@forge-connect/server 0.1.0

package/dist/index.cjs

@@ -0,0 +1,222 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ForgeConnectError: () => ForgeConnectError,
+  ForgeConnectServer: () => ForgeConnectServer,
+  JWKSVerifier: () => JWKSVerifier,
+  TokenExpiredError: () => TokenExpiredError,
+  TokenInvalidError: () => TokenInvalidError
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/jwt.ts
+var import_jose = require("jose");
+
+// src/errors.ts
+var ForgeConnectError = class _ForgeConnectError extends Error {
+  status;
+  code;
+  details;
+  constructor(status, code, message, details) {
+    super(message);
+    this.name = "ForgeConnectError";
+    this.status = status;
+    this.code = code;
+    this.details = details;
+  }
+  static fromResponse(status, body) {
+    const { code, message, details } = body.error;
+    if (status === 401 && message.toLowerCase().includes("expired")) {
+      return new TokenExpiredError(message);
+    }
+    if (status === 401) {
+      return new TokenInvalidError(message);
+    }
+    return new _ForgeConnectError(status, code, message, details);
+  }
+};
+var TokenExpiredError = class extends ForgeConnectError {
+  constructor(message = "Token has expired") {
+    super(401, "TOKEN_EXPIRED", message);
+    this.name = "TokenExpiredError";
+  }
+};
+var TokenInvalidError = class extends ForgeConnectError {
+  constructor(message = "Token is invalid") {
+    super(401, "TOKEN_INVALID", message);
+    this.name = "TokenInvalidError";
+  }
+};
+
+// src/jwt.ts
+var JWKSVerifier = class {
+  jwks;
+  constructor(apiUrl) {
+    const jwksUrl = new URL("/.well-known/jwks.json", apiUrl);
+    this.jwks = (0, import_jose.createRemoteJWKSet)(jwksUrl);
+  }
+  async verify(token) {
+    let result;
+    try {
+      result = await (0, import_jose.jwtVerify)(token, this.jwks, {
+        algorithms: ["RS256"]
+      });
+    } catch (err) {
+      if (err instanceof Error && err.message.includes("exp")) {
+        throw new TokenExpiredError();
+      }
+      throw new TokenInvalidError();
+    }
+    const payload = result.payload;
+    return {
+      sub: payload.sub,
+      tid: payload.tid,
+      scopes: payload.scopes ?? [],
+      iat: payload.iat,
+      exp: payload.exp
+    };
+  }
+};
+
+// src/http.ts
+async function request(url, options = {}) {
+  const { method = "GET", headers = {}, body } = options;
+  const res = await fetch(url, {
+    method,
+    headers: {
+      "Content-Type": "application/json",
+      ...headers
+    },
+    body: body ? JSON.stringify(body) : void 0
+  });
+  if (!res.ok) {
+    let errorBody;
+    try {
+      errorBody = await res.json();
+    } catch {
+      throw new ForgeConnectError(res.status, "UNKNOWN", res.statusText);
+    }
+    throw ForgeConnectError.fromResponse(res.status, errorBody);
+  }
+  return res.json();
+}
+
+// src/client.ts
+var ForgeConnectServer = class {
+  apiUrl;
+  serviceKey;
+  jwks;
+  constructor(config) {
+    this.apiUrl = config.apiUrl.replace(/\/+$/, "");
+    this.serviceKey = config.serviceKey;
+    this.jwks = new JWKSVerifier(this.apiUrl);
+  }
+  // ── Token Verification ──
+  /**
+   * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).
+   * Use this in middleware for every request.
+   */
+  async verifyToken(token) {
+    return this.jwks.verify(token);
+  }
+  /**
+   * Verify a token via the ForgeConnect `/service/verify-token` endpoint.
+   * Slower but checks session revocation server-side.
+   */
+  async verifyTokenRemote(token) {
+    return request(`${this.apiUrl}/service/verify-token`, {
+      method: "POST",
+      headers: { "x-service-key": this.serviceKey },
+      body: { token }
+    });
+  }
+  // ── Service Operations ──
+  /**
+   * Look up a user ID by wallet address.
+   */
+  async getUserByWallet(address, chain = "solana") {
+    return request(`${this.apiUrl}/service/user-by-wallet`, {
+      method: "POST",
+      headers: { "x-service-key": this.serviceKey },
+      body: { walletAddress: address, chain }
+    });
+  }
+  // ── Admin Operations ──
+  /**
+   * List users with pagination and optional search.
+   */
+  async listUsers(params = {}) {
+    const query = new URLSearchParams();
+    if (params.page) query.set("page", String(params.page));
+    if (params.limit) query.set("limit", String(params.limit));
+    if (params.search) query.set("search", params.search);
+    const qs = query.toString();
+    return request(
+      `${this.apiUrl}/admin/users${qs ? `?${qs}` : ""}`,
+      { headers: { "x-service-key": this.serviceKey } }
+    );
+  }
+  /**
+   * Get a single user by ID, including auth methods and wallets.
+   */
+  async getUser(userId) {
+    return request(`${this.apiUrl}/admin/users/${userId}`, {
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+  /**
+   * Update a user's status (active, suspended, deleted).
+   */
+  async updateUserStatus(userId, status) {
+    await request(`${this.apiUrl}/admin/users/${userId}/status`, {
+      method: "PATCH",
+      headers: { "x-service-key": this.serviceKey },
+      body: { status }
+    });
+  }
+  /**
+   * Get all sessions for a user.
+   */
+  async getUserSessions(userId) {
+    return request(`${this.apiUrl}/admin/users/${userId}/sessions`, {
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+  /**
+   * Revoke all sessions for a user.
