@devorash/core 0.1.0

package/dist/types/index.d.ts

@@ -0,0 +1,487 @@
+/**
+ * Core types for Devora SDKs
+ * @module @devorash/core/types
+ */
+/**
+ * Normalized request object passed to customer handlers
+ */
+export interface DevoraRequest<TParams extends Record<string, string> = Record<string, string>, TQuery extends Record<string, string | string[] | undefined> = Record<string, string | string[] | undefined>, TBody = unknown> {
+    /** HTTP method (GET, POST, etc.) */
+    method: string;
+    /** Request path */
+    path: string;
+    /** URL parameters (e.g., :id in /impersonate/:id) */
+    params: TParams;
+    /** Query string parameters */
+    query: TQuery;
+    /** Request body (for POST, PUT, etc.) */
+    body: TBody;
+    /** Request headers */
+    headers: Record<string, string | string[] | undefined>;
+    /** Organization ID from Devora */
+    orgId: string;
+    /** API Key ID from Devora */
+    keyId: string;
+    /** Session ID for impersonation requests */
+    sessionId?: string;
+    /**
+     * Trusted impersonation context derived only after Devora HMAC validation.
+     *
+     * Customer handlers should prefer this over raw body fields for impersonation
+     * metadata because the SDK only populates it after request authentication.
+     */
+    devoraContext?: DevoraImpersonationContext;
+}
+/**
+ * Standard response format for SDK endpoints
+ */
+export interface DevoraResponse<T = unknown> {
+    /** Whether the request was successful */
+    success: boolean;
+    /** Response data (on success) */
+    data?: T;
+    /** Error message (on failure) */
+    error?: string;
+    /** Error code (on failure) */
+    errorCode?: string;
+    /** Unix timestamp of the response */
+    timestamp: number;
+}
+/**
+ * User object returned from search
+ */
+export interface DevoraUser {
+    /** Unique user identifier (required) */
+    id: string;
+    /** User's email address (recommended for display) */
+    email?: string;
+    /** User's display name (recommended for display) */
+    name?: string;
+    /** Optional avatar URL */
+    avatarUrl?: string;
+    /** Optional additional metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Request for user search endpoint
+ */
+export interface UserSearchRequest {
+    term: string;
+}
+/**
+ * Response from user search endpoint
+ */
+export interface UserSearchResponse {
+    users: DevoraUser[];
+}
+/**
+ * Impersonation scope levels
+ */
+export type ImpersonationScope = "read" | "write";
+/**
+ * Duration window for impersonation
+ */
+export interface ImpersonationDuration {
+    /** Start time (ISO timestamp) */
+    from: string;
+    /** End time (ISO timestamp) */
+    to: string;
+}
+/**
+ * Request body for impersonation start
+ */
+export interface ImpersonationStartRequest {
+    /** Unique session ID from Devora */
+    sessionId: string;
+    /** Access scope (read-only or read-write) */
+    scope: ImpersonationScope;
+    /** Session expiration timestamp (Unix milliseconds) */
+    expiresAt?: number;
+    /** Time window for impersonation */
+    duration?: ImpersonationDuration;
+    /**
+     * Email of the agent requesting impersonation.
+     *
+     * PRIVACY NOTE: This field contains PII (Personally Identifiable Information).
+     * Ensure this value is not logged in plain text in application logs to comply
+     * with privacy requirements. Consider masking or hashing when logging.
+     */
+    requestedBy?: string;
+    /** Agent performing the impersonation */
+    impersonator?: ImpersonationUserInfo;
+    /** Target user being impersonated */
+    targetUser?: ImpersonationUserInfo;
+}
+/**
+ * Response from impersonation start endpoint
+ */
+export interface ImpersonationStartResponse {
+    /** Authentication token for the target user */
+    token: string;
+    /** Optional initialization data for the frontend */
+    data?: Record<string, unknown>;
+}
+/**
+ * Request body for session termination
+ */
+export interface ImpersonationTerminateRequest {
+    /** Session ID to terminate */
+    sessionId: string;
+    /** Reason for termination */
+    reason: "manual" | "expired" | "terminated";
+}
+/**
+ * Response from termination endpoint
+ */
+export interface ImpersonationTerminateResponse {
+    /** Whether termination was successful */
+    success: boolean;
+    /** Optional message */
+    message?: string;
+}
+/**
+ * User info for impersonation (target or impersonator)
+ */
+export interface ImpersonationUserInfo {
+    /** User ID */
+    id: string;
+    /** User's email address */
+    email?: string;
+    /** User's display name */
+    name?: string;
+}
+/**
+ * Trusted impersonation context exposed to backend customer handlers.
