@decido/shell-auth 1.0.0 → 4.0.2

package/README.md

@@ -0,0 +1,29 @@
+# 🚀 @decido/shell-auth
+
+> Decido OS Shell Authentication & Obfuscated Persistence Core
+
+Bienvenido a la documentación oficial de **@decido/shell-auth**, un componente integral del ecosistema **Decido OS**.
+
+## 📦 Instalación
+
+Para aprovisionar este módulo dentro de otra área del monorepo o consumirlo remotamente:
+
+```bash
+npm install @decido/shell-auth
+# o mediante el gestor oficial del monorepo
+pnpm add @decido/shell-auth
+```
+
+## 🔧 Estructura y Dependencias
+
+Este paquete está diseñado para interoperar de forma nativa con la infraestructura central. 
+Para su correcto funcionamiento en un entorno aislado (Sandboxed), se apoya en los siguientes cimientos tecnológicos:
+
+- `idb-keyval`
+- `zustand`
+- `@decido/tauri-bridge`
+
+## 🔐 Licencia y Privacidad 
+El código de este componente se encuentra auditado y restringido (Sin Sourcemaps).  
+Propiedad Intelectual Protegida - Framework Decido OS.  
+Distribuido bajo licencia **UNLICENSED**.

package/dist/index.mjs

@@ -0,0 +1 @@
+import{create as S}from"zustand";import{persist as y,createJSONStorage as h}from"zustand/middleware";import{get as g,set as p,del as f}from"idb-keyval";import{secure as c}from"@decido/tauri-bridge";import{isTauri as u}from"@decido/tauri-bridge";var v=e=>typeof btoa>"u"?e:btoa(encodeURIComponent(e)),b=e=>{if(typeof atob>"u")return e;try{return decodeURIComponent(atob(e))}catch{return e}},d={getItem:async e=>{try{if(u()){let t=await c.secureVault.getItem(e);if(t!==null)return t}let r=await g(e);return r?b(r):null}catch(r){return console.error(`[SecureStorage] Failed to get item ${e}`,r),null}},setItem:async(e,r)=>{try{if(u()){await c.secureVault.setItem(e,r);return}let t=v(r);await p(e,t)}catch(t){console.error(`[SecureStorage] Failed to set item ${e}`,t)}},removeItem:async e=>{try{u()&&await c.secureVault.removeItem(e),await f(e)}catch(r){console.error(`[SecureStorage] Failed to remove item ${e}`,r)}}};var A=S()(y((e,r)=>({isAuthenticated:!1,userRole:null,userName:null,availableLicenses:[],activeContext:null,hasCompletedWelcome:!1,hasSeenTour:!1,login:(t,o,s)=>{let n=s||[{type:"personal",id:"personal",name:`${o}'s Private Space`}];e({isAuthenticated:!0,userRole:t,userName:o,availableLicenses:n,activeContext:n.length===1?n[0]:null})},joinSwarm:async t=>{try{let s=t.split(".")[1].replace(/-/g,"+").replace(/_/g,"/"),n=decodeURIComponent(atob(s).split("").map(function(l){return"%"+("00"+l.charCodeAt(0).toString(16)).slice(-2)}).join("")),a=JSON.parse(n);if(!a.tenantId||!a.name)return!1;let i={type:a.type||"enterprise",id:a.tenantId,name:a.name,swarmKey:a.swarm_key,websocketRelayUrl:a.ws_url},{availableLicenses:m}=r();return m.find(l=>l.id===i.id)?e({activeContext:i}):e({availableLicenses:[...m,i],activeContext:i}),!0}catch(o){return console.error("Failed to join swarm from token",o),!1}},setActiveContext:t=>{let{availableLicenses:o}=r(),s=o.find(n=>n.id===t)||null;e({activeContext:s})},setHasCompletedWelcome:t=>{e({hasCompletedWelcome:t})},setHasSeenTour:t=>{e({hasSeenTour:t})},logout:()=>e({isAuthenticated:!1,userRole:null,userName:null,availableLicenses:[],activeContext:null,hasCompletedWelcome:!1,hasSeenTour:!1})}),{name:"decido-auth-storage",storage:h(()=>d)}));export{d as secureStorage,A as useAuthStore};

