@gala-chain/launchpad-sdk 5.0.4-beta.6 → 5.0.4-beta.60

package/dist/auth/JwtAuth.d.ts

@@ -0,0 +1,183 @@
+/**
+ * JWT Authentication Manager
+ *
+ * Manages JWT access token storage, expiration tracking, and header generation.
+ * Used for session-based authentication with the launchpad backend.
+ *
+ * @category Authentication
+ * @since 5.2.0
+ */
+import type { TokenStorage } from './storage';
+/**
+ * JWT token state interface
+ */
+export interface JwtTokenState {
+    /** Access token string */
+    token: string;
+    /** Expiration timestamp (ms since epoch) */
+    expiresAt: number;
+    /** Token issue timestamp (ms since epoch) */
+    issuedAt: number;
+    /** Refresh token (optional, 90 day TTL) */
+    refreshToken?: string;
+    /** Refresh token expiration timestamp (ms since epoch) */
+    refreshExpiresAt?: number;
+}
+/**
+ * JWT Authentication Manager
+ *
+ * Handles JWT token lifecycle including:
+ * - Token storage and retrieval
+ * - Expiration tracking
+ * - Refresh threshold detection
+ * - Authorization header generation
+ * - Refresh token support (90 day TTL)
+ * - Optional persistence via TokenStorage adapter
+ *
+ * @example
+ * ```typescript
+ * const jwtAuth = new JwtAuth();
+ *
+ * // After login
+ * jwtAuth.setTokens(accessToken, 900, refreshToken, 7776000);
+ *
+ * // Check auth state
+ * if (jwtAuth.hasToken() && !jwtAuth.isExpired()) {
+ *   const header = jwtAuth.getAuthorizationHeader();
+ *   // Use header for requests
+ * }
+ *
+ * // Auto-refresh check
+ * if (jwtAuth.shouldRefresh()) {
+ *   // Token expires within 5 minutes, refresh it
+ * }
+ *
+ * // Get refresh token for refresh flow
+ * const refreshToken = await jwtAuth.getRefreshToken();
+ *
+ * // Logout
+ * await jwtAuth.clear();
+ * ```
+ */
+export declare class JwtAuth {
+    private tokenState;
+    private readonly refreshThresholdMs;
+    private readonly storage;
+    private readonly STORAGE_KEYS;
+    /**
+     * Create a new JwtAuth instance
+     *
+     * @param storage - TokenStorage adapter (default: MemoryStorage for no persistence)
+     * @param refreshThresholdMs - Refresh threshold in milliseconds (default: 5 minutes)
+     */
+    constructor(storage?: TokenStorage, refreshThresholdMs?: number);
+    /**
+     * Store a JWT token with expiration tracking
+     *
+     * @param token - The JWT access token
+     * @param expiresIn - Token lifetime in seconds (e.g., 900 for 15min)
+     * @throws {AuthError} If token is empty or expiresIn is invalid
+     */
+    setToken(token: string, expiresIn: number): void;
+    /**
+     * Store both access and refresh tokens with expiration tracking
+     *
+     * @param accessToken - The JWT access token
+     * @param accessExpiresIn - Access token lifetime in seconds
+     * @param refreshToken - Optional refresh token (90 day TTL)
+     * @param refreshExpiresIn - Optional refresh token lifetime in seconds
+     * @throws {AuthError} If tokens are invalid
+     */
+    setTokens(accessToken: string, accessExpiresIn: number, refreshToken?: string, refreshExpiresIn?: number): Promise<void>;
+    /**
+     * Get the current JWT token
+     *
+     * @returns The access token string, or null if not set
+     */
+    getToken(): string | null;
+    /**
+     * Check if a token is currently stored
+     *
+     * @returns true if a token exists (may still be expired)
+     */
+    hasToken(): boolean;
+    /**
+     * Check if the token has expired
+     *
+     * @returns true if expired or no token exists
+     */
+    isExpired(): boolean;
+    /**
+     * Check if the token should be refreshed
+     *
+     * Returns true if the token will expire within the refresh threshold.
+     * This enables proactive token refresh before expiration.
+     *
+     * @param thresholdMs - Custom threshold in milliseconds (default: class threshold)
+     * @returns true if refresh is recommended
+     */
+    shouldRefresh(thresholdMs?: number): boolean;
+    /**
+     * Get time until token expiration
+     *
+     * @returns Milliseconds until expiration, or 0 if expired/no token
+     */
+    getTimeUntilExpiry(): number;
+    /**
+     * Get token expiration timestamp
+     *
+     * @returns Expiration timestamp (ms since epoch), or null if no token
+     */
+    getExpiresAt(): number | null;
+    /**
+     * Get the Authorization header value
+     *
+     * @returns "Bearer {token}" string, or null if no valid token
+     */
+    getAuthorizationHeader(): string | null;
+    /**
+     * Get JWT auth headers for HTTP requests
+     *
+     * @returns Headers object with Authorization header
+     * @throws {AuthError} If no valid token is available
+     */
+    getJwtHeaders(): Record<string, string>;
+    /**
+     * Get the stored refresh token (if any)
+     *
+     * @returns The refresh token string, or null if not set or expired
+     */
+    getRefreshToken(): Promise<string | null>;
+    /**
+     * Restore tokens from storage (for session persistence)
+     *
+     * Attempts to restore access and refresh tokens from the storage adapter.
+     * Validates expiration times before restoring.
+     *
+     * @returns true if valid tokens were restored, false otherwise
+     */
+    restoreFromStorage(): Promise<boolean>;
+    /**
+     * Clear the stored token (logout)
+     */
+    clear(): Promise<void>;
+    /**
+     * Check if the token is valid (exists and not expired)
+     *
+     * @returns true if token exists and is not expired
+     */
+    isValid(): boolean;
+    /**
+     * Get a debug-friendly summary of the token state
+     *
+     * @returns Token state summary (does NOT include the actual token)
+     */
+    getDebugInfo(): {
+        hasToken: boolean;
+        isExpired: boolean;
+        shouldRefresh: boolean;
+        timeUntilExpiryMs: number;
+        expiresAt: Date | null;
+    };
+}
+//# sourceMappingURL=JwtAuth.d.ts.map

