@crela/license 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Felix Bonetsmüller
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,111 @@
+# @crela/license (Node.js / Electron)
+
+License verification SDK for tools on the [Crela](https://crela.io) marketplace.
+
+Mandatory for paid tools: the review pipeline looks for a per-tool marker inside your binary (KO-10), and this SDK is what puts it there and checks the licence at startup.
+
+## Quick start
+
+For Node.js and Electron projects, let the init tool wire everything up:
+
+```bash
+cd my-tool/
+npx @crela/init
+```
+
+It detects your entry point and bundler, fetches the SDK marker via the API, injects `verifyOrExit()`, and patches your bundler config. After that, just run `npm run build`.
+
+## How it works
+
+The SDK never prompts for a licence key. It reads a JWT signed by the Crela launcher — either from the environment variable `CRELA_LICENSE_JWT` or from a cache file — and verifies it **offline** against an Ed25519 public key. No network call happens.
+
+Activation, heartbeat and device management are handled entirely by the Crela launcher, so your tool does not need its own licence UI. Your integration is one call:
+
+```ts
+import { verifyOrExit } from '@crela/license'
+
+verifyOrExit('my-tool', process.env.CRELA_SDK_MARKER!)
+```
+
+## Manual build-time setup
+
+If you do not use `npx @crela/init`, set the variables yourself before building:
+
+```bash
+# Marker token from the creator dashboard:
+export CRELA_SDK_MARKER=CRELA_SDKv2_xxxxxxxxxxxxxx
+
+# Ed25519 public key (64 hex chars) for JWT verification:
+export CRELA_LICENSE_PUBKEY_HEX=abcdef...
+```
+
+With esbuild:
+```bash
+esbuild main.ts \
+  --define:CRELA_SDK_MARKER=\"$CRELA_SDK_MARKER\" \
+  --define:CRELA_LICENSE_PUBKEY_HEX=\"$CRELA_LICENSE_PUBKEY_HEX\"
+```
+
+With Webpack:
+```js
+new webpack.DefinePlugin({
+  CRELA_SDK_MARKER: JSON.stringify(process.env.CRELA_SDK_MARKER),
+  CRELA_LICENSE_PUBKEY_HEX: JSON.stringify(process.env.CRELA_LICENSE_PUBKEY_HEX),
+})
+```
+
+The marker has to survive bundling as a literal string — reading it from a config file at runtime does not satisfy KO-10.
+
+## Usage
+
+```ts
+import { verifyOrExit } from '@crela/license'
+
+// In electron main.ts, before app.whenReady():
+verifyOrExit('my-tool', CRELA_SDK_MARKER)
+
+app.whenReady().then(createWindow)
+```
+
+On failure: a message on stderr and `process.exit(0xC1)`.
+
+## Verification order
+
+1. `CRELA_DEV_MODE=1` env → `isDev=true` claims, no verification
+2. `CRELA_LICENSE_JWT` env → verify token
+3. Cache file `<DATA_LOCAL_DIR>/crela/licenses/<slug>.jwt` → verify token
+4. Nothing found → `LicenseError` with code `NOT_LAUNCHED_FROM_CRELA`
+
+## Advanced
+
+```ts
+import { LicenseVerifier } from '@crela/license'
+
+const verifier = new LicenseVerifier({
+  toolSlug: 'my-tool',
+  markerToken: CRELA_SDK_MARKER,
+  pubkeyHex: CRELA_LICENSE_PUBKEY_HEX,
+})
+
+try {
+  const claims = verifier.verify()
+  console.log(`Licence valid, exp=${claims.exp}`)
+} catch (e) {
+  console.error(`Licence invalid: ${e.message}`)
+  process.exit(1)
+}
+```
+
+## Other languages
+
+Crela ships a ready-made SDK for Node.js/Electron and for [Rust/Tauri](https://crates.io/crates/crela-license). For anything else (.NET, Java, Python, C++, Go) there is no SDK — embed the marker string as a compile-time constant and the review will accept it. Enforcing the licence at runtime is then up to you. See the [creator guidelines](https://crela.io/creator-guidelines#sdk).
+
+## Tests
+
+```bash
+npm test
+```
+
+## Licence
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Crela License SDK v3 - Node.js / Electron
+ *
+ * Pflicht-Integration fuer Tools auf dem Crela-Marktplatz (paid + free).
