tinybeeai 0.0.0-stage → 0.16.1

package/dist/hive/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/hive/routes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACzJ,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9H,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5I,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtG,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAElD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAgB7B,MAAM,UAAU,UAAU,CAAC,QAAiB;IAC1C,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,SAAS,EAAE;QACnB,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,OAAO;QAC9B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,cAAc,EAAE,cAAc,EAAE,CAAC,IAAI;QACrC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;QACtD,QAAQ;KACT,CAAC;AACJ,CAAC;AAGD,MAAM,MAAM,GAAG,CAAC,GAAsB,EAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,IAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAItH,MAAM,SAAS,GAAG,CAAC,GAAY,EAAU,EAAE,CAAE,GAAsB,CAAC,OAAO,IAAI,EAAE,CAAC;AAElF,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAoB,EAAE,OAA+B,EAAE;IACtF,4HAA4H;IAC5H,GAAG,CAAC,eAAe,CAAC,CAAC,GAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/C,IAAI,GAAG,YAAY,SAAS;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAQ,GAA+B,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA8B,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAClI,IAAI,MAAM,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC7B,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxH,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;SACnD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2GAA2G;IAC3G,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACrF,GAAiC,CAAC,OAAO,GAAG,IAAc,CAAC;QAC5D,IAAI,CAAE,IAAe,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,qCAAqC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC;IAEnE,0FAA0F;IAC1F,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,uHAAuH;IACvH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACnF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,4GAA4G;IAC5G,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAE,GAAG,CAAC,KAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,wIAAwI;IACxI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAE,GAAG,CAAC,KAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7H,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxG,6HAA6H;IAC7H,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,kDAAkD,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnF,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACtG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE;YACjC,KAAK;YACL,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7D,GAAG;YACH,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU;YAChE,OAAO;SACR,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,yGAAyG;IACzG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,gHAAgH;IAChH,IAAI,UAAU,CAAC,GAAG,KAAK,MAAM;QAC3B,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACzG,CAAC,CAAC,CAAC;IACL,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IAEvB,gGAAgG;IAChG,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,yFAAyF;IACzF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,wHAAwH;IACxH,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC1C,aAAa,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBAChF,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC9E,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC7C,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,mBAAmB,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,CAAC;IACtB,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,mBAAmB,EAAE,CAAC;QACtB,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoB;IACxD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;QACrD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hive/server.js

@@ -0,0 +1,12 @@
+// The standalone Hive server. Same toolchain as localdost, its own process and port, no localdost routes.
+import Fastify from 'fastify';
+import { hiveConfig } from './config.js';
+import { HIVE_PREFIX, hiveRoutes, wellKnownRoutes } from './routes.js';
+export async function buildHiveServer(opts = {}) {
+    const app = Fastify({ logger: opts.logger === false ? false : { level: hiveConfig.logLevel }, bodyLimit: 256 * 1024 });
+    await app.register(wellKnownRoutes);
+    await app.register(hiveRoutes, { prefix: HIVE_PREFIX });
+    app.setNotFoundHandler((_req, reply) => reply.code(404).send({ error: 'not found' }));
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/hive/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/hive/server.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA6B,EAAE;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;IACvH,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/hive/session.js

@@ -0,0 +1,28 @@
+import { userById } from './auth.js';
+import { HiveError } from './errors.js';
+import { JwtError, verifyOwnSession } from './jwt.js';
+export const SESSION_REQUIRED = 'session_required';
+export function bearerOf(req) {
+    const h = req.headers.authorization;
+    if (!h || !/^Bearer\s+/i.test(h))
+        return undefined;
+    return h.replace(/^Bearer\s+/i, '').trim() || undefined;
+}
+export function requireUser(req) {
+    const token = bearerOf(req);
+    if (!token)
+        throw new HiveError(401, SESSION_REQUIRED, 'Sign in first.');
+    let claims;
+    try {
+        claims = verifyOwnSession(token);
+    }
+    catch (err) {
+        const code = err instanceof JwtError ? err.code : 'malformed';
+        throw new HiveError(401, code === 'expired' ? 'session_expired' : SESSION_REQUIRED, code === 'expired' ? 'Your session expired. Sign in again.' : 'Sign in first.');
+    }
+    const user = userById(claims.sub);
+    if (!user)
+        throw new HiveError(401, SESSION_REQUIRED, 'Sign in first.');
+    return { user, claims };
+}
+//# sourceMappingURL=session.js.map

package/dist/hive/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/hive/session.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAsB,MAAM,UAAU,CAAC;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,MAAM,UAAU,QAAQ,CAAC,GAAmB;IAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAmB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACzE,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9D,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,EACzD,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,gBAAgB,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/hive/tenants.js

@@ -0,0 +1,287 @@
+// Tenants (FR-H2): one per user in v1, named by a slug that becomes the Bee's hostname
+// (dots-<slug>.testllms.com on staging, <slug>.tinybee.app in prod). The slug can change once.
