@memberjunction/lists 0.0.1 → 5.36.0

package/dist/deltaToken.js

@@ -0,0 +1,123 @@
+/**
+ * Server-signed token attached to every `ListDelta`. The token is the only
+ * thing `ApplyDelta` will accept as proof that:
+ *   - the preview was produced server-side (not forged by a client),
+ *   - the preview describes a known target + source pairing,
+ *   - the preview is fresh (within `TOKEN_TTL_MS`).
+ *
+ * Token format is `<base64url(payload-json)>.<base64url(hmac-sha256)>`. We
+ * deliberately avoid a JWT dependency — the payload shape is fixed, the
+ * algorithm is fixed, and we own both ends.
+ *
+ * Uses Node's built-in `node:crypto`. This module is server-only — clients
+ * never sign or verify tokens (they receive them inside a `ListDelta` and
+ * hand them back unchanged to `ApplyDelta`).
+ *
+ * Public functions remain async for backwards compatibility with callers
+ * that already `await` them; the underlying node:crypto APIs are synchronous,
+ * which is fine — HMAC on a tiny payload is sub-millisecond.
+ */
+import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
+import { TOKEN_TTL_MS, } from '@memberjunction/lists-base';
+export class DeltaTokenVerificationError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.Code = code;
+    }
+}
+/**
+ * Produce a deterministic fingerprint of a record-ID set. Used as the `ssig`
+ * field on the token payload — server-side `ApplyDelta` recomputes the
+ * fingerprint of the freshly resolved source and compares against the token
+ * to detect `STALE_DELTA`.
+ */
+export async function ComputeSourceSignature(recordIds) {
+    const sorted = [...recordIds].sort();
+    return createHash('sha256').update(sorted.join('\n'), 'utf8').digest('hex');
+}
+/**
+ * Resolve the HMAC secret. Server bootstrap is expected to set
+ * `MJ_LIST_DELTA_SECRET` (or call `SetDeltaTokenSecret` directly for tests).
+ * We refuse to fall back to a default — silent fallback to a known secret
+ * would let a misconfigured server hand out forgeable tokens.
+ */
+let injectedSecret;
+export function SetDeltaTokenSecret(secret) {
+    injectedSecret = secret && secret.length > 0 ? secret : undefined;
+}
+function getSecret() {
+    const envSecret = process?.env?.MJ_LIST_DELTA_SECRET;
+    const secret = injectedSecret ?? envSecret;
+    if (!secret || secret.length === 0) {
+        throw new Error("MJ_LIST_DELTA_SECRET is not configured. Set the env var or call SetDeltaTokenSecret() at server boot.");
+    }
+    return secret;
+}
+// ---------------------------------------------------------------------------
+// Base64URL helpers
+// ---------------------------------------------------------------------------
+function bufferToBase64Url(buf) {
+    return buf.toString('base64').replace(/=+$/, '').replace(/\+/g, '-').replace(/\//g, '_');
+}
+function base64UrlToBuffer(s) {
+    const padded = s + '='.repeat((4 - (s.length % 4)) % 4);
+    const std = padded.replace(/-/g, '+').replace(/_/g, '/');
+    return Buffer.from(std, 'base64');
+}
+function hmacOf(payloadEncoded) {
+    return createHmac('sha256', getSecret()).update(payloadEncoded, 'utf8').digest();
+}
+/**
+ * Sign a payload. Callers should pass `iat: Date.now()` and an `ssig`
+ * computed via `ComputeSourceSignature`. Returns the wire form.
+ */
+export async function SignDeltaToken(payload) {
+    const json = JSON.stringify(payload);
+    const payloadEncoded = bufferToBase64Url(Buffer.from(json, 'utf8'));
+    const sig = bufferToBase64Url(hmacOf(payloadEncoded));
+    return `${payloadEncoded}.${sig}`;
+}
+/**
+ * Verify a token: checks structural shape, HMAC, and TTL. Returns the parsed
+ * payload on success; throws `DeltaTokenVerificationError` otherwise.
+ *
+ * `timingSafeEqual` compares in time independent of the mismatch position,
+ * so a token-fuzzing attacker can't learn the secret from comparison-time
+ * side channels.
+ */
+export async function VerifyDeltaToken(token, now = Date.now()) {
+    if (typeof token !== 'string' || !token.includes('.')) {
+        throw new DeltaTokenVerificationError('INVALID_TOKEN', 'Malformed delta token');
+    }
+    const [payloadEncoded, sigEncoded] = token.split('.', 2);
+    if (!payloadEncoded || !sigEncoded) {
+        throw new DeltaTokenVerificationError('INVALID_TOKEN', 'Malformed delta token');
+    }
+    const providedSig = base64UrlToBuffer(sigEncoded);
+    const expectedSig = hmacOf(payloadEncoded);
+    // Length mismatch would throw from timingSafeEqual — guard explicitly so
+    // the error path stays uniform.
+    // `Uint8Array.from(...)` strips the Buffer→ArrayBufferLike narrowing that
+    // TS 5.9's node:crypto typings reject (they require a concrete ArrayBuffer,
+    // not the SharedArrayBuffer-tolerant union Buffer carries).
+    if (providedSig.length !== expectedSig.length ||
+        !timingSafeEqual(Uint8Array.from(providedSig), Uint8Array.from(expectedSig))) {
+        throw new DeltaTokenVerificationError('INVALID_TOKEN', 'Delta token signature mismatch');
+    }
+    let payload;
+    try {
+        const json = base64UrlToBuffer(payloadEncoded).toString('utf8');
+        payload = JSON.parse(json);
+    }
+    catch {
+        throw new DeltaTokenVerificationError('INVALID_TOKEN', 'Delta token payload not parseable');
+    }
+    if (payload.v !== 1 || typeof payload.iat !== 'number' || typeof payload.ssig !== 'string') {
+        throw new DeltaTokenVerificationError('INVALID_TOKEN', 'Delta token payload shape invalid');
+    }
+    if (now - payload.iat > TOKEN_TTL_MS) {
+        throw new DeltaTokenVerificationError('EXPIRED_TOKEN', 'Delta token expired');
+    }
+    return payload;
+}
+//# sourceMappingURL=deltaToken.js.map

