@polyester/sdk 0.3.0 → 0.4.0

package/dist/utils/connect-order-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect-order-errors.js","names":[],"sources":["../../src/utils/connect-order-errors.ts"],"sourcesContent":["import { ConnectError } from \"@connectrpc/connect\";\nimport * as v from \"valibot\";\nimport { ErrorDetailSchema } from \"../gen/orders/v1/orders_pb.js\";\nimport {\n    OrderErrorDetailSchema,\n    type OrderErrorDetail,\n} from \"../services/orders/order-errors.schemas.js\";\nimport { toPolyesterError } from \"../shared/connect-error-mapping.js\";\nimport { StaleQuoteError } from \"../shared/errors.js\";\n\n/**\n * Returns the first structured Orders API rejection detail in an error cause chain.\n * Invalid or unrelated details are ignored rather than exposing transport prose.\n */\nexport function getOrderErrorDetail(error: unknown): OrderErrorDetail | undefined {\n    const seen = new Set<unknown>();\n    let current: unknown = error;\n\n    for (let depth = 0; depth < 5 && current != null && !seen.has(current); depth += 1) {\n        seen.add(current);\n        const details = ConnectError.from(current).findDetails(ErrorDetailSchema);\n        for (const detail of details) {\n            const parsed = v.safeParse(OrderErrorDetailSchema, detail);\n            if (parsed.success) return parsed.output;\n        }\n\n        current = current instanceof Error ? current.cause : undefined;\n    }\n\n    return undefined;\n}\n\n/**\n * True when an order mutation was rejected because its client reference quote\n * exceeded the backend's configured drift limit.\n */\nexport function isStaleQuoteError(error: unknown): boolean {\n    let current = error;\n\n    for (let depth = 0; depth < 5; depth += 1) {\n        if (toPolyesterError(current) instanceof StaleQuoteError) return true;\n        if (!(current instanceof Error) || current.cause === undefined) return false;\n        current = current.cause;\n    }\n\n    return false;\n}\n"],"mappings":";;;;;;;;;;;AAcA,SAAgB,oBAAoB,OAA8C;CAC9E,MAAM,uBAAO,IAAI,IAAa;CAC9B,IAAI,UAAmB;CAEvB,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,WAAW,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG,SAAS,GAAG;EAChF,KAAK,IAAI,OAAO;EAChB,MAAM,UAAU,aAAa,KAAK,OAAO,CAAC,CAAC,YAAY,iBAAiB;EACxE,KAAK,MAAM,UAAU,SAAS;GAC1B,MAAM,SAAS,EAAE,UAAU,wBAAwB,MAAM;GACzD,IAAI,OAAO,SAAS,OAAO,OAAO;EACtC;EAEA,UAAU,mBAAmB,QAAQ,QAAQ,QAAQ,KAAA;CACzD;AAGJ;;;;;AAMA,SAAgB,kBAAkB,OAAyB;CACvD,IAAI,UAAU;CAEd,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;EACvC,IAAI,iBAAiB,OAAO,aAAa,iBAAiB,OAAO;EACjE,IAAI,EAAE,mBAAmB,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;EACvE,UAAU,QAAQ;CACtB;CAEA,OAAO;AACX"}
+{"version":3,"file":"connect-order-errors.js","names":["v"],"sources":["../../src/utils/connect-order-errors.ts"],"sourcesContent":["import { ConnectError } from \"@connectrpc/connect\";\nimport * as v from \"../shared/validation.js\";\nimport { ErrorDetailSchema } from \"../gen/orders/v1/orders_pb.js\";\nimport {\n    OrderErrorDetailSchema,\n    type OrderErrorDetail,\n} from \"../services/orders/order-errors.schemas.js\";\nimport { toPolyesterError } from \"../shared/connect-error-mapping.js\";\nimport { StaleQuoteError } from \"../shared/errors.js\";\n\n/**\n * Returns the first structured Orders API rejection detail in an error cause chain.\n * Invalid or unrelated details are ignored rather than exposing transport prose.\n */\nexport function getOrderErrorDetail(error: unknown): OrderErrorDetail | undefined {\n    const seen = new Set<unknown>();\n    let current: unknown = error;\n\n    for (let depth = 0; depth < 5 && current != null && !seen.has(current); depth += 1) {\n        seen.add(current);\n        const details = ConnectError.from(current).findDetails(ErrorDetailSchema);\n        for (const detail of details) {\n            const parsed = v.safeParse(OrderErrorDetailSchema, detail);\n            if (parsed.success) return parsed.output;\n        }\n\n        current = current instanceof Error ? current.cause : undefined;\n    }\n\n    return undefined;\n}\n\n/**\n * True when an order mutation was rejected because its client reference quote\n * exceeded the backend's configured drift limit.\n */\nexport function isStaleQuoteError(error: unknown): boolean {\n    let current = error;\n\n    for (let depth = 0; depth < 5; depth += 1) {\n        if (toPolyesterError(current) instanceof StaleQuoteError) return true;\n        if (!(current instanceof Error) || current.cause === undefined) return false;\n        current = current.cause;\n    }\n\n    return false;\n}\n"],"mappings":";;;;;;;;;;;AAcA,SAAgB,oBAAoB,OAA8C;CAC9E,MAAM,uBAAO,IAAI,IAAa;CAC9B,IAAI,UAAmB;CAEvB,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,WAAW,QAAQ,CAAC,KAAK,IAAI,OAAO,GAAG,SAAS,GAAG;EAChF,KAAK,IAAI,OAAO;EAChB,MAAM,UAAU,aAAa,KAAK,OAAO,CAAC,CAAC,YAAY,iBAAiB;EACxE,KAAK,MAAM,UAAU,SAAS;GAC1B,MAAM,SAASA,mBAAE,UAAU,wBAAwB,MAAM;GACzD,IAAI,OAAO,SAAS,OAAO,OAAO;EACtC;EAEA,UAAU,mBAAmB,QAAQ,QAAQ,QAAQ,KAAA;CACzD;AAGJ;;;;;AAMA,SAAgB,kBAAkB,OAAyB;CACvD,IAAI,UAAU;CAEd,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;EACvC,IAAI,iBAAiB,OAAO,aAAa,iBAAiB,OAAO;EACjE,IAAI,EAAE,mBAAmB,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;EACvE,UAAU,QAAQ;CACtB;CAEA,OAAO;AACX"}

package/dist/utils/cookies.d.ts

@@ -1,7 +1,12 @@
 //#region src/utils/cookies.d.ts
-type CookieGetter = Record<string, string> | {
-  get(name: string): string | undefined;
-} | Request;
+type CookieValue = string | {
+  readonly value: string;
+};
+type CookieStoreLike = {
+  get(name: string): CookieValue | undefined;
+};
+/** A supported server-side cookie source. */
+type CookieGetter = Record<string, string> | CookieStoreLike | Request;
 //#endregion
 export { CookieGetter };
 //# sourceMappingURL=cookies.d.ts.map

package/dist/utils/cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.d.ts","names":[],"sources":["../../src/utils/cookies.ts"],"mappings":";KA6DY,eACN;EACE,IAAI;IACN"}
+{"version":3,"file":"cookies.d.ts","names":[],"sources":["../../src/utils/cookies.ts"],"mappings":";KA6DK;WAAkC;;KAClC;EAAoB,IAAI,eAAe;;;KAGhC,eAAe,yBAAyB,kBAAkB"}

