tinybeeai 0.0.0-stage → 0.16.1

package/dist/hive/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/hive/auth.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,gGAAgG;AAChG,qFAAqF;AACrF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAmB,MAAM,cAAc,CAAC;AAEvF,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AA0BhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhF,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAClJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;AAEvH,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAwB,CAAC;AAC7F,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAwB,CAAC;AACnG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,QAA6D,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,OAAO,CAAC,8GAA8G,CAAC,CAAC,GAAG,CAC3H,GAAG,EACH,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,IAAI,CAAC,EAAE,CACR,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,CAChH,KAAK,CAAC,KAAK,CAAC,EACZ,KAAK,EACL,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,GAAG,EACH,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAE,CAAC;AAC7B,CAAC;AAED,4HAA4H;AAC5H,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAiB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACxE,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,GAAG,GAAG,cAAc,CAAC,SAAS,GAAG,IAAI,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAkB,CAAC;IAChI,IAAI,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK;QAClC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,EAAE,4EAA4E,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,kEAAkE;IAClE,CAAC,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC,CAAC,OAAO,CAAC,kGAAkG,CAAC,CAAC,GAAG,CAC/G,KAAK,CAAC,KAAK,CAAC,EACZ,KAAK,EACL,GAAG,CAAC,IAAI,CAAC,EACT,GAAG,GAAG,WAAW,GAAG,IAAI,EACxB,GAAG,CACJ,CAAC;IACF,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5E,qHAAqH;IACrH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,OAAO,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxI,CAAC;AASD,yGAAyG;AACzG,MAAM,UAAU,SAAS,CAAC,QAAiB,EAAE,OAAgB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,wCAAwC,CAAC,CAAC;IAC7G,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,uHAAuH,CAAC,CAAC,GAAG,CAAC,KAAK,CACpI,CAAC;IACrB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,uDAAuD,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QACzB,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,2CAA2C,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CACxG,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,GAAG,EACH,GAAG,CAAC,EAAE,CACP,CAAC;QACF,IAAI,QAAQ,IAAI,gBAAgB;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,2CAA2C,CAAC,CAAC;QACvH,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,uBAAuB,gBAAgB,GAAG,QAAQ,cAAc,CAAC,CAAC;IAC5G,CAAC;IACD,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,QAAsF,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC/I,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,yBAAyB,EAAE,oDAAoD,CAAC,CAAC;IACvI,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpH,CAAC;AAED,mHAAmH;AACnH,SAAS,UAAU,CAAC,IAAa;IAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,WAAW,CAC7B,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,EACxH,EAAE,GAAG,EAAE,CACR,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACpE,MAAM,EAAE;SACL,OAAO,CAAC,iGAAiG,CAAC;SAC1G,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,GAAG,eAAe,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACnF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1I,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,cAAc,CAAC,QAAiB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACxE,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;IACzF,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,iFAAiF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAC9B,CAAC;IAC1F,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QAC3D,mEAAmE;QACnE,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;YAAE,CAAC,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpJ,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,CAAC,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IACzE,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAiB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACjE,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7H,CAAC"}

package/dist/hive/billing.js

@@ -0,0 +1,278 @@
+// TinyBee Hive, Phase 6: plans, the 30-day trial, bundled-token metering and top-ups (docs/tinybee/01-PRD.md
+// section 5, 02 section 7, 03 sections 9-10). Plan state lives on the tenant row; every relayed model call
+// adds a relay_usage row with its token counts and nothing else. A trial that ends without a paid plan
+// flips the tenant to `suspended`: the Bee keeps running on the laptop, remote access (tunnel) and routine
+// pushes pause, and the app shows "Local only" with an Upgrade button. Payment goes through a provider
+// interface; the only provider shipped is the test-mode mock (no real gateway yet, OPEN-QUESTIONS item 10).
+import { hiveConfig, hiveLog } from './config.js';
+import { hiveDb, newId } from './db.js';
+import { HiveError } from './errors.js';
+import { pushToUser } from './push.js';
+import { requireTenant, TRIAL_DAYS, trialEndOf } from './tenants.js';
+export const PLANS = {
+    trial: {
+        id: 'trial',
+        name: 'Trial',
+        tokens: 200_000,
+        workflows: 5,
+        priceVnd: 0,
+        priceUsd: 0,
+        blurb: `Everything in Standard for ${TRIAL_DAYS} days. No card.`,
+    },
+    standard: {
+        id: 'standard',
+        name: 'Standard',
+        tokens: 500_000,
+        workflows: 5,
+        priceVnd: 99_000,
+        priceUsd: 4,
+        blurb: 'Your address, remote access, push, 5 workflows, 500k bundled tokens a month or your own key.',
+    },
+    pro: {
+        id: 'pro',
+        name: 'Pro',
+        tokens: 3_000_000,
+        workflows: null,
+        priceVnd: 249_000,
+        priceUsd: 10,
+        blurb: 'Unlimited workflows, 3M bundled tokens a month, priority relay.',
+    },
+};
+/** One top-up pack (PRD: "top up or add own key"). */
+export const TOPUP = { tokens: 500_000, priceVnd: 49_000, priceUsd: 2 };
+export const PERIOD_DAYS = 30;
+/** Usage rows older than this are dropped by the sweeper (the PRD keeps 90 days of logs at most). */
+export const USAGE_RETENTION_DAYS = 90;
+/** The budget banner turns on at this share of the bundle (docs 05 section 10 "low"). */
+export const LOW_AT = 0.8;
+export const SWEEP_MS = 60_000;
+const DAY = 86_400_000;
+const isoPlus = (from, days) => new Date(new Date(from).getTime() + days * DAY).toISOString();
+export const PLAN_RULE = 'If your plan ends, your Bee keeps running on your laptop. Only remote access and notifications pause.';
+/** The current period: the trial window, or the paid month that holds `now` (rolled forward lazily). */
+export function periodOf(t, now = Date.now()) {
+    if (t.plan === 'trial')
+        return { start: t.createdAt, end: trialEndOf(t) };
+    let start = t.periodStart ?? t.createdAt;
+    let end = t.periodEnd ?? isoPlus(start, PERIOD_DAYS);
+    // A paid plan renews month by month (no recurring charge yet: the provider mock has no subscriptions).
