@polyester/sdk 0.0.0

package/dist/services/auth/profile/profile.js

@@ -0,0 +1,61 @@
+import { AccountIdentitySchema, ProfileService as ProfileService$1 } from "../../../gen/auth/v1/profile_pb.js";
+import { toConnectCallOptions } from "../../../shared/request-options.js";
+import { removeUndefined } from "../../../utils/remove-undefined.js";
+import { AccountIdentitySchema as AccountIdentitySchema$1, ProfileSchema, UpdateProfileInputSchema, UsernameHistoryEntrySchema } from "./profile.schemas.js";
+import { createClient } from "@connectrpc/connect";
+import * as v from "valibot";
+//#region src/services/auth/profile/profile.ts
+/**
+* Manages the authenticated account's public profile and realtime identity updates.
+*/
+var ProfileService = class {
+	#client;
+	#realtime;
+	constructor(transport, realtime) {
+		this.#client = createClient(ProfileService$1, transport);
+		this.#realtime = realtime;
+	}
+	/**
+	* Fetches the caller's public profile, including username eligibility/cooldown, verified social handles, avatar, VIP tier, and account creation timestamp.
+	*/
+	async get(options) {
+		const res = await this.#client.getProfile({}, toConnectCallOptions(options));
+		if (!res) throw new Error("Profile not found");
+		return v.parse(ProfileSchema, res);
+	}
+	/**
+	* Updates only the provided mutable profile fields; omitted fields are unchanged, while present empty strings clear optional text fields such as bio, website, Twitter, and avatar URL.
+	*/
+	async update(input, options) {
+		const validatedInput = v.parse(UpdateProfileInputSchema, input);
+		const res = await this.#client.updateProfile(removeUndefined(validatedInput), toConnectCallOptions(options));
+		return v.parse(ProfileSchema, res);
+	}
+	/**
+	* Returns the caller's recent username changes, newest first, capped at 20 entries.
+	*/
+	async getUsernameHistory(options) {
+		const res = await this.#client.getUsernameHistory({}, toConnectCallOptions(options));
+		return v.parse(v.array(UsernameHistoryEntrySchema), res.history);
+	}
+	/**
+	* Subscribes to public identity updates and emits normalized account identity records with base58 account IDs, username, avatar URL, and root smart-account address.
+	*/
+	subscribeIdentity(input) {
+		return this.#realtime.connectProtoChannel({
+			channel: "public:identity:updates:proto",
+			schema: AccountIdentitySchema,
+			onPublication: (data) => {
+				const identity = v.parse(AccountIdentitySchema$1, data);
+				input.onEvent(identity);
+			},
+			onConnected: () => input.onOpen?.(),
+			onDisconnected: () => input.onClose?.(),
+			onError: (ctx) => input.onError?.(ctx)
+		});
+	}
+};
+//#endregion
+export { ProfileService };
+
+//# sourceMappingURL=profile.js.map

package/dist/services/auth/profile/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","names":["#client","Proto.ProfileService","#realtime","Proto.AccountIdentitySchema","AccountIdentitySchema"],"sources":["../../../../src/services/auth/profile/profile.ts"],"sourcesContent":["import { createClient, type Client, type Transport } from \"@connectrpc/connect\";\nimport * as Proto from \"../../../gen/auth/v1/profile_pb.js\";\nimport * as v from \"valibot\";\nimport { removeUndefined } from \"../../../utils/remove-undefined.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../../shared/request-options.js\";\nimport {\n    AccountIdentitySchema,\n    ProfileSchema,\n    UpdateProfileInputSchema,\n    UsernameHistoryEntrySchema,\n    type AccountIdentity,\n    type Profile,\n    type UsernameHistoryEntry,\n} from \"./profile.schemas.js\";\nimport type { BaseSubscribeInput } from \"../../../shared/types.js\";\nimport type { PolyesterRealtime } from \"../../../realtime/index.js\";\n\ninterface SubscribeIdentityInput extends BaseSubscribeInput<AccountIdentity> {}\n\n/**\n * Manages the authenticated account's public profile and realtime identity updates.\n */\nexport class ProfileService {\n    #client: Client<typeof Proto.ProfileService>;\n    #realtime: PolyesterRealtime;\n\n    constructor(transport: Transport, realtime: PolyesterRealtime) {\n        this.#client = createClient(Proto.ProfileService, transport);\n        this.#realtime = realtime;\n    }\n\n    /**\n     * Fetches the caller's public profile, including username eligibility/cooldown, verified social handles, avatar, VIP tier, and account creation timestamp.\n     */\n    async get(options?: PolyesterRequestOptions): Promise<Profile> {\n        const res = await this.#client.getProfile({}, toConnectCallOptions(options));\n        if (!res) throw new Error(\"Profile not found\");\n        return v.parse(ProfileSchema, res);\n    }\n\n    /**\n     * Updates only the provided mutable profile fields; omitted fields are unchanged, while present empty strings clear optional text fields such as bio, website, Twitter, and avatar URL.\n     */\n    async update(\n        input: v.InferInput<typeof UpdateProfileInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<Profile> {\n        const validatedInput = v.parse(UpdateProfileInputSchema, input);\n        const res = await this.#client.updateProfile(\n            removeUndefined(validatedInput),\n            toConnectCallOptions(options),\n        );\n        return v.parse(ProfileSchema, res);\n    }\n\n    /**\n     * Returns the caller's recent username changes, newest first, capped at 20 entries.\n     */\n    async getUsernameHistory(options?: PolyesterRequestOptions): Promise<UsernameHistoryEntry[]> {\n        const res = await this.#client.getUsernameHistory({}, toConnectCallOptions(options));\n        return v.parse(v.array(UsernameHistoryEntrySchema), res.history);\n    }\n\n    /**\n     * Subscribes to public identity updates and emits normalized account identity records with base58 account IDs, username, avatar URL, and root smart-account address.\n     */\n    subscribeIdentity(input: SubscribeIdentityInput): () => void {\n        const channel = \"public:identity:updates:proto\";\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.AccountIdentitySchema,\n            onPublication: (data) => {\n                const identity = v.parse(AccountIdentitySchema, data);\n                input.onEvent(identity);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: (ctx) => input.onError?.(ctx),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;AA0BA,IAAa,iBAAb,MAA4B;CACxB;CACA;CAEA,YAAY,WAAsB,UAA6B;EAC3D,KAAKA,UAAU,aAAaC,kBAAsB,SAAS;EAC3D,KAAKC,YAAY;CACrB;;;;CAKA,MAAM,IAAI,SAAqD;EAC3D,MAAM,MAAM,MAAM,KAAKF,QAAQ,WAAW,CAAC,GAAG,qBAAqB,OAAO,CAAC;EAC3E,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,mBAAmB;EAC7C,OAAO,EAAE,MAAM,eAAe,GAAG;CACrC;;;;CAKA,MAAM,OACF,OACA,SACgB;EAChB,MAAM,iBAAiB,EAAE,MAAM,0BAA0B,KAAK;EAC9D,MAAM,MAAM,MAAM,KAAKA,QAAQ,cAC3B,gBAAgB,cAAc,GAC9B,qBAAqB,OAAO,CAChC;EACA,OAAO,EAAE,MAAM,eAAe,GAAG;CACrC;;;;CAKA,MAAM,mBAAmB,SAAoE;EACzF,MAAM,MAAM,MAAM,KAAKA,QAAQ,mBAAmB,CAAC,GAAG,qBAAqB,OAAO,CAAC;EACnF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,GAAG,IAAI,OAAO;CACnE;;;;CAKA,kBAAkB,OAA2C;EAEzD,OAAO,KAAKE,UAAU,oBAAoB;GACtC,SAAA;GACA,QAAQC;GACR,gBAAgB,SAAS;IACrB,MAAM,WAAW,EAAE,MAAMC,yBAAuB,IAAI;IACpD,MAAM,QAAQ,QAAQ;GAC1B;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,UAAU,QAAQ,MAAM,UAAU,GAAG;EACzC,CAAC;CACL;AACJ"}

