tinybeeai 0.0.0-stage → 0.16.1

package/dist/hive/push.js

@@ -0,0 +1,185 @@
+// Web push from Hive to the phone (docs/tinybee/02-architecture-pairing.md section 8). Hive keeps one
+// subscription per browser endpoint per user. The only notices Hive sends itself are presence ones:
+// "Bee offline", the daily reminder while it stays offline, and "back online". Everything about a
+// workflow comes from the Bee through its own push (src/notify/push.ts).
+//
+// VAPID keys: HIVE_VAPID_PUBLIC_KEY / HIVE_VAPID_PRIVATE_KEY on Railway, else a pair generated once into
+// <dataDir>/hive-vapid.json. In local development the sender also records what it sent, so a test or
+// the dev route can read it back without a push service.
+//
+// Phase 7: the store apps register a native token instead (POST /push/device); the row is kept in the
+// same table with kind 'android' | 'ios' and goes out through native-push.ts.
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import webpush from 'web-push';
+import { hiveConfig, hiveLog } from './config.js';
+import { hiveDb, newId } from './db.js';
+import { HiveError } from './errors.js';
+import { DeviceGone, sendNativePush } from './native-push.js';
+const counters = {
+    web: { sent: 0, failed: 0, removed: 0, skipped: 0 },
+    android: { sent: 0, failed: 0, removed: 0, skipped: 0 },
+    ios: { sent: 0, failed: 0, removed: 0, skipped: 0 },
+};
+/** Since the process started, per channel: what went out, what failed, what was dropped as gone (GET /admin/metrics). */
+export function pushMetrics() {
+    const devices = { web: 0, android: 0, ios: 0 };
+    for (const r of hiveDb().prepare('SELECT kind, COUNT(*) AS n FROM push_subscriptions GROUP BY kind').all())
+        if (r.kind in devices)
+            devices[r.kind] = Number(r.n);
+    return { devices, since: { web: { ...counters.web }, android: { ...counters.android }, ios: { ...counters.ios } } };
+}
+export function resetPushMetrics() {
+    for (const k of Object.keys(counters))
+        counters[k] = { sent: 0, failed: 0, removed: 0, skipped: 0 };
+}
+let vapid;
+export function vapidKeys() {
+    if (vapid)
+        return vapid;
+    const pub = process.env.HIVE_VAPID_PUBLIC_KEY?.trim();
+    const priv = process.env.HIVE_VAPID_PRIVATE_KEY?.trim();
+    const file = join(hiveConfig.dataDir, 'hive-vapid.json');
+    if (pub && priv)
+        vapid = { publicKey: pub, privateKey: priv };
+    else if (existsSync(file))
+        vapid = JSON.parse(readFileSync(file, 'utf8'));
+    else {
+        vapid = webpush.generateVAPIDKeys();
+        mkdirSync(hiveConfig.dataDir, { recursive: true });
+        writeFileSync(file, JSON.stringify(vapid, null, 2), { mode: 0o600 });
+    }
+    return vapid;
+}
+export function resetVapidKeys() {
+    vapid = undefined;
+}
+const subject = () => process.env.HIVE_VAPID_SUBJECT?.trim() || 'https://github.com/duonghaijoe/localdost';
+/** The default sender: web-push with Hive's VAPID keys. */
+const webPushSender = async (sub, payload) => {
+    const k = vapidKeys();
+    await webpush.sendNotification(sub, JSON.stringify(payload), {
+        TTL: 3600,
+        urgency: payload.urgency,
+        vapidDetails: { subject: subject(), publicKey: k.publicKey, privateKey: k.privateKey },
+    });
+};
+/** A 404 or 410 from the push service means the browser dropped the subscription. */
+const isGone = (err) => {
+    const code = err?.statusCode;
+    return code === 404 || code === 410;
+};
+let sender = webPushSender;
+/** Tests replace the sender; `undefined` restores web-push. */
+export function setPushSender(fn) {
+    sender = fn ?? webPushSender;
+}
+const RECORD_MAX = 50;
+const recorded = [];
+/** What Hive pushed in local development, newest last (GET /api/hive/dev/pushes). Empty outside local. */
+export function recordedPushes() {
+    return recorded.slice();
