@akira-io/billing-js 0.2.0 → 0.3.2

package/dist/desktop.cjs

@@ -0,0 +1,198 @@
+'use strict';
+
+var child_process = require('child_process');
+var crypto = require('crypto');
+var os = require('os');
+
+// src/desktop/checkout.ts
+function checkoutUrl(baseUrl, product) {
+  return `${baseUrl.replace(/\/$/, "")}/plans?product=${encodeURIComponent(product)}`;
+}
+function openBrowser(url) {
+  return new Promise((resolve, reject) => {
+    let cmd;
+    let args;
+    switch (process.platform) {
+      case "darwin":
+        cmd = "open";
+        args = [url];
+        break;
+      case "win32":
+        cmd = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+        break;
+      default:
+        cmd = "xdg-open";
+        args = [url];
+    }
+    const child = child_process.spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.once("error", reject);
+    child.unref();
+    resolve();
+  });
+}
+async function machineId() {
+  const dyn = new Function("m", "return import(m)");
+  try {
+    const mod = await dyn("node-machine-id").catch(() => null);
+    if (mod?.machineIdSync) return mod.machineIdSync(true);
+  } catch {
+  }
+  return os.hostname();
+}
+async function deviceFingerprint(appVersion) {
+  const id = await machineId();
+  const plat = os.platform();
+  const hash = crypto.createHash("sha256");
+  hash.update(id);
+  hash.update("::");
+  hash.update(plat);
+  hash.update("::");
+  hash.update(appVersion);
+  return {
+    fingerprint: hash.digest("hex"),
+    platform: plat,
+    app_version: appVersion
+  };
+}
+
+// src/desktop/keyring.ts
+async function loadKeytar() {
+  const dyn = new Function("m", "return import(m)");
+  const mod = await dyn("keytar").catch(() => null);
+  if (!mod) throw new Error("TokenKeyring: install `keytar` to use the desktop keyring helper.");
+  return mod.default ?? mod;
+}
+var TokenKeyring = class {
+  service;
+  account;
+  constructor(opts) {
+    this.service = opts.service;
+    this.account = opts.account;
+  }
+  async get() {
+    const k = await loadKeytar();
+    return k.getPassword(this.service, this.account);
+  }
+  async set(value) {
+    const k = await loadKeytar();
+    await k.setPassword(this.service, this.account, value);
+  }
+  async delete() {
+    const k = await loadKeytar();
+    await k.deletePassword(this.service, this.account);
+  }
+};
+
+// src/desktop/session.ts
+var SessionStore = class {
+  constructor(keyring) {
+    this.keyring = keyring;
+  }
+  keyring;
+  async hydrate(client) {
+    const token = await this.keyring.get();
+    if (!token) return false;
+    client.setCustomerToken(token);
+    return true;
+  }
+  async persist(client, token) {
+    await this.keyring.set(token);
+    client.setCustomerToken(token);
+  }
+  async clear(client) {
+    await this.keyring.delete();
+    client.setCustomerToken("");
+  }
+  async hasToken() {
+    const v = await this.keyring.get();
+    return !!v;
+  }
+};
+
+// src/desktop/use-auth.ts
+var AuthController = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  opts;
+  listeners = /* @__PURE__ */ new Set();
+  current = { state: "loading" };
+  subscribe(listener) {
+    this.listeners.add(listener);
+    listener(this.current);
+    return () => this.listeners.delete(listener);
+  }
+  snapshot() {
+    return this.current;
+  }
+  emit(next) {
+    this.current = next;
+    this.listeners.forEach((l) => l(next));
+  }
+  async bootstrap() {
+    await this.opts.session.hydrate(this.opts.client);
+    await this.refresh();
+  }
+  async refresh() {
+    if (!await this.opts.session.hasToken()) {
+      this.emit({ state: "guest" });
+      return;
+    }
+    try {
+      const customer = await this.opts.client.customerMe();
+      const licensed = this.opts.checkLicense ? await this.opts.checkLicense(this.opts.client) : await this.runDefaultLicenseCheck();
+      this.emit({ state: "authenticated", customer, licensed });
+    } catch (e) {
+      if (e.status === 401) {
+        await this.opts.session.clear(this.opts.client);
+        this.emit({ state: "guest" });
+        return;
+      }
+      throw e;
+    }
+  }
+  async runDefaultLicenseCheck() {
+    try {
+      const resp = await this.opts.client.licenseCheck({
+        product: this.opts.product,
+        feature: this.opts.feature ?? "general"
+      });
+      return resp.allowed;
+    } catch {
+      return false;
+    }
+  }
+  async requestOtp(email, deviceFp) {
+    await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? "" });
+  }
+  async verifyOtp(email, code, deviceFp) {
+    const resp = await this.opts.client.verifyOtp({
+      email,
+      code,
+      device_fp: deviceFp ?? ""
+    });
+    await this.opts.session.persist(this.opts.client, resp.access_token);
+    await this.refresh();
+    return await this.opts.client.customerMe();
+  }
+  async oauthLogin(provider) {
+    const outcome = await this.opts.loopbackLogin(provider);
+    await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);
+    await this.refresh();
+    return outcome.exchange;
+  }
+  async logout() {
+    await this.opts.session.clear(this.opts.client);
+    this.emit({ state: "guest" });
+  }
+};
+
+exports.AuthController = AuthController;
+exports.SessionStore = SessionStore;
+exports.TokenKeyring = TokenKeyring;
