@pelican-identity/auth-core 1.2.2 → 1.2.3

package/dist/engine/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAGpB,MAAM,gBAAgB,CAAC;AAYxB,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;AAMxC,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAuB;IAEzC,OAAO,CAAC,iBAAiB,CAAC,CAAa;IAEvC,OAAO,CAAC,SAAS,CAEV;IAEP,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAEzC,MAAM,EAAE,iBAAiB;IAsBrC,EAAE,CAAC,CAAC,SAAS,MAAM,mBAAmB,EACpC,KAAK,EAAE,CAAC,EACR,EAAE,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAWhC,KAAK;IAqCX,IAAI;YAOU,aAAa;YAiBb,cAAc;IA+B5B,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,iBAAiB;YAwCX,cAAc;IA4B5B,OAAO,CAAC,wBAAwB;IAYhC,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,SAAS;IAyBjB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,YAAY;IAMpB,OAAO;IAMP,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,IAAI;CAIb"}

package/dist/engine/engine.js

@@ -0,0 +1,238 @@
+import CryptoService from "../utilities/crypto";
+import QRCode from "qrcode";
+import { storeAuthSession, getAuthSession, clearAuthSession, } from "../utilities/storage";
+import { StateMachine } from "../utilities/stateMachine";
+import { Transport } from "../utilities/transport";
+import { BASEURL } from "../constants";
+export class PelicanAuthentication {
+    constructor(config) {
+        this.crypto = new CryptoService();
+        this.stateMachine = new StateMachine();
+        this.sessionId = "";
+        this.sessionKey = null;
+        this.listeners = {};
+        if (!config.publicKey)
+            throw new Error("Missing publicKey");
+        if (!config.projectId)
+            throw new Error("Missing projectId");
+        if (!config.authType)
+            throw new Error("Missing authType");
+        this.config = {
+            continuousMode: false,
+            forceQRCode: false,
+            ...config,
+        };
+        this.stateMachine.subscribe((s) => this.emit("state", s));
+        this.attachVisibilityRecovery();
+    }
+    on(event, cb) {
+        var _a;
+        (_a = this.listeners)[event] ?? (_a[event] = new Set());
+        this.listeners[event].add(cb);
+        return () => this.listeners[event].delete(cb);
+    }
+    async start() {
+        if (this.stateMachine.current !== "idle")
+            return;
+        this.resetSession();
+        this.stateMachine.transition("initializing");
+        try {
+            const relay = await this.fetchRelayUrl();
+            this.sessionKey = this.crypto.generateSymmetricKey();
+            this.sessionId = crypto.randomUUID() + crypto.randomUUID();
+            this.transport = new Transport({
+                onOpen: () => {
+                    this.transport.send({
+                        type: "register",
+                        sessionID: this.sessionId,
+                        ...this.config,
+                    });
+                    this.stateMachine.transition("awaiting-pair");
+                },
+                onMessage: (msg) => this.handleMessage(msg),
+                onError: () => this.fail(new Error("WebSocket connection failed")),
+            });
+            this.transport.connect(relay);
+            await this.emitEntryPoint();
+        }
+        catch (err) {
+            this.fail(err instanceof Error ? err : new Error("Start failed"));
+        }
+    }
+    stop() {
+        this.terminate(false);
+    }
+    async fetchRelayUrl() {
+        const { publicKey, projectId, authType } = this.config;
+        const res = await fetch(`${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`);
+        if (!res.ok) {
+            throw new Error("Failed to fetch relay URL");
+        }
+        const json = await res.json();
+        return json.relay_url;
+    }
+    async emitEntryPoint() {
+        const payload = {
+            sessionID: this.sessionId,
+            sessionKey: this.sessionKey,
+            publicKey: this.config.publicKey,
+            authType: this.config.authType,
+            projectId: this.config.projectId,
+            url: window.location.href,
+        };
+        const shouldUseQR = this.config.forceQRCode ||
+            !/Android|iPhone|iPad/i.test(navigator.userAgent);
+        if (!shouldUseQR && this.sessionKey) {
+            storeAuthSession(this.sessionId, this.sessionKey, 5 * 60000);
+            this.emit("deeplink", `pelicanvault://auth/deep-link?data=${encodeURIComponent(JSON.stringify(payload))}`);
+        }
+        else {
+            const qr = await QRCode.toDataURL(JSON.stringify(payload));
+            this.emit("qr", qr);
+        }
+    }
+    handleMessage(msg) {
+        console.log(msg);
+        switch (msg.type) {
+            case "paired":
+                console.log("Paired");
+                this.stateMachine.transition("paired");
+                this.transport.send({
+                    type: "authenticate",
+                    sessionID: this.sessionId,
+                    ...this.config,
+                    url: window.location.href,
+                });
+                return;
+            case "phone-auth-success":
+                this.handleAuthSuccess(msg);
+                return;
+            case "phone-terminated":
+                this.fail(new Error("Authenticating device terminated the connection"));
+                this.restartIfContinuous();
+                return;
+            case "confirmed":
+                this.terminate(true);
+                this.restartIfContinuous();
+                return;
+        }
+    }
+    handleAuthSuccess(msg) {
+        if (!this.sessionKey || !msg.cipher || !msg.nonce) {
+            this.fail(new Error("Invalid authentication payload"));
+            this.restartIfContinuous();
+            return;
+        }
+        try {
+            const decrypted = this.crypto.decryptSymmetric({
+                encrypted: { cipher: msg.cipher, nonce: msg.nonce },
+                keyString: this.sessionKey,
+            });
+            if (!decrypted) {
+                this.fail(new Error("Invalid authentication data"));
+                this.restartIfContinuous();
+                return;
+            }
+            const result = JSON.parse(decrypted);
+            this.emit("success", result);
+            this.stateMachine.transition("authenticated");
+            this.transport?.send({
+                type: "confirm",
+                sessionID: this.sessionId,
+            });
+        }
+        catch {
+            this.fail(new Error("Failed to decrypt authentication data"));
+            this.restartIfContinuous();
+        }
+    }
+    async getCachedEntry(cached) {
+        try {