+   */
+  async revokeUserSessions(userId) {
+    await request(`${this.apiUrl}/admin/users/${userId}/sessions`, {
+      method: "DELETE",
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ForgeConnectError,
+  ForgeConnectServer,
+  JWKSVerifier,
+  TokenExpiredError,
+  TokenInvalidError
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/jwt.ts","../src/errors.ts","../src/http.ts","../src/client.ts"],"sourcesContent":["export { ForgeConnectServer } from './client';\nexport { JWKSVerifier } from './jwt';\nexport { ForgeConnectError, TokenExpiredError, TokenInvalidError } from './errors';\nexport type {\n  ForgeConnectServerConfig,\n  JWTPayload,\n  User,\n  UserWithRelations,\n  AuthMethod,\n  AuthProvider,\n  Wallet,\n  Chain,\n  Session,\n  PaginatedResponse,\n  VerifyTokenResponse,\n  UserByWalletResponse,\n  ListUsersParams,\n  ApiErrorBody,\n} from './types';\n","import { createRemoteJWKSet, jwtVerify, type JWTVerifyResult } from 'jose';\nimport type { JWTPayload } from './types';\nimport { TokenExpiredError, TokenInvalidError } from './errors';\n\nexport class JWKSVerifier {\n  private jwks: ReturnType<typeof createRemoteJWKSet>;\n\n  constructor(apiUrl: string) {\n    const jwksUrl = new URL('/.well-known/jwks.json', apiUrl);\n    this.jwks = createRemoteJWKSet(jwksUrl);\n  }\n\n  async verify(token: string): Promise<JWTPayload> {\n    let result: JWTVerifyResult;\n    try {\n      result = await jwtVerify(token, this.jwks, {\n        algorithms: ['RS256'],\n      });\n    } catch (err: unknown) {\n      if (err instanceof Error && err.message.includes('exp')) {\n        throw new TokenExpiredError();\n      }\n      throw new TokenInvalidError();\n    }\n\n    const payload = result.payload as unknown as JWTPayload;\n    return {\n      sub: payload.sub,\n      tid: payload.tid,\n      scopes: payload.scopes ?? [],\n      iat: payload.iat,\n      exp: payload.exp,\n    };\n  }\n}\n","import type { ApiErrorBody } from './types';\n\nexport class ForgeConnectError extends Error {\n  public readonly status: number;\n  public readonly code: string;\n  public readonly details?: unknown[];\n\n  constructor(status: number, code: string, message: string, details?: unknown[]) {\n    super(message);\n    this.name = 'ForgeConnectError';\n    this.status = status;\n    this.code = code;\n    this.details = details;\n  }\n\n  static fromResponse(status: number, body: ApiErrorBody): ForgeConnectError {\n    const { code, message, details } = body.error;\n    if (status === 401 && message.toLowerCase().includes('expired')) {\n      return new TokenExpiredError(message);\n    }\n    if (status === 401) {\n      return new TokenInvalidError(message);\n    }\n    return new ForgeConnectError(status, code, message, details);\n  }\n}\n\nexport class TokenExpiredError extends ForgeConnectError {\n  constructor(message = 'Token has expired') {\n    super(401, 'TOKEN_EXPIRED', message);\n    this.name = 'TokenExpiredError';\n  }\n}\n\nexport class TokenInvalidError extends ForgeConnectError {\n  constructor(message = 'Token is invalid') {\n    super(401, 'TOKEN_INVALID', message);\n    this.name = 'TokenInvalidError';\n  }\n}\n","import type { ApiErrorBody } from './types';\nimport { ForgeConnectError } from './errors';\n\nexport interface HttpOptions {\n  method?: string;\n  headers?: Record<string, string>;\n  body?: unknown;\n}\n\nexport async function request<T>(url: string, options: HttpOptions = {}): Promise<T> {\n  const { method = 'GET', headers = {}, body } = options;\n\n  const res = await fetch(url, {\n    method,\n    headers: {\n      'Content-Type': 'application/json',\n      ...headers,\n    },\n    body: body ? JSON.stringify(body) : undefined,\n  });\n\n  if (!res.ok) {\n    let errorBody: ApiErrorBody;\n    try {\n      errorBody = await res.json() as ApiErrorBody;\n    } catch {\n      throw new ForgeConnectError(res.status, 'UNKNOWN', res.statusText);\n    }\n    throw ForgeConnectError.fromResponse(res.status, errorBody);\n  }\n\n  return res.json() as Promise<T>;\n}\n","import type {\n  ForgeConnectServerConfig,\n  JWTPayload,\n  VerifyTokenResponse,\n  UserByWalletResponse,\n  PaginatedResponse,\n  User,\n  UserWithRelations,\n  Session,\n  Chain,\n  ListUsersParams,\n} from './types';\nimport { JWKSVerifier } from './jwt';\nimport { request } from './http';\n\nexport class ForgeConnectServer {\n  private readonly apiUrl: string;\n  private readonly serviceKey: string;\n  private readonly jwks: JWKSVerifier;\n\n  constructor(config: ForgeConnectServerConfig) {\n    this.apiUrl = config.apiUrl.replace(/\\/+$/, '');\n    this.serviceKey = config.serviceKey;\n    this.jwks = new JWKSVerifier(this.apiUrl);\n  }\n\n  // ── Token Verification ──\n\n  /**\n   * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).