+exports.checkoutUrl = checkoutUrl;
+exports.deviceFingerprint = deviceFingerprint;
+exports.openBrowser = openBrowser;
+//# sourceMappingURL=desktop.cjs.map
+//# sourceMappingURL=desktop.cjs.map

package/dist/desktop.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/checkout.ts","../src/desktop/browser.ts","../src/desktop/fingerprint.ts","../src/desktop/keyring.ts","../src/desktop/session.ts","../src/desktop/use-auth.ts"],"names":["spawn","hostname","platform","createHash"],"mappings":";;;;;;;AACO,SAAS,WAAA,CAAY,SAAiB,OAAA,EAAyB;AAClE,EAAA,OAAO,CAAA,EAAG,QAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,eAAA,EAAkB,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AACrF;ACAO,SAAS,YAAY,GAAA,EAA4B;AACpD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,QAAQ,QAAA;AAAU,MACtB,KAAK,QAAA;AACD,QAAA,GAAA,GAAM,MAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AACX,QAAA;AAAA,MACJ,KAAK,OAAA;AACD,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,+BAA+B,GAAG,CAAA;AAC1C,QAAA;AAAA,MACJ;AACI,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AAAA;AAEnB,IAAA,MAAM,KAAA,GAAQA,oBAAM,GAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU,IAAA,EAAM,CAAA;AAClE,IAAA,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA;AAC1B,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AChBA,eAAe,SAAA,GAA6B;AACxC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,IAAI;AACA,IAAA,MAAM,MAAO,MAAM,GAAA,CAAI,iBAAiB,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC1D,IAAA,IAAI,GAAA,EAAK,aAAA,EAAe,OAAO,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAOC,WAAA,EAAS;AACpB;AAEA,eAAsB,kBAAkB,UAAA,EAAgD;AACpF,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU;AAC3B,EAAA,MAAM,OAAOC,WAAA,EAAS;AACtB,EAAA,MAAM,IAAA,GAAOC,kBAAW,QAAQ,CAAA;AAChC,EAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AACd,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,UAAU,CAAA;AACtB,EAAA,OAAO;AAAA,IACH,WAAA,EAAa,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAAA,IAC9B,QAAA,EAAU,IAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACjB;AACJ;;;AClBA,eAAe,UAAA,GAA8B;AAIzC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,MAAM,MAAO,MAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACjD,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mEAAmE,CAAA;AAC7F,EAAA,OAAO,IAAI,OAAA,IAAY,GAAA;AAC3B;AAEO,IAAM,eAAN,MAAmB;AAAA,EACL,OAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,IAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AACpB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AAAA,EACxB;AAAA,EAEA,MAAM,GAAA,GAA8B;AAChC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,OAAO,CAAA,CAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,IAAI,KAAA,EAA8B;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,EAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,SAAS,KAAK,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,CAAA,CAAE,cAAA,CAAe,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AACJ;;;AC9CO,IAAM,eAAN,MAAmB;AAAA,EACtB,YAA6B,OAAA,EAAuB;AAAvB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAAwB;AAAA,EAAxB,OAAA;AAAA,EAE7B,MAAM,QAAQ,MAAA,EAAyC;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACrC,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAC7B,IAAA,OAAO,IAAA;AAAA,EACX;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAuB,KAAA,EAA8B;AAC/D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AAC5B,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,MAAA,EAAsC;AAC9C,IAAA,MAAM,IAAA,CAAK,QAAQ,MAAA,EAAO;AAC1B,IAAA,MAAA,CAAO,iBAAiB,EAAE,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAA,GAA6B;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACjC,IAAA,OAAO,CAAC,CAAC,CAAA;AAAA,EACb;AACJ;;;ACNO,IAAM,iBAAN,MAAqB;AAAA,EAIxB,YAA6B,IAAA,EAA6B;AAA7B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA8B;AAAA,EAA9B,IAAA;AAAA,EAHrB,SAAA,uBAAgB,GAAA,EAAkC;AAAA,EAClD,OAAA,GAA2B,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA,EAItD,UAAU,QAAA,EAAoD;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC/C;AAAA,EAEA,QAAA,GAA4B;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEQ,KAAK,IAAA,EAA6B;AACtC,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC7B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,KAAK,MAAM,CAAA;AAChD,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACvB;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC3B,IAAA,IAAI,CAAE,MAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,UAAS,EAAI;AACvC,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,MAAA;AAAA,IACJ;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,UAAA,EAAW;AACnD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,YAAA,GACrB,MAAM,IAAA,CAAK,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,GAC7C,MAAM,KAAK,sBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,KAAK,EAAE,KAAA,EAAO,eAAA,EAAiB,QAAA,EAAU,UAAU,CAAA;AAAA,IAC5D,SAAS,CAAA,EAAG;AACR,MAAA,IAAK,CAAA,CAA0B,WAAW,GAAA,EAAK;AAC3C,QAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,CAAA;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,sBAAA,GAA2C;AACrD,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,YAAA,CAAa;AAAA,QAC7C,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,OAAA,IAAW;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,OAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,KAAA;