@horae.io/passport-core 1.0.0

package/dist/index.cjs

@@ -0,0 +1,307 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  createClient: () => createClient,
+  createClientWithAuth: () => createClientWithAuth,
+  createCustomStrategy: () => createCustomStrategy,
+  createEventBus: () => createEventBus,
+  createJwtStrategy: () => createJwtStrategy,
+  createPassportApi: () => createPassportApi,
+  createPassportSDK: () => createPassportSDK,
+  mountApp: () => mountApp,
+  renderPassport: () => renderPassport,
+  renderPassportList: () => renderPassportList
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/events.ts
+function createEventBus() {
+  const listeners = /* @__PURE__ */ new Map();
+  function on(event, fn) {
+    if (!listeners.has(event)) listeners.set(event, /* @__PURE__ */ new Set());
+    listeners.get(event).add(fn);
+    return () => listeners.get(event)?.delete(fn);
+  }
+  function emit(event, payload) {
+    listeners.get(event)?.forEach((fn) => fn(payload));
+  }
+  return { on, emit };
+}
+
+// src/auth/strategies/jwt.ts
+function createJwtStrategy(options = {}) {
+  let token = options.token ?? null;
+  const storageKey = options.storageKey ?? null;
+  const storage = typeof window !== "undefined" ? window.localStorage : void 0;
+  if (storage && storageKey) {
+    try {
+      const stored = storage.getItem(storageKey);
+      if (stored) token = stored;
+    } catch {
+    }
+  }
+  return {
+    async getToken() {
+      return token;
+    },
+    setToken(next) {
+      token = next;
+      if (storage && storageKey) {
+        try {
+          if (next) storage.setItem(storageKey, next);
+          else storage.removeItem(storageKey);
+        } catch {
+        }
+      }
+    },
+    clearToken() {
+      token = null;
+      if (storage && storageKey) {
+        try {
+          storage.removeItem(storageKey);
+        } catch {
+        }
+      }
+    }
+  };
+}
+
+// src/auth/strategies/custom.ts
+function createCustomStrategy(getToken) {
+  return { getToken };
+}
+
+// src/client.ts
+var import_axios = __toESM(require("axios"), 1);
+function createClient(options) {
+  const { apiBase, getToken } = options;
+  const client = import_axios.default.create({
+    baseURL: apiBase.replace(/\/v1\/?$/, "") + "/v1"
+  });
+  client.interceptors.request.use(async (config) => {
+    const token = await getToken();
+    if (token) {
+      config.headers.Authorization = `Bearer ${token}`;
+    }
+    config.headers["ngrok-skip-browser-warning"] = "true";
+    return config;
+  });
+  return client;
+}
+function createClientWithAuth(auth, apiBase) {
+  return createClient({
+    apiBase,
+    getToken: () => auth.getToken()
+  });
+}
+
+// src/api.ts
+function unwrapItems(response) {
+  const data = response.data;
+  if (Array.isArray(data)) return data;
+  const inner = data && typeof data === "object" && "data" in data ? data.data : data;
+  const items = inner && typeof inner === "object" && "items" in inner ? inner.items : Array.isArray(inner) ? inner : [];
+  return items ?? [];
+}
+function unwrapData(response) {
+  const data = response.data;
+  return data && typeof data === "object" && "data" in data ? data.data : data;
+}
+function createPassportApi(api) {
+  return {
+    /** List passports claimed by current user */
+    async getMyClaimedPassports() {
+      const res = await api.get("/api/passport/claimed");
+      return unwrapItems(res);
+    },
+    /** List passports by owner wallet (e.g. Shopify) */
+    async getPassportsByOwner(ownerWallet) {
+      const res = await api.get("/api/passport/claimed", { params: { owner: ownerWallet } });
+      return unwrapItems(res);
+    },
+    /** Single passport (authenticated) */
+    async getPassport(tokenId, isAuthenticated = true) {
+      const path = isAuthenticated ? `/api/passport/${tokenId}` : `/api/passport/public/${tokenId}`;
+      const res = await api.get(path);
+      return unwrapData(res);
+    },
+    /** Claim passport */
+    async claimPassport(data) {
+      await api.post("/api/passport/claim", data);
+    },
+    /** Shopify claim (serialNumber + optional email) */
+    async claimShopifyPassport(data) {
+      await api.post("/api/passport/shopify-claim", data);
+    },
+    /** Current user profile */
+    async getMe() {
+      const res = await api.get("/users/me");
+      const raw = unwrapData(res);
+      const doc = raw && typeof raw === "object" && "_doc" in raw ? raw._doc : raw;
+      return doc;
+    },
+    /** Documents for a passport (owner gets file URLs) */
+    async getDocuments(tokenId) {
+      const res = await api.get(`/api/passport/${tokenId}/documents`);
+      const responseData = res.data?.data ?? res.data;
+      if (responseData && typeof responseData === "object" && "data" in responseData && Array.isArray(responseData.data))
+        return responseData.data;
+      if (Array.isArray(responseData)) return responseData;
+      return [];
+    },
+    /** Transfer passport to user by email */
+    async transferPassportToUser(data) {
+      await api.post("/api/passport/transfer-to-user", data);
+    },
+    /** Set stolen status */
+    async setStolenStatus(data) {
+      await api.post("/api/passport/set-stolen", data);
+    }
+  };
+}
+
+// src/ui.ts
+function prepareContainer(options, apiBase, token) {
+  const containerEl = document.querySelector(options.container);
+  if (!containerEl) {
+    throw new Error(`PassportSDK: container element '${options.container}' not found.`);
+  }
+  if (containerEl instanceof HTMLElement) {
+    containerEl.dataset.horaeApiBase = apiBase;
+    if (options.initialTab) {
+      containerEl.dataset.initialTab = options.initialTab;
+    }
+    if (token) {
+      containerEl.dataset.horaeToken = token;
+    }
+    containerEl.classList.add("horae-sdk-root");
+    containerEl.dataset.containerSelector = options.container;
+  }
+  return containerEl;
+}
+function loadUIBundle(uiHost) {
+  const SCRIPT_ID = "horae-passport-sdk-ui";
+  return new Promise((resolve, reject) => {
+    if (document.getElementById(SCRIPT_ID)) {
+      resolve();
+      return;
+    }
+    const script = document.createElement("script");
+    script.id = SCRIPT_ID;
+    script.type = "module";
+    script.src = `${uiHost.replace(/\/$/, "")}/sdk-embed.js`;
+    script.onload = () => resolve();
+    script.onerror = () => reject(new Error(`PassportSDK: Failed to load UI bundle from ${script.src}`));
+    document.head.appendChild(script);
+  });
+}
+async function mountApp(options, apiBase, token) {
+  prepareContainer(options, apiBase, token);
+  const host = options.uiHost || "https://app.horae.io";
+  await loadUIBundle(host);
+  window.dispatchEvent(new CustomEvent("horae:sdk:mount", {
+    detail: { container: options.container }
+  }));
+}
+async function renderPassportList(options, apiBase, token) {
+  return mountApp({ ...options, initialTab: "passports" }, apiBase, token);
+}
+async function renderPassport(options, apiBase, token) {
+  const containerEl = prepareContainer(options, apiBase, token);
+  if (containerEl instanceof HTMLElement) {
+    containerEl.dataset.passportId = options.passportId;
+    containerEl.dataset.initialTab = "detail";
+  }
+  const host = options.uiHost || "https://app.horae.io";
+  await loadUIBundle(host);
+  window.dispatchEvent(new CustomEvent("horae:sdk:mount", {
+    detail: { container: options.container, passportId: options.passportId }
+  }));
+}
+
+// src/index.ts
+function createPassportSDK(config) {
+  const events = createEventBus();
+  let auth;
+  switch (config.authStrategy) {
+    case "jwt": {
+      const jwt = createJwtStrategy({
+        token: config.token ?? void 0,
+        storageKey: config.tokenStorageKey ?? void 0
+      });
+      auth = jwt;
+      break;
+    }
+    case "custom": {
+      if (!config.getToken) throw new Error("PassportSDK: getToken required for authStrategy 'custom'");
+      auth = createCustomStrategy(config.getToken);
+      break;
+    }
+    case "shopify":
+      auth = createJwtStrategy({
+        token: config.token ?? void 0,
+        storageKey: config.tokenStorageKey ?? "shopify_access_token"
+      });
+      break;
+    case "privy":
+      if (!config.getToken) throw new Error("PassportSDK: getToken required for authStrategy 'privy' (pass Privy getAccessToken)");
+      auth = createCustomStrategy(config.getToken);
+      break;
+    default:
+      throw new Error(`PassportSDK: unknown authStrategy ${String(config.authStrategy)}`);
+  }
+  const client = createClient({ apiBase: config.apiBase, getToken: () => auth.getToken() });
+  const api = createPassportApi(client);
+  return {
+    api,
+    events,
+    auth,
+    config: Object.freeze({ ...config }),
+    mount: (options) => mountApp(options, config.apiBase, config.token || null),
+    renderPassportList: (options) => renderPassportList(options, config.apiBase, config.token || null),
+    renderPassport: (options) => renderPassport(options, config.apiBase, config.token || null)
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createClient,
+  createClientWithAuth,
+  createCustomStrategy,
+  createEventBus,
+  createJwtStrategy,
+  createPassportApi,
+  createPassportSDK,
+  mountApp,
+  renderPassport,
+  renderPassportList