package/dist/auth/JwtAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtAuth.d.ts","sourceRoot":"","sources":["../../src/auth/JwtAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAC,MAAM,WAAW,CAAC;AAI7C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IAEvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAK3B;IAEF;;;;;OAKG;gBACS,OAAO,CAAC,EAAE,YAAY,EAAE,kBAAkB,GAAE,MAA2C;IAKnG;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IA0ChD;;;;;;;;OAQG;IACG,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC;IA0BhB;;;;OAIG;IACH,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;;;OAIG;IACH,QAAQ,IAAI,OAAO;IAInB;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAOpB;;;;;;;;OAQG;IACH,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAU5C;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAQ5B;;;;OAIG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B;;;;OAIG;IACH,sBAAsB,IAAI,MAAM,GAAG,IAAI;IAQvC;;;;;OAKG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWvC;;;;OAIG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA4B/C;;;;;;;OAOG;IACG,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;IAwC5C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B;;;;OAIG;IACH,OAAO,IAAI,OAAO;IAIlB;;;;OAIG;IACH,YAAY,IAAI;QACd,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;KACxB;CASF"}

package/dist/auth/SessionAuthService.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Session Authentication Service
+ *
+ * Handles JWT-based session authentication including login, logout, and token refresh.
+ * Works with SignatureAuth for wallet signing and JwtAuth for token management.
+ *
+ * @category Authentication
+ * @since 5.2.0
+ */
+import type { LoginResponse, RefreshResponse, SessionInfo } from '../types/session-auth.dto';
+import type { HttpClient } from '../utils/http';
+import type { JwtAuth } from './JwtAuth';
+import type { SignatureAuth } from './SignatureAuth';
+/**
+ * Session Authentication Service
+ *
+ * Provides JWT-based authentication flow:
+ * 1. Login: Sign message with wallet → POST /auth/login → Get JWT token
+ * 2. Refresh: POST /auth/refresh → Get new token before expiry
+ * 3. Logout: Clear token (client-side)
+ *
+ * @example
+ * ```typescript
+ * const sessionAuth = new SessionAuthService(http, signatureAuth, jwtAuth);
+ *
+ * // Login
+ * const { accessToken, expiresIn } = await sessionAuth.login();
+ *
+ * // Auto-refresh check
+ * if (sessionAuth.shouldRefresh()) {
+ *   await sessionAuth.ensureValidToken();
+ * }
+ *
+ * // Logout
+ * await sessionAuth.logout();
+ * ```
+ */
+export declare class SessionAuthService {
+    private readonly http;
+    private readonly signatureAuth;
+    private readonly jwtAuth;
+    private readonly logger;
+    /**
+     * In-flight refresh promise to prevent concurrent refresh calls.
+     * This ensures that if multiple requests trigger a refresh simultaneously,
+     * only one refresh actually happens and all callers get the same result.
+     */
+    private refreshPromise;
+    /**
+     * In-flight login promise for re-login on token expiry.
+     */
+    private loginPromise;
+    constructor(http: HttpClient, signatureAuth: SignatureAuth, jwtAuth: JwtAuth, debugMode?: boolean);
+    /**
+     * Login with wallet signature to get JWT token
+     *
+     * Flow:
+     * 1. Generate message with timestamp: "Sign in to Launchpad t:{timestamp}"
+     * 2. Sign message with wallet
+     * 3. POST to /auth/login with signature
+     * 4. Store JWT token in JwtAuth
+     *
+     * This method includes race condition protection - if multiple calls
+     * happen concurrently, only one login request is made.
+     *
+     * @returns Login response with accessToken and expiration
+     * @throws {AuthError} If login fails or wallet not configured
+     */
+    login(): Promise<LoginResponse>;
+    /**
+     * Internal login implementation
+     */
+    private performLogin;
+    /**
+     * Refresh the current JWT token
+     *
