@akira-io/billing-js 0.1.9 → 0.3.1

package/dist/loopback.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/oauth.ts","../src/loopback.ts"],"names":["createServer"],"mappings":";;;;;;;AAEA,SAAS,qBAAqB,KAAA,EAA2B;AACrD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,IAAO,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAW,CAAA;AACpF,EAAA,OAAO,IAAA,CAAK,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC9E;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAM,CAAA;AACjC,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AACrC,EAAA,OAAO,GAAA;AACX;AAEA,eAAsB,qBAAA,GAAgD;AAClE,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAE1F,EAAA,MAAM,QAAA,GAAW,oBAAA,CAAqB,WAAA,CAAY,EAAE,CAAC,CAAA;AACrD,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,QAAQ,CAAC,CAAA;AAC9E,EAAA,MAAM,SAAA,GAAY,oBAAA,CAAqB,IAAI,UAAA,CAAW,IAAI,CAAC,CAAA;AAE3D,EAAA,OAAO,EAAE,QAAA,EAAU,SAAA,EAAW,MAAA,EAAQ,MAAA,EAAO;AACjD;AAEO,SAAS,kBAAA,GAA6B;AACzC,EAAA,OAAO,oBAAA,CAAqB,WAAA,CAAY,EAAE,CAAC,CAAA;AAC/C;AAEO,SAAS,kBAAkB,IAAA,EAAwC;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IAC/B,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,cAAc,IAAA,CAAK,WAAA;AAAA,IACnB,gBAAgB,IAAA,CAAK,aAAA;AAAA,IACrB,qBAAA,EAAuB,KAAK,mBAAA,IAAuB;AAAA,GACtD,CAAA;AACD,EAAA,IAAI,KAAK,KAAA,EAAO,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,KAAK,KAAK,CAAA;AAE9C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,MAAA,EAAS,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,UAAU,CAAA,CAAA;AAC7D;;;AClCA,IAAM,YAAA,GAAe,CAAA,4PAAA,CAAA;AAsBrB,eAAsB,aAAA,CAClB,QACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,qBAAA,EAAsB;AACzC,EAAA,MAAM,QAAQ,kBAAA,EAAmB;AAEjC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAQ,QAAA,KAAa,MAAM,iBAAA,CAAkB,IAAA,CAAK,SAAA,IAAa,GAAO,CAAA;AAEpF,EAAA,MAAM,WAAA,GAAc,oBAAoB,IAAI,CAAA,GAAA,CAAA;AAC5C,EAAA,MAAM,UAAU,iBAAA,CAAkB;AAAA,IAC9B,OAAA,EAAS,OAAO,UAAA,EAAW;AAAA,IAC3B,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAA;AAAA,IACA,eAAe,IAAA,CAAK,SAAA;AAAA,IACpB,qBAAqB,IAAA,CAAK,MAAA;AAAA,IAC1B;AAAA,GACH,CAAA;AAED,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,CAAK,YAAY,OAAO,CAAA;AAAA,EAClC,SAAS,CAAA,EAAG;AACR,IAAA,MAAA,CAAO,KAAA,EAAM;AACb,IAAA,MAAM,IAAI,MAAM,CAAA,qCAAA,EAAoC,CAAA,CAAY,OAAO,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC3F;AAEA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACA,IAAA,MAAA,GAAS,MAAM,QAAA;AAAA,EACnB,CAAA,SAAE;AACE,IAAA,MAAA,CAAO,KAAA,EAAM;AAAA,EACjB;AAEA,EAAA,IAAI,MAAA,CAAO,UAAU,KAAA,EAAO;AACxB,IAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,iBAAA,CAAkB;AAAA,IAC5C,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,eAAe,IAAA,CAAK;AAAA,GACvB,CAAA;AAED,EAAA,OAAO,EAAE,QAAA,EAAS;AACtB;AAQA,eAAe,kBAAkB,SAAA,EAA0C;AACvE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,MAAM,SAASA,iBAAA,EAAa;AAE5B,IAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAyC,CAAC,KAAK,GAAA,KAAQ;AACxE,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC3B,QAAA,GAAA,CAAI,IAAI,KAAA,CAAM,8BAA8B,CAAC,CAAA;AAC7C,QAAA,MAAA,CAAO,KAAA,EAAM;AAAA,MACjB,GAAG,SAAS,CAAA;AAEZ,MAAA,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,CAAC,CAAA,KAAM;AACxB,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,GAAA,CAAI,CAAC,CAAA;AAAA,MACT,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,SAAA,EAAW,CAAC,GAAA,EAAsB,IAAA,KAAyB;AACjE,QAAA,IAAI;AACA,UAAA,MAAM,SAAS,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,kBAAkB,CAAA;AACzD,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC3C,UAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA;AAE7C,UAAA,IAAA,CAAK,UAAU,GAAA,EAAK;AAAA,YAChB,cAAA,EAAgB,0BAAA;AAAA,YAChB,YAAA,EAAc;AAAA,WACjB,CAAA;AACD,UAAA,IAAA,CAAK,IAAI,YAAY,CAAA;AAErB,UAAA,IAAI,CAAC,IAAA,EAAM,OAAO,IAAI,IAAI,KAAA,CAAM,iCAAiC,CAAC,CAAA;AAClE,UAAA,IAAI,CAAC,KAAA,EAAO,OAAO,IAAI,IAAI,KAAA,CAAM,kCAAkC,CAAC,CAAA;AAEpE,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,QACvB,SAAS,CAAA,EAAG;AACR,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,GAAA,CAAI,CAAU,CAAA;AAAA,QAClB;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,MAAA,CAAO,CAAA,EAAG,WAAA,EAAa,MAAM;AAChC,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,EAAQ;AAC5B,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA;AAAA,IACjD,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,EAC/B,CAAC,CAAA;AACL","file":"loopback.cjs","sourcesContent":["import type { BuildOauthInitUrlOptions, PkceChallenge } from './client-types';\n\nfunction bytesToUrlSafeBase64(bytes: Uint8Array): string {\n    let bin = '';\n    for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i] as number);\n    return btoa(bin).