@nimee/wallet-generator 1.0.0

package/dist/google/googleAuth.js

@@ -0,0 +1,99 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildGoogleTicketClass = exports.buildGoogleTicketObject = exports.ensureGoogleTicketClass = exports.getGoogleAccessToken = void 0;
+const axios_1 = __importDefault(require("axios"));
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+// Intentional module-level singletons — shared across all Wallet instances
+// (each pod maintains its own in-memory cache).
+const googleTokenCache = new Map();
+const googleClassSyncedAt = new Map(); // classId → epoch ms
+const CLASS_SYNC_TTL_MS = 60 * 60 * 1000; // re-sync class at most once per hour
+// ─── OAuth ────────────────────────────────────────────────────────────────────
+/** Exchanges service account credentials for a Google OAuth2 access token (cached for ~1 hour). */
+function getGoogleAccessToken(config) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const cached = googleTokenCache.get(config.serviceAccountEmail);
+        if (cached && cached.expiresAt - Date.now() > 5 * 60 * 1000) {
+            return cached.accessToken;
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const assertion = jsonwebtoken_1.default.sign({
+            iss: config.serviceAccountEmail,
+            sub: config.serviceAccountEmail,
+            aud: "https://oauth2.googleapis.com/token",
+            scope: "https://www.googleapis.com/auth/wallet_object.issuer",
+            iat: now,
+            exp: now + 3600,
+        }, config.privateKey, { algorithm: "RS256" });
+        const response = yield axios_1.default.post("https://oauth2.googleapis.com/token", new URLSearchParams({ grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer", assertion }), { headers: { "Content-Type": "application/x-www-form-urlencoded" }, timeout: 5000 });
+        const accessToken = response.data.access_token;
+        googleTokenCache.set(config.serviceAccountEmail, { accessToken, expiresAt: Date.now() + 3600 * 1000 });
+        return accessToken;
+    });
+}
+exports.getGoogleAccessToken = getGoogleAccessToken;
+// ─── Class sync ───────────────────────────────────────────────────────────────
+/**
+ * Ensures the Google Wallet EventTicketClass exists and is up to date.
+ * Skipped if successfully synced within the last hour.
+ * Attempts to create; if it already exists (409), patches instead.
+ */
+function ensureGoogleTicketClass(config, data) {
+    var _a, _b, _c, _d, _e, _f;
+    return __awaiter(this, void 0, void 0, function* () {
+        const classId = config.classId || `${config.issuerId}.event-${data.classIdSuffix || data.objectId}`;
+        if (Date.now() - ((_a = googleClassSyncedAt.get(classId)) !== null && _a !== void 0 ? _a : 0) < CLASS_SYNC_TTL_MS) {
+            return;
+        }
+        const accessToken = yield getGoogleAccessToken(config);
+        const classBody = buildGoogleTicketClass(classId, data);
+        const baseUrl = "https://walletobjects.googleapis.com/walletobjects/v1/eventTicketClass";
+        const headers = { Authorization: `Bearer ${accessToken}` };
+        try {
+            yield axios_1.default.post(baseUrl, classBody, { headers, timeout: 5000 });
+            googleClassSyncedAt.set(classId, Date.now());
+        }
+        catch (err) {
+            if (((_b = err.response) === null || _b === void 0 ? void 0 : _b.status) === 409) {
+                yield axios_1.default.patch(`${baseUrl}/${encodeURIComponent(classId)}`, classBody, { headers, timeout: 5000 });
+                googleClassSyncedAt.set(classId, Date.now());
+            }
+            else {
+                throw new Error(`failed to sync Google Wallet class: ${(_f = (_e = (_d = (_c = err.response) === null || _c === void 0 ? void 0 : _c.data) === null || _d === void 0 ? void 0 : _d.error) === null || _e === void 0 ? void 0 : _e.message) !== null && _f !== void 0 ? _f : err.message}`);
+            }
+        }
+    });
+}
+exports.ensureGoogleTicketClass = ensureGoogleTicketClass;
+// ─── Object / class builders ──────────────────────────────────────────────────
+function buildGoogleTicketObject(objectId, classId, data) {
+    const dateDisplay = data.dateDisplay;
+    return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ id: objectId, classId, state: data.isCheckedIn ? "COMPLETED" : "ACTIVE", ticketHolderName: data.holderName, issueName: data.marketplaceName || "", ticketNumber: data.orderNumber || "" }, (data.logoUrl && { logo: { sourceUri: { uri: data.logoUrl } } })), { barcode: Object.assign({ type: "QR_CODE", value: data.qrContent }, (data.orderNumber && { alternateText: data.orderNumber })), eventName: {
+            defaultValue: { language: "en-US", value: data.passTitle || "" },
+        } }), (data.backgroundColorHex && { hexBackgroundColor: data.backgroundColorHex })), ((data.seat) && {
+        seatInfo: Object.assign({}, (data.seat && { seat: { defaultValue: { language: "en-US", value: data.seat } } })),
+    })), { textModulesData: [
+            { header: "TICKET", body: data.passSubtitle || data.passTitle || "" },
+            ...(dateDisplay ? [{ header: "DATE", body: dateDisplay }] : []),
+        ], validTimeInterval: Object.assign({ start: { date: (data.startDate || new Date()).toISOString() } }, (data.endDate && { end: { date: data.endDate.toISOString() } })) });
+}
+exports.buildGoogleTicketObject = buildGoogleTicketObject;
+function buildGoogleTicketClass(classId, data) {
+    return Object.assign(Object.assign({ id: classId, issuerName: data.marketplaceName || "", reviewStatus: "UNDER_REVIEW", eventName: {
+            defaultValue: { language: "en-US", value: data.passTitle || "" },
+        } }, (data.logoUrl && { logo: { sourceUri: { uri: data.logoUrl } } })), (data.stripImageUrl && { heroImage: { sourceUri: { uri: data.stripImageUrl } } }));
+}
+exports.buildGoogleTicketClass = buildGoogleTicketClass;
+//# sourceMappingURL=googleAuth.js.map