+}
+export function clearRecordedPushes() {
+    recorded.length = 0;
+}
+function subscriptionOf(raw) {
+    const o = raw && typeof raw === 'object' ? raw : {};
+    const keys = o.keys && typeof o.keys === 'object' ? o.keys : {};
+    if (typeof o.endpoint !== 'string' || !/^https:\/\//.test(o.endpoint) || typeof keys.p256dh !== 'string' || typeof keys.auth !== 'string')
+        throw new HiveError(400, 'subscription_invalid', 'That is not a push subscription.');
+    return {
+        endpoint: o.endpoint,
+        keys: { p256dh: keys.p256dh, auth: keys.auth },
+        ...(typeof o.expirationTime === 'number' ? { expirationTime: o.expirationTime } : {}),
+    };
+}
+const UPSERT = 'INSERT INTO push_subscriptions (id, userId, endpoint, json, createdAt, kind, appVersion) VALUES (?, ?, ?, ?, ?, ?, ?) ON CONFLICT(endpoint) DO UPDATE SET userId = excluded.userId, json = excluded.json, kind = excluded.kind, appVersion = excluded.appVersion';
+/** Keeps one subscription per endpoint; an endpoint that moves to another user follows it. */
+export function subscribePush(userId, raw, now = Date.now()) {
+    const sub = subscriptionOf(raw);
+    hiveDb().prepare(UPSERT).run(newId('ps'), userId, sub.endpoint, JSON.stringify(sub), now, 'web', null);
+    return { ok: true };
+}
+const TOKEN_RE = /^[A-Za-z0-9_:.-]{16,4096}$/;
+function deviceOf(raw) {
+    const o = raw && typeof raw === 'object' ? raw : {};
+    if (o.platform !== 'android' && o.platform !== 'ios')
+        throw new HiveError(400, 'device_invalid', 'platform must be android or ios.');
+    if (typeof o.token !== 'string' || !TOKEN_RE.test(o.token))
+        throw new HiveError(400, 'device_invalid', 'That is not a device token.');
+    const appVersion = typeof o.appVersion === 'string' && o.appVersion.length <= 40 ? o.appVersion : undefined;
+    return { platform: o.platform, token: o.token, ...(appVersion ? { appVersion } : {}) };
+}
+/** The endpoint column keeps native tokens unique too: fcm:<token> or apns:<token>. */
+const deviceEndpoint = (d) => `${d.platform === 'android' ? 'fcm' : 'apns'}:${d.token}`;
+/** A store app registers its push token after sign-in, and again whenever the platform rotates it. */
+export function registerDevice(userId, raw, now = Date.now()) {
+    const d = deviceOf(raw);
+    hiveDb()
+        .prepare(UPSERT)
+        .run(newId('ps'), userId, deviceEndpoint(d), JSON.stringify(d), now, d.platform, d.appVersion ?? null);
+    return { ok: true, platform: d.platform };
+}
+export function unregisterDevice(userId, raw) {
+    const o = raw && typeof raw === 'object' ? raw : {};
+    if ((o.platform !== 'android' && o.platform !== 'ios') || typeof o.token !== 'string')
+        throw new HiveError(400, 'device_invalid', 'Which device?');
+    const r = hiveDb()
+        .prepare('DELETE FROM push_subscriptions WHERE userId = ? AND endpoint = ?')
+        .run(userId, deviceEndpoint({ platform: o.platform, token: o.token }));
+    return { ok: true, removed: Number(r.changes) };
+}
+export function unsubscribePush(userId, endpoint) {
+    if (typeof endpoint !== 'string')
+        throw new HiveError(400, 'subscription_invalid', 'Which subscription?');
+    const r = hiveDb().prepare('DELETE FROM push_subscriptions WHERE userId = ? AND endpoint = ?').run(userId, endpoint);
+    return { ok: true, removed: Number(r.changes) };
+}
+export function pushSubscriptionCount(userId) {
+    return Number(hiveDb().prepare('SELECT COUNT(*) AS n FROM push_subscriptions WHERE userId = ?').get(userId).n);
+}
+/** Sends to every subscription of the user. Dead subscriptions are dropped; other failures are logged, never thrown. */
+export async function pushToUser(userId, payload, now = Date.now(), opts = {}) {
+    // A suspended tenant (trial ended, docs 03 section 9) gets no routine pushes; billing notices still go.
