@alien_org/sso-sdk-core 1.0.13 → 1.0.14

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";var g=(a,s,t)=>new Promise((o,n)=>{var r=l=>{try{u(t.next(l))}catch(d){n(d)}},c=l=>{try{u(t.throw(l))}catch(d){n(d)}},u=l=>l.done?o(l.value):Promise.resolve(l.value).then(r,c);u((t=t.apply(a,s)).next())});Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("zod/v4-mini"),$=require("js-sha256"),i=require("@solana/web3.js"),R=e.z.object({code_challenge:e.z.string(),code_challenge_method:e.z.literal("S256")}),_=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),I=e.z.object({polling_code:e.z.string()}),Y=["pending","authorized","rejected","expired"],H=e.z.enum(Y),k=e.z.object({status:H,authorization_code:e.z.optional(e.z.string())}),E=e.z.object({authorization_code:e.z.string(),code_verifier:e.z.string()}),w=e.z.object({access_token:e.z.string()}),B=e.z.object({access_token:e.z.string()}),j=e.z.object({is_valid:e.z.boolean(),access_token:e.z.optional(e.z.string())}),T=e.z.object({app_callback_session_address:e.z.string(),expired_at:e.z.number(),issued_at:e.z.number()});function Q(a){return btoa(a).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function P(a){let s=a.replace(/-/g,"+").replace(/_/g,"/");for(;s.length%4;)s+="=";return atob(s)}const Z="https://sso.alien.com",ee=5e3,f="alien-sso_",S=(a,s)=>new URL(s,a).toString(),v=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number())});class se{constructor(s){this.config=v.parse(s),this.ssoBaseUrl=this.config.ssoBaseUrl||Z,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||ee}generateCodeVerifier(s=128){let t;const o=typeof window!="undefined"&&window.crypto;if(o&&o.getRandomValues)t=new Uint8Array(s),o.getRandomValues(t);else{t=new Uint8Array(s);for(let r=0;r<s;r++)t[r]=Math.floor(Math.random()*256)}let n="";for(let r=0;r<t.length;r++)n+=String.fromCharCode(t[r]);return Q(n)}generateCodeChallenge(s){return $.sha256(s)}generateDeeplink(){return g(this,null,function*(){const s=this.generateCodeVerifier(),t=this.generateCodeChallenge(s);sessionStorage.setItem(f+"code_verifier",s);const o=`${this.config.ssoBaseUrl}/sso/authorize`,n={code_challenge:t,code_challenge_method:"S256"};R.parse(n);const c=yield(yield fetch(o,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(n)})).json();return _.parse(c)})}pollAuth(s){return g(this,null,function*(){const t={polling_code:s};I.parse(t);const o=yield fetch(S(this.config.ssoBaseUrl,"/sso/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(!o.ok)throw new Error(`Poll failed: ${o.statusText}`);const n=yield o.json();return k.parse(n)})}exchangeToken(s){return g(this,null,function*(){const t=sessionStorage.getItem(f+"code_verifier");if(!t)throw new Error("Missing code verifier.");const o={authorization_code:s,code_verifier:t};E.parse(o);const n=yield fetch(S(this.config.ssoBaseUrl,"/sso/access_token/exchange"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(!n.ok)throw new Error(`ExchangeCode failed: ${n.statusText}`);const r=yield n.json(),c=w.parse(r);if(c.access_token)return localStorage.setItem(f+"access_token",c.access_token),c.access_token;throw new Error("Exchange failed")})}verifyAuth(){return g(this,null,function*(){const s=this.getAccessToken();if(!s)return!1;const t={access_token:s};B.parse(t);const o=yield fetch(S(this.config.ssoBaseUrl,"/sso/access_token/verify"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(!o.ok)return!1;const n=yield o.json(),r=j.parse(n);return r.access_token&&localStorage.setItem(f+"access_token",r.access_token),r.is_valid})}getAccessToken(){return localStorage.getItem(f+"access_token")}getAuthData(){const s=this.getAccessToken();if(!s)return null;const t=s.split(".");if(t.length!==3)return null;let o;try{const r=P(t[0]);o=JSON.parse(r)}catch(r){return null}if(o.alg!=="HS256"||o.typ!=="JWT")return null;let n;try{const r=JSON.parse(P(t[1]));n=T.parse(r)}catch(r){return null}return n}logout(){localStorage.removeItem(f+"access_token"),sessionStorage.removeItem(f+"code_verifier")}}const C=e.z.object({solana_address:e.z.string()}),D=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),O=e.z.object({polling_code:e.z.string()}),te=["pending","authorized","rejected","expired"],oe=e.z.enum(te),U=e.z.object({status:oe,oracle_signature:e.z.optional(e.z.string()),oracle_public_key:e.z.optional(e.z.string()),solana_address:e.z.optional(e.z.string()),timestamp:e.z.optional(e.z.number()),session_address:e.z.optional(e.z.string())}),L=e.z.object({solana_address:e.z.string()}),x=e.z.object({session_address:e.z.string()});function ne(a){return i.PublicKey.findProgramAddressSync([Buffer.from("program_state")],a)}function re(a){return i.PublicKey.findProgramAddressSync([Buffer.from("credential_signer")],a)}function ae(a){return i.PublicKey.findProgramAddressSync([Buffer.from("session_registry")],a)}function ie(a,s){return i.PublicKey.findProgramAddressSync([Buffer.from("session"),Buffer.from(a)],s)}function ce(a,s){return i.PublicKey.findProgramAddressSync([Buffer.from("solana"),a.toBuffer()],s)}function le(a,s,t,o){return i.PublicKey.findProgramAddressSync([Buffer.from("attestation"),a.toBuffer(),s.toBuffer(),t.toBuffer()],o)}const de="https://sso.alien.com",ge=5e3,ue="9cstDz8WWRAFaq1vVpTjfHz6tjgh6SJaqYFeZWi1pFHG",fe="DeHa6pyZ2CFSbQQiNMm7FgoCXqmkX6tXG77C4Qycpta6",pe="22zoJMtdu4tQc2PzL74ZUT7FrwgB1Udec8DdW4yw4BdG",m=(a,s)=>new URL(s,a).toString(),V=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number()),credentialSignerProgramId:e.z.optional(e.z.string()),sasProgramId:e.z.optional(e.z.string()),sessionRegistryProgramId:e.z.optional(e.z.string()),credentialAuthority:e.z.optional(e.z.string()),credentialName:e.z.optional(e.z.string()),schemaName:e.z.optional(e.z.string()),schemaVersion:e.z.optional(e.z.number())});class he{constructor(s){this.config=V.parse(s),this.ssoBaseUrl=this.config.ssoBaseUrl||de,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||ge,this.credentialSignerProgramId=new i.PublicKey(this.config.credentialSignerProgramId||ue),this.sasProgramId=new i.PublicKey(this.config.sasProgramId||pe),this.sessionRegistryProgramId=new i.PublicKey(this.config.sessionRegistryProgramId||fe)}generateDeeplink(s){return g(this,null,function*(){const t={solana_address:s};C.parse(t);const o=m(this.config.ssoBaseUrl,"/solana/link"),n=yield fetch(o,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(!n.ok)throw new Error(`GenerateLinkDeeplink failed: ${n.statusText}`);const r=yield n.json();return D.parse(r)})}pollAuth(s){return g(this,null,function*(){const t={polling_code:s};O.parse(t);const o=yield fetch(m(this.config.ssoBaseUrl,"/solana/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(!o.ok)throw new Error(`Poll failed: ${o.statusText}`);const n=yield o.json();return U.parse(n)})}getAttestation(s){return g(this,null,function*(){const t={solana_address:s};L.parse(t);const o=yield fetch(m(this.config.ssoBaseUrl,"/solana/attestation"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(o.status===404)return null;if(!o.ok)throw new Error(`GetAttestation failed: ${o.statusText}`);const n=yield o.json();return x.parse(n).session_address})}buildCreateAttestationTransaction(s){return g(this,null,function*(){const{connection:t,payerPublicKey:o,sessionAddress:n,oracleSignature:r,oraclePublicKey:c,timestamp:u,expiry:l}=s,[d]=ne(this.credentialSignerProgramId),p=yield t.getAccountInfo(d);if(!p)throw new Error("ProgramState account not found");const y=p.data,z=new i.PublicKey(y.slice(40,72)),b=new i.PublicKey(y.slice(72,104)),[N]=re(this.credentialSignerProgramId),[q]=ae(this.sessionRegistryProgramId),[W]=ie(n,this.sessionRegistryProgramId),[K]=ce(o,this.sessionRegistryProgramId),[J]=le(z,b,o,this.sasProgramId),A=Buffer.alloc(8);A.writeBigInt64LE(BigInt(u));const G=Buffer.concat([Buffer.from(n),Buffer.from(o.toBase58()),A]),M=i.Ed25519Program.createInstructionWithPublicKey({publicKey:c.toBytes(),message:G,signature:r}),X=this.serializeCreateAttestationInstruction(n,Array.from(r),l,u),F=new i.TransactionInstruction({keys:[{pubkey:d,isSigner:!1,isWritable:!1},{pubkey:N,isSigner:!1,isWritable:!1},{pubkey:o,isSigner:!0,isWritable:!0},{pubkey:z,isSigner:!1,isWritable:!1},{pubkey:b,isSigner:!1,isWritable:!1},{pubkey:J,isSigner:!1,isWritable:!0},{pubkey:i.SystemProgram.programId,isSigner:!1,isWritable:!1},{pubkey:this.sasProgramId,isSigner:!1,isWritable:!1},{pubkey:i.SYSVAR_INSTRUCTIONS_PUBKEY,isSigner:!1,isWritable:!1},{pubkey:this.sessionRegistryProgramId,isSigner:!1,isWritable:!1},{pubkey:q,isSigner:!1,isWritable:!0},{pubkey:W,isSigner:!1,isWritable:!0},{pubkey:K,isSigner:!1,isWritable:!0}],programId:this.credentialSignerProgramId,data:X}),h=new i.Transaction;return h.add(M),h.add(F),h})}serializeCreateAttestationInstruction(s,t,o,n){const r=Buffer.from([49,24,67,80,12,249,96,239]),c=Buffer.alloc(4);c.writeUInt32LE(s.length);const u=Buffer.from(s),l=Buffer.from(t),d=Buffer.alloc(8);d.writeBigInt64LE(BigInt(o));const p=Buffer.alloc(8);return p.writeBigInt64LE(BigInt(n)),Buffer.concat([r,c,u,l,d,p])}}exports.AlienSolanaSsoClient=he;exports.AlienSolanaSsoClientSchema=V;exports.AlienSsoClient=se;exports.AlienSsoClientSchema=v;exports.AuthorizeRequestSchema=R;exports.AuthorizeResponseSchema=_;exports.ExchangeCodeRequestSchema=E;exports.ExchangeCodeResponseSchema=w;exports.PollRequestSchema=I;exports.PollResponseSchema=k;exports.SolanaAttestationRequestSchema=L;exports.SolanaAttestationResponseSchema=x;exports.SolanaLinkRequestSchema=C;exports.SolanaLinkResponseSchema=D;exports.SolanaPollRequestSchema=O;exports.SolanaPollResponseSchema=U;exports.TokenInfoSchema=T;exports.VerifyTokenRequestSchema=B;exports.VerifyTokenResponseSchema=j;
+"use strict";var d=(a,o,s)=>new Promise((n,r)=>{var t=i=>{try{h(s.next(i))}catch(g){r(g)}},c=i=>{try{h(s.throw(i))}catch(g){r(g)}},h=i=>i.done?n(i.value):Promise.resolve(i.value).then(t,c);h((s=s.apply(a,o)).next())});Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("zod/v4-mini"),j=require("js-sha256"),S=e.z.object({code_challenge:e.z.string(),code_challenge_method:e.z.literal("S256")}),f=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),_=e.z.object({polling_code:e.z.string()}),v=["pending","authorized","rejected","expired"],T=e.z.enum(v),m=e.z.object({status:T,authorization_code:e.z.optional(e.z.string())}),z=e.z.object({authorization_code:e.z.string(),code_verifier:e.z.string()}),y=e.z.object({access_token:e.z.string()}),R=e.z.object({access_token:e.z.string()}),k=e.z.object({is_valid:e.z.boolean(),access_token:e.z.optional(e.z.string())}),b=e.z.object({app_callback_session_address:e.z.string(),expired_at:e.z.number(),issued_at:e.z.number()});function w(a){return btoa(a).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function u(a){let o=a.replace(/-/g,"+").replace(/_/g,"/");for(;o.length%4;)o+="=";return atob(o)}const C="https://sso.alien.com",E=5e3,l="alien-sso_",p=(a,o)=>new URL(o,a).toString(),A=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number())});class P{constructor(o){this.config=A.parse(o),this.ssoBaseUrl=this.config.ssoBaseUrl||C,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||E}generateCodeVerifier(o=128){let s;const n=typeof window!="undefined"&&window.crypto;if(n&&n.getRandomValues)s=new Uint8Array(o),n.getRandomValues(s);else{s=new Uint8Array(o);for(let t=0;t<o;t++)s[t]=Math.floor(Math.random()*256)}let r="";for(let t=0;t<s.length;t++)r+=String.fromCharCode(s[t]);return w(r)}generateCodeChallenge(o){return j.sha256(o)}generateDeeplink(){return d(this,null,function*(){const o=this.generateCodeVerifier(),s=this.generateCodeChallenge(o);sessionStorage.setItem(l+"code_verifier",o);const n=`${this.config.ssoBaseUrl}/sso/authorize`,r={code_challenge:s,code_challenge_method:"S256"};S.parse(r);const c=yield(yield fetch(n,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(r)})).json();return f.parse(c)})}pollAuth(o){return d(this,null,function*(){const s={polling_code:o};_.parse(s);const n=yield fetch(p(this.config.ssoBaseUrl,"/sso/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(s)});if(!n.ok)throw new Error(`Poll failed: ${n.statusText}`);const r=yield n.json();return m.parse(r)})}exchangeToken(o){return d(this,null,function*(){const s=sessionStorage.getItem(l+"code_verifier");if(!s)throw new Error("Missing code verifier.");const n={authorization_code:o,code_verifier:s};z.parse(n);const r=yield fetch(p(this.config.ssoBaseUrl,"/sso/access_token/exchange"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(n)});if(!r.ok)throw new Error(`ExchangeCode failed: ${r.statusText}`);const t=yield r.json(),c=y.parse(t);if(c.access_token)return localStorage.setItem(l+"access_token",c.access_token),c.access_token;throw new Error("Exchange failed")})}verifyAuth(){return d(this,null,function*(){const o=this.getAccessToken();if(!o)return!1;const s={access_token:o};R.parse(s);const n=yield fetch(p(this.config.ssoBaseUrl,"/sso/access_token/verify"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(s)});if(!n.ok)return!1;const r=yield n.json(),t=k.parse(r);return t.access_token&&localStorage.setItem(l+"access_token",t.access_token),t.is_valid})}getAccessToken(){return localStorage.getItem(l+"access_token")}getAuthData(){const o=this.getAccessToken();if(!o)return null;const s=o.split(".");if(s.length!