package/dist/google/googleAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAuth.js","sourceRoot":"","sources":["../../src/google/googleAuth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,kDAA0B;AAC1B,gEAA+B;AAW/B,2EAA2E;AAC3E,gDAAgD;AAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAC9D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,qBAAqB;AAC5E,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,sCAAsC;AAEhF,iFAAiF;AAEjF,mGAAmG;AACnG,SAAsB,oBAAoB,CAAC,MAA2B;;QACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,sBAAG,CAAC,IAAI,CACxB;YACE,GAAG,EAAE,MAAM,CAAC,mBAAmB;YAC/B,GAAG,EAAE,MAAM,CAAC,mBAAmB;YAC/B,GAAG,EAAE,qCAAqC;YAC1C,KAAK,EAAE,sDAAsD;YAC7D,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;SAChB,EACD,MAAM,CAAC,UAAU,EACjB,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAC/B,qCAAqC,EACrC,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,6CAA6C,EAAE,SAAS,EAAE,CAAC,EAC7F,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CACpF,CAAC;QAEF,MAAM,WAAW,GAAW,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;QACvD,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QACvG,OAAO,WAAW,CAAC;IACrB,CAAC;CAAA;AA7BD,oDA6BC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,SAAsB,uBAAuB,CAAC,MAA2B,EAAE,IAAqB;;;QAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,MAAM,CAAC,QAAQ,UAAU,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEpG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAA,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,CAAC,CAAC,GAAG,iBAAiB,EAAE,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,wEAAwE,CAAC;QACzF,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,eAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAA,MAAA,GAAG,CAAC,QAAQ,0CAAE,MAAM,MAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,eAAK,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAA,MAAA,MAAA,MAAA,GAAG,CAAC,QAAQ,0CAAE,IAAI,0CAAE,KAAK,0CAAE,OAAO,mCAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;;CACF;AAvBD,0DAuBC;AAED,iFAAiF;AAEjF,SAAgB,uBAAuB,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAqB;IAC9F,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAErC,+EACE,EAAE,EAAE,QAAQ,EACZ,OAAO,EACP,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAChD,gBAAgB,EAAE,IAAI,CAAC,UAAU,EACjC,SAAS,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE,EACrC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,IACjC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,KACnE,OAAO,kBACL,IAAI,EAAE,SAAS,EACf,KAAK,EAAE,IAAI,CAAC,SAAS,IAClB,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,GAE9D,SAAS,EAAE;YACT,YAAY,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;SACjE,KACE,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAC5E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjB,QAAQ,oBACH,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CACtF;KACF,CAAC,KACF,eAAe,EAAE;YACf,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;YACrE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,EACD,iBAAiB,kBACf,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,IAC1D,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,KAEpE;AACJ,CAAC;AAlCD,0DAkCC;AAED,SAAgB,sBAAsB,CAAC,OAAe,EAAE,IAAqB;IAC3E,qCACE,EAAE,EAAE,OAAO,EACX,UAAU,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE,EACtC,YAAY,EAAE,cAAc,EAC5B,SAAS,EAAE;YACT,YAAY,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;SACjE,IACE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,GAChE,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,EACpF;AACJ,CAAC;AAXD,wDAWC"}

