openlimiter 1.2.0 → 1.3.1

package/dist/hub-sync.js

@@ -0,0 +1,370 @@
+/**
+ * Building, sending and resuming one sync upload.
+ *
+ * The envelope shape is the version 2 contract the hub reads, the same one
+ * `packages/core/fixtures/sync-envelope-v2.json` shows and the desktop's own
+ * Rust implementation (`apps/desktop/src-tauri/src/account.rs`) already
+ * speaks. That file is read only reference here: this module is its own
+ * implementation of the same cursor rules, in this package's own vocabulary,
+ * because the CLI has no keyring and no long lived process to carry a
+ * resumable upload in memory between runs. The cursor lives on disk instead,
+ * exactly like the config and the session do.
+ *
+ * Three rules carry the whole contract. The sequence is a compare and swap
+ * against the hub's own cursor: `previous_sequence` is what this device
+ * believes the hub holds, and `sequence` is one past it. An upload whose
+ * reply never arrived is retried as the SAME upload, same event id and same
+ * bytes, because the hub deduplicates on the event id and a retry carrying
+ * different bytes under it would be refused rather than deduplicated. And a
+ * conflict that names the hub's own current sequence is adopted once and
+ * retried, never fought.
+ */
+import { randomUUID, createHash } from "node:crypto";
+import path from "node:path";
+import { canonicalJson, freshness, readJsonFileSafely, resolveStateDirectory, writeFileAtomically } from "@openlimiter/core";
+import { parseHubJson, syncSnapshotsRequest } from "./hub.js";
+export const SYNC_CURSOR_FILE_NAME = "openlimiter-sync-cursor.json";
+/** The contract version this build speaks, and nothing else. */
+export const SYNC_SCHEMA_VERSION = 2;
+/**
+ * What this build calls itself on the wire.
+ *
+ * A constant, not a read of `package.json`: this module ships inside a
+ * published package, and a runtime file read is one more thing that can fail
+ * inside a command a status line depends on. See `acquire/identity.ts` in the
+ * core package for the same choice, made for the same reason.
+ */
+export const SYNC_CLIENT_VERSION = "1.3.1";
+/** Most rows one envelope may carry, usage and spend counted together. */
+export const SYNC_MAX_ROWS = 128;
+/** How long an unresolved upload may still be retried as itself. */
+export const SYNC_RESUME_WINDOW_HOURS = 23;
+const ACCOUNT_ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/u;
+/** The meter a budget reading uses, PERCENT unit and all: never a usage window. */
+const EXCLUDED_USAGE_METER = "API_BUDGET_PERCENT";
+/**
+ * A row's account id, exactly as the desktop's own cache reader decides it.
+ *
+ * See `usage_samples_from_cache` in account.rs: absent is "default", the
+ * ordinary single account case, but present and not shaped like an account id
+ * is not quietly corrected to "default" either, because merging a malformed
+ * id into the shared default bucket is its own wrong reading. Null here means
+ * the row this id belongs to is dropped, not defaulted.
+ */
+function accountIdOf(snapshot) {
+    if (snapshot.accountId === undefined)
+        return "default";
+    return ACCOUNT_ID_PATTERN.test(snapshot.accountId) ? snapshot.accountId : null;
+}
+/**
+ * Every usage row this device would upload, from the cache it already writes
+ * for the terminal and the tray.
+ *
+ * Only `PERCENT` rows are usage: a credit or token count is not a usage
+ * fraction and does not belong beside one. `API_BUDGET_PERCENT` is excluded
+ * too, porting the same rule `usage_samples_from_cache` in account.rs reads
+ * its own cache by: it is a budget reading at PERCENT unit, not a usage
+ * window, and sending it is exactly what gets a whole envelope rejected
+ * rather than the one row dropped, since the hub does not recognise it as
+ * usage at all. The Rust reader excludes the Moonshot provider by name too,
+ * as a second, belt and suspenders check; nothing here reproduces that one,
+ * because it cannot fire on this side of the boundary. Moonshot's own budget
+ * reading already carries provider `KIMI` in this build's own vocabulary
+ * (`PROVIDER_CODES` in types.ts has no `MOONSHOT` at all, and
+ * `normalizeMeter` refuses the whole reading for any provider string outside
+ * that set before a `Snapshot` is ever built), so the meter check above is
+ * this side's whole answer, not half of one. A row that fails a bound,
+ * including an unreadable account id, is dropped rather than repaired,
+ * matching the same rule the desktop reads its own cache by.