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/events.ts","../src/auth/strategies/jwt.ts","../src/auth/strategies/custom.ts","../src/client.ts","../src/api.ts","../src/ui.ts"],"sourcesContent":["/**\n * @horae/passport-core\n * Reusable Passport SDK — auth strategies, Horae API client, events.\n * Token-based auth only; no cross-domain cookies.\n */\n\nexport type { PassportSDKConfig, AuthStrategy, PassportListItem, PassportDetail, User } from \"./types.js\";\nexport { createEventBus } from \"./events.js\";\nexport type { SDKEvent, EventMap, EventBus } from \"./events.js\";\nexport { createJwtStrategy, createCustomStrategy } from \"./auth/index.js\";\nexport type { AuthStrategyBase } from \"./auth/index.js\";\nexport { createClient, createClientWithAuth } from \"./client.js\";\nexport type { CreateClientOptions } from \"./client.js\";\nexport { createPassportApi } from \"./api.js\";\nexport * from \"./ui.js\";\n\nimport type { PassportSDKConfig } from \"./types.js\";\nimport { createEventBus } from \"./events.js\";\nimport { createJwtStrategy } from \"./auth/strategies/jwt.js\";\nimport { createCustomStrategy } from \"./auth/strategies/custom.js\";\nimport { createClient } from \"./client.js\";\nimport { createPassportApi } from \"./api.js\";\nimport type { AuthStrategyBase } from \"./auth/index.js\";\nimport { mountApp, renderPassportList, renderPassport } from \"./ui.js\";\nimport type { RenderOptions, RenderPassportOptions } from \"./ui.js\";\n\nexport interface PassportSDK {\n  /** Horae API client (axios) */\n  readonly api: ReturnType<typeof createPassportApi>;\n  /** Event bus for auth:ready, auth:error, passport:claimed, etc. */\n  readonly events: ReturnType<typeof createEventBus>;\n  /** Auth strategy instance (for setToken/clearToken when available) */\n  readonly auth: AuthStrategyBase;\n  /** Config */\n  readonly config: Readonly<PassportSDKConfig>;\n  /** Mount the generic SDK App in headless mode */\n  mount(options: RenderOptions): Promise<void>;\n  /** Render the Passport List view */\n  renderPassportList(options: RenderOptions): Promise<void>;\n  /** Render a Single Passport Detail view */\n  renderPassport(options: RenderPassportOptions): Promise<void>;\n}\n\n/**\n * Create the Passport SDK instance.\n * - authStrategy \"jwt\": pass token in config or call setToken on auth after getting JWT from your backend.\n * - authStrategy \"custom\": pass getToken in config.\n * - authStrategy \"shopify\": use @horae/passport-shopify to get JWT from bridge, then use jwt or custom.\n */\nexport function createPassportSDK(config: PassportSDKConfig): PassportSDK {\n  const events = createEventBus();\n  let auth: AuthStrategyBase;\n\n  switch (config.authStrategy) {\n    case \"jwt\": {\n      const jwt = createJwtStrategy({\n        token: config.token ?? undefined,\n        storageKey: config.tokenStorageKey ?? undefined,\n      });\n      auth = jwt;\n      break;\n    }\n    case \"custom\": {\n      if (!config.getToken) throw new Error(\"PassportSDK: getToken required for authStrategy 'custom'\");\n      auth = createCustomStrategy(config.getToken);\n      break;\n    }\n    case \"shopify\":\n      // Shopify: use JWT strategy; token is set by @horae/passport-shopify bridge\n      auth = createJwtStrategy({\n        token: config.token ?? undefined,\n        storageKey: config.tokenStorageKey ?? \"shopify_access_token\",\n      });\n      break;\n    case \"privy\":\n      // Privy: use custom strategy with getToken from host (e.g. getAccessToken from @privy-io/react-auth)\n      if (!config.getToken) throw new Error(\"PassportSDK: getToken required for authStrategy 'privy' (pass Privy getAccessToken)\");\n      auth = createCustomStrategy(config.getToken);\n      break;\n    default:\n      throw new Error(`PassportSDK: unknown authStrategy ${String((config as { authStrategy?: string }).authStrategy)}`);\n  }\n\n  const client = createClient({ apiBase: config.apiBase, getToken: () => auth.getToken() });\n  const api = createPassportApi(client);\n\n  return {\n    api,\n    events,\n    auth,\n    config: Object.freeze({ ...config }),\n    mount: (options) => mountApp(options, config.apiBase, config.token || null),\n    renderPassportList: (options) => renderPassportList(options, config.apiBase, config.token || null),\n    renderPassport: (options) => renderPassport(options, config.apiBase, config.token || null),\n  };\n}\n","/**\n * @horae/passport-core — event emitter for auth and passport events\n */\n\nexport type SDKEvent =\n  | \"auth:ready\"\n  | \"auth:error\"\n  | \"passport:claimed\"\n  | \"passport:loaded\"\n  | \"passport:list:loaded\"\n  | \"token:expired\";\n\nexport type EventMap = {\n  \"auth:ready\": void;\n  \"auth:error\": { message: string; code?: string };\n  \"passport:claimed\": { tokenId: string };\n  \"passport:loaded\": { tokenId: string };\n  \"passport:list:loaded\": { count: number };\n  \"token:expired\": void;\n};\n\ntype Listener<T> = (payload: T) => void;\n\nexport function createEventBus() {\n  const listeners = new Map<SDKEvent, Set<Listener<unknown>>>();\n\n  function on<E extends SDKEvent>(event: E, fn: Listener<EventMap[E]>) {\n    if (!listeners.has(event)) listeners.set(event, new Set());\n    listeners.get(event)!.add(fn as Listener<unknown>);\n    return () => listeners.get(event)?.delete(fn as Listener<unknown>);\n  }\n\n  function emit<E extends SDKEvent>(event: E, payload?: EventMap[E]) {\n    listeners.get(event)?.forEach((fn) => (fn as Listener<EventMap[E]>)(payload as EventMap[E]));\n  }\n\n  return { on, emit };\n}\n\nexport type EventBus = ReturnType<typeof createEventBus>;\n","/**\n * JWT strategy — token from config or setToken; optional localStorage persistence\n */\n\nimport type { AuthStrategyBase } from \"../types.js\";\n\nexport interface JwtStrategyOptions {\n  /** Initial token */\n  token?: string | null;\n  /** localStorage key for persistence (omit for in-memory only) */\n  storageKey?: string | null;\n}\n\nexport function createJwtStrategy(options: JwtStrategyOptions = {}): AuthStrategyBase {\n  let token: string | null = options.token ?? null;\n  const storageKey = options.storageKey ?? null;\n\n  const storage = typeof window !== \"undefined\" ? window.localStorage : undefined;\n  if (storage && storageKey) {\n    try {\n      const stored = storage.getItem(storageKey);\n      if (stored) token = stored;\n    } catch {\n      // ignore\n    }\n  }\n\n  return {\n    async getToken() {\n      return token;\n    },\n    setToken(next: string | null) {\n      token = next;\n      if (storage && storageKey) {\n        try {\n          if (next) storage.setItem(storageKey, next);\n          else storage.removeItem(storageKey);\n        } catch {\n          // ignore\n        }\n      }\n    },\n    clearToken() {\n      token = null;\n      if (storage && storageKey) {\n        try {\n          storage.removeItem(storageKey);\n        } catch {\n          // ignore\n        }\n      }\n    },\n  };\n}\n","/**\n * Custom strategy — caller supplies getToken (e.g. from backend or Privy)\n */\n\nimport type { AuthStrategyBase } from \"../types.js\";\n\nexport function createCustomStrategy(\n  getToken: () => Promise<string | null>,\n): AuthStrategyBase {\n  return { getToken };\n}\n","/**\n * Horae API client — axios instance with Bearer token from auth strategy\n */\n\nimport axios, { type AxiosInstance } from \"axios\";\nimport type { AuthStrategyBase } from \"./auth/index.js\";\n\nexport interface CreateClientOptions {\n  apiBase: string;\n  getToken: () => Promise<string | null>;\n}\n\nexport function createClient(options: CreateClientOptions): AxiosInstance {\n  const { apiBase, getToken } = options;\n  const client = axios.create({\n    baseURL: apiBase.replace(/\\/v1\\/?$/, \"\") + \"/v1\",\n  });\n\n  client.interceptors.request.use(async (config) => {\n    const token = await getToken();\n    if (token) {\n      config.headers.Authorization = `Bearer ${token}`;\n    }\n    config.headers[\"ngrok-skip-browser-warning\"] = \"true\";\n    return config;\n  });\n\n  return client;\n}\n\nexport function createClientWithAuth(auth: AuthStrategyBase, apiBase: string): AxiosInstance {\n  return createClient({\n    apiBase,\n    getToken: () => auth.getToken(),\n  });\n}\n","/**\n * Horae Passport API — list, single, claim, user, documents\n * Mirrors passport-web shared/api/api.service.ts (token-based auth)\n */\n\nimport type { AxiosInstance } from \"axios\";\nimport type { PassportListItem, PassportDetail, User } from \"./types.js\";\n\nfunction unwrapItems<T>(response: { data?: unknown }): T[] {\n  const data = response.data as { data?: { items?: T[] }; items?: T[] } | T[] | undefined;\n  if (Array.isArray(data)) return data;\n  const inner = data && typeof data === \"object\" && \"data\" in data ? (data as { data?: { items?: T[] } }).data : data;\n  const items = (inner && typeof inner === \"object\" && \"items\" in inner\n    ? (inner as { items?: T[] }).items\n    : Array.isArray(inner)\n      ? inner\n      : []) as T[];\n  return items ?? [];\n}\n\nfunction unwrapData<T>(response: { data?: unknown }): T {\n  const data = response.data as { data?: T } | T;\n  return (data && typeof data === \"object\" && \"data\" in data ? (data as { data: T }).data : data) as T;\n}\n\nexport function createPassportApi(api: AxiosInstance) {\n  return {\n    /** List passports claimed by current user */\n    async getMyClaimedPassports(): Promise<PassportListItem[]> {\n      const res = await api.get(\"/api/passport/claimed\");\n      return unwrapItems<PassportListItem>(res) as PassportListItem[];\n    },\n\n    /** List passports by owner wallet (e.g. Shopify) */\n    async getPassportsByOwner(ownerWallet: string): Promise<PassportListItem[]> {\n      const res = await api.get(\"/api/passport/claimed\", { params: { owner: ownerWallet } });\n      return unwrapItems<PassportListItem>(res) as PassportListItem[];\n    },\n\n    /** Single passport (authenticated) */\n    async getPassport(tokenId: string, isAuthenticated = true): Promise<PassportDetail> {\n      const path = isAuthenticated ? `/api/passport/${tokenId}` : `/api/passport/public/${tokenId}`;\n      const res = await api.get(path);\n      return unwrapData<PassportDetail>(res);\n    },\n\n    /** Claim passport */\n    async claimPassport(data: { tokenId: string; toAddress: string; claimKey: string }) {\n      await api.post(\"/api/passport/claim\", data);\n    },\n\n    /** Shopify claim (serialNumber + optional email) */\n    async claimShopifyPassport(data: { serialNumber: string; email?: string }) {\n      await api.post(\"/api/passport/shopify-claim\", data);\n    },\n\n    /** Current user profile */\n    async getMe(): Promise<User> {\n      const res = await api.get(\"/users/me\");\n      const raw = unwrapData<unknown>(res);\n      const doc = raw && typeof raw === \"object\" && \"_doc\" in raw ? (raw as { _doc: User })._doc : raw;\n      return doc as User;\n    },\n\n    /** Documents for a passport (owner gets file URLs) */\n    async getDocuments(tokenId: string): Promise<{ url?: string; name?: string; [k: string]: unknown }[]> {\n      const res = await api.get(`/api/passport/${tokenId}/documents`);\n      const responseData = (res.data as { data?: unknown })?.data ?? res.data;\n      if (responseData && typeof responseData === \"object\" && \"data\" in responseData && Array.isArray((responseData as { data: unknown[] }).data))\n        return (responseData as { data: unknown[] }).data as { url?: string; name?: string; [k: string]: unknown }[];\n      if (Array.isArray(responseData)) return responseData as { url?: string; name?: string; [k: string]: unknown }[];\n      return [];\n    },\n\n    /** Transfer passport to user by email */\n    async transferPassportToUser(data: { tokenId: string; recipientEmail: string }) {\n      await api.post(\"/api/passport/transfer-to-user\", data);\n    },\n\n    /** Set stolen status */\n    async setStolenStatus(data: { tokenId: string; isStolen: boolean }) {\n      await api.post(\"/api/passport/set-stolen\", data);\n    },\n  };\n}\n","/**\n * UI Renderer for @horae/passport-core\n * Dynamically injects the pre-built React SDK bundle to render the UI on the host page.\n */\n\nexport interface RenderOptions {\n    /** CSS selector of the container element (e.g. \"#passport-app\") */\n    container: string;\n    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */\n    uiHost?: string;\n    /** Initial tab/view (e.g. \"passports\", \"claim\", \"settings\") */\n    initialTab?: string;\n}\n\nexport interface RenderPassportOptions extends RenderOptions {\n    /** The ID of the passport to show */\n    passportId: string;\n}\n\n/**\n * Configure the container with data attributes so the UI bundle can read them upon mounting.\n */\nfunction prepareContainer(options: RenderOptions, apiBase: string, token: string | null) {\n    const containerEl = document.querySelector(options.container);\n    if (!containerEl) {\n        throw new Error(`PassportSDK: container element '${options.container}' not found.`);\n    }\n\n    // Set necessary data attributes for the UI bundle (similar to Shopify embed contract)\n    if (containerEl instanceof HTMLElement) {\n        containerEl.dataset.horaeApiBase = apiBase;\n        if (options.initialTab) {\n            containerEl.dataset.initialTab = options.initialTab;\n        }\n\n        // Inject the token (the UI bundle will look for this or use its own mechanism)\n        if (token) {\n            containerEl.dataset.horaeToken = token;\n        }\n\n        // Add a signature class/id to ensure the embed root is identifiable\n        containerEl.classList.add(\"horae-sdk-root\");\n\n        // Allow the bundle to easily find its mount point if it uses querySelector internally\n        // (We also pass the container selector directly to the mount event later if needed)\n        containerEl.dataset.containerSelector = options.container;\n    }\n\n    return containerEl;\n}\n\n/**\n * Inject the script tag for the UI bundle if it hasn't been injected yet.\n */\nfunction loadUIBundle(uiHost: string): Promise<void> {\n    const SCRIPT_ID = \"horae-passport-sdk-ui\";\n\n    return new Promise((resolve, reject) => {\n        if (document.getElementById(SCRIPT_ID)) {\n            // Script already added\n            resolve();\n            return;\n        }\n\n        const script = document.createElement(\"script\");\n        script.id = SCRIPT_ID;\n        script.type = \"module\";\n        // Target the newly created sdk-embed entrypoint\n        script.src = `${uiHost.replace(/\\/$/, '')}/sdk-embed.js`;\n\n        script.onload = () => resolve();\n        script.onerror = () => reject(new Error(`PassportSDK: Failed to load UI bundle from ${script.src}`));\n\n        document.head.appendChild(script);\n    });\n}\n\n/**\n * Render the generic SDK App\n */\nexport async function mountApp(\n    options: RenderOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    prepareContainer(options, apiBase, token);\n\n    const host = options.uiHost || \"https://app.horae.io\";\n    await loadUIBundle(host);\n\n    // Dispatch a custom event in case the bundle is already loaded and listening for dynamic mounts\n    window.dispatchEvent(new CustomEvent(\"horae:sdk:mount\", {\n        detail: { container: options.container }\n    }));\n}\n\n/**\n * Render specifically the Passport List (maps to \"passports\" tab/view)\n */\nexport async function renderPassportList(\n    options: RenderOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    return mountApp({ ...options, initialTab: \"passports\" }, apiBase, token);\n}\n\n/**\n * Render specifically a Single Passport (maps to a specific detail view layout)\n */\nexport async function renderPassport(\n    options: RenderPassportOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    const containerEl = prepareContainer(options, apiBase, token);\n\n    if (containerEl instanceof HTMLElement) {\n        containerEl.dataset.passportId = options.passportId;\n        // Set initialTab to \"detail\" or a specific flag the UI recognizes\n        containerEl.dataset.initialTab = \"detail\";\n    }\n\n    const host = options.uiHost || \"https://app.horae.io\";\n    await loadUIBundle(host);\n\n    window.dispatchEvent(new CustomEvent(\"horae:sdk:mount\", {\n        detail: { container: options.container, passportId: options.passportId }\n    }));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACuBO,SAAS,iBAAiB;AAC/B,QAAM,YAAY,oBAAI,IAAsC;AAE5D,WAAS,GAAuB,OAAU,IAA2B;AACnE,QAAI,CAAC,UAAU,IAAI,KAAK,EAAG,WAAU,IAAI,OAAO,oBAAI,IAAI,CAAC;AACzD,cAAU,IAAI,KAAK,EAAG,IAAI,EAAuB;AACjD,WAAO,MAAM,UAAU,IAAI,KAAK,GAAG,OAAO,EAAuB;AAAA,EACnE;AAEA,WAAS,KAAyB,OAAU,SAAuB;AACjE,cAAU,IAAI,KAAK,GAAG,QAAQ,CAAC,OAAQ,GAA6B,OAAsB,CAAC;AAAA,EAC7F;AAEA,SAAO,EAAE,IAAI,KAAK;AACpB;;;ACxBO,SAAS,kBAAkB,UAA8B,CAAC,GAAqB;AACpF,MAAI,QAAuB,QAAQ,SAAS;AAC5C,QAAM,aAAa,QAAQ,cAAc;AAEzC,QAAM,UAAU,OAAO,WAAW,cAAc,OAAO,eAAe;AACtE,MAAI,WAAW,YAAY;AACzB,QAAI;AACF,YAAM,SAAS,QAAQ,QAAQ,UAAU;AACzC,UAAI,OAAQ,SAAQ;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,WAAW;AACf,aAAO;AAAA,IACT;AAAA,IACA,SAAS,MAAqB;AAC5B,cAAQ;AACR,UAAI,WAAW,YAAY;AACzB,YAAI;AACF,cAAI,KAAM,SAAQ,QAAQ,YAAY,IAAI;AAAA,cACrC,SAAQ,WAAW,UAAU;AAAA,QACpC,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAa;AACX,cAAQ;AACR,UAAI,WAAW,YAAY;AACzB,YAAI;AACF,kBAAQ,WAAW,UAAU;AAAA,QAC/B,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC/CO,SAAS,qBACd,UACkB;AAClB,SAAO,EAAE,SAAS;AACpB;;;ACNA,mBAA0C;AAQnC,SAAS,aAAa,SAA6C;AACxE,QAAM,EAAE,SAAS,SAAS,IAAI;AAC9B,QAAM,SAAS,aAAAA,QAAM,OAAO;AAAA,IAC1B,SAAS,QAAQ,QAAQ,YAAY,EAAE,IAAI;AAAA,EAC7C,CAAC;AAED,SAAO,aAAa,QAAQ,IAAI,OAAO,WAAW;AAChD,UAAM,QAAQ,MAAM,SAAS;AAC7B,QAAI,OAAO;AACT,aAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,IAChD;AACA,WAAO,QAAQ,4BAA4B,IAAI;AAC/C,WAAO;AAAA,EACT,CAAC;AAED,SAAO;AACT;AAEO,SAAS,qBAAqB,MAAwB,SAAgC;AAC3F,SAAO,aAAa;AAAA,IAClB;AAAA,IACA,UAAU,MAAM,KAAK,SAAS;AAAA,EAChC,CAAC;AACH;;;AC3BA,SAAS,YAAe,UAAmC;AACzD,QAAM,OAAO,SAAS;AACtB,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO;AAChC,QAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,UAAU,OAAQ,KAAoC,OAAO;AAC/G,QAAM,QAAS,SAAS,OAAO,UAAU,YAAY,WAAW,QAC3D,MAA0B,QAC3B,MAAM,QAAQ,KAAK,IACjB,QACA,CAAC;AACP,SAAO,SAAS,CAAC;AACnB;AAEA,SAAS,WAAc,UAAiC;AACtD,QAAM,OAAO,SAAS;AACtB,SAAQ,QAAQ,OAAO,SAAS,YAAY,UAAU,OAAQ,KAAqB,OAAO;AAC5F;AAEO,SAAS,kBAAkB,KAAoB;AACpD,SAAO;AAAA;AAAA,IAEL,MAAM,wBAAqD;AACzD,YAAM,MAAM,MAAM,IAAI,IAAI,uBAAuB;AACjD,aAAO,YAA8B,GAAG;AAAA,IAC1C;AAAA;AAAA,IAGA,MAAM,oBAAoB,aAAkD;AAC1E,YAAM,MAAM,MAAM,IAAI,IAAI,yBAAyB,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE,CAAC;AACrF,aAAO,YAA8B,GAAG;AAAA,IAC1C;AAAA;AAAA,IAGA,MAAM,YAAY,SAAiB,kBAAkB,MAA+B;AAClF,YAAM,OAAO,kBAAkB,iBAAiB,OAAO,KAAK,wBAAwB,OAAO;AAC3F,YAAM,MAAM,MAAM,IAAI,IAAI,IAAI;AAC9B,aAAO,WAA2B,GAAG;AAAA,IACvC;AAAA;AAAA,IAGA,MAAM,cAAc,MAAgE;AAClF,YAAM,IAAI,KAAK,uBAAuB,IAAI;AAAA,IAC5C;AAAA;AAAA,IAGA,MAAM,qBAAqB,MAAgD;AACzE,YAAM,IAAI,KAAK,+BAA+B,IAAI;AAAA,IACpD;AAAA;AAAA,IAGA,MAAM,QAAuB;AAC3B,YAAM,MAAM,MAAM,IAAI,IAAI,WAAW;AACrC,YAAM,MAAM,WAAoB,GAAG;AACnC,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAuB,OAAO;AAC7F,aAAO;AAAA,IACT;AAAA;AAAA,IAGA,MAAM,aAAa,SAAmF;AACpG,YAAM,MAAM,MAAM,IAAI,IAAI,iBAAiB,OAAO,YAAY;AAC9D,YAAM,eAAgB,IAAI,MAA6B,QAAQ,IAAI;AACnE,UAAI,gBAAgB,OAAO,iBAAiB,YAAY,UAAU,gBAAgB,MAAM,QAAS,aAAqC,IAAI;AACxI,eAAQ,aAAqC;AAC/C,UAAI,MAAM,QAAQ,YAAY,EAAG,QAAO;AACxC,aAAO,CAAC;AAAA,IACV;AAAA;AAAA,IAGA,MAAM,uBAAuB,MAAmD;AAC9E,YAAM,IAAI,KAAK,kCAAkC,IAAI;AAAA,IACvD;AAAA;AAAA,IAGA,MAAM,gBAAgB,MAA8C;AAClE,YAAM,IAAI,KAAK,4BAA4B,IAAI;AAAA,IACjD;AAAA,EACF;AACF;;;AC9DA,SAAS,iBAAiB,SAAwB,SAAiB,OAAsB;AACrF,QAAM,cAAc,SAAS,cAAc,QAAQ,SAAS;AAC5D,MAAI,CAAC,aAAa;AACd,UAAM,IAAI,MAAM,mCAAmC,QAAQ,SAAS,cAAc;AAAA,EACtF;AAGA,MAAI,uBAAuB,aAAa;AACpC,gBAAY,QAAQ,eAAe;AACnC,QAAI,QAAQ,YAAY;AACpB,kBAAY,QAAQ,aAAa