@haven-chat-org/core 1.0.0

package/dist/net/api.js

@@ -0,0 +1,715 @@
+import { getSodium, initSodium } from "../crypto/utils.js";
+import { isLoginSuccess, } from "../types.js";
+/**
+ * Type-safe REST client for the Haven backend.
+ * Handles JWT token management and automatic refresh.
+ */
+export class HavenApi {
+    baseUrl;
+    accessToken = null;
+    refreshToken = null;
+    onTokenExpired;
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/$/, "");
+        this.onTokenExpired = options.onTokenExpired;
+    }
+    /** Set auth tokens (after login/register/refresh). */
+    setTokens(access, refresh) {
+        this.accessToken = access;
+        this.refreshToken = refresh;
+    }
+    clearTokens() {
+        this.accessToken = null;
+        this.refreshToken = null;
+    }
+    get currentAccessToken() {
+        return this.accessToken;
+    }
+    // ─── Auth ────────────────────────────────────────
+    /** Fetch a PoW challenge from the server. */
+    async getChallenge() {
+        return this.get("/api/v1/auth/challenge");
+    }
+    /**
+     * Register a new account. Automatically fetches and solves a PoW challenge.
+     * The PoW solving runs in a Web Worker when available, otherwise falls back to main thread.
+     */
+    async register(input) {
+        // 1. Fetch challenge
+        const { challenge, difficulty } = await this.getChallenge();
+        // 2. Solve PoW
+        const nonce = await solvePoW(challenge, difficulty);
+        // 3. Submit registration with PoW solution
+        const res = await this.post("/api/v1/auth/register", {
+            ...input,
+            pow_challenge: challenge,
+            pow_nonce: nonce,
+        });
+        this.setTokens(res.access_token, res.refresh_token);
+        return res;
+    }
+    async login(req) {
+        const res = await this.post("/api/v1/auth/login", req);
+        if (isLoginSuccess(res)) {
+            this.setTokens(res.access_token, res.refresh_token);
+        }
+        return res;
+    }
+    async refresh() {
+        if (!this.refreshToken)
+            throw new Error("No refresh token");
+        const req = { refresh_token: this.refreshToken };
+        const res = await this.post("/api/v1/auth/refresh", req);
+        this.setTokens(res.access_token, res.refresh_token);
+        return res;
+    }
+    async logout() {
+        await this.post("/api/v1/auth/logout", {});
+        this.clearTokens();
+    }
+    async totpSetup() {
+        return this.post("/api/v1/auth/totp/setup", {});
+    }
+    async totpVerify(req) {
+        await this.post("/api/v1/auth/totp/verify", req);
+    }
+    async totpDisable() {
+        await this.delete("/api/v1/auth/totp");
+    }
+    async changePassword(req) {
+        await this.put("/api/v1/auth/password", req);
+    }
+    async getSessions() {
+        return this.get("/api/v1/auth/sessions");
+    }
+    async revokeSession(familyId) {
+        await this.delete(`/api/v1/auth/sessions/${familyId}`);
+    }
+    // ─── Users ────────────────────────────────────────
+    async getUserByUsername(username) {
+        return this.get(`/api/v1/users/search?username=${encodeURIComponent(username)}`);
+    }
+    // ─── Keys ────────────────────────────────────────
+    async getKeyBundle(userId) {
+        return this.get(`/api/v1/users/${userId}/keys`);
+    }
+    async uploadPreKeys(req) {
+        await this.post("/api/v1/keys/prekeys", req);
+    }
+    /** Delete all unused one-time prekeys from the server (stale keys whose private keys are lost). */
+    async clearPreKeys() {
+        await this.delete("/api/v1/keys/prekeys");
+    }
+    async getPreKeyCount() {
+        return this.get("/api/v1/keys/prekeys/count");
+    }
+    async updateKeys(req) {
+        await this.put("/api/v1/keys/identity", req);
+    }
+    // ─── Key Backup ─────────────────────────────────
+    async uploadKeyBackup(req) {
+        await this.put("/api/v1/keys/backup", req);
+    }
+    async getKeyBackup() {
+        return this.get("/api/v1/keys/backup");
+    }