+    while (new Date(end).getTime() <= now) {
+        start = end;
+        end = isoPlus(start, PERIOD_DAYS);
+    }
+    if (start !== t.periodStart || end !== t.periodEnd) {
+        hiveDb().prepare('UPDATE tenants SET periodStart = ?, periodEnd = ? WHERE id = ?').run(start, end, t.id);
+        t.periodStart = start;
+        t.periodEnd = end;
+    }
+    return { start, end };
+}
+export function usedTokens(tenantId, since) {
+    const r = hiveDb()
+        .prepare('SELECT COALESCE(SUM(inputTokens + outputTokens), 0) AS n FROM relay_usage WHERE tenantId = ? AND at >= ?')
+        .get(tenantId, since);
+    return Number(r.n);
+}
+export function budgetOf(t, now = Date.now()) {
+    const period = periodOf(t, now);
+    const used = usedTokens(t.id, period.start);
+    const cap = PLANS[t.plan].tokens + t.topupTokens;
+    const share = cap > 0 ? Math.min(1, used / cap) : 1;
+    return {
+        state: used >= cap ? 'exhausted' : share >= LOW_AT ? 'low' : 'ok',
+        usedTokens: used,
+        capTokens: cap,
+        used: Math.round(share * 1000) / 1000,
+        resetsAt: period.end,
+    };
+}
+function breakdownOf(tenantId, since) {
+    return hiveDb()
+        .prepare('SELECT source, SUM(inputTokens) AS inputTokens, SUM(outputTokens) AS outputTokens, COUNT(*) AS calls FROM relay_usage WHERE tenantId = ? AND at >= ? GROUP BY source ORDER BY inputTokens + outputTokens DESC')
+        .all(tenantId, since);
+}
+export function paymentProviders() {
+    return hiveConfig.env === 'prod' ? [] : ['mock'];
+}
+export function billingView(t, now = Date.now()) {
+    const period = periodOf(t, now);
+    return {
+        plan: PLANS[t.plan],
+        status: t.status,
+        suspendedReason: t.suspendedReason,
+        periodStartsAt: period.start,
+        periodEndsAt: period.end,
+        daysLeft: Math.max(0, Math.ceil((new Date(period.end).getTime() - now) / DAY)),
+        budget: budgetOf(t, now),
+        topupTokens: t.topupTokens,
+        breakdown: breakdownOf(t.id, period.start),
+        plans: [PLANS.standard, PLANS.pro],
+        topup: TOPUP,
+        providers: paymentProviders(),
+        rule: PLAN_RULE,
+    };
+}
+/** Whether the relay may serve this tenant right now, and why not. */
+export function relayAllowance(t, now = Date.now()) {
+    const budget = budgetOf(t, now);
+    if (t.status !== 'active')
+        return { ok: false, code: 'plan_required', budget };
+    if (budget.state === 'exhausted')
+        return { ok: false, code: 'budget_exhausted', budget };
+    return { ok: true, budget };
+}
+export function recordRelayUsage(tenantId, u, now = Date.now()) {
+    hiveDb()
+        .prepare('INSERT INTO relay_usage (id, tenantId, at, model, source, inputTokens, outputTokens) VALUES (?, ?, ?, ?, ?, ?, ?)')