package/dist/utils/cookies.js

@@ -42,6 +42,9 @@ function deleteCookie(name, options) {
 		expires: /* @__PURE__ */ new Date("Thu, 01 Jan 1970 00:00:00 GMT")
 	});
 }
+function isCookieStore(cookies) {
+	return typeof cookies.get === "function";
+}
 /**
 * Parses cookies from a Request header.
 */
@@ -55,7 +58,10 @@ function parseCookiesFromRequest(request) {
 */
 function getCookieValue(cookies, name) {
 	if (cookies instanceof Request) return parseCookiesFromRequest(cookies)[name];
-	if (typeof cookies.get === "function") return cookies.get(name);
+	if (isCookieStore(cookies)) {
+		const cookie = cookies.get(name);
+		return typeof cookie === "string" ? cookie : cookie?.value;
+	}
 	return cookies[name];
 }
 /**

package/dist/utils/cookies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.js","names":["serializeCookie","parseCookie","#name"],"sources":["../../src/utils/cookies.ts"],"sourcesContent":["import {\n    type Cookies,\n    type CookieSerializeOptions,\n    parseCookie,\n    serializeCookie,\n} from \"./cookie-es/index.js\";\nimport { isLocalNetworkHost } from \"./is-dev.js\";\n\n/**\n * Whether auth cookies should carry the `Secure` attribute.\n *\n * On https pages: always Secure. On plaintext pages, browsers silently DROP\n * Secure cookies (localhost excepted), so dev against a LAN IP — e.g. phone\n * testing http://192.168.x.x — logged users out instantly because the freshly\n * written session cookies never persisted. The downgrade is therefore allowed\n * ONLY on local/private-network hosts; on a public hostname served over http\n * (a misconfigured production deployment) cookies stay Secure so auth fails\n * closed instead of shipping session cookies over plaintext.\n */\nexport function shouldSecureCookies(): boolean {\n    if (typeof window === \"undefined\") return true;\n    if (window.location.protocol === \"https:\") return true;\n    return !isLocalNetworkHost(window.location.hostname);\n}\n\ninterface SetCookieParams {\n    name: string;\n    value: string;\n    options: CookieSerializeOptions;\n}\n\n/**\n * Writes a browser cookie.\n */\nexport function setCookie({ name, value, options }: SetCookieParams): void {\n    if (typeof document === \"undefined\") return;\n\n    document.cookie = serializeCookie(name, value, options);\n}\n\n/**\n * Reads a browser cookie by name.\n */\nexport function getCookie(name: string): string | undefined {\n    if (typeof document === \"undefined\") return;\n\n    return parseCookie(document.cookie)[name];\n}\n\n/**\n * Deletes a browser cookie by name.\n */\nexport function deleteCookie(name: string, options?: { path?: string }): void {\n    if (typeof document === \"undefined\") return;\n\n    document.cookie = serializeCookie(name, \"\", {\n        path: options?.path ?? \"/\",\n        expires: new Date(\"Thu, 01 Jan 1970 00:00:00 GMT\"),\n    });\n}\n\nexport type CookieGetter =\n    | Record<string, string>\n    | { get(name: string): string | undefined }\n    | Request;\n\n/**\n * Parses cookies from a Request header.\n */\nexport function parseCookiesFromRequest(request: Request): Cookies {\n    const cookieHeader = request.headers.get(\"cookie\");\n    if (!cookieHeader) return {};\n\n    return parseCookie(cookieHeader);\n}\n\n/**\n * Reads a cookie value from either a cookie map or cookie getter.\n */\nexport function getCookieValue(cookies: CookieGetter, name: string): string | undefined {\n    if (cookies instanceof Request) {\n        const parsed = parseCookiesFromRequest(cookies);\n        return parsed[name];\n    }\n    if (typeof cookies.get === \"function\") {\n        return cookies.get(name);\n    }\n    return (cookies as Record<string, string>)[name];\n}\n\ninterface CookieManagerOptions {\n    /**\n     * The name of the cookie to manage.\n     */\n    name: string;\n}\n\n/**\n * A generic class for managing cookies on the client side.\n * Provides a consistent interface for getting, setting, and deleting cookies.\n *\n * @example\n * ```ts\n * const cookieManager = new CookieManager({ name: \"my-cookie\" });\n * cookieManager.get();\n * cookieManager.set(\"my-value\");\n * cookieManager.clear();\n * ```\n */\nexport class CookieManager {\n    #name: string;\n    constructor(opts: CookieManagerOptions) {\n        this.#name = opts.name;\n    }\n    /**\n     * Reads the managed cookie value.\n     */\n    get(): string | null {\n        const token = getCookie(this.#name);\n        return token ?? null;\n    }\n\n    /**\n     * Writes the managed cookie value.\n     */\n    set(\n        token: string,\n        options?: {\n            path?: string;\n            secure?: boolean;\n            sameSite?: \"lax\" | \"strict\" | \"none\";\n            maxAge?: number;\n            expires?: Date;\n        },\n    ): void {\n        setCookie({\n            name: this.#name,\n            value: token,\n            options: {\n                path: options?.path ?? \"/\",\n                sameSite: options?.sameSite ?? \"lax\",\n                secure: options?.secure ?? shouldSecureCookies(),\n                maxAge: options?.maxAge,\n                expires: options?.expires,\n            },\n        });\n    }\n\n    /**\n     * Clears the managed cookie value.\n     */\n    clear(options?: { path?: string }): void {\n        deleteCookie(this.#name, options);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,SAAgB,sBAA+B;CAC3C,IAAI,OAAO,WAAW,aAAa,OAAO;CAC1C,IAAI,OAAO,SAAS,aAAa,UAAU,OAAO;CAClD,OAAO,CAAC,mBAAmB,OAAO,SAAS,QAAQ;AACvD;;;;AAWA,SAAgB,UAAU,EAAE,MAAM,OAAO,WAAkC;CACvE,IAAI,OAAO,aAAa,aAAa;CAErC,SAAS,SAASA,UAAgB,MAAM,OAAO,OAAO;AAC1D;;;;AAKA,SAAgB,UAAU,MAAkC;CACxD,IAAI,OAAO,aAAa,aAAa;CAErC,OAAOC,MAAY,SAAS,MAAM,CAAC,CAAC;AACxC;;;;AAKA,SAAgB,aAAa,MAAc,SAAmC;CAC1E,IAAI,OAAO,aAAa,aAAa;CAErC,SAAS,SAASD,UAAgB,MAAM,IAAI;EACxC,MAAM,SAAS,QAAQ;EACvB,yBAAS,IAAI,KAAK,+BAA+B;CACrD,CAAC;AACL;;;;AAUA,SAAgB,wBAAwB,SAA2B;CAC/D,MAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ;CACjD,IAAI,CAAC,cAAc,OAAO,CAAC;CAE3B,OAAOC,MAAY,YAAY;AACnC;;;;AAKA,SAAgB,eAAe,SAAuB,MAAkC;CACpF,IAAI,mBAAmB,SAEnB,OADe,wBAAwB,OAC3B,CAAC,CAAC;CAElB,IAAI,OAAO,QAAQ,QAAQ,YACvB,OAAO,QAAQ,IAAI,IAAI;CAE3B,OAAQ,QAAmC;AAC/C;;;;;;;;;;;;;AAqBA,IAAa,gBAAb,MAA2B;CACvB;CACA,YAAY,MAA4B;EACpC,KAAKC,QAAQ,KAAK;CACtB;;;;CAIA,MAAqB;EAEjB,OADc,UAAU,KAAKA,KAClB,KAAK;CACpB;;;;CAKA,IACI,OACA,SAOI;EACJ,UAAU;GACN,MAAM,KAAKA;GACX,OAAO;GACP,SAAS;IACL,MAAM,SAAS,QAAQ;IACvB,UAAU,SAAS,YAAY;IAC/B,QAAQ,SAAS,UAAU,oBAAoB;IAC/C,QAAQ,SAAS;IACjB,SAAS,SAAS;GACtB;EACJ,CAAC;CACL;;;;CAKA,MAAM,SAAmC;EACrC,aAAa,KAAKA,OAAO,OAAO;CACpC;AACJ"}
