@fastxyz/fastid-sdk 0.1.0

package/dist/report.js

@@ -0,0 +1,255 @@
+import { IndeterminateReportSubmissionError, InvalidReportError, LocalVerificationError, ReportBodyTooLargeError, ReportCiphertextTooLargeError, ReportConfigError, ReportRejectedError, ReportSealError, SigningError, } from "./errors.js";
+import { anonymousEnvelope, attributionMessage, formatReceivedHour, hourUnixSecs, HPKE_INFO, HPKE_SUITE, reportAad, sealToRecipients, signedEnvelope, } from "./report-wire.js";
+import { verifyStrict } from "./verify.js";
+export const REPORT_BODY_LIMIT = 2 * 1024 * 1024;
+export const REPORT_CIPHERTEXT_LIMIT = 64 * 1024;
+export const REPORT_TEXT_MAX = 2_000;
+const HPKE_AEAD_TAG_BYTES = 16;
+function isObject(value) {
+    return typeof value === "object" && value !== null;
+}
+function isReportConfig(value) {
+    if (!isObject(value) || !Array.isArray(value.areas) || !isObject(value.hpke)) {
+        return false;
+    }
+    return (value.areas.every((area) => typeof area === "string") &&
+        value.hpke.suite === HPKE_SUITE &&
+        value.hpke.info === HPKE_INFO &&
+        Array.isArray(value.recipients) &&
+        value.recipients.length > 0 &&
+        value.recipients.length <= 8 &&
+        value.recipients.every((recipient) => isObject(recipient) &&
+            typeof recipient.key_id === "string" &&
+            recipient.key_id.length >= 1 &&
+            recipient.key_id.length <= 64 &&
+            /^[\x21-\x7e]+$/.test(recipient.key_id) &&
+            typeof recipient.public_key === "string" &&
+            /^[0-9a-f]{64}$/.test(recipient.public_key)));
+}
+function codePoints(value) {
+    return [...value].length;
+}
+function isOptionalString(value) {
+    return value === undefined || typeof value === "string";
+}
+function snapshotReportInput(value) {
+    const reason = "report input is malformed or exceeds protocol limits";
+    if (!isObject(value))
+        throw new InvalidReportError(reason);
+    let fields;
+    try {
+        fields = {
+            area: value.area,
+            whatHappened: value.whatHappened,
+            whatExpected: value.whatExpected,
+            severity: value.severity,
+            page: value.page,
+            attribution: value.attribution,
+            connectionId: value.connectionId,
+            viewport: value.viewport,
+            locale: value.locale,
+            at: value.at,
+        };
+    }
+    catch {
+        throw new InvalidReportError(reason);
+    }
+    const { area, whatHappened, whatExpected, severity, page, attribution, connectionId, viewport, locale, at, } = fields;
+    if (typeof area !== "string" ||
+        typeof whatHappened !== "string" ||
+        typeof whatExpected !== "string" ||
+        (severity !== "blocked" &&
+            severity !== "annoying" &&
+            severity !== "cosmetic") ||
+        typeof page !== "string" ||
+        (attribution !== "anonymous" && attribution !== "signed") ||
+        !isOptionalString(connectionId) ||
+        !isOptionalString(viewport) ||
+        !isOptionalString(locale)) {
+        throw new InvalidReportError(reason);
+    }
+    let atMs;
+    try {
+        atMs =
+            at === undefined
+                ? Date.now()
+                : at instanceof Date
+                    ? at.getTime()
+                    : Number.NaN;
+    }
+    catch {
+        throw new InvalidReportError(reason);
+    }
+    if (!Number.isFinite(atMs) ||
+        whatHappened.trim().length === 0 ||
+        codePoints(whatHappened) > REPORT_TEXT_MAX ||
+        codePoints(whatExpected) > REPORT_TEXT_MAX ||
+        new TextEncoder().encode(area).length > 0xff) {
+        throw new InvalidReportError(reason);
+    }
+    return {
+        area,
+        whatHappened,
+        whatExpected,
+        severity,
+        page,
+        attribution,
+        ...(connectionId !== undefined ? { connectionId } : {}),
+        ...(viewport !== undefined ? { viewport } : {}),
+        ...(locale !== undefined ? { locale } : {}),
+        at: new Date(atMs),
+    };
+}
+function anonymousPlaintext(input) {
+    return {
+        what_happened: input.whatHappened.trim(),
+        what_expected: input.whatExpected.trim(),
+        severity: input.severity,
+        diagnostics: { page: input.page },
+    };
+}
+function signedPlaintext(input) {
+    return {
+        what_happened: input.whatHappened.trim(),
+        what_expected: input.whatExpected.trim(),
+        severity: input.severity,
+        diagnostics: {
+            page: input.page,
+            ...(input.connectionId !== undefined
+                ? { connection_id: input.connectionId }
+                : {}),
+            ...(input.viewport !== undefined ? { viewport: input.viewport } : {}),