+// The install code (docs/tinybee/02-architecture-pairing.md section 4) is the 6-character code the
+// app shows while the person installs the Bee; Phase 2 trades it for a pairing.
+import { randomBytes, randomInt } from 'node:crypto';
+import { tenantHostname } from './config.js';
+import { hiveDb, newId, nowIso } from './db.js';
+import { HiveError } from './errors.js';
+/** Free trial length (docs/tinybee/01-PRD.md section 5). */
+export const TRIAL_DAYS = 30;
+export const SLUG_MIN = 3;
+export const SLUG_MAX = 20;
+export const INSTALL_CODE_TTL_SEC = 10 * 60;
+/** No 0/O, 1/I: the code is read off a phone and typed on a laptop. */
+const CODE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
+/** Names that would collide with our own hosts, or read as ours. */
+export const RESERVED_SLUGS = new Set([
+    'www',
+    'api',
+    'app',
+    'apps',
+    'admin',
+    'auth',
+    'hive',
+    'bee',
+    'dots',
+    'dot',
+    'get',
+    'mail',
+    'smtp',
+    'help',
+    'support',
+    'status',
+    'docs',
+    'blog',
+    'cdn',
+    'static',
+    'assets',
+    'superapp',
+    'tinybee',
+    'localdost',
+    'test',
+    'staging',
+    'prod',
+    'dev',
+    'localhost',
+    'root',
+    'system',
+]);
+const SLUG_HINT = 'Letters, numbers and hyphens, 3 to 20 characters, starting and ending with a letter or number.';
+/** Lower-cases and trims the typed address. Spaces and underscores become hyphens so "Hong Lan" works. */
+export function normalizeSlug(raw) {
+    return (typeof raw === 'string' ? raw : '')
+        .trim()
+        .toLowerCase()
+        .replace(/[\s_]+/g, '-')
+        .replace(/-{2,}/g, '-');
+}
+export function slugProblem(slug) {
+    if (slug.length < SLUG_MIN)
+        return 'too_short';
+    if (slug.length > SLUG_MAX)
+        return 'too_long';
+    if (!/^[a-z0-9-]+$/.test(slug))
+        return 'bad_chars';
+    if (slug.startsWith('-') || slug.endsWith('-'))
+        return 'bad_edges';
+    if (RESERVED_SLUGS.has(slug))
+        return 'reserved';
+    return undefined;
+}
+export function slugProblemText(p) {
+    switch (p) {
+        case 'too_short':
+            return `Use at least ${SLUG_MIN} characters.`;
+        case 'too_long':
+            return `Use at most ${SLUG_MAX} characters.`;
+        case 'bad_chars':
+        case 'bad_edges':
+            return SLUG_HINT;
+        case 'reserved':
+            return 'That name is reserved. Pick another.';
+    }
+}
+export function tenantView(t) {
+    return {
+        id: t.id,
+        slug: t.slug,
+        hostname: tenantHostname(t.slug),
+        status: t.status,
+        canRenameSlug: t.slugChangedAt === null,
+        slugChosen: t.slugChosenAt !== null,
+        createdAt: t.createdAt,
+        plan: t.plan,
+        suspendedReason: t.suspendedReason,
+        planEndsAt: t.plan === 'trial' ? trialEndOf(t) : t.periodEnd,
+    };
+}
+/** The trial's end: the stored value, else 30 days after the tenant was created (rows from before Phase 6). */
+export function trialEndOf(t) {
+    return t.trialEndsAt ?? new Date(new Date(t.createdAt).getTime() + TRIAL_DAYS * 86_400_000).toISOString();
+}
+export function tenantOfUser(userId) {
+    return hiveDb().prepare("SELECT * FROM tenants WHERE userId = ? AND status != 'deleted'").get(userId);
+}
+export function tenantBySlug(slug) {
+    return hiveDb().prepare('SELECT * FROM tenants WHERE slug = ?').get(slug);
+}
+function taken(slug) {
+    return !!hiveDb().prepare('SELECT 1 FROM tenants WHERE slug = ?').get(slug);
+}
+/** Three free names close to the one that was taken: a number, then the year. */
+export function suggestSlugs(slug, isTaken = taken, year = new Date().getFullYear()) {
+    const out = [];
