@moontra/moonui-pro 2.32.33 → 2.32.35

package/dist/index.mjs

@@ -100,42 +100,26 @@ var init_cli_token_reader = __esm({
         return this.instance;
       }
       /**
-       * Generate device fingerprint compatible with CLI format but enhanced for browser security
-       * Format: platform-hostname-username_hash-machine_hash (enhanced browser version)
+       * Generate TRULY secure browser-specific device fingerprint
+       * COMPLETELY INDEPENDENT from environment variables
+       * Format: browser-hostname-browser_user_hash-machine_hash
+       *
+       * SECURITY: Environment copying CANNOT bypass this!
        */
       async getDeviceFingerprint() {
         try {
-          let platform2 = "unknown";
-          if (typeof window !== "undefined") {
-            const userAgent = navigator.userAgent.toLowerCase();
-            if (userAgent.includes("mac") || userAgent.includes("darwin")) {
-              platform2 = "darwin";
-            } else if (userAgent.includes("win") || userAgent.includes("windows")) {
-              platform2 = "win32";
-            } else if (userAgent.includes("linux") || userAgent.includes("x11")) {
-              platform2 = "linux";
-            }
-          }
-          let hostname = process.env.NEXT_PUBLIC_MOONUI_HOSTNAME || "localhost";
-          if (typeof window !== "undefined" && !process.env.NEXT_PUBLIC_MOONUI_HOSTNAME) {
-            if (window.location.hostname !== "localhost" && window.location.hostname !== "127.0.0.1") {
-              hostname = window.location.hostname;
-            }
-          }
-          const username = process.env.NEXT_PUBLIC_MOONUI_USERNAME || "dev-user";
-          const usernameHash = await this.sha256Hash(username);
-          const machineId = await this.generateBrowserMachineId();
-          const fingerprint = `${platform2}-${hostname}-${usernameHash}-${machineId}`;
-          console.log("[MoonUI Pro] Enhanced browser device fingerprint generated:", {
+          const platform2 = this.detectBrowserPlatform();
+          const hostname = typeof window !== "undefined" ? window.location.hostname : "unknown";
+          const browserUserHash = await this.generateBrowserSpecificUserHash();
+          const browserMachineId = await this.generateBrowserMachineId();
+          const fingerprint = `browser-${hostname}-${browserUserHash}-${browserMachineId}`;
+          console.log("[MoonUI Pro] Environment-independent browser fingerprint generated:", {
             platform: platform2,
             hostname,
-            username: username.substring(0, 3) + "***",
-            // Partial logging for privacy
-            usernameHash,
-            machineId: machineId.substring(0, 4) + "***",
-            // Partial logging for privacy
-            fingerprint: fingerprint.substring(0, 20) + "***"
-            // Partial logging for privacy
+            browserUserHash: browserUserHash.substring(0, 4) + "***",
+            browserMachineId: browserMachineId.substring(0, 4) + "***",
+            fingerprint: fingerprint.substring(0, 30) + "***",
+            security: "environment-independent"
           });
           return fingerprint;
         } catch (error) {
@@ -143,6 +127,56 @@ var init_cli_token_reader = __esm({
           return "browser-fallback-device";
         }
       }
+      /**
+       * Generate browser-specific user hash independent of environment
+       * Uses browser characteristics to create unique user identifier
+       */
+      async generateBrowserSpecificUserHash() {
+        try {
+          const characteristics = [
+            // Browser identity
+            navigator.userAgent,
+            navigator.language,
+            navigator.languages?.join(",") || "",
+            // System characteristics
+            `${screen.width}x${screen.height}x${screen.colorDepth}`,
+            `${window.devicePixelRatio || 1}`,
+            // Hardware info
+            `${navigator.hardwareConcurrency || 0}`,
+            `${navigator.maxTouchPoints || 0}`,
+            // Timezone and locale
+            Intl.DateTimeFormat().resolvedOptions().timeZone,
+            Intl.DateTimeFormat().resolvedOptions().locale,
+            // Browser capabilities
+            typeof window.WebGL2RenderingContext !== "undefined" ? "webgl2" : "webgl1",
+            typeof window.AudioContext !== "undefined" ? "audio" : "no-audio",
+            typeof navigator.serviceWorker !== "undefined" ? "sw" : "no-sw"
+          ];
+          const combined = characteristics.join("|");
+          const hash = await this.sha256Hash(combined);
+          return hash.substring(0, 8);
+        } catch (error) {
+          console.warn("[MoonUI Pro] Browser user hash generation failed, using fallback");
+          const fallback = `${navigator.userAgent.length}-${screen.width}-${Date.now() % 1e4}`;
+          return this.fallbackHash(fallback);
+        }
+      }
+      /**
+       * Detect platform in browser environment (CLI compatible)
+       */
+      detectBrowserPlatform() {
+        if (typeof window === "undefined")
+          return "unknown";
+        const userAgent = navigator.userAgent.toLowerCase();
+        if (userAgent.includes("mac") || userAgent.includes("darwin")) {
+          return "darwin";
+        } else if (userAgent.includes("win") || userAgent.includes("windows")) {
+          return "win32";
+        } else if (userAgent.includes("linux") || userAgent.includes("x11")) {
+          return "linux";
+        }
+        return "unknown";
+      }
       /**
        * Generate browser-specific machine ID using multiple browser characteristics
        * This prevents token sharing between different browsers/machines
@@ -250,6 +284,32 @@ var init_cli_token_reader = __esm({
           return "audio-error";
         }
       }
+      /**
+       * Validate device compatibility (CLI vs Browser)
+       * CLI: platform-hostname-userHash-macHash
