@secrecy/lib 1.86.1-feat-improve-sdk.1 → 1.86.1

package/dist/lib/base-client.js

@@ -1,4 +1,4 @@
-import { usersCache, clearAllCaches } from './cache.js';
+import { usersCache } from './cache.js';
 import { getStorage } from './client/storage.js';
 import { createTRPCClient, } from './client.js';
 import { getPreferedEmail } from './utils.js';
@@ -46,16 +46,15 @@ export class BaseClient {
                 BaseClient.getBaseClient({
                     session: opts.session,
                     apiUrl: this.secrecyUrls.api,
-                    timeoutMs: opts.timeoutMs,
                     onAccessDenied: async () => {
+                        console.log('[BASE_CLIENT - BEFORE] - Access denied');
                         await opts.onAccessDenied?.();
+                        console.log('[BASE_CLIENT - AFTER] - Access denied');
                         try {
                             await this.logout();
                         }
                         finally {
-                            if (opts.reloadOnAccessDenied ?? true) {
-                                location.reload();
-                            }
+                            location.reload();
                         }
                     },
                 });
@@ -142,6 +141,6 @@ export class BaseClient {
         session.identities.clear();
         session.keyPairs.clear();
         session.userAppSession.clear();
-        clearAllCaches();
+        usersCache.clear();
     };
 }

package/dist/lib/cache.js

@@ -1,9 +1,8 @@
 import { LRUCache } from 'lru-cache';
 import { gigaToBytes } from './utils.js';
-const boundedCacheOpts = { max: 5_000, ttl: 5 * 60 * 1000 };
-export const dataCache = new LRUCache(boundedCacheOpts);
-export const nodesCache = new LRUCache(boundedCacheOpts);
-export const nodesEncryptionCache = new LRUCache(boundedCacheOpts);
+export const dataCache = new Map();
+export const nodesCache = new Map();
+export const nodesEncryptionCache = new Map();
 export const getNodeForEncryptionFromCache = (id) => {
     if (nodesEncryptionCache.has(id)) {
         return nodesEncryptionCache.get(id);
@@ -13,8 +12,8 @@ export const getNodeForEncryptionFromCache = (id) => {
     }
     return undefined;
 };
-export const usersCache = new LRUCache(boundedCacheOpts);
-export const publicKeysCache = new LRUCache({ max: 10_000 });
+export const usersCache = new Map();
+export const publicKeysCache = new Map();
 export const dataContentCache = new LRUCache({
     max: 500,
     maxSize: gigaToBytes(0.5),
@@ -22,11 +21,3 @@ export const dataContentCache = new LRUCache({
         return value.data.byteLength;
     },
 });
-export function clearAllCaches() {
-    dataCache.clear();
-    nodesCache.clear();
-    nodesEncryptionCache.clear();
-    usersCache.clear();
-    publicKeysCache.clear();
-    dataContentCache.clear();
-}

package/dist/lib/client/SecrecyAppClient.js

@@ -1,4 +1,4 @@
-import { decodeJwt } from '../utils/jwt.js';
+import { decode } from 'jsonwebtoken';
 import { getStorage } from './storage.js';
 import { publicKeysCache } from '../cache.js';
 export class SecrecyAppClient {
@@ -7,7 +7,7 @@ export class SecrecyAppClient {
     #client;
     constructor(uaJwt, client) {
         this.jwt = uaJwt;
-        this.jwtDecoded = decodeJwt(uaJwt);
+        this.jwtDecoded = decode(uaJwt);
         this.#client = client;
     }
     get userId() {
@@ -41,7 +41,7 @@ export class SecrecyAppClient {
             includeEmail: typeof this.jwtDecoded['email'] === 'string',
         });
         this.jwt = jwt;
-        this.jwtDecoded = decodeJwt(jwt);
+        this.jwtDecoded = decode(jwt);
         const sessionStorage = getStorage(true);
         const localStorage = getStorage(false);
         const sessionJwt = sessionStorage.jwt.load();