+ */
+export function usageSamplesFromSnapshots(snapshots, now) {
+    const rows = [];
+    for (const snapshot of snapshots) {
+        if (snapshot.unit !== "PERCENT")
+            continue;
+        if (snapshot.meter === EXCLUDED_USAGE_METER)
+            continue;
+        if (!Number.isFinite(snapshot.value) || snapshot.value < 0 || snapshot.value > 100)
+            continue;
+        const accountId = accountIdOf(snapshot);
+        if (accountId === null)
+            continue;
+        rows.push({
+            account_id: accountId,
+            provider: snapshot.provider,
+            meter: snapshot.meter,
+            window_id: snapshot.meter,
+            usage_percent: snapshot.value,
+            reset_at: snapshot.resetAt,
+            observed_at: snapshot.observedAt,
+            stale: freshness(snapshot.observedAt, snapshot.expiresAt, now) !== "fresh"
+        });
+    }
+    return rows.slice(0, SYNC_MAX_ROWS);
+}
+/** A deterministic, opaque row identifier, stable across resends. */
+function stableSourceId(seed) {
+    const hash = createHash("sha256").update(seed).digest("hex");
+    return [hash.slice(0, 8), hash.slice(8, 12), hash.slice(12, 16), hash.slice(16, 20), hash.slice(20, 32)]
+        .join("-");
+}
+function monthStartDate(observedAt) {
+    const parsed = new Date(observedAt);
+    if (Number.isNaN(parsed.getTime()))
+        return observedAt.slice(0, 10);
+    return new Date(Date.UTC(parsed.getUTCFullYear(), parsed.getUTCMonth(), 1))
+        .toISOString()
+        .slice(0, 10);
+}
+/**
+ * Every spend row the cache has enough to build.
+ *
+ * This build tracks a point in time reading, not a month to date total with a
+ * forecast: those live in the desktop's dedicated spend engine, which this
+ * package does not have. So every row this function builds states its period
+ * honestly as "the start of this month through the moment of this upload"
+ * and never claims a forecast or a completed period it did not compute.
+ * `usedAmount`, `limitAmount` and `currency` travel together or not at all
+ * (see `Snapshot` in the core package), which is what this reads as "the
+ * cache has one".
+ */
+/** The providers the hub accepts an API spend sample for (mirrors API_PROVIDERS in the server contract); every other provider's spend stays local, otherwise one row would void the whole envelope. */
+export const SYNC_API_SPEND_PROVIDERS = new Set(["OPENAI", "ANTHROPIC", "XAI", "OPENROUTER"]);
+export function apiSpendSamplesFromSnapshots(snapshots, envelopeObservedAt) {
+    const rows = [];
+    for (const snapshot of snapshots) {
+        if (!SYNC_API_SPEND_PROVIDERS.has(snapshot.provider))
+            continue;
+        if (snapshot.usedAmount === undefined ||
+            snapshot.limitAmount === undefined ||
+            snapshot.currency === undefined) {
+            continue;
+        }
+        if (!Number.isFinite(snapshot.usedAmount) || snapshot.usedAmount < 0)
+            continue;
+        if (!Number.isFinite(snapshot.limitAmount) || snapshot.limitAmount < 0)
+            continue;
+        const accountId = accountIdOf(snapshot);
+        if (accountId === null)
+            continue;
+        rows.push({
+            source_id: stableSourceId(snapshot.provider + ":" + accountId),
+            account_id: accountId,
+            provider: snapshot.provider,
+            key_label: snapshot.accountLabel ?? accountId,
+            month: monthStartDate(snapshot.observedAt),
+            spend_usd: snapshot.usedAmount,
+            budget_usd: snapshot.limitAmount,
+            source_period: [monthStartDate(snapshot.observedAt) + "T00:00:00.000Z", envelopeObservedAt],
+            currency_source: "PROVIDER_USD",
+            raw_unit_scale: 1,
+            forecast_date: null,
+            forecast_input: null,
+            period_complete: false
+        });
+    }
+    return rows.slice(0, SYNC_MAX_ROWS);
+}
+/**
+ * One envelope from one set of readings.
+ *
+ * A reading observed after the envelope itself, which a clock stepping
+ * backwards between the cache write and this call would produce, is pulled
+ * back to the envelope's own timestamp rather than dropped. See
+ * `build_envelope` in `account.rs` for the same rule.
