lockin-mcp 1.0.0

package/dist/installer/tunnel-daemon.js

@@ -0,0 +1,129 @@
+import { execFile } from "node:child_process";
+import { access, mkdir, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { promisify } from "node:util";
+import { getInstallDir } from "./platform.js";
+import { resolveCloudflared, cloudflaredQuickTunnelArgs } from "./tunnel.js";
+const execFileAsync = promisify(execFile);
+const LAUNCH_LABEL = "com.lockin.cloudflared";
+function escapeXml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+export async function installCloudflaredLaunchAgent(params) {
+    const installDir = getInstallDir();
+    await mkdir(installDir, { recursive: true });
+    const tokenPath = join(installDir, "tunnel-token");
+    await writeFile(tokenPath, `${params.tunnelToken}\n`, { mode: 0o600 });
+    const cloudflaredBinary = await resolveCloudflared(params.platform, params.autoInstallTunnel);
+    const stdoutLog = join(installDir, "cloudflared.stdout.log");
+    const stderrLog = join(installDir, "cloudflared.stderr.log");
+    const plistPath = join(homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
+    await mkdir(dirname(plistPath), { recursive: true });
+    const home = homedir();
+    const pathEnv = "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:" +
+        `${home}/.local/bin`;
+    const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCH_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${escapeXml(cloudflaredBinary)}</string>
+    <string>tunnel</string>
+    <string>run</string>
+    <string>--token</string>
+    <string>${escapeXml(params.tunnelToken)}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>HOME</key>
+    <string>${escapeXml(home)}</string>
+    <key>PATH</key>
+    <string>${escapeXml(pathEnv)}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>ThrottleInterval</key>
+  <integer>30</integer>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(stdoutLog)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(stderrLog)}</string>
+</dict>
+</plist>
+`;
+    await writeFile(plistPath, plist, { mode: 0o644 });
+    const guiDomain = `gui/${process.getuid?.() ?? process.env.UID ?? "501"}`;
+    await execFileAsync("launchctl", ["bootout", guiDomain, plistPath]).catch(() => undefined);
+    await execFileAsync("launchctl", ["bootstrap", guiDomain, plistPath]);
+    return plistPath;
+}
+export async function installQuickTunnelLaunchAgent(params) {
+    const installDir = getInstallDir();
+    await mkdir(installDir, { recursive: true });
+    const cloudflaredBinary = await resolveCloudflared(params.platform, params.autoInstallTunnel);
+    const stdoutLog = join(installDir, "cloudflared.stdout.log");
+    const stderrLog = join(installDir, "cloudflared.stderr.log");
+    const plistPath = join(homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
+    await mkdir(dirname(plistPath), { recursive: true });
+    const home = homedir();
+    const pathEnv = "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:" +
+        `${home}/.local/bin`;
+    const tunnelArgs = cloudflaredQuickTunnelArgs(params.port);
+    const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCH_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${escapeXml(cloudflaredBinary)}</string>
+    ${tunnelArgs.map((arg) => `<string>${escapeXml(arg)}</string>`).join("\n    ")}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>HOME</key>
+    <string>${escapeXml(home)}</string>
+    <key>PATH</key>
+    <string>${escapeXml(pathEnv)}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>ThrottleInterval</key>
+  <integer>30</integer>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(stdoutLog)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(stderrLog)}</string>
+</dict>
+</plist>
+`;
+    await writeFile(plistPath, plist, { mode: 0o644 });
+    const guiDomain = `gui/${process.getuid?.() ?? process.env.UID ?? "501"}`;
+    await execFileAsync("launchctl", ["bootout", guiDomain, plistPath]).catch(() => undefined);
+    await execFileAsync("launchctl", ["bootstrap", guiDomain, plistPath]);
+    return plistPath;
+}
+export async function isCloudflaredLaunchAgentInstalled() {
+    const plistPath = join(homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
+    try {
+        await access(plistPath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=tunnel-daemon.js.map

