@hexclave/shared 1.0.0

package/dist/esm/utils/jsx-editable-transpiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsx-editable-transpiler.js","names":[],"sources":["../../../src/utils/jsx-editable-transpiler.tsx"],"sourcesContent":["import generate from '@babel/generator';\nimport * as parser from '@babel/parser';\nimport traverse, { NodePath } from '@babel/traverse';\nimport * as t from '@babel/types';\nimport { createHash } from 'crypto';\n\n/**\n * Metadata for an editable text region in JSX source code.\n * This information is used by the AI to accurately locate and update text.\n */\nexport type EditableMetadata = {\n  /** Unique identifier for this editable region */\n  id: string,\n\n  /** Exact source code location */\n  loc: {\n    start: number,\n    end: number,\n    line: number,\n    column: number,\n  },\n\n  /** The original text content */\n  originalText: string,\n\n  /** Hash of original text for quick mismatch detection */\n  textHash: string,\n\n  /** JSX ancestry path from component root to this text node */\n  jsxPath: string[],\n\n  /** The immediate parent JSX element */\n  parentElement: {\n    tagName: string,\n    props: Record<string, string>,\n  },\n\n  /** Surrounding source context for disambiguation */\n  sourceContext: {\n    before: string,\n    after: string,\n  },\n\n  /** Index among sibling text nodes in the same parent */\n  siblingIndex: number,\n\n  /** Total count of this exact text in the source */\n  occurrenceCount: number,\n\n  /** Which occurrence this is (1-indexed) */\n  occurrenceIndex: number,\n\n  /** Which file this text is in */\n  sourceFile: \"template\" | \"theme\",\n};\n\n/**\n * Result of transpiling JSX source to include editable markers.\n */\nexport type TranspileResult = {\n  /** The transformed source code with __Editable wrappers */\n  code: string,\n  /** Map of editable region IDs to their metadata */\n  editableRegions: Record<string, EditableMetadata>,\n};\n\n/**\n * The __Editable component definition that gets injected into transformed source.\n * It renders sentinel tokens around text that will be converted to HTML comments.\n */\nconst EDITABLE_COMPONENT_CODE = `\nfunction __Editable({ __id, children }) {\n  return (\n    <>\n      {\\`⟦STACK_EDITABLE_START:\\${__id}⟧\\`}\n      {children}\n      {\\`⟦STACK_EDITABLE_END:\\${__id}⟧\\`}\n    </>\n  );\n}\nfunction __ExpressionTooltip({ __expr, children }) {\n  // Only render markers if children is a primitive (string/number), not a React element\n  if (typeof children === 'object' && children !== null) {\n    return children;\n  }\n  return (\n    <>\n      {\\`⟦STACK_EXPR_START:\\${__expr}⟧\\`}\n      {children}\n      {\\`⟦STACK_EXPR_END⟧\\`}\n    </>\n  );\n}\n`;\n\n/**\n * Transpiles TSX source code to wrap all static JSX text nodes with __Editable components.\n *\n * For example:\n * ```tsx\n * <Text>Hi, {name}! Welcome.</Text>\n * ```\n * becomes:\n * ```tsx\n * <Text>\n *   <__Editable __id=\"e1\">Hi, </__Editable>\n *   {name}\n *   <__Editable __id=\"e2\">! Welcome.</__Editable>\n * </Text>\n * ```\n */\nexport function transpileJsxForEditing(\n  source: string,\n  options: {\n    sourceFile: \"template\" | \"theme\",\n  }\n): TranspileResult {\n  const editableRegions: Record<string, EditableMetadata> = {};\n  let idCounter = 0;\n\n  // Count occurrences of each text for the occurrenceCount/occurrenceIndex fields\n  const textOccurrences = new Map<string, number>();\n\n  // First pass: count all text occurrences\n  const astForCounting = parser.parse(source, {\n    sourceType: 'module',\n    plugins: ['jsx', 'typescript'],\n  });\n\n  traverse(astForCounting, {\n    JSXText(path) {\n      const text = path.node.value;\n      // Skip whitespace-only text nodes\n      if (text.trim() === '') return;\n      textOccurrences.set(text, (textOccurrences.get(text) ?? 0) + 1);\n    },\n  });\n\n  // Track current occurrence index for each text\n  const textCurrentIndex = new Map<string, number>();\n\n  // Parse the source again for transformation\n  const ast = parser.parse(source, {\n    sourceType: 'module',\n    plugins: ['jsx', 'typescript'],\n  });\n\n  // Helper to get JSX ancestry path\n  function getJsxPath(path: NodePath<t.JSXText>): string[] {\n    const jsxPath: string[] = [];\n    let current: NodePath | null = path.parentPath;\n\n    while (current) {\n      if (t.isJSXElement(current.node)) {\n        const openingElement = current.node.openingElement;\n        if (t.isJSXIdentifier(openingElement.name)) {\n          jsxPath.unshift(openingElement.name.name);\n        } else if (t.isJSXMemberExpression(openingElement.name)) {\n          jsxPath.unshift(generate(openingElement.name).code);\n        }\n      } else if (t.isFunctionDeclaration(current.node) && current.node.id) {\n        jsxPath.unshift(current.node.id.name);\n        break;\n      } else if (t.isVariableDeclarator(current.node) && t.isIdentifier(current.node.id)) {\n        jsxPath.unshift(current.node.id.name);\n        break;\n      }\n      current = current.parentPath;\n    }\n\n    return jsxPath;\n  }\n\n  // Helper to get parent element info\n  function getParentElement(path: NodePath<t.JSXText>): { tagName: string, props: Record<string, string> } {\n    let current: NodePath | null = path.parentPath;\n\n    while (current) {\n      if (t.isJSXElement(current.node)) {\n        const openingElement = current.node.openingElement;\n        let tagName = '';\n\n        if (t.isJSXIdentifier(openingElement.name)) {\n          tagName = openingElement.name.name;\n        } else if (t.isJSXMemberExpression(openingElement.name)) {\n          tagName = generate(openingElement.name).code;\n        }\n\n        const props: Record<string, string> = {};\n        for (const attr of openingElement.attributes) {\n          if (t.isJSXAttribute(attr) && t.isJSXIdentifier(attr.name)) {\n            const propName = attr.name.name;\n            if (t.isStringLiteral(attr.value)) {\n              props[propName] = attr.value.value;\n            } else if (t.isJSXExpressionContainer(attr.value) && !t.isJSXEmptyExpression(attr.value.expression)) {\n              // For expressions, just note that it's dynamic\n              props[propName] = `{${generate(attr.value.expression).code}}`;\n            }\n          }\n        }\n\n        return { tagName, props };\n      }\n      current = current.parentPath;\n    }\n\n    return { tagName: 'unknown', props: {} };\n  }\n\n  // Helper to get sibling index among text nodes\n  function getSiblingIndex(path: NodePath<t.JSXText>): number {\n    const parent = path.parentPath;\n    if (!t.isJSXElement(parent.node) && !t.isJSXFragment(parent.node)) {\n      return 0;\n    }\n\n    const children = parent.node.children;\n    let textIndex = 0;\n\n    for (const child of children) {\n      if (child === path.node) {\n        return textIndex;\n      }\n      if (t.isJSXText(child) && child.value.trim() !== '') {\n        textIndex++;\n      }\n    }\n\n    return textIndex;\n  }\n\n  // Helper to get source context (lines before/after)\n  function getSourceContext(loc: { start: number, end: number }): { before: string, after: string } {\n    const lines = source.split('\\n');\n    let currentPos = 0;\n    let startLine = 0;\n\n    // Find line number for start position\n    for (let i = 0; i < lines.length; i++) {\n      if (currentPos + lines[i].length >= loc.start) {\n        startLine = i;\n        break;\n      }\n      currentPos += lines[i].length + 1; // +1 for newline\n    }\n\n    const beforeLines = lines.slice(Math.max(0, startLine - 3), startLine).join('\\n');\n    const afterLines = lines.slice(startLine + 1, startLine + 4).join('\\n');\n\n    return { before: beforeLines, after: afterLines };\n  }\n\n  // Transform JSXText nodes\n  traverse(ast, {\n    JSXText(path) {\n      const decodedText = path.node.value;\n\n      // Skip whitespace-only text nodes\n      if (decodedText.trim() === '') return;\n\n      // Skip if node doesn't have location info\n      // Use explicit null checks since start/end can validly be 0\n      if (!path.node.loc || path.node.start == null || path.node.end == null) return;\n\n      // IMPORTANT: Use the RAW source text, not the decoded path.node.value\n      // Babel's parser decodes HTML entities (e.g., &lt; -> <) in JSX text,\n      // but we need to preserve the original source to avoid XSS vulnerabilities\n      const rawText = source.slice(path.node.start, path.node.end);\n\n      // Use source file prefix to ensure unique IDs across template and theme\n      const prefix = options.sourceFile === 'template' ? 't' : 'h'; // t for template, h for theme (header)\n      const id = `${prefix}${idCounter++}`;\n      const occurrenceCount = textOccurrences.get(decodedText) ?? 1;\n      const currentIndex = (textCurrentIndex.get(decodedText) ?? 