+ */
+export function buildSyncEnvelope(identity, usageSamples, apiSpendSamples) {
+    const ceiling = Date.parse(identity.observedAt);
+    const usage = usageSamples.map((row) => {
+        const observed = Date.parse(row.observed_at);
+        const later = !Number.isFinite(observed) || (Number.isFinite(ceiling) && observed > ceiling);
+        return later ? { ...row, observed_at: identity.observedAt } : row;
+    });
+    return {
+        event_id: identity.eventId,
+        device_id: identity.deviceId,
+        previous_sequence: identity.previousSequence,
+        sequence: identity.previousSequence + 1,
+        observed_at: identity.observedAt,
+        client_version: SYNC_CLIENT_VERSION,
+        schema_version: SYNC_SCHEMA_VERSION,
+        usage_samples: usage,
+        api_spend_samples: apiSpendSamples
+    };
+}
+function envelopeDigest(envelope) {
+    return createHash("sha256").update(canonicalJson(envelope)).digest("hex");
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function normalizeCursor(value, deviceId) {
+    const empty = { version: 1, deviceId, sequence: 0 };
+    if (!isRecord(value))
+        return empty;
+    if (value["version"] !== 1 || value["deviceId"] !== deviceId)
+        return empty;
+    const sequence = value["sequence"];
+    if (typeof sequence !== "number" || !Number.isInteger(sequence) || sequence < 0)
+        return empty;
+    const pendingEventId = value["pendingEventId"];
+    const pendingSequence = value["pendingSequence"];
+    const pendingObservedAt = value["pendingObservedAt"];
+    const pendingDigest = value["pendingDigest"];
+    const pendingComplete = typeof pendingEventId === "string" &&
+        typeof pendingSequence === "number" &&
+        typeof pendingObservedAt === "string" &&
+        typeof pendingDigest === "string";
+    if (!pendingComplete)
+        return { version: 1, deviceId, sequence };
+    return {
+        version: 1,
+        deviceId,
+        sequence,
+        pendingEventId,
+        pendingSequence,
+        pendingObservedAt,
+        pendingDigest
+    };
+}
+async function loadCursor(directory, deviceId) {
+    const result = await readJsonFileSafely(path.join(directory, SYNC_CURSOR_FILE_NAME));
+    return normalizeCursor(result.ok ? result.value : null, deviceId);
+}
+async function saveCursor(directory, cursor) {
+    await writeFileAtomically(path.join(directory, SYNC_CURSOR_FILE_NAME), canonicalJson(cursor));
+}
+function cursorAwaiting(cursor, envelope) {
+    return {
+        version: 1,
+        deviceId: cursor.deviceId,
+        sequence: cursor.sequence,
+        pendingEventId: envelope.event_id,
+        pendingSequence: envelope.sequence,
+        pendingObservedAt: envelope.observed_at,
+        pendingDigest: envelopeDigest(envelope)
+    };
+}
+function cursorSettled(cursor, sequence) {
+    return { version: 1, deviceId: cursor.deviceId, sequence };
+}
+/**
+ * The upload still in flight, when nothing about the readings has changed.
+ *
+ * See `resumable_upload` in `account.rs`: the same event id, the same
+ * sequence and the same bytes are what the hub deduplicates on, so a retry
+ * has to rebuild the identical envelope or mint a fresh event id instead of
+ * reusing this one under different bytes.
+ */
+function resumableEnvelope(cursor, usageSamples, apiSpendSamples, now) {
+    if (cursor.pendingEventId === undefined ||
+        cursor.pendingSequence === undefined ||
+        cursor.pendingObservedAt === undefined ||
+        cursor.pendingDigest === undefined) {
+        return null;
+    }
+    if (cursor.pendingSequence !== cursor.sequence + 1)
+        return null;
+    const observedAtMs = Date.parse(cursor.pendingObservedAt);
+    const nowMs = Date.parse(now);
+    if (!Number.isFinite(observedAtMs) || !Number.isFinite(nowMs))
+        return null;
+    if (nowMs - observedAtMs >= SYNC_RESUME_WINDOW_HOURS * 3_600_000)
+        return null;
+    const candidate = buildSyncEnvelope({
+        deviceId: cursor.deviceId,
+        eventId: cursor.pendingEventId,
+        previousSequence: cursor.sequence,
+        observedAt: cursor.pendingObservedAt
+    }, usageSamples, apiSpendSamples);
+    return envelopeDigest(candidate) === cursor.pendingDigest ? candidate : null;
+}
+function classifySyncReply(status, body, sentSequence) {
+    if (status === 200 && body["accepted"] === true) {
+        const sequence = typeof body["sequence"] === "number" ? body["sequence"] : sentSequence;
+        const tier = typeof body["tier"] === "string" ? body["tier"] : null;
+        return { kind: "accepted", sequence, tier };
+    }
+    if (status === 409) {
+        const currentSequence = body["current_sequence"];
+        return typeof currentSequence === "number"
+            ? { kind: "reconcile", sequence: currentSequence }
+            : { kind: "rejected" };
+    }
+    if (status >= 400 && status < 500)
+        return { kind: "rejected" };
+    return { kind: "unavailable" };
+}
+/**
+ * One upload, on the version 2 contract, with the same three way ending the
+ * hub's cursor rule requires: accepted advances the cursor, a reply that
+ * never arrived leaves the same upload pending for the next run, and a
+ * conflict names the hub's own sequence and is retried once.
