@coristen/widget 0.1.1 → 0.1.2

package/dist/load-error.d.ts

@@ -0,0 +1 @@
+export declare function widgetLoadError(error: Error): "A Coristen public key is required. Pass an apiKey that starts with coristen_pk_." | "This website is not allowed to use this support widget." | "This Coristen public key is invalid or no longer active." | "Support chat is not configured yet." | "Support chat is temporarily unavailable. Please try again.";

package/dist/server.js

@@ -1,69 +1 @@
-// src/server.ts
-function envKey() {
-  return globalThis.process?.env?.CORISTEN_KEY;
-}
-function parseKey(value) {
-  if (!value)
-    throw new Error("Coristen: CORISTEN_KEY is missing.");
-  if (!value.startsWith("coristen_key_"))
-    throw new Error("Coristen: CORISTEN_KEY must start with coristen_key_.");
-  const [workspaceId, secret, extra] = value.slice("coristen_key_".length).split(".");
-  if (!workspaceId || !secret || extra !== undefined)
-    throw new Error("Coristen: CORISTEN_KEY is malformed.");
-  return { workspaceId, secret };
-}
-function encode(value) {
-  const bytes = typeof value === "string" ? new TextEncoder().encode(value) : value;
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
-}
-async function sign(value, secret) {
-  const key = await crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  return encode(new Uint8Array(await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(value))));
-}
-var headers = {
-  "cache-control": "private, no-store, max-age=0",
-  vary: "cookie, authorization"
-};
-function coristenIdentity(resolve, options = {}) {
-  return {
-    GET: async (request) => {
-      try {
-        const { workspaceId, secret } = parseKey(options.key ?? envKey());
-        const user = await resolve(request);
-        if (!user?.id?.trim())
-          return Response.json({ error: { code: "authentication_required" } }, { status: 401, headers });
-        if (user.id.length > 200)
-          throw new Error("Coristen: customer id must be 200 characters or fewer.");
-        const expiresInSeconds = options.expiresInSeconds ?? 15 * 60;
-        if (!Number.isFinite(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 3600)
-          throw new Error("Coristen: identity lifetime must be 60-3600 seconds.");
-        const now = Math.floor(Date.now() / 1000);
-        const header = encode(JSON.stringify({ alg: "HS256", typ: "JWT" }));
-        const payload = encode(JSON.stringify({
-          sub: user.id,
-          name: user.name,
-          email: user.email,
-          workspaceId,
-          iat: now,
-          exp: now + expiresInSeconds
-        }));
-        const input = `${header}.${payload}`;
-        const identityToken = `${input}.${await sign(input, secret)}`;
-        return Response.json({
-          publishableKey: `coristen_pk_${workspaceId}`,
-          identityToken,
-          user: { id: user.id, name: user.name, email: user.email }
-        }, { headers });
-      } catch (error) {
-        console.error(error);
-        return Response.json({ error: { code: "identity_unavailable" } }, { status: 500, headers });
-      }
-    }
-  };
-}
-export {
-  coristenIdentity
-};
+function f(){return globalThis.process?.env?.CORISTEN_KEY}function m(e){if(!e)throw Error("Coristen: CORISTEN_KEY is missing.");if(!e.startsWith("coristen_key_"))throw Error("Coristen: CORISTEN_KEY must start with coristen_key_.");let[t,n,r]=e.slice(13).split(".");if(!t||!n||r!==void 0)throw Error("Coristen: CORISTEN_KEY is malformed.");return{workspaceId:t,secret:n}}function a(e){let t=typeof e==="string"?new TextEncoder().encode(e):e,n="";for(let r of t)n+=String.fromCharCode(r);return btoa(n).replaceAll("+","-").replaceAll("/","_").replaceAll("=","")}async function w(e,t){let n=await crypto.subtle.importKey("raw",new TextEncoder().encode(t),{name:"HMAC",hash:"SHA-256"},!1,["sign"]);return a(new Uint8Array(await crypto.subtle.sign("HMAC",n,new TextEncoder().encode(e))))}var o={"cache-control":"private, no-store, max-age=0",vary:"cookie, authorization"};function g(e,t={}){return{GET:async(n)=>{try{let{workspaceId:r,secret:u}=m(t.key??f()),s=await e(n);if(!s?.id?.trim())return Response.json({error:{code:"authentication_required"}},{status:401,headers:o});if(s.id.length>200)throw Error("Coristen: customer id must be 200 characters or fewer.");let i=t.expiresInSeconds??900;if(!Number.isFinite(i)||i<60||i>3600)throw Error("Coristen: identity lifetime must be 60-3600 seconds.");let c=Math.floor(Date.now()/1000),y=a(JSON.stringify({alg:"HS256",typ:"JWT"})),l=a(JSON.stringify({sub:s.id,name:s.name,email:s.email,workspaceId:r,iat:c,exp:c+i})),d=`${y}.${l}`,p=`${d}.${await w(d,u)}`;return Response.json({publishableKey:`coristen_pk_${r}`,identityToken:p,user:{id:s.id,name:s.name,email:s.email}},{headers:o})}catch(r){return console.error(r),Response.json({error:{code:"identity_unavailable"}},{status:500,headers:o})}}}}export{g as coristenIdentity};