@nxuss/lemma 1.43.0 → 1.44.0

package/dist/cjs/cloud/CloudBrainClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudBrainClient.js","sourceRoot":"","sources":["../../../src/cloud/CloudBrainClient.ts"],"names":[],"mappings":";;;AA0CA,8CAmBC;AA4BD,oCAKC;AAiFD,oDAOC;AAtLD;;;;;;;;GAQG;AACH,+CAA+C;AA6B/C,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AACpD,QAAA,kBAAkB,GAAG,IAAI,CAAC;AAEvC,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,0FAA0F;QAC1F,4EAA4E;QAC5E,MAAM,KAAK,GAAG,IAAA,4BAAc,EAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC9H,OAAO,OAAO,CAAC,MAAM;YACnB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE;YACtF,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpG,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,GAAsB,EAAE,IAAkC;IAC1G,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,4DAA4D,EAAE,CAAC;IAEvI,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,sBAAsB,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,4DAA4D,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,gCAAgC,EAAE,CAAC;IAEhH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,0BAAkB,CAAC;IACrH,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,MAAyB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC1F,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,MAAa,UAAW,SAAQ,KAAK;IACnC;IACE,qEAAqE;IAC5D,MAAc,EACd,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAVD,gCAUC;AAED,MAAa,gBAAgB;IAC3B,YACmB,MAAmB,EACnB,YAA0B,KAAK;QAD/B,WAAM,GAAN,MAAM,CAAa;QACnB,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,QAAQ,CAAC,OAA4B;QACnC,OAAO,IAAI,CAAC,IAAI,CAAuB,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,CAAC,OAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,OAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,yFAAyF;IACzF,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,4FAA4F;IAC5F,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAsB,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,IAAI,CAAiB,QAAQ,EAAE,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE;gBACrD,MAAM;gBACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9F,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,EAAE,IAAI,KAAK,YAAY,CAAC;YAClE,kGAAkG;YAClG,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QACrJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,GAAQ,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5F,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACrG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF;AAhED,4CAgEC;AAED,8FAA8F;AAC9F,SAAgB,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,mDAAmD,CAAC;QACnF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC;QACtE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,yCAAyC,CAAC;AACnD,CAAC"}

package/dist/cjs/cloud/CloudConfig.d.ts

@@ -0,0 +1,41 @@
+export interface UserCloudConfig {
+    url: string;
+    key: string;
+    /** Share every stored memory with the team without being asked. */
+    autoshare: boolean;
+}
+export type UserConfigRead = {
+    found: false;
+} | {
+    found: true;
+    config: UserCloudConfig;
+} | {
+    found: true;
+    problem: string;
+};
+export declare const MARKER_FILE = ".lemma-cloud.json";
+export declare function userConfigPath(env?: NodeJS.ProcessEnv): string;
+export declare function readUserConfig(env?: NodeJS.ProcessEnv): UserConfigRead;
+/** Atomic write, owner-only. Never leaves a half-written or world-readable credential behind. */
+export declare function writeUserConfig(config: UserCloudConfig, env?: NodeJS.ProcessEnv): string;
+/** True when a config existed and was removed. */
+export declare function removeUserConfig(env?: NodeJS.ProcessEnv): boolean;
+export interface CloudMarker {
+    url: string;
+}
+export declare function markerPath(root: string): string;
+export declare function readMarker(root: string): CloudMarker | null;
+/**
+ * The marker of the repo `start` lives in: the nearest one going up, stopping at the repo root (the
+ * first directory with a .git) or the filesystem root. Plain file reads, no subprocess: this runs on
+ * every search_memory for every user, Cloud or not, and spawning `git rev-parse` there cost ~9 ms a call.
+ */
+export declare function findMarker(start: string): CloudMarker | null;
+export declare function writeMarker(root: string, url: string): string;
+/**
+ * The host of a marker URL, safe to print into the agent's context. The marker is repo content
+ * anybody can edit, so only a validated host ever reaches a tool reply: no free text, no path,
+ * no control characters.
+ */
+export declare function markerHost(marker: CloudMarker): string;
+//# sourceMappingURL=CloudConfig.d.ts.map

package/dist/cjs/cloud/CloudConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudConfig.d.ts","sourceRoot":"","sources":["../../../src/cloud/CloudConfig.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,GAChB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,eAAO,MAAM,WAAW,sBAAsB,CAAC;AAE/C,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG3E;AAED,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CAsBnF;AAED,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQrG;AAED,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAO9E;AAID,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAW3D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAW5D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEtD"}