+        .run(newId('ru'), tenantId, new Date(now).toISOString(), u.model.slice(0, 80), u.source.slice(0, 80), Math.max(0, u.inputTokens | 0), Math.max(0, u.outputTokens | 0));
+}
+// --- trial expiry and renewal ---------------------------------------------------------------------------------
+function tenantRow(id) {
+    return hiveDb().prepare('SELECT * FROM tenants WHERE id = ?').get(id);
+}
+async function billingPush(t, payload, now) {
+    try {
+        await pushToUser(t.userId, { ...payload, url: '#/plan', tag: 'billing', urgency: 'normal' }, now, { evenIfSuspended: true });
+    }
+    catch (err) {
+        hiveLog.warn(`billing: push for ${t.id} failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/** Ends the trial: suspended, remote access off. The Bee learns on its next heartbeat (within 30 s). */
+export async function suspendTenant(t, reason, now = Date.now()) {
+    hiveDb()
+        .prepare("UPDATE tenants SET status = 'suspended', suspendedReason = ?, suspendedAt = ? WHERE id = ? AND status = 'active'")
+        .run(reason, new Date(now).toISOString(), t.id);
+    const next = tenantRow(t.id);
+    await billingPush(next, reason === 'trial_ended'
+        ? { title: 'Your trial has ended', body: 'Your Bee still works on your laptop. Upgrade to get remote access and notifications back.' }
+        : { title: 'Remote access paused', body: 'Your plan is unpaid. Your Bee still works on your laptop; upgrade to reconnect.' }, now);
+    return next;
+}
+/** One pass: trials past their end without a paid plan are suspended; old usage rows are dropped. */
+export async function sweepBilling(now = Date.now()) {
+    const d = hiveDb();
+    const due = d
+        .prepare("SELECT * FROM tenants WHERE status = 'active' AND plan = 'trial'")
+        .all()
+        .map((r) => r)
+        .filter((t) => new Date(trialEndOf(t)).getTime() <= now);
+    for (const t of due)
+        await suspendTenant(t, 'trial_ended', now);
+    const dropped = d.prepare('DELETE FROM relay_usage WHERE at < ?').run(isoPlus(now, -USAGE_RETENTION_DAYS)).changes;
+    return { suspended: due.length, dropped: Number(dropped) };
+}
+let timer;
+export function startBillingSweeper() {
+    if (timer)
+        return;
+    timer = setInterval(() => void sweepBilling().catch((err) => hiveLog.warn(`billing: sweep failed: ${err instanceof Error ? err.message : String(err)}`)), SWEEP_MS);
+    timer.unref?.();
+}
+export function stopBillingSweeper() {
+    if (timer)
+        clearInterval(timer);
+    timer = undefined;
+}
+const mockProvider = { name: 'mock', begin: async () => ({ providerRef: null, payUrl: null }) };
+const providers = new Map([['mock', mockProvider]]);
+export function setPaymentProvider(p, name = p?.name ?? 'mock') {
+    if (p)
+        providers.set(name, p);
+    else
+        providers.delete(name);
+}
+function invoiceRow(id) {
+    return hiveDb().prepare('SELECT * FROM invoices WHERE id = ?').get(id);
+}
+export function invoicesOf(tenantId) {
+    return hiveDb().prepare('SELECT * FROM invoices WHERE tenantId = ? ORDER BY createdAt DESC LIMIT 50').all(tenantId);
+}
+export async function checkout(t, raw, now = Date.now()) {
+    const b = (raw && typeof raw === 'object' ? raw : {});
+    const kind = b.kind === 'topup' ? 'topup' : b.kind === 'plan' ? 'plan' : undefined;
+    if (!kind)
+        throw new HiveError(400, 'bad_checkout', 'Choose a plan or a top-up.');
+    const plan = kind === 'plan' ? (b.plan === 'standard' || b.plan === 'pro' ? b.plan : undefined) : null;
+    if (kind === 'plan' && !plan)
+        throw new HiveError(400, 'bad_plan', 'Choose Standard or Pro.');
+    if (kind === 'topup' && t.status !== 'active')
+        throw new HiveError(409, 'plan_required', 'Upgrade first; a top-up needs an active plan.');
+    const providerName = typeof b.provider === 'string' && b.provider ? b.provider : paymentProviders()[0];
+    const provider = providerName && paymentProviders().includes(providerName) ? providers.get(providerName) : undefined;
+    if (!provider)
+        throw new HiveError(503, 'payments_unavailable', 'Payments are not set up on this Hive yet.');
+    const id = newId('inv');
+    const created = new Date(now).toISOString();
+    const amount = kind === 'plan' ? PLANS[plan].priceVnd : TOPUP.priceVnd;
+    hiveDb()
+        .prepare('INSERT INTO invoices (id, tenantId, kind, plan, tokens, amount, currency, provider, status, createdAt) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)')
+        .run(id, t.id, kind, plan ?? null, kind === 'topup' ? TOPUP.tokens : null, amount, 'VND', provider.name, 'pending', created);
+    const begun = await provider.begin(invoiceRow(id));
+    hiveDb().prepare('UPDATE invoices SET providerRef = ? WHERE id = ?').run(begun.providerRef, id);
+    return { invoice: invoiceRow(id), payUrl: begun.payUrl };
+}
+/** A paid invoice takes effect: the plan starts a fresh month and lifts a suspension; a top-up adds tokens. */
+export async function settleInvoice(invoiceId, outcome, now = Date.now()) {
+    const inv = typeof invoiceId === 'string' ? invoiceRow(invoiceId) : undefined;
+    if (!inv)
+        throw new HiveError(404, 'invoice_unknown', 'No such invoice.');
+    if (inv.status !== 'pending')
+        return inv;
+    const d = hiveDb();
+    const at = new Date(now).toISOString();
+    d.prepare('UPDATE invoices SET status = ?, paidAt = ? WHERE id = ?').run(outcome, outcome === 'paid' ? at : null, inv.id);
+    if (outcome === 'paid') {
+        if (inv.kind === 'plan' && inv.plan) {
+            d.prepare("UPDATE tenants SET plan = ?, periodStart = ?, periodEnd = ?, status = CASE WHEN status = 'suspended' THEN 'active' ELSE status END, suspendedReason = NULL, suspendedAt = NULL WHERE id = ?").run(inv.plan, at, isoPlus(at, PERIOD_DAYS), inv.tenantId);
