@drawbridge/drawbridge-utils 0.0.42 → 0.0.43

package/dist/orders.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// orders.js
+// lib/orders.js
 var orders_exports = {};
 __export(orders_exports, {
   byCurrency: () => byCurrency

package/dist/orders.js

@@ -1,4 +1,4 @@
-// orders.js
+// lib/orders.js
 var byCurrency = ({ organization, period, onlyUnbilled = false } = {}) => {
   const match = {
     organization,

package/dist/redirect.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// redirect.js
+// lib/redirect.js
 var redirect_exports = {};
 __export(redirect_exports, {
   safeRedirect: () => safeRedirect

package/dist/redirect.js

@@ -1,4 +1,4 @@
-// redirect.js
+// lib/redirect.js
 var SAFE = /^\/(?!\/)[^\\\r\n]*$/;
 var safeRedirect = (raw, fallback = "/") => {
   if (typeof raw !== "string") return fallback;

package/dist/shopify.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// shopify.js
+// lib/shopify.js
 var shopify_exports = {};
 __export(shopify_exports, {
   getAdminToken: () => getAdminToken,
@@ -40,17 +40,17 @@ __export(shopify_exports, {
 module.exports = __toCommonJS(shopify_exports);
 var import_crypto3 = __toESM(require("crypto"), 1);
 
-// encrypt.js
+// lib/encrypt.js
 var import_crypto2 = __toESM(require("crypto"), 1);
 
-// token.js
+// lib/token.js
 var import_crypto = __toESM(require("crypto"), 1);
 var generate = (bytes = 32, encoding = "base64url") => {
   const buf = import_crypto.default.randomBytes(bytes);
   return encoding ? buf.toString(encoding) : buf;
 };
 
-// encrypt.js
+// lib/encrypt.js
 var ALGORITHM = "aes-256-gcm";
 var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
 var encrypt = (value) => {
@@ -79,7 +79,7 @@ var decrypt = (value) => {
   return JSON.parse(result.toString("utf8"));
 };
 
-// shopify.js
+// lib/shopify.js
 var SHOPIFY_ADMIN_API_VERSION = "2025-01";
 var REFRESH_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1e3;
 var ACCESS_TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1e3;

package/dist/shopify.js

@@ -1,11 +1,46 @@
-import {
-  decrypt,
-  encrypt
-} from "./chunk-2DRAIKGZ.js";
-import "./chunk-OS2AHUWX.js";
+// lib/shopify.js
+import crypto3 from "crypto";
 
-// shopify.js
+// lib/encrypt.js
+import crypto2 from "crypto";
+
+// lib/token.js
 import crypto from "crypto";
+var generate = (bytes = 32, encoding = "base64url") => {
+  const buf = crypto.randomBytes(bytes);
+  return encoding ? buf.toString(encoding) : buf;
+};
+
+// lib/encrypt.js
+var ALGORITHM = "aes-256-gcm";
+var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
+var encrypt = (value) => {
+  const iv = generate(12, null);
+  const cipher = crypto2.createCipheriv(ALGORITHM, getKey(), iv);
+  const data = Buffer.concat([
+    cipher.update(JSON.stringify(value), "utf8"),
+    cipher.final()
+  ]);
+  const tag = cipher.getAuthTag();
+  return [iv, tag, data].map((b) => b.toString("hex")).join(":");
+};
+var decrypt = (value) => {
+  if (typeof value !== "string") return value;
+  const [ivHex, tagHex, dataHex] = value.split(":");
+  const decipher = crypto2.createDecipheriv(
+    ALGORITHM,
+    getKey(),
+    Buffer.from(ivHex, "hex")
+  );
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  const result = Buffer.concat([
+    decipher.update(Buffer.from(dataHex, "hex")),
+    decipher.final()
+  ]);
+  return JSON.parse(result.toString("utf8"));
+};
+
+// lib/shopify.js
 var SHOPIFY_ADMIN_API_VERSION = "2025-01";
 var REFRESH_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1e3;
 var ACCESS_TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1e3;
@@ -16,16 +51,16 @@ var signOAuthState = ({ organizationId, shop }) => {
     organizationId,
     shop
   })).toString("base64url");
-  const signature = crypto.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
+  const signature = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
   return payload + "." + signature;
 };
 var verifyOAuthState = (raw) => {
   if (!raw) return null;
   const [payload, signature] = raw.split(".");
   if (!payload || !signature) return null;
-  const expected = crypto.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
+  const expected = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
   if (signature.length !== expected.length) return null;
-  const valid = crypto.timingSafeEqual(
+  const valid = crypto3.timingSafeEqual(
     Buffer.from(signature),
     Buffer.from(expected)
   );
@@ -46,10 +81,10 @@ var verifyOAuthCallbackHmac = ({ hmac, rawQuery }) => {
     const nameB = b.split("=")[0];
     return nameA < nameB ? -1 : nameA > nameB ? 1 : 0;
   }).join("&");
-  const digest = crypto.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(message).digest("hex");
+  const digest = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(message).digest("hex");
   const digestBuf = Buffer.from(digest);
   const hmacBuf = Buffer.from(hmac || "");
-  return digestBuf.length === hmacBuf.length && crypto.timingSafeEqual(digestBuf, hmacBuf);
+  return digestBuf.length === hmacBuf.length && crypto3.timingSafeEqual(digestBuf, hmacBuf);
 };
 var shopifyOAuthFetch = async (url, body) => {
   const response = await fetch(url, {