==3)return null;let n;try{const t=u(s[0]);n=JSON.parse(t)}catch(t){return null}if(n.alg!=="HS256"||n.typ!=="JWT")return null;let r;try{const t=JSON.parse(u(s[1]));r=b.parse(t)}catch(t){return null}return r}logout(){localStorage.removeItem(l+"access_token"),sessionStorage.removeItem(l+"code_verifier")}}exports.AlienSsoClient=P;exports.AlienSsoClientSchema=A;exports.AuthorizeRequestSchema=S;exports.AuthorizeResponseSchema=f;exports.ExchangeCodeRequestSchema=z;exports.ExchangeCodeResponseSchema=y;exports.PollRequestSchema=_;exports.PollResponseSchema=m;exports.TokenInfoSchema=b;exports.VerifyTokenRequestSchema=R;exports.VerifyTokenResponseSchema=k;

package/dist/index.d.ts

@@ -1,47 +1,5 @@
-import { Connection } from '@solana/web3.js';
-import { PublicKey } from '@solana/web3.js';
-import { Transaction } from '@solana/web3.js';
 import { z } from 'zod/v4-mini';
 
-export declare class AlienSolanaSsoClient {
-    readonly config: AlienSolanaSsoClientConfig;
-    readonly pollingInterval: number;
-    readonly ssoBaseUrl: string;
-    readonly providerAddress: string;
-    readonly credentialSignerProgramId: PublicKey;
-    readonly sasProgramId: PublicKey;
-    readonly sessionRegistryProgramId: PublicKey;
-    constructor(config: AlienSolanaSsoClientConfig);
-    generateDeeplink(solanaAddress: string): Promise<SolanaLinkResponse>;
-    pollAuth(pollingCode: string): Promise<SolanaPollResponse>;
-    getAttestation(solanaAddress: string): Promise<string | null>;
-    buildCreateAttestationTransaction(params: {
-        connection: Connection;
-        payerPublicKey: PublicKey;
-        sessionAddress: string;
-        oracleSignature: Uint8Array;
-        oraclePublicKey: PublicKey;
-        timestamp: number;
-        expiry: number;
-    }): Promise<Transaction>;
-    private serializeCreateAttestationInstruction;
-}
-
-export declare type AlienSolanaSsoClientConfig = z.infer<typeof AlienSolanaSsoClientSchema>;
-
-export declare const AlienSolanaSsoClientSchema: z.ZodMiniObject<{
-    ssoBaseUrl: z.ZodMiniURL;
-    providerAddress: z.ZodMiniString<string>;
-    pollingInterval: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
-    credentialSignerProgramId: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    sasProgramId: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    sessionRegistryProgramId: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    credentialAuthority: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    credentialName: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    schemaName: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    schemaVersion: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
-}, z.core.$strip>;
-
 export declare class AlienSsoClient {
     readonly config: AlienSsoClientConfig;
     readonly pollingInterval: number;
@@ -127,63 +85,6 @@ export declare const PollResponseSchema: z.ZodMiniObject<{
     authorization_code: z.ZodMiniOptional<z.ZodMiniString<string>>;
 }, z.core.$strip>;
 
-export declare type SolanaAttestationRequest = z.infer<typeof SolanaAttestationRequestSchema>;
-
-/**
- * Solana Attestation request/response schema
- */
-export declare const SolanaAttestationRequestSchema: z.ZodMiniObject<{
-    solana_address: z.ZodMiniString<string>;
-}, z.core.$strip>;
-
-export declare type SolanaAttestationResponse = z.infer<typeof SolanaAttestationResponseSchema>;
-
-export declare const SolanaAttestationResponseSchema: z.ZodMiniObject<{
-    session_address: z.ZodMiniString<string>;
-}, z.core.$strip>;
-
-export declare type SolanaLinkRequest = z.infer<typeof SolanaLinkRequestSchema>;
-
-/**
- * Solana Link request/response schema
- */
-export declare const SolanaLinkRequestSchema: z.ZodMiniObject<{
-    solana_address: z.ZodMiniString<string>;
-}, z.core.$strip>;
-
-export declare type SolanaLinkResponse = z.infer<typeof SolanaLinkResponseSchema>;
-
-export declare const SolanaLinkResponseSchema: z.ZodMiniObject<{
-    deep_link: z.ZodMiniString<string>;
-    polling_code: z.ZodMiniString<string>;
-    expired_at: z.ZodMiniNumber<number>;
-}, z.core.$strip>;
-
-export declare type SolanaPollRequest = z.infer<typeof SolanaPollRequestSchema>;
-
-/**
- * Solana Poll request/response schema
- */
-export declare const SolanaPollRequestSchema: z.ZodMiniObject<{
-    polling_code: z.ZodMiniString<string>;
-}, z.core.$strip>;
-
-export declare type SolanaPollResponse = z.infer<typeof SolanaPollResponseSchema>;
-
-export declare const SolanaPollResponseSchema: z.ZodMiniObject<{
-    status: z.ZodMiniEnum<{
-        pending: "pending";
-        authorized: "authorized";
-        rejected: "rejected";
-        expired: "expired";
-    }>;
-    oracle_signature: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    oracle_public_key: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    solana_address: z.ZodMiniOptional<z.ZodMiniString<string>>;
-    timestamp: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
-    session_address: z.ZodMiniOptional<z.ZodMiniString<string>>;
-}, z.core.$strip>;
-
 export declare type TokenInfo = z.infer<typeof TokenInfoSchema>;
 
 /**

package/dist/index.esm.js

@@ -1,465 +1,225 @@
-var g = (a, s, t) => new Promise((o, n) => {
-  var r = (c) => {
+var d = (a, o, s) => new Promise((n, r) => {
+  var t = (i) => {
     try {
-      f(t.next(c));
-    } catch (d) {
-      n(d);
+      h(s.next(i));
+    } catch (p) {
+      r(p);
     }
-  }, i = (c) => {
+  }, c = (i) => {
     try {
-      f(t.throw(c));
-    } catch (d) {
-      n(d);
+      h(s.throw(i));
+    } catch (p) {
+      r(p);
     }
-  }, f = (c) => c.done ? o(c.value) : Promise.resolve(c.value).then(r, i);
-  f((t = t.apply(a, s)).next());
+  }, h = (i) => i.done ? n(i.value) : Promise.resolve(i.value).then(t, c);
+  h((s = s.apply(a, o)).next());
 });
 import { z as e } from "zod/v4-mini";
-import { sha256 as D } from "js-sha256";