+{"version":3,"file":"cookies.js","names":["serializeCookie","parseCookie","#name"],"sources":["../../src/utils/cookies.ts"],"sourcesContent":["import {\n    type Cookies,\n    type CookieSerializeOptions,\n    parseCookie,\n    serializeCookie,\n} from \"./cookie-es/index.js\";\nimport { isLocalNetworkHost } from \"./is-dev.js\";\n\n/**\n * Whether auth cookies should carry the `Secure` attribute.\n *\n * On https pages: always Secure. On plaintext pages, browsers silently DROP\n * Secure cookies (localhost excepted), so dev against a LAN IP — e.g. phone\n * testing http://192.168.x.x — logged users out instantly because the freshly\n * written session cookies never persisted. The downgrade is therefore allowed\n * ONLY on local/private-network hosts; on a public hostname served over http\n * (a misconfigured production deployment) cookies stay Secure so auth fails\n * closed instead of shipping session cookies over plaintext.\n */\nexport function shouldSecureCookies(): boolean {\n    if (typeof window === \"undefined\") return true;\n    if (window.location.protocol === \"https:\") return true;\n    return !isLocalNetworkHost(window.location.hostname);\n}\n\ninterface SetCookieParams {\n    name: string;\n    value: string;\n    options: CookieSerializeOptions;\n}\n\n/**\n * Writes a browser cookie.\n */\nexport function setCookie({ name, value, options }: SetCookieParams): void {\n    if (typeof document === \"undefined\") return;\n\n    document.cookie = serializeCookie(name, value, options);\n}\n\n/**\n * Reads a browser cookie by name.\n */\nexport function getCookie(name: string): string | undefined {\n    if (typeof document === \"undefined\") return;\n\n    return parseCookie(document.cookie)[name];\n}\n\n/**\n * Deletes a browser cookie by name.\n */\nexport function deleteCookie(name: string, options?: { path?: string }): void {\n    if (typeof document === \"undefined\") return;\n\n    document.cookie = serializeCookie(name, \"\", {\n        path: options?.path ?? \"/\",\n        expires: new Date(\"Thu, 01 Jan 1970 00:00:00 GMT\"),\n    });\n}\n\ntype CookieValue = string | { readonly value: string };\ntype CookieStoreLike = { get(name: string): CookieValue | undefined };\n\n/** A supported server-side cookie source. */\nexport type CookieGetter = Record<string, string> | CookieStoreLike | Request;\n\nfunction isCookieStore(\n    cookies: Record<string, string> | CookieStoreLike,\n): cookies is CookieStoreLike {\n    return typeof cookies.get === \"function\";\n}\n\n/**\n * Parses cookies from a Request header.\n */\nexport function parseCookiesFromRequest(request: Request): Cookies {\n    const cookieHeader = request.headers.get(\"cookie\");\n    if (!cookieHeader) return {};\n\n    return parseCookie(cookieHeader);\n}\n\n/**\n * Reads a cookie value from either a cookie map or cookie getter.\n */\nexport function getCookieValue(cookies: CookieGetter, name: string): string | undefined {\n    if (cookies instanceof Request) {\n        const parsed = parseCookiesFromRequest(cookies);\n        return parsed[name];\n    }\n    if (isCookieStore(cookies)) {\n        const cookie = cookies.get(name);\n        return typeof cookie === \"string\" ? cookie : cookie?.value;\n    }\n    return cookies[name];\n}\n\ninterface CookieManagerOptions {\n    /**\n     * The name of the cookie to manage.\n     */\n    name: string;\n}\n\n/**\n * A generic class for managing cookies on the client side.\n * Provides a consistent interface for getting, setting, and deleting cookies.\n *\n * @example\n * ```ts\n * const cookieManager = new CookieManager({ name: \"my-cookie\" });\n * cookieManager.get();\n * cookieManager.set(\"my-value\");\n * cookieManager.clear();\n * ```\n */\nexport class CookieManager {\n    #name: string;\n    constructor(opts: CookieManagerOptions) {\n        this.#name = opts.name;\n    }\n    /**\n     * Reads the managed cookie value.\n     */\n    get(): string | null {\n        const token = getCookie(this.#name);\n        return token ?? null;\n    }\n\n    /**\n     * Writes the managed cookie value.\n     */\n    set(\n        token: string,\n        options?: {\n            path?: string;\n            secure?: boolean;\n            sameSite?: \"lax\" | \"strict\" | \"none\";\n            maxAge?: number;\n            expires?: Date;\n        },\n    ): void {\n        setCookie({\n            name: this.#name,\n            value: token,\n            options: {\n                path: options?.path ?? \"/\",\n                sameSite: options?.sameSite ?? \"lax\",\n                secure: options?.secure ?? shouldSecureCookies(),\n                maxAge: options?.maxAge,\n                expires: options?.expires,\n            },\n        });\n    }\n\n    /**\n     * Clears the managed cookie value.\n     */\n    clear(options?: { path?: string }): void {\n        deleteCookie(this.#name, options);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,SAAgB,sBAA+B;CAC3C,IAAI,OAAO,WAAW,aAAa,OAAO;CAC1C,IAAI,OAAO,SAAS,aAAa,UAAU,OAAO;CAClD,OAAO,CAAC,mBAAmB,OAAO,SAAS,QAAQ;AACvD;;;;AAWA,SAAgB,UAAU,EAAE,MAAM,OAAO,WAAkC;CACvE,IAAI,OAAO,aAAa,aAAa;CAErC,SAAS,SAASA,UAAgB,MAAM,OAAO,OAAO;AAC1D;;;;AAKA,SAAgB,UAAU,MAAkC;CACxD,IAAI,OAAO,aAAa,aAAa;CAErC,OAAOC,MAAY,SAAS,MAAM,CAAC,CAAC;AACxC;;;;AAKA,SAAgB,aAAa,MAAc,SAAmC;CAC1E,IAAI,OAAO,aAAa,aAAa;CAErC,SAAS,SAASD,UAAgB,MAAM,IAAI;EACxC,MAAM,SAAS,QAAQ;EACvB,yBAAS,IAAI,KAAK,+BAA+B;CACrD,CAAC;AACL;AAQA,SAAS,cACL,SAC0B;CAC1B,OAAO,OAAO,QAAQ,QAAQ;AAClC;;;;AAKA,SAAgB,wBAAwB,SAA2B;CAC/D,MAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ;CACjD,IAAI,CAAC,cAAc,OAAO,CAAC;CAE3B,OAAOC,MAAY,YAAY;AACnC;;;;AAKA,SAAgB,eAAe,SAAuB,MAAkC;CACpF,IAAI,mBAAmB,SAEnB,OADe,wBAAwB,OAC3B,CAAC,CAAC;CAElB,IAAI,cAAc,OAAO,GAAG;EACxB,MAAM,SAAS,QAAQ,IAAI,IAAI;EAC/B,OAAO,OAAO,WAAW,WAAW,SAAS,QAAQ;CACzD;CACA,OAAO,QAAQ;AACnB;;;;;;;;;;;;;AAqBA,IAAa,gBAAb,MAA2B;CACvB;CACA,YAAY,MAA4B;EACpC,KAAKC,QAAQ,KAAK;CACtB;;;;CAIA,MAAqB;EAEjB,OADc,UAAU,KAAKA,KAClB,KAAK;CACpB;;;;CAKA,IACI,OACA,SAOI;EACJ,UAAU;GACN,MAAM,KAAKA;GACX,OAAO;GACP,SAAS;IACL,MAAM,SAAS,QAAQ;IACvB,UAAU,SAAS,YAAY;IAC/B,QAAQ,SAAS,UAAU,oBAAoB;IAC/C,QAAQ,SAAS;IACjB,SAAS,SAAS;GACtB;EACJ,CAAC;CACL;;;;CAKA,MAAM,SAAmC;EACrC,aAAa,KAAKA,OAAO,OAAO;CACpC;AACJ"}