,QAAQ;AAAA,IAC7C;AAGA,QAAI,OAAO;AACP,kBAAY,QAAQ,aAAa;AAAA,IACrC;AAGA,gBAAY,UAAU,IAAI,gBAAgB;AAI1C,gBAAY,QAAQ,oBAAoB,QAAQ;AAAA,EACpD;AAEA,SAAO;AACX;AAKA,SAAS,aAAa,QAA+B;AACjD,QAAM,YAAY;AAElB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,QAAI,SAAS,eAAe,SAAS,GAAG;AAEpC,cAAQ;AACR;AAAA,IACJ;AAEA,UAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,WAAO,KAAK;AACZ,WAAO,OAAO;AAEd,WAAO,MAAM,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC;AAEzC,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,8CAA8C,OAAO,GAAG,EAAE,CAAC;AAEnG,aAAS,KAAK,YAAY,MAAM;AAAA,EACpC,CAAC;AACL;AAKA,eAAsB,SAClB,SACA,SACA,OACa;AACb,mBAAiB,SAAS,SAAS,KAAK;AAExC,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,aAAa,IAAI;AAGvB,SAAO,cAAc,IAAI,YAAY,mBAAmB;AAAA,IACpD,QAAQ,EAAE,WAAW,QAAQ,UAAU;AAAA,EAC3C,CAAC,CAAC;AACN;AAKA,eAAsB,mBAClB,SACA,SACA,OACa;AACb,SAAO,SAAS,EAAE,GAAG,SAAS,YAAY,YAAY,GAAG,SAAS,KAAK;AAC3E;AAKA,eAAsB,eAClB,SACA,SACA,OACa;AACb,QAAM,cAAc,iBAAiB,SAAS,SAAS,KAAK;AAE5D,MAAI,uBAAuB,aAAa;AACpC,gBAAY,QAAQ,aAAa,QAAQ;AAEzC,gBAAY,QAAQ,aAAa;AAAA,EACrC;AAEA,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,aAAa,IAAI;AAEvB,SAAO,cAAc,IAAI,YAAY,mBAAmB;AAAA,IACpD,QAAQ,EAAE,WAAW,QAAQ,WAAW,YAAY,QAAQ,WAAW;AAAA,EAC3E,CAAC,CAAC;AACN;;;ANhFO,SAAS,kBAAkB,QAAwC;AACxE,QAAM,SAAS,eAAe;AAC9B,MAAI;AAEJ,UAAQ,OAAO,cAAc;AAAA,IAC3B,KAAK,OAAO;AACV,YAAM,MAAM,kBAAkB;AAAA,QAC5B,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,OAAO,mBAAmB;AAAA,MACxC,CAAC;AACD,aAAO;AACP;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AACb,UAAI,CAAC,OAAO,SAAU,OAAM,IAAI,MAAM,0DAA0D;AAChG,aAAO,qBAAqB,OAAO,QAAQ;AAC3C;AAAA,IACF;AAAA,IACA,KAAK;AAEH,aAAO,kBAAkB;AAAA,QACvB,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,OAAO,mBAAmB;AAAA,MACxC,CAAC;AACD;AAAA,IACF,KAAK;AAEH,UAAI,CAAC,OAAO,SAAU,OAAM,IAAI,MAAM,qFAAqF;AAC3H,aAAO,qBAAqB,OAAO,QAAQ;AAC3C;AAAA,IACF;AACE,YAAM,IAAI,MAAM,qCAAqC,OAAQ,OAAqC,YAAY,CAAC,EAAE;AAAA,EACrH;AAEA,QAAM,SAAS,aAAa,EAAE,SAAS,OAAO,SAAS,UAAU,MAAM,KAAK,SAAS,EAAE,CAAC;AACxF,QAAM,MAAM,kBAAkB,MAAM;AAEpC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;AAAA,IACnC,OAAO,CAAC,YAAY,SAAS,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,IAC1E,oBAAoB,CAAC,YAAY,mBAAmB,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,IACjG,gBAAgB,CAAC,YAAY,eAAe,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,EAC3F;AACF;","names":["axios"]}

package/dist/index.d.cts

@@ -0,0 +1,219 @@
+import { AxiosInstance } from 'axios';
+
+/**
+ * @horae/passport-core — shared types
+ */
+type AuthStrategy = "jwt" | "shopify" | "privy" | "custom";
+interface PassportSDKConfig {
+    /** Horae API base URL (e.g. https://v2.api.dev.horae.io/v1) */
+    apiBase: string;
+    /** Auth strategy */
+    authStrategy: AuthStrategy;
+    /** For custom strategy: async token getter */
+    getToken?: () => Promise<string | null>;
+    /** For JWT strategy: initial token (optional; can set later via setToken) */
+    token?: string | null;
+    /** Store token in localStorage under this key (omit for in-memory only) */
+    tokenStorageKey?: string | null;
+    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */
+    uiHost?: string;
+}
+interface PassportListItem {
+    id: string;
+    tokenId?: string;
+    brandLogo: string;
+    brand?: string;
+    productImage: string;
+    name: string;
+    description: string;
+    [key: string]: unknown;
+}
+interface PassportDetail {
+    id: string;
+    tokenId?: string;
+    brandLogo: string;
+    brand?: string;
+    productImage: string;
+    name: string;
+    description: string;
+    [key: string]: unknown;
+}
+interface User {
+    id?: string;
+    email?: string;
+    walletAddress?: string;
+    [key: string]: unknown;
+}
+
+/**
+ * @horae/passport-core — event emitter for auth and passport events
+ */
+type SDKEvent = "auth:ready" | "auth:error" | "passport:claimed" | "passport:loaded" | "passport:list:loaded" | "token:expired";
+type EventMap = {
+    "auth:ready": void;
+    "auth:error": {
+        message: string;
+        code?: string;
+    };
+    "passport:claimed": {
+        tokenId: string;
+    };
+    "passport:loaded": {
+        tokenId: string;
+    };
+    "passport:list:loaded": {
+        count: number;
+    };
+    "token:expired": void;
+};
+type Listener<T> = (payload: T) => void;
+declare function createEventBus(): {
+    on: <E extends SDKEvent>(event: E, fn: Listener<EventMap[E]>) => () => boolean | undefined;
+    emit: <E extends SDKEvent>(event: E, payload?: EventMap[E]) => void;
+};
+type EventBus = ReturnType<typeof createEventBus>;
+
+/**
+ * Auth strategy contracts — token-based only, no cross-domain cookies
+ */
+interface AuthStrategyBase {
+    /** Return current Bearer token for API calls */
+    getToken(): Promise<string | null>;
+    /** Optional: set token (e.g. after bridge call) */
+    setToken?(token: string | null): void | Promise<void>;
+    /** Optional: clear token on logout */
+    clearToken?(): void | Promise<void>;
+}
+
+/**
+ * JWT strategy — token from config or setToken; optional localStorage persistence
+ */
+
+interface JwtStrategyOptions {
+    /** Initial token */
+    token?: string | null;
+    /** localStorage key for persistence (omit for in-memory only) */
+    storageKey?: string | null;
+}
+declare function createJwtStrategy(options?: JwtStrategyOptions): AuthStrategyBase;
+
+/**
+ * Custom strategy — caller supplies getToken (e.g. from backend or Privy)
+ */
+
+declare function createCustomStrategy(getToken: () => Promise<string | null>): AuthStrategyBase;
+
+/**
+ * Horae API client — axios instance with Bearer token from auth strategy
+ */
+
+interface CreateClientOptions {
+    apiBase: string;
+    getToken: () => Promise<string | null>;
+}
+declare function createClient(options: CreateClientOptions): AxiosInstance;
+declare function createClientWithAuth(auth: AuthStrategyBase, apiBase: string): AxiosInstance;
+
+/**
+ * Horae Passport API — list, single, claim, user, documents
+ * Mirrors passport-web shared/api/api.service.ts (token-based auth)
+ */
+
+declare function createPassportApi(api: AxiosInstance): {
+    /** List passports claimed by current user */
+    getMyClaimedPassports(): Promise<PassportListItem[]>;
+    /** List passports by owner wallet (e.g. Shopify) */
+    getPassportsByOwner(ownerWallet: string): Promise<PassportListItem[]>;
+    /** Single passport (authenticated) */
+    getPassport(tokenId: string, isAuthenticated?: boolean): Promise<PassportDetail>;
+    /** Claim passport */
+    claimPassport(data: {
+        tokenId: string;
+        toAddress: string;
+        claimKey: string;
+    }): Promise<void>;
+    /** Shopify claim (serialNumber + optional email) */
+    claimShopifyPassport(data: {
+        serialNumber: string;
+        email?: string;
+    }): Promise<void>;
+    /** Current user profile */
+    getMe(): Promise<User>;
+    /** Documents for a passport (owner gets file URLs) */
+    getDocuments(tokenId: string): Promise<{
+        url?: string;
+        name?: string;
+        [k: string]: unknown;
+    }[]>;
+    /** Transfer passport to user by email */
+    transferPassportToUser(data: {
+        tokenId: string;
+        recipientEmail: string;
+    }): Promise<void>;
+    /** Set stolen status */
+    setStolenStatus(data: {
+        tokenId: string;
+        isStolen: boolean;
+    }): Promise<void>;
+};
+
+/**
+ * UI Renderer for @horae/passport-core
+ * Dynamically injects the pre-built React SDK bundle to render the UI on the host page.
+ */
+interface RenderOptions {
+    /** CSS selector of the container element (e.g. "#passport-app") */
+    container: string;
+    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */
+    uiHost?: string;
+    /** Initial tab/view (e.g. "passports", "claim", "settings") */
+    initialTab?: string;
+}
+interface RenderPassportOptions extends RenderOptions {
+    /** The ID of the passport to show */
+    passportId: string;
+}
+/**
+ * Render the generic SDK App
+ */
+declare function mountApp(options: RenderOptions, apiBase: string, token: string | null): Promise<void>;
+/**
+ * Render specifically the Passport List (maps to "passports" tab/view)
+ */
+declare function renderPassportList(options: RenderOptions, apiBase: string, token: string | null): Promise<void>;
+/**
+ * Render specifically a Single Passport (maps to a specific detail view layout)
+ */
+declare function renderPassport(options: RenderPassportOptions, apiBase: string, token: string | null): Promise<void>;
+
+/**
+ * @horae/passport-core
+ * Reusable Passport SDK — auth strategies, Horae API client, events.
+ * Token-based auth only; no cross-domain cookies.
+ */
+
+interface PassportSDK {
+    /** Horae API client (axios) */
+    readonly api: ReturnType<typeof createPassportApi>;
+    /** Event bus for auth:ready, auth:error, passport:claimed, etc. */
+    readonly events: ReturnType<typeof createEventBus>;
+    /** Auth strategy instance (for setToken/clearToken when available) */
+    readonly auth: AuthStrategyBase;
+    /** Config */
+    readonly config: Readonly<PassportSDKConfig>;
+    /** Mount the generic SDK App in headless mode */
+    mount(options: RenderOptions): Promise<void>;
+    /** Render the Passport List view */
+    renderPassportList(options: RenderOptions): Promise<void>;
+    /** Render a Single Passport Detail view */
+    renderPassport(options: RenderPassportOptions): Promise<void>;
+}
+/**
+ * Create the Passport SDK instance.
+ * - authStrategy "jwt": pass token in config or call setToken on auth after getting JWT from your backend.
+ * - authStrategy "custom": pass getToken in config.
+ * - authStrategy "shopify": use @horae/passport-shopify to get JWT from bridge, then use jwt or custom.
