@happyview/oauth-client 1.0.0

package/dist/index.cjs

@@ -0,0 +1,365 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ApiError: () => ApiError,
+  AuthenticationError: () => AuthenticationError,
+  HappyViewError: () => HappyViewError,
+  HappyViewOAuthClient: () => HappyViewOAuthClient,
+  HappyViewSession: () => HappyViewSession,
+  InvalidStateError: () => InvalidStateError,
+  MemoryStorage: () => MemoryStorage,
+  ResolutionError: () => ResolutionError,
+  TokenExchangeError: () => TokenExchangeError,
+  base64urlEncode: () => base64urlEncode,
+  generateDpopProof: () => generateDpopProof
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+var HappyViewError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "HappyViewError";
+  }
+};
+var ApiError = class extends HappyViewError {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "ApiError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var AuthenticationError = class extends HappyViewError {
+  status;
+  constructor(message, status = 401) {
+    super(message);
+    this.name = "AuthenticationError";
+    this.status = status;
+  }
+};
+var InvalidStateError = class extends HappyViewError {
+  constructor(message) {
+    super(message);
+    this.name = "InvalidStateError";
+  }
+};
+var TokenExchangeError = class extends HappyViewError {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "TokenExchangeError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var ResolutionError = class extends HappyViewError {
+  constructor(message) {
+    super(message);
+    this.name = "ResolutionError";
+  }
+};
+
+// src/dpop-proof.ts
+function base64urlEncode(data) {
+  let binary = "";
+  for (let i = 0; i < data.length; i++) {
+    binary += String.fromCharCode(data[i]);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function generateDpopProof(crypto, params) {
+  const { privateKey, method, url, accessToken, nonce } = params;
+  const publicJwk = {
+    kty: privateKey.kty,
+    crv: privateKey.crv,
+    x: privateKey.x,
+    y: privateKey.y
+  };
+  const header = {
+    alg: "ES256",
+    typ: "dpop+jwt",
+    jwk: publicJwk
+  };
+  const jtiBytes = crypto.getRandomValues(16);
+  const jti = Array.from(jtiBytes, (b) => b.toString(16).padStart(2, "0")).join("");
+  const payload = {
+    htm: method,
+    htu: url,
+    iat: Math.floor(Date.now() / 1e3),
+    jti
+  };
+  if (accessToken) {
+    const tokenBytes = new TextEncoder().encode(accessToken);
+    const hashBuf = await crypto.sha256(tokenBytes);
+    payload.ath = base64urlEncode(hashBuf);
+  }
+  if (nonce !== void 0) {
+    payload.nonce = nonce;
+  }
+  const headerB64 = base64urlEncode(
+    new TextEncoder().encode(JSON.stringify(header))
+  );
+  const payloadB64 = base64urlEncode(
+    new TextEncoder().encode(JSON.stringify(payload))
+  );
+  const message = new TextEncoder().encode(`${headerB64}.${payloadB64}`);
+  const signature = await crypto.signEs256(privateKey, message);
+  const sigB64 = base64urlEncode(signature);
+  return `${headerB64}.${payloadB64}.${sigB64}`;
+}
+
+// src/session.ts
+var HappyViewSession = class {
+  did;
+  dpopKey;
+  accessToken;
+  clientKey;
+  instanceUrl;
+  crypto;
+  _fetch;
+  dpopNonce;
+  constructor(options) {
+    this.did = options.did;
+    this.dpopKey = options.dpopKey;
+    this.accessToken = options.accessToken;
+    this.clientKey = options.clientKey;
+    this.instanceUrl = options.instanceUrl.replace(/\/+$/, "");
+    this.crypto = options.crypto;
+    this._fetch = options.fetch ?? globalThis.fetch;
+  }
+  async fetchHandler(url, init) {
+    const fullUrl = /^https?:\/\//i.test(url) ? url : `${this.instanceUrl}${url}`;
+    const method = (init.method ?? "GET").toUpperCase();
+    const proof = await generateDpopProof(this.crypto, {
+      privateKey: this.dpopKey,
+      method,
+      url: fullUrl,
+      accessToken: this.accessToken,
+      nonce: this.dpopNonce
+    });
+    const headers = new Headers(init.headers);
+    headers.set("authorization", `DPoP ${this.accessToken}`);
+    headers.set("dpop", proof);
+    headers.set("x-client-key", this.clientKey);
+    const response = await this._fetch(fullUrl, {
+      ...init,
+      headers
+    });
+    const nonce = response.headers.get("dpop-nonce");
+    if (nonce) {
+      this.dpopNonce = nonce;
+    }
+    return response;
+  }
+};
+
+// src/storage.ts
+var MemoryStorage = class {
+  data = /* @__PURE__ */ new Map();
+  async get(key) {
+    return this.data.get(key) ?? null;
+  }
+  async set(key, value) {
+    this.data.set(key, value);
+  }
+  async delete(key) {
+    this.data.delete(key);
+  }
+};
+
+// src/client.ts
+var STORAGE_PREFIX = "happyview:session:";
+var LAST_ACTIVE_KEY = "happyview:last-active-did";
+var HappyViewOAuthClient = class {
+  instanceUrl;
+  clientKey;
+  crypto;
+  storage;
+  clientSecret;
+  _fetch;
+  constructor(options) {
+    this.instanceUrl = options.instanceUrl.replace(/\/+$/, "");
+    this.clientKey = options.clientKey;
+    this.clientSecret = options.clientSecret;
+    this.crypto = options.crypto;
+    this.storage = options.storage ?? new MemoryStorage();
+    this._fetch = options.fetch ?? globalThis.fetch;
+  }
+  get isConfidential() {
+    return this.clientSecret !== void 0;
+  }
+  async provisionDpopKey() {
+    const headers = {
+      "content-type": "application/json",
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const body = {};
+    let pkceVerifier;
+    if (!this.isConfidential) {
+      pkceVerifier = await this.crypto.generatePkceVerifier();
+      const challenge = await this.crypto.computePkceChallenge(pkceVerifier);
+      body.pkce_challenge = challenge;
+    }
+    const resp = await this._fetch(`${this.instanceUrl}/oauth/dpop-keys`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      const body2 = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to provision DPoP key: ${resp.status} ${body2.message ?? resp.statusText}`,
+        resp.status,
+        body2
+      );
+    }
+    const data = await resp.json();
+    return {
+      provisionId: data.provision_id,
+      dpopKey: data.dpop_key,
+      pkceVerifier
+    };
+  }
+  async registerSession(params) {
+    const headers = {
+      "content-type": "application/json",
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const body = {
+      provision_id: params.provisionId,
+      did: params.did,
+      access_token: params.accessToken,
+      refresh_token: params.refreshToken,
+      scopes: params.scopes,
+      pds_url: params.pdsUrl,
+      issuer: params.issuer
+    };
+    if (!this.isConfidential && params.pkceVerifier) {
+      body.pkce_verifier = params.pkceVerifier;
+    }
+    const resp = await this._fetch(`${this.instanceUrl}/oauth/sessions`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      const body2 = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to register session: ${resp.status} ${body2.message ?? resp.statusText}`,
+        resp.status,
+        body2
+      );
+    }
+    const data = await resp.json();
+    const storedSession = {
+      did: data.did,
+      dpopKey: params.dpopKey,
+      accessToken: params.accessToken,
+      clientKey: this.clientKey,
+      instanceUrl: this.instanceUrl
+    };
+    await this.storage.set(
+      `${STORAGE_PREFIX}${data.did}`,
+      JSON.stringify(storedSession)
+    );
+    await this.storage.set(LAST_ACTIVE_KEY, data.did);
+    return new HappyViewSession({
+      did: data.did,
+      dpopKey: params.dpopKey,
+      accessToken: params.accessToken,
+      clientKey: this.clientKey,
+      instanceUrl: this.instanceUrl,
+      crypto: this.crypto
+    });
+  }
+  async deleteSession(did) {
+    const headers = {
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const resp = await this._fetch(
+      `${this.instanceUrl}/oauth/sessions/${did}`,
+      {
+        method: "DELETE",
+        headers
+      }
+    );
+    if (!resp.ok && resp.status !== 404) {
+      const body = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to delete session: ${resp.status} ${body.message ?? resp.statusText}`,
+        resp.status,
