,aAAa;AAAA,MACX,GAAG,eAAe;AAAA,MAClB,GAAG,UAAU;AAAA,MACb,GAAG,WAAW;AAAA,IAChB;AAAA,IACA,UAAU;AAAA,MACR,GAAG,eAAe;AAAA,MAClB,GAAG,UAAU;AAAA,MACb,GAAG,WAAW;AAAA,IAChB;AAAA,EACF;AAGA,QAAM,SAAS,yBAAyB,UAAU,YAAY;AAC9D,MAAI,CAAC,OAAO,SAAS;AACnB,YAAQ,MAAM,2CAA2C,OAAO,MAAM,MAAM;AAC5E,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AAEA,kBAAgB,OAAO;AACvB,SAAO;AACT;AAOO,SAAS,YAAgC;AAC9C,QAAM,WAAW,kBAAkB;AACnC,MAAI,UAAU;AACZ,WAAO,SAAS,UAAU;AAAA,EAC5B;AACA,SAAO;AACT;AA4DA,SAAS,qBAAqB,KAAqB;AACjD,SAAO,IACJ,QAAQ,MAAM,GAAG,EACjB,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC;AAC5C;AAMO,SAAS,kBAAkB,eAA+B;AAC/D,QAAM,SAAS,UAAU,EAAE;AAC3B,MAAI,UAAU,iBAAiB,QAAQ;AACrC,WAAO,OAAO,aAAa;AAAA,EAC7B;AACA,SAAO,qBAAqB,aAAa;AAC3C;AAwBA,iBAAiB;;;AErXjB,eAAsB,6BACpB,YACA,QACA,eACe;AAEf,QAAM,cAAc,MAAM,WAAW,eAAe,QAAQ,aAAa;AACzE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,eAAe,aAAa,YAAY;AAAA,EAC1D;AAGA,QAAM,WAAW,wBAAwB,QAAQ,aAAa;AAG9D,QAAM,UAAU,MAAM,WAAW,eAAe,MAAM;AACtD,MAAI,SAAS;AACX,UAAM,WAAW,mBAAmB;AAAA,MAClC;AAAA,MACA,WAAW;AAAA,MACX,QAAQ,YAAY;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,eAAe;AAAA,MACf,aAAa,aAAa,YAAY,MAAM,gBAAgB,kBAAkB,YAAY,aAAa,CAAC;AAAA,MACxG,UAAU;AAAA,QACR,eAAe,YAAY;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH;AACF;AASA,eAAsB,8BACpB,YACA,QACA,eACe;AAEf,QAAM,cAAc,MAAM,WAAW,eAAe,QAAQ,aAAa;AAGzE,QAAM,WAAW,yBAAyB,QAAQ,aAAa;AAG/D,MAAI,aAAa,WAAW,YAAY;AACtC,UAAM,UAAU,MAAM,WAAW,eAAe,MAAM;AACtD,QAAI,SAAS;AACX,YAAM,WAAW,mBAAmB;AAAA,QAClC;AAAA,QACA,WAAW;AAAA,QACX,QAAQ;AAAA;AAAA,QACR,cAAc,QAAQ;AAAA,QACtB,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,eAAe;AAAA,QACf,aAAa,YAAY,YAAY,MAAM,yBAAyB,kBAAkB,YAAY,aAAa,CAAC;AAAA,QAChH,UAAU;AAAA,UACR,eAAe,YAAY;AAAA,UAC3B,QAAQ,YAAY;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAYA,eAAsB,2BACpB,YACA,QACA,QACA,eACA,WAAmB,IAAI,KAAK,KACE;AAC9B,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ;AAChD,SAAO,WAAW,qBAAqB,QAAQ,QAAQ,eAAe,SAAS;AACjF;;;AC5FA,SAAS,oBAA4B;AACnC,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,aAAa,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AAC7D,SAAO,OAAO,SAAS,IAAI,UAAU;AACvC;AAWO,SAAS,qBAAqB,QAA8C;AACjF,QAAM,EAAE,YAAY,cAAc,UAAU,eAAe,IAAI;AAE/D,WAAS,iBAAiB,eAA+B;AACvD,UAAM,OAAO,eAAe,aAAa;AACzC,QAAI,SAAS,QAAW;AACtB,YAAM,IAAI;AAAA,QACR,4BAA4B,aAAa,wBACpB,OAAO,KAAK,cAAc,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,WAAS,SAAS,QAST;AACP,aAAS,MAAM,YAAY;AACzB,YAAM,WAAW,SAAS;AAAA,QACxB,QAAQ,OAAO;AAAA,QACf,eAAe,OAAO;AAAA,QACtB,UAAU;AAAA,QACV,aAAa,OAAO;AAAA,QACpB,SAAS,OAAO;AAAA,QAChB,cAAc,OAAO;AAAA,QACrB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,QACrB,WAAW,OAAO;AAAA,MACpB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,YACE,SACA,SACkD;AAClD,aAAO,OAAO,SAAiD;AAC7D,cAAM,YAAY,kBAAkB;AAGpC,cAAM,OAAO,MAAM,aAAa,eAAe;AAC/C,YAAI,CAAC,MAAM,IAAI;AACb,iBAAO,EAAE,SAAS,OAAO,OAAO,0BAA0B;