@drawbridge/drawbridge-utils 0.0.7 → 0.0.9

package/dist/circuit.d.cts

@@ -1,7 +1,7 @@
 // Simple circuit breaker for wrapped async operations.
 //
-//   const breaker = circuit({ name : 'kinde-auth', threshold : 5, timeout : 30000 });
-//   const result = await breaker( () => validateToken( ... ) );
+//   const breaker = circuit({ name : 'google-auth', threshold : 5, timeout : 30000 });
+//   const result = await breaker( () => verifyIdToken( ... ) );
 //
 // States: CLOSED → OPEN (after `threshold` consecutive failures) → HALF_OPEN
 // (after `timeout` ms; next call probes recovery) → CLOSED (on success).

package/dist/circuit.d.ts

@@ -1,7 +1,7 @@
 // Simple circuit breaker for wrapped async operations.
 //
-//   const breaker = circuit({ name : 'kinde-auth', threshold : 5, timeout : 30000 });
-//   const result = await breaker( () => validateToken( ... ) );
+//   const breaker = circuit({ name : 'google-auth', threshold : 5, timeout : 30000 });
+//   const result = await breaker( () => verifyIdToken( ... ) );
 //
 // States: CLOSED → OPEN (after `threshold` consecutive failures) → HALF_OPEN
 // (after `timeout` ms; next call probes recovery) → CLOSED (on success).

package/dist/nanoid.cjs

@@ -0,0 +1,53 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// nanoid.js
+var nanoid_exports = {};
+__export(nanoid_exports, {
+  nanoid: () => nanoid,
+  retry: () => retry
+});
+module.exports = __toCommonJS(nanoid_exports);
+var import_nanoid = require("nanoid");
+var nanoid = (0, import_nanoid.customAlphabet)("0123456789abcdefghijklmnopqrstuvwxyz", 8);
+var DEFAULT_MAX_RETRIES = 5;
+var retry = async ({
+  field,
+  operation,
+  maxRetries = DEFAULT_MAX_RETRIES
+}) => {
+  var _a;
+  for (let attempt = 0; attempt < maxRetries; attempt++) {
+    try {
+      return await operation(nanoid());
+    } catch (error) {
+      const isCollision = (error == null ? void 0 : error.code) === 11e3 && ((_a = error == null ? void 0 : error.keyPattern) == null ? void 0 : _a[field]);
+      if (!isCollision || attempt === maxRetries - 1) {
+        throw error;
+      }
+      ;
+    }
+    ;
+  }
+  ;
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  nanoid,
+  retry
+});

package/dist/nanoid.d.cts

@@ -0,0 +1,63 @@
+import { customAlphabet } from 'nanoid';
+
+// 8-char base36 nanoid (36⁸ ≈ 2.8T entropy). Used as the short-id / slug
+// generator across drawbridge collections with unique indexes (page.shortId,
+// organization.shortId, affiliate.shortId, link.slug, prize.slug,
+// advertisement.slug, etc.).
+//
+// Also exported from the main entrypoint for back-compat:
+//   const { nanoid } = require( '@drawbridge/drawbridge-utils' );
+//
+// New code should prefer this subpath, which also exposes `retry`:
+//   const { nanoid, retry } = require( '@drawbridge/drawbridge-utils/nanoid' );
+
+const nanoid = customAlphabet( '0123456789abcdefghijklmnopqrstuvwxyz', 8 );
+
+// Retry an async operation when Mongo rejects an insert because of a
+// duplicate-key error on a specific field. The operation receives a fresh
+// nanoid() on each attempt — typically used for shortId / slug fields where
+// a unique index is in place and the value is randomly generated.
+//
+//   const result = await retry({
+//     field : 'shortId',
+//     operation : ( shortId ) => controller.create({
+//       collection : 'page',
+//       data : { ..., shortId }
+//     })
+//   });
+//
+// Throws immediately if the error is anything other than E11000 on the named
+// field. Throws the last error if retries are exhausted (extremely unlikely
+// at 36⁸ entropy — 5 consecutive collisions are astronomically improbable).
+
+const DEFAULT_MAX_RETRIES = 5;
+
+const retry = async ({
+	field,
+	operation,
+	maxRetries = DEFAULT_MAX_RETRIES
+}) => {
+
+	for( let attempt = 0; attempt < maxRetries; attempt++ ){
+
+		try {
+
+			return await operation( nanoid() );
+
+		} catch ( error ){
+
+			const isCollision = (
+				error?.code === 11000 &&
+				error?.keyPattern?.[ field ]
+			);
+
+			if( ! isCollision || attempt === maxRetries - 1 ){
+
+				throw error;
+
+			}
+		}
+	}
+};
+
+export { nanoid, retry };