package/dist/helpers/colorHelpers.d.ts

@@ -0,0 +1,9 @@
+export interface INormalizedColor {
+    rgb: string;
+    hex: string;
+}
+/**
+ * Normalizes "#3c4150", "3c4150", or "rgb(60, 65, 80)" to both Apple rgb() and hex formats.
+ * Returns undefined if the input is missing or invalid.
+ */
+export declare function normalizeColor(raw: string): INormalizedColor | undefined;

package/dist/helpers/colorHelpers.js

@@ -0,0 +1,32 @@
+"use strict";
+// ─── Color normalization ──────────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeColor = void 0;
+/**
+ * Normalizes "#3c4150", "3c4150", or "rgb(60, 65, 80)" to both Apple rgb() and hex formats.
+ * Returns undefined if the input is missing or invalid.
+ */
+function normalizeColor(raw) {
+    if (!raw || !raw.trim())
+        return undefined;
+    const rgbMatch = raw.match(/^rgb\(\s*(\d+)\s*,\s*(\d+)\s*,\s*(\d+)\s*\)$/);
+    if (rgbMatch) {
+        const r = parseInt(rgbMatch[1]);
+        const g = parseInt(rgbMatch[2]);
+        const b = parseInt(rgbMatch[3]);
+        if (r > 255 || g > 255 || b > 255)
+            return undefined;
+        const hex = `#${r.toString(16).padStart(2, '0')}${g.toString(16).padStart(2, '0')}${b.toString(16).padStart(2, '0')}`;
+        return { rgb: `rgb(${r},${g},${b})`, hex };
+    }
+    const cleaned = raw.replace('#', '');
+    if (/^[0-9a-fA-F]{6}$/.test(cleaned)) {
+        const r = parseInt(cleaned.slice(0, 2), 16);
+        const g = parseInt(cleaned.slice(2, 4), 16);
+        const b = parseInt(cleaned.slice(4, 6), 16);
+        return { rgb: `rgb(${r},${g},${b})`, hex: `#${cleaned.toLowerCase()}` };
+    }
+    return undefined;
+}
+exports.normalizeColor = normalizeColor;
+//# sourceMappingURL=colorHelpers.js.map

package/dist/helpers/colorHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colorHelpers.js","sourceRoot":"","sources":["../../src/helpers/colorHelpers.ts"],"names":[],"mappings":";AAAA,iFAAiF;;;AAOjF;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACtH,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAtBD,wCAsBC"}