\n   * Use this in middleware for every request.\n   */\n  async verifyToken(token: string): Promise<JWTPayload> {\n    return this.jwks.verify(token);\n  }\n\n  /**\n   * Verify a token via the ForgeConnect `/service/verify-token` endpoint.\n   * Slower but checks session revocation server-side.\n   */\n  async verifyTokenRemote(token: string): Promise<VerifyTokenResponse> {\n    return request<VerifyTokenResponse>(`${this.apiUrl}/service/verify-token`, {\n      method: 'POST',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { token },\n    });\n  }\n\n  // ── Service Operations ──\n\n  /**\n   * Look up a user ID by wallet address.\n   */\n  async getUserByWallet(address: string, chain: Chain = 'solana'): Promise<UserByWalletResponse> {\n    return request<UserByWalletResponse>(`${this.apiUrl}/service/user-by-wallet`, {\n      method: 'POST',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { walletAddress: address, chain },\n    });\n  }\n\n  // ── Admin Operations ──\n\n  /**\n   * List users with pagination and optional search.\n   */\n  async listUsers(params: ListUsersParams = {}): Promise<PaginatedResponse<User>> {\n    const query = new URLSearchParams();\n    if (params.page) query.set('page', String(params.page));\n    if (params.limit) query.set('limit', String(params.limit));\n    if (params.search) query.set('search', params.search);\n    const qs = query.toString();\n\n    return request<PaginatedResponse<User>>(\n      `${this.apiUrl}/admin/users${qs ? `?${qs}` : ''}`,\n      { headers: { 'x-service-key': this.serviceKey } },\n    );\n  }\n\n  /**\n   * Get a single user by ID, including auth methods and wallets.\n   */\n  async getUser(userId: string): Promise<UserWithRelations> {\n    return request<UserWithRelations>(`${this.apiUrl}/admin/users/${userId}`, {\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n\n  /**\n   * Update a user's status (active, suspended, deleted).\n   */\n  async updateUserStatus(userId: string, status: 'active' | 'suspended' | 'deleted'): Promise<void> {\n    await request(`${this.apiUrl}/admin/users/${userId}/status`, {\n      method: 'PATCH',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { status },\n    });\n  }\n\n  /**\n   * Get all sessions for a user.\n   */\n  async getUserSessions(userId: string): Promise<Session[]> {\n    return request<Session[]>(`${this.apiUrl}/admin/users/${userId}/sessions`, {\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n\n  /**\n   * Revoke all sessions for a user.\n   */\n  async revokeUserSessions(userId: string): Promise<void> {\n    await request(`${this.apiUrl}/admin/users/${userId}/sessions`, {\n      method: 'DELETE',\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,kBAAoE;;;ACE7D,IAAM,oBAAN,MAAM,2BAA0B,MAAM;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EAEhB,YAAY,QAAgB,MAAc,SAAiB,SAAqB;AAC9E,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AACZ,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,OAAO,aAAa,QAAgB,MAAuC;AACzE,UAAM,EAAE,MAAM,SAAS,QAAQ,IAAI,KAAK;AACxC,QAAI,WAAW,OAAO,QAAQ,YAAY,EAAE,SAAS,SAAS,GAAG;AAC/D,aAAO,IAAI,kBAAkB,OAAO;AAAA,IACtC;AACA,QAAI,WAAW,KAAK;AAClB,aAAO,IAAI,kBAAkB,OAAO;AAAA,IACtC;AACA,WAAO,IAAI,mBAAkB,QAAQ,MAAM,SAAS,OAAO;AAAA,EAC7D;AACF;AAEO,IAAM,oBAAN,cAAgC,kBAAkB;AAAA,EACvD,YAAY,UAAU,qBAAqB;AACzC,UAAM,KAAK,iBAAiB,OAAO;AACnC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,kBAAkB;AAAA,EACvD,YAAY,UAAU,oBAAoB;AACxC,UAAM,KAAK,iBAAiB,OAAO;AACnC,SAAK,OAAO;AAAA,EACd;AACF;;;ADnCO,IAAM,eAAN,MAAmB;AAAA,EAChB;AAAA,EAER,YAAY,QAAgB;AAC1B,UAAM,UAAU,IAAI,IAAI,0BAA0B,MAAM;AACxD,SAAK,WAAO,gCAAmB,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,OAAoC;AAC/C,QAAI;AACJ,QAAI;AACF,eAAS,UAAM,uBAAU,OAAO,KAAK,MAAM;AAAA,QACzC,YAAY,CAAC,OAAO;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,UAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,KAAK,GAAG;AACvD,cAAM,IAAI,kBAAkB;AAAA,MAC9B;AACA,YAAM,IAAI,kBAAkB;AAAA,IAC9B;AAEA,UAAM,UAAU,OAAO;AACvB,WAAO;AAAA,MACL,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,MACb,QAAQ,QAAQ,UAAU,CAAC;AAAA,MAC3B,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,IACf;AAAA,EACF;AACF;;;AEzBA,eAAsB,QAAW,KAAa,UAAuB,CAAC,GAAe;AACnF,QAAM,EAAE,SAAS,OAAO,UAAU,CAAC,GAAG,KAAK,IAAI;AAE/C,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,GAAG;AAAA,IACL;AAAA,IACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EACtC,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,IAAI,KAAK;AAAA,IAC7B,QAAQ;AACN,YAAM,IAAI,kBAAkB,IAAI,QAAQ,WAAW,IAAI,UAAU;AAAA,IACnE;AACA,UAAM,kBAAkB,aAAa,IAAI,QAAQ,SAAS;AAAA,EAC5D;AAEA,SAAO,IAAI,KAAK;AAClB;;;ACjBO,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAAkC;AAC5C,SAAK,SAAS,OAAO,OAAO,QAAQ,QAAQ,EAAE;AAC9C,SAAK,aAAa,OAAO;AACzB,SAAK,OAAO,IAAI,aAAa,KAAK,MAAM;