AAAA,QAC5D;AAGA,YAAI,cAAc,IAAI,GAAG;AACvB,gBAAM,mBAAmB,uBAAuB,KAAK,IAAI,QAAQ,aAAa;AAC9E,iBAAO,QAAQ,MAAM,MAAM,gBAAgB;AAAA,QAC7C;AAGA,YAAI;AACJ,YAAI;AACF,gBAAM,OAAO,QAAQ,cAAc,iBAAiB,QAAQ,aAAa;AACzE,wBAAc,MAAM;AAAA,YAClB;AAAA,YACA,KAAK;AAAA,YACL;AAAA,YACA,QAAQ;AAAA,UACV;AAAA,QACF,SAAS,OAAO;AACd,gBAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,mBAAS;AAAA,YACP,QAAQ,KAAK;AAAA,YACb,eAAe,QAAQ;AAAA,YACvB,aAAa;AAAA,YACb,SAAS;AAAA,YACT,cAAc;AAAA,YACd,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB;AAAA,UACF,CAAC;AACD,iBAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,QAC1C;AAGA,YAAI;AACF,gBAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,WAAW;AAEpD,cAAI,OAAO,SAAS;AAClB,kBAAM,6BAA6B,YAAY,KAAK,IAAI,YAAY,EAAE;AACtE,qBAAS;AAAA,cACP,QAAQ,KAAK;AAAA,cACb,eAAe,QAAQ;AAAA,cACvB,aAAa,YAAY;AAAA,cACzB,SAAS;AAAA,cACT,YAAY,QAAQ;AAAA,cACpB,cAAc,QAAQ;AAAA,cACtB;AAAA,YACF,CAAC;AAAA,UACH,OAAO;AACL,kBAAM,8BAA8B,YAAY,KAAK,IAAI,YAAY,EAAE;AACvE,qBAAS;AAAA,cACP,QAAQ,KAAK;AAAA,cACb,eAAe,QAAQ;AAAA,cACvB,aAAa;AAAA,cACb,SAAS;AAAA,cACT,cAAc,OAAO;AAAA,cACrB,YAAY,QAAQ;AAAA,cACpB,cAAc,QAAQ;AAAA,cACtB;AAAA,YACF,CAAC;AAAA,UACH;AAEA,iBAAO;AAAA,QACT,SAAS,OAAO;AACd,gBAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,gBAAM,8BAA8B,YAAY,KAAK,IAAI,YAAY,EAAE;AACvE,mBAAS;AAAA,YACP,QAAQ,KAAK;AAAA,YACb,eAAe,QAAQ;AAAA,YACvB,aAAa;AAAA,YACb,SAAS;AAAA,YACT,cAAc;AAAA,YACd,YAAY,QAAQ;AAAA,YACpB,cAAc,QAAQ;AAAA,YACtB;AAAA,UACF,CAAC;AACD,kBAAQ,MAAM,iBAAiB,KAAK;AACpC,iBAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAwB;AAC7C,SACE,OAAO,SAAS,YAChB,SAAS,QACT,aAAa,QACZ,KAAiC,YAAY;AAElD;AAEA,SAAS,uBAAuB,QAAgB,eAA4C;AAC1F,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACF;","names":[]}

package/dist/auth/index.cjs

@@ -0,0 +1,96 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth/index.ts
+var auth_exports = {};
+__export(auth_exports, {
+  ApiKeyCreditsProvider: () => ApiKeyCreditsProvider,
+  createApiKeyProvider: () => createApiKeyProvider,
+  verifyAdminApiKey: () => verifyAdminApiKey,
+  verifyBearerToken: () => verifyBearerToken
+});
+module.exports = __toCommonJS(auth_exports);
+
+// src/auth/api-key.ts
+function timingSafeEqual(a, b) {
+  if (!a || !b) {
+    return false;
+  }
+  const maxLength = Math.max(a.length, b.length);
+  const paddedA = a.padEnd(maxLength);
+  const paddedB = b.padEnd(maxLength);
+  let result = 0;
+  for (let i = 0; i < maxLength; i++) {
+    result |= paddedA.charCodeAt(i) ^ paddedB.charCodeAt(i);
+  }
+  return result === 0 && a.length === b.length;
+}
+function verifyBearerToken(header, secret) {
+  if (!header || !secret) {
+    return false;
+  }
+  const token = header.replace(/^Bearer\s+/i, "");
+  return timingSafeEqual(token, secret);
+}
+var ApiKeyCreditsProvider = class {
+  apiKey;
+  isValidated = false;
+  constructor(authHeader, apiKey) {