package/dist/nanoid.d.ts

@@ -0,0 +1,63 @@
+import { customAlphabet } from 'nanoid';
+
+// 8-char base36 nanoid (36⁸ ≈ 2.8T entropy). Used as the short-id / slug
+// generator across drawbridge collections with unique indexes (page.shortId,
+// organization.shortId, affiliate.shortId, link.slug, prize.slug,
+// advertisement.slug, etc.).
+//
+// Also exported from the main entrypoint for back-compat:
+//   const { nanoid } = require( '@drawbridge/drawbridge-utils' );
+//
+// New code should prefer this subpath, which also exposes `retry`:
+//   const { nanoid, retry } = require( '@drawbridge/drawbridge-utils/nanoid' );
+
+const nanoid = customAlphabet( '0123456789abcdefghijklmnopqrstuvwxyz', 8 );
+
+// Retry an async operation when Mongo rejects an insert because of a
+// duplicate-key error on a specific field. The operation receives a fresh
+// nanoid() on each attempt — typically used for shortId / slug fields where
+// a unique index is in place and the value is randomly generated.
+//
+//   const result = await retry({
+//     field : 'shortId',
+//     operation : ( shortId ) => controller.create({
+//       collection : 'page',
+//       data : { ..., shortId }
+//     })
+//   });
+//
+// Throws immediately if the error is anything other than E11000 on the named
+// field. Throws the last error if retries are exhausted (extremely unlikely
+// at 36⁸ entropy — 5 consecutive collisions are astronomically improbable).
+
+const DEFAULT_MAX_RETRIES = 5;
+
+const retry = async ({
+	field,
+	operation,
+	maxRetries = DEFAULT_MAX_RETRIES
+}) => {
+
+	for( let attempt = 0; attempt < maxRetries; attempt++ ){
+
+		try {
+
+			return await operation( nanoid() );
+
+		} catch ( error ){
+
+			const isCollision = (
+				error?.code === 11000 &&
+				error?.keyPattern?.[ field ]
+			);
+
+			if( ! isCollision || attempt === maxRetries - 1 ){
+
+				throw error;
+
+			}
+		}
+	}
+};
+
+export { nanoid, retry };

package/dist/nanoid.js

@@ -0,0 +1,28 @@
+// nanoid.js
+import { customAlphabet } from "nanoid";
+var nanoid = customAlphabet("0123456789abcdefghijklmnopqrstuvwxyz", 8);
+var DEFAULT_MAX_RETRIES = 5;
+var retry = async ({
+  field,
+  operation,
+  maxRetries = DEFAULT_MAX_RETRIES
+}) => {
+  var _a;
+  for (let attempt = 0; attempt < maxRetries; attempt++) {
+    try {
+      return await operation(nanoid());
+    } catch (error) {
+      const isCollision = (error == null ? void 0 : error.code) === 11e3 && ((_a = error == null ? void 0 : error.keyPattern) == null ? void 0 : _a[field]);
+      if (!isCollision || attempt === maxRetries - 1) {
+        throw error;
+      }
+      ;
+    }
+    ;
+  }
+  ;
+};
+export {
+  nanoid,
+  retry
+};

package/package.json

@@ -1,8 +1,6 @@
 {
   "type": "module",
   "dependencies": {
-    "@kinde/jwt-decoder": "0.2.1",
-    "@kinde/jwt-validator": "0.4.1",
     "axios": "1.16.0",
     "currency-codes": "2.2.0",
     "nanoid": "3.3.8",
@@ -20,11 +18,6 @@
       "import": "./dist/encrypt.js",
       "require": "./dist/encrypt.cjs"
     },
-    "./kinde": {
-      "types": "./dist/kinde.d.ts",
-      "import": "./dist/kinde.js",
-      "require": "./dist/kinde.cjs"
-    },
     "./axios": {
       "types": "./dist/axios.d.ts",
       "import": "./dist/axios.js",
@@ -39,6 +32,11 @@
       "types": "./dist/upload.d.ts",
       "import": "./dist/upload.js",
       "require": "./dist/upload.cjs"
+    },
+    "./nanoid": {
+      "types": "./dist/nanoid.d.ts",
+      "import": "./dist/nanoid.js",
+      "require": "./dist/nanoid.cjs"
     }
   },
   "files": [
@@ -55,5 +53,5 @@
     "build": "tsup && npm publish"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.7"
+  "version": "0.0.9"
 }

package/dist/kinde.cjs

@@ -1,56 +0,0 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// kinde.js
-var kinde_exports = {};
-__export(kinde_exports, {
-  verifyToken: () => verifyToken
-});
-module.exports = __toCommonJS(kinde_exports);
-var import_jwt_decoder = require("@kinde/jwt-decoder");
-var import_jwt_validator = require("@kinde/jwt-validator");
-var normalizeDomain = (raw) => {
-  const trimmed = (raw || "").trim().replace(/\/+$/, "");
-  if (!trimmed) return trimmed;
-  return /^https?:\/\//.test(trimmed) ? trimmed : "https://" + trimmed;
-};
-var verifyToken = async (rawToken, { domain } = {}) => {
-  if (!rawToken) {
-    throw new Error("No token");
-  }
-  ;
-  const token = rawToken.startsWith("Bearer ") ? rawToken.slice(7) : rawToken;
-  const validation = await (0, import_jwt_validator.validateToken)({
-    domain: normalizeDomain(domain),
-    token
-  });
-  if (!(validation == null ? void 0 : validation.valid)) {
-    throw new Error((validation == null ? void 0 : validation.message) || "Invalid token");
-  }
-  ;
-  const decoded = (0, import_jwt_decoder.jwtDecoder)(token);
-  if (!(decoded == null ? void 0 : decoded.sub)) {
-    throw new Error("Invalid token payload");
-  }
-  ;
-  return decoded;
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  verifyToken
-});