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,UAAA,CAAW,KAAA,EAAe,QAAA,EAAkC;AAC9D,IAAA,MAAM,IAAA,CAAK,KAAK,MAAA,CAAO,UAAA,CAAW,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,IAAY,EAAA,EAAI,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAe,IAAA,EAAc,QAAA,EAAsC;AAC/E,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,SAAA,CAAU;AAAA,MAC1C,KAAA;AAAA,MACA,IAAA;AAAA,MACA,WAAW,QAAA,IAAY;AAAA,KAC1B,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,YAAY,CAAA;AACnE,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAA,EAAW;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAAA,EAAkD;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,IAAA,CAAK,cAAc,QAAQ,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA;AAC/E,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAO,OAAA,CAAQ,QAAA;AAAA,EACnB;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EAChC;AACJ","file":"desktop.cjs","sourcesContent":["/** Build the public checkout URL for a product on the billing site. */\nexport function checkoutUrl(baseUrl: string, product: string): string {\n    return `${baseUrl.replace(/\\/$/, '')}/plans?product=${encodeURIComponent(product)}`;\n}\n","import { spawn } from 'node:child_process';\n\n/** Launch the system default browser. Node-only. */\nexport function openBrowser(url: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        let cmd: string;\n        let args: string[];\n        switch (process.platform) {\n            case 'darwin':\n                cmd = 'open';\n                args = [url];\n                break;\n            case 'win32':\n                cmd = 'rundll32';\n                args = ['url.dll,FileProtocolHandler', url];\n                break;\n            default:\n                cmd = 'xdg-open';\n                args = [url];\n        }\n        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });\n        child.once('error', reject);\n        child.unref();\n        resolve();\n    });\n}\n","import { createHash } from 'node:crypto';\nimport { hostname, platform } from 'node:os';\n\nexport interface DeviceFingerprint {\n    fingerprint: string;\n    platform: string;\n    app_version: string;\n}\n\nasync function machineId(): Promise<string> {\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    try {\n        const mod = (await dyn('node-machine-id').catch(() => null)) as { machineIdSync?: (orig?: boolean) => string } | null;\n        if (mod?.machineIdSync) return mod.machineIdSync(true);\n    } catch {\n        // fallthrough\n    }\n    return hostname();\n}\n\nexport async function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint> {\n    const id = await machineId();\n    const plat = platform();\n    const hash = createHash('sha256');\n    hash.update(id);\n    hash.update('::');\n    hash.update(plat);\n    hash.update('::');\n    hash.update(appVersion);\n    return {\n        fingerprint: hash.digest('hex'),\n        platform: plat,\n        app_version: appVersion,\n    };\n}\n","/**\n * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as\n * an optional dependency; this module dynamically imports it so server-side\n * bundles never see it.\n */\nexport interface TokenKeyringOptions {\n    service: string;\n    account: string;\n}\n\ntype Keytar = {\n    getPassword: (service: string, account: string) => Promise<string | null>;\n    setPassword: (service: string, account: string, password: string) => Promise<void>;\n    deletePassword: (service: string, account: string) => Promise<boolean>;\n};\n\nasync function loadKeytar(): Promise<Keytar> {\n    // Use Function constructor so tsup/typescript don't try to resolve the\n    // optional module at build time. Consumers add `keytar` as a peer/optional\n    // dependency.\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    const mod = (await dyn('keytar').catch(() => null)) as { default?: Keytar } | null;\n    if (!mod) throw new Error('TokenKeyring: install `keytar` to use the desktop keyring helper.');\n    return mod.default ?? (mod as unknown as Keytar);\n}\n\nexport class TokenKeyring {\n    private readonly service: string;\n    private readonly account: string;\n\n    constructor(opts: TokenKeyringOptions) {\n        this.service = opts.service;\n        this.account = opts.account;\n    }\n\n    async get(): Promise<string | null> {\n        const k = await loadKeytar();\n        return k.getPassword(this.service, this.account);\n    }\n\n    async set(value: string): Promise<void> {\n        const k = await loadKeytar();\n        await k.setPassword(this.service, this.account, value);\n    }\n\n    async delete(): Promise<void> {\n        const k = await loadKeytar();\n        await k.deletePassword(this.service, this.account);\n    }\n}\n","import { BillingClient } from '../client';\nimport { TokenKeyring } from './keyring';\n\nexport class SessionStore {\n    constructor(private readonly keyring: TokenKeyring) {}\n\n    async hydrate(client: BillingClient): Promise<boolean> {\n        const token = await this.keyring.get();\n        if (!token) return false;\n        client.setCustomerToken(token);\n        return true;\n    }\n\n    async persist(client: BillingClient, token: string): Promise<void> {\n        await this.keyring.set(token);\n        client.setCustomerToken(token);\n    }\n\n    async clear(client: BillingClient): Promise<void> {\n        await this.keyring.delete();\n        client.setCustomerToken('');\n    }\n\n    async hasToken(): Promise<boolean> {\n        const v = await this.keyring.get();\n        return !!v;\n    }\n}\n","import type { BillingClient } from '../client';\nimport type { Customer, OauthExchangeResponse } from '../client-types';\nimport type { LoopbackOutcome } from '../loopback';\nimport type { SessionStore } from './session';\n\nexport type AuthStatusState =\n    | { state: 'loading' }\n    | { state: 'guest' }\n    | { state: 'authenticated'; customer: Customer; licensed: boolean };\n\nexport interface AuthControllerOptions {\n    client: BillingClient;\n    session: SessionStore;\n    product: string;\n    feature?: string;\n    /** Loopback flow used by `oauthLogin`. */\n    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;\n    /** Override the runtime license check (e.g. cache, custom feature key). */\n    checkLicense?: (client: BillingClient) => Promise<boolean>;\n}\n\nexport class AuthController {\n    private listeners = new Set<(s: AuthStatusState) => void>();\n    private current: AuthStatusState = { state: 'loading' };\n\n    constructor(private readonly opts: AuthControllerOptions) {}\n\n    subscribe(listener: (s: AuthStatusState) => void): () => void {\n        this.listeners.add(listener);\n        listener(this.current);\n        return () => this.listeners.delete(listener);\n    }\n\n    snapshot(): AuthStatusState {\n        return this.current;\n    }\n\n    private emit(next: AuthStatusState): void {\n        this.current = next;\n        this.listeners.forEach((l) => l(next));\n    }\n\n    async bootstrap(): Promise<void> {\n        await this.opts.session.hydrate(this.opts.client);\n        await this.refresh();\n    }\n\n    async refresh(): Promise<void> {\n        if (!(await this.opts.session.hasToken())) {\n            this.emit({ state: 'guest' });\n            return;\n        }\n        try {\n            const customer = await this.opts.client.customerMe();\n            const licensed = this.opts.checkLicense\n                ? await this.opts.checkLicense(this.opts.client)\n                : await this.runDefaultLicenseCheck();\n            this.emit({ state: 'authenticated', customer, licensed });\n        } catch (e) {\n            if ((e as { status?: number }).status === 401) {\n                await this.opts.session.clear(this.opts.client);\n                this.emit({ state: 'guest' });\n                return;\n            }\n            throw e;\n        }\n    }\n\n    private async runDefaultLicenseCheck(): Promise<boolean> {\n        try {\n            const resp = await this.opts.client.licenseCheck({\n                product: this.opts.product,\n                feature: this.opts.feature ?? 'general',\n            });\n            return resp.allowed;\n        } catch {\n            return false;\n        }\n    }\n\n    async requestOtp(email: string, deviceFp?: string): Promise<void> {\n        await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? '' });\n    }\n\n    async verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer> {\n        const resp = await this.opts.client.verifyOtp({\n            email,\n            code,\n            device_fp: deviceFp ?? '',\n        });\n        await this.opts.session.persist(this.opts.client, resp.access_token);\n        await this.refresh();\n        return (await this.opts.client.customerMe());\n    }\n\n    async oauthLogin(provider: string): Promise<OauthExchangeResponse> {\n        const outcome = await this.opts.loopbackLogin(provider);\n        await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);\n        await this.refresh();\n        return outcome.exchange;\n    }\n\n    async logout(): Promise<void> {\n        await this.opts.session.clear(this.opts.client);\n        this.emit({ state: 'guest' });\n    }\n}\n"]}

package/dist/desktop.d.cts

@@ -0,0 +1,19 @@
+export { A as AuthController, a as AuthControllerOptions, b as AuthStatusState, S as SessionStore, T as TokenKeyring, c as TokenKeyringOptions } from './use-auth-Dbol539E.cjs';
+import './client.cjs';
+import './client-types-BRHIoFm6.cjs';
+import './loopback.cjs';
+
+/** Build the public checkout URL for a product on the billing site. */
+declare function checkoutUrl(baseUrl: string, product: string): string;
+
+/** Launch the system default browser. Node-only. */
+declare function openBrowser(url: string): Promise<void>;
+
+interface DeviceFingerprint {
+    fingerprint: string;
+    platform: string;
+    app_version: string;
+}
+declare function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint>;
+
+export { type DeviceFingerprint, checkoutUrl, deviceFingerprint, openBrowser };

package/dist/desktop.d.ts

@@ -0,0 +1,19 @@
+export { A as AuthController, a as AuthControllerOptions, b as AuthStatusState, S as SessionStore, T as TokenKeyring, c as TokenKeyringOptions } from './use-auth-BaAeVSZO.js';
+import './client.js';
+import './client-types-BRHIoFm6.js';
+import './loopback.js';
+
+/** Build the public checkout URL for a product on the billing site. */
+declare function checkoutUrl(baseUrl: string, product: string): string;
+
+/** Launch the system default browser. Node-only. */