package/dist/cjs/cloud/CloudConfig.js

@@ -0,0 +1,133 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MARKER_FILE = void 0;
+exports.userConfigPath = userConfigPath;
+exports.readUserConfig = readUserConfig;
+exports.writeUserConfig = writeUserConfig;
+exports.removeUserConfig = removeUserConfig;
+exports.markerPath = markerPath;
+exports.readMarker = readMarker;
+exports.findMarker = findMarker;
+exports.writeMarker = writeMarker;
+exports.markerHost = markerHost;
+/**
+ * Lemma Cloud — where a dev's connection settings live.
+ *
+ *   ~/.lemma/cloud.json   personal, 0600: { url, key, autoshare }. Written by `lemma cloud login`.
+ *   <repo>/.lemma-cloud.json   committed, NO secret: { url }. Written by `lemma cloud link`.
+ *
+ * The two are deliberately not interchangeable. The key in the personal file is bound to the URL
+ * it was issued for and is only ever sent there. The repo marker is untrusted input (anyone who
+ * can push to the repo controls it), so it may suggest a default for `login` and trigger a hint,
+ * but it never decides where a key is sent: otherwise a hostile repo would point the URL at its
+ * own server and collect the key of every dev who opens it.
+ */
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+exports.MARKER_FILE = '.lemma-cloud.json';
+function userConfigPath(env = process.env) {
+    const override = env.LEMMA_CLOUD_CONFIG?.trim();
+    return override || path_1.default.join(os_1.default.homedir(), '.lemma', 'cloud.json');
+}
+function readUserConfig(env = process.env) {
+    const file = userConfigPath(env);
+    let stat;
+    try {
+        stat = fs_1.default.statSync(file);
+    }
+    catch {
+        return { found: false };
+    }
+    // The file holds a credential: if other users on this machine can read it, refuse to use it
+    // and say how to fix it, rather than quietly sending a key that is already exposed.
+    if (process.platform !== 'win32' && (stat.mode & 0o077) !== 0) {
+        return { found: true, problem: `${file} is readable by other users: run chmod 600 on it (or \`lemma cloud login\` again)` };
+    }
+    try {
+        const parsed = JSON.parse(fs_1.default.readFileSync(file, 'utf8'));
+        if (typeof parsed?.url !== 'string' || typeof parsed?.key !== 'string' || !parsed.url || !parsed.key) {
+            return { found: true, problem: `${file} is missing "url" or "key": run \`lemma cloud login\`` };
+        }
+        return { found: true, config: { url: parsed.url, key: parsed.key, autoshare: parsed.autoshare === true } };
+    }
+    catch {
+        return { found: true, problem: `${file} is not valid JSON: run \`lemma cloud login\`` };
+    }
+}
+/** Atomic write, owner-only. Never leaves a half-written or world-readable credential behind. */
+function writeUserConfig(config, env = process.env) {
+    const file = userConfigPath(env);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(config, null, 2) + '\n', { mode: 0o600 });
+    fs_1.default.chmodSync(tmp, 0o600); // the umask can only have removed bits, but be explicit
+    fs_1.default.renameSync(tmp, file);
+    return file;
+}
+/** True when a config existed and was removed. */
+function removeUserConfig(env = process.env) {
+    try {
+        fs_1.default.unlinkSync(userConfigPath(env));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function markerPath(root) {
+    return path_1.default.join(root, exports.MARKER_FILE);
+}
+function readMarker(root) {
+    try {
+        const parsed = JSON.parse(fs_1.default.readFileSync(markerPath(root), 'utf8'));
+        if (typeof parsed?.url !== 'string')
+            return null;
+        const u = new URL(parsed.url);
+        if (u.protocol !== 'https:' && !(u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname)))
+            return null;
+        if (u.username || u.password)
+            return null;
+        return { url: u.origin + u.pathname.replace(/\/+$/, '') };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The marker of the repo `start` lives in: the nearest one going up, stopping at the repo root (the
+ * first directory with a .git) or the filesystem root. Plain file reads, no subprocess: this runs on
+ * every search_memory for every user, Cloud or not, and spawning `git rev-parse` there cost ~9 ms a call.
+ */
+function findMarker(start) {
+    let dir = path_1.default.resolve(start);
+    for (let depth = 0; depth < 64; depth++) {
+        const marker = readMarker(dir);
+        if (marker)
+            return marker;
+        if (fs_1.default.existsSync(path_1.default.join(dir, '.git')))
+            return null;
+        const parent = path_1.default.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+    return null;
+}
+function writeMarker(root, url) {
+    const file = markerPath(root);
+    fs_1.default.writeFileSync(file, JSON.stringify({ url }, null, 2) + '\n', 'utf8');
+    return file;
+}
+/**
+ * The host of a marker URL, safe to print into the agent's context. The marker is repo content
+ * anybody can edit, so only a validated host ever reaches a tool reply: no free text, no path,
+ * no control characters.
+ */
+function markerHost(marker) {
+    return new URL(marker.url).host.replace(/[^a-zA-Z0-9.:\-[\]]/g, '');
+}
+//# sourceMappingURL=CloudConfig.js.map

