@core-ease/telegram-kit 3.0.1

package/dist/sdk/index.mjs

@@ -0,0 +1,2 @@
+export { Accelerometer, BackButton, BiometricManager, BottomButton, ClipboardManager, CloudStorage, ContactManager, DebugBottomBar, DeviceOrientation, DeviceStorage, DownloadFileManager, EmojiStatusManager, Gyroscope, HapticFeedback, HomeScreenManager, InvoiceManager, LinkManager, LocationManager, PopupManager, SDK_NAME, ScanQrManager, SecureStorage, SettingsButton, SharingManager, TelegramWebView, ThemeManager, Utils, ViewportManager, WebApp, WebAppError, WebAppErrorName, WebAppKernel, bootstrapTelegramWebApp, isBootstrapped } from '../chunk-FPWYSKK2.mjs';
+import '../chunk-7AARTHNW.mjs';

package/dist/server/index.d.mts

@@ -0,0 +1,28 @@
+import { R as RuntimeMode } from '../webapp-BDi9q3-a.mjs';
+import { W as WebAppUser } from '../webapp-B-3_74nK.mjs';
+
+interface ValidateInitDataOptions {
+    maxAgeSeconds?: number;
+    runtime?: RuntimeMode;
+    parseUser?: boolean;
+    strict?: boolean;
+    skipAuthDateCheck?: boolean;
+    extractStartParam?: boolean;
+    extractChat?: boolean;
+    parseUnsafeData?: boolean;
+}
+interface ValidateInitDataResult<TUser = WebAppUser> {
+    valid: boolean;
+    reason?: 'invalid_hash' | 'expired' | 'missing_hash' | 'malformed';
+    data?: Record<string, string>;
+    authDate?: number;
+    user?: TUser;
+    startParam?: string | null;
+    chatType?: string | null;
+    chatInstance?: string | null;
+    rawInitData?: string;
+}
+declare function validateInitData<TUser = WebAppUser>(initData: string, botToken: string, options?: ValidateInitDataOptions): Promise<ValidateInitDataResult<TUser>>;
+declare function validateInitDataSync<TUser = WebAppUser>(initData: string, botToken: string, options?: ValidateInitDataOptions): ValidateInitDataResult<TUser>;
+
+export { type ValidateInitDataOptions, type ValidateInitDataResult, validateInitData, validateInitDataSync };

package/dist/server/index.d.ts

@@ -0,0 +1,28 @@
+import { R as RuntimeMode } from '../webapp-YvmwFYUQ.js';
+import { W as WebAppUser } from '../webapp-B-3_74nK.js';
+
+interface ValidateInitDataOptions {
+    maxAgeSeconds?: number;
+    runtime?: RuntimeMode;
+    parseUser?: boolean;
+    strict?: boolean;
+    skipAuthDateCheck?: boolean;
+    extractStartParam?: boolean;
+    extractChat?: boolean;
+    parseUnsafeData?: boolean;
+}
+interface ValidateInitDataResult<TUser = WebAppUser> {
+    valid: boolean;
+    reason?: 'invalid_hash' | 'expired' | 'missing_hash' | 'malformed';
+    data?: Record<string, string>;
+    authDate?: number;
+    user?: TUser;
+    startParam?: string | null;
+    chatType?: string | null;
+    chatInstance?: string | null;
+    rawInitData?: string;
+}
+declare function validateInitData<TUser = WebAppUser>(initData: string, botToken: string, options?: ValidateInitDataOptions): Promise<ValidateInitDataResult<TUser>>;
+declare function validateInitDataSync<TUser = WebAppUser>(initData: string, botToken: string, options?: ValidateInitDataOptions): ValidateInitDataResult<TUser>;
+
+export { type ValidateInitDataOptions, type ValidateInitDataResult, validateInitData, validateInitDataSync };