+ * Die SDK liest ein vom Crela-Launcher signiertes JWT entweder aus der
+ * Umgebungsvariable `CRELA_LICENSE_JWT` oder aus einer gemeinsamen
+ * Cache-Datei und verifiziert es offline gegen einen einkompilierten
+ * Ed25519-Public-Key. Es findet kein Netzwerk-Aufruf statt.
+ *
+ * Typische Nutzung in Electron-`main.ts`:
+ *
+ *     import { verifyOrExit, CRELA_SDK_MARKER } from '@crela/license'
+ *     verifyOrExit('mein-tool', CRELA_SDK_MARKER)
+ *
+ * Marker und Public-Key werden ueblicherweise via Bundler-Define beim
+ * Build injiziert oder aus einer build-time-generierten Datei gelesen.
+ */
+/** Prefix des v2-Markers; der vollstaendige Token kommt vom Creator-Dashboard. */
+export declare const CRELA_SDK_MARKER_PREFIX: "CRELA_SDKv2_";
+export declare const CRELA_SDK_MARKER_CONST: string | undefined;
+export declare class LicenseError extends Error {
+    code: LicenseErrorCode;
+    constructor(code: LicenseErrorCode, message: string);
+}
+export type LicenseErrorCode = 'NOT_LAUNCHED_FROM_CRELA' | 'INVALID_JWT_FORMAT' | 'INVALID_SIGNATURE' | 'EXPIRED' | 'WRONG_TOOL' | 'WRONG_DEVICE' | 'MISSING_CLAIM' | 'INVALID_PUBKEY' | 'INVALID_MARKER';
+export interface LicenseClaims {
+    /** License-ID (UUID) */
+    sub: string;
+    /** Tool-Slug */
+    tool: string;
+    /** Device-Fingerprint */
+    fp: string;
+    /** Unix-Timestamp Ausstellung */
+    iat: number;
+    /** Unix-Timestamp Ablauf */
+    exp: number;
+    /** Grace-Period in Sekunden */
+    grace: number;
+    /** True wenn CRELA_DEV_MODE=1 (Verifikation uebersprungen) */
+    isDev: boolean;
+}
+export interface VerifierOptions {
+    /** Tool-Slug, muss mit JWT-Claim `tool` matchen */
+    toolSlug: string;
+    /** Marker-Token aus dem Creator-Dashboard. Muss mit CRELA_SDKv2_ beginnen. */
+    markerToken: string;
+    /** Ed25519-Public-Key (32 Bytes hex). Default: BUILD_TIME_PUBKEY_HEX-Konstante. */
+    pubkeyHex?: string;
+    /** Cache-Pfad ueberschreiben (Default: <DATA_LOCAL>/crela/licenses/<slug>.jwt). */
+    cachePath?: string;
+    /**
+     * Dev-Mode (`CRELA_DEV_MODE=1`) zulassen. Default: FALSE. Muss fuer lokale
+     * Entwicklung explizit aktiviert werden; ausgelieferte Tools lassen es aus,
+     * damit Endnutzer die Lizenzpruefung nicht per Umgebungsvariable umgehen.
+     */
+    allowDevMode?: boolean;
+    /**
+     * Lokalen Geraete-Fingerprint ueberschreiben (nur fuer Tests). Production
+     * nutzt die machine-id (node-machine-id, original) - dieselbe Quelle wie der
+     * Launcher.
+     */
+    deviceFp?: string;
+}
+export declare class LicenseVerifier {
+    private readonly toolSlug;
+    private readonly pubkeyHex;
+    private readonly cachePath;
+    private readonly allowDevMode;
+    private readonly deviceFp;
+    constructor(opts: VerifierOptions);
+    /**
+     * Lokaler Geraete-Fingerprint. Quelle ist node-machine-id (original) - die
+     * MachineGuid/IOPlatformUUID/machine-id, exakt das, was der Launcher
+     * (machine-uid 0.5) ins JWT schreibt. Ein gesetztes Override hat Vorrang
+     * (Tests). Liefert null, wenn die ID nicht ermittelbar ist.