+            await billingPush(tenantRow(inv.tenantId), { title: `You are on ${PLANS[inv.plan].name}`, body: 'Remote access and notifications are back on.' }, now);
+        }
+        else if (inv.kind === 'topup' && inv.tokens) {
+            d.prepare('UPDATE tenants SET topupTokens = topupTokens + ? WHERE id = ?').run(inv.tokens, inv.tenantId);
+        }
+    }
+    return invoiceRow(inv.id);
+}
+/** Test mode (never prod): the app settles the mock invoice itself. */
+export async function completeMockInvoice(t, invoiceId, now = Date.now()) {
+    if (hiveConfig.env === 'prod')
+        throw new HiveError(404, 'not_found', 'Not found.');
+    const inv = typeof invoiceId === 'string' ? invoiceRow(invoiceId) : undefined;
+    if (!inv || inv.tenantId !== t.id)
+        throw new HiveError(404, 'invoice_unknown', 'No such invoice.');
+    if (inv.provider !== 'mock')
+        throw new HiveError(409, 'not_mock', 'Only mock invoices complete this way.');
+    return settleInvoice(inv.id, 'paid', now);
+}
+export async function devBilling(userId, body, now = Date.now()) {
+    if (hiveConfig.env !== 'local')
+        throw new HiveError(404, 'not_found', 'Not found.');
+    const t = requireTenant(userId);
+    const d = hiveDb();
+    if (body.reset) {
+        d.prepare("UPDATE tenants SET plan = 'trial', trialEndsAt = ?, periodStart = NULL, periodEnd = NULL, topupTokens = 0, status = 'active', suspendedReason = NULL, suspendedAt = NULL WHERE id = ?").run(isoPlus(now, TRIAL_DAYS), t.id);
+        d.prepare('DELETE FROM relay_usage WHERE tenantId = ?').run(t.id);
+    }
+    if (body.plan) {
+        if (body.plan === 'trial')
+            d.prepare("UPDATE tenants SET plan = 'trial', periodStart = NULL, periodEnd = NULL WHERE id = ?").run(t.id);
+        else
+            d.prepare("UPDATE tenants SET plan = ?, periodStart = ?, periodEnd = ?, status = 'active', suspendedReason = NULL, suspendedAt = NULL WHERE id = ?").run(body.plan, new Date(now).toISOString(), isoPlus(now, PERIOD_DAYS), t.id);
+    }
+    if (body.trialEndsAt)
+        d.prepare('UPDATE tenants SET trialEndsAt = ? WHERE id = ?').run(new Date(body.trialEndsAt).toISOString(), t.id);
+    if (typeof body.usedTokens === 'number' && body.usedTokens > 0)
+        recordRelayUsage(t.id, { model: 'dev', source: 'dev', inputTokens: Math.floor(body.usedTokens / 2), outputTokens: Math.ceil(body.usedTokens / 2) }, now);
+    await sweepBilling(now);
+    return { ok: true, billing: billingView(tenantRow(t.id), now) };
+}
+export function devBillingOf(raw) {
+    const b = (raw && typeof raw === 'object' ? raw : {});
+    return {
+        ...(typeof b.trialEndsAt === 'string' && !Number.isNaN(new Date(b.trialEndsAt).getTime()) ? { trialEndsAt: b.trialEndsAt } : {}),
+        ...(b.plan === 'trial' || b.plan === 'standard' || b.plan === 'pro' ? { plan: b.plan } : {}),
+        ...(typeof b.usedTokens === 'number' ? { usedTokens: b.usedTokens } : {}),
+        ...(b.reset === true ? { reset: true } : {}),
+    };
+}
+//# sourceMappingURL=billing.js.map

package/dist/hive/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/hive/billing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,2GAA2G;AAC3G,uGAAuG;AACvG,2GAA2G;AAC3G,uGAAuG;AACvG,4GAA4G;AAC5G,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAkB,MAAM,cAAc,CAAC;AAiBrF,MAAM,CAAC,MAAM,KAAK,GAA6B;IAC7C,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,8BAA8B,UAAU,iBAAiB;KACjE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,8FAA8F;KACtG;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,iEAAiE;KACzE;CACF,CAAC;AAEF,sDAAsD;AACtD,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAExE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC9B,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,yFAAyF;AACzF,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC;AAC1B,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE/B,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAsD/H,MAAM,CAAC,MAAM,SAAS,GAAG,uGAAuG,CAAC;AAEjI,wGAAwG;AACxG,MAAM,UAAU,QAAQ,CAAC,CAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,CAAC;IACzC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,uGAAuG;IACvG,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;QACtC,KAAK,GAAG,GAAG,CAAC;QACZ,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,CAAC,WAAW,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,MAAM,EAAE;SACf,OAAO,CAAC,0GAA0G,CAAC;SACnH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAErB,CAAC;IACF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC;IACjD,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO;QACL,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACjE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI;QACrC,QAAQ,EAAE,MAAM,CAAC,GAAG;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,OAAO,MAAM,EAAE;SACZ,OAAO,CACN,+MAA+M,CAChN;SACA,GAAG,CAAC,QAAQ,EAAE,KAAK,CAA2B,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,cAAc,EAAE,MAAM,CAAC,KAAK;QAC5B,YAAY,EAAE,MAAM,CAAC,GAAG;QACxB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9E,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;QAC1C,KAAK,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;QAClC,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,gBAAgB,EAAE;QAC7B,IAAI,EAAE,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,CAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAUD,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,CAAa,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACxF,MAAM,EAAE;SACL,OAAO,CAAC,mHAAmH,CAAC;SAC5H,GAAG,CACF,KAAK,CAAC,IAAI,CAAC,EACX,QAAQ,