package/dist/lib/client/SecrecyCloudClient.js

@@ -18,15 +18,18 @@ export class SecrecyCloudClient {
         this.#client = client;
     }
     async addDataToHistory({ dataId, nodeId, }) {
-        const currentNode = await apiNodeFullToInternalFull(await this.#client.apiClient.cloud.nodeFullById.query({ id: nodeId }), this.#client.keyPairs);
-        const currentData = currentNode.history.find((d) => d.id === dataId);
-        if (currentData === undefined) {
-            throw new Error(`Data ${dataId} is not in node ${nodeId}`);
-        }
+        const [rawData, currentNode] = await Promise.all([
+            this.#client.apiClient.cloud.dataById.query({
+                id: dataId,
+                fromIdentityPubKey: this.#client.currentIdentity.identityPubKey,
+            }),
+            this.node({ id: nodeId }),
+        ]);
+        const data = apiDataToInternal(rawData, this.#client.keyPairs);
         const encryptedAccesses = Object.keys(currentNode.identities).map((pubKey) => ({
             pubKey,
-            key: currentData.key
-                ? sodium.to_hex(encryptCryptoBox(sodium.from_hex(currentData.key), pubKey, this.#client.currentIdentityPrivateKey))
+            key: data.key
+                ? sodium.to_hex(encryptCryptoBox(sodium.from_hex(data.key), pubKey, this.#client.currentIdentityPrivateKey))
                 : null,
         }));
         const addDataToHistory = await this.#client.apiClient.cloud.addDataToHistory.mutate({

package/dist/lib/client/SecrecyDbClient.js

@@ -0,0 +1,3 @@
+export class SecrecyDbClient {
+    constructor(_client) { }
+}

package/dist/lib/client/SecrecyMailClient.js

@@ -31,13 +31,8 @@ export class SecrecyMailClient {
         })));
     }
     async create(data, customMessage) {
-        const { customMessage: embeddedCustomMessage, ...mailData } = data;
-        const resolvedCustomMessage = customMessage ?? embeddedCustomMessage;
-        const mail = await this.createDraft(mailData);
-        const isSent = await this.sendDraft({
-            draftId: mail.mailIntegrityId,
-            customMessage: resolvedCustomMessage,
-        });
+        const mail = await this.createDraft(data);
+        const isSent = await this.sendDraft(mail.mailIntegrityId, customMessage);
         if (!isSent) {
             throw new Error('The mail does not sent!');
         }
@@ -58,8 +53,7 @@ export class SecrecyMailClient {
         }));
         return waitingReceivedMailsWithIds;
     }
-    async updateDraft(arg, args) {
-        const { draftId, body, subject, senderFiles, recipients, replyToId, } = typeof arg === 'string' ? { draftId: arg, ...args } : arg;
+    async updateDraft(draftId, { body, subject, senderFiles, recipients, replyToId }) {
         const drafts = await this.draftMails({});
         const draft = drafts.find((d) => d.mailIntegrityId === draftId);
         if (draft === undefined) {
@@ -130,8 +124,7 @@ export class SecrecyMailClient {
         });
         return isDeleted;
     }
-    async sendDraft(arg, customMessage) {
-        const { draftId, customMessage: resolvedCustomMessage } = typeof arg === 'string' ? { draftId: arg, customMessage } : arg;
+    async sendDraft(draftId, customMessage) {
         const drafts = await this.draftMails({});
         const draft = drafts.find((d) => d.mailIntegrityId === draftId);
         if (draft === undefined) {
@@ -164,7 +157,7 @@ export class SecrecyMailClient {
             temporaryRecipients,
             recipients,
             id: draft.mailIntegrityId,
-            customMessage: resolvedCustomMessage ?? null,
+            customMessage: customMessage ?? null,
         });
         return isSent;
     }

package/dist/lib/client/helpers.js

@@ -2,26 +2,14 @@ import { SecrecyClient } from './index.js';
 import { popup } from '../utils/popup-tools.js';
 import { secrecyUserApp } from './types/index.js';
 import { getStorage } from './storage.js';
-import { setup } from '../sodium.js';
-export function assertBrowser(fn) {
-    if (typeof window === 'undefined') {
-        const err = {
-            name: 'ClientError',
-            code: 'SERVER_ENVIRONMENT',
-            message: `${fn}() can only run in a browser. On Next.js, call it from a "use client" component, or via dynamic(..., { ssr: false }).`,
-        };
-        throw err;
-    }
-}
 export function parseInfos() {
-    assertBrowser('parseInfos');
     if (window.location.hash === '') {
         return null;
     }
-    const hash = window.location.hash.slice(1);
+    const hash = window.location.hash.substr(1);
     try {
         const res = JSON.parse(atob(hash));
-        history.replaceState(null, '', window.location.pathname + window.location.search);
+        window.location.hash = '';
         const data = secrecyUserApp.safeParse(res);
         return data.success ? data.data : null;
     }
@@ -30,7 +18,6 @@ export function parseInfos() {
     }
 }
 export function getSecrecyClient(opts = {}) {
-    assertBrowser('getSecrecyClient');
     const storage = getStorage(opts.session);
     const infos = parseInfos();
     if (infos !== null) {
@@ -62,7 +49,6 @@ export function getSecrecyClient(opts = {}) {
     return null;
 }
 export async function login({ appId, context, path, redirect, scopes, backPath, session, secrecyUrls, forceLogin, }) {
-    assertBrowser('login');
     return await new Promise(async (resolve, reject) => {
         const appUrl = window.location.origin;
         const client = getSecrecyClient({ session, secrecyUrls });
@@ -143,21 +129,3 @@ export async function login({ appId, context, path, redirect, scopes, backPath,
         }
     });
 }
-/**
- * Single async entry point: runs `setup()`, reuses an existing session if
- * one is found, and falls back to `login()` otherwise. Equivalent to
- * `await setup()` + `getSecrecyClient()` + `login()`, without having to
- * juggle the sync/async mismatch between them.
- */
-export async function initSecrecy(opts) {
-    assertBrowser('initSecrecy');
-    await setup();
-    const existing = getSecrecyClient({
-        session: opts.session,
-        secrecyUrls: opts.secrecyUrls,
-    });
-    if (existing !== null) {
-        return existing;
-    }
-    return await login(opts);
-}