package/dist/services/auth/profile/profile.schemas.d.ts

@@ -0,0 +1,58 @@
+import * as v from "valibot";
+//#region src/services/auth/profile/profile.schemas.d.ts
+declare const ProfileSchema: v.ObjectSchema<{
+  readonly username: v.StringSchema<undefined>;
+  readonly bio: v.StringSchema<undefined>;
+  readonly website: v.StringSchema<undefined>;
+  readonly twitter: v.StringSchema<undefined>;
+  readonly twitterVerified: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+  readonly discord: v.StringSchema<undefined>;
+  readonly discordVerified: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+  readonly avatarUrl: v.StringSchema<undefined>;
+  readonly createdAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>]>;
+  readonly nextUsernameChangeAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>]>;
+  readonly vipTier: v.NumberSchema<undefined>;
+  readonly usernameUnlocked: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+}, undefined>;
+type Profile = v.InferOutput<typeof ProfileSchema>;
+declare const UpdateProfileInputSchema: v.ObjectSchema<{
+  readonly username: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly bio: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly website: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly twitter: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly avatarUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+type UpdateProfileInput = v.InferInput<typeof UpdateProfileInputSchema>;
+declare const UsernameHistoryEntrySchema: v.ObjectSchema<{
+  readonly username: v.StringSchema<undefined>;
+  readonly setAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>]>;
+}, undefined>;
+type UsernameHistoryEntry = v.InferOutput<typeof UsernameHistoryEntrySchema>;
+declare const AccountIdentitySchema: v.ObjectSchema<{
+  readonly accountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
+  readonly username: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly avatarUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+  readonly rootSmartAccountAddress: v.StringSchema<undefined>;
+}, undefined>;
+type AccountIdentity = v.InferOutput<typeof AccountIdentitySchema>;
+//#endregion
+export { AccountIdentity, AccountIdentitySchema, Profile, ProfileSchema, UpdateProfileInput, UpdateProfileInputSchema, UsernameHistoryEntry, UsernameHistoryEntrySchema };
+//# sourceMappingURL=profile.schemas.d.ts.map

package/dist/services/auth/profile/profile.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.schemas.d.ts","names":[],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"mappings":";;cAIa,eAAa,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;KAqBd,UAAU,EAAE,mBAAmB;cAG9B,0BAAwB,EAAA;;;;;;;KAOzB,qBAAqB,EAAE,kBAAkB;cAExC,4BAA0B,EAAA;;;;;;;;;;KAQ3B,uBAAuB,EAAE,mBAAmB;cAE3C,uBAAqB,EAAA;;;;;;KAOtB,kBAAkB,EAAE,mBAAmB"}

package/dist/services/auth/profile/profile.schemas.js

@@ -0,0 +1,39 @@
+import { tsObjToMs } from "../../../utils/time.js";
+import { PublicIdSchema, TimestampSchema } from "../../../shared/schemas.js";
+import * as v from "valibot";
+//#region src/services/auth/profile/profile.schemas.ts
+const ProfileSchema = v.object({
+	username: v.string(),
+	bio: v.string(),
+	website: v.string(),
+	twitter: v.string(),
+	twitterVerified: v.optional(v.boolean(), false),
+	discord: v.string(),
+	discordVerified: v.optional(v.boolean(), false),
+	avatarUrl: v.string(),
+	createdAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0)),
+	nextUsernameChangeAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0)),
+	vipTier: v.number(),
+	usernameUnlocked: v.optional(v.boolean(), false)
+});
+const UpdateProfileInputSchema = v.object({
+	username: v.optional(v.string()),
+	bio: v.optional(v.string()),
+	website: v.optional(v.string()),
+	twitter: v.optional(v.string()),
+	avatarUrl: v.optional(v.string())
+});
+const UsernameHistoryEntrySchema = v.object({
+	username: v.string(),
+	setAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0))
+});
+const AccountIdentitySchema = v.object({
+	accountId: PublicIdSchema,
+	username: v.optional(v.string()),
+	avatarUrl: v.optional(v.string()),
+	rootSmartAccountAddress: v.string()
+});
+//#endregion
+export { AccountIdentitySchema, ProfileSchema, UpdateProfileInputSchema, UsernameHistoryEntrySchema };
+
+//# sourceMappingURL=profile.schemas.js.map