package/dist/server/index.js

@@ -0,0 +1,254 @@
+'use strict';
+
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/_internal/server/verifyInitData.ts
+var _nodeCryptoPromise = null;
+async function getNodeCrypto() {
+  if (!_nodeCryptoPromise) {
+    _nodeCryptoPromise = import('crypto');
+  }
+  return _nodeCryptoPromise;
+}
+function getNodeCryptoSync() {
+  return __require("crypto");
+}
+function detectRuntime() {
+  var _a, _b;
+  const hasNodeProcess = typeof process !== "undefined" && typeof ((_a = process.versions) == null ? void 0 : _a.node) === "string";
+  const hasWebCrypto = typeof crypto !== "undefined" && typeof ((_b = crypto.subtle) == null ? void 0 : _b.importKey) === "function";
+  if (!hasNodeProcess && hasWebCrypto) return "edge";
+  return "node";
+}
+function normalizeInitData(initData) {
+  if (initData.includes("hash=")) {
+    return initData;
+  }
+  if (!initData.includes("%26hash%3D")) {
+    return initData;
+  }
+  try {
+    const decoded = decodeURIComponent(initData);
+    if (decoded.includes("user=") && decoded.includes("auth_date=") && decoded.includes("hash=")) {
+      return decoded;
+    }
+  } catch (e) {
+  }
+  return initData;
+}
+function parseInitData(initData) {
+  const params = new URLSearchParams(initData);
+  const hash = params.get("hash");
+  const authDate = params.get("auth_date");
+  const startParam = params.get("start_param");
+  const chatType = params.get("chat_type");
+  const chatInstance = params.get("chat_instance");
+  params.delete("hash");
+  const data = {};
+  for (const [k, v] of params.entries()) {
+    data[k] = v;
+  }
+  return { data, hash, authDate, startParam, chatType, chatInstance };
+}
+function buildDataCheckString(data) {
+  return Object.keys(data).sort().map((k) => `${k}=${data[k]}`).join("\n");
+}
+function hexToUint8Array(hex) {
+  const len = hex.length;
+  const bytes = new Uint8Array(len / 2);
+  for (let i = 0; i < len; i += 2) {
+    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+  }
+  return bytes;
+}
+function timingSafeEqualBytes(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) {
+    diff |= a[i] ^ b[i];
+  }
+  return diff === 0;
+}
+async function verifyEdge(dataCheckString, botToken, hash) {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode("WebAppData"),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const secret = await crypto.subtle.sign("HMAC", key, enc.encode(botToken));
+  const hmacKey = await crypto.subtle.importKey(
+    "raw",
+    secret,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await crypto.subtle.sign("HMAC", hmacKey, enc.encode(dataCheckString));
+  const computedBytes = new Uint8Array(signature);
+  const hashBytes = hexToUint8Array(hash);
+  return timingSafeEqualBytes(computedBytes, hashBytes);
+}
+async function verifyNode(dataCheckString, botToken, hash) {
+  const { createHmac, timingSafeEqual } = await getNodeCrypto();
+  const secretKey = createHmac("sha256", "WebAppData").update(botToken).digest();
+  const computed = createHmac("sha256", secretKey).update(dataCheckString).digest();
+  const hashBuffer = Buffer.from(hash, "hex");
+  if (hashBuffer.length !== computed.length) return false;
+  return timingSafeEqual(hashBuffer, computed);
+}
+function verifyNodeSync(dataCheckString, botToken, hash) {
+  const { createHmac, timingSafeEqual } = getNodeCryptoSync();
+  const secretKey = createHmac("sha256", "WebAppData").update(botToken).digest();
+  const computed = createHmac("sha256", secretKey).update(dataCheckString).digest();
+  const hashBuffer = Buffer.from(hash, "hex");
+  if (hashBuffer.length !== computed.length) return false;
+  return timingSafeEqual(hashBuffer, computed);
+}
+async function validateInitData(initData, botToken, options = {}) {
+  var _a, _b, _c;
+  const {
+    maxAgeSeconds = 86400,
+    runtime = detectRuntime(),
+    parseUser = true,
+    strict = false,
+    skipAuthDateCheck = false,
+    extractStartParam = true,
+    extractChat = true,
+    parseUnsafeData = false
+  } = options;