+    const base = slug.slice(0, SLUG_MAX - 5);
+    const candidates = [
+        `${base}-2`,
+        `${base}-3`,
+        `${base}-${year}`,
+        `${base}-4`,
+        `${base}-5`,
+        `${base}-${String(year).slice(2)}`,
+        `my-${base}`.slice(0, SLUG_MAX),
+    ];
+    for (const c of candidates) {
+        if (out.length === 3)
+            break;
+        if (slugProblem(c) || isTaken(c) || out.includes(c))
+            continue;
+        out.push(c);
+    }
+    return out;
+}
+export function availability(raw) {
+    const slug = normalizeSlug(raw);
+    const problem = slugProblem(slug);
+    if (problem)
+        return { slug, available: false, reason: problem, message: slugProblemText(problem), hostname: tenantHostname(slug), suggestions: [] };
+    if (taken(slug))
+        return { slug, available: false, reason: 'taken', message: 'That address is taken.', hostname: tenantHostname(slug), suggestions: suggestSlugs(slug) };
+    return { slug, available: true, hostname: tenantHostname(slug), suggestions: [] };
+}
+function assertFree(raw) {
+    const a = availability(raw);
+    if (a.available)
+        return a.slug;
+    if (a.reason === 'taken')
+        throw new HiveError(409, 'slug_taken', a.message, { suggestions: a.suggestions });
+    throw new HiveError(400, 'slug_invalid', a.message, { reason: a.reason });
+}
+function insertTenant(userId, slug, chosen) {
+    const d = hiveDb();
+    const id = newId('tnt');
+    const created = nowIso();
+    d.prepare('INSERT INTO tenants (id, slug, userId, status, createdAt, plan, trialEndsAt, slugChosenAt) VALUES (?, ?, ?, ?, ?, ?, ?, ?)').run(id, slug, userId, 'active', created, 'trial', new Date(new Date(created).getTime() + TRIAL_DAYS * 86_400_000).toISOString(), chosen ? created : null);
+    return d.prepare('SELECT * FROM tenants WHERE id = ?').get(id);
+}
+/** The address the sign-in makes from an email: the part before the @, cleaned to the slug rules. Never reserved. */
+export function slugFromEmail(email) {
+    let s = normalizeSlug(email.split('@')[0] ?? '')
+        .replace(/[^a-z0-9-]+/g, '-')
+        .replace(/-{2,}/g, '-')
+        .replace(/^-+|-+$/g, '');
+    if (s.length < SLUG_MIN || RESERVED_SLUGS.has(s))
+        s = s ? `${s}-bee` : 'my-bee';
+    return s.slice(0, SLUG_MAX).replace(/-+$/, '');
+}
+/**
+ * The user's tenant, made at sign-in when they have none (Phase 8: no address step). The slug comes from the
+ * email; when that is taken the usual suggestions apply, then a random tail. The person can rename it later.
+ */
+export function ensureTenant(userId, email) {
+    const have = tenantOfUser(userId);
+    if (have)
+        return have;
+    const base = slugFromEmail(email);
+    const first = !slugProblem(base) && !taken(base) ? base : suggestSlugs(base)[0];
+    const tail = () => `${base.slice(0, SLUG_MAX - 7).replace(/-+$/, '')}-${randomBytes(3).toString('hex')}`;
+    for (const slug of [first ?? tail(), tail(), tail(), tail()]) {
+        try {
+            return insertTenant(userId, slug, false);
+        }
+        catch (err) {
+            if (!/UNIQUE/i.test(String(err)))
+                throw err;
+            // The same user signed in twice at once: the first insert won.
+            const now = tenantOfUser(userId);
+            if (now)
+                return now;
+            // Someone else took the slug between the check and the insert: next candidate.
+        }
+    }
+    throw new HiveError(500, 'slug_exhausted', 'Could not make an address. Try again.');
+}
+/**
+ * The user picks their address. With the one made at sign-in still unchosen this sets it (a rename that
+ * does not count as the one change); a tenant whose name was picked already gets 409 with the one they have.