+            ...(input.locale !== undefined ? { locale: input.locale } : {}),
+        },
+    };
+}
+/** Internal exact-byte guard for the backend's serialized request ceiling. */
+export function serializeReportEnvelope(envelope) {
+    const serialized = JSON.stringify(envelope);
+    const serializedBytes = new TextEncoder().encode(serialized).byteLength;
+    if (serializedBytes > REPORT_BODY_LIMIT) {
+        throw new ReportBodyTooLargeError(serializedBytes, REPORT_BODY_LIMIT);
+    }
+    return serialized;
+}
+export class ReportService {
+    #config;
+    #signer;
+    #fetch;
+    constructor(options) {
+        this.#config = options.config;
+        this.#signer = options.signer;
+        this.#fetch = options.fetchImpl;
+    }
+    async submitReport(input) {
+        const snapshot = snapshotReportInput(input);
+        const receivedHour = formatReceivedHour(snapshot.at);
+        const currentHour = Date.parse(formatReceivedHour(new Date()));
+        const receivedHourMs = Date.parse(receivedHour);
+        if (!Number.isFinite(receivedHourMs) ||
+            Math.abs(receivedHourMs - currentHour) > 60 * 60 * 1_000) {
+            throw new InvalidReportError("report hour is outside the accepted one-hour window");
+        }
+        const config = await this.#loadConfig();
+        if (!config.areas.includes(snapshot.area)) {
+            throw new InvalidReportError("area is not offered by the report service");
+        }
+        const plaintext = new TextEncoder().encode(JSON.stringify(snapshot.attribution === "signed"
+            ? signedPlaintext(snapshot)
+            : anonymousPlaintext(snapshot)));
+        const predictedCiphertextBytes = plaintext.byteLength + HPKE_AEAD_TAG_BYTES;
+        if (predictedCiphertextBytes > REPORT_CIPHERTEXT_LIMIT) {
+            throw new ReportCiphertextTooLargeError(predictedCiphertextBytes, REPORT_CIPHERTEXT_LIMIT, config.recipients[0].key_id);
+        }
+        let seals;
+        try {
+            seals = await sealToRecipients(config.recipients, plaintext, reportAad(snapshot.area, receivedHour));
+        }
+        catch (cause) {
+            throw new ReportSealError({ cause });
+        }
+        for (const seal of seals) {
+            const ciphertextBytes = seal.ciphertext.length / 2;
+            if (ciphertextBytes > REPORT_CIPHERTEXT_LIMIT) {
+                throw new ReportCiphertextTooLargeError(ciphertextBytes, REPORT_CIPHERTEXT_LIMIT, seal.recipient_key_id);
+            }
+        }
+        let envelope;
+        if (snapshot.attribution === "anonymous") {
+            envelope = anonymousEnvelope(snapshot.area, receivedHour, seals);
+        }
+        else {
+            const message = attributionMessage(snapshot.area, hourUnixSecs(receivedHour), seals);
+            let signatureHex;
+            try {
+                signatureHex = await this.#signer.sign(message);
+            }
+            catch (cause) {
+                throw new SigningError({ cause });
+            }
+            if (!verifyStrict(message, signatureHex, this.#signer.publicKey)) {
+                throw new LocalVerificationError();
+            }
+            envelope = signedEnvelope(snapshot.area, receivedHour, seals, this.#signer.signerHex, signatureHex.toLowerCase());
+        }
+        const serialized = serializeReportEnvelope(envelope);
+        let response;
+        try {
+            response = await this.#fetch(`${this.#config.idOrigin}/api/report`, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: serialized,
+            });
+        }
+        catch (cause) {
+            throw new IndeterminateReportSubmissionError({ cause });
+        }
+        if (!response.ok) {
+            const reason = (await response.text().catch(() => "")) || undefined;
+            if (response.status >= 500 && response.status < 600) {
+                throw new IndeterminateReportSubmissionError({
+                    cause: new Error(`report intake returned HTTP ${response.status}${reason ? `: ${reason}` : ""}`),
+                });
+            }
+            throw new ReportRejectedError(response.status, reason);
+        }
+        let acknowledgement;
+        try {
+            acknowledgement = await response.json();
+        }
+        catch (cause) {
+            throw new IndeterminateReportSubmissionError({ cause });
+        }
+        if (response.status !== 200 ||
+            typeof acknowledgement !== "object" ||
+            acknowledgement === null ||
+            acknowledgement.status !== "stored" ||
+            Object.keys(acknowledgement).length !== 1) {
+            throw new IndeterminateReportSubmissionError();
+        }
+        return { status: "stored" };
+    }
+    async #loadConfig() {
+        let response;
+        try {