+            const res = await fetch(`${BASEURL}/session?session_id=${cached.sessionId}`);
+            if (!res.ok)
+                throw new Error("Invalid session");
+            const data = await res.json();
+            const decrypted = this.crypto.decryptSymmetric({
+                encrypted: { cipher: data.cipher, nonce: data.nonce },
+                keyString: cached.sessionKey,
+            });
+            if (!decrypted) {
+                this.fail(new Error("Invalid session data"));
+                this.restartIfContinuous();
+                return;
+            }
+            const result = JSON.parse(decrypted);
+            this.emit("success", result);
+            clearAuthSession();
+        }
+        catch {
+            this.fail(new Error("Session recovery failed"));
+            this.restartIfContinuous();
+        }
+    }
+    attachVisibilityRecovery() {
+        this.visibilityHandler = async () => {
+            if (document.visibilityState !== "visible")
+                return;
+            const cached = getAuthSession();
+            if (!cached)
+                return;
+            await this.getCachedEntry(cached);
+        };
+        document.addEventListener("visibilitychange", this.visibilityHandler);
+    }
+    detachVisibilityRecovery() {
+        if (this.visibilityHandler) {
+            document.removeEventListener("visibilitychange", this.visibilityHandler);
+            this.visibilityHandler = undefined;
+        }
+    }
+    terminate(success) {
+        if (!this.transport)
+            return;
+        if (!success) {
+            this.transport?.send({
+                type: "client-terminated",
+                sessionID: this.sessionId,
+                projectId: this.config.projectId,
+                publicKey: this.config.publicKey,
+                authType: this.config.authType,
+            });
+        }
+        setTimeout(() => {
+            this.transport?.close();
+        }, 150);
+        clearAuthSession();
+        this.resetSession();
+        if (!this.config.continuousMode) {
+            this.detachVisibilityRecovery();
+        }
+        this.stateMachine.transition(success ? "confirmed" : "terminated");
+    }
+    restartIfContinuous() {
+        if (!this.config.continuousMode)
+            return;
+        this.terminate(false);
+        this.stateMachine.transition("idle");
+        setTimeout(() => {
+            this.start();
+        }, 150);
+    }
+    resetSession() {
+        this.sessionId = "";
+        this.sessionKey = null;
+    }
+    destroy() {
+        this.detachVisibilityRecovery();
+        this.transport?.close();
+        this.listeners = {};
+    }
+    emit(event, payload) {
+        this.listeners[event]?.forEach((cb) => cb(payload));
+    }
+    fail(err) {
+        this.emit("error", err);
+        this.stateMachine.transition("error");
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAO5B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQvC,MAAM,OAAO,qBAAqB;IAgBhC,YAAY,MAAyB;QAfpB,WAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC7B,iBAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QAG3C,cAAS,GAAG,EAAE,CAAC;QACf,eAAU,GAAkB,IAAI,CAAC;QAIjC,cAAS,GAEb,EAAE,CAAC;QAKL,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;YAClB,GAAG,MAAM;SACV,CAAC;QAGF,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAQD,EAAE,CACA,KAAQ,EACR,EAAoC;;QAEpC,MAAA,IAAI,CAAC,SAAS,EAAC,KAAK,SAAL,KAAK,IAAM,IAAI,GAAG,EAAE,EAAC;QACpC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAMD,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAGzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAE3D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,MAAM,EAAE,GAAG,EAAE;oBAEX,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,GAAG,IAAI,CAAC,MAAM;qBACf,CAAC,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBAChD,CAAC;gBACD,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAC3D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;aACnE,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAKD,IAAI;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAKO,KAAK,CAAC,aAAa;QACzB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,qBAAqB,SAAS,cAAc,QAAQ,eAAe,SAAS,EAAE,CACzF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAKO,KAAK,CAAC,cAAc;QAC1B,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;SAC1B,CAAC;QAEF,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,WAAW;YACvB,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAEpC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,KAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CACP,UAAU,EACV,sCAAsC,kBAAkB,CACtD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,EAAE,CACJ,CAAC;QACJ,CAAC;aAAM,CAAC;YAEN,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAGO,aAAa,CAAC,GAAmB;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAEtB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,IAAI,CAAC,MAAM;oBACd,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;iBAC1B,CAAC,CAAC;gBACH,OAAO;YAET,KAAK,oBAAoB;gBAEvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO;YAET,KAAK,kBAAkB;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACxE,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YAET,KAAK,WAAW;gBAEd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;QACX,CAAC;IACH,CAAC;IAKO,iBAAiB,CAAC,GAAmB;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE;gBACnD,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAErD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAG9C,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAOO,KAAK,CAAC,cAAc,CAAC,MAAmB;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,uBAAuB,MAAM,CAAC,SAAS,EAAE,CACpD,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAEhD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACrD,SAAS,EAAE,MAAM,CAAC,UAAU;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7B,gBAAgB,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,iBAAiB,GAAG,KAAK,IAAI,EAAE;YAClC,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO;YAEnD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC;QAEF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC;IAEO,wBAAwB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzE,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAGO,SAAS,CAAC,OAAgB;QAChC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,gBAAgB,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO;QACxC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAErC,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAGD,OAAO;QACL,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAEO,IAAI,CACV,KAAQ,EACR,OAA+B;QAE/B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/index.js