-import { PublicKey as l, Ed25519Program as C, TransactionInstruction as O, SystemProgram as U, SYSVAR_INSTRUCTIONS_PUBKEY as L, Transaction as x } from "@solana/web3.js";
-const N = e.object({
+import { sha256 as f } from "js-sha256";
+const _ = e.object({
   code_challenge: e.string(),
   code_challenge_method: e.literal("S256")
-}), V = e.object({
+}), S = e.object({
   deep_link: e.string(),
   polling_code: e.string(),
   expired_at: e.number()
-}), W = e.object({
+}), m = e.object({
   polling_code: e.string()
-}), z = ["pending", "authorized", "rejected", "expired"], J = e.enum(z), G = e.object({
-  status: J,
+}), y = ["pending", "authorized", "rejected", "expired"], k = e.enum(y), b = e.object({
+  status: k,
   authorization_code: e.optional(e.string())
-}), q = e.object({
+}), R = e.object({
   authorization_code: e.string(),
   code_verifier: e.string()
-}), X = e.object({
+}), A = e.object({
   access_token: e.string()
-}), F = e.object({
+}), j = e.object({
   access_token: e.string()
-}), M = e.object({
+}), v = e.object({
   is_valid: e.boolean(),
   access_token: e.optional(e.string())
-}), $ = e.object({
+}), w = e.object({
   app_callback_session_address: e.string(),
   expired_at: e.number(),
   issued_at: e.number()
 });
-function K(a) {
+function E(a) {
   return btoa(a).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function P(a) {
-  let s = a.replace(/-/g, "+").replace(/_/g, "/");
-  for (; s.length % 4; )
-    s += "=";
-  return atob(s);
+function u(a) {
+  let o = a.replace(/-/g, "+").replace(/_/g, "/");
+  for (; o.length % 4; )
+    o += "=";
+  return atob(o);
 }
-const Y = "https://sso.alien.com", H = 5e3, p = "alien-sso_", S = (a, s) => new URL(s, a).toString(), Q = e.object({
+const T = "https://sso.alien.com", C = 5e3, l = "alien-sso_", g = (a, o) => new URL(o, a).toString(), O = e.object({
   ssoBaseUrl: e.url(),
   providerAddress: e.string(),
   pollingInterval: e.optional(e.number())
 });
-class Re {
-  constructor(s) {
-    this.config = Q.parse(s), this.ssoBaseUrl = this.config.ssoBaseUrl || Y, this.providerAddress = this.config.providerAddress, this.pollingInterval = this.config.pollingInterval || H;
-  }
-  generateCodeVerifier(s = 128) {
-    let t;
-    const o = typeof window != "undefined" && window.crypto;
-    if (o && o.getRandomValues)
-      t = new Uint8Array(s), o.getRandomValues(t);
+class x {
+  constructor(o) {
+    this.config = O.parse(o), this.ssoBaseUrl = this.config.ssoBaseUrl || T, this.providerAddress = this.config.providerAddress, this.pollingInterval = this.config.pollingInterval || C;
+  }
+  generateCodeVerifier(o = 128) {
+    let s;
+    const n = typeof window != "undefined" && window.crypto;
+    if (n && n.getRandomValues)
+      s = new Uint8Array(o), n.getRandomValues(s);
     else {
-      t = new Uint8Array(s);
-      for (let r = 0; r < s; r++)
-        t[r] = Math.floor(Math.random() * 256);
+      s = new Uint8Array(o);
+      for (let t = 0; t < o; t++)
+        s[t] = Math.floor(Math.random() * 256);
     }
-    let n = "";
-    for (let r = 0; r < t.length; r++)
-      n += String.fromCharCode(t[r]);
-    return K(n);
+    let r = "";
+    for (let t = 0; t < s.length; t++)
+      r += String.fromCharCode(s[t]);
+    return E(r);
   }
-  generateCodeChallenge(s) {
-    return D(s);
+  generateCodeChallenge(o) {
+    return f(o);
   }
   generateDeeplink() {
-    return g(this, null, function* () {
-      const s = this.generateCodeVerifier(), t = this.generateCodeChallenge(s);
-      sessionStorage.setItem(p + "code_verifier", s);
-      const o = `${this.config.ssoBaseUrl}/sso/authorize`, n = {
-        code_challenge: t,
+    return d(this, null, function* () {
+      const o = this.generateCodeVerifier(), s = this.generateCodeChallenge(o);
+      sessionStorage.setItem(l + "code_verifier", o);
+      const n = `${this.config.ssoBaseUrl}/sso/authorize`, r = {
+        code_challenge: s,
         code_challenge_method: "S256"
       };
-      N.parse(n);
-      const i = yield (yield fetch(o, {
+      _.parse(r);
+      const c = yield (yield fetch(n, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
           "X-PROVIDER-ADDRESS": this.providerAddress
         },
-        body: JSON.stringify(n)
+        body: JSON.stringify(r)
       })).json();
-      return V.parse(i);
+      return S.parse(c);
     });
   }
-  pollAuth(s) {
-    return g(this, null, function* () {
-      const t = {
-        polling_code: s
+  pollAuth(o) {
+    return d(this, null, function* () {
+      const s = {
+        polling_code: o
       };
-      W.parse(t);
-      const o = yield fetch(S(this.config.ssoBaseUrl, "/sso/poll"), {
+      m.parse(s);
+      const n = yield fetch(g(this.config.ssoBaseUrl, "/sso/poll"), {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
           "X-PROVIDER-ADDRESS": this.providerAddress
         },
-        body: JSON.stringify(t)
+        body: JSON.stringify(s)
       });
-      if (!o.ok)
-        throw new Error(`Poll failed: ${o.statusText}`);
-      const n = yield o.json();
-      return G.parse(n);
+      if (!n.ok)
+        throw new Error(`Poll failed: ${n.statusText}`);
+      const r = yield n.json();
+      return b.parse(r);
     });
   }
-  exchangeToken(s) {
-    return g(this, null, function* () {
-      const t = sessionStorage.getItem(p + "code_verifier");
-      if (!t) throw new Error("Missing code verifier.");
-      const o = {
-        authorization_code: s,
-        code_verifier: t
+  exchangeToken(o) {
+    return d(this, null, function* () {
+      const s = sessionStorage.getItem(l + "code_verifier");
+      if (!s) throw new Error("Missing code verifier.");
+      const n = {
+        authorization_code: o,
+        code_verifier: s
       };
-      q.parse(o);
-      const n = yield fetch(
-        S(this.config.ssoBaseUrl, "/sso/access_token/exchange"),
+      R.parse(n);
+      const r = yield fetch(
+        g(this.config.ssoBaseUrl, "/sso/access_token/exchange"),
         {
           method: "POST",
           headers: {
             "Content-Type": "application/json",
             "X-PROVIDER-ADDRESS": this.providerAddress
           },
-          body: JSON.stringify(o)
+          body: JSON.stringify(n)
         }
       );
-      if (!n.ok)
-        throw new Error(`ExchangeCode failed: ${n.statusText}`);
-      const r = yield n.json(), i = X.parse(r);
-      if (i.access_token)
+      if (!r.ok)