0) + 1;\n      textCurrentIndex.set(decodedText, currentIndex);\n\n      const metadata: EditableMetadata = {\n        id,\n        loc: {\n          start: path.node.start,\n          end: path.node.end,\n          line: path.node.loc.start.line,\n          column: path.node.loc.start.column,\n        },\n        originalText: rawText,\n        textHash: createHash('sha256').update(rawText).digest('hex').slice(0, 16),\n        jsxPath: getJsxPath(path),\n        parentElement: getParentElement(path),\n        sourceContext: getSourceContext({ start: path.node.start, end: path.node.end }),\n        siblingIndex: getSiblingIndex(path),\n        occurrenceCount,\n        occurrenceIndex: currentIndex,\n        sourceFile: options.sourceFile,\n      };\n\n      editableRegions[id] = metadata;\n\n      // Create the __Editable wrapper\n      // <__Editable __id=\"...\">text</__Editable>\n      // Use rawText to preserve HTML entities from the original source\n      const editableElement = t.jsxElement(\n        t.jsxOpeningElement(\n          t.jsxIdentifier('__Editable'),\n          [\n            t.jsxAttribute(\n              t.jsxIdentifier('__id'),\n              t.stringLiteral(id)\n            ),\n          ],\n          false\n        ),\n        t.jsxClosingElement(t.jsxIdentifier('__Editable')),\n        [t.jsxText(rawText)],\n        false\n      );\n\n      path.replaceWith(editableElement);\n    },\n    JSXExpressionContainer(path) {\n      const expression = path.node.expression;\n\n      // Skip empty expressions\n      if (t.isJSXEmptyExpression(expression)) return;\n\n      // Skip if parent is not a JSXElement (e.g., it's an attribute value)\n      if (!t.isJSXElement(path.parent) && !t.isJSXFragment(path.parent)) return;\n\n      // Skip JSX elements - we only want to show tooltips for text-rendering expressions\n      if (t.isJSXElement(expression) || t.isJSXFragment(expression)) return;\n\n      // Skip if no location info\n      if (path.node.start == null || path.node.end == null) return;\n\n      // Get the exact source code of the expression (including the ${} or just the expression)\n      const exprSource = source.slice(path.node.start, path.node.end);\n\n      // Base64 encode the expression to safely pass it through the marker\n      const encodedExpr = Buffer.from(exprSource).toString('base64');\n\n      // Create wrapper: <__ExpressionTooltip __expr=\"...\">{expression}</__ExpressionTooltip>\n      const tooltipElement = t.jsxElement(\n        t.jsxOpeningElement(\n          t.jsxIdentifier('__ExpressionTooltip'),\n          [\n            t.jsxAttribute(\n              t.jsxIdentifier('__expr'),\n              t.stringLiteral(encodedExpr)\n            ),\n          ],\n          false\n        ),\n        t.jsxClosingElement(t.jsxIdentifier('__ExpressionTooltip')),\n        [t.jsxExpressionContainer(expression)],\n        false\n      );\n\n      path.replaceWith(t.jsxExpressionContainer(tooltipElement));\n    },\n  });\n\n  // Generate the transformed code\n  const output = generate(ast, {\n    retainLines: true,\n    compact: false,\n  });\n\n  // Inject the __Editable component at the top of the file (after imports)\n  let code = output.code;\n\n  // Find the position after all imports\n  const importEndMatch = code.match(/^(import\\s+[\\s\\S]*?from\\s+['\"][^'\"]+['\"];?\\s*)+/m);\n  if (importEndMatch) {\n    const insertPos = (importEndMatch.index ?? 0) + importEndMatch[0].length;\n    code = code.slice(0, insertPos) + '\\n' + EDITABLE_COMPONENT_CODE + '\\n' + code.slice(insertPos);\n  } else {\n    // No imports found, add at the beginning\n    code = EDITABLE_COMPONENT_CODE + '\\n' + code;\n  }\n\n  return {\n    code,\n    editableRegions,\n  };\n}\n\n/**\n * Post-processes rendered HTML to convert sentinel tokens to HTML comments.\n *\n * Converts:\n * - `⟦STACK_EDITABLE_START:<id>⟧` → `<!-- STACK_EDITABLE_START <id> -->`\n * - `⟦STACK_EDITABLE_END:<id>⟧` → `<!-- STACK_EDITABLE_END <id> -->`\n * - `⟦STACK_EXPR_START:<base64-encoded-expr>⟧` → `<!-- STACK_EXPR_START <base64> -->`\n * - `⟦STACK_EXPR_END⟧` → `<!-- STACK_EXPR_END -->`\n */\nexport function convertSentinelTokensToComments(html: string): string {\n  return html\n    .replace(/⟦STACK_EDITABLE_START:([^⟧]+)⟧/g, '<!-- STACK_EDITABLE_START $1 -->')\n    .replace(/⟦STACK_EDITABLE_END:([^⟧]+)⟧/g, '<!-- STACK_EDITABLE_END $1 -->')\n    .replace(/⟦STACK_EXPR_START:([^⟧]+)⟧/g, '<!-- STACK_EXPR_START $1 -->')\n    .replace(/⟦STACK_EXPR_END⟧/g, '<!-- STACK_EXPR_END -->');\n}\n"],"mappings":";;;;;;;;;;;AAsEA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyChC,SAAgB,uBACd,QACA,SAGiB;CACjB,MAAM,kBAAoD,EAAE;CAC5D,IAAI,YAAY;CAGhB,MAAM,kCAAkB,IAAI,KAAqB;AAQjD,UALuB,OAAO,MAAM,QAAQ;EAC1C,YAAY;EACZ,SAAS,CAAC,OAAO,aAAa;EAC/B,CAAC,EAEuB,EACvB,QAAQ,MAAM;EACZ,MAAM,OAAO,KAAK,KAAK;AAEvB,MAAI,KAAK,MAAM,KAAK,GAAI;AACxB,kBAAgB,IAAI,OAAO,gBAAgB,IAAI,KAAK,IAAI,KAAK,EAAE;IAElE,CAAC;CAGF,MAAM,mCAAmB,IAAI,KAAqB;CAGlD,MAAM,MAAM,OAAO,MAAM,QAAQ;EAC/B,YAAY;EACZ,SAAS,CAAC,OAAO,aAAa;EAC/B,CAAC;CAGF,SAAS,WAAW,MAAqC;EACvD,MAAM,UAAoB,EAAE;EAC5B,IAAI,UAA2B,KAAK;AAEpC,SAAO,SAAS;AACd,OAAI,EAAE,aAAa,QAAQ,KAAK,EAAE;IAChC,MAAM,iBAAiB,QAAQ,KAAK;AACpC,QAAI,EAAE,gBAAgB,eAAe,KAAK,CACxC,SAAQ,QAAQ,eAAe,KAAK,KAAK;aAChC,EAAE,sBAAsB,eAAe,KAAK,CACrD,SAAQ,QAAQ,SAAS,eAAe,KAAK,CAAC,KAAK;cAE5C,EAAE,sBAAsB,QAAQ,KAAK,IAAI,QAAQ,KAAK,IAAI;AACnE,YAAQ,QAAQ,QAAQ,KAAK,GAAG,KAAK;AACrC;cACS,EAAE,qBAAqB,QAAQ,KAAK,IAAI,EAAE,aAAa,QAAQ,KAAK,GAAG,EAAE;AAClF,YAAQ,QAAQ,QAAQ,KAAK,GAAG,KAAK;AACrC;;AAEF,aAAU,QAAQ;;AAGpB,SAAO;;CAIT,SAAS,iBAAiB,MAA+E;EACvG,IAAI,UAA2B,KAAK;AAEpC,SAAO,SAAS;AACd,OAAI,EAAE,aAAa,QAAQ,KAAK,EAAE;IAChC,MAAM,iBAAiB,QAAQ,KAAK;IACpC,IAAI,UAAU;AAEd,QAAI,EAAE,gBAAgB,eAAe,KAAK,CACxC,WAAU,eAAe,KAAK;aACrB,EAAE,sBAAsB,eAAe,KAAK,CACrD,WAAU,SAAS,eAAe,KAAK,CAAC;IAG1C,MAAM,QAAgC,EAAE;AACxC,SAAK,MAAM,QAAQ,eAAe,WAChC,KAAI,EAAE,eAAe,KAAK,IAAI,EAAE,gBAAgB,KAAK,KAAK,EAAE;KAC1D,MAAM,WAAW,KAAK,KAAK;AAC3B,SAAI,EAAE,gBAAgB,KAAK,MAAM,CAC/B,OAAM,YAAY,KAAK,MAAM;cACpB,EAAE,yBAAyB,KAAK,MAAM,IAAI,CAAC,EAAE,qBAAqB,KAAK,MAAM,WAAW,CAEjG,OAAM,YAAY,IAAI,SAAS,KAAK,MAAM,WAAW,CAAC,KAAK;;AAKjE,WAAO;KAAE;KAAS;KAAO;;AAE3B,aAAU,QAAQ;;AAGpB,SAAO;GAAE,SAAS;GAAW,OAAO,EAAE;GAAE;;CAI1C,SAAS,gBAAgB,MAAmC;EAC1D,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,EAAE,aAAa,OAAO,KAAK,IAAI,CAAC,EAAE,cAAc,OAAO,KAAK,CAC/D,QAAO;EAGT,MAAM,WAAW,OAAO,KAAK;EAC7B,IAAI,YAAY;AAEhB,OAAK,MAAM,SAAS,UAAU;AAC5B,OAAI,UAAU,KAAK,KACjB,QAAO;AAET,OAAI,EAAE,UAAU,MAAM,IAAI,MAAM,MAAM,MAAM,KAAK,GAC/C;;AAIJ,SAAO;;CAIT,SAAS,iBAAiB,KAAwE;EAChG,MAAM,QAAQ,OAAO,MAAM,KAAK;EAChC,IAAI,aAAa;EACjB,IAAI,YAAY;AAGhB,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,OAAI,aAAa,MAAM,GAAG,UAAU,IAAI,OAAO;AAC7C,gBAAY;AACZ;;AAEF,iBAAc,MAAM,GAAG,SAAS;;AAMlC,SAAO;GAAE,QAHW,MAAM,MAAM,KAAK,IAAI,GAAG,YAAY,EAAE,EAAE,UAAU,CAAC,KAAK,KAAK;GAGnD,OAFX,MAAM,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC,KAAK,KAAK;GAEtB;;AAInD,UAAS,KAAK;EACZ,QAAQ,MAAM;GACZ,MAAM,cAAc,KAAK,KAAK;AAG9B,OAAI,YAAY,MAAM,KAAK,GAAI;AAI/B,OAAI,CAAC,KAAK,KAAK,OAAO,KAAK,KAAK,SAAS,QAAQ,KAAK,KAAK,OAAO,KAAM;GAKxE,MAAM,UAAU,OAAO,MAAM,KAAK,KAAK,OAAO,KAAK,KAAK,IAAI;GAI5D,MAAM,KAAK,GADI,QAAQ,eAAe,aAAa,MAAM,MAClC;GACvB,MAAM,kBAAkB,gBAAgB,IAAI,YAAY,IAAI;GAC5D,MAAM,gBAAgB,iBAAiB,IAAI,YAAY,IAAI,KAAK;AAChE,oBAAiB,IAAI,aAAa,aAAa;AAqB/C,mBAAgB,MAnBmB;IACjC;IACA,KAAK;KACH,OAAO,KAAK,KAAK;KACjB,KAAK,KAAK,KAAK;KACf,MAAM,KAAK,KAAK,IAAI,MAAM;KAC1B,QAAQ,KAAK,KAAK,IAAI,MAAM;KAC7B;IACD,cAAc;IACd,UAAU,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;IACzE,SAAS,WAAW,KAAK;IACzB,eAAe,iBAAiB,KAAK;IACrC,eAAe,iBAAiB;KAAE,OAAO,KAAK,KAAK;KAAO,KAAK,KAAK,KAAK;KAAK,CAAC;IAC/E,cAAc,gBAAgB,KAAK;IACnC;IACA,iBAAiB;IACjB,YAAY,QAAQ;IACrB;GAOD,MAAM,kBAAkB,EAAE,WACxB,EAAE,kBACA,EAAE,cAAc,aAAa,EAC7B,CACE,EAAE,aACA,EAAE,cAAc,OAAO,EACvB,EAAE,cAAc,GAAG,CACpB,CACF,EACD,MACD,EACD,EAAE,kBAAkB,EAAE,cAAc,aAAa,CAAC,EAClD,CAAC,EAAE,QAAQ,QAAQ,CAAC,EACpB,MACD;AAED,QAAK,YAAY,gBAAgB;;EAEnC,uBAAuB,MAAM;GAC3B,MAAM,aAAa,KAAK,KAAK;AAG7B,OAAI,EAAE,qBAAqB,WAAW,CAAE;AAGxC,OAAI,CAAC,EAAE,aAAa,KAAK,OAAO,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAE;AAGnE,OAAI,EAAE,aAAa,WAAW,IAAI,EAAE,cAAc,WAAW,CAAE;AAG/D,OAAI,KAAK,KAAK,SAAS,QAAQ,KAAK,KAAK,OAAO,KAAM;GAGtD,MAAM,aAAa,OAAO,MAAM,KAAK,KAAK,OAAO,KAAK,KAAK,IAAI;GAG/D,MAAM,cAAc,OAAO,KAAK,WAAW,CAAC,SAAS,SAAS;GAG9D,MAAM,iBAAiB,EAAE,WACvB,EAAE,kBACA,EAAE,cAAc,sBAAsB,EACtC,CACE,EAAE,aACA,EAAE,cAAc,SAAS,EACzB,EAAE,cAAc,YAAY,CAC7B,CACF,EACD,MACD,EACD,EAAE,kBAAkB,EAAE,cAAc,sBAAsB,CAAC,EAC3D,CAAC,EAAE,uBAAuB,WAAW,CAAC,EACtC,MACD;AAED,QAAK,YAAY,EAAE,uBAAuB,eAAe,CAAC;;EAE7D,CAAC;CASF,IAAI,OANW,SAAS,KAAK;EAC3B,aAAa;EACb,SAAS;EACV,CAAC,CAGgB;CAGlB,MAAM,iBAAiB,KAAK,MAAM,mDAAmD;AACrF,KAAI,gBAAgB;EAClB,MAAM,aAAa,eAAe,SAAS,KAAK,eAAe,GAAG;AAClE,SAAO,KAAK,MAAM,GAAG,UAAU,GAAG,OAAO,0BAA0B,OAAO,KAAK,MAAM,UAAU;OAG/F,QAAO,0BAA0B,OAAO;AAG1C,QAAO;EACL;EACA;EACD;;;;;;;;;;;AAYH,SAAgB,gCAAgC,MAAsB;AACpE,QAAO,KACJ,QAAQ,mCAAmC,mCAAmC,CAC9E,QAAQ,iCAAiC,iCAAiC,CAC1E,QAAQ,+BAA+B,+BAA+B,CACtE,QAAQ,qBAAqB,0BAA0B"}

