@01.software/sdk 0.5.4 → 0.5.6

package/dist/auth.cjs

@@ -16,26 +16,6 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var __async = (__this, __arguments, generator) => {
-  return new Promise((resolve, reject) => {
-    var fulfilled = (value) => {
-      try {
-        step(generator.next(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var rejected = (value) => {
-      try {
-        step(generator.throw(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
-    step((generator = generator.apply(__this, __arguments)).next());
-  });
-};
 
 // src/auth.ts
 var auth_exports = {};
@@ -50,33 +30,29 @@ module.exports = __toCommonJS(auth_exports);
 
 // src/core/internal/utils/jwt.ts
 var import_jose = require("jose");
-function createServerToken(clientKey, secretKey, expiresIn = "1h") {
-  return __async(this, null, function* () {
-    if (!clientKey || !secretKey) {
-      throw new Error("clientKey and secretKey are required.");
-    }
-    const secret = new TextEncoder().encode(secretKey);
-    return new import_jose.SignJWT({ clientKey }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(secret);
-  });
+async function createServerToken(clientKey, secretKey, expiresIn = "1h") {
+  if (!clientKey || !secretKey) {
+    throw new Error("clientKey and secretKey are required.");
+  }
+  const secret = new TextEncoder().encode(secretKey);
+  return new import_jose.SignJWT({ clientKey }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(secret);
 }
-function verifyServerToken(token, secretKey) {
-  return __async(this, null, function* () {
-    if (!token || !secretKey) {
-      throw new Error("token and secretKey are required.");
-    }
-    const secret = new TextEncoder().encode(secretKey);
-    const { payload } = yield (0, import_jose.jwtVerify)(token, secret, {
-      algorithms: ["HS256"]
-    });
-    if (!payload.clientKey || typeof payload.clientKey !== "string") {
-      throw new Error("Invalid token payload: clientKey is missing");
-    }
-    return {
-      clientKey: payload.clientKey,
-      iat: payload.iat,
-      exp: payload.exp
-    };
+async function verifyServerToken(token, secretKey) {
+  if (!token || !secretKey) {
+    throw new Error("token and secretKey are required.");
+  }
+  const secret = new TextEncoder().encode(secretKey);
+  const { payload } = await (0, import_jose.jwtVerify)(token, secret, {
+    algorithms: ["HS256"]
   });
+  if (!payload.clientKey || typeof payload.clientKey !== "string") {
+    throw new Error("Invalid token payload: clientKey is missing");
+  }
+  return {
+    clientKey: payload.clientKey,
+    iat: payload.iat,
+    exp: payload.exp
+  };
 }
 function decodeServerToken(token) {
   if (!token) {
@@ -124,7 +100,7 @@ function parseApiKey(apiKey) {
       throw new Error("Invalid format: empty clientKey or secretKey");
     }
     return { clientKey, secretKey };
-  } catch (e) {
+  } catch {
     throw new Error(
       'Invalid API key. Expected Base64 encoded "clientKey:secretKey"'
     );

