@mrtimeey/everybodycodes-data 1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Tim Kruse
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,116 @@
+# @mrtimeey/everybodycodes-data
+
+[![npm version](https://img.shields.io/npm/v/@mrtimeey/everybodycodes-data?color=brightgreen&label=npm)](https://www.npmjs.com/package/@mrtimeey/everybodycodes-data)
+[![npm provenance](https://provenancebadge.vercel.app/npm/@mrtimeey/everybodycodes-data)](https://provenancebadge.vercel.app)
+[![build](https://github.com/mrtimeey/everybodycodes-data/actions/workflows/ci.yml/badge.svg)](https://github.com/mrtimeey/everybodycodes-data/actions/workflows/ci.yml)
+[![release](https://github.com/mrtimeey/everybodycodes-data/actions/workflows/release.yml/badge.svg)](https://github.com/mrtimeey/everybodycodes-data/actions/workflows/release.yml)
+[![license](https://img.shields.io/github/license/mrtimeey/everybodycodes-data?color=blue)](LICENSE)
+
+> 🧩 A lightweight Node.js client for fetching and decrypting **Everybody Codes** inputs automatically.
+
+---
+
+## ✨ Features
+
+- Fetch and decrypt puzzle input data from [everybody.codes](https://everybody.codes/)
+- Fully typed API (TypeScript)
+- Built-in test mocks via `undici.MockAgent`
+- Automatically validated examples and README code blocks in CI
+- API-stable and documented via [API Extractor](https://api-extractor.com/)
+
+---
+
+## 🚀 Installation
+
+```bash
+npm install @mrtimeey/everybodycodes-data
+# or
+pnpm add @mrtimeey/everybodycodes-data
+```
+
+---
+
+## 📘 Usage
+
+```ts
+import { EverybodyCodesClient } from "@mrtimeey/everybodycodes-data";
+
+const client = new EverybodyCodesClient("your-everybody-codes-session-cookie");
+
+// Fetch and decrypt full quest data
+const data = await client.getEventData("2025", 1);
+console.log(data); // { 1: "input text part 1", 2: "...", 3: "..." }
+
+// Fetch only a single part
+const part1 = await client.getEventPartData("2025", 1, 1);
+console.log(part1);
+```
+
+> 💡 Your `session-cookie` must match the `everybody-codes` cookie from your logged-in browser.
+
+---
+
+## 🧩 API Reference
+
+The public API surface is automatically tracked by [API Extractor](https://api-extractor.com/).  
+See [`etc/everybodycodes-data.api.md`](./etc/everybodycodes-data.api.md) for the latest exported types.
+
+The public API is also documented through [Typedoc on GH-Pages](https://mrtimeey.github.io/everybodycodes-data/).
+
+---
+
+## 🧱 Development
+
+### Prerequisites
+
+- Node.js ≥ 18.17
+- npm ≥ 9 or pnpm ≥ 8
+
+### Setup
+
+```bash
+npm ci
+```
+
+### Run all checks
+
+```bash
+npm test
+npm run build
+```
+
+### Lint & Format
+
+```bash
+npm run lint
+npm run format
+```
+
+---
+
+## 🔄 Release Workflow
+
+This repository uses [release-please](https://github.com/google-github-actions/release-please-action):
+
+1. Conventional commits (`fix:`, `feat:`) update changelog and version bump via PR.
+2. Merge the release PR → Git tag is created.
+3. GitHub Actions publish the package to npm with provenance.
+
+---
+
+## 🛡️ Security
+
+See [SECURITY.md](./SECURITY.md) for responsible disclosure guidelines.
+
+---
+
+## 🤝 Contributing
+
+Contributions, issues, and pull requests are welcome!  
+See [CONTRIBUTING.md](./CONTRIBUTING.md) for details.
+
+---
+
+## 📄 License
+
+MIT © [Tim Kruse](https://github.com/mrtimeey)

package/dist/everybodycodes-data.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Client for request against the EverybodyCodes API.
+ *
+ * @public
+ */
+export declare class EverybodyCodesClient {
+    private readonly cookie;
+    private seed?;
+    /**
+     * Creates a new EverybodyCodesClient.
+     * @param sessionCookie - Value of the `everybody-codes` cookie.
+     */
+    constructor(sessionCookie: string);
+    private makeUrl;
+    private cookieHeader;
+    private getSeed;
+    private getEncryptedInputs;
+    private getDataInternal;
+    private getKeys;
+    /**
+     * Fetches data for a specific event and quest.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @returns Data for the event and quest
+     */
+    getEventData(event: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific story and quest.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @returns Data for the story and quest
+     */
+    getStoryData(story: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific event, quest, and part.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the event, quest, and part
+     */
+    getEventPartData(event: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+    /**
+     * Fetches data for a specific story, quest, and part.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the story, quest, and part
+     */
+    getStoryPartData(story: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+}
+
+/**
+ * Part number for quests.
+ * @public
+ */
+export declare type PartNumber = 1 | 2 | 3;
+
+export { }

package/dist/index.cjs

@@ -0,0 +1,158 @@
+'use strict';
+
+var crypto = require('crypto');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+
+// src/helper/http.ts
+async function http(url, init) {
+  const res = await fetch(url, {
+    ...init,
+    headers: {
+      accept: "application/json",
+      "user-agent": "everybodycodes-data/0.1 (+github.com/you/repo)",
+      ...init?.headers ?? {}
+    }
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(
+      `HTTP ${res.status} ${res.statusText} :: ${url} :: ${body}`
+    );
+  }
+  const ct = res.headers.get("content-type") || "";
+  if (ct.includes("application/json")) {
+    return await res.json();
+  }
+  return await res.text();
+}
+function aesDecryptHexWithKey(key, hexCipher) {
+  const keyBytes = Buffer.from(key, "utf8");
+  const iv = Buffer.from(key.substring(0, 16), "utf8");
+  const cipherBytes = Buffer.from(hexCipher, "hex");
+  const algo = keyBytes.length === 16 ? "aes-128-cbc" : keyBytes.length === 24 ? "aes-192-cbc" : keyBytes.length === 32 ? "aes-256-cbc" : "aes-256-cbc";
+  const dec = crypto__default.default.createDecipheriv(algo, keyBytes, iv);
+  const out = Buffer.concat([dec.update(cipherBytes), dec.final()]);
+  return out.toString("utf8");
+}
+
+// src/client.ts
+var API_BASE = "https://everybody.codes/api";
+var CDN_BASE = "https://everybody-codes.b-cdn.net/assets";
+var EverybodyCodesClient = class {
+  cookie;
+  seed;
+  /**
+   * Creates a new EverybodyCodesClient.