package/dist/slugify.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// slugify.js
+// lib/slugify.js
 var slugify_exports = {};
 __export(slugify_exports, {
   slugify: () => slugify

package/dist/slugify.js

@@ -1,4 +1,4 @@
-// slugify.js
+// lib/slugify.js
 import slug from "slugify";
 var slugify = (value, nochars = false) => {
   const remove = nochars ? /[-?*+~.()'"!:@#^_{}\[\];,/\\]/g : /[?*+~.()'"!:@#^_{}\[\];,/\\]/g;

package/dist/token.cjs

@@ -26,7 +26,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// token.js
+// lib/token.js
 var token_exports = {};
 __export(token_exports, {
   compare: () => compare,

package/dist/token.js

@@ -1,8 +1,24 @@
-import {
-  compare,
-  generate,
-  hash
-} from "./chunk-OS2AHUWX.js";
+// lib/token.js
+import crypto from "crypto";
+var generate = (bytes = 32, encoding = "base64url") => {
+  const buf = crypto.randomBytes(bytes);
+  return encoding ? buf.toString(encoding) : buf;
+};
+var hash = (value, key) => {
+  if (!value) return null;
+  if (key) {
+    return crypto.createHmac("sha256", key).update(String(value)).digest("base64url");
+  }
+  return crypto.createHash("sha256").update(String(value)).digest("base64url");
+};
+var compare = (a, b) => {
+  if (typeof a !== "string" || typeof b !== "string") return false;
+  if (a.length !== b.length) return false;
+  return crypto.timingSafeEqual(
+    Buffer.from(a),
+    Buffer.from(b)
+  );
+};
 export {
   compare,
   generate,

package/dist/transactions.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// transactions.js
+// lib/transactions.js
 var transactions_exports = {};
 __export(transactions_exports, {
   credit: () => credit,

package/dist/transactions.js

@@ -1,7 +1,111 @@
-import {
-  credit,
-  debit
-} from "./chunk-JT2PAZAZ.js";
+// lib/transactions.js
+import { currentTraceId } from "@drawbridge/drawbridge-telemetry";
+var insertTransaction = async ({
+  db,
+  user,
+  type,
+  category,
+  source,
+  amount,
+  _id,
+  stripeInvoiceId,
+  stripeEventId,
+  session,
+  ...rest
+}) => {
+  var _a;
+  const beforeRaw = (_a = user == null ? void 0 : user.balance) == null ? void 0 : _a[type];
+  const balance = typeof beforeRaw === "number" ? { before: beforeRaw, after: beforeRaw + amount } : void 0;
+  const trace = currentTraceId();
+  await db.create({
+    authenticated: user,
+    collection: "transaction",
+    data: {
+      ..._id && { _id },
+      user: user == null ? void 0 : user.id,
+      type,
+      category,
+      source,
+      amount,
+      ...balance && { balance },
+      ...trace && { trace },
+      ...rest,
+      ...stripeInvoiceId && { stripeInvoiceId },
+      ...stripeEventId && { stripeEventId }
+    },
+    ...session && { options: { session } }
+  });
+};
+var credit = async ({
+  db,
+  user,
+  amount,
+  type,
+  category,
+  source,
+  _id,
+  stripeInvoiceId,
+  stripeEventId,
+  session,
+  ...rest
+}) => {
+  if (!Number.isInteger(amount) || amount <= 0) {
+    throw new Error(`credit() requires a positive integer amount, got ${amount}`);
+  }
+  if (!type) {
+    throw new Error('credit() requires a type (e.g., "ai")');
+  }
+  if (!source) {
+    throw new Error('credit() requires a source ("system" | "admin" | "user")');
+  }
+  await insertTransaction({
+    db,
+    user,
+    type,
+    category,
+    source,
+    amount,
+    _id,
+    stripeInvoiceId,
+    stripeEventId,
+    session,
+    ...rest
+  });
+};
+var debit = async ({
+  db,
+  user,
+  amount,
+  type,
+  category,
+  source,
+  stripeInvoiceId,
+  stripeEventId,
+  session,
+  ...rest
+}) => {
+  if (!Number.isInteger(amount) || amount <= 0) {
+    throw new Error(`debit() requires a positive integer amount, got ${amount}`);
+  }
+  if (!type) {
+    throw new Error('debit() requires a type (e.g., "ai")');
+  }
+  if (!source) {
+    throw new Error('debit() requires a source ("system" | "admin" | "user")');
+  }
+  await insertTransaction({
+    db,
+    user,
+    type,
+    category,
+    source,
+    amount: -amount,
+    stripeInvoiceId,
+    stripeEventId,
+    session,
+    ...rest
+  });
+};
 export {
   credit,
   debit