+    if (!opts.evenIfSuspended) {
+        const t = hiveDb().prepare('SELECT status FROM tenants WHERE userId = ?').get(userId);
+        if (t?.status === 'suspended')
+            return { sent: 0, removed: 0 };
+    }
+    if (hiveConfig.env === 'local') {
+        recorded.push({ userId, at: new Date(now).toISOString(), payload });
+        if (recorded.length > RECORD_MAX)
+            recorded.splice(0, recorded.length - RECORD_MAX);
+    }
+    const rows = hiveDb().prepare('SELECT * FROM push_subscriptions WHERE userId = ?').all(userId);
+    let sent = 0;
+    let removed = 0;
+    await Promise.all(rows.map(async (row) => {
+        const kind = row.kind in counters ? row.kind : 'web';
+        const c = counters[kind];
+        try {
+            if (kind === 'web')
+                await sender(JSON.parse(row.json), payload);
+            else if (!(await sendNativePush(JSON.parse(row.json), payload, now))) {
+                c.skipped++;
+                return;
+            }
+            sent++;
+            c.sent++;
+        }
+        catch (err) {
+            if (isGone(err) || err instanceof DeviceGone) {
+                hiveDb().prepare('DELETE FROM push_subscriptions WHERE id = ?').run(row.id);
+                removed++;
+                c.removed++;
+            }
+            else {
+                c.failed++;
+                hiveLog.warn(`push: ${kind} send to ${userId} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }));
+    return { sent, removed };
+}
+//# sourceMappingURL=push.js.map

package/dist/hive/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/hive/push.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,oGAAoG;AACpG,kGAAkG;AAClG,yEAAyE;AACzE,EAAE;AACF,yGAAyG;AACzG,qGAAqG;AACrG,yDAAyD;AACzD,EAAE;AACF,sGAAsG;AACtG,8EAA8E;AAC9E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAAO,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAA0C,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAsCtG,MAAM,QAAQ,GAAwC;IACpD,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;IACnD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;IACvD,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;CACpD,CAAC;AAEF,yHAAyH;AACzH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,EAAqC;QAC3I,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO;YAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAe;QAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACpH,CAAC;AAOD,IAAI,KAA4B,CAAC;AAEjC,MAAM,UAAU,SAAS;IACvB,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACzD,IAAI,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SACzD,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;SAClF,CAAC;QACJ,KAAK,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,KAAK,GAAG,SAAS,CAAC;AACpB,CAAC;AAED,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,0CAA0C,CAAC;AAInH,2DAA2D;AAC3D,MAAM,aAAa,GAAe,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;IACvD,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QAC3D,GAAG,EAAE,IAAI;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE;KACvF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,qFAAqF;AACrF,MAAM,MAAM,GAAG,CAAC,GAAY,EAAW,EAAE;IACvC,MAAM,IAAI,GAAI,GAAsC,EAAE,UAAU,CAAC;IACjE,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;AACtC,CAAC,CAAC;AAEF,IAAI,MAAM,GAAe,aAAa,CAAC;AAEvC,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,EAA0B;IACtD,MAAM,GAAG,EAAE,IAAI,aAAa,CAAC;AAC/B,CAAC;AAQD,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,QAAQ,GAAe,EAAE,CAAC;AAEhC,0GAA0G;AAC1G,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QACvI,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;IACvF,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GACV,kQAAkQ,CAAC;AAErQ,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,GAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAClF,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAE9C,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACrI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACtI,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,uFAAuF;AACvF,MAAM,cAAc,GAAG,CAAC,CAA8C,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAE7I,sGAAsG;AACtG,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnF,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE;SACL,OAAO,CAAC,MAAM,CAAC;SACf,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;IACzG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,GAAY;IAC3D,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACnJ,MAAM,CAAC,GAAG,MAAM,EAAE;SACf,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,QAAiB;IAC/D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;IAC1G,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,MAAM,CAAE,MAAM,EAAE,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmB,CAAC,CAAC,CAAC,CAAC;AACpI,CAAC;AAED,wHAAwH;AACxH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAwB,EACxB,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,OAAsC,EAAE;IAExC,wGAAwG;IACxG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmC,CAAC;QACxH,IAAI,CAAC,EAAE,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,UAAU;YAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwB,CAAC;IACtH,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAa,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,IAAI,KAAK,KAAK;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAyB,EAAE,OAAO,CAAC,CAAC;iBACnF,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAiB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrF,CAAC,CAAC,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;YACP,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;gBAC7C,MAAM,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5E,OAAO,EAAE,CAAC;gBACV,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,YAAY,MAAM,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/hive/relay.js

@@ -0,0 +1,205 @@
+// TinyBee Hive, Phase 6: the bundled-token relay (docs/tinybee/02-architecture.md section 7). A paired Bee
+// without a key of its own calls Claude through POST /api/hive/relay/anthropic/v1/messages with its relay
+// token as the API key; Hive swaps in HIVE_RELAY_ANTHROPIC_KEY, forwards the request byte for byte, streams
+// the answer back, and meters the token counts the provider reports (billing.ts). The relay never logs or
+// stores prompt or answer content: only model, source label and token counts reach the database.
