@revealui/mcp 0.0.1-pre.0 → 0.1.0

package/configs/README.md

@@ -0,0 +1,77 @@
+# MCP Configuration Templates
+
+This directory contains template configuration files for different MCP clients.
+
+## Available Templates
+
+### `claude-template.json`
+Template for Claude Code / Claude Desktop
+
+**Installation:**
+1. Copy to your Claude config location:
+   - Linux: `~/.config/Claude/claude_desktop_config.json`
+   - macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`
+   - Windows: `%APPDATA%\Claude\claude_desktop_config.json`
+   - CLI: `~/.claude/config.json`
+
+2. Replace `<REPO_PATH>` with absolute path to RevealUI repo
+
+3. Enable desired servers by setting `"enabled": true`
+
+### `cursor-template.json`
+Template for Cursor IDE
+
+**Installation:**
+1. Copy to `.cursor/mcp-config.json` in repo root
+2. Replace `<REPO_PATH>` with absolute path
+3. Enable desired servers
+
+### `vscode-template.json`
+Template for VS Code
+
+**Installation:**
+1. Copy to `.vscode/mcp.json` in repo root
+2. Replace `<REPO_PATH>` with absolute path
+3. Enable desired servers
+
+## Available MCP Servers
+
+| Server | Command | Description |
+|--------|---------|-------------|
+| code-validator | `tsx packages/mcp/src/servers/code-validator.ts` | Validates code against standards |
+| vercel | `pnpm mcp:vercel` | Vercel deployment |
+| stripe | `pnpm mcp:stripe` | Payment processing |
+| neon | `pnpm mcp:neon` | Database operations |
+| supabase | `pnpm mcp:supabase` | Supabase management |
+| playwright | `pnpm mcp:playwright` | Browser automation |
+| next-devtools | `pnpm mcp:next-devtools` | Next.js debugging |
+
+## Quick Setup Script
+
+Run from repo root:
+
+```bash
+# Auto-generate config with correct paths
+pnpm setup:mcp
+
+# Or manually:
+REPO_PATH=$(pwd)
+sed "s|<REPO_PATH>|$REPO_PATH|g" packages/mcp/configs/claude-template.json > ~/.claude/config.json
+```
+
+## Environment Variables
+
+Make sure these are set:
+
+```env
+VERCEL_API_KEY=vercel_...
+STRIPE_SECRET_KEY=sk_test_...
+NEON_API_KEY=neon_...
+SUPABASE_URL=https://....supabase.co
+SUPABASE_ANON_KEY=eyJ...
+```
+
+## See Also
+
+- [MCP Setup Guide](../docs/SETUP.md)
+- [Server Documentation](../docs/servers/)

package/configs/claude-template.json

@@ -0,0 +1,54 @@
+{
+  "$schema": "https://modelcontextprotocol.io/schema/mcp-config.json",
+  "mcpServers": {
+    "revealui-code-validator": {
+      "command": "tsx",
+      "args": ["<REPO_PATH>/packages/mcp/src/servers/code-validator.ts"],
+      "cwd": "<REPO_PATH>",
+      "description": "Code validation - prevents AI-generated technical debt",
+      "enabled": true
+    },
+    "revealui-vercel": {
+      "command": "pnpm",
+      "args": ["mcp:vercel"],
+      "cwd": "<REPO_PATH>",
+      "description": "Vercel deployment and storage management",
+      "enabled": false
+    },
+    "revealui-stripe": {
+      "command": "pnpm",
+      "args": ["mcp:stripe"],
+      "cwd": "<REPO_PATH>",
+      "description": "Stripe payment processing",
+      "enabled": false
+    },
+    "revealui-neon": {
+      "command": "pnpm",
+      "args": ["mcp:neon"],
+      "cwd": "<REPO_PATH>",
+      "description": "NeonDB database operations",
+      "enabled": false
+    },
+    "revealui-supabase": {
+      "command": "pnpm",
+      "args": ["mcp:supabase"],
+      "cwd": "<REPO_PATH>",
+      "description": "Supabase project management",
+      "enabled": false
+    },
+    "revealui-playwright": {
+      "command": "pnpm",
+      "args": ["mcp:playwright"],
+      "cwd": "<REPO_PATH>",
+      "description": "Browser automation",
+      "enabled": false
+    },
+    "revealui-next-devtools": {
+      "command": "pnpm",
+      "args": ["mcp:next-devtools"],
+      "cwd": "<REPO_PATH>",
+      "description": "Next.js debugging",
+      "enabled": false
+    }
+  }
+}