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\nfunction randomBytes(length: number): Uint8Array {\n    const buf = new Uint8Array(length);\n    globalThis.crypto.getRandomValues(buf);\n    return buf;\n}\n\nexport async function generatePkceChallenge(): Promise<PkceChallenge> {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) throw new Error('crypto.subtle not available; cannot generate PKCE challenge');\n\n    const verifier = bytesToUrlSafeBase64(randomBytes(48));\n    const hash = await subtle.digest('SHA-256', new TextEncoder().encode(verifier));\n    const challenge = bytesToUrlSafeBase64(new Uint8Array(hash));\n\n    return { verifier, challenge, method: 'S256' };\n}\n\nexport function generateOauthState(): string {\n    return bytesToUrlSafeBase64(randomBytes(24));\n}\n\nexport function buildOauthInitUrl(opts: BuildOauthInitUrlOptions): string {\n    const base = opts.baseUrl.replace(/\\/$/, '');\n    const params = new URLSearchParams({\n        product: opts.product,\n        redirect_uri: opts.redirectUri,\n        code_challenge: opts.codeChallenge,\n        code_challenge_method: opts.codeChallengeMethod ?? 'S256',\n    });\n    if (opts.state) params.set('state', opts.state);\n\n    return `${base}/auth/${opts.provider}?${params.toString()}`;\n}\n","import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';\nimport { AddressInfo } from 'node:net';\nimport { BillingClient } from './client';\nimport type { OauthExchangeResponse, OauthProvider } from './client-types';\nimport { buildOauthInitUrl, generateOauthState, generatePkceChallenge } from './oauth';\n\nconst SUCCESS_HTML = `<!doctype html><meta charset=utf-8><title>Sign in complete</title><style>body{font-family:-apple-system,system-ui,sans-serif;background:#08080b;color:#e6e6ec;display:grid;place-items:center;height:100vh;margin:0}</style><h1>You can close this tab.</h1>`;\n\nexport interface LoopbackLoginOptions {\n    provider: OauthProvider;\n    product: string;\n    /** Caller-controlled browser opener. Receives the OAuth init URL. */\n    openBrowser: (url: string) => void | Promise<void>;\n    /** Wall-clock timeout for the callback (default: 300 s). */\n    timeoutMs?: number;\n}\n\nexport interface LoopbackOutcome {\n    exchange: OauthExchangeResponse;\n}\n\n/**\n * Desktop loopback PKCE OAuth flow for Node-based consumers.\n *\n * Binds a transient HTTP server on `127.0.0.1`, opens the system browser, waits\n * for the provider redirect, exchanges the code for an access token through the\n * SDK and stores it on the supplied client.\n */\nexport async function loopbackLogin(\n    client: BillingClient,\n    opts: LoopbackLoginOptions,\n): Promise<LoopbackOutcome> {\n    const pkce = await generatePkceChallenge();\n    const state = generateOauthState();\n\n    const { port, server, callback } = await listenForCallback(opts.timeoutMs ?? 300_000);\n\n    const redirectUri = `http://127.0.0.1:${port}/cb`;\n    const authUrl = buildOauthInitUrl({\n        baseUrl: client.getBaseUrl(),\n        provider: opts.provider,\n        product: opts.product,\n        redirectUri,\n        codeChallenge: pkce.challenge,\n        codeChallengeMethod: pkce.method,\n        state,\n    });\n\n    try {\n        await opts.openBrowser(authUrl);\n    } catch (e) {\n        server.close();\n        throw new Error(`loopback: open browser failed — ${(e as Error).message}`, { cause: e });\n    }\n\n    let result: { code: string; state: string };\n    try {\n        result = await callback;\n    } finally {\n        server.close();\n    }\n\n    if (result.state !