package/package.json

@@ -1,19 +1,24 @@
 {
   "name": "@decido/shell-auth",
-  "version": "1.0.0",
+  "version": "4.0.2",
   "description": "Decido OS Shell Authentication & Obfuscated Persistence Core",
-  "main": "src/index.ts",
-  "types": "src/index.ts",
+  "main": "./dist/index.js",
+  "types": "dist/index.d.ts",
   "directories": {
     "src": "src"
   },
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js",
+      "default": "./dist/index.mjs"
+    }
   },
   "dependencies": {
     "idb-keyval": "^6.2.1",
     "zustand": "^4.5.2",
-    "@decido/tauri-bridge": "0.1.0"
+    "@decido/tauri-bridge": "4.0.2"
   },
   "devDependencies": {
     "typescript": "^5.0.0"
@@ -22,8 +27,12 @@
     "access": "public"
   },
   "license": "UNLICENSED",
+  "files": [
+    "dist"
+  ],
+  "module": "./dist/index.mjs",
   "scripts": {
     "lint": "eslint \"src/**/*.ts*\"",
-    "build": "tsup src/index.ts --format esm --dts --minify --clean"
+    "build": "tsup src/index.ts --format esm,cjs"
   }
 }

package/src/index.ts

@@ -1,131 +0,0 @@
-import { create } from 'zustand';
-import { persist, createJSONStorage } from 'zustand/middleware';
-import { secureStorage } from './secureStorage';
-
-export type UserRole = 'creator' | 'admin' | 'user' | 'demo' | 'developer';
-export type LicenseType = 'personal' | 'enterprise';
-
-export interface LicenseTarget {
-    type: LicenseType;
-    id: string;
-    name: string;
-    enabledPlugins?: string[];
-    systemPrompt?: string;
-    swarmKey?: string;
-    websocketRelayUrl?: string;
-}
-
-export interface AuthState {
-    isAuthenticated: boolean;
-    userRole: UserRole | null;
-    userName: string | null;
-
-    availableLicenses: LicenseTarget[];
-    activeContext: LicenseTarget | null;
-    hasCompletedWelcome: boolean;
-    hasSeenTour: boolean;
-
-    login: (role: UserRole, name: string, licenses?: LicenseTarget[]) => void;
-    joinSwarm: (token: string) => Promise<boolean>;
-    setActiveContext: (licenseId: string) => void;
-    setHasCompletedWelcome: (val: boolean) => void;
-    setHasSeenTour: (val: boolean) => void;
-    logout: () => void;
-}
-
-export const useAuthStore = create<AuthState>()(
-    persist(
-        (set, get) => ({
-            isAuthenticated: false,
-            userRole: null,
-            userName: null,
-            availableLicenses: [],
-            activeContext: null,
-            hasCompletedWelcome: false,
-            hasSeenTour: false,
-
-            login: (role, name, licenses) => {
-                const defaultLicenses: LicenseTarget[] = licenses || [{
-                    type: 'personal',
-                    id: 'personal',
-                    name: `${name}'s Private Space`
-                }];
-
-                set({
-                    isAuthenticated: true,
-                    userRole: role,
-                    userName: name,
-                    availableLicenses: defaultLicenses,
-                    activeContext: defaultLicenses.length === 1 ? defaultLicenses[0] : null
-                });
-            },
-
-            joinSwarm: async (token: string) => {
-                try {
-                    const base64Url = token.split('.')[1];
-                    const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
-                    const jsonPayload = decodeURIComponent(atob(base64).split('').map(function (c) {
-                        return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
-                    }).join(''));
-
-                    const payload = JSON.parse(jsonPayload);
-
-                    if (!payload.tenantId || !payload.name) return false;
-
-                    const newTarget: LicenseTarget = {
-                        type: payload.type || 'enterprise',
-                        id: payload.tenantId,
-                        name: payload.name,
-                        swarmKey: payload.swarm_key,
-                        websocketRelayUrl: payload.ws_url
-                    };
-
-                    const { availableLicenses } = get();
-                    if (!availableLicenses.find(l => l.id === newTarget.id)) {
-                        set({
-                            availableLicenses: [...availableLicenses, newTarget],
-                            activeContext: newTarget
-                        });
-                    } else {
-                        set({ activeContext: newTarget });
-                    }
-                    return true;
-                } catch (e) {
-                    console.error("Failed to join swarm from token", e);
-                    return false;
-                }
-            },
-
-            setActiveContext: (licenseId: string) => {
-                const { availableLicenses } = get();
-                const target = availableLicenses.find(l => l.id === licenseId) || null;
-                set({ activeContext: target });
-            },
-
-            setHasCompletedWelcome: (val: boolean) => {
-                set({ hasCompletedWelcome: val });
-            },
-
-            setHasSeenTour: (val: boolean) => {
-                set({ hasSeenTour: val });
-            },
-
-            logout: () => set({
-                isAuthenticated: false,
-                userRole: null,
-                userName: null,
-                availableLicenses: [],
-                activeContext: null,
-                hasCompletedWelcome: false,
-                hasSeenTour: false
-            }),
-        }),
-        {
-            name: 'decido-auth-storage',
-            storage: createJSONStorage(() => secureStorage)
-        }
-    )
-);
-
-// Re-export secureStorage helper just in case it's needed externally
-export * from './secureStorage';