package/dist/packages/core/src/database/ssl-config.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SSL Configuration Utility
+ *
+ * Re-exports from @revealui/utils to maintain backward compatibility.
+ * The actual implementation has been moved to @revealui/utils to break circular dependencies.
+ */
+export type { SSLConfig } from '@revealui/utils/database';
+export { getSSLConfig, validateSSLConfig } from '@revealui/utils/database';
+//# sourceMappingURL=ssl-config.d.ts.map

package/dist/packages/core/src/database/ssl-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-config.d.ts","sourceRoot":"","sources":["../../../../../../core/src/database/ssl-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/packages/core/src/database/ssl-config.js

@@ -0,0 +1,8 @@
+/**
+ * SSL Configuration Utility
+ *
+ * Re-exports from @revealui/utils to maintain backward compatibility.
+ * The actual implementation has been moved to @revealui/utils to break circular dependencies.
+ */
+export { getSSLConfig, validateSSLConfig } from '@revealui/utils/database';
+//# sourceMappingURL=ssl-config.js.map

package/dist/packages/core/src/database/ssl-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-config.js","sourceRoot":"","sources":["../../../../../../core/src/database/ssl-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/packages/core/src/features.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Feature flag system for RevealUI Pro/Enterprise tiers.
+ *
+ * Gates premium features based on the current license tier.
+ * Free (OSS) users get the core CMS framework.
+ * Pro/Enterprise users unlock AI, advanced sync, dashboard, etc.
+ *
+ * @dependencies
+ * - ./license.ts - License validation and tier checking
+ */
+import { type LicenseTier } from './license.js';
+/** All gated features in RevealUI */
+export interface FeatureFlags {
+    /** AI agent system (Pro: 1 provider, Enterprise: all providers) */
+    ai: boolean;
+    /** AI memory system — working + episodic + vector (Max: basic, Enterprise: full) */
+    aiMemory: boolean;
+    /** MCP server integration */
+    mcp: boolean;
+    /** Editor integration daemon */
+    editors: boolean;
+    /** AI harness integration (Claude Code, Cursor, Copilot coordination) */
+    harnesses: boolean;
+    /** Built-in Stripe payment processing */
+    payments: boolean;
+    /** Multi-tenant site management */
+    multiTenant: boolean;
+    /** White-label admin dashboard */
+    whiteLabel: boolean;
+    /** SSO/SAML authentication */
+    sso: boolean;
+    /** BYOK server-side key storage (Max+) */
+    byokServerSide: boolean;
+    /** Multi-provider AI (Max+: 2 providers, Enterprise: all providers) */
+    aiMultiProvider: boolean;
+    /** Audit logging and compliance trail */
+    auditLog: boolean;
+    /** Full real-time sync with conflict resolution */
+    advancedSync: boolean;
+    /** Monitoring dashboard */
+    dashboard: boolean;
+    /** Custom domain mapping */
+    customDomain: boolean;
+    /** Analytics and conversion tracking */
+    analytics: boolean;
+}
+/**
+ * Returns the current feature flags based on the active license tier.
+ *
+ * @example
+ * ```typescript
+ * import { getFeatures } from '@revealui/core/features'
+ *
+ * const features = getFeatures()
+ * if (features.ai) {
+ *   // Enable AI agent system
+ * }
+ * ```
+ */
+export declare function getFeatures(): FeatureFlags;
+/**
+ * Check if a specific feature is enabled.
+ *
+ * @example
+ * ```typescript
+ * import { isFeatureEnabled } from '@revealui/core/features'
+ *
+ * if (isFeatureEnabled('ai')) {
+ *   // AI is available
+ * }
+ * ```
+ */
+export declare function isFeatureEnabled(feature: keyof FeatureFlags): boolean;
+/**
+ * Returns all features available at a given tier (useful for pricing pages).
+ */
+export declare function getFeaturesForTier(tier: LicenseTier): FeatureFlags;
+/**
+ * Returns the minimum tier required for a given feature.
+ */
+export declare function getRequiredTier(feature: keyof FeatureFlags): LicenseTier;
+/**
+ * Returns the current license tier. Convenience re-export.
+ */
+export { getCurrentTier } from './license.js';
+//# sourceMappingURL=features.d.ts.map