+import { Transform } from 'node:stream';
+import { Readable } from 'node:stream';
+import { budgetOf, recordRelayUsage, relayAllowance } from './billing.js';
+import { hiveLog } from './config.js';
+import { hiveDb } from './db.js';
+import { HiveError } from './errors.js';
+import { sha256Hex } from '../tinybee/ed25519.js';
+export const RELAY_PREFIX = '/relay/anthropic';
+export const RELAY_BODY_LIMIT = 8 * 1024 * 1024;
+/** The Bee names what asked (a workflow, chat) in this header; it is the only label metering keeps. */
+export const RELAY_SOURCE_HEADER = 'x-tinybee-source';
+export const RELAY_REFUSAL_HEADER = 'x-tinybee-refusal';
+export const RELAY_TIMEOUT_MS = 10 * 60 * 1000;
+export function relayUpstream() {
+    return {
+        url: (process.env.HIVE_RELAY_ANTHROPIC_URL || 'https://api.anthropic.com').replace(/\/+$/, ''),
+        key: process.env.HIVE_RELAY_ANTHROPIC_KEY?.trim() || undefined,
+    };
+}
+let fetchImpl;
+/** Tests: answer for the provider. */
+export function setRelayFetch(fn) {
+    fetchImpl = fn;
+}
+/** The Bee and tenant behind a relay token, or undefined. */
+export function beeOfRelayToken(token) {
+    if (!token.startsWith('tbrl.'))
+        return undefined;
+    const bee = hiveDb().prepare("SELECT * FROM bees WHERE relayTokenHash = ? AND status IN ('provisioning', 'online') LIMIT 1").get(sha256Hex(token));
+    if (!bee)
+        return undefined;
+    const tenant = hiveDb().prepare("SELECT * FROM tenants WHERE id = ? AND status != 'deleted'").get(bee.tenantId);
+    return tenant ? { bee, tenant } : undefined;
+}
+function tokenOf(req) {
+    const h = req.headers;
+    const key = typeof h['x-api-key'] === 'string' ? h['x-api-key'] : '';
+    if (key)
+        return key.trim();
+    const auth = typeof h.authorization === 'string' ? h.authorization : '';
+    return auth.startsWith('Bearer ') ? auth.slice(7).trim() : '';
+}
+/** Token counts from a non-streaming /v1/messages answer. */
+export function usageOfMessage(json) {
+    const m = json;
+    if (!m || typeof m !== 'object' || !m.usage)
+        return undefined;
+    return {
+        model: typeof m.model === 'string' ? m.model : 'unknown',
+        inputTokens: Number(m.usage.input_tokens) || 0,
+        outputTokens: Number(m.usage.output_tokens) || 0,
+    };
+}
+/**
+ * Passes SSE bytes through untouched and picks the usage out of `message_start` (input tokens, model) and
+ * `message_delta` (output tokens so far). Only `data:` lines are parsed; text deltas are never kept.
+ */
+export class SseUsageTap extends Transform {
+    usage = { model: 'unknown', inputTokens: 0, outputTokens: 0 };
+    tail = '';
+    constructor() {
+        super();
+    }
+    _transform(chunk, _enc, cb) {
+        this.scan(chunk.toString('utf8'));
+        cb(null, chunk);
+    }
+    _flush(cb) {
+        this.scan('\n');
+        cb();
+    }
+    scan(text) {
+        const lines = (this.tail + text).split('\n');
+        this.tail = lines.pop() ?? '';
+        for (const raw of lines) {
+            const line = raw.trim();
+            if (!line.startsWith('data:'))
+                continue;
+            try {
+                const ev = JSON.parse(line.slice(5).trim());
+                if (ev.type === 'message_start' && ev.message) {
+                    if (typeof ev.message.model === 'string')
+                        this.usage.model = ev.message.model;
+                    this.usage.inputTokens = Number(ev.message.usage?.input_tokens) || 0;
+                }
+                else if (ev.type === 'message_delta' && ev.usage)
+                    this.usage.outputTokens = Number(ev.usage.output_tokens) || this.usage.outputTokens;
+            }
+            catch {
+                // Not JSON (keep-alive, partial): ignore.
+            }
+        }
+    }
+}
+const HOP = new Set(['host', 'connection', 'content-length', 'transfer-encoding', 'x-api-key', 'authorization', 'cookie', RELAY_SOURCE_HEADER]);
+const FORWARD = ['anthropic-version', 'anthropic-beta', 'content-type', 'accept'];
+function refusal(code, budget) {
+    // Shaped like an Anthropic error too, so the SDK on the Bee surfaces a 402 with a readable message
+    // (src/agent/model-errors.ts reads 402 as a quota problem).
+    const message = code === 'plan_required'
+        ? 'Your plan has ended. Upgrade in the TinyBee app to use bundled AI again, or add your own key.'