+     */
+    private resolveDeviceFp;
+    verify(): LicenseClaims;
+    /** Bei Fehler: stderr-Meldung + process.exit(0xC1). */
+    verifyOrExit(): LicenseClaims;
+    private resolveToken;
+    private resolveCachePath;
+    private readCacheFile;
+    private devClaims;
+    private verifyJwt;
+}
+/** Convenience: verifiziert und exitet bei Fehler. */
+export declare function verifyOrExit(toolSlug: string, markerToken: string, pubkeyHex?: string): LicenseClaims;
+/** Fingerprint-Helfer (oeffentlich fuer Apps die ihn loggen). */
+export declare function deviceFingerprint(): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,EAAG,cAAuB,CAAA;AAY9D,eAAO,MAAM,sBAAsB,EAAE,MAAM,GAAG,SAC0B,CAAA;AAIxE,qBAAa,YAAa,SAAQ,KAAK;IAClB,IAAI,EAAE,gBAAgB;gBAAtB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM;CAI3D;AAED,MAAM,MAAM,gBAAgB,GACxB,yBAAyB,GACzB,oBAAoB,GACpB,mBAAmB,GACnB,SAAS,GACT,YAAY,GACZ,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,gBAAgB,CAAA;AAEpB,MAAM,WAAW,aAAa;IAC5B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAiBD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;gBAEjC,IAAI,EAAE,eAAe;IAYjC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAavB,MAAM,IAAI,aAAa;IAoCvB,uDAAuD;IACvD,YAAY,IAAI,aAAa;IAW7B,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,SAAS;CAgDlB;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,CAErG;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C"}

package/dist/index.js

@@ -0,0 +1,254 @@
+/**
+ * Crela License SDK v3 - Node.js / Electron
+ *
+ * Pflicht-Integration fuer Tools auf dem Crela-Marktplatz (paid + free).
+ * Die SDK liest ein vom Crela-Launcher signiertes JWT entweder aus der
+ * Umgebungsvariable `CRELA_LICENSE_JWT` oder aus einer gemeinsamen
+ * Cache-Datei und verifiziert es offline gegen einen einkompilierten
+ * Ed25519-Public-Key. Es findet kein Netzwerk-Aufruf statt.
+ *
+ * Typische Nutzung in Electron-`main.ts`:
+ *
+ *     import { verifyOrExit, CRELA_SDK_MARKER } from '@crela/license'
+ *     verifyOrExit('mein-tool', CRELA_SDK_MARKER)
+ *
+ * Marker und Public-Key werden ueblicherweise via Bundler-Define beim
+ * Build injiziert oder aus einer build-time-generierten Datei gelesen.
+ */
+import { readFileSync } from 'node:fs';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir, hostname, platform } from 'node:os';
+import { createRequire } from 'node:module';
+import { createHash, createPublicKey, verify as cryptoVerify } from 'node:crypto';
+/** Prefix des v2-Markers; der vollstaendige Token kommt vom Creator-Dashboard. */
+export const CRELA_SDK_MARKER_PREFIX = 'CRELA_SDKv2_';
+export const CRELA_SDK_MARKER_CONST = typeof CRELA_SDK_MARKER !== 'undefined' ? CRELA_SDK_MARKER : undefined;
+const SKEW_SECONDS = 300; // 5 Minuten Clock-Skew-Toleranz
+export class LicenseError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'LicenseError';
+    }
+}
+/**
+ * Production-Public-Key fuer Ed25519-JWT-Verifikation gegen crela.io.
+ * Pubkey aus dem `x`-Feld der Production CRELA_LICENSE_SIGNING_JWK,
+ * base64url-decoded und als 32-Byte-Hex. Wird als Default genutzt, kann
+ * via Bundler-Define (CRELA_LICENSE_PUBKEY_HEX) ueberschrieben werden
+ * (z.B. fuer Self-Hosted-Crela-Instanzen).