package/dist/lib/client/index.js

@@ -2,7 +2,8 @@ import { BaseClient } from '../base-client.js';
 import { SecrecyCloudClient } from './SecrecyCloudClient.js';
 import { SecrecyMailClient } from './SecrecyMailClient.js';
 import { SecrecyAppClient } from './SecrecyAppClient.js';
-import { clearAllCaches } from '../cache.js';
+import { nodesCache, dataCache, publicKeysCache } from '../cache.js';
+import { SecrecyDbClient } from './SecrecyDbClient.js';
 import { SecrecyWalletClient } from './SecrecyWalletClient.js';
 import { SecrecyPayClient } from './SecrecyPayClient.js';
 import { SecrecyUserClient } from './SecrecyUserClient.js';
@@ -19,10 +20,9 @@ export class SecrecyClient extends BaseClient {
     cloud;
     mail;
     app;
+    db;
     organization;
-    /** @experimental Susceptible de changer sans version majeure. */
     wallet;
-    /** @experimental Susceptible de changer sans version majeure. */
     pay;
     user;
     pseudonym;
@@ -33,9 +33,8 @@ export class SecrecyClient extends BaseClient {
             session: opts.uaSession,
             secrecyUrls: opts.secrecyUrls,
             apiClient: opts.apiClient,
-            timeoutMs: opts.timeoutMs,
-            reloadOnAccessDenied: opts.reloadOnAccessDenied,
             onAccessDenied: async () => {
+                console.log('[CLIENT] - Access denied');
                 try {
                     await this.logout();
                 }
@@ -54,6 +53,7 @@ export class SecrecyClient extends BaseClient {
         this.cloud = new SecrecyCloudClient(this);
         this.mail = new SecrecyMailClient(this);
         this.app = new SecrecyAppClient(opts.uaJwt, this);
+        this.db = new SecrecyDbClient(this);
         this.organization = new SecrecyOrganizationClient(this);
         this.wallet = new SecrecyWalletClient(this);
         this.pay = new SecrecyPayClient(this);
@@ -104,7 +104,9 @@ export class SecrecyClient extends BaseClient {
         });
     }
     async logout(sessionId) {
-        clearAllCaches();
+        nodesCache.clear();
+        dataCache.clear();
+        publicKeysCache.clear();
         await super.logout(sessionId);
     }
 }

package/dist/lib/client.js

@@ -24,22 +24,26 @@ export const createTRPCClient = (opts) => innerCreateTRPCClient({
                 : 'https://api.secrecy.tech/trpc',
             maxURLLength: 2083,
             fetch: async (input, init) => {
-                const timeout = AbortSignal.timeout(opts.timeoutMs ?? 20_000);
-                const signal = init?.signal
-                    ? AbortSignal.any([init.signal, timeout])
-                    : timeout;
+                const controller = new AbortController();
+                const id = setTimeout(() => {
+                    controller.abort();
+                }, 20000);
                 const headers = new Headers(init?.headers);
                 headers.set('secrecy-lib-version', SECRECY_LIB_VERSION);
                 if (typeof opts.session === 'string') {
                     headers.set('secrecy-session', opts.session);
                 }
-                return await fetch(input, {
+                const call = fetch(input, {
                     ...init,
                     headers,
-                    signal,
+                    signal: controller.signal,
                     mode: 'cors',
                     credentials: opts.session ? 'include' : 'omit',
                 });
+                void call.finally(() => {
+                    clearTimeout(id);
+                });
+                return await call;
             },
         }),
     ],