package/dist/auth.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth.ts","../src/core/internal/utils/jwt.ts","../src/core/internal/utils/encoding.ts"],"sourcesContent":["export type { JwtPayload } from './core/internal/utils'\nexport {\n  createServerToken,\n  verifyServerToken,\n  decodeServerToken,\n  createApiKey,\n  parseApiKey,\n} from './core/internal/utils'\n","import { SignJWT, jwtVerify, decodeJwt } from 'jose'\n\nexport interface JwtPayload {\n  clientKey: string\n  iat?: number\n  exp?: number\n}\n\n/**\n * Creates a JWT token for server-side authentication.\n * The token is valid for 1 hour by default.\n */\nexport async function createServerToken(\n  clientKey: string,\n  secretKey: string,\n  expiresIn: string = '1h',\n): Promise<string> {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  return new SignJWT({ clientKey })\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n    .sign(secret)\n}\n\n/**\n * Verifies a JWT token and returns the payload.\n */\nexport async function verifyServerToken(\n  token: string,\n  secretKey: string,\n): Promise<JwtPayload> {\n  if (!token || !secretKey) {\n    throw new Error('token and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  const { payload } = await jwtVerify(token, secret, {\n    algorithms: ['HS256'],\n  })\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n\n/**\n * Decodes a JWT token without verification.\n * WARNING: Use this only when you need to inspect token contents.\n * Always use verifyServerToken for authentication.\n */\nexport function decodeServerToken(token: string): JwtPayload {\n  if (!token) {\n    throw new Error('token is required.')\n  }\n\n  const payload = decodeJwt(token)\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n","/**\n * Creates a Base64-encoded API key from clientKey and secretKey.\n */\nexport function createApiKey(clientKey: string, secretKey: string): string {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  if (typeof Buffer !== 'undefined') {\n    return Buffer.from(`${clientKey}:${secretKey}`).toString('base64')\n  }\n  return btoa(`${clientKey}:${secretKey}`)\n}\n\n/**\n * Parses a Base64-encoded API key to extract clientKey and secretKey.\n */\nexport function parseApiKey(apiKey: string): {\n  clientKey: string\n  secretKey: string\n} {\n  if (!apiKey) {\n    throw new Error('apiKey is required.')\n  }\n\n  try {\n    let decoded: string\n    if (typeof Buffer !== 'undefined') {\n      decoded = Buffer.from(apiKey, 'base64').toString('utf-8')\n    } else {\n      decoded = atob(apiKey)\n    }\n\n    const colonIndex = decoded.indexOf(':')\n    if (colonIndex === -1) {\n      throw new Error('Invalid format: missing colon separator')\n    }\n\n    const clientKey = decoded.substring(0, colonIndex)\n    const secretKey = decoded.substring(colonIndex + 1)\n\n    if (!clientKey || !secretKey) {\n      throw new Error('Invalid format: empty clientKey or secretKey')\n    }\n\n    return { clientKey, secretKey }\n  } catch {\n    throw new Error(\n      'Invalid API key. Expected Base64 encoded \"clientKey:secretKey\"',\n    )\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,kBAA8C;AAY9C,SAAsB,kBACpB,WACA,WACA,YAAoB,MACH;AAAA;AACjB,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAEA,UAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,WAAO,IAAI,oBAAQ,EAAE,UAAU,CAAC,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,SAAS,EAC3B,KAAK,MAAM;AAAA,EAChB;AAAA;AAKA,SAAsB,kBACpB,OACA,WACqB;AAAA;AACrB,QAAI,CAAC,SAAS,CAAC,WAAW;AACxB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAEA,UAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,UAAM,EAAE,QAAQ,IAAI,UAAM,uBAAU,OAAO,QAAQ;AAAA,MACjD,YAAY,CAAC,OAAO;AAAA,IACtB,CAAC;AAED,QAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AAEA,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA;AAOO,SAAS,kBAAkB,OAA2B;AAC3D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,cAAU,uBAAU,KAAK;AAE/B,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;;;AC1EO,SAAS,aAAa,WAAmB,WAA2B;AACzE,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,OAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE,EAAE,SAAS,QAAQ;AAAA,EACnE;AACA,SAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE;AACzC;AAKO,SAAS,YAAY,QAG1B;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,MAAI;AACF,QAAI;AACJ,QAAI,OAAO,WAAW,aAAa;AACjC,gBAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC1D,OAAO;AACL,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,UAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAI,eAAe,IAAI;AACrB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,YAAY,QAAQ,UAAU,GAAG,UAAU;AACjD,UAAM,YAAY,QAAQ,UAAU,aAAa,CAAC;AAElD,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AAEA,WAAO,EAAE,WAAW,UAAU;AAAA,EAChC,SAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/auth.ts","../src/core/internal/utils/jwt.ts","../src/core/internal/utils/encoding.ts"],"sourcesContent":["export type { JwtPayload } from './core/internal/utils'\nexport {\n  createServerToken,\n  verifyServerToken,\n  decodeServerToken,\n  createApiKey,\n  parseApiKey,\n} from './core/internal/utils'\n","import { SignJWT, jwtVerify, decodeJwt } from 'jose'\n\nexport interface JwtPayload {\n  clientKey: string\n  iat?: number\n  exp?: number\n}\n\n/**\n * Creates a JWT token for server-side authentication.