+ */
+export interface DevoraImpersonationContext {
+    /**
+     * Always true. Present so the object can be stored on the customer session
+     * and handed back to `createImpersonationGuard` unchanged.
+     */
+    isImpersonation: true;
+    /** Devora session ID */
+    sessionId: string;
+    /** Access scope */
+    scope: ImpersonationScope;
+    /** Session expiration timestamp (Unix milliseconds) */
+    expiresAt: number;
+    /** Agent performing the impersonation */
+    impersonator: ImpersonationUserInfo;
+    /** Target user being impersonated */
+    targetUser: ImpersonationUserInfo;
+    /** Same identity as `impersonator`, in the guard's canonical field name. */
+    actor: {
+        id: string;
+    };
+    /** Same identity as `targetUser`, in the guard's canonical field name. */
+    subject: {
+        id: string;
+    };
+    /** This context is a dedicated impersonation session, not customer MFA. */
+    authMethod: "devora_impersonation";
+    /** How Devora authorized the request. */
+    authorizationSource: "standard" | "self_approved" | "self_approved_read" | "break_glass";
+    /**
+     * In the impersonate request: whether Devora's project policy will record
+     * this session. In the customer's response and the stored customer session:
+     * the customer backend's own decision for this exact session.
+     */
+    recordingAllowed: boolean;
+}
+/**
+ * Payload passed to onImpersonate callback
+ */
+export interface ImpersonatePayload {
+    /** Authentication token from customer backend */
+    token: string;
+    /** Optional initialization data */
+    data?: Record<string, unknown>;
+    /** Access scope */
+    scope: ImpersonationScope;
+    /** Session expiration time (ISO timestamp) */
+    expiresAt: string;
+    /** Unique session ID */
+    sessionId: string;
+    /** Target user being impersonated */
+    targetUser?: ImpersonationUserInfo;
+    /** Agent performing the impersonation */
+    impersonator?: ImpersonationUserInfo;
+}
+/**
+ * Callback type for impersonation events
+ */
+export type ImpersonateCallback = (payload: ImpersonatePayload) => void | Promise<void>;
+/**
+ * Callback type for session end events
+ */
+export type SessionEndCallback = (reason: string) => void | Promise<void>;
+/**
+ * Frontend SDK configuration
+ */
+export interface FrontendSDKConfig {
+    /** Public client API key (pk_client_live_xxx) */
+    apiKey: string;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Callback for impersonation start */
+    onImpersonate?: ImpersonateCallback;
+    /** Callback for session end */
+    onSessionEnd?: SessionEndCallback;
+    /** Custom error handlers */
+    onError?: ErrorHandlers;
+}
+/**
+ * Payload error information
+ */
+export interface PayloadError {
+    /** Error code */
+    code: "invalid_format" | "missing_fields" | "expired" | "unknown";
+    /** Human-readable error message */
+    message: string;
+}
+/**
+ * Error handler configuration
+ */
+export interface ErrorHandlers {
+    tokenValidationFailed?: (error: Error) => void;
+    scopeViolation?: (violation: ScopeViolation) => void;
+    sessionExpired?: () => void;
+    networkError?: (error: Error) => void;
+    /** Called when the impersonation payload in the URL is invalid or expired */
+    payloadError?: (error: PayloadError) => void;
+}
+/**
+ * Masking profile chosen by the Devora administrator for a project.
+ *
+ * - `full`: every text node and input value is masked and media is blocked.
+ *   The replay stays structurally intact (layout, navigation, clicks) but no
+ *   content is captured unless the administrator unmasks a region or selector.
+ * - `partial`: input values are masked; page text and media are visible.
+ * - `minimal`: only sensitive fields are masked (password, one-time code,
+ *   payment card and SSN-like inputs detected from type, autocomplete and
+ *   name/id/aria-label heuristics).
+ *
+ * Sensitive fields stay masked in every profile and cannot be unmasked. The
+ * profile is never configured in the SDK; it arrives with the session.
+ */
+export type DevoraMaskingProfile = "full" | "partial" | "minimal";
+/** Whether a capture channel is on for a session scope. */
+export type DevoraCapturePolicy = "disabled" | "write_only" | "all_sessions";
+/**
+ * The capture policy a session was created under, decided in the Devora
+ * dashboard and delivered to the browser SDK with the session. A later policy
+ * change applies to new sessions only.