package/dist/utils/event-emitter.d.ts

@@ -14,7 +14,7 @@ declare class EventEmitter<TEvents extends { [K in keyof TEvents]: unknown; }> {
    */
   once<K extends keyof TEvents>(event: K, callback: EventCallback<TEvents[K]>): () => void;
   /**
-   * Emits an event to all registered listeners.
+   * Emits an event to all registered listeners, isolating errors thrown synchronously by each listener.
    */
   emit<K extends keyof TEvents>(event: K, data: TEvents[K]): void;
   /**

package/dist/utils/event-emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-emitter.d.ts","names":[],"sources":["../../src/utils/event-emitter.ts"],"mappings":";KAAK,cAAc,gBAAgB,MAAM;;;;cAK5B,aAAa,mBAAmB,WAAW;;;;;EAMpD,GAAG,gBAAgB,SAAS,OAAO,GAAG,UAAU,cAAc,QAAQ;;;;EActE,KAAK,gBAAgB,SAAS,OAAO,GAAG,UAAU,cAAc,QAAQ;;;;EAWxE,KAAK,gBAAgB,SAAS,OAAO,GAAG,MAAM,QAAQ;;;;EAYtD,IAAI,gBAAgB,SAAS,OAAO,GAAG,WAAW,cAAc,QAAQ;;;;EAWxE"}
+{"version":3,"file":"event-emitter.d.ts","names":[],"sources":["../../src/utils/event-emitter.ts"],"mappings":";KAAK,cAAc,gBAAgB,MAAM;;;;cAK5B,aAAa,mBAAmB,WAAW;;;;;EAMpD,GAAG,gBAAgB,SAAS,OAAO,GAAG,UAAU,cAAc,QAAQ;;;;EActE,KAAK,gBAAgB,SAAS,OAAO,GAAG,UAAU,cAAc,QAAQ;;;;EAWxE,KAAK,gBAAgB,SAAS,OAAO,GAAG,MAAM,QAAQ;;;;EAgBtD,IAAI,gBAAgB,SAAS,OAAO,GAAG,WAAW,cAAc,QAAQ;;;;EAWxE"}

package/dist/utils/event-emitter.js

@@ -25,11 +25,13 @@ var EventEmitter = class {
 		return unsubscribe;
 	}
 	/**
-	* Emits an event to all registered listeners.
+	* Emits an event to all registered listeners, isolating errors thrown synchronously by each listener.
 	*/
 	emit(event, data) {
 		const callbacks = this.#listeners.get(event);
-		if (callbacks) for (const callback of callbacks) callback(data);
+		if (callbacks) for (const callback of callbacks) try {
+			callback(data);
+		} catch {}
 	}
 	/**
 	* Removes a previously registered event listener.

