@nxuss/lemma 1.42.0 → 1.44.0

package/dist/cjs/cloud/console/consoleRouter.js

@@ -0,0 +1,263 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginLink = exports.AttemptLimiter = exports.SESSION_DAYS = exports.LOGIN_LINK_MINUTES = void 0;
+exports.publicBase = publicBase;
+exports.issueLoginLink = issueLoginLink;
+exports.consoleRouter = consoleRouter;
+/**
+ * Lemma Cloud console — the web app's server side, mounted at /console.
+ *
+ *   GET  /console/                      the static app (console/index.html, app.js, styles.css)
+ *   POST /console/api/login   {email}   asks for a sign-in link: ALWAYS 202, so it cannot tell who is a member
+ *   POST /console/api/verify  {token}   spends the link, starts a session (HttpOnly cookie)
+ *   POST /console/api/logout
+ *   GET  /console/api/me                who you are, your tenant's plan, limits, use and (owner/admin) billing
+ *   GET  /console/api/usage             owner/admin: requests and tokens by operation and by dev, this month
+ *   GET  /console/api/team              owner/admin: members, keys (never a secret), seats
+ *   POST /console/api/billing/portal    owner/admin: Stripe billing-portal link
+ *
+ * It is a separate identity from the API keys on purpose: a key belongs to a machine and a tenant, a
+ * session belongs to a person. Sessions live in the database, so removing a member ends their access at once.
+ *
+ * Defences, each cheap: the link travels in the URL FRAGMENT (never reaches a server log or a Referer) and is
+ * posted by the page; the cookie is HttpOnly + Secure + SameSite=Lax and scoped to /console; every POST needs
+ * a custom header and a same-origin Origin (so a cross-site form cannot act); the CSP allows only our own files.
+ */
+const express_1 = __importDefault(require("express"));
+const path_1 = __importDefault(require("path"));
+const zod_1 = require("zod");
+const errors_1 = require("../../contracts/errors");
+const tenant_1 = require("../v2/routes/tenant");
+const ConsoleStore_1 = require("./ConsoleStore");
+exports.LOGIN_LINK_MINUTES = 15;
+exports.SESSION_DAYS = 7;
+const COOKIE = 'lemma_console';
+const CSRF_HEADER = 'x-lemma-console';
+/** Counts attempts per key inside a sliding window. Per instance: enough to blunt abuse, not a security boundary. */
+class AttemptLimiter {
+    constructor(max, windowMs) {
+        this.max = max;
+        this.windowMs = windowMs;
+        this.hits = new Map();
+    }
+    allow(key, now) {
+        const recent = (this.hits.get(key) ?? []).filter((t) => now - t < this.windowMs);
+        if (recent.length >= this.max) {
+            this.hits.set(key, recent);
+            return false;
+        }
+        recent.push(now);
+        this.hits.set(key, recent);
+        if (this.hits.size > 5000)
+            for (const [k, v] of this.hits)
+                if (!v.some((t) => now - t < this.windowMs))
+                    this.hits.delete(k);
+        return true;
+    }
+}
+exports.AttemptLimiter = AttemptLimiter;
+/** The origin the app is served from: configured, else what the proxy in front of us says. */
+function publicBase(req, configured) {
+    if (configured)
+        return configured.replace(/\/+$/, '');
+    const proto = String(req.headers['x-forwarded-proto'] ?? req.protocol).split(',')[0].trim();
+    return `${proto}://${req.get('host')}`;
+}
+const loginLink = (base, token) => `${base}/console/#token=${token}`;
+exports.loginLink = loginLink;
+/** Issues a one-time link for an ACTIVE member; null when the email is not one. Shared with the operator route. */
+async function issueLoginLink(store, email, now) {
+    const member = await store.findMemberByEmail(email);
+    if (!member)
+        return null;
+    const token = (0, ConsoleStore_1.newToken)();
+    const expiresAt = now + exports.LOGIN_LINK_MINUTES * 60000;
+    await store.createLoginToken({ tokenHash: (0, ConsoleStore_1.hashToken)(token), tenantId: member.tenantId, email: member.email, expiresAt });
+    return { token, email: member.email, expiresAt };
+}
+const LoginSchema = zod_1.z.object({ email: zod_1.z.string().trim().email().max(254) });
+const VerifySchema = zod_1.z.object({ token: zod_1.z.string().min(20).max(200) });
+const fail = (status, code, message) => new errors_1.LemmaApiError({ code, status, message });
+function readCookie(req, name) {
+    for (const part of (req.headers.cookie ?? '').split(';')) {
+        const i = part.indexOf('=');
+        if (i > 0 && part.slice(0, i).trim() === name)
+            return part.slice(i + 1).trim();
+    }
+    return null;
+}
+function consoleRouter(deps) {
+    const clock = deps.now ?? Date.now;