package/dist/helpers/imageHelpers.d.ts

@@ -0,0 +1,23 @@
+/// <reference types="node" />
+export declare const IMAGE_MAX_SIZE: number;
+export declare const PNG_MAGIC: Buffer;
+export declare const JPEG_MAGIC: Buffer;
+export declare const WEBP_RIFF: Buffer;
+export declare const WEBP_WEBP: Buffer;
+/**
+ * Returns true if the URL is safe to fetch for wallet images.
+ * Requires https:// and optionally restricts to hosts in the allowedHosts list.
+ * An empty allowedHosts list means all https hosts are permitted.
+ */
+export declare function isAllowedImageUrl(url: string, allowedHosts: string[]): boolean;
+/**
+ * Downloads an image from a URL, validates it, and returns its buffer.
+ * Returns undefined if the URL is not allowed, the download fails, or the
+ * image is invalid/too large.
+ */
+export declare function downloadImageBuffer(url: string, allowedHosts: string[], timeoutMs?: number): Promise<Buffer | undefined>;
+/**
+ * Resizes an image buffer to the given dimensions using sharp.
+ * Returns undefined on error.
+ */
+export declare function resizeImageBuffer(buffer: Buffer, width: number, height: number): Promise<Buffer | undefined>;

package/dist/helpers/imageHelpers.js

@@ -0,0 +1,94 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resizeImageBuffer = exports.downloadImageBuffer = exports.isAllowedImageUrl = exports.WEBP_WEBP = exports.WEBP_RIFF = exports.JPEG_MAGIC = exports.PNG_MAGIC = exports.IMAGE_MAX_SIZE = void 0;
+const axios_1 = __importDefault(require("axios"));
+const sharp_1 = __importDefault(require("sharp"));
+// ─── Image validation constants ───────────────────────────────────────────────
+exports.IMAGE_MAX_SIZE = 5 * 1024 * 1024; // 5 MB
+exports.PNG_MAGIC = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+exports.JPEG_MAGIC = Buffer.from([0xff, 0xd8, 0xff]);
+exports.WEBP_RIFF = Buffer.from([0x52, 0x49, 0x46, 0x46]);
+exports.WEBP_WEBP = Buffer.from([0x57, 0x45, 0x42, 0x50]);
+// ─── URL validation ───────────────────────────────────────────────────────────
+/**
+ * Returns true if the URL is safe to fetch for wallet images.
+ * Requires https:// and optionally restricts to hosts in the allowedHosts list.
+ * An empty allowedHosts list means all https hosts are permitted.
+ */
+function isAllowedImageUrl(url, allowedHosts) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch (_a) {
+        return false;
+    }
+    if (parsed.protocol !== 'https:')
+        return false;
+    if (allowedHosts.length === 0)
+        return true;
+    return allowedHosts.some((host) => parsed.hostname === host || parsed.hostname.endsWith(`.${host}`));
+}
+exports.isAllowedImageUrl = isAllowedImageUrl;
+// ─── Image download ───────────────────────────────────────────────────────────
+/**
+ * Downloads an image from a URL, validates it, and returns its buffer.
+ * Returns undefined if the URL is not allowed, the download fails, or the
+ * image is invalid/too large.
+ */
+function downloadImageBuffer(url, allowedHosts, timeoutMs = 10000) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (!isAllowedImageUrl(url, allowedHosts))
+            return undefined;
+        try {
+            const response = yield axios_1.default.get(url, {
+                responseType: 'arraybuffer',
+                timeout: timeoutMs,
+                maxContentLength: exports.IMAGE_MAX_SIZE,
+            });
+            const buffer = Buffer.from(response.data);
+            if (buffer.length > exports.IMAGE_MAX_SIZE)
+                return undefined;
+            // Validate image format via magic bytes
+            const isPng = buffer.slice(0, 8).equals(exports.PNG_MAGIC);
+            const isJpeg = buffer.slice(0, 3).equals(exports.JPEG_MAGIC);
+            const isWebp = buffer.slice(0, 4).equals(exports.WEBP_RIFF) && buffer.slice(8, 12).equals(exports.WEBP_WEBP);
+            if (!isPng && !isJpeg && !isWebp)
+                return undefined;
+            return buffer;
+        }
+        catch (_a) {
+            return undefined;
+        }
+    });
+}
+exports.downloadImageBuffer = downloadImageBuffer;
+// ─── Image resize helper ──────────────────────────────────────────────────────
+/**
+ * Resizes an image buffer to the given dimensions using sharp.
+ * Returns undefined on error.
+ */
+function resizeImageBuffer(buffer, width, height) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            return yield (0, sharp_1.default)(buffer).resize(width, height, { fit: 'inside' }).png().toBuffer();
+        }
+        catch (_a) {
+            return undefined;
+        }
+    });
+}
+exports.resizeImageBuffer = resizeImageBuffer;
+//# sourceMappingURL=imageHelpers.js.map