+declare function openBrowser(url: string): Promise<void>;
+
+interface DeviceFingerprint {
+    fingerprint: string;
+    platform: string;
+    app_version: string;
+}
+declare function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint>;
+
+export { type DeviceFingerprint, checkoutUrl, deviceFingerprint, openBrowser };

package/dist/desktop.js

@@ -0,0 +1,191 @@
+import { spawn } from 'child_process';
+import { createHash } from 'crypto';
+import { platform, hostname } from 'os';
+
+// src/desktop/checkout.ts
+function checkoutUrl(baseUrl, product) {
+  return `${baseUrl.replace(/\/$/, "")}/plans?product=${encodeURIComponent(product)}`;
+}
+function openBrowser(url) {
+  return new Promise((resolve, reject) => {
+    let cmd;
+    let args;
+    switch (process.platform) {
+      case "darwin":
+        cmd = "open";
+        args = [url];
+        break;
+      case "win32":
+        cmd = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+        break;
+      default:
+        cmd = "xdg-open";
+        args = [url];
+    }
+    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.once("error", reject);
+    child.unref();
+    resolve();
+  });
+}
+async function machineId() {
+  const dyn = new Function("m", "return import(m)");
+  try {
+    const mod = await dyn("node-machine-id").catch(() => null);
+    if (mod?.machineIdSync) return mod.machineIdSync(true);
+  } catch {
+  }
+  return hostname();
+}
+async function deviceFingerprint(appVersion) {
+  const id = await machineId();
+  const plat = platform();
+  const hash = createHash("sha256");
+  hash.update(id);
+  hash.update("::");
+  hash.update(plat);
+  hash.update("::");
+  hash.update(appVersion);
+  return {
+    fingerprint: hash.digest("hex"),
+    platform: plat,
+    app_version: appVersion
+  };
+}
+
+// src/desktop/keyring.ts
+async function loadKeytar() {
+  const dyn = new Function("m", "return import(m)");
+  const mod = await dyn("keytar").catch(() => null);
+  if (!mod) throw new Error("TokenKeyring: install `keytar` to use the desktop keyring helper.");
+  return mod.default ?? mod;
+}
+var TokenKeyring = class {
+  service;
+  account;
+  constructor(opts) {
+    this.service = opts.service;
+    this.account = opts.account;
+  }
+  async get() {
+    const k = await loadKeytar();
+    return k.getPassword(this.service, this.account);
+  }
+  async set(value) {
+    const k = await loadKeytar();
+    await k.setPassword(this.service, this.account, value);
+  }
+  async delete() {
+    const k = await loadKeytar();
+    await k.deletePassword(this.service, this.account);
+  }
+};
+
+// src/desktop/session.ts
+var SessionStore = class {
+  constructor(keyring) {
+    this.keyring = keyring;
+  }
+  keyring;
+  async hydrate(client) {
+    const token = await this.keyring.get();
+    if (!token) return false;
+    client.setCustomerToken(token);
+    return true;
+  }
+  async persist(client, token) {
+    await this.keyring.set(token);
+    client.setCustomerToken(token);
+  }
+  async clear(client) {
+    await this.keyring.delete();
+    client.setCustomerToken("");
+  }
+  async hasToken() {
+    const v = await this.keyring.get();
+    return !!v;
+  }
+};
+
+// src/desktop/use-auth.ts
+var AuthController = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  opts;
+  listeners = /* @__PURE__ */ new Set();
+  current = { state: "loading" };
+  subscribe(listener) {
+    this.listeners.add(listener);
+    listener(this.current);
+    return () => this.listeners.delete(listener);
+  }
+  snapshot() {
+    return this.current;
+  }
+  emit(next) {
+    this.current = next;
+    this.listeners.forEach((l) => l(next));
+  }
+  async bootstrap() {
+    await this.opts.session.hydrate(this.opts.client);
+    await this.refresh();
+  }
+  async refresh() {
+    if (!await this.opts.session.hasToken()) {
+      this.emit({ state: "guest" });
+      return;
+    }
+    try {
+      const customer = await this.opts.client.customerMe();
+      const licensed = this.opts.checkLicense ? await this.opts.checkLicense(this.opts.client) : await this.runDefaultLicenseCheck();
+      this.emit({ state: "authenticated", customer, licensed });
+    } catch (e) {
+      if (e.status === 401) {
+        await this.opts.session.clear(this.opts.client);
+        this.emit({ state: "guest" });
+        return;
+      }
+      throw e;
+    }
+  }
+  async runDefaultLicenseCheck() {
+    try {
+      const resp = await this.opts.client.licenseCheck({
+        product: this.opts.product,
+        feature: this.opts.feature ?? "general"
+      });
+      return resp.allowed;
+    } catch {
+      return false;
+    }
+  }
+  async requestOtp(email, deviceFp) {
+    await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? "" });
+  }
+  async verifyOtp(email, code, deviceFp) {
+    const resp = await this.opts.client.verifyOtp({
+      email,
+      code,
+      device_fp: deviceFp ?? ""
+    });
+    await this.opts.session.persist(this.opts.client, resp.access_token);
+    await this.refresh();
+    return await this.opts.client.customerMe();
+  }
+  async oauthLogin(provider) {
+    const outcome = await this.opts.loopbackLogin(provider);
+    await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);
+    await this.refresh();