package/dist/packages/core/src/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../../../../core/src/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAE3D,qCAAqC;AACrC,MAAM,WAAW,YAAY;IAC3B,mEAAmE;IACnE,EAAE,EAAE,OAAO,CAAA;IACX,oFAAoF;IACpF,QAAQ,EAAE,OAAO,CAAA;IACjB,6BAA6B;IAC7B,GAAG,EAAE,OAAO,CAAA;IACZ,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAA;IAClB,yCAAyC;IACzC,QAAQ,EAAE,OAAO,CAAA;IACjB,mCAAmC;IACnC,WAAW,EAAE,OAAO,CAAA;IACpB,kCAAkC;IAClC,UAAU,EAAE,OAAO,CAAA;IACnB,8BAA8B;IAC9B,GAAG,EAAE,OAAO,CAAA;IACZ,0CAA0C;IAC1C,cAAc,EAAE,OAAO,CAAA;IACvB,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAA;IACxB,yCAAyC;IACzC,QAAQ,EAAE,OAAO,CAAA;IACjB,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAA;IACrB,2BAA2B;IAC3B,SAAS,EAAE,OAAO,CAAA;IAClB,4BAA4B;IAC5B,YAAY,EAAE,OAAO,CAAA;IACrB,wCAAwC;IACxC,SAAS,EAAE,OAAO,CAAA;CACnB;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,IAAI,YAAY,CAQ1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,YAAY,GAAG,OAAO,CAGrE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,CAelE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,YAAY,GAAG,WAAW,CAExE;AAED;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}

package/dist/packages/core/src/features.js

@@ -0,0 +1,93 @@
+/**
+ * Feature flag system for RevealUI Pro/Enterprise tiers.
+ *
+ * Gates premium features based on the current license tier.
+ * Free (OSS) users get the core CMS framework.
+ * Pro/Enterprise users unlock AI, advanced sync, dashboard, etc.
+ *
+ * @dependencies
+ * - ./license.ts - License validation and tier checking
+ */
+import { isLicensed } from './license.js';
+/** Feature-to-tier mapping: minimum tier required for each feature */
+const featureTierMap = {
+    ai: 'pro',
+    mcp: 'pro',
+    editors: 'pro',
+    harnesses: 'pro',
+    payments: 'pro',
+    advancedSync: 'pro',
+    dashboard: 'pro',
+    customDomain: 'pro',
+    analytics: 'pro',
+    aiMemory: 'max',
+    byokServerSide: 'max',
+    aiMultiProvider: 'max',
+    auditLog: 'max',
+    multiTenant: 'enterprise',
+    whiteLabel: 'enterprise',
+    sso: 'enterprise',
+};
+/**
+ * Returns the current feature flags based on the active license tier.
+ *
+ * @example
+ * ```typescript
+ * import { getFeatures } from '@revealui/core/features'
+ *
+ * const features = getFeatures()
+ * if (features.ai) {
+ *   // Enable AI agent system
+ * }
+ * ```
+ */
+export function getFeatures() {
+    const flags = {};
+    for (const [feature, requiredTier] of Object.entries(featureTierMap)) {
+        flags[feature] = isLicensed(requiredTier);
+    }
+    return flags;
+}
+/**
+ * Check if a specific feature is enabled.
+ *
+ * @example
+ * ```typescript
+ * import { isFeatureEnabled } from '@revealui/core/features'
+ *
+ * if (isFeatureEnabled('ai')) {
+ *   // AI is available
+ * }
+ * ```
+ */
+export function isFeatureEnabled(feature) {
+    const requiredTier = featureTierMap[feature];
+    return isLicensed(requiredTier);
+}
+/**
+ * Returns all features available at a given tier (useful for pricing pages).
+ */
+export function getFeaturesForTier(tier) {
+    const tierRank = {
+        free: 0,
+        pro: 1,
+        max: 2,
+        enterprise: 3,
+    };
+    const flags = {};
+    for (const [feature, requiredTier] of Object.entries(featureTierMap)) {
+        flags[feature] = tierRank[tier] >= tierRank[requiredTier];
+    }
+    return flags;
+}
+/**
+ * Returns the minimum tier required for a given feature.
+ */
+export function getRequiredTier(feature) {
+    return featureTierMap[feature];
+}
+/**
+ * Returns the current license tier. Convenience re-export.
+ */
+export { getCurrentTier } from './license.js';
+//# sourceMappingURL=features.js.map