package/dist/installer/tunnel-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-daemon.js","sourceRoot":"","sources":["../../src/installer/tunnel-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAInD;IACC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvE,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAChD,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,iBAAiB,CACzB,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,EAAE,EACT,SAAS,EACT,cAAc,EACd,GAAG,YAAY,QAAQ,CACxB,CAAC;IAEF,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GACX,iDAAiD;QACjD,GAAG,IAAI,aAAa,CAAC;IAEvB,MAAM,KAAK,GAAG;;;;;YAKJ,YAAY;;;cAGV,SAAS,CAAC,iBAAiB,CAAC;;;;cAI5B,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;;;;;cAK7B,SAAS,CAAC,IAAI,CAAC;;cAEf,SAAS,CAAC,OAAO,CAAC;;;;;;;;;YASpB,SAAS,CAAC,SAAS,CAAC;;YAEpB,SAAS,CAAC,SAAS,CAAC;;;CAG/B,CAAC;IAEA,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAE1E,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CACvE,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAInD;IACC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAChD,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,iBAAiB,CACzB,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,EAAE,EACT,SAAS,EACT,cAAc,EACd,GAAG,YAAY,QAAQ,CACxB,CAAC;IAEF,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GACX,iDAAiD;QACjD,GAAG,IAAI,aAAa,CAAC;IAEvB,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG;;;;;YAKJ,YAAY;;;cAGV,SAAS,CAAC,iBAAiB,CAAC;MACpC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;;;;;cAKpE,SAAS,CAAC,IAAI,CAAC;;cAEf,SAAS,CAAC,OAAO,CAAC;;;;;;;;;YASpB,SAAS,CAAC,SAAS,CAAC;;YAEpB,SAAS,CAAC,SAAS,CAAC;;;CAG/B,CAAC;IAEA,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAE1E,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CACvE,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACrD,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,EAAE,EACT,SAAS,EACT,cAAc,EACd,GAAG,YAAY,QAAQ,CACxB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/installer/tunnel-provision.d.ts

@@ -0,0 +1,14 @@
+export interface PermanentTunnelResult {
+    hostname: string;
+    tunnelToken: string;
+    sseUrl: string;
+    mcpUrl: string;
+    subdomain: string;
+    manualDnsCname?: string;
+}
+export declare function provisionPermanentTunnel(params: {
+    licenseToken: string;
+    port: number;
+}): Promise<PermanentTunnelResult>;
+export declare function isPermanentTunnelMode(): boolean;
+//# sourceMappingURL=tunnel-provision.d.ts.map

package/dist/installer/tunnel-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-provision.d.ts","sourceRoot":"","sources":["../../src/installer/tunnel-provision.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8BjC;AAED,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C"}

package/dist/installer/tunnel-provision.js

@@ -0,0 +1,31 @@
+const LICENSE_API_URL = process.env.MDB_LICENSE_API_URL ??
+    "http://localhost:3001/api/v1";
+export async function provisionPermanentTunnel(params) {
+    const response = await fetch(`${LICENSE_API_URL}/tunnel/provision`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${params.licenseToken}`,
+        },
+        body: JSON.stringify({ port: params.port }),
+    });
+    const body = (await response.json());
+    if (!response.ok) {
+        throw new Error(body.error ?? `Tunnel provision failed (${response.status})`);
+    }
+    if (!body.hostname || !body.tunnelToken) {
+        throw new Error("Tunnel provision returned incomplete data");
+    }
+    return {
+        hostname: body.hostname,
+        tunnelToken: body.tunnelToken,
+        sseUrl: body.sseUrl,
+        mcpUrl: body.mcpUrl,
+        subdomain: body.subdomain,
+        manualDnsCname: body.manualDnsCname,
+    };
+}
+export function isPermanentTunnelMode() {
+    return process.env.MDB_TUNNEL_MODE === "permanent";
+}
+//# sourceMappingURL=tunnel-provision.js.map

package/dist/installer/tunnel-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-provision.js","sourceRoot":"","sources":["../../src/installer/tunnel-provision.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,mBAAmB;IAC/B,8BAA8B,CAAC;AAWjC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAG9C;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,mBAAmB,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;SAC/C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KAC5C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,4BAA4B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,WAAW,CAAC;AACrD,CAAC"}

package/dist/installer/tunnel.d.ts

@@ -0,0 +1,12 @@
+export declare function waitForHttp(url: string, attempts?: number, delayMs?: number): Promise<void>;
+export declare function verifyPublicTunnel(params: {
+    publicBaseUrl: string;
+    authToken?: string;
+    attempts?: number;
+    delayMs?: number;
+}): Promise<{
+    healthOk: boolean;
+    mcpOk: boolean;
+    detail: string;
+}>;
+//# sourceMappingURL=tunnel.d.ts.map

