@coinlist-co/react 0.0.1

package/dist/client/index.cjs

@@ -0,0 +1,621 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/client/index.ts
+var client_exports = {};
+__export(client_exports, {
+  AuthorizationCode: () => AuthorizationCode,
+  ClientId: () => ClientId,
+  ClientSecret: () => ClientSecret,
+  CodeChallenge: () => CodeChallenge,
+  CodeVerifier: () => CodeVerifier,
+  CoinListProvider: () => CoinListProvider,
+  OAuthRefreshToken: () => OAuthRefreshToken,
+  OAuthSession: () => OAuthSession,
+  RedirectUri: () => RedirectUri,
+  User: () => User,
+  UserEmail: () => UserEmail,
+  UserId: () => UserId,
+  createCoinListClient: () => createCoinListClient,
+  useCoinList: () => useCoinList
+});
+module.exports = __toCommonJS(client_exports);
+
+// src/client/CoinListProvider.tsx
+var import_react = require("react");
+
+// src/shared/api/http-attributes.ts
+var empty = {};
+var concat = (left, right) => ({
+  ...left,
+  ...right
+});
+var concatAll = (...items) => {
+  let result = empty;
+  for (const item of items) {
+    result = concat(result, item);
+  }
+  return result;
+};
+var protectedRequest = () => ({ protected: true });
+var userAgent = () => ({ userAgent: true });
+var idempotencyKey = () => ({
+  idempotencyKey: true
+});
+var retryAttempt = (attempt) => ({
+  retryAttempt: attempt
+});
+var renewAttempted = (value) => ({
+  renewAttempted: value
+});
+var isProtected = (attrs) => attrs?.protected === true;
+var needUserAgent = (attrs) => attrs?.userAgent === true;
+var isIdempotent = (attrs) => attrs?.idempotencyKey === true;
+var getRetryAttempt = (attrs) => attrs?.retryAttempt ?? 0;
+var wasRenewAttempted = (attrs) => attrs?.renewAttempted === true;
+var Attributes = {
+  empty,
+  concat,
+  concatAll,
+  protected: protectedRequest,
+  isProtected,
+  userAgent,
+  needUserAgent,
+  idempotencyKey,
+  isIdempotent,
+  retryAttempt,
+  getRetryAttempt,
+  renewAttempted,
+  wasRenewAttempted
+};
+
+// src/client/core/api/middleware/attach-session-middleware.ts
+function attachSessionMiddleware(fetchAccessToken) {
+  return async (request) => {
+    if (!Attributes.isProtected(request.attributes)) {
+      return request;
+    }
+    const accessToken = await fetchAccessToken(false);
+    if (accessToken === null) {
+      return request;
+    }
+    return {
+      ...request,
+      headers: {
+        ...request.headers ?? {},
+        Authorization: `Bearer ${accessToken.value}`
+      }
+    };
+  };
+}
+
+// src/shared/api/http.ts
+var HttpError = class extends Error {
+  constructor(response) {
+    super(`Request failed with ${response.status} status`);
+    this.name = "HttpError";
+    this.response = response;
+  }
+};
+async function makeRequest(request) {
+  const headers = {
+    Accept: "application/json",
+    ...request.method === "POST" && request.body !== void 0 ? { "Content-Type": "application/json" } : {},
+    ...request.headers ?? {}
+  };
+  const init = {
+    method: request.method,
+    headers,
+    ...request.redirect !== void 0 ? { redirect: request.redirect } : {}
+  };
+  if (request.method === "POST" && request.body !== void 0) {
+    init.body = JSON.stringify(request.body);
+  }
+  const response = await fetch(request.url, init);
+  const responseHeaders = headersToRecord(response.headers);
+  if (response.status === 204 || response.status === 205) {
+    return {
+      status: response.status,
+      body: null,
+      headers: responseHeaders
+    };
+  }
+  if (response.status >= 300 && response.status < 400) {
+    await response.text();
+    return {
+      status: response.status,
+      body: null,