+            response = await this.#fetch(`${this.#config.idOrigin}/api/report/config`, { cache: "no-store" });
+        }
+        catch (cause) {
+            throw new ReportConfigError({ cause });
+        }
+        if (!response.ok)
+            throw new ReportConfigError(undefined, response.status);
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch (cause) {
+            throw new ReportConfigError({ cause });
+        }
+        if (!isReportConfig(body)) {
+            throw new ReportConfigError();
+        }
+        return body;
+    }
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,cAAc,GAGf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAmC/B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;QAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC;QAC5B,KAAK,CAAC,UAAU,CAAC,KAAK,CACpB,CAAC,SAAS,EAAE,EAAE,CACZ,QAAQ,CAAC,SAAS,CAAC;YACnB,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;YACpC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC;YAC5B,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;YAC7B,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACvC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;YACxC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAC9C,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,sDAAsD,CAAC;IACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3D,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,EACJ,IAAI,EACJ,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,EAAE,GACH,GAAG,MAAM,CAAC;IACX,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,OAAO,YAAY,KAAK,QAAQ;QAChC,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,QAAQ,KAAK,SAAS;YACrB,QAAQ,KAAK,UAAU;YACvB,QAAQ,KAAK,UAAU,CAAC;QAC1B,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ,CAAC;QACzD,CAAC,gBAAgB,CAAC,YAAY,CAAC;QAC/B,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAC3B,CAAC,gBAAgB,CAAC,MAAM,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI;YACF,EAAE,KAAK,SAAS;gBACd,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACZ,CAAC,CAAC,EAAE,YAAY,IAAI;oBAClB,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE;oBACd,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAChC,UAAU,CAAC,YAAY,CAAC,GAAG,eAAe;QAC1C,UAAU,CAAC,YAAY,CAAC,GAAG,eAAe;QAC1C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,EAC5C,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO;QACL,IAAI;QACJ,YAAY;QACZ,YAAY;QACZ,QAAQ;QACR,IAAI;QACJ,WAAW;QACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAwB;IAClD,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QACxC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QACxC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,QAAsB;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;IACxE,IAAI,eAAe,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,OAAO,aAAa;IACf,OAAO,CAAkB;IACzB,OAAO,CAAS;IAChB,MAAM,CAAe;IAE9B,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwB;QACzC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EACxD,CAAC;YACD,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,IAAI,CAAC,SAAS,CACZ,QAAQ,CAAC,WAAW,KAAK,QAAQ;YAC/B,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CACjC,CACF,CAAC;QACF,MAAM,wBAAwB,GAAG,SAAS,CAAC,UAAU,GAAG,mBAAmB,CAAC;QAC5E,IAAI,wBAAwB,GAAG,uBAAuB,EAAE,CAAC;YACvD,MAAM,IAAI,6BAA6B,CACrC,wBAAwB,EACxB,uBAAuB,EACvB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,KAAmD,CAAC;QACxD,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,gBAAgB,CAC5B,MAAM,CAAC,UAAU,EACjB,SAAS,EACT,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CACvC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;YACnD,IAAI,eAAe,GAAG,uBAAuB,EAAE,CAAC;gBAC9C,MAAM,IAAI,6BAA6B,CACrC,eAAe,EACf,uBAAuB,EACvB,IAAI,CAAC,gBAAgB,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,QAAsB,CAAC;QAC3B,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,kBAAkB,CAChC,QAAQ,CAAC,IAAI,EACb,YAAY,CAAC,YAAY,CAAC,EAC1B,KAAK,CACN,CAAC;YACF,IAAI,YAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,sBAAsB,EAAE,CAAC;YACrC,CAAC;YACD,QAAQ,GAAG,cAAc,CACvB,QAAQ,CAAC,IAAI,EACb,YAAY,EACZ,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,YAAY,CAAC,WAAW,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,aAAa,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,MAAM,IAAI,kCAAkC,CAAC;oBAC3C,KAAK,EAAE,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;iBACjG,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,eAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,OAAO,eAAe,KAAK,QAAQ;YACnC,eAAe,KAAK,IAAI;YACvB,eAAwC,CAAC,MAAM,KAAK,QAAQ;YAC7D,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,EACzC,CAAC;YACD,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAC1B,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,oBAAoB,EAC5C,EAAE,KAAK,EAAE,UAAU,EAAE,CACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/share.d.ts