+    return outcome.exchange;
+  }
+  async logout() {
+    await this.opts.session.clear(this.opts.client);
+    this.emit({ state: "guest" });
+  }
+};
+
+export { AuthController, SessionStore, TokenKeyring, checkoutUrl, deviceFingerprint, openBrowser };
+//# sourceMappingURL=desktop.js.map
+//# sourceMappingURL=desktop.js.map

package/dist/desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/checkout.ts","../src/desktop/browser.ts","../src/desktop/fingerprint.ts","../src/desktop/keyring.ts","../src/desktop/session.ts","../src/desktop/use-auth.ts"],"names":[],"mappings":";;;;;AACO,SAAS,WAAA,CAAY,SAAiB,OAAA,EAAyB;AAClE,EAAA,OAAO,CAAA,EAAG,QAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,eAAA,EAAkB,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AACrF;ACAO,SAAS,YAAY,GAAA,EAA4B;AACpD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACpC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,QAAQ,QAAQ,QAAA;AAAU,MACtB,KAAK,QAAA;AACD,QAAA,GAAA,GAAM,MAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AACX,QAAA;AAAA,MACJ,KAAK,OAAA;AACD,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,+BAA+B,GAAG,CAAA;AAC1C,QAAA;AAAA,MACJ;AACI,QAAA,GAAA,GAAM,UAAA;AACN,QAAA,IAAA,GAAO,CAAC,GAAG,CAAA;AAAA;AAEnB,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,EAAK,IAAA,EAAM,EAAE,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU,IAAA,EAAM,CAAA;AAClE,IAAA,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM,CAAA;AAC1B,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AChBA,eAAe,SAAA,GAA6B;AACxC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,IAAI;AACA,IAAA,MAAM,MAAO,MAAM,GAAA,CAAI,iBAAiB,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC1D,IAAA,IAAI,GAAA,EAAK,aAAA,EAAe,OAAO,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,QAAA,EAAS;AACpB;AAEA,eAAsB,kBAAkB,UAAA,EAAgD;AACpF,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU;AAC3B,EAAA,MAAM,OAAO,QAAA,EAAS;AACtB,EAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAChC,EAAA,IAAA,CAAK,OAAO,EAAE,CAAA;AACd,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AAChB,EAAA,IAAA,CAAK,OAAO,UAAU,CAAA;AACtB,EAAA,OAAO;AAAA,IACH,WAAA,EAAa,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAAA,IAC9B,QAAA,EAAU,IAAA;AAAA,IACV,WAAA,EAAa;AAAA,GACjB;AACJ;;;AClBA,eAAe,UAAA,GAA8B;AAIzC,EAAA,MAAM,GAAA,GAAM,IAAI,QAAA,CAAS,GAAA,EAAK,kBAAkB,CAAA;AAChD,EAAA,MAAM,MAAO,MAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACjD,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,MAAM,mEAAmE,CAAA;AAC7F,EAAA,OAAO,IAAI,OAAA,IAAY,GAAA;AAC3B;AAEO,IAAM,eAAN,MAAmB;AAAA,EACL,OAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,IAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AACpB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AAAA,EACxB;AAAA,EAEA,MAAM,GAAA,GAA8B;AAChC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,OAAO,CAAA,CAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,IAAI,KAAA,EAA8B;AACpC,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,EAAE,WAAA,CAAY,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,SAAS,KAAK,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,CAAA,GAAI,MAAM,UAAA,EAAW;AAC3B,IAAA,MAAM,CAAA,CAAE,cAAA,CAAe,IAAA,CAAK,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AACJ;;;AC9CO,IAAM,eAAN,MAAmB;AAAA,EACtB,YAA6B,OAAA,EAAuB;AAAvB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAAwB;AAAA,EAAxB,OAAA;AAAA,EAE7B,MAAM,QAAQ,MAAA,EAAyC;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACrC,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAC7B,IAAA,OAAO,IAAA;AAAA,EACX;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAuB,KAAA,EAA8B;AAC/D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AAC5B,IAAA,MAAA,CAAO,iBAAiB,KAAK,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,MAAM,MAAA,EAAsC;AAC9C,IAAA,MAAM,IAAA,CAAK,QAAQ,MAAA,EAAO;AAC1B,IAAA,MAAA,CAAO,iBAAiB,EAAE,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAA,GAA6B;AAC/B,IAAA,MAAM,CAAA,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI;AACjC,IAAA,OAAO,CAAC,CAAC,CAAA;AAAA,EACb;AACJ;;;ACNO,IAAM,iBAAN,MAAqB;AAAA,EAIxB,YAA6B,IAAA,EAA6B;AAA7B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAA8B;AAAA,EAA9B,IAAA;AAAA,EAHrB,SAAA,uBAAgB,GAAA,EAAkC;AAAA,EAClD,OAAA,GAA2B,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA,EAItD,UAAU,QAAA,EAAoD;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,OAAO,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC/C;AAAA,EAEA,QAAA,GAA4B;AACxB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEQ,KAAK,IAAA,EAA6B;AACtC,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AACf,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACzC;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC7B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,KAAK,MAAM,CAAA;AAChD,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACvB;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC3B,IAAA,IAAI,CAAE,MAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,UAAS,EAAI;AACvC,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,MAAA;AAAA,IACJ;AACA,IAAA,IAAI;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,UAAA,EAAW;AACnD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,YAAA,GACrB,MAAM,IAAA,CAAK,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA,GAC7C,MAAM,KAAK,sBAAA,EAAuB;AACxC,MAAA,IAAA,CAAK,KAAK,EAAE,KAAA