@levrbet/shared 0.1.95 → 0.1.96

package/dist/core/types/auth.types.d.ts

@@ -1,8 +1,31 @@
+import { ApiKeyScope, LevrService } from "../prisma";
 export declare enum LevrAuth {
     PRIVY_USER = "privyUser",
     PRIVY_ADMIN = "privyAdmin",
     CLOUDFLARE = "cloudflare",
-    API_KEY = "apiKey",
-    SERVER_API_KEY = "serverApiKey"
+    HMAC = "hmac",
+    SERVICE_HMAC = "serviceHmac"
 }
 export declare const LEVR_AUTH_HEADER = "x-levr-auth-type";
+export interface MultiAuthOptions {
+    /**
+     * Array of authentication methods to support for this route.
+     * Client will specify which one to use via the x-levr-auth-type header.
+     */
+    methods: LevrAuth[];
+    /**
+     * Required API key scopes (applies to HMAC and SERVICE_HMAC auth only).
+     * If specified, the API key must have at least one of these scopes.
+     */
+    requiredScopes?: ApiKeyScope[];
+    /**
+     * Required services (applies to SERVICE_HMAC auth only).
+     * If specified, the API key must belong to one of these services.
+     */
+    requiredServices?: LevrService[];
+    /**
+     * Auto-enforce Write scope for mutating HTTP methods (POST, PUT, PATCH, DELETE).
+     * Defaults to true.
+     */
+    autoEnforceWriteScope?: boolean;
+}

package/dist/core/types/auth.types.js

@@ -3,8 +3,10 @@ export var LevrAuth;
     LevrAuth["PRIVY_USER"] = "privyUser";
     LevrAuth["PRIVY_ADMIN"] = "privyAdmin";
     LevrAuth["CLOUDFLARE"] = "cloudflare";
-    LevrAuth["API_KEY"] = "apiKey";
-    LevrAuth["SERVER_API_KEY"] = "serverApiKey";
+    LevrAuth["HMAC"] = "hmac";
+    LevrAuth["SERVICE_HMAC"] = "serviceHmac";
 })(LevrAuth || (LevrAuth = {}));
+// clients will set this header to indicate which auth method they are using
+// if the route doesn't support that auth method, it will be rejected
 export const LEVR_AUTH_HEADER = "x-levr-auth-type";
 //# sourceMappingURL=auth.types.js.map

package/dist/core/types/auth.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../src/core/types/auth.types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAChB,oCAAwB,CAAA;IACxB,sCAA0B,CAAA;IAC1B,qCAAyB,CAAA;IACzB,8BAAkB,CAAA;IAClB,2CAA+B,CAAA;AACnC,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA"}
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../src/core/types/auth.types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAChB,oCAAwB,CAAA;IACxB,sCAA0B,CAAA;IAC1B,qCAAyB,CAAA;IACzB,yBAAa,CAAA;IACb,wCAA4B,CAAA;AAChC,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA"}

package/dist/server/config/cloudflare.d.ts

@@ -0,0 +1,30 @@
+import type { JWTVerifyGetKey } from "jose";
+export interface CloudflareConfigData {
+    jwks: JWTVerifyGetKey;
+    issuer: string;
+    audience: string;
+}
+declare class CloudflareConfig {
+    private jwks;
+    private _config;
+    private initialized;
+    /**
+     * Initialize Cloudflare configuration from environment variables.
+     * Must be called before using cloudflareAuthService.
+     *
+     * @example
+     * ```typescript
+     * // Loads from CLOUDFLARE_JWK_URL, CLOUDFLARE_ISSUER, CLOUDFLARE_AUDIENCE env vars
+     * cloudflareConfig.init()
+     * ```
+     */
+    init(): void;
+    /**
+     * Get the Cloudflare configuration data.
+     *
+     * @throws Error if CloudflareConfig has not been initialized
+     */
+    get config(): CloudflareConfigData;
+}
+export declare const cloudflareConfig: CloudflareConfig;
+export {};

