@rubytech/create-sitedesk-code 0.1.517 → 0.1.519

package/dist/__tests__/edge-bind-template-wiring.test.js

@@ -0,0 +1,37 @@
+// Nothing else in the repo ties the edge unit template's placeholders to the
+// substitutions in index.ts, so either half can be edited alone and the whole
+// suite stays green. Two silent failures this closes:
+//
+//   - substitution added, template left at a literal value → the replace is a
+//     no-op, the unit still binds 0.0.0.0, and the Task 2082 security fix ships
+//     inert with every pickEdgeBindDecision test passing;
+//   - template placeholder added, substitution forgotten → the unit ships a
+//     literal `Environment=EDGE_HOSTNAME=__EDGE_HOSTNAME__`, which edge.ts's
+//     `process.env.EDGE_HOSTNAME ?? '0.0.0.0'` does NOT catch, because the
+//     variable is present, just not an address, so server.listen() gets a
+//     non-address and the edge restart-loops.
+//
+// Both files are read from disk at runtime, the same pattern as
+// macos-darwin-branch.test.ts and base-toolchain-deps.test.ts.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+// dist/__tests__/edge-bind-template-wiring.test.js → ../../src/index.ts
+const here = dirname(fileURLToPath(import.meta.url));
+const INDEX_TS = resolve(here, "../../src/index.ts");
+// dist/__tests__ → up four is the maxy-code root that holds platform/.
+const EDGE_TEMPLATE = resolve(here, "../../../../platform/templates/systemd/edge.service.template");
+const SRC = readFileSync(INDEX_TS, "utf-8");
+const TEMPLATE = readFileSync(EDGE_TEMPLATE, "utf-8");
+test("edge template: EDGE_HOSTNAME is a placeholder, not a hardcoded address", () => {
+    assert.match(TEMPLATE, /^Environment=EDGE_HOSTNAME=__EDGE_HOSTNAME__$/m, "edge.service.template must take EDGE_HOSTNAME from the installer's bind decision (Task 2082), not hardcode it");
+});
+test("edge template: every placeholder has a matching substitution in index.ts", () => {
+    const placeholders = [...new Set(TEMPLATE.match(/__[A-Z0-9_]+__/g) ?? [])].sort();
+    assert.ok(placeholders.includes("__EDGE_HOSTNAME__"), "template must carry __EDGE_HOSTNAME__");
+    for (const p of placeholders) {
+        assert.ok(SRC.includes(`.replace(/${p}/g,`), `${p} appears in edge.service.template but index.ts has no .replace(/${p}/g, ...) — the rendered unit would ship the literal placeholder`);
+    }
+});