+ */
+export function createTenant(userId, rawSlug) {
+    const have = tenantOfUser(userId);
+    if (have?.slugChosenAt)
+        throw new HiveError(409, 'tenant_exists', `You already have ${tenantHostname(have.slug)}.`, { tenant: tenantView(have) });
+    if (have)
+        return chooseSlug(have, rawSlug);
+    const slug = assertFree(rawSlug);
+    try {
+        return insertTenant(userId, slug, true);
+    }
+    catch (err) {
+        // Two sign-ups raced for the same name: the second one sees it as taken.
+        if (/UNIQUE/i.test(String(err)))
+            throw new HiveError(409, 'slug_taken', 'That address is taken.', { suggestions: suggestSlugs(slug) });
+        throw err;
+    }
+}
+function chooseSlug(t, rawSlug) {
+    const slug = normalizeSlug(rawSlug) === t.slug ? t.slug : assertFree(rawSlug);
+    hiveDb().prepare('UPDATE tenants SET slug = ?, slugChosenAt = ? WHERE id = ?').run(slug, nowIso(), t.id);
+    return tenantOfUser(t.userId);
+}
+/** The one slug change a tenant gets. The old hostname is released at once (the tunnel moves in Phase 3). */
+export function renameTenant(userId, rawSlug) {
+    const t = tenantOfUser(userId);
+    if (!t)
+        throw new HiveError(404, 'tenant_missing', 'Sign in again.');
+    // The name made from the email at sign-in was never the person's pick: setting it is not the one change.
+    if (t.slugChosenAt === null)
+        return chooseSlug(t, rawSlug);
+    if (t.slugChangedAt !== null)
+        throw new HiveError(409, 'slug_locked', 'The address was changed once already; it cannot change again.');
+    const slug = assertFree(rawSlug);
+    if (slug === t.slug)
+        return t;
+    hiveDb().prepare('UPDATE tenants SET slug = ?, slugChangedAt = ? WHERE id = ?').run(slug, nowIso(), t.id);
+    return tenantOfUser(userId);
+}
+export function requireTenant(userId) {
+    const t = tenantOfUser(userId);
+    if (!t)
+        throw new HiveError(404, 'tenant_missing', 'Sign in again.');
+    return t;
+}
+function newCode() {
+    let s = '';
+    for (let i = 0; i < 6; i++)
+        s += CODE_ALPHABET[randomInt(0, CODE_ALPHABET.length)];
+    return s;
+}
+/** The live install code, or a fresh one when none is live or `refresh` is asked. A new code retires the old one. */
+export function installCode(tenantId, opts = {}) {
+    const now = opts.now ?? Date.now();
+    const d = hiveDb();
+    if (!opts.refresh) {
+        const live = d
+            .prepare('SELECT code, expiresAt FROM install_codes WHERE tenantId = ? AND usedAt IS NULL AND expiresAt > ? ORDER BY createdAt DESC LIMIT 1')
+            .get(tenantId, now);
+        if (live)
+            return view(live, now);
+    }
+    d.prepare('UPDATE install_codes SET usedAt = ? WHERE tenantId = ? AND usedAt IS NULL').run(now, tenantId);
+    for (let i = 0; i < 10; i++) {
+        const code = newCode();
+        try {
+            d.prepare('INSERT INTO install_codes (id, tenantId, code, expiresAt, createdAt) VALUES (?, ?, ?, ?, ?)').run(newId('ic'), tenantId, code, now + INSTALL_CODE_TTL_SEC * 1000, now);
+            return view({ code, expiresAt: now + INSTALL_CODE_TTL_SEC * 1000 }, now);
+        }
+        catch (err) {
+            if (!/UNIQUE/i.test(String(err)))
+                throw err;
+        }
+    }
+    throw new Error('could not find a free install code');
+}
+function view(row, now) {
+    return { code: row.code, expiresAt: new Date(row.expiresAt).toISOString(), expiresInSec: Math.max(0, Math.round((row.expiresAt - now) / 1000)) };
+}
+/** Phase 2 uses this: the tenant a live code belongs to. */
+export function tenantOfInstallCode(rawCode, now = Date.now()) {
+    const code = (typeof rawCode === 'string' ? rawCode : '').replace(/[\s-]/g, '').toUpperCase();
+    if (code.length !== 6)
+        return undefined;
+    const row = hiveDb().prepare('SELECT tenantId FROM install_codes WHERE code = ? AND usedAt IS NULL AND expiresAt > ?').get(code, now);
+    if (!row)
+        return undefined;
+    return hiveDb().prepare('SELECT * FROM tenants WHERE id = ?').get(row.tenantId);
+}
+//# sourceMappingURL=tenants.js.map

package/dist/hive/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../../src/hive/tenants.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,+FAA+F;AAC/F,mGAAmG;AACnG,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC;AAC1B,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,CAAC;AAC5C,uEAAuE;AACvE,MAAM,aAAa,GAAG,kCAAkC,CAAC;AAEzD,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IACpC,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;IACT,WAAW;IACX,MAAM;IACN,SAAS;IACT,MAAM;IACN,KAAK;IACL,WAAW;IACX,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AA8CH,MAAM,SAAS,GAAG,gGAAgG,CAAC;AAEnH,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IACnE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAc;IAC5C,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,WAAW;YACd,OAAO,gBAAgB,QAAQ,cAAc,CAAC;QAChD,KAAK,UAAU;YACb,OAAO,eAAe,QAAQ,cAAc,CAAC;QAC/C,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