+   * @param sessionCookie - Value of the `everybody-codes` cookie.
+   */
+  constructor(sessionCookie) {
+    if (!sessionCookie || !sessionCookie.trim()) {
+      throw new Error("EverybodyCodesClient: sessionCookie is required.");
+    }
+    this.cookie = sessionCookie.trim();
+  }
+  makeUrl(type, ...parts) {
+    return [
+      API_BASE,
+      type,
+      ...parts.map((p) => encodeURIComponent(String(p)))
+    ].join("/");
+  }
+  cookieHeader() {
+    return { Cookie: `everybody-codes=${this.cookie}` };
+  }
+  async getSeed() {
+    if (this.seed) return this.seed;
+    const url = `${API_BASE}/user/me`;
+    const data = await http(url, {
+      headers: this.cookieHeader()
+    });
+    const raw = data?.seed;
+    const num = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+    if (!Number.isFinite(num) || num <= 0) {
+      throw new Error(
+        "Invalid seed value (0). This usually means your session has expired or the 'everybody-codes' cookie is invalid. Log in again at https://everybody.codes, copy the cookie value exactly (no spaces or quotes), and try again."
+      );
+    }
+    this.seed = String(num);
+    return this.seed;
+  }
+  async getEncryptedInputs(event, quest, seed) {
+    const url = `${CDN_BASE}/${encodeURIComponent(String(event))}/${encodeURIComponent(
+      String(quest)
+    )}/input/${encodeURIComponent(seed)}.json`;
+    return await http(url, {
+      headers: this.cookieHeader()
+    });
+  }
+  async getDataInternal(type, event, quest) {
+    const seed = await this.getSeed();
+    const encrypted = await this.getEncryptedInputs(event, quest, seed);
+    const keys = await this.getKeys(type, event, quest);
+    const out = {};
+    ["1", "2", "3"].forEach((p) => {
+      const hex = encrypted[p];
+      const key = keys[p];
+      if (hex && key)
+        out[Number(p)] = aesDecryptHexWithKey(key, hex);
+    });
+    return out;
+  }
+  async getKeys(type, event, quest) {
+    const url = this.makeUrl(type, event, "quest", quest);
+    const data = await http(url, { headers: this.cookieHeader() });
+    const out = {};
+    for (const p of ["1", "2", "3"]) {
+      const flat = data?.[`key${p}`];
+      if (flat) out[p] = String(flat);
+    }
+    return out;
+  }
+  /**
+   * Fetches data for a specific event and quest.
+   * @param event - Event ID
+   * @param quest - Quest ID
+   * @returns Data for the event and quest
+   */
+  async getEventData(event, quest) {
+    return this.getDataInternal("event" /* Event */, event, quest);
+  }
+  /**
+   * Fetches data for a specific story and quest.
+   * @param story - Story ID
+   * @param quest - Quest ID
+   * @returns Data for the story and quest
+   */
+  async getStoryData(story, quest) {
+    return this.getDataInternal("story" /* Story */, story, quest);
+  }
+  /**
+   * Fetches data for a specific event, quest, and part.
+   * @param event - Event ID
+   * @param quest - Quest ID
+   * @param part - Part number (1, 2, or 3)
+   * @returns Data for the event, quest, and part
+   */
+  async getEventPartData(event, quest, part) {
+    const data = await this.getDataInternal("event" /* Event */, event, quest);
+    return data[part];
+  }
+  /**
+   * Fetches data for a specific story, quest, and part.
+   * @param story - Story ID
+   * @param quest - Quest ID
+   * @param part - Part number (1, 2, or 3)
+   * @returns Data for the story, quest, and part
+   */
+  async getStoryPartData(story, quest, part) {
+    const data = await this.getDataInternal("story" /* Story */, story, quest);
+    return data[part];
+  }
+};
+
+exports.EverybodyCodesClient = EverybodyCodesClient;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/helper/http.ts","../src/crypto.ts","../src/client.ts"],"names":["crypto"],"mappings":";;;;;;;;;AAAA,eAAsB,IAAA,CACpB,KACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAC3B,GAAG,IAAA;AAAA,IACH,OAAA,EAAS;AAAA,MACP,MAAA,EAAQ,kBAAA;AAAA,MACR,YAAA,EAAc,gDAAA;AAAA,MACd,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC;AACxB,GACD,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,KAAA,EAAQ,IAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA,IAAA,EAAO,GAAG,CAAA,IAAA,EAAO,IAAI,CAAA;AAAA,KAC3D;AAAA,EACF;AACA,EAAA,MAAM,EAAA,GAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,EAAA;AAC9C,EAAA,IAAI,EAAA,CAAG,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACnC,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AACzB;ACrBO,SAAS,oBAAA,CAAqB,KAAa,SAAA,EAA2B;AAC3E,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,OAAO,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG,EAAE,GAAG,MAAM,CAAA;AACnD,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AAEhD,EAAA,MAAM,IAAA,GACJ,QAAA,CAAS,MAAA,KAAW,EAAA,GAChB,aAAA,GACA,QAAA,CAAS,MAAA,KAAW,EAAA,GAClB,aAAA,GACA,QAAA,CAAS,MAAA,KAAW,EAAA,GAClB,aAAA,GACA,aAAA;AAEV,EAAA,MAAM,GAAA,GAAMA,uBAAA,CAAO,gBAAA,CAAiB,IAAA,EAAM,UAAU,EAAE,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,CAAC,GAAA,CAAI,MAAA,CAAO,WAAW,CAAA,EAAG,GAAA,CAAI,KAAA,EAAO,CAAC,CAAA;AAChE,EAAA,OAAO,GAAA,CAAI,SAAS,MAAM,CAAA;AAC5B;;;AChBA,IAAM,QAAA,GAAW,6BAAA;AACjB,IAAM,QAAA,GAAW,0CAAA;AAkBV,IAAM,uBAAN,MAA2B;AAAA,EACf,MAAA;AAAA,EACT,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMR,YAAY,aAAA,EAAuB;AACjC,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,aAAA,CAAc,MAAK,EAAG;AAC3C,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,cAAc,IAAA,EAAK;AAAA,EACnC;AAAA,EAEQ,OAAA,CAAQ,SAAwB,KAAA,EAAoC;AAC1E,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,IAAA;AAAA,MACA,GAAG,MAAM,GAAA,CAAI,CAAC,MAAM,kBAAA,CAAmB,MAAA,CAAO,CAAC,CAAC,CAAC;AAAA,KACnD,CAAE,KAAK,GAAG,CAAA;AAAA,EACZ;AAAA,EAEQ,YAAA,GAA4B;AAClC,IAAA,OAAO,EAAE,MAAA,EAAQ,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA,EAAG;AAAA,EACpD;AAAA,EAEA,MAAc,OAAA,GAA2B;AACvC,IAAA,IAAI,IAAA,CAAK,IAAA,EAAM,OAAO,IAAA,CAAK,IAAA;AAE3B,IAAA,MAAM,GAAA,GAAM,GAAG,QAAQ,CAAA,QAAA,CAAA;AACvB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAiC,GAAA,EAAK;AAAA,MACvD,OAAA,EAAS,KAAK,YAAA;AAAa,KAC5B,CAAA;AAED,IAAA,MAAM,MAAM,IAAA,EAAM,IAAA;AAClB,IAAA,MAAM,GAAA,GACJ,OAAO,GAAA,KAAQ,QAAA,GACX,MACA,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,GACxC,MAAA,CAAO,GAAG,CAAA,GACV,GAAA;AAER,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,OAAO,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OAEF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,GAAO,OAAO,GAAG,CAAA;AACtB,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EAEA,MAAc,kBAAA,CACZ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,GAAA,GAAM,GAAG,QAAQ,CAAA,CAAA,EAAI,mBAAmB,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA,CAAA,EAAI,kBAAA;AAAA,MAC9D,OAAO,KAAK;AAAA,KACb,CAAA,OAAA,EAAU,kBAAA,CAAmB,IAAI,CAAC,CAAA,KAAA,CAAA;AACnC,IAAA,OAAO,MAAM,KAAsC,GAAA,EAAK;AAAA,MACtD,OAAA,EAAS,KAAK,YAAA;AAAa,KAC5B,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,eAAA,CACZ,IAAA,EACA,KAAA,EACA,KAAA,EACA;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,YAAY,MAAM,IAAA,CAAK,kBAAA,CAAmB,KAAA,EAAO,OAAO,IAAI,CAAA;AAClE,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,OAAO,KAAK,CAAA;AAElD,IAAA,MAAM,MAA0C,EAAC;AACjD,IAAC,CAAC,GAAA,EAAK,GAAA,EAAK,GAAG,CAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,KAAM;AACxC,MAAA,MAAM,GAAA,GAAM,UAAU,CAAC,CAAA;AACvB,MAAA,MAAM,GAAA,GAAM,KAAK,CAAC,CAAA;AAClB,MAAA,IAAI,GAAA,IAAO,GAAA;AACT,QAAA,GAAA,CAAI,OAAO,CAAC,CAAc,CAAA,GAAI,oBAAA,CAAqB,KAAK,GAAG,CAAA;AAAA,IAC/D,CAAC,CAAA;AACD,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,MAAc,OAAA,CACZ,IAAA,EACA,KAAA,EACA,KAAA,EACA;AACA,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,KAAA,EAAO,SAAS,KAAK,CAAA;AAQpD,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAkB,GAAA,EAAK,EAAE,OAAA,EAAS,IAAA,CAAK,YAAA,EAAa,EAAG,CAAA;AAE1E,IAAA,MAAM,MAAgD,EAAC;AACvD,IAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAA,EAAK,GAAA,EAAK,GAAG,CAAA,EAAY;AACxC,MAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,GAAA,EAAM,CAAC,CAAA,CAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM,GAAA,CAAI,CAAC,CAAA,GAAI,OAAO,IAAI,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,KAAA,EAAwB,KAAA,EAAwB;AACjE,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,KAAA,EAAO,KAAK,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,KAAA,EAAwB,KAAA,EAAwB;AACjE,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,KAAA,EAAO,KAAK,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAA,CACJ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,OAAO,KAAK,CAAA;AACzE,IAAA,OAAO,KAAK,IAAI,CAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAA,CACJ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,OAAO,KAAK,CAAA;AACzE,IAAA,OAAO,KAAK,IAAI,CAAA;AAAA,EAClB;AACF","file":"index.cjs","sourcesContent":["export async function http<T = unknown>(\n  url: string,\n  init?: RequestInit,\n): Promise<T> {\n  const res = await fetch(url, {\n    ...init,\n    headers: {\n      accept: \"application/json\",\n      \"user-agent\": \"everybodycodes-data/0.1 (+github.com/you/repo)\",\n      ...(init?.headers ?? {}),\n    },\n  });\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new Error(\n      `HTTP ${res.status} ${res.statusText} :: ${url} :: ${body}`,\n    );\n  }\n  const ct = res.headers.get(\"content-type\") || \"\";\n  if (ct.includes(\"application/json\")) {\n    return (await res.json()) as T;\n  }\n  return (await res.text()) as unknown as T;\n}\n","import crypto from \"node:crypto\";\n\nexport function aesDecryptHexWithKey(key: string, hexCipher: string): string {\n  const keyBytes = Buffer.from(key, \"utf8\");\n  const iv = Buffer.from(key.substring(0, 16), \"utf8\");\n  const cipherBytes = Buffer.from(hexCipher, \"hex\");\n\n  const algo =\n    keyBytes.length === 16\n      ? \"aes-128-cbc\"\n      : keyBytes.length === 24\n        ? \"aes-192-cbc\"\n        : keyBytes.length === 32\n          ? \"aes-256-cbc\"\n          : \"aes-256-cbc\";\n\n  const dec = crypto.createDecipheriv(algo, keyBytes, iv);\n  const out = Buffer.concat([dec.update(cipherBytes), dec.final()]);\n  return out.toString(\"utf8\");\n}\n","import { http } from \"./helper/http\";\nimport { aesDecryptHexWithKey } from \"./crypto.js\";\n\nconst API_BASE = \"https://everybody.codes/api\";\nconst CDN_BASE = \"https://everybody-codes.b-cdn.net/assets\";\n\nenum ChallengeType {\n  Event = \"event\",\n  Story = \"story\",\n}\n\n/**\n * Part number for quests.