+ */
+const PRODUCTION_PUBKEY_HEX = 'c6c37639c659cb9168d6af510d9696d141d980c5145212232f800b21a8210231';
+const BUILD_TIME_PUBKEY_HEX = typeof CRELA_LICENSE_PUBKEY_HEX !== 'undefined' && CRELA_LICENSE_PUBKEY_HEX.length === 64
+    ? CRELA_LICENSE_PUBKEY_HEX
+    : PRODUCTION_PUBKEY_HEX;
+export class LicenseVerifier {
+    toolSlug;
+    pubkeyHex;
+    cachePath;
+    allowDevMode;
+    deviceFp;
+    constructor(opts) {
+        if (!opts.toolSlug)
+            throw new LicenseError('MISSING_CLAIM', 'toolSlug ist erforderlich');
+        if (!opts.markerToken || !opts.markerToken.startsWith(CRELA_SDK_MARKER_PREFIX)) {
+            throw new LicenseError('INVALID_MARKER', `markerToken muss mit "${CRELA_SDK_MARKER_PREFIX}" beginnen`);
+        }
+        this.toolSlug = opts.toolSlug;
+        this.pubkeyHex = opts.pubkeyHex ?? BUILD_TIME_PUBKEY_HEX;
+        this.cachePath = opts.cachePath;
+        this.allowDevMode = opts.allowDevMode ?? false;
+        this.deviceFp = opts.deviceFp;
+    }
+    /**
+     * Lokaler Geraete-Fingerprint. Quelle ist node-machine-id (original) - die
+     * MachineGuid/IOPlatformUUID/machine-id, exakt das, was der Launcher
+     * (machine-uid 0.5) ins JWT schreibt. Ein gesetztes Override hat Vorrang
+     * (Tests). Liefert null, wenn die ID nicht ermittelbar ist.
+     */
+    resolveDeviceFp() {
+        if (this.deviceFp !== undefined)
+            return this.deviceFp;
+        try {
+            const mod = createRequire(import.meta.url)('node-machine-id');
+            const id = mod.machineIdSync(true);
+            return id && id.length > 0 ? id : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    verify() {
+        if (this.allowDevMode && process.env.CRELA_DEV_MODE === '1') {
+            return this.devClaims();
+        }
+        const token = this.resolveToken();
+        const claims = this.verifyJwt(token);
+        if (claims.tool !== this.toolSlug) {
+            throw new LicenseError('WRONG_TOOL', `JWT ist fuer "${claims.tool}" ausgestellt, erwartet "${this.toolSlug}"`);
+        }
+        const now = nowSeconds();
+        if (claims.exp + SKEW_SECONDS < now) {
+            throw new LicenseError('EXPIRED', 'JWT ist abgelaufen');
+        }
+        // Geraetebindung: der fp-Claim muss zur lokalen Maschine passen, sonst
+        // laesst sich ein gueltiges Token einfach auf beliebig viele Rechner
+        // kopieren. Quelle ist node-machine-id (original) - dieselbe ID, die der
+        // Launcher (machine-uid) ins JWT schreibt. Fail-closed, wenn die ID nicht
+        // ermittelbar ist (ein vom Launcher gestartetes Tool hat immer eine).
+        const localFp = this.resolveDeviceFp();
+        if (localFp === null || localFp.toLowerCase() !== claims.fp.toLowerCase()) {
+            throw new LicenseError('WRONG_DEVICE', 'JWT ist an ein anderes Geraet gebunden (Lizenz wurde auf eine fremde Maschine kopiert)');
+        }
+        return claims;
+    }
+    /** Bei Fehler: stderr-Meldung + process.exit(0xC1). */
+    verifyOrExit() {
+        try {
+            return this.verify();
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            process.stderr.write(`crela-license: ${msg}\n`);
+            process.stderr.write('Bitte starte diese App ueber den Crela Launcher.\n');
+            process.exit(0xc1);
+        }
+    }
+    resolveToken() {
+        const envToken = process.env.CRELA_LICENSE_JWT;