package/dist/upload.cjs

@@ -16,7 +16,7 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// upload.js
+// lib/upload.js
 var upload_exports = {};
 __export(upload_exports, {
   allowedMimes: () => allowedMimes,

package/dist/upload.js

@@ -1,4 +1,4 @@
-// upload.js
+// lib/upload.js
 var allowedUploadTypes = {
   application: {
     pdf: "application/pdf"

package/package.json

@@ -12,6 +12,17 @@
     "tsup": "8.5.1",
     "typescript": "5.9.3"
   },
+  "devDependencies": {
+    "@node-oauth/oauth2-server": "5.3.0"
+  },
+  "peerDependencies": {
+    "@node-oauth/oauth2-server": "^5.3.0"
+  },
+  "peerDependenciesMeta": {
+    "@node-oauth/oauth2-server": {
+      "optional": true
+    }
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -49,9 +60,14 @@
       "require": "./dist/nanoid.cjs"
     },
     "./oauth": {
-      "types": "./dist/oauth.d.ts",
-      "import": "./dist/oauth.js",
-      "require": "./dist/oauth.cjs"
+      "types": "./dist/oauth/index.d.ts",
+      "import": "./dist/oauth/index.js",
+      "require": "./dist/oauth/index.cjs"
+    },
+    "./oauth/server": {
+      "types": "./dist/oauth/server.d.ts",
+      "import": "./dist/oauth/server.js",
+      "require": "./dist/oauth/server.cjs"
     },
     "./orders": {
       "types": "./dist/orders.d.ts",
@@ -114,5 +130,5 @@
     "build": "tsup && npm publish"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.42"
+  "version": "0.0.43"
 }

package/dist/chunk-2DRAIKGZ.js

@@ -1,38 +0,0 @@
-import {
-  generate
-} from "./chunk-OS2AHUWX.js";
-
-// encrypt.js
-import crypto from "crypto";
-var ALGORITHM = "aes-256-gcm";
-var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
-var encrypt = (value) => {
-  const iv = generate(12, null);
-  const cipher = crypto.createCipheriv(ALGORITHM, getKey(), iv);
-  const data = Buffer.concat([
-    cipher.update(JSON.stringify(value), "utf8"),
-    cipher.final()
-  ]);
-  const tag = cipher.getAuthTag();
-  return [iv, tag, data].map((b) => b.toString("hex")).join(":");
-};
-var decrypt = (value) => {
-  if (typeof value !== "string") return value;
-  const [ivHex, tagHex, dataHex] = value.split(":");
-  const decipher = crypto.createDecipheriv(
-    ALGORITHM,
-    getKey(),
-    Buffer.from(ivHex, "hex")
-  );
-  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
-  const result = Buffer.concat([
-    decipher.update(Buffer.from(dataHex, "hex")),
-    decipher.final()
-  ]);
-  return JSON.parse(result.toString("utf8"));
-};
-
-export {
-  encrypt,
-  decrypt
-};