package/dist/__tests__/samba-provision.test.js

@@ -6,7 +6,7 @@
 // style and runs under `node --test dist/__tests__/*.test.js` after build.
 import test from "node:test";
 import assert from "node:assert/strict";
-import { renderBrandStanza, renderGlobalSection, renderFullSmbConf, isPrivateIPv4, pickBindDecision, mergeSmbConf, removeBrandStanza, hasAnyBrandStanza, formatSambaMarker, SAMBA_STEPS, SAMBA_ENABLE_UNITS, } from "../samba-provision.js";
+import { renderBrandStanza, renderGlobalSection, renderFullSmbConf, isPrivateIPv4, pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, mergeSmbConf, removeBrandStanza, hasAnyBrandStanza, formatSambaMarker, SAMBA_STEPS, SAMBA_ENABLE_UNITS, } from "../samba-provision.js";
 // ---------------------------------------------------------------------------
 // Fixtures
 // ---------------------------------------------------------------------------
@@ -49,6 +49,42 @@ const MIXED_PUBLIC_AND_PRIVATE = {
     eth0: [{ address: "178.105.251.82", netmask: "255.255.255.255", family: "IPv4", mac: "96:00:00:00:00:02", internal: false, cidr: "178.105.251.82/32" }],
     wg0: [{ address: "10.8.0.3", netmask: "255.255.255.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: false, cidr: "10.8.0.3/24" }],
 };
+// Hetzner Cloud shape: public eth0 plus a provider private network on ens10.
+// pickBindDecision calls this `lan`; the edge must still bind loopback.
+const HETZNER_CLOUD_PUBLIC_PLUS_PRIVNET = {
+    lo: [{ address: "127.0.0.1", netmask: "255.0.0.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: true, cidr: "127.0.0.1/8" }],
+    eth0: [{ address: "167.233.21.246", netmask: "255.255.255.255", family: "IPv4", mac: "96:00:00:00:00:03", internal: false, cidr: "167.233.21.246/32" }],
+    ens10: [{ address: "10.0.0.2", netmask: "255.255.0.0", family: "IPv4", mac: "96:00:00:00:00:04", internal: false, cidr: "10.0.0.2/16" }],
+};
+// Private wlan0 plus a public address elsewhere. Reaches pickBindDecision's
+// wlan0 early return, which MIXED_PUBLIC_AND_PRIVATE never does because its
+// private address is on wg0.
+const PRIVATE_WLAN0_PLUS_PUBLIC = {
+    lo: [{ address: "127.0.0.1", netmask: "255.0.0.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: true, cidr: "127.0.0.1/8" }],
+    wlan0: [{ address: "192.168.1.50", netmask: "255.255.255.0", family: "IPv4", mac: "aa:bb:cc:dd:ee:ff", internal: false, cidr: "192.168.1.50/24" }],
+    eth0: [{ address: "203.0.113.7", netmask: "255.255.255.255", family: "IPv4", mac: "96:00:00:00:00:05", internal: false, cidr: "203.0.113.7/32" }],
+};
+// Private eth0 plus a public address elsewhere. Reaches the eth0 early return.
+const PRIVATE_ETH0_PLUS_PUBLIC = {
+    lo: [{ address: "127.0.0.1", netmask: "255.0.0.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: true, cidr: "127.0.0.1/8" }],
+    eth0: [{ address: "10.0.0.5", netmask: "255.255.255.0", family: "IPv4", mac: "11:11:11:11:11:11", internal: false, cidr: "10.0.0.5/24" }],
+    ens5: [{ address: "198.51.100.9", netmask: "255.255.255.255", family: "IPv4", mac: "96:00:00:00:00:06", internal: false, cidr: "198.51.100.9/32" }],
+};
+// One interface carrying both a public and a private IPv4. No other fixture in
+// this file has a multi-address interface.
+const ONE_IFACE_PUBLIC_AND_PRIVATE = {
+    lo: [{ address: "127.0.0.1", netmask: "255.0.0.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: true, cidr: "127.0.0.1/8" }],
+    eth0: [
+        { address: "192.0.2.44", netmask: "255.255.255.255", family: "IPv4", mac: "96:00:00:00:00:07", internal: false, cidr: "192.0.2.44/32" },
+        { address: "172.16.4.9", netmask: "255.255.0.0", family: "IPv4", mac: "96:00:00:00:00:07", internal: false, cidr: "172.16.4.9/16" },
+    ],
+};
+// CGNAT-only host. isPrivateIPv4 counts 100.64/10 as private, so this binds
+// 0.0.0.0. Pinned so the outcome is declared rather than incidental.
+const CGNAT_ONLY = {
+    lo: [{ address: "127.0.0.1", netmask: "255.0.0.0", family: "IPv4", mac: "00:00:00:00:00:00", internal: true, cidr: "127.0.0.1/8" }],
+    eth0: [{ address: "100.100.3.14", netmask: "255.192.0.0", family: "IPv4", mac: "96:00:00:00:00:08", internal: false, cidr: "100.100.3.14/10" }],
+};
 // ---------------------------------------------------------------------------
 // isPrivateIPv4 — RFC1918 / CGNAT / link-local classification
 // ---------------------------------------------------------------------------
@@ -107,6 +143,72 @@ test("pickBindDecision: none when the only non-loopback iface has no IPv4", () =
     assert.deepEqual(pickBindDecision(PI_IPV6_ONLY_LAN), { kind: "none" });
 });
 // ---------------------------------------------------------------------------
+// pickEdgeBindDecision — 0.0.0.0 only when private exists and public does not
+// ---------------------------------------------------------------------------
+test("pickEdgeBindDecision: private-only hosts keep the public bind", () => {
+    for (const [name, ifaces] of [
+        ["PI_WLAN0_ONLY", PI_WLAN0_ONLY],
+        ["PI_BOTH_IFACES", PI_BOTH_IFACES],
+        ["PI_ETH0_ONLY", PI_ETH0_ONLY],
+        ["PI_USB0_FALLBACK", PI_USB0_FALLBACK],
+        ["CGNAT_ONLY", CGNAT_ONLY],
+    ]) {
+        assert.equal(pickEdgeBindDecision(ifaces).hostname, "0.0.0.0", name);
+    }
+});
+// The fail-open this task exists to close: pickBindDecision calls every one of
+// these `lan`, so keeping its verdict verbatim would leave the edge public on a
+// cloud box that happens to carry a provider private network.
+test("pickEdgeBindDecision: a public IPv4 forces loopback even when a private one exists", () => {
+    for (const [name, ifaces] of [
+        ["MIXED_PUBLIC_AND_PRIVATE", MIXED_PUBLIC_AND_PRIVATE],
+        ["HETZNER_CLOUD_PUBLIC_PLUS_PRIVNET", HETZNER_CLOUD_PUBLIC_PLUS_PRIVNET],
+        ["PRIVATE_WLAN0_PLUS_PUBLIC", PRIVATE_WLAN0_PLUS_PUBLIC],
+        ["PRIVATE_ETH0_PLUS_PUBLIC", PRIVATE_ETH0_PLUS_PUBLIC],
+        ["ONE_IFACE_PUBLIC_AND_PRIVATE", ONE_IFACE_PUBLIC_AND_PRIVATE],
+    ]) {
+        const d = pickEdgeBindDecision(ifaces);
+        assert.equal(d.hostname, "127.0.0.1", name);
+        assert.equal(d.kind, "lan", `${name} still classifies as lan for smbd`);
+    }
+});
+test("pickEdgeBindDecision: public-only host binds loopback", () => {
+    const d = pickEdgeBindDecision(HETZNER_PUBLIC_ETH0_ONLY);
+    assert.equal(d.hostname, "127.0.0.1");
+    assert.equal(d.kind, "loopback-only");
+});
+// Unlike the Samba call site, which throws on `none`, the edge binds loopback
+// and lets the install finish: a loopback edge still serves the tunnel.
+test("pickEdgeBindDecision: no non-loopback IPv4 binds loopback rather than throwing", () => {
+    for (const ifaces of [PI_LO_ONLY, PI_IPV6_ONLY_LAN]) {
+        const d = pickEdgeBindDecision(ifaces);
+        assert.equal(d.hostname, "127.0.0.1");
+        assert.equal(d.kind, "none");
+        assert.deepEqual(d.privateAddresses, []);
+        assert.deepEqual(d.publicAddresses, []);
+    }
+});
+test("pickEdgeBindDecision: reports the interface and addresses it decided from", () => {
+    assert.deepEqual(pickEdgeBindDecision(MIXED_PUBLIC_AND_PRIVATE), {
+        hostname: "127.0.0.1",
+        kind: "lan",
+        iface: "wg0",
+        publicAddresses: ["178.105.251.82"],
+        privateAddresses: ["10.8.0.3"],
+    });
+    assert.deepEqual(pickEdgeBindDecision(PI_WLAN0_ONLY), {
+        hostname: "0.0.0.0",
+        kind: "lan",
+        iface: "wlan0",
+        publicAddresses: [],
+        privateAddresses: ["192.168.1.50"],
+    });
+});
+test("formatEdgeBindDecision: carries both grep tokens and never leaves an empty field", () => {
+    assert.equal(formatEdgeBindDecision(pickEdgeBindDecision(PI_WLAN0_ONLY)), "[edge-bind-decision] kind=lan iface=wlan0 private=192.168.1.50 public=none EDGE_HOSTNAME=0.0.0.0");
+    assert.equal(formatEdgeBindDecision(pickEdgeBindDecision(HETZNER_PUBLIC_ETH0_ONLY)), "[edge-bind-decision] kind=loopback-only iface=none private=none public=167.233.21.246 EDGE_HOSTNAME=127.0.0.1");
+});
+// ---------------------------------------------------------------------------
 // renderBrandStanza — exact spec match
 // ---------------------------------------------------------------------------
 test("renderBrandStanza emits the spec directives in order", () => {