package/dist/installer/tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/installer/tunnel.ts"],"names":[],"mappings":"AAIA,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,QAAQ,SAAK,EACb,OAAO,SAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6EjE"}

package/dist/installer/tunnel.js

@@ -0,0 +1,91 @@
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export async function waitForHttp(url, attempts = 30, delayMs = 500) {
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        try {
+            const response = await fetch(url);
+            if (response.ok) {
+                return;
+            }
+        }
+        catch {
+            // retry
+        }
+        await sleep(delayMs);
+    }
+    throw new Error(`Service did not become ready at ${url}`);
+}
+export async function verifyPublicTunnel(params) {
+    const base = params.publicBaseUrl.replace(/\/$/, "");
+    const headers = params.authToken
+        ? { Authorization: `Bearer ${params.authToken}` }
+        : {};
+    const attempts = params.attempts ?? 12;
+    const delayMs = params.delayMs ?? 2000;
+    let healthOk = false;
+    let mcpOk = false;
+    let detail = "";
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        healthOk = false;
+        mcpOk = false;
+        detail = "";
+        try {
+            const health = await fetch(`${base}/health`, {
+                signal: AbortSignal.timeout(10_000),
+            });
+            const healthBody = (await health.json());
+            if (healthBody.error === "Device offline") {
+                healthOk = false;
+                detail =
+                    "Relay is up but your Mac is not connected. Keep the installer running until this step passes.";
+            }
+            else {
+                healthOk = health.ok && healthBody.service === "lockin-mcp";
+                if (!health.ok) {
+                    detail = `GET /health returned ${health.status}`;
+                }
+                else if (!healthOk) {
+                    detail =
+                        `GET /health did not reach LockIn MCP (got ${JSON.stringify(healthBody)}).`;
+                }
+            }
+        }
+        catch (error) {
+            detail =
+                error instanceof Error ? error.message : "Could not reach /health through relay";
+        }
+        if (healthOk) {
+            try {
+                const mcp = await fetch(`${base}/mcp`, {
+                    method: "GET",
+                    headers,
+                    signal: AbortSignal.timeout(10_000),
+                });
+                mcpOk = mcp.ok || mcp.status === 405 || mcp.status === 406;
+                if (!mcpOk) {
+                    const body = (await mcp.text()).slice(0, 180);
+                    detail = `GET /mcp returned ${mcp.status}: ${body}`;
+                }
+                else {
+                    detail = "Relay verified (/health and /mcp reachable)";
+                }
+                await mcp.body?.cancel().catch(() => undefined);
+            }
+            catch (error) {
+                detail =
+                    error instanceof Error
+                        ? error.message
+                        : "Could not reach /mcp through relay";
+            }
+        }
+        if (healthOk && mcpOk) {
+            return { healthOk, mcpOk, detail };
+        }
+        if (attempt < attempts - 1) {
+            await sleep(delayMs);
+        }
+    }
+    return { healthOk, mcpOk, detail };
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/installer/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/installer/tunnel.ts"],"names":[],"mappings":"AAAA,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,QAAQ,GAAG,EAAE,EACb,OAAO,GAAG,GAAG;IAEb,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ;QACV,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAgB,MAAM,CAAC,SAAS;QAC3C,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,EAAE,EAAE;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;IAEvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,QAAQ,GAAG,KAAK,CAAC;QACjB,KAAK,GAAG,KAAK,CAAC;QACd,MAAM,GAAG,EAAE,CAAC;QAEZ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE;gBAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAItC,CAAC;YACF,IAAI,UAAU,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,QAAQ,GAAG,KAAK,CAAC;gBACjB,MAAM;oBACJ,+FAA+F,CAAC;YACpG,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,OAAO,KAAK,YAAY,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,GAAG,wBAAwB,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnD,CAAC;qBAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACrB,MAAM;wBACJ,6CAA6C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM;gBACJ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;QACrF,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE;oBACrC,MAAM,EAAE,KAAK;oBACb,OAAO;oBACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,KAAK,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;gBAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC9C,MAAM,GAAG,qBAAqB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,6CAA6C,CAAC;gBACzD,CAAC;gBACD,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM;oBACJ,KAAK,YAAY,KAAK;wBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;wBACf,CAAC,CAAC,oCAAoC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/installer/types.d.ts