+    const loginByIp = new AttemptLimiter(20, 60 * 60000);
+    const loginByEmail = new AttemptLimiter(5, exports.LOGIN_LINK_MINUTES * 60000);
+    const verifyByIp = new AttemptLimiter(30, 15 * 60000);
+    const r = express_1.default.Router();
+    r.use((_req, res, next) => {
+        res.set({
+            'Content-Security-Policy': "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'",
+            'X-Content-Type-Options': 'nosniff',
+            'X-Frame-Options': 'DENY',
+            'Referrer-Policy': 'no-referrer',
+        });
+        next();
+    });
+    const api = express_1.default.Router();
+    api.use((_req, res, next) => {
+        res.set('Cache-Control', 'no-store');
+        next();
+    });
+    // Every state-changing call must come from our own page: a header a cross-site form cannot set, and an Origin that matches.
+    api.use((req, _res, next) => {
+        if (req.method === 'GET')
+            return next();
+        if (req.headers[CSRF_HEADER] !== '1')
+            return next(fail(403, 'forbidden', 'missing console header'));
+        const origin = req.headers.origin;
+        if (origin && origin !== publicBase(req, deps.publicBaseUrl))
+            return next(fail(403, 'forbidden', 'cross-origin request refused'));
+        next();
+    });
+    const wrap = (fn) => (req, res, next) => {
+        fn(req, res).catch(next);
+    };
+    const setCookie = (res, value, maxAgeSeconds) => res.append('Set-Cookie', `${COOKIE}=${value}; HttpOnly; SameSite=Lax; Path=/console; Max-Age=${maxAgeSeconds}${deps.insecureCookies ? '' : '; Secure'}`);
+    const requireSession = async (req, _res, next) => {
+        try {
+            const token = readCookie(req, COOKIE);
+            const session = token ? await deps.consoleStore.findSession((0, ConsoleStore_1.hashToken)(token), clock()) : null;
+            if (!session)
+                return next(fail(401, 'unauthenticated', 'sign in required'));
+            req.session = session;
+            next();
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+    const managerOnly = (req, _res, next) => {
+        const { role } = req.session;
+        if (role === 'owner' || role === 'admin')
+            return next();
+        next(fail(403, 'forbidden', 'only an owner or admin can see this'));
+    };
+    api.post('/login', wrap(async (req, res) => {
+        const parsed = LoginSchema.safeParse(req.body);
+        if (!parsed.success)
+            throw fail(400, 'invalid_request', 'a valid email is required');
+        const now = clock();
+        const email = (0, ConsoleStore_1.normalizeEmail)(parsed.data.email);
+        if (!loginByIp.allow(req.ip ?? 'unknown', now) || !loginByEmail.allow(email, now)) {
+            res.status(429).set('Retry-After', '900').json({ error: { code: 'rate_limited', status: 429, message: 'too many sign-in requests, try again in a few minutes' } });
+            return;
+        }
+        const issued = await issueLoginLink(deps.consoleStore, email, now);
+        if (issued && deps.mailer) {
+            const link = (0, exports.loginLink)(publicBase(req, deps.publicBaseUrl), issued.token);
+            // Not awaited: an existing and an unknown email take the same time, and a mail outage tells no one anything.
+            deps.mailer.sendLoginLink(issued.email, link, exports.LOGIN_LINK_MINUTES).catch((err) => {
+                // eslint-disable-next-line no-console
+                console.error('[lemma:console] sign-in email failed:', err.message);
+            });
+        }
+        res.status(202).json({ ok: true });
+    }));
+    api.post('/verify', wrap(async (req, res) => {
+        const parsed = VerifySchema.safeParse(req.body);
+        if (!parsed.success || !verifyByIp.allow(req.ip ?? 'unknown', clock()))
+            throw fail(401, 'unauthenticated', 'this sign-in link is not valid');
+        const now = clock();
+        const spent = await deps.consoleStore.consumeLoginToken((0, ConsoleStore_1.hashToken)(parsed.data.token), now);
+        const member = spent ? await deps.consoleStore.findMemberByEmail(spent.email) : null;
+        if (!spent || !member || member.tenantId !== spent.tenantId)
+            throw fail(401, 'unauthenticated', 'this sign-in link is not valid or has expired');
+        const session = (0, ConsoleStore_1.newToken)();
+        await deps.consoleStore.createSession({ tokenHash: (0, ConsoleStore_1.hashToken)(session), tenantId: member.tenantId, email: member.email, expiresAt: now + exports.SESSION_DAYS * 86400000 });
+        setCookie(res, session, exports.SESSION_DAYS * 86400);