package/dist/services/auth/profile/profile.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.schemas.js","names":[],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport { PublicIdSchema, TimestampSchema } from \"../../../shared/schemas.js\";\nimport { tsObjToMs } from \"../../../utils/time.js\";\n\nexport const ProfileSchema = v.object({\n    username: v.string(),\n    bio: v.string(),\n    website: v.string(),\n    twitter: v.string(),\n    twitterVerified: v.optional(v.boolean(), false),\n    discord: v.string(),\n    discordVerified: v.optional(v.boolean(), false),\n    avatarUrl: v.string(),\n    createdAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    nextUsernameChangeAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    vipTier: v.number(),\n    usernameUnlocked: v.optional(v.boolean(), false),\n});\n\nexport type Profile = v.InferOutput<typeof ProfileSchema>;\n// Deliberately non-strict: update() accepts a round-tripped Profile\n// ({ ...profile, bio }) and strips its readonly fields instead of rejecting.\nexport const UpdateProfileInputSchema = v.object({\n    username: v.optional(v.string()),\n    bio: v.optional(v.string()),\n    website: v.optional(v.string()),\n    twitter: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n});\nexport type UpdateProfileInput = v.InferInput<typeof UpdateProfileInputSchema>;\n\nexport const UsernameHistoryEntrySchema = v.object({\n    username: v.string(),\n    setAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n});\n\nexport type UsernameHistoryEntry = v.InferOutput<typeof UsernameHistoryEntrySchema>;\n\nexport const AccountIdentitySchema = v.object({\n    accountId: PublicIdSchema,\n    username: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n    rootSmartAccountAddress: v.string(),\n});\n\nexport type AccountIdentity = v.InferOutput<typeof AccountIdentitySchema>;\n"],"mappings":";;;;AAIA,MAAa,gBAAgB,EAAE,OAAO;CAClC,UAAU,EAAE,OAAO;CACnB,KAAK,EAAE,OAAO;CACd,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;CAClB,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC9C,SAAS,EAAE,OAAO;CAClB,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC9C,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,KACT,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,sBAAsB,EAAE,KACpB,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,SAAS,EAAE,OAAO;CAClB,kBAAkB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;AACnD,CAAC;AAKD,MAAa,2BAA2B,EAAE,OAAO;CAC7C,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC;CAC1B,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;CAC9B,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;AACpC,CAAC;AAGD,MAAa,6BAA6B,EAAE,OAAO;CAC/C,UAAU,EAAE,OAAO;CACnB,OAAO,EAAE,KACL,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;AACJ,CAAC;AAID,MAAa,wBAAwB,EAAE,OAAO;CAC1C,WAAW;CACX,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,yBAAyB,EAAE,OAAO;AACtC,CAAC"}

package/dist/services/auth/profile/profile.types.d.ts

@@ -0,0 +1,2 @@
+import { AccountIdentity, Profile, UpdateProfileInput, UsernameHistoryEntry } from "./profile.schemas.js";
+export type { AccountIdentity, Profile, UpdateProfileInput, UsernameHistoryEntry };

package/dist/services/auth/session-codec.js

@@ -0,0 +1,22 @@
+import { parseSessionData } from "./session.schemas.js";
+//#region src/services/auth/session-codec.ts
+/**
+* Owns serialization details for the client-readable auth session cookie.
+*/
+const SessionCodec = {
+	encode(session) {
+		return JSON.stringify(session);
+	},
+	decode(value) {
+		try {
+			const jsonStr = value.startsWith("%7B") ? decodeURIComponent(value) : value;
+			return parseSessionData(JSON.parse(jsonStr));
+		} catch {
+			return null;
+		}
+	}
+};
+//#endregion
+export { SessionCodec };
+
+//# sourceMappingURL=session-codec.js.map

package/dist/services/auth/session-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-codec.js","names":[],"sources":["../../../src/services/auth/session-codec.ts"],"sourcesContent":["import { parseSessionData } from \"./session.schemas.js\";\nimport type { SessionData } from \"./session.types.js\";\n\n/**\n * Owns serialization details for the client-readable auth session cookie.\n */\nexport const SessionCodec = {\n    encode(session: SessionData): string {\n        return JSON.stringify(session);\n    },\n\n    decode(value: string): SessionData | null {\n        try {\n            const jsonStr = value.startsWith(\"%7B\") ? decodeURIComponent(value) : value;\n            return parseSessionData(JSON.parse(jsonStr));\n        } catch {\n            return null;\n        }\n    },\n};\n"],"mappings":";;;;;AAMA,MAAa,eAAe;CACxB,OAAO,SAA8B;EACjC,OAAO,KAAK,UAAU,OAAO;CACjC;CAEA,OAAO,OAAmC;EACtC,IAAI;GACA,MAAM,UAAU,MAAM,WAAW,KAAK,IAAI,mBAAmB,KAAK,IAAI;GACtE,OAAO,iBAAiB,KAAK,MAAM,OAAO,CAAC;EAC/C,QAAQ;GACJ,OAAO;EACX;CACJ;AACJ"}

package/dist/services/auth/session.d.ts

@@ -0,0 +1,51 @@
+import { PolyesterEnvironment } from "../../environment.js";
+import { CookieGetter } from "../../utils/cookies.js";
+import { AuthTokenStorage, AuthTokenStorageSetOptions } from "./token-storage.js";
+import { ActiveAccountInfo, AuthLoginMethod, ServerSessionSnapshot, SessionData } from "./session.types.js";
+//#region src/services/auth/session.d.ts
+interface SessionCookieOptions {
+  maxAgeSeconds?: number | null;
+}
+interface CommitLoginSessionParams {
+  accessToken: string;
+  tokenOptions: AuthTokenStorageSetOptions;
+  provider: SessionData["provider"];
+  loginMethod: AuthLoginMethod | null;
+  primaryWallet: string;
+  smartAccount: string;
+  accountId: string;
+  activeAccount?: ActiveAccountInfo;
+  username?: string;
+}
+interface EnsureSessionParams {
+  provider: SessionData["provider"];
+  loginMethod: AuthLoginMethod | null;
+  primaryWallet: string;
+  smartAccount: string;
+  accountId: string;
+  username?: string;
+}
+declare function emptyServerSessionSnapshot(): ServerSessionSnapshot;
+/**
+ * Parses a serialized session cookie into a display-only server snapshot.
+ */
+declare function parseServerSessionSnapshot(cookies: CookieGetter, environment: PolyesterEnvironment): ServerSessionSnapshot;
+/**
+ * Owns environment-bound auth session transitions for browser clients.
+ */
+declare class AuthSessionStore {
+  #private;
+  constructor({ environmentFingerprint }: {
+    environmentFingerprint: string;
+  });
+  get(): SessionData | null;
+  getEnvironmentBoundToken(tokenStorage: AuthTokenStorage): string | null;
+  commitLogin(params: CommitLoginSessionParams, tokenStorage: AuthTokenStorage): void;
+  ensureSession(params: EnsureSessionParams, options?: SessionCookieOptions): SessionData;
+  setUsername(username: string | null, options?: SessionCookieOptions): void;
+  setActiveAccount(activeAccount: Omit<ActiveAccountInfo, "mainAccountId">, options?: SessionCookieOptions): void;
+  clear(): void;
+}
+//#endregion
+export { type ActiveAccountInfo, type AuthLoginMethod, AuthSessionStore, CommitLoginSessionParams, EnsureSessionParams, type ServerSessionSnapshot, SessionCookieOptions, type SessionData, emptyServerSessionSnapshot, parseServerSessionSnapshot };
+//# sourceMappingURL=session.d.ts.map