package/dist/esm/utils/jsx-editable-transpiler.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/esm/utils/jsx-editable-transpiler.test.js

@@ -0,0 +1,122 @@
+import { describe, expect, it } from "vitest";
+import { convertSentinelTokensToComments, transpileJsxForEditing } from "./jsx-editable-transpiler.js";
+
+//#region src/utils/jsx-editable-transpiler.test.ts
+describe("transpileJsxForEditing", () => {
+	it("should wrap simple JSX text nodes with __Editable", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return <div>Hello World!</div>;
+}
+`, { sourceFile: "template" });
+		expect(result.code).toContain("__Editable");
+		expect(result.code).toContain("Hello World!");
+		expect(Object.keys(result.editableRegions).length).toBeGreaterThan(0);
+		const region = Object.values(result.editableRegions)[0];
+		expect(region.originalText).toBe("Hello World!");
+		expect(region.sourceFile).toBe("template");
+		expect(region.parentElement.tagName).toBe("div");
+	});
+	it("should handle multiple text nodes in the same element", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate({ name }) {
+  return <div>Hello, {name}! Welcome to our platform.</div>;
+}
+`, { sourceFile: "template" });
+		const regions = Object.values(result.editableRegions);
+		expect(regions.length).toBe(2);
+		const texts = regions.map((r) => r.originalText);
+		expect(texts).toContain("Hello, ");
+		expect(texts).toContain("! Welcome to our platform.");
+	});
+	it("should skip whitespace-only text nodes", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return (
+    <div>
+      <span>Text</span>
+    </div>
+  );
+}
+`, { sourceFile: "template" });
+		const regions = Object.values(result.editableRegions);
+		expect(regions.length).toBe(1);
+		expect(regions[0].originalText).toBe("Text");
+	});
+	it("should track occurrence count for duplicate text", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return (
+    <div>
+      <p>Click here</p>
+      <p>Click here</p>
+    </div>
+  );
+}
+`, { sourceFile: "template" });
+		const regions = Object.values(result.editableRegions);
+		expect(regions.length).toBe(2);
+		expect(regions[0].occurrenceCount).toBe(2);
+		expect(regions[1].occurrenceCount).toBe(2);
+		expect(regions[0].occurrenceIndex).toBe(1);
+		expect(regions[1].occurrenceIndex).toBe(2);
+	});
+	it("should capture JSX path correctly", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return (
+    <Container>
+      <Section>
+        <Text>Hello</Text>
+      </Section>
+    </Container>
+  );
+}
+`, { sourceFile: "template" });
+		const region = Object.values(result.editableRegions)[0];
+		expect(region.jsxPath).toContain("EmailTemplate");
+		expect(region.jsxPath).toContain("Container");
+		expect(region.jsxPath).toContain("Section");
+		expect(region.jsxPath).toContain("Text");
+	});
+	it("should capture parent element props", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return <Text className="heading" style={{ color: 'red' }}>Title</Text>;
+}
+`, { sourceFile: "template" });
+		const region = Object.values(result.editableRegions)[0];
+		expect(region.parentElement.tagName).toBe("Text");
+		expect(region.parentElement.props.className).toBe("heading");
+	});
+	it("should inject __Editable component definition", () => {
+		const result = transpileJsxForEditing(`
+export function EmailTemplate() {
+  return <div>Test</div>;
+}
+`, { sourceFile: "template" });
+		expect(result.code).toContain("function __Editable");
+		expect(result.code).toContain("STACK_EDITABLE_START");
+		expect(result.code).toContain("STACK_EDITABLE_END");
+	});
+});
+describe("convertSentinelTokensToComments", () => {
+	it("should convert start tokens to HTML comments", () => {
+		expect(convertSentinelTokensToComments("<div>⟦STACK_EDITABLE_START:e0⟧Hello⟦STACK_EDITABLE_END:e0⟧</div>")).toBe("<div><!-- STACK_EDITABLE_START e0 -->Hello<!-- STACK_EDITABLE_END e0 --></div>");
+	});
+	it("should handle multiple editable regions", () => {
+		const result = convertSentinelTokensToComments("<div>⟦STACK_EDITABLE_START:e0⟧Hello⟦STACK_EDITABLE_END:e0⟧ ⟦STACK_EDITABLE_START:e1⟧World⟦STACK_EDITABLE_END:e1⟧</div>");
+		expect(result).toContain("<!-- STACK_EDITABLE_START e0 -->");
+		expect(result).toContain("<!-- STACK_EDITABLE_END e0 -->");
+		expect(result).toContain("<!-- STACK_EDITABLE_START e1 -->");
+		expect(result).toContain("<!-- STACK_EDITABLE_END e1 -->");
+	});
+	it("should leave regular HTML unchanged", () => {
+		const html = "<div><p>Hello World</p></div>";
+		expect(convertSentinelTokensToComments(html)).toBe(html);
+	});
+});
+
+//#endregion
+export {  };
+//# sourceMappingURL=jsx-editable-transpiler.test.js.map

