@heyramzi/utils 1.12.0 → 1.13.0

package/dist/analytics/umami/reporting.js

@@ -0,0 +1,189 @@
+const TOKEN_TTL_MS = 30 * 60 * 1000;
+const WEBSITE_LIST_TTL_MS = 10 * 60 * 1000;
+const PAGE_SIZE = 150;
+export class UmamiReportingClient {
+    baseUrl;
+    username;
+    password;
+    apiKey;
+    sessionCookie;
+    teamId;
+    accessHeaders;
+    fetchImpl;
+    cachedToken = null;
+    tokenExpiry = 0;
+    cachedWebsites = null;
+    websitesExpiry = 0;
+    constructor(credentials){
+        this.baseUrl = credentials.apiUrl.replace(/\/+$/, "");
+        this.username = credentials.username;
+        this.password = credentials.password;
+        this.apiKey = credentials.apiKey;
+        this.sessionCookie = credentials.sessionCookie;
+        this.teamId = credentials.teamId;
+        this.accessHeaders = credentials.accessClientId && credentials.accessClientSecret ? {
+            "CF-Access-Client-Id": credentials.accessClientId,
+            "CF-Access-Client-Secret": credentials.accessClientSecret
+        } : {};
+        const injected = credentials.fetchImpl;
+        if (!injected && typeof globalThis.fetch !== "function") {
+            throw new Error("No fetch available. Pass fetchImpl to UmamiReportingClient.");
+        }
+        this.fetchImpl = injected ?? ((url, init)=>globalThis.fetch(url, init));
+    }
+    async getToken() {
+        if (this.cachedToken && Date.now() < this.tokenExpiry) return this.cachedToken;
+        const response = await this.fetchImpl(`${this.baseUrl}/api/auth/login`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                ...this.accessHeaders
+            },
+            body: JSON.stringify({
+                username: this.username,
+                email: this.username,
+                password: this.password
+            })
+        });
+        if (!response.ok) {
+            throw new Error(`Umami auth failed: ${response.status} ${response.statusText}`);
+        }
+        const data = await response.json();
+        this.cachedToken = data.token;
+        this.tokenExpiry = Date.now() + TOKEN_TTL_MS;
+        return data.token;
+    }
+    async request(path, method = "GET", body) {
+        const url = this.apiKey ? `${this.baseUrl}${path.replace(/^\/api/, "")}` : `${this.baseUrl}${path}`;
+        const auth = this.apiKey ? {
+            "x-umami-api-key": this.apiKey
+        } : this.sessionCookie ? {
+            Cookie: this.sessionCookie
+        } : {
+            Authorization: `Bearer ${await this.getToken()}`
+        };
+        const response = await this.fetchImpl(url, {
+            method,
+            headers: {
+                ...auth,
+                "Content-Type": "application/json",
+                ...this.accessHeaders
+            },
+            body: body === undefined ? undefined : JSON.stringify(body)
+        });
+        if (response.status === 401) {
+            this.cachedToken = null;
+            this.tokenExpiry = 0;
+            throw new Error("Umami auth token expired");
+        }
+        if (!response.ok) {
+            throw new Error(`Umami API error: ${response.status} ${response.statusText} (${path})`);
+        }
+        if (method === "DELETE") return undefined;
+        return await response.json();
+    }
+    async getWebsites() {
+        if (this.cachedWebsites && Date.now() < this.websitesExpiry) return this.cachedWebsites;
+        const personal = await this.request(`/api/websites?pageSize=${PAGE_SIZE}`);
+        let teamSites = [];
+        if (this.teamId) {
+            const team = await this.request(`/api/teams/${this.teamId}/websites?pageSize=${PAGE_SIZE}`);
+            teamSites = team.data ?? [];
+        }
+        const seen = new Set();
+        const websites = [];
+        for (const site of [
+            ...personal.data ?? [],
+            ...teamSites
+        ]){
+            if (seen.has(site.id)) continue;
+            seen.add(site.id);
+            websites.push(site);
+        }
+        this.cachedWebsites = websites;
+        this.websitesExpiry = Date.now() + WEBSITE_LIST_TTL_MS;