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAC3B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EACpB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EACrB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,EAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAChC,CAAC;AACN,CAAC;AAED,iHAAiH;AAEjH,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;AAChG,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAY,EAAE,OAAwC,EAAE,GAAW;IAC5F,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAY,EAAE,MAAiD,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3H,MAAM,EAAE;SACL,OAAO,CAAC,kHAAkH,CAAC;SAC3H,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,WAAW,CACf,IAAI,EACJ,MAAM,KAAK,aAAa;QACtB,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,2FAA2F,EAAE;QACtI,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,iFAAiF,EAAE,EAC9H,GAAG,CACJ,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IACzD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC;SACV,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAyB,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,MAAM,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC;IACnH,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,IAAI,KAAiC,CAAC;AACtC,MAAM,UAAU,mBAAmB;IACjC,IAAI,KAAK;QAAE,OAAO;IAClB,KAAK,GAAG,WAAW,CACjB,GAAG,EAAE,CAAC,KAAK,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EACpI,QAAQ,CACT,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,kBAAkB;IAChC,IAAI,KAAK;QAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,GAAG,SAAS,CAAC;AACpB,CAAC;AAsBD,MAAM,YAAY,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACjH,MAAM,SAAS,GAAG,IAAI,GAAG,CAA0B,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAE7E,MAAM,UAAU,kBAAkB,CAAC,CAA8B,EAAE,OAAe,CAAC,EAAE,IAAI,IAAI,MAAM;IACjG,IAAI,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;;QACzB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAsC,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA4B,CAAC;AACjJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAY,EAAE,GAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACjF,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,4BAA4B,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;IAC9F,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,+CAA+C,CAAC,CAAC;IAC1I,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,YAAY,IAAI,gBAAgB,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,sBAAsB,EAAE,2CAA2C,CAAC,CAAC;IAC7G,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxE,MAAM,EAAE;SACL,OAAO,CAAC,8IAA8I,CAAC;SACvJ,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAE,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAkB,EAAE,OAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC1G,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1H,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC,CAAC,OAAO,CACP,6LAA6L,CAC9L,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,cAAc,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,8CAA8C,EAAE,EAAE,GAAG,CAAC,CAAC;QACzJ,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;AAC7B,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,CAAY,EAAE,SAAkB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAClG,IAAI,UAAU,CAAC,GAAG,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IACnG,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,uCAAuC,CAAC,CAAC;IAC3G,OAAO,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,IAAgB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACzF,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,OAAO,CACP,uLAAuL,CACxL,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,CAAC,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;;YAErI,CAAC,CAAC,OAAO,CAAC,yIAAyI,CAAC,CAAC,GAAG,CACtJ,IAAI,CAAC,IAAI,EACT,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAC3B,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,EACzB,CAAC,CAAC,EAAE,CACL,CAAC;IACN,CAAC;IACD,IAAI,IAAI,CAAC,WAAW;QAAE,CAAC,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACvI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;QAC5D,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3J,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACjF,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/hive/config.js

@@ -0,0 +1,63 @@
+// Hive settings (docs/tinybee/06-environments-and-delivery.md section 1.2). Hive is the TinyBee control
+// plane: identity, tenants, pairing, tunnel provisioning, push and presence. It runs as its own process
+// (src/hive/index.ts) on Railway, and inside the localdost server in local development (TINYBEE_ENV=local
+// with no TINYBEE_HIVE_URL), so one `npm run demo` has both halves.
+import { join } from 'node:path';
+import { ROOT } from '../config.js';
+export const TINYBEE_ENVS = ['local', 'staging', 'prod'];
+function envOf(v) {
+    const s = (v ?? '').trim().toLowerCase();
+    return TINYBEE_ENVS.includes(s) ? s : undefined;
+}
+const dataDir = process.env.HIVE_DATA_DIR || process.env.LOCALDOST_DATA_DIR || join(ROOT, 'data');
+export const hiveConfig = {
+    /** local, staging or prod. Unset means TinyBee is off and localdost behaves as before. */
+    get env() {
+        return envOf(process.env.TINYBEE_ENV);
+    },
+    /** Standalone Hive port. The embedded Hive shares the localdost port. */
+    port: Number(process.env.HIVE_PORT || process.env.PORT || 4330),
+    host: process.env.HOST || '0.0.0.0',
+    /**
+     * Where a tenant's Bee answers, as a pattern with `{slug}`: `dots-{slug}.testllms.com` on staging (one level
+     * under the zone, like admin.testllms.com and superapp.testllms.com, so Cloudflare's zone certificate covers
+     * it), `{slug}.tinybee.app` in prod. TINYBEE_TENANT_HOST wins; else `{slug}.<TINYBEE_TENANT_DOMAIN>`.
