@liveauth-labs/sdk 0.1.0

package/README.md

@@ -0,0 +1,103 @@
+# LiveAuth – Developer Portal Documentation
+
+## Getting Started
+
+LiveAuth verifies humans economically instead of heuristically.
+
+Instead of CAPTCHAs or tracking, LiveAuth asks the browser to perform a short
+cryptographic proof. If that fails or is skipped, it falls back to a small
+Bitcoin Lightning payment.
+
+No cookies.  
+No fingerprinting.  
+No behavioral profiling.
+
+---
+
+## What LiveAuth Does
+
+When a user clicks “Verify”:
+
+1. **Browser attempts Proof-of-Work (PoW)**  
+   – Takes ~200–800ms for a real device  
+   – Bots pay CPU / battery cost
+
+2. **If PoW fails → Lightning fallback**  
+   – Small payment (e.g. 21 sats)  
+   – Real economic cost to bots
+
+3. **LiveAuth returns a short-lived JWT**  
+   – Verifiable on your backend  
+   – No user identity required
+
+Most humans never see the Lightning step.
+
+---
+
+## Installation (JavaScript)
+
+```bash
+npm install @liveauth/sdk
+```
+
+---
+
+## Basic Usage
+
+```ts
+import { LiveAuth } from '@liveauth/sdk';
+
+const liveauth = new LiveAuth({
+  publicKey: 'la_pk_XXXXXXXX'
+});
+
+const result = await liveauth.verify();
+```
+
+---
+
+## Example Result
+
+```ts
+{
+  token: "eyJhbGciOi...",
+  method: "pow",
+  solveMs: 412,
+  difficultyBits: 18
+}
+```
+
+---
+
+## Verifying on Your Backend
+
+Send the JWT to your backend and verify it using your LiveAuth secret key.
+
+The token includes:
+
+- projectId
+- projectPublicKey
+- authType (pow or lightning)
+- short expiration (default: 10 minutes)
+
+---
+
+## Why LiveAuth
+
+| CAPTCHA | LiveAuth |
+|-------|----------|
+| Tracks behavior | No tracking |
+| ML heuristics | Cryptography |
+| CAPTCHA farms | Real economic cost |
+| Bad UX | Invisible to humans |
+
+---
+
+## Debug Mode
+
+Add `?liveauth_debug=1` to your URL to see:
+
+- Verification method
+- PoW difficulty
+- Solve time
+- Lightning fallback (demo mode)