\n * @public\n */\nexport type PartNumber = 1 | 2 | 3;\n\n/**\n * Client for request against the EverybodyCodes API.\n *\n * @public\n */\nexport class EverybodyCodesClient {\n  private readonly cookie: string;\n  private seed?: string;\n\n  /**\n   * Creates a new EverybodyCodesClient.\n   * @param sessionCookie - Value of the `everybody-codes` cookie.\n   */\n  constructor(sessionCookie: string) {\n    if (!sessionCookie || !sessionCookie.trim()) {\n      throw new Error(\"EverybodyCodesClient: sessionCookie is required.\");\n    }\n    this.cookie = sessionCookie.trim();\n  }\n\n  private makeUrl(type: ChallengeType, ...parts: (string | number)[]): string {\n    return [\n      API_BASE,\n      type,\n      ...parts.map((p) => encodeURIComponent(String(p))),\n    ].join(\"/\");\n  }\n\n  private cookieHeader(): HeadersInit {\n    return { Cookie: `everybody-codes=${this.cookie}` };\n  }\n\n  private async getSeed(): Promise<string> {\n    if (this.seed) return this.seed;\n\n    const url = `${API_BASE}/user/me`;\n    const data = await http<{ seed?: number | string }>(url, {\n      headers: this.cookieHeader(),\n    });\n\n    const raw = data?.seed;\n    const num =\n      typeof raw === \"number\"\n        ? raw\n        : typeof raw === \"string\" && raw.trim() !== \"\"\n          ? Number(raw)\n          : NaN;\n\n    if (!Number.isFinite(num) || num <= 0) {\n      throw new Error(\n        \"Invalid seed value (0). This usually means your session has expired or the 'everybody-codes' cookie is invalid. \" +\n          \"Log in again at https://everybody.codes, copy the cookie value exactly (no spaces or quotes), and try again.\",\n      );\n    }\n\n    this.seed = String(num);\n    return this.seed;\n  }\n\n  private async getEncryptedInputs(\n    event: string | number,\n    quest: string | number,\n    seed: string,\n  ) {\n    const url = `${CDN_BASE}/${encodeURIComponent(String(event))}/${encodeURIComponent(\n      String(quest),\n    )}/input/${encodeURIComponent(seed)}.json`;\n    return await http<Record<\"1\" | \"2\" | \"3\", string>>(url, {\n      headers: this.cookieHeader(),\n    });\n  }\n\n  private async getDataInternal(\n    type: ChallengeType,\n    event: string | number,\n    quest: string | number,\n  ) {\n    const seed = await this.getSeed();\n    const encrypted = await this.getEncryptedInputs(event, quest, seed);\n    const keys = await this.getKeys(type, event, quest);\n\n    const out: Partial<Record<1 | 2 | 3, string>> = {};\n    ([\"1\", \"2\", \"3\"] as const).forEach((p) => {\n      const hex = encrypted[p];\n      const key = keys[p];\n      if (hex && key)\n        out[Number(p) as 1 | 2 | 3] = aesDecryptHexWithKey(key, hex);\n    });\n    return out;\n  }\n\n  private async getKeys(\n    type: ChallengeType,\n    event: string | number,\n    quest: string | number,\n  ) {\n    const url = this.makeUrl(type, event, \"quest\", quest);\n\n    type KeyResponse = {\n      key1?: string;\n      key2?: string;\n      key3?: string;\n    };\n\n    const data = await http<KeyResponse>(url, { headers: this.cookieHeader() });\n\n    const out: Partial<Record<\"1\" | \"2\" | \"3\", string>> = {};\n    for (const p of [\"1\", \"2\", \"3\"] as const) {\n      const flat = data?.[`key${p}`];\n      if (flat) out[p] = String(flat);\n    }\n    return out;\n  }\n\n  /**\n   * Fetches data for a specific event and quest.\n   * @param event - Event ID\n   * @param quest - Quest ID\n   * @returns Data for the event and quest\n   */\n  async getEventData(event: string | number, quest: string | number) {\n    return this.getDataInternal(ChallengeType.Event, event, quest);\n  }\n\n  /**\n   * Fetches data for a specific story and quest.\n   * @param story - Story ID\n   * @param quest - Quest ID\n   * @returns Data for the story and quest\n   */\n  async getStoryData(story: string | number, quest: string | number) {\n    return this.getDataInternal(ChallengeType.Story, story, quest);\n  }\n\n  /**\n   * Fetches data for a specific event, quest, and part.\n   * @param event - Event ID\n   * @param quest - Quest ID\n   * @param part - Part number (1, 2, or 3)\n   * @returns Data for the event, quest, and part\n   */\n  async getEventPartData(\n    event: string | number,\n    quest: string | number,\n    part: PartNumber,\n  ) {\n    const data = await this.getDataInternal(ChallengeType.Event, event, quest);\n    return data[part];\n  }\n\n  /**\n   * Fetches data for a specific story, quest, and part.\n   * @param story - Story ID\n   * @param quest - Quest ID\n   * @param part - Part number (1, 2, or 3)\n   * @returns Data for the story, quest, and part\n   */\n  async getStoryPartData(\n    story: string | number,\n    quest: string | number,\n    part: PartNumber,\n  ) {\n    const data = await this.getDataInternal(ChallengeType.Story, story, quest);\n    return data[part];\n  }\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,57 @@
+/**
+ * Part number for quests.