package/dist/server/config/cloudflare.js

@@ -0,0 +1,42 @@
+import { createRemoteJWKSet } from "jose";
+import { Config } from "../../core";
+import { cloudflareSchema } from "./dotenv";
+class CloudflareConfig {
+    constructor() {
+        this.jwks = null;
+        this._config = null;
+        this.initialized = false;
+    }
+    /**
+     * Initialize Cloudflare configuration from environment variables.
+     * Must be called before using cloudflareAuthService.
+     *
+     * @example
+     * ```typescript
+     * // Loads from CLOUDFLARE_JWK_URL, CLOUDFLARE_ISSUER, CLOUDFLARE_AUDIENCE env vars
+     * cloudflareConfig.init()
+     * ```
+     */
+    init() {
+        this._config = Config.init(cloudflareSchema);
+        this.jwks = createRemoteJWKSet(new URL(this._config.CLOUDFLARE_JWK_URL));
+        this.initialized = true;
+    }
+    /**
+     * Get the Cloudflare configuration data.
+     *
+     * @throws Error if CloudflareConfig has not been initialized
+     */
+    get config() {
+        if (!this.initialized || !this.jwks || !this._config) {
+            throw new Error("CloudflareConfig not initialized. Call cloudflareConfig.init() before use.");
+        }
+        return {
+            jwks: this.jwks,
+            issuer: this._config.CLOUDFLARE_ISSUER,
+            audience: this._config.CLOUDFLARE_AUDIENCE,
+        };
+    }
+}
+export const cloudflareConfig = new CloudflareConfig();
+//# sourceMappingURL=cloudflare.js.map

package/dist/server/config/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../../src/server/config/cloudflare.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAc3C,MAAM,gBAAgB;IAAtB;QACY,SAAI,GAAiD,IAAI,CAAA;QACzD,YAAO,GAAgC,IAAI,CAAA;QAC3C,gBAAW,GAAG,KAAK,CAAA;IAkC/B,CAAC;IAhCG;;;;;;;;;OASG;IACH,IAAI;QACA,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;IAC3B,CAAC;IAED;;;;OAIG;IACH,IAAI,MAAM;QACN,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;QACjG,CAAC;QAED,OAAO;YACH,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACtC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;SAC7C,CAAA;IACL,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAA"}

package/dist/server/config/constants.js

@@ -1,4 +1,4 @@
 import { getSupportedChainIds } from "../../core";
-import { levrSharedConfig } from "./dotenv";
-export const supportedChainIds = getSupportedChainIds(levrSharedConfig.LEVR_ENV);
+import { LEVR_ENV } from "./dotenv";
+export const supportedChainIds = getSupportedChainIds(LEVR_ENV);
 //# sourceMappingURL=constants.js.map

package/dist/server/config/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/server/config/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/server/config/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA"}

package/dist/server/config/dotenv.d.ts

@@ -8,14 +8,14 @@ export declare const opentelemetrySchema: z.ZodObject<{
     OTEL_SERVICE_VERSION: z.ZodString;
     LEVR_ENV: z.ZodEnum<typeof LevrEnv>;
 }, z.core.$strip>;
+export declare const LEVR_ENV: LevrEnv;
 export declare const awsCredsSchema: z.ZodObject<{
     AWS_ACCESS_KEY_ID: z.ZodString;
     AWS_SECRET_ACCESS_KEY: z.ZodString;
     AWS_REGION: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
-export declare const kmsSchema: z.ZodObject<{
-    HMAC_KEY_ALIAS: z.ZodString;
-    CLOUDFLARE_JWK_URL: z.ZodString;
+export declare const cloudflareSchema: z.ZodObject<{
+    CLOUDFLARE_JWK_URL: z.ZodURL;
     CLOUDFLARE_ISSUER: z.ZodString;
     CLOUDFLARE_AUDIENCE: z.ZodString;
 }, z.core.$strip>;
@@ -26,10 +26,6 @@ export declare const redisSchema: z.ZodObject<{
     REDIS_URL: z.ZodURL;
     REDIS_REPLICA_ENDPOINTS: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
-export declare const levrSharedConfig: Readonly<{
-    LEVR_ENV: LevrEnv;
-}>;
 export declare const relayerSchema: z.ZodObject<{
     RELAYER_ACCESS_TOKEN: z.ZodUUID;
 }, z.core.$strip>;
-export declare const kmsEnvConfig: z.infer<typeof kmsSchema>;