package/dist/lib/crypto/index.js

@@ -1,12 +1,5 @@
 import { concatenate } from '../utils/array.js';
 import { sodium } from '../sodium.js';
-function dataTooShortError() {
-    return {
-        name: 'ClientError',
-        code: 'DATA_TOO_SHORT',
-        message: 'Encrypted payload is shorter than nonce + MAC',
-    };
-}
 export function encryptCryptoBox(data, publicKeyBob, privateKeyAlice) {
     const nonce = sodium.randombytes_buf(sodium.crypto_box_NONCEBYTES);
     const crypt = sodium.crypto_box_easy(data, nonce, sodium.from_hex(publicKeyBob), sodium.from_hex(privateKeyAlice));
@@ -17,7 +10,7 @@ export function generateCryptoBoxKeyPair() {
 }
 export function decryptCryptoBox(data, publicKeyAlice, privateKeyBob) {
     if (data.length < sodium.crypto_box_NONCEBYTES + sodium.crypto_box_MACBYTES) {
-        throw dataTooShortError();
+        throw 'data too short';
     }
     const nonce = data.slice(0, sodium.crypto_box_NONCEBYTES);
     const cipher = data.slice(sodium.crypto_box_NONCEBYTES);
@@ -34,7 +27,7 @@ export function encryptSecretBox(data, key) {
 export function decryptSecretBox(data, key) {
     if (data.length <
         sodium.crypto_secretbox_NONCEBYTES + sodium.crypto_secretbox_MACBYTES) {
-        throw dataTooShortError();
+        throw 'data too short';
     }
     const nonce = data.slice(0, sodium.crypto_secretbox_NONCEBYTES);
     const cipher = data.slice(sodium.crypto_secretbox_NONCEBYTES);

package/dist/lib/error/client.js

@@ -1,11 +1,5 @@
 import { z } from 'zod';
-export const clientErrorCodeKey = z.enum([
-    'NOT_FOUND',
-    'DATA_TOO_SHORT',
-    'POPUP_BLOCKED',
-    'POPUP_CLOSED',
-    'SERVER_ENVIRONMENT',
-]);
+export const clientErrorCodeKey = z.enum(['NOT_FOUND']);
 export const clientError = z.object({
     name: z.literal('ClientError'),
     code: clientErrorCodeKey,

package/dist/lib/utils/popup-tools.js

@@ -10,6 +10,7 @@ const defaultOptions = {
     scrollbars: 'no',
     centered: true,
 };
+let popupCount = 1;
 /**
  * Return options converted to a string
  *
@@ -22,11 +23,12 @@ function optionsToString(options) {
         .join(',');
 }
 /**
- * Get an unpredictable, unique name on each call
+ * Get a unique name on each call
  * @return {String}
  */
 function defaultPopupName() {
-    return `secrecy-${crypto.randomUUID()}`;
+    popupCount += 1;
+    return `Popup ${popupCount}`;
 }
 /**
  * Convert "centered: true" key into concrete left and top arguments
@@ -99,7 +101,6 @@ function popupExecute(execute, url, name, options, callback) {
         };
     const optionsString = optionsToString(popupOptions);
     const win = execute(url, popupName, optionsString);
-    const expectedOrigin = new URL(url, window.location.href).origin;
     let isMessageSent = false;
     let interval;
     function popupCallbackOnce(err, data) {
@@ -109,11 +110,7 @@ function popupExecute(execute, url, name, options, callback) {
         }
     }
     function onMessage(message) {
-        if (message === undefined || message.origin !== expectedOrigin) {
-            console.error('Invalid message origin', message?.origin, expectedOrigin);
-            return;
-        }
-        const data = message.data;
+        const data = message !== undefined ? message.data : undefined;
         if (data !== undefined && data.id === popupName) {
             popupCallbackOnce(undefined, data.data);
             window.removeEventListener('message', onMessage);
@@ -126,21 +123,13 @@ function popupExecute(execute, url, name, options, callback) {
             if (win === null || win.closed) {
                 setTimeout(function delayWindowClosing() {
                     clearInterval(interval);
-                    popupCallbackOnce({
-                        name: 'ClientError',
-                        code: 'POPUP_CLOSED',
-                        message: 'The popup was closed before completing',
-                    });
+                    popupCallbackOnce(new Error('Popup closed'));
                 }, 500);
             }
         }, 100);
     }
     else {
-        popupCallbackOnce({
-            name: 'ClientError',
-            code: 'POPUP_BLOCKED',
-            message: 'The popup was blocked by the browser',
-        });
+        popupCallbackOnce(new Error('Popup blocked'));
     }
     return win;
 }
@@ -181,8 +170,11 @@ export function popupWithPost(url, postData, name, options, callback) {
 }
 /**
  * Return html that when executed, will trigger the popup to callback with a response
+ *
+ * @param  {Object}
+ * @return {String}
  */
-export function popupResponse(id, data, targetOrigin) {
+export function popupResponse(id, data) {
     const jsonData = JSON.stringify({ id, data });
-    return `<script>window.opener.postMessage(${jsonData}, ${JSON.stringify(targetOrigin)});setTimeout(function() { window.close(); }, 50);</script>`;
+    return `<script>window.opener.postMessage(${jsonData}, "*");setTimeout(function() { window.close(); }, 50);</script>`;
 }