+ */
+export interface DevoraCaptureSnapshot {
+    /** Server-owned migration marker. New sessions use Settings exclusively. */
+    settingsOnly?: boolean;
+    policyVersion: number;
+    recordingPolicy: DevoraCapturePolicy;
+    activityPolicy: DevoraCapturePolicy;
+    recordingMaskingProfile: DevoraMaskingProfile;
+    /** Block media elements (img, svg, video, audio, object, picture, embed). Always true for `full`. */
+    recordingBlockMedia: boolean;
+    /** Administrator selectors whose text and input values are masked in any profile. */
+    recordingMaskSelectors: string[];
+    /** Administrator selectors removed from the replay entirely. */
+    recordingBlockSelectors: string[];
+    /** `data-devora-region` names the administrator chose to reveal. */
+    recordingUnmaskRegions: string[];
+    /** Administrator selectors revealed despite the profile (never sensitive fields). */
+    recordingUnmaskSelectors: string[];
+    /**
+     * Capture console warnings/errors in the replay and uncaught errors in the
+     * activity timeline. Under the full profile only error categories are kept
+     * and console arguments are masked; otherwise text is redacted and bounded.
+     * Stack traces are never recorded.
+     */
+    consoleErrorCaptureEnabled: boolean;
+    /** Accept `logAction` custom events in the activity timeline. */
+    activityCustomEventsEnabled: boolean;
+}
+/**
+ * Labels developers may place in their UI for administrator selectors/regions.
+ * New sessions apply them only when selected in Devora Settings; legacy sessions
+ * preserve their original hardening behavior. Labels cannot reveal content alone.
+ */
+export declare const DEVORA_PRIVACY_MARKERS: {
+    readonly MASK_CLASS: "devora-mask";
+    readonly BLOCK_CLASS: "devora-block";
+    readonly IGNORE_CLASS: "devora-ignore";
+    readonly MASK_ATTR: "data-devora-mask";
+    readonly BLOCK_ATTR: "data-devora-block";
+    readonly IGNORE_ATTR: "data-devora-ignore";
+    readonly REGION_ATTR: "data-devora-region";
+};
+/**
+ * Scope violation event
+ */
+export interface ScopeViolation {
+    /** Type of violation */
+    type: "write_attempt";
+    /** HTTP method that was blocked */
+    method: string;
+    /** URL that was blocked */
+    url: string;
+    /** Timestamp of the violation */
+    timestamp: number;
+}
+/**
+ * Backend SDK configuration
+ */
+export interface BackendSDKConfig {
+    /** Public server API key identifier (pk_server_*) */
+    apiKey: string;
+    /** Secret API key beginning with sk_server_ (backend only; keep out of source control) */
+    secretKey: string;
+    /** Devora organization ID bound into every signed request */
+    orgId: string;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Timestamp tolerance in seconds (default: 300) */
+    timestampTolerance?: number;
+}
+/**
+ * Route handler function type
+ */
+export type RouteHandler<TRequest = DevoraRequest, TResponse = unknown> = (request: TRequest) => Promise<TResponse> | TResponse;
+/**
+ * Route definition for SDK endpoints
+ */
+export interface RouteDefinition<TRequest = DevoraRequest, TResponse = unknown> {
+    /** Endpoint path (e.g., /user/search) */
+    path: string;
+    /** HTTP method */
+    method: "GET" | "POST" | "DELETE" | "PUT" | "PATCH";
+    /** Route handler function */
+    handler: RouteHandler<TRequest, TResponse>;
+}
+/**
+ * HTTP methods for whitelist endpoints (write methods only)
+ */
+export type WhitelistMethod = "POST" | "PUT" | "PATCH" | "DELETE";
+/**
+ * HTTP methods for blacklist endpoints (all methods including wildcard)
+ */
+export type BlacklistMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "*";
+/**
+ * Whitelist entry - allows write methods in read-only mode
+ * These POST/PUT/PATCH/DELETE endpoints are allowed during read-only impersonation
+ */
+export interface SafeReadEndpoint {
+    /** HTTP method */
+    method: WhitelistMethod;
+    /** URL pattern (supports glob wildcards like /api/filters/*) */
+    pattern: string;
+    /** Optional description */
+    description?: string;
+}
+/**
+ * Blacklist entry - blocks endpoints in ANY impersonation mode
+ * These endpoints are ALWAYS blocked during impersonation (even in write mode)
+ */
+export interface BlockedEndpoint {
+    /** HTTP method (* blocks all methods) */
+    method: BlacklistMethod;
+    /** URL pattern (supports glob wildcards like /api/payments/*) */
+    pattern: string;
+    /** Optional description */
+    description?: string;
+}
+/**
+ * Response from /api/sdk/scope-config endpoint
+ */
+export interface ScopeConfigResponse {
+    /** Configuration version (for cache invalidation) */
+    version: number;