== state) {\n        throw new Error('loopback: oauth state mismatch');\n    }\n\n    const exchange = await client.exchangeOauthCode({\n        code: result.code,\n        code_verifier: pkce.verifier,\n    });\n\n    return { exchange };\n}\n\ninterface ListenResult {\n    port: number;\n    server: ReturnType<typeof createServer>;\n    callback: Promise<{ code: string; state: string }>;\n}\n\nasync function listenForCallback(timeoutMs: number): Promise<ListenResult> {\n    return new Promise((resolve, reject) => {\n        const server = createServer();\n\n        const callback = new Promise<{ code: string; state: string }>((res, rej) => {\n            const timer = setTimeout(() => {\n                rej(new Error('loopback: callback timed out'));\n                server.close();\n            }, timeoutMs);\n\n            server.once('error', (e) => {\n                clearTimeout(timer);\n                rej(e);\n            });\n\n            server.on('request', (req: IncomingMessage, resp: ServerResponse) => {\n                try {\n                    const reqUrl = new URL(req.url ?? '/', 'http://127.0.0.1');\n                    const code = reqUrl.searchParams.get('code');\n                    const state = reqUrl.searchParams.get('state');\n\n                    resp.writeHead(200, {\n                        'Content-Type': 'text/html; charset=utf-8',\n                        'Connection': 'close',\n                    });\n                    resp.end(SUCCESS_HTML);\n\n                    if (!code) return rej(new Error('loopback: callback missing code'));\n                    if (!state) return rej(new Error('loopback: callback missing state'));\n\n                    clearTimeout(timer);\n                    res({ code, state });\n                } catch (e) {\n                    clearTimeout(timer);\n                    rej(e as Error);\n                }\n            });\n        });\n\n        server.listen(0, '127.0.0.1', () => {\n            const addr = server.address() as AddressInfo;\n            resolve({ port: addr.port, server, callback });\n        });\n\n        server.once('error', reject);\n    });\n}\n"]}

package/dist/loopback.d.cts

@@ -0,0 +1,24 @@
+import { BillingClient } from './client.cjs';
+import { t as OauthProvider, s as OauthExchangeResponse } from './client-types-CtRkHWna.cjs';
+
+interface LoopbackLoginOptions {
+    provider: OauthProvider;
+    product: string;
+    /** Caller-controlled browser opener. Receives the OAuth init URL. */
+    openBrowser: (url: string) => void | Promise<void>;
+    /** Wall-clock timeout for the callback (default: 300 s). */
+    timeoutMs?: number;
+}
+interface LoopbackOutcome {
+    exchange: OauthExchangeResponse;
+}
+/**
+ * Desktop loopback PKCE OAuth flow for Node-based consumers.
+ *
+ * Binds a transient HTTP server on `127.0.0.1`, opens the system browser, waits
+ * for the provider redirect, exchanges the code for an access token through the
+ * SDK and stores it on the supplied client.
+ */
+declare function loopbackLogin(client: BillingClient, opts: LoopbackLoginOptions): Promise<LoopbackOutcome>;
+
+export { type LoopbackLoginOptions, type LoopbackOutcome, loopbackLogin };

package/dist/loopback.d.ts

@@ -0,0 +1,24 @@
+import { BillingClient } from './client.js';
+import { t as OauthProvider, s as OauthExchangeResponse } from './client-types-CtRkHWna.js';
+
+interface LoopbackLoginOptions {
+    provider: OauthProvider;
+    product: string;
+    /** Caller-controlled browser opener. Receives the OAuth init URL. */
+    openBrowser: (url: string) => void | Promise<void>;
+    /** Wall-clock timeout for the callback (default: 300 s). */
+    timeoutMs?: number;
+}
+interface LoopbackOutcome {
+    exchange: OauthExchangeResponse;
+}
+/**
+ * Desktop loopback PKCE OAuth flow for Node-based consumers.