package/dist/packages/core/src/features.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.js","sourceRoot":"","sources":["../../../../../core/src/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAA;AAsC3D,sEAAsE;AACtE,MAAM,cAAc,GAA4C;IAC9D,EAAE,EAAE,KAAK;IACT,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,KAAK;IACtB,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,YAAY;IACzB,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,YAAY;CAClB,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,EAAkB,CAAA;IAEhC,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,KAAK,CAAC,OAA6B,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACjE,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAC5C,OAAO,UAAU,CAAC,YAAY,CAAC,CAAA;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAiB;IAClD,MAAM,QAAQ,GAAgC;QAC5C,IAAI,EAAE,CAAC;QACP,GAAG,EAAE,CAAC;QACN,GAAG,EAAE,CAAC;QACN,UAAU,EAAE,CAAC;KACd,CAAA;IAED,MAAM,KAAK,GAAG,EAAkB,CAAA;IAEhC,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,KAAK,CAAC,OAA6B,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAA;IACjF,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}

package/dist/packages/core/src/license.d.ts

@@ -0,0 +1,75 @@
+/**
+ * License validation for RevealUI Pro/Enterprise tiers.
+ *
+ * @dependencies
+ * - jose - JWT token verification (Web Crypto API)
+ * - zod - Schema validation for license payloads
+ */
+import { z } from 'zod';
+/** Available license tiers */
+export type LicenseTier = 'free' | 'pro' | 'max' | 'enterprise';
+/** Decoded license payload schema */
+declare const licensePayloadSchema: z.ZodObject<{
+    tier: z.ZodEnum<{
+        pro: "pro";
+        max: "max";
+        enterprise: "enterprise";
+    }>;
+    customerId: z.ZodString;
+    domains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    maxSites: z.ZodOptional<z.ZodNumber>;
+    maxUsers: z.ZodOptional<z.ZodNumber>;
+    iat: z.ZodOptional<z.ZodNumber>;
+    exp: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type LicensePayload = z.infer<typeof licensePayloadSchema>;
+/**
+ * Validates a license key JWT and returns the decoded payload.
+ * Returns null if the key is invalid, expired, or missing.
+ */
+export declare function validateLicenseKey(licenseKey: string, publicKey: string): Promise<LicensePayload | null>;
+/**
+ * Initialize the license system. Call once at application startup.
+ * Reads REVEALUI_LICENSE_KEY and REVEALUI_LICENSE_PUBLIC_KEY from environment.
+ *
+ * @returns The resolved license tier
+ */
+export declare function initializeLicense(): Promise<LicenseTier>;
+/**
+ * Returns the current license tier.
+ * If the license hasn't been initialized, returns 'free'.
+ */
+export declare function getCurrentTier(): LicenseTier;
+/**
+ * Returns the full license payload, or null if no valid license.
+ */
+export declare function getLicensePayload(): LicensePayload | null;
+/**
+ * Checks whether the current license is at least the given tier.
+ * Also validates that the license has not expired (checks JWT exp claim).
+ */
+export declare function isLicensed(requiredTier: LicenseTier): boolean;
+/**
+ * Returns the maximum number of sites allowed by the current license.
+ */
+export declare function getMaxSites(): number;
+/**
+ * Returns the maximum number of users/editors allowed by the current license.
+ */
+export declare function getMaxUsers(): number;
+/**
+ * Generates a signed license key JWT.
+ * This is a server-only function — requires the private key.
+ *
+ * @param payload - License payload (tier, customerId, limits)
+ * @param privateKey - RS256 or ES256 private key (PEM format)
+ * @param expiresInSeconds - JWT expiration in seconds. Defaults to 1 year.
+ * @returns Signed JWT string
+ */
+export declare function generateLicenseKey(payload: Omit<LicensePayload, 'iat' | 'exp'>, privateKey: string, expiresInSeconds?: number): Promise<string>;
+/**
+ * Reset license state. Primarily for testing.
+ */
+export declare function resetLicenseState(): void;
+export {};
+//# sourceMappingURL=license.d.ts.map