+ */
+export async function runSync(options) {
+    const usageSamples = usageSamplesFromSnapshots(options.snapshots, options.now);
+    const room = Math.max(0, SYNC_MAX_ROWS - usageSamples.length);
+    const apiSpendSamples = apiSpendSamplesFromSnapshots(options.snapshots, options.now).slice(0, room);
+    if (usageSamples.length === 0 && apiSpendSamples.length === 0) {
+        return { kind: "nothing_to_sync" };
+    }
+    let cursor = await loadCursor(options.directory, options.deviceId);
+    let resumed = resumableEnvelope(cursor, usageSamples, apiSpendSamples, options.now);
+    for (let round = 0; round < 2; round += 1) {
+        const envelope = resumed ?? buildSyncEnvelope({
+            deviceId: options.deviceId,
+            eventId: randomUUID(),
+            previousSequence: cursor.sequence,
+            observedAt: options.now
+        }, usageSamples, apiSpendSamples);
+        resumed = null;
+        cursor = cursorAwaiting(cursor, envelope);
+        await saveCursor(options.directory, cursor);
+        const request = syncSnapshotsRequest(options.environment, options.token, envelope);
+        if (request === null)
+            return { kind: "rejected" };
+        let reply;
+        try {
+            reply = await options.transport(request);
+        }
+        catch {
+            try {
+                /* The first failure is a lost reply, not a refusal, so the exact
+                   same bytes go again under the same event id. */
+                reply = await options.transport(request);
+            }
+            catch {
+                return { kind: "unavailable" };
+            }
+        }
+        if (reply.status === 401)
+            return { kind: "revoked" };
+        const outcome = classifySyncReply(reply.status, parseHubJson(reply.body) ?? {}, envelope.sequence);
+        if (outcome.kind === "accepted") {
+            cursor = cursorSettled(cursor, outcome.sequence);
+            await saveCursor(options.directory, cursor);
+            return { kind: "accepted", rows: usageSamples.length + apiSpendSamples.length, tier: outcome.tier };
+        }
+        if (outcome.kind === "reconcile") {
+            cursor = cursorSettled(cursor, outcome.sequence);
+            await saveCursor(options.directory, cursor);
+            if (round === 0)
+                continue;
+            return { kind: "rejected" };
+        }
+        if (outcome.kind === "rejected") {
+            cursor = cursorSettled(cursor, cursor.sequence);
+            await saveCursor(options.directory, cursor);
+            return { kind: "rejected" };
+        }
+        /* Unavailable: the cursor stays exactly as awaiting left it, so the next
+           run resumes this same upload. */
+        return { kind: "unavailable" };
+    }
+    return { kind: "unavailable" };
+}
+/** The state directory's default, exported so a caller need not repeat it. */
+export function defaultSyncDirectory() {
+    return resolveStateDirectory();
+}
+//# sourceMappingURL=hub-sync.js.map

package/dist/hub-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-sync.js","sourceRoot":"","sources":["../src/hub-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EAEpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAqB,MAAM,UAAU,CAAC;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAEpE,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAE3C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAgD3C,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AAExD,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,QAAkB;IACrC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA8B,EAC9B,GAAW;IAEX,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAC1C,IAAI,QAAQ,CAAC,KAAK,KAAK,oBAAoB;YAAE,SAAS;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,GAAG;YAAE,SAAS;QAC7F,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,SAAS,KAAK,IAAI;YAAE,SAAS;QACjC,IAAI,CAAC,IAAI,CAAC;YACR,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,WAAW,EAAE,QAAQ,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,OAAO;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACrG,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;SACxE,WAAW,EAAE;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,uMAAuM;AACvM,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAEnH,MAAM,UAAU,4BAA4B,CAC1C,SAA8B,EAC9B,kBAA0B;IAE1B,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC/D,IACE,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,WAAW,KAAK,SAAS;YAClC,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAC/B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC;YAAE,SAAS;QAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,WAAW,GAAG,CAAC;YAAE,SAAS;QACjF,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,SAAS,KAAK,IAAI;YAAE,SAAS;QACjC,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;YAC9D,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,YAAY,IAAI,SAAS;YAC7C,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1C,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,UAAU,EAAE,QAAQ,CAAC,WAAW;YAChC,aAAa,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,gBAAgB,EAAE,kBAAkB,CAAC;YAC3F,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AACtC,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA0B,EAC1B,YAAoC,EACpC,eAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,iBAAiB,EAAE,QAAQ,CAAC,gBAAgB;QAC5C,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,GAAG,CAAC;QACvC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,cAAc,EAAE,mBAAmB;QACnC,cAAc,EAAE,mBAAmB;QACnC,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,eAAe;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAsB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAYD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,eAAe,GACnB,OAAO,cAAc,KAAK,QAAQ;QAClC,OAAO,eAAe,KAAK,QAAQ;QACnC,OAAO,iBAAiB,KAAK,QAAQ;QACrC,OAAO,aAAa,KAAK,QAAQ,CAAC;IACpC,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,eAAe;QACf,iBAAiB;QACjB,aAAa;KACd,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,QAAgB;IAC3D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrF,OAAO,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAkB;IAC7D,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB,EAAE,QAAsB;IAChE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,QAAQ,CAAC,QAAQ;QACjC,eAAe,EAAE,QAAQ,CAAC,QAAQ;QAClC,iBAAiB,EAAE,QAAQ,CAAC,WAAW;QACvC,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAkB,EAAE,QAAgB;IACzD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,MAAkB,EAClB,YAAoC,EACpC,eAA0C,EAC1C,GAAW;IAEX,IACE,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,MAAM,CAAC,eAAe,KAAK,SAAS;QACpC,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACtC,MAAM,CAAC,aAAa,KAAK,SAAS,EAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,KAAK,GAAG,YAAY,IAAI,wBAAwB,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,SAAS,GAAG,iBAAiB,CACjC;QACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,cAAc;QAC9B,gBAAgB,EAAE,MAAM,CAAC,QAAQ;QACjC,UAAU,EAAE,MAAM,CAAC,iBAAiB;KACrC,EACD,YAAY,EACZ,eAAe,CAChB,CAAC;IACF,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAQD,SAAS,iBAAiB,CACxB,MAAc,EACd,IAA6B,EAC7B,YAAoB;IAEpB,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QACxF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,OAAO,OAAO,eAAe,KAAK,QAAQ;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE;YAClD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC/D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAmBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACnD,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpG,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACpF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,IAAI,iBAAiB,CAC3C;YACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,UAAU,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,QAAQ;YACjC,UAAU,EAAE,OAAO,CAAC,GAAG;SACxB,EACD,YAAY,EACZ,eAAe,CAChB,CAAC;QACF,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH;kEACkD;gBAClD,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACtG,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,CAAC;gBAAE,SAAS;YAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QACD;2CACmC;QACnC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB;IAClC,OAAO,qBAAqB,EAAE,CAAC;AACjC,CAAC"}

package/dist/hub.d.ts

@@ -0,0 +1,60 @@
+/** The project this build talks to, absent a build time override. */
+export declare const DEFAULT_HUB_URL = "https://dsaonzonizvxtxgclwud.supabase.co";
+/** The hub's publishable key: public by design, shipped in every client, overridable through OPENLIMITER_SUPABASE_ANON_KEY. */
+export declare const DEFAULT_HUB_PUBLISHABLE_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImRzYW9uem9uaXp2eHR4Z2Nsd3VkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODczMzQ2NjUsImV4cCI6MjEwMjkxMDY2NX0._HoDeczRScWuN5B_xXUlPFfxGbGj6Je3UodVgVsXjQA";
+/** One request's total budget, connect to last body byte. */
+export declare const HUB_TIMEOUT_MILLISECONDS = 15000;
+/** Largest response body accepted before this build stops reading it. */
+export declare const MAX_HUB_RESPONSE_BYTES = 1048576;
+/** Largest request body this build will ever send to the hub. */
+export declare const MAX_HUB_REQUEST_BYTES = 131072;
+/**
+ * The hub's base address: the project host by default, or any address an
+ * override explicitly names, https only either way.