package/dist/index.cjs

@@ -0,0 +1,208 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  LiveAuth: () => LiveAuth
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/errors.ts
+var LiveAuthTimeoutError = class extends Error {
+  constructor(message = "Lightning verification timed out") {
+    super(message);
+    this.name = "LiveAuthTimeoutError";
+  }
+};
+var LiveAuthCancelledError = class extends Error {
+  constructor(message = "Lightning verification cancelled") {
+    super(message);
+    this.name = "LiveAuthCancelledError";
+  }
+};
+
+// src/index.ts
+var import_meta = {};
+var LiveAuth = class {
+  constructor(config) {
+    this.config = config;
+    if (!config.publicKey) {
+      throw new Error("LiveAuth: publicKey is required");
+    }
+    this.baseUrl = config.baseUrl ?? "https://api.liveauth.app";
+    this.headers = {
+      "Content-Type": "application/json",
+      "X-LW-Public": config.publicKey
+    };
+  }
+  /* ======================================================
+   * PUBLIC ENTRYPOINT
+   * ====================================================== */
+  async verify() {
+    const startedAt = performance.now();
+    const challenge = await this.getPowChallenge();
+    const solution = await this.solvePow(challenge);
+    const verifyRes = await this.verifyPow({
+      challengeHex: challenge.challengeHex,
+      nonce: solution.nonce,
+      hashHex: solution.hashHex,
+      expiresAtUnix: challenge.expiresAtUnix,
+      sig: challenge.sig
+    });
+    if (verifyRes.verified && verifyRes.token) {
+      return {
+        method: "pow",
+        token: verifyRes.token,
+        solveMs: Math.round(performance.now() - startedAt),
+        difficultyBits: challenge.difficultyBits
+      };
+    }
+    if (verifyRes.fallback === "lightning") {
+      const lightning = await this.startLightning();
+      return {
+        method: "lightning",
+        lightning
+      };
+    }
+    throw new Error("LiveAuth: verification failed");
+  }
+  /* ======================================================
+   * POW FLOW
+   * ====================================================== */
+  async getPowChallenge() {
+    const res = await fetch(`${this.baseUrl}/api/public/pow/challenge`, {
+      headers: this.headers
+    });
+    if (!res.ok) throw new Error("PoW challenge failed");
+    return res.json();
+  }
+  async verifyPow(req) {
+    const res = await fetch(`${this.baseUrl}/api/public/pow/verify`, {
+      method: "POST",
+      headers: this.headers,
+      body: JSON.stringify(req)
+    });
+    if (!res.ok) throw new Error("PoW verify failed");
+    return res.json();
+  }
+  /* ======================================================
+   * POW SOLVER (WORKER)
+   * ====================================================== */
+  solvePow(challenge) {
+    if (!this.canUsePow()) {
+      return Promise.reject(
+        new Error("LiveAuth: PoW not supported in this environment")
+      );
+    }
+    return new Promise((resolve, reject) => {
+      const worker = new Worker(
+        new URL("./pow.worker.js", import_meta.url),
+        { type: "module" }
+      );
+      worker.onmessage = (e) => {
+        worker.terminate();
+        resolve(e.data);
+      };
+      worker.onerror = (e) => {
+        worker.terminate();
+        reject(e);
+      };
+      worker.postMessage({
+        projectPublicKey: challenge.projectPublicKey,
+        challengeHex: challenge.challengeHex,
+        targetHex: challenge.targetHex
+      });
+    });
+  }
+  /* ======================================================
+   * LIGHTNING FALLBACK
+   * ====================================================== */
+  async startLightning() {
+    const res = await fetch(`${this.baseUrl}/api/public/auth/start`, {
+      method: "POST",
+      headers: this.headers,
+      body: JSON.stringify({ userHint: "browser" })
+    });
+    if (!res.ok) {
+      throw new Error("Lightning auth start failed");
+    }
+    return res.json();
+  }
+  canUsePow() {
+    try {
+      if (typeof window === "undefined") return false;
+      if (typeof Worker === "undefined") return false;
+      if (typeof URL === "undefined") return false;
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  async pollLightning(sessionId, options) {
+    const timeoutMs = options?.timeoutMs ?? 5 * 6e4;
+    const intervalMs = options?.intervalMs ?? 2e3;
+    const externalSignal = options?.signal;
+    const controller = new AbortController();
+    const signal = controller.signal;
+    if (externalSignal) {
+      if (externalSignal.aborted) {
+        throw new LiveAuthCancelledError();
+      }
+      externalSignal.addEventListener("abort", () => {
+        controller.abort();
+      });
+    }
+    const timeoutId = setTimeout(() => {
+      controller.abort();
+    }, timeoutMs);
+    try {
+      while (true) {
+        if (signal.aborted) {
+          throw externalSignal?.aborted ? new LiveAuthCancelledError() : new LiveAuthTimeoutError();
+        }
+        const res = await fetch(
+          `${this.baseUrl}/api/public/auth/confirm`,
+          {
+            method: "POST",
+            headers: this.headers,
+            body: JSON.stringify({ sessionId }),
+            signal
+          }
+        );
+        if (!res.ok) {
+          throw new Error("Lightning confirm failed");
+        }
+        const json = await res.json();
+        if (json.verified && json.token) {
+          return json.token;
+        }
+        await sleep(intervalMs);
+      }
+    } finally {
+      clearTimeout(timeoutId);
+    }
+  }
+};
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  LiveAuth