package/dist/lib/versioning.js

@@ -1 +1 @@
-export const SECRECY_LIB_VERSION = '0.0.0-development';
+export const SECRECY_LIB_VERSION = '1.0.0';

package/dist/types/base-client.d.ts

@@ -12,8 +12,6 @@ export type BaseClientOptions = {
     apiClient?: ApiClient;
     onAccessDenied?: () => void | Promise<void>;
     secrecyUrls?: Partial<SecrecyUrls>;
-    timeoutMs?: number;
-    reloadOnAccessDenied?: boolean;
 };
 export declare class BaseClient {
     #private;

package/dist/types/cache.d.ts

@@ -1,18 +1,17 @@
 import type { InternalNode, InternalData, InternalNodeFull, LocalData, InternalMinimalNodeForEncryption } from './client/types/index.js';
 import { LRUCache } from 'lru-cache';
 type NodeForEncryptionCached = InternalNode | InternalNodeFull | InternalMinimalNodeForEncryption;
-export declare const dataCache: LRUCache<string, InternalData, unknown>;
-export declare const nodesCache: LRUCache<string, InternalNode | InternalNodeFull, unknown>;
-export declare const nodesEncryptionCache: LRUCache<string, InternalMinimalNodeForEncryption, unknown>;
+export declare const dataCache: Map<string, InternalData>;
+export declare const nodesCache: Map<string, InternalNode | InternalNodeFull>;
+export declare const nodesEncryptionCache: Map<string, InternalMinimalNodeForEncryption>;
 export declare const getNodeForEncryptionFromCache: (id: string) => NodeForEncryptionCached | undefined;
-export declare const usersCache: LRUCache<string, {
+export declare const usersCache: Map<string, {
     firstname: string;
     lastname: string;
     id: string;
     avatar: string | null;
     isSearchable: boolean;
-}, unknown>;
-export declare const publicKeysCache: LRUCache<string, string, unknown>;
+}>;
+export declare const publicKeysCache: Map<string, string>;
 export declare const dataContentCache: LRUCache<string, LocalData, unknown>;
-export declare function clearAllCaches(): void;
 export {};

package/dist/types/client/SecrecyAppClient.d.ts

@@ -1,5 +1,5 @@
 import type { SecrecyClient, UserAppNotifications, UserAppSettings } from '../index.js';
-import { type JwtPayload } from '../utils/jwt.js';
+import type { JwtPayload } from 'jsonwebtoken';
 import { type RouterOutputs, type RouterInputs } from '../client.js';
 export declare class SecrecyAppClient {
     #private;

package/dist/types/client/SecrecyDbClient.d.ts

@@ -0,0 +1,4 @@
+import type { SecrecyClient } from '../index.js';
+export declare class SecrecyDbClient {
+    constructor(_client: SecrecyClient);
+}

package/dist/types/client/SecrecyMailClient.d.ts

@@ -13,23 +13,9 @@ export declare class SecrecyMailClient {
     deletedMails({ mailType, }: {
         mailType: ApiMail['type'];
     }): Promise<Mail[]>;
-    create(data: NewMail & {
-        customMessage?: string | null | undefined;
-    }): Promise<SentMail>;
-    /**
-     * @deprecated Pass a single object instead:
-     * `create({ ...data, customMessage })`.
-     */
     create(data: NewMail, customMessage?: string | null | undefined): Promise<SentMail>;
     waitingReceivedMails(): Promise<WaitingReceivedMail[]>;
-    updateDraft(input: {
-        draftId: string;
-    } & Partial<NewMail>): Promise<DraftMail>;
-    /**
-     * @deprecated Pass a single object instead:
-     * `updateDraft({ draftId, ...args })`.
-     */
-    updateDraft(draftId: string, args: Partial<NewMail>): Promise<DraftMail>;
+    updateDraft(draftId: string, { body, subject, senderFiles, recipients, replyToId }: Partial<NewMail>): Promise<DraftMail>;
     deleteDraft(draftId: string): Promise<boolean>;
     deleteTrash({ ids }: {
         ids: string[];
@@ -38,14 +24,6 @@ export declare class SecrecyMailClient {
     delete({ mailId }: {
         mailId: string;
     }): Promise<boolean>;
-    sendDraft(input: {
-        draftId: string;
-        customMessage?: string | null | undefined;
-    }): Promise<boolean>;
-    /**
-     * @deprecated Pass a single object instead:
-     * `sendDraft({ draftId, customMessage })`.
-     */
     sendDraft(draftId: string, customMessage?: string | null | undefined): Promise<boolean>;
     sendWaitingEmails(): Promise<void>;
     createDraft({ body, subject, senderFiles, recipients, replyToId, }: NewMail): Promise<DraftMail>;