package/dist/__tests__/tier-flag.test.js

@@ -4,17 +4,20 @@
 import test from "node:test";
 import assert from "node:assert/strict";
 import { validateTierFlag, applyTierToAccountConfig, isValidTier, } from "../tier-flag.js";
-test("validateTierFlag accepts solo|family|pro when commercialMode is false", () => {
+test("validateTierFlag accepts solo|family|pro|max when commercialMode is false", () => {
     assert.equal(validateTierFlag("solo", false), "solo");
     assert.equal(validateTierFlag("family", false), "family");
     assert.equal(validateTierFlag("pro", false), "pro");
+    assert.equal(validateTierFlag("max", false), "max");
 });
-test("validateTierFlag rejects values outside the enum", () => {
-    assert.throws(() => validateTierFlag("enterprise", false), /--tier value must be one of: solo, family, pro/);
-    assert.throws(() => validateTierFlag("max", false), /--tier value must be one of: solo, family, pro/);
+// Task 2063 — both messages are joined from VALID_TIERS, never written out.
+// The stale-payload failure mode is diagnosed from exactly this text, so a
+// hardcoded list would let a stale build print a plausible one.
+test("validateTierFlag rejects values outside the enum, naming every valid tier", () => {
+    assert.throws(() => validateTierFlag("enterprise", false), /--tier value must be one of: solo, family, pro, max \(got: enterprise\)/);
 });
-test("validateTierFlag rejects empty or flag-shaped value", () => {
-    assert.throws(() => validateTierFlag(undefined, false), /--tier requires a value/);
+test("validateTierFlag rejects empty or flag-shaped value, naming every valid tier", () => {
+    assert.throws(() => validateTierFlag(undefined, false), /--tier requires a value \(one of: solo, family, pro, max\)/);
     assert.throws(() => validateTierFlag("", false), /--tier requires a value/);
     assert.throws(() => validateTierFlag("--hostname", false), /--tier requires a value/);
 });
@@ -48,6 +51,7 @@ test("isValidTier narrows correctly", () => {
     assert.equal(isValidTier("solo"), true);
     assert.equal(isValidTier("family"), true);
     assert.equal(isValidTier("pro"), true);
+    assert.equal(isValidTier("max"), true);
     assert.equal(isValidTier("enterprise"), false);
     assert.equal(isValidTier(""), false);
 });