package/dist/server/config/dotenv.js

@@ -1,7 +1,6 @@
 import "dotenv/config";
 import { z } from "zod";
 import { commaSeparatedUrlsSchema, Config, LevrEnv } from "../../core";
-///@dev example of using the Config class
 export const opentelemetrySchema = z.object({
     OTEL_EXPORTER_OTLP_HEADERS: z.string().min(1),
     OTEL_EXPORTER_OTLP_ENDPOINT: z.string().min(1),
@@ -12,16 +11,16 @@ export const opentelemetrySchema = z.object({
 const levrSharedSchema = z.object({
     LEVR_ENV: z.enum(LevrEnv),
 });
+export const { LEVR_ENV } = Config.init(levrSharedSchema);
 export const awsCredsSchema = z.object({
     AWS_ACCESS_KEY_ID: z.string().min(1, "AWS_ACCESS_KEY_ID is required"),
     AWS_SECRET_ACCESS_KEY: z.string().min(1, "AWS_SECRET_ACCESS_KEY is required"),
     AWS_REGION: z.string().default("ap-south-1"),
 });
-export const kmsSchema = z.object({
-    HMAC_KEY_ALIAS: z.string().min(1),
-    CLOUDFLARE_JWK_URL: z.string().min(1),
-    CLOUDFLARE_ISSUER: z.string().min(1),
-    CLOUDFLARE_AUDIENCE: z.string().min(1),
+export const cloudflareSchema = z.object({
+    CLOUDFLARE_JWK_URL: z.url("CLOUDFLARE_JWK_URL must be a valid URL"),
+    CLOUDFLARE_ISSUER: z.string().min(1, "CLOUDFLARE_ISSUER is required"),
+    CLOUDFLARE_AUDIENCE: z.string().min(1, "CLOUDFLARE_AUDIENCE is required"),
 });
 export const mongoSchema = z.object({
     MONGO_URI: z.url("MONGO_URI must be a valid URI"),
@@ -30,15 +29,7 @@ export const redisSchema = z.object({
     REDIS_URL: z.url("REDIS_URL must be a valid URI"),
     REDIS_REPLICA_ENDPOINTS: commaSeparatedUrlsSchema,
 });
-export const levrSharedConfig = Config.init(levrSharedSchema);
 export const relayerSchema = z.object({
     RELAYER_ACCESS_TOKEN: z.uuid(),
 });
-// Initialize KMS config from environment variables
-export const kmsEnvConfig = {
-    HMAC_KEY_ALIAS: process.env.HMAC_KEY_ALIAS || "alias/levr-server-to-server-auth-hmac",
-    CLOUDFLARE_JWK_URL: process.env.CLOUDFLARE_JWK_URL || "",
-    CLOUDFLARE_ISSUER: process.env.CLOUDFLARE_ISSUER || "",
-    CLOUDFLARE_AUDIENCE: process.env.CLOUDFLARE_AUDIENCE || "",
-};
 //# sourceMappingURL=dotenv.js.map

package/dist/server/config/dotenv.js.map

@@ -1 +1 @@
-{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../../src/server/config/dotenv.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEtE,yCAAyC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;CAC5B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;CAC5B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;CAC/C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;CACpD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;IACjD,uBAAuB,EAAE,wBAAwB;CACpD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,oBAAoB,EAAE,CAAC,CAAC,IAAI,EAAE;CACjC,CAAC,CAAA;AAEF,mDAAmD;AACnD,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,uCAAuC;IACrF,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;IACxD,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;IACtD,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE;CAChC,CAAA"}
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../../src/server/config/dotenv.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAA;AACtB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;CAC5B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;CAC5B,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAEzD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;CAC/C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,wCAAwC,CAAC;IACnE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IACrE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;CAC5E,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;CACpD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;IACjD,uBAAuB,EAAE,wBAAwB;CACpD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,oBAAoB,EAAE,CAAC,CAAC,IAAI,EAAE;CACjC,CAAC,CAAA"}