package/dist/cjs/cloud/CloudConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudConfig.js","sourceRoot":"","sources":["../../../src/cloud/CloudConfig.ts"],"names":[],"mappings":";;;;;;AA8BA,wCAGC;AAED,wCAsBC;AAGD,0CAQC;AAGD,4CAOC;AAQD,gCAEC;AAED,gCAWC;AAOD,gCAWC;AAED,kCAIC;AAOD,gCAEC;AAtID;;;;;;;;;;;GAWG;AACH,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAcX,QAAA,WAAW,GAAG,mBAAmB,CAAC;AAE/C,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,QAAQ,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,4FAA4F;IAC5F,oFAAoF;IACpF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,mFAAmF,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACrG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,uDAAuD,EAAE,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,+CAA+C,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAgB,eAAe,CAAC,MAAuB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3F,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,YAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,wDAAwD;IAClF,YAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,CAAC;QACH,YAAE,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAW,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,cAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,GAAW;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAAmB;IAC5C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/cjs/cloud/CloudEntitlement.d.ts

@@ -0,0 +1,55 @@
+import { type CloudConfig } from './CloudBrainClient';
+import type { EntitlementResponse } from '../contracts/api-v2.types';
+/** How long the last answer keeps working when the server cannot be reached. */
+export declare const GRACE_MS: number;
+/** An answer older than this is asked for again. */
+export declare const REFRESH_AFTER_MS: number;
+export interface StoredEntitlement {
+    v: 1;
+    /** Which connection (URL + key) this answer is for. */
+    binding: string;
+    plan: string;
+    includesPro: boolean;
+    /** The server answered 401: the seat was taken away. */
+    revoked: boolean;
+    checkedAt: number;
+}
+export declare function entitlementPath(env?: NodeJS.ProcessEnv): string;
+/** A short fingerprint of the connection. Not the server's key hash: it is salted with the URL. */
+export declare function bindingFor(config: Pick<CloudConfig, 'baseUrl' | 'apiKey'>): string;
+export declare function readStored(env?: NodeJS.ProcessEnv): StoredEntitlement | null;
+/** For tests: forget the one-second memo of {@link cloudGrantsPro}. */
+export declare function resetEntitlementMemo(): void;
+/**
+ * Whether the connection this machine is logged in with currently carries Pro. Synchronous, no
+ * network, false whenever anything is missing or does not match.
+ */
+export declare function cloudGrantsPro(env?: NodeJS.ProcessEnv, now?: number): boolean;
+/** Keep the server's answer for this connection. */
+export declare function recordEntitlement(config: Pick<CloudConfig, 'baseUrl' | 'apiKey'>, answer: EntitlementResponse, env?: NodeJS.ProcessEnv, now?: number): void;
+/** Forget the entitlement (logout). True when there was one. */
+export declare function clearEntitlement(env?: NodeJS.ProcessEnv): boolean;
+export type RefreshState = 
+/** The server says this seat includes Pro. */
+'granted'
+/** The server knows the key and the plan does not include Pro (free). */
+ | 'not-included'
+/** The server rejected the key (401): the seat is gone, Pro from Cloud is off now. */
+ | 'revoked'
+/** An older server without the endpoint (404): nothing is recorded or changed. */
+ | 'unsupported'
+/** No usable answer (network, timeout, 5xx, 429, unreadable body): the last answer stands until the grace runs out. */
+ | 'unreachable';
+export interface RefreshResult {
+    state: RefreshState;
+    plan?: string;
+}
+/** Ask the server and record what it says. Never throws. */
+export declare function refreshEntitlement(config: CloudConfig, env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch, now?: number): Promise<RefreshResult>;
+/**
+ * For the long-lived MCP server: refresh when the saved answer is missing or older than an hour,
+ * and look again every half hour. Does nothing, and costs nothing, while Cloud is not configured.
+ * The timer is unref'd so it never keeps a process alive. Returns a function that stops it.
+ */
+export declare function startEntitlementRefresh(env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): () => void;
+//# sourceMappingURL=CloudEntitlement.d.ts.map