+ *
+ * Binds a transient HTTP server on `127.0.0.1`, opens the system browser, waits
+ * for the provider redirect, exchanges the code for an access token through the
+ * SDK and stores it on the supplied client.
+ */
+declare function loopbackLogin(client: BillingClient, opts: LoopbackLoginOptions): Promise<LoopbackOutcome>;
+
+export { type LoopbackLoginOptions, type LoopbackOutcome, loopbackLogin };

package/dist/loopback.js

@@ -0,0 +1,118 @@
+import { createServer } from 'http';
+
+// src/loopback.ts
+
+// src/oauth.ts
+function bytesToUrlSafeBase64(bytes) {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function randomBytes(length) {
+  const buf = new Uint8Array(length);
+  globalThis.crypto.getRandomValues(buf);
+  return buf;
+}
+async function generatePkceChallenge() {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) throw new Error("crypto.subtle not available; cannot generate PKCE challenge");
+  const verifier = bytesToUrlSafeBase64(randomBytes(48));
+  const hash = await subtle.digest("SHA-256", new TextEncoder().encode(verifier));
+  const challenge = bytesToUrlSafeBase64(new Uint8Array(hash));
+  return { verifier, challenge, method: "S256" };
+}
+function generateOauthState() {
+  return bytesToUrlSafeBase64(randomBytes(24));
+}
+function buildOauthInitUrl(opts) {
+  const base = opts.baseUrl.replace(/\/$/, "");
+  const params = new URLSearchParams({
+    product: opts.product,
+    redirect_uri: opts.redirectUri,
+    code_challenge: opts.codeChallenge,
+    code_challenge_method: opts.codeChallengeMethod ?? "S256"
+  });
+  if (opts.state) params.set("state", opts.state);
+  return `${base}/auth/${opts.provider}?${params.toString()}`;
+}
+
+// src/loopback.ts
+var SUCCESS_HTML = `<!doctype html><meta charset=utf-8><title>Sign in complete</title><style>body{font-family:-apple-system,system-ui,sans-serif;background:#08080b;color:#e6e6ec;display:grid;place-items:center;height:100vh;margin:0}</style><h1>You can close this tab.</h1>`;
+async function loopbackLogin(client, opts) {
+  const pkce = await generatePkceChallenge();
+  const state = generateOauthState();
+  const { port, server, callback } = await listenForCallback(opts.timeoutMs ?? 3e5);
+  const redirectUri = `http://127.0.0.1:${port}/cb`;
+  const authUrl = buildOauthInitUrl({
+    baseUrl: client.getBaseUrl(),
+    provider: opts.provider,
+    product: opts.product,
+    redirectUri,
+    codeChallenge: pkce.challenge,
+    codeChallengeMethod: pkce.method,
+    state
+  });
+  try {
+    await opts.openBrowser(authUrl);
+  } catch (e) {
+    server.close();
+    throw new Error(`loopback: open browser failed \u2014 ${e.message}`, { cause: e });
+  }
+  let result;
+  try {
+    result = await callback;
+  } finally {
+    server.close();
+  }
+  if (result.state !== state) {
+    throw new Error("loopback: oauth state mismatch");
+  }
+  const exchange = await client.exchangeOauthCode({
+    code: result.code,
+    code_verifier: pkce.verifier
+  });
+  return { exchange };
+}
+async function listenForCallback(timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const server = createServer();
+    const callback = new Promise((res, rej) => {
+      const timer = setTimeout(() => {
+        rej(new Error("loopback: callback timed out"));
+        server.close();
+      }, timeoutMs);
+      server.once("error", (e) => {
+        clearTimeout(timer);
+        rej(e);
+      });
+      server.on("request", (req, resp) => {
+        try {
+          const reqUrl = new URL(req.url ?? "/", "http://127.0.0.1");
+          const code = reqUrl.searchParams.get("code");
+          const state = reqUrl.searchParams.get("state");
+          resp.writeHead(200, {
+            "Content-Type": "text/html; charset=utf-8",
+            "Connection": "close"
+          });
