@moontra/moonui-pro 2.33.13 → 2.33.15

package/dist/index.mjs

@@ -157,7 +157,7 @@ var init_cli_token_reader = __esm({
           return hash.substring(0, 8);
         } catch (error) {
           console.warn("[MoonUI Pro] Browser user hash generation failed, using fallback");
-          const fallback = `${navigator.userAgent.length}-${screen.width}-${Date.now() % 1e4}`;
+          const fallback = `${navigator.userAgent.length}-${screen.width}-${navigator.language}`;
           return this.fallbackHash(fallback);
         }
       }
@@ -285,30 +285,45 @@ var init_cli_token_reader = __esm({
         }
       }
       /**
-       * Validate device compatibility (CLI vs Browser)
+       * Validate device compatibility (CLI vs Browser) with hybrid security model
        * CLI: platform-hostname-userHash-macHash
        * Browser: platform-hostname-userHash-browserHash
-       * Compatible if first 3 parts match
+       * Security levels:
+       * - STRICT: All parts must match (prevent .env.local copying)
+       * - HYBRID: First 3 parts match, API validation required for hash differences
        */
       validateDeviceCompatibility(tokenDeviceId, currentDeviceId) {
         const tokenParts = tokenDeviceId.split("-");
         const currentParts = currentDeviceId.split("-");
         if (tokenParts.length < 3 || currentParts.length < 3) {
-          return { compatible: false, reason: "Invalid device ID format" };
+          return { compatible: false, requiresAPIValidation: false, reason: "Invalid device ID format" };
         }
         const platformMatch = tokenParts[0] === currentParts[0];
         const hostnameMatch = tokenParts[1] === currentParts[1];
         const userHashMatch = tokenParts[2] === currentParts[2];
+        console.log("[MoonUI Pro] Device ID comparison:", {
+          platform: { token: tokenParts[0], current: currentParts[0], match: platformMatch },
+          hostname: { token: tokenParts[1], current: currentParts[1], match: hostnameMatch },
+          userHash: { token: tokenParts[2], current: currentParts[2], match: userHashMatch },
+          machineHash: { token: tokenParts[3], current: currentParts[3], match: tokenParts[3] === currentParts[3] }
+        });
         if (!platformMatch) {
-          return { compatible: false, reason: "Platform mismatch (different OS)" };
+          return { compatible: false, requiresAPIValidation: false, reason: `Platform mismatch: token=${tokenParts[0]}, current=${currentParts[0]}` };
         }
         if (!hostnameMatch) {
-          return { compatible: false, reason: "Hostname mismatch (different machine)" };
+          return { compatible: false, requiresAPIValidation: false, reason: `Hostname mismatch: token=${tokenParts[1]}, current=${currentParts[1]}` };
         }
         if (!userHashMatch) {
-          return { compatible: false, reason: "User account mismatch" };
+          return { compatible: false, requiresAPIValidation: false, reason: `User hash mismatch: token=${tokenParts[2]}, current=${currentParts[2]}` };
+        }
+        const cliMachineHash = tokenParts[3] || "";
+        const browserMachineHash = currentParts[3] || "";
+        const machineHashMatch = cliMachineHash === browserMachineHash;
+        if (machineHashMatch) {
+          return { compatible: true, requiresAPIValidation: false };
+        } else {
+          return { compatible: true, requiresAPIValidation: true };
         }
-        return { compatible: true };
       }
       /**
        * SHA256 hash function for consistency with CLI
@@ -427,7 +442,12 @@ var init_cli_token_reader = __esm({
             console.log("  \u2022 Contact support for multi-device licensing options");
             return null;
           }
-          console.log("[MoonUI Pro] Device compatibility validated successfully");
+          if (compatibility.requiresAPIValidation) {
+            console.log("[MoonUI Pro] Device hash mismatch detected - performing API validation");
+            console.log("[MoonUI Pro] This is normal for CLI-Browser authentication");
+          } else {
+            console.log("[MoonUI Pro] Perfect device match - skipping API validation");
+          }
         }
         const isValid2 = await this.validateWithAPI(tokenData.token, tokenDeviceId, currentDeviceId);
         if (!isValid2) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@moontra/moonui-pro",
-    "version": "2.33.13",
+    "version": "2.33.15",
     "description": "Premium React components for MoonUI - Advanced UI library with 50+ pro components including performance, interactive, and gesture components",
     "type": "module",
     "main": "dist/index.mjs",