+        throw new Error(`ExchangeCode failed: ${r.statusText}`);
+      const t = yield r.json(), c = A.parse(t);
+      if (c.access_token)
         return localStorage.setItem(
-          p + "access_token",
-          i.access_token
-        ), i.access_token;
+          l + "access_token",
+          c.access_token
+        ), c.access_token;
       throw new Error("Exchange failed");
     });
   }
   verifyAuth() {
-    return g(this, null, function* () {
-      const s = this.getAccessToken();
-      if (!s)
+    return d(this, null, function* () {
+      const o = this.getAccessToken();
+      if (!o)
         return !1;
-      const t = {
-        access_token: s
+      const s = {
+        access_token: o
       };
-      F.parse(t);
-      const o = yield fetch(
-        S(this.config.ssoBaseUrl, "/sso/access_token/verify"),
+      j.parse(s);
+      const n = yield fetch(
+        g(this.config.ssoBaseUrl, "/sso/access_token/verify"),
         {
           method: "POST",
           headers: {
             "Content-Type": "application/json",
             "X-PROVIDER-ADDRESS": this.providerAddress
           },
-          body: JSON.stringify(t)
+          body: JSON.stringify(s)
         }
       );
-      if (!o.ok)
+      if (!n.ok)
         return !1;
-      const n = yield o.json(), r = M.parse(n);
-      return r.access_token && localStorage.setItem(
-        p + "access_token",
-        r.access_token
-      ), r.is_valid;
+      const r = yield n.json(), t = v.parse(r);
+      return t.access_token && localStorage.setItem(
+        l + "access_token",
+        t.access_token
+      ), t.is_valid;
     });
   }
   getAccessToken() {
-    return localStorage.getItem(p + "access_token");
+    return localStorage.getItem(l + "access_token");
   }
   getAuthData() {
-    const s = this.getAccessToken();
-    if (!s) return null;
-    const t = s.split(".");
-    if (t.length !== 3)
+    const o = this.getAccessToken();
+    if (!o) return null;
+    const s = o.split(".");
+    if (s.length !== 3)
       return null;
-    let o;
+    let n;
     try {
-      const r = P(t[0]);
-      o = JSON.parse(r);
-    } catch (r) {
+      const t = u(s[0]);
+      n = JSON.parse(t);
+    } catch (t) {
       return null;
     }
-    if (o.alg !== "HS256" || o.typ !== "JWT")
+    if (n.alg !== "HS256" || n.typ !== "JWT")
       return null;
-    let n;
+    let r;
     try {
-      const r = JSON.parse(P(t[1]));
-      n = $.parse(r);
-    } catch (r) {
+      const t = JSON.parse(u(s[1]));
+      r = w.parse(t);
+    } catch (t) {
       return null;
     }
-    return n;
+    return r;
   }
   logout() {
-    localStorage.removeItem(p + "access_token"), sessionStorage.removeItem(p + "code_verifier");
-  }
-}
-const Z = e.object({
-  solana_address: e.string()
-}), ee = e.object({
-  deep_link: e.string(),
-  polling_code: e.string(),
-  expired_at: e.number()
-}), se = e.object({
-  polling_code: e.string()
-}), te = ["pending", "authorized", "rejected", "expired"], oe = e.enum(te), ne = e.object({
-  status: oe,
-  oracle_signature: e.optional(e.string()),
-  oracle_public_key: e.optional(e.string()),
-  solana_address: e.optional(e.string()),
-  timestamp: e.optional(e.number()),
-  session_address: e.optional(e.string())
-}), re = e.object({
-  solana_address: e.string()
-}), ae = e.object({
-  session_address: e.string()
-});
-function ie(a) {
-  return l.findProgramAddressSync(
-    [Buffer.from("program_state")],
-    a
-  );
-}
-function ce(a) {
-  return l.findProgramAddressSync(
-    [Buffer.from("credential_signer")],
-    a
-  );
-}
-function le(a) {
-  return l.findProgramAddressSync(
-    [Buffer.from("session_registry")],
-    a
-  );
-}
-function de(a, s) {
-  return l.findProgramAddressSync(
-    [Buffer.from("session"), Buffer.from(a)],
-    s
-  );
-}
-function ge(a, s) {
-  return l.findProgramAddressSync(
-    [Buffer.from("solana"), a.toBuffer()],
-    s
-  );
-}
-function fe(a, s, t, o) {
-  return l.findProgramAddressSync(
-    [
-      Buffer.from("attestation"),
-      a.toBuffer(),
-      s.toBuffer(),
-      t.toBuffer()
-    ],
-    o
-  );
-}
-const pe = "https://sso.alien.com", ue = 5e3, he = "9cstDz8WWRAFaq1vVpTjfHz6tjgh6SJaqYFeZWi1pFHG", Se = "DeHa6pyZ2CFSbQQiNMm7FgoCXqmkX6tXG77C4Qycpta6", me = "22zoJMtdu4tQc2PzL74ZUT7FrwgB1Udec8DdW4yw4BdG", m = (a, s) => new URL(s, a).toString(), ye = e.object({
-  ssoBaseUrl: e.url(),
-  providerAddress: e.string(),
-  pollingInterval: e.optional(e.number()),
-  credentialSignerProgramId: e.optional(e.string()),
-  sasProgramId: e.optional(e.string()),
-  sessionRegistryProgramId: e.optional(e.string()),
-  credentialAuthority: e.optional(e.string()),
-  credentialName: e.optional(e.string()),
-  schemaName: e.optional(e.string()),
-  schemaVersion: e.optional(e.number())
-});
-class Ie {
-  constructor(s) {
-    this.config = ye.parse(s), this.ssoBaseUrl = this.config.ssoBaseUrl || pe, this.providerAddress = this.config.providerAddress, this.pollingInterval = this.config.pollingInterval || ue, this.credentialSignerProgramId = new l(
-      this.config.credentialSignerProgramId || he
-    ), this.sasProgramId = new l(
-      this.config.sasProgramId || me
-    ), this.sessionRegistryProgramId = new l(
-      this.config.sessionRegistryProgramId || Se
-    );
-  }
-  generateDeeplink(s) {
-    return g(this, null, function* () {
-      const t = {
-        solana_address: s
-      };
-      Z.parse(t);
-      const o = m(this.config.ssoBaseUrl, "/solana/link"), n = yield fetch(o, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "X-PROVIDER-ADDRESS": this.providerAddress
-        },
-        body: JSON.stringify(t)
-      });
-      if (!n.ok)
-        throw new Error(`GenerateLinkDeeplink failed: ${n.statusText}`);
-      const r = yield n.json();
-      return ee.parse(r);
-    });
-  }
-  pollAuth(s) {
-    return g(this, null, function* () {
-      const t = {
-        polling_code: s
-      };
-      se.parse(t);
-      const o = yield fetch(
-        m(this.config.ssoBaseUrl, "/solana/poll"),
-        {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "X-PROVIDER-ADDRESS": this.providerAddress
-          },
-          body: JSON.stringify(t)
-        }
-      );
-      if (!o.ok)
-        throw new Error(`Poll failed: ${o.statusText}`);
-      const n = yield o.json();
-      return ne.parse(n);
-    });