+        body
+      );
+    }
+    await this.storage.delete(`${STORAGE_PREFIX}${did}`);
+    const lastActive = await this.storage.get(LAST_ACTIVE_KEY);
+    if (lastActive === did) {
+      await this.storage.delete(LAST_ACTIVE_KEY);
+    }
+  }
+  async restoreSession(did) {
+    const stored = await this.storage.get(`${STORAGE_PREFIX}${did}`);
+    if (!stored) return null;
+    const data = JSON.parse(stored);
+    return new HappyViewSession({
+      did: data.did,
+      dpopKey: data.dpopKey,
+      accessToken: data.accessToken,
+      clientKey: data.clientKey,
+      instanceUrl: data.instanceUrl,
+      crypto: this.crypto
+    });
+  }
+  async restore() {
+    const did = await this.storage.get(LAST_ACTIVE_KEY);
+    if (!did) return null;
+    return this.restoreSession(did);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ApiError,
+  AuthenticationError,
+  HappyViewError,
+  HappyViewOAuthClient,
+  HappyViewSession,
+  InvalidStateError,
+  MemoryStorage,
+  ResolutionError,
+  TokenExchangeError,
+  base64urlEncode,
+  generateDpopProof
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/dpop-proof.ts","../src/session.ts","../src/storage.ts","../src/client.ts"],"sourcesContent":["export { HappyViewOAuthClient } from \"./client\";\nexport { base64urlEncode, generateDpopProof } from \"./dpop-proof\";\nexport type { DpopProofParams } from \"./dpop-proof\";\nexport {\n  ApiError,\n  AuthenticationError,\n  HappyViewError,\n  InvalidStateError,\n  ResolutionError,\n  TokenExchangeError,\n} from \"./errors\";\nexport { HappyViewSession } from \"./session\";\nexport type { HappyViewSessionOptions } from \"./session\";\nexport { MemoryStorage } from \"./storage\";\nexport type {\n  CryptoAdapter,\n  DpopProvision,\n  HappyViewOAuthClientOptions,\n  ProvisionKeyResponse,\n  RegisterSessionParams,\n  RegisterSessionResponse,\n  StorageAdapter,\n  StoredSession,\n} from \"./types\";\n","export class HappyViewError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"HappyViewError\";\n  }\n}\n\nexport class ApiError extends HappyViewError {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body?: unknown) {\n    super(message);\n    this.name = \"ApiError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\nexport class AuthenticationError extends HappyViewError {\n  readonly status: number;\n\n  constructor(message: string, status: number = 401) {\n    super(message);\n    this.name = \"AuthenticationError\";\n    this.status = status;\n  }\n}\n\nexport class InvalidStateError extends HappyViewError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidStateError\";\n  }\n}\n\nexport class TokenExchangeError extends HappyViewError {\n  readonly status: number;\n  readonly body: string;\n\n  constructor(message: string, status: number, body: string) {\n    super(message);\n    this.name = \"TokenExchangeError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\nexport class ResolutionError extends HappyViewError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ResolutionError\";\n  }\n}\n","import type { CryptoAdapter } from \"./types\";\n\nexport function base64urlEncode(data: Uint8Array): string {\n  let binary = \"\";\n  for (let i = 0; i < data.length; i++) {\n    binary += String.fromCharCode(data[i]);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\nexport interface DpopProofParams {\n  privateKey: JsonWebKey;\n  method: string;\n  url: string;\n  accessToken?: string;\n  nonce?: string;\n}\n\nexport async function generateDpopProof(\n  crypto: CryptoAdapter,\n  params: DpopProofParams,\n): Promise<string> {\n  const { privateKey, method, url, accessToken, nonce } = params;\n\n  const publicJwk = {\n    kty: privateKey.kty,\n    crv: privateKey.crv,\n    x: privateKey.x,\n    y: privateKey.y,\n  };\n\n  const header = {\n    alg: \"ES256\",\n    typ: \"dpop+jwt\",\n    jwk: publicJwk,\n  };\n\n  // Generate jti\n  const jtiBytes = crypto.getRandomValues(16);\n  const jti = Array.from(jtiBytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n  const payload: Record<string, unknown> = {\n    htm: method,\n    htu: url,\n    iat: Math.floor(Date.now() / 1000),\n    jti,\n  };\n\n  // Compute ath: base64url(SHA-256(access_token)) — only when token is present\n  if (accessToken) {\n    const tokenBytes = new TextEncoder().encode(accessToken);\n    const hashBuf = await crypto.sha256(tokenBytes);\n    payload.ath = base64urlEncode(hashBuf);\n  }\n\n  if (nonce !== undefined) {\n    payload.nonce = nonce;\n  }\n\n  const headerB64 = base64urlEncode(\n    new TextEncoder().encode(JSON.stringify(header)),\n  );\n  const payloadB64 = base64urlEncode(\n    new TextEncoder().encode(JSON.stringify(payload)),\n  );\n\n  const message = new TextEncoder().encode(`${headerB64}.${payloadB64}`);\n  const signature = await crypto.signEs256(privateKey, message);\n  const sigB64 = base64urlEncode(signature);\n\n  return `${headerB64}.${payloadB64}.${sigB64}`;\n}\n","import { generateDpopProof } from \"./dpop-proof\";\nimport type { CryptoAdapter } from \"./types\";\n\nexport interface HappyViewSessionOptions {\n  did: string;\n  dpopKey: JsonWebKey;\n  accessToken: string;\n  clientKey: string;\n  instanceUrl: string;\n  crypto: CryptoAdapter;\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class HappyViewSession {\n  readonly did: string;\n\n  private readonly dpopKey: JsonWebKey;\n  private readonly accessToken: string;\n  private readonly clientKey: string;\n  private readonly instanceUrl: string;\n  private readonly crypto: CryptoAdapter;\n  private readonly _fetch: typeof globalThis.fetch;\n  private dpopNonce: string | undefined;\n\n  constructor(options: HappyViewSessionOptions) {\n    this.did = options.did;\n    this.dpopKey = options.dpopKey;\n    this.accessToken = options.accessToken;\n    this.clientKey = options.clientKey;\n    this.instanceUrl = options.instanceUrl.replace(/\\/+$/, \"\");\n    this.crypto = options.crypto;\n    this._fetch = options.fetch ?? globalThis.fetch;\n  }\n\n  async fetchHandler(url: string, init: RequestInit): Promise<Response> {\n    const fullUrl = /^https?:\\/\\//i.test(url) ? url : `${this.instanceUrl}${url}`;\n    const method = (init.method ?? \"GET\").toUpperCase();\n\n    const proof = await generateDpopProof(this.crypto, {\n      privateKey: this.dpopKey,\n      method,\n      url: fullUrl,\n      accessToken: this.accessToken,\n      nonce: this.dpopNonce,\n    });\n\n    const headers = new Headers(init.headers);\n    headers.set(\"authorization\", `DPoP ${this.accessToken}`);\n    headers.set(\"dpop\", proof);\n    headers.set(\"x-client-key\", this.clientKey);\n\n    const response = await this._fetch(fullUrl, {\n      ...init,\n      headers,\n    });\n\n    const nonce = response.headers.get(\"dpop-nonce\");\n    if (nonce) {\n      this.dpopNonce = nonce;\n    }\n\n    return response;\n  }\n}\n","import type { StorageAdapter } from \"./types\";\n\nexport class MemoryStorage implements StorageAdapter {\n  private data = new Map<string, string>();\n\n  async get(key: string): Promise<string | null> {\n    return this.data.get(key) ?? null;\n  }\n\n  async set(key: string, value: string): Promise<void> {\n    this.data.set(key, value);\n  }\n\n  async delete(key: string): Promise<void> {\n    this.data.delete(key);\n  }\n}\n","import { ApiError } from \"./errors\";\nimport { HappyViewSession } from \"./session\";\nimport { MemoryStorage } from \"./storage\";\nimport type {\n  CryptoAdapter,\n  HappyViewOAuthClientOptions,\n  ProvisionKeyResponse,\n  RegisterSessionParams,\n  RegisterSessionResponse,\n  StorageAdapter,\n  StoredSession,\n} from \"./types\";\n\nconst STORAGE_PREFIX = \"happyview:session:\";\nconst LAST_ACTIVE_KEY = \"happyview:last-active-did\";\n\nexport class HappyViewOAuthClient {\n  protected readonly instanceUrl: string;\n  protected readonly clientKey: string;\n  protected readonly crypto: CryptoAdapter;\n  protected readonly storage: StorageAdapter;\n  private readonly clientSecret: string | undefined;\n  private readonly _fetch: typeof globalThis.fetch;\n\n  constructor(\n    options: HappyViewOAuthClientOptions & {\n      fetch?: typeof globalThis.fetch;\n    },\n  ) {\n    this.instanceUrl = options.instanceUrl.replace(/\\/+$/, \"\");\n    this.clientKey = options.clientKey;\n    this.clientSecret = options.clientSecret;\n    this.crypto = options.crypto;\n    this.storage = options.storage ?? new MemoryStorage();\n    this._fetch = options.fetch ?? globalThis.fetch;\n  }\n\n  get isConfidential(): boolean {\n    return this.clientSecret !