+        : "This month's bundled AI tokens are used up. Top up or add your own key in the TinyBee app.";
+    return new HiveError(402, code, message, { type: 'error', error: { type: 'billing_error', message }, budget });
+}
+async function relayMessages(req, reply) {
+    const token = tokenOf(req);
+    const who = token ? beeOfRelayToken(token) : undefined;
+    if (!who)
+        throw new HiveError(401, 'relay_token', 'This laptop is not paired. Pair it from the app.', {
+            type: 'error',
+            error: { type: 'authentication_error', message: 'Not paired.' },
+        });
+    const allowance = relayAllowance(who.tenant);
+    if (!allowance.ok) {
+        void reply.header(RELAY_REFUSAL_HEADER, allowance.code);
+        throw refusal(allowance.code, allowance.budget);
+    }
+    const up = relayUpstream();
+    if (!up.key)
+        throw new HiveError(503, 'relay_unconfigured', 'Bundled AI is not set up on this Hive yet. Add your own key in Setup.');
+    const source = (typeof req.headers[RELAY_SOURCE_HEADER] === 'string' ? req.headers[RELAY_SOURCE_HEADER] : 'unknown').slice(0, 80) || 'unknown';
+    const headers = { 'x-api-key': up.key };
+    for (const name of FORWARD) {
+        const v = req.headers[name];
+        if (typeof v === 'string' && !HOP.has(name))
+            headers[name] = v;
+    }
+    if (!headers['anthropic-version'])
+        headers['anthropic-version'] = '2023-06-01';
+    headers['content-type'] = 'application/json';
+    const raw = req.rawBody ?? JSON.stringify(req.body ?? {});
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), RELAY_TIMEOUT_MS);
+    let res;
+    try {
+        res = await (fetchImpl ?? fetch)(`${up.url}/v1/messages`, { method: 'POST', headers, body: raw, signal: ac.signal });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        hiveLog.warn(`relay: provider unreachable for ${who.tenant.id}: ${err instanceof Error ? err.message : String(err)}`);
+        throw new HiveError(502, 'relay_upstream', 'The model provider did not answer. Try again in a moment.');
+    }
+    void reply.header('cache-control', 'no-store');
+    for (const name of ['content-type', 'anthropic-ratelimit-requests-remaining', 'request-id']) {
+        const v = res.headers.get(name);
+        if (v)
+            void reply.header(name, v);
+    }
+    void reply.code(res.status);
+    const record = (u) => {
+        if (u && res.status < 400)
+            recordRelayUsage(who.tenant.id, { ...u, source });
+    };
+    const streaming = (res.headers.get('content-type') ?? '').includes('text/event-stream');
+    if (!streaming || !res.body) {
+        clearTimeout(timer);
+        const text = await res.text();
+        try {
+            record(usageOfMessage(JSON.parse(text)));
+        }
+        catch {
+            // A provider error page: nothing to meter.
+        }
+        return reply.send(text);
+    }
+    const tap = new SseUsageTap();
+    tap.on('end', () => {
+        clearTimeout(timer);
+        record(tap.usage);
+    });
+    tap.on('error', () => clearTimeout(timer));
+    req.raw.on('close', () => {
+        if (!tap.writableEnded)
+            ac.abort();
+    });
+    return reply.send(Readable.fromWeb(res.body).pipe(tap));
+}
+export async function relayRoutes(app) {
+    app.post(`${RELAY_PREFIX}/v1/messages`, { bodyLimit: RELAY_BODY_LIMIT }, relayMessages);
+    // The Bee asks for its budget with the same token (status.ts), cheaper than a heartbeat.
+    app.get(`${RELAY_PREFIX}/budget`, async (req) => {
+        const who = beeOfRelayToken(tokenOf(req));
+        if (!who)
+            throw new HiveError(401, 'relay_token', 'This laptop is not paired. Pair it from the app.');
+        return { ok: true, plan: who.tenant.plan, status: who.tenant.status, budget: budgetOf(who.tenant) };
+    });
+}
+/** Staging's one-page metrics (docs 06 section 7): counts only. Behind the admin token. */
+export function relayMetrics(now = Date.now()) {
+    const d = hiveDb();
+    const tenants = {};
+    for (const r of d.prepare("SELECT plan || '/' || status AS k, COUNT(*) AS n FROM tenants WHERE status != 'deleted' GROUP BY k").all())
+        tenants[r.k] = Number(r.n);
+    const since = new Date(now - 86_400_000).toISOString();
+    const r = d
+        .prepare('SELECT COUNT(*) AS calls, COALESCE(SUM(inputTokens + outputTokens), 0) AS tokens, COUNT(DISTINCT tenantId) AS tenants FROM relay_usage WHERE at >= ?')