-  }
-  getAttestation(s) {
-    return g(this, null, function* () {
-      const t = {
-        solana_address: s
-      };
-      re.parse(t);
-      const o = yield fetch(
-        m(this.config.ssoBaseUrl, "/solana/attestation"),
-        {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "X-PROVIDER-ADDRESS": this.providerAddress
-          },
-          body: JSON.stringify(t)
-        }
-      );
-      if (o.status === 404)
-        return null;
-      if (!o.ok)
-        throw new Error(`GetAttestation failed: ${o.statusText}`);
-      const n = yield o.json();
-      return ae.parse(n).session_address;
-    });
-  }
-  buildCreateAttestationTransaction(s) {
-    return g(this, null, function* () {
-      const {
-        connection: t,
-        payerPublicKey: o,
-        sessionAddress: n,
-        oracleSignature: r,
-        oraclePublicKey: i,
-        timestamp: f,
-        expiry: c
-      } = s, [d] = ie(this.credentialSignerProgramId), u = yield t.getAccountInfo(d);
-      if (!u)
-        throw new Error("ProgramState account not found");
-      const y = u.data, _ = new l(y.slice(40, 72)), A = new l(y.slice(72, 104)), [R] = ce(this.credentialSignerProgramId), [I] = le(this.sessionRegistryProgramId), [k] = de(n, this.sessionRegistryProgramId), [w] = ge(o, this.sessionRegistryProgramId), [B] = fe(
-        _,
-        A,
-        o,
-        this.sasProgramId
-      ), b = Buffer.alloc(8);
-      b.writeBigInt64LE(BigInt(f));
-      const E = Buffer.concat([
-        Buffer.from(n),
-        Buffer.from(o.toBase58()),
-        b
-      ]), j = C.createInstructionWithPublicKey({
-        publicKey: i.toBytes(),
-        message: E,
-        signature: r
-      }), T = this.serializeCreateAttestationInstruction(
-        n,
-        Array.from(r),
-        c,
-        f
-      ), v = new O({
-        keys: [
-          { pubkey: d, isSigner: !1, isWritable: !1 },
-          { pubkey: R, isSigner: !1, isWritable: !1 },
-          { pubkey: o, isSigner: !0, isWritable: !0 },
-          { pubkey: _, isSigner: !1, isWritable: !1 },
-          { pubkey: A, isSigner: !1, isWritable: !1 },
-          { pubkey: B, isSigner: !1, isWritable: !0 },
-          { pubkey: U.programId, isSigner: !1, isWritable: !1 },
-          { pubkey: this.sasProgramId, isSigner: !1, isWritable: !1 },
-          { pubkey: L, isSigner: !1, isWritable: !1 },
-          { pubkey: this.sessionRegistryProgramId, isSigner: !1, isWritable: !1 },
-          { pubkey: I, isSigner: !1, isWritable: !0 },
-          { pubkey: k, isSigner: !1, isWritable: !0 },
-          { pubkey: w, isSigner: !1, isWritable: !0 }
-        ],
-        programId: this.credentialSignerProgramId,
-        data: T
-      }), h = new x();
-      return h.add(j), h.add(v), h;
-    });
-  }
-  serializeCreateAttestationInstruction(s, t, o, n) {
-    const r = Buffer.from([
-      49,
-      24,
-      67,
-      80,
-      12,
-      249,
-      96,
-      239
-    ]), i = Buffer.alloc(4);
-    i.writeUInt32LE(s.length);
-    const f = Buffer.from(s), c = Buffer.from(t), d = Buffer.alloc(8);
-    d.writeBigInt64LE(BigInt(o));
-    const u = Buffer.alloc(8);
-    return u.writeBigInt64LE(BigInt(n)), Buffer.concat([
-      r,
-      i,
-      f,
-      c,
-      d,
-      u
-    ]);
+    localStorage.removeItem(l + "access_token"), sessionStorage.removeItem(l + "code_verifier");
   }
 }
 export {
-  Ie as AlienSolanaSsoClient,
-  ye as AlienSolanaSsoClientSchema,
-  Re as AlienSsoClient,
-  Q as AlienSsoClientSchema,
-  N as AuthorizeRequestSchema,
-  V as AuthorizeResponseSchema,
-  q as ExchangeCodeRequestSchema,
-  X as ExchangeCodeResponseSchema,
-  W as PollRequestSchema,
-  G as PollResponseSchema,
-  re as SolanaAttestationRequestSchema,
-  ae as SolanaAttestationResponseSchema,
-  Z as SolanaLinkRequestSchema,
-  ee as SolanaLinkResponseSchema,
-  se as SolanaPollRequestSchema,
-  ne as SolanaPollResponseSchema,
-  $ as TokenInfoSchema,
-  F as VerifyTokenRequestSchema,
-  M as VerifyTokenResponseSchema
+  x as AlienSsoClient,
+  O as AlienSsoClientSchema,
+  _ as AuthorizeRequestSchema,
+  S as AuthorizeResponseSchema,
+  R as ExchangeCodeRequestSchema,
+  A as ExchangeCodeResponseSchema,
+  m as PollRequestSchema,
+  b as PollResponseSchema,
+  w as TokenInfoSchema,
+  j as VerifyTokenRequestSchema,
+  v as VerifyTokenResponseSchema
 };

package/dist/index.umd.js

@@ -1 +1 @@
-(function(n,e){typeof exports=="object"&&typeof module!="undefined"?e(exports,require("zod/v4-mini"),require("js-sha256"),require("@solana/web3.js")):typeof define=="function"&&define.amd?define(["exports","zod/v4-mini","js-sha256","@solana/web3.js"],e):(n=typeof globalThis!="undefined"?globalThis:n||self,e(n.AlienSsoCore={},n.Zod,n.jsSha256,n.solanaWeb3))})(this,(function(n,e,f,c){"use strict";var g=(n,e,f)=>new Promise((c,S)=>{var z=d=>{try{p(f.next(d))}catch(h){S(h)}},A=d=>{try{p(f.throw(d))}catch(h){S(h)}},p=d=>d.done?c(d.value):Promise.resolve(d.value).then(z,A);p((f=f.apply(n,e)).next())});const S=e.z.object({code_challenge:e.z.string(),code_challenge_method:e.z.literal("S256")}),z=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),A=e.z.object({polling_code:e.z.string()}),p=["pending","authorized","rejected","expired"],d=e.z.enum(p),h=e.z.object({status:d,authorization_code:e.z.optional(e.z.string())}),k=e.z.object({authorization_code:e.z.string(),code_verifier:e.z.string()}),E=e.z.object({access_token:e.z.string()}),B=e.z.object({access_token:e.z.string()}),T=e.z.object({is_valid:e.z.boolean(),access_token:e.z.optional(e.z.string())}),C=e.z.object({app_callback_session_address:e.z.string(),expired_at:e.z.number(),issued_at:e.z.number()});function X(i){return btoa(i).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function w(i){let s=i.replace(/-/g,"+").replace(/_/g,"/");for(;s.length%4;)s+="=";return atob(s)}const F="https://sso.alien.com",$=5e3,u="alien-sso_",R=(i,s)=>new URL(s,i).toString(),j=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number())});class x{constructor(s){this.config=j.parse(s),this.ssoBaseUrl=this.config.ssoBaseUrl||F,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||$}generateCodeVerifier(s=128){let o;const t=typeof window!