@nodetool-ai/config 0.7.0-rc.22 → 0.8.1

package/README.md

@@ -0,0 +1,50 @@
+# @nodetool-ai/config
+
+Configuration and environment loading for [NodeTool](https://nodetool.ai) — settings, paths, logging, byte limits, and cross-runtime module loading.
+
+This is the base dependency for the backend: it loads and reads environment variables, resolves data/asset/database paths, registers typed settings, configures logging, and diagnoses the running environment. It also provides cross-runtime helpers for importing Node built-ins and optional modules from code that also runs in the browser.
+
+## Install
+
+```bash
+npm install @nodetool-ai/config
+```
+
+## Exported symbols
+
+| Symbol | Kind | Description |
+| --- | --- | --- |
+| `loadEnvironment` / `resetEnvironment` | function | Load and reset the process environment (dotenv) |
+| `getEnv` / `requireEnv` | function | Read an env var, optionally throwing if missing |
+| `getByteLimitEnv` | function | Parse a byte-size limit from an env var |
+| `settingCatalog` / `settingDefinition` | function | Read the catalog of every configuration knob NodeTool ships |
+| `SettingCatalogEntry` | type | One catalog definition: env var, group, description, `isSecret` |
+| `configureLogging` / `getLogLevel` / `createLogger` | function | Configure logging and create named loggers |
+| `LogLevel` / `LoggingOptions` / `Logger` | type | Logging types |
+| `getNodetoolDataDir` / `getDefaultDbPath` / `getDefaultAssetsPath` | function | Resolve standard data, database, and asset paths |
+| `getPostgresDatabaseUrl` / `getDefaultVectorstoreDbPath` | function | Resolve Postgres and vectorstore locations |
+| `getAssetFilePath` / `buildAssetUrl` | function | Map asset keys to file paths and URLs |
+| `loadAssetStorageConfig` / `loadTempStorageConfig` | function | Load storage configuration from the environment |
+| `StorageConfig` / `SIGNED_URL_TTL` | type / const | Storage config shape and signed-URL lifetime |
+| `IS_NODE` / `importNodeBuiltin` / `importHidden` / `importOptionalModule` | const / function | Cross-runtime module loading helpers |
+
+## Usage
+
+```ts
+import {
+  loadEnvironment,
+  requireEnv,
+  createLogger,
+  getDefaultDbPath
+} from "@nodetool-ai/config";
+
+loadEnvironment();
+const log = createLogger("server");
+log.info("db path", getDefaultDbPath());
+const token = requireEnv("NODETOOL_TOKEN");
+```
+
+## Links
+
+- [NodeTool](https://nodetool.ai)
+- [GitHub](https://github.com/nodetool-ai/nodetool)

package/dist/.nodetool-build-stamp

@@ -0,0 +1 @@
+2026-09-28T09:19:01.424Z

package/dist/__tests__/credit-policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=credit-policy.test.d.ts.map

package/dist/__tests__/credit-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-policy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/credit-policy.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/credit-policy.test.js