+     * Requires an existing valid token. Use this to get a new token
+     * before the current one expires.
+     *
+     * This method includes race condition protection - if multiple calls
+     * happen concurrently, only one refresh request is made.
+     *
+     * @returns Refresh response with new accessToken
+     * @throws {AuthError} If refresh fails or no token exists
+     */
+    refresh(): Promise<RefreshResponse>;
+    /**
+     * Internal refresh implementation
+     */
+    private performRefresh;
+    /**
+     * Logout and clear the JWT token
+     *
+     * Supports logging out from all devices by revoking all refresh tokens server-side.
+     * This clears the client-side token and optionally revokes all devices' tokens on the backend.
+     *
+     * @param options - Optional logout configuration
+     * @param options.allDevices - If true, revoke all devices' tokens server-side
+     */
+    logout(options?: {
+        allDevices?: boolean;
+    }): Promise<void>;
+    /**
+     * Get current session information from the backend
+     *
+     * @returns Session info with address and timestamps
+     * @throws {AuthError} If not authenticated
+     */
+    getSession(): Promise<SessionInfo>;
+    /**
+     * Get the current JWT access token
+     *
+     * @returns Access token string, or null if not authenticated
+     */
+    getAccessToken(): string | null;
+    /**
+     * Check if user is authenticated with valid JWT
+     *
+     * @returns true if authenticated with non-expired token
+     */
+    isAuthenticated(): boolean;
+    /**
+     * Check if token should be refreshed
+     *
+     * Returns true if token exists and will expire within threshold.
+     *
+     * @param thresholdMs - Custom threshold (default: 5 minutes)
+     * @returns true if refresh is recommended
+     */
+    shouldRefresh(thresholdMs?: number): boolean;
+    /**
+     * Ensure we have a valid token, refreshing if necessary
+     *
+     * Call this before making authenticated requests to ensure
+     * the token won't expire mid-request.
+     *
+     * @param thresholdMs - Refresh threshold (default: 5 minutes)
+     * @returns Current access token
+     * @throws {AuthError} If not authenticated and can't refresh
+     */
+    ensureValidToken(thresholdMs?: number): Promise<string>;
+    /**
+     * Extract login/refresh data from backend response
+     */
+    private extractLoginData;
+    /**
+     * Extract session data from backend response
+     */
+    private extractSessionData;
+}
+//# sourceMappingURL=SessionAuthService.d.ts.map

package/dist/auth/SessionAuthService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionAuthService.d.ts","sourceRoot":"","sources":["../../src/auth/SessionAuthService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAIV,aAAa,EACb,eAAe,EACf,WAAW,EACZ,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAIhD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,kBAAkB;IAgB3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAjB1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC;;;;OAIG;IACH,OAAO,CAAC,cAAc,CAAyC;IAE/D;;OAEG;IACH,OAAO,CAAC,YAAY,CAAuC;gBAGxC,IAAI,EAAE,UAAU,EAChB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,OAAO,EACjC,SAAS,GAAE,OAAe;IAS5B;;;;;;;;;;;;;;OAcG;IACG,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;IAyBrC;;OAEG;YACW,YAAY;IAoF1B;;;;;;;;;;;OAWG;IACG,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC;IAyBzC;;OAEG;YACW,cAAc;IA6E5B;;;;;;;;OAQG;IACG,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkC/D;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC;IAkCxC;;;;OAIG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;;;OAIG;IACH,eAAe,IAAI,OAAO;IAI1B;;;;;;;OAOG;IACH,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAI5C;;;;;;;;;OASG;IACG,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA8C7D;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAoCxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAU3B"}