+          resp.end(SUCCESS_HTML);
+          if (!code) return rej(new Error("loopback: callback missing code"));
+          if (!state) return rej(new Error("loopback: callback missing state"));
+          clearTimeout(timer);
+          res({ code, state });
+        } catch (e) {
+          clearTimeout(timer);
+          rej(e);
+        }
+      });
+    });
+    server.listen(0, "127.0.0.1", () => {
+      const addr = server.address();
+      resolve({ port: addr.port, server, callback });
+    });
+    server.once("error", reject);
+  });
+}
+
+export { loopbackLogin };
+//# sourceMappingURL=loopback.js.map
+//# sourceMappingURL=loopback.js.map

package/dist/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/oauth.ts","../src/loopback.ts"],"names":[],"mappings":";;;;;AAEA,SAAS,qBAAqB,KAAA,EAA2B;AACrD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,IAAO,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAW,CAAA;AACpF,EAAA,OAAO,IAAA,CAAK,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC9E;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAM,CAAA;AACjC,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AACrC,EAAA,OAAO,GAAA;AACX;AAEA,eAAsB,qBAAA,GAAgD;AAClE,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAE1F,EAAA,MAAM,QAAA,GAAW,oBAAA,CAAqB,WAAA,CAAY,EAAE,CAAC,CAAA;AACrD,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,QAAQ,CAAC,CAAA;AAC9E,EAAA,MAAM,SAAA,GAAY,oBAAA,CAAqB,IAAI,UAAA,CAAW,IAAI,CAAC,CAAA;AAE3D,EAAA,OAAO,EAAE,QAAA,EAAU,SAAA,EAAW,MAAA,EAAQ,MAAA,EAAO;AACjD;AAEO,SAAS,kBAAA,GAA6B;AACzC,EAAA,OAAO,oBAAA,CAAqB,WAAA,CAAY,EAAE,CAAC,CAAA;AAC/C;AAEO,SAAS,kBAAkB,IAAA,EAAwC;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IAC/B,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,cAAc,IAAA,CAAK,WAAA;AAAA,IACnB,gBAAgB,IAAA,CAAK,aAAA;AAAA,IACrB,qBAAA,EAAuB,KAAK,mBAAA,IAAuB;AAAA,GACtD,CAAA;AACD,EAAA,IAAI,KAAK,KAAA,EAAO,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,KAAK,KAAK,CAAA;AAE9C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,MAAA,EAAS,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,UAAU,CAAA,CAAA;AAC7D;;;AClCA,IAAM,YAAA,GAAe,CAAA,4PAAA,CAAA;AAsBrB,eAAsB,aAAA,CAClB,QACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,qBAAA,EAAsB;AACzC,EAAA,MAAM,QAAQ,kBAAA,EAAmB;AAEjC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAQ,QAAA,KAAa,MAAM,iBAAA,CAAkB,IAAA,CAAK,SAAA,IAAa,GAAO,CAAA;AAEpF,EAAA,MAAM,WAAA,GAAc,oBAAoB,IAAI,CAAA,GAAA,CAAA;AAC5C,EAAA,MAAM,UAAU,iBAAA,CAAkB;AAAA,IAC9B,OAAA,EAAS,OAAO,UAAA,EAAW;AAAA,IAC3B,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAA;AAAA,IACA,eAAe,IAAA,CAAK,SAAA;AAAA,IACpB,qBAAqB,IAAA,CAAK,MAAA;AAAA,IAC1B;AAAA,GACH,CAAA;AAED,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,CAAK,YAAY,OAAO,CAAA;AAAA,EAClC,SAAS,CAAA,EAAG;AACR,IAAA,MAAA,CAAO,KAAA,EAAM;AACb,IAAA,MAAM,IAAI,MAAM,CAAA,qCAAA,EAAoC,CAAA,CAAY,OAAO,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC3F;AAEA,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACA,IAAA,MAAA,GAAS,MAAM,QAAA;AAAA,EACnB,CAAA,SAAE;AACE,IAAA,MAAA,CAAO,KAAA,EAAM;AAAA,EACjB;AAEA,EAAA,IAAI,MAAA,CAAO,UAAU,KAAA,EAAO;AACxB,IAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,iBAAA,CAAkB;AAAA,IAC5C,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,eAAe,IAAA,CAAK;AAAA,GACvB,CAAA;AAED,EAAA,OAAO,EAAE,QAAA,EAAS;AACtB;AAQA,eAAe,kBAAkB,SAAA,EAA0C;AACvE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,MAAM,SAAS,YAAA,EAAa;AAE5B,IAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAyC,CAAC,KAAK,GAAA,KAAQ;AACxE,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC3B,QAAA,GAAA,CAAI,IAAI,KAAA,CAAM,8BAA8B,CAAC,CAAA;AAC7C,QAAA,MAAA,CAAO,KAAA,EAAM;AAAA,MACjB,GAAG,SAAS,CAAA;AAEZ,MAAA,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,CAAC,CAAA,KAAM;AACxB,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,GAAA,CAAI,CAAC,CAAA;AAAA,MACT,