+ * @public
+ */
+type PartNumber = 1 | 2 | 3;
+/**
+ * Client for request against the EverybodyCodes API.
+ *
+ * @public
+ */
+declare class EverybodyCodesClient {
+    private readonly cookie;
+    private seed?;
+    /**
+     * Creates a new EverybodyCodesClient.
+     * @param sessionCookie - Value of the `everybody-codes` cookie.
+     */
+    constructor(sessionCookie: string);
+    private makeUrl;
+    private cookieHeader;
+    private getSeed;
+    private getEncryptedInputs;
+    private getDataInternal;
+    private getKeys;
+    /**
+     * Fetches data for a specific event and quest.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @returns Data for the event and quest
+     */
+    getEventData(event: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific story and quest.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @returns Data for the story and quest
+     */
+    getStoryData(story: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific event, quest, and part.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the event, quest, and part
+     */
+    getEventPartData(event: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+    /**
+     * Fetches data for a specific story, quest, and part.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the story, quest, and part
+     */
+    getStoryPartData(story: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+}
+
+export { EverybodyCodesClient, type PartNumber };

package/dist/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Part number for quests.
+ * @public
+ */
+type PartNumber = 1 | 2 | 3;
+/**
+ * Client for request against the EverybodyCodes API.
+ *
+ * @public
+ */
+declare class EverybodyCodesClient {
+    private readonly cookie;
+    private seed?;
+    /**
+     * Creates a new EverybodyCodesClient.
+     * @param sessionCookie - Value of the `everybody-codes` cookie.
+     */
+    constructor(sessionCookie: string);
+    private makeUrl;
+    private cookieHeader;
+    private getSeed;
+    private getEncryptedInputs;
+    private getDataInternal;
+    private getKeys;
+    /**
+     * Fetches data for a specific event and quest.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @returns Data for the event and quest
+     */
+    getEventData(event: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific story and quest.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @returns Data for the story and quest
+     */
+    getStoryData(story: string | number, quest: string | number): Promise<Partial<Record<2 | 1 | 3, string>>>;
+    /**
+     * Fetches data for a specific event, quest, and part.
+     * @param event - Event ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the event, quest, and part
+     */
+    getEventPartData(event: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+    /**
+     * Fetches data for a specific story, quest, and part.
+     * @param story - Story ID
+     * @param quest - Quest ID
+     * @param part - Part number (1, 2, or 3)
+     * @returns Data for the story, quest, and part
+     */
+    getStoryPartData(story: string | number, quest: string | number, part: PartNumber): Promise<string | undefined>;
+}
+
+export { EverybodyCodesClient, type PartNumber };

package/dist/index.js

@@ -0,0 +1,152 @@
+import crypto from 'crypto';
+
+// src/helper/http.ts
+async function http(url, init) {
+  const res = await fetch(url, {
+    ...init,
+    headers: {
+      accept: "application/json",
+      "user-agent": "everybodycodes-data/0.1 (+github.com/you/repo)",
+      ...init?.headers ?? {}
+    }
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(
+      `HTTP ${res.status} ${res.statusText} :: ${url} :: ${body}`
+    );
+  }
+  const ct = res.headers.get("content-type") || "";
+  if (ct.includes("application/json")) {
+    return await res.json();
+  }
+  return await res.text();
+}
+function aesDecryptHexWithKey(key, hexCipher) {
+  const keyBytes = Buffer.from(key, "utf8");
+  const iv = Buffer.from(key.substring(0, 16), "utf8");
+  const cipherBytes = Buffer.from(hexCipher, "hex");
+  const algo = keyBytes.length === 16 ? "aes-128-cbc" : keyBytes.length === 24 ? "aes-192-cbc" : keyBytes.length === 32 ? "aes-256-cbc" : "aes-256-cbc";
+  const dec = crypto.createDecipheriv(algo, keyBytes, iv);
+  const out = Buffer.concat([dec.update(cipherBytes), dec.final()]);
+  return out.toString("utf8");
+}
+
+// src/client.ts
+var API_BASE = "https://everybody.codes/api";
+var CDN_BASE = "https://everybody-codes.b-cdn.net/assets";
+var EverybodyCodesClient = class {
+  cookie;
+  seed;
+  /**
+   * Creates a new EverybodyCodesClient.
+   * @param sessionCookie - Value of the `everybody-codes` cookie.
+   */
+  constructor(sessionCookie) {
+    if (!sessionCookie || !sessionCookie.trim()) {
+      throw new Error("EverybodyCodesClient: sessionCookie is required.");
+    }
+    this.cookie = sessionCookie.trim();
+  }
+  makeUrl(type, ...parts) {
+    return [
+      API_BASE,
+      type,
+      ...parts.map((p) => encodeURIComponent(String(p)))
+    ].join("/");
+  }
+  cookieHeader() {
+    return { Cookie: `everybody-codes=${this.cookie}` };
+  }
+  async getSeed() {
+    if (this.seed) return this.seed;
+    const url = `${API_BASE}/user/me`;
+    const data = await http(url, {
+      headers: this.cookieHeader()
+    });
+    const raw = data?.seed;
+    const num = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+    if (!Number.isFinite(num) || num <= 0) {
+      throw new Error(
+        "Invalid seed value (0). This usually means your session has expired or the 'everybody-codes' cookie is invalid. Log in again at https://everybody.codes, copy the cookie value exactly (no spaces or quotes), and try again."