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAY,OAAoC;AACpD,WAAO,KAAK,KAAK,OAAO,KAAK;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAkB,OAA6C;AACnE,WAAO,QAA6B,GAAG,KAAK,MAAM,yBAAyB;AAAA,MACzE,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAgB,SAAiB,QAAe,UAAyC;AAC7F,WAAO,QAA8B,GAAG,KAAK,MAAM,2BAA2B;AAAA,MAC5E,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,eAAe,SAAS,MAAM;AAAA,IACxC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,SAA0B,CAAC,GAAqC;AAC9E,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,OAAO,KAAM,OAAM,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AACtD,QAAI,OAAO,MAAO,OAAM,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACzD,QAAI,OAAO,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,SAAS;AAE1B,WAAO;AAAA,MACL,GAAG,KAAK,MAAM,eAAe,KAAK,IAAI,EAAE,KAAK,EAAE;AAAA,MAC/C,EAAE,SAAS,EAAE,iBAAiB,KAAK,WAAW,EAAE;AAAA,IAClD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAQ,QAA4C;AACxD,WAAO,QAA2B,GAAG,KAAK,MAAM,gBAAgB,MAAM,IAAI;AAAA,MACxE,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,QAAgB,QAA2D;AAChG,UAAM,QAAQ,GAAG,KAAK,MAAM,gBAAgB,MAAM,WAAW;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,OAAO;AAAA,IACjB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,QAAoC;AACxD,WAAO,QAAmB,GAAG,KAAK,MAAM,gBAAgB,MAAM,aAAa;AAAA,MACzE,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAAmB,QAA+B;AACtD,UAAM,QAAQ,GAAG,KAAK,MAAM,gBAAgB,MAAM,aAAa;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,145 @@
+interface ForgeConnectServerConfig {
+    /** Base URL of the ForgeConnect API (e.g. "https://connect.forge.dev") */
+    apiUrl: string;
+    /** Service key for inter-service authentication */
+    serviceKey: string;
+}
+interface JWTPayload {
+    sub: string;
+    tid?: string;
+    scopes: string[];
+    iat?: number;
+    exp?: number;
+}
+interface User {
+    id: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    primaryEmail: string | null;
+    status: 'active' | 'suspended' | 'deleted' | 'guest';
+    createdAt: string;
+    updatedAt: string;
+}
+type AuthProvider = 'email' | 'google' | 'twitter' | 'discord' | 'apple' | 'solana_wallet' | 'ethereum_wallet';
+interface AuthMethod {
+    id: string;
+    provider: AuthProvider;
+    providerId: string;
+    isVerified: boolean;
+    verifiedAt: string | null;
+    createdAt: string;
+}
+type Chain = 'solana' | 'ethereum';
+interface Wallet {
+    id: string;
+    userId: string;
+    chain: Chain;
+    address: string;
+    label: string | null;
+    isPrimary: boolean;
+    verifiedAt: string | null;
+    lastUsedAt: string | null;
+}
+interface Session {
+    id: string;
+    createdAt: string;
+    expiresAt: string;
+    lastActiveAt: string;
+    deviceInfo: Record<string, unknown> | null;
+    ipAddress: string;
+}
+interface PaginatedResponse<T> {
+    data: T[];
+    page: number;
+    limit: number;
+    total: number;
+}
+interface VerifyTokenResponse {
+    active: true;
+    user_id: string;
+    tenant_id: string | null;
+    scopes: string[];
+}
+interface UserByWalletResponse {
+    user_id: string;
+}
+interface UserWithRelations extends User {
+    authMethods: AuthMethod[];
+    wallets: Wallet[];
+}
+interface ListUsersParams {
+    page?: number;
+    limit?: number;
+    search?: string;
+}
+interface ApiErrorBody {
+    success: false;
+    error: {
+        code: string;
+        message: string;
+        details?: unknown[];
+    };
+}
+
+declare class ForgeConnectServer {
+    private readonly apiUrl;
+    private readonly serviceKey;
+    private readonly jwks;
+    constructor(config: ForgeConnectServerConfig);
+    /**
+     * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).
+     * Use this in middleware for every request.
+     */
+    verifyToken(token: string): Promise<JWTPayload>;
+    /**
+     * Verify a token via the ForgeConnect `/service/verify-token` endpoint.
+     * Slower but checks session revocation server-side.
+     */
+    verifyTokenRemote(token: string): Promise<VerifyTokenResponse>;
+    /**
+     * Look up a user ID by wallet address.
+     */
+    getUserByWallet(address: string, chain?: Chain): Promise<UserByWalletResponse>;
+    /**
+     * List users with pagination and optional search.
+     */
+    listUsers(params?: ListUsersParams): Promise<PaginatedResponse<User>>;
+    /**
+     * Get a single user by ID, including auth methods and wallets.
+     */
+    getUser(userId: string): Promise<UserWithRelations>;
+    /**
+     * Update a user's status (active, suspended, deleted).
+     */
+    updateUserStatus(userId: string, status: 'active' | 'suspended' | 'deleted'): Promise<void>;
+    /**
+     * Get all sessions for a user.
+     */
+    getUserSessions(userId: string): Promise<Session[]>;
+    /**
+     * Revoke all sessions for a user.