package/dist/server/config/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./cloudflare";
 export * from "./constants";
 export * from "./dotenv";
 export * from "./kms";

package/dist/server/config/index.js

@@ -1,3 +1,4 @@
+export * from "./cloudflare";
 export * from "./constants";
 export * from "./dotenv";
 export * from "./kms";

package/dist/server/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA;AACrB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA;AACtB,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA;AACrB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA;AACtB,cAAc,WAAW,CAAA;AACzB,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,WAAW,CAAA"}

package/dist/server/config/urls.js

@@ -1,4 +1,4 @@
 import { allUrls } from "../../core";
-import { levrSharedConfig } from "./dotenv";
-export const urls = allUrls[levrSharedConfig.LEVR_ENV];
+import { LEVR_ENV } from "./dotenv";
+export const urls = allUrls[LEVR_ENV];
 //# sourceMappingURL=urls.js.map

package/dist/server/config/urls.js.map

@@ -1 +1 @@
-{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../../src/server/config/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA"}
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../../src/server/config/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAEnC,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA"}

package/dist/server/contracts/instances.d.ts

@@ -1,5 +1,5 @@
-import { abis, LevrBaseMarket, LevrChain, LevrMarketId, LevrRelayerGroup, type CustomWalletClient } from "../../core";
 import type { GetContractReturnType, PublicClient, WalletClient } from "viem";
+import { abis, LevrBaseMarket, LevrChain, LevrMarketId, LevrRelayerGroup, type CustomWalletClient } from "../../core";
 interface ClientOptions {
     relayer?: LevrRelayerGroup;
     walletClient?: WalletClient;

package/dist/server/contracts/instances.js

@@ -1,5 +1,5 @@
 import { getLevrContract, getLevrMarketContract, publicClientService, } from "../../core";
-import { levrSharedConfig } from "../config";
+import { LEVR_ENV } from "../config";
 import ozRelayerService from "./clients/ozRelayerService";
 /**
  * Retrieves a Levr contract instance using a relayer if provided.
@@ -17,7 +17,7 @@ export async function getLevrContractWithRelayer(contractName, chainId, { relaye
         walletClient = await ozRelayerService.getWalletClient(chainId, relayer);
     if (!publicClient)
         publicClient = await publicClientService.getPremiumPubClient(chainId);
-    return getLevrContract(contractName, chainId, levrSharedConfig.LEVR_ENV, { publicClient, walletClient });
+    return getLevrContract(contractName, chainId, LEVR_ENV, { publicClient, walletClient });
 }
 /**
  * Retrieves a Levr market contract instance using a relayer or a provided wallet client.
@@ -38,6 +38,6 @@ export async function getLevrMarketContractWithRelayer(marketId, chainId, { rela
         walletClient = await ozRelayerService.getWalletClient(chainId, relayer);
     if (!publicClient)
         publicClient = await publicClientService.getPremiumPubClient(chainId);
-    return getLevrMarketContract(marketId, chainId, levrSharedConfig.LEVR_ENV, { publicClient, walletClient });
+    return getLevrMarketContract(marketId, chainId, LEVR_ENV, { publicClient, walletClient });
 }
 //# sourceMappingURL=instances.js.map

package/dist/server/contracts/instances.js.map

@@ -1 +1 @@
-{"version":3,"file":"instances.js","sourceRoot":"","sources":["../../../src/server/contracts/instances.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,eAAe,EACf,qBAAqB,EAKrB,mBAAmB,GAEtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,gBAAgB,MAAM,4BAA4B,CAAA;AAQzD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,YAAe,EACf,OAAkB,EAClB,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAiB;IAEtD,IAAI,OAAO,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrG,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACxF,OAAO,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;AAC5G,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,QAAsB,EACtB,OAAkB,EAClB,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAiB;IAEtD,IAAI,OAAO,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrG,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACxF,OAAO,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;AAC9G,CAAC"}
+{"version":3,"file":"instances.js","sourceRoot":"","sources":["../../../src/server/contracts/instances.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,eAAe,EACf,qBAAqB,EAKrB,mBAAmB,GAEtB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,gBAAgB,MAAM,4BAA4B,CAAA;AAQzD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,YAAe,EACf,OAAkB,EAClB,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAiB;IAEtD,IAAI,OAAO,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrG,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACxF,OAAO,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,QAAsB,EACtB,OAAkB,EAClB,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAiB;IAEtD,IAAI,OAAO,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACrG,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACxF,OAAO,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAA;AAC7F,CAAC"}

