@oxyhq/services 5.16.34 → 5.16.35

package/lib/commonjs/shared/crypto/signature.js

@@ -0,0 +1,191 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SignatureService = exports.MAX_SIGNATURE_AGE_MS = exports.CHALLENGE_TTL_MS = void 0;
+var _elliptic = require("elliptic");
+var _platform = require("./platform");
+var _messageBuilders = require("./messageBuilders");
+/**
+ * Signature Verification Service
+ * 
+ * Unified signature verification used by both backend (API) and SDK.
+ * Uses platform adapters for crypto operations while keeping message construction shared.
+ */
+
+const ec = new _elliptic.ec('secp256k1');
+
+/**
+ * Maximum age for signed messages (5 minutes)
+ */
+const MAX_SIGNATURE_AGE_MS = exports.MAX_SIGNATURE_AGE_MS = 5 * 60 * 1000;
+
+/**
+ * Challenge TTL (5 minutes)
+ */
+const CHALLENGE_TTL_MS = exports.CHALLENGE_TTL_MS = 5 * 60 * 1000;
+
+/**
+ * Signature Service
+ * Provides signature verification that works across all platforms
+ */
+class SignatureService {
+  /**
+   * Verify an ECDSA signature
+   * 
+   * @param message - The original message that was signed
+   * @param signature - The signature in DER format (hex encoded)
+   * @param publicKey - The public key (hex encoded, uncompressed)
+   * @returns true if the signature is valid
+   */
+  static async verify(message, signature, publicKey) {
+    try {
+      const key = ec.keyFromPublic(publicKey, 'hex');
+      const adapter = await (0, _platform.getCryptoAdapter)();
+      const messageHash = await adapter.sha256(message);
+      return key.verify(messageHash, signature);
+    } catch {
+      return false;
+    }
+  }
+
+  /**
+   * Synchronous signature verification (Node.js only)
+   * Uses Node.js crypto module directly for hashing
+   */
+  static verifySync(message, signature, publicKey) {
+    if (!_platform.PlatformDetector.isNode()) {
+      throw new Error('verifySync should only be used in Node.js. Use verify() in other environments.');
+    }
+    try {
+      // eslint-disable-next-line @typescript-eslint/no-implied-eval
+      const getCrypto = new Function('return require("crypto")');
+      const crypto = getCrypto();
+      const key = ec.keyFromPublic(publicKey, 'hex');
+      const messageHash = crypto.createHash('sha256').update(message).digest('hex');
+      return key.verify(messageHash, signature);
+    } catch {
+      return false;
+    }
+  }
+
+  /**
+   * Verify an authentication challenge response
+   * 
+   * @param publicKey - The user's public key
+   * @param challenge - The original challenge string
+   * @param signature - The signature of the auth message
+   * @param timestamp - The timestamp when the signature was created
+   * @param maxAgeMs - Maximum age of the signature in milliseconds
+   * @returns true if the challenge response is valid
+   */
+  static async verifyChallengeResponse(publicKey, challenge, signature, timestamp, maxAgeMs = CHALLENGE_TTL_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildAuthMessage)(publicKey, challenge, timestamp);
+
+    // Verify the signature
+    return this.verify(message, signature, publicKey);
+  }
+
+  /**
+   * Synchronous challenge response verification (Node.js only)
+   */
+  static verifyChallengeResponseSync(publicKey, challenge, signature, timestamp, maxAgeMs = CHALLENGE_TTL_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildAuthMessage)(publicKey, challenge, timestamp);
+
+    // Verify the signature
+    return this.verifySync(message, signature, publicKey);
+  }
+
+  /**
+   * Verify a registration signature
+   * Signature format: oxy:register:{publicKey}:{timestamp}
+   */
+  static async verifyRegistrationSignature(publicKey, signature, timestamp, maxAgeMs = MAX_SIGNATURE_AGE_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildRegistrationMessage)(publicKey, timestamp);
+
+    // Verify the signature
+    return this.verify(message, signature, publicKey);
+  }
+
+  /**
+   * Synchronous registration signature verification (Node.js only)
+   */
+  static verifyRegistrationSignatureSync(publicKey, signature, timestamp, maxAgeMs = MAX_SIGNATURE_AGE_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildRegistrationMessage)(publicKey, timestamp);
+
+    // Verify the signature
+    return this.verifySync(message, signature, publicKey);
+  }
+
+  /**
+   * Verify a signed request
+   * Used for authenticated API operations
+   */
+  static async verifyRequestSignature(publicKey, data, signature, timestamp, maxAgeMs = MAX_SIGNATURE_AGE_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildRequestMessage)(publicKey, timestamp, data);
+
+    // Verify the signature
+    return this.verify(message, signature, publicKey);
+  }
+
+  /**
+   * Synchronous request signature verification (Node.js only)
+   */