+    /** Whitelist: Safe endpoints allowed in read-only mode */
+    safeReadEndpoints: SafeReadEndpoint[];
+    /** Blacklist: Endpoints blocked during ANY impersonation */
+    blockedEndpoints: BlockedEndpoint[];
+    /** Cache expiration timestamp (Unix ms) */
+    cachedUntil: number;
+}
+/**
+ * Log event types
+ */
+export type LogEventType = "session_start" | "session_end" | "navigation" | "click" | "form_submit" | "api_call" | "error" | "scope_violation";
+/**
+ * Log event structure
+ */
+export interface LogEvent {
+    /** Event type */
+    type: LogEventType;
+    /** Unix timestamp in milliseconds */
+    timestamp: number;
+    /** Session ID */
+    sessionId: string;
+    /** Page/route path */
+    path?: string;
+    /** Action description */
+    action?: string;
+    /** Additional metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * SDK metadata
+ */
+export interface SDKInfo {
+    /** SDK name */
+    name: string;
+    /** SDK version */
+    version: string;
+    /** SDK type */
+    type: "backend" | "frontend" | "adapter";
+    /** Runtime environment */
+    runtime?: "node" | "browser" | "edge";
+}
+/**
+ * Health check response
+ */
+export interface HealthCheckResponse {
+    /** SDK status */
+    status: "healthy" | "degraded" | "unhealthy";
+    /** SDK info */
+    sdk: SDKInfo;
+    /** Request statistics */
+    stats?: {
+        totalRequests: number;
+        successfulRequests: number;
+        failedRequests: number;
+        securityErrors: number;
+    };
+    /** Registered endpoints */
+    endpoints?: Record<string, string>;
+}
+/**
+ * Connection test response
+ */
+export interface ConnectionTestResponse {
+    status: "success";
+    message: string;
+    timestamp: number;
+    /** Organization ID from request headers (informational) */
+    orgId: string;
+    keyId: string;
+    sdk: SDKInfo;
+    security: {
+        hmacValidated: boolean;
+        timestampValid: boolean;
+    };
+}
+/** What the customer route returns to the browser SDK for a tab restore. */
+export type SessionBridgeResult = {
+    status: "none";
+} | {
+    status: "resume";
+    code: string;
+} | {
+    status: "blocked";
+    reason: "control_plane_unavailable" | "session_invalid";
+};
+/** One-time resume code minted by Devora for a specific tab and origin. */
+export interface BrowserResumeCode {
+    code: string;
+    expiresAt: number;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;GAEG;AACH,MAAM,WAAW,aAAa,CAC7B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CACpE,MAAM,EACN,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAC7B,EACD,KAAK,GAAG,OAAO;IAEf,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAA;IACf,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,IAAI,EAAE,KAAK,CAAA;IACX,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,0BAA0B,CAAA;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IAC1C,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB,iCAAiC;IACjC,IAAI,CAAC,EAAE,CAAC,CAAA;IACR,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAA;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAA;IACV,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAA;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,UAAU,EAAE,CAAA;CACnB;AAMD;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,CAAA;AAEjD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAA;CACV;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACzC,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,KAAK,EAAE,kBAAkB,CAAA;IACzB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,qCAAqC;IACrC,UAAU,CAAC,EAAE,qBAAqB,CAAA;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IAC1C,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAA;IACb,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC7C,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAA;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC9C,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB,uBAAuB;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,cAAc;IACd,EAAE,EAAE,MAAM,CAAA;IACV,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IAC1C;;;OAGG;IACH,eAAe,EAAE,IAAI,CAAA;IACrB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB;IACnB,KAAK,EAAE,kBAAkB,CAAA;IACzB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAA;IACjB,yCAAyC;IACzC,YAAY,EAAE,qBAAqB,CAAA;IACnC,qCAAqC;IACrC,UAAU,EAAE,qBAAqB,CAAA;IACjC,4EAA4E;IAC5E,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACrB,0EAA0E;IAC1E,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACvB,2EAA2E;IAC3E,UAAU,EAAE,sBAAsB,CAAA;IAClC,yCAAyC;IACzC,mBAAmB,EAAE,UAAU,GAAG,eAAe,GAAG,oBAAoB,GAAG,aAAa,CAAA;IACxF;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAA;IACb,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