+      );
+    }
+    this.seed = String(num);
+    return this.seed;
+  }
+  async getEncryptedInputs(event, quest, seed) {
+    const url = `${CDN_BASE}/${encodeURIComponent(String(event))}/${encodeURIComponent(
+      String(quest)
+    )}/input/${encodeURIComponent(seed)}.json`;
+    return await http(url, {
+      headers: this.cookieHeader()
+    });
+  }
+  async getDataInternal(type, event, quest) {
+    const seed = await this.getSeed();
+    const encrypted = await this.getEncryptedInputs(event, quest, seed);
+    const keys = await this.getKeys(type, event, quest);
+    const out = {};
+    ["1", "2", "3"].forEach((p) => {
+      const hex = encrypted[p];
+      const key = keys[p];
+      if (hex && key)
+        out[Number(p)] = aesDecryptHexWithKey(key, hex);
+    });
+    return out;
+  }
+  async getKeys(type, event, quest) {
+    const url = this.makeUrl(type, event, "quest", quest);
+    const data = await http(url, { headers: this.cookieHeader() });
+    const out = {};
+    for (const p of ["1", "2", "3"]) {
+      const flat = data?.[`key${p}`];
+      if (flat) out[p] = String(flat);
+    }
+    return out;
+  }
+  /**
+   * Fetches data for a specific event and quest.
+   * @param event - Event ID
+   * @param quest - Quest ID
+   * @returns Data for the event and quest
+   */
+  async getEventData(event, quest) {
+    return this.getDataInternal("event" /* Event */, event, quest);
+  }
+  /**
+   * Fetches data for a specific story and quest.
+   * @param story - Story ID
+   * @param quest - Quest ID
+   * @returns Data for the story and quest
+   */
+  async getStoryData(story, quest) {
+    return this.getDataInternal("story" /* Story */, story, quest);
+  }
+  /**
+   * Fetches data for a specific event, quest, and part.
+   * @param event - Event ID
+   * @param quest - Quest ID
+   * @param part - Part number (1, 2, or 3)
+   * @returns Data for the event, quest, and part
+   */
+  async getEventPartData(event, quest, part) {
+    const data = await this.getDataInternal("event" /* Event */, event, quest);
+    return data[part];
+  }
+  /**
+   * Fetches data for a specific story, quest, and part.
+   * @param story - Story ID
+   * @param quest - Quest ID
+   * @param part - Part number (1, 2, or 3)
+   * @returns Data for the story, quest, and part
+   */
+  async getStoryPartData(story, quest, part) {
+    const data = await this.getDataInternal("story" /* Story */, story, quest);
+    return data[part];
+  }
+};
+
+export { EverybodyCodesClient };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/helper/http.ts","../src/crypto.ts","../src/client.ts"],"names":[],"mappings":";;;AAAA,eAAsB,IAAA,CACpB,KACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAC3B,GAAG,IAAA;AAAA,IACH,OAAA,EAAS;AAAA,MACP,MAAA,EAAQ,kBAAA;AAAA,MACR,YAAA,EAAc,gDAAA;AAAA,MACd,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC;AACxB,GACD,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,KAAA,EAAQ,IAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA,IAAA,EAAO,GAAG,CAAA,IAAA,EAAO,IAAI,CAAA;AAAA,KAC3D;AAAA,EACF;AACA,EAAA,MAAM,EAAA,GAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,EAAA;AAC9C,EAAA,IAAI,EAAA,CAAG,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACnC,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB;AACA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AACzB;ACrBO,SAAS,oBAAA,CAAqB,KAAa,SAAA,EAA2B;AAC3E,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,OAAO,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG,EAAE,GAAG,MAAM,CAAA;AACnD,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AAEhD,EAAA,MAAM,IAAA,GACJ,QAAA,CAAS,MAAA,KAAW,EAAA,GAChB,aAAA,GACA,QAAA,CAAS,MAAA,KAAW,EAAA,GAClB,aAAA,GACA,QAAA,CAAS,MAAA,KAAW,EAAA,GAClB,aAAA,GACA,aAAA;AAEV,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,gBAAA,CAAiB,IAAA,EAAM,UAAU,EAAE,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,CAAC,GAAA,CAAI,MAAA,CAAO,WAAW,CAAA,EAAG,GAAA,CAAI,KAAA,EAAO,CAAC,CAAA;AAChE,EAAA,OAAO,GAAA,CAAI,SAAS,MAAM,CAAA;AAC5B;;;AChBA,IAAM,QAAA,GAAW,6BAAA;AACjB,IAAM,QAAA,GAAW,0CAAA;AAkBV,IAAM,uBAAN,MAA2B;AAAA,EACf,MAAA;AAAA,EACT,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMR,YAAY,aAAA,EAAuB;AACjC,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,aAAA,CAAc,MAAK,EAAG;AAC3C,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,cAAc,IAAA,EAAK;AAAA,EACnC;AAAA,EAEQ,OAAA,CAAQ,SAAwB,KAAA,EAAoC;AAC1E,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,IAAA;AAAA,MACA,GAAG,MAAM,GAAA,CAAI,CAAC,MAAM,kBAAA,CAAmB,MAAA,CAAO,CAAC,CAAC,CAAC;AAAA,KACnD,CAAE,KAAK,GAAG,CAAA;AAAA,EACZ;AAAA,EAEQ,YAAA,GAA4B;AAClC,IAAA,OAAO,EAAE,MAAA,EAAQ,CAAA,gBAAA,EAAmB,IAAA,CAAK,MAAM,CAAA,CAAA,EAAG;AAAA,EACpD;AAAA,EAEA,MAAc,OAAA,GAA2B;AACvC,IAAA,IAAI,IAAA,CAAK,IAAA,EAAM,OAAO,IAAA,CAAK,IAAA;AAE3B,IAAA,MAAM,GAAA,GAAM,GAAG,QAAQ,CAAA,QAAA,CAAA;AACvB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAiC,GAAA,EAAK;AAAA,MACvD,OAAA,EAAS,KAAK,YAAA;AAAa,KAC5B,CAAA;AAED,IAAA,MAAM,MAAM,IAAA,EAAM,IAAA;AAClB,IAAA,MAAM,GAAA,GACJ,OAAO,GAAA,KAAQ,QAAA,GACX,MACA,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,IAAA,EAAK,KAAM,EAAA,GACxC,MAAA,CAAO,GAAG,CAAA,GACV,GAAA;AAER,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,OAAO,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