+      headers: responseHeaders
+    };
+  }
+  const text = await response.text();
+  const body = text ? JSON.parse(text) : null;
+  return {
+    status: response.status,
+    body,
+    headers: responseHeaders
+  };
+}
+function headersToRecord(headers) {
+  const record = {};
+  headers.forEach((value, key) => {
+    record[key.toLowerCase()] = value;
+  });
+  return record;
+}
+function concatAttributes(request, attrs) {
+  const nextAttributes = Attributes.concat(
+    request.attributes ?? Attributes.empty,
+    attrs
+  );
+  const nextRequest = {
+    ...request,
+    attributes: nextAttributes
+  };
+  return nextRequest;
+}
+var Request = {
+  concatAttributes
+};
+
+// src/client/core/api/middleware/session-renewal.ts
+function renewSessionMiddleware(fetchAccessToken) {
+  return async ({ request, response, retry }) => {
+    if (response.status !== 401) {
+      return response;
+    }
+    if (!Attributes.isProtected(request.attributes)) {
+      return response;
+    }
+    if (Attributes.wasRenewAttempted(request.attributes)) {
+      return response;
+    }
+    const newToken = await fetchAccessToken(true);
+    if (newToken) {
+      const nextRequest = Request.concatAttributes(
+        request,
+        Attributes.renewAttempted(true)
+      );
+      return retry(nextRequest);
+    } else {
+      return response;
+    }
+  };
+}
+
+// src/shared/utils.ts
+async function sha256(data) {
+  const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
+  const buffer = bytes.buffer.slice(
+    bytes.byteOffset,
+    bytes.byteOffset + bytes.byteLength
+  );
+  return crypto.subtle.digest("SHA-256", buffer);
+}
+function arrayBufferToBase64Url(buffer, padding = true) {
+  const bytes = new Uint8Array(buffer);
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  let base64 = btoa(binary);
+  base64 = base64.replace(/\+/g, "-").replace(/\//g, "_");
+  if (!padding) {
+    base64 = base64.replace(/=+$/, "");
+  }
+  return base64;
+}
+function generateSecureRandomBase64Url(byteLength) {
+  const bytes = new Uint8Array(byteLength);
+  crypto.getRandomValues(bytes);
+  const buffer = bytes.buffer;
+  return arrayBufferToBase64Url(buffer, false);
+}
+function getUUIDv4() {
+  if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
+    return crypto.randomUUID();
+  }
+  if (typeof crypto !== "undefined" && typeof crypto.getRandomValues === "function") {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    bytes[6] = bytes[6] & 15 | 64;
+    bytes[8] = bytes[8] & 63 | 128;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0"));
+    return `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10, 16).join("")}`;
+  }
+  return `${Date.now()}-${Math.random().toString(36).slice(2, 12)}`;
+}
+
+// src/client/core/api/middleware/device-id.ts
+var DEVICE_ID_KEY = "coinlist.device_id";
+function getDeviceId() {
+  let deviceId = localStorage.getItem(DEVICE_ID_KEY);
+  if (!deviceId) {
+    deviceId = getUUIDv4();
+    localStorage.setItem(DEVICE_ID_KEY, deviceId);
+  }
+  return deviceId;
+}
+
+// src/shared/api/frontline.ts
+var BASE_URL = "https://mobile-api.coinlist.co";
+var HEADER_API_VERSION = "X-API-Version";
+var HEADER_USER_AGENT = "User-Agent";
+var HEADER_IDEMPOTENCY_KEY = "Idempotency-Key";
+var API_VERSION = "2025-10-17";
+var COINLIST_OAUTH_URL = "https://coinlist.co/oauth/authorize";
+
+// src/client/core/api/middleware/user-agent.ts
+var userAgentMiddleware = async (request) => {
+  if (!Attributes.needUserAgent(request.attributes)) {
+    return request;
+  }
+  const userAgent2 = generateUserAgent();
+  return {
+    ...request,
+    headers: {