package/dist/types/client/helpers.d.ts

@@ -1,7 +1,6 @@
 import { SecrecyClient } from './index.js';
 import { type SecrecyUserApp } from './types/index.js';
 import type { SecrecyUrls } from '../base-client.js';
-export declare function assertBrowser(fn: string): void;
 export declare function parseInfos(): SecrecyUserApp | null;
 export interface HashInfos {
     appId?: string;
@@ -30,16 +29,4 @@ type LoginResponse<Params extends UseSecrecyParams> = Params extends {
     redirect: true;
 } ? SecrecyClient | null : SecrecyClient;
 export declare function login<Params extends UseSecrecyParams>({ appId, context, path, redirect, scopes, backPath, session, secrecyUrls, forceLogin, }: Params): Promise<LoginResponse<Params>>;
-/**
- * Single async entry point: runs `setup()`, reuses an existing session if
- * one is found, and falls back to `login()` otherwise. Equivalent to
- * `await setup()` + `getSecrecyClient()` + `login()`, without having to
- * juggle the sync/async mismatch between them.
- */
-export declare function initSecrecy(opts: {
-    appId: string;
-    session?: boolean | undefined;
-    redirect?: boolean | undefined;
-    secrecyUrls?: Partial<SecrecyUrls>;
-}): Promise<SecrecyClient | null>;
 export {};

package/dist/types/client/index.d.ts

@@ -3,6 +3,7 @@ import type { SecretStreamProgress } from '../crypto/data.js';
 import { SecrecyCloudClient } from './SecrecyCloudClient.js';
 import { SecrecyMailClient } from './SecrecyMailClient.js';
 import { SecrecyAppClient } from './SecrecyAppClient.js';
+import { SecrecyDbClient } from './SecrecyDbClient.js';
 import { SecrecyWalletClient } from './SecrecyWalletClient.js';
 import { SecrecyPayClient } from './SecrecyPayClient.js';
 import { type ApiClient, type RouterInputs } from '../client.js';
@@ -21,18 +22,15 @@ export interface SecrecyClientOptions {
     uaJwt: string;
     apiClient?: ApiClient;
     secrecyUrls?: Partial<SecrecyUrls>;
-    timeoutMs?: number;
-    reloadOnAccessDenied?: boolean;
 }
 export declare class SecrecyClient extends BaseClient {
     #private;
     cloud: SecrecyCloudClient;
     mail: SecrecyMailClient;
     app: SecrecyAppClient;
+    db: SecrecyDbClient;
     organization: SecrecyOrganizationClient;
-    /** @experimental Susceptible de changer sans version majeure. */
     wallet: SecrecyWalletClient;
-    /** @experimental Susceptible de changer sans version majeure. */
     pay: SecrecyPayClient;
     user: SecrecyUserClient;
     pseudonym: SecrecyPseudonymClient;

package/dist/types/client.d.ts

@@ -8,7 +8,6 @@ export interface CreateTrpcClientOptions {
     session?: string | null | undefined;
     apiUrl?: string | null | undefined;
     onAccessDenied?: () => void | Promise<void> | null | undefined;
-    timeoutMs?: number | undefined;
 }
 export declare const createTRPCClient: (opts: CreateTrpcClientOptions) => import("@trpc/client").TRPCClient<import("@trpc/server").TRPCBuiltRouter<{
     ctx: any;

package/dist/types/error/client.d.ts

@@ -1,20 +1,12 @@
 import { z } from 'zod';
 export declare const clientErrorCodeKey: z.ZodEnum<{
     NOT_FOUND: "NOT_FOUND";
-    DATA_TOO_SHORT: "DATA_TOO_SHORT";
-    POPUP_BLOCKED: "POPUP_BLOCKED";
-    POPUP_CLOSED: "POPUP_CLOSED";
-    SERVER_ENVIRONMENT: "SERVER_ENVIRONMENT";
 }>;
 export type CLIENT_ERROR_CODE_KEY = z.infer<typeof clientErrorCodeKey>;
 export declare const clientError: z.ZodObject<{
     name: z.ZodLiteral<"ClientError">;
     code: z.ZodEnum<{
         NOT_FOUND: "NOT_FOUND";
-        DATA_TOO_SHORT: "DATA_TOO_SHORT";
-        POPUP_BLOCKED: "POPUP_BLOCKED";
-        POPUP_CLOSED: "POPUP_CLOSED";
-        SERVER_ENVIRONMENT: "SERVER_ENVIRONMENT";
     }>;
     message: z.ZodString;
 }, z.core.$strip>;