+     */
+    get tenantHost() {
+        const pattern = (process.env.TINYBEE_TENANT_HOST || '').trim().toLowerCase();
+        if (pattern.includes('{slug}'))
+            return pattern;
+        return `{slug}.${(process.env.TINYBEE_TENANT_DOMAIN || 'localhost').trim().toLowerCase()}`;
+    },
+    dataDir,
+    dbPath: process.env.HIVE_DB || join(dataDir, 'hive.db'),
+    /** cloudflare or mock. Unset: cloudflare when the CF_* vars are set, else mock. */
+    get tunnelProvider() {
+        const v = (process.env.TINYBEE_TUNNEL_PROVIDER || '').trim().toLowerCase();
+        if (v === 'cloudflare' || v === 'mock')
+            return v;
+        return process.env.CF_API_TOKEN && process.env.CF_ACCOUNT_ID && process.env.CF_ZONE_ID ? 'cloudflare' : 'mock';
+    },
+    /** Bearer for /api/hive/admin/* (staging cleanup, tunnel count). Unset: those routes answer 404. */
+    get adminToken() {
+        return process.env.HIVE_ADMIN_TOKEN?.trim() || undefined;
+    },
+    /** Soft cap on live tunnels per Cloudflare account (free plan allows more, but the budget says no). */
+    tunnelCap: Number(process.env.TINYBEE_TUNNEL_CAP || 50),
+    jwt: {
+        /** PEM (PKCS8) with \n escapes, as Railway stores it. Unset: a key is generated into <dataDir>/hive-jwt.json. */
+        privateKey: process.env.HIVE_JWT_PRIVATE_KEY || undefined,
+        kid: process.env.HIVE_JWT_KID || undefined,
+    },
+    logLevel: process.env.LOG_LEVEL || 'info',
+};
+/** The public hostname of a tenant's Bee: hiveConfig.tenantHost with the slug filled in. */
+export function tenantHostname(slug) {
+    return hiveConfig.tenantHost.replace('{slug}', slug);
+}
+export const hiveLog = {
+    info: (msg, ...rest) => console.log(`[hive] ${msg}`, ...rest),
+    warn: (msg, ...rest) => console.warn(`[hive] WARN ${msg}`, ...rest),
+    error: (msg, ...rest) => console.error(`[hive] ERROR ${msg}`, ...rest),
+};
+//# sourceMappingURL=config.js.map

package/dist/hive/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/hive/config.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,wGAAwG;AACxG,0GAA0G;AAC1G,oEAAoE;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAGlE,SAAS,KAAK,CAAC,CAAqB;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,OAAQ,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,0FAA0F;IAC1F,IAAI,GAAG;QACL,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IACD,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/D,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;IACnC;;;;OAIG;IACH,IAAI,UAAU;QACZ,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7E,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO;IACP,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;IACvD,mFAAmF;IACnF,IAAI,cAAc;QAChB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACjH,CAAC;IACD,oGAAoG;IACpG,IAAI,UAAU;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC3D,CAAC;IACD,uGAAuG;IACvG,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACvD,GAAG,EAAE;QACH,iHAAiH;QACjH,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QACzD,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS;KAC3C;IACD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;CAC1C,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,IAAI,EAAE,CAAC,GAAW,EAAE,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAChF,IAAI,EAAE,CAAC,GAAW,EAAE,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IACtF,KAAK,EAAE,CAAC,GAAW,EAAE,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;CAC1F,CAAC"}

package/dist/hive/db.js

@@ -0,0 +1,186 @@
+// Hive's own SQLite database (docs/tinybee/01-PRD.md section 3.2): accounts, tenants, one-time codes
+// and refresh tokens. It never holds workflow definitions, connection tokens or message contents.
+// Separate from the localdost database on purpose: the standalone Hive on Railway has no localdost data,
+// and the embedded Hive in local development keeps its rows out of localdost.db.