="undefined"&&window.crypto;if(t&&t.getRandomValues)o=new Uint8Array(s),t.getRandomValues(o);else{o=new Uint8Array(s);for(let a=0;a<s;a++)o[a]=Math.floor(Math.random()*256)}let r="";for(let a=0;a<o.length;a++)r+=String.fromCharCode(o[a]);return X(r)}generateCodeChallenge(s){return f.sha256(s)}generateDeeplink(){return g(this,null,function*(){const s=this.generateCodeVerifier(),o=this.generateCodeChallenge(s);sessionStorage.setItem(u+"code_verifier",s);const t=`${this.config.ssoBaseUrl}/sso/authorize`,r={code_challenge:o,code_challenge_method:"S256"};S.parse(r);const l=yield(yield fetch(t,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(r)})).json();return z.parse(l)})}pollAuth(s){return g(this,null,function*(){const o={polling_code:s};A.parse(o);const t=yield fetch(R(this.config.ssoBaseUrl,"/sso/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(!t.ok)throw new Error(`Poll failed: ${t.statusText}`);const r=yield t.json();return h.parse(r)})}exchangeToken(s){return g(this,null,function*(){const o=sessionStorage.getItem(u+"code_verifier");if(!o)throw new Error("Missing code verifier.");const t={authorization_code:s,code_verifier:o};k.parse(t);const r=yield fetch(R(this.config.ssoBaseUrl,"/sso/access_token/exchange"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(t)});if(!r.ok)throw new Error(`ExchangeCode failed: ${r.statusText}`);const a=yield r.json(),l=E.parse(a);if(l.access_token)return localStorage.setItem(u+"access_token",l.access_token),l.access_token;throw new Error("Exchange failed")})}verifyAuth(){return g(this,null,function*(){const s=this.getAccessToken();if(!s)return!1;const o={access_token:s};B.parse(o);const t=yield fetch(R(this.config.ssoBaseUrl,"/sso/access_token/verify"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(!t.ok)return!1;const r=yield t.json(),a=T.parse(r);return a.access_token&&localStorage.setItem(u+"access_token",a.access_token),a.is_valid})}getAccessToken(){return localStorage.getItem(u+"access_token")}getAuthData(){const s=this.getAccessToken();if(!s)return null;const o=s.split(".");if(o.length!==3)return null;let t;try{const a=w(o[0]);t=JSON.parse(a)}catch(a){return null}if(t.alg!=="HS256"||t.typ!=="JWT")return null;let r;try{const a=JSON.parse(w(o[1]));r=C.parse(a)}catch(a){return null}return r}logout(){localStorage.removeItem(u+"access_token"),sessionStorage.removeItem(u+"code_verifier")}}const D=e.z.object({solana_address:e.z.string()}),O=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),U=e.z.object({polling_code:e.z.string()}),Y=["pending","authorized","rejected","expired"],H=e.z.enum(Y),L=e.z.object({status:H,oracle_signature:e.z.optional(e.z.string()),oracle_public_key:e.z.optional(e.z.string()),solana_address:e.z.optional(e.z.string()),timestamp:e.z.optional(e.z.number()),session_address:e.z.optional(e.z.string())}),V=e.z.object({solana_address:e.z.string()}),N=e.z.object({session_address:e.z.string()});function Q(i){return c.PublicKey.findProgramAddressSync([Buffer.from("program_state")],i)}function Z(i){return c.PublicKey.findProgramAddressSync([Buffer.from("credential_signer")],i)}function v(i){return c.PublicKey.findProgramAddressSync([Buffer.from("session_registry")],i)}function M(i,s){return c.PublicKey.findProgramAddressSync([Buffer.from("session"),Buffer.from(i)],s)}function ee(i,s){return c.PublicKey.findProgramAddressSync([Buffer.from("solana"),i.toBuffer()],s)}function se(i,s,o,t){return c.PublicKey.findProgramAddressSync([Buffer.from("attestation"),i.toBuffer(),s.toBuffer(),o.toBuffer()],t)}const te="https://sso.alien.com",oe=5e3,re="9cstDz8WWRAFaq1vVpTjfHz6tjgh6SJaqYFeZWi1pFHG",ne="DeHa6pyZ2CFSbQQiNMm7FgoCXqmkX6tXG77C4Qycpta6",ae="22zoJMtdu4tQc2PzL74ZUT7FrwgB1Udec8DdW4yw4BdG",b=(i,s)=>new URL(s,i).toString(),q=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number()),credentialSignerProgramId:e.z.optional(e.z.string()),sasProgramId:e.z.optional(e.z.string()),sessionRegistryProgramId:e.z.optional(e.z.string()),credentialAuthority:e.z.optional(e.z.string()),credentialName:e.z.optional(e.z.string()),schemaName:e.z.optional(e.z.string()),schemaVersion:e.z.optional(e.z.number())});class ie{constructor(s){this.config=q.parse(s),this.ssoBaseUrl=this.config.ssoBaseUrl||te,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||oe,this.credentialSignerProgramId=new c.PublicKey(this.config.credentialSignerProgramId||re),this.sasProgramId=new c.PublicKey(this.config.sasProgramId||ae),this.sessionRegistryProgramId=new c.PublicKey(this.config.sessionRegistryProgramId||ne)}generateDeeplink(s){return g(this,null,function*(){const o={solana_address:s};D.parse(o);const t=b(this.config.ssoBaseUrl,"/solana/link"),r=yield fetch(t,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(!r.ok)throw new Error(`GenerateLinkDeeplink failed: ${r.statusText}`);const a=yield r.json();return O.parse(a)})}pollAuth(s){return g(this,null,function*(){const o={polling_code:s};U.parse(o);const t=yield fetch(b(this.config.ssoBaseUrl,"/solana/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(!t.ok)throw new Error(`Poll failed: ${t.statusText}`);const r=yield t.json();return L.parse(r)})}getAttestation(s){return g(this,null,function*(){const o={solana_address:s};V.parse(o);const t=yield fetch(b(this.config.ssoBaseUrl,"/solana/attestation"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(o)});if(t.status===404)return null;if(!t.ok)throw new Error(`GetAttestation failed: ${t.statusText}`);const r=yield t.json();return N.parse(r).session_address})}buildCreateAttestationTransaction(s){return g(this,null,function*(){const{connection:o,payerPublicKey:t,sessionAddress:r,oracleSignature:a,oraclePublicKey:l,timestamp:P,expiry:I}=s,[m]=Q(this.credentialSignerProgramId),y=yield o.getAccountInfo(m);if(!y)throw new Error("ProgramState account not found");const W=y.data,K=new c.PublicKey(W.slice(40,72)),J=new c.PublicKey(W.slice(72,104)),[ce]=Z(this.credentialSignerProgramId),[le]=v(this.sessionRegistryProgramId),[de]=M(r,this.sessionRegistryProgramId),[ge]=ee(t,this.sessionRegistryProgramId),[ue]=se(K,J,t,this.sasProgramId),G=Buffer.alloc(8);G.writeBigInt64LE(BigInt(P));const fe=Buffer.concat([Buffer.from(r),Buffer.from(t.toBase58()),G]),he=c.Ed25519Program.createInstructionWithPublicKey({publicKey:l.toBytes(),message:fe,signature:a}),Se=this.serializeCreateAttestationInstruction(r,Array.from(a),I,P),pe=new