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,SAAA,EAAW,CAAC,GAAA,EAAsB,IAAA,KAAyB;AACjE,QAAA,IAAI;AACA,UAAA,MAAM,SAAS,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,IAAO,KAAK,kBAAkB,CAAA;AACzD,UAAA,MAAM,IAAA,GAAO,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC3C,UAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA;AAE7C,UAAA,IAAA,CAAK,UAAU,GAAA,EAAK;AAAA,YAChB,cAAA,EAAgB,0BAAA;AAAA,YAChB,YAAA,EAAc;AAAA,WACjB,CAAA;AACD,UAAA,IAAA,CAAK,IAAI,YAAY,CAAA;AAErB,UAAA,IAAI,CAAC,IAAA,EAAM,OAAO,IAAI,IAAI,KAAA,CAAM,iCAAiC,CAAC,CAAA;AAClE,UAAA,IAAI,CAAC,KAAA,EAAO,OAAO,IAAI,IAAI,KAAA,CAAM,kCAAkC,CAAC,CAAA;AAEpE,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,GAAA,CAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,QACvB,SAAS,CAAA,EAAG;AACR,UAAA,YAAA,CAAa,KAAK,CAAA;AAClB,UAAA,GAAA,CAAI,CAAU,CAAA;AAAA,QAClB;AAAA,MACJ,CAAC,CAAA;AAAA,IACL,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,MAAA,CAAO,CAAA,EAAG,WAAA,EAAa,MAAM;AAChC,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,EAAQ;AAC5B,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA;AAAA,IACjD,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,EAC/B,CAAC,CAAA;AACL","file":"loopback.js","sourcesContent":["import type { BuildOauthInitUrlOptions, PkceChallenge } from './client-types';\n\nfunction bytesToUrlSafeBase64(bytes: Uint8Array): string {\n    let bin = '';\n    for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i] as number);\n    return btoa(bin).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\nfunction randomBytes(length: number): Uint8Array {\n    const buf = new Uint8Array(length);\n    globalThis.crypto.getRandomValues(buf);\n    return buf;\n}\n\nexport async function generatePkceChallenge(): Promise<PkceChallenge> {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) throw new Error('crypto.subtle not available; cannot generate PKCE challenge');\n\n    const verifier = bytesToUrlSafeBase64(randomBytes(48));\n    const hash = await subtle.digest('SHA-256', new TextEncoder().encode(verifier));\n    const challenge = bytesToUrlSafeBase64(new Uint8Array(hash));\n\n    return { verifier, challenge, method: 'S256' };\n}\n\nexport function generateOauthState(): string {\n    return bytesToUrlSafeBase64(randomBytes(24));\n}\n\nexport function buildOauthInitUrl(opts: BuildOauthInitUrlOptions): string {\n    const base = opts.baseUrl.replace(/\\/$/, '');\n    const params = new URLSearchParams({\n        product: opts.product,\n        redirect_uri: opts.redirectUri,\n        code_challenge: opts.codeChallenge,\n        code_challenge_method: opts.codeChallengeMethod ?? 'S256',\n    });\n    if (opts.state) params.set('state', opts.state);\n\n    return `${base}/auth/${opts.provider}?${params.toString()}`;\n}\n","import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';\nimport { AddressInfo } from 'node:net';\nimport { BillingClient } from './client';\nimport type { OauthExchangeResponse, OauthProvider } from './client-types';\nimport { buildOauthInitUrl, generateOauthState, generatePkceChallenge } from './oauth';\n\nconst SUCCESS_HTML = `<!doctype html><meta charset=utf-8><title>Sign in complete</title><style>body{font-family:-apple-system,system-ui,sans-serif;background:#08080b;color:#e6e6ec;display:grid;place-items:center;height:100vh;margin:0}</style><h1>You can close this tab.</h1>`;\n\nexport interface LoopbackLoginOptions {\n    provider: OauthProvider;\n    product: string;\n    /** Caller-controlled browser opener. Receives the OAuth init URL. */\n    openBrowser: (url: string) => void | Promise<void>;\n    /** Wall-clock timeout for the callback (default: 300 s). */\n    timeoutMs?: number;\n}\n\nexport interface LoopbackOutcome {\n    exchange: OauthExchangeResponse;\n}\n\n/**\n * Desktop loopback PKCE OAuth flow for Node-based consumers.