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts"],"sourcesContent":["import type {\n    LiveAuthResult,\n    VerifyOptions,\n    PowChallengeResponse,\n    PowVerifyRequest,\n    PowVerifyResponse,\n    PowSolution,\n    AuthStartResponse,\n    AuthConfirmResponse,\n    LiveAuthConfig, LightningStart\n} from './types';\nimport {LiveAuthCancelledError, LiveAuthTimeoutError} from \"./errors\";\n\nexport class LiveAuth {\n    private readonly baseUrl: string;\n    private readonly headers: HeadersInit;\n\n    constructor(private readonly config: LiveAuthConfig) {\n        if (!config.publicKey) {\n            throw new Error('LiveAuth: publicKey is required');\n        }\n\n        this.baseUrl = config.baseUrl ?? 'https://api.liveauth.app';\n\n        this.headers = {\n            'Content-Type': 'application/json',\n            'X-LW-Public': config.publicKey\n        };\n    }\n\n    /* ======================================================\n     * PUBLIC ENTRYPOINT\n     * ====================================================== */\n\n    async verify(): Promise<LiveAuthResult> {\n        const startedAt = performance.now();\n\n        const challenge = await this.getPowChallenge();\n        const solution = await this.solvePow(challenge);\n\n        const verifyRes = await this.verifyPow({\n            challengeHex: challenge.challengeHex,\n            nonce: solution.nonce,\n            hashHex: solution.hashHex,\n            expiresAtUnix: challenge.expiresAtUnix,\n            sig: challenge.sig\n        });\n\n        if (verifyRes.verified && verifyRes.token) {\n            return {\n                method: 'pow',\n                token: verifyRes.token,\n                solveMs: Math.round(performance.now() - startedAt),\n                difficultyBits: challenge.difficultyBits\n            };\n        }\n\n        if (verifyRes.fallback === 'lightning') {\n            const lightning = await this.startLightning();\n            return {\n                method: 'lightning',\n                lightning\n            };\n        }\n\n        throw new Error('LiveAuth: verification failed');\n    }\n\n    /* ======================================================\n     * POW FLOW\n     * ====================================================== */\n\n    private async getPowChallenge(): Promise<PowChallengeResponse> {\n        const res = await fetch(`${this.baseUrl}/api/public/pow/challenge`, {\n            headers: this.headers\n        });\n\n        if (!res.ok) throw new Error('PoW challenge failed');\n        return res.json();\n    }\n\n    private async verifyPow(req: PowVerifyRequest): Promise<PowVerifyResponse> {\n        const res = await fetch(`${this.baseUrl}/api/public/pow/verify`, {\n            method: 'POST',\n            headers: this.headers,\n            body: JSON.stringify(req)\n        });\n\n        if (!res.ok) throw new Error('PoW verify failed');\n        return res.json();\n    }\n\n    /* ======================================================\n     * POW SOLVER (WORKER)\n     * ====================================================== */\n\n    private solvePow(challenge: PowChallengeResponse): Promise<PowSolution> {\n        if (!this.canUsePow()) {\n            return Promise.reject(\n                new Error('LiveAuth: PoW not supported in this environment')\n            );\n        }\n\n        return new Promise((resolve, reject) => {\n            const worker = new Worker(\n                new URL('./pow.worker.js', import.meta.url),\n                {type: 'module'}\n            );\n\n            worker.onmessage = e => {\n                worker.terminate();\n                resolve(e.data);\n            };\n\n            worker.onerror = e => {\n                worker.terminate();\n                reject(e);\n            };\n\n            worker.postMessage({\n                projectPublicKey: challenge.projectPublicKey,\n                challengeHex: challenge.challengeHex,\n                targetHex: challenge.targetHex\n            });\n        });\n    }\n\n    /* ======================================================\n     * LIGHTNING FALLBACK\n     * ====================================================== */\n\n    private async startLightning(): Promise<LightningStart> {\n        const res = await fetch(`${this.baseUrl}/api/public/auth/start`, {\n            method: 'POST',\n            headers: this.headers,\n            body: JSON.stringify({userHint: 'browser'})\n        });\n\n        if (!res.ok) {\n            throw new Error('Lightning auth start failed');\n        }\n\n        return res.json();\n    }\n\n    private canUsePow(): boolean {\n        try {\n            // SSR / Node guard\n            if (typeof window === 'undefined') return false;\n\n            // Worker support\n            if (typeof Worker === 'undefined') return false;\n\n            // Basic URL support (needed for module workers)\n            if (typeof URL === 'undefined') return false;\n\n            return true;\n        } catch {\n            return false;\n        }\n    }\n\n    async pollLightning(\n        sessionId: string,\n        options?: {\n            timeoutMs?: number;\n            signal?: AbortSignal;\n            intervalMs?: number;\n        }\n    ): Promise<string> {\n        const timeoutMs = options?.timeoutMs ?? 5 * 60_000; // 5 min\n        const intervalMs = options?.intervalMs ?? 2000;\n        const externalSignal = options?.signal;\n\n        const controller = new AbortController();\n        const signal = controller.signal;\n\n        // If caller passes a signal, bridge it\n        if (externalSignal) {\n            if (externalSignal.aborted) {\n                throw new LiveAuthCancelledError();\n            }\n\n            externalSignal.addEventListener('abort', () => {\n                controller.abort();\n            });\n        }\n\n        // Timeout enforcement\n        const timeoutId = setTimeout(() => {\n            controller.abort();\n        }, timeoutMs);\n\n        try {\n            while (true) {\n                if (signal.aborted) {\n                    throw externalSignal?.aborted\n                        ? new LiveAuthCancelledError()\n                        : new LiveAuthTimeoutError();\n                }\n\n                const res = await fetch(\n                    `${this.baseUrl}/api/public/auth/confirm`,\n                    {\n                        method: 'POST',\n                        headers: this.headers,\n                        body: JSON.stringify({sessionId}),\n                        signal\n                    }\n                );\n\n                if (!res.ok) {\n                    throw new Error('Lightning confirm failed');\n                }\n\n                const json = await res.json();\n\n                if (json.verified && json.token) {\n                    return json.token;\n                }\n\n                await sleep(intervalMs);\n            }\n        } finally {\n            clearTimeout(timeoutId);\n        }\n    }\n\n\n}\n\n/* ======================================================\n * UTILS\n * ====================================================== */\n\nconst sleep = (ms: number) =>\n    new Promise(resolve => setTimeout(resolve, ms));\n","export class LiveAuthTimeoutError extends Error {\n    constructor(message = 'Lightning verification timed out') {\n        super(message);\n        this.name = 'LiveAuthTimeoutError';\n    }\n}\n\nexport class LiveAuthCancelledError extends Error {\n    constructor(message = 'Lightning verification cancelled') {\n        super(message);\n        this.name = 'LiveAuthCancelledError';\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC5C,YAAY,UAAU,oCAAoC;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EAChB;AACJ;AAEO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAC9C,YAAY,UAAU,oCAAoC;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EAChB;AACJ;;;ADZA;AAaO,IAAM,WAAN,MAAe;AAAA,EAIlB,YAA6B,QAAwB;AAAxB;AACzB,QAAI,CAAC,OAAO,WAAW;AACnB,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACrD;AAEA,SAAK,UAAU,OAAO,WAAW;AAEjC,SAAK,UAAU;AAAA,MACX,gBAAgB;AAAA,MAChB,eAAe,OAAO;AAAA,IAC1B;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAkC;AACpC,UAAM,YAAY,YAAY,IAAI;AAElC,UAAM,YAAY,MAAM,KAAK,gBAAgB;AAC7C,UAAM,WAAW,MAAM,KAAK,SAAS,SAAS;AAE9C,UAAM,YAAY,MAAM,KAAK,UAAU;AAAA,MACnC,cAAc,UAAU;AAAA,MACxB,OAAO,SAAS;AAAA,MAChB,SAAS,SAAS;AAAA,MAClB,eAAe,UAAU;AAAA,MACzB,KAAK,UAAU;AAAA,IACnB,CAAC;AAED,QAAI,UAAU,YAAY,UAAU,OAAO;AACvC,aAAO;AAAA,QACH,QAAQ;AAAA,QACR,OAAO,UAAU;AAAA,QACjB,SAAS,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AAAA,QACjD,gBAAgB,UAAU;AAAA,MAC9B;AAAA,IACJ;AAEA,QAAI,UAAU,aAAa,aAAa;AACpC,YAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,aAAO;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACJ;AAAA,IACJ;AAEA,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,kBAAiD;AAC3D,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,6BAA6B;AAAA,MAChE,SAAS,KAAK;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA,EAEA,MAAc,UAAU,KAAmD;AACvE,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,UAAU,GAAG;AAAA,IAC5B,CAAC;AAED,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,mBAAmB;AAChD,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,WAAuD;AACpE,QAAI,CAAC,KAAK,UAAU,GAAG;AACnB,aAAO,QAAQ;AAAA,QACX,IAAI,MAAM,iDAAiD;AAAA,MAC/D;AAAA,IACJ;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,YAAM,SAAS,IAAI;AAAA,QACf,IAAI,IAAI,mBAAmB,YAAY,GAAG;AAAA,QAC1C,EAAC,MAAM,SAAQ;AAAA,MACnB;AAEA,aAAO,YAAY,OAAK;AACpB,eAAO,UAAU;AACjB,gBAAQ,EAAE,IAAI;AAAA,MAClB;AAEA,aAAO,UAAU,OAAK;AAClB,eAAO,UAAU;AACjB,eAAO,CAAC;AAAA,MACZ;AAEA,aAAO,YAAY;AAAA,QACf,kBAAkB,UAAU;AAAA,QAC5B,cAAc,UAAU;AAAA,QACxB,WAAW,UAAU;AAAA,MACzB,CAAC;AAAA,IACL,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,iBAA0C;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,UAAU,EAAC,UAAU,UAAS,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B;AAAA,IACjD;AAEA,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA,EAEQ,YAAqB;AACzB,QAAI;AAEA,UAAI,OAAO,WAAW,YAAa,QAAO;AAG1C,UAAI,OAAO,WAAW,YAAa,QAAO;AAG1C,UAAI,OAAO,QAAQ,YAAa,QAAO;AAEvC,aAAO;AAAA,IACX,QAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,cACF,WACA,SAKe;AACf,UAAM,YAAY,SAAS,aAAa,IAAI;AAC5C,UAAM,aAAa,SAAS,cAAc;AAC1C,UAAM,iBAAiB,SAAS;AAEhC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,SAAS,WAAW;AAG1B,QAAI,gBAAgB;AAChB,UAAI,eAAe,SAAS;AACxB,cAAM,IAAI,uBAAuB;AAAA,MACrC;AAEA,qBAAe,iBAAiB,SAAS,MAAM;AAC3C,mBAAW,MAAM;AAAA,MACrB,CAAC;AAAA,IACL;AAGA,UAAM,YAAY,WAAW,MAAM;AAC/B,iBAAW,MAAM;AAAA,IACrB,GAAG,SAAS;AAEZ,QAAI;AACA,aAAO,MAAM;AACT,YAAI,OAAO,SAAS;AAChB,gBAAM,gBAAgB,UAChB,IAAI,uBAAuB,IAC3B,IAAI,qBAAqB;AAAA,QACnC;AAEA,cAAM,MAAM,MAAM;AAAA,UACd,GAAG,KAAK,OAAO;AAAA,UACf;AAAA,YACI,QAAQ;AAAA,YACR,SAAS,KAAK;AAAA,YACd,MAAM,KAAK,UAAU,EAAC,UAAS,CAAC;AAAA,YAChC;AAAA,UACJ;AAAA,QACJ;AAEA,YAAI,CAAC,IAAI,IAAI;AACT,gBAAM,IAAI,MAAM,0BAA0B;AAAA,QAC9C;AAEA,cAAM,OAAO,MAAM,IAAI,KAAK;AAE5B,YAAI,KAAK,YAAY,KAAK,OAAO;AAC7B,iBAAO,KAAK;AAAA,QAChB;AAEA,cAAM,MAAM,UAAU;AAAA,MAC1B;AAAA,IACJ,UAAE;AACE,mBAAa,SAAS;AAAA,IAC1B;AAAA,EACJ;AAGJ;AAMA,IAAM,QAAQ,CAAC,OACX,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,47 @@
+interface LiveAuthConfig {
+    /** Public project key (browser-safe) */
+    publicKey: string;
+    /** Optional API base URL (defaults to liveauth.app) */
+    baseUrl?: string;
+}
+interface LiveAuthDiagnostics {
+    reason?: 'forced_lightning' | 'pow_unsupported' | 'pow_failed' | 'pow_server_fallback' | 'unknown';
+    detail?: string;
+}
+interface LightningStart {
+    sessionId: string;
+    invoice: string | null;
+    amountSats: number;
+    expiresAtUnix: number;
+    mode: 'TEST' | 'LIVE';
+}
+type LiveAuthResult = {
+    method: 'pow';
+    token: string;
+    solveMs: number;
+    difficultyBits: number;
+    diagnostics?: LiveAuthDiagnostics;
+} | {
+    method: 'lightning';
+    lightning: LightningStart;
+};
+
+declare class LiveAuth {
+    private readonly config;
+    private readonly baseUrl;
+    private readonly headers;
+    constructor(config: LiveAuthConfig);
+    verify(): Promise<LiveAuthResult>;
+    private getPowChallenge;
+    private verifyPow;
+    private solvePow;
+    private startLightning;
+    private canUsePow;
+    pollLightning(sessionId: string, options?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+        intervalMs?: number;
+    }): Promise<string>;
+}
+
+export { LiveAuth };