+      ...request.headers ?? {},
+      [HEADER_USER_AGENT]: userAgent2
+    }
+  };
+};
+function generateUserAgent() {
+  const appInfo = `CoinList/1.0`;
+  const deviceInfo = "Web Browser";
+  const devicePlatform = "DevicePlatform web";
+  const deviceAppId = "DeviceAppID co.coinlist.sdk";
+  const deviceId = getDeviceId();
+  const finalDeviceId = `DeviceID ${deviceId}`;
+  return `${appInfo} (${deviceInfo}; ${devicePlatform}; ${deviceAppId}; ${finalDeviceId})`;
+}
+
+// src/shared/api/http-client.ts
+var HttpClient = class {
+  constructor(config, middleware = {}) {
+    this.config = config;
+    this.middleware = middleware;
+  }
+  async send(request) {
+    return this.runRequestWithAfterMiddleware(request);
+  }
+  /**
+   * Runs beforeRequest, executeRequest, then the full afterRequest middleware
+   * chain. Used by send() and by the retry() callback so that when a
+   * middleware calls retry(), the retried response also goes through all
+   * afterRequest middleware (e.g. session renewal, retry). Middleware
+   * must use request.attributes.retryAttempt (or similar) to avoid infinite
+   * recursion when they trigger retries.
+   */
+  async runRequestWithAfterMiddleware(request) {
+    const preparedRequest = await this.runBeforeRequestMiddleware(
+      this.withClientDefaults(request)
+    );
+    let response = await this.executeRequest(preparedRequest);
+    for (const middleware of this.middleware.afterRequest ?? []) {
+      response = await middleware({
+        request: preparedRequest,
+        response,
+        retry: (nextRequest = preparedRequest) => this.runRequestWithAfterMiddleware(nextRequest)
+      });
+    }
+    return response;
+  }
+  withClientDefaults(request) {
+    const url = this.resolveUrl(request.url);
+    const headers = {
+      ...request.headers ?? {},
+      [HEADER_API_VERSION]: this.config.xApiVersion
+    };
+    return {
+      ...request,
+      url,
+      headers
+    };
+  }
+  /**
+   * Resolves a request URL against the client's baseUrl.
+   *
+   * @internal Public only for testing. Do not use in application code; use
+   * {@link HttpClient.send} with a path and the client will resolve the URL.
+   */
+  resolveUrl(url) {
+    if (url.startsWith("http://") || url.startsWith("https://")) {
+      return url;
+    }
+    const base = this.config.baseUrl.replace(/\/$/, "");
+    const path = url.startsWith("/") ? url : `/${url}`;
+    return base + path;
+  }
+  async runBeforeRequestMiddleware(initialRequest) {
+    let request = initialRequest;
+    for (const middleware of this.middleware.beforeRequest ?? []) {
+      request = await middleware(request);
+    }
+    return request;
+  }
+  executeRequest(request) {
+    return makeRequest(request);
+  }
+};
+
+// src/shared/api/middleware/idempotency-key.ts
+var idempotencyKeyMiddleware = async (request) => {
+  if (!Attributes.isIdempotent(request.attributes)) {
+    return request;
+  }
+  const existingHeaders = request.headers ?? {};
+  if (existingHeaders[HEADER_IDEMPOTENCY_KEY]) {
+    return request;
+  }
+  return {
+    ...request,
+    headers: {
+      ...existingHeaders,
+      [HEADER_IDEMPOTENCY_KEY]: getUUIDv4()
+    }
+  };
+};
+
+// src/shared/api/middleware/request-retry.ts
+var MAX_ATTEMPTS = 3;
+var INITIAL_DELAY_MS = 300;
+var MAX_DELAY_MS = 2e3;
+var RETRYABLE_4XX = /* @__PURE__ */ new Set([408, 409, 429]);
+function isRetryableStatus(status) {
+  return status >= 500 && status < 600 || RETRYABLE_4XX.has(status);
+}
+function getRetryDelayMs(attempt) {
+  return Math.min(INITIAL_DELAY_MS * 2 ** (attempt - 1), MAX_DELAY_MS);
+}
+function createRequestRetryMiddleware(options = {}) {
