@frontmcp/utils 1.9.1 → 1.9.3

package/crypto/browser.d.ts

@@ -11,6 +11,11 @@ import type { CryptoProvider } from './types';
 export declare const browserCrypto: CryptoProvider;
 /** Alias for conditional import resolution via `#crypto-provider`. */
 export { browserCrypto as cryptoProvider };
+export declare function rsaVerify(): boolean;
+export declare function rsaSignBase64Url(): string;
+export declare function rsaVerifySync(): boolean;
+export declare function pemToPublicJwk(): JsonWebKey;
+export declare function generateRsaKeyPair(): never;
 export { isRsaPssAlg, jwtAlgToWebCryptoAlg } from './jwt-alg';
 /**
  * Verify an RSA signature using WebCrypto.

package/crypto/browser.js

@@ -22,16 +22,21 @@ var browser_exports = {};
 __export(browser_exports, {
   browserCrypto: () => browserCrypto,
   cryptoProvider: () => browserCrypto,
+  generateRsaKeyPair: () => generateRsaKeyPair,
   isRsaPssAlg: () => isRsaPssAlg,
   jwtAlgToWebCryptoAlg: () => jwtAlgToWebCryptoAlg,
-  rsaVerifyBrowser: () => rsaVerifyBrowser
+  pemToPublicJwk: () => pemToPublicJwk,
+  rsaSignBase64Url: () => rsaSignBase64Url,
+  rsaVerify: () => rsaVerify,
+  rsaVerifyBrowser: () => rsaVerifyBrowser,
+  rsaVerifySync: () => rsaVerifySync
 });
 module.exports = __toCommonJS(browser_exports);
-var import_sha2 = require("@noble/hashes/sha2.js");
-var import_hmac = require("@noble/hashes/hmac.js");
+var import_aes = require("@noble/ciphers/aes.js");
 var import_hkdf = require("@noble/hashes/hkdf.js");
+var import_hmac = require("@noble/hashes/hmac.js");
+var import_sha2 = require("@noble/hashes/sha2.js");
 var import_utils = require("@noble/hashes/utils.js");
-var import_aes = require("@noble/ciphers/aes.js");
 
 // libs/utils/src/crypto/jwt-alg.ts
 function isRsaPssAlg(jwtAlg) {
@@ -119,6 +124,24 @@ var browserCrypto = {
     return constantTimeEqual(a, b);
   }
 };
+function nodeOnly(name) {
+  throw new Error(`${name} is only available in Node.js runtimes`);
+}
+function rsaVerify() {
+  return nodeOnly("rsaVerify");
+}
+function rsaSignBase64Url() {
+  return nodeOnly("rsaSignBase64Url");
+}
+function rsaVerifySync() {
+  return nodeOnly("rsaVerifySync");
+}
+function pemToPublicJwk() {
+  return nodeOnly("pemToPublicJwk");
+}
+function generateRsaKeyPair() {
+  return nodeOnly("generateRsaKeyPair");
+}
 async function rsaVerifyBrowser(jwtAlg, data, publicJwk, signature) {
   if (typeof globalThis.crypto?.subtle === "undefined") {
     throw new Error("WebCrypto API (crypto.subtle) is not available in this environment");
@@ -154,7 +177,12 @@ function getSaltLength(jwtAlg) {
 0 && (module.exports = {
   browserCrypto,
   cryptoProvider,
+  generateRsaKeyPair,
   isRsaPssAlg,
   jwtAlgToWebCryptoAlg,
-  rsaVerifyBrowser
+  pemToPublicJwk,
+  rsaSignBase64Url,
+  rsaVerify,
+  rsaVerifyBrowser,
+  rsaVerifySync
 });

package/crypto/node.d.ts

@@ -48,7 +48,7 @@ export declare function generateRsaKeyPair(modulusLength?: number, alg?: string)
  * For RSA-PSS (PS256/PS384/PS512), callers must pass appropriate padding/saltLength options.
  */
 export declare function rsaSign(algorithm: string, data: Buffer, privateKey: crypto.KeyObject, options?: Omit<crypto.SignKeyObjectInput, 'key'>): Buffer;
-export declare function rsaVerify(jwtAlg: string, data: Buffer, publicJwk: JsonWebKey, signature: Buffer): boolean;
+export declare function rsaVerify(jwtAlg: string, data: Buffer | Uint8Array, publicJwk: JsonWebKey, signature: Buffer | Uint8Array): boolean;
 /**
  * Sign data with an RSA private JWK and return a base64url-encoded signature.
  *