== undefined;\n  }\n\n  async provisionDpopKey(): Promise<{\n    provisionId: string;\n    dpopKey: JsonWebKey;\n    pkceVerifier?: string;\n  }> {\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const body: Record<string, unknown> = {};\n    let pkceVerifier: string | undefined;\n\n    if (!this.isConfidential) {\n      pkceVerifier = await this.crypto.generatePkceVerifier();\n      const challenge = await this.crypto.computePkceChallenge(pkceVerifier);\n      body.pkce_challenge = challenge;\n    }\n\n    const resp = await this._fetch(`${this.instanceUrl}/oauth/dpop-keys`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to provision DPoP key: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    const data: ProvisionKeyResponse = await resp.json();\n    return {\n      provisionId: data.provision_id,\n      dpopKey: data.dpop_key,\n      pkceVerifier,\n    };\n  }\n\n  async registerSession(\n    params: RegisterSessionParams,\n  ): Promise<HappyViewSession> {\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const body: Record<string, unknown> = {\n      provision_id: params.provisionId,\n      did: params.did,\n      access_token: params.accessToken,\n      refresh_token: params.refreshToken,\n      scopes: params.scopes,\n      pds_url: params.pdsUrl,\n      issuer: params.issuer,\n    };\n\n    if (!this.isConfidential && params.pkceVerifier) {\n      body.pkce_verifier = params.pkceVerifier;\n    }\n\n    const resp = await this._fetch(`${this.instanceUrl}/oauth/sessions`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to register session: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    const data: RegisterSessionResponse = await resp.json();\n\n    const storedSession: StoredSession = {\n      did: data.did,\n      dpopKey: params.dpopKey,\n      accessToken: params.accessToken,\n      clientKey: this.clientKey,\n      instanceUrl: this.instanceUrl,\n    };\n    await this.storage.set(\n      `${STORAGE_PREFIX}${data.did}`,\n      JSON.stringify(storedSession),\n    );\n    await this.storage.set(LAST_ACTIVE_KEY, data.did);\n\n    return new HappyViewSession({\n      did: data.did,\n      dpopKey: params.dpopKey,\n      accessToken: params.accessToken,\n      clientKey: this.clientKey,\n      instanceUrl: this.instanceUrl,\n      crypto: this.crypto,\n    });\n  }\n\n  async deleteSession(did: string): Promise<void> {\n    const headers: Record<string, string> = {\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const resp = await this._fetch(\n      `${this.instanceUrl}/oauth/sessions/${did}`,\n      {\n        method: \"DELETE\",\n        headers,\n      },\n    );\n\n    if (!resp.ok && resp.status !== 404) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to delete session: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    await this.storage.delete(`${STORAGE_PREFIX}${did}`);\n\n    const lastActive = await this.storage.get(LAST_ACTIVE_KEY);\n    if (lastActive === did) {\n      await this.storage.delete(LAST_ACTIVE_KEY);\n    }\n  }\n\n  async restoreSession(did: string): Promise<HappyViewSession | null> {\n    const stored = await this.storage.get(`${STORAGE_PREFIX}${did}`);\n    if (!stored) return null;\n\n    const data: StoredSession = JSON.parse(stored);\n    return new HappyViewSession({\n      did: data.did,\n      dpopKey: data.dpopKey,\n      accessToken: data.accessToken,\n      clientKey: data.clientKey,\n      instanceUrl: data.instanceUrl,\n      crypto: this.crypto,\n    });\n  }\n\n  async restore(): Promise<HappyViewSession | null> {\n    const did = await this.storage.get(LAST_ACTIVE_KEY);\n    if (!did) return null;\n    return this.restoreSession(did);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACxC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,WAAN,cAAuB,eAAe;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAgB;AAC3D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,eAAe;AAAA,EAC7C;AAAA,EAET,YAAY,SAAiB,SAAiB,KAAK;AACjD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,oBAAN,cAAgC,eAAe;AAAA,EACpD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,qBAAN,cAAiC,eAAe;AAAA,EAC5C;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAc;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,eAAe;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACnDO,SAAS,gBAAgB,MAA0B;AACxD,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,cAAU,OAAO,aAAa,KAAK,CAAC,CAAC;AAAA,EACvC;AACA,SAAO,KAAK,MAAM,EACf,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AACtB;AAUA,eAAsB,kBACpB,QACA,QACiB;AACjB,QAAM,EAAE,YAAY,QAAQ,KAAK,aAAa,MAAM,IAAI;AAExD,QAAM,YAAY;AAAA,IAChB,KAAK,WAAW;AAAA,IAChB,KAAK,WAAW;AAAA,IAChB,GAAG,WAAW;AAAA,IACd,GAAG,WAAW;AAAA,EAChB;AAEA,QAAM,SAAS;AAAA,IACb,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAGA,QAAM,WAAW,OAAO,gBAAgB,EAAE;AAC1C,QAAM,MAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAEhF,QAAM,UAAmC;AAAA,IACvC,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,aAAa,IAAI,YAAY,EAAE,OAAO,WAAW;AACvD,UAAM,UAAU,MAAM,OAAO,OAAO,UAAU;AAC9C,YAAQ,MAAM,gBAAgB,OAAO;AAAA,EACvC;AAEA,MAAI,UAAU,QAAW;AACvB,YAAQ,QAAQ;AAAA,EAClB;AAEA,QAAM,YAAY;AAAA,IAChB,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC;AAAA,EACjD;AACA,QAAM,aAAa;AAAA,IACjB,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,OAAO,CAAC;AAAA,EAClD;AAEA,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,GAAG,SAAS,IAAI,UAAU,EAAE;AACrE,QAAM,YAAY,MAAM,OAAO,UAAU,YAAY,OAAO;AAC5D,QAAM,SAAS,gBAAgB,SAAS;AAExC,SAAO,GAAG,SAAS,IAAI,UAAU,IAAI,MAAM;AAC7C;;;AC7DO,IAAM,mBAAN,MAAuB;AAAA,EACnB;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EAER,YAAY,SAAkC;AAC5C,SAAK,MAAM,QAAQ;AACnB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,QAAQ;AAC3B,SAAK,YAAY,QAAQ;AACzB,SAAK,cAAc,QAAQ,YAAY,QAAQ,QAAQ,EAAE;AACzD,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ,SAAS,WAAW;AAAA,EAC5C;AAAA,EAEA,MAAM,aAAa,KAAa,MAAsC;AACpE,UAAM,UAAU,gBAAgB,KAAK,GAAG,IAAI,MAAM,GAAG,KAAK,WAAW,GAAG,GAAG;AAC3E,UAAM,UAAU,KAAK,UAAU,OAAO,YAAY;AAElD,UAAM,QAAQ,MAAM,kBAAkB,KAAK,QAAQ;AAAA,MACjD,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,KAAK;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,OAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,QAAQ,KAAK,WAAW,EAAE;AACvD,YAAQ,IAAI,QAAQ,KAAK;AACzB,YAAQ,IAAI,gBAAgB,KAAK,SAAS;AAE1C,UAAM,WAAW,MAAM,KAAK,OAAO,SAAS;AAAA,MAC1C,GAAG;AAAA,MACH;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,SAAS,QAAQ,IAAI,YAAY;AAC/C,QAAI,OAAO;AACT,WAAK,YAAY;AAAA,IACnB;AAEA,WAAO;AAAA,EACT;AACF;;;AC7DO,IAAM,gBAAN,MAA8C;AAAA,EAC3C,OAAO,oBAAI,IAAoB;AAAA,EAEvC,MAAM,IAAI,KAAqC;AAC7C,WAAO,KAAK,KAAK,IAAI,GAAG,KAAK;AAAA,EAC/B;AAAA,EAEA,MAAM,IAAI,KAAa,OAA8B;AACnD,SAAK,KAAK,IAAI,KAAK,KAAK;AAAA,EAC1B;AAAA,EAEA,MAAM,OAAO,KAA4B;AACvC,SAAK,KAAK,OAAO,GAAG;AAAA,EACtB;AACF;;;ACHA,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAEjB,IAAM,uBAAN,MAA2B;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACF;AAAA,EACA;AAAA,EAEjB,YACE,SAGA;AACA,SAAK,cAAc,QAAQ,YAAY,QAAQ,QAAQ,EAAE;AACzD,SAAK,YAAY,QAAQ;AACzB,SAAK,eAAe,QAAQ;AAC5B,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,IAAI,cAAc;AACpD,SAAK,SAAS,QAAQ,SAAS,WAAW;AAAA,EAC5C;AAAA,EAEA,IAAI,iBAA0B;AAC5B,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAAA,EAEA,MAAM,mBAIH;AACD,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAgC,CAAC;AACvC,QAAI;AAEJ,QAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAe,MAAM,KAAK,OAAO,qBAAqB;AACtD,YAAM,YAAY,MAAM,KAAK,OAAO,qBAAqB,YAAY;AACrE,WAAK,iBAAiB;AAAA,IACxB;AAEA,UAAM,OAAO,MAAM,KAAK,OAAO,GAAG,KAAK,WAAW,oBAAoB;AAAA,MACpE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,KAAK,IAAI;AACZ,YAAMA,QAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,iCAAiC,KAAK,MAAM,IAAKA,MAAa,WAAW,KAAK,UAAU;AAAA,QACxF,KAAK;AAAA,QACLA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAA6B,MAAM,KAAK,KAAK;AACnD,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QAC2B;AAC3B,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAgC;AAAA,MACpC,cAAc,OAAO;AAAA,MACrB,KAAK,OAAO;AAAA,MACZ,cAAc,OAAO;AAAA,MACrB,eAAe,OAAO;AAAA,MACtB,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO;AAAA,IACjB;AAEA,QAAI,CAAC,KAAK,kBAAkB,OAAO,cAAc;AAC/C,WAAK,gBAAgB,OAAO;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,KAAK,OAAO,GAAG,KAAK,WAAW,mBAAmB;AAAA,MACnE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,KAAK,IAAI;AACZ,YAAMA,QAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,+BAA+B,KAAK,MAAM,IAAKA,MAAa,WAAW,KAAK,UAAU;AAAA,QACtF,KAAK;AAAA,QACLA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAgC,MAAM,KAAK,KAAK;AAEtD,UAAM,gBAA+B;AAAA,MACnC,KAAK,KAAK;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,IACpB;AACA,UAAM,KAAK,QAAQ;AAAA,MACjB,GAAG,cAAc,GAAG,KAAK,GAAG;AAAA,MAC5B,KAAK,UAAU,aAAa;AAAA,IAC9B;AACA,UAAM,KAAK,QAAQ,IAAI,iBAAiB,KAAK,GAAG;AAEhD,WAAO,IAAI,iBAAiB;AAAA,MAC1B,KAAK,KAAK;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,KAA4B;AAC9C,UAAM,UAAkC;AAAA,MACtC,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB,GAAG,KAAK,WAAW,mBAAmB,GAAG;AAAA,MACzC;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,KAAK,MAAM,KAAK,WAAW,KAAK;AACnC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,6BAA6B,KAAK,MAAM,IAAK,KAAa,WAAW,KAAK,UAAU;AAAA,QACpF,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,QAAQ,OAAO,GAAG,cAAc,GAAG,GAAG,EAAE;AAEnD,UAAM,aAAa,MAAM,KAAK,QAAQ,IAAI,eAAe;AACzD,QAAI,eAAe,KAAK;AACtB,YAAM,KAAK,QAAQ,OAAO,eAAe;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,KAA+C;AAClE,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,GAAG,cAAc,GAAG,GAAG,EAAE;AAC/D,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,OAAsB,KAAK,MAAM,MAAM;AAC7C,WAAO,IAAI,iBAAiB;AAAA,MAC1B,KAAK,KAAK;AAAA,MACV,SAAS,KAAK;AAAA,MACd,aAAa,KAAK;AAAA,MAClB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAA4C;AAChD,UAAM,MAAM,MAAM,KAAK,QAAQ,IAAI,eAAe;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,eAAe,GAAG;AAAA,EAChC;AACF;","names":["body"]}

package/dist/index.d.cts

@@ -0,0 +1,142 @@
+interface CryptoAdapter {
+    generatePkceVerifier(): Promise<string>;
+    computePkceChallenge(verifier: string): Promise<string>;
+    signEs256(privateKey: JsonWebKey, payload: Uint8Array): Promise<Uint8Array>;
+    sha256(data: Uint8Array): Promise<Uint8Array>;
+    getRandomValues(length: number): Uint8Array;
+}
+interface StorageAdapter {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+interface HappyViewOAuthClientOptions {
+    instanceUrl: string;
+    clientKey: string;
+    clientSecret?: string;
+    crypto: CryptoAdapter;
+    storage?: StorageAdapter;
+}
+interface DpopProvision {
+    provisionId: string;
+    dpopKey: JsonWebKey;
+}
+interface RegisterSessionParams {
+    provisionId: string;
+    pkceVerifier?: string;
+    did: string;
+    accessToken: string;
+    refreshToken?: string;
+    scopes: string;
+    pdsUrl?: string;
+    issuer?: string;
+    dpopKey: JsonWebKey;
+}
+/**
+ * Session data persisted to storage. Note: tokens and keys are stored as-is
+ * via the StorageAdapter. In browser environments using LocalStorageAdapter,
+ * this means they are accessible to any JS on the same origin. Consider using
+ * a StorageAdapter with encryption if XSS is a concern for your application.
+ */
+interface StoredSession {
+    did: string;
+    dpopKey: JsonWebKey;
+    accessToken: string;
+    clientKey: string;
+    instanceUrl: string;
+}
+interface ProvisionKeyResponse {
+    provision_id: string;
+    dpop_key: JsonWebKey;
+}
+interface RegisterSessionResponse {
+    session_id: string;
+    did: string;
+}
+
+interface HappyViewSessionOptions {
+    did: string;
+    dpopKey: JsonWebKey;
+    accessToken: string;
+    clientKey: string;
+    instanceUrl: string;
+    crypto: CryptoAdapter;
+    fetch?: typeof globalThis.fetch;
+}
+declare class HappyViewSession {
+    readonly did: string;
+    private readonly dpopKey;
+    private readonly accessToken;
+    private readonly clientKey;
+    private readonly instanceUrl;
+    private readonly crypto;
+    private readonly _fetch;
+    private dpopNonce;
+    constructor(options: HappyViewSessionOptions);
+    fetchHandler(url: string, init: RequestInit): Promise<Response>;
+}
+
+declare class HappyViewOAuthClient {
+    protected readonly instanceUrl: string;
+    protected readonly clientKey: string;
+    protected readonly crypto: CryptoAdapter;
+    protected readonly storage: StorageAdapter;
+    private readonly clientSecret;
+    private readonly _fetch;
+    constructor(options: HappyViewOAuthClientOptions & {
+        fetch?: typeof globalThis.fetch;
+    });
+    get isConfidential(): boolean;
+    provisionDpopKey(): Promise<{
+        provisionId: string;
+        dpopKey: JsonWebKey;
+        pkceVerifier?: string;
+    }>;
+    registerSession(params: RegisterSessionParams): Promise<HappyViewSession>;
+    deleteSession(did: string): Promise<void>;
+    restoreSession(did: string): Promise<HappyViewSession | null>;
+    restore(): Promise<HappyViewSession | null>;
+}
+
+declare function base64urlEncode(data: Uint8Array): string;
+interface DpopProofParams {
+    privateKey: JsonWebKey;
+    method: string;
+    url: string;
+    accessToken?: string;
+    nonce?: string;
+}
+declare function generateDpopProof(crypto: CryptoAdapter, params: DpopProofParams): Promise<string>;
+
+declare class HappyViewError extends Error {
+    constructor(message: string);
+}
+declare class ApiError extends HappyViewError {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body?: unknown);
+}
+declare class AuthenticationError extends HappyViewError {
+    readonly status: number;
+    constructor(message: string, status?: number);
+}
+declare class InvalidStateError extends HappyViewError {
+    constructor(message: string);
+}
+declare class TokenExchangeError extends HappyViewError {
+    readonly status: number;
+    readonly body: string;
+    constructor(message: string, status: number, body: string);
+}
+declare class ResolutionError extends HappyViewError {
+    constructor(message: string);
+}
+
+declare class MemoryStorage implements StorageAdapter {
+    private data;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+
+export { ApiError, AuthenticationError, type CryptoAdapter, type DpopProofParams, type DpopProvision, HappyViewError, HappyViewOAuthClient, type HappyViewOAuthClientOptions, HappyViewSession, type HappyViewSessionOptions, InvalidStateError, MemoryStorage, type ProvisionKeyResponse, type RegisterSessionParams, type RegisterSessionResponse, ResolutionError, type StorageAdapter, type StoredSession, TokenExchangeError, base64urlEncode, generateDpopProof };

package/dist/index.d.ts

@@ -0,0 +1,142 @@
+interface CryptoAdapter {
+    generatePkceVerifier(): Promise<string>;
+    computePkceChallenge(verifier: string): Promise<string>;
+    signEs256(privateKey: JsonWebKey, payload: Uint8Array): Promise<Uint8Array>;
+    sha256(data: Uint8Array): Promise<Uint8Array>;
+    getRandomValues(length: number): Uint8Array;
+}
+interface StorageAdapter {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+interface HappyViewOAuthClientOptions {
+    instanceUrl: string;
+    clientKey: string;
+    clientSecret?: string;
+    crypto: CryptoAdapter;
+    storage?: StorageAdapter;
+}
+interface DpopProvision {
+    provisionId: string;
+    dpopKey: JsonWebKey;
+}
+interface RegisterSessionParams {
+    provisionId: string;
+    pkceVerifier?: string;
+    did: string;
+    accessToken: string;
+    refreshToken?: string;
+    scopes: string;
+    pdsUrl?: string;
+    issuer?: string;
+    dpopKey: JsonWebKey;
+}
+/**
+ * Session data persisted to storage. Note: tokens and keys are stored as-is
+ * via the StorageAdapter. In browser environments using LocalStorageAdapter,
+ * this means they are accessible to any JS on the same origin. Consider using
+ * a StorageAdapter with encryption if XSS is a concern for your application.
