@pooflabs/core 0.0.39 → 0.0.40

package/dist/utils/core-platform.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Safe base64 helpers for tarobase-core.
+ *
+ * Uses the global atob/btoa when available (browser, RN with polyfill),
+ * falls back to the 'buffer' package (Node.js / SSR / RN without polyfill).
+ *
+ * These are used instead of bare `atob()`/`btoa()` so the core package
+ * works in React Native without requiring the consumer to polyfill globals.
+ */
+export declare function safeAtob(input: string): string;
+export declare function safeBtoa(input: string): string;
+/**
+ * Decode a base64url-encoded string (used by JWT payloads).
+ * Normalises base64url → standard base64 before decoding.
+ */
+export declare function decodeBase64Url(input: string): string;

package/dist/utils/rn-session-manager.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Session manager for React Native environments.
+ *
+ * Drop-in replacement for WebSessionManager that uses a pluggable
+ * StorageAdapter instead of browser localStorage, and a pluggable
+ * base64-decode instead of the browser's atob().
+ *
+ * Consumers must call ReactNativeSessionManager.configure() once at
+ * startup to supply these adapters (e.g. MMKV, AsyncStorage wrapper,
+ * base64 polyfill).
+ */
+/**
+ * Synchronous storage adapter for React Native session persistence.
+ *
+ * **Security: tokens (access, identity, refresh) are stored as plaintext JSON.**
+ * Use an encrypted storage backend in production — for example:
+ *   - MMKV with an encryption key (`new MMKV({ encryptionKey: '...' })`)
+ *   - expo-secure-store
+ *   - react-native-keychain
+ *
+ * Plaintext token storage on a rooted/jailbroken device is a credential theft risk.
+ */
+export interface RNStorageAdapter {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+interface RNSessionConfig {
+    storage: RNStorageAdapter;
+    /** base64 → binary string (replaces browser atob). */
+    atob: (input: string) => string;
+}
+export declare class ReactNativeSessionManager {
+    private static TAROBASE_SESSION_STORAGE_KEY;
+    /**
+     * Must be called once before any other method.
+     *
+     * ```ts
+     * import { ReactNativeSessionManager } from '@pooflabs/core';
+     * import { MMKV } from 'react-native-mmkv';
+     * import { decode } from 'base-64';
+     *
+     * const mmkv = new MMKV();
+     * ReactNativeSessionManager.configure({
+     *   storage: {
+     *     getItem: (k) => mmkv.getString(k) ?? null,
+     *     setItem: (k, v) => mmkv.set(k, v),
+     *     removeItem: (k) => mmkv.delete(k),
+     *   },
+     *   atob: decode,
+     * });
+     * ```
+     */
+    static configure(cfg: RNSessionConfig): void;
+    private static getStorage;
+    private static decodeBase64;
+    /**
+     * Decode a base64url-encoded string (used by JWT payloads).
+     * Normalises base64url → standard base64 before decoding.
+     */
+    private static decodeBase64Url;
+    static storeSession(address: string, accessToken: string, idToken: string, refreshToken: string): Promise<void>;
+    static getSession(): Promise<{
+        address: string;
+        session: any;
+    } | null>;
+    static clearSession(): void;
+    static isAuthenticated(): boolean;
+    static getIdToken(): string | null;
+    static getRefreshToken(): string | null;
+    static updateIdTokenAndAccessToken(idToken: string, accessToken: string): Promise<void>;
+}
+export {};

package/dist/utils/web-session-manager.d.ts

@@ -1,5 +1,10 @@
 export declare class WebSessionManager {
     private static TAROBASE_SESSION_STORAGE_KEY;
+    /**
+     * Decode a base64url-encoded string (used by JWT payloads).
+     * Normalises base64url → standard base64 before calling browser atob().
+     */
+    private static decodeBase64Url;
     static storeSession(address: string, accessToken: string, idToken: string, refreshToken: string): Promise<void>;
     static getSession(): Promise<{
         address: string;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pooflabs/core",
-    "version": "0.0.39",
+    "version": "0.0.40",
     "description": "Core functionality for Poof SDK",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",