package/dist/esm/utils/jsx-editable-transpiler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsx-editable-transpiler.test.js","names":[],"sources":["../../../src/utils/jsx-editable-transpiler.test.ts"],"sourcesContent":["import { describe, it, expect } from 'vitest';\nimport { transpileJsxForEditing, convertSentinelTokensToComments } from './jsx-editable-transpiler';\n\ndescribe('transpileJsxForEditing', () => {\n  it('should wrap simple JSX text nodes with __Editable', () => {\n    const source = `\nexport function EmailTemplate() {\n  return <div>Hello World!</div>;\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    expect(result.code).toContain('__Editable');\n    expect(result.code).toContain('Hello World!');\n    expect(Object.keys(result.editableRegions).length).toBeGreaterThan(0);\n\n    // Check that the editable region has the expected metadata\n    const region = Object.values(result.editableRegions)[0];\n    expect(region.originalText).toBe('Hello World!');\n    expect(region.sourceFile).toBe('template');\n    expect(region.parentElement.tagName).toBe('div');\n  });\n\n  it('should handle multiple text nodes in the same element', () => {\n    const source = `\nexport function EmailTemplate({ name }) {\n  return <div>Hello, {name}! Welcome to our platform.</div>;\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    // Should have 2 editable regions (text before and after the expression)\n    const regions = Object.values(result.editableRegions);\n    expect(regions.length).toBe(2);\n\n    const texts = regions.map(r => r.originalText);\n    expect(texts).toContain('Hello, ');\n    expect(texts).toContain('! Welcome to our platform.');\n  });\n\n  it('should skip whitespace-only text nodes', () => {\n    const source = `\nexport function EmailTemplate() {\n  return (\n    <div>\n      <span>Text</span>\n    </div>\n  );\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    // Should only have 1 editable region (the \"Text\" in span)\n    const regions = Object.values(result.editableRegions);\n    expect(regions.length).toBe(1);\n    expect(regions[0].originalText).toBe('Text');\n  });\n\n  it('should track occurrence count for duplicate text', () => {\n    const source = `\nexport function EmailTemplate() {\n  return (\n    <div>\n      <p>Click here</p>\n      <p>Click here</p>\n    </div>\n  );\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    const regions = Object.values(result.editableRegions);\n    expect(regions.length).toBe(2);\n\n    // Both should have occurrenceCount of 2\n    expect(regions[0].occurrenceCount).toBe(2);\n    expect(regions[1].occurrenceCount).toBe(2);\n\n    // They should have different occurrence indices\n    expect(regions[0].occurrenceIndex).toBe(1);\n    expect(regions[1].occurrenceIndex).toBe(2);\n  });\n\n  it('should capture JSX path correctly', () => {\n    const source = `\nexport function EmailTemplate() {\n  return (\n    <Container>\n      <Section>\n        <Text>Hello</Text>\n      </Section>\n    </Container>\n  );\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    const region = Object.values(result.editableRegions)[0];\n    expect(region.jsxPath).toContain('EmailTemplate');\n    expect(region.jsxPath).toContain('Container');\n    expect(region.jsxPath).toContain('Section');\n    expect(region.jsxPath).toContain('Text');\n  });\n\n  it('should capture parent element props', () => {\n    const source = `\nexport function EmailTemplate() {\n  return <Text className=\"heading\" style={{ color: 'red' }}>Title</Text>;\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    const region = Object.values(result.editableRegions)[0];\n    expect(region.parentElement.tagName).toBe('Text');\n    expect(region.parentElement.props.className).toBe('heading');\n  });\n\n  it('should inject __Editable component definition', () => {\n    const source = `\nexport function EmailTemplate() {\n  return <div>Test</div>;\n}\n`;\n    const result = transpileJsxForEditing(source, { sourceFile: 'template' });\n\n    expect(result.code).toContain('function __Editable');\n    expect(result.code).toContain('STACK_EDITABLE_START');\n    expect(result.code).toContain('STACK_EDITABLE_END');\n  });\n});\n\ndescribe('convertSentinelTokensToComments', () => {\n  it('should convert start tokens to HTML comments', () => {\n    const html = '<div>⟦STACK_EDITABLE_START:e0⟧Hello⟦STACK_EDITABLE_END:e0⟧</div>';\n    const result = convertSentinelTokensToComments(html);\n\n    expect(result).toBe('<div><!-- STACK_EDITABLE_START e0 -->Hello<!-- STACK_EDITABLE_END e0 --></div>');\n  });\n\n  it('should handle multiple editable regions', () => {\n    const html = '<div>⟦STACK_EDITABLE_START:e0⟧Hello⟦STACK_EDITABLE_END:e0⟧ ⟦STACK_EDITABLE_START:e1⟧World⟦STACK_EDITABLE_END:e1⟧</div>';\n    const result = convertSentinelTokensToComments(html);\n\n    expect(result).toContain('<!-- STACK_EDITABLE_START e0 -->');\n    expect(result).toContain('<!-- STACK_EDITABLE_END e0 -->');\n    expect(result).toContain('<!-- STACK_EDITABLE_START e1 -->');\n    expect(result).toContain('<!-- STACK_EDITABLE_END e1 -->');\n  });\n\n  it('should leave regular HTML unchanged', () => {\n    const html = '<div><p>Hello World</p></div>';\n    const result = convertSentinelTokensToComments(html);\n\n    expect(result).toBe(html);\n  });\n});\n"],"mappings":";;;;AAGA,SAAS,gCAAgC;AACvC,IAAG,2DAA2D;EAM5D,MAAM,SAAS,uBALA;;;;GAK+B,EAAE,YAAY,YAAY,CAAC;AAEzE,SAAO,OAAO,KAAK,CAAC,UAAU,aAAa;AAC3C,SAAO,OAAO,KAAK,CAAC,UAAU,eAAe;AAC7C,SAAO,OAAO,KAAK,OAAO,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,EAAE;EAGrE,MAAM,SAAS,OAAO,OAAO,OAAO,gBAAgB,CAAC;AACrD,SAAO,OAAO,aAAa,CAAC,KAAK,eAAe;AAChD,SAAO,OAAO,WAAW,CAAC,KAAK,WAAW;AAC1C,SAAO,OAAO,cAAc,QAAQ,CAAC,KAAK,MAAM;GAChD;AAEF,IAAG,+DAA+D;EAMhE,MAAM,SAAS,uBALA;;;;GAK+B,EAAE,YAAY,YAAY,CAAC;EAGzE,MAAM,UAAU,OAAO,OAAO,OAAO,gBAAgB;AACrD,SAAO,QAAQ,OAAO,CAAC,KAAK,EAAE;EAE9B,MAAM,QAAQ,QAAQ,KAAI,MAAK,EAAE,aAAa;AAC9C,SAAO,MAAM,CAAC,UAAU,UAAU;AAClC,SAAO,MAAM,CAAC,UAAU,6BAA6B;GACrD;AAEF,IAAG,gDAAgD;EAUjD,MAAM,SAAS,uBATA;;;;;;;;GAS+B,EAAE,YAAY,YAAY,CAAC;EAGzE,MAAM,UAAU,OAAO,OAAO,OAAO,gBAAgB;AACrD,SAAO,QAAQ,OAAO,CAAC,KAAK,EAAE;AAC9B,SAAO,QAAQ,GAAG,aAAa,CAAC,KAAK,OAAO;GAC5C;AAEF,IAAG,0DAA0D;EAW3D,MAAM,SAAS,uBAVA;;;;;;;;;GAU+B,EAAE,YAAY,YAAY,CAAC;EAEzE,MAAM,UAAU,OAAO,OAAO,OAAO,gBAAgB;AACrD,SAAO,QAAQ,OAAO,CAAC,KAAK,EAAE;AAG9B,SAAO,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE;AAC1C,SAAO,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE;AAG1C,SAAO,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE;AAC1C,SAAO,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE;GAC1C;AAEF,IAAG,2CAA2C;EAY5C,MAAM,SAAS,uBAXA;;;;;;;;;;GAW+B,EAAE,YAAY,YAAY,CAAC;EAEzE,MAAM,SAAS,OAAO,OAAO,OAAO,gBAAgB,CAAC;AACrD,SAAO,OAAO,QAAQ,CAAC,UAAU,gBAAgB;AACjD,SAAO,OAAO,QAAQ,CAAC,UAAU,YAAY;AAC7C,SAAO,OAAO,QAAQ,CAAC,UAAU,UAAU;AAC3C,SAAO,OAAO,QAAQ,CAAC,UAAU,OAAO;GACxC;AAEF,IAAG,6CAA6C;EAM9C,MAAM,SAAS,uBALA;;;;GAK+B,EAAE,YAAY,YAAY,CAAC;EAEzE,MAAM,SAAS,OAAO,OAAO,OAAO,gBAAgB,CAAC;AACrD,SAAO,OAAO,cAAc,QAAQ,CAAC,KAAK,OAAO;AACjD,SAAO,OAAO,cAAc,MAAM,UAAU,CAAC,KAAK,UAAU;GAC5D;AAEF,IAAG,uDAAuD;EAMxD,MAAM,SAAS,uBALA;;;;GAK+B,EAAE,YAAY,YAAY,CAAC;AAEzE,SAAO,OAAO,KAAK,CAAC,UAAU,sBAAsB;AACpD,SAAO,OAAO,KAAK,CAAC,UAAU,uBAAuB;AACrD,SAAO,OAAO,KAAK,CAAC,UAAU,qBAAqB;GACnD;EACF;AAEF,SAAS,yCAAyC;AAChD,IAAG,sDAAsD;AAIvD,SAFe,gCADF,mEACuC,CAEtC,CAAC,KAAK,iFAAiF;GACrG;AAEF,IAAG,iDAAiD;EAElD,MAAM,SAAS,gCADF,yHACuC;AAEpD,SAAO,OAAO,CAAC,UAAU,mCAAmC;AAC5D,SAAO,OAAO,CAAC,UAAU,iCAAiC;AAC1D,SAAO,OAAO,CAAC,UAAU,mCAAmC;AAC5D,SAAO,OAAO,CAAC,UAAU,iCAAiC;GAC1D;AAEF,IAAG,6CAA6C;EAC9C,MAAM,OAAO;AAGb,SAFe,gCAAgC,KAAK,CAEtC,CAAC,KAAK,KAAK;GACzB;EACF"}