package/dist/cjs/cloud/CloudEntitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudEntitlement.d.ts","sourceRoot":"","sources":["../../../src/cloud/CloudEntitlement.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEvG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,gFAAgF;AAChF,eAAO,MAAM,QAAQ,QAA0B,CAAC;AAChD,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,QAAiB,CAAC;AAS/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5E;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,MAAM,CAElF;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,GAAG,IAAI,CAkBzF;AAYD,uEAAuE;AACvE,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAMtG;AAYD,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEpL;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAQ9E;AAED,MAAM,MAAM,YAAY;AACtB,8CAA8C;AAC5C,SAAS;AACX,yEAAyE;GACvE,cAAc;AAChB,sFAAsF;GACpF,SAAS;AACX,kFAAkF;GAChF,aAAa;AACf,uHAAuH;GACrH,aAAa,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAOD,4DAA4D;AAC5D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,OAAO,KAAK,EACxB,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,MAAM,IAAI,CAYlH"}

package/dist/cjs/cloud/CloudEntitlement.js

@@ -0,0 +1,174 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REFRESH_AFTER_MS = exports.GRACE_MS = void 0;
+exports.entitlementPath = entitlementPath;
+exports.bindingFor = bindingFor;
+exports.readStored = readStored;
+exports.resetEntitlementMemo = resetEntitlementMemo;
+exports.cloudGrantsPro = cloudGrantsPro;
+exports.recordEntitlement = recordEntitlement;
+exports.clearEntitlement = clearEntitlement;
+exports.refreshEntitlement = refreshEntitlement;
+exports.startEntitlementRefresh = startEntitlementRefresh;
+/**
+ * Lemma Cloud — what a seat entitles this machine to.
+ *
+ * A seat on a paid Cloud plan also unlocks the local Pro tools. The client does not decide that: it
+ * asks the server (GET /v2/entitlement) and keeps the last answer in ~/.lemma/cloud-entitlement.json
+ * next to the connection it belongs to. The file is only a cache of the server's answer and, like
+ * ~/.lemma-cache/license.json, it can be edited by whoever owns the machine; what it adds is that an
+ * answer for one connection is never honoured for another.
+ *
+ * Three rules, each from a way this has gone wrong before:
+ *  - Only an explicit 401 takes the entitlement away. A timeout, a 5xx, a 429 or a body we cannot
+ *    read keeps the last answer until it is older than the grace period (a KeyManager that treated
+ *    "anything but valid" as "cancelled" once deleted a paying user's license).
+ *  - Reading is synchronous and touches two small files, never the network: the host hooks are
+ *    short-lived processes with a latency budget. Only the long-lived MCP server refreshes.
+ *  - The answer is bound to the URL and key it was fetched with, so logging in as someone else, or
+ *    pointing at another server, starts from "no entitlement" instead of inheriting the old one.
+ */
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const CloudBrainClient_1 = require("./CloudBrainClient");
+const CloudConfig_1 = require("./CloudConfig");
+/** How long the last answer keeps working when the server cannot be reached. */
+exports.GRACE_MS = 7 * 24 * 60 * 60 * 1000;
+/** An answer older than this is asked for again. */
+exports.REFRESH_AFTER_MS = 60 * 60 * 1000;
+/** The MCP checks whether a refresh is due this often. */
+const TICK_MS = 30 * 60 * 1000;
+/** A recorded time this far ahead of the clock is not believed. */
+const FUTURE_SKEW_MS = 5 * 60 * 1000;
+/** Tool gates call this on every request; re-reading two files each time buys nothing. */
+const MEMO_MS = 1000;
+const REFRESH_TIMEOUT_MS = 8000;
+function entitlementPath(env = process.env) {
+    return path_1.default.join(path_1.default.dirname((0, CloudConfig_1.userConfigPath)(env)), 'cloud-entitlement.json');
+}
+/** A short fingerprint of the connection. Not the server's key hash: it is salted with the URL. */
+function bindingFor(config) {
+    return crypto_1.default.createHash('sha256').update(`${config.baseUrl}\n${config.apiKey}`).digest('hex').slice(0, 16);
+}
+function readStored(env = process.env) {
+    try {
+        const p = JSON.parse(fs_1.default.readFileSync(entitlementPath(env), 'utf8'));
+        if (p?.v !== 1 ||
+            typeof p.binding !== 'string' ||
+            typeof p.plan !== 'string' ||
+            typeof p.includesPro !== 'boolean' ||
+            typeof p.revoked !== 'boolean' ||
+            typeof p.checkedAt !== 'number' ||
+            !Number.isFinite(p.checkedAt)) {
+            return null;
+        }
+        return p;
+    }
+    catch {
+        return null;
+    }
+}
+function writeStored(s, env) {
+    const file = entitlementPath(env);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(s, null, 2) + '\n', { mode: 0o600 });
+    fs_1.default.renameSync(tmp, file);
+    memo = null;
+}
+let memo = null;
+/** For tests: forget the one-second memo of {@link cloudGrantsPro}. */
+function resetEntitlementMemo() {
+    memo = null;
+}
+/**
+ * Whether the connection this machine is logged in with currently carries Pro. Synchronous, no
+ * network, false whenever anything is missing or does not match.
+ */
+function cloudGrantsPro(env = process.env, now = Date.now()) {
+    const useMemo = env === process.env;
+    if (useMemo && memo && now - memo.at < MEMO_MS)
+        return memo.value;
+    const value = compute(env, now);
+    if (useMemo)
+        memo = { at: now, value };
+    return value;
+}
+function compute(env, now) {
+    const status = (0, CloudBrainClient_1.cloudConfigStatus)(env);
+    if (!status.config)
+        return false;
+    const s = readStored(env);
+    if (!s || s.revoked || !s.includesPro)
+        return false;
+    if (s.binding !== bindingFor(status.config))
+        return false;
+    if (s.checkedAt > now + FUTURE_SKEW_MS)
+        return false;
+    return now - s.checkedAt < exports.GRACE_MS;
+}
+/** Keep the server's answer for this connection. */
+function recordEntitlement(config, answer, env = process.env, now = Date.now()) {
+    writeStored({ v: 1, binding: bindingFor(config), plan: answer.plan, includesPro: answer.includesPro, revoked: false, checkedAt: now }, env);
+}
+/** Forget the entitlement (logout). True when there was one. */
+function clearEntitlement(env = process.env) {
+    memo = null;
+    try {
+        fs_1.default.unlinkSync(entitlementPath(env));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isAnswer(x) {
+    const a = x;
+    return !!a && typeof a.plan === 'string' && typeof a.includesPro === 'boolean';
+}
+/** Ask the server and record what it says. Never throws. */
+async function refreshEntitlement(config, env = process.env, fetchImpl, now = Date.now()) {
+    try {
+        const answer = await new CloudBrainClient_1.CloudBrainClient({ ...config, timeoutMs: Math.max(config.timeoutMs, REFRESH_TIMEOUT_MS) }, fetchImpl).entitlement();
+        if (!isAnswer(answer))
+            return { state: 'unreachable' };
+        recordEntitlement(config, answer, env, now);
+        return { state: answer.includesPro ? 'granted' : 'not-included', plan: answer.plan };
+    }
+    catch (err) {
+        if (err instanceof CloudBrainClient_1.CloudError) {
+            if (err.status === 401) {
+                writeStored({ v: 1, binding: bindingFor(config), plan: 'free', includesPro: false, revoked: true, checkedAt: now }, env);
+                return { state: 'revoked' };
+            }
+            if (err.status === 404)
+                return { state: 'unsupported' };
+        }
+        return { state: 'unreachable' };
+    }
+}
+/**
+ * For the long-lived MCP server: refresh when the saved answer is missing or older than an hour,
+ * and look again every half hour. Does nothing, and costs nothing, while Cloud is not configured.
+ * The timer is unref'd so it never keeps a process alive. Returns a function that stops it.
+ */
+function startEntitlementRefresh(env = process.env, fetchImpl) {
+    const tick = () => {
+        const status = (0, CloudBrainClient_1.cloudConfigStatus)(env);
+        if (!status.config)
+            return;
+        const s = readStored(env);
+        if (s && s.binding === bindingFor(status.config) && Date.now() - s.checkedAt < exports.REFRESH_AFTER_MS)
+            return;
+        void refreshEntitlement(status.config, env, fetchImpl).catch(() => { });
+    };
+    tick();
+    const timer = setInterval(tick, TICK_MS);
+    timer.unref();
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=CloudEntitlement.js.map

