@devorash/node 0.1.0

package/dist/transport.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Outbound calls to the Devora API: no redirects (signed headers and bodies
+ * must never be forwarded to another origin), a total deadline, and a bounded
+ * JSON response.
+ * @module @devorash/node
+ */
+/** Largest control-plane response the SDK will buffer. */
+export declare const MAX_CONTROL_RESPONSE_BYTES: number;
+export declare class ControlPlaneResponseError extends Error {
+    constructor(message: string);
+}
+/** `fetch` that refuses redirects and aborts after `timeoutMs` in total. */
+export declare function controlPlaneFetch(url: string, init: RequestInit, timeoutMs?: number): Promise<Response>;
+/**
+ * Read a JSON object response of at most `maxBytes`. Non-object JSON, invalid
+ * UTF-8 and oversized bodies throw {@link ControlPlaneResponseError}.
+ */
+export declare function readBoundedJsonObject(response: Response, maxBytes?: number): Promise<Record<string, unknown>>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,QAAY,CAAA;AAEnD,qBAAa,yBAA0B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI3B;AAED,4EAA4E;AAC5E,wBAAsB,iBAAiB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,SAAS,SAAQ,GACf,OAAO,CAAC,QAAQ,CAAC,CAcnB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAC1C,QAAQ,EAAE,QAAQ,EAClB,QAAQ,SAA6B,GACnC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAqClC"}

package/dist/transport.js

@@ -0,0 +1,77 @@
+/**
+ * Outbound calls to the Devora API: no redirects (signed headers and bodies
+ * must never be forwarded to another origin), a total deadline, and a bounded
+ * JSON response.
+ * @module @devorash/node
+ */
+/** Largest control-plane response the SDK will buffer. */
+export const MAX_CONTROL_RESPONSE_BYTES = 64 * 1024;
+export class ControlPlaneResponseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ControlPlaneResponseError";
+    }
+}
+/** `fetch` that refuses redirects and aborts after `timeoutMs` in total. */
+export async function controlPlaneFetch(url, init, timeoutMs = 5_000) {
+    // Bun 1.3.14 treats a 304 as an unexpected redirect in "error" mode.
+    // Manual mode never forwards signed headers/body; reject redirect replies
+    // ourselves while allowing conditional GET policy revalidation.
+    const response = await fetch(url, {
+        ...init,
+        redirect: "manual",
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (response.status >= 300 && response.status < 400 && response.status !== 304) {
+        void response.body?.cancel().catch(() => { });
+        throw new ControlPlaneResponseError("Control-plane redirects are not allowed");
+    }
+    return response;
+}
+/**
+ * Read a JSON object response of at most `maxBytes`. Non-object JSON, invalid
+ * UTF-8 and oversized bodies throw {@link ControlPlaneResponseError}.
+ */
+export async function readBoundedJsonObject(response, maxBytes = MAX_CONTROL_RESPONSE_BYTES) {
+    const declared = response.headers.get("content-length");
+    if (declared !== null && (!/^\d+$/.test(declared) || Number(declared) > maxBytes)) {
+        void response.body?.cancel().catch(() => { });
+        throw new ControlPlaneResponseError("Response too large");
+    }
+    const chunks = [];
+    let total = 0;
+    if (response.body) {
+        const reader = response.body.getReader();
+        try {
+            for (;;) {
+                const { value, done } = await reader.read();
+                if (done)
+                    break;
+                total += value.byteLength;
+                if (total > maxBytes)
+                    throw new ControlPlaneResponseError("Response too large");
+                chunks.push(value);
+            }
+        }
+        finally {
+            void reader.cancel().catch(() => { });
+        }
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new ControlPlaneResponseError("Invalid JSON response");
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        throw new ControlPlaneResponseError("Unexpected response shape");
+    return parsed;
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACnD,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACxC,CAAC;CACD;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,GAAW,EACX,IAAiB,EACjB,SAAS,GAAG,KAAK;IAEjB,qEAAqE;IACrE,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACjC,GAAG,IAAI;QACP,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACtC,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAChF,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,IAAI,yBAAyB,CAAC,yCAAyC,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,QAAkB,EAClB,QAAQ,GAAG,0BAA0B;IAErC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QACnF,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;QACxC,IAAI,CAAC;YACJ,SAAS,CAAC;gBACT,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;gBACzB,IAAI,KAAK,GAAG,QAAQ;oBAAE,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,CAAC,CAAA;gBAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACrC,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC3B,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACjE,MAAM,IAAI,yBAAyB,CAAC,2BAA2B,CAAC,CAAA;IACjE,OAAO,MAAiC,CAAA;AACzC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,191 @@
+import type { BrowserResumeCode } from "@devorash/core";
+/**
+ * Node.js Backend SDK specific types
+ * @module @devorash/node
+ */
+import type { BackendSDKConfig, DevoraRequest, RouteHandler, SDKInfo } from "@devorash/core";
+import type { ScopeConfig } from "./scope-config.js";
+import type { ReplayStore } from "./replay-store.js";
+/**
+ * Extended backend SDK configuration for Node.js
+ */
+export interface NodeBackendSDKConfig extends BackendSDKConfig {
+    /**
+     * Devora API origin override (advanced; e.g. self-hosted deployments).