,sCAAsC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAY;IACrC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,aAAa,EAAE,CAAC,CAAC,aAAa,KAAK,IAAI;QACvC,UAAU,EAAE,CAAC,CAAC,YAAY,KAAK,IAAI;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,UAAU,EAAE,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,UAAU,CAAC,CAA+C;IACxE,OAAO,CAAC,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,MAAM,CAA0B,CAAC;AACjI,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,IAAI,CAA0B,CAAC;AACrG,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAWD,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAkC,KAAK,EAAE,OAAe,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACzH,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,IAAI;QACX,GAAG,IAAI,IAAI;QACX,GAAG,IAAI,IAAI,IAAI,EAAE;QACjB,GAAG,IAAI,IAAI;QACX,GAAG,IAAI,IAAI;QACX,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAClC,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;KAChC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC5B,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACpJ,IAAI,KAAK,CAAC,IAAI,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACzJ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,OAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7G,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,OAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,MAAe;IACjE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,OAAO,CAAC,4HAA4H,CAAC,CAAC,GAAG,CACzI,EAAE,EACF,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,OAAO,EACP,OAAO,EACP,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,EAC7E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACxB,CAAC;IACF,OAAO,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;AACzF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC7C,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,GAAG,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IACxD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACzG,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5C,+DAA+D;YAC/D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;YACpB,+EAA+E;QACjF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAgB;IAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,YAAY;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClJ,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,wBAAwB,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvI,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAY,EAAE,OAAgB;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;AACjC,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAgB;IAC3D,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACrE,yGAAyG;IACzG,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,+DAA+D,CAAC,CAAC;IACvI,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1G,OAAO,YAAY,CAAC,MAAM,CAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACrE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO;IACd,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,qHAAqH;AACrH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA4C,EAAE;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC;aACX,OAAO,CAAC,mIAAmI,CAAC;aAC5I,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAwB,CAAC;QAC7C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,CAAC,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1G,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,CAAC,CAAC,OAAO,CAAC,6FAA6F,CAAC,CAAC,GAAG,CAC1G,KAAK,CAAC,IAAI,CAAC,EACX,QAAQ,EACR,IAAI,EACJ,GAAG,GAAG,oBAAoB,GAAG,IAAI,EACjC,GAAG,CACJ,CAAC;YACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,oBAAoB,GAAG,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,GAAG,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,IAAI,CAAC,GAAY,EAAE,GAAW;IACrC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;AACnJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,MAAM,IAAI,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAClG,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAC;AAC3G,CAAC"}

package/dist/hive/tunnel/cloudflare.js

@@ -0,0 +1,160 @@
+// Cloudflare Tunnel provider (docs/tinybee/02-architecture-pairing.md section 5). One tunnel per tenant,
+// named `bee-<tenant id>`, remotely configured ("config_src: cloudflare") so the Bee needs nothing but
+// the token: cloudflared pulls the ingress (tenant hostname -> http://localhost:<bee port>) from the edge.
+//
+// Every call is idempotent on that name, so a retry after a half-done provision finishes the job instead
+// of making a second tunnel. The API token never leaves this module and the tunnel token is never logged.
+//
+//   provision: find-or-create the tunnel, PUT its ingress, GET its token, upsert a proxied CNAME
+//              <hostname> -> <tunnel id>.cfargotunnel.com in CF_ZONE_ID.
+//   revoke:    delete the CNAME, drop live connections, delete the tunnel (cascade).
+//   rotate:    revoke + provision: a tunnel token cannot be rotated in place.
+//   status:    GET the tunnel: healthy -> connected, otherwise provisioned; deleted -> revoked; absent -> none.