+     */
+    revokeUserSessions(userId: string): Promise<void>;
+}
+
+declare class JWKSVerifier {
+    private jwks;
+    constructor(apiUrl: string);
+    verify(token: string): Promise<JWTPayload>;
+}
+
+declare class ForgeConnectError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown[];
+    constructor(status: number, code: string, message: string, details?: unknown[]);
+    static fromResponse(status: number, body: ApiErrorBody): ForgeConnectError;
+}
+declare class TokenExpiredError extends ForgeConnectError {
+    constructor(message?: string);
+}
+declare class TokenInvalidError extends ForgeConnectError {
+    constructor(message?: string);
+}
+
+export { type ApiErrorBody, type AuthMethod, type AuthProvider, type Chain, ForgeConnectError, ForgeConnectServer, type ForgeConnectServerConfig, JWKSVerifier, type JWTPayload, type ListUsersParams, type PaginatedResponse, type Session, TokenExpiredError, TokenInvalidError, type User, type UserByWalletResponse, type UserWithRelations, type VerifyTokenResponse, type Wallet };

package/dist/index.d.ts

@@ -0,0 +1,145 @@
+interface ForgeConnectServerConfig {
+    /** Base URL of the ForgeConnect API (e.g. "https://connect.forge.dev") */
+    apiUrl: string;
+    /** Service key for inter-service authentication */
+    serviceKey: string;
+}
+interface JWTPayload {
+    sub: string;
+    tid?: string;
+    scopes: string[];
+    iat?: number;
+    exp?: number;
+}
+interface User {
+    id: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    primaryEmail: string | null;
+    status: 'active' | 'suspended' | 'deleted' | 'guest';
+    createdAt: string;
+    updatedAt: string;
+}
+type AuthProvider = 'email' | 'google' | 'twitter' | 'discord' | 'apple' | 'solana_wallet' | 'ethereum_wallet';
+interface AuthMethod {
+    id: string;
+    provider: AuthProvider;
+    providerId: string;
+    isVerified: boolean;
+    verifiedAt: string | null;
+    createdAt: string;
+}
+type Chain = 'solana' | 'ethereum';
+interface Wallet {
+    id: string;
+    userId: string;
+    chain: Chain;
+    address: string;
+    label: string | null;
+    isPrimary: boolean;
+    verifiedAt: string | null;
+    lastUsedAt: string | null;
+}
+interface Session {
+    id: string;
+    createdAt: string;
+    expiresAt: string;
+    lastActiveAt: string;
+    deviceInfo: Record<string, unknown> | null;
+    ipAddress: string;
+}
+interface PaginatedResponse<T> {
+    data: T[];
+    page: number;
+    limit: number;
+    total: number;
+}
+interface VerifyTokenResponse {
+    active: true;
+    user_id: string;
+    tenant_id: string | null;
+    scopes: string[];
+}
+interface UserByWalletResponse {
+    user_id: string;
+}
+interface UserWithRelations extends User {
+    authMethods: AuthMethod[];
+    wallets: Wallet[];
+}
+interface ListUsersParams {
+    page?: number;
+    limit?: number;
+    search?: string;
+}
+interface ApiErrorBody {
+    success: false;
+    error: {
+        code: string;
+        message: string;
+        details?: unknown[];
+    };
+}
+
+declare class ForgeConnectServer {
+    private readonly apiUrl;
+    private readonly serviceKey;
+    private readonly jwks;
+    constructor(config: ForgeConnectServerConfig);
+    /**
+     * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).
+     * Use this in middleware for every request.
+     */
+    verifyToken(token: string): Promise<JWTPayload>;
+    /**
+     * Verify a token via the ForgeConnect `/service/verify-token` endpoint.
+     * Slower but checks session revocation server-side.
+     */
+    verifyTokenRemote(token: string): Promise<VerifyTokenResponse>;
+    /**
+     * Look up a user ID by wallet address.
+     */
+    getUserByWallet(address: string, chain?: Chain): Promise<UserByWalletResponse>;
+    /**
+     * List users with pagination and optional search.
+     */
+    listUsers(params?: ListUsersParams): Promise<PaginatedResponse<User>>;
+    /**
+     * Get a single user by ID, including auth methods and wallets.
+     */
+    getUser(userId: string): Promise<UserWithRelations>;
+    /**
+     * Update a user's status (active, suspended, deleted).
+     */
+    updateUserStatus(userId: string, status: 'active' | 'suspended' | 'deleted'): Promise<void>;
+    /**
+     * Get all sessions for a user.
+     */
+    getUserSessions(userId: string): Promise<Session[]>;
+    /**
+     * Revoke all sessions for a user.
+     */
+    revokeUserSessions(userId: string): Promise<void>;
+}
+
+declare class JWKSVerifier {
+    private jwks;
+    constructor(apiUrl: string);
+    verify(token: string): Promise<JWTPayload>;
+}
+
+declare class ForgeConnectError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown[];
+    constructor(status: number, code: string, message: string, details?: unknown[]);
+    static fromResponse(status: number, body: ApiErrorBody): ForgeConnectError;
+}
+declare class TokenExpiredError extends ForgeConnectError {
+    constructor(message?: string);
+}
+declare class TokenInvalidError extends ForgeConnectError {
+    constructor(message?: string);
+}
+