+        res.json({ ok: true });
+    }));
+    api.post('/logout', wrap(async (req, res) => {
+        const token = readCookie(req, COOKIE);
+        if (token)
+            await deps.consoleStore.deleteSession((0, ConsoleStore_1.hashToken)(token));
+        setCookie(res, '', 0);
+        res.json({ ok: true });
+    }));
+    api.get('/me', requireSession, wrap(async (req, res) => {
+        const { tenantId, email, role } = req.session;
+        const tenant = await deps.identityStore.getTenant(tenantId);
+        if (!tenant)
+            throw fail(404, 'not_found', 'tenant not found');
+        const overview = await (0, tenant_1.buildTenantOverview)(deps, tenant);
+        const manager = role === 'owner' || role === 'admin';
+        // A plain member sees the plan and the limits; money (status, renewal, late payment) is for owner and admin.
+        res.json({ email, role, canManage: manager, tenant: manager ? overview : { ...overview, billing: { status: null, currentPeriodEnd: null, pastDueSince: null } } });
+    }));
+    api.get('/usage', requireSession, managerOnly, wrap(async (req, res) => {
+        const { tenantId } = req.session;
+        if (!deps.usageLedger?.computeKeyActivity)
+            throw new errors_1.LemmaApiError({ code: 'not_implemented', status: 501, message: 'usage ledger unavailable' });
+        const monthStart = new Date(clock());
+        const since = Date.UTC(monthStart.getUTCFullYear(), monthStart.getUTCMonth(), 1);
+        const [usage, activity, keys] = await Promise.all([
+            deps.usageLedger.computeUsage({ tenantId, since }),
+            deps.usageLedger.computeKeyActivity({ tenantId, since }),
+            deps.identityStore.listKeys(tenantId),
+        ]);
+        const names = new Map(keys.map((k) => [k.id, k]));
+        res.json({
+            since,
+            metrics: usage.metrics,
+            keys: activity.map((a) => ({
+                keyId: a.keyId,
+                name: names.get(a.keyId)?.name ?? null,
+                active: names.get(a.keyId)?.active ?? false,
+                requests: a.requests,
+                tokens: a.tokens,
+                byOperation: a.byOperation,
+            })),
+        });
+    }));
+    api.get('/team', requireSession, managerOnly, wrap(async (req, res) => {
+        const { tenantId } = req.session;
+        const tenant = await deps.identityStore.getTenant(tenantId);
+        if (!tenant)
+            throw fail(404, 'not_found', 'tenant not found');
+        const now = clock();
+        const [members, keys] = await Promise.all([deps.consoleStore.listMembers(tenantId), deps.identityStore.listKeys(tenantId)]);
+        const used = keys.filter((k) => k.active && (k.expiresAt === null || k.expiresAt > now)).length;
+        res.json({
+            seats: { used, limit: (deps.policy ? deps.policy.limitsFor(tenant.plan) : { seats: 0 }).seats },
+            members: members.map((m) => ({ email: m.email, role: m.role })),
+            // A key is shown by its label and state only: the hash and the secret never leave the database.
+            keys: keys.map((k) => ({ id: k.id, name: k.name, active: k.active, createdAt: k.createdAt, revokedAt: k.revokedAt })),
+        });
+    }));
+    api.post('/billing/portal', requireSession, managerOnly, wrap(async (req, res) => {
+        const { tenantId } = req.session;
+        const tenant = await deps.identityStore.getTenant(tenantId);
+        if (!tenant)
+            throw fail(404, 'not_found', 'tenant not found');
+        if (!deps.stripeApi || !tenant.billing.customerId) {
+            throw new errors_1.LemmaApiError({ code: 'invalid_request', status: 409, message: 'there is no subscription to manage yet' });
+        }
+        res.json({ url: (await deps.stripeApi.createPortal(tenant.billing.customerId)).url });
+    }));
+    r.use('/api', api);
+    // The static app. Unknown paths under /console fall back to the page itself (it routes on the fragment).
+    const dir = path_1.default.resolve(deps.consoleDir ?? path_1.default.join(process.cwd(), 'console'));
+    r.use(express_1.default.static(dir, { index: 'index.html', maxAge: 0, fallthrough: true }));
+    r.get('/', (_req, res) => res.sendFile(path_1.default.join(dir, 'index.html')));
+    // JSON errors for the API; the app never sees a stack or an HTML error page.
+    r.use('/api', (err, _req, res, next) => {
+        if (err instanceof errors_1.LemmaApiError) {
+            res.status(err.status).json(err.toJSON());
+            return;
+        }
+        next(err);
+    });
+    return r;
+}
+//# sourceMappingURL=consoleRouter.js.map