\n *\n * Binds a transient HTTP server on `127.0.0.1`, opens the system browser, waits\n * for the provider redirect, exchanges the code for an access token through the\n * SDK and stores it on the supplied client.\n */\nexport async function loopbackLogin(\n    client: BillingClient,\n    opts: LoopbackLoginOptions,\n): Promise<LoopbackOutcome> {\n    const pkce = await generatePkceChallenge();\n    const state = generateOauthState();\n\n    const { port, server, callback } = await listenForCallback(opts.timeoutMs ?? 300_000);\n\n    const redirectUri = `http://127.0.0.1:${port}/cb`;\n    const authUrl = buildOauthInitUrl({\n        baseUrl: client.getBaseUrl(),\n        provider: opts.provider,\n        product: opts.product,\n        redirectUri,\n        codeChallenge: pkce.challenge,\n        codeChallengeMethod: pkce.method,\n        state,\n    });\n\n    try {\n        await opts.openBrowser(authUrl);\n    } catch (e) {\n        server.close();\n        throw new Error(`loopback: open browser failed — ${(e as Error).message}`, { cause: e });\n    }\n\n    let result: { code: string; state: string };\n    try {\n        result = await callback;\n    } finally {\n        server.close();\n    }\n\n    if (result.state !== state) {\n        throw new Error('loopback: oauth state mismatch');\n    }\n\n    const exchange = await client.exchangeOauthCode({\n        code: result.code,\n        code_verifier: pkce.verifier,\n    });\n\n    return { exchange };\n}\n\ninterface ListenResult {\n    port: number;\n    server: ReturnType<typeof createServer>;\n    callback: Promise<{ code: string; state: string }>;\n}\n\nasync function listenForCallback(timeoutMs: number): Promise<ListenResult> {\n    return new Promise((resolve, reject) => {\n        const server = createServer();\n\n        const callback = new Promise<{ code: string; state: string }>((res, rej) => {\n            const timer = setTimeout(() => {\n                rej(new Error('loopback: callback timed out'));\n                server.close();\n            }, timeoutMs);\n\n            server.once('error', (e) => {\n                clearTimeout(timer);\n                rej(e);\n            });\n\n            server.on('request', (req: IncomingMessage, resp: ServerResponse) => {\n                try {\n                    const reqUrl = new URL(req.url ?? '/', 'http://127.0.0.1');\n                    const code = reqUrl.searchParams.get('code');\n                    const state = reqUrl.searchParams.get('state');\n\n                    resp.writeHead(200, {\n                        'Content-Type': 'text/html; charset=utf-8',\n                        'Connection': 'close',\n                    });\n                    resp.end(SUCCESS_HTML);\n\n                    if (!code) return rej(new Error('loopback: callback missing code'));\n                    if (!state) return rej(new Error('loopback: callback missing state'));\n\n                    clearTimeout(timer);\n                    res({ code, state });\n                } catch (e) {\n                    clearTimeout(timer);\n                    rej(e as Error);\n                }\n            });\n        });\n\n        server.listen(0, '127.0.0.1', () => {\n            const addr = server.address() as AddressInfo;\n            resolve({ port: addr.port, server, callback });\n        });\n\n        server.once('error', reject);\n    });\n}\n"]}

package/dist/use-auth-Bf4NrNdE.d.ts

@@ -0,0 +1,68 @@
+import { BillingClient } from './client.js';
+import { C as Customer, s as OauthExchangeResponse } from './client-types-CtRkHWna.js';
+import { LoopbackOutcome } from './loopback.js';
+
+/**
+ * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as
+ * an optional dependency; this module dynamically imports it so server-side
+ * bundles never see it.