+ *
+ * An unset override is the project host, always https because the constant
+ * above is. A set override is honoured for whatever host it names, which is
+ * what a non production build or a test needs, but never over plain http: a
+ * device flow's code, a sync upload and a renewal's refresh credential all
+ * travel here, and an override that quietly downgraded any one of those to
+ * http would be a credential leak nobody asked for. An override that fails
+ * this bar, http or simply unreadable as a URL, is treated the same as one
+ * that was never set.
+ */
+export declare function hubBaseUrl(environment: Readonly<Record<string, string | undefined>>): string;
+/** The publishable key: the environment override when set, the shipped default otherwise, and the literal off disables the hub. */
+export declare function hubAnonKey(environment: Readonly<Record<string, string | undefined>>): string;
+/** Whether the hub has enough configuration to be asked anything at all. */
+export declare function hubConfigured(environment: Readonly<Record<string, string | undefined>>): boolean;
+export type HubEndpointId = "cli_login" | "grant_renew" | "sync_snapshots";
+export interface HubRequest {
+    readonly endpoint: HubEndpointId;
+    readonly url: string;
+    readonly method: "POST";
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: string;
+}
+export interface HubReply {
+    readonly status: number;
+    readonly body: string;
+}
+export type HubTransport = (request: HubRequest) => Promise<HubReply>;
+/** The device flow's first call: mint a user code and a device code. */
+export declare function cliLoginStartRequest(environment: Readonly<Record<string, string | undefined>>): HubRequest | null;
+/** The device flow's poll: ask whether somebody has approved the code yet. */
+export declare function cliLoginPollRequest(environment: Readonly<Record<string, string | undefined>>, deviceCode: string): HubRequest | null;
+/** Trade a refresh credential for a new token, rotating the credential. */
+export declare function grantRenewRequest(environment: Readonly<Record<string, string | undefined>>, refreshCredential: string): HubRequest | null;
+/** Upload one sync envelope under the signed in account. */
+export declare function syncSnapshotsRequest(environment: Readonly<Record<string, string | undefined>>, token: string, envelope: unknown): HubRequest | null;
+/**
+ * The transport the product uses, built on the runtime's own fetch.
+ *
+ * Redirects are refused, the body is bounded before it is decoded, and the
+ * whole request lives under one deadline, exactly as the acquisition
+ * transport in the core package does it.
+ */
+export declare function createFetchHubTransport(fetchImplementation?: typeof globalThis.fetch): HubTransport;
+/** Parse a hub response body as JSON, or hand back nothing readable. */
+export declare function parseHubJson(body: string): Record<string, unknown> | null;
+//# sourceMappingURL=hub.d.ts.map

package/dist/hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../src/hub.ts"],"names":[],"mappings":"AAmBA,qEAAqE;AACrE,eAAO,MAAM,eAAe,6CAA6C,CAAC;AAE1E,+HAA+H;AAC/H,eAAO,MAAM,2BAA2B,qNAAqN,CAAC;AAE9P,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,SAAU,CAAC;AAU7C;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,MAAM,CAS5F;AAED,mIAAmI;AACnI,wBAAgB,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,MAAM,CAI5F;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,OAAO,CAEhG;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAQ3E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AA+BtE,wEAAwE;AACxE,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GACxD,UAAU,GAAG,IAAI,CAEnB;AAKD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,UAAU,EAAE,MAAM,GACjB,UAAU,GAAG,IAAI,CAGnB;AAKD,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,iBAAiB,EAAE,MAAM,GACxB,UAAU,GAAG,IAAI,CAMnB;AAKD,4DAA4D;AAC5D,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,OAAO,GAChB,UAAU,GAAG,IAAI,CAGnB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,mBAAmB,GAAE,OAAO,UAAU,CAAC,KAAwB,GAC9D,YAAY,CAwBd;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAUzE"}

package/dist/hub.js

@@ -0,0 +1,178 @@
+/**
+ * The one hosted surface the CLI ever talks to: OpenLimiter's own hub.
+ *
+ * Closed the same way the acquisition transport in the core package is closed:
+ * one function per endpoint, a fixed method and a fixed shape, and a transport
+ * that is handed a request built from that list rather than a caller supplied
+ * URL. Nothing here reaches a provider's own API; that is the acquisition
+ * path's job. This is the sign in, the token renewal and the sync upload, and
+ * nothing else.
