@relaycast/engine 11.1.1 → 12.0.0

package/dist/middleware/planLimits.js

@@ -1,190 +0,0 @@
-import { createMiddleware } from 'hono/factory';
-import { getLifetimeUsageMetric, incrementLifetimeUsage, usagePeriodResetAt } from '../engine/usage.js';
-import { setRetryContract } from '../lib/throttle.js';
-import { PlanLimitExceededError } from '../lib/planLimitError.js';
-import { runInBackground } from '../routes/background.js';
-// Re-exported for back-compat with callers/tests that imported the table here.
-export { PLAN_LIMITS } from '../providers/static-entitlements.js';
-/**
- * A provider billing on its own cycle reports that cycle's end. An absent or
- * failing hook falls back to the engine's UTC-month period, so how the reset is
- * *reported* can never change the throttling decision itself.
- */
-async function resolveUsageResetAt(entitlements, workspaceId, metric) {
-    try {
-        const reported = await entitlements.getUsageResetAt?.(workspaceId, metric);
-        if (typeof reported === 'number' && Number.isFinite(reported))
-            return reported;
-    }
-    catch { /* fall through to the engine period */ }
-    return usagePeriodResetAt();
-}
-/**
- * Where the caller can lift the limit. Advisory only: an absent or failing hook,
- * or a non-absolute URL, omits the guidance and never changes the decision.
- */
-async function resolveUpgradeGuidance(entitlements, workspace, metric) {
-    try {
-        const guidance = await entitlements.getUpgradeGuidance?.(workspace, metric);
-        if (!guidance || typeof guidance.url !== 'string')
-            return null;
-        const url = new URL(guidance.url);
-        if (url.protocol !== 'https:' && url.protocol !== 'http:')
-            return null;
-        return guidance;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * The `plan_limit_exceeded` body. The envelope stays `{ ok, error: { code,
- * message } }`; `metric`, `limit`, `usage`, `plan` and — when the host knows
- * one — `upgrade_url` / `upgrade_action` are additive fields on `error` so a
- * client can render "sign in" or "upgrade" without parsing the message.
- */
-function planLimitExceededBody(input) {
-    const { guidance } = input;
-    const nextStep = guidance
-        ? `${guidance.hint ?? (guidance.action === 'sign_in' ? 'Sign in to keep going:' : 'Upgrade your plan to increase limits:')} ${guidance.url}`
-        : 'Upgrade your plan to increase limits.';
-    return {
-        ok: false,
-        error: {
-            code: 'plan_limit_exceeded',
-            message: `${input.message} ${nextStep}`,
-            metric: input.metric,
-            plan: input.plan,
-            limit: input.limit,
-            usage: input.usage,
-            upgrade_url: guidance?.url ?? null,
-            upgrade_action: guidance?.action ?? null,
-        },
-    };
-}
-export function checkPlanLimit(metric) {
-    return createMiddleware(async (c, next) => {
-        const workspace = c.get('workspace');
-        if (!workspace) {
-            await next();
-            return;
-        }
-        const { entitlements } = c.get('engine');
-        let limits;
-        try {
-            limits = await entitlements.getLimits(workspace);
-        }
-        catch {
-            await next();
-            return;
-        }
-        const limit = limits[metric];
-        if (typeof limit !== 'number' || limit === Infinity) {
-            await next();
-            return;
-        }
-        try {
-            const current = await entitlements.getUsage(workspace.id, metric);
-            if (current >= limit) {
-                const guidance = await resolveUpgradeGuidance(entitlements, workspace, metric);
-                const plan = guidance?.plan ?? (workspace.plan || 'free');
-                // Quota clears on the billing period, not on a backoff. Advertising the
-                // real reset lets a caller with a bounded retry budget fail fast instead
-                // of spending it on a condition retrying cannot fix.