+  static verifyRequestSignatureSync(publicKey, data, signature, timestamp, maxAgeMs = MAX_SIGNATURE_AGE_MS) {
+    // Check timestamp freshness
+    if (!(0, _messageBuilders.isTimestampFresh)(timestamp, maxAgeMs)) {
+      return false;
+    }
+
+    // Build the canonical message
+    const message = (0, _messageBuilders.buildRequestMessage)(publicKey, timestamp, data);
+
+    // Verify the signature
+    return this.verifySync(message, signature, publicKey);
+  }
+
+  /**
+   * Validate that a string is a valid public key
+   */
+  static isValidPublicKey(publicKey) {
+    try {
+      ec.keyFromPublic(publicKey, 'hex');
+      return true;
+    } catch {
+      return false;
+    }
+  }
+}
+exports.SignatureService = SignatureService;
+//# sourceMappingURL=signature.js.map

package/lib/commonjs/shared/crypto/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_elliptic","require","_platform","_messageBuilders","ec","EC","MAX_SIGNATURE_AGE_MS","exports","CHALLENGE_TTL_MS","SignatureService","verify","message","signature","publicKey","key","keyFromPublic","adapter","getCryptoAdapter","messageHash","sha256","verifySync","PlatformDetector","isNode","Error","getCrypto","Function","crypto","createHash","update","digest","verifyChallengeResponse","challenge","timestamp","maxAgeMs","isTimestampFresh","buildAuthMessage","verifyChallengeResponseSync","verifyRegistrationSignature","buildRegistrationMessage","verifyRegistrationSignatureSync","verifyRequestSignature","data","buildRequestMessage","verifyRequestSignatureSync","isValidPublicKey"],"sourceRoot":"../../../../src","sources":["shared/crypto/signature.ts"],"mappings":";;;;;;AAOA,IAAAA,SAAA,GAAAC,OAAA;AACA,IAAAC,SAAA,GAAAD,OAAA;AACA,IAAAE,gBAAA,GAAAF,OAAA;AATA;AACA;AACA;AACA;AACA;AACA;;AAWA,MAAMG,EAAE,GAAG,IAAIC,YAAE,CAAC,WAAW,CAAC;;AAE9B;AACA;AACA;AACO,MAAMC,oBAAoB,GAAAC,OAAA,CAAAD,oBAAA,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;;AAEjD;AACA;AACA;AACO,MAAME,gBAAgB,GAAAD,OAAA,CAAAC,gBAAA,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;;AAE7C;AACA;AACA;AACA;AACO,MAAMC,gBAAgB,CAAC;EAC5B;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,aAAaC,MAAMA,CACjBC,OAAe,EACfC,SAAiB,EACjBC,SAAiB,EACC;IAClB,IAAI;MACF,MAAMC,GAAG,GAAGV,EAAE,CAACW,aAAa,CAACF,SAAS,EAAE,KAAK,CAAC;MAC9C,MAAMG,OAAO,GAAG,MAAM,IAAAC,0BAAgB,EAAC,CAAC;MACxC,MAAMC,WAAW,GAAG,MAAMF,OAAO,CAACG,MAAM,CAACR,OAAO,CAAC;MACjD,OAAOG,GAAG,CAACJ,MAAM,CAACQ,WAAW,EAAEN,SAAS,CAAC;IAC3C,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;AACA;EACE,OAAOQ,UAAUA,CACfT,OAAe,EACfC,SAAiB,EACjBC,SAAiB,EACR;IACT,IAAI,CAACQ,0BAAgB,CAACC,MAAM,CAAC,CAAC,EAAE;MAC9B,MAAM,IAAIC,KAAK,CACb,gFACF,CAAC;IACH;IAEA,IAAI;MACF;MACA,MAAMC,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;MAC1D,MAAMC,MAAM,GAAGF,SAAS,CAAC,CAAC;MAC1B,MAAMV,GAAG,GAAGV,EAAE,CAACW,aAAa,CAACF,SAAS,EAAE,KAAK,CAAC;MAC9C,MAAMK,WAAW,GAAGQ,MAAM,CAACC,UAAU,CAAC,QAAQ,CAAC,CAACC,MAAM,CAACjB,OAAO,CAAC,CAACkB,MAAM,CAAC,KAAK,CAAC;MAC7E,OAAOf,GAAG,CAACJ,MAAM,CAACQ,WAAW,EAAEN,SAAS,CAAC;IAC3C,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,aAAakB,uBAAuBA,CAClCjB,SAAiB,EACjBkB,SAAiB,EACjBnB,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAGzB,gBAAgB,EACjB;IAClB;IACA,IAAI,CAAC,IAAA0B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAAwB,iCAAgB,EAACtB,SAAS,EAAEkB,SAAS,EAAEC,SAAS,CAAC;;IAEjE;IACA,OAAO,IAAI,CAACtB,MAAM,CAACC,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACnD;;EAEA;AACF;AACA;EACE,OAAOuB,2BAA2BA,CAChCvB,SAAiB,EACjBkB,SAAiB,EACjBnB,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAGzB,gBAAgB,EAC1B;IACT;IACA,IAAI,CAAC,IAAA0B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAAwB,iCAAgB,EAACtB,SAAS,EAAEkB,SAAS,EAAEC,SAAS,CAAC;;IAEjE;IACA,OAAO,IAAI,CAACZ,UAAU,CAACT,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACvD;;EAEA;AACF;AACA;AACA;EACE,aAAawB,2BAA2BA,CACtCxB,SAAiB,EACjBD,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAG3B,oBAAoB,EACrB;IAClB;IACA,IAAI,CAAC,IAAA4B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAA2B,yCAAwB,EAACzB,SAAS,EAAEmB,SAAS,CAAC;;IAE9D;IACA,OAAO,IAAI,CAACtB,MAAM,CAACC,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACnD;;EAEA;AACF;AACA;EACE,OAAO0B,+BAA+BA,CACpC1B,SAAiB,EACjBD,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAG3B,oBAAoB,EAC9B;IACT;IACA,IAAI,CAAC,IAAA4B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAA2B,yCAAwB,EAACzB,SAAS,EAAEmB,SAAS,CAAC;;IAE9D;IACA,OAAO,IAAI,CAACZ,UAAU,CAACT,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACvD;;EAEA;AACF;AACA;AACA;EACE,aAAa2B,sBAAsBA,CACjC3B,SAAiB,EACjB4B,IAA6B,EAC7B7B,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAG3B,oBAAoB,EACrB;IAClB;IACA,IAAI,CAAC,IAAA4B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAA+B,oCAAmB,EAAC7B,SAAS,EAAEmB,SAAS,EAAES,IAAI,CAAC;;IAE/D;IACA,OAAO,IAAI,CAAC/B,MAAM,CAACC,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACnD;;EAEA;AACF;AACA;EACE,OAAO8B,0BAA0BA,CAC/B9B,SAAiB,EACjB4B,IAA6B,EAC7B7B,SAAiB,EACjBoB,SAAiB,EACjBC,QAAgB,GAAG3B,oBAAoB,EAC9B;IACT;IACA,IAAI,CAAC,IAAA4B,iCAAgB,EAACF,SAAS,EAAEC,QAAQ,CAAC,EAAE;MAC1C,OAAO,KAAK;IACd;;IAEA;IACA,MAAMtB,OAAO,GAAG,IAAA+B,oCAAmB,EAAC7B,SAAS,EAAEmB,SAAS,EAAES,IAAI,CAAC;;IAE/D;IACA,OAAO,IAAI,CAACrB,UAAU,CAACT,OAAO,EAAEC,SAAS,EAAEC,SAAS,CAAC;EACvD;;EAEA;AACF;AACA;EACE,OAAO+B,gBAAgBA,CAAC/B,SAAiB,EAAW;IAClD,IAAI;MACFT,EAAE,CAACW,aAAa,CAACF,SAAS,EAAE,KAAK,CAAC;MAClC,OAAO,IAAI;IACb,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;AACF;AAACN,OAAA,CAAAE,gBAAA,GAAAA,gBAAA","ignoreList":[]}