package/dist/auth/SignatureAuth.d.ts

@@ -0,0 +1,181 @@
+import type { Wallet } from 'ethers';
+import type { EIP712Domain, EIP712Types } from '../types/trade.dto.js';
+import type { WalletProvider } from '../wallet/types';
+import type { AuthConfig, SignatureResult } from './types';
+/**
+ * Handles signature-based authentication for the Launchpad SDK
+ *
+ * This class generates signatures that are used in the `Sign` header
+ * for authenticating requests to the backend API.
+ *
+ * Supports optional wallet configuration for read-only operations.
+ * Now supports both ethers.js Wallet and WalletProvider interfaces.
+ */
+export declare class SignatureAuth {
+    /** @deprecated Use walletProvider instead */
+    private wallet;
+    /** The wallet provider used for signing operations */
+    private walletProvider;
+    /** Cached address for synchronous access */
+    private cachedAddress;
+    /** Cached Gala address for synchronous access */
+    private cachedGalaAddress;
+    private readonly messagePrefix;
+    constructor(config: AuthConfig);
+    /**
+     * Checks if a wallet is configured
+     *
+     * @returns true if wallet is configured, false otherwise
+     */
+    hasWallet(): boolean;
+    /**
+     * Ensures the wallet is wrapped with PrivateKeyProvider (lazy initialization)
+     *
+     * @throws AuthError if wrapping fails
+     */
+    private ensureWalletProvider;
+    /**
+     * Sets or updates the wallet (legacy method)
+     *
+     * Allows dynamic wallet configuration after initialization.
+     *
+     * @param wallet The new wallet to configure
+     * @throws AuthError if wallet is invalid
+     * @deprecated Use setWalletProvider() instead
+     */
+    setWallet(wallet: Wallet | undefined): void;
+    /**
+     * Sets or updates the wallet provider
+     *
+     * Allows dynamic wallet provider configuration after initialization.
+     *
+     * @param provider The new wallet provider to configure
+     */
+    setWalletProvider(provider: WalletProvider | undefined): void;
+    /**
+     * Gets the configured wallet provider
+     *
+     * @returns The wallet provider or undefined if not configured
+     */
+    getWalletProvider(): WalletProvider | undefined;
+    /**
+     * Ensures the address is cached for synchronous access
+     *
+     * Call this after connecting an external wallet to enable synchronous address access.
+     */
+    cacheAddress(): Promise<void>;
+    /**
+     * Generates a signature for the current timestamp
+     *
+     * The message format is: "Create a GalaChain Wallet {13-digit-timestamp}"
+     * This signature is used in the `Sign` header for API authentication.
+     *
+     * @returns Promise<SignatureResult> The signature data
+     * @throws AuthError If signature generation fails or wallet is not configured
+     */
+    generateSignature(): Promise<SignatureResult>;
+    /**
+     * Gets the wallet address in the required eth|{address} format
+     *
+     * @returns The formatted address
+     * @throws AuthError if wallet is not configured
+     */
+    getAddress(): string;
+    /**
+     * Gets the wallet address in the required eth|{address} format (async version)
+     *
+     * @returns Promise resolving to the formatted address
+     * @throws AuthError if wallet is not configured
+     */
+    getAddressAsync(): Promise<string>;
+    /**
+     * Gets the raw Ethereum wallet address (0x prefixed)
+     *
+     * @returns The Ethereum address with 0x prefix
+     * @throws AuthError if wallet is not configured
+     */
+    getEthereumAddress(): string;
+    /**
+     * Gets the raw Ethereum wallet address (0x prefixed) - async version
+     *
+     * @returns Promise resolving to the Ethereum address with 0x prefix
+     * @throws AuthError if wallet is not configured
+     */
+    getEthereumAddressAsync(): Promise<string>;
+    /**
+     * Gets the wallet's private key for @gala-chain signing operations
+     *
+     * @returns The wallet's private key (0x prefixed)
+     * @throws AuthError If wallet is not configured or private key is not available
+     */
+    getPrivateKey(): string;
+    /**
+     * Gets the wallet's private key for @gala-chain signing operations (async version)
+     *
+     * @returns Promise resolving to the wallet's private key (0x prefixed)
+     * @throws AuthError If wallet is not configured or private key is not available
+     */
+    getPrivateKeyAsync(): Promise<string>;
+    /**
+     * Formats an Ethereum address to the required backend format
+     *
+     * @param address The Ethereum address (with or without 0x prefix)
+     * @returns Formatted address as eth|{40-hex-chars}
+     */
+    private formatAddress;
+    /**
+     * Signs a message and returns result in Ethereum format (for tests/debugging)
+     *
+     * @param message The message to sign
+     * @returns Promise<SignatureResult> The signature data with Ethereum addresses
+     * @throws AuthError If signature generation fails or wallet is not configured
+     */
+    signMessage(message: string): Promise<SignatureResult>;
+    /**
+     * Generates authentication headers for HTTP requests
+     *
+     * @param url The request URL path
+     * @param method The HTTP method
+     * @returns Promise<Record<string, string>> Authentication headers
+     * @throws AuthError If header generation fails or wallet is not configured
+     */
+    generateAuthHeaders(url: string, method: string): Promise<Record<string, string>>;
+    /**
+     * Signs typed data using EIP-712 standard
+     *
+     * @param domain The EIP-712 domain
+     * @param types The EIP-712 types
+     * @param message The message to sign
+     * @returns Promise<string> The signature
+     * @throws AuthError If signature generation fails or wallet is not configured
+     */
+    signTypedData(domain: EIP712Domain, types: EIP712Types, message: Record<string, unknown>): Promise<string>;
+    /**
+     * Generates a signature for a custom message (for endpoint-specific auth)
+     *
+     * This method signs a custom message without adding a timestamp,
+     * used for endpoints that require specific message signatures like "Update profile".
+     *
+     * @param message The custom message to sign
+     * @returns Promise<SignatureResult> The signature data
+     * @throws AuthError If signature generation fails or wallet is not configured
+     *
+     * @example
+     * ```typescript
+     * const signatureAuth = new SignatureAuth({ wallet, messagePrefix: 'Custom' });
+     * const result = await signatureAuth.generateCustomSignature("Update profile");
+     * console.log('Signature:', result.signature);
+     * console.log('Address:', result.address); // eth|{address} format
+     * ```
+     */
+    generateCustomSignature(message: string): Promise<SignatureResult>;
+    /**
+     * Validates that the wallet is properly configured (synchronous - for backward compatibility)
+     */
+    private validateWallet;
+    /**
+     * Validates that the wallet provider is properly configured (async version)
+     */
+    private validateWalletAsync;
+}
+//# sourceMappingURL=SignatureAuth.d.ts.map