@@ -0,0 +1,59 @@
+export type PlatformId = "darwin" | "linux" | "win32" | "unsupported";
+export type LicenseTier = "free" | "pro";
+export interface PlatformInfo {
+    id: PlatformId;
+    name: string;
+    isHostsSupported: boolean;
+}
+export interface LicenseInfo {
+    tier: LicenseTier;
+    method: "license_key" | "browser" | "cached";
+    token?: string;
+    email?: string;
+    expiresAt?: number;
+}
+export interface SitePreset {
+    id: string;
+    label: string;
+    domain: string;
+    defaultSelected: boolean;
+}
+export interface InstallerOptions {
+    nonInteractive: boolean;
+    licenseKey?: string;
+    useBrowserLogin: boolean;
+    port: number;
+    selectedPresetIds: string[];
+    customDomains: string[];
+    skipBlock: boolean;
+    skipTunnel: boolean;
+    skipPoke: boolean;
+    pokeRecipe: boolean;
+    mcpAuthToken?: string;
+}
+export interface InstallerResult {
+    platform: PlatformInfo;
+    license: LicenseInfo;
+    blockedDomains: string[];
+    localMcpUrl: string;
+    relayMcpUrl?: string;
+    mcpAuthToken?: string;
+    pokeIntegrationUrl?: string;
+    pokeRecipeUrl?: string;
+    setupManifestPath: string;
+}
+export interface SetupManifest {
+    version: string;
+    installedAt: string;
+    platform: string;
+    licenseTier: LicenseTier;
+    blockedDomains: string[];
+    localMcpUrl: string;
+    publicMcpUrl?: string;
+    mcpAuthToken?: string;
+    pokeIntegrationUrl?: string;
+    pokeRecipeUrl?: string;
+    relayDeviceId?: string;
+    relayUrl?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/installer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/installer/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AAEtE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/installer/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/installer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/installer/types.ts"],"names":[],"mappings":""}

package/dist/license-check.d.ts

@@ -0,0 +1,12 @@
+import type { LicenseInfo, LicenseTier } from "./installer/types.js";
+export interface LicenseStatusResult {
+    valid: boolean;
+    tier: LicenseTier;
+    email?: string;
+    expiresAt?: number;
+    error?: string;
+}
+export declare function verifyTokenWithBackend(token: string): Promise<LicenseStatusResult>;
+export declare function verifyLicenseInfo(license: LicenseInfo): Promise<LicenseStatusResult>;
+export declare function startLicenseVerificationWatcher(getToken: () => string | undefined, onInvalid: (result: LicenseStatusResult) => void): () => void;
+//# sourceMappingURL=license-check.d.ts.map

package/dist/license-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-check.d.ts","sourceRoot":"","sources":["../src/license-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMrE,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,CAAC,CAyC9B;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAM9B;AAID,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,MAAM,GAAG,SAAS,EAClC,SAAS,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,GAC/C,MAAM,IAAI,CAeZ"}

package/dist/license-check.js

@@ -0,0 +1,59 @@
+const LICENSE_API_URL = process.env.MDB_LICENSE_API_URL ??
+    "http://localhost:3001/api/v1";
+export async function verifyTokenWithBackend(token) {
+    try {
+        const response = await fetch(`${LICENSE_API_URL}/license/status`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${token}`,
+            },
+            body: JSON.stringify({ token }),
+        });
+        if (!response.ok) {
+            const data = (await response.json());
+            return {
+                valid: false,
+                tier: data.tier ?? "free",
+                error: data.error ?? `Verification failed (${response.status})`,
+            };
+        }
+        const data = (await response.json());
+        return {
+            valid: data.valid,
+            tier: data.tier ?? "free",
+            email: data.email,
+            expiresAt: data.expires_at,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Network error";
+        return {
+            valid: false,
+            tier: "free",
+            error: message,
+        };
+    }
+}
+export async function verifyLicenseInfo(license) {
+    if (license.tier !== "pro" || !license.token) {
+        return { valid: license.tier === "pro", tier: license.tier };
+    }
+    return verifyTokenWithBackend(license.token);
+}
+const VERIFY_INTERVAL_MS = 60 * 60 * 1000;
+export function startLicenseVerificationWatcher(getToken, onInvalid) {
+    const interval = setInterval(() => {
+        const token = getToken();
+        if (!token) {
+            return;
+        }
+        void verifyTokenWithBackend(token).then((result) => {
+            if (!result.valid) {
+                onInvalid(result);
+            }
+        });
+    }, VERIFY_INTERVAL_MS);
+    return () => clearInterval(interval);
+}
+//# sourceMappingURL=license-check.js.map