+    async getKeyBackupStatus() {
+        return this.get("/api/v1/keys/backup/status");
+    }
+    async deleteKeyBackup() {
+        await this.delete("/api/v1/keys/backup");
+    }
+    // ─── Servers ─────────────────────────────────────
+    async listServers() {
+        return this.get("/api/v1/servers");
+    }
+    async createServer(req) {
+        return this.post("/api/v1/servers", req);
+    }
+    async getServer(serverId) {
+        return this.get(`/api/v1/servers/${serverId}`);
+    }
+    async getMyPermissions(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/members/@me/permissions`);
+    }
+    async updateServer(serverId, req) {
+        return this.patch(`/api/v1/servers/${serverId}`, req);
+    }
+    async listServerChannels(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/channels`);
+    }
+    async createChannel(serverId, req) {
+        return this.post(`/api/v1/servers/${serverId}/channels`, req);
+    }
+    // ─── Channels ────────────────────────────────────
+    async joinChannel(channelId) {
+        await this.post(`/api/v1/channels/${channelId}/join`, {});
+    }
+    async updateChannel(channelId, req) {
+        return this.put(`/api/v1/channels/${channelId}`, req);
+    }
+    async deleteChannel(channelId) {
+        await this.delete(`/api/v1/channels/${channelId}`);
+    }
+    async listDmChannels() {
+        return this.get("/api/v1/dm");
+    }
+    async createDm(req) {
+        return this.post("/api/v1/dm", req);
+    }
+    async createGroupDm(req) {
+        return this.post("/api/v1/dm/group", req);
+    }
+    async listChannelMembers(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/members`);
+    }
+    async leaveChannel(channelId) {
+        await this.delete(`/api/v1/channels/${channelId}/leave`);
+    }
+    async hideChannel(channelId) {
+        await this.put(`/api/v1/channels/${channelId}/hide`, {});
+    }
+    async logExport(req) {
+        await this.post(`/api/v1/exports/log`, req);
+    }
+    async restoreServer(serverId, data) {
+        return this.post(`/api/v1/servers/${serverId}/restore`, data);
+    }
+    async importMessages(channelId, messages) {
+        return this.post(`/api/v1/channels/${channelId}/import-messages`, { messages });
+    }
+    // ─── Channel Categories ─────────────────────────
+    async listCategories(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/categories`);
+    }
+    async createCategory(serverId, req) {
+        return this.post(`/api/v1/servers/${serverId}/categories`, req);
+    }
+    async updateCategory(serverId, categoryId, req) {
+        return this.put(`/api/v1/servers/${serverId}/categories/${categoryId}`, req);
+    }
+    async deleteCategory(serverId, categoryId) {
+        await this.delete(`/api/v1/servers/${serverId}/categories/${categoryId}`);
+    }
+    async reorderCategories(serverId, req) {
+        await this.put(`/api/v1/servers/${serverId}/categories/reorder`, req);
+    }
+    async reorderChannels(serverId, req) {
+        await this.put(`/api/v1/servers/${serverId}/channels/reorder`, req);
+    }
+    async setChannelCategory(channelId, req) {
+        return this.put(`/api/v1/channels/${channelId}/category`, req);
+    }
+    // ─── Roles & Permissions ────────────────────────
+    async listRoles(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/roles`);
+    }
+    async createRole(serverId, req) {
+        return this.post(`/api/v1/servers/${serverId}/roles`, req);
+    }
+    async updateRole(serverId, roleId, req) {
+        return this.put(`/api/v1/servers/${serverId}/roles/${roleId}`, req);
+    }
+    async deleteRole(serverId, roleId) {
+        await this.delete(`/api/v1/servers/${serverId}/roles/${roleId}`);
+    }
+    async assignRole(serverId, userId, req) {
+        await this.put(`/api/v1/servers/${serverId}/members/${userId}/roles`, req);
+    }
+    async unassignRole(serverId, userId, roleId) {
+        await this.delete(`/api/v1/servers/${serverId}/members/${userId}/roles/${roleId}`);
+    }
+    async listOverwrites(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/overwrites`);