+        if (envToken && envToken.length > 0)
+            return envToken;
+        const cached = this.readCacheFile();
+        if (cached)
+            return cached;
+        throw new LicenseError('NOT_LAUNCHED_FROM_CRELA', 'Kein Lizenz-Token gefunden (weder env-var noch Cache-File). Bitte starte diese App ueber den Crela Launcher.');
+    }
+    resolveCachePath() {
+        if (this.cachePath)
+            return this.cachePath;
+        return join(dataLocalDir(), 'crela', 'licenses', `${this.toolSlug}.jwt`);
+    }
+    readCacheFile() {
+        const path = this.resolveCachePath();
+        if (!existsSync(path))
+            return null;
+        try {
+            const raw = readFileSync(path, 'utf-8').trim();
+            return raw.length > 0 ? raw : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    devClaims() {
+        const now = nowSeconds();
+        return {
+            sub: 'dev-mode',
+            tool: this.toolSlug,
+            fp: 'dev-fingerprint',
+            iat: now,
+            exp: now + 86_400,
+            grace: 86_400,
+            isDev: true,
+        };
+    }
+    verifyJwt(token) {
+        if (!this.pubkeyHex || this.pubkeyHex.length !== 64) {
+            throw new LicenseError('INVALID_PUBKEY', 'Ed25519-Public-Key fehlt oder ist ungueltig');
+        }
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            throw new LicenseError('INVALID_JWT_FORMAT', 'JWT-Format ungueltig');
+        }
+        let payloadBytes;
+        let sigBytes;
+        try {
+            payloadBytes = base64UrlDecode(parts[1]);
+            sigBytes = base64UrlDecode(parts[2]);
+        }
+        catch {
+            throw new LicenseError('INVALID_JWT_FORMAT', 'JWT-Base64-Decode fehlgeschlagen');
+        }
+        if (sigBytes.length !== 64) {
+            throw new LicenseError('INVALID_JWT_FORMAT', `JWT-Signatur falsche Laenge: ${sigBytes.length}`);
+        }
+        const signingInput = Buffer.from(`${parts[0]}.${parts[1]}`);
+        const pubkey = ed25519PublicKey(this.pubkeyHex);
+        const ok = cryptoVerify(null, signingInput, pubkey, sigBytes);
+        if (!ok) {
+            throw new LicenseError('INVALID_SIGNATURE', 'JWT-Signatur konnte nicht verifiziert werden');
+        }
+        let raw;
+        try {
+            raw = JSON.parse(payloadBytes.toString('utf-8'));
+        }
+        catch {
+            throw new LicenseError('INVALID_JWT_FORMAT', 'JWT-Payload ist kein gueltiges JSON');
+        }
+        return {
+            sub: requireString(raw, 'sub'),
+            tool: requireString(raw, 'tool'),
+            fp: requireString(raw, 'fp'),
+            iat: typeof raw.iat === 'number' ? raw.iat : 0,
+            exp: requireNumber(raw, 'exp'),
+            grace: typeof raw.grace === 'number' ? raw.grace : 0,
+            isDev: false,
+        };
+    }
+}
+/** Convenience: verifiziert und exitet bei Fehler. */
+export function verifyOrExit(toolSlug, markerToken, pubkeyHex) {
+    return new LicenseVerifier({ toolSlug, markerToken, pubkeyHex }).verifyOrExit();
+}
+/** Fingerprint-Helfer (oeffentlich fuer Apps die ihn loggen). */
+export function deviceFingerprint() {
+    const h = createHash('sha256');
+    try {
+        h.update(hostname());
+    }
+    catch { /* ignore */ }
+    // Note: kein MAC-Fallback in Node-SDK; Apps die exakte FP brauchen rufen
+    // direkt die node-mac-address lib.