package/dist/esm/utils/jwt.d.ts

@@ -0,0 +1,79 @@
+import * as jose from "jose";
+
+//#region src/utils/jwt.d.ts
+declare function getJwtInfo(options: {
+  jwt: string;
+}): Promise<({
+  status: "error";
+  error: {
+    error: string;
+    stringifiedInput: string;
+  };
+} & {
+  status: "error";
+}) | ({
+  status: "error";
+  error: {
+    error: string;
+    input: string;
+  };
+} & {
+  status: "error";
+}) | ({
+  status: "ok";
+  data: {
+    payload: jose.JWTPayload;
+  };
+} & {
+  status: "ok";
+}) | ({
+  status: "error";
+  error: {
+    exception: string;
+  };
+} & {
+  status: "error";
+})>;
+declare function signJWT(options: {
+  issuer: string;
+  audience: string;
+  payload: any;
+  expirationTime?: string;
+}): Promise<string>;
+declare function verifyJWT(options: {
+  allowedIssuers: string[];
+  jwt: string;
+}): Promise<jose.JWTPayload>;
+type PrivateJwk = {
+  kty: "EC";
+  alg: "ES256";
+  crv: "P-256";
+  kid: string;
+  d: string;
+  x: string;
+  y: string;
+};
+/**
+ * Returns a list of valid private JWKs for the given audience, with the first one taking precedence when signing new
+ * JWTs.
+ */
+declare function getPrivateJwks(options: {
+  audience: string;
+}): Promise<PrivateJwk[]>;
+type PublicJwk = {
+  kty: "EC";
+  alg: "ES256";
+  crv: "P-256";
+  kid: string;
+  x: string;
+  y: string;
+};
+declare function getPublicJwkSet(privateJwks: PrivateJwk[]): Promise<{
+  keys: PublicJwk[];
+}>;
+declare function oldGetKid(options: {
+  secret: string;
+}): string;
+//#endregion
+export { PrivateJwk, PublicJwk, getJwtInfo, getPrivateJwks, getPublicJwkSet, oldGetKid, signJWT, verifyJWT };
+//# sourceMappingURL=jwt.d.ts.map

package/dist/esm/utils/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","names":[],"sources":["../../../src/utils/jwt.tsx"],"mappings":";;;iBAsBsB,UAAA,CAAW,OAAA;EAC/B,GAAA;AAAA,IACD,OAAA;;;;;;;;;;;;;;;;;;;aAF+B,IAAA,CAAA,UAAA;EAAA;AAAA;;;;;;;;;;iBAeV,OAAA,CAAQ,OAAA;EAC5B,MAAA;EACA,QAAA;EACA,OAAA;EACA,cAAA;AAAA,IACD,OAAA;AAAA,iBAaqB,SAAA,CAAU,OAAA;EAC9B,cAAA;EACA,GAAA;AAAA,IACD,OAAA,CAAA,IAAA,CAAA,UAAA;AAAA,KAYW,UAAA;EACV,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,CAAA;EACA,CAAA;EACA,CAAA;AAAA;;;;AAPF;iBAgCsB,cAAA,CAAe,OAAA;EACnC,QAAA;AAAA,IACE,OAAA,CAAQ,UAAA;AAAA,KAuBA,SAAA;EACV,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,CAAA;EACA,CAAA;AAAA;AAAA,iBAEoB,eAAA,CAAgB,WAAA,EAAa,UAAA,KAAe,OAAA;EAAU,IAAA,EAAM,SAAA;AAAA;AAAA,iBAsBlE,SAAA,CAAU,OAAA;EACxB,MAAA;AAAA"}