package/dist/types/error/index.d.ts

@@ -24,10 +24,6 @@ export declare const secrecyError: z.ZodDiscriminatedUnion<[z.ZodObject<{
     name: z.ZodLiteral<"ClientError">;
     code: z.ZodEnum<{
         NOT_FOUND: "NOT_FOUND";
-        DATA_TOO_SHORT: "DATA_TOO_SHORT";
-        POPUP_BLOCKED: "POPUP_BLOCKED";
-        POPUP_CLOSED: "POPUP_CLOSED";
-        SERVER_ENVIRONMENT: "SERVER_ENVIRONMENT";
     }>;
     message: z.ZodString;
 }, z.core.$strip>], "name">;

package/dist/types/utils/popup-tools.d.ts

@@ -1,7 +1,6 @@
 /**
  * TS Rewrite of https://github.com/enhancv/popup-tools
  */
-import { type ClientError } from '../error/client.js';
 type YesNo = 'yes' | 'no';
 interface Options {
     width?: number;
@@ -14,7 +13,7 @@ interface Options {
     left?: number;
     top?: number;
 }
-type Callback = (err?: ClientError, data?: unknown) => void;
+type Callback = (err?: Error, data?: unknown) => void;
 /**
  * Open a popup using the first argument.
  * Wait for it to close and call the callback.
@@ -45,6 +44,9 @@ export declare function popup(url: string, name: string, options: Partial<Option
 export declare function popupWithPost(url: string, postData: Record<string, string>, name: string, options: Partial<Options>, callback: Callback): Window | null;
 /**
  * Return html that when executed, will trigger the popup to callback with a response
+ *
+ * @param  {Object}
+ * @return {String}
  */
-export declare function popupResponse<T>(id: string, data: T, targetOrigin: string): string;
+export declare function popupResponse<T>(id: string, data: T): string;
 export {};

package/dist/types/versioning.d.ts

@@ -1 +1 @@
-export declare const SECRECY_LIB_VERSION = "0.0.0-development";
+export declare const SECRECY_LIB_VERSION = "1.0.0";

package/package.json

@@ -1,11 +1,8 @@
 {
   "name": "@secrecy/lib",
   "author": "Anonymize <anonymize@gmail.com>",
-  "description": "Client-side end-to-end encryption SDK for Secrecy",
-  "version": "1.86.1-feat-improve-sdk.1",
-  "engines": {
-    "node": ">=22.21.1"
-  },
+  "description": "Anonymize Secrecy Library",
+  "version": "1.86.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/anonymize-org/lib.git"
@@ -16,12 +13,11 @@
   },
   "homepage": "https://github.com/anonymize-org/lib#readme",
   "keywords": [
+    "anonymize",
+    "lib",
     "secrecy",
-    "e2ee",
-    "encryption",
-    "libsodium",
-    "zero-knowledge",
-    "browser"
+    "wallet",
+    "stripe"
   ],
   "type": "module",
   "exports": {
@@ -55,12 +51,9 @@
   "devDependencies": {
     "@commitlint/cli": "^20.3.0",
     "@commitlint/config-conventional": "^20.3.0",
-    "@happy-dom/global-registrator": "^20.11.2",
     "@prisma/client": "6.17.1",
-    "@trpc/server": "^11.6.0",
     "@types/bun": "^1.3.5",
     "@types/jsonwebtoken": "^9.0.10",
-    "@types/react": "^19.2.18",
     "@types/spark-md5": "^3.0.5",
     "@types/streamsaver": "^2.0.5",
     "@typescript-eslint/eslint-plugin": "^8.52.0",
@@ -74,7 +67,6 @@
     "husky": "^9.1.7",
     "npm-run-all": "^4.1.5",
     "prettier": "^3.7.4",
-    "react": "^19.2.8",
     "rimraf": "^6.1.2",
     "semantic-release": "^25.0.2",
     "typedoc": "^0.28.15",
@@ -86,6 +78,7 @@
     "@js-temporal/polyfill": "^0.5.1",
     "@secrecy/trpc-api-types": "1.41.0-dev.1",
     "@trpc/client": "11.6.0",
+    "@trpc/server": "^11.6.0",
     "@types/libsodium-wrappers-sumo": "^0.7.8",
     "axios": "^1.13.2",
     "bson": "^7.0.0",
@@ -99,13 +92,5 @@
     "streamsaver": "^2.0.6",
     "superjson": "2.2.6",
     "zod": "4.3.5"
-  },
-  "peerDependencies": {
-    "react": "^18.0.0 || ^19.0.0"
-  },
-  "peerDependenciesMeta": {
-    "react": {
-      "optional": true
-    }
   }
 }