+     * Must be an https origin (http is allowed for localhost only).
+     * @default the origin baked into the SDK at build time
+     */
+    apiUrl?: string;
+    /** Enable request logging */
+    logRequests?: boolean;
+    /** Custom logger implementation */
+    logger?: Logger;
+    /** Statistics collection */
+    collectStats?: boolean;
+    /** Required in production so replay rejection works across processes/instances. */
+    replayStore?: ReplayStore;
+    /**
+     * Runtime environment. Anything other than "development" or "test" is treated
+     * as production, which requires `replayStore`. Falls back to `DEVORA_ENV`,
+     * then `NODE_ENV`, then "production" (fail closed).
+     */
+    environment?: DevoraEnvironment;
+}
+export type DevoraEnvironment = "development" | "test" | "production";
+/**
+ * Logger interface for custom logging
+ */
+export interface Logger {
+    debug: (message: string, meta?: Record<string, unknown>) => void;
+    info: (message: string, meta?: Record<string, unknown>) => void;
+    warn: (message: string, meta?: Record<string, unknown>) => void;
+    error: (message: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * Route definition with method and handler
+ */
+export interface SDKRoute<TRequest = DevoraRequest, TResponse = unknown> {
+    /** Endpoint path */
+    path: string;
+    /** HTTP method */
+    method: "GET" | "POST" | "DELETE" | "PUT" | "PATCH";
+    /** Route handler */
+    handler: RouteHandler<TRequest, TResponse>;
+    /** Whether this is a built-in route */
+    isBuiltIn?: boolean;
+}
+/**
+ * Result of a server-side session liveness check.
+ */
+export interface SessionStatusResult {
+    /** True only when the session is active and not past its hard expiry. */
+    valid: boolean;
+    /** Machine-readable reason when not valid (e.g. SESSION_TERMINATED, SESSION_EXPIRED). */
+    error?: string;
+    /** Raw session status (active, terminated, completed, expired, ...). */
+    status?: string;
+    /** Session scope. */
+    scope?: "read" | "write";
+    /** Session hard expiry as a Unix timestamp in milliseconds. */
+    expiresAt?: number;
+    /** Remaining time in milliseconds. */
+    remainingMs?: number;
+}
+/**
+ * SDK instance returned by devoraSDK()
+ */
+export interface DevoraBackendSDK {
+    /** SDK configuration (read-only) */
+    readonly config: NodeBackendSDKConfig;
+    /** SDK info */
+    readonly info: SDKInfo;
+    /** Resolves after the initial scope policy fetch attempt completes. Use getScopeConfig() or isPolicyLoaded() to check whether policy is available. */
+    readonly ready: Promise<void>;
+    /** Register a new endpoint handler */
+    register: <TRequest extends DevoraRequest, TResponse>(path: string, handler: RouteHandler<TRequest, TResponse>, options?: RegisterOptions) => SDKRoute<TRequest, TResponse>;
+    /** Get all registered routes */
+    getRoutes: () => SDKRoute[];
+    /** Get statistics */
+    getStats: () => SDKStats;
+    /** Fetch the latest centrally managed scope policy, using the cache when valid. */
+    getScopeConfig: () => Promise<ScopeConfig | null>;
+    /** Whether a scope policy is currently cached in memory. */
+    isPolicyLoaded: () => boolean;
+    /** Return the currently cached scope policy without network I/O. */
+    getCachedScopeConfig: () => ScopeConfig | null;
+    /** Force a scope policy refresh. */
+    refreshScopeConfig: () => Promise<ScopeConfig | null>;
+    /**
+     * Check whether a Devora session is still live (not terminated, revoked, or expired).
+     * Used by the optional `enforceLiveness` guard. Returns null when Devora is unreachable.
+     */
+    getSessionStatus: (sessionId: string) => Promise<SessionStatusResult | null>;
+    /**
+     * Ask Devora for a one-time browser resume code for an active session. The
+     * request is signed with the server secret and consumed once. Returns null
+     * when Devora is unreachable; throws never.
+     */
+    createBrowserResumeCode: (input: {
+        sessionId: string;
+        tabRef: string;
+        origin: string;
+    }) => Promise<BrowserResumeCode | {
+        error: string;
+        status?: number;
+    } | null>;
+    /** Stop background refresh timers. */
+    destroy: () => void;
+    /**
+     * Verify a signed request from Devora over its exact wire bytes (signature
+     * v3): headers, key and org, timestamp, raw path and query, body digest,
+     * direction, then single-use request id. Nothing is re-serialized.
+     * Optional tolerance (seconds) overrides the SDK config for this call.