package/dist/services/auth/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","names":[],"sources":["../../../src/services/auth/session.ts"],"mappings":";;;;;UAyBiB;EACb;;UAGa;EACb;EACA,cAAc;EACd,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA,gBAAgB;EAChB;;UAGa;EACb,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA;;iBAoEY,8BAA8B;;;;iBAgB9B,2BACZ,SAAS,cACT,aAAa,uBACd;;;;cA2BU;;EAIG,cAAE;IAA4B;;EAK1C,OAAO;EAUP,yBAAyB,cAAc;EAYvC,YAAY,QAAQ,0BAA0B,cAAc;EAsB5D,cAAc,QAAQ,qBAAqB,UAAU,uBAAuB;EA8B5E,YAAY,yBAAyB,UAAU;EAO/C,iBACI,eAAe,KAAK,qCACpB,UAAU;EAoBd"}

package/dist/services/auth/session.js

@@ -0,0 +1,200 @@
+import { deleteCookie, getCookie, getCookieValue, setCookie, shouldSecureCookies } from "../../utils/cookies.js";
+import { POLYESTER_LOGIN_COOKIE_MAX_AGE, POLYESTER_SESSION_COOKIE_NAME } from "./cookie-constants.js";
+import { SessionCodec } from "./session-codec.js";
+//#region src/services/auth/session.ts
+function resolveSessionCookieMaxAge(options) {
+	if (!options) return POLYESTER_LOGIN_COOKIE_MAX_AGE;
+	return options.maxAgeSeconds ?? void 0;
+}
+/**
+* Reads and writes the browser display-session cookie.
+*/
+var PolyesterSessionManager = class {
+	/**
+	* Replaces the current session state.
+	*/
+	set(session, options) {
+		setCookie({
+			name: POLYESTER_SESSION_COOKIE_NAME,
+			value: SessionCodec.encode(session),
+			options: {
+				path: "/",
+				maxAge: resolveSessionCookieMaxAge(options),
+				secure: shouldSecureCookies(),
+				sameSite: "lax"
+			}
+		});
+	}
+	#lastRawValue = null;
+	#lastDecoded = null;
+	/**
+	* Returns the current session state, or null when no session is active.
+	*/
+	get() {
+		const value = getCookie(POLYESTER_SESSION_COOKIE_NAME);
+		if (!value) {
+			this.#lastRawValue = null;
+			this.#lastDecoded = null;
+			return null;
+		}
+		if (value === this.#lastRawValue) return this.#lastDecoded;
+		const session = SessionCodec.decode(value);
+		if (!session) {
+			this.clear();
+			this.#lastRawValue = null;
+			this.#lastDecoded = null;
+			return null;
+		}
+		this.#lastRawValue = value;
+		this.#lastDecoded = session;
+		return session;
+	}
+	/**
+	* Clears the current session state.
+	*/
+	clear() {
+		deleteCookie(POLYESTER_SESSION_COOKIE_NAME);
+	}
+};
+const polyesterSession = new PolyesterSessionManager();
+function emptyServerSessionSnapshot() {
+	return {
+		environmentFingerprint: null,
+		hasDisplaySession: false,
+		provider: null,
+		loginMethod: null,
+		accountAddresses: null,
+		activeAccount: null,
+		bearerToken: null,
+		username: null
+	};
+}
+/**
+* Parses a serialized session cookie into a display-only server snapshot.
+*/
+function parseServerSessionSnapshot(cookies, environment) {
+	const sessionValue = getCookieValue(cookies, POLYESTER_SESSION_COOKIE_NAME);
+	const bearerToken = getCookieValue(cookies, "polyester_auth_token") ?? null;
+	const session = sessionValue ? SessionCodec.decode(sessionValue) : null;
+	if (!session || session.environmentFingerprint !== environment.fingerprint) return emptyServerSessionSnapshot();
+	return {
+		environmentFingerprint: session.environmentFingerprint,
+		hasDisplaySession: true,
+		provider: session.provider,
+		loginMethod: session.loginMethod,
+		accountAddresses: {
+			ownerAddress: session.primaryWallet,
+			accountAddress: session.smartAccount
+		},
+		activeAccount: session.activeAccount ?? null,
+		bearerToken,
+		username: session.username ?? null
+	};
+}
+/**
+* Owns environment-bound auth session transitions for browser clients.
+*/
+var AuthSessionStore = class {
+	#environmentFingerprint;
+	#session;
+	constructor({ environmentFingerprint }) {
+		this.#environmentFingerprint = environmentFingerprint;
+		this.#session = polyesterSession;
+	}
+	get() {
+		const session = this.#session.get();
+		if (!session) return null;
+		if (session.environmentFingerprint !== this.#environmentFingerprint) {
+			this.#session.clear();
+			return null;
+		}
+		return session;
+	}
+	getEnvironmentBoundToken(tokenStorage) {
+		const token = tokenStorage.get();
+		if (!token) return null;
+		if (!this.get()) {
+			tokenStorage.clear();
+			return null;
+		}
+		return token;
+	}
+	commitLogin(params, tokenStorage) {
+		tokenStorage.set(params.accessToken, params.tokenOptions);
+		this.#session.set({
+			environmentFingerprint: this.#environmentFingerprint,
+			provider: params.provider,
+			loginMethod: params.loginMethod,
+			primaryWallet: params.primaryWallet,
+			smartAccount: params.smartAccount,
+			activeAccount: {
+				accountId: params.activeAccount?.accountId ?? params.accountId,
+				isMain: params.activeAccount?.isMain ?? true,
+				mainAccountId: params.accountId,
+				smartAccountAddress: params.activeAccount?.smartAccountAddress,
+				label: params.activeAccount?.label
+			},
+			username: params.username
+		}, { maxAgeSeconds: params.tokenOptions.maxAgeSeconds });
+	}
+	ensureSession(params, options) {
+		const existingSession = this.get();
+		if (existingSession) {
+			const username = params.username || void 0;
+			if (username === void 0 || username === existingSession.username) return existingSession;
+			const session = {
+				...existingSession,
+				username
+			};
+			this.#session.set(session, options);
+			return session;
+		}
+		const session = {
+			environmentFingerprint: this.#environmentFingerprint,
+			provider: params.provider,
+			loginMethod: params.loginMethod,
+			primaryWallet: params.primaryWallet,
+			smartAccount: params.smartAccount,
+			activeAccount: {
+				accountId: params.accountId,
+				isMain: true,
+				mainAccountId: params.accountId
+			},
+			username: params.username
+		};
+		this.#session.set(session, options);
+		return session;
+	}
+	setUsername(username, options) {
+		const session = this.get();
+		if (!session) return;
+		this.#session.set({
+			...session,
+			username: username || void 0
+		}, options);
+	}
+	setActiveAccount(activeAccount, options) {
+		const session = this.get();
+		if (!session) return;
+		const mainAccountId = session.activeAccount?.mainAccountId ?? activeAccount.accountId;
+		const smartAccountAddress = activeAccount.isMain ? session.smartAccount : activeAccount.smartAccountAddress;
+		const label = activeAccount.isMain ? void 0 : activeAccount.label;
+		this.#session.set({
+			...session,
+			activeAccount: {
+				...activeAccount,
+				mainAccountId,
+				smartAccountAddress,
+				label
+			},
+			username: session.username
+		}, options);
+	}
+	clear() {
+		this.#session.clear();
+	}
+};
+//#endregion
+export { AuthSessionStore, emptyServerSessionSnapshot, parseServerSessionSnapshot, polyesterSession };
+
+//# sourceMappingURL=session.js.map

