@pooflabs/core 0.0.39 → 0.0.40

package/dist/index.mjs

@@ -42,7 +42,12 @@ async function createSessionWithSignature(address, message, signature) {
     return response.data;
 }
 async function createSessionWithPrivy(authToken, address, privyIdToken) {
-    if (typeof window === 'undefined')
+    var _a;
+    // Block in true SSR/Node.js. Allow in browser (window exists) and React Native (no window,
+    // but not Node — detected via process.versions.node). Node 21+ defines navigator globally,
+    // so we can't rely on navigator alone.
+    const isNode = typeof process !== 'undefined' && !!((_a = process.versions) === null || _a === void 0 ? void 0 : _a.node);
+    if (typeof window === 'undefined' && isNode)
         return;
     const client = await getAxiosAuthClient();
     const config = await getConfig();
@@ -70,6 +75,19 @@ async function signSessionCreateMessage(_signMessageFunction) {
 }
 
 class WebSessionManager {
+    /**
+     * Decode a base64url-encoded string (used by JWT payloads).
+     * Normalises base64url → standard base64 before calling browser atob().
+     */
+    static decodeBase64Url(input) {
+        let b64 = input.replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        return atob(b64);
+    }
     /* ------------------------------------------------------------------ */
     /* STORE                                                              */
     /* ------------------------------------------------------------------ */
@@ -105,7 +123,7 @@ class WebSessionManager {
         /* ---------- check JWT expiration ---------- */
         try {
             const { accessToken } = sessionObj;
-            const { exp } = JSON.parse(atob(accessToken.split(".")[1]));
+            const { exp } = JSON.parse(this.decodeBase64Url(accessToken.split(".")[1]));
             if (Date.now() > exp * 1000) {
                 const { refreshToken } = sessionObj;
                 if (!refreshToken)
@@ -3119,6 +3137,41 @@ var serverSessionManager = /*#__PURE__*/Object.freeze({
     ServerSessionManager: ServerSessionManager
 });
 
+/**
+ * Safe base64 helpers for tarobase-core.
+ *
+ * Uses the global atob/btoa when available (browser, RN with polyfill),
+ * falls back to the 'buffer' package (Node.js / SSR / RN without polyfill).
+ *
+ * These are used instead of bare `atob()`/`btoa()` so the core package
+ * works in React Native without requiring the consumer to polyfill globals.
+ */
+function safeAtob(input) {
+    if (typeof globalThis.atob === 'function') {
+        return globalThis.atob(input);
+    }
+    return bufferExports.Buffer.from(input, 'base64').toString('binary');
+}
+function safeBtoa(input) {
+    if (typeof globalThis.btoa === 'function') {
+        return globalThis.btoa(input);
+    }
+    return bufferExports.Buffer.from(input, 'binary').toString('base64');
+}
+/**
+ * Decode a base64url-encoded string (used by JWT payloads).
+ * Normalises base64url → standard base64 before decoding.
+ */
+function decodeBase64Url(input) {
+    let b64 = input.replace(/-/g, '+').replace(/_/g, '/');
+    const pad = b64.length % 4;
+    if (pad === 2)
+        b64 += '==';
+    else if (pad === 3)
+        b64 += '=';
+    return safeAtob(b64);
+}
+
 async function createBearerToken(isServer) {
     if (isServer) {
         const sessionMgr = ServerSessionManager.instance;
@@ -3618,7 +3671,7 @@ async function get(path, opts = {}) {
                 }
                 else {
                     const path = encodeURIComponent(normalizedPath);
-                    const promptQueryParam = (opts === null || opts === void 0 ? void 0 : opts.prompt) ? `&prompt=${btoa(opts.prompt)}` : "";
+                    const promptQueryParam = (opts === null || opts === void 0 ? void 0 : opts.prompt) ? `&prompt=${safeBtoa(opts.prompt)}` : "";
                     const apiPath = `items?path=${path}${promptQueryParam}${includeSubPathsParam}${shapeParam}${limitParam}${cursorParam}`;
                     response = await makeApiRequest('GET', apiPath, null, opts._overrides);
                 }
@@ -4073,7 +4126,7 @@ function getCacheKey(path, prompt, shape, limit, cursor) {
 }
 function isTokenExpired(token) {
     try {
-        const payload = JSON.parse(atob(token.split('.')[1]));
+        const payload = JSON.parse(decodeBase64Url(token.split('.')[1]));
         const expirationTime = payload.exp * 1000;
         const currentTime = Date.now();
         return currentTime > (expirationTime - 60000); // 60 second buffer
@@ -4085,7 +4138,7 @@ function isTokenExpired(token) {
 }
 function getTokenExpirationTime(token) {
     try {
-        const payload = JSON.parse(atob(token.split('.')[1]));
+        const payload = JSON.parse(decodeBase64Url(token.split('.')[1]));
         return payload.exp ? payload.exp * 1000 : null;
     }
     catch (_a) {
@@ -4413,7 +4466,7 @@ function sendSubscribe(connection, subscription) {
         type: 'subscribe',
         subscriptionId: subscription.subscriptionId,
         path: subscription.path,
-        prompt: subscription.prompt ? btoa(subscription.prompt) : undefined,
+        prompt: subscription.prompt ? safeBtoa(subscription.prompt) : undefined,
         includeSubPaths: subscription.includeSubPaths,
         shape: subscription.shape && Object.keys(subscription.shape).length > 0
             ? subscription.shape
@@ -4739,5 +4792,167 @@ async function reconnectWithNewAuth() {
     return reconnectWithNewAuthV2();
 }
 