+export { type ApiErrorBody, type AuthMethod, type AuthProvider, type Chain, ForgeConnectError, ForgeConnectServer, type ForgeConnectServerConfig, JWKSVerifier, type JWTPayload, type ListUsersParams, type PaginatedResponse, type Session, TokenExpiredError, TokenInvalidError, type User, type UserByWalletResponse, type UserWithRelations, type VerifyTokenResponse, type Wallet };

package/dist/index.js

@@ -0,0 +1,191 @@
+// src/jwt.ts
+import { createRemoteJWKSet, jwtVerify } from "jose";
+
+// src/errors.ts
+var ForgeConnectError = class _ForgeConnectError extends Error {
+  status;
+  code;
+  details;
+  constructor(status, code, message, details) {
+    super(message);
+    this.name = "ForgeConnectError";
+    this.status = status;
+    this.code = code;
+    this.details = details;
+  }
+  static fromResponse(status, body) {
+    const { code, message, details } = body.error;
+    if (status === 401 && message.toLowerCase().includes("expired")) {
+      return new TokenExpiredError(message);
+    }
+    if (status === 401) {
+      return new TokenInvalidError(message);
+    }
+    return new _ForgeConnectError(status, code, message, details);
+  }
+};
+var TokenExpiredError = class extends ForgeConnectError {
+  constructor(message = "Token has expired") {
+    super(401, "TOKEN_EXPIRED", message);
+    this.name = "TokenExpiredError";
+  }
+};
+var TokenInvalidError = class extends ForgeConnectError {
+  constructor(message = "Token is invalid") {
+    super(401, "TOKEN_INVALID", message);
+    this.name = "TokenInvalidError";
+  }
+};
+
+// src/jwt.ts
+var JWKSVerifier = class {
+  jwks;
+  constructor(apiUrl) {
+    const jwksUrl = new URL("/.well-known/jwks.json", apiUrl);
+    this.jwks = createRemoteJWKSet(jwksUrl);
+  }
+  async verify(token) {
+    let result;
+    try {
+      result = await jwtVerify(token, this.jwks, {
+        algorithms: ["RS256"]
+      });
+    } catch (err) {
+      if (err instanceof Error && err.message.includes("exp")) {
+        throw new TokenExpiredError();
+      }
+      throw new TokenInvalidError();
+    }
+    const payload = result.payload;
+    return {
+      sub: payload.sub,
+      tid: payload.tid,
+      scopes: payload.scopes ?? [],
+      iat: payload.iat,
+      exp: payload.exp
+    };
+  }
+};
+
+// src/http.ts
+async function request(url, options = {}) {
+  const { method = "GET", headers = {}, body } = options;
+  const res = await fetch(url, {
+    method,
+    headers: {
+      "Content-Type": "application/json",
+      ...headers
+    },
+    body: body ? JSON.stringify(body) : void 0
+  });
+  if (!res.ok) {
+    let errorBody;
+    try {
+      errorBody = await res.json();
+    } catch {
+      throw new ForgeConnectError(res.status, "UNKNOWN", res.statusText);
+    }
+    throw ForgeConnectError.fromResponse(res.status, errorBody);
+  }
+  return res.json();
+}
+
+// src/client.ts
+var ForgeConnectServer = class {
+  apiUrl;
+  serviceKey;
+  jwks;
+  constructor(config) {
+    this.apiUrl = config.apiUrl.replace(/\/+$/, "");
+    this.serviceKey = config.serviceKey;
+    this.jwks = new JWKSVerifier(this.apiUrl);
+  }
+  // ── Token Verification ──
+  /**
+   * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).
+   * Use this in middleware for every request.
+   */
+  async verifyToken(token) {
+    return this.jwks.verify(token);
+  }
+  /**
+   * Verify a token via the ForgeConnect `/service/verify-token` endpoint.
+   * Slower but checks session revocation server-side.
+   */
+  async verifyTokenRemote(token) {
+    return request(`${this.apiUrl}/service/verify-token`, {
+      method: "POST",
+      headers: { "x-service-key": this.serviceKey },
+      body: { token }
+    });
+  }
+  // ── Service Operations ──
+  /**
+   * Look up a user ID by wallet address.
+   */
+  async getUserByWallet(address, chain = "solana") {
+    return request(`${this.apiUrl}/service/user-by-wallet`, {
+      method: "POST",
+      headers: { "x-service-key": this.serviceKey },
+      body: { walletAddress: address, chain }
+    });
+  }
+  // ── Admin Operations ──
+  /**
+   * List users with pagination and optional search.
+   */
+  async listUsers(params = {}) {
+    const query = new URLSearchParams();
+    if (params.page) query.set("page", String(params.page));
+    if (params.limit) query.set("limit", String(params.limit));
+    if (params.search) query.set("search", params.search);
+    const qs = query.toString();
+    return request(
+      `${this.apiUrl}/admin/users${qs ? `?${qs}` : ""}`,
+      { headers: { "x-service-key": this.serviceKey } }
+    );
+  }
+  /**
+   * Get a single user by ID, including auth methods and wallets.
+   */
+  async getUser(userId) {
+    return request(`${this.apiUrl}/admin/users/${userId}`, {
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+  /**
+   * Update a user's status (active, suspended, deleted).
+   */
+  async updateUserStatus(userId, status) {
+    await request(`${this.apiUrl}/admin/users/${userId}/status`, {
+      method: "PATCH",
+      headers: { "x-service-key": this.serviceKey },
+      body: { status }
+    });
+  }
+  /**
+   * Get all sessions for a user.
+   */
+  async getUserSessions(userId) {
+    return request(`${this.apiUrl}/admin/users/${userId}/sessions`, {
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+  /**
+   * Revoke all sessions for a user.