package/lib/commonjs/shared/index.js

@@ -0,0 +1,94 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+var _exportNames = {
+  getCryptoAdapter: true,
+  PlatformDetector: true
+};
+Object.defineProperty(exports, "PlatformDetector", {
+  enumerable: true,
+  get: function () {
+    return _platform.PlatformDetector;
+  }
+});
+Object.defineProperty(exports, "getCryptoAdapter", {
+  enumerable: true,
+  get: function () {
+    return _platform.getCryptoAdapter;
+  }
+});
+var _index = require("./models/index");
+Object.keys(_index).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _index[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _index[key];
+    }
+  });
+});
+var _signature = require("./crypto/signature");
+Object.keys(_signature).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _signature[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _signature[key];
+    }
+  });
+});
+var _messageBuilders = require("./crypto/messageBuilders");
+Object.keys(_messageBuilders).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _messageBuilders[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _messageBuilders[key];
+    }
+  });
+});
+var _platform = require("./crypto/platform");
+Object.keys(_platform).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _platform[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _platform[key];
+    }
+  });
+});
+var _index2 = require("./utils/index");
+Object.keys(_index2).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _index2[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _index2[key];
+    }
+  });
+});
+var _index3 = require("./transport/index");
+Object.keys(_index3).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
+  if (key in exports && exports[key] === _index3[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _index3[key];
+    }
+  });
+});
+//# sourceMappingURL=index.js.map

package/lib/commonjs/shared/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_index","require","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_signature","_messageBuilders","_platform","_index2","_index3"],"sourceRoot":"../../../src","sources":["shared/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcA,IAAAA,MAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,MAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAL,MAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAb,MAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAS,UAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,UAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,UAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,UAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,gBAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,gBAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAU,gBAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,gBAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,SAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,SAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAW,SAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,SAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AAIA,IAAAY,OAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,OAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAY,OAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,OAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAa,OAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,OAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAa,OAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,OAAA,CAAAb,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/lib/commonjs/shared/models/index.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=index.js.map

package/lib/commonjs/shared/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["shared/models/index.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/shared/transport/index.js

@@ -0,0 +1,260 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.TransportFactory = void 0;
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
+/**
+ * Transport Abstraction
+ * 
+ * Unified transport layer for WebSocket, SSE, and polling.
+ * Provides automatic fallback and unified configuration.
