@bigfootai/sdk 1.17.0 → 1.19.0

package/dist/secrets.js

@@ -0,0 +1,101 @@
+import { logger } from './logger.js';
+/**
+ * Resolves a provider's secret configuration before the server starts.
+ *
+ * On Lambda the secret named by `SECRETS_MANAGER_SECRET_ID` is read through the
+ * AWS Parameters and Secrets Lambda Extension and merged into `process.env`. On
+ * ECS the task definition has already injected the values there, so there is
+ * nothing to fetch. A provider calls this once and does not know which runtime
+ * it is on.
+ */
+/** Names the Secrets Manager secret to read on Lambda. Unset on ECS and locally. */
+export const SECRET_ID_VAR = 'SECRETS_MANAGER_SECRET_ID';
+/** Set by the Lambda runtime; its presence is how we know the extension is available. */
+const LAMBDA_VAR = 'AWS_LAMBDA_FUNCTION_NAME';
+export const loadSecrets = async ({ secretId, required = [], fetcher } = {}) => {
+    const id = (secretId ?? process.env[SECRET_ID_VAR])?.trim();
+    // ECS and local: the value is already in the environment. Nothing to fetch.
+    if (id && process.env[LAMBDA_VAR]) {
+        const values = parseSecretPayload(await (fetcher ?? fetchFromExtension)(id));
+        // Secrets Manager is authoritative: it overwrites a stale injected value.
+        for (const [key, value] of Object.entries(values)) {
+            process.env[key] = value;
+        }
+        logger.info({ keys: Object.keys(values).sort(), secretId: id }, 'Loaded configuration from Secrets Manager');
+    }
+    const missing = required
+        .map((requirement) => (typeof requirement === 'string' ? [requirement] : requirement))
+        .filter((keys) => keys.every((key) => !process.env[key]?.trim()))
+        .map((keys) => keys.join(' or '));
+    // Deployed, a missing value aborts startup. Locally, warn so one integration
+    // is not blocked by configuration another one needs.
+    if (missing.length > 0) {
+        if (id) {
+            throw new Error(`Incomplete configuration after "${id}": missing ${missing.join(', ')}`);
+        }
+        logger.warn({ missing }, `${SECRET_ID_VAR} is not set; these values are missing locally`);
+    }
+};
+const parseSecretPayload = (raw) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        // Never quote the payload: JSON.parse's own error can include it.
+        throw new Error('the secret is not valid JSON (expected a flat object of string key/value pairs)');
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('the secret must be a flat JSON object of string key/value pairs');
+    }
+    for (const [key, value] of Object.entries(parsed)) {
+        if (typeof value !== 'string') {
+            throw new Error(`the secret value for "${key}" must be a string`);
+        }
+    }
+    return parsed;
+};
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Reads the secret from the extension, retrying while it finishes booting: a
+ * refused connection, 5xx or 429 is transient, any other 4xx is terminal.
+ */
+const fetchFromExtension = async (secretId) => {
+    // Read the token per call so it stays fresh across a SnapStart restore.
+    const token = process.env.AWS_SESSION_TOKEN;
+    if (!token) {
+        throw new Error('AWS_SESSION_TOKEN is not set; the extension requires it');
+    }
+    const port = process.env.PARAMETERS_SECRETS_EXTENSION_HTTP_PORT ?? '2773';
+    const url = `http://localhost:${port}/secretsmanager/get?secretId=${encodeURIComponent(secretId)}`;
+    let lastError;
+    for (let attempt = 1; attempt <= 5; attempt += 1) {
+        let response;
+        try {
+            response = await fetch(url, { headers: { 'X-Aws-Parameters-Secrets-Token': token } });
+        }
+        catch (error) {
+            lastError = error;
+            if (attempt < 5)
+                await sleep(200 * attempt);
+            continue;
+        }
+        if (response.ok) {
+            const body = (await response.json());
+            if (!body.SecretString) {
+                throw new Error('the secret has no SecretString value (binary secrets are not supported)');
+            }
+            return body.SecretString;
+        }
+        // 5xx and 429 mean "still starting"; any other 4xx is terminal.
+        if (response.status !== 429 && response.status < 500) {
+            throw new Error(`the extension returned ${response.status} for "${secretId}"`);
+        }
+        lastError = new Error(`the extension returned ${response.status} for "${secretId}"`);
+        if (attempt < 5)
+            await sleep(200 * attempt);
+    }
+    // Unreachable: the loop returns or throws. Kept for the type checker.
+    throw lastError;
+};
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAEzD,yFAAyF;AACzF,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAW9C,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,EAAE,EAAE,OAAO,KAAyB,EAAE,EAAiB,EAAE;IACjH,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAE5D,4EAA4E;IAC5E,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,0EAA0E;QAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,2CAA2C,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ;SACtB,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;SACrF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SAChE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnC,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,aAAa,+CAA+C,CAAC,CAAC;IAC3F,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAA0B,EAAE;IAClE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,kEAAkE;QAClE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,oBAAoB,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;IACD,OAAO,MAAgC,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;GAGG;AACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;IACtE,wEAAwE;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,MAAM,CAAC;IAC1E,MAAM,GAAG,GAAG,oBAAoB,IAAI,gCAAgC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEnG,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,gCAAgC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;YAC5C,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,IAAI,CAAC,YAAY,CAAC;QAC1B,CAAC;QACD,gEAAgE;QAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,SAAS,QAAQ,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,SAAS,GAAG,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,SAAS,QAAQ,GAAG,CAAC,CAAC;QACrF,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,sEAAsE;IACtE,MAAM,SAAS,CAAC;AACjB,CAAC,CAAC"}