+  if (!initData || typeof initData !== "string") {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  let parsed;
+  try {
+    initData = normalizeInitData(initData);
+    parsed = parseInitData(initData);
+  } catch (e) {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  const { data, hash, authDate: authDateStr } = parsed;
+  if (!hash) {
+    if (strict) throw new Error("missing_hash");
+    return { valid: false, reason: "missing_hash" };
+  }
+  const dataCheckString = buildDataCheckString(data);
+  const isValid = runtime === "edge" ? await verifyEdge(dataCheckString, botToken, hash) : await verifyNode(dataCheckString, botToken, hash);
+  if (!isValid) {
+    if (strict) throw new Error("invalid_hash");
+    return { valid: false, reason: "invalid_hash" };
+  }
+  const authDate = authDateStr ? Number(authDateStr) : 0;
+  if (!skipAuthDateCheck) {
+    if (!authDate || Number.isNaN(authDate)) {
+      if (strict) throw new Error("malformed auth_date");
+      return { valid: false, reason: "malformed" };
+    }
+    const now = Math.floor(Date.now() / 1e3);
+    if (now - authDate > maxAgeSeconds) {
+      if (strict) throw new Error("expired");
+      return { valid: false, reason: "expired", authDate };
+    }
+  }
+  let parsedUser;
+  if (parseUser && data.user) {
+    try {
+      parsedUser = JSON.parse(data.user);
+    } catch (e) {
+      if (strict) throw new Error("invalid_user_json");
+    }
+  }
+  const startParam = extractStartParam ? (_a = data.start_param) != null ? _a : null : void 0;
+  const chatType = extractChat ? (_b = data.chat_type) != null ? _b : null : void 0;
+  const chatInstance = extractChat ? (_c = data.chat_instance) != null ? _c : null : void 0;
+  return {
+    valid: true,
+    data,
+    authDate,
+    user: parsedUser,
+    startParam,
+    chatType,
+    chatInstance,
+    rawInitData: parseUnsafeData ? initData : void 0
+  };
+}
+function validateInitDataSync(initData, botToken, options = {}) {
+  var _a, _b, _c;
+  const {
+    maxAgeSeconds = 86400,
+    parseUser = true,
+    strict = false,
+    skipAuthDateCheck = false,
+    extractStartParam = true,
+    extractChat = true,
+    parseUnsafeData = false
+  } = options;
+  if (!initData || typeof initData !== "string") {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  let parsed;
+  try {
+    initData = normalizeInitData(initData);
+    parsed = parseInitData(initData);
+  } catch (e) {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  const { data, hash, authDate: authDateStr } = parsed;
+  if (!hash) {
+    if (strict) throw new Error("missing_hash");
+    return { valid: false, reason: "missing_hash" };
+  }
+  const dataCheckString = buildDataCheckString(data);
+  const isValid = verifyNodeSync(dataCheckString, botToken, hash);
+  if (!isValid) {
+    if (strict) throw new Error("invalid_hash");
+    return { valid: false, reason: "invalid_hash" };
+  }
+  const authDate = authDateStr ? Number(authDateStr) : 0;
+  if (!skipAuthDateCheck) {
+    if (!authDate || Number.isNaN(authDate)) {
+      if (strict) throw new Error("malformed auth_date");
+      return { valid: false, reason: "malformed" };
+    }
+    const now = Math.floor(Date.now() / 1e3);
+    if (now - authDate > maxAgeSeconds) {
+      if (strict) throw new Error("expired");
+      return { valid: false, reason: "expired", authDate };
+    }
+  }
+  let parsedUser;
+  if (parseUser && data.user) {
+    try {
+      parsedUser = JSON.parse(data.user);
+    } catch (e) {
+      if (strict) throw new Error("invalid_user_json");
+    }
+  }
+  const startParam = extractStartParam ? (_a = data.start_param) != null ? _a : null : void 0;
+  const chatType = extractChat ? (_b = data.chat_type) != null ? _b : null : void 0;
+  const chatInstance = extractChat ? (_c = data.chat_instance) != null ? _c : null : void 0;
+  return {
+    valid: true,
+    data,
+    authDate,
+    user: parsedUser,
+    startParam,
+    chatType,
+    chatInstance,
+    rawInitData: parseUnsafeData ? initData : void 0
+  };
+}
+
+exports.validateInitData = validateInitData;
+exports.validateInitDataSync = validateInitDataSync;