+ */
+declare function createPassportSDK(config: PassportSDKConfig): PassportSDK;
+
+export { type AuthStrategy, type AuthStrategyBase, type CreateClientOptions, type EventBus, type EventMap, type PassportDetail, type PassportListItem, type PassportSDK, type PassportSDKConfig, type RenderOptions, type RenderPassportOptions, type SDKEvent, type User, createClient, createClientWithAuth, createCustomStrategy, createEventBus, createJwtStrategy, createPassportApi, createPassportSDK, mountApp, renderPassport, renderPassportList };

package/dist/index.d.ts

@@ -0,0 +1,219 @@
+import { AxiosInstance } from 'axios';
+
+/**
+ * @horae/passport-core — shared types
+ */
+type AuthStrategy = "jwt" | "shopify" | "privy" | "custom";
+interface PassportSDKConfig {
+    /** Horae API base URL (e.g. https://v2.api.dev.horae.io/v1) */
+    apiBase: string;
+    /** Auth strategy */
+    authStrategy: AuthStrategy;
+    /** For custom strategy: async token getter */
+    getToken?: () => Promise<string | null>;
+    /** For JWT strategy: initial token (optional; can set later via setToken) */
+    token?: string | null;
+    /** Store token in localStorage under this key (omit for in-memory only) */
+    tokenStorageKey?: string | null;
+    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */
+    uiHost?: string;
+}
+interface PassportListItem {
+    id: string;
+    tokenId?: string;
+    brandLogo: string;
+    brand?: string;
+    productImage: string;
+    name: string;
+    description: string;
+    [key: string]: unknown;
+}
+interface PassportDetail {
+    id: string;
+    tokenId?: string;
+    brandLogo: string;
+    brand?: string;
+    productImage: string;
+    name: string;
+    description: string;
+    [key: string]: unknown;
+}
+interface User {
+    id?: string;
+    email?: string;
+    walletAddress?: string;
+    [key: string]: unknown;
+}
+
+/**
+ * @horae/passport-core — event emitter for auth and passport events
+ */
+type SDKEvent = "auth:ready" | "auth:error" | "passport:claimed" | "passport:loaded" | "passport:list:loaded" | "token:expired";
+type EventMap = {
+    "auth:ready": void;
+    "auth:error": {
+        message: string;
+        code?: string;
+    };
+    "passport:claimed": {
+        tokenId: string;
+    };
+    "passport:loaded": {
+        tokenId: string;
+    };
+    "passport:list:loaded": {
+        count: number;
+    };
+    "token:expired": void;
+};
+type Listener<T> = (payload: T) => void;
+declare function createEventBus(): {
+    on: <E extends SDKEvent>(event: E, fn: Listener<EventMap[E]>) => () => boolean | undefined;
+    emit: <E extends SDKEvent>(event: E, payload?: EventMap[E]) => void;
+};
+type EventBus = ReturnType<typeof createEventBus>;
+
+/**
+ * Auth strategy contracts — token-based only, no cross-domain cookies
+ */
+interface AuthStrategyBase {
+    /** Return current Bearer token for API calls */
+    getToken(): Promise<string | null>;
+    /** Optional: set token (e.g. after bridge call) */
+    setToken?(token: string | null): void | Promise<void>;
+    /** Optional: clear token on logout */
+    clearToken?(): void | Promise<void>;
+}
+
+/**
+ * JWT strategy — token from config or setToken; optional localStorage persistence
+ */
+
+interface JwtStrategyOptions {
+    /** Initial token */
+    token?: string | null;
+    /** localStorage key for persistence (omit for in-memory only) */
+    storageKey?: string | null;
+}
+declare function createJwtStrategy(options?: JwtStrategyOptions): AuthStrategyBase;
+
+/**
+ * Custom strategy — caller supplies getToken (e.g. from backend or Privy)
+ */
+
+declare function createCustomStrategy(getToken: () => Promise<string | null>): AuthStrategyBase;
+
+/**
+ * Horae API client — axios instance with Bearer token from auth strategy
+ */
+
+interface CreateClientOptions {
+    apiBase: string;
+    getToken: () => Promise<string | null>;
+}
+declare function createClient(options: CreateClientOptions): AxiosInstance;
+declare function createClientWithAuth(auth: AuthStrategyBase, apiBase: string): AxiosInstance;
+
+/**
+ * Horae Passport API — list, single, claim, user, documents
+ * Mirrors passport-web shared/api/api.service.ts (token-based auth)
+ */
+
+declare function createPassportApi(api: AxiosInstance): {
+    /** List passports claimed by current user */
+    getMyClaimedPassports(): Promise<PassportListItem[]>;
+    /** List passports by owner wallet (e.g. Shopify) */
+    getPassportsByOwner(ownerWallet: string): Promise<PassportListItem[]>;
+    /** Single passport (authenticated) */
+    getPassport(tokenId: string, isAuthenticated?: boolean): Promise<PassportDetail>;
+    /** Claim passport */
+    claimPassport(data: {
+        tokenId: string;
+        toAddress: string;
+        claimKey: string;
+    }): Promise<void>;
+    /** Shopify claim (serialNumber + optional email) */
+    claimShopifyPassport(data: {
+        serialNumber: string;
+        email?: string;
+    }): Promise<void>;
+    /** Current user profile */
+    getMe(): Promise<User>;
+    /** Documents for a passport (owner gets file URLs) */
+    getDocuments(tokenId: string): Promise<{
+        url?: string;
+        name?: string;
+        [k: string]: unknown;
+    }[]>;
+    /** Transfer passport to user by email */
+    transferPassportToUser(data: {
+        tokenId: string;
+        recipientEmail: string;
+    }): Promise<void>;
+    /** Set stolen status */
+    setStolenStatus(data: {
+        tokenId: string;
+        isStolen: boolean;
+    }): Promise<void>;
+};
+
+/**
+ * UI Renderer for @horae/passport-core
+ * Dynamically injects the pre-built React SDK bundle to render the UI on the host page.
+ */
+interface RenderOptions {
+    /** CSS selector of the container element (e.g. "#passport-app") */
+    container: string;
+    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */
+    uiHost?: string;
+    /** Initial tab/view (e.g. "passports", "claim", "settings") */
+    initialTab?: string;
+}
+interface RenderPassportOptions extends RenderOptions {
+    /** The ID of the passport to show */
+    passportId: string;
+}
+/**
+ * Render the generic SDK App
+ */
+declare function mountApp(options: RenderOptions, apiBase: string, token: string | null): Promise<void>;
+/**
+ * Render specifically the Passport List (maps to "passports" tab/view)
+ */
+declare function renderPassportList(options: RenderOptions, apiBase: string, token: string | null): Promise<void>;
+/**
+ * Render specifically a Single Passport (maps to a specific detail view layout)
+ */
+declare function renderPassport(options: RenderPassportOptions, apiBase: string, token: string | null): Promise<void>;
+
+/**
+ * @horae/passport-core
+ * Reusable Passport SDK — auth strategies, Horae API client, events.
+ * Token-based auth only; no cross-domain cookies.
+ */
+
+interface PassportSDK {
+    /** Horae API client (axios) */
+    readonly api: ReturnType<typeof createPassportApi>;
+    /** Event bus for auth:ready, auth:error, passport:claimed, etc. */
+    readonly events: ReturnType<typeof createEventBus>;
+    /** Auth strategy instance (for setToken/clearToken when available) */
+    readonly auth: AuthStrategyBase;
+    /** Config */
+    readonly config: Readonly<PassportSDKConfig>;
+    /** Mount the generic SDK App in headless mode */
+    mount(options: RenderOptions): Promise<void>;
+    /** Render the Passport List view */
+    renderPassportList(options: RenderOptions): Promise<void>;
+    /** Render a Single Passport Detail view */
+    renderPassport(options: RenderPassportOptions): Promise<void>;
+}
+/**
+ * Create the Passport SDK instance.
+ * - authStrategy "jwt": pass token in config or call setToken on auth after getting JWT from your backend.
+ * - authStrategy "custom": pass getToken in config.
+ * - authStrategy "shopify": use @horae/passport-shopify to get JWT from bridge, then use jwt or custom.
+ */
+declare function createPassportSDK(config: PassportSDKConfig): PassportSDK;
+
+export { type AuthStrategy, type AuthStrategyBase, type CreateClientOptions, type EventBus, type EventMap, type PassportDetail, type PassportListItem, type PassportSDK, type PassportSDKConfig, type RenderOptions, type RenderPassportOptions, type SDKEvent, type User, createClient, createClientWithAuth, createCustomStrategy, createEventBus, createJwtStrategy, createPassportApi, createPassportSDK, mountApp, renderPassport, renderPassportList };

package/dist/index.js

@@ -0,0 +1,261 @@
+// src/events.ts
+function createEventBus() {
+  const listeners = /* @__PURE__ */ new Map();
+  function on(event, fn) {
+    if (!listeners.has(event)) listeners.set(event, /* @__PURE__ */ new Set());
+    listeners.get(event).add(fn);
+    return () => listeners.get(event)?.delete(fn);
+  }
+  function emit(event, payload) {
+    listeners.get(event)?.forEach((fn) => fn(payload));
+  }
+  return { on, emit };
+}
+
+// src/auth/strategies/jwt.ts
+function createJwtStrategy(options = {}) {
+  let token = options.token ?? null;
+  const storageKey = options.storageKey ?? null;
+  const storage = typeof window !== "undefined" ? window.localStorage : void 0;
+  if (storage && storageKey) {
+    try {
+      const stored = storage.getItem(storageKey);
+      if (stored) token = stored;
+    } catch {
+    }
+  }
+  return {
+    async getToken() {
+      return token;
+    },
+    setToken(next) {
+      token = next;
+      if (storage && storageKey) {
+        try {
+          if (next) storage.setItem(storageKey, next);
+          else storage.removeItem(storageKey);
+        } catch {
+        }
+      }
+    },
+    clearToken() {
+      token = null;
+      if (storage && storageKey) {
+        try {
+          storage.removeItem(storageKey);
+        } catch {
+        }
+      }
+    }
+  };
+}
+
+// src/auth/strategies/custom.ts
+function createCustomStrategy(getToken) {
+  return { getToken };
+}
+