+ */
+
+/**
+ * Transport Interface
+ * All transport implementations must implement this
+ */
+
+/**
+ * Transport Factory
+ * Creates the appropriate transport based on availability and configuration
+ */
+class TransportFactory {
+  /**
+   * Create a transport with automatic fallback
+   * Tries WebSocket first, then SSE, then polling
+   */
+  static async create(config, callbacks) {
+    // Try WebSocket first (best for real-time)
+    if (await this.isWebSocketAvailable()) {
+      try {
+        return new WebSocketTransport(config, callbacks);
+      } catch (error) {
+        // Fall through to SSE
+      }
+    }
+
+    // Try SSE second (good for one-way updates)
+    if (await this.isSSEAvailable()) {
+      try {
+        return new SSETransport(config, callbacks);
+      } catch (error) {
+        // Fall through to polling
+      }
+    }
+
+    // Fall back to polling (always available)
+    return new PollingTransport(config, callbacks);
+  }
+
+  /**
+   * Check if WebSocket is available
+   */
+  static async isWebSocketAvailable() {
+    // WebSocket is available in browsers and Node.js with socket.io-client
+    return typeof window !== 'undefined' || typeof process !== 'undefined';
+  }
+
+  /**
+   * Check if SSE is available
+   */
+  static async isSSEAvailable() {
+    // SSE is available in browsers via EventSource
+    // In Node.js, would need a polyfill or library
+    return typeof EventSource !== 'undefined' || typeof window !== 'undefined' && 'EventSource' in window;
+  }
+}
+
+/**
+ * WebSocket Transport Implementation
+ * Uses socket.io-client for WebSocket connections
+ */
+exports.TransportFactory = TransportFactory;
+class WebSocketTransport {
+  socket = null;
+  connected = false;
+  constructor(config, callbacks) {
+    this.config = config;
+    this.callbacks = callbacks;
+  }
+  async connect() {
+    // Dynamic import to avoid bundling socket.io-client if not needed
+    let io;
+    try {
+      io = (await Promise.resolve().then(() => _interopRequireWildcard(require('socket.io-client')))).default;
+    } catch (error) {
+      throw new Error('socket.io-client is required for WebSocket transport. Install it as a dependency.');
+    }
+    const url = this.config.namespace ? `${this.config.baseURL}/${this.config.namespace}` : this.config.baseURL;
+    const socketOptions = {
+      transports: ['websocket', 'polling'],
+      reconnection: true,
+      reconnectionAttempts: this.config.reconnectAttempts ?? 3,
+      reconnectionDelay: this.config.reconnectDelay ?? 1000
+    };
+    if (this.config.accessToken) {
+      socketOptions.auth = {
+        token: this.config.accessToken
+      };
+    }
+    this.socket = io(url, socketOptions);
+    this.socket.on('connect', () => {
+      this.connected = true;
+      if (this.config.sessionToken) {
+        this.socket.emit('join', this.config.sessionToken);
+      }
+      this.callbacks.onConnect?.();
+    });
+    this.socket.on('auth_update', payload => {
+      this.callbacks.onUpdate?.(payload);
+    });
+    this.socket.on('connect_error', error => {
+      this.callbacks.onError?.(error);
+    });
+    this.socket.on('disconnect', () => {
+      this.connected = false;
+      this.callbacks.onDisconnect?.();
+    });
+  }
+  disconnect() {
+    if (this.socket) {
+      this.socket.disconnect();
+      this.socket = null;
+      this.connected = false;
+    }
+  }
+  isConnected() {
+    return this.connected && this.socket?.connected === true;
+  }
+  getType() {
+    return 'websocket';
+  }
+}
+
+/**
+ * SSE Transport Implementation
+ * Uses EventSource for Server-Sent Events
+ */
+class SSETransport {
+  eventSource = null;
+  connected = false;
+  constructor(config, callbacks) {
+    this.config = config;
+    this.callbacks = callbacks;
+  }
+  async connect() {
+    if (typeof EventSource === 'undefined') {