@@ -0,0 +1,48 @@
+import { describe, it, expect } from "vitest";
+import { CREDIT_MODELS_ENV, DEFAULT_SIGNUP_CREDITS, SIGNUP_CREDITS_ENV, creditModelAllowlist, isCreditModelAllowed, signupGrantCredits } from "../credit-policy.js";
+const env = (value) => value;
+describe("creditModelAllowlist", () => {
+    it("is null when the operator restricted nothing — the whole catalog", () => {
+        expect(creditModelAllowlist({})).toBeNull();
+        expect(creditModelAllowlist(env({ [CREDIT_MODELS_ENV]: "  " }))).toBeNull();
+        expect(creditModelAllowlist(env({ [CREDIT_MODELS_ENV]: ", ," }))).toBeNull();
+    });
+    it("splits on commas, spaces, and newlines", () => {
+        const allowed = creditModelAllowlist(env({
+            [CREDIT_MODELS_ENV]: "nodetool/flux-schnell, nodetool/kokoro\n nodetool/hailuo-fast"
+        }));
+        expect([...allowed].sort()).toEqual([
+            "nodetool/flux-schnell",
+            "nodetool/hailuo-fast",
+            "nodetool/kokoro"
+        ]);
+    });
+});
+describe("isCreditModelAllowed", () => {
+    it("allows everything when nothing is whitelisted", () => {
+        expect(isCreditModelAllowed("nodetool/seedream", {})).toBe(true);
+    });
+    it("allows only what the whitelist names", () => {
+        const configured = env({
+            [CREDIT_MODELS_ENV]: "nodetool/flux-schnell,nodetool/kokoro"
+        });
+        expect(isCreditModelAllowed("nodetool/flux-schnell", configured)).toBe(true);
+        expect(isCreditModelAllowed("nodetool/seedream", configured)).toBe(false);
+    });
+});
+describe("signupGrantCredits", () => {
+    it("defaults when unset or blank", () => {
+        expect(signupGrantCredits({})).toBe(DEFAULT_SIGNUP_CREDITS);
+        expect(signupGrantCredits(env({ [SIGNUP_CREDITS_ENV]: "  " }))).toBe(DEFAULT_SIGNUP_CREDITS);
+    });
+    it("reads a configured amount, floored to whole credits", () => {
+        expect(signupGrantCredits(env({ [SIGNUP_CREDITS_ENV]: "1200" }))).toBe(1200);
+        expect(signupGrantCredits(env({ [SIGNUP_CREDITS_ENV]: "12.9" }))).toBe(12);
+    });
+    it("treats zero, negatives, and junk as no welcome grant", () => {
+        for (const raw of ["0", "-5", "lots"]) {
+            expect(signupGrantCredits(env({ [SIGNUP_CREDITS_ENV]: raw }))).toBe(0);
+        }
+    });
+});
+//# sourceMappingURL=credit-policy.test.js.map

package/dist/__tests__/credit-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-policy.test.js","sourceRoot":"","sources":["../../src/__tests__/credit-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,GAAG,GAAG,CAAC,KAA6B,EAAE,EAAE,CAAC,KAAK,CAAC;AAErD,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,oBAAoB,CAClC,GAAG,CAAC;YACF,CAAC,iBAAiB,CAAC,EACjB,+DAA+D;SAClE,CAAC,CACH,CAAC;QACF,MAAM,CAAC,CAAC,GAAG,OAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACnC,uBAAuB;YACvB,sBAAsB;YACtB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC;YACrB,CAAC,iBAAiB,CAAC,EAAE,uCAAuC;SAC7D,CAAC,CAAC;QACH,MAAM,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC5D,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAClE,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/env-file.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env-file.test.d.ts.map

package/dist/__tests__/env-file.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/env-file.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/env-file.test.js