package/dist/helpers/imageHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageHelpers.js","sourceRoot":"","sources":["../../src/helpers/imageHelpers.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,kDAA0B;AAC1B,kDAA0B;AAE1B,iFAAiF;AAEpE,QAAA,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AACzC,QAAA,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1E,QAAA,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7C,QAAA,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,QAAA,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/D,iFAAiF;AAEjF;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,GAAW,EAAE,YAAsB;IACnE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE/C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAZD,8CAYC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,SAAsB,mBAAmB,CACvC,GAAW,EACX,YAAsB,EACtB,YAAoB,KAAM;;QAE1B,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAS,GAAG,EAAE;gBAC5C,YAAY,EAAE,aAAa;gBAC3B,OAAO,EAAE,SAAS;gBAClB,gBAAgB,EAAE,sBAAc;aACjC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAc;gBAAE,OAAO,SAAS,CAAC;YAErD,wCAAwC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAS,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAU,CAAC,CAAC;YACrD,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAS,CAAC,CAAC;YAEhF,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CAAA;AA7BD,kDA6BC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAsB,iBAAiB,CACrC,MAAc,EACd,KAAa,EACb,MAAc;;QAEd,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,eAAK,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACvF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CAAA;AAVD,8CAUC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types';
+export * from './helpers/colorHelpers';
+export * from './helpers/imageHelpers';
+export { ApplePassGenerator } from './apple/ApplePassGenerator';
+export { GooglePassGenerator } from './google/GooglePassGenerator';

package/dist/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GooglePassGenerator = exports.ApplePassGenerator = void 0;
+__exportStar(require("./types"), exports);
+__exportStar(require("./helpers/colorHelpers"), exports);
+__exportStar(require("./helpers/imageHelpers"), exports);
+var ApplePassGenerator_1 = require("./apple/ApplePassGenerator");
+Object.defineProperty(exports, "ApplePassGenerator", { enumerable: true, get: function () { return ApplePassGenerator_1.ApplePassGenerator; } });
+var GooglePassGenerator_1 = require("./google/GooglePassGenerator");
+Object.defineProperty(exports, "GooglePassGenerator", { enumerable: true, get: function () { return GooglePassGenerator_1.GooglePassGenerator; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,yDAAuC;AACvC,yDAAuC;AACvC,iEAAgE;AAAvD,wHAAA,kBAAkB,OAAA;AAC3B,oEAAmE;AAA1D,0HAAA,mBAAmB,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,65 @@
+export interface IWalletLayoutField {
+    key: string;
+    row: 'header' | 'secondary' | 'auxiliary' | 'back' | 'hidden';
+    position: number;
+}
+/**
+ * Caller-assembled pass data. All design values (colors, URLs) must be
+ * pre-resolved by the service before passing in — generators do not touch the DB.
+ */
+export interface IWalletPassData {
+    /** MongoDB _id of the source document (userEvent or endUserSeasonTicket). Used as Google pass object ID. */
+    objectId: string;
+    /** Person's display name shown on the pass. */
+    holderName: string;
+    /** Primary title (event name or plan name). */
+    passTitle: string;
+    /** Secondary label (ticket type, plan type). Optional. */
+    passSubtitle?: string;
+    /** Human-readable date string already formatted for display (e.g. "14/05/2026 18:00"). */
+    dateDisplay?: string;
+    startDate?: Date;
+    endDate?: Date;
+    seat?: string;
+    orderNumber?: string;
+    /** True when the QR code has already been scanned/used. Affects Google pass state. */
+    isCheckedIn?: boolean;
+    /** Raw string encoded in the QR barcode. For events: "userEventId/ticketInfoId". For subscriptions: "sub/{sellerId}/{endUserSeasonTicketId}". */
+    qrContent: string;
+    marketplaceName?: string;
+    /** Used to build the Google Wallet class ID suffix. E.g. "event-<eventId>" or "subscription". */
+    classIdSuffix?: string;
+    accountId?: string;
+    /** Pre-resolved logo URL (HTTPS). */
+    logoUrl?: string;
+    /** Pre-resolved strip/banner image URL (HTTPS). */
+    stripImageUrl?: string;
+    /** Background color in rgb() format. */
+    backgroundColor?: string;
+    /** Background color in #hex format (for Google). */
+    backgroundColorHex?: string;
+    /** Text color in rgb() format. Apple only. */
+    foregroundColor?: string;
+    /** Label color in rgb() format. Apple only. */
+    labelColor?: string;
+    /** Layout from walletDesign. Generators fall back to their own DEFAULT_LAYOUT if absent. */
+    layout?: {
+        fields: IWalletLayoutField[];
+    };
+}
+export interface IAppleWalletConfig {
+    cert: string;
+    key: string;
+    wwdr: string;
+    passTypeIdentifier: string;
+    teamIdentifier: string;
+    /** Absolute path to the `.pass` template directory. Defaults to the bundled template. */
+    templatePath?: string;
+}
+export interface IGoogleWalletConfig {
+    issuerId: string;
+    /** If provided, used as-is. Otherwise built from issuerId + data.classIdSuffix. */
+    classId?: string;
+    serviceAccountEmail: string;
+    privateKey: string;
+}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/jest.config.js