+     */
+    verifyRequest: (request: SignedRequestInput, options?: {
+        timestampTolerance?: number;
+    }) => Promise<ValidationResult>;
+}
+/**
+ * Options for register()
+ */
+export interface RegisterOptions {
+    /** HTTP method (auto-detected if using DEVORA_ENDPOINTS) */
+    method?: "GET" | "POST" | "DELETE" | "PUT" | "PATCH";
+    /** Custom description for debug output */
+    description?: string;
+}
+/**
+ * SDK statistics
+ */
+export interface SDKStats {
+    /** Total requests received */
+    totalRequests: number;
+    /** Successful requests */
+    successfulRequests: number;
+    /** Failed requests */
+    failedRequests: number;
+    /** Security validation errors */
+    securityErrors: number;
+    /** Requests by endpoint */
+    requestsByEndpoint: Record<string, number>;
+}
+/**
+ * A signed request exactly as received. `path` is relative to the SDK mount
+ * and still percent-encoded; `query` is everything after the first `?`.
+ */
+export interface SignedRequestInput {
+    method: string;
+    path: string;
+    query: string;
+    body: Uint8Array;
+    headers: Record<string, string | string[] | undefined>;
+}
+/**
+ * Validation result for incoming requests
+ */
+export interface ValidationResult {
+    /** Whether validation passed */
+    valid: boolean;
+    /** Error message if validation failed */
+    error?: string;
+    /** Machine-readable error code when validation failed */
+    errorCode?: string;
+    /** Extracted organization ID */
+    orgId?: string;
+    /** Extracted key ID */
+    keyId?: string;
+    /** Request timestamp */
+    timestamp?: number;
+    /** Unique request ID */
+    requestId?: string;
+}
+/**
+ * Adapter interface for framework integrations
+ */
+export interface FrameworkAdapter<THandler = unknown> {
+    /** Adapter name */
+    name: string;
+    /** Create framework-specific handler */
+    createHandler: (sdk: DevoraBackendSDK, routes: SDKRoute[]) => THandler;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD;;;GAGG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAC5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC7D;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6BAA6B;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4BAA4B;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mFAAmF;IACnF,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,CAAA;AAErE;;GAEG;AACH,MAAM,WAAW,MAAM;IACtB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAChE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ,CAAC,QAAQ,GAAG,aAAa,EAAE,SAAS,GAAG,OAAO;IACtE,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,kBAAkB;IAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAA;IACnD,oBAAoB;IACpB,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC1C,uCAAuC;IACvC,SAAS,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,yEAAyE;IACzE,KAAK,EAAE,OAAO,CAAA;IACd,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACxB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,eAAe;IACf,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,sJAAsJ;IACtJ,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,sCAAsC;IACtC,QAAQ,EAAE,CAAC,QAAQ,SAAS,aAAa,EAAE,SAAS,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC1C,OAAO,CAAC,EAAE,eAAe,KACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAClC,gCAAgC;IAChC,SAAS,EAAE,MAAM,QAAQ,EAAE,CAAA;IAC3B,qBAAqB;IACrB,QAAQ,EAAE,MAAM,QAAQ,CAAA;IACxB,mFAAmF;IACnF,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IACjD,4DAA4D;IAC5D,cAAc,EAAE,MAAM,OAAO,CAAA;IAC7B,oEAAoE;IACpE,oBAAoB,EAAE,MAAM,WAAW,GAAG,IAAI,CAAA;IAC9C,oCAAoC;IACpC,kBAAkB,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IACrD;;;OAGG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IAC5E;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,EAAE,MAAM,CAAA;KACd,KAAK,OAAO,CAAC,iBAAiB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAC5E,sCAAsC;IACtC,OAAO,EAAE,MAAM,IAAI,CAAA;IAGnB;;;;;OAKG;IACH,aAAa,EAAE,CACd,OAAO,EAAE,kBAAkB,EAC3B,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,KACrC,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAA;IACpD,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAA;IACtB,2BAA2B;IAC3B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,UAAU,CAAA;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,gCAAgC;IAChC,KAAK,EAAE,OAAO,CAAA;IACd,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,QAAQ,GAAG,OAAO;IACnD,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,wCAAwC;IACxC,aAAa,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,QAAQ,CAAA;CACtE"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@devorash/node",
+  "version": "0.1.0",
+  "description": "Devora Node.js Backend SDK for secure impersonation",
+  "keywords": [
+    "backend",
+    "customer-support",
+    "devora",
+    "impersonation",
+    "nodejs",
+    "sdk",
+    "support"
+  ],
+  "homepage": "https://docs.devora.sh/reference/packages",
+  "bugs": {
+    "url": "https://github.com/getdevora/devora-sdks/issues"
+  },
+  "license": "MIT",
+  "author": "Devora",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/getdevora/devora-sdks.git",
+    "directory": "node"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "@devorash/core": "0.1.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}