+ *
+ * The hub's address is a public project reference, not a secret, and travels
+ * as a constant. The anon key is a Supabase publishable key, which is meant to
+ * ship inside a client, but this build was not handed a literal value for it,
+ * so it is read from the environment at run time. A build with no key
+ * configured answers every hub command with "not configured" rather than
+ * sending a request with an empty credential.
+ */
+import { OPENLIMITER_USER_AGENT } from "@openlimiter/core";
+/** The project this build talks to, absent a build time override. */
+export const DEFAULT_HUB_URL = "https://dsaonzonizvxtxgclwud.supabase.co";
+/** The hub's publishable key: public by design, shipped in every client, overridable through OPENLIMITER_SUPABASE_ANON_KEY. */
+export const DEFAULT_HUB_PUBLISHABLE_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImRzYW9uem9uaXp2eHR4Z2Nsd3VkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODczMzQ2NjUsImV4cCI6MjEwMjkxMDY2NX0._HoDeczRScWuN5B_xXUlPFfxGbGj6Je3UodVgVsXjQA";
+/** One request's total budget, connect to last body byte. */
+export const HUB_TIMEOUT_MILLISECONDS = 15_000;
+/** Largest response body accepted before this build stops reading it. */
+export const MAX_HUB_RESPONSE_BYTES = 1_048_576;
+/** Largest request body this build will ever send to the hub. */
+export const MAX_HUB_REQUEST_BYTES = 131_072;
+function envValue(environment, key) {
+    const value = environment[key];
+    return value === undefined ? "" : value;
+}
+/**
+ * The hub's base address: the project host by default, or any address an
+ * override explicitly names, https only either way.
+ *
+ * An unset override is the project host, always https because the constant
+ * above is. A set override is honoured for whatever host it names, which is
+ * what a non production build or a test needs, but never over plain http: a
+ * device flow's code, a sync upload and a renewal's refresh credential all
+ * travel here, and an override that quietly downgraded any one of those to
+ * http would be a credential leak nobody asked for. An override that fails
+ * this bar, http or simply unreadable as a URL, is treated the same as one
+ * that was never set.
+ */
+export function hubBaseUrl(environment) {
+    const configured = envValue(environment, "OPENLIMITER_SUPABASE_URL");
+    if (configured === "")
+        return DEFAULT_HUB_URL;
+    try {
+        if (new URL(configured).protocol !== "https:")
+            return DEFAULT_HUB_URL;
+    }
+    catch {
+        return DEFAULT_HUB_URL;
+    }
+    return configured;
+}
+/** The publishable key: the environment override when set, the shipped default otherwise, and the literal off disables the hub. */
+export function hubAnonKey(environment) {
+    const configured = envValue(environment, "OPENLIMITER_SUPABASE_ANON_KEY");
+    if (configured === "off")
+        return "";
+    return configured === "" ? DEFAULT_HUB_PUBLISHABLE_KEY : configured;
+}
+/** Whether the hub has enough configuration to be asked anything at all. */
+export function hubConfigured(environment) {
+    return hubAnonKey(environment).length > 0;
+}
+const HUB_FUNCTION_PATHS = {
+    cli_login: "/functions/v1/cli-login",
+    grant_renew: "/functions/v1/pro-service",
+    sync_snapshots: "/functions/v1/sync-snapshots"
+};
+function baseHeaders(anonKey) {
+    return {
+        apikey: anonKey,
+        "content-type": "application/json",
+        accept: "application/json",
+        "user-agent": OPENLIMITER_USER_AGENT
+    };
+}
+function buildRequest(environment, endpoint, body, bearer) {
+    if (!hubConfigured(environment))
+        return null;
+    const encoded = JSON.stringify(body);
+    if (encoded.length > MAX_HUB_REQUEST_BYTES)
+        return null;
+    const headers = baseHeaders(hubAnonKey(environment));
+    if (bearer !== undefined)
+        headers["authorization"] = "Bearer " + bearer;
+    return {
+        endpoint,
+        url: hubBaseUrl(environment).replace(/\/$/u, "") + HUB_FUNCTION_PATHS[endpoint],
+        method: "POST",
+        headers,
+        body: encoded
+    };
+}
+/** The device flow's first call: mint a user code and a device code. */
+export function cliLoginStartRequest(environment) {
+    return buildRequest(environment, "cli_login", { action: "start" });
+}
+/** Shape of a device code this build will still poll with. */
+const DEVICE_CODE_PATTERN = /^[A-Za-z0-9_.-]{8,256}$/u;
+/** The device flow's poll: ask whether somebody has approved the code yet. */
+export function cliLoginPollRequest(environment, deviceCode) {
+    if (!DEVICE_CODE_PATTERN.test(deviceCode))
+        return null;
+    return buildRequest(environment, "cli_login", { action: "poll", device_code: deviceCode });
+}
+/** Shape of a refresh credential this build will still spend. */