c.TransactionInstruction({keys:[{pubkey:m,isSigner:!1,isWritable:!1},{pubkey:ce,isSigner:!1,isWritable:!1},{pubkey:t,isSigner:!0,isWritable:!0},{pubkey:K,isSigner:!1,isWritable:!1},{pubkey:J,isSigner:!1,isWritable:!1},{pubkey:ue,isSigner:!1,isWritable:!0},{pubkey:c.SystemProgram.programId,isSigner:!1,isWritable:!1},{pubkey:this.sasProgramId,isSigner:!1,isWritable:!1},{pubkey:c.SYSVAR_INSTRUCTIONS_PUBKEY,isSigner:!1,isWritable:!1},{pubkey:this.sessionRegistryProgramId,isSigner:!1,isWritable:!1},{pubkey:le,isSigner:!1,isWritable:!0},{pubkey:de,isSigner:!1,isWritable:!0},{pubkey:ge,isSigner:!1,isWritable:!0}],programId:this.credentialSignerProgramId,data:Se}),_=new c.Transaction;return _.add(he),_.add(pe),_})}serializeCreateAttestationInstruction(s,o,t,r){const a=Buffer.from([49,24,67,80,12,249,96,239]),l=Buffer.alloc(4);l.writeUInt32LE(s.length);const P=Buffer.from(s),I=Buffer.from(o),m=Buffer.alloc(8);m.writeBigInt64LE(BigInt(t));const y=Buffer.alloc(8);return y.writeBigInt64LE(BigInt(r)),Buffer.concat([a,l,P,I,m,y])}}n.AlienSolanaSsoClient=ie,n.AlienSolanaSsoClientSchema=q,n.AlienSsoClient=x,n.AlienSsoClientSchema=j,n.AuthorizeRequestSchema=S,n.AuthorizeResponseSchema=z,n.ExchangeCodeRequestSchema=k,n.ExchangeCodeResponseSchema=E,n.PollRequestSchema=A,n.PollResponseSchema=h,n.SolanaAttestationRequestSchema=V,n.SolanaAttestationResponseSchema=N,n.SolanaLinkRequestSchema=D,n.SolanaLinkResponseSchema=O,n.SolanaPollRequestSchema=U,n.SolanaPollResponseSchema=L,n.TokenInfoSchema=C,n.VerifyTokenRequestSchema=B,n.VerifyTokenResponseSchema=T,Object.defineProperty(n,Symbol.toStringTag,{value:"Module"})}));
+(function(t,e){typeof exports=="object"&&typeof module!="undefined"?e(exports,require("zod/v4-mini"),require("js-sha256")):typeof define=="function"&&define.amd?define(["exports","zod/v4-mini","js-sha256"],e):(t=typeof globalThis!="undefined"?globalThis:t||self,e(t.AlienSsoCore={},t.Zod,t.jsSha256))})(this,(function(t,e,i){"use strict";var f=(t,e,i)=>new Promise((S,g)=>{var m=c=>{try{u(i.next(c))}catch(d){g(d)}},_=c=>{try{u(i.throw(c))}catch(d){g(d)}},u=c=>c.done?S(c.value):Promise.resolve(c.value).then(m,_);u((i=i.apply(t,e)).next())});const S=e.z.object({code_challenge:e.z.string(),code_challenge_method:e.z.literal("S256")}),g=e.z.object({deep_link:e.z.string(),polling_code:e.z.string(),expired_at:e.z.number()}),m=e.z.object({polling_code:e.z.string()}),_=["pending","authorized","rejected","expired"],u=e.z.enum(_),c=e.z.object({status:u,authorization_code:e.z.optional(e.z.string())}),d=e.z.object({authorization_code:e.z.string(),code_verifier:e.z.string()}),y=e.z.object({access_token:e.z.string()}),R=e.z.object({access_token:e.z.string()}),k=e.z.object({is_valid:e.z.boolean(),access_token:e.z.optional(e.z.string())}),A=e.z.object({app_callback_session_address:e.z.string(),expired_at:e.z.number(),issued_at:e.z.number()});function T(h){return btoa(h).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function j(h){let o=h.replace(/-/g,"+").replace(/_/g,"/");for(;o.length%4;)o+="=";return atob(o)}const C="https://sso.alien.com",w=5e3,l="alien-sso_",z=(h,o)=>new URL(o,h).toString(),b=e.z.object({ssoBaseUrl:e.z.url(),providerAddress:e.z.string(),pollingInterval:e.z.optional(e.z.number())});class E{constructor(o){this.config=b.parse(o),this.ssoBaseUrl=this.config.ssoBaseUrl||C,this.providerAddress=this.config.providerAddress,this.pollingInterval=this.config.pollingInterval||w}generateCodeVerifier(o=128){let s;const r=typeof window!="undefined"&&window.crypto;if(r&&r.getRandomValues)s=new Uint8Array(o),r.getRandomValues(s);else{s=new Uint8Array(o);for(let n=0;n<o;n++)s[n]=Math.floor(Math.random()*256)}let a="";for(let n=0;n<s.length;n++)a+=String.fromCharCode(s[n]);return T(a)}generateCodeChallenge(o){return i.sha256(o)}generateDeeplink(){return f(this,null,function*(){const o=this.generateCodeVerifier(),s=this.generateCodeChallenge(o);sessionStorage.setItem(l+"code_verifier",o);const r=`${this.config.ssoBaseUrl}/sso/authorize`,a={code_challenge:s,code_challenge_method:"S256"};S.parse(a);const p=yield(yield fetch(r,{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(a)})).json();return g.parse(p)})}pollAuth(o){return f(this,null,function*(){const s={polling_code:o};m.parse(s);const r=yield fetch(z(this.config.ssoBaseUrl,"/sso/poll"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(s)});if(!r.ok)throw new Error(`Poll failed: ${r.statusText}`);const a=yield r.json();return c.parse(a)})}exchangeToken(o){return f(this,null,function*(){const s=sessionStorage.getItem(l+"code_verifier");if(!s)throw new Error("Missing code verifier.");const r={authorization_code:o,code_verifier:s};d.parse(r);const a=yield fetch(z(this.config.ssoBaseUrl,"/sso/access_token/exchange"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(r)});if(!a.ok)throw new Error(`ExchangeCode failed: ${a.statusText}`);const n=yield a.json(),p=y.parse(n);if(p.access_token)return localStorage.setItem(l+"access_token",p.access_token),p.access_token;throw new Error("Exchange failed")})}verifyAuth(){return f(this,null,function*(){const o=this.getAccessToken();if(!o)return!1;const s={access_token:o};R.parse(s);const r=yield fetch(z(this.config.ssoBaseUrl,"/sso/access_token/verify"),{method:"POST",headers:{"Content-Type":"application/json","X-PROVIDER-ADDRESS":this.providerAddress},body:JSON.stringify(s)});if(!r.ok)return!1;const a=yield r.json(),n=k.parse(a);return n.access_token&&localStorage.setItem(l+"access_token",n.access_token),n.is_valid})}getAccessToken(){return localStorage.getItem(l+"access_token")}getAuthData(){const o=this.getAccessToken();if(!o)return null;const s=o.split(".");if(s.length!==3)return null;let r;try{const n=j(s[0]);r=JSON.parse(n)}catch(n){return null}if(r.alg!=="HS256"||r.typ!=="JWT")return null;let a;try{const n=JSON.parse(j(s[1]));a=A.parse(n)}catch(n){return null}return a}logout(){localStorage.removeItem(l+"access_token"),sessionStorage.removeItem(l+"code_verifier")}}t.AlienSsoClient=E,t.AlienSsoClientSchema=b,t.AuthorizeRequestSchema=S,t.AuthorizeResponseSchema=g,t.ExchangeCodeRequestSchema=d,t.ExchangeCodeResponseSchema=y,t.PollRequestSchema=m,t.PollResponseSchema=c,t.TokenInfoSchema=A,t.VerifyTokenRequestSchema=R,t.VerifyTokenResponseSchema=k,Object.defineProperty(t,Symbol.toStringTag,{value:"Module"})}));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alien_org/sso-sdk-core",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/alien-id/sso-sdk-js.git"
@@ -52,8 +52,5 @@
   "dependencies": {
     "js-sha256": "^0.11.1",
     "zod": "^4.1.5"
-  },
-  "peerDependencies": {
-    "@solana/web3.js": "^1.95.0"
   }
 }