package/dist/index.js

@@ -29,7 +29,7 @@ import { classifyPortHolder } from "./preflight-port-classifier.js";
 import { memoryControllerMissing, cmdlineAlreadyPatched, patchCmdline } from "./cgroup-memory-controller.js";
 import { parsePluginList, computeInstallActions, parseExternalPlugins, findUnregisteredResyncs, discoverMarketplaceCandidateDirs, } from "./lib/plugin-install.js";
 import { findPremiumMcpDirs } from "./lib/premium-mcp-discover.js";
-import { pickBindDecision, mergeSmbConf, formatSambaMarker, SAMBA_ENABLE_UNITS, } from "./samba-provision.js";
+import { pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, mergeSmbConf, formatSambaMarker, SAMBA_ENABLE_UNITS, } from "./samba-provision.js";
 import { networkInterfaces, userInfo, cpus } from "node:os";
 const PAYLOAD_DIR = resolve(import.meta.dirname, "../payload");
 // Brand manifest — read from payload to derive all brand-specific installation values.
@@ -4493,11 +4493,20 @@ WantedBy=default.target
     // VNC_DISPLAY (defined above for the main brand unit) is also stamped into
     // the edge unit so both services agree on the X display. Per-brand display
     // closes the cross-brand cookie leak documented.
+    // Task 2082 — the edge binds 0.0.0.0 only on a host with a private IPv4 and
+    // no public one; anything else binds loopback so a rented server never puts
+    // the admin edge on the internet. Logged with its inputs because a wrong
+    // classification is otherwise invisible until an external probe finds it.
+    // Linux-only by construction: this function returns at the darwin branch
+    // above, and darwin runs no edge process at all.
+    const edgeBind = pickEdgeBindDecision(networkInterfaces());
+    logFile(`  ${formatEdgeBindDecision(edgeBind)}`);
     const edgeTemplatePath = resolve(INSTALL_DIR, "platform/templates/systemd/edge.service.template");
     if (existsSync(edgeTemplatePath)) {
         const edgeServiceContent = readFileSync(edgeTemplatePath, "utf-8")
             .replace(/__INSTALL_DIR__/g, INSTALL_DIR)
             .replace(/__EDGE_PORT__/g, String(PORT))
+            .replace(/__EDGE_HOSTNAME__/g, edgeBind.hostname)
             .replace(/__MAXY_UI_PORT__/g, String(MAXY_UI_INTERNAL_PORT))
             .replace(/__PERSIST_DIR__/g, persistDir)
             .replace(/__VNC_DISPLAY__/g, String(VNC_DISPLAY))
@@ -4505,7 +4514,7 @@ WantedBy=default.target
             .replace(/__CDP_PORT__/g, String(CDP_PORT_BRAND))
             .replace(/__RFB_PORT__/g, String(RFB_PORT));
         writeFileSync(join(serviceDir, edgeUnitName), edgeServiceContent);
-        logFile(`  ${edgeUnitName}: EDGE_PORT=${PORT} MAXY_UI_PORT=${MAXY_UI_INTERNAL_PORT} VNC_DISPLAY=:${VNC_DISPLAY} RFB_PORT=${RFB_PORT} WEBSOCKIFY_PORT=${WEBSOCKIFY_PORT_BRAND} CDP_PORT=${CDP_PORT_BRAND}`);
+        logFile(`  ${edgeUnitName}: EDGE_PORT=${PORT} EDGE_HOSTNAME=${edgeBind.hostname} MAXY_UI_PORT=${MAXY_UI_INTERNAL_PORT} VNC_DISPLAY=:${VNC_DISPLAY} RFB_PORT=${RFB_PORT} WEBSOCKIFY_PORT=${WEBSOCKIFY_PORT_BRAND} CDP_PORT=${CDP_PORT_BRAND}`);
     }
     else {
         console.error(`  WARNING: edge.service.template missing at ${edgeTemplatePath} — VNC transport unavailable`);
@@ -4998,7 +5007,7 @@ if (hostnameIdx !== -1) {
 // ---------------------------------------------------------------------------
 // Founder-side tier-set flags (Task 240).
 //
-// `--tier <solo|family|pro>` stamps account.json.tier directly when the brand
+// `--tier <solo|family|pro|max>` stamps account.json.tier directly when the brand
 // is personal-mode (today's default for both maxy-code and realagent-code).
 // `--entitlement-base64 <b64>` decodes a signed payload and writes it to
 // ~/<BRAND.configDir>/entitlement.json when the brand is commercial-mode.
@@ -5389,8 +5398,14 @@ try {
     console.log("================================================================");
     console.log("");
     if (isLinux()) {
-        console.log(`  Same network (Pi / LAN):  http://${DEVICE_HOSTNAME}.local:${PORT}`);
-        console.log("");
+        // Only true when the edge binds 0.0.0.0. On a host classified to loopback
+        // (Task 2082) nothing answers on the LAN address, so printing this line
+        // there would be a false instruction; the SSH-forward recipe below is the
+        // whole story for that host class.
+        if (pickEdgeBindDecision(networkInterfaces()).hostname === "0.0.0.0") {
+            console.log(`  Same network (Pi / LAN):  http://${DEVICE_HOSTNAME}.local:${PORT}`);
+            console.log("");
+        }
         console.log(`  Remote access (Hetzner / cloud) — on your local machine run:`);
         console.log(`    ssh -L ${PORT}:localhost:${PORT} -L ${BRAND.websockifyPort}:localhost:${BRAND.websockifyPort} admin@<server-ipv4>`);
         console.log(`  Then open:`);