@@ -0,0 +1,100 @@
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import * as fs from "node:fs";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { loadEnvFile, parseEnvFile } from "../env-file.js";
+describe("parseEnvFile", () => {
+    it("parses simple KEY=VALUE pairs", () => {
+        expect(parseEnvFile("A=1\nB=two")).toEqual({ A: "1", B: "two" });
+    });
+    it("skips blank lines and # comments", () => {
+        const input = "\n# a comment\nA=1\n\n  # indented comment\nB=2\n";
+        expect(parseEnvFile(input)).toEqual({ A: "1", B: "2" });
+    });
+    it("strips an optional export prefix", () => {
+        expect(parseEnvFile("export A=1\nexport B=2")).toEqual({ A: "1", B: "2" });
+    });
+    it("trims unquoted values", () => {
+        expect(parseEnvFile("A=  spaced  ")).toEqual({ A: "spaced" });
+    });
+    it("keeps single-quoted values literal", () => {
+        expect(parseEnvFile("A='line\\n still'")).toEqual({ A: "line\\n still" });
+    });
+    it("expands \\n \\r \\t in double-quoted values", () => {
+        expect(parseEnvFile('A="line1\\nline2\\tend"')).toEqual({
+            A: "line1\nline2\tend"
+        });
+    });
+    it("preserves surrounding whitespace inside quotes", () => {
+        expect(parseEnvFile('A="  padded  "')).toEqual({ A: "  padded  " });
+    });
+    it("handles values containing =", () => {
+        expect(parseEnvFile("URL=postgres://u:p@h/db?a=b&c=d")).toEqual({
+            URL: "postgres://u:p@h/db?a=b&c=d"
+        });
+    });
+    it("strips inline comments from unquoted values", () => {
+        expect(parseEnvFile("A=bar # explanation\nB=bar#explanation")).toEqual({
+            A: "bar",
+            B: "bar"
+        });
+    });
+    it("preserves hashes inside quoted values before inline comments", () => {
+        expect(parseEnvFile(`A="double # value" # comment\nB='single # value'#comment`)).toEqual({
+            A: "double # value",
+            B: "single # value"
+        });
+    });
+    it("preserves hashes after escaped quotes inside quoted values", () => {
+        expect(parseEnvFile('A="quoted \\"text\\" # value" # comment')).toEqual({
+            A: 'quoted \\"text\\" # value'
+        });
+    });
+    it("treats hashes after backslashes in unquoted values as comments", () => {
+        expect(parseEnvFile("A=bar\\#comment")).toEqual({ A: "bar\\" });
+    });
+    it("ignores lines without = and empty keys", () => {
+        expect(parseEnvFile("NOTAKEY\n=value\nA=1")).toEqual({ A: "1" });
+    });
+});
+describe("loadEnvFile", () => {
+    let dir;
+    const created = [];
+    beforeEach(() => {
+        dir = mkdtempSync(join(tmpdir(), "envfile-"));
+    });
+    afterEach(() => {
+        for (const key of created)
+            delete process.env[key];
+        created.length = 0;
+        rmSync(dir, { recursive: true, force: true });
+    });
+    const write = (name, content) => {
+        const file = join(dir, name);
+        writeFileSync(file, content);
+        return file;
+    };
+    it("applies pairs to process.env", () => {
+        created.push("ENVFILE_TEST_A");
+        const file = write(".env", "ENVFILE_TEST_A=hello");
+        const parsed = loadEnvFile(fs, file);
+        expect(parsed).toEqual({ ENVFILE_TEST_A: "hello" });
+        expect(process.env.ENVFILE_TEST_A).toBe("hello");
+    });
+    it("overrides existing process.env values", () => {
+        created.push("ENVFILE_TEST_B");
+        process.env.ENVFILE_TEST_B = "first";
+        const first = write(".env", "ENVFILE_TEST_B=first-file");
+        loadEnvFile(fs, first);
+        expect(process.env.ENVFILE_TEST_B).toBe("first-file");
+        const second = write(".env.local", "ENVFILE_TEST_B=second-file");
+        loadEnvFile(fs, second);
+        expect(process.env.ENVFILE_TEST_B).toBe("second-file");
+    });
+    it("tolerates a missing file silently", () => {
+        const parsed = loadEnvFile(fs, join(dir, "does-not-exist.env"));
+        expect(parsed).toEqual({});
+    });
+});
+//# sourceMappingURL=env-file.test.js.map

package/dist/__tests__/env-file.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.test.js","sourceRoot":"","sources":["../../src/__tests__/env-file.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE3D,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,mDAAmD,CAAC;QAClE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;YACtD,CAAC,EAAE,mBAAmB;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,GAAG,EAAE,6BAA6B;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,YAAY,CAAC,wCAAwC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,CAAC,EAAE,KAAK;YACR,CAAC,EAAE,KAAK;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CACJ,YAAY,CAAC,0DAA0D,CAAC,CACzE,CAAC,OAAO,CAAC;YACR,CAAC,EAAE,gBAAgB;YACnB,CAAC,EAAE,gBAAgB;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,YAAY,CAAC,yCAAyC,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,CAAC,EAAE,2BAA2B;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,GAAW,CAAC;IAChB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,GAAG,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;QACzD,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;QACjE,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/google-workspace.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=google-workspace.test.d.ts.map