package/dist/chunk-6HH36OK6.js

@@ -1,54 +0,0 @@
-// circuit.js
-var CLOSED = "CLOSED";
-var OPEN = "OPEN";
-var HALF_OPEN = "HALF_OPEN";
-var circuit = ({
-  name,
-  threshold = 5,
-  timeout = 3e4
-}) => {
-  let state = CLOSED;
-  let failures = 0;
-  let openedAt = null;
-  const trip = () => {
-    state = OPEN;
-    openedAt = Date.now();
-    console.error(`Circuit breaker OPEN: ${name}`);
-  };
-  const reset = () => {
-    state = CLOSED;
-    failures = 0;
-    openedAt = null;
-    console.log(`Circuit breaker CLOSED: ${name}`);
-  };
-  return async (fn) => {
-    if (state === OPEN) {
-      if (Date.now() - openedAt >= timeout) {
-        state = HALF_OPEN;
-      } else {
-        const error = new Error(`${name} is temporarily unavailable`);
-        error.status = 503;
-        throw error;
-      }
-    }
-    try {
-      const result = await fn();
-      if (state === HALF_OPEN) {
-        reset();
-      } else {
-        failures = 0;
-      }
-      return result;
-    } catch (error) {
-      failures++;
-      if (state === HALF_OPEN || failures >= threshold) {
-        trip();
-      }
-      throw error;
-    }
-  };
-};
-
-export {
-  circuit
-};

package/dist/chunk-JT2PAZAZ.js

@@ -1,113 +0,0 @@
-// transactions.js
-import { currentTraceId } from "@drawbridge/drawbridge-telemetry";
-var insertTransaction = async ({
-  db,
-  user,
-  type,
-  category,
-  source,
-  amount,
-  _id,
-  stripeInvoiceId,
-  stripeEventId,
-  session,
-  ...rest
-}) => {
-  var _a;
-  const beforeRaw = (_a = user == null ? void 0 : user.balance) == null ? void 0 : _a[type];
-  const balance = typeof beforeRaw === "number" ? { before: beforeRaw, after: beforeRaw + amount } : void 0;
-  const trace = currentTraceId();
-  await db.create({
-    authenticated: user,
-    collection: "transaction",
-    data: {
-      ..._id && { _id },
-      user: user == null ? void 0 : user.id,
-      type,
-      category,
-      source,
-      amount,
-      ...balance && { balance },
-      ...trace && { trace },
-      ...rest,
-      ...stripeInvoiceId && { stripeInvoiceId },
-      ...stripeEventId && { stripeEventId }
-    },
-    ...session && { options: { session } }
-  });
-};
-var credit = async ({
-  db,
-  user,
-  amount,
-  type,
-  category,
-  source,
-  _id,
-  stripeInvoiceId,
-  stripeEventId,
-  session,
-  ...rest
-}) => {
-  if (!Number.isInteger(amount) || amount <= 0) {
-    throw new Error(`credit() requires a positive integer amount, got ${amount}`);
-  }
-  if (!type) {
-    throw new Error('credit() requires a type (e.g., "ai")');
-  }
-  if (!source) {
-    throw new Error('credit() requires a source ("system" | "admin" | "user")');
-  }
-  await insertTransaction({
-    db,
-    user,
-    type,
-    category,
-    source,
-    amount,
-    _id,
-    stripeInvoiceId,
-    stripeEventId,
-    session,
-    ...rest
-  });
-};
-var debit = async ({
-  db,
-  user,
-  amount,
-  type,
-  category,
-  source,
-  stripeInvoiceId,
-  stripeEventId,
-  session,
-  ...rest
-}) => {
-  if (!Number.isInteger(amount) || amount <= 0) {
-    throw new Error(`debit() requires a positive integer amount, got ${amount}`);
-  }
-  if (!type) {
-    throw new Error('debit() requires a type (e.g., "ai")');
-  }
-  if (!source) {
-    throw new Error('debit() requires a source ("system" | "admin" | "user")');
-  }
-  await insertTransaction({
-    db,
-    user,
-    type,
-    category,
-    source,
-    amount: -amount,
-    stripeInvoiceId,
-    stripeEventId,
-    session,
-    ...rest
-  });
-};
-
-export {
-  credit,
-  debit
-};

package/dist/chunk-OS2AHUWX.js

@@ -1,27 +0,0 @@
-// token.js
-import crypto from "crypto";
-var generate = (bytes = 32, encoding = "base64url") => {
-  const buf = crypto.randomBytes(bytes);
-  return encoding ? buf.toString(encoding) : buf;
-};
-var hash = (value, key) => {
-  if (!value) return null;
-  if (key) {
-    return crypto.createHmac("sha256", key).update(String(value)).digest("base64url");
-  }
-  return crypto.createHash("sha256").update(String(value)).digest("base64url");
-};
-var compare = (a, b) => {
-  if (typeof a !== "string" || typeof b !== "string") return false;
-  if (a.length !== b.length) return false;
-  return crypto.timingSafeEqual(
-    Buffer.from(a),
-    Buffer.from(b)
-  );
-};
-
-export {
-  generate,
-  hash,
-  compare
-};