+        return websites;
+    }
+    async createWebsite(input) {
+        const site = await this.request("/api/websites", "POST", {
+            name: input.name,
+            domain: input.domain,
+            ...input.teamId ? {
+                teamId: input.teamId
+            } : {}
+        });
+        this.cachedWebsites = null;
+        this.websitesExpiry = 0;
+        return site;
+    }
+    async getReports(websiteId) {
+        const page = await this.request(`/api/reports?websiteId=${websiteId}&pageSize=200`);
+        return Array.isArray(page) ? page : page.data;
+    }
+    async createReport(input) {
+        return this.request("/api/reports", "POST", input);
+    }
+    async deleteWebsite(websiteId) {
+        await this.request(`/api/websites/${websiteId}`, "DELETE");
+        this.cachedWebsites = null;
+        this.websitesExpiry = 0;
+    }
+    async getStats(websiteId, startAt, endAt) {
+        return this.request(`/api/websites/${websiteId}/stats?startAt=${startAt}&endAt=${endAt}`);
+    }
+    async getDateRange(websiteId) {
+        return this.request(`/api/websites/${websiteId}/daterange`);
+    }
+    async getActive(websiteId) {
+        const data = await this.request(`/api/websites/${websiteId}/active`);
+        return data.visitors ?? 0;
+    }
+    async getMetrics(websiteId, type, startAt, endAt, limit = 20) {
+        return this.request(`/api/websites/${websiteId}/metrics?startAt=${startAt}&endAt=${endAt}&type=${type}&limit=${limit}`);
+    }
+    async getExpandedMetrics(websiteId, type, startAt, endAt, limit = 20) {
+        const raw = await this.request(`/api/websites/${websiteId}/metrics/expanded?startAt=${startAt}&endAt=${endAt}&type=${type}&limit=${limit}`);
+        return raw.map((entry)=>({
+                name: entry.name,
+                pageviews: Number(entry.pageviews),
+                visitors: entry.visitors,
+                visits: entry.visits,
+                bounces: entry.bounces,
+                totaltime: Number(entry.totaltime)
+            }));
+    }
+    async getPageviews(websiteId, startAt, endAt, unit = "day", timezone = "UTC") {
+        return this.request(`/api/websites/${websiteId}/pageviews?startAt=${startAt}&endAt=${endAt}&unit=${unit}` + `&timezone=${encodeURIComponent(timezone)}`);
+    }
+    async getEvents(websiteId, startAt, endAt, pageSize = 50) {
+        return this.request(`/api/websites/${websiteId}/events?startAt=${startAt}&endAt=${endAt}&pageSize=${pageSize}`);
+    }
+    async getEventSeries(websiteId, startAt, endAt, unit = "day", timezone = "UTC") {
+        return this.request(`/api/websites/${websiteId}/events/series?startAt=${startAt}&endAt=${endAt}&unit=${unit}` + `&timezone=${encodeURIComponent(timezone)}`);
+    }
+    async getEventDataStats(websiteId, startAt, endAt) {
+        return this.request(`/api/websites/${websiteId}/event-data/stats?startAt=${startAt}&endAt=${endAt}`);
+    }
+    async getEventDataValues(websiteId, startAt, endAt, event, field) {
+        const params = new URLSearchParams({
+            startAt: String(startAt),
+            endAt: String(endAt),
+            event,
+            propertyName: field
+        });
+        return this.request(`/api/websites/${websiteId}/event-data/values?${params.toString()}`);
+    }
+    async getSessions(websiteId, startAt, endAt, pageSize = 50) {
+        return this.request(`/api/websites/${websiteId}/sessions?startAt=${startAt}&endAt=${endAt}&pageSize=${pageSize}`);
+    }
+    async resolveSiteId(siteArg) {
+        if (/^[0-9a-f-]{36}$/i.test(siteArg)) return siteArg;
+        const websites = await this.getWebsites();
+        const lower = siteArg.toLowerCase();
+        const byDomain = websites.find((w)=>w.domain.toLowerCase() === lower);
+        if (byDomain) return byDomain.id;
+        const byPartial = websites.find((w)=>w.domain.toLowerCase().includes(lower) || w.name.toLowerCase().includes(lower));
+        if (byPartial) return byPartial.id;
+        throw new Error(`No website found matching "${siteArg}". Run \`umami websites\` to see available sites.`);
+    }
+}