package/dist/secrets.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secrets.test.d.ts.map

package/dist/secrets.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.d.ts","sourceRoot":"","sources":["../src/secrets.test.ts"],"names":[],"mappings":""}

package/dist/secrets.test.js

@@ -0,0 +1,107 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { logger } from './logger.js';
+import { SECRET_ID_VAR, loadSecrets } from './secrets.js';
+const SECRET_ID = 'bigfoot-example/dev';
+const TOKEN = 'session-token-value';
+const MANAGED_VARS = [
+    SECRET_ID_VAR,
+    'AWS_LAMBDA_FUNCTION_NAME',
+    'AWS_SESSION_TOKEN',
+    'PARAMETERS_SECRETS_EXTENSION_HTTP_PORT',
+    'BIGFOOT_API_KEY',
+    'CLIENT_SECRET',
+    'PKCE_SECRET',
+    'EXTRA',
+];
+const clearEnv = () => {
+    for (const name of MANAGED_VARS) {
+        delete process.env[name];
+    }
+};
+const asLambda = () => {
+    process.env.AWS_LAMBDA_FUNCTION_NAME = 'bigfoot-example';
+    process.env[SECRET_ID_VAR] = SECRET_ID;
+    process.env.AWS_SESSION_TOKEN = TOKEN;
+};
+const jsonResponse = (body, status = 200) => new Response(JSON.stringify(body), { status, headers: { 'Content-Type': 'application/json' } });
+beforeEach(() => {
+    clearEnv();
+});
+afterEach(() => {
+    clearEnv();
+    vi.unstubAllGlobals();
+    vi.restoreAllMocks();
+});
+describe('loadSecrets', () => {
+    it('reads the secret on Lambda, merges every key and logs key names only', async () => {
+        asLambda();
+        const info = vi.spyOn(logger, 'info');
+        const fetchMock = vi
+            .fn()
+            .mockResolvedValue(jsonResponse({ SecretString: JSON.stringify({ BIGFOOT_API_KEY: 'k', EXTRA: 'x' }) }));
+        vi.stubGlobal('fetch', fetchMock);
+        await loadSecrets({ required: ['BIGFOOT_API_KEY'] });
+        expect(process.env.BIGFOOT_API_KEY).toBe('k');
+        expect(process.env.EXTRA).toBe('x');
+        const [url, init] = fetchMock.mock.calls[0];
+        expect(url).toBe(`http://localhost:2773/secretsmanager/get?secretId=${encodeURIComponent(SECRET_ID)}`);
+        expect(init.headers['X-Aws-Parameters-Secrets-Token']).toBe(TOKEN);
+        expect(info).toHaveBeenCalledWith({ keys: ['BIGFOOT_API_KEY', 'EXTRA'], secretId: SECRET_ID }, expect.any(String));
+    });
+    it('does not fetch off Lambda, where ECS has already injected the values', async () => {
+        process.env[SECRET_ID_VAR] = SECRET_ID;
+        process.env.BIGFOOT_API_KEY = 'injected';
+        const fetchMock = vi.fn();
+        vi.stubGlobal('fetch', fetchMock);
+        await loadSecrets({ required: ['BIGFOOT_API_KEY'] });
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('fails closed off Lambda when a required key is missing, naming the key but never a value', async () => {
+        process.env[SECRET_ID_VAR] = SECRET_ID;
+        process.env.CLIENT_SECRET = 'a-value-that-must-not-be-named';
+        const error = await loadSecrets({ required: ['BIGFOOT_API_KEY', 'CLIENT_SECRET'] }).catch((e) => e);
+        expect(error.message).toContain('BIGFOOT_API_KEY');
+        expect(error.message).not.toContain('a-value-that-must-not-be-named');
+    });
+    it('only warns locally, so one integration is not blocked by another', async () => {
+        const warn = vi.spyOn(logger, 'warn');
+        await expect(loadSecrets({ required: ['BIGFOOT_API_KEY'] })).resolves.toBeUndefined();
+        expect(warn).toHaveBeenCalled();
+    });
+    it('accepts alternatives, satisfied when any one is present', async () => {
+        process.env[SECRET_ID_VAR] = SECRET_ID;
+        process.env.PKCE_SECRET = 'value';
+        await expect(loadSecrets({ required: [['CLIENT_SECRET', 'PKCE_SECRET']] })).resolves.toBeUndefined();
+    });
+    it('does not quote the payload when the secret is malformed', async () => {
+        asLambda();
+        const secret = 'super-secret-not-json';
+        const error = await loadSecrets({ fetcher: async () => secret }).catch((e) => e);
+        expect(error.message).toMatch(/not valid JSON/);
+        expect(error.message).not.toContain(secret);
+    });
+    it('retries the extension while it finishes booting', async () => {
+        asLambda();
+        const fetchMock = vi
+            .fn()
+            .mockRejectedValueOnce(new Error('connect ECONNREFUSED'))
+            .mockResolvedValue(jsonResponse({ SecretString: JSON.stringify({ BIGFOOT_API_KEY: 'k' }) }));
+        vi.stubGlobal('fetch', fetchMock);
+        await loadSecrets({ required: ['BIGFOOT_API_KEY'] });
+        expect(fetchMock).toHaveBeenCalledTimes(2);
+        expect(process.env.BIGFOOT_API_KEY).toBe('k');
+    });
+    it('does not retry a request the extension rejected', async () => {
+        asLambda();
+        const fetchMock = vi.fn().mockResolvedValue(new Response('not found', { status: 404 }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(loadSecrets()).rejects.toThrow(/returned 404/);
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+    });
+    it('fails when the secret has no SecretString', async () => {
+        asLambda();
+        vi.stubGlobal('fetch', vi.fn().mockResolvedValue(jsonResponse({ SecretBinary: 'AAAA' })));
+        await expect(loadSecrets()).rejects.toThrow(/SecretString/);
+    });
+});
+//# sourceMappingURL=secrets.test.js.map