package/dist/services/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","names":["#lastRawValue","#lastDecoded","#environmentFingerprint","#session"],"sources":["../../../src/services/auth/session.ts"],"sourcesContent":["import {\n    setCookie,\n    deleteCookie,\n    getCookie,\n    getCookieValue,\n    shouldSecureCookies,\n    type CookieGetter,\n} from \"../../utils/cookies.js\";\nimport {\n    POLYESTER_AUTH_TOKEN_COOKIE_NAME,\n    POLYESTER_SESSION_COOKIE_NAME,\n    POLYESTER_LOGIN_COOKIE_MAX_AGE,\n} from \"./cookie-constants.js\";\nimport { SessionCodec } from \"./session-codec.js\";\nimport type { PolyesterEnvironment } from \"../../environment.js\";\nimport type { AuthTokenStorage, AuthTokenStorageSetOptions } from \"./token-storage.js\";\nimport type {\n    ActiveAccountInfo,\n    AuthLoginMethod,\n    ServerSessionSnapshot,\n    SessionData,\n} from \"./session.types.js\";\n\nexport type { ActiveAccountInfo, AuthLoginMethod, ServerSessionSnapshot, SessionData };\n\nexport interface SessionCookieOptions {\n    maxAgeSeconds?: number | null;\n}\n\nexport interface CommitLoginSessionParams {\n    accessToken: string;\n    tokenOptions: AuthTokenStorageSetOptions;\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    activeAccount?: ActiveAccountInfo;\n    username?: string;\n}\n\nexport interface EnsureSessionParams {\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    username?: string;\n}\n\nfunction resolveSessionCookieMaxAge(options?: SessionCookieOptions): number | undefined {\n    if (!options) return POLYESTER_LOGIN_COOKIE_MAX_AGE;\n    return options.maxAgeSeconds ?? undefined;\n}\n\n/**\n * Reads and writes the browser display-session cookie.\n */\nclass PolyesterSessionManager {\n    /**\n     * Replaces the current session state.\n     */\n    set(session: SessionData, options?: SessionCookieOptions): void {\n        setCookie({\n            name: POLYESTER_SESSION_COOKIE_NAME,\n            value: SessionCodec.encode(session),\n            options: {\n                path: \"/\",\n                maxAge: resolveSessionCookieMaxAge(options),\n                secure: shouldSecureCookies(),\n                sameSite: \"lax\",\n            },\n        });\n    }\n\n    // The session is re-read on every authenticated RPC; memoize the decode\n    // (JSON.parse + schema validation) on the raw cookie value.\n    #lastRawValue: string | null = null;\n    #lastDecoded: SessionData | null = null;\n\n    /**\n     * Returns the current session state, or null when no session is active.\n     */\n    get(): SessionData | null {\n        const value = getCookie(POLYESTER_SESSION_COOKIE_NAME);\n        if (!value) {\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n        if (value === this.#lastRawValue) return this.#lastDecoded;\n\n        const session = SessionCodec.decode(value);\n        if (!session) {\n            this.clear();\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n\n        this.#lastRawValue = value;\n        this.#lastDecoded = session;\n        return session;\n    }\n\n    /**\n     * Clears the current session state.\n     */\n    clear(): void {\n        deleteCookie(POLYESTER_SESSION_COOKIE_NAME);\n    }\n}\n\nexport const polyesterSession = new PolyesterSessionManager();\n\nexport function emptyServerSessionSnapshot(): ServerSessionSnapshot {\n    return {\n        environmentFingerprint: null,\n        hasDisplaySession: false,\n        provider: null,\n        loginMethod: null,\n        accountAddresses: null,\n        activeAccount: null,\n        bearerToken: null,\n        username: null,\n    };\n}\n\n/**\n * Parses a serialized session cookie into a display-only server snapshot.\n */\nexport function parseServerSessionSnapshot(\n    cookies: CookieGetter,\n    environment: PolyesterEnvironment,\n): ServerSessionSnapshot {\n    const sessionValue = getCookieValue(cookies, POLYESTER_SESSION_COOKIE_NAME);\n    const bearerToken = getCookieValue(cookies, POLYESTER_AUTH_TOKEN_COOKIE_NAME) ?? null;\n    const session = sessionValue ? SessionCodec.decode(sessionValue) : null;\n\n    if (!session || session.environmentFingerprint !== environment.fingerprint) {\n        return emptyServerSessionSnapshot();\n    }\n\n    return {\n        environmentFingerprint: session.environmentFingerprint,\n        hasDisplaySession: true,\n        provider: session.provider,\n        loginMethod: session.loginMethod,\n        accountAddresses: {\n            ownerAddress: session.primaryWallet,\n            accountAddress: session.smartAccount,\n        },\n        activeAccount: session.activeAccount ?? null,\n        bearerToken,\n        username: session.username ?? null,\n    };\n}\n\n/**\n * Owns environment-bound auth session transitions for browser clients.\n */\nexport class AuthSessionStore {\n    #environmentFingerprint: string;\n    #session: PolyesterSessionManager;\n\n    constructor({ environmentFingerprint }: { environmentFingerprint: string }) {\n        this.#environmentFingerprint = environmentFingerprint;\n        this.#session = polyesterSession;\n    }\n\n    get(): SessionData | null {\n        const session = this.#session.get();\n        if (!session) return null;\n        if (session.environmentFingerprint !== this.#environmentFingerprint) {\n            this.#session.clear();\n            return null;\n        }\n        return session;\n    }\n\n    getEnvironmentBoundToken(tokenStorage: AuthTokenStorage): string | null {\n        const token = tokenStorage.get();\n        if (!token) return null;\n\n        if (!this.get()) {\n            tokenStorage.clear();\n            return null;\n        }\n\n        return token;\n    }\n\n    commitLogin(params: CommitLoginSessionParams, tokenStorage: AuthTokenStorage): void {\n        tokenStorage.set(params.accessToken, params.tokenOptions);\n        this.#session.set(\n            {\n                environmentFingerprint: this.