package/dist/auth/config/otp.js

@@ -0,0 +1,4 @@
+export const otpDefaults = {
+    otpLength: 6,
+    expiresIn: 300
+};

package/dist/auth/config/rate-limits.js

@@ -0,0 +1,20 @@
+export const defaultRateLimits = {
+    enabled: true,
+    storage: "memory",
+    window: 60,
+    max: 100,
+    customRules: {
+        "/email-otp/send-verification-otp": {
+            window: 60,
+            max: 3
+        },
+        "/sign-in/email-otp": {
+            window: 10,
+            max: 3
+        },
+        "/email-otp/verify-email": {
+            window: 10,
+            max: 3
+        }
+    }
+};

package/dist/auth/config/trusted-origins.js

@@ -0,0 +1,15 @@
+export function defaultTrustedOrigins(siteUrl) {
+    const origins = new Set([
+        siteUrl
+    ]);
+    const extra = process.env.TRUSTED_ORIGINS;
+    if (extra) {
+        for (const origin of extra.split(",")){
+            const trimmed = origin.trim();
+            if (trimmed) origins.add(trimmed);
+        }
+    }
+    return [
+        ...origins
+    ];
+}

package/dist/auth/email/index.js

@@ -0,0 +1,3 @@
+export { buildOtpEmail } from "./template.js";
+export { createResendSender } from "./resend.js";
+export { renderEmail, resolvePalette, escapeHtml, MONO_STACK } from "./layout.js";

package/dist/auth/email/layout.js

@@ -0,0 +1,84 @@
+const DEFAULT_PALETTE = {
+    background: "#f4f4f5",
+    surface: "#ffffff",
+    ink: "#18181b",
+    muted: "#71717a",
+    subtle: "#a1a1aa",
+    rule: "#ececec",
+    radius: 14
+};
+export const FONT_STACK = "-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',Arial,sans-serif";
+export const MONO_STACK = "'SF Mono',Monaco,'Cascadia Code','Roboto Mono',Consolas,'Courier New',monospace";
+export function resolvePalette(brand) {
+    return {
+        ...DEFAULT_PALETTE,
+        ...brand.palette
+    };
+}
+export function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (c)=>`&#${c.charCodeAt(0)};`);
+}
+export function hexToRgb(hex) {
+    const match = /^#?([a-f\d]{3}|[a-f\d]{6})$/i.exec(hex.trim());
+    if (!match) return null;
+    const full = match[1].length === 3 ? [
+        ...match[1]
+    ].map((c)=>c + c).join("") : match[1];
+    const n = Number.parseInt(full, 16);
+    return [
+        n >> 16 & 255,
+        n >> 8 & 255,
+        n & 255
+    ];
+}
+export function renderEmail(brand, content) {
+    const { name, url, color = "#6366f1", logoUrl, tagline } = brand;
+    const p = resolvePalette(brand);
+    const align = content.align ?? "center";
+    const domain = url.replace(/^https?:\/\//, "").replace(/\/$/, "");
+    const year = new Date().getFullYear();
+    const row = (html, padding, rowAlign = align)=>`<tr><td align="${rowAlign}" style="padding:${padding};text-align:${rowAlign};">${html}</td></tr>`;
+    const brandRow = row(`<table role="presentation" cellspacing="0" cellpadding="0"${align === "center" ? ' align="center"' : ""}><tr>
+      ${logoUrl ? `<td style="padding-right:9px;vertical-align:middle;"><img src="${escapeHtml(logoUrl)}" alt="" width="26" height="26" style="display:block;border:0;border-radius:${Math.min(p.radius, 6)}px;" /></td>` : ""}