+        .get(since);
+    return { tenants, relay: { calls24h: Number(r.calls), tokens24h: Number(r.tokens), tenants24h: Number(r.tenants) } };
+}
+//# sourceMappingURL=relay.js.map

package/dist/hive/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/hive/relay.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,0GAA0G;AAC1G,4GAA4G;AAC5G,0GAA0G;AAC1G,iGAAiG;AACjG,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAe,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,2BAA2B,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9F,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,SAAS;KAC/D,CAAC;AACJ,CAAC;AAGD,IAAI,SAAiC,CAAC;AACtC,sCAAsC;AACtC,MAAM,UAAU,aAAa,CAAC,EAA0B;IACtD,SAAS,GAAG,EAAE,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,8FAA8F,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAC7H,CAAC;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAqC,CAAC;IACpJ,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,GAAmB;IAClC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAQD,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,CAAC,GAAG,IAA+F,CAAC;IAC1G,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;QAC9C,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,SAAS;IACxC,KAAK,GAAU,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC7D,IAAI,GAAG,EAAE,CAAC;IAClB;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IACQ,UAAU,CAAC,KAAa,EAAE,IAAoB,EAAE,EAAqB;QAC5E,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClB,CAAC;IACQ,MAAM,CAAC,EAAqB;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,EAAE,EAAE,CAAC;IACP,CAAC;IACO,IAAI,CAAC,IAAY;QACvB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAIzC,CAAC;gBACF,IAAI,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;oBAC9C,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ;wBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC9E,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;gBACvE,CAAC;qBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YAC1I,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAChJ,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;AAElF,SAAS,OAAO,CAAC,IAA0C,EAAE,MAAc;IACzE,mGAAmG;IACnG,4DAA4D;IAC5D,MAAM,OAAO,GACX,IAAI,KAAK,eAAe;QACtB,CAAC,CAAC,+FAA+F;QACjG,CAAC,CAAC,4FAA4F,CAAC;IACnG,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACjH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAmB;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,GAAG;QACN,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,kDAAkD,EAAE;YAC1F,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE;SAChE,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,uEAAuE,CAAC,CAAC;IACrI,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC/I,MAAM,OAAO,GAA2B,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,YAAY,CAAC;IAC/E,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC7C,MAAM,GAAG,GAAI,GAAuC,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACvH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,mCAAmC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtH,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,2DAA2D,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,wCAAwC,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YAAE,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAoB,EAAE,EAAE;QACtC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACxF,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,EAAE,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAgD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,cAAc,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,aAAa,CAAC,CAAC;IACxF,yFAAyF;IACzF,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,kDAAkD,CAAC,CAAC;QACtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAInD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC,GAAG,EAGhI;QACD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC;SACR,OAAO,CACN,sJAAsJ,CACvJ;SACA,GAAG,CAAC,KAAK,CAAuD,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AACvH,CAAC"}

package/dist/hive/routes.js

@@ -0,0 +1,228 @@
+import { VERSION, commitSha } from '../version.js';
+import { hiveConfig } from './config.js';
+import { jwks } from './keys.js';
+import { tunnelProvider } from './tunnel/provider.js';
+import { billingView, checkout, completeMockInvoice, devBilling, devBillingOf, invoicesOf, startBillingSweeper, stopBillingSweeper } from './billing.js';
+import { relayRoutes } from './relay.js';
+import { HiveError } from './errors.js';
+import { refreshSession, signInWithGoogle, signOut, startOtp, userView, verifyOtp } from './auth.js';
+import { googleClientId, verifyGoogleIdToken } from './google.js';
+import { requireUser } from './session.js';
+import { availability, createTenant, installCode, renameTenant, requireTenant, tenantOfUser, tenantView } from './tenants.js';
+import { adminRoutes } from './admin.js';
+import { updateRoutes } from './updates.js';
+import { beeByPub, beeOfUser, beeView, claimPairing, completePairing, heartbeat, offerPairing, pairStatus, requireBee } from './pairing.js';
+import { clearRecordedPushes, pushSubscriptionCount, pushToUser, recordedPushes, registerDevice, subscribePush, unregisterDevice, unsubscribePush, vapidKeys, } from './push.js';
+import { fakeBeeState, startPresenceSweeper, stopPresenceSweeper, userOfTenant } from './presence.js';
+export const HIVE_PREFIX = '/api/hive';
+export const JWKS_PATH = '/.well-known/jwks.json';
+const startedAt = Date.now();
+export function hiveHealth(embedded) {
+    return {
+        ok: true,
+        service: 'hive',
+        version: VERSION,
+        commit: commitSha(),
+        env: hiveConfig.env ?? 'local',
+        tenantHost: hiveConfig.tenantHost,
+        tunnelProvider: tunnelProvider().name,
+        uptimeSec: Math.round((Date.now() - startedAt) / 1000),
+        embedded,
+    };
+}
+const bodyOf = (req) => (req.body && typeof req.body === 'object' ? req.body : {});
+const rawBodyOf = (req) => req.rawBody ?? '';
+/** Routes under /api/hive. Register with `{ prefix: HIVE_PREFIX }`. */
+export async function hiveRoutes(app, opts = {}) {
+    // Every Hive error is { error, code, ...extra }. Anything else is a 500 with a generic sentence; the cause goes to the log.