+   */
+  async revokeUserSessions(userId) {
+    await request(`${this.apiUrl}/admin/users/${userId}/sessions`, {
+      method: "DELETE",
+      headers: { "x-service-key": this.serviceKey }
+    });
+  }
+};
+export {
+  ForgeConnectError,
+  ForgeConnectServer,
+  JWKSVerifier,
+  TokenExpiredError,
+  TokenInvalidError
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/jwt.ts","../src/errors.ts","../src/http.ts","../src/client.ts"],"sourcesContent":["import { createRemoteJWKSet, jwtVerify, type JWTVerifyResult } from 'jose';\nimport type { JWTPayload } from './types';\nimport { TokenExpiredError, TokenInvalidError } from './errors';\n\nexport class JWKSVerifier {\n  private jwks: ReturnType<typeof createRemoteJWKSet>;\n\n  constructor(apiUrl: string) {\n    const jwksUrl = new URL('/.well-known/jwks.json', apiUrl);\n    this.jwks = createRemoteJWKSet(jwksUrl);\n  }\n\n  async verify(token: string): Promise<JWTPayload> {\n    let result: JWTVerifyResult;\n    try {\n      result = await jwtVerify(token, this.jwks, {\n        algorithms: ['RS256'],\n      });\n    } catch (err: unknown) {\n      if (err instanceof Error && err.message.includes('exp')) {\n        throw new TokenExpiredError();\n      }\n      throw new TokenInvalidError();\n    }\n\n    const payload = result.payload as unknown as JWTPayload;\n    return {\n      sub: payload.sub,\n      tid: payload.tid,\n      scopes: payload.scopes ?? [],\n      iat: payload.iat,\n      exp: payload.exp,\n    };\n  }\n}\n","import type { ApiErrorBody } from './types';\n\nexport class ForgeConnectError extends Error {\n  public readonly status: number;\n  public readonly code: string;\n  public readonly details?: unknown[];\n\n  constructor(status: number, code: string, message: string, details?: unknown[]) {\n    super(message);\n    this.name = 'ForgeConnectError';\n    this.status = status;\n    this.code = code;\n    this.details = details;\n  }\n\n  static fromResponse(status: number, body: ApiErrorBody): ForgeConnectError {\n    const { code, message, details } = body.error;\n    if (status === 401 && message.toLowerCase().includes('expired')) {\n      return new TokenExpiredError(message);\n    }\n    if (status === 401) {\n      return new TokenInvalidError(message);\n    }\n    return new ForgeConnectError(status, code, message, details);\n  }\n}\n\nexport class TokenExpiredError extends ForgeConnectError {\n  constructor(message = 'Token has expired') {\n    super(401, 'TOKEN_EXPIRED', message);\n    this.name = 'TokenExpiredError';\n  }\n}\n\nexport class TokenInvalidError extends ForgeConnectError {\n  constructor(message = 'Token is invalid') {\n    super(401, 'TOKEN_INVALID', message);\n    this.name = 'TokenInvalidError';\n  }\n}\n","import type { ApiErrorBody } from './types';\nimport { ForgeConnectError } from './errors';\n\nexport interface HttpOptions {\n  method?: string;\n  headers?: Record<string, string>;\n  body?: unknown;\n}\n\nexport async function request<T>(url: string, options: HttpOptions = {}): Promise<T> {\n  const { method = 'GET', headers = {}, body } = options;\n\n  const res = await fetch(url, {\n    method,\n    headers: {\n      'Content-Type': 'application/json',\n      ...headers,\n    },\n    body: body ? JSON.stringify(body) : undefined,\n  });\n\n  if (!res.ok) {\n    let errorBody: ApiErrorBody;\n    try {\n      errorBody = await res.json() as ApiErrorBody;\n    } catch {\n      throw new ForgeConnectError(res.status, 'UNKNOWN', res.statusText);\n    }\n    throw ForgeConnectError.fromResponse(res.status, errorBody);\n  }\n\n  return res.json() as Promise<T>;\n}\n","import type {\n  ForgeConnectServerConfig,\n  JWTPayload,\n  VerifyTokenResponse,\n  UserByWalletResponse,\n  PaginatedResponse,\n  User,\n  UserWithRelations,\n  Session,\n  Chain,\n  ListUsersParams,\n} from './types';\nimport { JWKSVerifier } from './jwt';\nimport { request } from './http';\n\nexport class ForgeConnectServer {\n  private readonly apiUrl: string;\n  private readonly serviceKey: string;\n  private readonly jwks: JWKSVerifier;\n\n  constructor(config: ForgeConnectServerConfig) {\n    this.apiUrl = config.apiUrl.replace(/\\/+$/, '');\n    this.serviceKey = config.serviceKey;\n    this.jwks = new JWKSVerifier(this.apiUrl);\n  }\n\n  // ── Token Verification ──\n\n  /**\n   * Verify a JWT locally using the JWKS endpoint (fast, no network call after initial key fetch).\n   * Use this in middleware for every request.\n   */\n  async verifyToken(token: string): Promise<JWTPayload> {\n    return this.jwks.verify(token);\n  }\n\n  /**\n   * Verify a token via the ForgeConnect `/service/verify-token` endpoint.\n   * Slower but checks session revocation server-side.\n   */\n  async verifyTokenRemote(token: string): Promise<VerifyTokenResponse> {\n    return request<VerifyTokenResponse>(`${this.apiUrl}/service/verify-token`, {\n      method: 'POST',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { token },\n    });\n  }\n\n  // ── Service Operations ──\n\n  /**\n   * Look up a user ID by wallet address.\n   */\n  async getUserByWallet(address: string, chain: Chain = 'solana'): Promise<UserByWalletResponse> {\n    return request<UserByWalletResponse>(`${this.apiUrl}/service/user-by-wallet`, {\n      method: 'POST',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { walletAddress: address, chain },\n    });\n  }\n\n  // ── Admin Operations ──\n\n  /**\n   * List users with pagination and optional search.