+      throw new Error('EventSource is not available in this environment');
+    }
+    const url = this.config.sessionToken ? `${this.config.baseURL}/auth/session/stream/${this.config.sessionToken}` : `${this.config.baseURL}/auth/session/stream`;
+    this.eventSource = new EventSource(url);
+    this.eventSource.onopen = () => {
+      this.connected = true;
+      this.callbacks.onConnect?.();
+    };
+    this.eventSource.onmessage = event => {
+      try {
+        const update = JSON.parse(event.data);
+        this.callbacks.onUpdate?.(update);
+      } catch (error) {
+        this.callbacks.onError?.(error);
+      }
+    };
+    this.eventSource.onerror = error => {
+      this.callbacks.onError?.(new Error('SSE connection error'));
+    };
+  }
+  disconnect() {
+    if (this.eventSource) {
+      this.eventSource.close();
+      this.eventSource = null;
+      this.connected = false;
+    }
+  }
+  isConnected() {
+    return this.connected && this.eventSource?.readyState === EventSource.OPEN;
+  }
+  getType() {
+    return 'sse';
+  }
+}
+
+/**
+ * Polling Transport Implementation
+ * Uses HTTP polling as fallback
+ */
+class PollingTransport {
+  intervalId = null;
+  connected = false;
+  abortController = null;
+  constructor(config, callbacks) {
+    this.config = config;
+    this.callbacks = callbacks;
+  }
+  async connect() {
+    this.connected = true;
+    this.callbacks.onConnect?.();
+    const poll = async () => {
+      if (!this.config.sessionToken) {
+        return;
+      }
+      try {
+        this.abortController = new AbortController();
+        const response = await fetch(`${this.config.baseURL}/api/auth/session/status/${this.config.sessionToken}`, {
+          signal: this.abortController.signal,
+          headers: this.config.accessToken ? {
+            Authorization: `Bearer ${this.config.accessToken}`
+          } : {}
+        });
+        if (!response.ok) {
+          throw new Error(`Polling failed: ${response.statusText}`);
+        }
+        const data = await response.json();
+        if (data.authorized && data.sessionId) {
+          this.callbacks.onUpdate?.({
+            status: 'authorized',
+            sessionId: data.sessionId,
+            publicKey: data.publicKey
+          });
+        } else if (data.status === 'expired') {
+          this.callbacks.onUpdate?.({
+            status: 'expired'
+          });
+        } else if (data.status === 'cancelled') {
+          this.callbacks.onUpdate?.({
+            status: 'cancelled'
+          });
+        }
+      } catch (error) {
+        if (error instanceof Error && error.name !== 'AbortError') {
+          this.callbacks.onError?.(error);
+        }
+      }
+    };
+
+    // Poll immediately, then at intervals
+    await poll();
+    this.intervalId = setInterval(poll, this.config.pollingInterval ?? 3000);
+  }
+  disconnect() {
+    if (this.intervalId) {
+      clearInterval(this.intervalId);
+      this.intervalId = null;
+    }
+    if (this.abortController) {
+      this.abortController.abort();
+      this.abortController = null;
+    }
+    this.connected = false;
+    this.callbacks.onDisconnect?.();
+  }
+  isConnected() {
+    return this.connected && this.intervalId !== null;
+  }
+  getType() {
+    return 'polling';
+  }
+}
+//# sourceMappingURL=index.js.map