package/dist/license-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-check.js","sourceRoot":"","sources":["../src/license-check.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,mBAAmB;IAC/B,8BAA8B,CAAC;AAUjC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,eAAe,iBAAiB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2C,CAAC;YAC/E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,wBAAwB,QAAQ,CAAC,MAAM,GAAG;aAChE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAoB;IAEpB,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAM,UAAU,+BAA+B,CAC7C,QAAkC,EAClC,SAAgD;IAEhD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,KAAK,sBAAsB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,SAAS,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAEvB,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC"}

package/dist/license-guard.d.ts

@@ -0,0 +1,14 @@
+import { type LicenseStatusResult } from "./license-check.js";
+export interface LicenseGuardOptions {
+    /** When true, destructive tools are allowed without a license (dev only). */
+    skipCheck?: boolean;
+}
+export declare function getPurchaseUrl(): string;
+export declare function licenseRequiredMessage(): string;
+export declare function isProLicenseActive(options?: LicenseGuardOptions): Promise<boolean>;
+export declare function invalidateLicenseCache(): void;
+export declare function requireProLicense(options?: LicenseGuardOptions): Promise<void>;
+export declare function getLicenseStatus(): Promise<LicenseStatusResult & {
+    purchaseUrl: string;
+}>;
+//# sourceMappingURL=license-guard.d.ts.map

package/dist/license-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-guard.d.ts","sourceRoot":"","sources":["../src/license-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAMD,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C;AAED,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAa/F"}

package/dist/license-guard.js

@@ -0,0 +1,56 @@
+import { APP_DOMAIN } from "./brand.js";
+import { loadCachedLicense } from "./installer/license.js";
+import { verifyLicenseInfo, } from "./license-check.js";
+let cachedProValid = null;
+let cachedProCheckedAt = 0;
+const CACHE_TTL_MS = 60_000;
+export function getPurchaseUrl() {
+    const appUrl = process.env.MDB_APP_URL ?? process.env.NEXT_PUBLIC_APP_URL ?? `https://${APP_DOMAIN}`;
+    return `${appUrl.replace(/\/$/, "")}/signup?redirect=checkout`;
+}
+export function licenseRequiredMessage() {
+    return `Pro license required. Purchase at ${getPurchaseUrl()}`;
+}
+export async function isProLicenseActive(options = {}) {
+    if (options.skipCheck || process.env.MDB_SKIP_LICENSE_CHECK === "1") {
+        return true;
+    }
+    const now = Date.now();
+    if (cachedProValid !== null && now - cachedProCheckedAt < CACHE_TTL_MS) {
+        return cachedProValid;
+    }
+    const license = await loadCachedLicense();
+    if (!license || license.tier !== "pro") {
+        cachedProValid = false;
+        cachedProCheckedAt = now;
+        return false;
+    }
+    const status = await verifyLicenseInfo(license);
+    cachedProValid = status.valid && status.tier === "pro";
+    cachedProCheckedAt = now;
+    return cachedProValid;
+}
+export function invalidateLicenseCache() {
+    cachedProValid = null;
+    cachedProCheckedAt = 0;
+}
+export async function requireProLicense(options = {}) {
+    const active = await isProLicenseActive(options);
+    if (!active) {
+        throw new Error(licenseRequiredMessage());
+    }
+}
+export async function getLicenseStatus() {
+    const license = await loadCachedLicense();
+    if (!license) {
+        return {
+            valid: false,
+            tier: "free",
+            error: "No license found",
+            purchaseUrl: getPurchaseUrl(),
+        };
+    }
+    const status = await verifyLicenseInfo(license);
+    return { ...status, purchaseUrl: getPurchaseUrl() };
+}
+//# sourceMappingURL=license-guard.js.map