+      <td style="vertical-align:middle;"><span style="font-size:15px;font-weight:700;color:${p.ink};letter-spacing:-0.01em;">${escapeHtml(name)}</span></td>
+    </tr></table>`, "32px 32px 20px");
+    const action = content.action ? row(`<table role="presentation" cellspacing="0" cellpadding="0"${align === "center" ? ' align="center"' : ""}><tr><td style="background-color:${color};border-radius:${Math.min(p.radius, 8)}px;">
+          <a href="${escapeHtml(content.action.url)}" style="display:inline-block;padding:11px 20px;font-size:14px;font-weight:600;color:#ffffff;text-decoration:none;">${escapeHtml(content.action.label)}</a>
+        </td></tr></table>`, "4px 32px 24px") : "";
+    const html = `<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1.0"><meta name="color-scheme" content="light"><meta name="supported-color-schemes" content="light"><title>${escapeHtml(content.heading)}</title></head>
+<body style="margin:0;padding:0;background-color:${p.background};font-family:${FONT_STACK};color:${p.ink};-webkit-font-smoothing:antialiased;">
+<div style="display:none;max-height:0;overflow:hidden;mso-hide:all;">${escapeHtml(content.preview)}</div>
+<table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background-color:${p.background};">
+<tr><td align="center" style="padding:40px 16px 32px;">
+<table role="presentation" cellspacing="0" cellpadding="0" style="max-width:520px;width:100%;background-color:${p.surface};border-radius:${p.radius}px;border:1px solid ${p.rule};">
+  ${brandRow}
+  ${row(`<h1 style="margin:0;font-size:18px;line-height:1.35;font-weight:600;color:${p.ink};">${escapeHtml(content.heading)}</h1>`, "0 32px")}
+  ${content.intro ? row(`<p style="margin:0;font-size:14px;line-height:1.55;color:${p.muted};">${escapeHtml(content.intro)}</p>`, "8px 32px 0") : ""}
+  ${content.body ? row(content.body.html, "24px 32px") : row("", "12px 32px 0")}
+  ${action}
+  ${content.note ? row(`<p style="margin:0;padding-top:16px;border-top:1px solid ${p.rule};font-size:12px;line-height:1.6;color:${p.subtle};">${escapeHtml(content.note)}</p>`, "0 32px 28px") : row("", "0 0 8px")}
+</table>
+<table role="presentation" cellspacing="0" cellpadding="0" style="max-width:520px;width:100%;">
+  <tr><td align="center" style="padding:18px 32px 0;">
+    <p style="margin:0;font-size:11px;color:${p.subtle};">&copy; ${year} ${escapeHtml(name)}${tagline ? ` &middot; ${escapeHtml(tagline)}` : ""} &middot; <a href="${escapeHtml(url)}" style="color:${p.subtle};text-decoration:underline;">${escapeHtml(domain)}</a></p>
+  </td></tr>
+</table>
+</td></tr>
+</table>
+</body>
+</html>`;
+    const text = [
+        content.heading,
+        content.intro,
+        content.body?.text,
+        content.action ? `${content.action.label}: ${content.action.url}` : undefined,
+        content.note,
+        `---\n${name} · ${domain}`
+    ].filter((part)=>Boolean(part)).join("\n\n");
+    return {
+        html,
+        text
+    };
+}