package/dist/utils/event-emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-emitter.js","names":["#listeners"],"sources":["../../src/utils/event-emitter.ts"],"sourcesContent":["type EventCallback<T = unknown> = (data: T) => void;\n\n/**\n * Minimal typed event emitter used by SDK services to publish auth and lifecycle state changes.\n */\nexport class EventEmitter<TEvents extends { [K in keyof TEvents]: unknown }> {\n    #listeners: Map<keyof TEvents, Set<EventCallback>> = new Map();\n\n    /**\n     * Registers an event listener and returns an unsubscribe function.\n     */\n    on<K extends keyof TEvents>(event: K, callback: EventCallback<TEvents[K]>): () => void {\n        if (!this.#listeners.has(event)) {\n            this.#listeners.set(event, new Set());\n        }\n        this.#listeners.get(event)!.add(callback as EventCallback);\n\n        return () => {\n            this.#listeners.get(event)?.delete(callback as EventCallback);\n        };\n    }\n\n    /**\n     * Registers an event listener that runs at most once.\n     */\n    once<K extends keyof TEvents>(event: K, callback: EventCallback<TEvents[K]>): () => void {\n        const unsubscribe = this.on(event, (data) => {\n            unsubscribe();\n            callback(data);\n        });\n        return unsubscribe;\n    }\n\n    /**\n     * Emits an event to all registered listeners.\n     */\n    emit<K extends keyof TEvents>(event: K, data: TEvents[K]): void {\n        const callbacks = this.#listeners.get(event);\n        if (callbacks) {\n            for (const callback of callbacks) {\n                callback(data);\n            }\n        }\n    }\n\n    /**\n     * Removes a previously registered event listener.\n     */\n    off<K extends keyof TEvents>(event: K, callback?: EventCallback<TEvents[K]>): void {\n        if (callback) {\n            this.#listeners.get(event)?.delete(callback as EventCallback);\n        } else {\n            this.#listeners.delete(event);\n        }\n    }\n\n    /**\n     * Removes every registered event listener.\n     */\n    removeAllListeners(): void {\n        this.#listeners.clear();\n    }\n}\n"],"mappings":";;;;AAKA,IAAa,eAAb,MAA6E;CACzE,6BAAqD,IAAI,IAAI;;;;CAK7D,GAA4B,OAAU,UAAiD;EACnF,IAAI,CAAC,KAAKA,WAAW,IAAI,KAAK,GAC1B,KAAKA,WAAW,IAAI,uBAAO,IAAI,IAAI,CAAC;EAExC,KAAKA,WAAW,IAAI,KAAK,CAAC,CAAE,IAAI,QAAyB;EAEzD,aAAa;GACT,KAAKA,WAAW,IAAI,KAAK,CAAC,EAAE,OAAO,QAAyB;EAChE;CACJ;;;;CAKA,KAA8B,OAAU,UAAiD;EACrF,MAAM,cAAc,KAAK,GAAG,QAAQ,SAAS;GACzC,YAAY;GACZ,SAAS,IAAI;EACjB,CAAC;EACD,OAAO;CACX;;;;CAKA,KAA8B,OAAU,MAAwB;EAC5D,MAAM,YAAY,KAAKA,WAAW,IAAI,KAAK;EAC3C,IAAI,WACA,KAAK,MAAM,YAAY,WACnB,SAAS,IAAI;CAGzB;;;;CAKA,IAA6B,OAAU,UAA4C;EAC/E,IAAI,UACA,KAAKA,WAAW,IAAI,KAAK,CAAC,EAAE,OAAO,QAAyB;OAE5D,KAAKA,WAAW,OAAO,KAAK;CAEpC;;;;CAKA,qBAA2B;EACvB,KAAKA,WAAW,MAAM;CAC1B;AACJ"}
+{"version":3,"file":"event-emitter.js","names":["#listeners"],"sources":["../../src/utils/event-emitter.ts"],"sourcesContent":["type EventCallback<T = unknown> = (data: T) => void;\n\n/**\n * Minimal typed event emitter used by SDK services to publish auth and lifecycle state changes.\n */\nexport class EventEmitter<TEvents extends { [K in keyof TEvents]: unknown }> {\n    #listeners: Map<keyof TEvents, Set<EventCallback>> = new Map();\n\n    /**\n     * Registers an event listener and returns an unsubscribe function.\n     */\n    on<K extends keyof TEvents>(event: K, callback: EventCallback<TEvents[K]>): () => void {\n        if (!this.#listeners.has(event)) {\n            this.#listeners.set(event, new Set());\n        }\n        this.#listeners.get(event)!.add(callback as EventCallback);\n\n        return () => {\n            this.#listeners.get(event)?.delete(callback as EventCallback);\n        };\n    }\n\n    /**\n     * Registers an event listener that runs at most once.\n     */\n    once<K extends keyof TEvents>(event: K, callback: EventCallback<TEvents[K]>): () => void {\n        const unsubscribe = this.on(event, (data) => {\n            unsubscribe();\n            callback(data);\n        });\n        return unsubscribe;\n    }\n\n    /**\n     * Emits an event to all registered listeners, isolating errors thrown synchronously by each listener.\n     */\n    emit<K extends keyof TEvents>(event: K, data: TEvents[K]): void {\n        const callbacks = this.#listeners.get(event);\n        if (callbacks) {\n            for (const callback of callbacks) {\n                try {\n                    callback(data);\n                } catch {\n                    // A consumer callback must not interrupt the SDK operation or other listeners.\n                }\n            }\n        }\n    }\n\n    /**\n     * Removes a previously registered event listener.\n     */\n    off<K extends keyof TEvents>(event: K, callback?: EventCallback<TEvents[K]>): void {\n        if (callback) {\n            this.#listeners.get(event)?.delete(callback as EventCallback);\n        } else {\n            this.#listeners.delete(event);\n        }\n    }\n\n    /**\n     * Removes every registered event listener.\n     */\n    removeAllListeners(): void {\n        this.#listeners.clear();\n    }\n}\n"],"mappings":";;;;AAKA,IAAa,eAAb,MAA6E;CACzE,6BAAqD,IAAI,IAAI;;;;CAK7D,GAA4B,OAAU,UAAiD;EACnF,IAAI,CAAC,KAAKA,WAAW,IAAI,KAAK,GAC1B,KAAKA,WAAW,IAAI,uBAAO,IAAI,IAAI,CAAC;EAExC,KAAKA,WAAW,IAAI,KAAK,CAAC,CAAE,IAAI,QAAyB;EAEzD,aAAa;GACT,KAAKA,WAAW,IAAI,KAAK,CAAC,EAAE,OAAO,QAAyB;EAChE;CACJ;;;;CAKA,KAA8B,OAAU,UAAiD;EACrF,MAAM,cAAc,KAAK,GAAG,QAAQ,SAAS;GACzC,YAAY;GACZ,SAAS,IAAI;EACjB,CAAC;EACD,OAAO;CACX;;;;CAKA,KAA8B,OAAU,MAAwB;EAC5D,MAAM,YAAY,KAAKA,WAAW,IAAI,KAAK;EAC3C,IAAI,WACA,KAAK,MAAM,YAAY,WACnB,IAAI;GACA,SAAS,IAAI;EACjB,QAAQ,CAER;CAGZ;;;;CAKA,IAA6B,OAAU,UAA4C;EAC/E,IAAI,UACA,KAAKA,WAAW,IAAI,KAAK,CAAC,EAAE,OAAO,QAAyB;OAE5D,KAAKA,WAAW,OAAO,KAAK;CAEpC;;;;CAKA,qBAA2B;EACvB,KAAKA,WAAW,MAAM;CAC1B;AACJ"}

package/dist/utils/evm.js

@@ -1,6 +1,6 @@
 import { ConfigurationError } from "../shared/errors.js";
-import { bytesToHex, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
 import { keccak_256 } from "@noble/hashes/sha3.js";
+import { bytesToHex, hexToBytes, utf8ToBytes } from "@noble/hashes/utils.js";
 //#region src/utils/evm.ts
 const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
 /** Format-only address check (viem `isAddress(value, { strict: false })`). */
@@ -44,7 +44,7 @@ function evmUtf8ToHex(value) {
 }
 /** 0x-prefixed hex to bytes (viem `hexToBytes`); throws on malformed input. */
 function evmHexToBytes(value) {
-	if (!/^0x(?:[0-9a-fA-F]{2})*$/.test(value)) throw new ConfigurationError(`Invalid hex value: ${value}`);
+	if (!/^0x(?:[0-9a-fA-F]{2})*$/.test(value)) throw new ConfigurationError("Invalid hex value");
 	return hexToBytes(value.slice(2).toLowerCase());
 }
 //#endregion