+//   count:     how many `bee-*` tunnels the account holds (the staging cap, docs 06 section 5).
+import { tenantHostname } from '../config.js';
+export const CF_API = 'https://api.cloudflare.com/client/v4';
+/** The port cloudflared on the laptop forwards to: the localdost server port (src/config.ts). */
+export const DEFAULT_BEE_PORT = 4319;
+export const TUNNEL_NAME_PREFIX = 'bee-';
+export class CloudflareApiError extends Error {
+    status;
+    codes;
+    constructor(status, codes, message) {
+        super(message);
+        this.status = status;
+        this.codes = codes;
+    }
+}
+export const tunnelNameOf = (tenantId) => `${TUNNEL_NAME_PREFIX}${tenantId}`;
+export function cloudflareConfigured(env = process.env) {
+    return !!(env.CF_API_TOKEN && env.CF_ACCOUNT_ID && env.CF_ZONE_ID);
+}
+export class CloudflareTunnelProvider {
+    name = 'cloudflare';
+    apiToken;
+    accountId;
+    zoneId;
+    beePort;
+    hostnameOf;
+    fetchImpl;
+    timeoutMs;
+    constructor(opts = {}) {
+        this.apiToken = opts.apiToken ?? process.env.CF_API_TOKEN ?? '';
+        this.accountId = opts.accountId ?? process.env.CF_ACCOUNT_ID ?? '';
+        this.zoneId = opts.zoneId ?? process.env.CF_ZONE_ID ?? '';
+        this.beePort = opts.beePort ?? Number(process.env.TINYBEE_BEE_PORT || DEFAULT_BEE_PORT);
+        this.hostnameOf = opts.hostnameOf ?? tenantHostname;
+        this.fetchImpl = opts.fetchImpl ?? ((...a) => fetch(...a));
+        this.timeoutMs = opts.timeoutMs ?? 15_000;
+        if (!this.apiToken || !this.accountId || !this.zoneId)
+            throw new Error('Cloudflare tunnels need CF_API_TOKEN, CF_ACCOUNT_ID and CF_ZONE_ID.');
+    }
+    async call(method, path, body) {
+        let res;
+        try {
+            res = await this.fetchImpl(`${CF_API}${path}`, {
+                method,
+                headers: { authorization: `Bearer ${this.apiToken}`, 'content-type': 'application/json', accept: 'application/json' },
+                body: body === undefined ? undefined : JSON.stringify(body),
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new CloudflareApiError(0, [], `Cloudflare API unreachable: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        let json;
+        try {
+            json = (await res.json());
+        }
+        catch {
+            json = undefined;
+        }
+        if (!res.ok || !json?.success) {
+            const errors = json?.errors ?? [];
+            const text = errors.map((e) => `${e.code} ${e.message}`).join('; ') || `HTTP ${res.status}`;
+            throw new CloudflareApiError(res.status, errors.map((e) => e.code), `Cloudflare ${method} ${path.replace(/\/[0-9a-f-]{20,}/g, '/…')} failed: ${text}`);
+        }
+        return json.result;
+    }
+    acct = (p) => `/accounts/${this.accountId}${p}`;
+    zone = (p) => `/zones/${this.zoneId}${p}`;
+    async findTunnel(tenantId) {
+        const list = await this.call('GET', this.acct(`/cfd_tunnel?name=${encodeURIComponent(tunnelNameOf(tenantId))}&is_deleted=false`));
+        return list.find((t) => t.name === tunnelNameOf(tenantId));
+    }
+    async findDns(hostname) {
+        const list = await this.call('GET', this.zone(`/dns_records?type=CNAME&name=${encodeURIComponent(hostname)}`));
+        return list.find((r) => r.name === hostname);
+    }
+    async provision(tenant) {
+        const hostname = this.hostnameOf(tenant.slug);
+        const tunnel = (await this.findTunnel(tenant.id)) ??