package/env/browser-env.d.ts

@@ -7,6 +7,12 @@
 export declare function getEnv(_key: string): string | undefined;
 export declare function getEnv(_key: string, defaultValue: string): string;
 export declare function getCwd(): string;
+/**
+ * The NODE_ENV the page runs with: a `process` shim's live value first, then the value a
+ * bundler inlined for `process.env.NODE_ENV`, else none. `isProduction()`, `isDevelopment()`
+ * and the runtime context's `env` all read it (#770). As on Node, with no NODE_ENV the
+ * runtime context reports `development` while `isDevelopment()` stays false.
+ */
 export declare function getNodeEnv(): string | undefined;
 export declare function isProduction(): boolean;
 export declare function isDevelopment(): boolean;

package/env/browser-env.js

@@ -50,6 +50,14 @@ function isBrowserWorkerScope() {
 }
 
 // libs/utils/src/env/browser-env.ts
+var NODE_ENV_KEY = "NODE_ENV";
+function bundlerDefinedNodeEnv() {
+  try {
+    return process.env["NODE_ENV"] || void 0;
+  } catch {
+    return void 0;
+  }
+}
 function getEnv(_key, defaultValue) {
   return defaultValue;
 }
@@ -57,13 +65,14 @@ function getCwd() {
   return "/";
 }
 function getNodeEnv() {
-  return void 0;
+  const shim = globalThis.process;
+  return shim?.env?.[NODE_ENV_KEY] || bundlerDefinedNodeEnv();
 }
 function isProduction() {
-  return false;
+  return getNodeEnv() === "production";
 }
 function isDevelopment() {
-  return false;
+  return getNodeEnv() === "development";
 }
 function getEnvFlag(_key) {
   return false;

package/env/browser-runtime-context.d.ts

@@ -57,5 +57,9 @@ export declare function checkEntryAvailability(availability: EntryAvailability |
     missingAxes: (keyof EntryAvailability)[];
 };
 export declare function detectRuntimeContext(): RuntimeContext;
+/**
+ * The browser runtime context. Its `env` is read live from the same NODE_ENV as
+ * `isProduction()`, defaulting to `development` as on Node (#770).
+ */
 export declare function getRuntimeContext(): RuntimeContext;
 export declare function resetRuntimeContext(): void;

package/env/browser-runtime-context.js

@@ -29,6 +29,22 @@ __export(browser_runtime_context_exports, {
 });
 module.exports = __toCommonJS(browser_runtime_context_exports);
 var import_lazy_zod = require("@frontmcp/lazy-zod");
+
+// libs/utils/src/env/browser-env.ts
+var NODE_ENV_KEY = "NODE_ENV";
+function bundlerDefinedNodeEnv() {
+  try {
+    return process.env["NODE_ENV"] || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function getNodeEnv() {
+  const shim = globalThis.process;
+  return shim?.env?.[NODE_ENV_KEY] || bundlerDefinedNodeEnv();
+}
+
+// libs/utils/src/env/browser-runtime-context.ts
 var entryAvailabilitySchema = import_lazy_zod.z.object({
   os: import_lazy_zod.z.array(import_lazy_zod.z.string().min(1)).optional(),
   platform: import_lazy_zod.z.array(import_lazy_zod.z.string().min(1)).optional(),
@@ -84,14 +100,24 @@ function detectRuntimeContext() {
     deployment: "standalone",
     provider: "bare",
     target: "browser",
-    env: "production"
+    env: getNodeEnv() || "development"
   };
 }
-var browserContext = detectRuntimeContext();
+var cached;
 function getRuntimeContext() {
-  return browserContext;
+  if (!cached) {
+    const detected = detectRuntimeContext();
+    Object.defineProperty(detected, "env", {
+      get: () => getNodeEnv() || "development",
+      enumerable: true,
+      configurable: true
+    });
+    cached = detected;
+  }
+  return cached;
 }
 function resetRuntimeContext() {
+  cached = void 0;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/esm/crypto/browser.mjs

@@ -2,11 +2,11 @@ var __frontmcpModule = typeof process !== "undefined" && typeof process.getBuilt
 const require = __frontmcpModule ? __frontmcpModule.createRequire(import.meta.url || 'file:///') : undefined;
 // __frontmcpCreateRequire
 // libs/utils/src/crypto/browser.ts
-import { sha256 as sha256Hash } from "@noble/hashes/sha2.js";
-import { hmac } from "@noble/hashes/hmac.js";
+import { gcm } from "@noble/ciphers/aes.js";
 import { hkdf } from "@noble/hashes/hkdf.js";
+import { hmac } from "@noble/hashes/hmac.js";
+import { sha256 as sha256Hash } from "@noble/hashes/sha2.js";
 import { randomBytes as nobleRandomBytes } from "@noble/hashes/utils.js";
-import { gcm } from "@noble/ciphers/aes.js";
 