package/dist/cjs/cloud/console/consoleRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleRouter.js","sourceRoot":"","sources":["../../../../src/cloud/console/consoleRouter.ts"],"names":[],"mappings":";;;;;;AAgFA,gCAIC;AAKD,wCAWC;AAkBD,sCA+MC;AArUD;;;;;;;;;;;;;;;;;;GAkBG;AACH,sDAAoH;AACpH,gDAAwB;AACxB,6BAAwB;AACxB,mDAAuD;AAQvD,gDAA0D;AAC1D,iDAA0G;AAG7F,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACxB,QAAA,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,MAAM,GAAG,eAAe,CAAC;AAC/B,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAsBtC,qHAAqH;AACrH,MAAa,cAAc;IAEzB,YACmB,GAAW,EACX,QAAgB;QADhB,QAAG,GAAH,GAAG,CAAQ;QACX,aAAQ,GAAR,QAAQ,CAAQ;QAHlB,SAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IAIjD,CAAC;IACJ,KAAK,CAAC,GAAW,EAAE,GAAW;QAC5B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5H,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAjBD,wCAiBC;AAED,8FAA8F;AAC9F,SAAgB,UAAU,CAAC,GAAY,EAAE,UAAmB;IAC1D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AACzC,CAAC;AAEM,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAAC,GAAG,IAAI,mBAAmB,KAAK,EAAE,CAAC;AAAvF,QAAA,SAAS,aAA8E;AAEpG,mHAAmH;AAC5G,KAAK,UAAU,cAAc,CAClC,KAAmB,EACnB,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,IAAA,uBAAQ,GAAE,CAAC;IACzB,MAAM,SAAS,GAAG,GAAG,GAAG,0BAAkB,GAAG,KAAM,CAAC;IACpD,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAA,wBAAS,EAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC5E,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEtE,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAuE,EAAE,OAAe,EAAE,EAAE,CACxH,IAAI,sBAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAE/C,SAAS,UAAU,CAAC,GAAY,EAAE,IAAY;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,SAAgB,aAAa,CAAC,IAAiB;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,KAAM,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,cAAc,CAAC,CAAC,EAAE,0BAAkB,GAAG,KAAM,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,KAAM,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAE3B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,GAAG,CAAC,GAAG,CAAC;YACN,yBAAyB,EAAE,gKAAgK;YAC3L,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,MAAM;YACzB,iBAAiB,EAAE,aAAa;SACjC,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,4HAA4H;IAC5H,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACpG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,IAAI,MAAM,KAAK,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GACR,CAAC,EAAkD,EAAkB,EAAE,CACvE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,CAAC,GAAa,EAAE,KAAa,EAAE,aAAqB,EAAE,EAAE,CACxE,GAAG,CAAC,MAAM,CACR,YAAY,EACZ,GAAG,MAAM,IAAI,KAAK,oDAAoD,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAC/H,CAAC;IAEJ,MAAM,cAAc,GAAmB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAA,wBAAS,EAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9F,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC3E,GAAc,CAAC,OAAO,GAAG,OAAO,CAAC;YAClC,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,EAAE,IAAI,EAAE,GAAI,GAAc,CAAC,OAAO,CAAC;QACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,qCAAqC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,QAAQ,EACR,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,uDAAuD,EAAE,EAAE,CAAC,CAAC;YACnK,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1E,6GAA6G;YAC7G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,0BAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;gBACrF,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,SAAS,EACT,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC7I,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAA,wBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;QACjJ,MAAM,OAAO,GAAG,IAAA,uBAAQ,GAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAA,wBAAS,EAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,oBAAY,GAAG,QAAU,EAAE,CAAC,CAAC;QACrK,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,oBAAY,GAAG,KAAM,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,SAAS,EACT,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAA,wBAAS,EAAC,KAAK,CAAC,CAAC,CAAC;QACnE,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,KAAK,EACL,cAAc,EACd,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAI,GAAc,CAAC,OAAO,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAA2B,MAAM,IAAA,4BAAmB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC;QACrD,6GAA6G;QAC7G,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACrK,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,QAAQ,EACR,cAAc,EACd,WAAW,EACX,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,EAAE,QAAQ,EAAE,GAAI,GAAc,CAAC,OAAO,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB;YAAE,MAAM,IAAI,sBAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAClJ,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACxD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI;gBACtC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,KAAK;gBAC3C,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,OAAO,EACP,cAAc,EACd,WAAW,EACX,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,EAAE,QAAQ,EAAE,GAAI,GAAc,CAAC,OAAO,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;YAC/F,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,gGAAgG;YAChG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;SACtH,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,iBAAiB,EACjB,cAAc,EACd,WAAW,EACX,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,EAAE,QAAQ,EAAE,GAAI,GAAc,CAAC,OAAO,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,IAAI,sBAAa,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CACH,CAAC;IAEF,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEnB,yGAAyG;IACzG,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAEtE,6EAA6E;IAC7E,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/E,IAAI,GAAG,YAAY,sBAAa,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cjs/cloud/console/mailer.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Lemma Cloud console — the sign-in email. Optional: without RESEND_API_KEY nothing is sent, and the
+ * operator hands the link over by hand (POST /v2/admin/tenants/:id/members/:email/login-link).
+ *
+ * The link is the only secret in the message and it is single use and short lived. It is never logged.
+ */
+export interface LoginMailer {
+    sendLoginLink(to: string, link: string, minutes: number): Promise<void>;
+}
+export interface ResendConfig {
+    apiKey: string;
+    from: string;
+    fetchImpl?: typeof fetch;
+}
+export declare function resendMailerFromEnv(env?: NodeJS.ProcessEnv): LoginMailer | undefined;
+export declare class ResendMailer implements LoginMailer {
+    private readonly config;
+    private readonly fetchImpl;
+    constructor(config: ResendConfig);
+    sendLoginLink(to: string, link: string, minutes: number): Promise<void>;
+}
+//# sourceMappingURL=mailer.d.ts.map