\n   */\n  async listUsers(params: ListUsersParams = {}): Promise<PaginatedResponse<User>> {\n    const query = new URLSearchParams();\n    if (params.page) query.set('page', String(params.page));\n    if (params.limit) query.set('limit', String(params.limit));\n    if (params.search) query.set('search', params.search);\n    const qs = query.toString();\n\n    return request<PaginatedResponse<User>>(\n      `${this.apiUrl}/admin/users${qs ? `?${qs}` : ''}`,\n      { headers: { 'x-service-key': this.serviceKey } },\n    );\n  }\n\n  /**\n   * Get a single user by ID, including auth methods and wallets.\n   */\n  async getUser(userId: string): Promise<UserWithRelations> {\n    return request<UserWithRelations>(`${this.apiUrl}/admin/users/${userId}`, {\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n\n  /**\n   * Update a user's status (active, suspended, deleted).\n   */\n  async updateUserStatus(userId: string, status: 'active' | 'suspended' | 'deleted'): Promise<void> {\n    await request(`${this.apiUrl}/admin/users/${userId}/status`, {\n      method: 'PATCH',\n      headers: { 'x-service-key': this.serviceKey },\n      body: { status },\n    });\n  }\n\n  /**\n   * Get all sessions for a user.\n   */\n  async getUserSessions(userId: string): Promise<Session[]> {\n    return request<Session[]>(`${this.apiUrl}/admin/users/${userId}/sessions`, {\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n\n  /**\n   * Revoke all sessions for a user.\n   */\n  async revokeUserSessions(userId: string): Promise<void> {\n    await request(`${this.apiUrl}/admin/users/${userId}/sessions`, {\n      method: 'DELETE',\n      headers: { 'x-service-key': this.serviceKey },\n    });\n  }\n}\n"],"mappings":";AAAA,SAAS,oBAAoB,iBAAuC;;;ACE7D,IAAM,oBAAN,MAAM,2BAA0B,MAAM;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EAEhB,YAAY,QAAgB,MAAc,SAAiB,SAAqB;AAC9E,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AACZ,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,OAAO,aAAa,QAAgB,MAAuC;AACzE,UAAM,EAAE,MAAM,SAAS,QAAQ,IAAI,KAAK;AACxC,QAAI,WAAW,OAAO,QAAQ,YAAY,EAAE,SAAS,SAAS,GAAG;AAC/D,aAAO,IAAI,kBAAkB,OAAO;AAAA,IACtC;AACA,QAAI,WAAW,KAAK;AAClB,aAAO,IAAI,kBAAkB,OAAO;AAAA,IACtC;AACA,WAAO,IAAI,mBAAkB,QAAQ,MAAM,SAAS,OAAO;AAAA,EAC7D;AACF;AAEO,IAAM,oBAAN,cAAgC,kBAAkB;AAAA,EACvD,YAAY,UAAU,qBAAqB;AACzC,UAAM,KAAK,iBAAiB,OAAO;AACnC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,oBAAN,cAAgC,kBAAkB;AAAA,EACvD,YAAY,UAAU,oBAAoB;AACxC,UAAM,KAAK,iBAAiB,OAAO;AACnC,SAAK,OAAO;AAAA,EACd;AACF;;;ADnCO,IAAM,eAAN,MAAmB;AAAA,EAChB;AAAA,EAER,YAAY,QAAgB;AAC1B,UAAM,UAAU,IAAI,IAAI,0BAA0B,MAAM;AACxD,SAAK,OAAO,mBAAmB,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,OAAoC;AAC/C,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,UAAU,OAAO,KAAK,MAAM;AAAA,QACzC,YAAY,CAAC,OAAO;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,UAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,KAAK,GAAG;AACvD,cAAM,IAAI,kBAAkB;AAAA,MAC9B;AACA,YAAM,IAAI,kBAAkB;AAAA,IAC9B;AAEA,UAAM,UAAU,OAAO;AACvB,WAAO;AAAA,MACL,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,MACb,QAAQ,QAAQ,UAAU,CAAC;AAAA,MAC3B,KAAK,QAAQ;AAAA,MACb,KAAK,QAAQ;AAAA,IACf;AAAA,EACF;AACF;;;AEzBA,eAAsB,QAAW,KAAa,UAAuB,CAAC,GAAe;AACnF,QAAM,EAAE,SAAS,OAAO,UAAU,CAAC,GAAG,KAAK,IAAI;AAE/C,QAAM,MAAM,MAAM,MAAM,KAAK;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,GAAG;AAAA,IACL;AAAA,IACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EACtC,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,IAAI,KAAK;AAAA,IAC7B,QAAQ;AACN,YAAM,IAAI,kBAAkB,IAAI,QAAQ,WAAW,IAAI,UAAU;AAAA,IACnE;AACA,UAAM,kBAAkB,aAAa,IAAI,QAAQ,SAAS;AAAA,EAC5D;AAEA,SAAO,IAAI,KAAK;AAClB;;;ACjBO,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAAkC;AAC5C,SAAK,SAAS,OAAO,OAAO,QAAQ,QAAQ,EAAE;AAC9C,SAAK,aAAa,OAAO;AACzB,SAAK,OAAO,IAAI,aAAa,KAAK,MAAM;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAY,OAAoC;AACpD,WAAO,KAAK,KAAK,OAAO,KAAK;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAkB,OAA6C;AACnE,WAAO,QAA6B,GAAG,KAAK,MAAM,yBAAyB;AAAA,MACzE,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,MAAM;AAAA,IAChB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAgB,SAAiB,QAAe,UAAyC;AAC7F,WAAO,QAA8B,GAAG,KAAK,MAAM,2BAA2B;AAAA,MAC5E,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,eAAe,SAAS,MAAM;AAAA,IACxC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,SAA0B,CAAC,GAAqC;AAC9E,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,OAAO,KAAM,OAAM,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AACtD,QAAI,OAAO,MAAO,OAAM,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACzD,QAAI,OAAO,OAAQ,OAAM,IAAI,UAAU,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,SAAS;AAE1B,WAAO;AAAA,MACL,GAAG,KAAK,MAAM,eAAe,KAAK,IAAI,EAAE,KAAK,EAAE;AAAA,MAC/C,EAAE,SAAS,EAAE,iBAAiB,KAAK,WAAW,EAAE;AAAA,IAClD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAQ,QAA4C;AACxD,WAAO,QAA2B,GAAG,KAAK,MAAM,gBAAgB,MAAM,IAAI;AAAA,MACxE,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,QAAgB,QAA2D;AAChG,UAAM,QAAQ,GAAG,KAAK,MAAM,gBAAgB,MAAM,WAAW;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,MAC5C,MAAM,EAAE,OAAO;AAAA,IACjB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,QAAoC;AACxD,WAAO,QAAmB,GAAG,KAAK,MAAM,gBAAgB,MAAM,aAAa;AAAA,MACzE,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAAmB,QAA+B;AACtD,UAAM,QAAQ,GAAG,KAAK,MAAM,gBAAgB,MAAM,aAAa;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,KAAK,WAAW;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;","names":[]}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@forge-connect/server",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "jose": "^6.1.3"
+  },
+  "devDependencies": {
+    "tsup": "^8.4.0",
+    "typescript": "^5.9.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch"
+  }
+}