+       * Browser: platform-hostname-userHash-browserHash
+       * Compatible if first 3 parts match
+       */
+      validateDeviceCompatibility(tokenDeviceId, currentDeviceId) {
+        const tokenParts = tokenDeviceId.split("-");
+        const currentParts = currentDeviceId.split("-");
+        if (tokenParts.length < 3 || currentParts.length < 3) {
+          return { compatible: false, reason: "Invalid device ID format" };
+        }
+        const platformMatch = tokenParts[0] === currentParts[0];
+        const hostnameMatch = tokenParts[1] === currentParts[1];
+        const userHashMatch = tokenParts[2] === currentParts[2];
+        if (!platformMatch) {
+          return { compatible: false, reason: "Platform mismatch (different OS)" };
+        }
+        if (!hostnameMatch) {
+          return { compatible: false, reason: "Hostname mismatch (different machine)" };
+        }
+        if (!userHashMatch) {
+          return { compatible: false, reason: "User account mismatch" };
+        }
+        return { compatible: true };
+      }
       /**
        * SHA256 hash function for consistency with CLI
        * Returns first 8 characters of SHA256 hex digest
@@ -296,9 +356,9 @@ var init_cli_token_reader = __esm({
         }
       }
       /**
-       * Validate token with backend API
+       * Validate token with backend API using strict dual device validation
        */
-      async validateWithAPI(token, deviceId) {
+      async validateWithAPI(token, tokenDeviceId, browserDeviceId) {
         try {
           const response = await fetch("https://moonui.dev/api/cli/validate-session", {
             method: "POST",
@@ -307,8 +367,13 @@ var init_cli_token_reader = __esm({
               "Content-Type": "application/json"
             },
             body: JSON.stringify({
-              deviceId,
-              timestamp: Date.now()
+              deviceId: tokenDeviceId,
+              // CLI device ID from token
+              browserDeviceId,
+              // Current browser device ID
+              timestamp: Date.now(),
+              validationType: "hybrid-strict"
+              // New validation type
             })
           });
           if (!response.ok) {
@@ -342,23 +407,29 @@ var init_cli_token_reader = __esm({
         }
         const currentDeviceId = await this.getDeviceFingerprint();
         const tokenDeviceId = tokenData.deviceId;
-        console.log("[MoonUI Pro] Device validation check:", {
-          currentDevice: currentDeviceId,
-          tokenDevice: tokenDeviceId,
-          matches: currentDeviceId === tokenDeviceId
+        console.log("[MoonUI Pro] Hybrid device compatibility check:", {
+          currentDevice: currentDeviceId.substring(0, 25) + "***",
+          tokenDevice: tokenDeviceId.substring(0, 25) + "***"
         });
-        if (tokenDeviceId && currentDeviceId !== tokenDeviceId) {
-          console.error("[MoonUI Pro] Device mismatch detected!");
-          console.error("[MoonUI Pro] This token was created for a different device");
-          console.log("[MoonUI Pro] Token device:", tokenDeviceId);
-          console.log("[MoonUI Pro] Current device:", currentDeviceId);
-          console.log("[MoonUI Pro] Solutions:");
-          console.log('  \u2022 Run "moonui login" on this device to create a new session');
-          console.log("  \u2022 Use the correct device where this token was generated");
-          console.log("  \u2022 Contact support for multi-device licensing options");
-          return null;
+        if (tokenDeviceId) {
+          const compatibility = this.validateDeviceCompatibility(tokenDeviceId, currentDeviceId);
+          if (!compatibility.compatible) {
+            console.error("[MoonUI Pro] Device compatibility check failed!");
+            console.error("[MoonUI Pro] Reason:", compatibility.reason);
+            console.error("[MoonUI Pro] This indicates:");
+            console.log("  \u2022 Token was created on a different machine or user account");
+            console.log("  \u2022 .env.local file may have been copied from another device");
+            console.log("  \u2022 Different hostname or user profile detected");
+            console.log("[MoonUI Pro] Solutions:");
+            console.log('  \u2022 Run "moonui login" on this device to create a new session');
+            console.log("  \u2022 Ensure you are using the correct user account");
+            console.log("  \u2022 Verify hostname matches the original login device");
+            console.log("  \u2022 Contact support for multi-device licensing options");
+            return null;
+          }
+          console.log("[MoonUI Pro] Device compatibility validated successfully");
         }
-        const isValid2 = await this.validateWithAPI(tokenData.token, tokenDeviceId || currentDeviceId);
+        const isValid2 = await this.validateWithAPI(tokenData.token, tokenDeviceId, currentDeviceId);
         if (!isValid2) {
           console.error("[MoonUI Pro] Device session validation failed");
           console.log("[MoonUI Pro] This may happen if:");
@@ -366,6 +437,8 @@ var init_cli_token_reader = __esm({
           console.log("  \u2022 Device limit exceeded");
           console.log("  \u2022 Session expired");
           console.log("  \u2022 Device was revoked from dashboard");
+          console.log("  \u2022 Token was copied from another device (strict security)");
+          console.log("  \u2022 Browser fingerprint doesn't match session");
           console.log('  \u2022 Run "moonui login" to create a new session');
           return null;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@moontra/moonui-pro",
-    "version": "2.32.33",
+    "version": "2.32.35",
     "description": "Premium React components for MoonUI - Advanced UI library with 50+ pro components including performance, interactive, and gesture components",
     "type": "module",
     "main": "dist/index.mjs",