package/dist/cjs/cloud/console/mailer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.d.ts","sourceRoot":"","sources":["../../../../src/cloud/console/mailer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,WAAW,GAAG,SAAS,CAIjG;AAED,qBAAa,YAAa,YAAW,WAAW;IAElC,OAAO,CAAC,QAAQ,CAAC,MAAM;IADnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBACZ,MAAM,EAAE,YAAY;IAI3C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiB9E"}

package/dist/cjs/cloud/console/mailer.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResendMailer = void 0;
+exports.resendMailerFromEnv = resendMailerFromEnv;
+function resendMailerFromEnv(env = process.env) {
+    const apiKey = env.RESEND_API_KEY;
+    if (!apiKey)
+        return undefined;
+    return new ResendMailer({ apiKey, from: env.CONSOLE_MAIL_FROM || 'Lemma <hello@nxus.studio>' });
+}
+class ResendMailer {
+    constructor(config) {
+        this.config = config;
+        this.fetchImpl = config.fetchImpl ?? fetch;
+    }
+    async sendLoginLink(to, link, minutes) {
+        const res = await this.fetchImpl('https://api.resend.com/emails', {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${this.config.apiKey}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                from: this.config.from,
+                to: [to],
+                subject: 'Your Lemma Cloud sign-in link / Tu enlace de acceso a Lemma Cloud',
+                text: `Sign in to Lemma Cloud (valid ${minutes} minutes, works once):\n${link}\n\n` +
+                    `Entra a Lemma Cloud (válido ${minutes} minutos, funciona una vez):\n${link}\n\n` +
+                    `If you did not ask for this, ignore this email. / Si no lo pediste, ignora este correo.`,
+            }),
+        });
+        // The status only: the response body and the request (which holds the link) stay out of any log.
+        if (!res.ok)
+            throw new Error(`mail provider answered ${res.status}`);
+    }
+}
+exports.ResendMailer = ResendMailer;
+//# sourceMappingURL=mailer.js.map

package/dist/cjs/cloud/console/mailer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.js","sourceRoot":"","sources":["../../../../src/cloud/console/mailer.ts"],"names":[],"mappings":";;;AAgBA,kDAIC;AAJD,SAAgB,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,iBAAiB,IAAI,2BAA2B,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,MAAa,YAAY;IAEvB,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;QAC/C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,+BAA+B,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC9F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,EAAE,EAAE,CAAC,EAAE,CAAC;gBACR,OAAO,EAAE,mEAAmE;gBAC5E,IAAI,EACF,iCAAiC,OAAO,2BAA2B,IAAI,MAAM;oBAC7E,+BAA+B,OAAO,iCAAiC,IAAI,MAAM;oBACjF,yFAAyF;aAC5F,CAAC;SACH,CAAC,CAAC;QACH,iGAAiG;QACjG,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;CACF;AAvBD,oCAuBC"}

package/dist/cjs/cloud/identity/PlanPolicy.d.ts

@@ -9,7 +9,16 @@
  * This module owns the plan table. The DB migration only stores tenancy; keeping
  * a second copy of the limits in SQL would guarantee drift.
  */
-export type PlanId = 'free' | 'pro' | 'scale';
+/**
+ * Cloud plans. `vinel` is the team tier (every seat also unlocks the local Pro tools) and `regnum`
+ * is the large-organisation tier. They used to be `pro` and `scale`; `pro` now means only the local
+ * Pro license, so the two are never confused. `internal` is not sold: it is for the maintainers' own
+ * accounts (huge but finite ceilings, because Infinity is banned), assigned only through the admin API,
+ * and the Stripe webhook never touches a tenant on it. Add a plan here and the type, the admin API validation
+ * and the SQL CHECK (a new migration) follow from this list.
+ */
+export declare const PLAN_IDS: readonly ["free", "vinel", "regnum", "internal"];
+export type PlanId = (typeof PLAN_IDS)[number];
 export interface PlanLimits {
     /** Active AND verified memories the tenant may keep. */
     activeMemories: number;
@@ -28,6 +37,12 @@ export declare const RATE_LIMIT_WINDOW_MS: number;
 export declare const PLAN_UPGRADE_URL: Readonly<Record<PlanId, string>>;
 /** Single source of truth for plan ceilings. Every value finite and > 0. */
 export declare const PLAN_LIMITS: Readonly<Record<PlanId, PlanLimits>>;
+/**
+ * Whether a seat on the plan also unlocks the local Pro tools. A Record over PlanId, so adding a plan
+ * to PLAN_IDS without deciding this does not compile. The client never decides it: it asks the server
+ * (GET /v2/entitlement), so changing a plan here changes what every connected dev gets.
+ */
+export declare const PLAN_INCLUDES_PRO: Readonly<Record<PlanId, boolean>>;
 export declare const DEFAULT_PLAN: PlanId;
 /**
  * The `Infinity` elimination check, exported so tests can prove it (and the