+ */
+interface StoredSession {
+    did: string;
+    dpopKey: JsonWebKey;
+    accessToken: string;
+    clientKey: string;
+    instanceUrl: string;
+}
+interface ProvisionKeyResponse {
+    provision_id: string;
+    dpop_key: JsonWebKey;
+}
+interface RegisterSessionResponse {
+    session_id: string;
+    did: string;
+}
+
+interface HappyViewSessionOptions {
+    did: string;
+    dpopKey: JsonWebKey;
+    accessToken: string;
+    clientKey: string;
+    instanceUrl: string;
+    crypto: CryptoAdapter;
+    fetch?: typeof globalThis.fetch;
+}
+declare class HappyViewSession {
+    readonly did: string;
+    private readonly dpopKey;
+    private readonly accessToken;
+    private readonly clientKey;
+    private readonly instanceUrl;
+    private readonly crypto;
+    private readonly _fetch;
+    private dpopNonce;
+    constructor(options: HappyViewSessionOptions);
+    fetchHandler(url: string, init: RequestInit): Promise<Response>;
+}
+
+declare class HappyViewOAuthClient {
+    protected readonly instanceUrl: string;
+    protected readonly clientKey: string;
+    protected readonly crypto: CryptoAdapter;
+    protected readonly storage: StorageAdapter;
+    private readonly clientSecret;
+    private readonly _fetch;
+    constructor(options: HappyViewOAuthClientOptions & {
+        fetch?: typeof globalThis.fetch;
+    });
+    get isConfidential(): boolean;
+    provisionDpopKey(): Promise<{
+        provisionId: string;
+        dpopKey: JsonWebKey;
+        pkceVerifier?: string;
+    }>;
+    registerSession(params: RegisterSessionParams): Promise<HappyViewSession>;
+    deleteSession(did: string): Promise<void>;
+    restoreSession(did: string): Promise<HappyViewSession | null>;
+    restore(): Promise<HappyViewSession | null>;
+}
+
+declare function base64urlEncode(data: Uint8Array): string;
+interface DpopProofParams {
+    privateKey: JsonWebKey;
+    method: string;
+    url: string;
+    accessToken?: string;
+    nonce?: string;
+}
+declare function generateDpopProof(crypto: CryptoAdapter, params: DpopProofParams): Promise<string>;
+
+declare class HappyViewError extends Error {
+    constructor(message: string);
+}
+declare class ApiError extends HappyViewError {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body?: unknown);
+}
+declare class AuthenticationError extends HappyViewError {
+    readonly status: number;
+    constructor(message: string, status?: number);
+}
+declare class InvalidStateError extends HappyViewError {
+    constructor(message: string);
+}
+declare class TokenExchangeError extends HappyViewError {
+    readonly status: number;
+    readonly body: string;
+    constructor(message: string, status: number, body: string);
+}
+declare class ResolutionError extends HappyViewError {
+    constructor(message: string);
+}
+
+declare class MemoryStorage implements StorageAdapter {
+    private data;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+}
+
+export { ApiError, AuthenticationError, type CryptoAdapter, type DpopProofParams, type DpopProvision, HappyViewError, HappyViewOAuthClient, type HappyViewOAuthClientOptions, HappyViewSession, type HappyViewSessionOptions, InvalidStateError, MemoryStorage, type ProvisionKeyResponse, type RegisterSessionParams, type RegisterSessionResponse, ResolutionError, type StorageAdapter, type StoredSession, TokenExchangeError, base64urlEncode, generateDpopProof };

package/dist/index.js

@@ -0,0 +1,328 @@
+// src/errors.ts
+var HappyViewError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "HappyViewError";
+  }
+};
+var ApiError = class extends HappyViewError {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "ApiError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var AuthenticationError = class extends HappyViewError {
+  status;
+  constructor(message, status = 401) {
+    super(message);
+    this.name = "AuthenticationError";
+    this.status = status;
+  }
+};
+var InvalidStateError = class extends HappyViewError {
+  constructor(message) {
+    super(message);
+    this.name = "InvalidStateError";
+  }
+};
+var TokenExchangeError = class extends HappyViewError {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "TokenExchangeError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var ResolutionError = class extends HappyViewError {
+  constructor(message) {
+    super(message);
+    this.name = "ResolutionError";
+  }
+};
+
+// src/dpop-proof.ts
+function base64urlEncode(data) {
+  let binary = "";
+  for (let i = 0; i < data.length; i++) {
+    binary += String.fromCharCode(data[i]);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+async function generateDpopProof(crypto, params) {
+  const { privateKey, method, url, accessToken, nonce } = params;
+  const publicJwk = {
+    kty: privateKey.kty,
+    crv: privateKey.crv,
+    x: privateKey.x,
+    y: privateKey.y
+  };
+  const header = {
+    alg: "ES256",
+    typ: "dpop+jwt",
+    jwk: publicJwk
+  };
+  const jtiBytes = crypto.getRandomValues(16);
+  const jti = Array.from(jtiBytes, (b) => b.toString(16).padStart(2, "0")).join("");
+  const payload = {
+    htm: method,
+    htu: url,
+    iat: Math.floor(Date.now() / 1e3),
+    jti
+  };
+  if (accessToken) {
+    const tokenBytes = new TextEncoder().encode(accessToken);
+    const hashBuf = await crypto.sha256(tokenBytes);
+    payload.ath = base64urlEncode(hashBuf);
+  }
+  if (nonce !== void 0) {
+    payload.nonce = nonce;
+  }
+  const headerB64 = base64urlEncode(
+    new TextEncoder().encode(JSON.stringify(header))
+  );
+  const payloadB64 = base64urlEncode(
+    new TextEncoder().encode(JSON.stringify(payload))
+  );
+  const message = new TextEncoder().encode(`${headerB64}.${payloadB64}`);
+  const signature = await crypto.signEs256(privateKey, message);
+  const sigB64 = base64urlEncode(signature);
+  return `${headerB64}.${payloadB64}.${sigB64}`;
+}
+
+// src/session.ts
+var HappyViewSession = class {
+  did;
+  dpopKey;
+  accessToken;
+  clientKey;
+  instanceUrl;
+  crypto;
+  _fetch;
+  dpopNonce;
+  constructor(options) {
+    this.did = options.did;
+    this.dpopKey = options.dpopKey;
+    this.accessToken = options.accessToken;
+    this.clientKey = options.clientKey;
+    this.instanceUrl = options.instanceUrl.replace(/\/+$/, "");
+    this.crypto = options.crypto;
+    this._fetch = options.fetch ?? globalThis.fetch;
+  }
+  async fetchHandler(url, init) {
+    const fullUrl = /^https?:\/\//i.test(url) ? url : `${this.instanceUrl}${url}`;
+    const method = (init.method ?? "GET").toUpperCase();
+    const proof = await generateDpopProof(this.crypto, {
+      privateKey: this.dpopKey,
+      method,
+      url: fullUrl,
+      accessToken: this.accessToken,
+      nonce: this.dpopNonce
+    });
+    const headers = new Headers(init.headers);
+    headers.set("authorization", `DPoP ${this.accessToken}`);
+    headers.set("dpop", proof);
+    headers.set("x-client-key", this.clientKey);
+    const response = await this._fetch(fullUrl, {
+      ...init,
+      headers
+    });
+    const nonce = response.headers.get("dpop-nonce");
+    if (nonce) {
+      this.dpopNonce = nonce;
+    }
+    return response;
+  }
+};
+
+// src/storage.ts
+var MemoryStorage = class {
+  data = /* @__PURE__ */ new Map();
+  async get(key) {
+    return this.data.get(key) ?? null;
+  }
+  async set(key, value) {
+    this.data.set(key, value);
+  }
+  async delete(key) {
+    this.data.delete(key);
+  }
+};
+