package/dist/samba-provision.js

@@ -14,6 +14,11 @@
 //      stanza intact (peer-brand isolation is the structural invariant).
 //   5. Report whether any brand stanza remains so the uninstall step can
 //      decide whether to apt-purge samba.
+//
+// Despite the file name, the interface classification here serves two
+// consumers, not one: `isPrivateIPv4` and `pickBindDecision` answer where smbd
+// binds, and `pickEdgeBindDecision` (Task 2082) answers where the edge binds.
+// The two deliberately disagree on a dual-homed host; see that function.
 // ---------------------------------------------------------------------------
 // Brand-scoped Samba stanza
 // ---------------------------------------------------------------------------
@@ -152,6 +157,73 @@ export function pickBindDecision(ifaces) {
     const hasNonLoopbackIPv4 = Object.keys(ifaces).some((name) => name !== "lo" && ipv4Addrs(name).length > 0);
     return hasNonLoopbackIPv4 ? { kind: "loopback-only" } : { kind: "none" };
 }
+/**
+ * Decide how the edge should bind, from the same interface table
+ * `pickBindDecision` reads. The edge binds `0.0.0.0` only when the host has at
+ * least one private IPv4 AND zero public IPv4; every other shape binds
+ * `127.0.0.1`. Task 2082.
+ *
+ * Three properties are deliberate, not oversights:
+ *
+ *   1. This DISAGREES with `pickBindDecision` on a dual-homed host. For SMB, a
+ *      private interface alongside a public one keeps the LAN bind (operator
+ *      confirmation, Task 755 — see the MIXED_PUBLIC_AND_PRIVATE fixture). For
+ *      the edge the operator decided the opposite: a cloud server carrying a
+ *      provider private network (Hetzner Cloud's public `eth0` plus private
+ *      `ens10`) must not silently keep a public bind. Both functions are right
+ *      for their own consumer; this is not a rename of the other.
+ *   2. IPv6 is ignored. `pickBindDecision` already filters to IPv4, and
+ *      `0.0.0.0` binds IPv4 only, so a public IPv6 address cannot be exposed by
+ *      this bind under either outcome.
+ *   3. A cloud host presenting its public address by 1:1 NAT is NOT covered.
+ *      Its guest NIC carries only a private address, so this reads a
+ *      private-only host and binds `0.0.0.0` while the box is publicly
+ *      reachable. The scoped signal is a public IPv4 alongside the private one;
+ *      no host in `.docs/install/` behaves that way, and catching it would need
+ *      an outbound probe rather than the interface table.
+ *
+ * `kind: "none"` binds `127.0.0.1` rather than throwing, unlike the Samba call
+ * site, which hard-fails: a share bound to nothing is useless, whereas a
+ * loopback edge still serves the Cloudflare tunnel, which dials
+ * `http://localhost:<port>`. Cost: a host that gains an interface later stays
+ * loopback-only until the installer is re-run, which the decision line makes
+ * visible in the install log.
+ */
+export function pickEdgeBindDecision(ifaces) {
+    const bind = pickBindDecision(ifaces);
+    const publicAddresses = [];
+    const privateAddresses = [];
+    for (const [name, addrs] of Object.entries(ifaces)) {
+        if (name === "lo" || !addrs)
+            continue;
+        for (const a of addrs) {
+            if (a.family !== "IPv4" || a.internal)
+                continue;
+            if (isPrivateIPv4(a.address))
+                privateAddresses.push(a.address);
+            else
+                publicAddresses.push(a.address);
+        }
+    }
+    return {
+        hostname: privateAddresses.length > 0 && publicAddresses.length === 0 ? "0.0.0.0" : "127.0.0.1",
+        kind: bind.kind,
+        iface: bind.kind === "lan" ? bind.lanInterface : null,
+        publicAddresses,
+        privateAddresses,
+    };
+}
+/**
+ * The install-log line for an edge bind decision. The shape is load-bearing:
+ * the task's diagnostic path greps `bind-decision` and `EDGE_HOSTNAME`, so both
+ * tokens must survive any edit. Empty lists render as the literal `none` so a
+ * host with no addresses is distinguishable from a truncated line.
+ */
+export function formatEdgeBindDecision(d) {
+    const list = (xs) => (xs.length === 0 ? "none" : xs.join(","));
+    return `[edge-bind-decision] kind=${d.kind} iface=${d.iface ?? "none"} ` +
+        `private=${list(d.privateAddresses)} public=${list(d.publicAddresses)} EDGE_HOSTNAME=${d.hostname}`;
+}
 // ---------------------------------------------------------------------------
 // smb.conf merge / remove
 // ---------------------------------------------------------------------------