package/dist/server/index.mjs

@@ -0,0 +1,246 @@
+import { __require } from '../chunk-7AARTHNW.mjs';
+
+// src/_internal/server/verifyInitData.ts
+var _nodeCryptoPromise = null;
+async function getNodeCrypto() {
+  if (!_nodeCryptoPromise) {
+    _nodeCryptoPromise = import('crypto');
+  }
+  return _nodeCryptoPromise;
+}
+function getNodeCryptoSync() {
+  return __require("crypto");
+}
+function detectRuntime() {
+  var _a, _b;
+  const hasNodeProcess = typeof process !== "undefined" && typeof ((_a = process.versions) == null ? void 0 : _a.node) === "string";
+  const hasWebCrypto = typeof crypto !== "undefined" && typeof ((_b = crypto.subtle) == null ? void 0 : _b.importKey) === "function";
+  if (!hasNodeProcess && hasWebCrypto) return "edge";
+  return "node";
+}
+function normalizeInitData(initData) {
+  if (initData.includes("hash=")) {
+    return initData;
+  }
+  if (!initData.includes("%26hash%3D")) {
+    return initData;
+  }
+  try {
+    const decoded = decodeURIComponent(initData);
+    if (decoded.includes("user=") && decoded.includes("auth_date=") && decoded.includes("hash=")) {
+      return decoded;
+    }
+  } catch (e) {
+  }
+  return initData;
+}
+function parseInitData(initData) {
+  const params = new URLSearchParams(initData);
+  const hash = params.get("hash");
+  const authDate = params.get("auth_date");
+  const startParam = params.get("start_param");
+  const chatType = params.get("chat_type");
+  const chatInstance = params.get("chat_instance");
+  params.delete("hash");
+  const data = {};
+  for (const [k, v] of params.entries()) {
+    data[k] = v;
+  }
+  return { data, hash, authDate, startParam, chatType, chatInstance };
+}
+function buildDataCheckString(data) {
+  return Object.keys(data).sort().map((k) => `${k}=${data[k]}`).join("\n");
+}
+function hexToUint8Array(hex) {
+  const len = hex.length;
+  const bytes = new Uint8Array(len / 2);
+  for (let i = 0; i < len; i += 2) {
+    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+  }
+  return bytes;
+}
+function timingSafeEqualBytes(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) {
+    diff |= a[i] ^ b[i];
+  }
+  return diff === 0;
+}
+async function verifyEdge(dataCheckString, botToken, hash) {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode("WebAppData"),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const secret = await crypto.subtle.sign("HMAC", key, enc.encode(botToken));
+  const hmacKey = await crypto.subtle.importKey(
+    "raw",
+    secret,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await crypto.subtle.sign("HMAC", hmacKey, enc.encode(dataCheckString));
+  const computedBytes = new Uint8Array(signature);
+  const hashBytes = hexToUint8Array(hash);
+  return timingSafeEqualBytes(computedBytes, hashBytes);
+}
+async function verifyNode(dataCheckString, botToken, hash) {
+  const { createHmac, timingSafeEqual } = await getNodeCrypto();
+  const secretKey = createHmac("sha256", "WebAppData").update(botToken).digest();
+  const computed = createHmac("sha256", secretKey).update(dataCheckString).digest();
+  const hashBuffer = Buffer.from(hash, "hex");
+  if (hashBuffer.length !== computed.length) return false;
+  return timingSafeEqual(hashBuffer, computed);
+}
+function verifyNodeSync(dataCheckString, botToken, hash) {
+  const { createHmac, timingSafeEqual } = getNodeCryptoSync();
+  const secretKey = createHmac("sha256", "WebAppData").update(botToken).digest();
+  const computed = createHmac("sha256", secretKey).update(dataCheckString).digest();
+  const hashBuffer = Buffer.from(hash, "hex");
+  if (hashBuffer.length !== computed.length) return false;
+  return timingSafeEqual(hashBuffer, computed);
+}
+async function validateInitData(initData, botToken, options = {}) {
+  var _a, _b, _c;
+  const {
+    maxAgeSeconds = 86400,
+    runtime = detectRuntime(),
+    parseUser = true,
+    strict = false,
+    skipAuthDateCheck = false,
+    extractStartParam = true,
+    extractChat = true,
+    parseUnsafeData = false
+  } = options;
+  if (!initData || typeof initData !== "string") {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  let parsed;
+  try {
+    initData = normalizeInitData(initData);
+    parsed = parseInitData(initData);
+  } catch (e) {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  const { data, hash, authDate: authDateStr } = parsed;
+  if (!hash) {
+    if (strict) throw new Error("missing_hash");
+    return { valid: false, reason: "missing_hash" };