package/dist/auth/email/resend.js

@@ -0,0 +1,30 @@
+export function createResendSender(apiKey, from) {
+    return async (to, subject, html, text, options = {})=>{
+        const res = await fetch("https://api.resend.com/emails", {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+                from,
+                to: [
+                    to
+                ],
+                subject,
+                html,
+                text,
+                ...options.replyTo ? {
+                    reply_to: options.replyTo
+                } : {},
+                ...options.headers ? {
+                    headers: options.headers
+                } : {}
+            })
+        });
+        if (!res.ok) {
+            const body = await res.text().catch(()=>"");
+            throw new Error(`Resend failed (${res.status}): ${body}`);
+        }
+    };
+}

package/dist/auth/email/template.js

@@ -0,0 +1,57 @@
+import { escapeHtml, hexToRgb, FONT_STACK, renderEmail, resolvePalette } from "./layout.js";
+const LABELS = {
+    "sign-in": {
+        subject: (_otp, app)=>`${app} sign-in code`,
+        heading: "Sign-in code",
+        instruction: "Enter this code to sign in to your account."
+    },
+    "email-verification": {
+        subject: (_otp, app)=>`Verify your ${app} email`,
+        heading: "Verify your email",
+        instruction: "Enter this code to verify your email address."
+    },
+    "reset-password": {
+        subject: (_otp, app)=>`Reset your ${app} password`,
+        heading: "Reset your password",
+        instruction: "Enter this code to reset your password."
+    },
+    "forget-password": {
+        subject: (_otp, app)=>`Reset your ${app} password`,
+        heading: "Reset your password",
+        instruction: "Enter this code to reset your password."
+    },
+    "change-email": {
+        subject: (_otp, app)=>`Confirm your new ${app} email`,
+        heading: "Confirm email change",
+        instruction: "Enter this code to confirm your new email address."
+    }
+};
+export function buildOtpEmail(brand) {
+    return (otp, type = "sign-in")=>{
+        const { name, color = "#6366f1", expirationMinutes = 5 } = brand;
+        const p = resolvePalette(brand);
+        const label = LABELS[type];
+        const rgb = hexToRgb(color);
+        const cellBorder = rgb ? `rgba(${rgb.join(",")},0.35)` : color;
+        const cellBg = rgb ? `rgba(${rgb.join(",")},0.07)` : p.background;
+        const codeCell = `<td align="center" valign="middle" style="padding:12px 22px;border:1.5px solid ${cellBorder};border-radius:${Math.min(p.radius, 8)}px;background-color:${cellBg};">
+            <span style="font-size:30px;font-weight:500;letter-spacing:6px;color:${p.ink};font-family:${FONT_STACK};font-variant-numeric:tabular-nums;-webkit-user-select:all;user-select:all;">${escapeHtml(otp)}</span>
+          </td>`;
+        const { html, text } = renderEmail(brand, {
+            preview: `${otp}: ${label.instruction}`,
+            heading: label.heading,
+            intro: label.instruction,
+            body: {
+                html: `<table role="presentation" cellspacing="0" cellpadding="0" align="center"><tr>${codeCell}</tr></table>
+          <p style="margin:18px 0 0;font-size:12.5px;color:${p.subtle};">Expires in ${expirationMinutes} minutes</p>`,
+                text: `Your code: ${otp}\n\nThis code expires in ${expirationMinutes} minutes.`
+            },
+            note: "Didn't request this? Ignore this email. Never share this code."
+        });
+        return {
+            subject: label.subject(otp, name),
+            html,
+            text
+        };
+    };
+}

package/dist/auth/index.js

@@ -0,0 +1,3 @@
+export { defaultRateLimits } from "./config/rate-limits.js";
+export { otpDefaults } from "./config/otp.js";
+export { defaultTrustedOrigins } from "./config/trusted-origins.js";

package/dist/cache.js

@@ -0,0 +1,4 @@
+export function isCacheExpired(cachedAt, ttl) {
+    const cachedTime = cachedAt instanceof Date ? cachedAt.getTime() : new Date(cachedAt).getTime();
+    return Date.now() - cachedTime >= ttl;
+}

package/dist/cn.js

@@ -0,0 +1,5 @@
+import { clsx } from "clsx";
+import { twMerge } from "tailwind-merge";
+export function cn(...inputs) {
+    return twMerge(clsx(inputs));
+}

package/dist/collection.js

@@ -0,0 +1,8 @@
+export function groupBy(items, key) {
+    const groups = {};
+    for (const item of items){
+        const k = key(item);
+        (groups[k] ??= []).push(item);
+    }
+    return groups;
+}