package/dist/cjs/cloud/identity/PlanPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PlanPolicy.d.ts","sourceRoot":"","sources":["../../../../src/cloud/identity/PlanPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9C,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,oBAAoB,QAAsB,CAAC;AAExD,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI5D,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAyB3D,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,MAAe,CAAC;AAU3C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAY/E;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3F,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE;QACL,IAAI,EAAE,gBAAgB,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,SAAS,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,yFAAyF;QACzF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,GAAE,MAAM,GAAG,IAAW,GAAG,cAAc,CAcxG;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAExC,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAA6C;IAQ1F,2EAA2E;IAC3E,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAInC,wEAAwE;IACxE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,GAAG,UAAU;IAiB5E,kEAAkE;IAClE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU;IAgBzD,OAAO,CAAC,WAAW;CAcpB"}
+{"version":3,"file":"PlanPolicy.d.ts","sourceRoot":"","sources":["../../../../src/cloud/identity/PlanPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,kDAAmD,CAAC;AACzE,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,oBAAoB,QAAsB,CAAC;AAExD,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK5D,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAiC3D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK9D,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,MAAe,CAAC;AAU3C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAY/E;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3F,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE;QACL,IAAI,EAAE,gBAAgB,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,SAAS,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,yFAAyF;QACzF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,GAAE,MAAM,GAAG,IAAW,GAAG,cAAc,CAcxG;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAExC,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAA6C;IAQ1F,2EAA2E;IAC3E,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAInC,wEAAwE;IACxE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,GAAG,UAAU;IAiB5E,kEAAkE;IAClE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU;IAgBzD,OAAO,CAAC,WAAW;CAcpB"}

package/dist/cjs/cloud/identity/PlanPolicy.js

@@ -1,13 +1,34 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PlanPolicy = exports.DEFAULT_PLAN = exports.PLAN_LIMITS = exports.PLAN_UPGRADE_URL = exports.RATE_LIMIT_WINDOW_MS = void 0;
+exports.PlanPolicy = exports.DEFAULT_PLAN = exports.PLAN_INCLUDES_PRO = exports.PLAN_LIMITS = exports.PLAN_UPGRADE_URL = exports.RATE_LIMIT_WINDOW_MS = exports.PLAN_IDS = void 0;
 exports.validatePlanLimits = validatePlanLimits;
 exports.quotaErrorBody = quotaErrorBody;
+/**
+ * Lemma API v2 — PlanPolicy (Lane D)
+ *
+ * Replaces `src/cloud/types.ts` PLAN_LIMITS. Quota is measured by ACTIVE-VERIFIED
+ * memories and by SEAT, not only by request count, and `Infinity` is gone —
+ * every plan has an explicit, positive ceiling. Exceeding a cap yields a 429
+ * with an actionable body: limit, current use, reset time and upgrade link.
+ *
+ * This module owns the plan table. The DB migration only stores tenancy; keeping
+ * a second copy of the limits in SQL would guarantee drift.
+ */
+/**
+ * Cloud plans. `vinel` is the team tier (every seat also unlocks the local Pro tools) and `regnum`
+ * is the large-organisation tier. They used to be `pro` and `scale`; `pro` now means only the local
+ * Pro license, so the two are never confused. `internal` is not sold: it is for the maintainers' own
+ * accounts (huge but finite ceilings, because Infinity is banned), assigned only through the admin API,
+ * and the Stripe webhook never touches a tenant on it. Add a plan here and the type, the admin API validation
+ * and the SQL CHECK (a new migration) follow from this list.
+ */
+exports.PLAN_IDS = ['free', 'vinel', 'regnum', 'internal'];
 exports.RATE_LIMIT_WINDOW_MS = 24 * 60 * 60 * 1000;
 exports.PLAN_UPGRADE_URL = Object.freeze({
     free: 'https://lemma.dev/pricing',
-    pro: 'https://lemma.dev/pricing',
-    scale: 'https://lemma.dev/contact',
+    vinel: 'https://lemma.dev/pricing',
+    regnum: 'https://lemma.dev/contact',
+    internal: 'https://lemma.dev/contact',
 });
 /** Single source of truth for plan ceilings. Every value finite and > 0. */
 exports.PLAN_LIMITS = Object.freeze({
@@ -19,22 +40,41 @@ exports.PLAN_LIMITS = Object.freeze({
         rateLimitWindowMs: exports.RATE_LIMIT_WINDOW_MS,
         upgradeUrl: exports.PLAN_UPGRADE_URL.free,
     }),
-    pro: Object.freeze({
+    vinel: Object.freeze({
         activeMemories: 10000,
         seats: 10,
         dailyRequests: 5000,
         monthlyRequests: 60000,
         rateLimitWindowMs: exports.RATE_LIMIT_WINDOW_MS,
-        upgradeUrl: exports.PLAN_UPGRADE_URL.pro,
+        upgradeUrl: exports.PLAN_UPGRADE_URL.vinel,
     }),
-    scale: Object.freeze({
+    regnum: Object.freeze({
         activeMemories: 100000,
         seats: 50,
         dailyRequests: 20000,
         monthlyRequests: 250000,
         rateLimitWindowMs: exports.RATE_LIMIT_WINDOW_MS,
-        upgradeUrl: exports.PLAN_UPGRADE_URL.scale,
+        upgradeUrl: exports.PLAN_UPGRADE_URL.regnum,
     }),
+    internal: Object.freeze({
+        activeMemories: 10000000,
+        seats: 25,
+        dailyRequests: 1000000,
+        monthlyRequests: 30000000,
+        rateLimitWindowMs: exports.RATE_LIMIT_WINDOW_MS,
+        upgradeUrl: exports.PLAN_UPGRADE_URL.internal,
+    }),
+});
+/**
+ * Whether a seat on the plan also unlocks the local Pro tools. A Record over PlanId, so adding a plan
+ * to PLAN_IDS without deciding this does not compile. The client never decides it: it asks the server
+ * (GET /v2/entitlement), so changing a plan here changes what every connected dev gets.
+ */
+exports.PLAN_INCLUDES_PRO = Object.freeze({
+    free: false,
+    vinel: true,
+    regnum: true,
+    internal: true,
 });
 exports.DEFAULT_PLAN = 'free';
 const NUMERIC_LIMIT_KEYS = [