package/dist/secrets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.test.js","sourceRoot":"","sources":["../src/secrets.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAEpC,MAAM,YAAY,GAAG;IACpB,aAAa;IACb,0BAA0B;IAC1B,mBAAmB;IACnB,wCAAwC;IACxC,iBAAiB;IACjB,eAAe;IACf,aAAa;IACb,OAAO;CACE,CAAC;AAEX,MAAM,QAAQ,GAAG,GAAG,EAAE;IACrB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAG,EAAE;IACrB,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,iBAAiB,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAY,EAAE,CAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAEjG,UAAU,CAAC,GAAG,EAAE;IACf,QAAQ,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACd,QAAQ,EAAE,CAAC;IACX,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACtB,EAAE,CAAC,eAAe,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACrF,QAAQ,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE;aAClB,EAAE,EAAE;aACJ,iBAAiB,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qDAAqD,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,CAAE,IAAI,CAAC,OAAkC,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACrF,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,UAAU,CAAC;QACzC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACzG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,gCAAgC,CAAC;QAE7D,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3G,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC9D,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEtC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;QAElC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,QAAQ,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,uBAAuB,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAExF,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,QAAQ,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,EAAE;aAClB,EAAE,EAAE;aACJ,qBAAqB,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;aACxD,iBAAiB,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAChE,QAAQ,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACxF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,QAAQ,EAAE,CAAC;QACX,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bigfootai/sdk",
   "type": "module",
-  "version": "1.17.0",
+  "version": "1.19.0",
   "files": [
     "dist",
     "LICENSE",
@@ -13,6 +13,7 @@
     "body-parser": "^2.2.2",
     "compression": "^1.8.1",
     "express": "^5.0.1",
+    "jose": "^6.0.13",
     "pino": "^9.9.0",
     "pino-http": "^10.5.0",
     "problem-details-http": "^2.0.0",