+// src/client.ts
+var STORAGE_PREFIX = "happyview:session:";
+var LAST_ACTIVE_KEY = "happyview:last-active-did";
+var HappyViewOAuthClient = class {
+  instanceUrl;
+  clientKey;
+  crypto;
+  storage;
+  clientSecret;
+  _fetch;
+  constructor(options) {
+    this.instanceUrl = options.instanceUrl.replace(/\/+$/, "");
+    this.clientKey = options.clientKey;
+    this.clientSecret = options.clientSecret;
+    this.crypto = options.crypto;
+    this.storage = options.storage ?? new MemoryStorage();
+    this._fetch = options.fetch ?? globalThis.fetch;
+  }
+  get isConfidential() {
+    return this.clientSecret !== void 0;
+  }
+  async provisionDpopKey() {
+    const headers = {
+      "content-type": "application/json",
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const body = {};
+    let pkceVerifier;
+    if (!this.isConfidential) {
+      pkceVerifier = await this.crypto.generatePkceVerifier();
+      const challenge = await this.crypto.computePkceChallenge(pkceVerifier);
+      body.pkce_challenge = challenge;
+    }
+    const resp = await this._fetch(`${this.instanceUrl}/oauth/dpop-keys`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      const body2 = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to provision DPoP key: ${resp.status} ${body2.message ?? resp.statusText}`,
+        resp.status,
+        body2
+      );
+    }
+    const data = await resp.json();
+    return {
+      provisionId: data.provision_id,
+      dpopKey: data.dpop_key,
+      pkceVerifier
+    };
+  }
+  async registerSession(params) {
+    const headers = {
+      "content-type": "application/json",
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const body = {
+      provision_id: params.provisionId,
+      did: params.did,
+      access_token: params.accessToken,
+      refresh_token: params.refreshToken,
+      scopes: params.scopes,
+      pds_url: params.pdsUrl,
+      issuer: params.issuer
+    };
+    if (!this.isConfidential && params.pkceVerifier) {
+      body.pkce_verifier = params.pkceVerifier;
+    }
+    const resp = await this._fetch(`${this.instanceUrl}/oauth/sessions`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      const body2 = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to register session: ${resp.status} ${body2.message ?? resp.statusText}`,
+        resp.status,
+        body2
+      );
+    }
+    const data = await resp.json();
+    const storedSession = {
+      did: data.did,
+      dpopKey: params.dpopKey,
+      accessToken: params.accessToken,
+      clientKey: this.clientKey,
+      instanceUrl: this.instanceUrl
+    };
+    await this.storage.set(
+      `${STORAGE_PREFIX}${data.did}`,
+      JSON.stringify(storedSession)
+    );
+    await this.storage.set(LAST_ACTIVE_KEY, data.did);
+    return new HappyViewSession({
+      did: data.did,
+      dpopKey: params.dpopKey,
+      accessToken: params.accessToken,
+      clientKey: this.clientKey,
+      instanceUrl: this.instanceUrl,
+      crypto: this.crypto
+    });
+  }
+  async deleteSession(did) {
+    const headers = {
+      "x-client-key": this.clientKey
+    };
+    if (this.clientSecret) {
+      headers["x-client-secret"] = this.clientSecret;
+    }
+    const resp = await this._fetch(
+      `${this.instanceUrl}/oauth/sessions/${did}`,
+      {
+        method: "DELETE",
+        headers
+      }
+    );
+    if (!resp.ok && resp.status !== 404) {
+      const body = await resp.json().catch(() => ({}));
+      throw new ApiError(
+        `Failed to delete session: ${resp.status} ${body.message ?? resp.statusText}`,
+        resp.status,
+        body
+      );
+    }
+    await this.storage.delete(`${STORAGE_PREFIX}${did}`);
+    const lastActive = await this.storage.get(LAST_ACTIVE_KEY);
+    if (lastActive === did) {
+      await this.storage.delete(LAST_ACTIVE_KEY);
+    }
+  }
+  async restoreSession(did) {
+    const stored = await this.storage.get(`${STORAGE_PREFIX}${did}`);
+    if (!stored) return null;
+    const data = JSON.parse(stored);
+    return new HappyViewSession({
+      did: data.did,
+      dpopKey: data.dpopKey,
+      accessToken: data.accessToken,
+      clientKey: data.clientKey,
+      instanceUrl: data.instanceUrl,
+      crypto: this.crypto
+    });
+  }
+  async restore() {
+    const did = await this.storage.get(LAST_ACTIVE_KEY);
+    if (!did) return null;
+    return this.restoreSession(did);
+  }
+};
+export {
+  ApiError,
+  AuthenticationError,
+  HappyViewError,
+  HappyViewOAuthClient,
+  HappyViewSession,
+  InvalidStateError,
+  MemoryStorage,
+  ResolutionError,
+  TokenExchangeError,
+  base64urlEncode,
+  generateDpopProof
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/dpop-proof.ts","../src/session.ts","../src/storage.ts","../src/client.ts"],"sourcesContent":["export class HappyViewError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"HappyViewError\";\n  }\n}\n\nexport class ApiError extends HappyViewError {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body?: unknown) {\n    super(message);\n    this.name = \"ApiError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\nexport class AuthenticationError extends HappyViewError {\n  readonly status: number;\n\n  constructor(message: string, status: number = 401) {\n    super(message);\n    this.name = \"AuthenticationError\";\n    this.status = status;\n  }\n}\n\nexport class InvalidStateError extends HappyViewError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidStateError\";\n  }\n}\n\nexport class TokenExchangeError extends HappyViewError {\n  readonly status: number;\n  readonly body: string;\n\n  constructor(message: string, status: number, body: string) {\n    super(message);\n    this.name = \"TokenExchangeError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\nexport class ResolutionError extends HappyViewError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ResolutionError\";\n  }\n}\n","import type { CryptoAdapter } from \"./types\";\n\nexport function base64urlEncode(data: Uint8Array): string {\n  let binary = \"\";\n  for (let i = 0; i < data.length; i++) {\n    binary += String.fromCharCode(data[i]);\n  }\n  return btoa(binary)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\nexport interface DpopProofParams {\n  privateKey: JsonWebKey;\n  method: string;\n  url: string;\n  accessToken?: string;\n  nonce?: string;\n}\n\nexport async function generateDpopProof(\n  crypto: CryptoAdapter,\n  params: DpopProofParams,\n): Promise<string> {\n  const { privateKey, method, url, accessToken, nonce } = params;\n\n  const publicJwk = {\n    kty: privateKey.kty,\n    crv: privateKey.crv,\n    x: privateKey.x,\n    y: privateKey.y,\n  };\n\n  const header = {\n    alg: \"ES256\",\n    typ: \"dpop+jwt\",\n    jwk: publicJwk,\n  };\n\n  // Generate jti\n  const jtiBytes = crypto.getRandomValues(16);\n  const jti = Array.from(jtiBytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n\n  const payload: Record<string, unknown> = {\n    htm: method,\n    htu: url,\n    iat: Math.floor(Date.now() / 1000),\n    jti,\n  };\n\n  // Compute ath: base64url(SHA-256(access_token)) — only when token is present\n  if (accessToken) {\n    const tokenBytes = new TextEncoder().encode(accessToken);\n    const hashBuf = await crypto.sha256(tokenBytes);\n    payload.ath = base64urlEncode(hashBuf);\n  }\n\n  if (nonce !