+    }
+    async setOverwrite(channelId, req) {
+        return this.put(`/api/v1/channels/${channelId}/overwrites`, req);
+    }
+    async deleteOverwrite(channelId, targetType, targetId) {
+        await this.delete(`/api/v1/channels/${channelId}/overwrites/${targetType}/${targetId}`);
+    }
+    // ─── Messages ────────────────────────────────────
+    async getMessages(channelId, query) {
+        const params = new URLSearchParams();
+        if (query?.before)
+            params.set("before", query.before);
+        if (query?.limit)
+            params.set("limit", String(query.limit));
+        const qs = params.toString();
+        return this.get(`/api/v1/channels/${channelId}/messages${qs ? `?${qs}` : ""}`);
+    }
+    async sendMessage(channelId, req) {
+        return this.post(`/api/v1/channels/${channelId}/messages`, req);
+    }
+    async getChannelReactions(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/reactions`);
+    }
+    async getMessageReactions(messageId) {
+        return this.get(`/api/v1/messages/${messageId}/reactions`);
+    }
+    async getPinnedMessages(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/pins`);
+    }
+    async getPinnedMessageIds(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/pin-ids`);
+    }
+    // ─── Attachments ─────────────────────────────────
+    /** Upload encrypted blob directly to backend. Returns attachment_id + storage_key. */
+    async uploadAttachment(blob) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+        };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/attachments/upload`, {
+            method: "POST",
+            headers,
+            body: blob,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        return res.json();
+    }
+    /** Download encrypted blob from backend. Returns raw bytes. */
+    async downloadAttachment(attachmentId) {
+        const headers = {};
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/attachments/${attachmentId}`, {
+            method: "GET",
+            headers,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            throw new HavenApiError(`Download failed: ${res.statusText}`, res.status);
+        }
+        return res.arrayBuffer();
+    }
+    // ─── Export ────────────────────────────────────────
+    /** Toggle DM export consent for a channel. */
+    async setExportConsent(channelId, allowed) {
+        await this.put(`/api/v1/channels/${channelId}/export-consent`, { export_allowed: allowed });
+    }
+    // ─── Invites ───────────────────────────────────────
+    async createInvite(serverId, req) {
+        return this.post(`/api/v1/servers/${serverId}/invites`, req);
+    }
+    async listInvites(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/invites`);
+    }
+    async deleteInvite(serverId, inviteId) {
+        await this.delete(`/api/v1/servers/${serverId}/invites/${inviteId}`);
+    }
+    async joinByInvite(code) {
+        return this.post(`/api/v1/invites/${code}/join`, {});
+    }
+    // ─── Server Members ───────────────────────────────
+    async listServerMembers(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/members?limit=100`);
+    }
+    async kickMember(serverId, userId) {
+        await this.delete(`/api/v1/servers/${serverId}/members/${userId}`);
+    }
+    async setNickname(serverId, nickname) {
+        await this.put(`/api/v1/servers/${serverId}/nickname`, { nickname });
+    }
+    async setMemberNickname(serverId, userId, nickname) {
+        await this.put(`/api/v1/servers/${serverId}/members/${userId}/nickname`, { nickname });
+    }
+    async leaveServer(serverId) {
+        await this.delete(`/api/v1/servers/${serverId}/members/@me`);
+    }
+    async deleteServer(serverId) {
+        await this.delete(`/api/v1/servers/${serverId}`);
+    }
+    // ─── Bans ──────────────────────────────────────────
+    async banMember(serverId, userId, req) {
+        return this.post(`/api/v1/servers/${serverId}/bans/${userId}`, req);
+    }
+    async revokeBan(serverId, userId) {