package/dist/tier-flag.js

@@ -1,12 +1,17 @@
 // Pure validation + path helpers for the founder-side tier-set installer flags
 // (Task 240). Two flags wired into the installer at src/index.ts:
-//   --tier <solo|family|pro>      personal-mode (brand.commercialMode === false)
+//   --tier <solo|family|pro|max>  personal-mode (brand.commercialMode === false)
 //   --entitlement-base64 <b64>    commercial-mode (brand.commercialMode === true)
 //
 // Both helpers throw on invalid input; the caller exits non-zero and surfaces the
 // thrown message. No filesystem or console side effects — index.ts owns those.
 import { resolve } from "node:path";
-const VALID_TIERS = new Set(["solo", "family", "pro"]);
+const VALID_TIERS = new Set(["solo", "family", "pro", "max"]);
+// Task 2063 — the list in both thrown messages is JOINED FROM VALID_TIERS,
+// never written out. A device that rejects a valid `--tier` because it carries
+// a stale bundled build is diagnosed from exactly this text, so a hardcoded
+// list would let a stale build print a plausible one and destroy the signal.
+const TIER_LIST = [...VALID_TIERS].join(", ");
 export function isValidTier(value) {
     return VALID_TIERS.has(value);
 }
@@ -15,7 +20,7 @@ export function isValidTier(value) {
  *
  * Throws when:
  *   - raw is missing / starts with `--` (no value supplied after the flag)
- *   - raw is not in {solo, family, pro}
+ *   - raw is not in {solo, family, pro, max}
  *   - brand is commercial-mode (operator must use --entitlement-base64 instead)
  */
 export function validateTierFlag(raw, commercialMode) {
@@ -23,10 +28,10 @@ export function validateTierFlag(raw, commercialMode) {
         throw new Error("--tier is for personal mode. Commercial mode — use --entitlement-base64 to deliver a signed payload.");
     }
     if (!raw || raw.startsWith("--")) {
-        throw new Error("--tier requires a value (one of: solo, family, pro).");
+        throw new Error(`--tier requires a value (one of: ${TIER_LIST}).`);
     }
     if (!isValidTier(raw)) {
-        throw new Error(`--tier value must be one of: solo, family, pro (got: ${raw}).`);
+        throw new Error(`--tier value must be one of: ${TIER_LIST} (got: ${raw}).`);
     }
     return raw;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-sitedesk-code",
-  "version": "0.1.517",
+  "version": "0.1.519",
   "description": "Install SiteDesk — automated back office for independent building contractors",
   "bin": {
     "create-sitedesk-code": "./dist/index.js"

package/payload/platform/lib/entitlement/dist/index.d.ts

@@ -62,6 +62,30 @@ export interface BrandConfigSubset {
     /** True only when this brand has flipped to commercial entitlement enforcement. */
     commercialMode?: boolean;
 }
+/**
+ * Admin seats per tier. Lives beside VALID_TIERS deliberately (Task 2063).
+ * The admin MCP used to hold its own copy and resolve through a silent
+ * `?? MAX_ADMINS_DEFAULT`, so a tier added to the signed-payload registry
+ * but not to that table refused the 6th admin with a message reading as a
+ * limit rather than a bug — no event, and re-running reproduced nothing.
+ * Adding a tier now puts both edits in one file, and the unmapped case is
+ * an event rather than a fallback.
+ */
+export declare const MAX_ADMINS_BY_TIER: Readonly<Record<string, number>>;
+export declare const MAX_ADMINS_DEFAULT = 5;
+/**
+ * Admin seat cap for an effective tier. Emits `op=tier-cap-unmapped` when a
+ * tier that IS SET carries no entry — the standing signal for a tier that
+ * verifies but has no seat count, which is otherwise indistinguishable from a
+ * real limit.
+ *
+ * An EMPTY tier is not that fault and must stay silent. The installer stamps
+ * account.json.tier only when `--tier` is passed, so every default personal
+ * install reaches implicitTrust with `tier: ""` — the commonest shape there
+ * is. Alerting on it would fire this signal on installs where nothing is
+ * wrong, which is the same loss as having no signal at all.
+ */
+export declare function resolveMaxAdmins(tier: string): number;
 /**
  * Resolve effective entitlement for the current install. Sync — Ed25519
  * verify is a CPU-bound primitive on the order of 0.3ms; no async surface.

package/payload/platform/lib/entitlement/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAoBH,eAAO,MAAM,aAAa,qEAAqE,CAAC;AAMhG,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,cAAc,GACd,gBAAgB,GAChB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,2GAA2G;IAC3G,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA0BD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAuBrB;AAED,sEAAsE;AACtE,wBAAgB,UAAU,IAAI,IAAI,CAEjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAoBH,eAAO,MAAM,aAAa,qEAAqE,CAAC;AAMhG,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,cAAc,GACd,gBAAgB,GAChB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,2GAA2G;IAC3G,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA0BD;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK/D,CAAC;AACF,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASrD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,mBAAmB,GAC3B,mBAAmB,CAuBrB;AAED,sEAAsE;AACtE,wBAAgB,UAAU,IAAI,IAAI,CAEjC"}