package/dist/cjs/cloud/CloudEntitlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudEntitlement.js","sourceRoot":"","sources":["../../../src/cloud/CloudEntitlement.ts"],"names":[],"mappings":";;;;;;AAgDA,0CAEC;AAGD,gCAEC;AAED,gCAkBC;AAaD,oDAEC;AAMD,wCAMC;AAaD,8CAEC;AAGD,4CAQC;AAyBD,gDAqBC;AAOD,0DAYC;AAjMD;;;;;;;;;;;;;;;;;GAiBG;AACH,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AACxB,yDAAuG;AACvG,+CAA+C;AAG/C,gFAAgF;AACnE,QAAA,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,oDAAoD;AACvC,QAAA,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,0DAA0D;AAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/B,mEAAmE;AACnE,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,0FAA0F;AAC1F,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAahC,SAAgB,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,cAAI,CAAC,IAAI,CAAC,cAAI,CAAC,OAAO,CAAC,IAAA,4BAAc,EAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAChF,CAAC;AAED,mGAAmG;AACnG,SAAgB,UAAU,CAAC,MAA+C;IACxE,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED,SAAgB,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,IACE,CAAC,EAAE,CAAC,KAAK,CAAC;YACV,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAC1B,OAAO,CAAC,CAAC,WAAW,KAAK,SAAS;YAClC,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;YAC9B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAC7B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAsB,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAoB,EAAE,GAAsB;IAC/D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,YAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,YAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED,IAAI,IAAI,GAA0C,IAAI,CAAC;AACvD,uEAAuE;AACvE,SAAgB,oBAAoB;IAClC,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3F,MAAM,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,OAAO,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,GAAG,OAAO;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO;QAAE,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,GAAsB,EAAE,GAAW;IAClD,MAAM,MAAM,GAAG,IAAA,oCAAiB,EAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,cAAc;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,gBAAQ,CAAC;AACtC,CAAC;AAED,oDAAoD;AACpD,SAAgB,iBAAiB,CAAC,MAA+C,EAAE,MAA2B,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5K,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;AAC9I,CAAC;AAED,gEAAgE;AAChE,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,GAAG,IAAI,CAAC;IACZ,IAAI,CAAC;QACH,YAAE,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAmBD,SAAS,QAAQ,CAAC,CAAU;IAC1B,MAAM,CAAC,GAAG,CAAwC,CAAC;IACnD,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC;AACjF,CAAC;AAED,4DAA4D;AACrD,KAAK,UAAU,kBAAkB,CACtC,MAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAwB,EACxB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,mCAAgB,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7I,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QACvD,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,6BAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,SAAwB;IACpG,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,MAAM,GAAG,IAAA,oCAAiB,EAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,wBAAgB;YAAE,OAAO;QACxG,KAAK,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,IAAI,EAAE,CAAC;IACP,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/cjs/cloud/billing/stripeApi.d.ts