-                const resetAt = await resolveUsageResetAt(entitlements, workspace.id, metric);
-                setRetryContract(c, resetAt);
-                return c.json(planLimitExceededBody({
-                    metric,
-                    plan,
-                    limit,
-                    usage: current,
-                    message: `Plan limit exceeded for ${metric}. Current plan: ${plan}. Limit: ${limit} per usage period. Current usage: ${current}. Quota resets at ${new Date(resetAt).toISOString()}.`,
-                    guidance,
-                }), 429);
-            }
-        }
-        catch { /* fail open */ }
-        await next();
-    });
-}
-/**
- * Enforce a plan's one-time `lifetime_messages` allowance on message sends.
- *
- * Mounted after `rateLimit` on the routes that create a message (channel post,
- * DM, group DM, thread reply). Plans without a finite allowance — every tier
- * except a hosted anonymous trial, and always `selfhost` — skip it without
- * touching the counter. The allowance never resets, so the 429 carries no
- * `Retry-After`: retrying cannot clear it; signing in or upgrading does.
- *
- * Idempotency is preserved. Only a fresh send that succeeds (2xx without
- * `Idempotency-Replayed`) is counted, so retries never spend the allowance.
- * Once the allowance is spent, a request without an `Idempotency-Key` is
- * refused here; a keyed request reaches the route so a replay of an earlier
- * successful send still returns its stored receipt, and the route refuses only
- * a fresh send ({@link assertMessageAllowance}, called inside the idempotent
- * operation).
- *
- * The count is kept alive past the response with `runInBackground`
- * (`waitUntil` on Workers). Check-then-count is not atomic: concurrent sends at
- * the boundary can overshoot by the number in flight, which a soft trial
- * allowance tolerates. Fails open on entitlement or counter errors, matching
- * `checkPlanLimit`.
- */
-export const checkMessageAllowance = createMiddleware(async (c, next) => {
-    const workspace = c.get('workspace');
-    if (!workspace) {
-        await next();
-        return;
-    }
-    const { entitlements, kv } = c.get('engine');
-    let allowance;
-    try {
-        allowance = (await entitlements.getLimits(workspace)).lifetime_messages;
-    }
-    catch {
-        await next();
-        return;
-    }
-    if (typeof allowance !== 'number' || !Number.isFinite(allowance)) {
-        await next();
-        return;
-    }
-    let used;
-    try {
-        used = await getLifetimeUsageMetric(kv, workspace.id, 'messages');
-    }
-    catch {
-        await next();
-        return;
-    }
-    if (used >= allowance) {
-        const guidance = await resolveUpgradeGuidance(entitlements, workspace, 'messages');
-        const plan = guidance?.plan ?? (workspace.plan || 'free');
-        const body = planLimitExceededBody({
-            metric: 'messages',
-            plan,
-            limit: allowance,
-            usage: used,
-            message: `Message allowance used up: this workspace has sent ${used} of its ${allowance} messages (current plan: ${plan}). The allowance does not reset.`,
-            guidance,
-        });
-        if (!c.req.header('Idempotency-Key'))
-            return c.json(body, 429);
-        c.set('messageAllowanceDenial', body);
-    }
-    await next();
-    if (c.res.status >= 200 && c.res.status < 300 && c.res.headers.get('Idempotency-Replayed') !== 'true') {
-        runInBackground(c, incrementLifetimeUsage(kv, workspace.id, 'messages'), 'lifetime message usage increment');
-    }
-});
-/**
- * Refuse a fresh send when `checkMessageAllowance` found the allowance spent.
- * Call it first inside a message route's idempotent `operation`, which runs
- * only for a new send — never for a replay of a stored receipt.
- */
-export function assertMessageAllowance(c) {
-    const denial = c.get('messageAllowanceDenial');
-    if (denial)
-        throw new PlanLimitExceededError(denial);
-}
-//# sourceMappingURL=planLimits.js.map