package/dist/crypto.js

@@ -0,0 +1,117 @@
+import { Buffer } from "node:buffer";
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+const ALGORITHM = "aes-256-gcm";
+const AUTH_TAG_BYTES = 16;
+const IV_BYTES = 12;
+const KEY_BYTES = 32;
+const KEY_ENV = "HEYRAMZI_UTILS_CRYPTO_KEY";
+const BASE64_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/;
+const HEX_PATTERN = /^[0-9a-fA-F]{64}$/;
+function ensureServerEnv() {
+    const runtimeProcess = globalThis.process;
+    if (!runtimeProcess?.env) {
+        throw new Error("[crypto] process.env is unavailable. @heyramzi/utils/crypto is server-only.");
+    }
+    return runtimeProcess.env;
+}
+function decodeBase64(value, label) {
+    const normalized = value.trim();
+    if (!normalized || normalized.length % 4 !== 0 || !BASE64_PATTERN.test(normalized)) {
+        throw new Error(`[crypto] ${label} must be valid base64.`);
+    }
+    const bytes = Buffer.from(normalized, "base64");
+    if (bytes.toString("base64") !== normalized) {
+        throw new Error(`[crypto] ${label} must be valid base64.`);
+    }
+    return bytes;
+}
+function decodeSecretKey(rawValue, label) {
+    if (!rawValue) {
+        throw new Error(`[crypto] Missing ${label}. Set a 32-byte key encoded as base64 (recommended) or 64-character hex.`);
+    }
+    if (HEX_PATTERN.test(rawValue)) {
+        return Buffer.from(rawValue, "hex");
+    }
+    const key = decodeBase64(rawValue, label);
+    if (key.length !== KEY_BYTES) {
+        throw new Error(`[crypto] ${label} must decode to exactly ${KEY_BYTES} bytes for AES-256-GCM.`);
+    }
+    return key;
+}
+function getSecretKey() {
+    const env = ensureServerEnv();
+    const rawValue = env[KEY_ENV]?.trim();
+    return decodeSecretKey(rawValue ?? "", KEY_ENV);
+}
+function encryptWithKey(plaintext, key) {
+    const iv = randomBytes(IV_BYTES);
+    const cipher = createCipheriv(ALGORITHM, key, iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintext, "utf8"),
+        cipher.final(),
+        cipher.getAuthTag()
+    ]);
+    return {
+        ciphertext: ciphertext.toString("base64"),
+        iv: iv.toString("base64")
+    };
+}
+function decryptWithKey(ciphertext, iv, key) {
+    const ivBytes = decodeBase64(iv, "iv");
+    if (ivBytes.length !== IV_BYTES) {
+        throw new Error(`[crypto] iv must decode to exactly ${IV_BYTES} bytes.`);
+    }
+    const payload = decodeBase64(ciphertext, "ciphertext");
+    if (payload.length < AUTH_TAG_BYTES) {
+        throw new Error("[crypto] ciphertext payload is invalid.");
+    }
+    const encrypted = payload.subarray(0, -AUTH_TAG_BYTES);
+    const authTag = payload.subarray(-AUTH_TAG_BYTES);
+    try {
+        const decipher = createDecipheriv(ALGORITHM, key, ivBytes);
+        decipher.setAuthTag(authTag);
+        return Buffer.concat([
+            decipher.update(encrypted),
+            decipher.final()
+        ]).toString("utf8");
+    } catch (error) {
+        throw new Error("[crypto] Failed to decrypt secret. The payload may be tampered with or invalid.", {
+            cause: error
+        });
+    }
+}
+export function encryptSecret(plaintext) {
+    return encryptWithKey(plaintext, getSecretKey());
+}
+export function decryptSecret(ciphertext, iv) {
+    return decryptWithKey(ciphertext, iv, getSecretKey());
+}
+export function encryptSecretWithKey(plaintext, key) {
+    return encryptWithKey(plaintext, decodeSecretKey(key.trim(), "key"));
+}
+export function decryptSecretWithKey(ciphertext, iv, key) {
+    return decryptWithKey(ciphertext, iv, decodeSecretKey(key.trim(), "key"));
+}
+export function packSecret(secret) {
+    const ivBytes = decodeBase64(secret.iv, "iv");
+    if (ivBytes.length !== IV_BYTES) {
+        throw new Error(`[crypto] iv must decode to exactly ${IV_BYTES} bytes.`);
+    }
+    const ciphertextBytes = decodeBase64(secret.ciphertext, "ciphertext");
+    return Buffer.concat([
+        ivBytes,
+        ciphertextBytes
+    ]).toString("base64");
+}
+export function unpackSecret(payload) {
+    const packed = decodeBase64(payload, "payload");
+    if (packed.length < IV_BYTES + AUTH_TAG_BYTES) {
+        throw new Error("[crypto] packed payload is invalid.");
+    }
+    const iv = packed.subarray(0, IV_BYTES);
+    const ciphertext = packed.subarray(IV_BYTES);
+    return {
+        ciphertext: ciphertext.toString("base64"),
+        iv: iv.toString("base64")
+    };
+}

package/dist/error.js

@@ -0,0 +1,15 @@
+export async function fetchApi(url, options) {
+    const response = await fetch(url, {
+        headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+        },
+        ...options
+    });
+    const data = await response.json();
+    if (!response.ok) {
+        const message = data?.error ?? `Request failed (${response.status})`;
+        throw new Error(message);
+    }
+    return data;
+}

package/dist/errors/sentry/index.js

@@ -0,0 +1,15 @@
+import { buildErrorRequest } from "./protocol.js";
+export { buildErrorRequest, parseDsn, parseStack } from "./protocol.js";
+export async function captureError(input) {
+    const req = buildErrorRequest(input);
+    if (!req) return;
+    try {
+        await fetch(req.url, {
+            method: "POST",
+            headers: req.headers,
+            body: req.body
+        });
+    } catch (err) {
+        console.error("[errors] Sentry capture failed:", err);
+    }
+}