#environmentFingerprint,\n                provider: params.provider,\n                loginMethod: params.loginMethod,\n                primaryWallet: params.primaryWallet,\n                smartAccount: params.smartAccount,\n                activeAccount: {\n                    accountId: params.activeAccount?.accountId ?? params.accountId,\n                    isMain: params.activeAccount?.isMain ?? true,\n                    mainAccountId: params.accountId,\n                    smartAccountAddress: params.activeAccount?.smartAccountAddress,\n                    label: params.activeAccount?.label,\n                },\n                username: params.username,\n            },\n            { maxAgeSeconds: params.tokenOptions.maxAgeSeconds },\n        );\n    }\n\n    ensureSession(params: EnsureSessionParams, options?: SessionCookieOptions): SessionData {\n        const existingSession = this.get();\n        if (existingSession) {\n            const username = params.username || undefined;\n            if (username === undefined || username === existingSession.username) {\n                return existingSession;\n            }\n\n            const session = { ...existingSession, username };\n            this.#session.set(session, options);\n            return session;\n        }\n\n        const session: SessionData = {\n            environmentFingerprint: this.#environmentFingerprint,\n            provider: params.provider,\n            loginMethod: params.loginMethod,\n            primaryWallet: params.primaryWallet,\n            smartAccount: params.smartAccount,\n            activeAccount: {\n                accountId: params.accountId,\n                isMain: true,\n                mainAccountId: params.accountId,\n            },\n            username: params.username,\n        };\n        this.#session.set(session, options);\n        return session;\n    }\n\n    setUsername(username: string | null, options?: SessionCookieOptions): void {\n        const session = this.get();\n        if (!session) return;\n\n        this.#session.set({ ...session, username: username || undefined }, options);\n    }\n\n    setActiveAccount(\n        activeAccount: Omit<ActiveAccountInfo, \"mainAccountId\">,\n        options?: SessionCookieOptions,\n    ): void {\n        const session = this.get();\n        if (!session) return;\n\n        const mainAccountId = session.activeAccount?.mainAccountId ?? activeAccount.accountId;\n        const smartAccountAddress = activeAccount.isMain\n            ? session.smartAccount\n            : activeAccount.smartAccountAddress;\n        const label = activeAccount.isMain ? undefined : activeAccount.label;\n        this.#session.set(\n            {\n                ...session,\n                activeAccount: { ...activeAccount, mainAccountId, smartAccountAddress, label },\n                username: session.username,\n            },\n            options,\n        );\n    }\n\n    clear(): void {\n        this.#session.clear();\n    }\n}\n"],"mappings":";;;;AAkDA,SAAS,2BAA2B,SAAoD;CACpF,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,QAAQ,iBAAiB,KAAA;AACpC;;;;AAKA,IAAM,0BAAN,MAA8B;;;;CAI1B,IAAI,SAAsB,SAAsC;EAC5D,UAAU;GACN,MAAM;GACN,OAAO,aAAa,OAAO,OAAO;GAClC,SAAS;IACL,MAAM;IACN,QAAQ,2BAA2B,OAAO;IAC1C,QAAQ,oBAAoB;IAC5B,UAAU;GACd;EACJ,CAAC;CACL;CAIA,gBAA+B;CAC/B,eAAmC;;;;CAKnC,MAA0B;EACtB,MAAM,QAAQ,UAAU,6BAA6B;EACrD,IAAI,CAAC,OAAO;GACR,KAAKA,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EACA,IAAI,UAAU,KAAKD,eAAe,OAAO,KAAKC;EAE9C,MAAM,UAAU,aAAa,OAAO,KAAK;EACzC,IAAI,CAAC,SAAS;GACV,KAAK,MAAM;GACX,KAAKD,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EAEA,KAAKD,gBAAgB;EACrB,KAAKC,eAAe;EACpB,OAAO;CACX;;;;CAKA,QAAc;EACV,aAAa,6BAA6B;CAC9C;AACJ;AAEA,MAAa,mBAAmB,IAAI,wBAAwB;AAE5D,SAAgB,6BAAoD;CAChE,OAAO;EACH,wBAAwB;EACxB,mBAAmB;EACnB,UAAU;EACV,aAAa;EACb,kBAAkB;EAClB,eAAe;EACf,aAAa;EACb,UAAU;CACd;AACJ;;;;AAKA,SAAgB,2BACZ,SACA,aACqB;CACrB,MAAM,eAAe,eAAe,SAAS,6BAA6B;CAC1E,MAAM,cAAc,eAAe,SAAA,sBAAyC,KAAK;CACjF,MAAM,UAAU,eAAe,aAAa,OAAO,YAAY,IAAI;CAEnE,IAAI,CAAC,WAAW,QAAQ,2BAA2B,YAAY,aAC3D,OAAO,2BAA2B;CAGtC,OAAO;EACH,wBAAwB,QAAQ;EAChC,mBAAmB;EACnB,UAAU,QAAQ;EAClB,aAAa,QAAQ;EACrB,kBAAkB;GACd,cAAc,QAAQ;GACtB,gBAAgB,QAAQ;EAC5B;EACA,eAAe,QAAQ,iBAAiB;EACxC;EACA,UAAU,QAAQ,YAAY;CAClC;AACJ;;;;AAKA,IAAa,mBAAb,MAA8B;CAC1B;CACA;CAEA,YAAY,EAAE,0BAA8D;EACxE,KAAKC,0BAA0B;EAC/B,KAAKC,WAAW;CACpB;CAEA,MAA0B;EACtB,MAAM,UAAU,KAAKA,SAAS,IAAI;EAClC,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,2BAA2B,KAAKD,yBAAyB;GACjE,KAAKC,SAAS,MAAM;GACpB,OAAO;EACX;EACA,OAAO;CACX;CAEA,yBAAyB,cAA+C;EACpE,MAAM,QAAQ,aAAa,IAAI;EAC/B,IAAI,CAAC,OAAO,OAAO;EAEnB,IAAI,CAAC,KAAK,IAAI,GAAG;GACb,aAAa,MAAM;GACnB,OAAO;EACX;EAEA,OAAO;CACX;CAEA,YAAY,QAAkC,cAAsC;EAChF,aAAa,IAAI,OAAO,aAAa,OAAO,YAAY;EACxD,KAAKA,SAAS,IACV;GACI,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO,eAAe,aAAa,OAAO;IACrD,QAAQ,OAAO,eAAe,UAAU;IACxC,eAAe,OAAO;IACtB,qBAAqB,OAAO,eAAe;IAC3C,OAAO,OAAO,eAAe;GACjC;GACA,UAAU,OAAO;EACrB,GACA,EAAE,eAAe,OAAO,aAAa,cAAc,CACvD;CACJ;CAEA,cAAc,QAA6B,SAA6C;EACpF,MAAM,kBAAkB,KAAK,IAAI;EACjC,IAAI,iBAAiB;GACjB,MAAM,WAAW,OAAO,YAAY,KAAA;GACpC,IAAI,aAAa,KAAA,KAAa,aAAa,gBAAgB,UACvD,OAAO;GAGX,MAAM,UAAU;IAAE,GAAG;IAAiB;GAAS;GAC/C,KAAKC,SAAS,IAAI,SAAS,OAAO;GAClC,OAAO;EACX;EAEA,MAAM,UAAuB;GACzB,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO;IAClB,QAAQ;IACR,eAAe,OAAO;GAC1B;GACA,UAAU,OAAO;EACrB;EACA,KAAKC,SAAS,IAAI,SAAS,OAAO;EAClC,OAAO;CACX;CAEA,YAAY,UAAyB,SAAsC;EACvE,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,KAAKA,SAAS,IAAI;GAAE,GAAG;GAAS,UAAU,YAAY,KAAA;EAAU,GAAG,OAAO;CAC9E;CAEA,iBACI,eACA,SACI;EACJ,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,MAAM,gBAAgB,QAAQ,eAAe,iBAAiB,cAAc;EAC5E,MAAM,sBAAsB,cAAc,SACpC,QAAQ,eACR,cAAc;EACpB,MAAM,QAAQ,cAAc,SAAS,KAAA,IAAY,cAAc;EAC/D,KAAKA,SAAS,IACV;GACI,GAAG;GACH,eAAe;IAAE,GAAG;IAAe;IAAe;IAAqB;GAAM;GAC7E,UAAU,QAAQ;EACtB,GACA,OACJ;CACJ;CAEA,QAAc;EACV,KAAKA,SAAS,MAAM;CACxB;AACJ"}