,EAAO,eAAA,EAAiB,QAAA,EAAU,UAAU,CAAA;AAAA,IAC5D,SAAS,CAAA,EAAG;AACR,MAAA,IAAK,CAAA,CAA0B,WAAW,GAAA,EAAK;AAC3C,QAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,QAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAC5B,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,CAAA;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAc,sBAAA,GAA2C;AACrD,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,YAAA,CAAa;AAAA,QAC7C,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,IAAA,CAAK,IAAA,CAAK,OAAA,IAAW;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,IAAA,CAAK,OAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,KAAA;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,UAAA,CAAW,KAAA,EAAe,QAAA,EAAkC;AAC9D,IAAA,MAAM,IAAA,CAAK,KAAK,MAAA,CAAO,UAAA,CAAW,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,IAAY,EAAA,EAAI,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAe,IAAA,EAAc,QAAA,EAAsC;AAC/E,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,IAAA,CAAK,OAAO,SAAA,CAAU;AAAA,MAC1C,KAAA;AAAA,MACA,IAAA;AAAA,MACA,WAAW,QAAA,IAAY;AAAA,KAC1B,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,YAAY,CAAA;AACnE,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,UAAA,EAAW;AAAA,EAC9C;AAAA,EAEA,MAAM,WAAW,QAAA,EAAkD;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,IAAA,CAAK,cAAc,QAAQ,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,KAAK,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAA,CAAK,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,YAAY,CAAA;AAC/E,IAAA,MAAM,KAAK,OAAA,EAAQ;AACnB,IAAA,OAAO,OAAA,CAAQ,QAAA;AAAA,EACnB;AAAA,EAEA,MAAM,MAAA,GAAwB;AAC1B,IAAA,MAAM,KAAK,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,KAAK,MAAM,CAAA;AAC9C,IAAA,IAAA,CAAK,IAAA,CAAK,EAAE,KAAA,EAAO,OAAA,EAAS,CAAA;AAAA,EAChC;AACJ","file":"desktop.js","sourcesContent":["/** Build the public checkout URL for a product on the billing site. */\nexport function checkoutUrl(baseUrl: string, product: string): string {\n    return `${baseUrl.replace(/\\/$/, '')}/plans?product=${encodeURIComponent(product)}`;\n}\n","import { spawn } from 'node:child_process';\n\n/** Launch the system default browser. Node-only. */\nexport function openBrowser(url: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n        let cmd: string;\n        let args: string[];\n        switch (process.platform) {\n            case 'darwin':\n                cmd = 'open';\n                args = [url];\n                break;\n            case 'win32':\n                cmd = 'rundll32';\n                args = ['url.dll,FileProtocolHandler', url];\n                break;\n            default:\n                cmd = 'xdg-open';\n                args = [url];\n        }\n        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });\n        child.once('error', reject);\n        child.unref();\n        resolve();\n    });\n}\n","import { createHash } from 'node:crypto';\nimport { hostname, platform } from 'node:os';\n\nexport interface DeviceFingerprint {\n    fingerprint: string;\n    platform: string;\n    app_version: string;\n}\n\nasync function machineId(): Promise<string> {\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    try {\n        const mod = (await dyn('node-machine-id').catch(() => null)) as { machineIdSync?: (orig?: boolean) => string } | null;\n        if (mod?.machineIdSync) return mod.machineIdSync(true);\n    } catch {\n        // fallthrough\n    }\n    return hostname();\n}\n\nexport async function deviceFingerprint(appVersion: string): Promise<DeviceFingerprint> {\n    const id = await machineId();\n    const plat = platform();\n    const hash = createHash('sha256');\n    hash.update(id);\n    hash.update('::');\n    hash.update(plat);\n    hash.update('::');\n    hash.update(appVersion);\n    return {\n        fingerprint: hash.digest('hex'),\n        platform: plat,\n        app_version: appVersion,\n    };\n}\n","/**\n * Thin wrapper around `keytar` for desktop apps. Consumers install `keytar` as\n * an optional dependency; this module dynamically imports it so server-side\n * bundles never see it.\n */\nexport interface TokenKeyringOptions {\n    service: string;\n    account: string;\n}\n\ntype Keytar = {\n    getPassword: (service: string, account: string) => Promise<string | null>;\n    setPassword: (service: string, account: string, password: string) => Promise<void>;\n    deletePassword: (service: string, account: string) => Promise<boolean>;\n};\n\nasync function loadKeytar(): Promise<Keytar> {\n    // Use Function constructor so tsup/typescript don't try to resolve the\n    // optional module at build time. Consumers add `keytar` as a peer/optional\n    // dependency.