package/dist/server/index.d.ts

@@ -1,5 +1,4 @@
 export * from "../core";
-export * from "./auth";
 export * from "./config";
 export * from "./contracts";
 export * from "./liquidation-engine";
@@ -8,4 +7,5 @@ export * from "./middleware";
 export * from "./oracle";
 export * from "./repositories";
 export * from "./services";
+export * from "./types";
 export * from "./utils";

package/dist/server/index.js

@@ -5,7 +5,6 @@ if (typeof globalThis.window !== "undefined") {
         "📖 See documentation: https://github.com/LEVR-LABS/levr-shared#package-structure");
 }
 export * from "../core";
-export * from "./auth";
 export * from "./config";
 export * from "./contracts";
 export * from "./liquidation-engine";
@@ -14,6 +13,7 @@ export * from "./middleware";
 export * from "./oracle";
 export * from "./repositories";
 export * from "./services";
+export * from "./types";
 export * from "./utils";
 // export { sdk } from "./instrumentation"
 // export { sdk as instrumentation } from "./instrumentation"

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,IAAI,OAAQ,UAAkB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;IACpD,MAAM,IAAI,KAAK,CACX,0EAA0E;QACtE,0GAA0G;QAC1G,kFAAkF,CACzF,CAAA;AACL,CAAC;AAED,cAAc,SAAS,CAAA;AACvB,cAAc,QAAQ,CAAA;AACtB,cAAc,UAAU,CAAA;AACxB,cAAc,aAAa,CAAA;AAC3B,cAAc,sBAAsB,CAAA;AACpC,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,0CAA0C;AAC1C,6DAA6D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,IAAI,OAAQ,UAAkB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;IACpD,MAAM,IAAI,KAAK,CACX,0EAA0E;QACtE,0GAA0G;QAC1G,kFAAkF,CACzF,CAAA;AACL,CAAC;AAED,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,aAAa,CAAA;AAC3B,cAAc,sBAAsB,CAAA;AACpC,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AACvB,cAAc,SAAS,CAAA;AAEvB,0CAA0C;AAC1C,6DAA6D"}

package/dist/server/middleware/auth/cloudflare.handler.d.ts

@@ -0,0 +1,7 @@
+import type { Request } from "express";
+import "../../types/express.types";
+import type { AuthResult } from "./hmac.handler";
+/**
+ * Handles Cloudflare Access authentication
+ */
+export declare function handleCloudflareAuth(req: Request): Promise<AuthResult>;

package/dist/server/middleware/auth/cloudflare.handler.js

@@ -0,0 +1,31 @@
+import { LevrAuth } from "../../../core";
+import { cloudflareAuthService } from "../../services";
+import "../../types/express.types";
+/**
+ * Handles Cloudflare Access authentication
+ */
+export async function handleCloudflareAuth(req) {
+    const jwt = req.headers["cf-access-jwt-assertion"]?.toString();
+    if (!jwt) {
+        return {
+            success: false,
+            error: "Missing CF-Access-JWT-Assertion header",
+            statusCode: 401,
+        };
+    }
+    try {
+        await cloudflareAuthService.verifyJwt(jwt);
+        req.authMethod = LevrAuth.CLOUDFLARE;
+        return { success: true };
+    }
+    catch (err) {
+        const errorMsg = err instanceof Error ? err.message : String(err);
+        console.error("Cloudflare JWT verification error:", errorMsg);
+        return {
+            success: false,
+            error: `Invalid Cloudflare JWT: ${errorMsg}`,
+            statusCode: 401,
+        };
+    }
+}
+//# sourceMappingURL=cloudflare.handler.js.map