package/dist/__tests__/google-workspace.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-workspace.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/google-workspace.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/google-workspace.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { isGoogleWorkspaceEnabled } from "../google-workspace.js";
+const KEYS = ["SUPABASE_URL", "SUPABASE_KEY", "NODETOOL_GOOGLE_WORKSPACE"];
+describe("isGoogleWorkspaceEnabled", () => {
+    let saved;
+    beforeEach(() => {
+        saved = Object.fromEntries(KEYS.map((k) => [k, process.env[k]]));
+        for (const key of KEYS)
+            delete process.env[key];
+    });
+    afterEach(() => {
+        for (const key of KEYS) {
+            if (saved[key] === undefined)
+                delete process.env[key];
+            else
+                process.env[key] = saved[key];
+        }
+    });
+    it("is off in local mode", () => {
+        expect(isGoogleWorkspaceEnabled()).toBe(false);
+    });
+    it("is on when Supabase auth is configured", () => {
+        process.env.SUPABASE_URL = "https://project.supabase.co";
+        process.env.SUPABASE_KEY = "service-role-key";
+        expect(isGoogleWorkspaceEnabled()).toBe(true);
+    });
+    it("stays off when only one Supabase variable is set", () => {
+        process.env.SUPABASE_URL = "https://project.supabase.co";
+        expect(isGoogleWorkspaceEnabled()).toBe(false);
+    });
+    it("honours the explicit override in both directions", () => {
+        process.env.NODETOOL_GOOGLE_WORKSPACE = "1";
+        expect(isGoogleWorkspaceEnabled()).toBe(true);
+        process.env.SUPABASE_URL = "https://project.supabase.co";
+        process.env.SUPABASE_KEY = "service-role-key";
+        process.env.NODETOOL_GOOGLE_WORKSPACE = "0";
+        expect(isGoogleWorkspaceEnabled()).toBe(false);
+    });
+});
+//# sourceMappingURL=google-workspace.test.js.map

package/dist/__tests__/google-workspace.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-workspace.test.js","sourceRoot":"","sources":["../../src/__tests__/google-workspace.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,IAAI,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,2BAA2B,CAAC,CAAC;AAE3E,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,KAAyC,CAAC;IAE9C,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,6BAA6B,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,kBAAkB,CAAC;QAC9C,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,6BAA6B,CAAC;QACzD,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,GAAG,CAAC;QAC5C,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,6BAA6B,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,kBAAkB,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,GAAG,CAAC;QAC5C,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/retention.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=retention.test.d.ts.map

package/dist/__tests__/retention.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/retention.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/retention.test.js

@@ -0,0 +1,21 @@
+import { describe, it, expect } from "vitest";
+import { isAutomaticStorageCleanupEnabled } from "../retention.js";
+describe("isAutomaticStorageCleanupEnabled", () => {
+    it("is off when the variable is unset", () => {
+        expect(isAutomaticStorageCleanupEnabled({})).toBe(false);
+    });
+    it("is on for 1 and true", () => {
+        expect(isAutomaticStorageCleanupEnabled({ NODETOOL_STORAGE_AUTO_CLEANUP: "1" })).toBe(true);
+        expect(isAutomaticStorageCleanupEnabled({
+            NODETOOL_STORAGE_AUTO_CLEANUP: " TRUE "
+        })).toBe(true);
+    });
+    it("is off for 0, false, and anything else", () => {
+        for (const value of ["0", "false", "", "yes please"]) {
+            expect(isAutomaticStorageCleanupEnabled({
+                NODETOOL_STORAGE_AUTO_CLEANUP: value
+            })).toBe(false);
+        }
+    });
+});
+//# sourceMappingURL=retention.test.js.map

package/dist/__tests__/retention.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.test.js","sourceRoot":"","sources":["../../src/__tests__/retention.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAEnE,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,gCAAgC,CAAC,EAAE,6BAA6B,EAAE,GAAG,EAAE,CAAC,CACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CACJ,gCAAgC,CAAC;YAC/B,6BAA6B,EAAE,QAAQ;SACxC,CAAC,CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;YACrD,MAAM,CACJ,gCAAgC,CAAC;gBAC/B,6BAA6B,EAAE,KAAK;aACrC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/byte-limits.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Resolve a byte-size limit from an environment variable.
+ *
+ * Returns `fallback` when the variable is unset, blank, non-numeric, or not a
+ * positive finite number. This is deliberately strict: a bad value (e.g.
+ * `"unlimited"`, `"-1"`, `"0"`) falls back to the safe default rather than
+ * resolving to `NaN`/`0` and turning the cap off.
+ *
+ * @param key      Environment variable name (e.g. `NODETOOL_MAX_UPLOAD_BYTES`).
+ * @param fallback Default limit in bytes, used when the env var is invalid.
+ */
+export declare function getByteLimitEnv(key: string, fallback: number): number;
+//# sourceMappingURL=byte-limits.d.ts.map

package/dist/byte-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byte-limits.d.ts","sourceRoot":"","sources":["../src/byte-limits.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMrE"}