\n * The token is valid for 1 hour by default.\n */\nexport async function createServerToken(\n  clientKey: string,\n  secretKey: string,\n  expiresIn: string = '1h',\n): Promise<string> {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  return new SignJWT({ clientKey })\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n    .sign(secret)\n}\n\n/**\n * Verifies a JWT token and returns the payload.\n */\nexport async function verifyServerToken(\n  token: string,\n  secretKey: string,\n): Promise<JwtPayload> {\n  if (!token || !secretKey) {\n    throw new Error('token and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  const { payload } = await jwtVerify(token, secret, {\n    algorithms: ['HS256'],\n  })\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n\n/**\n * Decodes a JWT token without verification.\n * WARNING: Use this only when you need to inspect token contents.\n * Always use verifyServerToken for authentication.\n */\nexport function decodeServerToken(token: string): JwtPayload {\n  if (!token) {\n    throw new Error('token is required.')\n  }\n\n  const payload = decodeJwt(token)\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n","/**\n * Creates a Base64-encoded API key from clientKey and secretKey.\n */\nexport function createApiKey(clientKey: string, secretKey: string): string {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  if (typeof Buffer !== 'undefined') {\n    return Buffer.from(`${clientKey}:${secretKey}`).toString('base64')\n  }\n  return btoa(`${clientKey}:${secretKey}`)\n}\n\n/**\n * Parses a Base64-encoded API key to extract clientKey and secretKey.\n */\nexport function parseApiKey(apiKey: string): {\n  clientKey: string\n  secretKey: string\n} {\n  if (!apiKey) {\n    throw new Error('apiKey is required.')\n  }\n\n  try {\n    let decoded: string\n    if (typeof Buffer !== 'undefined') {\n      decoded = Buffer.from(apiKey, 'base64').toString('utf-8')\n    } else {\n      decoded = atob(apiKey)\n    }\n\n    const colonIndex = decoded.indexOf(':')\n    if (colonIndex === -1) {\n      throw new Error('Invalid format: missing colon separator')\n    }\n\n    const clientKey = decoded.substring(0, colonIndex)\n    const secretKey = decoded.substring(colonIndex + 1)\n\n    if (!clientKey || !secretKey) {\n      throw new Error('Invalid format: empty clientKey or secretKey')\n    }\n\n    return { clientKey, secretKey }\n  } catch {\n    throw new Error(\n      'Invalid API key. Expected Base64 encoded \"clientKey:secretKey\"',\n    )\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,kBAA8C;AAY9C,eAAsB,kBACpB,WACA,WACA,YAAoB,MACH;AACjB,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,SAAO,IAAI,oBAAQ,EAAE,UAAU,CAAC,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,SAAS,EAC3B,KAAK,MAAM;AAChB;AAKA,eAAsB,kBACpB,OACA,WACqB;AACrB,MAAI,CAAC,SAAS,CAAC,WAAW;AACxB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,QAAM,EAAE,QAAQ,IAAI,UAAM,uBAAU,OAAO,QAAQ;AAAA,IACjD,YAAY,CAAC,OAAO;AAAA,EACtB,CAAC;AAED,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;AAOO,SAAS,kBAAkB,OAA2B;AAC3D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,cAAU,uBAAU,KAAK;AAE/B,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;;;AC1EO,SAAS,aAAa,WAAmB,WAA2B;AACzE,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,OAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE,EAAE,SAAS,QAAQ;AAAA,EACnE;AACA,SAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE;AACzC;AAKO,SAAS,YAAY,QAG1B;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,MAAI;AACF,QAAI;AACJ,QAAI,OAAO,WAAW,aAAa;AACjC,gBAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC1D,OAAO;AACL,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,UAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAI,eAAe,IAAI;AACrB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,YAAY,QAAQ,UAAU,GAAG,UAAU;AACjD,UAAM,YAAY,QAAQ,UAAU,aAAa,CAAC;AAElD,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AAEA,WAAO,EAAE,WAAW,UAAU;AAAA,EAChC,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/auth.d.cts