package/dist/server/middleware/auth/cloudflare.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/cloudflare.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,2BAA2B,CAAA;AAGlC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAY;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EAAE,CAAA;IAE9D,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,wCAAwC;YAC/C,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,IAAI,CAAC;QACD,MAAM,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC1C,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAA;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACjE,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAA;QAC7D,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,2BAA2B,QAAQ,EAAE;YAC5C,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;AACL,CAAC"}

package/dist/server/middleware/auth/hmac.handler.d.ts

@@ -0,0 +1,19 @@
+import type { Request } from "express";
+import { MultiAuthOptions } from "../../../core";
+import "../../types/express.types";
+/**
+ * Authentication result from individual auth handlers
+ */
+export interface AuthResult {
+    success: boolean;
+    error?: string;
+    statusCode?: number;
+}
+/**
+ * Handles HMAC authentication (user API keys)
+ */
+export declare function handleHmacAuth(req: Request, options: MultiAuthOptions): Promise<AuthResult>;
+/**
+ * Handles SERVICE_HMAC authentication (service-to-service API keys)
+ */
+export declare function handleServiceHmacAuth(req: Request, options: MultiAuthOptions): Promise<AuthResult>;

package/dist/server/middleware/auth/hmac.handler.js

@@ -0,0 +1,129 @@
+import crypto from "crypto";
+import ms from "ms";
+import { ApiKeyScope, LevrAuth } from "../../../core";
+import { apiKeyRepository } from "../../repositories";
+import { cryptoService } from "../../services";
+import "../../types/express.types";
+/**
+ * Validates that the API key has the required scopes
+ */
+function validateScopes(apiKeyScopes, requiredScopes) {
+    if (!requiredScopes || requiredScopes.length === 0)
+        return true;
+    return requiredScopes.some((scope) => apiKeyScopes.includes(scope));
+}
+/**
+ * Determines required scopes based on HTTP method and options
+ */
+function getRequiredScopes(method, options) {
+    const scopes = options.requiredScopes || [];
+    const autoEnforce = options.autoEnforceWriteScope !== false; // default true
+    if (autoEnforce && ["POST", "PUT", "PATCH", "DELETE"].includes(method.toUpperCase())) {
+        if (!scopes.includes(ApiKeyScope.Write)) {
+            return [...scopes, ApiKeyScope.Write];
+        }
+    }
+    return scopes;
+}
+/**
+ * Shared HMAC authentication logic for both user and service API keys
+ */
+async function handleHmacAuthBase(req, options, isServiceAuth) {
+    // Parse Authorization header
+    const auth = req.header("Authorization");
+    if (!auth) {
+        return { success: false, error: "Missing Authorization header", statusCode: 401 };
+    }
+    const m = auth.match(/^HMAC\s+([A-Za-z0-9-]+):(.+)$/);
+    if (!m) {
+        return { success: false, error: "Invalid Authorization header format", statusCode: 401 };
+    }
+    const [, apiKeyId, sigB64] = m;
+    if (!apiKeyId || !sigB64) {
+        return { success: false, error: "Invalid Authorization header format", statusCode: 401 };
+    }
+    // Fetch API key
+    const apiKey = await apiKeyRepository.getApiKey({ apiKeyId });
+    if (!apiKey) {
+        return { success: false, error: "Unknown API key", statusCode: 401 };
+    }
+    // Validate key type matches auth method
+    if (isServiceAuth && !apiKey.isService) {
+        return { success: false, error: "This endpoint requires a service API key", statusCode: 403 };
+    }
+    if (!isServiceAuth && apiKey.isService) {
+        return { success: false, error: "Service API keys cannot be used with HMAC auth", statusCode: 403 };
+    }
+    // Check expiration
+    if (apiKey.expiresAt && apiKey.expiresAt < new Date()) {
+        return { success: false, error: "API key has expired", statusCode: 401 };
+    }
+    // Validate service restriction (SERVICE_HMAC only)
+    if (isServiceAuth && options.requiredServices && options.requiredServices.length > 0) {
+        if (!apiKey.service || !options.requiredServices.includes(apiKey.service)) {
+            return {
+                success: false,
+                error: `Service not allowed. Required one of: [${options.requiredServices.join(", ")}], Got: ${apiKey.service}`,
+                statusCode: 403,
+            };
+        }
+    }
+    // Validate scopes
+    const requiredScopes = getRequiredScopes(req.method, options);
+    if (!validateScopes(apiKey.scopes, requiredScopes)) {
+        return {
+            success: false,
+            error: `Insufficient scopes. Required: ${requiredScopes.join(", ")}`,
+            statusCode: 403,