package/dist/utils/evm.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm.js","names":["nobleHexToBytes"],"sources":["../../src/utils/evm.ts"],"sourcesContent":["import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport { bytesToHex, hexToBytes as nobleHexToBytes, utf8ToBytes } from \"@noble/hashes/utils.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\n/**\n * Minimal EVM helpers backed by @noble/hashes.\n *\n * The SDK core previously imported these five utilities from viem. Rolldown\n * groups all shared viem modules into a single chunk, so those tiny static\n * imports forced viem's entire abi/actions graph (~270 KB emitted) into the\n * app shell and the server's eager exec path, even though everything heavy is\n * loaded lazily. Semantics mirror the viem calls they replaced:\n * `isAddress(x, { strict: false })`, `getAddress`, `keccak256`,\n * `stringToBytes`, `hexToBytes`.\n */\n\nexport type EvmHex = `0x${string}`;\n\nconst ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\n/** Format-only address check (viem `isAddress(value, { strict: false })`). */\nexport function isEvmAddress(value: string): value is EvmHex {\n    return ADDRESS_RE.test(value);\n}\n\n/**\n * viem `isAddress(value)` default-mode parity: format check plus EIP-55\n * checksum validation for any address that is not all-lowercase.\n */\nexport function isEvmAddressStrict(value: string): value is EvmHex {\n    if (!isEvmAddress(value)) return false;\n    const body = value.slice(2);\n    // viem only exempts all-lowercase addresses from checksum validation.\n    if (body === body.toLowerCase()) return true;\n    return checksumEvmAddress(value) === value;\n}\n\n/** EIP-55 checksummed address (viem `getAddress`); throws on invalid input. */\nexport function checksumEvmAddress(value: string): EvmHex {\n    if (!isEvmAddress(value)) {\n        throw new ConfigurationError(`Invalid EVM address: ${value}`);\n    }\n    const lower = value.slice(2).toLowerCase();\n    const hash = keccak_256(utf8ToBytes(lower));\n    let out = \"0x\";\n    for (let i = 0; i < 40; i++) {\n        const char = lower[i]!;\n        // Each hash byte covers two nibbles of the address.\n        const nibble = (hash[i >> 1]! >> (i % 2 === 0 ? 4 : 0)) & 0x0f;\n        out += nibble >= 8 ? char.toUpperCase() : char;\n    }\n    return out as EvmHex;\n}\n\n/** keccak-256 of raw bytes, hex-encoded (viem `keccak256(bytes)`). */\nexport function keccak256Hex(bytes: Uint8Array): EvmHex {\n    return `0x${bytesToHex(keccak_256(bytes))}`;\n}\n\n/** UTF-8 encode (viem `stringToBytes`). */\nexport function evmUtf8ToBytes(value: string): Uint8Array {\n    return utf8ToBytes(value);\n}\n\n/** UTF-8 string to 0x-prefixed hex (viem `stringToHex`). */\nexport function evmUtf8ToHex(value: string): EvmHex {\n    return `0x${bytesToHex(utf8ToBytes(value))}`;\n}\n\n/** 0x-prefixed hex to bytes (viem `hexToBytes`); throws on malformed input. */\nexport function evmHexToBytes(value: string): Uint8Array {\n    if (!/^0x(?:[0-9a-fA-F]{2})*$/.test(value)) {\n        throw new ConfigurationError(`Invalid hex value: ${value}`);\n    }\n    return nobleHexToBytes(value.slice(2).toLowerCase());\n}\n"],"mappings":";;;;AAkBA,MAAM,aAAa;;AAGnB,SAAgB,aAAa,OAAgC;CACzD,OAAO,WAAW,KAAK,KAAK;AAChC;;;;;AAMA,SAAgB,mBAAmB,OAAgC;CAC/D,IAAI,CAAC,aAAa,KAAK,GAAG,OAAO;CACjC,MAAM,OAAO,MAAM,MAAM,CAAC;CAE1B,IAAI,SAAS,KAAK,YAAY,GAAG,OAAO;CACxC,OAAO,mBAAmB,KAAK,MAAM;AACzC;;AAGA,SAAgB,mBAAmB,OAAuB;CACtD,IAAI,CAAC,aAAa,KAAK,GACnB,MAAM,IAAI,mBAAmB,wBAAwB,OAAO;CAEhE,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,YAAY;CACzC,MAAM,OAAO,WAAW,YAAY,KAAK,CAAC;CAC1C,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EACzB,MAAM,OAAO,MAAM;EAEnB,MAAM,SAAU,KAAK,KAAK,OAAQ,IAAI,MAAM,IAAI,IAAI,KAAM;EAC1D,OAAO,UAAU,IAAI,KAAK,YAAY,IAAI;CAC9C;CACA,OAAO;AACX;;AAGA,SAAgB,aAAa,OAA2B;CACpD,OAAO,KAAK,WAAW,WAAW,KAAK,CAAC;AAC5C;;AAGA,SAAgB,eAAe,OAA2B;CACtD,OAAO,YAAY,KAAK;AAC5B;;AAGA,SAAgB,aAAa,OAAuB;CAChD,OAAO,KAAK,WAAW,YAAY,KAAK,CAAC;AAC7C;;AAGA,SAAgB,cAAc,OAA2B;CACrD,IAAI,CAAC,0BAA0B,KAAK,KAAK,GACrC,MAAM,IAAI,mBAAmB,sBAAsB,OAAO;CAE9D,OAAOA,WAAgB,MAAM,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;AACvD"}
+{"version":3,"file":"evm.js","names":["nobleHexToBytes"],"sources":["../../src/utils/evm.ts"],"sourcesContent":["import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport { bytesToHex, hexToBytes as nobleHexToBytes, utf8ToBytes } from \"@noble/hashes/utils.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\n/**\n * Minimal EVM helpers backed by @noble/hashes.\n *\n * The SDK core previously imported these five utilities from viem. Rolldown\n * groups all shared viem modules into a single chunk, so those tiny static\n * imports forced viem's entire abi/actions graph (~270 KB emitted) into the\n * app shell and the server's eager exec path, even though everything heavy is\n * loaded lazily. Semantics mirror the viem calls they replaced:\n * `isAddress(x, { strict: false })`, `getAddress`, `keccak256`,\n * `stringToBytes`, `hexToBytes`.\n */\n\nexport type EvmHex = `0x${string}`;\n\nconst ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\n/** Format-only address check (viem `isAddress(value, { strict: false })`). */\nexport function isEvmAddress(value: string): value is EvmHex {\n    return ADDRESS_RE.test(value);\n}\n\n/**\n * viem `isAddress(value)` default-mode parity: format check plus EIP-55\n * checksum validation for any address that is not all-lowercase.\n */\nexport function isEvmAddressStrict(value: string): value is EvmHex {\n    if (!isEvmAddress(value)) return false;\n    const body = value.slice(2);\n    // viem only exempts all-lowercase addresses from checksum validation.\n    if (body === body.toLowerCase()) return true;\n    return checksumEvmAddress(value) === value;\n}\n\n/** EIP-55 checksummed address (viem `getAddress`); throws on invalid input. */\nexport function checksumEvmAddress(value: string): EvmHex {\n    if (!isEvmAddress(value)) {\n        throw new ConfigurationError(`Invalid EVM address: ${value}`);\n    }\n    const lower = value.slice(2).toLowerCase();\n    const hash = keccak_256(utf8ToBytes(lower));\n    let out = \"0x\";\n    for (let i = 0; i < 40; i++) {\n        const char = lower[i]!;\n        // Each hash byte covers two nibbles of the address.\n        const nibble = (hash[i >> 1]! >> (i % 2 === 0 ? 4 : 0)) & 0x0f;\n        out += nibble >= 8 ? char.toUpperCase() : char;\n    }\n    return out as EvmHex;\n}\n\n/** keccak-256 of raw bytes, hex-encoded (viem `keccak256(bytes)`). */\nexport function keccak256Hex(bytes: Uint8Array): EvmHex {\n    return `0x${bytesToHex(keccak_256(bytes))}`;\n}\n\n/** UTF-8 encode (viem `stringToBytes`). */\nexport function evmUtf8ToBytes(value: string): Uint8Array {\n    return utf8ToBytes(value);\n}\n\n/** UTF-8 string to 0x-prefixed hex (viem `stringToHex`). */\nexport function evmUtf8ToHex(value: string): EvmHex {\n    return `0x${bytesToHex(utf8ToBytes(value))}`;\n}\n\n/** 0x-prefixed hex to bytes (viem `hexToBytes`); throws on malformed input. */\nexport function evmHexToBytes(value: string): Uint8Array {\n    if (!/^0x(?:[0-9a-fA-F]{2})*$/.test(value)) {\n        throw new ConfigurationError(\"Invalid hex value\");\n    }\n    return nobleHexToBytes(value.slice(2).toLowerCase());\n}\n"],"mappings":";;;;AAkBA,MAAM,aAAa;;AAGnB,SAAgB,aAAa,OAAgC;CACzD,OAAO,WAAW,KAAK,KAAK;AAChC;;;;;AAMA,SAAgB,mBAAmB,OAAgC;CAC/D,IAAI,CAAC,aAAa,KAAK,GAAG,OAAO;CACjC,MAAM,OAAO,MAAM,MAAM,CAAC;CAE1B,IAAI,SAAS,KAAK,YAAY,GAAG,OAAO;CACxC,OAAO,mBAAmB,KAAK,MAAM;AACzC;;AAGA,SAAgB,mBAAmB,OAAuB;CACtD,IAAI,CAAC,aAAa,KAAK,GACnB,MAAM,IAAI,mBAAmB,wBAAwB,OAAO;CAEhE,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,YAAY;CACzC,MAAM,OAAO,WAAW,YAAY,KAAK,CAAC;CAC1C,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EACzB,MAAM,OAAO,MAAM;EAEnB,MAAM,SAAU,KAAK,KAAK,OAAQ,IAAI,MAAM,IAAI,IAAI,KAAM;EAC1D,OAAO,UAAU,IAAI,KAAK,YAAY,IAAI;CAC9C;CACA,OAAO;AACX;;AAGA,SAAgB,aAAa,OAA2B;CACpD,OAAO,KAAK,WAAW,WAAW,KAAK,CAAC;AAC5C;;AAGA,SAAgB,eAAe,OAA2B;CACtD,OAAO,YAAY,KAAK;AAC5B;;AAGA,SAAgB,aAAa,OAAuB;CAChD,OAAO,KAAK,WAAW,YAAY,KAAK,CAAC;AAC7C;;AAGA,SAAgB,cAAc,OAA2B;CACrD,IAAI,CAAC,0BAA0B,KAAK,KAAK,GACrC,MAAM,IAAI,mBAAmB,mBAAmB;CAEpD,OAAOA,WAAgB,MAAM,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;AACvD"}