@@ -0,0 +1,9 @@
+import type { IdNetworkConfig } from "./networks.js";
+export declare class ShareLinks {
+    private readonly config;
+    constructor(config: IdNetworkConfig);
+    profileUrl(identity: string): string;
+    idJsonUrl(identity: string): string;
+    ogImageUrl(identity: string): string;
+}
+//# sourceMappingURL=share.d.ts.map

package/dist/share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../src/share.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,eAAe;IAEpD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIpC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAInC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;CAGrC"}

package/dist/share.js

@@ -0,0 +1,16 @@
+export class ShareLinks {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    profileUrl(identity) {
+        return `${this.config.idOrigin}/${encodeURIComponent(identity)}`;
+    }
+    idJsonUrl(identity) {
+        return `${this.profileUrl(identity)}/id.json`;
+    }
+    ogImageUrl(identity) {
+        return `${this.profileUrl(identity)}/opengraph-image`;
+    }
+}
+//# sourceMappingURL=share.js.map

package/dist/share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.js","sourceRoot":"","sources":["../src/share.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAExD,UAAU,CAAC,QAAgB;QACzB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnE,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;IAChD,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACxD,CAAC;CACF"}

package/dist/signer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Signing seam for IdClient. It is intentionally small so an account managed
+ * by another Fast SDK can adapt to it without changing the protocol pipeline.
+ */
+export interface Signer {
+    readonly address: string;
+    readonly signerHex: string;
+    readonly publicKey: Uint8Array;
+    sign(bytes: Uint8Array): Promise<string>;
+}
+/** Validate and snapshot the three public representations exposed by a signer adapter. */
+export declare function validatedSigner(signer: Signer): Signer;
+export declare class KeySigner implements Signer {
+    #private;
+    readonly address: string;
+    readonly signerHex: string;
+    private constructor();
+    get publicKey(): Uint8Array;
+    static fromPrivateKey(input: Uint8Array | string): Promise<KeySigner>;
+    static generate(): Promise<KeySigner>;
+    sign(bytes: Uint8Array): Promise<string>;
+}
+//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BtD;AAeD,qBAAa,SAAU,YAAW,MAAM;;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAI3B,OAAO;IAOP,IAAI,SAAS,IAAI,UAAU,CAE1B;WAEY,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;WAO9D,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAIrC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;CAI/C"}

package/dist/signer.js

@@ -0,0 +1,73 @@
+import * as ed from "@noble/ed25519";
+import { toFastAddress } from "@fastxyz/sdk";
+import { toHex } from "./address.js";
+import { InvalidSignerError } from "./errors.js";
+import { ensureEd25519Sync, hexToBytes } from "./verify.js";
+/** Validate and snapshot the three public representations exposed by a signer adapter. */
+export function validatedSigner(signer) {
+    const publicKey = signer.publicKey;
+    if (!(publicKey instanceof Uint8Array) || publicKey.length !== 32) {
+        throw new InvalidSignerError();
+    }
+    const snapshot = new Uint8Array(publicKey);
+    const signerHex = signer.signerHex;
+    const address = signer.address;
+    if (!/^[0-9a-f]{64}$/.test(signerHex) ||
+        toHex(snapshot) !== signerHex ||
+        toFastAddress(snapshot) !== address) {
+        throw new InvalidSignerError();
+    }
+    return Object.freeze({
+        address,
+        signerHex,
+        publicKey: snapshot,
+        sign: async (bytes) => {
+            const raw = await signer.sign(new Uint8Array(bytes));
+            if (typeof raw !== "string" || !/^(?:0x)?[0-9a-f]{128}$/i.test(raw)) {
+                throw new InvalidSignerError();
+            }
+            return raw.replace(/^0x/i, "").toLowerCase();
+        },
+    });
+}
+function parsePrivateKey(input) {
+    if (typeof input === "string") {
+        if (!/^[0-9a-f]{64}$/i.test(input)) {
+            throw new Error("private key must be a bare 64-hex string");
+        }
+        return hexToBytes(input);
+    }
+    if (!(input instanceof Uint8Array) || input.length !== 32) {
+        throw new Error("private key must be exactly 32 bytes");
+    }
+    return new Uint8Array(input);
+}
+export class KeySigner {
+    address;
+    signerHex;
+    #privateKey;
+    #publicKey;
+    constructor(privateKey, publicKey) {
+        this.#privateKey = privateKey;
+        this.#publicKey = publicKey;
+        this.signerHex = toHex(publicKey);
+        this.address = toFastAddress(publicKey);
+    }
+    get publicKey() {
+        return new Uint8Array(this.#publicKey);
+    }
+    static async fromPrivateKey(input) {
+        const privateKey = parsePrivateKey(input);
+        ensureEd25519Sync();
+        const publicKey = ed.getPublicKey(privateKey);
+        return new KeySigner(privateKey, publicKey);
+    }
+    static async generate() {
+        return KeySigner.fromPrivateKey(ed.utils.randomPrivateKey());
+    }
+    async sign(bytes) {
+        ensureEd25519Sync();
+        return toHex(ed.sign(new Uint8Array(bytes), this.#privateKey));
+    }
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAa5D,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QACjC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;QAC7B,aAAa,CAAC,QAAQ,CAAC,KAAK,OAAO,EACnC,CAAC;QACD,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,SAAS;QACT,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,KAAK,EAAE,KAAiB,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,SAAS;IACX,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,WAAW,CAAa;IACxB,UAAU,CAAa;IAEhC,YAAoB,UAAsB,EAAE,SAAqB;QAC/D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,KAA0B;QACpD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,iBAAiB,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ;QACnB,OAAO,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,iBAAiB,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/verify.d.ts