package/dist/middleware/planLimits.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"planLimits.js","sourceRoot":"","sources":["../../src/middleware/planLimits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIhD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAA8B,MAAM,0BAA0B,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,YAAkC,EAClC,WAAmB,EACnB,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;IACnD,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CACnC,YAAkC,EAClC,SAAoB,EACpB,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAO9B;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,uCAAuC,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE;QAC5I,CAAC,CAAC,uCAAuC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE;YACvC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI;YAClC,cAAc,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEzC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAE9E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAClE,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC/E,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;gBAC1D,wEAAwE;gBACxE,yEAAyE;gBACzE,qDAAqD;gBACrD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC9E,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;oBAClC,MAAM;oBACN,IAAI;oBACJ,KAAK;oBACL,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,2BAA2B,MAAM,mBAAmB,IAAI,YAAY,KAAK,qCAAqC,OAAO,qBAAqB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,GAAG;oBACrL,QAAQ;iBACT,CAAC,EAAE,GAAG,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAE3B,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAC9E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,MAAM,IAAI,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAEzC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAE3F,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,qBAAqB,CAAC;YACjC,MAAM,EAAE,UAAU;YAClB,IAAI;YACJ,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,sDAAsD,IAAI,WAAW,SAAS,4BAA4B,IAAI,kCAAkC;YACzJ,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;IAEb,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,MAAM,EAAE,CAAC;QACtG,eAAe,CAAC,CAAC,EAAE,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,CAAkB;IACvD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC/C,IAAI,MAAM;QAAE,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/dist/middleware/usageTracker.d.ts