package/dist/auth/SignatureAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignatureAuth.d.ts","sourceRoot":"","sources":["../../src/auth/SignatureAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAOvE,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAC,MAAM,SAAS,CAAC;AAG1D;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,6CAA6C;IAC7C,OAAO,CAAC,MAAM,CAAqB;IAEnC,sDAAsD;IACtD,OAAO,CAAC,cAAc,CAA6B;IAEnD,4CAA4C;IAC5C,OAAO,CAAC,aAAa,CAAqB;IAE1C,iDAAiD;IACjD,OAAO,CAAC,iBAAiB,CAAqB;IAE9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,UAAU;IA+B9B;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAIpB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAuC5B;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IA4B3C;;;;;;OAMG;IACH,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI;IAO7D;;;;OAIG;IACH,iBAAiB,IAAI,cAAc,GAAG,SAAS;IAI/C;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAOnC;;;;;;;;OAQG;IACG,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC;IA6BnD;;;;;OAKG;IACH,UAAU,IAAI,MAAM;IAqBpB;;;;;OAKG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAKxC;;;;;OAKG;IACH,kBAAkB,IAAI,MAAM;IAqB5B;;;;;OAKG;IACG,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKhD;;;;;OAKG;IACH,aAAa,IAAI,MAAM;IA8BvB;;;;;OAKG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;IAsB3C;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAyB5D;;;;;;;OAOG;IACG,mBAAmB,CACvB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA8BlC;;;;;;;;OAQG;IACG,aAAa,CACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IA0BlB;;;;;;;;;;;;;;;;;OAiBG;IACG,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkCxE;;OAEG;IACH,OAAO,CAAC,cAAc;IAWtB;;OAEG;YAEW,mBAAmB;CAiBlC"}