+    app.setErrorHandler((err, req, reply) => {
+        if (err instanceof HiveError)
+            return reply.code(err.status).send(err.body());
+        const status = typeof err.statusCode === 'number' ? err.statusCode : 500;
+        if (status >= 500)
+            req.log.error({ err }, 'hive route failed');
+        return reply.code(status).send({
+            error: status >= 500 ? 'Something went wrong on our side. Try again.' : err instanceof Error ? err.message : String(err),
+            code: status >= 500 ? 'hive_error' : 'bad_request',
+        });
+    });
+    // Bee requests are signed over the raw body: parse JSON by hand so the bytes survive. An empty body is {}.
+    app.addContentTypeParser('application/json', { parseAs: 'string' }, (req, body, done) => {
+        req.rawBody = body;
+        if (!body.trim())
+            return done(null, {});
+        try {
+            done(null, JSON.parse(body));
+        }
+        catch {
+            done(new HiveError(400, 'bad_json', 'The request body is not valid JSON.'), undefined);
+        }
+    });
+    app.get('/health', async () => hiveHealth(opts.embedded === true));
+    // Sign-in (FR-H1). The phone keeps the refresh token; the access token lives for an hour.
+    app.post('/auth/otp/start', async (req) => startOtp(bodyOf(req).email));
+    app.post('/auth/otp/verify', async (req) => {
+        const b = bodyOf(req);
+        return verifyOtp(b.email, b.code);
+    });
+    app.post('/auth/google', async (req) => signInWithGoogle(await verifyGoogleIdToken(bodyOf(req).idToken)));
+    // The Google web client id is public (it is in every page that signs in with Google); the app needs it for the button.
+    app.get('/auth/providers', async () => {
+        const google = googleClientId();
+        return { email: true, google: !!google, apple: false, ...(google ? { googleClientId: google } : {}) };
+    });
+    app.post('/auth/refresh', async (req) => refreshSession(bodyOf(req).refreshToken));
+    app.post('/auth/signout', async (req, reply) => {
+        signOut(bodyOf(req).refreshToken);
+        return reply.code(204).send();
+    });
+    app.get('/me', async (req) => {
+        const { user } = requireUser(req);
+        const t = tenantOfUser(user.id);
+        return { user: userView(user), tenant: t ? tenantView(t) : null };
+    });
+    // Tenants (FR-H2). The availability check is open: the sign-up screen asks before the person has a session.
+    app.get('/tenants/availability', async (req) => availability(req.query.slug));
+    app.post('/tenants', async (req, reply) => {
+        const { user } = requireUser(req);
+        const t = createTenant(user.id, bodyOf(req).slug);
+        return reply.code(201).send({ tenant: tenantView(t), installCode: installCode(t.id) });
+    });
+    app.get('/tenants/me', async (req) => {
+        const { user } = requireUser(req);
+        const t = requireTenant(user.id);
+        return { tenant: tenantView(t), installCode: installCode(t.id) };
+    });
+    app.patch('/tenants/me', async (req) => {
+        const { user } = requireUser(req);
+        return { tenant: tenantView(renameTenant(user.id, bodyOf(req).slug)) };
+    });
+    app.post('/tenants/me/install-code', async (req) => {
+        const { user } = requireUser(req);
+        const t = requireTenant(user.id);
+        return { installCode: installCode(t.id, { refresh: true }) };
+    });
+    // Pairing (docs/tinybee/02-architecture-pairing.md section 4). Bee calls are signed with the device key; phone calls carry the session.
+    app.post('/pair/offer', async (req) => offerPairing(bodyOf(req), requireBee(req, rawBodyOf(req))));
+    app.post('/pair/claim', async (req) => claimPairing(bodyOf(req), requireBee(req, rawBodyOf(req))));
+    app.get('/pair/status', async (req) => pairStatus(req.query.nonce, requireBee(req, rawBodyOf(req))));
+    app.post('/pair/complete', async (req) => {
+        const { user } = requireUser(req);
+        return completePairing(user.id, bodyOf(req));
+    });
+    app.get('/pair/pending', async (req) => {
+        const { user } = requireUser(req);
+        return { pending: beeOfUser(user.id).pending };
+    });
+    app.post('/presence/heartbeat', async (req) => heartbeat(requireBee(req, rawBodyOf(req)), bodyOf(req)));
+    // A workflow push that went out on the laptop reaches the phone through Hive too (Phase 5, src/tinybee/workflows/engine.ts).