@@ -1,3 +0,0 @@
-import type { AppEnv } from '../env.js';
-export declare const usageTracker: import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;
-//# sourceMappingURL=usageTracker.d.ts.map

package/dist/middleware/usageTracker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"usageTracker.d.ts","sourceRoot":"","sources":["../../src/middleware/usageTracker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAGxC,eAAO,MAAM,YAAY,gEAOvB,CAAC"}

package/dist/middleware/usageTracker.js

@@ -1,11 +0,0 @@
-import { createMiddleware } from 'hono/factory';
-import { incrementUsage } from '../engine/usage.js';
-export const usageTracker = createMiddleware(async (c, next) => {
-    const workspace = c.get('workspace');
-    if (workspace) {
-        // Fire-and-forget atomic usage increment via the key/value port.
-        incrementUsage(c.get('engine').kv, workspace.id, 'api_calls').catch(() => { });
-    }
-    await next();
-});
-//# sourceMappingURL=usageTracker.js.map

package/dist/middleware/usageTracker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"usageTracker.js","sourceRoot":"","sources":["../../src/middleware/usageTracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACrE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,SAAS,EAAE,CAAC;QACd,iEAAiE;QACjE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/ports/entitlements.d.ts

@@ -1,65 +0,0 @@
-import type { Workspace } from './auth.js';
-export type UsageMetric = 'messages' | 'agents' | 'file_bytes' | 'api_calls';
-export interface PlanLimits {
-    messages: number;
-    agents: number;
-    file_bytes: number;
-    /** Total authenticated API calls allowed for the current billing window. */
-    api_calls: number;
-    /** Global requests-per-minute ceiling, fed into the rate limiter. */
-    rate_per_min: number;
-    /**
-     * One-time message allowance that never resets. When set to a finite number,
-     * message sends (channel posts, DMs, group DMs, thread replies) are refused
-     * with `plan_limit_exceeded` once the workspace has sent this many messages
-     * over its whole lifetime. Unset (or `Infinity`) means no lifetime cap — the
-     * case for every tier except a hosted anonymous trial.
-     */
-    lifetime_messages?: number;
-}
-/**
- * Where a workspace that hit a limit should go next. Returned by
- * {@link EntitlementsProvider.getUpgradeGuidance} and surfaced on the
- * `plan_limit_exceeded` error body as `upgrade_url` / `upgrade_action`.
- */
-export interface UpgradeGuidance {
-    /** An absolute URL the caller can open to lift the limit. */
-    url: string;
-    /** `sign_in` when signing in (free) lifts the limit, `upgrade` when a paid plan does. */
-    action: 'sign_in' | 'upgrade';
-    /** Effective plan name to report, when it differs from the stored `workspace.plan`. */
-    plan?: string;
-    /** One sentence appended to the error message, e.g. how to sign in. */
-    hint?: string;
-}
-/**
- * Pluggable plan limits / usage — the billing seam.
- *
- * Self-host uses `StaticEntitlementsProvider`, seeded from today's hardcoded
- * `PLAN_LIMITS` (free/connect/pro/enterprise), defaulting single-tenant deployments to a
- * generous/unlimited tier. The cloud product injects a provider that resolves
- * quotas from its billing system (e.g. a Stripe subscription) per workspace and
- * reports metered usage.
- */
-export interface EntitlementsProvider {
-    /** Resolve the active plan limits for a workspace. */
-    getLimits(workspace: Workspace): Promise<PlanLimits>;
-    /** Current usage for a metric, compared against the limit before allowing an action. */
-    getUsage(workspaceId: string, metric: UsageMetric): Promise<number>;
-    /**
-     * Unix ms at which `metric`'s usage window rolls over, used to put an honest
-     * `Retry-After` on a quota 429 so callers can tell a wait-and-retry condition
-     * from one that no retry will clear. Optional: a provider billing on its own
-     * cycle reports that cycle's end; omitting it falls back to the engine's
-     * UTC-month period.
-     */
-    getUsageResetAt?(workspaceId: string, metric: UsageMetric): Promise<number>;
-    /**
-     * Where a workspace that hit `metric`'s limit can lift it (sign in, upgrade).
-     * Optional: self-host deployments have no upgrade path, and an absent or
-     * failing hook only omits `upgrade_url` from the error — it never changes
-     * the limit decision.
-     */
-    getUpgradeGuidance?(workspace: Workspace, metric: UsageMetric): Promise<UpgradeGuidance | null>;
-}
-//# sourceMappingURL=entitlements.d.ts.map

package/dist/ports/entitlements.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../../src/ports/entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;AAE7E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;IACZ,yFAAyF;IACzF,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErD,wFAAwF;IACxF,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEpE;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5E;;;;;OAKG;IACH,kBAAkB,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;CACjG"}

package/dist/ports/entitlements.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=entitlements.js.map

package/dist/ports/entitlements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entitlements.js","sourceRoot":"","sources":["../../src/ports/entitlements.ts"],"names":[],"mappings":""}

package/dist/providers/static-entitlements.d.ts

@@ -1,25 +0,0 @@
-import type { EntitlementsProvider, PlanLimits, UsageMetric, Workspace } from '../ports/index.js';
-import type { KeyValueStore } from '../ports/kv.js';
-/**
- * The default plan limits, lifted from the original `middleware/planLimits.ts`.
- * Self-host deployments typically run the `selfhost` tier (everything
- * unlimited); the trial/free/connect/pro/enterprise tiers are kept so the same code serves a
- * tiered deployment if a workspace's `plan` column is set.
- */
-export declare const PLAN_LIMITS: Record<string, PlanLimits>;
-/**
- * Static, table-driven entitlements — the self-host default. Resolves limits
- * from {@link PLAN_LIMITS} keyed by `workspace.plan`, and reads usage counters
- * from the key/value store (the same `usage:<wid>:<metric>:<period>` keys the
- * usage tracker increments, so both agree on the current billing period). The
- * cloud product injects a billing-backed provider.
- */
-export declare class StaticEntitlementsProvider implements EntitlementsProvider {
-    private readonly kv?;
-    private readonly defaultPlan;
-    constructor(kv?: KeyValueStore | undefined, defaultPlan?: string);
-    getLimits(workspace: Workspace): Promise<PlanLimits>;
-    getUsage(workspaceId: string, metric: UsageMetric): Promise<number>;
-    getUsageResetAt(): Promise<number>;
-}
-//# sourceMappingURL=static-entitlements.d.ts.map

package/dist/providers/static-entitlements.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"static-entitlements.d.ts","sourceRoot":"","sources":["../../src/providers/static-entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAclD,CAAC;AAEF;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,oBAAoB;IAEnE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,EAAE,CAAC,EAAE,aAAa,YAAA,EAClB,WAAW,GAAE,MAAmB;IAG7C,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAKpD,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IASnE,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;CAGzC"}