\n    const dyn = new Function('m', 'return import(m)') as (m: string) => Promise<unknown>;\n    const mod = (await dyn('keytar').catch(() => null)) as { default?: Keytar } | null;\n    if (!mod) throw new Error('TokenKeyring: install `keytar` to use the desktop keyring helper.');\n    return mod.default ?? (mod as unknown as Keytar);\n}\n\nexport class TokenKeyring {\n    private readonly service: string;\n    private readonly account: string;\n\n    constructor(opts: TokenKeyringOptions) {\n        this.service = opts.service;\n        this.account = opts.account;\n    }\n\n    async get(): Promise<string | null> {\n        const k = await loadKeytar();\n        return k.getPassword(this.service, this.account);\n    }\n\n    async set(value: string): Promise<void> {\n        const k = await loadKeytar();\n        await k.setPassword(this.service, this.account, value);\n    }\n\n    async delete(): Promise<void> {\n        const k = await loadKeytar();\n        await k.deletePassword(this.service, this.account);\n    }\n}\n","import { BillingClient } from '../client';\nimport { TokenKeyring } from './keyring';\n\nexport class SessionStore {\n    constructor(private readonly keyring: TokenKeyring) {}\n\n    async hydrate(client: BillingClient): Promise<boolean> {\n        const token = await this.keyring.get();\n        if (!token) return false;\n        client.setCustomerToken(token);\n        return true;\n    }\n\n    async persist(client: BillingClient, token: string): Promise<void> {\n        await this.keyring.set(token);\n        client.setCustomerToken(token);\n    }\n\n    async clear(client: BillingClient): Promise<void> {\n        await this.keyring.delete();\n        client.setCustomerToken('');\n    }\n\n    async hasToken(): Promise<boolean> {\n        const v = await this.keyring.get();\n        return !!v;\n    }\n}\n","import type { BillingClient } from '../client';\nimport type { Customer, OauthExchangeResponse } from '../client-types';\nimport type { LoopbackOutcome } from '../loopback';\nimport type { SessionStore } from './session';\n\nexport type AuthStatusState =\n    | { state: 'loading' }\n    | { state: 'guest' }\n    | { state: 'authenticated'; customer: Customer; licensed: boolean };\n\nexport interface AuthControllerOptions {\n    client: BillingClient;\n    session: SessionStore;\n    product: string;\n    feature?: string;\n    /** Loopback flow used by `oauthLogin`. */\n    loopbackLogin: (provider: string) => Promise<LoopbackOutcome>;\n    /** Override the runtime license check (e.g. cache, custom feature key). */\n    checkLicense?: (client: BillingClient) => Promise<boolean>;\n}\n\nexport class AuthController {\n    private listeners = new Set<(s: AuthStatusState) => void>();\n    private current: AuthStatusState = { state: 'loading' };\n\n    constructor(private readonly opts: AuthControllerOptions) {}\n\n    subscribe(listener: (s: AuthStatusState) => void): () => void {\n        this.listeners.add(listener);\n        listener(this.current);\n        return () => this.listeners.delete(listener);\n    }\n\n    snapshot(): AuthStatusState {\n        return this.current;\n    }\n\n    private emit(next: AuthStatusState): void {\n        this.current = next;\n        this.listeners.forEach((l) => l(next));\n    }\n\n    async bootstrap(): Promise<void> {\n        await this.opts.session.hydrate(this.opts.client);\n        await this.refresh();\n    }\n\n    async refresh(): Promise<void> {\n        if (!(await this.opts.session.hasToken())) {\n            this.emit({ state: 'guest' });\n            return;\n        }\n        try {\n            const customer = await this.opts.client.customerMe();\n            const licensed = this.opts.checkLicense\n                ? await this.opts.checkLicense(this.opts.client)\n                : await this.runDefaultLicenseCheck();\n            this.emit({ state: 'authenticated', customer, licensed });\n        } catch (e) {\n            if ((e as { status?: number }).status === 401) {\n                await this.opts.session.clear(this.opts.client);\n                this.emit({ state: 'guest' });\n                return;\n            }\n            throw e;\n        }\n    }\n\n    private async runDefaultLicenseCheck(): Promise<boolean> {\n        try {\n            const resp = await this.opts.client.licenseCheck({\n                product: this.opts.product,\n                feature: this.opts.feature ?? 'general',\n            });\n            return resp.allowed;\n        } catch {\n            return false;\n        }\n    }\n\n    async requestOtp(email: string, deviceFp?: string): Promise<void> {\n        await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? '' });\n    }\n\n    async verifyOtp(email: string, code: string, deviceFp?: string): Promise<Customer> {\n        const resp = await this.opts.client.verifyOtp({\n            email,\n            code,\n            device_fp: deviceFp ?? '',\n        });\n        await this.opts.session.persist(this.opts.client, resp.access_token);\n        await this.refresh();\n        return (await this.opts.client.customerMe());\n    }\n\n    async oauthLogin(provider: string): Promise<OauthExchangeResponse> {\n        const outcome = await this.opts.loopbackLogin(provider);\n        await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);\n        await this.refresh();\n        return outcome.exchange;\n    }\n\n    async logout(): Promise<void> {\n        await this.opts.session.clear(this.opts.client);\n        this.emit({ state: 'guest' });\n    }\n}\n"]}

package/dist/index.cjs

@@ -86,6 +86,12 @@ var BillingClient = class {
   setCustomerToken(token) {
     this.customerToken = token;
   }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  getProductSlug() {
+    return this.productSlug;
+  }
   async requestOtp(payload) {
     await this.signed("POST", "/api/auth/customer/otp/request", payload);
   }