package/src/secureStorage.ts

@@ -1,61 +0,0 @@
-import { get, set, del } from 'idb-keyval';
-import { StateStorage } from 'zustand/middleware';
-import { secure } from '@decido/tauri-bridge';
-import { isTauri } from '@decido/tauri-bridge';
-
-// Basic obfuscation wrapper for pure SSR/Web Fallback
-const obfuscate = (data: string): string => {
-    if (typeof btoa === 'undefined') return data; 
-    return btoa(encodeURIComponent(data));
-};
-
-const deobfuscate = (data: string): string => {
-    if (typeof atob === 'undefined') return data;
-    try {
-        return decodeURIComponent(atob(data));
-    } catch {
-        return data; 
-    }
-};
-
-export const secureStorage: StateStorage = {
-    getItem: async (name: string): Promise<string | null> => {
-        try {
-            if (isTauri()) {
-                const val = await secure.secureVault.getItem(name);
-                if (val !== null) return val;
-            }
-            // WEB Fallback
-            const val = await get(name);
-            if (!val) return null;
-            return deobfuscate(val);
-        } catch (err) {
-            console.error(`[SecureStorage] Failed to get item ${name}`, err);
-            return null;
-        }
-    },
-    setItem: async (name: string, value: string): Promise<void> => {
-        try {
-            if (isTauri()) {
-                await secure.secureVault.setItem(name, value);
-                return; // Do not leak to indexedDB
-            }
-            // WEB Fallback
-            const obfuscated = obfuscate(value);
-            await set(name, obfuscated);
-        } catch (err) {
-            console.error(`[SecureStorage] Failed to set item ${name}`, err);
-        }
-    },
-    removeItem: async (name: string): Promise<void> => {
-        try {
-            if (isTauri()) {
-                await secure.secureVault.removeItem(name);
-                // Also clean legacy web fallback just in case
-            }
-            await del(name);
-        } catch (err) {
-            console.error(`[SecureStorage] Failed to remove item ${name}`, err);
-        }
-    },
-};

package/tsconfig.json

@@ -1,15 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-        "strict": true,
-    "outDir": "dist",
-    "declaration": true,
-    "declarationMap": true,
-    "lib": ["DOM", "DOM.Iterable", "ESNext"],
-    "module": "ESNext",
-    "target": "ESNext",
-    "moduleResolution": "bundler"
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist"]
-}