-export { InsufficientBalanceError, ServerSessionManager, WebSessionManager, aggregate, buildSetDocumentsTransaction, clearCache, closeAllSubscriptions, convertRemainingAccounts, count, createSessionWithPrivy, createSessionWithSignature, genAuthNonce, genSolanaMessage, get, getCachedData, getConfig, getFiles, getIdToken, init, reconnectWithNewAuth, refreshSession, runExpression, runExpressionMany, runQuery, runQueryMany, set, setFile, setMany, signAndSubmitTransaction, signMessage, signSessionCreateMessage, signTransaction, subscribe };
+let _config = null;
+class ReactNativeSessionManager {
+    /**
+     * Must be called once before any other method.
+     *
+     * ```ts
+     * import { ReactNativeSessionManager } from '@pooflabs/core';
+     * import { MMKV } from 'react-native-mmkv';
+     * import { decode } from 'base-64';
+     *
+     * const mmkv = new MMKV();
+     * ReactNativeSessionManager.configure({
+     *   storage: {
+     *     getItem: (k) => mmkv.getString(k) ?? null,
+     *     setItem: (k, v) => mmkv.set(k, v),
+     *     removeItem: (k) => mmkv.delete(k),
+     *   },
+     *   atob: decode,
+     * });
+     * ```
+     */
+    static configure(cfg) {
+        _config = cfg;
+    }
+    static getStorage() {
+        if (!_config) {
+            throw new Error("ReactNativeSessionManager.configure() must be called before using session methods.");
+        }
+        return _config.storage;
+    }
+    static decodeBase64(input) {
+        if (!_config) {
+            throw new Error("ReactNativeSessionManager.configure() must be called before using session methods.");
+        }
+        return _config.atob(input);
+    }
+    /**
+     * Decode a base64url-encoded string (used by JWT payloads).
+     * Normalises base64url → standard base64 before decoding.
+     */
+    static decodeBase64Url(input) {
+        let b64 = input.replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad === 2)
+            b64 += '==';
+        else if (pad === 3)
+            b64 += '=';
+        return this.decodeBase64(b64);
+    }
+    /* ------------------------------------------------------------------ */
+    /* STORE                                                              */
+    /* ------------------------------------------------------------------ */
+    static async storeSession(address, accessToken, idToken, refreshToken) {
+        const config = await getConfig();
+        const currentAppId = config.appId;
+        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify({
+            address,
+            accessToken,
+            idToken,
+            refreshToken,
+            appId: currentAppId,
+        }));
+    }
+    /* ------------------------------------------------------------------ */
+    /* GET                                                                */
+    /* ------------------------------------------------------------------ */
+    static async getSession() {
+        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        if (!session)
+            return null;
+        const sessionObj = JSON.parse(session);
+        /* ---------- validate app-id ---------- */
+        const config = await getConfig();
+        if (sessionObj.appId && sessionObj.appId !== config.appId) {
+            this.clearSession();
+            return null;
+        }
+        /* ---------- check JWT expiration ---------- */
+        try {
+            const { accessToken } = sessionObj;
+            const { exp } = JSON.parse(this.decodeBase64Url(accessToken.split(".")[1]));
+            if (Date.now() > exp * 1000) {
+                const { refreshToken } = sessionObj;
+                if (!refreshToken)
+                    return null;
+                const refreshed = await refreshSession(refreshToken);
+                if ((refreshed === null || refreshed === void 0 ? void 0 : refreshed.idToken) && (refreshed === null || refreshed === void 0 ? void 0 : refreshed.accessToken)) {