+// src/client.ts
+import axios from "axios";
+function createClient(options) {
+  const { apiBase, getToken } = options;
+  const client = axios.create({
+    baseURL: apiBase.replace(/\/v1\/?$/, "") + "/v1"
+  });
+  client.interceptors.request.use(async (config) => {
+    const token = await getToken();
+    if (token) {
+      config.headers.Authorization = `Bearer ${token}`;
+    }
+    config.headers["ngrok-skip-browser-warning"] = "true";
+    return config;
+  });
+  return client;
+}
+function createClientWithAuth(auth, apiBase) {
+  return createClient({
+    apiBase,
+    getToken: () => auth.getToken()
+  });
+}
+
+// src/api.ts
+function unwrapItems(response) {
+  const data = response.data;
+  if (Array.isArray(data)) return data;
+  const inner = data && typeof data === "object" && "data" in data ? data.data : data;
+  const items = inner && typeof inner === "object" && "items" in inner ? inner.items : Array.isArray(inner) ? inner : [];
+  return items ?? [];
+}
+function unwrapData(response) {
+  const data = response.data;
+  return data && typeof data === "object" && "data" in data ? data.data : data;
+}
+function createPassportApi(api) {
+  return {
+    /** List passports claimed by current user */
+    async getMyClaimedPassports() {
+      const res = await api.get("/api/passport/claimed");
+      return unwrapItems(res);
+    },
+    /** List passports by owner wallet (e.g. Shopify) */
+    async getPassportsByOwner(ownerWallet) {
+      const res = await api.get("/api/passport/claimed", { params: { owner: ownerWallet } });
+      return unwrapItems(res);
+    },
+    /** Single passport (authenticated) */
+    async getPassport(tokenId, isAuthenticated = true) {
+      const path = isAuthenticated ? `/api/passport/${tokenId}` : `/api/passport/public/${tokenId}`;
+      const res = await api.get(path);
+      return unwrapData(res);
+    },
+    /** Claim passport */
+    async claimPassport(data) {
+      await api.post("/api/passport/claim", data);
+    },
+    /** Shopify claim (serialNumber + optional email) */
+    async claimShopifyPassport(data) {
+      await api.post("/api/passport/shopify-claim", data);
+    },
+    /** Current user profile */
+    async getMe() {
+      const res = await api.get("/users/me");
+      const raw = unwrapData(res);
+      const doc = raw && typeof raw === "object" && "_doc" in raw ? raw._doc : raw;
+      return doc;
+    },
+    /** Documents for a passport (owner gets file URLs) */
+    async getDocuments(tokenId) {
+      const res = await api.get(`/api/passport/${tokenId}/documents`);
+      const responseData = res.data?.data ?? res.data;
+      if (responseData && typeof responseData === "object" && "data" in responseData && Array.isArray(responseData.data))
+        return responseData.data;
+      if (Array.isArray(responseData)) return responseData;
+      return [];
+    },
+    /** Transfer passport to user by email */
+    async transferPassportToUser(data) {
+      await api.post("/api/passport/transfer-to-user", data);
+    },
+    /** Set stolen status */
+    async setStolenStatus(data) {
+      await api.post("/api/passport/set-stolen", data);
+    }
+  };
+}
+
+// src/ui.ts
+function prepareContainer(options, apiBase, token) {
+  const containerEl = document.querySelector(options.container);
+  if (!containerEl) {
+    throw new Error(`PassportSDK: container element '${options.container}' not found.`);
+  }
+  if (containerEl instanceof HTMLElement) {
+    containerEl.dataset.horaeApiBase = apiBase;
+    if (options.initialTab) {
+      containerEl.dataset.initialTab = options.initialTab;
+    }
+    if (token) {
+      containerEl.dataset.horaeToken = token;
+    }
+    containerEl.classList.add("horae-sdk-root");
+    containerEl.dataset.containerSelector = options.container;
+  }
+  return containerEl;
+}
+function loadUIBundle(uiHost) {
+  const SCRIPT_ID = "horae-passport-sdk-ui";
+  return new Promise((resolve, reject) => {
+    if (document.getElementById(SCRIPT_ID)) {
+      resolve();
+      return;
+    }
+    const script = document.createElement("script");
+    script.id = SCRIPT_ID;
+    script.type = "module";
+    script.src = `${uiHost.replace(/\/$/, "")}/sdk-embed.js`;
+    script.onload = () => resolve();
+    script.onerror = () => reject(new Error(`PassportSDK: Failed to load UI bundle from ${script.src}`));
+    document.head.appendChild(script);
+  });
+}
+async function mountApp(options, apiBase, token) {
+  prepareContainer(options, apiBase, token);
+  const host = options.uiHost || "https://app.horae.io";
+  await loadUIBundle(host);
+  window.dispatchEvent(new CustomEvent("horae:sdk:mount", {
+    detail: { container: options.container }
+  }));
+}
+async function renderPassportList(options, apiBase, token) {
+  return mountApp({ ...options, initialTab: "passports" }, apiBase, token);
+}
+async function renderPassport(options, apiBase, token) {
+  const containerEl = prepareContainer(options, apiBase, token);
+  if (containerEl instanceof HTMLElement) {
+    containerEl.dataset.passportId = options.passportId;
+    containerEl.dataset.initialTab = "detail";
+  }
+  const host = options.uiHost || "https://app.horae.io";
+  await loadUIBundle(host);
+  window.dispatchEvent(new CustomEvent("horae:sdk:mount", {
+    detail: { container: options.container, passportId: options.passportId }
+  }));
+}
+
+// src/index.ts
+function createPassportSDK(config) {
+  const events = createEventBus();
+  let auth;
+  switch (config.authStrategy) {
+    case "jwt": {
+      const jwt = createJwtStrategy({
+        token: config.token ?? void 0,
+        storageKey: config.tokenStorageKey ?? void 0
+      });
+      auth = jwt;
+      break;
+    }
+    case "custom": {
+      if (!config.getToken) throw new Error("PassportSDK: getToken required for authStrategy 'custom'");
+      auth = createCustomStrategy(config.getToken);
+      break;
+    }
+    case "shopify":
+      auth = createJwtStrategy({
+        token: config.token ?? void 0,
+        storageKey: config.tokenStorageKey ?? "shopify_access_token"
+      });
+      break;
+    case "privy":
+      if (!config.getToken) throw new Error("PassportSDK: getToken required for authStrategy 'privy' (pass Privy getAccessToken)");
+      auth = createCustomStrategy(config.getToken);
+      break;
+    default:
+      throw new Error(`PassportSDK: unknown authStrategy ${String(config.authStrategy)}`);
+  }
+  const client = createClient({ apiBase: config.apiBase, getToken: () => auth.getToken() });
+  const api = createPassportApi(client);
+  return {
+    api,
+    events,
+    auth,
+    config: Object.freeze({ ...config }),
+    mount: (options) => mountApp(options, config.apiBase, config.token || null),
+    renderPassportList: (options) => renderPassportList(options, config.apiBase, config.token || null),
+    renderPassport: (options) => renderPassport(options, config.apiBase, config.token || null)
+  };
+}
+export {
+  createClient,
+  createClientWithAuth,
+  createCustomStrategy,
+  createEventBus,
+  createJwtStrategy,
+  createPassportApi,
+  createPassportSDK,
+  mountApp,
+  renderPassport,
+  renderPassportList
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/events.ts","../src/auth/strategies/jwt.ts","../src/auth/strategies/custom.ts","../src/client.ts","../src/api.ts","../src/ui.ts","../src/index.ts"],"sourcesContent":["/**\n * @horae/passport-core — event emitter for auth and passport events\n */\n\nexport type SDKEvent =\n  | \"auth:ready\"\n  | \"auth:error\"\n  | \"passport:claimed\"\n  | \"passport:loaded\"\n  | \"passport:list:loaded\"\n  | \"token:expired\";\n\nexport type EventMap = {\n  \"auth:ready\": void;\n  \"auth:error\": { message: string; code?: string };\n  \"passport:claimed\": { tokenId: string };\n  \"passport:loaded\": { tokenId: string };\n  \"passport:list:loaded\": { count: number };\n  \"token:expired\": void;\n};\n\ntype Listener<T> = (payload: T) => void;\n\nexport function createEventBus() {\n  const listeners = new Map<SDKEvent, Set<Listener<unknown>>>();\n\n  function on<E extends SDKEvent>(event: E, fn: Listener<EventMap[E]>) {\n    if (!listeners.has(event)) listeners.set(event, new Set());\n    listeners.get(event)!.add(fn as Listener<unknown>);\n    return () => listeners.get(event)?.delete(fn as Listener<unknown>);\n  }\n\n  function emit<E extends SDKEvent>(event: E, payload?: EventMap[E]) {\n    listeners.get(event)?.forEach((fn) => (fn as Listener<EventMap[E]>)(payload as EventMap[E]));\n  }\n\n  return { on, emit };\n}\n\nexport type EventBus = ReturnType<typeof createEventBus>;\n","/**\n * JWT strategy — token from config or setToken; optional localStorage persistence\n */\n\nimport type { AuthStrategyBase } from \"../types.js\";\n\nexport interface JwtStrategyOptions {\n  /** Initial token */\n  token?: string | null;\n  /** localStorage key for persistence (omit for in-memory only) */\n  storageKey?: string | null;\n}\n\nexport function createJwtStrategy(options: JwtStrategyOptions = {}): AuthStrategyBase {\n  let token: string | null = options.token ?? null;\n  const storageKey = options.storageKey ?? null;\n\n  const storage = typeof window !