+            (await this.call('POST', this.acct('/cfd_tunnel'), { name: tunnelNameOf(tenant.id), config_src: 'cloudflare' }));
+        await this.call('PUT', this.acct(`/cfd_tunnel/${tunnel.id}/configurations`), {
+            config: { ingress: [{ hostname, service: `http://localhost:${this.beePort}` }, { service: 'http_status:404' }] },
+        });
+        const target = `${tunnel.id}.cfargotunnel.com`;
+        const dns = await this.findDns(hostname);
+        if (!dns)
+            await this.call('POST', this.zone('/dns_records'), {
+                type: 'CNAME',
+                name: hostname,
+                content: target,
+                proxied: true,
+                ttl: 1,
+                comment: tunnelNameOf(tenant.id),
+            });
+        else if (dns.content !== target || dns.proxied !== true)
+            await this.call('PATCH', this.zone(`/dns_records/${dns.id}`), { content: target, proxied: true });
+        const tunnelToken = await this.call('GET', this.acct(`/cfd_tunnel/${tunnel.id}/token`));
+        return { hostname, tunnelId: tunnel.id, tunnelToken };
+    }
+    async revoke(tenant) {
+        const hostname = this.hostnameOf(tenant.slug);
+        const dns = await this.findDns(hostname);
+        if (dns)
+            await this.call('DELETE', this.zone(`/dns_records/${dns.id}`));
+        const tunnel = await this.findTunnel(tenant.id);
+        if (!tunnel)
+            return;
+        try {
+            await this.call('DELETE', this.acct(`/cfd_tunnel/${tunnel.id}/connections`));
+        }
+        catch (err) {
+            // No live connection to drop is fine; anything else still blocks the delete below and surfaces there.
+            if (!(err instanceof CloudflareApiError) || err.status >= 500)
+                throw err;
+        }
+        await this.call('DELETE', this.acct(`/cfd_tunnel/${tunnel.id}?cascade=true`));
+    }
+    async rotate(tenant) {
+        await this.revoke(tenant);
+        return this.provision(tenant);
+    }
+    async status(tenant) {
+        const list = await this.call('GET', this.acct(`/cfd_tunnel?name=${encodeURIComponent(tunnelNameOf(tenant.id))}`));
+        const live = list.find((t) => t.name === tunnelNameOf(tenant.id) && !t.deleted_at);
+        const hostname = this.hostnameOf(tenant.slug);
+        if (!live)
+            return list.length ? { state: 'revoked', hostname } : { state: 'none' };
+        const connected = live.status === 'healthy' || live.status === 'degraded';
+        return {
+            state: connected ? 'connected' : 'provisioned',
+            hostname,
+            tunnelId: live.id,
+            connectedAt: connected ? (live.conns_active_at ?? undefined) : undefined,
+        };
+    }
+    /** Live `bee-*` tunnels in the account (the staging cap). Pages of 100 until a short page. */
+    async count() {
+        let n = 0;
+        for (let page = 1; page < 50; page++) {
+            const list = await this.call('GET', this.acct(`/cfd_tunnel?is_deleted=false&per_page=100&page=${page}`));
+            n += list.filter((t) => t.name.startsWith(TUNNEL_NAME_PREFIX)).length;
+            if (list.length < 100)
+                break;
+        }
+        return n;
+    }
+}
+//# sourceMappingURL=cloudflare.js.map

package/dist/hive/tunnel/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../../src/hive/tunnel/cloudflare.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,uGAAuG;AACvG,2GAA2G;AAC3G,EAAE;AACF,yGAAyG;AACzG,0GAA0G;AAC1G,EAAE;AACF,iGAAiG;AACjG,yEAAyE;AACzE,qFAAqF;AACrF,8EAA8E;AAC9E,gHAAgH;AAChH,gGAAgG;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,MAAM,CAAC,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAC7D,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IAFX,YACW,MAAc,EACd,KAAe,EACxB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAU;IAI1B,CAAC;CACF;AAoCD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,kBAAkB,GAAG,QAAQ,EAAE,CAAC;AAE7F,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC1B,IAAI,GAAG,YAAqB,CAAC;IACrB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,UAAU,CAA2B;IACrC,SAAS,CAAe;IACxB,SAAS,CAAS;IAEnC,YAAY,OAA0B,EAAE;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC;QACxF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAChJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAChE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE;gBAC7C,MAAM;gBACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACrH,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,IAA+B,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5F,MAAM,IAAI,kBAAkB,CAC1B,GAAG,CAAC,MAAM,EACV,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACzB,cAAc,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEgB,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,aAAa,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;IAChE,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAEnE,KAAK,CAAC,UAAU,CAAC,QAAgB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC9I,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,gCAAgC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9H,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAoB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GACV,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAW,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7H,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,EAAE,iBAAiB,CAAC,EAAE;YAC3E,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE;SACjH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,mBAAmB,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YACN,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;gBACjD,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;aACjC,CAAC,CAAC;aACA,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3J,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAS,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,GAAG;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sGAAsG;YACtG,IAAI,CAAC,CAAC,GAAG,YAAY,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,GAAG,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC;QAC1E,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC9C,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC,CAAC;YACrH,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;YACtE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM;QAC/B,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/hive/tunnel/mock.js

@@ -0,0 +1,52 @@
+// The mock tunnel provider: no network, a fake token, and a hostname under the tenant domain. Local
+// development and the Phase 2 staging setup use it; the hostname it returns maps straight to the
+// cloud-hosted bee-dev there (docs/tinybee/07-coding-agent-handoff.md, Phase 2).