== undefined) {\n    payload.nonce = nonce;\n  }\n\n  const headerB64 = base64urlEncode(\n    new TextEncoder().encode(JSON.stringify(header)),\n  );\n  const payloadB64 = base64urlEncode(\n    new TextEncoder().encode(JSON.stringify(payload)),\n  );\n\n  const message = new TextEncoder().encode(`${headerB64}.${payloadB64}`);\n  const signature = await crypto.signEs256(privateKey, message);\n  const sigB64 = base64urlEncode(signature);\n\n  return `${headerB64}.${payloadB64}.${sigB64}`;\n}\n","import { generateDpopProof } from \"./dpop-proof\";\nimport type { CryptoAdapter } from \"./types\";\n\nexport interface HappyViewSessionOptions {\n  did: string;\n  dpopKey: JsonWebKey;\n  accessToken: string;\n  clientKey: string;\n  instanceUrl: string;\n  crypto: CryptoAdapter;\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class HappyViewSession {\n  readonly did: string;\n\n  private readonly dpopKey: JsonWebKey;\n  private readonly accessToken: string;\n  private readonly clientKey: string;\n  private readonly instanceUrl: string;\n  private readonly crypto: CryptoAdapter;\n  private readonly _fetch: typeof globalThis.fetch;\n  private dpopNonce: string | undefined;\n\n  constructor(options: HappyViewSessionOptions) {\n    this.did = options.did;\n    this.dpopKey = options.dpopKey;\n    this.accessToken = options.accessToken;\n    this.clientKey = options.clientKey;\n    this.instanceUrl = options.instanceUrl.replace(/\\/+$/, \"\");\n    this.crypto = options.crypto;\n    this._fetch = options.fetch ?? globalThis.fetch;\n  }\n\n  async fetchHandler(url: string, init: RequestInit): Promise<Response> {\n    const fullUrl = /^https?:\\/\\//i.test(url) ? url : `${this.instanceUrl}${url}`;\n    const method = (init.method ?? \"GET\").toUpperCase();\n\n    const proof = await generateDpopProof(this.crypto, {\n      privateKey: this.dpopKey,\n      method,\n      url: fullUrl,\n      accessToken: this.accessToken,\n      nonce: this.dpopNonce,\n    });\n\n    const headers = new Headers(init.headers);\n    headers.set(\"authorization\", `DPoP ${this.accessToken}`);\n    headers.set(\"dpop\", proof);\n    headers.set(\"x-client-key\", this.clientKey);\n\n    const response = await this._fetch(fullUrl, {\n      ...init,\n      headers,\n    });\n\n    const nonce = response.headers.get(\"dpop-nonce\");\n    if (nonce) {\n      this.dpopNonce = nonce;\n    }\n\n    return response;\n  }\n}\n","import type { StorageAdapter } from \"./types\";\n\nexport class MemoryStorage implements StorageAdapter {\n  private data = new Map<string, string>();\n\n  async get(key: string): Promise<string | null> {\n    return this.data.get(key) ?? null;\n  }\n\n  async set(key: string, value: string): Promise<void> {\n    this.data.set(key, value);\n  }\n\n  async delete(key: string): Promise<void> {\n    this.data.delete(key);\n  }\n}\n","import { ApiError } from \"./errors\";\nimport { HappyViewSession } from \"./session\";\nimport { MemoryStorage } from \"./storage\";\nimport type {\n  CryptoAdapter,\n  HappyViewOAuthClientOptions,\n  ProvisionKeyResponse,\n  RegisterSessionParams,\n  RegisterSessionResponse,\n  StorageAdapter,\n  StoredSession,\n} from \"./types\";\n\nconst STORAGE_PREFIX = \"happyview:session:\";\nconst LAST_ACTIVE_KEY = \"happyview:last-active-did\";\n\nexport class HappyViewOAuthClient {\n  protected readonly instanceUrl: string;\n  protected readonly clientKey: string;\n  protected readonly crypto: CryptoAdapter;\n  protected readonly storage: StorageAdapter;\n  private readonly clientSecret: string | undefined;\n  private readonly _fetch: typeof globalThis.fetch;\n\n  constructor(\n    options: HappyViewOAuthClientOptions & {\n      fetch?: typeof globalThis.fetch;\n    },\n  ) {\n    this.instanceUrl = options.instanceUrl.replace(/\\/+$/, \"\");\n    this.clientKey = options.clientKey;\n    this.clientSecret = options.clientSecret;\n    this.crypto = options.crypto;\n    this.storage = options.storage ?? new MemoryStorage();\n    this._fetch = options.fetch ?? globalThis.fetch;\n  }\n\n  get isConfidential(): boolean {\n    return this.clientSecret !== undefined;\n  }\n\n  async provisionDpopKey(): Promise<{\n    provisionId: string;\n    dpopKey: JsonWebKey;\n    pkceVerifier?: string;\n  }> {\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const body: Record<string, unknown> = {};\n    let pkceVerifier: string | undefined;\n\n    if (!this.isConfidential) {\n      pkceVerifier = await this.crypto.generatePkceVerifier();\n      const challenge = await this.crypto.computePkceChallenge(pkceVerifier);\n      body.pkce_challenge = challenge;\n    }\n\n    const resp = await this._fetch(`${this.instanceUrl}/oauth/dpop-keys`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to provision DPoP key: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    const data: ProvisionKeyResponse = await resp.json();\n    return {\n      provisionId: data.provision_id,\n      dpopKey: data.dpop_key,\n      pkceVerifier,\n    };\n  }\n\n  async registerSession(\n    params: RegisterSessionParams,\n  ): Promise<HappyViewSession> {\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const body: Record<string, unknown> = {\n      provision_id: params.provisionId,\n      did: params.did,\n      access_token: params.accessToken,\n      refresh_token: params.refreshToken,\n      scopes: params.scopes,\n      pds_url: params.pdsUrl,\n      issuer: params.issuer,\n    };\n\n    if (!this.isConfidential && params.pkceVerifier) {\n      body.pkce_verifier = params.pkceVerifier;\n    }\n\n    const resp = await this._fetch(`${this.instanceUrl}/oauth/sessions`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to register session: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    const data: RegisterSessionResponse = await resp.json();\n\n    const storedSession: StoredSession = {\n      did: data.did,\n      dpopKey: params.dpopKey,\n      accessToken: params.accessToken,\n      clientKey: this.clientKey,\n      instanceUrl: this.instanceUrl,\n    };\n    await this.storage.set(\n      `${STORAGE_PREFIX}${data.did}`,\n      JSON.stringify(storedSession),\n    );\n    await this.storage.set(LAST_ACTIVE_KEY, data.did);\n\n    return new HappyViewSession({\n      did: data.did,\n      dpopKey: params.dpopKey,\n      accessToken: params.accessToken,\n      clientKey: this.clientKey,\n      instanceUrl: this.instanceUrl,\n      crypto: this.crypto,\n    });\n  }\n\n  async deleteSession(did: string): Promise<void> {\n    const headers: Record<string, string> = {\n      \"x-client-key\": this.clientKey,\n    };\n    if (this.clientSecret) {\n      headers[\"x-client-secret\"] = this.clientSecret;\n    }\n\n    const resp = await this._fetch(\n      `${this.instanceUrl}/oauth/sessions/${did}`,\n      {\n        method: \"DELETE\",\n        headers,\n      },\n    );\n\n    if (!resp.ok && resp.status !== 404) {\n      const body = await resp.json().catch(() => ({}));\n      throw new ApiError(\n        `Failed to delete session: ${resp.status} ${(body as any).message ?? resp.statusText}`,\n        resp.status,\n        body,\n      );\n    }\n\n    await this.storage.delete(`${STORAGE_PREFIX}${did}`);\n\n    const lastActive = await this.storage.get(LAST_ACTIVE_KEY);\n    if (lastActive === did) {\n      await this.storage.delete(LAST_ACTIVE_KEY);\n    }\n  }\n\n  async restoreSession(did: string): Promise<HappyViewSession | null> {\n    const stored = await this.storage.get(`${STORAGE_PREFIX}${did}`);\n    if (!stored) return null;\n\n    const data: StoredSession = JSON.parse(stored);\n    return new HappyViewSession({\n      did: data.did,\n      dpopKey: data.dpopKey,\n      accessToken: data.accessToken,\n      clientKey: data.clientKey,\n      instanceUrl: data.instanceUrl,\n      crypto: this.crypto,\n    });\n  }\n\n  async restore(): Promise<HappyViewSession | null> {\n    const did = await this.storage.get(LAST_ACTIVE_KEY);\n    if (!did) return null;\n    return this.restoreSession(did);\n  }\n}\n"],"mappings":";AAAO,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACxC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,WAAN,cAAuB,eAAe;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAgB;AAC3D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,eAAe;AAAA,EAC7C;AAAA,EAET,YAAY,SAAiB,SAAiB,KAAK;AACjD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,oBAAN,cAAgC,eAAe;AAAA,EACpD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,qBAAN,cAAiC,eAAe;AAAA,EAC5C;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAc;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,eAAe;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACnDO,SAAS,gBAAgB,MAA0B;AACxD,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,cAAU,OAAO,aAAa,KAAK,CAAC,CAAC;AAAA,EACvC;AACA,SAAO,KAAK,MAAM,EACf,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AACtB;AAUA,eAAsB,kBACpB,QACA,QACiB;AACjB,QAAM,EAAE,YAAY,QAAQ,KAAK,aAAa,MAAM,IAAI;AAExD,QAAM,YAAY;AAAA,IAChB,KAAK,WAAW;AAAA,IAChB,KAAK,WAAW;AAAA,IAChB,GAAG,WAAW;AAAA,IACd,GAAG,WAAW;AAAA,EAChB;AAEA,QAAM,SAAS;AAAA,IACb,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AAGA,QAAM,WAAW,OAAO,gBAAgB,EAAE;AAC1C,QAAM,MAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAEhF,QAAM,UAAmC;AAAA,IACvC,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,aAAa,IAAI,YAAY,EAAE,OAAO,WAAW;AACvD,UAAM,UAAU,MAAM,OAAO,OAAO,UAAU;AAC9C,YAAQ,MAAM,gBAAgB,OAAO;AAAA,EACvC;AAEA,MAAI,UAAU,QAAW;AACvB,YAAQ,QAAQ;AAAA,EAClB;AAEA,QAAM,YAAY;AAAA,IAChB,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC;AAAA,EACjD;AACA,QAAM,aAAa;AAAA,IACjB,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,OAAO,CAAC;AAAA,EAClD;AAEA,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,GAAG,SAAS,IAAI,UAAU,EAAE;AACrE,QAAM,YAAY,MAAM,OAAO,UAAU,YAAY,OAAO;AAC5D,QAAM,SAAS,gBAAgB,SAAS;AAExC,SAAO,GAAG,SAAS,IAAI,UAAU,IAAI,MAAM;AAC7C;;;AC7DO,IAAM,mBAAN,MAAuB;AAAA,EACnB;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EAER,YAAY,SAAkC;AAC5C,SAAK,MAAM,QAAQ;AACnB,SAAK,UAAU,QAAQ;AACvB,SAAK,cAAc,QAAQ;AAC3B,SAAK,YAAY,QAAQ;AACzB,SAAK,cAAc,QAAQ,YAAY,QAAQ,QAAQ,EAAE;AACzD,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ,SAAS,WAAW;AAAA,EAC5C;AAAA,EAEA,MAAM,aAAa,KAAa,MAAsC;AACpE,UAAM,UAAU,gBAAgB,KAAK,GAAG,IAAI,MAAM,GAAG,KAAK,WAAW,GAAG,GAAG;AAC3E,UAAM,UAAU,KAAK,UAAU,OAAO,YAAY;AAElD,UAAM,QAAQ,MAAM,kBAAkB,KAAK,QAAQ;AAAA,MACjD,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,KAAK;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,OAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,QAAQ,KAAK,WAAW,EAAE;AACvD,YAAQ,IAAI,QAAQ,KAAK;AACzB,YAAQ,IAAI,gBAAgB,KAAK,SAAS;AAE1C,UAAM,WAAW,MAAM,KAAK,OAAO,SAAS;AAAA,MAC1C,GAAG;AAAA,MACH;AAAA,IACF,CAAC;AAED,UAAM,QAAQ,SAAS,QAAQ,IAAI,YAAY;AAC/C,QAAI,OAAO;AACT,WAAK,YAAY;AAAA,IACnB;AAEA,WAAO;AAAA,EACT;AACF;;;AC7DO,IAAM,gBAAN,MAA8C;AAAA,EAC3C,OAAO,oBAAI,IAAoB;AAAA,EAEvC,MAAM,IAAI,KAAqC;AAC7C,WAAO,KAAK,KAAK,IAAI,GAAG,KAAK;AAAA,EAC/B;AAAA,EAEA,MAAM,IAAI,KAAa,OAA8B;AACnD,SAAK,KAAK,IAAI,KAAK,KAAK;AAAA,EAC1B;AAAA,EAEA,MAAM,OAAO,KAA4B;AACvC,SAAK,KAAK,OAAO,GAAG;AAAA,EACtB;AACF;;;ACHA,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAEjB,IAAM,uBAAN,MAA2B;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACF;AAAA,EACA;AAAA,EAEjB,YACE,SAGA;AACA,SAAK,cAAc,QAAQ,YAAY,QAAQ,QAAQ,EAAE;AACzD,SAAK,YAAY,QAAQ;AACzB,SAAK,eAAe,QAAQ;AAC5B,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,IAAI,cAAc;AACpD,SAAK,SAAS,QAAQ,SAAS,WAAW;AAAA,EAC5C;AAAA,EAEA,IAAI,iBAA0B;AAC5B,WAAO,KAAK,iBAAiB;AAAA,EAC/B;AAAA,EAEA,MAAM,mBAIH;AACD,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAgC,CAAC;AACvC,QAAI;AAEJ,QAAI,CAAC,KAAK,gBAAgB;AACxB,qBAAe,MAAM,KAAK,OAAO,qBAAqB;AACtD,YAAM,YAAY,MAAM,KAAK,OAAO,qBAAqB,YAAY;AACrE,WAAK,iBAAiB;AAAA,IACxB;AAEA,UAAM,OAAO,MAAM,KAAK,OAAO,GAAG,KAAK,WAAW,oBAAoB;AAAA,MACpE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,KAAK,IAAI;AACZ,YAAMA,QAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,iCAAiC,KAAK,MAAM,IAAKA,MAAa,WAAW,KAAK,UAAU;AAAA,QACxF,KAAK;AAAA,QACLA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAA6B,MAAM,KAAK,KAAK;AACnD,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,MAClB,SAAS,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBACJ,QAC2B;AAC3B,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAgC;AAAA,MACpC,cAAc,OAAO;AAAA,MACrB,KAAK,OAAO;AAAA,MACZ,cAAc,OAAO;AAAA,MACrB,eAAe,OAAO;AAAA,MACtB,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO;AAAA,IACjB;AAEA,QAAI,CAAC,KAAK,kBAAkB,OAAO,cAAc;AAC/C,WAAK,gBAAgB,OAAO;AAAA,IAC9B;AAEA,UAAM,OAAO,MAAM,KAAK,OAAO,GAAG,KAAK,WAAW,mBAAmB;AAAA,MACnE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,KAAK,IAAI;AACZ,YAAMA,QAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,+BAA+B,KAAK,MAAM,IAAKA,MAAa,WAAW,KAAK,UAAU;AAAA,QACtF,KAAK;AAAA,QACLA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAgC,MAAM,KAAK,KAAK;AAEtD,UAAM,gBAA+B;AAAA,MACnC,KAAK,KAAK;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,IACpB;AACA,UAAM,KAAK,QAAQ;AAAA,MACjB,GAAG,cAAc,GAAG,KAAK,GAAG;AAAA,MAC5B,KAAK,UAAU,aAAa;AAAA,IAC9B;AACA,UAAM,KAAK,QAAQ,IAAI,iBAAiB,KAAK,GAAG;AAEhD,WAAO,IAAI,iBAAiB;AAAA,MAC1B,KAAK,KAAK;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,KAA4B;AAC9C,UAAM,UAAkC;AAAA,MACtC,gBAAgB,KAAK;AAAA,IACvB;AACA,QAAI,KAAK,cAAc;AACrB,cAAQ,iBAAiB,IAAI,KAAK;AAAA,IACpC;AAEA,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB,GAAG,KAAK,WAAW,mBAAmB,GAAG;AAAA,MACzC;AAAA,QACE,QAAQ;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,KAAK,MAAM,KAAK,WAAW,KAAK;AACnC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI;AAAA,QACR,6BAA6B,KAAK,MAAM,IAAK,KAAa,WAAW,KAAK,UAAU;AAAA,QACpF,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAEA,UAAM,KAAK,QAAQ,OAAO,GAAG,cAAc,GAAG,GAAG,EAAE;AAEnD,UAAM,aAAa,MAAM,KAAK,QAAQ,IAAI,eAAe;AACzD,QAAI,eAAe,KAAK;AACtB,YAAM,KAAK,QAAQ,OAAO,eAAe;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,KAA+C;AAClE,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,GAAG,cAAc,GAAG,GAAG,EAAE;AAC/D,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,OAAsB,KAAK,MAAM,MAAM;AAC7C,WAAO,IAAI,iBAAiB;AAAA,MAC1B,KAAK,KAAK;AAAA,MACV,SAAS,KAAK;AAAA,MACd,aAAa,KAAK;AAAA,MAClB,WAAW,KAAK;AAAA,MAChB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAA4C;AAChD,UAAM,MAAM,MAAM,KAAK,QAAQ,IAAI,eAAe;AAClD,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO,KAAK,eAAe,GAAG;AAAA,EAChC;AACF;","names":["body"]}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@happyview/oauth-client",
+  "version": "1.0.0",
+  "description": "HappyView OAuth client for ATProto DPoP authentication",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gamesgamesgamesgamesgames/happyview.git",
+    "directory": "packages/oauth-client"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsup",
+    "test": "bun test",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.5",
+    "@semantic-release/release-notes-generator": "^14.1.0",
+    "@types/bun": "^1.3.12",
+    "semantic-release": "^25.0.3",
+    "semantic-release-monorepo": "^8.0.2",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.0"
+  }
+}