package/dist/index.d.ts

@@ -0,0 +1,47 @@
+interface LiveAuthConfig {
+    /** Public project key (browser-safe) */
+    publicKey: string;
+    /** Optional API base URL (defaults to liveauth.app) */
+    baseUrl?: string;
+}
+interface LiveAuthDiagnostics {
+    reason?: 'forced_lightning' | 'pow_unsupported' | 'pow_failed' | 'pow_server_fallback' | 'unknown';
+    detail?: string;
+}
+interface LightningStart {
+    sessionId: string;
+    invoice: string | null;
+    amountSats: number;
+    expiresAtUnix: number;
+    mode: 'TEST' | 'LIVE';
+}
+type LiveAuthResult = {
+    method: 'pow';
+    token: string;
+    solveMs: number;
+    difficultyBits: number;
+    diagnostics?: LiveAuthDiagnostics;
+} | {
+    method: 'lightning';
+    lightning: LightningStart;
+};
+
+declare class LiveAuth {
+    private readonly config;
+    private readonly baseUrl;
+    private readonly headers;
+    constructor(config: LiveAuthConfig);
+    verify(): Promise<LiveAuthResult>;
+    private getPowChallenge;
+    private verifyPow;
+    private solvePow;
+    private startLightning;
+    private canUsePow;
+    pollLightning(sessionId: string, options?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+        intervalMs?: number;
+    }): Promise<string>;
+}
+
+export { LiveAuth };