 // libs/utils/src/crypto/jwt-alg.ts
 function isRsaPssAlg(jwtAlg) {
@@ -94,6 +94,24 @@ var browserCrypto = {
     return constantTimeEqual(a, b);
   }
 };
+function nodeOnly(name) {
+  throw new Error(`${name} is only available in Node.js runtimes`);
+}
+function rsaVerify() {
+  return nodeOnly("rsaVerify");
+}
+function rsaSignBase64Url() {
+  return nodeOnly("rsaSignBase64Url");
+}
+function rsaVerifySync() {
+  return nodeOnly("rsaVerifySync");
+}
+function pemToPublicJwk() {
+  return nodeOnly("pemToPublicJwk");
+}
+function generateRsaKeyPair() {
+  return nodeOnly("generateRsaKeyPair");
+}
 async function rsaVerifyBrowser(jwtAlg, data, publicJwk, signature) {
   if (typeof globalThis.crypto?.subtle === "undefined") {
     throw new Error("WebCrypto API (crypto.subtle) is not available in this environment");
@@ -128,7 +146,12 @@ function getSaltLength(jwtAlg) {
 export {
   browserCrypto,
   browserCrypto as cryptoProvider,
+  generateRsaKeyPair,
   isRsaPssAlg,
   jwtAlgToWebCryptoAlg,
-  rsaVerifyBrowser
+  pemToPublicJwk,
+  rsaSignBase64Url,
+  rsaVerify,
+  rsaVerifyBrowser,
+  rsaVerifySync
 };

package/esm/env/browser-env.mjs

@@ -17,6 +17,14 @@ function isBrowserWorkerScope() {
 }
 
 // libs/utils/src/env/browser-env.ts
+var NODE_ENV_KEY = "NODE_ENV";
+function bundlerDefinedNodeEnv() {
+  try {
+    return process.env["NODE_ENV"] || void 0;
+  } catch {
+    return void 0;
+  }
+}
 function getEnv(_key, defaultValue) {
   return defaultValue;
 }
@@ -24,13 +32,14 @@ function getCwd() {
   return "/";
 }
 function getNodeEnv() {
-  return void 0;
+  const shim = globalThis.process;
+  return shim?.env?.[NODE_ENV_KEY] || bundlerDefinedNodeEnv();
 }
 function isProduction() {
-  return false;
+  return getNodeEnv() === "production";
 }
 function isDevelopment() {
-  return false;
+  return getNodeEnv() === "development";
 }
 function getEnvFlag(_key) {
   return false;

package/esm/env/browser-runtime-context.mjs

@@ -3,6 +3,22 @@ const require = __frontmcpModule ? __frontmcpModule.createRequire(import.meta.ur
 // __frontmcpCreateRequire
 // libs/utils/src/env/browser-runtime-context.ts
 import { z } from "@frontmcp/lazy-zod";
+
+// libs/utils/src/env/browser-env.ts
+var NODE_ENV_KEY = "NODE_ENV";
+function bundlerDefinedNodeEnv() {
+  try {
+    return process.env["NODE_ENV"] || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function getNodeEnv() {
+  const shim = globalThis.process;
+  return shim?.env?.[NODE_ENV_KEY] || bundlerDefinedNodeEnv();
+}
+
+// libs/utils/src/env/browser-runtime-context.ts
 var entryAvailabilitySchema = z.object({
   os: z.array(z.string().min(1)).optional(),
   platform: z.array(z.string().min(1)).optional(),
@@ -58,14 +74,24 @@ function detectRuntimeContext() {
     deployment: "standalone",
     provider: "bare",
     target: "browser",
-    env: "production"
+    env: getNodeEnv() || "development"
   };
 }
-var browserContext = detectRuntimeContext();
+var cached;
 function getRuntimeContext() {
-  return browserContext;
+  if (!cached) {
+    const detected = detectRuntimeContext();
+    Object.defineProperty(detected, "env", {
+      get: () => getNodeEnv() || "development",
+      enumerable: true,
+      configurable: true
+    });
+    cached = detected;
+  }
+  return cached;
 }
 function resetRuntimeContext() {
+  cached = void 0;
 }
 export {
   checkEntryAvailability,