+        };
+    }
+    // Verify HMAC signature
+    try {
+        const plaintext = await cryptoService.getPlaintextKey(apiKeyId, apiKey.ciphertext);
+        const method = req.method.toUpperCase();
+        const path = req.originalUrl.split("?")[0];
+        const timestamp = req.header("x-request-timestamp");
+        const nonce = req.header("x-request-nonce") || "";
+        if (!timestamp) {
+            return { success: false, error: "Missing x-request-timestamp header", statusCode: 400 };
+        }
+        const ts = parseInt(timestamp, 10);
+        if (Number.isNaN(ts)) {
+            return { success: false, error: "Invalid timestamp format", statusCode: 400 };
+        }
+        // Prevent replay attacks (5 minutes window)
+        if (Math.abs(Date.now() - ts) > ms("5m")) {
+            return { success: false, error: "Request timestamp expired", statusCode: 401 };
+        }
+        const expectedSig = cryptoService.signRequest({ method, path, ts, body: req.body, nonce, plaintext });
+        const providedSig = sigB64;
+        const ok = crypto.timingSafeEqual(Buffer.from(expectedSig, "base64"), Buffer.from(providedSig, "base64"));
+        if (!ok) {
+            return { success: false, error: "Invalid signature", statusCode: 401 };
+        }
+        // Set auth context
+        req.apiUser = { id: apiKey.userId, isService: apiKey.isService, service: apiKey.service };
+        req.ethAddress = apiKey.ethAddress;
+        req.authMethod = isServiceAuth ? LevrAuth.SERVICE_HMAC : LevrAuth.HMAC;
+        // Update last used timestamp
+        await apiKeyRepository.updateApiKey({ apiKeyId }, { lastUsedAt: new Date(), usageCount: { increment: 1 } });
+        return { success: true };
+    }
+    catch (err) {
+        console.error(`${isServiceAuth ? "Service " : ""}HMAC verification error:`, err);
+        return { success: false, error: "Signature verification failed", statusCode: 401 };
+    }
+}
+/**
+ * Handles HMAC authentication (user API keys)
+ */
+export async function handleHmacAuth(req, options) {
+    return handleHmacAuthBase(req, options, false);
+}
+/**
+ * Handles SERVICE_HMAC authentication (service-to-service API keys)
+ */
+export async function handleServiceHmacAuth(req, options) {
+    return handleHmacAuthBase(req, options, true);
+}
+//# sourceMappingURL=hmac.handler.js.map

package/dist/server/middleware/auth/hmac.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/hmac.handler.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,OAAO,EAAE,MAAM,IAAI,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAoB,MAAM,eAAe,CAAA;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,2BAA2B,CAAA;AAWlC;;GAEG;AACH,SAAS,cAAc,CAAC,YAAiC,EAAE,cAAmC;IAC1F,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACvE,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAyB;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAA,CAAC,eAAe;IAE3E,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAA;QACzC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,OAAyB,EAAE,aAAsB;IAC7F,6BAA6B;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACrF,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAC5F,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAC5F,CAAC;IAED,gBAAgB;IAChB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACxE,CAAC;IAED,wCAAwC;IACxC,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACvG,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAC5E,CAAC;IAED,mDAAmD;IACnD,IAAI,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACxE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,0CAA0C,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE;gBAC/G,UAAU,EAAE,GAAG;aAClB,CAAA;QACL,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QACjD,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpE,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QAElF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAA;QAEjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAC3F,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QACjF,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QACrG,MAAM,WAAW,GAAG,MAAM,CAAA;QAE1B,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzG,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAC1E,CAAC;QAED,mBAAmB;QACnB,GAAG,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QACzF,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAA4B,CAAA;QACpD,GAAG,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAA;QAEtE,6BAA6B;QAC7B,MAAM,gBAAgB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAE3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAA;QAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACtF,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,OAAyB;IACxE,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAY,EAAE,OAAyB;IAC/E,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AACjD,CAAC"}