package/dist/packages/core/src/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../../../../core/src/license.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,YAAY,CAAA;AAE/D,qCAAqC;AACrC,QAAA,MAAM,oBAAoB;;;;;;;;;;;;iBAexB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AA+BjE;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAgBhC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,WAAW,CAAC,CAuB9D;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,WAAW,GAAG,OAAO,CAoB7D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAKpC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAKpC;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,CAAC,EAC5C,UAAU,EAAE,MAAM,EAClB,gBAAgB,SAAqB,GACpC,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/packages/core/src/license.js

@@ -0,0 +1,174 @@
+/**
+ * License validation for RevealUI Pro/Enterprise tiers.
+ *
+ * @dependencies
+ * - jose - JWT token verification (Web Crypto API)
+ * - zod - Schema validation for license payloads
+ */
+import { importPKCS8, importSPKI, jwtVerify, SignJWT } from 'jose';
+import { z } from 'zod';
+/** Decoded license payload schema */
+const licensePayloadSchema = z.object({
+    /** License tier */
+    tier: z.enum(['pro', 'max', 'enterprise']),
+    /** Organization or customer ID */
+    customerId: z.string(),
+    /** Licensed domain(s) */
+    domains: z.array(z.string()).optional(),
+    /** Maximum number of sites allowed */
+    maxSites: z.number().int().positive().optional(),
+    /** Maximum number of users/editors allowed */
+    maxUsers: z.number().int().positive().optional(),
+    /** License issued-at timestamp */
+    iat: z.number().optional(),
+    /** License expiration timestamp */
+    exp: z.number().optional(),
+});
+let cachedState = {
+    tier: 'free',
+    payload: null,
+    validatedAt: null,
+};
+/**
+ * The public key used to verify license JWTs.
+ * In production, this is fetched from the license server.
+ * For local development, it reads from REVEALUI_LICENSE_PUBLIC_KEY env var.
+ */
+function getPublicKey() {
+    return process.env.REVEALUI_LICENSE_PUBLIC_KEY ?? null;
+}
+/**
+ * Reads the license key from environment.
+ */
+function getLicenseKey() {
+    return process.env.REVEALUI_LICENSE_KEY ?? null;
+}
+/**
+ * Validates a license key JWT and returns the decoded payload.
+ * Returns null if the key is invalid, expired, or missing.
+ */
+export async function validateLicenseKey(licenseKey, publicKey) {
+    try {
+        const key = await importSPKI(publicKey, 'RS256');
+        const { payload } = await jwtVerify(licenseKey, key, {
+            algorithms: ['RS256', 'ES256'],
+        });
+        const result = licensePayloadSchema.safeParse(payload);
+        if (!result.success) {
+            return null;
+        }
+        return result.data;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Initialize the license system. Call once at application startup.
+ * Reads REVEALUI_LICENSE_KEY and REVEALUI_LICENSE_PUBLIC_KEY from environment.
+ *
+ * @returns The resolved license tier
+ */
+export async function initializeLicense() {
+    const licenseKey = getLicenseKey();
+    const publicKey = getPublicKey();
+    if (!(licenseKey && publicKey)) {
+        cachedState = { tier: 'free', payload: null, validatedAt: Date.now() };
+        return 'free';
+    }
+    const payload = await validateLicenseKey(licenseKey, publicKey);
+    if (!payload) {
+        cachedState = { tier: 'free', payload: null, validatedAt: Date.now() };
+        return 'free';
+    }
+    cachedState = {
+        tier: payload.tier,
+        payload,
+        validatedAt: Date.now(),
+    };
+    return payload.tier;
+}
+/**
+ * Returns the current license tier.
+ * If the license hasn't been initialized, returns 'free'.
+ */
+export function getCurrentTier() {
+    return cachedState.tier;
+}
+/**
+ * Returns the full license payload, or null if no valid license.
+ */
+export function getLicensePayload() {
+    return cachedState.payload;
+}
+/**
+ * Checks whether the current license is at least the given tier.
+ * Also validates that the license has not expired (checks JWT exp claim).
+ */
+export function isLicensed(requiredTier) {
+    const tierRank = {
+        free: 0,
+        pro: 1,
+        max: 2,
+        enterprise: 3,
+    };
+    // Free tier is always available
+    if (requiredTier === 'free')
+        return true;
+    // Check expiration if present
+    if (cachedState.payload?.exp) {
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        if (cachedState.payload.exp < nowSeconds) {
+            return false;
+        }
+    }
+    return tierRank[cachedState.tier] >= tierRank[requiredTier];
+}
+/**
+ * Returns the maximum number of sites allowed by the current license.
+ */
+export function getMaxSites() {
+    if (cachedState.tier === 'enterprise')
+        return Infinity;
+    if (cachedState.tier === 'max')
+        return cachedState.payload?.maxSites ?? 15;
+    if (cachedState.tier === 'pro')
+        return cachedState.payload?.maxSites ?? 5;
+    return 1;
+}
+/**
+ * Returns the maximum number of users/editors allowed by the current license.
+ */
+export function getMaxUsers() {
+    if (cachedState.tier === 'enterprise')
+        return Infinity;
+    if (cachedState.tier === 'max')
+        return cachedState.payload?.maxUsers ?? 100;
+    if (cachedState.tier === 'pro')
+        return cachedState.payload?.maxUsers ?? 25;
+    return 3;
+}
+/**
+ * Generates a signed license key JWT.
+ * This is a server-only function — requires the private key.
+ *
+ * @param payload - License payload (tier, customerId, limits)
+ * @param privateKey - RS256 or ES256 private key (PEM format)
+ * @param expiresInSeconds - JWT expiration in seconds. Defaults to 1 year.
+ * @returns Signed JWT string
+ */
+export async function generateLicenseKey(payload, privateKey, expiresInSeconds = 365 * 24 * 60 * 60) {
+    const key = await importPKCS8(privateKey, 'RS256');
+    return new SignJWT({ ...payload })
+        .setProtectedHeader({ alg: 'RS256' })
+        .setIssuedAt()
+        .setExpirationTime(`${expiresInSeconds}s`)
+        .sign(key);
+}
+/**
+ * Reset license state. Primarily for testing.
+ */
+export function resetLicenseState() {
+    cachedState = { tier: 'free', payload: null, validatedAt: null };
+}
+//# sourceMappingURL=license.js.map