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { DatabaseSync } from 'node:sqlite';
+import { hiveConfig } from './config.js';
+const TABLES = [
+    `CREATE TABLE IF NOT EXISTS users (
+     id TEXT PRIMARY KEY,
+     email TEXT NOT NULL UNIQUE,
+     name TEXT,
+     googleSub TEXT UNIQUE,
+     createdAt TEXT NOT NULL,
+     lastSignInAt TEXT
+   )`,
+    `CREATE TABLE IF NOT EXISTS tenants (
+     id TEXT PRIMARY KEY,
+     slug TEXT NOT NULL UNIQUE,
+     userId TEXT NOT NULL UNIQUE,
+     status TEXT NOT NULL DEFAULT 'active',
+     slugChangedAt TEXT,
+     createdAt TEXT NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS otps (
+     id TEXT PRIMARY KEY,
+     email TEXT NOT NULL,
+     codeHash TEXT NOT NULL,
+     expiresAt INTEGER NOT NULL,
+     attempts INTEGER NOT NULL DEFAULT 0,
+     usedAt INTEGER,
+     createdAt INTEGER NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS refresh_tokens (
+     id TEXT PRIMARY KEY,
+     userId TEXT NOT NULL,
+     tokenHash TEXT NOT NULL UNIQUE,
+     expiresAt INTEGER NOT NULL,
+     revokedAt INTEGER,
+     createdAt INTEGER NOT NULL
+   )`,
+    `CREATE TABLE IF NOT EXISTS install_codes (
+     id TEXT PRIMARY KEY,
+     tenantId TEXT NOT NULL,
+     code TEXT NOT NULL UNIQUE,
+     expiresAt INTEGER NOT NULL,
+     usedAt INTEGER,
+     createdAt INTEGER NOT NULL
+   )`,
+    // Paired laptops (docs/tinybee/02-architecture-pairing.md section 4). One live Bee per tenant in v1;
+    // a replaced one keeps its row with status 'replaced'. Only the public device id is stored.
+    `CREATE TABLE IF NOT EXISTS bees (
+     id TEXT PRIMARY KEY,
+     tenantId TEXT NOT NULL,
+     pub TEXT NOT NULL,
+     host TEXT NOT NULL,
+     name TEXT NOT NULL,
+     hc TEXT NOT NULL,
+     status TEXT NOT NULL,
+     hostname TEXT,
+     tunnelId TEXT,
+     relayTokenHash TEXT,
+     lastError TEXT,
+     createdAt INTEGER NOT NULL,
+     pairedAt INTEGER,
+     lastSeenAt INTEGER,
+     offlineSince INTEGER,
+     offlineNotifiedAt INTEGER,
+     devFrozenUntil INTEGER
+   )`,
+    // Web push subscriptions of signed-in phones (docs/tinybee/02-architecture-pairing.md section 8): the
+    // "Bee offline" and "back online" notices go here. One row per browser endpoint.
+    `CREATE TABLE IF NOT EXISTS push_subscriptions (
+     id TEXT PRIMARY KEY,
+     userId TEXT NOT NULL,
+     endpoint TEXT NOT NULL UNIQUE,
+     json TEXT NOT NULL,
+     createdAt INTEGER NOT NULL
+   )`,
+    // A pairing offer: the nonce a Bee put in its QR (or claimed with an install code), and what the
+    // phone bound it to. The tunnel token waits in `delivery` until the Bee's next status poll takes it.
+    `CREATE TABLE IF NOT EXISTS pair_nonces (
+     nonce TEXT PRIMARY KEY,
+     pub TEXT NOT NULL,
+     host TEXT NOT NULL,
+     hc TEXT NOT NULL,
+     lan TEXT,
+     sig TEXT NOT NULL,
+     state TEXT NOT NULL,
+     tenantId TEXT,
+     beeId TEXT,
+     delivery TEXT,
+     iat INTEGER NOT NULL,
+     boundAt INTEGER,
+     deliveredAt INTEGER
+   )`,
+    'CREATE INDEX IF NOT EXISTS idx_otps_email ON otps(email, createdAt)',
+    'CREATE INDEX IF NOT EXISTS idx_bees_tenant ON bees(tenantId, createdAt)',
+    'CREATE INDEX IF NOT EXISTS idx_bees_pub ON bees(pub)',
+    'CREATE INDEX IF NOT EXISTS idx_pair_tenant ON pair_nonces(tenantId, state)',
+    'CREATE INDEX IF NOT EXISTS idx_refresh_user ON refresh_tokens(userId)',
+    'CREATE INDEX IF NOT EXISTS idx_install_tenant ON install_codes(tenantId, createdAt)',
+    'CREATE INDEX IF NOT EXISTS idx_push_user ON push_subscriptions(userId)',
+    // Phase 6 (docs/tinybee/01-PRD.md section 5): one row per relayed model call, tokens only, never content.
+    `CREATE TABLE IF NOT EXISTS relay_usage (
+     id TEXT PRIMARY KEY,
+     tenantId TEXT NOT NULL,
+     at TEXT NOT NULL,
+     model TEXT NOT NULL,
+     source TEXT NOT NULL,
+     inputTokens INTEGER NOT NULL,
+     outputTokens INTEGER NOT NULL
+   )`,
+    'CREATE INDEX IF NOT EXISTS idx_relay_tenant ON relay_usage(tenantId, at)',
+    `CREATE TABLE IF NOT EXISTS invoices (
+     id TEXT PRIMARY KEY,
+     tenantId TEXT NOT NULL,
+     kind TEXT NOT NULL,
+     plan TEXT,
+     tokens INTEGER,
+     amount INTEGER NOT NULL,
+     currency TEXT NOT NULL,
+     provider TEXT NOT NULL,
+     providerRef TEXT,
+     status TEXT NOT NULL,
+     createdAt TEXT NOT NULL,
+     paidAt TEXT
+   )`,
+    'CREATE INDEX IF NOT EXISTS idx_invoice_tenant ON invoices(tenantId, createdAt)',
+];
+/** Columns added after a table shipped. Each is applied once; SQLite has no ADD COLUMN IF NOT EXISTS. */
+const COLUMNS = [
+    ['bees', 'offlineSince', 'INTEGER'],
+    ['bees', 'offlineNotifiedAt', 'INTEGER'],
+    ['bees', 'devFrozenUntil', 'INTEGER'],
+    // Phase 6: plan state lives on the tenant (billing.ts). Older rows read as a trial that started at createdAt.