@@ -0,0 +1,43 @@
+export declare const TRIAL_DAYS = 14;
+export type Interval = 'month' | 'year';
+export declare const SELLABLE_PLANS: readonly ["vinel", "regnum"];
+export type SellablePlan = (typeof SELLABLE_PLANS)[number];
+export interface StripeApiConfig {
+    secretKey: string;
+    /** Where Stripe sends the customer after paying or cancelling. */
+    successUrl: string;
+    cancelUrl: string;
+    /** Where the billing portal's "back" link goes. */
+    portalReturnUrl: string;
+    /** Test seam: defaults to the global fetch. */
+    fetchImpl?: typeof fetch;
+}
+export declare function stripeApiConfigFromEnv(env?: NodeJS.ProcessEnv): StripeApiConfig | null;
+/** The stable lookup key the Stripe setup gave each price: `lemma_cloud_vinel_monthly`, ... */
+export declare const priceLookupKey: (plan: SellablePlan, interval: Interval) => string;
+export declare const founderCoupon: (plan: SellablePlan) => string;
+export declare class StripeApi {
+    private readonly config;
+    private readonly fetchImpl;
+    constructor(config: StripeApiConfig);
+    private call;
+    /** Creates a Checkout Session for `tenantId` and returns its URL. */
+    createCheckout(input: {
+        tenantId: string;
+        plan: SellablePlan;
+        interval: Interval;
+        founder: boolean;
+        existingCustomerId: string | null;
+        email?: string;
+    }): Promise<{
+        url: string;
+        expiresAt: number;
+    }>;
+    /** Creates a customer-portal session (payment method, invoices, cancel) for an existing Stripe customer. */
+    createPortal(customerId: string): Promise<{
+        url: string;
+    }>;
+}
+/** The client for the operator routes, or undefined when STRIPE_SECRET_KEY is not set (the routes are then not mounted). */
+export declare function stripeApiFromEnv(env?: NodeJS.ProcessEnv): StripeApi | undefined;
+//# sourceMappingURL=stripeApi.d.ts.map

package/dist/cjs/cloud/billing/stripeApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripeApi.d.ts","sourceRoot":"","sources":["../../../../src/cloud/billing/stripeApi.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AACxC,eAAO,MAAM,cAAc,8BAA2D,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAID,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,GAAG,IAAI,CASnG;AAED,+FAA+F;AAC/F,eAAO,MAAM,cAAc,GAAI,MAAM,YAAY,EAAE,UAAU,QAAQ,KAAG,MAA6C,CAAC;AACtH,eAAO,MAAM,aAAa,GAAI,MAAM,YAAY,KAAG,MAAyC,CAAC;AAK7F,qBAAa,SAAS;IAER,OAAO,CAAC,QAAQ,CAAC,MAAM;IADnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBACZ,MAAM,EAAE,eAAe;YAItC,IAAI;IAmBlB,qEAAqE;IAC/D,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,YAAY,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA6B/C,4GAA4G;IACtG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAKjE;AAED,4HAA4H;AAC5H,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,GAAG,SAAS,CAG5F"}