== \"undefined\" ? window.localStorage : undefined;\n  if (storage && storageKey) {\n    try {\n      const stored = storage.getItem(storageKey);\n      if (stored) token = stored;\n    } catch {\n      // ignore\n    }\n  }\n\n  return {\n    async getToken() {\n      return token;\n    },\n    setToken(next: string | null) {\n      token = next;\n      if (storage && storageKey) {\n        try {\n          if (next) storage.setItem(storageKey, next);\n          else storage.removeItem(storageKey);\n        } catch {\n          // ignore\n        }\n      }\n    },\n    clearToken() {\n      token = null;\n      if (storage && storageKey) {\n        try {\n          storage.removeItem(storageKey);\n        } catch {\n          // ignore\n        }\n      }\n    },\n  };\n}\n","/**\n * Custom strategy — caller supplies getToken (e.g. from backend or Privy)\n */\n\nimport type { AuthStrategyBase } from \"../types.js\";\n\nexport function createCustomStrategy(\n  getToken: () => Promise<string | null>,\n): AuthStrategyBase {\n  return { getToken };\n}\n","/**\n * Horae API client — axios instance with Bearer token from auth strategy\n */\n\nimport axios, { type AxiosInstance } from \"axios\";\nimport type { AuthStrategyBase } from \"./auth/index.js\";\n\nexport interface CreateClientOptions {\n  apiBase: string;\n  getToken: () => Promise<string | null>;\n}\n\nexport function createClient(options: CreateClientOptions): AxiosInstance {\n  const { apiBase, getToken } = options;\n  const client = axios.create({\n    baseURL: apiBase.replace(/\\/v1\\/?$/, \"\") + \"/v1\",\n  });\n\n  client.interceptors.request.use(async (config) => {\n    const token = await getToken();\n    if (token) {\n      config.headers.Authorization = `Bearer ${token}`;\n    }\n    config.headers[\"ngrok-skip-browser-warning\"] = \"true\";\n    return config;\n  });\n\n  return client;\n}\n\nexport function createClientWithAuth(auth: AuthStrategyBase, apiBase: string): AxiosInstance {\n  return createClient({\n    apiBase,\n    getToken: () => auth.getToken(),\n  });\n}\n","/**\n * Horae Passport API — list, single, claim, user, documents\n * Mirrors passport-web shared/api/api.service.ts (token-based auth)\n */\n\nimport type { AxiosInstance } from \"axios\";\nimport type { PassportListItem, PassportDetail, User } from \"./types.js\";\n\nfunction unwrapItems<T>(response: { data?: unknown }): T[] {\n  const data = response.data as { data?: { items?: T[] }; items?: T[] } | T[] | undefined;\n  if (Array.isArray(data)) return data;\n  const inner = data && typeof data === \"object\" && \"data\" in data ? (data as { data?: { items?: T[] } }).data : data;\n  const items = (inner && typeof inner === \"object\" && \"items\" in inner\n    ? (inner as { items?: T[] }).items\n    : Array.isArray(inner)\n      ? inner\n      : []) as T[];\n  return items ?? [];\n}\n\nfunction unwrapData<T>(response: { data?: unknown }): T {\n  const data = response.data as { data?: T } | T;\n  return (data && typeof data === \"object\" && \"data\" in data ? (data as { data: T }).data : data) as T;\n}\n\nexport function createPassportApi(api: AxiosInstance) {\n  return {\n    /** List passports claimed by current user */\n    async getMyClaimedPassports(): Promise<PassportListItem[]> {\n      const res = await api.get(\"/api/passport/claimed\");\n      return unwrapItems<PassportListItem>(res) as PassportListItem[];\n    },\n\n    /** List passports by owner wallet (e.g. Shopify) */\n    async getPassportsByOwner(ownerWallet: string): Promise<PassportListItem[]> {\n      const res = await api.get(\"/api/passport/claimed\", { params: { owner: ownerWallet } });\n      return unwrapItems<PassportListItem>(res) as PassportListItem[];\n    },\n\n    /** Single passport (authenticated) */\n    async getPassport(tokenId: string, isAuthenticated = true): Promise<PassportDetail> {\n      const path = isAuthenticated ? `/api/passport/${tokenId}` : `/api/passport/public/${tokenId}`;\n      const res = await api.get(path);\n      return unwrapData<PassportDetail>(res);\n    },\n\n    /** Claim passport */\n    async claimPassport(data: { tokenId: string; toAddress: string; claimKey: string }) {\n      await api.post(\"/api/passport/claim\", data);\n    },\n\n    /** Shopify claim (serialNumber + optional email) */\n    async claimShopifyPassport(data: { serialNumber: string; email?: string }) {\n      await api.post(\"/api/passport/shopify-claim\", data);\n    },\n\n    /** Current user profile */\n    async getMe(): Promise<User> {\n      const res = await api.get(\"/users/me\");\n      const raw = unwrapData<unknown>(res);\n      const doc = raw && typeof raw === \"object\" && \"_doc\" in raw ? (raw as { _doc: User })._doc : raw;\n      return doc as User;\n    },\n\n    /** Documents for a passport (owner gets file URLs) */\n    async getDocuments(tokenId: string): Promise<{ url?: string; name?: string; [k: string]: unknown }[]> {\n      const res = await api.get(`/api/passport/${tokenId}/documents`);\n      const responseData = (res.data as { data?: unknown })?.data ?? res.data;\n      if (responseData && typeof responseData === \"object\" && \"data\" in responseData && Array.isArray((responseData as { data: unknown[] }).data))\n        return (responseData as { data: unknown[] }).data as { url?: string; name?: string; [k: string]: unknown }[];\n      if (Array.isArray(responseData)) return responseData as { url?: string; name?: string; [k: string]: unknown }[];\n      return [];\n    },\n\n    /** Transfer passport to user by email */\n    async transferPassportToUser(data: { tokenId: string; recipientEmail: string }) {\n      await api.post(\"/api/passport/transfer-to-user\", data);\n    },\n\n    /** Set stolen status */\n    async setStolenStatus(data: { tokenId: string; isStolen: boolean }) {\n      await api.post(\"/api/passport/set-stolen\", data);\n    },\n  };\n}\n","/**\n * UI Renderer for @horae/passport-core\n * Dynamically injects the pre-built React SDK bundle to render the UI on the host page.\n */\n\nexport interface RenderOptions {\n    /** CSS selector of the container element (e.g. \"#passport-app\") */\n    container: string;\n    /** UI Host base URL where the bundle is served (default: https://app.horae.io) */\n    uiHost?: string;\n    /** Initial tab/view (e.g. \"passports\", \"claim\", \"settings\") */\n    initialTab?: string;\n}\n\nexport interface RenderPassportOptions extends RenderOptions {\n    /** The ID of the passport to show */\n    passportId: string;\n}\n\n/**\n * Configure the container with data attributes so the UI bundle can read them upon mounting.\n */\nfunction prepareContainer(options: RenderOptions, apiBase: string, token: string | null) {\n    const containerEl = document.querySelector(options.container);\n    if (!containerEl) {\n        throw new Error(`PassportSDK: container element '${options.container}' not found.`);\n    }\n\n    // Set necessary data attributes for the UI bundle (similar to Shopify embed contract)\n    if (containerEl instanceof HTMLElement) {\n        containerEl.dataset.horaeApiBase = apiBase;\n        if (options.initialTab) {\n            containerEl.dataset.initialTab = options.initialTab;\n        }\n\n        // Inject the token (the UI bundle will look for this or use its own mechanism)\n        if (token) {\n            containerEl.dataset.horaeToken = token;\n        }\n\n        // Add a signature class/id to ensure the embed root is identifiable\n        containerEl.classList.add(\"horae-sdk-root\");\n\n        // Allow the bundle to easily find its mount point if it uses querySelector internally\n        // (We also pass the container selector directly to the mount event later if needed)\n        containerEl.dataset.containerSelector = options.container;\n    }\n\n    return containerEl;\n}\n\n/**\n * Inject the script tag for the UI bundle if it hasn't been injected yet.\n */\nfunction loadUIBundle(uiHost: string): Promise<void> {\n    const SCRIPT_ID = \"horae-passport-sdk-ui\";\n\n    return new Promise((resolve, reject) => {\n        if (document.getElementById(SCRIPT_ID)) {\n            // Script already added\n            resolve();\n            return;\n        }\n\n        const script = document.createElement(\"script\");\n        script.id = SCRIPT_ID;\n        script.type = \"module\";\n        // Target the newly created sdk-embed entrypoint\n        script.src = `${uiHost.replace(/\\/$/, '')}/sdk-embed.js`;\n\n        script.onload = () => resolve();\n        script.onerror = () => reject(new Error(`PassportSDK: Failed to load UI bundle from ${script.src}`));\n\n        document.head.appendChild(script);\n    });\n}\n\n/**\n * Render the generic SDK App\n */\nexport async function mountApp(\n    options: RenderOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    prepareContainer(options, apiBase, token);\n\n    const host = options.uiHost || \"https://app.horae.io\";\n    await loadUIBundle(host);\n\n    // Dispatch a custom event in case the bundle is already loaded and listening for dynamic mounts\n    window.dispatchEvent(new CustomEvent(\"horae:sdk:mount\", {\n        detail: { container: options.container }\n    }));\n}\n\n/**\n * Render specifically the Passport List (maps to \"passports\" tab/view)\n */\nexport async function renderPassportList(\n    options: RenderOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    return mountApp({ ...options, initialTab: \"passports\" }, apiBase, token);\n}\n\n/**\n * Render specifically a Single Passport (maps to a specific detail view layout)\n */\nexport async function renderPassport(\n    options: RenderPassportOptions,\n    apiBase: string,\n    token: string | null\n): Promise<void> {\n    const containerEl = prepareContainer(options, apiBase, token);\n\n    if (containerEl instanceof HTMLElement) {\n        containerEl.dataset.passportId = options.passportId;\n        // Set initialTab to \"detail\" or a specific flag the UI recognizes\n        containerEl.dataset.initialTab = \"detail\";\n    }\n\n    const host = options.uiHost || \"https://app.horae.io\";\n    await loadUIBundle(host);\n\n    window.dispatchEvent(new CustomEvent(\"horae:sdk:mount\", {\n        detail: { container: options.container, passportId: options.passportId }\n    }));\n}\n","/**\n * @horae/passport-core\n * Reusable Passport SDK — auth strategies, Horae API client, events.\n * Token-based auth only; no cross-domain cookies.