package/payload/platform/lib/entitlement/dist/index.js

@@ -41,7 +41,8 @@
  * is explicitly out of scope.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PUBKEY_SHA256 = void 0;
+exports.MAX_ADMINS_DEFAULT = exports.MAX_ADMINS_BY_TIER = exports.PUBKEY_SHA256 = void 0;
+exports.resolveMaxAdmins = resolveMaxAdmins;
 exports.resolveEntitlement = resolveEntitlement;
 exports._clearMemo = _clearMemo;
 const node_crypto_1 = require("node:crypto");
@@ -78,7 +79,44 @@ function memoKey(mtimeMs, account) {
     const bucket = Math.floor(Date.now() / 60000);
     return `${mtimeMs}:${bucket}:${account.accountId}:${account.customerEmail ?? ""}`;
 }
-const VALID_TIERS = new Set(["solo", "family", "pro"]);
+const VALID_TIERS = new Set(["solo", "family", "pro", "max"]);
+/**
+ * Admin seats per tier. Lives beside VALID_TIERS deliberately (Task 2063).
+ * The admin MCP used to hold its own copy and resolve through a silent
+ * `?? MAX_ADMINS_DEFAULT`, so a tier added to the signed-payload registry
+ * but not to that table refused the 6th admin with a message reading as a
+ * limit rather than a bug — no event, and re-running reproduced nothing.
+ * Adding a tier now puts both edits in one file, and the unmapped case is
+ * an event rather than a fallback.
+ */
+exports.MAX_ADMINS_BY_TIER = {
+    solo: 1,
+    family: 5,
+    pro: 5,
+    max: 20,
+};
+exports.MAX_ADMINS_DEFAULT = 5;
+/**
+ * Admin seat cap for an effective tier. Emits `op=tier-cap-unmapped` when a
+ * tier that IS SET carries no entry — the standing signal for a tier that
+ * verifies but has no seat count, which is otherwise indistinguishable from a
+ * real limit.
+ *
+ * An EMPTY tier is not that fault and must stay silent. The installer stamps
+ * account.json.tier only when `--tier` is passed, so every default personal
+ * install reaches implicitTrust with `tier: ""` — the commonest shape there
+ * is. Alerting on it would fire this signal on installs where nothing is
+ * wrong, which is the same loss as having no signal at all.
+ */
+function resolveMaxAdmins(tier) {
+    const mapped = exports.MAX_ADMINS_BY_TIER[tier];
+    if (typeof mapped === "number")
+        return mapped;
+    if (tier !== "") {
+        console.error(`[entitlement] op=tier-cap-unmapped tier=${tier} fallback=${exports.MAX_ADMINS_DEFAULT}`);
+    }
+    return exports.MAX_ADMINS_DEFAULT;
+}
 /**
  * Resolve effective entitlement for the current install. Sync — Ed25519
  * verify is a CPU-bound primitive on the order of 0.3ms; no async surface.