+    return h.digest('hex');
+}
+function base64UrlDecode(s) {
+    const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4));
+    return Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/') + pad, 'base64');
+}
+function ed25519PublicKey(hex) {
+    // SubjectPublicKeyInfo DER prefix fuer Ed25519: 302a300506032b6570032100
+    const prefix = Buffer.from('302a300506032b6570032100', 'hex');
+    const keyBytes = Buffer.from(hex, 'hex');
+    const spki = Buffer.concat([prefix, keyBytes]);
+    return createPublicKey({ key: spki, format: 'der', type: 'spki' });
+}
+function dataLocalDir() {
+    const p = platform();
+    if (p === 'win32') {
+        return process.env.LOCALAPPDATA ?? join(homedir(), 'AppData', 'Local');
+    }
+    if (p === 'darwin') {
+        return join(homedir(), 'Library', 'Application Support');
+    }
+    return process.env.XDG_DATA_HOME ?? join(homedir(), '.local', 'share');
+}
+function nowSeconds() {
+    return Math.floor(Date.now() / 1000);
+}
+function requireString(o, key) {
+    const v = o[key];
+    if (typeof v !== 'string' || v.length === 0) {
+        throw new LicenseError('MISSING_CLAIM', `JWT-Claim "${key}" fehlt oder ist kein String`);
+    }
+    return v;
+}
+function requireNumber(o, key) {
+    const v = o[key];
+    if (typeof v !== 'number') {
+        throw new LicenseError('MISSING_CLAIM', `JWT-Claim "${key}" fehlt oder ist keine Number`);
+    }
+    return v;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAkB,YAAY,EAAE,MAAM,SAAS,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AAEjF,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAuB,CAAA;AAY9D,MAAM,CAAC,MAAM,sBAAsB,GACjC,OAAO,gBAAgB,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;AAExE,MAAM,YAAY,GAAG,GAAG,CAAA,CAAC,gCAAgC;AAEzD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAClB;IAAnB,YAAmB,IAAsB,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAA;QADG,SAAI,GAAJ,IAAI,CAAkB;QAEvC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAqDD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,kEAAkE,CAAA;AAGhG,MAAM,qBAAqB,GACzB,OAAO,wBAAwB,KAAK,WAAW,IAAI,wBAAwB,CAAC,MAAM,KAAK,EAAE;IACvF,CAAC,CAAC,wBAAwB;IAC1B,CAAC,CAAC,qBAAqB,CAAA;AAE3B,MAAM,OAAO,eAAe;IACT,QAAQ,CAAQ;IAChB,SAAS,CAAQ;IACjB,SAAS,CAAoB;IAC7B,YAAY,CAAS;IACrB,QAAQ,CAAoB;IAE7C,YAAY,IAAqB;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAA;QACxF,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,yBAAyB,uBAAuB,YAAY,CAAC,CAAA;QACxG,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK,CAAA;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC/B,CAAC;IAED;;;;;OAKG;IACK,eAAe;QACrB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAE3D,CAAA;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YAClC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,SAAS,EAAE,CAAA;QACzB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAEpC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,iBAAiB,MAAM,CAAC,IAAI,4BAA4B,IAAI,CAAC,QAAQ,GAAG,CACzE,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,IAAI,MAAM,CAAC,GAAG,GAAG,YAAY,GAAG,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QACzD,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,wFAAwF,CACzF,CAAA;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,uDAAuD;IACvD,YAAY;QACV,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAA;YAC1E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;QAC9C,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAA;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,8GAA8G,CAC/G,CAAA;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAA;QACzC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC,CAAA;IAC1E,CAAC;IAEO,aAAa;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAEO,SAAS;QACf,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,OAAO;YACL,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,EAAE,EAAE,iBAAiB;YACrB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,MAAM;YACjB,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,IAAI;SACZ,CAAA;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAA;QACzF,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,YAAoB,CAAA;QACxB,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACxC,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAA;QAClF,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACjG,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAE/C,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC7D,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,8CAA8C,CAAC,CAAA;QAC7F,CAAC;QAED,IAAI,GAA4B,CAAA;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA4B,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAA;QACrF,CAAC;QAED,OAAO;YACL,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;YAC9B,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;YAChC,EAAE,EAAE,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;YAC5B,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;YAC9B,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpD,KAAK,EAAE,KAAK;SACb,CAAA;IACH,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,WAAmB,EAAE,SAAkB;IACpF,OAAO,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAA;AACjF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACnD,yEAAyE;IACzE,mCAAmC;IACnC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IACpE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9C,OAAO,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAA;IACpB,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AACxE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B,EAAE,GAAW;IAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,cAAc,GAAG,8BAA8B,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B,EAAE,GAAW;IAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,cAAc,GAAG,+BAA+B,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@crela/license",
+  "version": "1.0.0",
+  "description": "License verification SDK for Crela marketplace tools (Node.js / Electron). Reads JWT from launcher-injected env var or cache file, verifies offline via Ed25519.",
+  "type": "module",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "crela",
+    "license",
+    "drm",
+    "marketplace",
+    "electron"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://crela.io/docs#sdk-marker",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Boniihhh/Crela",
+    "directory": "packages/sdk-node"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.0",
+    "vitest": "^4.1.7"
+  },
+  "dependencies": {
+    "node-machine-id": "^1.1.12"
+  }
+}