+  }
+  const dataCheckString = buildDataCheckString(data);
+  const isValid = runtime === "edge" ? await verifyEdge(dataCheckString, botToken, hash) : await verifyNode(dataCheckString, botToken, hash);
+  if (!isValid) {
+    if (strict) throw new Error("invalid_hash");
+    return { valid: false, reason: "invalid_hash" };
+  }
+  const authDate = authDateStr ? Number(authDateStr) : 0;
+  if (!skipAuthDateCheck) {
+    if (!authDate || Number.isNaN(authDate)) {
+      if (strict) throw new Error("malformed auth_date");
+      return { valid: false, reason: "malformed" };
+    }
+    const now = Math.floor(Date.now() / 1e3);
+    if (now - authDate > maxAgeSeconds) {
+      if (strict) throw new Error("expired");
+      return { valid: false, reason: "expired", authDate };
+    }
+  }
+  let parsedUser;
+  if (parseUser && data.user) {
+    try {
+      parsedUser = JSON.parse(data.user);
+    } catch (e) {
+      if (strict) throw new Error("invalid_user_json");
+    }
+  }
+  const startParam = extractStartParam ? (_a = data.start_param) != null ? _a : null : void 0;
+  const chatType = extractChat ? (_b = data.chat_type) != null ? _b : null : void 0;
+  const chatInstance = extractChat ? (_c = data.chat_instance) != null ? _c : null : void 0;
+  return {
+    valid: true,
+    data,
+    authDate,
+    user: parsedUser,
+    startParam,
+    chatType,
+    chatInstance,
+    rawInitData: parseUnsafeData ? initData : void 0
+  };
+}
+function validateInitDataSync(initData, botToken, options = {}) {
+  var _a, _b, _c;
+  const {
+    maxAgeSeconds = 86400,
+    parseUser = true,
+    strict = false,
+    skipAuthDateCheck = false,
+    extractStartParam = true,
+    extractChat = true,
+    parseUnsafeData = false
+  } = options;
+  if (!initData || typeof initData !== "string") {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  let parsed;
+  try {
+    initData = normalizeInitData(initData);
+    parsed = parseInitData(initData);
+  } catch (e) {
+    if (strict) throw new Error("malformed initData");
+    return { valid: false, reason: "malformed" };
+  }
+  const { data, hash, authDate: authDateStr } = parsed;
+  if (!hash) {
+    if (strict) throw new Error("missing_hash");
+    return { valid: false, reason: "missing_hash" };
+  }
+  const dataCheckString = buildDataCheckString(data);
+  const isValid = verifyNodeSync(dataCheckString, botToken, hash);
+  if (!isValid) {
+    if (strict) throw new Error("invalid_hash");
+    return { valid: false, reason: "invalid_hash" };
+  }
+  const authDate = authDateStr ? Number(authDateStr) : 0;
+  if (!skipAuthDateCheck) {
+    if (!authDate || Number.isNaN(authDate)) {
+      if (strict) throw new Error("malformed auth_date");
+      return { valid: false, reason: "malformed" };
+    }
+    const now = Math.floor(Date.now() / 1e3);
+    if (now - authDate > maxAgeSeconds) {
+      if (strict) throw new Error("expired");
+      return { valid: false, reason: "expired", authDate };
+    }
+  }
+  let parsedUser;
+  if (parseUser && data.user) {
+    try {
+      parsedUser = JSON.parse(data.user);
+    } catch (e) {
+      if (strict) throw new Error("invalid_user_json");
+    }
+  }
+  const startParam = extractStartParam ? (_a = data.start_param) != null ? _a : null : void 0;
+  const chatType = extractChat ? (_b = data.chat_type) != null ? _b : null : void 0;
+  const chatInstance = extractChat ? (_c = data.chat_instance) != null ? _c : null : void 0;
+  return {
+    valid: true,
+    data,
+    authDate,
+    user: parsedUser,
+    startParam,
+    chatType,
+    chatInstance,
+    rawInitData: parseUnsafeData ? initData : void 0
+  };
+}
+
+export { validateInitData, validateInitDataSync };

package/dist/tgs/index.d.mts

@@ -0,0 +1,3 @@
+import 'react';
+export { L as LottieAnimation, a as LottieAnimationController, P as PlayMode, b as PlayerState, T as TgsSource, l as loadTgsSource, r as renderDocumentFrame } from '../engine-BDm1_hzn.mjs';
+export { TgsPlayer, TgsPlayerHandle, TgsPlayerProps, checkTgsCompliance, gunzip, isGzip } from '../animation/tgs/index.mjs';

package/dist/tgs/index.d.ts

@@ -0,0 +1,3 @@
+import 'react';
+export { L as LottieAnimation, a as LottieAnimationController, P as PlayMode, b as PlayerState, T as TgsSource, l as loadTgsSource, r as renderDocumentFrame } from '../engine-BDm1_hzn.js';
+export { TgsPlayer, TgsPlayerHandle, TgsPlayerProps, checkTgsCompliance, gunzip, isGzip } from '../animation/tgs/index.js';