package/dist/services/auth/session.schemas.js

@@ -0,0 +1,41 @@
+import * as v from "valibot";
+//#region src/services/auth/session.schemas.ts
+const AuthLoginMethodSchema = v.picklist([
+	"google",
+	"email",
+	"metamask",
+	"rabby",
+	"phantom",
+	"walletconnect"
+]);
+const ActiveAccountInfoSchema = v.object({
+	accountId: v.string(),
+	isMain: v.boolean(),
+	mainAccountId: v.string(),
+	smartAccountAddress: v.optional(v.string()),
+	label: v.optional(v.string())
+});
+const SessionDataSchema = v.object({
+	environmentFingerprint: v.string(),
+	provider: v.picklist([
+		"metamask",
+		"turnkey",
+		"other"
+	]),
+	loginMethod: v.nullable(AuthLoginMethodSchema),
+	primaryWallet: v.string(),
+	smartAccount: v.string(),
+	activeAccount: v.optional(ActiveAccountInfoSchema),
+	username: v.optional(v.string())
+});
+/**
+* Parses raw session data into the SDK session shape.
+*/
+function parseSessionData(value) {
+	const parsed = v.safeParse(SessionDataSchema, value);
+	return parsed.success ? parsed.output : null;
+}
+//#endregion
+export { ActiveAccountInfoSchema, AuthLoginMethodSchema, SessionDataSchema, parseSessionData };
+
+//# sourceMappingURL=session.schemas.js.map