package/dist/cjs/cloud/identity/PlanPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"PlanPolicy.js","sourceRoot":"","sources":["../../../../src/cloud/identity/PlanPolicy.ts"],"names":[],"mappings":";;;AA8EA,gDAYC;AA+BD,wCAcC;AA3GY,QAAA,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,QAAA,gBAAgB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC9E,IAAI,EAAE,2BAA2B;IACjC,GAAG,EAAE,2BAA2B;IAChC,KAAK,EAAE,2BAA2B;CACnC,CAAC,CAAC;AAEH,4EAA4E;AAC/D,QAAA,WAAW,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,cAAc,EAAE,IAAK;QACrB,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,IAAK;QACpB,eAAe,EAAE,KAAM;QACvB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,IAAI;KAClC,CAAC;IACF,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;QACjB,cAAc,EAAE,KAAM;QACtB,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,IAAK;QACpB,eAAe,EAAE,KAAM;QACvB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,GAAG;KACjC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,MAAO;QACvB,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,KAAM;QACrB,eAAe,EAAE,MAAO;QACxB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,KAAK;KACnC,CAAC;CACH,CAAC,CAAC;AAEU,QAAA,YAAY,GAAW,MAAM,CAAC;AAE3C,MAAM,kBAAkB,GAAwD;IAC9E,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAkC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAW,CAAC;YAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA+BD,SAAgB,cAAc,CAAC,SAAyB,EAAE,WAA0B,IAAI;IACtF,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ;YACR,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAa,UAAU;IAGrB,YAAY,SAAqC,mBAAyC;QACxF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAY,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,gBAAgB,CAAC,MAAc,EAAE,sBAA8B;QAC7D,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,KAAK;YACd,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,sBAAsB;gBAC/B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU;gBAC7C,OAAO,EACL,GAAG,IAAI,gBAAgB,KAAK,6BAA6B;oBACzD,sBAAsB,sBAAsB,IAAI;oBAChD,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;aACpD;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,cAAc,CAAC,MAAc,EAAE,KAAa;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,KAAK;YACd,SAAS,EAAE;gBACT,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU;gBAC7C,OAAO,EACL,GAAG,IAAI,gBAAgB,KAAK,gCAAgC,KAAK,IAAI;oBACrE,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;aACpD;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,WAAW,CACjB,MAAc,EACd,IAAe,EACf,OAAe,EACf,aAAuF;QAEvF,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAY,CAAW,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF;AAjED,gCAiEC"}
+{"version":3,"file":"PlanPolicy.js","sourceRoot":"","sources":["../../../../src/cloud/identity/PlanPolicy.ts"],"names":[],"mappings":";;;AA4GA,gDAYC;AA+BD,wCAcC;AArKD;;;;;;;;;;GAUG;AACH;;;;;;;GAOG;AACU,QAAA,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAkB5D,QAAA,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,QAAA,gBAAgB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC9E,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,2BAA2B;IACnC,QAAQ,EAAE,2BAA2B;CACtC,CAAC,CAAC;AAEH,4EAA4E;AAC/D,QAAA,WAAW,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,cAAc,EAAE,IAAK;QACrB,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,IAAK;QACpB,eAAe,EAAE,KAAM;QACvB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,IAAI;KAClC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,KAAM;QACtB,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,IAAK;QACpB,eAAe,EAAE,KAAM;QACvB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,KAAK;KACnC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,cAAc,EAAE,MAAO;QACvB,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,KAAM;QACrB,eAAe,EAAE,MAAO;QACxB,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,MAAM;KACpC,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,cAAc,EAAE,QAAU;QAC1B,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,OAAS;QACxB,eAAe,EAAE,QAAU;QAC3B,iBAAiB,EAAE,4BAAoB;QACvC,UAAU,EAAE,wBAAgB,CAAC,QAAQ;KACtC,CAAC;CACH,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,iBAAiB,GAAsC,MAAM,CAAC,MAAM,CAAC;IAChF,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;CACf,CAAC,CAAC;AAEU,QAAA,YAAY,GAAW,MAAM,CAAC;AAE3C,MAAM,kBAAkB,GAAwD;IAC9E,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,iBAAiB;IACjB,mBAAmB;CACpB,CAAC;AAEF;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAkC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAW,CAAC;YAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA+BD,SAAgB,cAAc,CAAC,SAAyB,EAAE,WAA0B,IAAI;IACtF,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ;YACR,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAa,UAAU;IAGrB,YAAY,SAAqC,mBAAyC;QACxF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAY,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,gBAAgB,CAAC,MAAc,EAAE,sBAA8B;QAC7D,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,KAAK;YACd,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,sBAAsB;gBAC/B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU;gBAC7C,OAAO,EACL,GAAG,IAAI,gBAAgB,KAAK,6BAA6B;oBACzD,sBAAsB,sBAAsB,IAAI;oBAChD,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;aACpD;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,cAAc,CAAC,MAAc,EAAE,KAAa;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,KAAK;YACd,SAAS,EAAE;gBACT,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU;gBAC7C,OAAO,EACL,GAAG,IAAI,gBAAgB,KAAK,gCAAgC,KAAK,IAAI;oBACrE,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;aACpD;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,WAAW,CACjB,MAAc,EACd,IAAe,EACf,OAAe,EACf,aAAuF;QAEvF,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAY,CAAW,CAAC;QACvE,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,0EAA0E;QAC1E,4DAA4D;QAC5D,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF;AAjED,gCAiEC"}