\n */\n\nexport type { PassportSDKConfig, AuthStrategy, PassportListItem, PassportDetail, User } from \"./types.js\";\nexport { createEventBus } from \"./events.js\";\nexport type { SDKEvent, EventMap, EventBus } from \"./events.js\";\nexport { createJwtStrategy, createCustomStrategy } from \"./auth/index.js\";\nexport type { AuthStrategyBase } from \"./auth/index.js\";\nexport { createClient, createClientWithAuth } from \"./client.js\";\nexport type { CreateClientOptions } from \"./client.js\";\nexport { createPassportApi } from \"./api.js\";\nexport * from \"./ui.js\";\n\nimport type { PassportSDKConfig } from \"./types.js\";\nimport { createEventBus } from \"./events.js\";\nimport { createJwtStrategy } from \"./auth/strategies/jwt.js\";\nimport { createCustomStrategy } from \"./auth/strategies/custom.js\";\nimport { createClient } from \"./client.js\";\nimport { createPassportApi } from \"./api.js\";\nimport type { AuthStrategyBase } from \"./auth/index.js\";\nimport { mountApp, renderPassportList, renderPassport } from \"./ui.js\";\nimport type { RenderOptions, RenderPassportOptions } from \"./ui.js\";\n\nexport interface PassportSDK {\n  /** Horae API client (axios) */\n  readonly api: ReturnType<typeof createPassportApi>;\n  /** Event bus for auth:ready, auth:error, passport:claimed, etc. */\n  readonly events: ReturnType<typeof createEventBus>;\n  /** Auth strategy instance (for setToken/clearToken when available) */\n  readonly auth: AuthStrategyBase;\n  /** Config */\n  readonly config: Readonly<PassportSDKConfig>;\n  /** Mount the generic SDK App in headless mode */\n  mount(options: RenderOptions): Promise<void>;\n  /** Render the Passport List view */\n  renderPassportList(options: RenderOptions): Promise<void>;\n  /** Render a Single Passport Detail view */\n  renderPassport(options: RenderPassportOptions): Promise<void>;\n}\n\n/**\n * Create the Passport SDK instance.\n * - authStrategy \"jwt\": pass token in config or call setToken on auth after getting JWT from your backend.\n * - authStrategy \"custom\": pass getToken in config.\n * - authStrategy \"shopify\": use @horae/passport-shopify to get JWT from bridge, then use jwt or custom.\n */\nexport function createPassportSDK(config: PassportSDKConfig): PassportSDK {\n  const events = createEventBus();\n  let auth: AuthStrategyBase;\n\n  switch (config.authStrategy) {\n    case \"jwt\": {\n      const jwt = createJwtStrategy({\n        token: config.token ?? undefined,\n        storageKey: config.tokenStorageKey ?? undefined,\n      });\n      auth = jwt;\n      break;\n    }\n    case \"custom\": {\n      if (!config.getToken) throw new Error(\"PassportSDK: getToken required for authStrategy 'custom'\");\n      auth = createCustomStrategy(config.getToken);\n      break;\n    }\n    case \"shopify\":\n      // Shopify: use JWT strategy; token is set by @horae/passport-shopify bridge\n      auth = createJwtStrategy({\n        token: config.token ?? undefined,\n        storageKey: config.tokenStorageKey ?? \"shopify_access_token\",\n      });\n      break;\n    case \"privy\":\n      // Privy: use custom strategy with getToken from host (e.g. getAccessToken from @privy-io/react-auth)\n      if (!config.getToken) throw new Error(\"PassportSDK: getToken required for authStrategy 'privy' (pass Privy getAccessToken)\");\n      auth = createCustomStrategy(config.getToken);\n      break;\n    default:\n      throw new Error(`PassportSDK: unknown authStrategy ${String((config as { authStrategy?: string }).authStrategy)}`);\n  }\n\n  const client = createClient({ apiBase: config.apiBase, getToken: () => auth.getToken() });\n  const api = createPassportApi(client);\n\n  return {\n    api,\n    events,\n    auth,\n    config: Object.freeze({ ...config }),\n    mount: (options) => mountApp(options, config.apiBase, config.token || null),\n    renderPassportList: (options) => renderPassportList(options, config.apiBase, config.token || null),\n    renderPassport: (options) => renderPassport(options, config.apiBase, config.token || null),\n  };\n}\n"],"mappings":";AAuBO,SAAS,iBAAiB;AAC/B,QAAM,YAAY,oBAAI,IAAsC;AAE5D,WAAS,GAAuB,OAAU,IAA2B;AACnE,QAAI,CAAC,UAAU,IAAI,KAAK,EAAG,WAAU,IAAI,OAAO,oBAAI,IAAI,CAAC;AACzD,cAAU,IAAI,KAAK,EAAG,IAAI,EAAuB;AACjD,WAAO,MAAM,UAAU,IAAI,KAAK,GAAG,OAAO,EAAuB;AAAA,EACnE;AAEA,WAAS,KAAyB,OAAU,SAAuB;AACjE,cAAU,IAAI,KAAK,GAAG,QAAQ,CAAC,OAAQ,GAA6B,OAAsB,CAAC;AAAA,EAC7F;AAEA,SAAO,EAAE,IAAI,KAAK;AACpB;;;ACxBO,SAAS,kBAAkB,UAA8B,CAAC,GAAqB;AACpF,MAAI,QAAuB,QAAQ,SAAS;AAC5C,QAAM,aAAa,QAAQ,cAAc;AAEzC,QAAM,UAAU,OAAO,WAAW,cAAc,OAAO,eAAe;AACtE,MAAI,WAAW,YAAY;AACzB,QAAI;AACF,YAAM,SAAS,QAAQ,QAAQ,UAAU;AACzC,UAAI,OAAQ,SAAQ;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,WAAW;AACf,aAAO;AAAA,IACT;AAAA,IACA,SAAS,MAAqB;AAC5B,cAAQ;AACR,UAAI,WAAW,YAAY;AACzB,YAAI;AACF,cAAI,KAAM,SAAQ,QAAQ,YAAY,IAAI;AAAA,cACrC,SAAQ,WAAW,UAAU;AAAA,QACpC,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAa;AACX,cAAQ;AACR,UAAI,WAAW,YAAY;AACzB,YAAI;AACF,kBAAQ,WAAW,UAAU;AAAA,QAC/B,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC/CO,SAAS,qBACd,UACkB;AAClB,SAAO,EAAE,SAAS;AACpB;;;ACNA,OAAO,WAAmC;AAQnC,SAAS,aAAa,SAA6C;AACxE,QAAM,EAAE,SAAS,SAAS,IAAI;AAC9B,QAAM,SAAS,MAAM,OAAO;AAAA,IAC1B,SAAS,QAAQ,QAAQ,YAAY,EAAE,IAAI;AAAA,EAC7C,CAAC;AAED,SAAO,aAAa,QAAQ,IAAI,OAAO,WAAW;AAChD,UAAM,QAAQ,MAAM,SAAS;AAC7B,QAAI,OAAO;AACT,aAAO,QAAQ,gBAAgB,UAAU,KAAK;AAAA,IAChD;AACA,WAAO,QAAQ,4BAA4B,IAAI;AAC/C,WAAO;AAAA,EACT,CAAC;AAED,SAAO;AACT;AAEO,SAAS,qBAAqB,MAAwB,SAAgC;AAC3F,SAAO,aAAa;AAAA,IAClB;AAAA,IACA,UAAU,MAAM,KAAK,SAAS;AAAA,EAChC,CAAC;AACH;;;AC3BA,SAAS,YAAe,UAAmC;AACzD,QAAM,OAAO,SAAS;AACtB,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO;AAChC,QAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,UAAU,OAAQ,KAAoC,OAAO;AAC/G,QAAM,QAAS,SAAS,OAAO,UAAU,YAAY,WAAW,QAC3D,MAA0B,QAC3B,MAAM,QAAQ,KAAK,IACjB,QACA,CAAC;AACP,SAAO,SAAS,CAAC;AACnB;AAEA,SAAS,WAAc,UAAiC;AACtD,QAAM,OAAO,SAAS;AACtB,SAAQ,QAAQ,OAAO,SAAS,YAAY,UAAU,OAAQ,KAAqB,OAAO;AAC5F;AAEO,SAAS,kBAAkB,KAAoB;AACpD,SAAO;AAAA;AAAA,IAEL,MAAM,wBAAqD;AACzD,YAAM,MAAM,MAAM,IAAI,IAAI,uBAAuB;AACjD,aAAO,YAA8B,GAAG;AAAA,IAC1C;AAAA;AAAA,IAGA,MAAM,oBAAoB,aAAkD;AAC1E,YAAM,MAAM,MAAM,IAAI,IAAI,yBAAyB,EAAE,QAAQ,EAAE,OAAO,YAAY,EAAE,CAAC;AACrF,aAAO,YAA8B,GAAG;AAAA,IAC1C;AAAA;AAAA,IAGA,MAAM,YAAY,SAAiB,kBAAkB,MAA+B;AAClF,YAAM,OAAO,kBAAkB,iBAAiB,OAAO,KAAK,wBAAwB,OAAO;AAC3F,YAAM,MAAM,MAAM,IAAI,IAAI,IAAI;AAC9B,aAAO,WAA2B,GAAG;AAAA,IACvC;AAAA;AAAA,IAGA,MAAM,cAAc,MAAgE;AAClF,YAAM,IAAI,KAAK,uBAAuB,IAAI;AAAA,IAC5C;AAAA;AAAA,IAGA,MAAM,qBAAqB,MAAgD;AACzE,YAAM,IAAI,KAAK,+BAA+B,IAAI;AAAA,IACpD;AAAA;AAAA,IAGA,MAAM,QAAuB;AAC3B,YAAM,MAAM,MAAM,IAAI,IAAI,WAAW;AACrC,YAAM,MAAM,WAAoB,GAAG;AACnC,YAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,UAAU,MAAO,IAAuB,OAAO;AAC7F,aAAO;AAAA,IACT;AAAA;AAAA,IAGA,MAAM,aAAa,SAAmF;AACpG,YAAM,MAAM,MAAM,IAAI,IAAI,iBAAiB,OAAO,YAAY;AAC9D,YAAM,eAAgB,IAAI,MAA6B,QAAQ,IAAI;AACnE,UAAI,gBAAgB,OAAO,iBAAiB,YAAY,UAAU,gBAAgB,MAAM,QAAS,aAAqC,IAAI;AACxI,eAAQ,aAAqC;AAC/C,UAAI,MAAM,QAAQ,YAAY,EAAG,QAAO;AACxC,aAAO,CAAC;AAAA,IACV;AAAA;AAAA,IAGA,MAAM,uBAAuB,MAAmD;AAC9E,YAAM,IAAI,KAAK,kCAAkC,IAAI;AAAA,IACvD;AAAA;AAAA,IAGA,MAAM,gBAAgB,MAA8C;AAClE,YAAM,IAAI,KAAK,4BAA4B,IAAI;AAAA,IACjD;AAAA,EACF;AACF;;;AC9DA,SAAS,iBAAiB,SAAwB,SAAiB,OAAsB;AACrF,QAAM,cAAc,SAAS,cAAc,QAAQ,SAAS;AAC5D,MAAI,CAAC,aAAa;AACd,UAAM,IAAI,MAAM,mCAAmC,QAAQ,SAAS,cAAc;AAAA,EACtF;AAGA,MAAI,uBAAuB,aAAa;AACpC,gBAAY,QAAQ,eAAe;AACnC,QAAI,QAAQ,YAAY;AACpB,kBAAY,QAAQ,aAAa,QAAQ;AAAA,IAC7C;AAGA,QAAI,OAAO;AACP,kBAAY,QAAQ,aAAa;AAAA,IACrC;AAGA,gBAAY,UAAU,IAAI,gBAAgB;AAI1C,gBAAY,QAAQ,oBAAoB,QAAQ;AAAA,EACpD;AAEA,SAAO;AACX;AAKA,SAAS,aAAa,QAA+B;AACjD,QAAM,YAAY;AAElB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,QAAI,SAAS,eAAe,SAAS,GAAG;AAEpC,cAAQ;AACR;AAAA,IACJ;AAEA,UAAM,SAAS,SAAS,cAAc,QAAQ;AAC9C,WAAO,KAAK;AACZ,WAAO,OAAO;AAEd,WAAO,MAAM,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC;AAEzC,WAAO,SAAS,MAAM,QAAQ;AAC9B,WAAO,UAAU,MAAM,OAAO,IAAI,MAAM,8CAA8C,OAAO,GAAG,EAAE,CAAC;AAEnG,aAAS,KAAK,YAAY,MAAM;AAAA,EACpC,CAAC;AACL;AAKA,eAAsB,SAClB,SACA,SACA,OACa;AACb,mBAAiB,SAAS,SAAS,KAAK;AAExC,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,aAAa,IAAI;AAGvB,SAAO,cAAc,IAAI,YAAY,mBAAmB;AAAA,IACpD,QAAQ,EAAE,WAAW,QAAQ,UAAU;AAAA,EAC3C,CAAC,CAAC;AACN;AAKA,eAAsB,mBAClB,SACA,SACA,OACa;AACb,SAAO,SAAS,EAAE,GAAG,SAAS,YAAY,YAAY,GAAG,SAAS,KAAK;AAC3E;AAKA,eAAsB,eAClB,SACA,SACA,OACa;AACb,QAAM,cAAc,iBAAiB,SAAS,SAAS,KAAK;AAE5D,MAAI,uBAAuB,aAAa;AACpC,gBAAY,QAAQ,aAAa,QAAQ;AAEzC,gBAAY,QAAQ,aAAa;AAAA,EACrC;AAEA,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,aAAa,IAAI;AAEvB,SAAO,cAAc,IAAI,YAAY,mBAAmB;AAAA,IACpD,QAAQ,EAAE,WAAW,QAAQ,WAAW,YAAY,QAAQ,WAAW;AAAA,EAC3E,CAAC,CAAC;AACN;;;AChFO,SAAS,kBAAkB,QAAwC;AACxE,QAAM,SAAS,eAAe;AAC9B,MAAI;AAEJ,UAAQ,OAAO,cAAc;AAAA,IAC3B,KAAK,OAAO;AACV,YAAM,MAAM,kBAAkB;AAAA,QAC5B,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,OAAO,mBAAmB;AAAA,MACxC,CAAC;AACD,aAAO;AACP;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AACb,UAAI,CAAC,OAAO,SAAU,OAAM,IAAI,MAAM,0DAA0D;AAChG,aAAO,qBAAqB,OAAO,QAAQ;AAC3C;AAAA,IACF;AAAA,IACA,KAAK;AAEH,aAAO,kBAAkB;AAAA,QACvB,OAAO,OAAO,SAAS;AAAA,QACvB,YAAY,OAAO,mBAAmB;AAAA,MACxC,CAAC;AACD;AAAA,IACF,KAAK;AAEH,UAAI,CAAC,OAAO,SAAU,OAAM,IAAI,MAAM,qFAAqF;AAC3H,aAAO,qBAAqB,OAAO,QAAQ;AAC3C;AAAA,IACF;AACE,YAAM,IAAI,MAAM,qCAAqC,OAAQ,OAAqC,YAAY,CAAC,EAAE;AAAA,EACrH;AAEA,QAAM,SAAS,aAAa,EAAE,SAAS,OAAO,SAAS,UAAU,MAAM,KAAK,SAAS,EAAE,CAAC;AACxF,QAAM,MAAM,kBAAkB,MAAM;AAEpC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,CAAC;AAAA,IACnC,OAAO,CAAC,YAAY,SAAS,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,IAC1E,oBAAoB,CAAC,YAAY,mBAAmB,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,IACjG,gBAAgB,CAAC,YAAY,eAAe,SAAS,OAAO,SAAS,OAAO,SAAS,IAAI;AAAA,EAC3F;AACF;","names":[]}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@horae.io/passport-core",
+  "version": "1.0.0",
+  "description": "Horae Passport SDK — core client, auth strategies, Horae API",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch"
+  },
+  "dependencies": {
+    "axios": "^1.8.4",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "tsup": "^8.3.5",
+    "typescript": "~5.7.2"
+  },
+  "peerDependencies": {}
+}