package/dist/byte-limits.js

@@ -0,0 +1,28 @@
+/**
+ * Byte-size limit helpers.
+ *
+ * Centralizes parsing of configurable size caps (upload size, message size,
+ * IPC frame size) so a malformed override can never silently disable a guard.
+ */
+import { getEnv } from "./environment.js";
+/**
+ * Resolve a byte-size limit from an environment variable.
+ *
+ * Returns `fallback` when the variable is unset, blank, non-numeric, or not a
+ * positive finite number. This is deliberately strict: a bad value (e.g.
+ * `"unlimited"`, `"-1"`, `"0"`) falls back to the safe default rather than
+ * resolving to `NaN`/`0` and turning the cap off.
+ *
+ * @param key      Environment variable name (e.g. `NODETOOL_MAX_UPLOAD_BYTES`).
+ * @param fallback Default limit in bytes, used when the env var is invalid.
+ */
+export function getByteLimitEnv(key, fallback) {
+    const raw = getEnv(key);
+    if (raw === undefined || raw.trim() === "")
+        return fallback;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return fallback;
+    return Math.floor(parsed);
+}
+//# sourceMappingURL=byte-limits.js.map

package/dist/byte-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"byte-limits.js","sourceRoot":"","sources":["../src/byte-limits.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/credit-policy.d.ts

@@ -0,0 +1,25 @@
+/** Names the managed models credits may be spent on. */
+export declare const CREDIT_MODELS_ENV = "NODETOOL_CREDIT_MODELS";
+/** One-time welcome grant, in credits, for a user seen for the first time. */
+export declare const SIGNUP_CREDITS_ENV = "NODETOOL_SIGNUP_CREDITS";
+/** Credits a new user is granted when no override is configured. */
+export declare const DEFAULT_SIGNUP_CREDITS = 500;
+type Env = Record<string, string | undefined>;
+/**
+ * The configured allowlist of managed model ids, or `null` when the operator
+ * set none — `null` is "the whole catalog", not "nothing".
+ *
+ * Entries are separated by commas, whitespace, or newlines, so the variable
+ * reads the same in a `.env` file, a `fly secrets` line, and a Compose file.
+ */
+export declare function creditModelAllowlist(env?: Env): ReadonlySet<string> | null;
+/** Whether `modelId` may be served by the managed provider on this server. */
+export declare function isCreditModelAllowed(modelId: string, env?: Env): boolean;
+/**
+ * Credits granted once, the first time a user is seen. `0` (or any negative
+ * or unparseable value) means no welcome grant — the monthly plan grant is
+ * then all a new user gets.
+ */
+export declare function signupGrantCredits(env?: Env): number;
+export {};
+//# sourceMappingURL=credit-policy.d.ts.map

package/dist/credit-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-policy.d.ts","sourceRoot":"","sources":["../src/credit-policy.ts"],"names":[],"mappings":"AAqBA,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAC1D,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAE5D,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,GAAsB,GAC1B,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAQ5B;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,GAAsB,GAC1B,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,GAAsB,GAAG,MAAM,CAMtE"}