package/dist/license-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-guard.js","sourceRoot":"","sources":["../src/license-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAO5B,IAAI,cAAc,GAAmB,IAAI,CAAC;AAC1C,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAC3B,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,MAAM,UAAU,cAAc;IAC5B,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,WAAW,UAAU,EAAE,CAAC;IACxF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,qCAAqC,cAAc,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA+B,EAAE;IAEjC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,cAAc,KAAK,IAAI,IAAI,GAAG,GAAG,kBAAkB,GAAG,YAAY,EAAE,CAAC;QACvE,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACvC,cAAc,GAAG,KAAK,CAAC;QACvB,kBAAkB,GAAG,GAAG,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,cAAc,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;IACvD,kBAAkB,GAAG,GAAG,CAAC;IACzB,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,cAAc,GAAG,IAAI,CAAC;IACtB,kBAAkB,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,cAAc,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,CAAC;AACtD,CAAC"}

package/dist/license-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=license-guard.test.d.ts.map

package/dist/license-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-guard.test.d.ts","sourceRoot":"","sources":["../src/license-guard.test.ts"],"names":[],"mappings":""}

package/dist/license-guard.test.js

@@ -0,0 +1,34 @@
+import { describe, expect, it, vi, beforeEach } from "vitest";
+vi.mock("./installer/license.js", () => ({
+    loadCachedLicense: vi.fn(),
+}));
+vi.mock("./license-check.js", () => ({
+    verifyLicenseInfo: vi.fn(),
+}));
+import { loadCachedLicense } from "./installer/license.js";
+import { verifyLicenseInfo } from "./license-check.js";
+import { isProLicenseActive, invalidateLicenseCache } from "./license-guard.js";
+describe("license-guard", () => {
+    beforeEach(() => {
+        invalidateLicenseCache();
+        vi.mocked(loadCachedLicense).mockReset();
+        vi.mocked(verifyLicenseInfo).mockReset();
+    });
+    it("returns false without cached license", async () => {
+        vi.mocked(loadCachedLicense).mockResolvedValue(null);
+        await expect(isProLicenseActive()).resolves.toBe(false);
+    });
+    it("returns true for valid pro license", async () => {
+        vi.mocked(loadCachedLicense).mockResolvedValue({
+            tier: "pro",
+            method: "browser",
+            token: "token",
+        });
+        vi.mocked(verifyLicenseInfo).mockResolvedValue({
+            valid: true,
+            tier: "pro",
+        });
+        await expect(isProLicenseActive()).resolves.toBe(true);
+    });
+});
+//# sourceMappingURL=license-guard.test.js.map

package/dist/license-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-guard.test.js","sourceRoot":"","sources":["../src/license-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEhF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,UAAU,CAAC,GAAG,EAAE;QACd,sBAAsB,EAAE,CAAC;QACzB,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;YAC7C,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;YAC7C,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/relay-client.d.ts

@@ -0,0 +1,32 @@
+export interface RelayClientConfig {
+    relayUrl: string;
+    deviceId: string;
+    deviceToken: string;
+    localPort: number;
+    onLog?: (message: string) => void;
+}
+export declare class RelayClient {
+    private readonly config;
+    private ws;
+    private reconnectDelayMs;
+    private readonly maxReconnectDelayMs;
+    private stopped;
+    private heartbeatTimer;
+    constructor(config: RelayClientConfig);
+    start(): void;
+    stop(): void;
+    private log;
+    private connectUrl;
+    private connect;
+    private scheduleReconnect;
+    private startHeartbeat;
+    private stopHeartbeat;
+    private send;
+    private handleMessage;
+    private localOrigin;
+    private handleHttpBridge;
+    private handleSseBridge;
+}
+export declare function loadRelayConfigFromEnv(): RelayClientConfig | null;
+export declare function startRelayClientFromEnv(onLog?: (message: string) => void): RelayClient | null;
+//# sourceMappingURL=relay-client.d.ts.map

package/dist/relay-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-client.d.ts","sourceRoot":"","sources":["../src/relay-client.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAGD,qBAAa,WAAW;IAOV,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAA+C;gBAExC,MAAM,EAAE,iBAAiB;IAEtD,KAAK,IAAI,IAAI;IAKb,IAAI,IAAI,IAAI;IAUZ,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,UAAU;YASJ,OAAO;IAwCrB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,IAAI;YAME,aAAa;IAkB3B,OAAO,CAAC,WAAW;YAIL,gBAAgB;YAgEhB,eAAe;CAqD9B;AAED,wBAAgB,sBAAsB,IAAI,iBAAiB,GAAG,IAAI,CAqBjE;AAED,wBAAgB,uBAAuB,CACrC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAChC,WAAW,GAAG,IAAI,CASpB"}