package/dist/index.js

@@ -0,0 +1,180 @@
+// src/errors.ts
+var LiveAuthTimeoutError = class extends Error {
+  constructor(message = "Lightning verification timed out") {
+    super(message);
+    this.name = "LiveAuthTimeoutError";
+  }
+};
+var LiveAuthCancelledError = class extends Error {
+  constructor(message = "Lightning verification cancelled") {
+    super(message);
+    this.name = "LiveAuthCancelledError";
+  }
+};
+
+// src/index.ts
+var LiveAuth = class {
+  constructor(config) {
+    this.config = config;
+    if (!config.publicKey) {
+      throw new Error("LiveAuth: publicKey is required");
+    }
+    this.baseUrl = config.baseUrl ?? "https://api.liveauth.app";
+    this.headers = {
+      "Content-Type": "application/json",
+      "X-LW-Public": config.publicKey
+    };
+  }
+  /* ======================================================
+   * PUBLIC ENTRYPOINT
+   * ====================================================== */
+  async verify() {
+    const startedAt = performance.now();
+    const challenge = await this.getPowChallenge();
+    const solution = await this.solvePow(challenge);
+    const verifyRes = await this.verifyPow({
+      challengeHex: challenge.challengeHex,
+      nonce: solution.nonce,
+      hashHex: solution.hashHex,
+      expiresAtUnix: challenge.expiresAtUnix,
+      sig: challenge.sig
+    });
+    if (verifyRes.verified && verifyRes.token) {
+      return {
+        method: "pow",
+        token: verifyRes.token,
+        solveMs: Math.round(performance.now() - startedAt),
+        difficultyBits: challenge.difficultyBits
+      };
+    }
+    if (verifyRes.fallback === "lightning") {
+      const lightning = await this.startLightning();
+      return {
+        method: "lightning",
+        lightning
+      };
+    }
+    throw new Error("LiveAuth: verification failed");
+  }
+  /* ======================================================
+   * POW FLOW
+   * ====================================================== */
+  async getPowChallenge() {
+    const res = await fetch(`${this.baseUrl}/api/public/pow/challenge`, {
+      headers: this.headers
+    });
+    if (!res.ok) throw new Error("PoW challenge failed");
+    return res.json();
+  }
+  async verifyPow(req) {
+    const res = await fetch(`${this.baseUrl}/api/public/pow/verify`, {
+      method: "POST",
+      headers: this.headers,
+      body: JSON.stringify(req)
+    });
+    if (!res.ok) throw new Error("PoW verify failed");
+    return res.json();
+  }
+  /* ======================================================
+   * POW SOLVER (WORKER)
+   * ====================================================== */
+  solvePow(challenge) {
+    if (!this.canUsePow()) {
+      return Promise.reject(
+        new Error("LiveAuth: PoW not supported in this environment")
+      );
+    }
+    return new Promise((resolve, reject) => {
+      const worker = new Worker(
+        new URL("./pow.worker.js", import.meta.url),
+        { type: "module" }
+      );
+      worker.onmessage = (e) => {
+        worker.terminate();
+        resolve(e.data);
+      };
+      worker.onerror = (e) => {
+        worker.terminate();
+        reject(e);
+      };
+      worker.postMessage({
+        projectPublicKey: challenge.projectPublicKey,
+        challengeHex: challenge.challengeHex,
+        targetHex: challenge.targetHex
+      });
+    });
+  }
+  /* ======================================================
+   * LIGHTNING FALLBACK
+   * ====================================================== */
+  async startLightning() {
+    const res = await fetch(`${this.baseUrl}/api/public/auth/start`, {
+      method: "POST",
+      headers: this.headers,
+      body: JSON.stringify({ userHint: "browser" })
+    });
+    if (!res.ok) {
+      throw new Error("Lightning auth start failed");
+    }
+    return res.json();
+  }
+  canUsePow() {
+    try {
+      if (typeof window === "undefined") return false;
+      if (typeof Worker === "undefined") return false;
+      if (typeof URL === "undefined") return false;
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  async pollLightning(sessionId, options) {
+    const timeoutMs = options?.timeoutMs ?? 5 * 6e4;
+    const intervalMs = options?.intervalMs ?? 2e3;
+    const externalSignal = options?.signal;
+    const controller = new AbortController();
+    const signal = controller.signal;
+    if (externalSignal) {
+      if (externalSignal.aborted) {
+        throw new LiveAuthCancelledError();
+      }
+      externalSignal.addEventListener("abort", () => {
+        controller.abort();
+      });
+    }
+    const timeoutId = setTimeout(() => {
+      controller.abort();
+    }, timeoutMs);
+    try {
+      while (true) {
+        if (signal.aborted) {
+          throw externalSignal?.aborted ? new LiveAuthCancelledError() : new LiveAuthTimeoutError();
+        }
+        const res = await fetch(
+          `${this.baseUrl}/api/public/auth/confirm`,
+          {
+            method: "POST",
+            headers: this.headers,
+            body: JSON.stringify({ sessionId }),
+            signal
+          }
+        );
+        if (!res.ok) {
+          throw new Error("Lightning confirm failed");
+        }
+        const json = await res.json();
+        if (json.verified && json.token) {
+          return json.token;
+        }
+        await sleep(intervalMs);
+      }
+    } finally {
+      clearTimeout(timeoutId);
+    }
+  }
+};
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export {
+  LiveAuth
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/index.ts"],"sourcesContent":["export class LiveAuthTimeoutError extends Error {\n    constructor(message = 'Lightning verification timed out') {\n        super(message);\n        this.name = 'LiveAuthTimeoutError';\n    }\n}\n\nexport class LiveAuthCancelledError extends Error {\n    constructor(message = 'Lightning verification cancelled') {\n        super(message);\n        this.name = 'LiveAuthCancelledError';\n    }\n}\n","import type {\n    LiveAuthResult,\n    VerifyOptions,\n    PowChallengeResponse,\n    PowVerifyRequest,\n    PowVerifyResponse,\n    PowSolution,\n    AuthStartResponse,\n    AuthConfirmResponse,\n    LiveAuthConfig, LightningStart\n} from './types';\nimport {LiveAuthCancelledError, LiveAuthTimeoutError} from \"./errors\";\n\nexport class LiveAuth {\n    private readonly baseUrl: string;\n    private readonly headers: HeadersInit;\n\n    constructor(private readonly config: LiveAuthConfig) {\n        if (!config.publicKey) {\n            throw new Error('LiveAuth: publicKey is required');\n        }\n\n        this.baseUrl = config.baseUrl ?? 'https://api.liveauth.app';\n\n        this.headers = {\n            'Content-Type': 'application/json',\n            'X-LW-Public': config.publicKey\n        };\n    }\n\n    /* ======================================================\n     * PUBLIC ENTRYPOINT\n     * ====================================================== */\n\n    async verify(): Promise<LiveAuthResult> {\n        const startedAt = performance.now();\n\n        const challenge = await this.getPowChallenge();\n        const solution = await this.solvePow(challenge);\n\n        const verifyRes = await this.verifyPow({\n            challengeHex: challenge.challengeHex,\n            nonce: solution.nonce,\n            hashHex: solution.hashHex,\n            expiresAtUnix: challenge.expiresAtUnix,\n            sig: challenge.sig\n        });\n\n        if (verifyRes.verified && verifyRes.token) {\n            return {\n                method: 'pow',\n                token: verifyRes.token,\n                solveMs: Math.round(performance.now() - startedAt),\n                difficultyBits: challenge.difficultyBits\n            };\n        }\n\n        if (verifyRes.fallback === 'lightning') {\n            const lightning = await this.startLightning();\n            return {\n                method: 'lightning',\n                lightning\n            };\n        }\n\n        throw new Error('LiveAuth: verification failed');\n    }\n\n    /* ======================================================\n     * POW FLOW\n     * ====================================================== */\n\n    private async getPowChallenge(): Promise<PowChallengeResponse> {\n        const res = await fetch(`${this.baseUrl}/api/public/pow/challenge`, {\n            headers: this.headers\n        });\n\n        if (!res.ok) throw new Error('PoW challenge failed');\n        return res.json();\n    }\n\n    private async verifyPow(req: PowVerifyRequest): Promise<PowVerifyResponse> {\n        const res = await fetch(`${this.baseUrl}/api/public/pow/verify`, {\n            method: 'POST',\n            headers: this.headers,\n            body: JSON.stringify(req)\n        });\n\n        if (!res.ok) throw new Error('PoW verify failed');\n        return res.json();\n    }\n\n    /* ======================================================\n     * POW SOLVER (WORKER)\n     * ====================================================== */\n\n    private solvePow(challenge: PowChallengeResponse): Promise<PowSolution> {\n        if (!this.canUsePow()) {\n            return Promise.reject(\n                new Error('LiveAuth: PoW not supported in this environment')\n            );\n        }\n\n        return new Promise((resolve, reject) => {\n            const worker = new Worker(\n                new URL('./pow.worker.js', import.meta.url),\n                {type: 'module'}\n            );\n\n            worker.onmessage = e => {\n                worker.terminate();\n                resolve(e.data);\n            };\n\n            worker.onerror = e => {\n                worker.terminate();\n                reject(e);\n            };\n\n            worker.postMessage({\n                projectPublicKey: challenge.projectPublicKey,\n                challengeHex: challenge.challengeHex,\n                targetHex: challenge.targetHex\n            });\n        });\n    }\n\n    /* ======================================================\n     * LIGHTNING FALLBACK\n     * ====================================================== */\n\n    private async startLightning(): Promise<LightningStart> {\n        const res = await fetch(`${this.baseUrl}/api/public/auth/start`, {\n            method: 'POST',\n            headers: this.headers,\n            body: JSON.stringify({userHint: 'browser'})\n        });\n\n        if (!res.ok) {\n            throw new Error('Lightning auth start failed');\n        }\n\n        return res.json();\n    }\n\n    private canUsePow(): boolean {\n        try {\n            // SSR / Node guard\n            if (typeof window === 'undefined') return false;\n\n            // Worker support\n            if (typeof Worker === 'undefined') return false;\n\n            // Basic URL support (needed for module workers)\n            if (typeof URL === 'undefined') return false;\n\n            return true;\n        } catch {\n            return false;\n        }\n    }\n\n    async pollLightning(\n        sessionId: string,\n        options?: {\n            timeoutMs?: number;\n            signal?: AbortSignal;\n            intervalMs?: number;\n        }\n    ): Promise<string> {\n        const timeoutMs = options?.timeoutMs ?? 5 * 60_000; // 5 min\n        const intervalMs = options?.intervalMs ?? 2000;\n        const externalSignal = options?.signal;\n\n        const controller = new AbortController();\n        const signal = controller.signal;\n\n        // If caller passes a signal, bridge it\n        if (externalSignal) {\n            if (externalSignal.aborted) {\n                throw new LiveAuthCancelledError();\n            }\n\n            externalSignal.addEventListener('abort', () => {\n                controller.abort();\n            });\n        }\n\n        // Timeout enforcement\n        const timeoutId = setTimeout(() => {\n            controller.abort();\n        }, timeoutMs);\n\n        try {\n            while (true) {\n                if (signal.aborted) {\n                    throw externalSignal?.aborted\n                        ? new LiveAuthCancelledError()\n                        : new LiveAuthTimeoutError();\n                }\n\n                const res = await fetch(\n                    `${this.baseUrl}/api/public/auth/confirm`,\n                    {\n                        method: 'POST',\n                        headers: this.headers,\n                        body: JSON.stringify({sessionId}),\n                        signal\n                    }\n                );\n\n                if (!res.ok) {\n                    throw new Error('Lightning confirm failed');\n                }\n\n                const json = await res.json();\n\n                if (json.verified && json.token) {\n                    return json.token;\n                }\n\n                await sleep(intervalMs);\n            }\n        } finally {\n            clearTimeout(timeoutId);\n        }\n    }\n\n\n}\n\n/* ======================================================\n * UTILS\n * ====================================================== */\n\nconst sleep = (ms: number) =>\n    new Promise(resolve => setTimeout(resolve, ms));\n"],"mappings":";AAAO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC5C,YAAY,UAAU,oCAAoC;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EAChB;AACJ;AAEO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAC9C,YAAY,UAAU,oCAAoC;AACtD,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EAChB;AACJ;;;ACCO,IAAM,WAAN,MAAe;AAAA,EAIlB,YAA6B,QAAwB;AAAxB;AACzB,QAAI,CAAC,OAAO,WAAW;AACnB,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACrD;AAEA,SAAK,UAAU,OAAO,WAAW;AAEjC,SAAK,UAAU;AAAA,MACX,gBAAgB;AAAA,MAChB,eAAe,OAAO;AAAA,IAC1B;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,SAAkC;AACpC,UAAM,YAAY,YAAY,IAAI;AAElC,UAAM,YAAY,MAAM,KAAK,gBAAgB;AAC7C,UAAM,WAAW,MAAM,KAAK,SAAS,SAAS;AAE9C,UAAM,YAAY,MAAM,KAAK,UAAU;AAAA,MACnC,cAAc,UAAU;AAAA,MACxB,OAAO,SAAS;AAAA,MAChB,SAAS,SAAS;AAAA,MAClB,eAAe,UAAU;AAAA,MACzB,KAAK,UAAU;AAAA,IACnB,CAAC;AAED,QAAI,UAAU,YAAY,UAAU,OAAO;AACvC,aAAO;AAAA,QACH,QAAQ;AAAA,QACR,OAAO,UAAU;AAAA,QACjB,SAAS,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AAAA,QACjD,gBAAgB,UAAU;AAAA,MAC9B;AAAA,IACJ;AAEA,QAAI,UAAU,aAAa,aAAa;AACpC,YAAM,YAAY,MAAM,KAAK,eAAe;AAC5C,aAAO;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACJ;AAAA,IACJ;AAEA,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,kBAAiD;AAC3D,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,6BAA6B;AAAA,MAChE,SAAS,KAAK;AAAA,IAClB,CAAC;AAED,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA,EAEA,MAAc,UAAU,KAAmD;AACvE,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,UAAU,GAAG;AAAA,IAC5B,CAAC;AAED,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,mBAAmB;AAChD,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAS,WAAuD;AACpE,QAAI,CAAC,KAAK,UAAU,GAAG;AACnB,aAAO,QAAQ;AAAA,QACX,IAAI,MAAM,iDAAiD;AAAA,MAC/D;AAAA,IACJ;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACpC,YAAM,SAAS,IAAI;AAAA,QACf,IAAI,IAAI,mBAAmB,YAAY,GAAG;AAAA,QAC1C,EAAC,MAAM,SAAQ;AAAA,MACnB;AAEA,aAAO,YAAY,OAAK;AACpB,eAAO,UAAU;AACjB,gBAAQ,EAAE,IAAI;AAAA,MAClB;AAEA,aAAO,UAAU,OAAK;AAClB,eAAO,UAAU;AACjB,eAAO,CAAC;AAAA,MACZ;AAEA,aAAO,YAAY;AAAA,QACf,kBAAkB,UAAU;AAAA,QAC5B,cAAc,UAAU;AAAA,QACxB,WAAW,UAAU;AAAA,MACzB,CAAC;AAAA,IACL,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,iBAA0C;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MAC7D,QAAQ;AAAA,MACR,SAAS,KAAK;AAAA,MACd,MAAM,KAAK,UAAU,EAAC,UAAU,UAAS,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B;AAAA,IACjD;AAEA,WAAO,IAAI,KAAK;AAAA,EACpB;AAAA,EAEQ,YAAqB;AACzB,QAAI;AAEA,UAAI,OAAO,WAAW,YAAa,QAAO;AAG1C,UAAI,OAAO,WAAW,YAAa,QAAO;AAG1C,UAAI,OAAO,QAAQ,YAAa,QAAO;AAEvC,aAAO;AAAA,IACX,QAAQ;AACJ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,cACF,WACA,SAKe;AACf,UAAM,YAAY,SAAS,aAAa,IAAI;AAC5C,UAAM,aAAa,SAAS,cAAc;AAC1C,UAAM,iBAAiB,SAAS;AAEhC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,SAAS,WAAW;AAG1B,QAAI,gBAAgB;AAChB,UAAI,eAAe,SAAS;AACxB,cAAM,IAAI,uBAAuB;AAAA,MACrC;AAEA,qBAAe,iBAAiB,SAAS,MAAM;AAC3C,mBAAW,MAAM;AAAA,MACrB,CAAC;AAAA,IACL;AAGA,UAAM,YAAY,WAAW,MAAM;AAC/B,iBAAW,MAAM;AAAA,IACrB,GAAG,SAAS;AAEZ,QAAI;AACA,aAAO,MAAM;AACT,YAAI,OAAO,SAAS;AAChB,gBAAM,gBAAgB,UAChB,IAAI,uBAAuB,IAC3B,IAAI,qBAAqB;AAAA,QACnC;AAEA,cAAM,MAAM,MAAM;AAAA,UACd,GAAG,KAAK,OAAO;AAAA,UACf;AAAA,YACI,QAAQ;AAAA,YACR,SAAS,KAAK;AAAA,YACd,MAAM,KAAK,UAAU,EAAC,UAAS,CAAC;AAAA,YAChC;AAAA,UACJ;AAAA,QACJ;AAEA,YAAI,CAAC,IAAI,IAAI;AACT,gBAAM,IAAI,MAAM,0BAA0B;AAAA,QAC9C;AAEA,cAAM,OAAO,MAAM,IAAI,KAAK;AAE5B,YAAI,KAAK,YAAY,KAAK,OAAO;AAC7B,iBAAO,KAAK;AAAA,QAChB;AAEA,cAAM,MAAM,UAAU;AAAA,MAC1B;AAAA,IACJ,UAAE;AACE,mBAAa,SAAS;AAAA,IAC1B;AAAA,EACJ;AAGJ;AAMA,IAAM,QAAQ,CAAC,OACX,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;","names":[]}