+        await this.delete(`/api/v1/servers/${serverId}/bans/${userId}`);
+    }
+    async listBans(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/bans`);
+    }
+    // ─── Read States ─────────────────────────────────────
+    async markChannelRead(channelId) {
+        return this.put(`/api/v1/channels/${channelId}/read-state`, {});
+    }
+    async getReadStates() {
+        return this.get("/api/v1/channels/read-states");
+    }
+    // ─── Admin Dashboard ────────────────────────────────
+    async getAdminStats() {
+        return this.get("/api/v1/admin/stats");
+    }
+    async listAdminUsers(search, limit, offset) {
+        const params = new URLSearchParams();
+        if (search)
+            params.set("search", search);
+        if (limit !== undefined)
+            params.set("limit", String(limit));
+        if (offset !== undefined)
+            params.set("offset", String(offset));
+        const qs = params.toString();
+        return this.get(`/api/v1/admin/users${qs ? `?${qs}` : ""}`);
+    }
+    async setUserAdmin(userId, isAdmin) {
+        const body = { is_admin: isAdmin };
+        await this.put(`/api/v1/admin/users/${userId}/admin`, body);
+    }
+    async adminDeleteUser(userId) {
+        await this.delete(`/api/v1/admin/users/${userId}`);
+    }
+    // ─── Timeouts ───────────────────────────────────────
+    async timeoutMember(serverId, userId, durationSeconds, reason) {
+        const body = { duration_seconds: durationSeconds, reason };
+        await this.put(`/api/v1/servers/${serverId}/members/${userId}/timeout`, body);
+    }
+    async removeTimeout(serverId, userId) {
+        await this.put(`/api/v1/servers/${serverId}/members/${userId}/timeout`, { duration_seconds: 0 });
+    }
+    // ─── Bulk Delete ────────────────────────────────────
+    async bulkDeleteMessages(channelId, messageIds) {
+        const body = { message_ids: messageIds };
+        await this.post(`/api/v1/channels/${channelId}/messages/bulk-delete`, body);
+    }
+    // ─── Audit Log ──────────────────────────────────────
+    async getAuditLog(serverId, opts) {
+        const params = new URLSearchParams();
+        if (opts?.limit)
+            params.set("limit", String(opts.limit));
+        if (opts?.before)
+            params.set("before", opts.before);
+        const qs = params.toString();
+        return this.get(`/api/v1/servers/${serverId}/audit-log${qs ? `?${qs}` : ""}`);
+    }
+    // ─── Group DM Members ──────────────────────────────
+    async addGroupMember(channelId, userId) {
+        await this.post(`/api/v1/channels/${channelId}/members`, { user_id: userId });
+    }
+    // ─── Sender Keys ───────────────────────────────────
+    async distributeSenderKeys(channelId, req) {
+        await this.post(`/api/v1/channels/${channelId}/sender-keys`, req);
+    }
+    async getSenderKeys(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/sender-keys`);
+    }
+    async getChannelMemberKeys(channelId) {
+        return this.get(`/api/v1/channels/${channelId}/members/keys`);
+    }
+    // ─── Link Previews ──────────────────────────────
+    async fetchLinkPreview(url) {
+        return this.get(`/api/v1/link-preview?url=${encodeURIComponent(url)}`);
+    }
+    // ─── Presence ─────────────────────────────────────
+    async getPresence(userIds) {
+        return this.get(`/api/v1/presence?user_ids=${userIds.join(",")}`);
+    }
+    // ─── User Profiles ──────────────────────────────
+    async getUserProfile(userId, serverId) {
+        const qs = serverId ? `?server_id=${serverId}` : "";
+        return this.get(`/api/v1/users/${userId}/profile${qs}`);
+    }
+    async updateProfile(req) {
+        return this.put(`/api/v1/users/profile`, req);
+    }
+    async uploadAvatar(blob) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+        };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/users/avatar`, {
+            method: "POST",
+            headers,
+            body: blob,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        return res.json();