package/dist/esm/utils/jwt.js

@@ -0,0 +1,102 @@
+import * as jose from "jose";
+import { encodeBase64Url } from "./bytes.js";
+import { HexclaveAssertionError, errorToNiceString } from "./errors.js";
+import { getEnvVariable } from "./env.js";
+import { pick } from "./objects.js";
+import { globalVar } from "./globals.js";
+import { Result } from "./results.js";
+import { nicify } from "./strings.js";
+import crypto from "crypto";
+import elliptic from "elliptic";
+import { JOSEError } from "jose/errors";
+
+//#region src/utils/jwt.tsx
+function getStackServerSecret() {
+	const STACK_SERVER_SECRET = getEnvVariable("STACK_SERVER_SECRET");
+	try {
+		jose.base64url.decode(STACK_SERVER_SECRET);
+	} catch (e) {
+		throw new HexclaveAssertionError("STACK_SERVER_SECRET is not valid. Please use the generateKeys script to generate a new secret.", { cause: e });
+	}
+	return STACK_SERVER_SECRET;
+}
+async function getJwtInfo(options) {
+	try {
+		if (typeof options.jwt !== "string") return Result.error({
+			error: "JWT input is not a string!",
+			stringifiedInput: nicify(options.jwt)
+		});
+		if (!options.jwt.startsWith("ey")) return Result.error({
+			error: "Input is a string, but not a JWT!",
+			input: options.jwt
+		});
+		const decodedJwt = jose.decodeJwt(options.jwt);
+		return Result.ok({ payload: decodedJwt });
+	} catch (e) {
+		return Result.error({ exception: errorToNiceString(e) });
+	}
+}
+async function signJWT(options) {
+	const privateJwks = await getPrivateJwks({ audience: options.audience });
+	const privateKey = await jose.importJWK(privateJwks[0]);
+	return await new jose.SignJWT(options.payload).setProtectedHeader({
+		alg: "ES256",
+		kid: privateJwks[0].kid
+	}).setIssuer(options.issuer).setIssuedAt().setAudience(options.audience).setExpirationTime(options.expirationTime || "5m").sign(privateKey);
+}
+async function verifyJWT(options) {
+	const audience = jose.decodeJwt(options.jwt).aud;
+	if (!audience || typeof audience !== "string") throw new JOSEError("Invalid JWT audience");
+	const jwkSet = jose.createLocalJWKSet(await getPublicJwkSet(await getPrivateJwks({ audience })));
+	return (await jose.jwtVerify(options.jwt, jwkSet, { issuer: options.allowedIssuers })).payload;
+}
+async function getPrivateJwkFromDerivedSecret(derivedSecret, kid) {
+	const secretHash = await globalVar.crypto.subtle.digest("SHA-256", jose.base64url.decode(derivedSecret));
+	const priv = new Uint8Array(secretHash);
+	const publicKey = new elliptic.ec("p256").keyFromPrivate(priv).getPublic();
+	return {
+		kty: "EC",
+		crv: "P-256",
+		alg: "ES256",
+		kid,
+		d: encodeBase64Url(priv),
+		x: encodeBase64Url(publicKey.getX().toBuffer()),
+		y: encodeBase64Url(publicKey.getY().toBuffer())
+	};
+}
+/**
+* Returns a list of valid private JWKs for the given audience, with the first one taking precedence when signing new
+* JWTs.
+*/
+async function getPrivateJwks(options) {
+	const getHashOfJwkInfo = (type) => jose.base64url.encode(crypto.createHash("sha256").update(JSON.stringify([
+		type,
+		getStackServerSecret(),
+		{ audience: options.audience }
+	])).digest());
+	const perAudienceSecret = getHashOfJwkInfo("stack-jwk-audience-secret");
+	const perAudienceKid = getHashOfJwkInfo("stack-jwk-kid").slice(0, 12);
+	const oldPerAudienceSecret = oldGetPerAudienceSecret({ audience: options.audience });
+	return [await getPrivateJwkFromDerivedSecret(oldPerAudienceSecret, oldGetKid({ secret: oldPerAudienceSecret })), await getPrivateJwkFromDerivedSecret(perAudienceSecret, perAudienceKid)];
+}
+async function getPublicJwkSet(privateJwks) {
+	return { keys: privateJwks.map((jwk) => pick(jwk, [
+		"kty",
+		"alg",
+		"crv",
+		"x",
+		"y",
+		"kid"
+	])) };
+}
+function oldGetPerAudienceSecret(options) {
+	if (options.audience === "kid") throw new HexclaveAssertionError("You cannot use the 'kid' audience for a per-audience secret, see comment below in jwt.tsx");
+	return jose.base64url.encode(crypto.createHash("sha256").update(JSON.stringify([getStackServerSecret(), options.audience])).digest());
+}
+function oldGetKid(options) {
+	return jose.base64url.encode(crypto.createHash("sha256").update(JSON.stringify([options.secret, "kid"])).digest()).slice(0, 12);
+}
+
+//#endregion
+export { getJwtInfo, getPrivateJwks, getPublicJwkSet, oldGetKid, signJWT, verifyJWT };
+//# sourceMappingURL=jwt.js.map

package/dist/esm/utils/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","names":[],"sources":["../../../src/utils/jwt.tsx"],"sourcesContent":["import crypto from \"crypto\";\nimport elliptic from \"elliptic\";\nimport * as jose from \"jose\";\nimport { JOSEError } from \"jose/errors\";\nimport { encodeBase64Url } from \"./bytes\";\nimport { getEnvVariable } from \"./env\";\nimport { HexclaveAssertionError, errorToNiceString } from \"./errors\";\nimport { globalVar } from \"./globals\";\nimport { pick } from \"./objects\";\nimport { Result } from \"./results\";\nimport { nicify } from \"./strings\";\n\nfunction getStackServerSecret() {\n  const STACK_SERVER_SECRET = getEnvVariable(\"STACK_SERVER_SECRET\");\n  try {\n    jose.base64url.decode(STACK_SERVER_SECRET);\n  } catch (e) {\n    throw new HexclaveAssertionError(\"STACK_SERVER_SECRET is not valid. Please use the generateKeys script to generate a new secret.\", { cause: e });\n  }\n  return STACK_SERVER_SECRET;\n}\n\nexport async function getJwtInfo(options: {\n  jwt: string,\n}) {\n  try {\n    if (typeof options.jwt !== \"string\") return Result.error({ error: \"JWT input is not a string!\", stringifiedInput: nicify(options.jwt) });\n    if (!options.jwt.startsWith(\"ey\")) return Result.error({ error: \"Input is a string, but not a JWT!\", input: options.jwt });\n    const decodedJwt = jose.decodeJwt(options.jwt);\n    return Result.ok({ payload: decodedJwt });\n  } catch (e) {\n    return Result.error({\n      exception: errorToNiceString(e),\n    });\n  }\n}\n\nexport async function signJWT(options: {\n  issuer: string,\n  audience: string,\n  payload: any,\n  expirationTime?: string,\n}) {\n  const privateJwks = await getPrivateJwks({ audience: options.audience });\n  const privateKey = await jose.importJWK(privateJwks[0]);\n\n  return await new jose.SignJWT(options.payload)\n    .setProtectedHeader({ alg: \"ES256\", kid: privateJwks[0].kid })\n    .setIssuer(options.issuer)\n    .setIssuedAt()\n    .setAudience(options.audience)\n    .setExpirationTime(options.expirationTime || \"5m\")\n    .sign(privateKey);\n}\n\nexport async function verifyJWT(options: {\n  allowedIssuers: string[],\n  jwt: string,\n}) {\n  const decodedJwt = jose.decodeJwt(options.jwt);\n  const audience = decodedJwt.aud;\n  if (!audience || typeof audience !== \"string\") {\n    throw new JOSEError(\"Invalid JWT audience\");\n  }\n\n  const jwkSet = jose.createLocalJWKSet(await getPublicJwkSet(await getPrivateJwks({ audience })));\n  const verified = await jose.jwtVerify(options.jwt, jwkSet, { issuer: options.allowedIssuers });\n  return verified.payload;\n}\n\nexport type PrivateJwk = {\n  kty: \"EC\",\n  alg: \"ES256\",\n  crv: \"P-256\",\n  kid: string,\n  d: string,\n  x: string,\n  y: string,\n};\nasync function getPrivateJwkFromDerivedSecret(derivedSecret: string, kid: string): Promise<PrivateJwk> {\n  const secretHash = await globalVar.crypto.subtle.digest(\"SHA-256\", jose.base64url.decode(derivedSecret));\n  const priv = new Uint8Array(secretHash);\n\n  const ec = new elliptic.ec('p256');\n  const key = ec.keyFromPrivate(priv);\n  const publicKey = key.getPublic();\n\n  return {\n    kty: 'EC',\n    crv: 'P-256',\n    alg: 'ES256',\n    kid: kid,\n    d: encodeBase64Url(priv),\n    x: encodeBase64Url(publicKey.getX().toBuffer()),\n    y: encodeBase64Url(publicKey.getY().toBuffer()),\n  };\n}\n\n/**\n * Returns a list of valid private JWKs for the given audience, with the first one taking precedence when signing new\n * JWTs.\n */\nexport async function getPrivateJwks(options: {\n  audience: string,\n}): Promise<PrivateJwk[]> {\n  const getHashOfJwkInfo = (type: string) => jose.base64url.encode(\n    crypto\n      .createHash('sha256')\n      .update(JSON.stringify([type, getStackServerSecret(), {\n        audience: options.audience,\n      }]))\n      .digest()\n  );\n  const perAudienceSecret = getHashOfJwkInfo(\"stack-jwk-audience-secret\");\n  const perAudienceKid = getHashOfJwkInfo(\"stack-jwk-kid\").slice(0, 12);\n\n  const oldPerAudienceSecret = oldGetPerAudienceSecret({ audience: options.audience });\n  const oldPerAudienceKid = oldGetKid({ secret: oldPerAudienceSecret });\n\n  return [\n    // TODO next-release: make this not take precedence; then, in the release after that, remove it entirely\n    await getPrivateJwkFromDerivedSecret(oldPerAudienceSecret, oldPerAudienceKid),\n\n    await getPrivateJwkFromDerivedSecret(perAudienceSecret, perAudienceKid),\n  ];\n}\n\nexport type PublicJwk = {\n  kty: \"EC\",\n  alg: \"ES256\",\n  crv: \"P-256\",\n  kid: string,\n  x: string,\n  y: string,\n};\nexport async function getPublicJwkSet(privateJwks: PrivateJwk[]): Promise<{ keys: PublicJwk[] }> {\n  return {\n    keys: privateJwks.map(jwk => pick(jwk, [\"kty\", \"alg\", \"crv\", \"x\", \"y\", \"kid\"])),\n  };\n}\n\nfunction oldGetPerAudienceSecret(options: {\n  audience: string,\n}) {\n  if (options.audience === \"kid\") {\n    throw new HexclaveAssertionError(\"You cannot use the 'kid' audience for a per-audience secret, see comment below in jwt.tsx\");\n  }\n  return jose.base64url.encode(\n    crypto\n      .createHash('sha256')\n      // TODO we should prefix a string like \"stack-audience-secret\" before we hash so you can't use `getKid(...)` to get the secret for eg. the \"kid\" audience if the same secret value is used\n      // Sadly doing this modification is a bit annoying as we need to leave the old keys to be valid for a little longer\n      .update(JSON.stringify([getStackServerSecret(), options.audience]))\n      .digest()\n  );\n};\n\nexport function oldGetKid(options: {\n  secret: string,\n}) {\n  return jose.base64url.encode(\n    crypto\n      .createHash('sha256')\n      .update(JSON.stringify([options.secret, \"kid\"]))  // TODO see above in getPerAudienceSecret\n      .digest()\n  ).slice(0, 12);\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,uBAAuB;CAC9B,MAAM,sBAAsB,eAAe,sBAAsB;AACjE,KAAI;AACF,OAAK,UAAU,OAAO,oBAAoB;UACnC,GAAG;AACV,QAAM,IAAI,uBAAuB,kGAAkG,EAAE,OAAO,GAAG,CAAC;;AAElJ,QAAO;;AAGT,eAAsB,WAAW,SAE9B;AACD,KAAI;AACF,MAAI,OAAO,QAAQ,QAAQ,SAAU,QAAO,OAAO,MAAM;GAAE,OAAO;GAA8B,kBAAkB,OAAO,QAAQ,IAAI;GAAE,CAAC;AACxI,MAAI,CAAC,QAAQ,IAAI,WAAW,KAAK,CAAE,QAAO,OAAO,MAAM;GAAE,OAAO;GAAqC,OAAO,QAAQ;GAAK,CAAC;EAC1H,MAAM,aAAa,KAAK,UAAU,QAAQ,IAAI;AAC9C,SAAO,OAAO,GAAG,EAAE,SAAS,YAAY,CAAC;UAClC,GAAG;AACV,SAAO,OAAO,MAAM,EAClB,WAAW,kBAAkB,EAAE,EAChC,CAAC;;;AAIN,eAAsB,QAAQ,SAK3B;CACD,MAAM,cAAc,MAAM,eAAe,EAAE,UAAU,QAAQ,UAAU,CAAC;CACxE,MAAM,aAAa,MAAM,KAAK,UAAU,YAAY,GAAG;AAEvD,QAAO,MAAM,IAAI,KAAK,QAAQ,QAAQ,QAAQ,CAC3C,mBAAmB;EAAE,KAAK;EAAS,KAAK,YAAY,GAAG;EAAK,CAAC,CAC7D,UAAU,QAAQ,OAAO,CACzB,aAAa,CACb,YAAY,QAAQ,SAAS,CAC7B,kBAAkB,QAAQ,kBAAkB,KAAK,CACjD,KAAK,WAAW;;AAGrB,eAAsB,UAAU,SAG7B;CAED,MAAM,WADa,KAAK,UAAU,QAAQ,IAAI,CAClB;AAC5B,KAAI,CAAC,YAAY,OAAO,aAAa,SACnC,OAAM,IAAI,UAAU,uBAAuB;CAG7C,MAAM,SAAS,KAAK,kBAAkB,MAAM,gBAAgB,MAAM,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhG,SADiB,MAAM,KAAK,UAAU,QAAQ,KAAK,QAAQ,EAAE,QAAQ,QAAQ,gBAAgB,CAAC,EAC9E;;AAYlB,eAAe,+BAA+B,eAAuB,KAAkC;CACrG,MAAM,aAAa,MAAM,UAAU,OAAO,OAAO,OAAO,WAAW,KAAK,UAAU,OAAO,cAAc,CAAC;CACxG,MAAM,OAAO,IAAI,WAAW,WAAW;CAIvC,MAAM,YAFK,IAAI,SAAS,GAAG,OAAO,CACnB,eAAe,KAAK,CACb,WAAW;AAEjC,QAAO;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACA;EACL,GAAG,gBAAgB,KAAK;EACxB,GAAG,gBAAgB,UAAU,MAAM,CAAC,UAAU,CAAC;EAC/C,GAAG,gBAAgB,UAAU,MAAM,CAAC,UAAU,CAAC;EAChD;;;;;;AAOH,eAAsB,eAAe,SAEX;CACxB,MAAM,oBAAoB,SAAiB,KAAK,UAAU,OACxD,OACG,WAAW,SAAS,CACpB,OAAO,KAAK,UAAU;EAAC;EAAM,sBAAsB;EAAE,EACpD,UAAU,QAAQ,UACnB;EAAC,CAAC,CAAC,CACH,QAAQ,CACZ;CACD,MAAM,oBAAoB,iBAAiB,4BAA4B;CACvE,MAAM,iBAAiB,iBAAiB,gBAAgB,CAAC,MAAM,GAAG,GAAG;CAErE,MAAM,uBAAuB,wBAAwB,EAAE,UAAU,QAAQ,UAAU,CAAC;AAGpF,QAAO,CAEL,MAAM,+BAA+B,sBAJb,UAAU,EAAE,QAAQ,sBAAsB,CAAC,CAIU,EAE7E,MAAM,+BAA+B,mBAAmB,eAAe,CACxE;;AAWH,eAAsB,gBAAgB,aAA2D;AAC/F,QAAO,EACL,MAAM,YAAY,KAAI,QAAO,KAAK,KAAK;EAAC;EAAO;EAAO;EAAO;EAAK;EAAK;EAAM,CAAC,CAAC,EAChF;;AAGH,SAAS,wBAAwB,SAE9B;AACD,KAAI,QAAQ,aAAa,MACvB,OAAM,IAAI,uBAAuB,4FAA4F;AAE/H,QAAO,KAAK,UAAU,OACpB,OACG,WAAW,SAAS,CAGpB,OAAO,KAAK,UAAU,CAAC,sBAAsB,EAAE,QAAQ,SAAS,CAAC,CAAC,CAClE,QAAQ,CACZ;;AAGH,SAAgB,UAAU,SAEvB;AACD,QAAO,KAAK,UAAU,OACpB,OACG,WAAW,SAAS,CACpB,OAAO,KAAK,UAAU,CAAC,QAAQ,QAAQ,MAAM,CAAC,CAAC,CAC/C,QAAQ,CACZ,CAAC,MAAM,GAAG,GAAG"}