@@ -0,0 +1,6 @@
+/** Noble v2 requires SHA-512 wiring for every synchronous signing operation. */
+export declare function ensureEd25519Sync(): void;
+export declare function hexToBytes(hex: string): Uint8Array;
+/** Strict Ed25519 verification matching dalek `verify_strict`. */
+export declare function verifyStrict(message: Uint8Array, signatureHex: string, publicKey: Uint8Array): boolean;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAGA,gFAAgF;AAChF,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAUlD;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAC1B,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,UAAU,GACpB,OAAO,CAST"}

package/dist/verify.js

@@ -0,0 +1,33 @@
+import * as ed from "@noble/ed25519";
+import { sha512 } from "@noble/hashes/sha2";
+/** Noble v2 requires SHA-512 wiring for every synchronous signing operation. */
+export function ensureEd25519Sync() {
+    if (typeof ed.etc.sha512Sync !== "function") {
+        ed.etc.sha512Sync = (...messages) => sha512(ed.etc.concatBytes(...messages));
+    }
+}
+export function hexToBytes(hex) {
+    const clean = hex.replace(/^0x/i, "");
+    if (clean.length % 2 !== 0 || !/^[0-9a-f]*$/i.test(clean)) {
+        throw new Error("bad hex");
+    }
+    const output = new Uint8Array(clean.length / 2);
+    for (let index = 0; index < output.length; index += 1) {
+        output[index] = Number.parseInt(clean.slice(index * 2, index * 2 + 2), 16);
+    }
+    return output;
+}
+/** Strict Ed25519 verification matching dalek `verify_strict`. */
+export function verifyStrict(message, signatureHex, publicKey) {
+    try {
+        ensureEd25519Sync();
+        const signature = hexToBytes(signatureHex);
+        if (signature.length !== 64 || publicKey.length !== 32)
+            return false;
+        return ed.verify(signature, message, publicKey, { zip215: false });
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,iBAAiB;IAC/B,IAAI,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5C,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,QAAsB,EAAE,EAAE,CAChD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAC1B,OAAmB,EACnB,YAAoB,EACpB,SAAqB;IAErB,IAAI,CAAC;QACH,iBAAiB,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACrE,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@fastxyz/fastid-sdk",
+  "version": "0.1.0",
+  "description": "Programmatic client for id.fast.xyz — everything a non-admin user can do, for agents",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fastxyz/fast-sdk.git",
+    "directory": "packages/fastid-sdk"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "sideEffects": false,
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20.19.0"
+  },
+  "dependencies": {
+    "@hpke/core": "^1.9.0",
+    "@noble/ed25519": "^2.1.0",
+    "@noble/hashes": "^1.5.0",
+    "effect": "^3.21.0",
+    "tr46": "6.0.0",
+    "@fastxyz/schema": "2.0.0",
+    "@fastxyz/sdk": "2.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "@types/tr46": "5.0.1",
+    "typescript": "^5",
+    "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "prebuild": "node scripts/package-artifact.mjs clean",
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "smoke:package": "node scripts/package-consumer.mjs"
+  }
+}