package/dist/packages/core/src/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../../../../core/src/license.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,qCAAqC;AACrC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,mBAAmB;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1C,kCAAkC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,yBAAyB;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,sCAAsC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,8CAA8C;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,kCAAkC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,mCAAmC;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAA;AAWF,IAAI,WAAW,GAAiB;IAC9B,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,IAAI;CAClB,CAAA;AAED;;;;GAIG;AACH,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAA;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAA;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE;YACnD,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAC/B,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAA;IAClC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAA;IAEhC,IAAI,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC,EAAE,CAAC;QAC/B,WAAW,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QACtE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAE/D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,WAAW,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QACtE,OAAO,MAAM,CAAA;IACf,CAAC;IAED,WAAW,GAAG;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAA;IAED,OAAO,OAAO,CAAC,IAAI,CAAA;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,IAAI,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,OAAO,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,YAAyB;IAClD,MAAM,QAAQ,GAAgC;QAC5C,IAAI,EAAE,CAAC;QACP,GAAG,EAAE,CAAC;QACN,GAAG,EAAE,CAAC;QACN,UAAU,EAAE,CAAC;KACd,CAAA;IAED,gCAAgC;IAChC,IAAI,YAAY,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAExC,8BAA8B;IAC9B,IAAI,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAChD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC;YACzC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAA;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAA;IACtD,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAA;IAC1E,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,QAAQ,CAAA;IACtD,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAA;IAC3E,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAA;IAC1E,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA4C,EAC5C,UAAkB,EAClB,gBAAgB,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IAErC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAClD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC;SACzC,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,WAAW,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;AAClE,CAAC"}