package/dist/cjs/cloud/identity/RateLimiter.d.ts

@@ -19,13 +19,22 @@ export interface RateLimitDecision {
 }
 export interface RateLimiter {
     consume(tenantId: string, limit: number, windowMs: number, now?: number): Promise<RateLimitDecision>;
+    /** Requests counted in the current window, WITHOUT counting this call. For reporting, never for enforcing. */
+    peek?(tenantId: string, windowMs: number, now?: number): Promise<number>;
+    /** One request against the tenant's calendar-month (UTC) allowance; resetAt is the first instant of the next month. */
+    consumeMonthly?(tenantId: string, limit: number, now?: number): Promise<RateLimitDecision>;
+    /** Requests counted this calendar month, WITHOUT counting this call. For reporting, never for enforcing. */
+    peekMonthly?(tenantId: string, now?: number): Promise<number>;
 }
+/** Which allowance a 429 came from. */
+export type RateLimitWindow = 'day' | 'month';
 /** The 429 body for rate_limited (additive to the LemmaApiError envelope). */
 export interface RateLimitErrorBody {
     error: {
         code: 'rate_limited';
         status: 429;
         message: string;
+        window: RateLimitWindow;
         limit: number;
         used: number;
         remaining: number;
@@ -34,16 +43,27 @@ export interface RateLimitErrorBody {
         upgradeUrl: string;
     };
 }
-export declare function rateLimitErrorBody(decision: RateLimitDecision, retryAfterSeconds: number, upgradeUrl: string): RateLimitErrorBody;
+export declare function rateLimitErrorBody(decision: RateLimitDecision, retryAfterSeconds: number, upgradeUrl: string, window?: RateLimitWindow): RateLimitErrorBody;
+/** Bucket id of the calendar month (UTC) that contains `now`, e.g. `m:2026-10`. Text, so it shares the daily buckets' table without clashing. */
+export declare function monthBucket(now: number): string;
+/** First instant (epoch ms) of the UTC month after the one containing `now`. */
+export declare function nextMonthStart(now: number): number;
 /** In-process fixed-window limiter. Suitable for single-instance dev and tests. */
 export declare class InMemoryRateLimiter implements RateLimiter {
     private readonly buckets;
     consume(tenantId: string, limit: number, windowMs: number, now?: number): Promise<RateLimitDecision>;
+    peek(tenantId: string, windowMs: number, now?: number): Promise<number>;
+    private readonly months;
+    consumeMonthly(tenantId: string, limit: number, now?: number): Promise<RateLimitDecision>;
+    peekMonthly(tenantId: string, now?: number): Promise<number>;
 }
 /** Postgres-backed fixed-window limiter, atomic via a single upsert. */
 export declare class PostgresRateLimiter implements RateLimiter {
     private readonly pool;
     constructor(pool: Pool);
     consume(tenantId: string, limit: number, windowMs: number, now?: number): Promise<RateLimitDecision>;
+    peek(tenantId: string, windowMs: number, now?: number): Promise<number>;
+    consumeMonthly(tenantId: string, limit: number, now?: number): Promise<RateLimitDecision>;
+    peekMonthly(tenantId: string, now?: number): Promise<number>;
 }
 //# sourceMappingURL=RateLimiter.d.ts.map

package/dist/cjs/cloud/identity/RateLimiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../../../src/cloud/identity/RateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACtG;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE;QACL,IAAI,EAAE,cAAc,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAgBjI;AAED,mFAAmF;AACnF,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwD;IAE1E,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAyBvH;AAED,wEAAwE;AACxE,qBAAa,mBAAoB,YAAW,WAAW;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAoBvH"}
+{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../../../src/cloud/identity/RateLimiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrG,8GAA8G;IAC9G,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,uHAAuH;IACvH,cAAc,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3F,4GAA4G;IAC5G,WAAW,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/D;AAED,uCAAuC;AACvC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE;QACL,IAAI,EAAE,cAAc,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,eAAe,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,iBAAiB,EAAE,MAAM,EACzB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,eAAuB,GAC9B,kBAAkB,CAkBpB;AAED,iJAAiJ;AACjJ,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED,mFAAmF;AACnF,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwD;IAE1E,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BhH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAE9C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAYrG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAG/E;AAED,wEAAwE;AACxE,qBAAa,mBAAoB,YAAW,WAAW;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqBhH,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQnF,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAcrG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;CAO/E"}