+  const delayFn = options.delayFn ?? defaultDelay;
+  return async ({ request, response, retry }) => {
+    if (!isRetryableStatus(response.status)) {
+      return response;
+    }
+    const currentAttempt = Attributes.getRetryAttempt(request.attributes);
+    if (currentAttempt >= MAX_ATTEMPTS - 1) {
+      return response;
+    }
+    const nextAttempt = currentAttempt + 1;
+    await delayFn(getRetryDelayMs(nextAttempt));
+    const nextRequest = Request.concatAttributes(
+      request,
+      Attributes.retryAttempt(nextAttempt)
+    );
+    return retry(nextRequest);
+  };
+}
+function defaultDelay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var requestRetryMiddleware = createRequestRetryMiddleware();
+
+// src/client/core/api/api-client.ts
+var ApiClient = class {
+  constructor(config, fetchAccessToken) {
+    this.config = config;
+    this.fetchAccessToken = fetchAccessToken;
+    this.httpClient = new HttpClient(this.config, {
+      beforeRequest: [
+        attachSessionMiddleware(this.fetchAccessToken),
+        userAgentMiddleware,
+        idempotencyKeyMiddleware
+      ],
+      afterRequest: [
+        renewSessionMiddleware(this.fetchAccessToken),
+        requestRetryMiddleware
+      ]
+    });
+  }
+  async send(request) {
+    const response = await this.httpClient.send(request);
+    if (response.status >= 200 && response.status < 300) {
+      return response.body;
+    } else {
+      throw new HttpError(response);
+    }
+  }
+};
+
+// src/shared/types/oauth.ts
+var AuthorizationCode = (value) => value;
+var CodeVerifier = (value) => value;
+var CodeChallenge = (value) => value;
+var RedirectUri = (value) => value;
+var ClientId = (value) => value;
+var ClientSecret = (value) => value;
+
+// src/client/core/coinlist-client.ts
+var OAUTH_STATE_KEY = "coinlist.oauth_state";
+var OAUTH_CODE_VERIFIER_KEY = "coinlist.oauth_code_verifier";
+var CoinListClientImpl = class {
+  constructor(_config) {
+    this._config = _config;
+    /** Cached access token: undefined = loading, null = no token, AccessToken = logged in */
+    this._accessToken = void 0;
+    this._api = new ApiClient(
+      {
+        baseUrl: _config.baseUrl || BASE_URL,
+        xApiVersion: API_VERSION
+      },
+      this.fetchAccessToken.bind(this)
+    );
+  }
+  async init() {
+    await this.fetchAccessToken(true);
+    return this.getAuthState();
+  }
+  async fetchAccessToken(refresh) {
+    if (!refresh && this._accessToken !== void 0) return this._accessToken;
+    try {
+      const accessToken = await this._config.getAccessToken();
+      this._accessToken = accessToken;
+      return accessToken;
+    } catch (_) {
+      this._accessToken = null;
+      return null;
+    }
+  }
+  getAuthState() {
+    if (this._accessToken === void 0) {
+      return "unknown";
+    }
+    return this._accessToken !== null ? "logged-in" : "logged-out";
+  }
+  async startOAuth() {
+    const state = generateSecureRandomBase64Url(32);
+    const codeVerifier = generateSecureRandomBase64Url(32);
+    const codeChallengeRaw = await sha256(codeVerifier);
+    const codeChallenge = arrayBufferToBase64Url(codeChallengeRaw, false);
+    sessionStorage.setItem(OAUTH_STATE_KEY, state);
+    sessionStorage.setItem(OAUTH_CODE_VERIFIER_KEY, codeVerifier);
+    const params = new URLSearchParams({
+      client_id: this._config.clientId,
+      response_type: "code",
+      redirect_uri: this._config.redirectUri,
+      code_challenge: codeChallenge,
+      code_challenge_method: "S256",
+      state
+    });
+    const url = `${COINLIST_OAUTH_URL}?${params.toString()}`;