package/dist/utils/jwt.d.ts

@@ -1,8 +1,8 @@
 //#region src/utils/jwt.d.ts
 /**
- * Checks whether a JWT is present, well formed, and not expired.
+ * Checks whether a value is a present, well-formed, unexpired JWT string.
  */
-declare function isJwtValid(token: string | null): token is string;
+declare function isJwtValid(token: unknown): token is string;
 //#endregion
 export { isJwtValid };
 //# sourceMappingURL=jwt.d.ts.map

package/dist/utils/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","names":[],"sources":["../../src/utils/jwt.ts"],"mappings":";;;;iBA6DgB,WAAW,uBAAuB"}
+{"version":3,"file":"jwt.d.ts","names":[],"sources":["../../src/utils/jwt.ts"],"mappings":";;;;iBA6DgB,WAAW,iBAAiB"}

package/dist/utils/jwt.js

@@ -49,10 +49,10 @@ function isJwtExpired(token) {
 	return exp < Math.floor(Date.now() / 1e3);
 }
 /**
-* Checks whether a JWT is present, well formed, and not expired.
+* Checks whether a value is a present, well-formed, unexpired JWT string.
 */
 function isJwtValid(token) {
-	if (!token) return false;
+	if (typeof token !== "string" || !token) return false;
 	if (!isJwt(token)) return false;
 	if (isJwtExpired(token)) return false;
 	return true;