+    }
+    async uploadBanner(blob) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+        };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/users/banner`, {
+            method: "POST",
+            headers,
+            body: blob,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        return res.json();
+    }
+    // ─── Profile Key Distribution ────────────────────
+    async distributeProfileKeys(req) {
+        return this.put(`/api/v1/users/profile-keys`, req);
+    }
+    async getProfileKey(userId) {
+        return this.get(`/api/v1/users/${userId}/profile-key`);
+    }
+    // ─── Friends ──────────────────────────────────────
+    async listFriends() {
+        return this.get("/api/v1/friends");
+    }
+    async sendFriendRequest(req) {
+        return this.post("/api/v1/friends/request", req);
+    }
+    async acceptFriendRequest(friendshipId) {
+        return this.post(`/api/v1/friends/${friendshipId}/accept`, {});
+    }
+    async declineFriendRequest(friendshipId) {
+        await this.post(`/api/v1/friends/${friendshipId}/decline`, {});
+    }
+    async removeFriend(friendshipId) {
+        await this.delete(`/api/v1/friends/${friendshipId}`);
+    }
+    // ─── DM Requests ─────────────────────────────────
+    async listDmRequests() {
+        return this.get("/api/v1/dm/requests");
+    }
+    async handleDmRequest(channelId, req) {
+        await this.post(`/api/v1/dm/${channelId}/request`, req);
+    }
+    async updateDmPrivacy(req) {
+        await this.put("/api/v1/users/dm-privacy", req);
+    }
+    // ─── Blocked Users ─────────────────────────────
+    async blockUser(userId) {
+        await this.post(`/api/v1/users/${userId}/block`, {});
+    }
+    async unblockUser(userId) {
+        await this.delete(`/api/v1/users/${userId}/block`);
+    }
+    async getBlockedUsers() {
+        return this.get("/api/v1/users/blocked");
+    }
+    // ─── Reports ──────────────────────────────────────
+    async reportMessage(req) {
+        return this.post("/api/v1/reports", req);
+    }
+    // ─── Custom Emojis ──────────────────────────────
+    async listServerEmojis(serverId) {
+        return this.get(`/api/v1/servers/${serverId}/emojis`);
+    }
+    async uploadEmoji(serverId, name, imageData) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+        };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/servers/${serverId}/emojis?name=${encodeURIComponent(name)}`, { method: "POST", headers, body: imageData });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        return res.json();
+    }
+    async renameEmoji(serverId, emojiId, name) {
+        return this.patch(`/api/v1/servers/${serverId}/emojis/${emojiId}`, { name });
+    }
+    async deleteEmoji(serverId, emojiId) {
+        await this.delete(`/api/v1/servers/${serverId}/emojis/${emojiId}`);
+    }
+    // ─── Server Icons ──────────────────────────────
+    async uploadServerIcon(serverId, blob) {
+        const headers = {
+            "Content-Type": "application/octet-stream",
+        };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}/api/v1/servers/${serverId}/icon`, {
+            method: "POST",
+            headers,
+            body: blob,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        return res.json();
+    }
+    async deleteServerIcon(serverId) {
+        await this.delete(`/api/v1/servers/${serverId}/icon`);
+    }
+    // ─── Registration Invites ──────────────────────
+    /** Check if the instance requires an invite code to register (no auth needed). */
+    async checkInviteRequired() {
+        return this.get("/api/v1/auth/invite-required");
+    }
+    /** List the current user's registration invite codes. */
+    async listMyRegistrationInvites() {
+        return this.get("/api/v1/registration-invites");
+    }
+    // ─── Account Deletion ──────────────────────────
+    async deleteAccount(password) {
+        await this.post("/api/v1/auth/delete-account", { password });
+    }
+    // ─── Voice ──────────────────────────────────────
+    async joinVoice(channelId) {