+    app.post('/presence/notify', async (req) => {
+        const bee = beeByPub(requireBee(req, rawBodyOf(req)));
+        if (!bee)
+            throw new HiveError(404, 'bee_unknown', 'This laptop is not paired. Pair it from the app.');
+        const userId = userOfTenant(bee.tenantId);
+        if (!userId)
+            throw new HiveError(404, 'tenant_unknown', 'This Bee has no owner.');
+        const b = bodyOf(req);
+        const title = typeof b.title === 'string' ? b.title.slice(0, 120) : '';
+        if (!title)
+            throw new HiveError(400, 'title_missing', 'A push needs a title.');
+        const urgency = b.urgency === 'high' || b.urgency === 'low' ? b.urgency : 'normal';
+        const url = typeof b.url === 'string' && b.url.startsWith('#/') ? b.url.slice(0, 200) : '#/workflows';
+        const r = await pushToUser(userId, {
+            title,
+            body: typeof b.body === 'string' ? b.body.slice(0, 1000) : '',
+            url,
+            tag: typeof b.tag === 'string' ? b.tag.slice(0, 80) : 'workflow',
+            urgency,
+        });
+        return { ok: true, ...r };
+    });
+    app.get('/bee', async (req) => {
+        const { user } = requireUser(req);
+        return beeOfUser(user.id);
+    });
+    // Plan & billing (Phase 6, docs 05 "Plan & billing"): the plan card, usage meter, checkout and invoices.
+    app.get('/billing', async (req) => {
+        const { user } = requireUser(req);
+        return billingView(requireTenant(user.id));
+    });
+    app.post('/billing/checkout', async (req, reply) => {
+        const { user } = requireUser(req);
+        return reply.code(201).send(await checkout(requireTenant(user.id), bodyOf(req)));
+    });
+    app.get('/billing/invoices', async (req) => {
+        const { user } = requireUser(req);
+        return { invoices: invoicesOf(requireTenant(user.id).id) };
+    });
+    // Test mode (local and staging, never prod): the app settles its own mock invoice, as a gateway's return would.
+    if (hiveConfig.env !== 'prod')
+        app.post('/billing/mock/complete', async (req) => {
+            const { user } = requireUser(req);
+            return { ok: true, invoice: await completeMockInvoice(requireTenant(user.id), bodyOf(req).invoiceId) };
+        });
+    await relayRoutes(app);
+    // Push (section 8): the phone subscribes once it is signed in; Hive sends the presence notices.
+    app.get('/push/vapid', async () => ({ publicKey: vapidKeys().publicKey }));
+    app.post('/push/subscribe', async (req, reply) => {
+        const { user } = requireUser(req);
+        subscribePush(user.id, bodyOf(req).subscription ?? bodyOf(req));
+        return reply.code(201).send({ ok: true, subscriptions: pushSubscriptionCount(user.id) });
+    });
+    app.delete('/push/subscribe', async (req) => {
+        const { user } = requireUser(req);
+        return unsubscribePush(user.id, bodyOf(req).endpoint);
+    });
+    // Phase 7: the store apps register their FCM / APNs token instead of a web subscription.
+    app.post('/push/device', async (req, reply) => {
+        const { user } = requireUser(req);
+        const r = registerDevice(user.id, bodyOf(req));
+        return reply.code(201).send({ ...r, subscriptions: pushSubscriptionCount(user.id) });
+    });
+    app.delete('/push/device', async (req) => {
+        const { user } = requireUser(req);
+        return unregisterDevice(user.id, bodyOf(req));
+    });
+    // Local development only: fake the Bee's state so every degraded screen (docs 05 section 10) can be reached and tested.
+    if (hiveConfig.env === 'local') {
+        app.post('/dev/bee', async (req) => {
+            const { user } = requireUser(req);
+            const b = bodyOf(req);
+            const { bee } = await fakeBeeState(user.id, {
+                offlineForSec: typeof b.offlineForSec === 'number' ? b.offlineForSec : undefined,
+                tunnel: b.tunnel === 'down' || b.tunnel === 'connected' ? b.tunnel : undefined,
+                thaw: b.thaw === true,
+            });
+            return { ok: true, bee: beeView(bee) };
+        });
+        app.post('/dev/billing', async (req) => {
+            const { user } = requireUser(req);
+            return devBilling(user.id, devBillingOf(bodyOf(req)));
+        });
+        app.get('/dev/pushes', async (req) => {
+            const { user } = requireUser(req);
+            return { pushes: recordedPushes().filter((p) => p.userId === user.id) };
+        });
+        app.delete('/dev/pushes', async (req, reply) => {
+            requireUser(req);
+            clearRecordedPushes();
+            return reply.code(204).send();
+        });
+    }
+    startPresenceSweeper();
+    startBillingSweeper();
+    app.addHook('onClose', async () => {
+        stopPresenceSweeper();
+        stopBillingSweeper();
+    });
+    await adminRoutes(app);
+    await updateRoutes(app);
+}
+/** /.well-known/jwks.json on the origin root. Cached for five minutes: a rotated key gets a new kid. */
+export async function wellKnownRoutes(app) {
+    app.get(JWKS_PATH, async (_req, reply) => {
+        reply.header('Cache-Control', 'public, max-age=300');
+        return jwks();
+    });
+}
+//# sourceMappingURL=routes.js.map