package/dist/pow.worker.cjs

@@ -0,0 +1,24 @@
+"use strict";
+
+// src/pow.worker.ts
+self.onmessage = async (e) => {
+  const { projectPublicKey, challengeHex, targetHex } = e.data;
+  let nonce = 0;
+  while (true) {
+    const input = `${projectPublicKey}:${challengeHex}:${nonce}`;
+    const hash = await sha256Hex(input);
+    if (hash <= targetHex) {
+      postMessage({ nonce, hashHex: hash });
+      return;
+    }
+    nonce++;
+  }
+};
+async function sha256Hex(input) {
+  const buf = await crypto.subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(input)
+  );
+  return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=pow.worker.cjs.map

package/dist/pow.worker.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pow.worker.ts"],"sourcesContent":["self.onmessage = async e => {\n    const { projectPublicKey, challengeHex, targetHex } = e.data;\n\n    let nonce = 0;\n\n    while (true) {\n        const input = `${projectPublicKey}:${challengeHex}:${nonce}`;\n        const hash = await sha256Hex(input);\n\n        if (hash <= targetHex) {\n            postMessage({ nonce, hashHex: hash });\n            return;\n        }\n\n        nonce++;\n    }\n};\n\nasync function sha256Hex(input: string): Promise<string> {\n    const buf = await crypto.subtle.digest(\n        'SHA-256',\n        new TextEncoder().encode(input)\n    );\n\n    return [...new Uint8Array(buf)]\n        .map(b => b.toString(16).padStart(2, '0'))\n        .join('');\n}\n"],"mappings":";;;AAAA,KAAK,YAAY,OAAM,MAAK;AACxB,QAAM,EAAE,kBAAkB,cAAc,UAAU,IAAI,EAAE;AAExD,MAAI,QAAQ;AAEZ,SAAO,MAAM;AACT,UAAM,QAAQ,GAAG,gBAAgB,IAAI,YAAY,IAAI,KAAK;AAC1D,UAAM,OAAO,MAAM,UAAU,KAAK;AAElC,QAAI,QAAQ,WAAW;AACnB,kBAAY,EAAE,OAAO,SAAS,KAAK,CAAC;AACpC;AAAA,IACJ;AAEA;AAAA,EACJ;AACJ;AAEA,eAAe,UAAU,OAAgC;AACrD,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC5B;AAAA,IACA,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EAClC;AAEA,SAAO,CAAC,GAAG,IAAI,WAAW,GAAG,CAAC,EACzB,IAAI,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EACxC,KAAK,EAAE;AAChB;","names":[]}

package/dist/pow.worker.d.cts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/pow.worker.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/pow.worker.js

@@ -0,0 +1,22 @@
+// src/pow.worker.ts
+self.onmessage = async (e) => {
+  const { projectPublicKey, challengeHex, targetHex } = e.data;
+  let nonce = 0;
+  while (true) {
+    const input = `${projectPublicKey}:${challengeHex}:${nonce}`;
+    const hash = await sha256Hex(input);
+    if (hash <= targetHex) {
+      postMessage({ nonce, hashHex: hash });
+      return;
+    }
+    nonce++;
+  }
+};
+async function sha256Hex(input) {
+  const buf = await crypto.subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(input)
+  );
+  return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=pow.worker.js.map

package/dist/pow.worker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pow.worker.ts"],"sourcesContent":["self.onmessage = async e => {\n    const { projectPublicKey, challengeHex, targetHex } = e.data;\n\n    let nonce = 0;\n\n    while (true) {\n        const input = `${projectPublicKey}:${challengeHex}:${nonce}`;\n        const hash = await sha256Hex(input);\n\n        if (hash <= targetHex) {\n            postMessage({ nonce, hashHex: hash });\n            return;\n        }\n\n        nonce++;\n    }\n};\n\nasync function sha256Hex(input: string): Promise<string> {\n    const buf = await crypto.subtle.digest(\n        'SHA-256',\n        new TextEncoder().encode(input)\n    );\n\n    return [...new Uint8Array(buf)]\n        .map(b => b.toString(16).padStart(2, '0'))\n        .join('');\n}\n"],"mappings":";AAAA,KAAK,YAAY,OAAM,MAAK;AACxB,QAAM,EAAE,kBAAkB,cAAc,UAAU,IAAI,EAAE;AAExD,MAAI,QAAQ;AAEZ,SAAO,MAAM;AACT,UAAM,QAAQ,GAAG,gBAAgB,IAAI,YAAY,IAAI,KAAK;AAC1D,UAAM,OAAO,MAAM,UAAU,KAAK;AAElC,QAAI,QAAQ,WAAW;AACnB,kBAAY,EAAE,OAAO,SAAS,KAAK,CAAC;AACpC;AAAA,IACJ;AAEA;AAAA,EACJ;AACJ;AAEA,eAAe,UAAU,OAAgC;AACrD,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC5B;AAAA,IACA,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EAClC;AAEA,SAAO,CAAC,GAAG,IAAI,WAAW,GAAG,CAAC,EACzB,IAAI,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EACxC,KAAK,EAAE;AAChB;","names":[]}

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@liveauth-labs/sdk",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "captcha",
+    "proof-of-work",
+    "lightning",
+    "bitcoin",
+    "bot-protection",
+    "auth"
+  ]
+}