package/payload/platform/lib/entitlement/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AAwFH,gDA0BC;AAGD,gCAEC;AArHD,6CAAkF;AAClF,qCAA6D;AAC7D,yCAAoC;AACpC,uDAAsE;AAEtE,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,iFAAiF;AAEjF,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,oEAAoE;AACpE,8EAA8E;AAEjE,QAAA,aAAa,GAAG,kEAAkE,CAAC;AAoChG,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,QAAQ,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,SAAS,UAAU,CAAC,KAAwB;IAC1C,OAAO,IAAA,mBAAO,EAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;AAClF,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,uEAAuE;AACvE,qEAAqE;AACrE,IAAI,IAAI,GAAwD,IAAI,CAAC;AAErE,SAAS,OAAO,CAAC,OAAe,EAAE,OAA4B;IAC5D,uEAAuE;IACvE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,KAAwB,EACxB,OAA4B;IAE5B,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACrE,IAAI,CAAC,IAAA,oBAAU,EAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,eAAe,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAgB,UAAU;IACxB,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,gBAAgB,CACvB,KAAwB,EACxB,eAAuB,EACvB,OAA4B;IAE5B,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,UAAU,KAAK,qBAAa,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;YACrD,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,IAAI,QAAoD,CAAC;IACzD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,QAAQ,CAAC,OAAO,KAAK,IAAI,EACzB,CAAC;QACD,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAkC,CAAC;IAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC;IAExC,uDAAuD;IACvD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,6BAAe,EAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE;YACxD,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,8BAAY,EAAC,OAAyB,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;YACrD,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE;YAC1D,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,oBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE;YACvD,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,iFAAiF;IACjF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrE,IAAI,WAAW,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;gBACrD,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE;YAClD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAE,OAAO,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAC3F,CAAC,CAAC,EAAE,CAAC;IAEP,uBAAuB;IACvB,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QACnB,OAAO,WAAW,CAChB;YACE,IAAI;YACJ,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;SACpB,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC9B,OAAO,WAAW,CAChB;YACE,IAAI;YACJ,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;SACpB,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B;IACjD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,OAAO;QACL,IAAI;QACJ,gBAAgB,EAAE,SAAS;QAC3B,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,gBAAgB,EAAE,EAAE;QACpB,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,OAA4B,EAC5B,UAAkB;IAElB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAClB,MAA2B,EAC3B,MAGQ;IAER,OAAO,CAAC,KAAK,CACX,gCAAgC,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,gBAAgB,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAChL,CAAC;IACF,IAAI,MAAM,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CACX,wCAAwC,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,UAAU,sBAAsB,CAC1G,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,OAAO,CAAC,KAAK,CACX,uCAAuC,MAAM,CAAC,MAAM,WAAW,MAAM,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AA6GH,4CASC;AAUD,gDA0BC;AAGD,gCAEC;AA7JD,6CAAkF;AAClF,qCAA6D;AAC7D,yCAAoC;AACpC,uDAAsE;AAEtE,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,iFAAiF;AAEjF,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,oEAAoE;AACpE,8EAA8E;AAEjE,QAAA,aAAa,GAAG,kEAAkE,CAAC;AAoChG,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,QAAQ,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,SAAS,UAAU,CAAC,KAAwB;IAC1C,OAAO,IAAA,mBAAO,EAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC;AAClF,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,uEAAuE;AACvE,qEAAqE;AACrE,IAAI,IAAI,GAAwD,IAAI,CAAC;AAErE,SAAS,OAAO,CAAC,OAAe,EAAE,OAA4B;IAC5D,uEAAuE;IACvE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnF;;;;;;;;GAQG;AACU,QAAA,kBAAkB,GAAqC;IAClE,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,EAAE;CACR,CAAC;AACW,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,0BAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACX,2CAA2C,IAAI,aAAa,0BAAkB,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,0BAAkB,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,KAAwB,EACxB,OAA4B;IAE5B,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACrE,IAAI,CAAC,IAAA,oBAAU,EAAC,eAAe,CAAC,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,eAAe,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,SAAgB,UAAU;IACxB,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,gBAAgB,CACvB,KAAwB,EACxB,eAAuB,EACvB,OAA4B;IAE5B,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,UAAU,KAAK,qBAAa,EAAE,CAAC;QACjC,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;YACrD,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,IAAI,QAAoD,CAAC;IACzD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IACE,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,QAAQ,CAAC,OAAO,KAAK,IAAI,EACzB,CAAC;QACD,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAkC,CAAC;IAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC;IAExC,uDAAuD;IACvD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,6BAAe,EAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE;YACxD,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,8BAAY,EAAC,OAAyB,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;YACrD,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE;YAC1D,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,oBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,EAAE;YACvD,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,iFAAiF;IACjF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrE,IAAI,WAAW,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO,WAAW,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;gBACrD,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACtD,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE;YAClD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAE,OAAO,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAC3F,CAAC,CAAC,EAAE,CAAC;IAEP,uBAAuB;IACvB,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QACnB,OAAO,WAAW,CAChB;YACE,IAAI;YACJ,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;SACpB,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC9B,OAAO,WAAW,CAChB;YACE,IAAI;YACJ,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;SACpB,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B;IACjD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,OAAO;QACL,IAAI;QACJ,gBAAgB,EAAE,SAAS;QAC3B,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,gBAAgB,EAAE,EAAE;QACpB,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,OAA4B,EAC5B,UAAkB;IAElB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAClB,MAA2B,EAC3B,MAGQ;IAER,OAAO,CAAC,KAAK,CACX,gCAAgC,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,gBAAgB,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAChL,CAAC;IACF,IAAI,MAAM,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CACX,wCAAwC,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,UAAU,sBAAsB,CAC1G,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,OAAO,CAAC,KAAK,CACX,uCAAuC,MAAM,CAAC,MAAM,WAAW,MAAM,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -13,7 +13,7 @@ import { embed } from "../../../../lib/embed-client/dist/index.js";
 import { requirePortEnv } from "../../../../lib/require-port-env/dist/index.js";
 import { deviceUrlBlock } from "../../../../lib/device-url/dist/index.js";
 import { substituteBrandPlaceholders } from "../../../../lib/brand-templating/dist/index.js";
-import { resolveEntitlement } from "../../../../lib/entitlement/dist/index.js";
+import { resolveEntitlement, resolveMaxAdmins } from "../../../../lib/entitlement/dist/index.js";
 import { createHash, randomInt, randomUUID } from "node:crypto";
 import { createConnection } from "node:net";
 import { homedir, hostname as osHostname } from "node:os";
@@ -223,13 +223,6 @@ const USERS_FILE = resolve(CONFIG_DIR, "users.json");
 // Append-only credential-store audit log — same path the admin server resolves
 // from app/lib/paths (CONFIG_DIR == MAXY_DIR for both processes).
 const USERS_AUDIT_LOG = resolve(CONFIG_DIR, "logs", "users-audit.log");
-/** Maximum number of admin users allowed per tier. */
-const MAX_ADMINS_BY_TIER = {
-    solo: 1,
-    family: 5,
-    pro: 5,
-};
-const MAX_ADMINS_DEFAULT = 5;
 function hashPin(pin) {
     return createHash("sha256").update(pin).digest("hex");
 }
@@ -905,7 +898,10 @@ eagerTool(server, "admin-add", "Add a new admin user to this account. Creates a
         const currentAdmins = (config.admins ?? []);
         const entitlement = await currentEntitlement();
         const tier = entitlement.tier;
-        const maxAdmins = MAX_ADMINS_BY_TIER[tier] ?? MAX_ADMINS_DEFAULT;
+        // Task 2063 — the seat table and the tier list live together in the
+        // entitlement lib. A tier with no entry emits op=tier-cap-unmapped there
+        // rather than silently resolving to 5 here, which read as a limit.
+        const maxAdmins = resolveMaxAdmins(tier);
         if (currentAdmins.length >= maxAdmins) {
             return { content: [{ type: "text", text: `${TAG} Admin limit reached (${maxAdmins} for ${tier || "this"} tier). Remove an existing admin before adding a new one.` }], isError: true };
         }