package/dist/utils/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","names":[],"sources":["../../src/utils/jwt.ts"],"sourcesContent":["/**\n * Checks whether a string has the shape of a JWT.\n */\nexport function isJwt(token: string): boolean {\n    const parts = token.split(\".\");\n    return parts.length === 3 && !!parts[0] && !!parts[1] && !!parts[2];\n}\n\nlet textDecoder: TextDecoder | undefined;\n\n/**\n * Gets a TextDecoder instance.\n */\nfunction getTextDecoder(): TextDecoder {\n    textDecoder ??= new TextDecoder(\"utf-8\", { fatal: true });\n    return textDecoder;\n}\n\nfunction decodeBase64Url(value: string): string | null {\n    const remainder = value.length % 4;\n    if (remainder === 1) return null;\n\n    const base64 = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const paddedBase64 =\n        remainder === 0 ? base64 : base64.padEnd(base64.length + 4 - remainder, \"=\");\n    const binary = atob(paddedBase64);\n    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));\n    return getTextDecoder().decode(bytes);\n}\n\n/**\n * Reads a JWT expiration timestamp when present.\n */\nexport function getJwtExpiration(token: string): number | null {\n    try {\n        const [_, rawPayload] = token.split(\".\");\n        if (!rawPayload) return null;\n        const decodedPayload = decodeBase64Url(rawPayload);\n        if (!decodedPayload) return null;\n        const payload: unknown = JSON.parse(decodedPayload);\n        if (typeof payload !== \"object\" || payload === null) return null;\n        const exp = (payload as { exp?: unknown }).exp;\n        return typeof exp === \"number\" ? exp : null;\n    } catch {\n        return null;\n    }\n}\n\n/**\n * Checks whether a JWT is expired.\n */\nexport function isJwtExpired(token: string): boolean {\n    const exp = getJwtExpiration(token);\n    if (exp === null) return true;\n    const currentTime = Math.floor(Date.now() / 1000);\n    return exp < currentTime;\n}\n\n/**\n * Checks whether a JWT is present, well formed, and not expired.\n */\nexport function isJwtValid(token: string | null): token is string {\n    if (!token) return false;\n    if (!isJwt(token)) return false;\n    if (isJwtExpired(token)) return false;\n    return true;\n}\n\n/**\n * Returns the number of milliseconds until the JWT expires.\n * Returns 0 if already expired or invalid.\n */\nexport function getJwtTimeToExpiry(token: string): number {\n    const exp = getJwtExpiration(token);\n    if (exp === null) return 0;\n    const nowMs = Date.now();\n    const expiresAtMs = exp * 1000;\n    return Math.max(0, expiresAtMs - nowMs);\n}\n"],"mappings":";;;;AAGA,SAAgB,MAAM,OAAwB;CAC1C,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,OAAO,MAAM,WAAW,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM;AACrE;AAEA,IAAI;;;;AAKJ,SAAS,iBAA8B;CACnC,gBAAgB,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;CACxD,OAAO;AACX;AAEA,SAAS,gBAAgB,OAA8B;CACnD,MAAM,YAAY,MAAM,SAAS;CACjC,IAAI,cAAc,GAAG,OAAO;CAE5B,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CACzD,MAAM,eACF,cAAc,IAAI,SAAS,OAAO,OAAO,OAAO,SAAS,IAAI,WAAW,GAAG;CAC/E,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,QAAQ,WAAW,KAAK,SAAS,cAAc,UAAU,WAAW,CAAC,CAAC;CAC5E,OAAO,eAAe,CAAC,CAAC,OAAO,KAAK;AACxC;;;;AAKA,SAAgB,iBAAiB,OAA8B;CAC3D,IAAI;EACA,MAAM,CAAC,GAAG,cAAc,MAAM,MAAM,GAAG;EACvC,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,iBAAiB,gBAAgB,UAAU;EACjD,IAAI,CAAC,gBAAgB,OAAO;EAC5B,MAAM,UAAmB,KAAK,MAAM,cAAc;EAClD,IAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO;EAC5D,MAAM,MAAO,QAA8B;EAC3C,OAAO,OAAO,QAAQ,WAAW,MAAM;CAC3C,QAAQ;EACJ,OAAO;CACX;AACJ;;;;AAKA,SAAgB,aAAa,OAAwB;CACjD,MAAM,MAAM,iBAAiB,KAAK;CAClC,IAAI,QAAQ,MAAM,OAAO;CAEzB,OAAO,MADa,KAAK,MAAM,KAAK,IAAI,IAAI,GACrB;AAC3B;;;;AAKA,SAAgB,WAAW,OAAuC;CAC9D,IAAI,CAAC,OAAO,OAAO;CACnB,IAAI,CAAC,MAAM,KAAK,GAAG,OAAO;CAC1B,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,OAAO;AACX;;;;;AAMA,SAAgB,mBAAmB,OAAuB;CACtD,MAAM,MAAM,iBAAiB,KAAK;CAClC,IAAI,QAAQ,MAAM,OAAO;CACzB,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,cAAc,MAAM;CAC1B,OAAO,KAAK,IAAI,GAAG,cAAc,KAAK;AAC1C"}
+{"version":3,"file":"jwt.js","names":[],"sources":["../../src/utils/jwt.ts"],"sourcesContent":["/**\n * Checks whether a string has the shape of a JWT.\n */\nexport function isJwt(token: string): boolean {\n    const parts = token.split(\".\");\n    return parts.length === 3 && !!parts[0] && !!parts[1] && !!parts[2];\n}\n\nlet textDecoder: TextDecoder | undefined;\n\n/**\n * Gets a TextDecoder instance.\n */\nfunction getTextDecoder(): TextDecoder {\n    textDecoder ??= new TextDecoder(\"utf-8\", { fatal: true });\n    return textDecoder;\n}\n\nfunction decodeBase64Url(value: string): string | null {\n    const remainder = value.length % 4;\n    if (remainder === 1) return null;\n\n    const base64 = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const paddedBase64 =\n        remainder === 0 ? base64 : base64.padEnd(base64.length + 4 - remainder, \"=\");\n    const binary = atob(paddedBase64);\n    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));\n    return getTextDecoder().decode(bytes);\n}\n\n/**\n * Reads a JWT expiration timestamp when present.\n */\nexport function getJwtExpiration(token: string): number | null {\n    try {\n        const [_, rawPayload] = token.split(\".\");\n        if (!rawPayload) return null;\n        const decodedPayload = decodeBase64Url(rawPayload);\n        if (!decodedPayload) return null;\n        const payload: unknown = JSON.parse(decodedPayload);\n        if (typeof payload !== \"object\" || payload === null) return null;\n        const exp = (payload as { exp?: unknown }).exp;\n        return typeof exp === \"number\" ? exp : null;\n    } catch {\n        return null;\n    }\n}\n\n/**\n * Checks whether a JWT is expired.\n */\nexport function isJwtExpired(token: string): boolean {\n    const exp = getJwtExpiration(token);\n    if (exp === null) return true;\n    const currentTime = Math.floor(Date.now() / 1000);\n    return exp < currentTime;\n}\n\n/**\n * Checks whether a value is a present, well-formed, unexpired JWT string.\n */\nexport function isJwtValid(token: unknown): token is string {\n    if (typeof token !== \"string\" || !token) return false;\n    if (!isJwt(token)) return false;\n    if (isJwtExpired(token)) return false;\n    return true;\n}\n\n/**\n * Returns the number of milliseconds until the JWT expires.\n * Returns 0 if already expired or invalid.\n */\nexport function getJwtTimeToExpiry(token: string): number {\n    const exp = getJwtExpiration(token);\n    if (exp === null) return 0;\n    const nowMs = Date.now();\n    const expiresAtMs = exp * 1000;\n    return Math.max(0, expiresAtMs - nowMs);\n}\n"],"mappings":";;;;AAGA,SAAgB,MAAM,OAAwB;CAC1C,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,OAAO,MAAM,WAAW,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,MAAM;AACrE;AAEA,IAAI;;;;AAKJ,SAAS,iBAA8B;CACnC,gBAAgB,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;CACxD,OAAO;AACX;AAEA,SAAS,gBAAgB,OAA8B;CACnD,MAAM,YAAY,MAAM,SAAS;CACjC,IAAI,cAAc,GAAG,OAAO;CAE5B,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;CACzD,MAAM,eACF,cAAc,IAAI,SAAS,OAAO,OAAO,OAAO,SAAS,IAAI,WAAW,GAAG;CAC/E,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,QAAQ,WAAW,KAAK,SAAS,cAAc,UAAU,WAAW,CAAC,CAAC;CAC5E,OAAO,eAAe,CAAC,CAAC,OAAO,KAAK;AACxC;;;;AAKA,SAAgB,iBAAiB,OAA8B;CAC3D,IAAI;EACA,MAAM,CAAC,GAAG,cAAc,MAAM,MAAM,GAAG;EACvC,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,iBAAiB,gBAAgB,UAAU;EACjD,IAAI,CAAC,gBAAgB,OAAO;EAC5B,MAAM,UAAmB,KAAK,MAAM,cAAc;EAClD,IAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO;EAC5D,MAAM,MAAO,QAA8B;EAC3C,OAAO,OAAO,QAAQ,WAAW,MAAM;CAC3C,QAAQ;EACJ,OAAO;CACX;AACJ;;;;AAKA,SAAgB,aAAa,OAAwB;CACjD,MAAM,MAAM,iBAAiB,KAAK;CAClC,IAAI,QAAQ,MAAM,OAAO;CAEzB,OAAO,MADa,KAAK,MAAM,KAAK,IAAI,IAAI,GACrB;AAC3B;;;;AAKA,SAAgB,WAAW,OAAiC;CACxD,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO;CAChD,IAAI,CAAC,MAAM,KAAK,GAAG,OAAO;CAC1B,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,OAAO;AACX;;;;;AAMA,SAAgB,mBAAmB,OAAuB;CACtD,MAAM,MAAM,iBAAiB,KAAK;CAClC,IAAI,QAAQ,MAAM,OAAO;CACzB,MAAM,QAAQ,KAAK,IAAI;CACvB,MAAM,cAAc,MAAM;CAC1B,OAAO,KAAK,IAAI,GAAG,cAAc,KAAK;AAC1C"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@polyester/sdk",
-    "version": "0.3.0",
+    "version": "0.4.0",
     "private": false,
     "description": "TypeScript SDK providing access to APIs on Polyester Exchange.",
     "homepage": "https://github.com/Fabric-Labs/polyester-sdk-typescript#readme",