@@ -316,8 +316,10 @@ var PelicanAuthentication = class {
   }
   /** Main WebSocket message router */
   handleMessage(msg) {
+    console.log(msg);
     switch (msg.type) {
       case "paired":
+        console.log("Paired");
         this.stateMachine.transition("paired");
         this.transport.send({
           type: "authenticate",

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":["nacl","encodeBase64","decodeBase64","QRCode"],"mappings":";;;;;;;;;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAMA,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAOC,2BAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQF,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAaA,qBAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQC,2BAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAOA,2BAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkBA,0BAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAaA,0BAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAYF,qBAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAMG,uBAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AAEH,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    switch (msg.type) {\n      case \"paired\":\n        // The mobile device has scanned the QR/opened the link\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}
+{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":["nacl","encodeBase64","decodeBase64","QRCode"],"mappings":";;;;;;;;;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAMA,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAOC,2BAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQF,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAaA,qBAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQC,2BAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAOA,2BAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkBA,0BAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAaA,0BAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAYF,qBAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAMG,uBAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AAEf,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAEpB,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    console.log(msg);\n\n    switch (msg.type) {\n      case \"paired\":\n        console.log(\"Paired\");\n\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}

package/dist/index.mjs

@@ -309,8 +309,10 @@ var PelicanAuthentication = class {
   }
   /** Main WebSocket message router */
   handleMessage(msg) {
+    console.log(msg);
     switch (msg.type) {
       case "paired":
+        console.log("Paired");
         this.stateMachine.transition("paired");
         this.transport.send({
           type: "authenticate",

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAO,aAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,aAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAO,aAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkB,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAa,YAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAY,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAM,MAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AAEH,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.mjs","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    switch (msg.type) {\n      case \"paired\":\n        // The mobile device has scanned the QR/opened the link\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}
+{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAO,aAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,aAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAO,aAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkB,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAa,YAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAY,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAM,MAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AAEf,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAEpB,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.mjs","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    console.log(msg);\n\n    switch (msg.type) {\n      case \"paired\":\n        console.log(\"Paired\");\n\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pelican-identity/auth-core",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Framework-agnostic authentication SDK for Pelican Identity",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",