+    this.apiKey = apiKey ?? process.env.CREDITS_ADMIN_API_KEY;
+    if (authHeader && this.apiKey) {
+      this.isValidated = verifyBearerToken(authHeader, this.apiKey);
+    }
+  }
+  async getCurrentUser() {
+    if (!this.isValidated) {
+      return null;
+    }
+    return {
+      id: "api-admin",
+      email: "api@admin.internal",
+      name: "API Admin"
+    };
+  }
+  async verifyAdminAccess() {
+    return this.isValidated;
+  }
+};
+function verifyAdminApiKey(authHeader, apiKey) {
+  if (!authHeader) {
+    return false;
+  }
+  const expectedKey = apiKey ?? process.env.CREDITS_ADMIN_API_KEY;
+  if (!expectedKey) {
+    console.warn("CREDITS_ADMIN_API_KEY not configured");
+    return false;
+  }
+  return verifyBearerToken(authHeader, expectedKey);
+}
+function createApiKeyProvider(request, apiKey) {
+  const authHeader = request.headers.get("Authorization");
+  return new ApiKeyCreditsProvider(authHeader, apiKey);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ApiKeyCreditsProvider,
+  createApiKeyProvider,
+  verifyAdminApiKey,
+  verifyBearerToken
+});
+//# sourceMappingURL=index.cjs.map

package/dist/auth/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/index.ts","../../src/auth/api-key.ts"],"sourcesContent":["/**\n * Credits auth providers - barrel exports\n *\n * Provides authentication abstraction for credits system\n */\n\n// Types and interfaces\nexport type {\n  ICreditsAuthProvider,\n  CreditsAuthProviderFactory,\n  CreditsUser,\n} from \"./types.js\";\n\n// API Key implementation (for admin routes)\nexport {\n  ApiKeyCreditsProvider,\n  verifyAdminApiKey,\n  createApiKeyProvider,\n  verifyBearerToken,\n} from \"./api-key.js\";\n","import type { ICreditsAuthProvider, CreditsUser } from \"./types.js\";\n\n/**\n * Timing-safe string comparison to prevent timing attacks\n */\nfunction timingSafeEqual(a: string, b: string): boolean {\n  if (!a || !b) {\n    return false;\n  }\n\n  // Pad strings to same length to prevent length-based timing attacks\n  const maxLength = Math.max(a.length, b.length);\n  const paddedA = a.padEnd(maxLength);\n  const paddedB = b.padEnd(maxLength);\n\n  let result = 0;\n  for (let i = 0; i < maxLength; i++) {\n    result |= paddedA.charCodeAt(i) ^ paddedB.charCodeAt(i);\n  }\n\n  // Also check that lengths were originally equal\n  return result === 0 && a.length === b.length;\n}\n\n/**\n * Verify a Bearer token from an Authorization header\n *\n * @param header - The Authorization header value (e.g., \"Bearer secret123\")\n * @param secret - The expected secret value\n * @returns True if token is valid\n */\nexport function verifyBearerToken(header: string | null, secret: string): boolean {\n  if (!header || !secret) {\n    return false;\n  }\n\n  // Extract token from \"Bearer {token}\" format\n  const token = header.replace(/^Bearer\\s+/i, \"\");\n\n  // Use timing-safe comparison\n  return timingSafeEqual(token, secret);\n}\n\n/**\n * API Key auth provider for admin routes\n *\n * Uses Bearer token authentication for external API access\n * The API key is stored in CREDITS_ADMIN_API_KEY environment variable\n */\nexport class ApiKeyCreditsProvider implements ICreditsAuthProvider {\n  private readonly apiKey: string | undefined;\n  private isValidated = false;\n\n  constructor(authHeader?: string | null, apiKey?: string) {\n    this.apiKey = apiKey ?? process.env.CREDITS_ADMIN_API_KEY;\n\n    // Validate the provided auth header using timing-safe comparison\n    if (authHeader && this.apiKey) {\n      this.isValidated = verifyBearerToken(authHeader, this.apiKey);\n    }\n  }\n\n  async getCurrentUser(): Promise<CreditsUser | null> {\n    if (!this.isValidated) {\n      return null;\n    }\n\n    // API key auth returns a special \"admin\" user\n    return {\n      id: \"api-admin\",\n      email: \"api@admin.internal\",\n      name: \"API Admin\",\n    };\n  }\n\n  async verifyAdminAccess(): Promise<boolean> {\n    return this.isValidated;\n  }\n}\n\n/**\n * Verify an API key from a request header\n * @param authHeader - Authorization header value\n * @param apiKey - Optional API key to use (defaults to CREDITS_ADMIN_API_KEY env var)\n * @returns True if API key is valid\n */\nexport function verifyAdminApiKey(authHeader: string | null, apiKey?: string): boolean {\n  if (!authHeader) {\n    return false;\n  }\n\n  const expectedKey = apiKey ?? process.env.CREDITS_ADMIN_API_KEY;\n  if (!expectedKey) {\n    console.warn(\"CREDITS_ADMIN_API_KEY not configured\");\n    return false;\n  }\n\n  // Use timing-safe comparison to prevent timing attacks\n  return verifyBearerToken(authHeader, expectedKey);\n}\n\n/**\n * Create an API key auth provider from a request\n * @param request - Request object with headers\n * @param apiKey - Optional API key to use\n * @returns API key auth provider\n */\nexport function createApiKeyProvider(request: Request, apiKey?: string): ApiKeyCreditsProvider {\n  const authHeader = request.headers.get(\"Authorization\");\n  return new ApiKeyCreditsProvider(authHeader, apiKey);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,SAAS,gBAAgB,GAAW,GAAoB;AACtD,MAAI,CAAC,KAAK,CAAC,GAAG;AACZ,WAAO;AAAA,EACT;AAGA,QAAM,YAAY,KAAK,IAAI,EAAE,QAAQ,EAAE,MAAM;AAC7C,QAAM,UAAU,EAAE,OAAO,SAAS;AAClC,QAAM,UAAU,EAAE,OAAO,SAAS;AAElC,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,WAAW,KAAK;AAClC,cAAU,QAAQ,WAAW,CAAC,IAAI,QAAQ,WAAW,CAAC;AAAA,EACxD;AAGA,SAAO,WAAW,KAAK,EAAE,WAAW,EAAE;AACxC;AASO,SAAS,kBAAkB,QAAuB,QAAyB;AAChF,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO;AAAA,EACT;AAGA,QAAM,QAAQ,OAAO,QAAQ,eAAe,EAAE;AAG9C,SAAO,gBAAgB,OAAO,MAAM;AACtC;AAQO,IAAM,wBAAN,MAA4D;AAAA,EAChD;AAAA,EACT,cAAc;AAAA,EAEtB,YAAY,YAA4B,QAAiB;AACvD,SAAK,SAAS,UAAU,QAAQ,IAAI;AAGpC,QAAI,cAAc,KAAK,QAAQ;AAC7B,WAAK,cAAc,kBAAkB,YAAY,KAAK,MAAM;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,iBAA8C;AAClD,QAAI,CAAC,KAAK,aAAa;AACrB,aAAO;AAAA,IACT;AAGA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,MAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,oBAAsC;AAC1C,WAAO,KAAK;AAAA,EACd;AACF;AAQO,SAAS,kBAAkB,YAA2B,QAA0B;AACrF,MAAI,CAAC,YAAY;AACf,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,UAAU,QAAQ,IAAI;AAC1C,MAAI,CAAC,aAAa;AAChB,YAAQ,KAAK,sCAAsC;AACnD,WAAO;AAAA,EACT;AAGA,SAAO,kBAAkB,YAAY,WAAW;AAClD;AAQO,SAAS,qBAAqB,SAAkB,QAAwC;AAC7F,QAAM,aAAa,QAAQ,QAAQ,IAAI,eAAe;AACtD,SAAO,IAAI,sBAAsB,YAAY,MAAM;AACrD;","names":[]}

package/dist/auth/{api-key.d.ts → index.d.cts}

@@ -1,4 +1,6 @@
-import type { ICreditsAuthProvider, CreditsUser } from "./types.js";
+import { I as ICreditsAuthProvider, a as CreditsUser } from '../types-OZU3I5OM.cjs';
+export { C as CreditsAuthProviderFactory } from '../types-OZU3I5OM.cjs';
+
 /**
  * Verify a Bearer token from an Authorization header
  *
@@ -6,14 +8,14 @@ import type { ICreditsAuthProvider, CreditsUser } from "./types.js";
  * @param secret - The expected secret value
  * @returns True if token is valid
  */
-export declare function verifyBearerToken(header: string | null, secret: string): boolean;
+declare function verifyBearerToken(header: string | null, secret: string): boolean;
 /**
  * API Key auth provider for admin routes
  *
  * Uses Bearer token authentication for external API access
  * The API key is stored in CREDITS_ADMIN_API_KEY environment variable
  */
-export declare class ApiKeyCreditsProvider implements ICreditsAuthProvider {
+declare class ApiKeyCreditsProvider implements ICreditsAuthProvider {
     private readonly apiKey;
     private isValidated;
     constructor(authHeader?: string | null, apiKey?: string);
@@ -26,12 +28,13 @@ export declare class ApiKeyCreditsProvider implements ICreditsAuthProvider {
  * @param apiKey - Optional API key to use (defaults to CREDITS_ADMIN_API_KEY env var)
  * @returns True if API key is valid
  */
-export declare function verifyAdminApiKey(authHeader: string | null, apiKey?: string): boolean;
+declare function verifyAdminApiKey(authHeader: string | null, apiKey?: string): boolean;
 /**
  * Create an API key auth provider from a request
  * @param request - Request object with headers
  * @param apiKey - Optional API key to use
  * @returns API key auth provider
  */
-export declare function createApiKeyProvider(request: Request, apiKey?: string): ApiKeyCreditsProvider;
-//# sourceMappingURL=api-key.d.ts.map
+declare function createApiKeyProvider(request: Request, apiKey?: string): ApiKeyCreditsProvider;
+
+export { ApiKeyCreditsProvider, CreditsUser, ICreditsAuthProvider, createApiKeyProvider, verifyAdminApiKey, verifyBearerToken };