package/dist/auth/storage.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Token storage interface for persisting authentication tokens
+ *
+ * Implementations can use different backends:
+ * - MemoryStorage: In-memory only (default, no persistence)
+ * - localStorage: Browser persistence across sessions
+ * - AsyncStorage: React Native persistence
+ *
+ * @category Authentication
+ * @since 5.15.0
+ */
+/**
+ * Token storage interface
+ */
+export interface TokenStorage {
+    /**
+     * Get a token value
+     * @param key - Storage key
+     * @returns Token value or null if not found
+     */
+    get(key: string): Promise<string | null>;
+    /**
+     * Set a token value
+     * @param key - Storage key
+     * @param value - Token value
+     */
+    set(key: string, value: string): Promise<void>;
+    /**
+     * Remove a token value
+     * @param key - Storage key
+     */
+    remove(key: string): Promise<void>;
+}
+/**
+ * In-memory token storage (no persistence)
+ *
+ * Default implementation that stores tokens only in memory.
+ * Tokens are lost when the page reloads or app restarts.
+ */
+export declare class MemoryStorage implements TokenStorage {
+    private data;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): Promise<void>;
+}
+/**
+ * localStorage-based token storage (browser persistence)
+ *
+ * Stores tokens in browser localStorage for persistence across sessions.
+ * Suitable for web applications where you want sessions to survive page reloads.
+ *
+ * @example
+ * ```typescript
+ * const storage = new LocalStorageAdapter();
+ * const sdk = new LaunchpadClient({
+ *   baseUrl: 'http://localhost:4000',
+ *   tokenStorage: storage,
+ * });
+ * ```
+ */
+export declare class LocalStorageAdapter implements TokenStorage {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): Promise<void>;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/auth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEzC;;;;OAIG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,YAAY;IAChD,OAAO,CAAC,IAAI,CAA6B;IAGnC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGzC;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAoB,YAAW,YAAY;IAEhD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMzC"}

package/dist/auth/types.d.ts

@@ -0,0 +1,50 @@
+import type { Wallet } from 'ethers';
+import type { WalletProvider } from '../wallet/types';
+/**
+ * Configuration for signature-based authentication
+ */
+export interface AuthConfig {
+    /**
+     * The ethers wallet used for signing messages (optional for read-only operations)
+     * @deprecated Use `walletProvider` instead for browser wallet support
+     */
+    wallet?: Wallet | undefined;
+    /**
+     * A WalletProvider for signing messages (optional for read-only operations)
+     * Supports both private key and browser extension wallets.
+     */
+    walletProvider?: WalletProvider | undefined;
+    /** Optional custom message prefix (defaults to "Create a GalaChain Wallet") */
+    messagePrefix?: string;
+}
+/**
+ * Result of signature generation for authentication
+ */
+export interface SignatureResult {
+    /** The message that was signed */
+    message: string;
+    /** The signature to use in the Sign header */
+    signature: string;
+    /** The address that signed the message in eth|{address} format */
+    address: string;
+    /** Timestamp when the signature was created */
+    timestamp: number;
+}
+/**
+ * Authentication error types
+ */
+export declare enum AuthErrorType {
+    WALLET_NOT_CONNECTED = "WALLET_NOT_CONNECTED",
+    SIGNATURE_FAILED = "SIGNATURE_FAILED",
+    INVALID_ADDRESS = "INVALID_ADDRESS",
+    MESSAGE_GENERATION_FAILED = "MESSAGE_GENERATION_FAILED"
+}
+/**
+ * Authentication error class
+ */
+export declare class AuthError extends Error {
+    readonly type: AuthErrorType;
+    readonly originalError?: Error | undefined;
+    constructor(type: AuthErrorType, message: string, originalError?: Error | undefined);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5B;;;OAGG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAE5C,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,oBAAY,aAAa;IACvB,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;IACrC,eAAe,oBAAoB;IACnC,yBAAyB,8BAA8B;CACxD;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,KAAK;aAEhB,IAAI,EAAE,aAAa;aAEnB,aAAa,CAAC,EAAE,KAAK;gBAFrB,IAAI,EAAE,aAAa,EACnC,OAAO,EAAE,MAAM,EACC,aAAa,CAAC,EAAE,KAAK,YAAA;CAKxC"}