@@ -1,4 +1,4 @@
-import './payload-types-D8fN_vZR.cjs';
+import './payload-types-B98DjTLi.cjs';
 
 interface JwtPayload {
     clientKey: string;

package/dist/auth.d.ts

@@ -1,4 +1,4 @@
-import './payload-types-D8fN_vZR.js';
+import './payload-types-B98DjTLi.js';
 
 interface JwtPayload {
     clientKey: string;

package/dist/auth.js

@@ -1,53 +1,28 @@
-var __async = (__this, __arguments, generator) => {
-  return new Promise((resolve, reject) => {
-    var fulfilled = (value) => {
-      try {
-        step(generator.next(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var rejected = (value) => {
-      try {
-        step(generator.throw(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
-    step((generator = generator.apply(__this, __arguments)).next());
-  });
-};
-
 // src/core/internal/utils/jwt.ts
 import { SignJWT, jwtVerify, decodeJwt } from "jose";
-function createServerToken(clientKey, secretKey, expiresIn = "1h") {
-  return __async(this, null, function* () {
-    if (!clientKey || !secretKey) {
-      throw new Error("clientKey and secretKey are required.");
-    }
-    const secret = new TextEncoder().encode(secretKey);
-    return new SignJWT({ clientKey }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(secret);
-  });
+async function createServerToken(clientKey, secretKey, expiresIn = "1h") {
+  if (!clientKey || !secretKey) {
+    throw new Error("clientKey and secretKey are required.");
+  }
+  const secret = new TextEncoder().encode(secretKey);
+  return new SignJWT({ clientKey }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(secret);
 }
-function verifyServerToken(token, secretKey) {
-  return __async(this, null, function* () {
-    if (!token || !secretKey) {
-      throw new Error("token and secretKey are required.");
-    }
-    const secret = new TextEncoder().encode(secretKey);
-    const { payload } = yield jwtVerify(token, secret, {
-      algorithms: ["HS256"]
-    });
-    if (!payload.clientKey || typeof payload.clientKey !== "string") {
-      throw new Error("Invalid token payload: clientKey is missing");
-    }
-    return {
-      clientKey: payload.clientKey,
-      iat: payload.iat,
-      exp: payload.exp
-    };
+async function verifyServerToken(token, secretKey) {
+  if (!token || !secretKey) {
+    throw new Error("token and secretKey are required.");
+  }
+  const secret = new TextEncoder().encode(secretKey);
+  const { payload } = await jwtVerify(token, secret, {
+    algorithms: ["HS256"]
   });
+  if (!payload.clientKey || typeof payload.clientKey !== "string") {
+    throw new Error("Invalid token payload: clientKey is missing");
+  }
+  return {
+    clientKey: payload.clientKey,
+    iat: payload.iat,
+    exp: payload.exp
+  };
 }
 function decodeServerToken(token) {
   if (!token) {
@@ -95,7 +70,7 @@ function parseApiKey(apiKey) {
       throw new Error("Invalid format: empty clientKey or secretKey");
     }
     return { clientKey, secretKey };
-  } catch (e) {
+  } catch {
     throw new Error(
       'Invalid API key. Expected Base64 encoded "clientKey:secretKey"'
     );