package/dist/providers/static-entitlements.js

@@ -1,55 +0,0 @@
-import { getUsageMetric, usagePeriodResetAt } from '../engine/usage.js';
-/**
- * The default plan limits, lifted from the original `middleware/planLimits.ts`.
- * Self-host deployments typically run the `selfhost` tier (everything
- * unlimited); the trial/free/connect/pro/enterprise tiers are kept so the same code serves a
- * tiered deployment if a workspace's `plan` column is set.
- */
-export const PLAN_LIMITS = {
-    // Hosted anonymous trial: a workspace created without signing in. A one-time
-    // 100-message allowance (`lifetime_messages`, never resets) is enough to prove
-    // agents on two machines can talk; signing in moves the workspace to `free`.
-    // The other limits match `free` so the trial is only ever narrower.
-    trial: { messages: 100, lifetime_messages: 100, agents: 5, file_bytes: 100 * 1024 * 1024, api_calls: 100_000, rate_per_min: 300 },
-    free: { messages: 10_000, agents: 5, file_bytes: 100 * 1024 * 1024, api_calls: 100_000, rate_per_min: 300 },
-    // Short-lived collaboration rooms (Relay Connect): a handful of seats that
-    // poll their inbox continuously, so api_calls dominates while messages stay
-    // low. Sized for a two-seat room polling every few seconds for a full month.
-    connect: { messages: 100_000, agents: 10, file_bytes: 1024 * 1024 * 1024, api_calls: 10_000_000, rate_per_min: 1200 },
-    pro: { messages: 1_000_000, agents: 100, file_bytes: 50 * 1024 * 1024 * 1024, api_calls: 10_000_000, rate_per_min: 6000 },
-    enterprise: { messages: Infinity, agents: Infinity, file_bytes: 500 * 1024 * 1024 * 1024, api_calls: Infinity, rate_per_min: 30000 },
-    selfhost: { messages: Infinity, agents: Infinity, file_bytes: Infinity, api_calls: Infinity, rate_per_min: 30000 },
-};
-/**
- * Static, table-driven entitlements — the self-host default. Resolves limits
- * from {@link PLAN_LIMITS} keyed by `workspace.plan`, and reads usage counters
- * from the key/value store (the same `usage:<wid>:<metric>:<period>` keys the
- * usage tracker increments, so both agree on the current billing period). The
- * cloud product injects a billing-backed provider.
- */
-export class StaticEntitlementsProvider {
-    kv;
-    defaultPlan;
-    constructor(kv, defaultPlan = 'selfhost') {
-        this.kv = kv;
-        this.defaultPlan = defaultPlan;
-    }
-    async getLimits(workspace) {
-        const plan = workspace.plan || this.defaultPlan;
-        return PLAN_LIMITS[plan] ?? PLAN_LIMITS[this.defaultPlan];
-    }
-    async getUsage(workspaceId, metric) {
-        if (!this.kv)
-            return 0;
-        try {
-            return await getUsageMetric(this.kv, workspaceId, metric);
-        }
-        catch {
-            return 0;
-        }
-    }
-    async getUsageResetAt() {
-        return usagePeriodResetAt();
-    }
-}
-//# sourceMappingURL=static-entitlements.js.map

package/dist/providers/static-entitlements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"static-entitlements.js","sourceRoot":"","sources":["../../src/providers/static-entitlements.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAA+B;IACrD,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE;IACjI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE;IAC3G,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE;IACrH,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE;IACzH,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;IACpI,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;CACnH,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IAElB;IACA;IAFnB,YACmB,EAAkB,EAClB,cAAsB,UAAU;QADhC,OAAE,GAAF,EAAE,CAAgB;QAClB,gBAAW,GAAX,WAAW,CAAqB;IAChD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,SAAoB;QAClC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QAChD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,MAAmB;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;CACF"}