package/dist/kinde.d.cts

@@ -1,52 +0,0 @@
-import { jwtDecoder } from '@kinde/jwt-decoder';
-import { validateToken } from '@kinde/jwt-validator';
-
-const normalizeDomain = ( raw ) => {
-
-	const trimmed = ( raw || '' ).trim().replace( /\/+$/, '' );
-
-	if( ! trimmed ) return trimmed;
-
-	return /^https?:\/\//.test( trimmed ) ? trimmed : 'https://' + trimmed;
-
-};
-
-// Verifies a Kinde access token cryptographically via JWKS and returns the decoded
-// payload. Throws on any failure (missing/invalid signature, missing sub claim, etc.).
-// Caller does user lookup + service-specific glue around this.
-//
-//   const decoded = await verifyToken( token, { domain : process.env.KINDE_DOMAIN } );
-//   decoded.sub                // Kinde user id
-//   decoded.org_code           // org code
-//   decoded.permissions        // permissions array
-const verifyToken = async ( rawToken, { domain } = {} ) => {
-
-	if( ! rawToken ){
-
-		throw new Error( 'No token' );
-
-	}
-	const token = rawToken.startsWith( 'Bearer ' ) ? rawToken.slice( 7 ) : rawToken;
-
-	const validation = await validateToken({
-		domain : normalizeDomain( domain ),
-		token
-	});
-
-	if( ! validation?.valid ){
-
-		throw new Error( validation?.message || 'Invalid token' );
-
-	}
-	const decoded = jwtDecoder( token );
-
-	if( ! decoded?.sub ){
-
-		throw new Error( 'Invalid token payload' );
-
-	}
-	return decoded;
-
-};
-
-export { verifyToken };

package/dist/kinde.d.ts

@@ -1,52 +0,0 @@
-import { jwtDecoder } from '@kinde/jwt-decoder';
-import { validateToken } from '@kinde/jwt-validator';
-
-const normalizeDomain = ( raw ) => {
-
-	const trimmed = ( raw || '' ).trim().replace( /\/+$/, '' );
-
-	if( ! trimmed ) return trimmed;
-
-	return /^https?:\/\//.test( trimmed ) ? trimmed : 'https://' + trimmed;
-
-};
-
-// Verifies a Kinde access token cryptographically via JWKS and returns the decoded
-// payload. Throws on any failure (missing/invalid signature, missing sub claim, etc.).
-// Caller does user lookup + service-specific glue around this.
-//
-//   const decoded = await verifyToken( token, { domain : process.env.KINDE_DOMAIN } );
-//   decoded.sub                // Kinde user id
-//   decoded.org_code           // org code
-//   decoded.permissions        // permissions array
-const verifyToken = async ( rawToken, { domain } = {} ) => {
-
-	if( ! rawToken ){
-
-		throw new Error( 'No token' );
-
-	}
-	const token = rawToken.startsWith( 'Bearer ' ) ? rawToken.slice( 7 ) : rawToken;
-
-	const validation = await validateToken({
-		domain : normalizeDomain( domain ),
-		token
-	});
-
-	if( ! validation?.valid ){
-
-		throw new Error( validation?.message || 'Invalid token' );
-
-	}
-	const decoded = jwtDecoder( token );
-
-	if( ! decoded?.sub ){
-
-		throw new Error( 'Invalid token payload' );
-
-	}
-	return decoded;
-
-};
-
-export { verifyToken };

package/dist/kinde.js

@@ -1,32 +0,0 @@
-// kinde.js
-import { jwtDecoder } from "@kinde/jwt-decoder";
-import { validateToken } from "@kinde/jwt-validator";
-var normalizeDomain = (raw) => {
-  const trimmed = (raw || "").trim().replace(/\/+$/, "");
-  if (!trimmed) return trimmed;
-  return /^https?:\/\//.test(trimmed) ? trimmed : "https://" + trimmed;
-};
-var verifyToken = async (rawToken, { domain } = {}) => {
-  if (!rawToken) {
-    throw new Error("No token");
-  }
-  ;
-  const token = rawToken.startsWith("Bearer ") ? rawToken.slice(7) : rawToken;
-  const validation = await validateToken({
-    domain: normalizeDomain(domain),
-    token
-  });
-  if (!(validation == null ? void 0 : validation.valid)) {
-    throw new Error((validation == null ? void 0 : validation.message) || "Invalid token");
-  }
-  ;
-  const decoded = jwtDecoder(token);
-  if (!(decoded == null ? void 0 : decoded.sub)) {
-    throw new Error("Invalid token payload");
-  }
-  ;
-  return decoded;
-};
-export {
-  verifyToken
-};