package/dist/cjs/cloud/billing/stripeApi.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StripeApi = exports.founderCoupon = exports.priceLookupKey = exports.SELLABLE_PLANS = exports.TRIAL_DAYS = void 0;
+exports.stripeApiConfigFromEnv = stripeApiConfigFromEnv;
+exports.stripeApiFromEnv = stripeApiFromEnv;
+/**
+ * Lemma Cloud — the two Stripe calls an operator needs: a Checkout link for a tenant, and a billing
+ * portal link for a tenant that already pays. A thin client over `fetch` (the webhook already avoids
+ * the Stripe SDK; this keeps the dependency list unchanged and the form encoding visible in tests).
+ *
+ * What makes a checkout Cloud's rather than anyone else's in the same Stripe account:
+ *  - `client_reference_id` = the tenant id, and `metadata.lemma_product = "cloud"` (the Pro license
+ *    site's webhook skips sessions with either, and our webhook links the customer through the first);
+ *  - the same tenant id on the SUBSCRIPTION metadata, so `customer.subscription.*` finds the tenant
+ *    even when it overtakes `checkout.session.completed`.
+ *
+ * The secret key never appears in a response or a log line: Stripe errors are reduced to their message.
+ */
+const errors_1 = require("../../contracts/errors");
+exports.TRIAL_DAYS = 14;
+exports.SELLABLE_PLANS = ['vinel', 'regnum'];
+const DEFAULT_URL = 'https://lemma.nxus.studio/';
+function stripeApiConfigFromEnv(env = process.env) {
+    const secretKey = env.STRIPE_SECRET_KEY;
+    if (!secretKey)
+        return null;
+    return {
+        secretKey,
+        successUrl: env.CLOUD_CHECKOUT_SUCCESS_URL || `${DEFAULT_URL}?cloud=success`,
+        cancelUrl: env.CLOUD_CHECKOUT_CANCEL_URL || `${DEFAULT_URL}?cloud=cancelled`,
+        portalReturnUrl: env.CLOUD_PORTAL_RETURN_URL || DEFAULT_URL,
+    };
+}
+/** The stable lookup key the Stripe setup gave each price: `lemma_cloud_vinel_monthly`, ... */
+const priceLookupKey = (plan, interval) => `lemma_cloud_${plan}_${interval}ly`;
+exports.priceLookupKey = priceLookupKey;
+const founderCoupon = (plan) => `FOUNDER_${plan.toUpperCase()}`;
+exports.founderCoupon = founderCoupon;
+const upstream = (what, detail) => new errors_1.LemmaApiError({ code: 'internal', status: 502, message: `billing provider error while ${what}${detail ? `: ${detail}` : ''}` });
+class StripeApi {
+    constructor(config) {
+        this.config = config;
+        this.fetchImpl = config.fetchImpl ?? fetch;
+    }
+    async call(method, path, form, what = 'calling Stripe') {
+        let res;
+        try {
+            res = await this.fetchImpl('https://api.stripe.com/v1' + path, {
+                method,
+                headers: {
+                    Authorization: 'Basic ' + Buffer.from(this.config.secretKey + ':').toString('base64'),
+                    ...(form ? { 'Content-Type': 'application/x-www-form-urlencoded' } : {}),
+                },
+                body: form ? new URLSearchParams(form).toString() : undefined,
+            });
+        }
+        catch {
+            throw upstream(what, 'unreachable');
+        }
+        const json = await res.json().catch(() => null);
+        if (!res.ok || !json || json.error)
+            throw upstream(what, typeof json?.error?.message === 'string' ? json.error.message : `HTTP ${res.status}`);
+        return json;
+    }
+    /** Creates a Checkout Session for `tenantId` and returns its URL. */
+    async createCheckout(input) {
+        const { tenantId, plan, interval } = input;
+        const lookup = (0, exports.priceLookupKey)(plan, interval);
+        const prices = await this.call('GET', `/prices?lookup_keys[]=${encodeURIComponent(lookup)}&active=true`, undefined, 'looking up the price');
+        const price = prices.data?.[0];
+        if (!price?.id)
+            throw upstream('looking up the price', `no active price with lookup key ${lookup}`);
+        const form = {
+            mode: 'subscription',
+            'line_items[0][price]': price.id,
+            'line_items[0][quantity]': '1',
+            client_reference_id: tenantId,
+            'metadata[lemma_product]': 'cloud',
+            'metadata[tenantId]': tenantId,
+            'subscription_data[metadata][lemma_product]': 'cloud',
+            'subscription_data[metadata][tenantId]': tenantId,
+            'subscription_data[trial_period_days]': String(exports.TRIAL_DAYS),
+            success_url: this.config.successUrl,
+            cancel_url: this.config.cancelUrl,
+        };
+        if (input.founder)
+            form['discounts[0][coupon]'] = (0, exports.founderCoupon)(plan);
+        if (input.existingCustomerId)
+            form.customer = input.existingCustomerId;
+        else if (input.email)
+            form.customer_email = input.email;
+        const session = await this.call('POST', '/checkout/sessions', form, 'creating the checkout');
+        if (typeof session.url !== 'string')
+            throw upstream('creating the checkout', 'no URL returned');
+        return { url: session.url, expiresAt: typeof session.expires_at === 'number' ? session.expires_at * 1000 : 0 };
+    }
+    /** Creates a customer-portal session (payment method, invoices, cancel) for an existing Stripe customer. */
+    async createPortal(customerId) {
+        const session = await this.call('POST', '/billing_portal/sessions', { customer: customerId, return_url: this.config.portalReturnUrl }, 'creating the portal session');
+        if (typeof session.url !== 'string')
+            throw upstream('creating the portal session', 'no URL returned');
+        return { url: session.url };
+    }
+}
+exports.StripeApi = StripeApi;
+/** The client for the operator routes, or undefined when STRIPE_SECRET_KEY is not set (the routes are then not mounted). */
+function stripeApiFromEnv(env = process.env) {
+    const config = stripeApiConfigFromEnv(env);
+    return config ? new StripeApi(config) : undefined;
+}
+//# sourceMappingURL=stripeApi.js.map