OAEF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,GAAO,OAAO,GAAG,CAAA;AACtB,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EAEA,MAAc,kBAAA,CACZ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,GAAA,GAAM,GAAG,QAAQ,CAAA,CAAA,EAAI,mBAAmB,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA,CAAA,EAAI,kBAAA;AAAA,MAC9D,OAAO,KAAK;AAAA,KACb,CAAA,OAAA,EAAU,kBAAA,CAAmB,IAAI,CAAC,CAAA,KAAA,CAAA;AACnC,IAAA,OAAO,MAAM,KAAsC,GAAA,EAAK;AAAA,MACtD,OAAA,EAAS,KAAK,YAAA;AAAa,KAC5B,CAAA;AAAA,EACH;AAAA,EAEA,MAAc,eAAA,CACZ,IAAA,EACA,KAAA,EACA,KAAA,EACA;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,YAAY,MAAM,IAAA,CAAK,kBAAA,CAAmB,KAAA,EAAO,OAAO,IAAI,CAAA;AAClE,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,OAAO,KAAK,CAAA;AAElD,IAAA,MAAM,MAA0C,EAAC;AACjD,IAAC,CAAC,GAAA,EAAK,GAAA,EAAK,GAAG,CAAA,CAAY,OAAA,CAAQ,CAAC,CAAA,KAAM;AACxC,MAAA,MAAM,GAAA,GAAM,UAAU,CAAC,CAAA;AACvB,MAAA,MAAM,GAAA,GAAM,KAAK,CAAC,CAAA;AAClB,MAAA,IAAI,GAAA,IAAO,GAAA;AACT,QAAA,GAAA,CAAI,OAAO,CAAC,CAAc,CAAA,GAAI,oBAAA,CAAqB,KAAK,GAAG,CAAA;AAAA,IAC/D,CAAC,CAAA;AACD,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,MAAc,OAAA,CACZ,IAAA,EACA,KAAA,EACA,KAAA,EACA;AACA,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,KAAA,EAAO,SAAS,KAAK,CAAA;AAQpD,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAkB,GAAA,EAAK,EAAE,OAAA,EAAS,IAAA,CAAK,YAAA,EAAa,EAAG,CAAA;AAE1E,IAAA,MAAM,MAAgD,EAAC;AACvD,IAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAA,EAAK,GAAA,EAAK,GAAG,CAAA,EAAY;AACxC,MAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,GAAA,EAAM,CAAC,CAAA,CAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM,GAAA,CAAI,CAAC,CAAA,GAAI,OAAO,IAAI,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,KAAA,EAAwB,KAAA,EAAwB;AACjE,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,KAAA,EAAO,KAAK,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,KAAA,EAAwB,KAAA,EAAwB;AACjE,IAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,KAAA,EAAO,KAAK,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAA,CACJ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,OAAO,KAAK,CAAA;AACzE,IAAA,OAAO,KAAK,IAAI,CAAA;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAA,CACJ,KAAA,EACA,KAAA,EACA,IAAA,EACA;AACA,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,OAAA,cAAqB,OAAO,KAAK,CAAA;AACzE,IAAA,OAAO,KAAK,IAAI,CAAA;AAAA,EAClB;AACF","file":"index.js","sourcesContent":["export async function http<T = unknown>(\n  url: string,\n  init?: RequestInit,\n): Promise<T> {\n  const res = await fetch(url, {\n    ...init,\n    headers: {\n      accept: \"application/json\",\n      \"user-agent\": \"everybodycodes-data/0.1 (+github.com/you/repo)\",\n      ...(init?.headers ?? {}),\n    },\n  });\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new Error(\n      `HTTP ${res.status} ${res.statusText} :: ${url} :: ${body}`,\n    );\n  }\n  const ct = res.headers.get(\"content-type\") || \"\";\n  if (ct.includes(\"application/json\")) {\n    return (await res.json()) as T;\n  }\n  return (await res.text()) as unknown as T;\n}\n","import crypto from \"node:crypto\";\n\nexport function aesDecryptHexWithKey(key: string, hexCipher: string): string {\n  const keyBytes = Buffer.from(key, \"utf8\");\n  const iv = Buffer.from(key.substring(0, 16), \"utf8\");\n  const cipherBytes = Buffer.from(hexCipher, \"hex\");\n\n  const algo =\n    keyBytes.length === 16\n      ? \"aes-128-cbc\"\n      : keyBytes.length === 24\n        ? \"aes-192-cbc\"\n        : keyBytes.length === 32\n          ? \"aes-256-cbc\"\n          : \"aes-256-cbc\";\n\n  const dec = crypto.createDecipheriv(algo, keyBytes, iv);\n  const out = Buffer.concat([dec.update(cipherBytes), dec.final()]);\n  return out.toString(\"utf8\");\n}\n","import { http } from \"./helper/http\";\nimport { aesDecryptHexWithKey } from \"./crypto.js\";\n\nconst API_BASE = \"https://everybody.codes/api\";\nconst CDN_BASE = \"https://everybody-codes.b-cdn.net/assets\";\n\nenum ChallengeType {\n  Event = \"event\",\n  Story = \"story\",\n}\n\n/**\n * Part number for quests.\n * @public\n */\nexport type PartNumber = 1 | 2 | 3;\n\n/**\n * Client for request against the EverybodyCodes API.\n *\n * @public\n */\nexport class EverybodyCodesClient {\n  private readonly cookie: string;\n  private seed?: string;\n\n  /**\n   * Creates a new EverybodyCodesClient.\n   * @param sessionCookie - Value of the `everybody-codes` cookie.\n   */\n  constructor(sessionCookie: string) {\n    if (!sessionCookie || !sessionCookie.trim()) {\n      throw new Error(\"EverybodyCodesClient: sessionCookie is required.\");\n    }\n    this.cookie = sessionCookie.trim();\n  }\n\n  private makeUrl(type: ChallengeType, ...parts: (string | number)[]): string {\n    return [\n      API_BASE,\n      type,\n      ...parts.map((p) => encodeURIComponent(String(p))),\n    ].join(\"/\");\n  }\n\n  private cookieHeader(): HeadersInit {\n    return { Cookie: `everybody-codes=${this.cookie}` };\n  }\n\n  private async getSeed(): Promise<string> {\n    if (this.seed) return this.seed;\n\n    const url = `${API_BASE}/user/me`;\n    const data = await http<{ seed?: number | string }>(url, {\n      headers: this.cookieHeader(),\n    });\n\n    const raw = data?.seed;\n    const num =\n      typeof raw === \"number\"\n        ? raw\n        : typeof raw === \"string\" && raw.trim() !