,mBAAmB;IACnB,KAAK,EAAE,kBAAkB,CAAA;IACzB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAA;IACjB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,UAAU,CAAC,EAAE,qBAAqB,CAAA;IAClC,yCAAyC;IACzC,YAAY,CAAC,EAAE,qBAAqB,CAAA;CACpC;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEvF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,uCAAuC;IACvC,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,+BAA+B;IAC/B,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC,4BAA4B;IAC5B,OAAO,CAAC,EAAE,aAAa,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,iBAAiB;IACjB,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAA;IACjE,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IAC9C,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,IAAI,CAAA;IACpD,cAAc,CAAC,EAAE,MAAM,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IACrC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;CAC5C;AAMD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;AAEjE,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAAA;AAE5E;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,4EAA4E;IAC5E,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,mBAAmB,CAAA;IACpC,cAAc,EAAE,mBAAmB,CAAA;IACnC,uBAAuB,EAAE,oBAAoB,CAAA;IAC7C,qGAAqG;IACrG,mBAAmB,EAAE,OAAO,CAAA;IAC5B,qFAAqF;IACrF,sBAAsB,EAAE,MAAM,EAAE,CAAA;IAChC,gEAAgE;IAChE,uBAAuB,EAAE,MAAM,EAAE,CAAA;IACjC,oEAAoE;IACpE,sBAAsB,EAAE,MAAM,EAAE,CAAA;IAChC,qFAAqF;IACrF,wBAAwB,EAAE,MAAM,EAAE,CAAA;IAClC;;;;;OAKG;IACH,0BAA0B,EAAE,OAAO,CAAA;IACnC,iEAAiE;IACjE,2BAA2B,EAAE,OAAO,CAAA;CACpC;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAA;AAEV;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,wBAAwB;IACxB,IAAI,EAAE,eAAe,CAAA;IACrB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;IACd,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,QAAQ,GAAG,aAAa,EAAE,SAAS,GAAG,OAAO,IAAI,CACzE,OAAO,EAAE,QAAQ,KACb,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAA;AAEnC;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,QAAQ,GAAG,aAAa,EAAE,SAAS,GAAG,OAAO;IAC7E,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,kBAAkB;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAA;IACnD,6BAA6B;IAC7B,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;CAC1C;AAUD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,GAAG,CAAA;AAE/E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,kBAAkB;IAClB,MAAM,EAAE,eAAe,CAAA;IACvB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC/B,yCAAyC;IACzC,MAAM,EAAE,eAAe,CAAA;IACvB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,iBAAiB,EAAE,gBAAgB,EAAE,CAAA;IACrC,4DAA4D;IAC5D,gBAAgB,EAAE,eAAe,EAAE,CAAA;IACnC,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAA;CACnB;AAkBD;;GAEG;AACH,MAAM,MAAM,YAAY,GACrB,eAAe,GACf,aAAa,GACb,YAAY,GACZ,OAAO,GACP,aAAa,GACb,UAAU,GACV,OAAO,GACP,iBAAiB,CAAA;AAEpB;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,iBAAiB;IACjB,IAAI,EAAE,YAAY,CAAA;IAClB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAMD;;GAEG;AACH,MAAM,WAAW,OAAO;IACvB,eAAe;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe;IACf,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;IACxC,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,iBAAiB;IACjB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAA;IAC5C,eAAe;IACf,GAAG,EAAE,OAAO,CAAA;IACZ,yBAAyB;IACzB,KAAK,CAAC,EAAE;QACP,aAAa,EAAE,MAAM,CAAA;QACrB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,SAAS,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,OAAO,CAAA;IACZ,QAAQ,EAAE;QACT,aAAa,EAAE,OAAO,CAAA;QACtB,cAAc,EAAE,OAAO,CAAA;KACvB,CAAA;CACD;AAMD,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAC5B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,2BAA2B,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAEjF,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CACjB"}

package/dist/types/index.js

@@ -0,0 +1,19 @@
+/**
+ * Core types for Devora SDKs
+ * @module @devorash/core/types
+ */
+/**
+ * Labels developers may place in their UI for administrator selectors/regions.
+ * New sessions apply them only when selected in Devora Settings; legacy sessions
+ * preserve their original hardening behavior. Labels cannot reveal content alone.
+ */
+export const DEVORA_PRIVACY_MARKERS = {
+    MASK_CLASS: "devora-mask",
+    BLOCK_CLASS: "devora-block",
+    IGNORE_CLASS: "devora-ignore",
+    MASK_ATTR: "data-devora-mask",
+    BLOCK_ATTR: "data-devora-block",
+    IGNORE_ATTR: "data-devora-ignore",
+    REGION_ATTR: "data-devora-region",
+};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwVH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,eAAe;IAC7B,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,mBAAmB;IAC/B,WAAW,EAAE,oBAAoB;IACjC,WAAW,EAAE,oBAAoB;CACxB,CAAA"}