+    ['tenants', 'plan', "TEXT NOT NULL DEFAULT 'trial'"],
+    ['tenants', 'trialEndsAt', 'TEXT'],
+    ['tenants', 'periodStart', 'TEXT'],
+    ['tenants', 'periodEnd', 'TEXT'],
+    ['tenants', 'topupTokens', 'INTEGER NOT NULL DEFAULT 0'],
+    ['tenants', 'suspendedReason', 'TEXT'],
+    ['tenants', 'suspendedAt', 'TEXT'],
+    // Phase 8: the tenant is made at sign-in from the email; this is when the person picked a name themselves.
+    ['tenants', 'slugChosenAt', 'TEXT'],
+    // Phase 7: the store apps register native tokens next to web subscriptions (push.ts, native-push.ts).
+    ['push_subscriptions', 'kind', "TEXT NOT NULL DEFAULT 'web'"],
+    ['push_subscriptions', 'appVersion', 'TEXT'],
+];
+function addColumns(d) {
+    for (const [table, column, ddl] of COLUMNS) {
+        const have = d.prepare(`PRAGMA table_info(${table})`).all().some((c) => c.name === column);
+        if (!have)
+            d.exec(`ALTER TABLE ${table} ADD COLUMN ${column} ${ddl}`);
+    }
+}
+let handle;
+function open() {
+    const path = hiveConfig.dbPath;
+    if (path !== ':memory:')
+        mkdirSync(dirname(path), { recursive: true });
+    const d = new DatabaseSync(path);
+    if (path !== ':memory:')
+        d.exec('PRAGMA journal_mode = WAL');
+    d.exec('PRAGMA synchronous = NORMAL');
+    d.exec('PRAGMA busy_timeout = 5000');
+    d.exec('PRAGMA foreign_keys = ON');
+    for (const sql of TABLES)
+        d.exec(sql);
+    addColumns(d);
+    return d;
+}
+/** The Hive database, opened and migrated on first use. */
+export function hiveDb() {
+    return (handle ??= open());
+}
+/** Tests close the database between cases; the next hiveDb() reopens it at hiveConfig.dbPath. */
+export function closeHiveDb() {
+    handle?.close();
+    handle = undefined;
+}
+export const newId = (prefix) => `${prefix}_${randomBytes(9).toString('base64url')}`;
+export const nowIso = () => new Date().toISOString();
+//# sourceMappingURL=db.js.map

package/dist/hive/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/hive/db.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,kGAAkG;AAClG,yGAAyG;AACzG,iFAAiF;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,GAAG;IACb;;;;;;;KAOG;IACH;;;;;;;KAOG;IACH;;;;;;;;KAQG;IACH;;;;;;;KAOG;IACH;;;;;;;KAOG;IACH,qGAAqG;IACrG,4FAA4F;IAC5F;;;;;;;;;;;;;;;;;;KAkBG;IACH,sGAAsG;IACtG,iFAAiF;IACjF;;;;;;KAMG;IACH,iGAAiG;IACjG,qGAAqG;IACrG;;;;;;;;;;;;;;KAcG;IACH,qEAAqE;IACrE,yEAAyE;IACzE,sDAAsD;IACtD,4EAA4E;IAC5E,uEAAuE;IACvE,qFAAqF;IACrF,wEAAwE;IACxE,0GAA0G;IAC1G;;;;;;;;KAQG;IACH,0EAA0E;IAC1E;;;;;;;;;;;;;KAaG;IACH,gFAAgF;CACjF,CAAC;AAEF,yGAAyG;AACzG,MAAM,OAAO,GAAmD;IAC9D,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC;IACnC,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,CAAC;IACxC,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC;IACrC,8GAA8G;IAC9G,CAAC,SAAS,EAAE,MAAM,EAAE,+BAA+B,CAAC;IACpD,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC;IAClC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC;IAClC,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC;IAChC,CAAC,SAAS,EAAE,aAAa,EAAE,4BAA4B,CAAC;IACxD,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,CAAC;IACtC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC;IAClC,2GAA2G;IAC3G,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC;IACnC,sGAAsG;IACtG,CAAC,oBAAoB,EAAE,MAAM,EAAE,6BAA6B,CAAC;IAC7D,CAAC,oBAAoB,EAAE,YAAY,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,SAAS,UAAU,CAAC,CAAe;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,GAAG,EAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACnH,IAAI,CAAC,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,IAAI,MAAgC,CAAC;AAErC,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;IAC/B,IAAI,IAAI,KAAK,UAAU;QAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,UAAU;QAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC7D,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACrC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,UAAU,CAAC,CAAC,CAAC,CAAC;IACd,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,MAAM;IACpB,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW;IACzB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACrG,MAAM,CAAC,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC"}