+import { randomBytes } from 'node:crypto';
+import { tenantHostname } from '../config.js';
+export class MockTunnelProvider {
+    hostnameOf;
+    name = 'mock';
+    tunnels = new Map();
+    constructor(hostnameOf = tenantHostname) {
+        this.hostnameOf = hostnameOf;
+    }
+    async provision(tenant) {
+        const existing = this.tunnels.get(tenant.id);
+        if (existing && !existing.revoked)
+            return { hostname: existing.hostname, tunnelId: existing.tunnelId, tunnelToken: existing.tunnelToken };
+        const t = {
+            hostname: this.hostnameOf(tenant.slug),
+            tunnelId: `mock-${tenant.id}`,
+            tunnelToken: `mock.${randomBytes(24).toString('base64url')}`,
+        };
+        this.tunnels.set(tenant.id, { ...t });
+        return t;
+    }
+    async revoke(tenant) {
+        const t = this.tunnels.get(tenant.id);
+        if (t)
+            t.revoked = true;
+    }
+    async rotate(tenant) {
+        this.tunnels.delete(tenant.id);
+        return this.provision(tenant);
+    }
+    async status(tenant) {
+        const t = this.tunnels.get(tenant.id);
+        if (!t)
+            return { state: 'none' };
+        if (t.revoked)
+            return { state: 'revoked', hostname: t.hostname, tunnelId: t.tunnelId };
+        return { state: t.connectedAt ? 'connected' : 'provisioned', hostname: t.hostname, tunnelId: t.tunnelId, connectedAt: t.connectedAt };
+    }
+    /** Tests mark a tunnel connected, as a Bee heartbeat would. */
+    markConnected(tenantId, at = new Date().toISOString()) {
+        const t = this.tunnels.get(tenantId);
+        if (t)
+            t.connectedAt = at;
+    }
+    async count() {
+        return [...this.tunnels.values()].filter((t) => !t.revoked).length;
+    }
+}
+//# sourceMappingURL=mock.js.map

package/dist/hive/tunnel/mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../../src/hive/tunnel/mock.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,iGAAiG;AACjG,iFAAiF;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,MAAM,OAAO,kBAAkB;IAIA;IAHpB,IAAI,GAAG,MAAe,CAAC;IACf,OAAO,GAAG,IAAI,GAAG,EAA2E,CAAC;IAE9G,YAA6B,aAAuC,cAAc;QAArD,eAAU,GAAV,UAAU,CAA2C;IAAG,CAAC;IAEtF,KAAK,CAAC,SAAS,CAAC,MAAoB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1I,MAAM,CAAC,GAAsB;YAC3B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YACtC,QAAQ,EAAE,QAAQ,MAAM,CAAC,EAAE,EAAE;YAC7B,WAAW,EAAE,QAAQ,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;SAC7D,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxI,CAAC;IAED,+DAA+D;IAC/D,aAAa,CAAC,QAAgB,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YAAE,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,CAAC;CACF"}

package/dist/hive/tunnel/provider.js

@@ -0,0 +1,19 @@
+// Tunnel provisioning behind one interface (docs/tinybee/02-architecture-pairing.md section 5), so the
+// Cloudflare implementation can be swapped for a Tailscale or self-hosted relay later. Hive calls it
+// during pairing; the Bee only ever sees the resulting token and hostname.
+import { hiveConfig } from '../config.js';
+import { MockTunnelProvider } from './mock.js';
+import { CloudflareTunnelProvider } from './cloudflare.js';
+let provider;
+/** The configured provider: cloudflare when the CF_* vars are set (or TINYBEE_TUNNEL_PROVIDER says so), else mock. */
+export function tunnelProvider() {
+    if (provider)
+        return provider;
+    provider = hiveConfig.tunnelProvider === 'cloudflare' ? new CloudflareTunnelProvider() : new MockTunnelProvider();
+    return provider;
+}
+/** Tests install a provider of their own. */
+export function setTunnelProvider(p) {
+    provider = p;
+}
+//# sourceMappingURL=provider.js.map