package/dist/services/auth/session.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.schemas.js","names":[],"sources":["../../../src/services/auth/session.schemas.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport type { SessionData } from \"./session.types.js\";\n\nexport const AuthLoginMethodSchema = v.picklist([\n    \"google\",\n    \"email\",\n    \"metamask\",\n    \"rabby\",\n    \"phantom\",\n    \"walletconnect\",\n]);\n\nexport const ActiveAccountInfoSchema = v.object({\n    accountId: v.string(),\n    isMain: v.boolean(),\n    mainAccountId: v.string(),\n    smartAccountAddress: v.optional(v.string()),\n    label: v.optional(v.string()),\n});\n\nexport const SessionDataSchema = v.object({\n    environmentFingerprint: v.string(),\n    provider: v.picklist([\"metamask\", \"turnkey\", \"other\"]),\n    loginMethod: v.nullable(AuthLoginMethodSchema),\n    primaryWallet: v.string(),\n    smartAccount: v.string(),\n    activeAccount: v.optional(ActiveAccountInfoSchema),\n    username: v.optional(v.string()),\n});\n\n/**\n * Parses raw session data into the SDK session shape.\n */\nexport function parseSessionData(value: unknown): SessionData | null {\n    const parsed = v.safeParse(SessionDataSchema, value);\n    return parsed.success ? parsed.output : null;\n}\n"],"mappings":";;AAGA,MAAa,wBAAwB,EAAE,SAAS;CAC5C;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAA0B,EAAE,OAAO;CAC5C,WAAW,EAAE,OAAO;CACpB,QAAQ,EAAE,QAAQ;CAClB,eAAe,EAAE,OAAO;CACxB,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC;CAC1C,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,MAAa,oBAAoB,EAAE,OAAO;CACtC,wBAAwB,EAAE,OAAO;CACjC,UAAU,EAAE,SAAS;EAAC;EAAY;EAAW;CAAO,CAAC;CACrD,aAAa,EAAE,SAAS,qBAAqB;CAC7C,eAAe,EAAE,OAAO;CACxB,cAAc,EAAE,OAAO;CACvB,eAAe,EAAE,SAAS,uBAAuB;CACjD,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;AACnC,CAAC;;;;AAKD,SAAgB,iBAAiB,OAAoC;CACjE,MAAM,SAAS,EAAE,UAAU,mBAAmB,KAAK;CACnD,OAAO,OAAO,UAAU,OAAO,SAAS;AAC5C"}

package/dist/services/auth/session.types.d.ts

@@ -0,0 +1,70 @@
+import { HexAddress } from "../../account-signer/types.js";
+//#region src/services/auth/session.types.d.ts
+/**
+ * Information about the currently active account (main or subaccount).
+ * This is the canonical shape used across session storage, SDK state, and hydration.
+ */
+interface ActiveAccountInfo {
+  accountId: string;
+  isMain: boolean;
+  mainAccountId: string;
+  smartAccountAddress?: string;
+  label?: string;
+}
+type AuthLoginMethod = "google" | "email" | "metamask" | "rabby" | "phantom" | "walletconnect";
+/**
+ * Session data stored in cookie for SSR hydration.
+ * Contains minimal info needed to restore auth state on page load.
+ */
+interface SessionData {
+  environmentFingerprint: string;
+  provider: "metamask" | "turnkey" | "other";
+  loginMethod: AuthLoginMethod | null;
+  primaryWallet: string;
+  smartAccount: string;
+  activeAccount?: ActiveAccountInfo;
+  username?: string;
+}
+/**
+ * SDK's internal auth state, exposed via getState().
+ * Represents the current authentication status and account info.
+ */
+interface AuthState {
+  isAuthenticated: boolean;
+  accountAddress: HexAddress | null;
+  ownerAddress: HexAddress | null;
+  mainAccountId: string | null;
+  activeAccount: ActiveAccountInfo | null;
+}
+/**
+ * Data needed to hydrate SDK auth state from server-side rendering.
+ * Pass this to hydrateAuthState() on mount to avoid flash of unauthenticated content.
+ */
+interface AuthHydrationData {
+  mainAccountId: string;
+  username: string | null;
+  activeAccountId?: string;
+  smartAccountAddress?: HexAddress;
+  ownerAddress?: HexAddress;
+}
+/**
+ * Display-only session data parsed from client-readable cookies.
+ *
+ * This data is unsigned and must not be used for authorization.
+ */
+interface ServerSessionSnapshot {
+  environmentFingerprint: string | null;
+  hasDisplaySession: boolean;
+  provider: string | null;
+  loginMethod: AuthLoginMethod | null;
+  accountAddresses: {
+    ownerAddress: string;
+    accountAddress: string;
+  } | null;
+  activeAccount: ActiveAccountInfo | null;
+  bearerToken: string | null;
+  username: string | null;
+}
+//#endregion
+export { ActiveAccountInfo, AuthHydrationData, AuthLoginMethod, AuthState, ServerSessionSnapshot, SessionData };
+//# sourceMappingURL=session.types.d.ts.map

package/dist/services/auth/session.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.types.d.ts","names":[],"sources":["../../../src/services/auth/session.types.ts"],"mappings":";;;;;;UAMiB;EACb;EACA;EACA;EACA;EACA;;KAGQ;;;;;UAYK;EACb;EACA;EACA,aAAa;EACb;EACA;EACA,gBAAgB;EAChB;;;;;;UAOa;EACb;EACA,gBAAgB;EAChB,cAAc;EACd;EACA,eAAe;;;;;;UAOF;EACb;EACA;EACA;EACA,sBAAsB;EACtB,eAAe;;;;;;;UAQF;EACb;EACA;EACA;EACA,aAAa;EACb;IAAoB;IAAsB;;EAC1C,eAAe;EACf;EACA"}

package/dist/services/auth/token-storage.d.ts

@@ -0,0 +1,27 @@
+//#region src/services/auth/token-storage.d.ts
+interface AuthTokenStorageSetOptions {
+  expiresAt: Date | null;
+  maxAgeSeconds: number | null;
+}
+interface AuthTokenStorage {
+  get(): string | null;
+  set(token: string, options: AuthTokenStorageSetOptions): void;
+  clear(): void;
+}
+interface CookieAuthTokenStorageOptions {
+  cookieName?: string;
+  path?: string;
+  secure?: boolean;
+  sameSite?: "lax" | "strict" | "none";
+}
+/**
+ * Creates in-memory auth token storage.
+ */
+declare function createMemoryAuthTokenStorage(initialToken?: string | null): AuthTokenStorage;
+/**
+ * Creates cookie-backed auth token storage.
+ */
+declare function createCookieAuthTokenStorage(options?: CookieAuthTokenStorageOptions): AuthTokenStorage;
+//#endregion
+export { AuthTokenStorage, AuthTokenStorageSetOptions, CookieAuthTokenStorageOptions, createCookieAuthTokenStorage, createMemoryAuthTokenStorage };
+//# sourceMappingURL=token-storage.d.ts.map

package/dist/services/auth/token-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-storage.d.ts","names":[],"sources":["../../../src/services/auth/token-storage.ts"],"mappings":";UAIiB;EACb,WAAW;EACX;;UAGa;EACb;EACA,IAAI,eAAe,SAAS;EAC5B;;UAGa;EACb;EACA;EACA;EACA;;;;;iBAsBY,6BAA6B,+BAA+B;;;;iBAiB5D,6BACZ,UAAS,gCACV"}