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/internal/utils/jwt.ts","../src/core/internal/utils/encoding.ts"],"sourcesContent":["import { SignJWT, jwtVerify, decodeJwt } from 'jose'\n\nexport interface JwtPayload {\n  clientKey: string\n  iat?: number\n  exp?: number\n}\n\n/**\n * Creates a JWT token for server-side authentication.\n * The token is valid for 1 hour by default.\n */\nexport async function createServerToken(\n  clientKey: string,\n  secretKey: string,\n  expiresIn: string = '1h',\n): Promise<string> {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  return new SignJWT({ clientKey })\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n    .sign(secret)\n}\n\n/**\n * Verifies a JWT token and returns the payload.\n */\nexport async function verifyServerToken(\n  token: string,\n  secretKey: string,\n): Promise<JwtPayload> {\n  if (!token || !secretKey) {\n    throw new Error('token and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  const { payload } = await jwtVerify(token, secret, {\n    algorithms: ['HS256'],\n  })\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n\n/**\n * Decodes a JWT token without verification.\n * WARNING: Use this only when you need to inspect token contents.\n * Always use verifyServerToken for authentication.\n */\nexport function decodeServerToken(token: string): JwtPayload {\n  if (!token) {\n    throw new Error('token is required.')\n  }\n\n  const payload = decodeJwt(token)\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n","/**\n * Creates a Base64-encoded API key from clientKey and secretKey.\n */\nexport function createApiKey(clientKey: string, secretKey: string): string {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  if (typeof Buffer !== 'undefined') {\n    return Buffer.from(`${clientKey}:${secretKey}`).toString('base64')\n  }\n  return btoa(`${clientKey}:${secretKey}`)\n}\n\n/**\n * Parses a Base64-encoded API key to extract clientKey and secretKey.\n */\nexport function parseApiKey(apiKey: string): {\n  clientKey: string\n  secretKey: string\n} {\n  if (!apiKey) {\n    throw new Error('apiKey is required.')\n  }\n\n  try {\n    let decoded: string\n    if (typeof Buffer !== 'undefined') {\n      decoded = Buffer.from(apiKey, 'base64').toString('utf-8')\n    } else {\n      decoded = atob(apiKey)\n    }\n\n    const colonIndex = decoded.indexOf(':')\n    if (colonIndex === -1) {\n      throw new Error('Invalid format: missing colon separator')\n    }\n\n    const clientKey = decoded.substring(0, colonIndex)\n    const secretKey = decoded.substring(colonIndex + 1)\n\n    if (!clientKey || !secretKey) {\n      throw new Error('Invalid format: empty clientKey or secretKey')\n    }\n\n    return { clientKey, secretKey }\n  } catch {\n    throw new Error(\n      'Invalid API key. Expected Base64 encoded \"clientKey:secretKey\"',\n    )\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,WAAW,iBAAiB;AAY9C,SAAsB,kBACpB,WACA,WACA,YAAoB,MACH;AAAA;AACjB,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAEA,UAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,WAAO,IAAI,QAAQ,EAAE,UAAU,CAAC,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,SAAS,EAC3B,KAAK,MAAM;AAAA,EAChB;AAAA;AAKA,SAAsB,kBACpB,OACA,WACqB;AAAA;AACrB,QAAI,CAAC,SAAS,CAAC,WAAW;AACxB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAEA,UAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,UAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,OAAO,QAAQ;AAAA,MACjD,YAAY,CAAC,OAAO;AAAA,IACtB,CAAC;AAED,QAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AAEA,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA;AAOO,SAAS,kBAAkB,OAA2B;AAC3D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,UAAU,UAAU,KAAK;AAE/B,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;;;AC1EO,SAAS,aAAa,WAAmB,WAA2B;AACzE,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,OAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE,EAAE,SAAS,QAAQ;AAAA,EACnE;AACA,SAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE;AACzC;AAKO,SAAS,YAAY,QAG1B;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,MAAI;AACF,QAAI;AACJ,QAAI,OAAO,WAAW,aAAa;AACjC,gBAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC1D,OAAO;AACL,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,UAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAI,eAAe,IAAI;AACrB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,YAAY,QAAQ,UAAU,GAAG,UAAU;AACjD,UAAM,YAAY,QAAQ,UAAU,aAAa,CAAC;AAElD,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AAEA,WAAO,EAAE,WAAW,UAAU;AAAA,EAChC,SAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/core/internal/utils/jwt.ts","../src/core/internal/utils/encoding.ts"],"sourcesContent":["import { SignJWT, jwtVerify, decodeJwt } from 'jose'\n\nexport interface JwtPayload {\n  clientKey: string\n  iat?: number\n  exp?: number\n}\n\n/**\n * Creates a JWT token for server-side authentication.