package/dist/credit-policy.js

@@ -0,0 +1,63 @@
+/**
+ * Which managed models credits may be spent on, and what a new user starts
+ * with — the two knobs a production operator turns.
+ *
+ * NodeTool's `nodetool` provider runs curated delegates on platform-owned
+ * keys, so every call through it spends the operator's money. The operator
+ * therefore decides which of the catalog's entries are open for business:
+ * `NODETOOL_CREDIT_MODELS` names them, and anything else is refused before a
+ * key is used. Unset means the whole catalog — the right default for a
+ * staging or dev server that holds platform keys.
+ *
+ * None of this reaches a local install: `nodetool` is a cloud-only provider
+ * (`CLOUD_ONLY_PROVIDER_IDS`), unregistered off the cloud profile, so a
+ * desktop or self-hosted server has no managed provider to whitelist.
+ *
+ * Parsing lives here rather than next to the catalog because the catalog
+ * (`@nodetool-ai/protocol`) is browser-safe pure data with no environment to
+ * read. Callers resolve names against the catalog themselves.
+ */
+import { safeProcessEnv } from "./node-import.js";
+/** Names the managed models credits may be spent on. */
+export const CREDIT_MODELS_ENV = "NODETOOL_CREDIT_MODELS";
+/** One-time welcome grant, in credits, for a user seen for the first time. */
+export const SIGNUP_CREDITS_ENV = "NODETOOL_SIGNUP_CREDITS";
+/** Credits a new user is granted when no override is configured. */
+export const DEFAULT_SIGNUP_CREDITS = 500;
+/**
+ * The configured allowlist of managed model ids, or `null` when the operator
+ * set none — `null` is "the whole catalog", not "nothing".
+ *
+ * Entries are separated by commas, whitespace, or newlines, so the variable
+ * reads the same in a `.env` file, a `fly secrets` line, and a Compose file.
+ */
+export function creditModelAllowlist(env = safeProcessEnv()) {
+    const raw = env[CREDIT_MODELS_ENV]?.trim();
+    if (!raw)
+        return null;
+    const ids = raw
+        .split(/[\s,]+/)
+        .map((id) => id.trim())
+        .filter((id) => id.length > 0);
+    return ids.length > 0 ? new Set(ids) : null;
+}
+/** Whether `modelId` may be served by the managed provider on this server. */
+export function isCreditModelAllowed(modelId, env = safeProcessEnv()) {
+    const allowed = creditModelAllowlist(env);
+    return allowed === null || allowed.has(modelId);
+}
+/**
+ * Credits granted once, the first time a user is seen. `0` (or any negative
+ * or unparseable value) means no welcome grant — the monthly plan grant is
+ * then all a new user gets.
+ */
+export function signupGrantCredits(env = safeProcessEnv()) {
+    const raw = env[SIGNUP_CREDITS_ENV]?.trim();
+    if (raw === undefined || raw === "")
+        return DEFAULT_SIGNUP_CREDITS;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return 0;
+    return Math.floor(parsed);
+}
+//# sourceMappingURL=credit-policy.js.map

package/dist/credit-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-policy.js","sourceRoot":"","sources":["../src/credit-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,wDAAwD;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAC1D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAE5D,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAI1C;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAG,GAAQ,cAAc,EAAE;IAE3B,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG;SACZ,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,GAAG,GAAQ,cAAc,EAAE;IAE3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAQ,cAAc,EAAE;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,sBAAsB,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/deployment.d.ts

@@ -0,0 +1,8 @@
+/**
+ * True when the server enforces authentication — a remote identity provider
+ * (`SUPABASE_URL` + `SUPABASE_KEY`) is configured, so every request carries a
+ * user token and the host is shared. False for a local install, where loopback
+ * is trusted and the machine belongs to the person using it.
+ */
+export declare function isAuthEnforced(env?: Record<string, string | undefined>): boolean;
+//# sourceMappingURL=deployment.d.ts.map

package/dist/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAoB,GACzD,OAAO,CAET"}

package/dist/deployment.js

@@ -0,0 +1,19 @@
+/**
+ * How this server is deployed — one answer, read from the environment.
+ *
+ * `NODE_ENV` does not answer it: the desktop backend (`electron/src/server.ts`)
+ * and the Docker image both set `NODE_ENV=production` while serving one user on
+ * their own machine. What separates a shared deployment from a local install is
+ * whether a remote identity provider is configured, so that is what this asks.
+ */
+import { safeProcessEnv } from "./node-import.js";
+/**
+ * True when the server enforces authentication — a remote identity provider
+ * (`SUPABASE_URL` + `SUPABASE_KEY`) is configured, so every request carries a
+ * user token and the host is shared. False for a local install, where loopback
+ * is trusted and the machine belongs to the person using it.
+ */
+export function isAuthEnforced(env = safeProcessEnv()) {
+    return Boolean(env["SUPABASE_URL"]?.trim() && env["SUPABASE_KEY"]?.trim());
+}
+//# sourceMappingURL=deployment.js.map

package/dist/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAG,GAAuC,cAAc,EAAE;IAE1D,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC"}