@@ -0,0 +1,18 @@
+const config = require("@nimee/tests");
+
+const { clearMocks, coverageDirectory, collectCoverage, coverageReporters, forceExit, transform, testTimeout } =
+  config.jestConfig;
+
+module.exports = {
+  setupFiles: ["dotenv/config"],
+  clearMocks: clearMocks,
+  coverageDirectory: coverageDirectory,
+  testEnvironment: "node",
+  collectCoverage: collectCoverage,
+  coverageReporters: coverageReporters,
+  forceExit: forceExit,
+  transform: { "^.+\\.tsx?$": "ts-jest" },
+  testTimeout: testTimeout,
+  modulePathIgnorePatterns: ["<rootDir>/test-client/", "<rootDir>/dist/"],
+  transformIgnorePatterns: ["node_modules/(?!axios)"],
+};

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@nimee/wallet-generator",
+  "version": "1.0.0",
+  "description": "Apple Wallet and Google Wallet pass generation for Nimi services",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build-ts": "tsc",
+    "watch-ts": "tsc -w",
+    "build": "npm run build-ts && cp -r src/apple/template.pass dist/apple/template.pass",
+    "lint": "eslint -c ../../.eslintrc.js --ext .ts src/**",
+    "test": "jest --detectOpenHandles --watch",
+    "test:deploy": "jest --ci --coverage",
+    "publish-it": "npm run build && npm publish --scope=nimee --access public",
+    "incVersionAndPublish": "npm version patch && npm run publish-it && npm run i-all-workspaces",
+    "i-all-workspaces": "version=${npm_package_version} npm i @nimee/wallet-generator@$version --workspace=@nimee/payment --workspace=@nimee/user-event"
+  },
+  "devDependencies": {
+    "@nimee/tests": "0.0.39",
+    "@types/jest": "^23.3.12",
+    "@types/jsonwebtoken": "^8.5.9",
+    "@typescript-eslint/eslint-plugin": "^5.18.0",
+    "@typescript-eslint/parser": "^5.18.0",
+    "eslint": "8.22.0",
+    "jest": "^29.0.0",
+    "nock": "^13.0.5",
+    "sinon": "^9.2.1",
+    "ts-jest": "^29.0.0",
+    "typescript": "^5.2.2"
+  },
+  "dependencies": {
+    "@nimee/logger": "^1.0.27",
+    "axios": "1.2.1",
+    "jsonwebtoken": "^8.5.1",
+    "passkit-generator": "^3.5.7",
+    "sharp": "^0.34.5"
+  }
+}