== \"\"\n          ? Number(raw)\n          : NaN;\n\n    if (!Number.isFinite(num) || num <= 0) {\n      throw new Error(\n        \"Invalid seed value (0). This usually means your session has expired or the 'everybody-codes' cookie is invalid. \" +\n          \"Log in again at https://everybody.codes, copy the cookie value exactly (no spaces or quotes), and try again.\",\n      );\n    }\n\n    this.seed = String(num);\n    return this.seed;\n  }\n\n  private async getEncryptedInputs(\n    event: string | number,\n    quest: string | number,\n    seed: string,\n  ) {\n    const url = `${CDN_BASE}/${encodeURIComponent(String(event))}/${encodeURIComponent(\n      String(quest),\n    )}/input/${encodeURIComponent(seed)}.json`;\n    return await http<Record<\"1\" | \"2\" | \"3\", string>>(url, {\n      headers: this.cookieHeader(),\n    });\n  }\n\n  private async getDataInternal(\n    type: ChallengeType,\n    event: string | number,\n    quest: string | number,\n  ) {\n    const seed = await this.getSeed();\n    const encrypted = await this.getEncryptedInputs(event, quest, seed);\n    const keys = await this.getKeys(type, event, quest);\n\n    const out: Partial<Record<1 | 2 | 3, string>> = {};\n    ([\"1\", \"2\", \"3\"] as const).forEach((p) => {\n      const hex = encrypted[p];\n      const key = keys[p];\n      if (hex && key)\n        out[Number(p) as 1 | 2 | 3] = aesDecryptHexWithKey(key, hex);\n    });\n    return out;\n  }\n\n  private async getKeys(\n    type: ChallengeType,\n    event: string | number,\n    quest: string | number,\n  ) {\n    const url = this.makeUrl(type, event, \"quest\", quest);\n\n    type KeyResponse = {\n      key1?: string;\n      key2?: string;\n      key3?: string;\n    };\n\n    const data = await http<KeyResponse>(url, { headers: this.cookieHeader() });\n\n    const out: Partial<Record<\"1\" | \"2\" | \"3\", string>> = {};\n    for (const p of [\"1\", \"2\", \"3\"] as const) {\n      const flat = data?.[`key${p}`];\n      if (flat) out[p] = String(flat);\n    }\n    return out;\n  }\n\n  /**\n   * Fetches data for a specific event and quest.\n   * @param event - Event ID\n   * @param quest - Quest ID\n   * @returns Data for the event and quest\n   */\n  async getEventData(event: string | number, quest: string | number) {\n    return this.getDataInternal(ChallengeType.Event, event, quest);\n  }\n\n  /**\n   * Fetches data for a specific story and quest.\n   * @param story - Story ID\n   * @param quest - Quest ID\n   * @returns Data for the story and quest\n   */\n  async getStoryData(story: string | number, quest: string | number) {\n    return this.getDataInternal(ChallengeType.Story, story, quest);\n  }\n\n  /**\n   * Fetches data for a specific event, quest, and part.\n   * @param event - Event ID\n   * @param quest - Quest ID\n   * @param part - Part number (1, 2, or 3)\n   * @returns Data for the event, quest, and part\n   */\n  async getEventPartData(\n    event: string | number,\n    quest: string | number,\n    part: PartNumber,\n  ) {\n    const data = await this.getDataInternal(ChallengeType.Event, event, quest);\n    return data[part];\n  }\n\n  /**\n   * Fetches data for a specific story, quest, and part.\n   * @param story - Story ID\n   * @param quest - Quest ID\n   * @param part - Part number (1, 2, or 3)\n   * @returns Data for the story, quest, and part\n   */\n  async getStoryPartData(\n    story: string | number,\n    quest: string | number,\n    part: PartNumber,\n  ) {\n    const data = await this.getDataInternal(ChallengeType.Story, story, quest);\n    return data[part];\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "@mrtimeey/everybodycodes-data",
+  "version": "1.2.0",
+  "description": "Simple client for fetching data and submitting answers",
+  "type": "module",
+  "sideEffects": false,
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "docs": "typedoc",
+    "docs:clean": "rimraf docs",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "lint": "eslint . --max-warnings=0",
+    "test": "vitest run",
+    "dev:test": "vitest",
+    "prepublishOnly": "npm run build && npm run docs",
+    "api:extract": "npm run build && api-extractor run --local",
+    "build": "tsup",
+    "postbuild": "api-extractor run --verbose"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.1",
+    "@microsoft/api-extractor": "^7.54.0",
+    "@microsoft/tsdoc": "^0.15.1",
+    "@types/node": "^24.10.0",
+    "eslint": "^9.39.1",
+    "eslint-config-prettier": "^10.1.8",
+    "globals": "^16.5.0",
+    "prettier": "^3.6.2",
+    "prettier-plugin-organize-imports": "^4.3.0",
+    "rimraf": "^6.0.1",
+    "ts-node": "^10.9.2",
+    "tsup": "^8.3.0",
+    "typedoc": "^0.28.14",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.46.3",
+    "undici": "^7.16.0",
+    "vitest": "^4.0.8"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MrTimeey/everybodycodes-data.git"
+  },
+  "keywords": [
+    "everybody-codes"
+  ],
+  "author": "MrTimeey",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/MrTimeey/everybodycodes-data/issues"
+  },
+  "homepage": "https://github.com/MrTimeey/everybodycodes-data#readme"
+}