package/dist/esm/utils/locks.d.ts

@@ -0,0 +1,17 @@
+//#region src/utils/locks.d.ts
+type LockCallback<T> = () => Promise<T>;
+declare class ReadWriteLock {
+  private semaphore;
+  private readers;
+  private readersMutex;
+  constructor();
+  withReadLock<T>(callback: LockCallback<T>): Promise<T>;
+  withWriteLock<T>(callback: LockCallback<T>): Promise<T>;
+  private _acquireReadLock;
+  private _releaseReadLock;
+  private _acquireWriteLock;
+  private _releaseWriteLock;
+}
+//#endregion
+export { ReadWriteLock };
+//# sourceMappingURL=locks.d.ts.map

package/dist/esm/utils/locks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locks.d.ts","names":[],"sources":["../../../src/utils/locks.tsx"],"mappings":";KAEK,YAAA,YAAwB,OAAA,CAAQ,CAAA;AAAA,cAExB,aAAA;EAAA,QACH,SAAA;EAAA,QACA,OAAA;EAAA,QACA,YAAA;;EAQF,YAAA,GAAA,CAAgB,QAAA,EAAU,YAAA,CAAa,CAAA,IAAK,OAAA,CAAQ,CAAA;EASpD,aAAA,GAAA,CAAiB,QAAA,EAAU,YAAA,CAAa,CAAA,IAAK,OAAA,CAAQ,CAAA;EAAA,QAS7C,gBAAA;EAAA,QAcA,gBAAA;EAAA,QAcA,iBAAA;EAAA,QAKA,iBAAA;AAAA"}

package/dist/esm/utils/locks.js

@@ -0,0 +1,54 @@
+import { Semaphore } from "async-mutex";
+
+//#region src/utils/locks.tsx
+var ReadWriteLock = class {
+	constructor() {
+		this.semaphore = new Semaphore(1);
+		this.readers = 0;
+		this.readersMutex = new Semaphore(1);
+	}
+	async withReadLock(callback) {
+		await this._acquireReadLock();
+		try {
+			return await callback();
+		} finally {
+			await this._releaseReadLock();
+		}
+	}
+	async withWriteLock(callback) {
+		await this._acquireWriteLock();
+		try {
+			return await callback();
+		} finally {
+			await this._releaseWriteLock();
+		}
+	}
+	async _acquireReadLock() {
+		await this.readersMutex.acquire();
+		try {
+			this.readers += 1;
+			if (this.readers === 1) await this.semaphore.acquire();
+		} finally {
+			this.readersMutex.release();
+		}
+	}
+	async _releaseReadLock() {
+		await this.readersMutex.acquire();
+		try {
+			this.readers -= 1;
+			if (this.readers === 0) this.semaphore.release();
+		} finally {
+			this.readersMutex.release();
+		}
+	}
+	async _acquireWriteLock() {
+		await this.semaphore.acquire();
+	}
+	async _releaseWriteLock() {
+		this.semaphore.release();
+	}
+};
+
+//#endregion
+export { ReadWriteLock };
+//# sourceMappingURL=locks.js.map