package/dist/env-file.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Minimal `.env` file parser — a drop-in for the small subset of `dotenv`
+ * we relied on. Node 22's `process.loadEnvFile()` can't override existing
+ * `process.env` values, so we parse by hand.
+ *
+ * Supported syntax (matching dotenv where it matters in practice):
+ * - `KEY=VALUE` pairs, one per line.
+ * - Blank lines and `#` comment lines are skipped.
+ * - An optional `export ` prefix on the key is stripped.
+ * - Single- or double-quoted values; double-quoted values expand `\n`,
+ *   `\r`, and `\t` escapes. Single-quoted values are taken literally.
+ * - Unquoted values are trimmed, may contain `=`, and end at `#` comments.
+ *   Hashes inside quoted values are preserved.
+ *
+ * Not supported (and not needed by callers): `dotenv-expand`-style
+ * `${VAR}` interpolation.
+ */
+/** Environment variable names to their values, as a `.env` file spells them. */
+export type EnvPairs = Record<string, string>;
+/** Parse the text of a `.env` file into key/value pairs. */
+export declare function parseEnvFile(content: string): EnvPairs;
+type FsApi = {
+    existsSync: (path: string) => boolean;
+    readFileSync: (path: string, encoding: "utf8") => string;
+};
+/**
+ * Read a `.env` file and apply its pairs to `process.env`, overriding any
+ * existing values. Missing files are tolerated silently. Returns the parsed
+ * pairs (empty when the file is absent).
+ */
+export declare function loadEnvFile(fs: FsApi, file: string): EnvPairs;
+export {};
+//# sourceMappingURL=env-file.d.ts.map

package/dist/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../src/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,gFAAgF;AAChF,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAoBtD;AAoCD,KAAK,KAAK,GAAG;IACX,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CAC1D,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAO7D"}

package/dist/env-file.js

@@ -0,0 +1,83 @@
+/**
+ * Minimal `.env` file parser — a drop-in for the small subset of `dotenv`
+ * we relied on. Node 22's `process.loadEnvFile()` can't override existing
+ * `process.env` values, so we parse by hand.
+ *
+ * Supported syntax (matching dotenv where it matters in practice):
+ * - `KEY=VALUE` pairs, one per line.
+ * - Blank lines and `#` comment lines are skipped.
+ * - An optional `export ` prefix on the key is stripped.
+ * - Single- or double-quoted values; double-quoted values expand `\n`,
+ *   `\r`, and `\t` escapes. Single-quoted values are taken literally.
+ * - Unquoted values are trimmed, may contain `=`, and end at `#` comments.
+ *   Hashes inside quoted values are preserved.
+ *
+ * Not supported (and not needed by callers): `dotenv-expand`-style
+ * `${VAR}` interpolation.
+ */
+/** Parse the text of a `.env` file into key/value pairs. */
+export function parseEnvFile(content) {
+    const pairs = [];
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line === "" || line.startsWith("#"))
+            continue;
+        const withoutExport = line.startsWith("export ")
+            ? line.slice("export ".length)
+            : line;
+        const eq = withoutExport.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = withoutExport.slice(0, eq).trim();
+        if (key === "")
+            continue;
+        const rawValue = stripInlineComment(withoutExport.slice(eq + 1));
+        pairs.push([key, unquoteValue(rawValue)]);
+    }
+    return Object.fromEntries(pairs);
+}
+function stripInlineComment(raw) {
+    const value = raw.trim();
+    const quote = value[0];
+    if (quote === "'" || quote === '"') {
+        for (let index = 1; index < value.length; index += 1) {
+            if (value[index] === quote && value[index - 1] !== "\\") {
+                const comment = value.indexOf("#", index + 1);
+                return comment === -1 ? value : value.slice(0, comment).trim();
+            }
+        }
+    }
+    const comment = value.indexOf("#");
+    return comment === -1 ? value : value.slice(0, comment).trim();
+}
+function unquoteValue(raw) {
+    if (raw.length >= 2) {
+        const quote = raw[0];
+        if ((quote === '"' || quote === "'") && raw[raw.length - 1] === quote) {
+            const inner = raw.slice(1, -1);
+            if (quote === '"') {
+                return inner
+                    .replace(/\\n/g, "\n")
+                    .replace(/\\r/g, "\r")
+                    .replace(/\\t/g, "\t");
+            }
+            return inner;
+        }
+    }
+    return raw;
+}
+/**
+ * Read a `.env` file and apply its pairs to `process.env`, overriding any
+ * existing values. Missing files are tolerated silently. Returns the parsed
+ * pairs (empty when the file is absent).
+ */
+export function loadEnvFile(fs, file) {
+    if (!fs.existsSync(file))
+        return {};
+    const parsed = parseEnvFile(fs.readFileSync(file, "utf8"));
+    for (const [key, value] of Object.entries(parsed)) {
+        process.env[key] = value;
+    }
+    return parsed;
+}
+//# sourceMappingURL=env-file.js.map