package/dist/cjs/cloud/billing/stripeApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripeApi.js","sourceRoot":"","sources":["../../../../src/cloud/billing/stripeApi.ts"],"names":[],"mappings":";;;AAkCA,wDASC;AAgFD,4CAGC;AA9HD;;;;;;;;;;;;GAYG;AACH,mDAAuD;AAG1C,QAAA,UAAU,GAAG,EAAE,CAAC;AAEhB,QAAA,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAsC,CAAC;AAcvF,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,SAAgB,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO;QACL,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,0BAA0B,IAAI,GAAG,WAAW,gBAAgB;QAC5E,SAAS,EAAE,GAAG,CAAC,yBAAyB,IAAI,GAAG,WAAW,kBAAkB;QAC5E,eAAe,EAAE,GAAG,CAAC,uBAAuB,IAAI,WAAW;KAC5D,CAAC;AACJ,CAAC;AAED,+FAA+F;AACxF,MAAM,cAAc,GAAG,CAAC,IAAkB,EAAE,QAAkB,EAAU,EAAE,CAAC,eAAe,IAAI,IAAI,QAAQ,IAAI,CAAC;AAAzG,QAAA,cAAc,kBAA2F;AAC/G,MAAM,aAAa,GAAG,CAAC,IAAkB,EAAU,EAAE,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AAAhF,QAAA,aAAa,iBAAmE;AAE7F,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,MAAe,EAAiB,EAAE,CAChE,IAAI,sBAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gCAAgC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtI,MAAa,SAAS;IAEpB,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;QAClD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAsB,EAAE,IAAY,EAAE,IAA6B,EAAE,IAAI,GAAG,gBAAgB;QAC7G,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,2BAA2B,GAAG,IAAI,EAAE;gBAC7D,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACrF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE;gBACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,IAAI,GAAQ,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/I,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,cAAc,CAAC,KAOpB;QACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAA,sBAAc,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,kBAAkB,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;QAC5I,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,EAAE;YAAE,MAAM,QAAQ,CAAC,sBAAsB,EAAE,mCAAmC,MAAM,EAAE,CAAC,CAAC;QAEpG,MAAM,IAAI,GAA2B;YACnC,IAAI,EAAE,cAAc;YACpB,sBAAsB,EAAE,KAAK,CAAC,EAAE;YAChC,yBAAyB,EAAE,GAAG;YAC9B,mBAAmB,EAAE,QAAQ;YAC7B,yBAAyB,EAAE,OAAO;YAClC,oBAAoB,EAAE,QAAQ;YAC9B,4CAA4C,EAAE,OAAO;YACrD,uCAAuC,EAAE,QAAQ;YACjD,sCAAsC,EAAE,MAAM,CAAC,kBAAU,CAAC;YAC1D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAClC,CAAC;QACF,IAAI,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,kBAAkB;YAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;aAClE,IAAI,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;QAC7F,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC;QAChG,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjH,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACtK,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,QAAQ,CAAC,6BAA6B,EAAE,iBAAiB,CAAC,CAAC;QACtG,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;CACF;AApED,8BAoEC;AAED,4HAA4H;AAC5H,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC"}