+    window.location.href = url;
+  }
+  completeOAuth() {
+    const params = new URLSearchParams(window.location.search);
+    const stateParam = params.get("state");
+    if (!stateParam) {
+      return { type: "error", reason: "missing_state" };
+    }
+    const storedState = sessionStorage.getItem(OAUTH_STATE_KEY);
+    if (storedState === null || storedState !== stateParam) {
+      return { type: "error", reason: "invalid_state" };
+    }
+    const codeParam = params.get("code");
+    if (!codeParam) {
+      return { type: "error", reason: "missing_code" };
+    }
+    const codeVerifierValue = sessionStorage.getItem(OAUTH_CODE_VERIFIER_KEY);
+    if (!codeVerifierValue) {
+      return { type: "error", reason: "missing_code_verifier" };
+    }
+    return {
+      type: "ok",
+      code: AuthorizationCode(codeParam),
+      codeVerifier: CodeVerifier(codeVerifierValue)
+    };
+  }
+  logout() {
+    this._accessToken = null;
+  }
+};
+function createCoinListClient(config) {
+  return new CoinListClientImpl(config);
+}
+
+// src/client/CoinListProvider.tsx
+var import_jsx_runtime = require("react/jsx-runtime");
+var CoinListContext = (0, import_react.createContext)(null);
+function CoinListProvider({ config, children }) {
+  const [isReady, setIsReady] = (0, import_react.useState)(false);
+  const coinlist = (0, import_react.useMemo)(() => createCoinListClient(config), [config]);
+  (0, import_react.useEffect)(() => {
+    let isCancelled = false;
+    if (coinlist.getAuthState() === "unknown") {
+      coinlist.init().then(() => {
+        if (!isCancelled) {
+          setIsReady(true);
+        }
+      }).catch(() => {
+        if (!isCancelled) {
+          setIsReady(true);
+        }
+      });
+    } else {
+      setIsReady(true);
+    }
+    return () => {
+      isCancelled = true;
+    };
+  }, [coinlist]);
+  const value = (0, import_react.useMemo)(() => ({ coinlist, isReady }), [coinlist, isReady]);
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CoinListContext.Provider, { value, children });
+}
+
+// src/client/hooks/useCoinList.ts
+var import_react2 = require("react");
+function useCoinList() {
+  const context = (0, import_react2.useContext)(CoinListContext);
+  if (context === null) {
+    throw new CoinListClientInitializationError();
+  }
+  return {
+    isReady: context.isReady,
+    coinlist: context.coinlist
+  };
+}
+var CoinListClientInitializationError = class extends Error {
+  constructor(message = "useCoinList() must be used within CoinListProvider. Wrap your app with <CoinListProvider config={...}>.") {
+    super(message);
+    this.name = "CoinListClientInitializationError";
+  }
+};
+
+// src/shared/types/oauth-session.ts
+var OAuthRefreshToken = (value) => value;
+var OAuthSession = {
+  fromDto: (dto) => {
+    const expiresAt = new Date(Date.now() + dto.expires_in * 1e3);
+    return {
+      accessToken: {
+        value: dto.access_token,
+        expiresAt
+      },
+      ...dto.refresh_token != null && dto.refresh_token !== "" ? { refreshToken: OAuthRefreshToken(dto.refresh_token) } : void 0
+    };
+  }
+};
+
+// src/shared/types/user.ts
+var UserId = (value) => value;
+var UserEmail = (value) => value;
+var User = {
+  fromDto: (dto) => ({
+    id: UserId(dto.id),
+    email: UserEmail(dto.email)
+  })
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthorizationCode,
+  ClientId,
+  ClientSecret,
+  CodeChallenge,
+  CodeVerifier,
+  CoinListProvider,
+  OAuthRefreshToken,
+  OAuthSession,
+  RedirectUri,
+  User,
+  UserEmail,
+  UserId,
+  createCoinListClient,
+  useCoinList
+});
+//# sourceMappingURL=index.cjs.map