+const REFRESH_CREDENTIAL_PATTERN = /^[\x21-\x7E]{16,4096}$/u;
+/** Trade a refresh credential for a new token, rotating the credential. */
+export function grantRenewRequest(environment, refreshCredential) {
+    if (!REFRESH_CREDENTIAL_PATTERN.test(refreshCredential))
+        return null;
+    return buildRequest(environment, "grant_renew", {
+        action: "grant_renew",
+        refresh_credential: refreshCredential
+    });
+}
+/** Shape of a bearer token this build will still send. */
+const BEARER_TOKEN_PATTERN = /^[\x21-\x7E]{16,32768}$/u;
+/** Upload one sync envelope under the signed in account. */
+export function syncSnapshotsRequest(environment, token, envelope) {
+    if (!BEARER_TOKEN_PATTERN.test(token))
+        return null;
+    return buildRequest(environment, "sync_snapshots", envelope, token);
+}
+/**
+ * The transport the product uses, built on the runtime's own fetch.
+ *
+ * Redirects are refused, the body is bounded before it is decoded, and the
+ * whole request lives under one deadline, exactly as the acquisition
+ * transport in the core package does it.
+ */
+export function createFetchHubTransport(fetchImplementation = globalThis.fetch) {
+    return async (request) => {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), HUB_TIMEOUT_MILLISECONDS);
+        try {
+            const response = await fetchImplementation(request.url, {
+                method: request.method,
+                headers: { ...request.headers },
+                redirect: "error",
+                signal: controller.signal,
+                body: request.body
+            });
+            const buffer = await response.arrayBuffer();
+            if (buffer.byteLength > MAX_HUB_RESPONSE_BYTES) {
+                return { status: response.status, body: "" };
+            }
+            return {
+                status: response.status,
+                body: new TextDecoder("utf-8", { fatal: false }).decode(buffer)
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+/** Parse a hub response body as JSON, or hand back nothing readable. */
+export function parseHubJson(body) {
+    if (body.length === 0 || body.length > MAX_HUB_RESPONSE_BYTES)
+        return null;
+    try {
+        const parsed = JSON.parse(body);
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=hub.js.map

package/dist/hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.js","sourceRoot":"","sources":["../src/hub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,0CAA0C,CAAC;AAE1E,+HAA+H;AAC/H,MAAM,CAAC,MAAM,2BAA2B,GAAG,kNAAkN,CAAC;AAE9P,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C,SAAS,QAAQ,CACf,WAAyD,EACzD,GAAW;IAEX,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,WAAyD;IAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IACrE,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,eAAe,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mIAAmI;AACnI,MAAM,UAAU,UAAU,CAAC,WAAyD;IAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IAC1E,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,UAAU,CAAC;AACtE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,WAAyD;IACrF,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5C,CAAC;AAID,MAAM,kBAAkB,GAA4C;IAClE,SAAS,EAAE,yBAAyB;IACpC,WAAW,EAAE,2BAA2B;IACxC,cAAc,EAAE,8BAA8B;CAC/C,CAAC;AAiBF,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO;QACL,MAAM,EAAE,OAAO;QACf,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,sBAAsB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,WAAyD,EACzD,QAAuB,EACvB,IAAa,EACb,MAAe;IAEf,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC;IACxE,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC;QAC/E,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,OAAO;KACd,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAClC,WAAyD;IAEzD,OAAO,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CACjC,WAAyD,EACzD,UAAkB;IAElB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,iEAAiE;AACjE,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAE7D,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAC/B,WAAyD,EACzD,iBAAyB;IAEzB,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,YAAY,CAAC,WAAW,EAAE,aAAa,EAAE;QAC9C,MAAM,EAAE,aAAa;QACrB,kBAAkB,EAAE,iBAAiB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAExD,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB,CAClC,WAAyD,EACzD,KAAa,EACb,QAAiB;IAEjB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,YAAY,CAAC,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,sBAA+C,UAAU,CAAC,KAAK;IAE/D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBAC/B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC/C,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;aAChE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,sBAAsB;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}