\n * The token is valid for 1 hour by default.\n */\nexport async function createServerToken(\n  clientKey: string,\n  secretKey: string,\n  expiresIn: string = '1h',\n): Promise<string> {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  return new SignJWT({ clientKey })\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(expiresIn)\n    .sign(secret)\n}\n\n/**\n * Verifies a JWT token and returns the payload.\n */\nexport async function verifyServerToken(\n  token: string,\n  secretKey: string,\n): Promise<JwtPayload> {\n  if (!token || !secretKey) {\n    throw new Error('token and secretKey are required.')\n  }\n\n  const secret = new TextEncoder().encode(secretKey)\n  const { payload } = await jwtVerify(token, secret, {\n    algorithms: ['HS256'],\n  })\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n\n/**\n * Decodes a JWT token without verification.\n * WARNING: Use this only when you need to inspect token contents.\n * Always use verifyServerToken for authentication.\n */\nexport function decodeServerToken(token: string): JwtPayload {\n  if (!token) {\n    throw new Error('token is required.')\n  }\n\n  const payload = decodeJwt(token)\n\n  if (!payload.clientKey || typeof payload.clientKey !== 'string') {\n    throw new Error('Invalid token payload: clientKey is missing')\n  }\n\n  return {\n    clientKey: payload.clientKey as string,\n    iat: payload.iat,\n    exp: payload.exp,\n  }\n}\n","/**\n * Creates a Base64-encoded API key from clientKey and secretKey.\n */\nexport function createApiKey(clientKey: string, secretKey: string): string {\n  if (!clientKey || !secretKey) {\n    throw new Error('clientKey and secretKey are required.')\n  }\n\n  if (typeof Buffer !== 'undefined') {\n    return Buffer.from(`${clientKey}:${secretKey}`).toString('base64')\n  }\n  return btoa(`${clientKey}:${secretKey}`)\n}\n\n/**\n * Parses a Base64-encoded API key to extract clientKey and secretKey.\n */\nexport function parseApiKey(apiKey: string): {\n  clientKey: string\n  secretKey: string\n} {\n  if (!apiKey) {\n    throw new Error('apiKey is required.')\n  }\n\n  try {\n    let decoded: string\n    if (typeof Buffer !== 'undefined') {\n      decoded = Buffer.from(apiKey, 'base64').toString('utf-8')\n    } else {\n      decoded = atob(apiKey)\n    }\n\n    const colonIndex = decoded.indexOf(':')\n    if (colonIndex === -1) {\n      throw new Error('Invalid format: missing colon separator')\n    }\n\n    const clientKey = decoded.substring(0, colonIndex)\n    const secretKey = decoded.substring(colonIndex + 1)\n\n    if (!clientKey || !secretKey) {\n      throw new Error('Invalid format: empty clientKey or secretKey')\n    }\n\n    return { clientKey, secretKey }\n  } catch {\n    throw new Error(\n      'Invalid API key. Expected Base64 encoded \"clientKey:secretKey\"',\n    )\n  }\n}\n"],"mappings":";AAAA,SAAS,SAAS,WAAW,iBAAiB;AAY9C,eAAsB,kBACpB,WACA,WACA,YAAoB,MACH;AACjB,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,SAAO,IAAI,QAAQ,EAAE,UAAU,CAAC,EAC7B,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,SAAS,EAC3B,KAAK,MAAM;AAChB;AAKA,eAAsB,kBACpB,OACA,WACqB;AACrB,MAAI,CAAC,SAAS,CAAC,WAAW;AACxB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,OAAO,SAAS;AACjD,QAAM,EAAE,QAAQ,IAAI,MAAM,UAAU,OAAO,QAAQ;AAAA,IACjD,YAAY,CAAC,OAAO;AAAA,EACtB,CAAC;AAED,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;AAOO,SAAS,kBAAkB,OAA2B;AAC3D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,UAAU,UAAU,KAAK;AAE/B,MAAI,CAAC,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;AAC/D,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB,KAAK,QAAQ;AAAA,IACb,KAAK,QAAQ;AAAA,EACf;AACF;;;AC1EO,SAAS,aAAa,WAAmB,WAA2B;AACzE,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,OAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE,EAAE,SAAS,QAAQ;AAAA,EACnE;AACA,SAAO,KAAK,GAAG,SAAS,IAAI,SAAS,EAAE;AACzC;AAKO,SAAS,YAAY,QAG1B;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,qBAAqB;AAAA,EACvC;AAEA,MAAI;AACF,QAAI;AACJ,QAAI,OAAO,WAAW,aAAa;AACjC,gBAAU,OAAO,KAAK,QAAQ,QAAQ,EAAE,SAAS,OAAO;AAAA,IAC1D,OAAO;AACL,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,UAAM,aAAa,QAAQ,QAAQ,GAAG;AACtC,QAAI,eAAe,IAAI;AACrB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAEA,UAAM,YAAY,QAAQ,UAAU,GAAG,UAAU;AACjD,UAAM,YAAY,QAAQ,UAAU,aAAa,CAAC;AAElD,QAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AAEA,WAAO,EAAE,WAAW,UAAU;AAAA,EAChC,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{const-JbuUTzeh.d.ts → const-Blyfn0_b.d.ts}

@@ -1,4 +1,4 @@
-import { C as Config } from './payload-types-D8fN_vZR.js';
+import { C as Config } from './payload-types-B98DjTLi.js';
 
 /**
  * Collection type derived from Payload Config.

package/dist/{const-C9I6r5Wa.d.cts → const-DbDP4kYA.d.cts}

@@ -1,4 +1,4 @@
-import { C as Config } from './payload-types-D8fN_vZR.cjs';
+import { C as Config } from './payload-types-B98DjTLi.cjs';
 
 /**
  * Collection type derived from Payload Config.