package/dist/esm/utils/locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locks.js","names":[],"sources":["../../../src/utils/locks.tsx"],"sourcesContent":["import { Semaphore } from 'async-mutex';\n\ntype LockCallback<T> = () => Promise<T>;\n\nexport class ReadWriteLock {\n  private semaphore: Semaphore;\n  private readers: number;\n  private readersMutex: Semaphore;\n\n  constructor() {\n    this.semaphore = new Semaphore(1); // Semaphore with 1 permit\n    this.readers = 0; // Track the number of readers\n    this.readersMutex = new Semaphore(1); // Protect access to `readers` count\n  }\n\n  async withReadLock<T>(callback: LockCallback<T>): Promise<T> {\n    await this._acquireReadLock();\n    try {\n      return await callback();\n    } finally {\n      await this._releaseReadLock();\n    }\n  }\n\n  async withWriteLock<T>(callback: LockCallback<T>): Promise<T> {\n    await this._acquireWriteLock();\n    try {\n      return await callback();\n    } finally {\n      await this._releaseWriteLock();\n    }\n  }\n\n  private async _acquireReadLock(): Promise<void> {\n    // Increment the readers count\n    await this.readersMutex.acquire();\n    try {\n      this.readers += 1;\n      // If this is the first reader, block writers\n      if (this.readers === 1) {\n        await this.semaphore.acquire();\n      }\n    } finally {\n      this.readersMutex.release();\n    }\n  }\n\n  private async _releaseReadLock(): Promise<void> {\n    // Decrement the readers count\n    await this.readersMutex.acquire();\n    try {\n      this.readers -= 1;\n      // If this was the last reader, release the writer block\n      if (this.readers === 0) {\n        this.semaphore.release();\n      }\n    } finally {\n      this.readersMutex.release();\n    }\n  }\n\n  private async _acquireWriteLock(): Promise<void> {\n    // Writers acquire the main semaphore exclusively\n    await this.semaphore.acquire();\n  }\n\n  private async _releaseWriteLock(): Promise<void> {\n    // Writers release the main semaphore\n    this.semaphore.release();\n  }\n}\n"],"mappings":";;;AAIA,IAAa,gBAAb,MAA2B;CAKzB,cAAc;AACZ,OAAK,YAAY,IAAI,UAAU,EAAE;AACjC,OAAK,UAAU;AACf,OAAK,eAAe,IAAI,UAAU,EAAE;;CAGtC,MAAM,aAAgB,UAAuC;AAC3D,QAAM,KAAK,kBAAkB;AAC7B,MAAI;AACF,UAAO,MAAM,UAAU;YACf;AACR,SAAM,KAAK,kBAAkB;;;CAIjC,MAAM,cAAiB,UAAuC;AAC5D,QAAM,KAAK,mBAAmB;AAC9B,MAAI;AACF,UAAO,MAAM,UAAU;YACf;AACR,SAAM,KAAK,mBAAmB;;;CAIlC,MAAc,mBAAkC;AAE9C,QAAM,KAAK,aAAa,SAAS;AACjC,MAAI;AACF,QAAK,WAAW;AAEhB,OAAI,KAAK,YAAY,EACnB,OAAM,KAAK,UAAU,SAAS;YAExB;AACR,QAAK,aAAa,SAAS;;;CAI/B,MAAc,mBAAkC;AAE9C,QAAM,KAAK,aAAa,SAAS;AACjC,MAAI;AACF,QAAK,WAAW;AAEhB,OAAI,KAAK,YAAY,EACnB,MAAK,UAAU,SAAS;YAElB;AACR,QAAK,aAAa,SAAS;;;CAI/B,MAAc,oBAAmC;AAE/C,QAAM,KAAK,UAAU,SAAS;;CAGhC,MAAc,oBAAmC;AAE/C,OAAK,UAAU,SAAS"}

package/dist/esm/utils/maps.d.ts

@@ -0,0 +1,61 @@
+//#region src/utils/maps.d.ts
+declare class WeakRefIfAvailable<T extends object> {
+  private readonly _ref;
+  constructor(value: T);
+  deref(): T | undefined;
+}
+/**
+ * A WeakMap-like object that can be iterated over.
+ *
+ * Note that it relies on WeakRef, and always falls back to the regular Map behavior (ie. no GC) in browsers that don't support it.
+ */
+declare class IterableWeakMap<K extends object, V> {
+  private readonly _weakMap;
+  private readonly _keyRefs;
+  constructor(entries?: readonly (readonly [K, V])[] | null);
+  get(key: K): V | undefined;
+  set(key: K, value: V): this;
+  delete(key: K): boolean;
+  has(key: K): boolean;
+  [Symbol.iterator](): IterableIterator<[K, V]>;
+  [Symbol.toStringTag]: string;
+}
+/**
+ * A map that is a IterableWeakMap for object keys and a regular Map for primitive keys. Also provides iteration over both
+ * object and primitive keys.
+ *
+ * Note that, just like IterableWeakMap, older browsers without support for WeakRef will use a regular Map for object keys.
+ */
+declare class MaybeWeakMap<K, V> {
+  private readonly _primitiveMap;
+  private readonly _weakMap;
+  constructor(entries?: readonly (readonly [K, V])[] | null);
+  private _isAllowedInWeakMap;
+  get(key: K): V | undefined;
+  set(key: K, value: V): this;
+  delete(key: K): boolean;
+  has(key: K): boolean;
+  [Symbol.iterator](): IterableIterator<[K, V]>;
+  [Symbol.toStringTag]: string;
+}
+/**
+ * A map that stores values indexed by an array of keys. If the keys are objects and the environment supports WeakRefs,
+ * they are stored in a WeakMap.
+ */
+declare class DependenciesMap<K extends any[], V> {
+  private _inner;
+  private _valueToResult;
+  private _unwrapFromInner;
+  private _setInInner;
+  private _iterateInner;
+  get(dependencies: K): V | undefined;
+  set(dependencies: K, value: V): this;
+  delete(dependencies: K): boolean;
+  has(dependencies: K): boolean;
+  clear(): void;
+  [Symbol.iterator](): IterableIterator<[K, V]>;
+  [Symbol.toStringTag]: string;
+}
+//#endregion
+export { DependenciesMap, IterableWeakMap, MaybeWeakMap, WeakRefIfAvailable };
+//# sourceMappingURL=maps.d.ts.map

package/dist/esm/utils/maps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maps.d.ts","names":[],"sources":["../../../src/utils/maps.tsx"],"mappings":";cAEa,kBAAA;EAAA,iBACM,IAAA;cAEL,KAAA,EAAO,CAAA;EAQnB,KAAA,CAAA,GAAS,CAAA;AAAA;;;;;;cA4BE,eAAA;EAAA,iBACM,QAAA;EAAA,iBACA,QAAA;cAEL,OAAA,uBAA8B,CAAA,EAAG,CAAA;EAM7C,GAAA,CAAI,GAAA,EAAK,CAAA,GAAI,CAAA;EAIb,GAAA,CAAI,GAAA,EAAK,CAAA,EAAG,KAAA,EAAO,CAAA;EAQnB,MAAA,CAAO,GAAA,EAAK,CAAA;EAUZ,GAAA,CAAI,GAAA,EAAK,CAAA;EAAA,CAIP,MAAA,CAAO,QAAA,KAAa,gBAAA,EAAkB,CAAA,EAAG,CAAA;EAAA,CAa1C,MAAA,CAAO,WAAA;AAAA;;;;;;;cAuEG,YAAA;EAAA,iBACM,aAAA;EAAA,iBACA,QAAA;cAEL,OAAA,uBAA8B,CAAA,EAAG,CAAA;EAAA,QAMrC,mBAAA;EAIR,GAAA,CAAI,GAAA,EAAK,CAAA,GAAI,CAAA;EAQb,GAAA,CAAI,GAAA,EAAK,CAAA,EAAG,KAAA,EAAO,CAAA;EASnB,MAAA,CAAO,GAAA,EAAK,CAAA;EAQZ,GAAA,CAAI,GAAA,EAAK,CAAA;EAAA,CAQP,MAAA,CAAO,QAAA,KAAa,gBAAA,EAAkB,CAAA,EAAG,CAAA;EAAA,CAK1C,MAAA,CAAO,WAAA;AAAA;;;;;cA6DG,eAAA;EAAA,QACH,MAAA;EAAA,QAEA,cAAA;EAAA,QASA,gBAAA;EAAA,QAaA,WAAA;EAAA,QAqBC,aAAA;EAST,GAAA,CAAI,YAAA,EAAc,CAAA,GAAI,CAAA;EAItB,GAAA,CAAI,YAAA,EAAc,CAAA,EAAG,KAAA,EAAO,CAAA;EAK5B,MAAA,CAAO,YAAA,EAAc,CAAA;EAIrB,GAAA,CAAI,YAAA,EAAc,CAAA;EAIlB,KAAA,CAAA;EAAA,CAIE,MAAA,CAAO,QAAA,KAAa,gBAAA,EAAkB,CAAA,EAAG,CAAA;EAAA,CAI1C,MAAA,CAAO,WAAA;AAAA"}