package/dist/deltaToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deltaToken.js","sourceRoot":"","sources":["../src/deltaToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EACL,YAAY,GAGb,MAAM,4BAA4B,CAAC;AAEpC,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAEpD,YAAY,IAAqB,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAA4B;IACvE,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,IAAI,cAAkC,CAAC;AACvC,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,cAAc,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,SAAS,GAAG,OAAO,EAAE,GAAG,EAAE,oBAAoB,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,cAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA0B;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IACtD,OAAO,GAAG,cAAc,IAAI,GAAG,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,yEAAyE;IACzE,gCAAgC;IAChC,0EAA0E;IAC1E,4EAA4E;IAC5E,4DAA4D;IAC5D,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACzC,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,OAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3F,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,2BAA2B,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { ListOperations, type DeltaTarget } from './ListOperations.js';
+export { ListSharing, DEFAULT_INVITATION_TTL_MS } from './ListSharing.js';
+export { AudienceResolver } from './AudienceResolver.js';
+export { ComputeSourceSignature, DeltaTokenVerificationError, SetDeltaTokenSecret, SignDeltaToken, VerifyDeltaToken, } from './deltaToken.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// @memberjunction/lists — server-side runtime. Pure types/interfaces are
+// in @memberjunction/lists-base; per MJ's "no re-exports between packages"
+// rule, this barrel only exports things defined within this package. Consumers
+// that want shared types should import directly from @memberjunction/lists-base.
+export { ListOperations } from './ListOperations.js';
+export { ListSharing, DEFAULT_INVITATION_TTL_MS } from './ListSharing.js';
+export { AudienceResolver } from './AudienceResolver.js';
+export { ComputeSourceSignature, DeltaTokenVerificationError, SetDeltaTokenSecret, SignDeltaToken, VerifyDeltaToken, } from './deltaToken.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AAEjF,OAAO,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC"}

package/package.json

@@ -1,10 +1,35 @@
 {
   "name": "@memberjunction/lists",
-  "version": "0.0.1",
-  "description": "OIDC trusted publishing setup package for @memberjunction/lists",
-  "keywords": [
-    "oidc",
-    "trusted-publishing",
-    "setup"
-  ]
+  "type": "module",
+  "version": "5.36.0",
+  "description": "MemberJunction: Lists — server-side TypeScript core for list materialization, set algebra, delta computation, lineage tracking, refresh modes, and sharing/invitations. Writes to MJ entities (List Detail, Resource Permission, List Invitation, Audit Log) — not safe to import from browser bundles. UI consumers should depend on @memberjunction/lists-base for type/interface sharing and call the server via GraphQL.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "/dist"
+  ],
+  "scripts": {
+    "start": "ts-node-dev src/index.ts",
+    "build": "tsc && tsc-alias -f",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  },
+  "author": "MemberJunction.com",
+  "license": "ISC",
+  "devDependencies": {
+    "ts-node-dev": "^2.0.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  },
+  "dependencies": {
+    "@memberjunction/core": "5.36.0",
+    "@memberjunction/core-entities": "5.36.0",
+    "@memberjunction/global": "5.36.0",
+    "@memberjunction/lists-base": "5.36.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/MemberJunction/MJ"
+  }
 }