package/lib/commonjs/shared/transport/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["TransportFactory","create","config","callbacks","isWebSocketAvailable","WebSocketTransport","error","isSSEAvailable","SSETransport","PollingTransport","window","process","EventSource","exports","socket","connected","constructor","connect","io","Promise","resolve","then","_interopRequireWildcard","require","default","Error","url","namespace","baseURL","socketOptions","transports","reconnection","reconnectionAttempts","reconnectAttempts","reconnectionDelay","reconnectDelay","accessToken","auth","token","on","sessionToken","emit","onConnect","payload","onUpdate","onError","onDisconnect","disconnect","isConnected","getType","eventSource","onopen","onmessage","event","update","JSON","parse","data","onerror","close","readyState","OPEN","intervalId","abortController","poll","AbortController","response","fetch","signal","headers","Authorization","ok","statusText","json","authorized","sessionId","status","publicKey","name","setInterval","pollingInterval","clearInterval","abort"],"sourceRoot":"../../../../src","sources":["shared/transport/index.ts"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;;AA+BA;AACA;AACA;AACA;;AAuBA;AACA;AACA;AACA;AACO,MAAMA,gBAAgB,CAAC;EAC5B;AACF;AACA;AACA;EACE,aAAaC,MAAMA,CACjBC,MAAuB,EACvBC,SAA6B,EACT;IACpB;IACA,IAAI,MAAM,IAAI,CAACC,oBAAoB,CAAC,CAAC,EAAE;MACrC,IAAI;QACF,OAAO,IAAIC,kBAAkB,CAACH,MAAM,EAAEC,SAAS,CAAC;MAClD,CAAC,CAAC,OAAOG,KAAK,EAAE;QACd;MAAA;IAEJ;;IAEA;IACA,IAAI,MAAM,IAAI,CAACC,cAAc,CAAC,CAAC,EAAE;MAC/B,IAAI;QACF,OAAO,IAAIC,YAAY,CAACN,MAAM,EAAEC,SAAS,CAAC;MAC5C,CAAC,CAAC,OAAOG,KAAK,EAAE;QACd;MAAA;IAEJ;;IAEA;IACA,OAAO,IAAIG,gBAAgB,CAACP,MAAM,EAAEC,SAAS,CAAC;EAChD;;EAEA;AACF;AACA;EACE,aAAqBC,oBAAoBA,CAAA,EAAqB;IAC5D;IACA,OAAO,OAAOM,MAAM,KAAK,WAAW,IAAI,OAAOC,OAAO,KAAK,WAAW;EACxE;;EAEA;AACF;AACA;EACE,aAAqBJ,cAAcA,CAAA,EAAqB;IACtD;IACA;IACA,OAAO,OAAOK,WAAW,KAAK,WAAW,IACjC,OAAOF,MAAM,KAAK,WAAW,IAAI,aAAa,IAAIA,MAAO;EACnE;AACF;;AAEA;AACA;AACA;AACA;AAHAG,OAAA,CAAAb,gBAAA,GAAAA,gBAAA;AAIA,MAAMK,kBAAkB,CAAsB;EACpCS,MAAM,GAAQ,IAAI;EAGlBC,SAAS,GAAG,KAAK;EAEzBC,WAAWA,CAACd,MAAuB,EAAEC,SAA6B,EAAE;IAClE,IAAI,CAACD,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,SAAS,GAAGA,SAAS;EAC5B;EAEA,MAAMc,OAAOA,CAAA,EAAkB;IAC7B;IACA,IAAIC,EAAO;IACX,IAAI;MACFA,EAAE,GAAG,CAAC,MAAAC,OAAA,CAAAC,OAAA,GAAAC,IAAA,OAAAC,uBAAA,CAAAC,OAAA,CAAa,kBAAkB,GAAC,EAAEC,OAAO;IACjD,CAAC,CAAC,OAAOlB,KAAK,EAAE;MACd,MAAM,IAAImB,KAAK,CAAC,mFAAmF,CAAC;IACtG;IAEA,MAAMC,GAAG,GAAG,IAAI,CAACxB,MAAM,CAACyB,SAAS,GAC7B,GAAG,IAAI,CAACzB,MAAM,CAAC0B,OAAO,IAAI,IAAI,CAAC1B,MAAM,CAACyB,SAAS,EAAE,GACjD,IAAI,CAACzB,MAAM,CAAC0B,OAAO;IAEvB,MAAMC,aAAkB,GAAG;MACzBC,UAAU,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;MACpCC,YAAY,EAAE,IAAI;MAClBC,oBAAoB,EAAE,IAAI,CAAC9B,MAAM,CAAC+B,iBAAiB,IAAI,CAAC;MACxDC,iBAAiB,EAAE,IAAI,CAAChC,MAAM,CAACiC,cAAc,IAAI;IACnD,CAAC;IAED,IAAI,IAAI,CAACjC,MAAM,CAACkC,WAAW,EAAE;MAC3BP,aAAa,CAACQ,IAAI,GAAG;QAAEC,KAAK,EAAE,IAAI,CAACpC,MAAM,CAACkC;MAAY,CAAC;IACzD;IAEA,IAAI,CAACtB,MAAM,GAAGI,EAAE,CAACQ,GAAG,EAAEG,aAAa,CAAC;IAEpC,IAAI,CAACf,MAAM,CAACyB,EAAE,CAAC,SAAS,EAAE,MAAM;MAC9B,IAAI,CAACxB,SAAS,GAAG,IAAI;MACrB,IAAI,IAAI,CAACb,MAAM,CAACsC,YAAY,EAAE;QAC5B,IAAI,CAAC1B,MAAM,CAAC2B,IAAI,CAAC,MAAM,EAAE,IAAI,CAACvC,MAAM,CAACsC,YAAY,CAAC;MACpD;MACA,IAAI,CAACrC,SAAS,CAACuC,SAAS,GAAG,CAAC;IAC9B,CAAC,CAAC;IAEF,IAAI,CAAC5B,MAAM,CAACyB,EAAE,CAAC,aAAa,EAAGI,OAAwB,IAAK;MAC1D,IAAI,CAACxC,SAAS,CAACyC,QAAQ,GAAGD,OAAO,CAAC;IACpC,CAAC,CAAC;IAEF,IAAI,CAAC7B,MAAM,CAACyB,EAAE,CAAC,eAAe,EAAGjC,KAAY,IAAK;MAChD,IAAI,CAACH,SAAS,CAAC0C,OAAO,GAAGvC,KAAK,CAAC;IACjC,CAAC,CAAC;IAEF,IAAI,CAACQ,MAAM,CAACyB,EAAE,CAAC,YAAY,EAAE,MAAM;MACjC,IAAI,CAACxB,SAAS,GAAG,KAAK;MACtB,IAAI,CAACZ,SAAS,CAAC2C,YAAY,GAAG,CAAC;IACjC,CAAC,CAAC;EACJ;EAEAC,UAAUA,CAAA,EAAS;IACjB,IAAI,IAAI,CAACjC,MAAM,EAAE;MACf,IAAI,CAACA,MAAM,CAACiC,UAAU,CAAC,CAAC;MACxB,IAAI,CAACjC,MAAM,GAAG,IAAI;MAClB,IAAI,CAACC,SAAS,GAAG,KAAK;IACxB;EACF;EAEAiC,WAAWA,CAAA,EAAY;IACrB,OAAO,IAAI,CAACjC,SAAS,IAAI,IAAI,CAACD,MAAM,EAAEC,SAAS,KAAK,IAAI;EAC1D;EAEAkC,OAAOA,CAAA,EAAkB;IACvB,OAAO,WAAW;EACpB;AACF;;AAEA;AACA;AACA;AACA;AACA,MAAMzC,YAAY,CAAsB;EAC9B0C,WAAW,GAAuB,IAAI;EAGtCnC,SAAS,GAAG,KAAK;EAEzBC,WAAWA,CAACd,MAAuB,EAAEC,SAA6B,EAAE;IAClE,IAAI,CAACD,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,SAAS,GAAGA,SAAS;EAC5B;EAEA,MAAMc,OAAOA,CAAA,EAAkB;IAC7B,IAAI,OAAOL,WAAW,KAAK,WAAW,EAAE;MACtC,MAAM,IAAIa,KAAK,CAAC,kDAAkD,CAAC;IACrE;IAEA,MAAMC,GAAG,GAAG,IAAI,CAACxB,MAAM,CAACsC,YAAY,GAChC,GAAG,IAAI,CAACtC,MAAM,CAAC0B,OAAO,wBAAwB,IAAI,CAAC1B,MAAM,CAACsC,YAAY,EAAE,GACxE,GAAG,IAAI,CAACtC,MAAM,CAAC0B,OAAO,sBAAsB;IAEhD,IAAI,CAACsB,WAAW,GAAG,IAAItC,WAAW,CAACc,GAAG,CAAC;IAEvC,IAAI,CAACwB,WAAW,CAACC,MAAM,GAAG,MAAM;MAC9B,IAAI,CAACpC,SAAS,GAAG,IAAI;MACrB,IAAI,CAACZ,SAAS,CAACuC,SAAS,GAAG,CAAC;IAC9B,CAAC;IAED,IAAI,CAACQ,WAAW,CAACE,SAAS,GAAIC,KAAK,IAAK;MACtC,IAAI;QACF,MAAMC,MAAM,GAAGC,IAAI,CAACC,KAAK,CAACH,KAAK,CAACI,IAAI,CAAoB;QACxD,IAAI,CAACtD,SAAS,CAACyC,QAAQ,GAAGU,MAAM,CAAC;MACnC,CAAC,CAAC,OAAOhD,KAAK,EAAE;QACd,IAAI,CAACH,SAAS,CAAC0C,OAAO,GAAGvC,KAAc,CAAC;MAC1C;IACF,CAAC;IAED,IAAI,CAAC4C,WAAW,CAACQ,OAAO,GAAIpD,KAAK,IAAK;MACpC,IAAI,CAACH,SAAS,CAAC0C,OAAO,GAAG,IAAIpB,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7D,CAAC;EACH;EAEAsB,UAAUA,CAAA,EAAS;IACjB,IAAI,IAAI,CAACG,WAAW,EAAE;MACpB,IAAI,CAACA,WAAW,CAACS,KAAK,CAAC,CAAC;MACxB,IAAI,CAACT,WAAW,GAAG,IAAI;MACvB,IAAI,CAACnC,SAAS,GAAG,KAAK;IACxB;EACF;EAEAiC,WAAWA,CAAA,EAAY;IACrB,OAAO,IAAI,CAACjC,SAAS,IAAI,IAAI,CAACmC,WAAW,EAAEU,UAAU,KAAKhD,WAAW,CAACiD,IAAI;EAC5E;EAEAZ,OAAOA,CAAA,EAAkB;IACvB,OAAO,KAAK;EACd;AACF;;AAEA;AACA;AACA;AACA;AACA,MAAMxC,gBAAgB,CAAsB;EAClCqD,UAAU,GAA0C,IAAI;EAGxD/C,SAAS,GAAG,KAAK;EACjBgD,eAAe,GAA2B,IAAI;EAEtD/C,WAAWA,CAACd,MAAuB,EAAEC,SAA6B,EAAE;IAClE,IAAI,CAACD,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,SAAS,GAAGA,SAAS;EAC5B;EAEA,MAAMc,OAAOA,CAAA,EAAkB;IAC7B,IAAI,CAACF,SAAS,GAAG,IAAI;IACrB,IAAI,CAACZ,SAAS,CAACuC,SAAS,GAAG,CAAC;IAE5B,MAAMsB,IAAI,GAAG,MAAAA,CAAA,KAAY;MACvB,IAAI,CAAC,IAAI,CAAC9D,MAAM,CAACsC,YAAY,EAAE;QAC7B;MACF;MAEA,IAAI;QACF,IAAI,CAACuB,eAAe,GAAG,IAAIE,eAAe,CAAC,CAAC;QAC5C,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAC1B,GAAG,IAAI,CAACjE,MAAM,CAAC0B,OAAO,4BAA4B,IAAI,CAAC1B,MAAM,CAACsC,YAAY,EAAE,EAC5E;UACE4B,MAAM,EAAE,IAAI,CAACL,eAAe,CAACK,MAAM;UACnCC,OAAO,EAAE,IAAI,CAACnE,MAAM,CAACkC,WAAW,GAC5B;YAAEkC,aAAa,EAAE,UAAU,IAAI,CAACpE,MAAM,CAACkC,WAAW;UAAG,CAAC,GACtD,CAAC;QACP,CACF,CAAC;QAED,IAAI,CAAC8B,QAAQ,CAACK,EAAE,EAAE;UAChB,MAAM,IAAI9C,KAAK,CAAC,mBAAmByC,QAAQ,CAACM,UAAU,EAAE,CAAC;QAC3D;QAEA,MAAMf,IAAI,GAAG,MAAMS,QAAQ,CAACO,IAAI,CAAC,CAAC;QAElC,IAAIhB,IAAI,CAACiB,UAAU,IAAIjB,IAAI,CAACkB,SAAS,EAAE;UACrC,IAAI,CAACxE,SAAS,CAACyC,QAAQ,GAAG;YACxBgC,MAAM,EAAE,YAAY;YACpBD,SAAS,EAAElB,IAAI,CAACkB,SAAS;YACzBE,SAAS,EAAEpB,IAAI,CAACoB;UAClB,CAAC,CAAC;QACJ,CAAC,MAAM,IAAIpB,IAAI,CAACmB,MAAM,KAAK,SAAS,EAAE;UACpC,IAAI,CAACzE,SAAS,CAACyC,QAAQ,GAAG;YAAEgC,MAAM,EAAE;UAAU,CAAC,CAAC;QAClD,CAAC,MAAM,IAAInB,IAAI,CAACmB,MAAM,KAAK,WAAW,EAAE;UACtC,IAAI,CAACzE,SAAS,CAACyC,QAAQ,GAAG;YAAEgC,MAAM,EAAE;UAAY,CAAC,CAAC;QACpD;MACF,CAAC,CAAC,OAAOtE,KAAK,EAAE;QACd,IAAIA,KAAK,YAAYmB,KAAK,IAAInB,KAAK,CAACwE,IAAI,KAAK,YAAY,EAAE;UACzD,IAAI,CAAC3E,SAAS,CAAC0C,OAAO,GAAGvC,KAAK,CAAC;QACjC;MACF;IACF,CAAC;;IAED;IACA,MAAM0D,IAAI,CAAC,CAAC;IACZ,IAAI,CAACF,UAAU,GAAGiB,WAAW,CAC3Bf,IAAI,EACJ,IAAI,CAAC9D,MAAM,CAAC8E,eAAe,IAAI,IACjC,CAAC;EACH;EAEAjC,UAAUA,CAAA,EAAS;IACjB,IAAI,IAAI,CAACe,UAAU,EAAE;MACnBmB,aAAa,CAAC,IAAI,CAACnB,UAAU,CAAC;MAC9B,IAAI,CAACA,UAAU,GAAG,IAAI;IACxB;IACA,IAAI,IAAI,CAACC,eAAe,EAAE;MACxB,IAAI,CAACA,eAAe,CAACmB,KAAK,CAAC,CAAC;MAC5B,IAAI,CAACnB,eAAe,GAAG,IAAI;IAC7B;IACA,IAAI,CAAChD,SAAS,GAAG,KAAK;IACtB,IAAI,CAACZ,SAAS,CAAC2C,YAAY,GAAG,CAAC;EACjC;EAEAE,WAAWA,CAAA,EAAY;IACrB,OAAO,IAAI,CAACjC,SAAS,IAAI,IAAI,CAAC+C,UAAU,KAAK,IAAI;EACnD;EAEAb,OAAOA,CAAA,EAAkB;IACvB,OAAO,SAAS;EAClB;AACF","ignoreList":[]}

package/lib/commonjs/shared/utils/index.js

@@ -0,0 +1,82 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.bytesToHex = bytesToHex;
+exports.generateSessionToken = generateSessionToken;
+exports.generateSessionTokenSync = generateSessionTokenSync;
+exports.hexToBytes = hexToBytes;
+exports.shortenPublicKey = shortenPublicKey;
+/**
+ * Shared Utilities
+ * 
+ * Common utility functions used across Accounts, Services SDK, and API packages.