package/dist/lib/react/index.js

@@ -1,69 +0,0 @@
-import { createContext, createElement, useCallback, useContext, useEffect, useMemo, useState, } from 'react';
-import { initSecrecy, login as secrecyLogin } from '../client/helpers.js';
-const SecrecyContext = createContext(null);
-export function SecrecyProvider(props) {
-    const { appId, session, redirect, secrecyUrls, children } = props;
-    const [client, setClient] = useState(null);
-    const [status, setStatus] = useState('idle');
-    const [error, setError] = useState(null);
-    const secrecyUrlsKey = JSON.stringify(secrecyUrls ?? null);
-    useEffect(() => {
-        let cancelled = false;
-        setStatus('loading');
-        initSecrecy({ appId, session, redirect, secrecyUrls })
-            .then((result) => {
-            if (cancelled)
-                return;
-            setClient(result);
-            setStatus(result !== null ? 'authenticated' : 'idle');
-        })
-            .catch((err) => {
-            if (cancelled)
-                return;
-            setError(err);
-            setStatus('error');
-        });
-        return () => {
-            cancelled = true;
-        };
-        // secrecyUrls is tracked through secrecyUrlsKey, a stable primitive.
-        // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [appId, session, redirect, secrecyUrlsKey]);
-    const login = useCallback(async () => {
-        setStatus('loading');
-        setError(null);
-        try {
-            const result = await secrecyLogin({
-                appId,
-                session,
-                secrecyUrls,
-                forceLogin: true,
-            });
-            setClient(result);
-            setStatus('authenticated');
-        }
-        catch (err) {
-            setError(err);
-            setStatus('error');
-        }
-        // secrecyUrls is tracked through secrecyUrlsKey, a stable primitive.
-        // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [appId, session, secrecyUrlsKey]);
-    const logout = useCallback(async () => {
-        if (client === null) {
-            return;
-        }
-        await client.logout();
-        setClient(null);
-        setStatus('idle');
-    }, [client]);
-    const value = useMemo(() => ({ client, status, error, login, logout }), [client, status, error, login, logout]);
-    return createElement(SecrecyContext.Provider, { value }, children);
-}
-export function useSecrecy() {
-    const ctx = useContext(SecrecyContext);
-    if (ctx === null) {
-        throw new Error('useSecrecy() must be used within a <SecrecyProvider>');
-    }
-    return ctx;
-}

package/dist/lib/utils/jwt.js

@@ -1,16 +0,0 @@
-function base64UrlDecode(input) {
-    const base64 = input.replace(/-/g, '+').replace(/_/g, '/');
-    const padded = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=');
-    const binary = atob(padded);
-    const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
-    return new TextDecoder('utf-8').decode(bytes);
-}
-// Decode-only: this SDK never verifies a JWT signature, verification
-// server-side is what actually matters.
-export function decodeJwt(token) {
-    const payload = token.split('.')[1];
-    if (payload === undefined) {
-        throw new Error('Invalid JWT: missing payload segment');
-    }
-    return JSON.parse(base64UrlDecode(payload));
-}

package/dist/types/react/index.d.ts

@@ -1,20 +0,0 @@
-import { type ReactNode } from 'react';
-import type { SecrecyClient } from '../client/index.js';
-import type { SecrecyUrls } from '../base-client.js';
-export type SecrecyStatus = 'idle' | 'loading' | 'authenticated' | 'error';
-export interface SecrecyContextValue {
-    client: SecrecyClient | null;
-    status: SecrecyStatus;
-    error: unknown;
-    login: () => Promise<void>;
-    logout: () => Promise<void>;
-}
-export interface SecrecyProviderProps {
-    appId: string;
-    session?: boolean | undefined;
-    redirect?: boolean | undefined;
-    secrecyUrls?: Partial<SecrecyUrls> | undefined;
-    children?: ReactNode;
-}
-export declare function SecrecyProvider(props: SecrecyProviderProps): ReactNode;
-export declare function useSecrecy(): SecrecyContextValue;

package/dist/types/utils/jwt.d.ts

@@ -1,9 +0,0 @@
-export interface JwtPayload {
-    sub?: string;
-    aud?: string | string[];
-    iss?: string;
-    exp?: number;
-    iat?: number;
-    [claim: string]: unknown;
-}
-export declare function decodeJwt<T = JwtPayload>(token: string): T;