+                    await this.updateIdTokenAndAccessToken(refreshed.idToken, refreshed.accessToken);
+                    const newSession = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    if (!newSession)
+                        return null;
+                    const newObj = JSON.parse(newSession);
+                    return { address: newObj.address, session: newObj };
+                }
+                // Refresh failed — clear stale session to prevent retry loops
+                this.clearSession();
+                return null;
+            }
+        }
+        catch (err) {
+            // Token decode or refresh failed — clear stale session to prevent retry loops
+            this.clearSession();
+            return null;
+        }
+        return { address: sessionObj.address, session: sessionObj };
+    }
+    /* ------------------------------------------------------------------ */
+    /* CLEAR                                                              */
+    /* ------------------------------------------------------------------ */
+    static clearSession() {
+        this.getStorage().removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+    }
+    /* ------------------------------------------------------------------ */
+    /* IS-AUTH                                                            */
+    /* ------------------------------------------------------------------ */
+    static isAuthenticated() {
+        return !!this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+    }
+    /* ------------------------------------------------------------------ */
+    /* TOKEN HELPERS                                                      */
+    /* ------------------------------------------------------------------ */
+    static getIdToken() {
+        try {
+            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            return session ? JSON.parse(session).idToken : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    static getRefreshToken() {
+        try {
+            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            return session ? JSON.parse(session).refreshToken : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    /* ------------------------------------------------------------------ */
+    /* UPDATE TOKENS                                                      */
+    /* ------------------------------------------------------------------ */
+    static async updateIdTokenAndAccessToken(idToken, accessToken) {
+        var _a;
+        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        if (!session)
+            return;
+        const sessionObj = JSON.parse(session);
+        /* ---------- app-id guard ---------- */
+        const config = await getConfig();
+        if (sessionObj.appId && sessionObj.appId !== config.appId) {
+            this.clearSession();
+            return;
+        }
+        sessionObj.idToken = idToken;
+        sessionObj.accessToken = accessToken;
+        (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
+        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+    }
+}
+ReactNativeSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+
+export { InsufficientBalanceError, ReactNativeSessionManager, ServerSessionManager, WebSessionManager, aggregate, buildSetDocumentsTransaction, clearCache, closeAllSubscriptions, convertRemainingAccounts, count, createSessionWithPrivy, createSessionWithSignature, genAuthNonce, genSolanaMessage, get, getCachedData, getConfig, getFiles, getIdToken, init, reconnectWithNewAuth, refreshSession, runExpression, runExpressionMany, runQuery, runQueryMany, set, setFile, setMany, signAndSubmitTransaction, signMessage, signSessionCreateMessage, signTransaction, subscribe };
 //# sourceMappingURL=index.mjs.map