package/dist/server/middleware/auth/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./cloudflare.handler";
+export * from "./hmac.handler";
+export * from "./privy.handler";

package/dist/server/middleware/auth/index.js

@@ -0,0 +1,4 @@
+export * from "./cloudflare.handler";
+export * from "./hmac.handler";
+export * from "./privy.handler";
+//# sourceMappingURL=index.js.map

package/dist/server/middleware/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA"}

package/dist/server/middleware/auth/privy.handler.d.ts

@@ -0,0 +1,8 @@
+import type { Request } from "express";
+import { LevrAuth, PrivyRole } from "../../../core";
+import "../../types/express.types";
+import type { AuthResult } from "./hmac.handler";
+/**
+ * Handles Privy authentication (User or Admin)
+ */
+export declare function handlePrivyAuth(req: Request, role: PrivyRole, authType: LevrAuth): Promise<AuthResult>;

package/dist/server/middleware/auth/privy.handler.js

@@ -0,0 +1,29 @@
+import { getAddress, isAddress } from "viem";
+import { ETH_ADDRESS_HEADER, PRIVY_ACCESS_TOKEN_HEADER, PRIVY_ID_TOKEN_HEADER } from "../../../core";
+import { privyService } from "../../services";
+import "../../types/express.types";
+/**
+ * Handles Privy authentication (User or Admin)
+ */
+export async function handlePrivyAuth(req, role, authType) {
+    const privyToken = req.headers[PRIVY_ACCESS_TOKEN_HEADER]?.toString();
+    const privyIdToken = req.headers[PRIVY_ID_TOKEN_HEADER]?.toString();
+    const ethAddress = req.headers[ETH_ADDRESS_HEADER]?.toString();
+    if (!privyToken || !privyIdToken) {
+        return {
+            success: false,
+            error: `Missing ${PRIVY_ACCESS_TOKEN_HEADER} or ${PRIVY_ID_TOKEN_HEADER} header`,
+            statusCode: 401,
+        };
+    }
+    const privyUser = await privyService.authenticate({ privyToken, privyIdToken, ethAddress, role });
+    if (!privyUser) {
+        return { success: false, error: "Privy authentication failed", statusCode: 401 };
+    }
+    // Set auth context
+    req.privyUser = privyUser;
+    req.ethAddress = ethAddress && isAddress(ethAddress) ? getAddress(ethAddress) : privyService.getUserEthAddress(privyUser);
+    req.authMethod = authType;
+    return { success: true };
+}
+//# sourceMappingURL=privy.handler.js.map

package/dist/server/middleware/auth/privy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/privy.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAY,yBAAyB,EAAE,qBAAqB,EAAa,MAAM,eAAe,CAAA;AACzH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,2BAA2B,CAAA;AAGlC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAY,EAAE,IAAe,EAAE,QAAkB;IACnF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EAAE,CAAA;IACrE,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAA;IAE9D,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,WAAW,yBAAyB,OAAO,qBAAqB,SAAS;YAChF,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAEjG,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACpF,CAAC;IAED,mBAAmB;IACnB,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;IACzB,GAAG,CAAC,UAAU,GAAG,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;IACzH,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAA;IAEzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC5B,CAAC"}

package/dist/server/middleware/index.d.ts

@@ -1,4 +1,2 @@
-export * from "./apiKey.middleware";
 export * from "./mutiAuth.middleware";
-export * from "./privy.middleware";
 export * from "./rateLimit.middleware";

package/dist/server/middleware/index.js

@@ -1,5 +1,3 @@
-export * from "./apiKey.middleware";
 export * from "./mutiAuth.middleware";
-export * from "./privy.middleware";
 export * from "./rateLimit.middleware";
 //# sourceMappingURL=index.js.map

package/dist/server/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA"}