+ */
+interface TokenKeyringOptions {
+    service: string;
+    account: string;
+}
+declare class TokenKeyring {
+    private readonly service;
+    private readonly account;
+    constructor(opts: TokenKeyringOptions);
+    get(): Promise<string | null>;
+    set(value: string): Promise<void>;
+    delete(): Promise<void>;
+}
+
+declare class SessionStore {
+    private readonly keyring;
+    constructor(keyring: TokenKeyring);
+    hydrate(client: BillingClient): Promise<boolean>;
+    persist(client: BillingClient, token: string): Promise<void>;
+    clear(client: BillingClient): Promise<void>;
+    hasToken(): Promise<boolean>;
+}
+
+type AuthStatusState = {
+    state: 'loading';
+} | {
+    state: 'guest';
+} | {
+    state: 'authenticated';
+    customer: Customer;
+    licensed: boolean;
+};
+interface AuthControllerOptions {
+    client: BillingClient;
+    session: SessionStore;
+    product: string;
+    feature?: string;
+    /** Loopback flow used by `oauthLogin`. */
+    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;
+    /** Override the runtime license check (e.g. cache, custom feature key). */
+    checkLicense?: (client: BillingClient) => Promise<boolean>;
+}
+declare class AuthController {
+    private readonly opts;
+    private listeners;
+    private current;
+    constructor(opts: AuthControllerOptions);
+    subscribe(listener: (s: AuthStatusState) => void): () => void;
+    snapshot(): AuthStatusState;
+    private emit;
+    bootstrap(): Promise<void>;
+    refresh(): Promise<void>;
+    private runDefaultLicenseCheck;
+    requestOtp(email: string, deviceFp?: string): Promise<void>;
+    verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer>;
+    oauthLogin(provider: string): Promise<OauthExchangeResponse>;
+    logout(): Promise<void>;
+}
+
+export { AuthController as A, SessionStore as S, TokenKeyring as T, type AuthControllerOptions as a, type AuthStatusState as b, type TokenKeyringOptions as c };

package/dist/use-auth-BzN6Wcpm.d.cts

@@ -0,0 +1,68 @@
+import { BillingClient } from './client.cjs';
+import { C as Customer, s as OauthExchangeResponse } from './client-types-CtRkHWna.cjs';
+import { LoopbackOutcome } from './loopback.cjs';
+
+/**
+ * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as
+ * an optional dependency; this module dynamically imports it so server-side
+ * bundles never see it.
+ */
+interface TokenKeyringOptions {
+    service: string;
+    account: string;
+}
+declare class TokenKeyring {
+    private readonly service;
+    private readonly account;
+    constructor(opts: TokenKeyringOptions);
+    get(): Promise<string | null>;
+    set(value: string): Promise<void>;
+    delete(): Promise<void>;
+}
+
+declare class SessionStore {
+    private readonly keyring;
+    constructor(keyring: TokenKeyring);
+    hydrate(client: BillingClient): Promise<boolean>;
+    persist(client: BillingClient, token: string): Promise<void>;
+    clear(client: BillingClient): Promise<void>;
+    hasToken(): Promise<boolean>;
+}
+
+type AuthStatusState = {
+    state: 'loading';
+} | {
+    state: 'guest';
+} | {
+    state: 'authenticated';
+    customer: Customer;
+    licensed: boolean;
+};
+interface AuthControllerOptions {
+    client: BillingClient;
+    session: SessionStore;
+    product: string;
+    feature?: string;
+    /** Loopback flow used by `oauthLogin`. */
+    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;
+    /** Override the runtime license check (e.g. cache, custom feature key). */
+    checkLicense?: (client: BillingClient) => Promise<boolean>;
+}
+declare class AuthController {
+    private readonly opts;
+    private listeners;
+    private current;
+    constructor(opts: AuthControllerOptions);
+    subscribe(listener: (s: AuthStatusState) => void): () => void;
+    snapshot(): AuthStatusState;
+    private emit;
+    bootstrap(): Promise<void>;
+    refresh(): Promise<void>;
+    private runDefaultLicenseCheck;
+    requestOtp(email: string, deviceFp?: string): Promise<void>;
+    verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer>;
+    oauthLogin(provider: string): Promise<OauthExchangeResponse>;
+    logout(): Promise<void>;
+}
+
+export { AuthController as A, SessionStore as S, TokenKeyring as T, type AuthControllerOptions as a, type AuthStatusState as b, type TokenKeyringOptions as c };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@akira-io/billing-js",
-    "version": "0.1.9",
+    "version": "0.3.1",
     "description": "TypeScript client for the Akira Billing API. Pricing, downloads, checkout helpers for landing pages and web apps.",
     "license": "MIT",
     "type": "module",
@@ -57,6 +57,26 @@
             "types": "./dist/vue.d.ts",
             "import": "./dist/vue.js",
             "require": "./dist/vue.cjs"
+        },
+        "./loopback": {
+            "types": "./dist/loopback.d.ts",
+            "import": "./dist/loopback.js",
+            "require": "./dist/loopback.cjs"
+        },
+        "./desktop": {
+            "types": "./dist/desktop.d.ts",
+            "import": "./dist/desktop.js",
+            "require": "./dist/desktop.cjs"
+        },
+        "./desktop/react": {
+            "types": "./dist/desktop-react.d.ts",
+            "import": "./dist/desktop-react.js",
+            "require": "./dist/desktop-react.cjs"
+        },
+        "./desktop/vue": {
+            "types": "./dist/desktop-vue.d.ts",
+            "import": "./dist/desktop-vue.js",
+            "require": "./dist/desktop-vue.cjs"
         }
     },
     "peerDependencies": {