+ */
+
+/**
+ * Get a shortened display version of a public key
+ * Format: first 8 chars ... last 8 chars
+ */
+function shortenPublicKey(publicKey) {
+  if (publicKey.length <= 16) return publicKey;
+  return `${publicKey.slice(0, 8)}...${publicKey.slice(-8)}`;
+}
+
+/**
+ * Generate a secure random session token
+ * Uses crypto.randomBytes (Node) or Web Crypto API (Browser/RN)
+ */
+async function generateSessionToken(size = 32) {
+  // Use platform-appropriate random bytes
+  if (typeof window !== 'undefined' && window.crypto) {
+    // Web platform
+    const array = new Uint8Array(size);
+    window.crypto.getRandomValues(array);
+    return Array.from(array, byte => byte.toString(16).padStart(2, '0')).join('');
+  }
+  if (typeof process !== 'undefined' && process.versions?.node) {
+    // Node.js platform
+    // eslint-disable-next-line @typescript-eslint/no-implied-eval
+    const getCrypto = new Function('return require("crypto")');
+    const crypto = getCrypto();
+    return crypto.randomBytes(size).toString('hex');
+  }
+
+  // React Native - will be handled by platform adapter
+  // For now, throw an error if we can't determine platform
+  throw new Error('Unable to generate session token: no crypto implementation available');
+}
+
+/**
+ * Generate a session token synchronously (Node.js only)
+ */
+function generateSessionTokenSync(size = 32) {
+  if (typeof process === 'undefined' || !process.versions?.node) {
+    throw new Error('generateSessionTokenSync can only be used in Node.js');
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-implied-eval
+  const getCrypto = new Function('return require("crypto")');
+  const crypto = getCrypto();
+  return crypto.randomBytes(size).toString('hex');
+}
+
+/**
+ * Convert bytes to hex string
+ */
+function bytesToHex(bytes) {
+  return Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
+}
+
+/**
+ * Convert hex string to bytes
+ */
+function hexToBytes(hex) {
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2) {
+    bytes[i / 2] = parseInt(hex.substr(i, 2), 16);
+  }
+  return bytes;
+}
+//# sourceMappingURL=index.js.map

package/lib/commonjs/shared/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["shortenPublicKey","publicKey","length","slice","generateSessionToken","size","window","crypto","array","Uint8Array","getRandomValues","Array","from","byte","toString","padStart","join","process","versions","node","getCrypto","Function","randomBytes","Error","generateSessionTokenSync","bytesToHex","bytes","hexToBytes","hex","i","parseInt","substr"],"sourceRoot":"../../../../src","sources":["shared/utils/index.ts"],"mappings":";;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACO,SAASA,gBAAgBA,CAACC,SAAiB,EAAU;EAC1D,IAAIA,SAAS,CAACC,MAAM,IAAI,EAAE,EAAE,OAAOD,SAAS;EAC5C,OAAO,GAAGA,SAAS,CAACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAMF,SAAS,CAACE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;AAC5D;;AAEA;AACA;AACA;AACA;AACO,eAAeC,oBAAoBA,CAACC,IAAY,GAAG,EAAE,EAAmB;EAC7E;EACA,IAAI,OAAOC,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACC,MAAM,EAAE;IAClD;IACA,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAACJ,IAAI,CAAC;IAClCC,MAAM,CAACC,MAAM,CAACG,eAAe,CAACF,KAAK,CAAC;IACpC,OAAOG,KAAK,CAACC,IAAI,CAACJ,KAAK,EAAEK,IAAI,IAAIA,IAAI,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;EAC/E;EAEA,IAAI,OAAOC,OAAO,KAAK,WAAW,IAAIA,OAAO,CAACC,QAAQ,EAAEC,IAAI,EAAE;IAC5D;IACA;IACA,MAAMC,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;IAC1D,MAAMd,MAAM,GAAGa,SAAS,CAAC,CAAC;IAC1B,OAAOb,MAAM,CAACe,WAAW,CAACjB,IAAI,CAAC,CAACS,QAAQ,CAAC,KAAK,CAAC;EACjD;;EAEA;EACA;EACA,MAAM,IAAIS,KAAK,CAAC,sEAAsE,CAAC;AACzF;;AAEA;AACA;AACA;AACO,SAASC,wBAAwBA,CAACnB,IAAY,GAAG,EAAE,EAAU;EAClE,IAAI,OAAOY,OAAO,KAAK,WAAW,IAAI,CAACA,OAAO,CAACC,QAAQ,EAAEC,IAAI,EAAE;IAC7D,MAAM,IAAII,KAAK,CAAC,sDAAsD,CAAC;EACzE;;EAEA;EACA,MAAMH,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;EAC1D,MAAMd,MAAM,GAAGa,SAAS,CAAC,CAAC;EAC1B,OAAOb,MAAM,CAACe,WAAW,CAACjB,IAAI,CAAC,CAACS,QAAQ,CAAC,KAAK,CAAC;AACjD;;AAEA;AACA;AACA;AACO,SAASW,UAAUA,CAACC,KAAiB,EAAU;EACpD,OAAOf,KAAK,CAACC,IAAI,CAACc,KAAK,EAAEb,IAAI,IAAIA,IAAI,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;AAC/E;;AAEA;AACA;AACA;AACO,SAASW,UAAUA,CAACC,GAAW,EAAc;EAClD,MAAMF,KAAK,GAAG,IAAIjB,UAAU,CAACmB,GAAG,CAAC1B,MAAM,GAAG,CAAC,CAAC;EAC5C,KAAK,IAAI2B,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGD,GAAG,CAAC1B,MAAM,EAAE2B,CAAC,IAAI,CAAC,EAAE;IACtCH,KAAK,CAACG,CAAC,GAAG,CAAC,CAAC,GAAGC,QAAQ,CAACF,GAAG,CAACG,MAAM,CAACF,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;EAC/C;EACA,OAAOH,KAAK;AACd","ignoreList":[]}