+        return this.post(`/api/v1/voice/${channelId}/join`, {});
+    }
+    async leaveVoice(channelId) {
+        await this.post(`/api/v1/voice/${channelId}/leave`, {});
+    }
+    async getVoiceParticipants(channelId) {
+        return this.get(`/api/v1/voice/${channelId}/participants`);
+    }
+    async serverMuteUser(channelId, userId, muted) {
+        await this.put(`/api/v1/voice/${channelId}/members/${userId}/mute`, { muted });
+    }
+    async serverDeafenUser(channelId, userId, deafened) {
+        await this.put(`/api/v1/voice/${channelId}/members/${userId}/deafen`, { deafened });
+    }
+    // ─── GIF Search ─────────────────────────────────
+    async searchGifs(query, offset) {
+        const params = new URLSearchParams({ q: query });
+        if (offset !== undefined)
+            params.set("offset", String(offset));
+        return this.get(`/api/v1/gifs/search?${params}`);
+    }
+    async trendingGifs() {
+        return this.get("/api/v1/gifs/trending");
+    }
+    // ─── HTTP Helpers ────────────────────────────────
+    async get(path) {
+        return this.request("GET", path);
+    }
+    async post(path, body) {
+        return this.request("POST", path, body);
+    }
+    async put(path, body) {
+        return this.request("PUT", path, body);
+    }
+    async patch(path, body) {
+        return this.request("PATCH", path, body);
+    }
+    async delete(path) {
+        return this.request("DELETE", path);
+    }
+    async request(method, path, body) {
+        const headers = { "Content-Type": "application/json" };
+        if (this.accessToken) {
+            headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method,
+            headers,
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        if (!res.ok) {
+            if (res.status === 401 && this.onTokenExpired) {
+                this.onTokenExpired();
+            }
+            const err = await res.json().catch(() => ({
+                error: res.statusText,
+                status: res.status,
+            }));
+            throw new HavenApiError(err.error, err.status);
+        }
+        const text = await res.text();
+        return (text ? JSON.parse(text) : undefined);
+    }
+}
+export class HavenApiError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = "HavenApiError";
+        this.status = status;
+    }
+}
+// ─── Proof-of-Work Solver ────────────────────────────
+/**
+ * Solve a PoW challenge: find a nonce such that SHA-256(challenge + nonce)
+ * has at least `difficulty` leading zero bits.
+ * Uses libsodium's crypto_hash_sha256 (works in insecure HTTP contexts,
+ * unlike crypto.subtle which requires HTTPS or localhost).
+ */
+async function solvePoW(challenge, difficulty) {
+    await initSodium();
+    const sodium = getSodium();
+    const encoder = new TextEncoder();
+    const prefix = encoder.encode(challenge);
+    for (let nonce = 0;; nonce++) {
+        const nonceStr = String(nonce);
+        const nonceBytes = encoder.encode(nonceStr);
+        // Concatenate challenge + nonce
+        const data = new Uint8Array(prefix.length + nonceBytes.length);
+        data.set(prefix);
+        data.set(nonceBytes, prefix.length);
+        const hash = sodium.crypto_hash_sha256(data);
+        if (hasLeadingZeroBits(hash, difficulty)) {
+            return nonceStr;
+        }
+        // Yield to event loop every 10000 iterations to avoid blocking UI
+        if (nonce % 10000 === 0 && nonce > 0) {
+            await new Promise((r) => setTimeout(r, 0));
+        }
+    }
+}
+/** Check if a hash has at least `n` leading zero bits. */
+function hasLeadingZeroBits(hash, n) {
+    let bits = 0;
+    for (const byte of hash) {
+        if (byte === 0) {
+            bits += 8;
+        }
+        else {
+            // Count leading zeros of this byte
+            bits += Math.clz32(byte) - 24; // clz32 counts 32-bit, byte is 8-bit
+            break;
+        }
+        if (bits >= n)
+            return true;
+    }
+    return bits >= n;
+}
+//# sourceMappingURL=api.js.map