@sigma-auth/better-auth-plugin 0.0.49 → 0.0.50

package/dist/client/sync.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Sync Client for local signers → Sigma-Auth backup synchronization
+ *
+ * Uses bitcoin-auth tokens signed by BAP member key for authentication.
+ * Pushes/pulls encrypted BapMasterBackup format to cloud storage.
+ */
+import type { BAP } from "bsv-bap";
+export interface SyncConfig {
+    /** Sigma-auth server URL (e.g., "https://sigmaidentity.com") */
+    serverUrl: string;
+}
+export interface SyncResult {
+    success: boolean;
+    error?: string;
+    encryptedBackup?: string;
+    lastUpdated?: string;
+}
+/**
+ * Push encrypted backup to sigma-auth cloud storage
+ */
+export declare function pushBackup(bap: BAP, bapId: string, encryptedBackup: string, config: SyncConfig): Promise<SyncResult>;
+/**
+ * Pull encrypted backup from sigma-auth cloud storage
+ */
+export declare function pullBackup(bap: BAP, bapId: string, config: SyncConfig): Promise<SyncResult>;
+/**
+ * Check if cloud backup exists and get its timestamp
+ */
+export declare function checkBackupStatus(bap: BAP, bapId: string, config: SyncConfig): Promise<{
+    exists: boolean;
+    lastUpdated?: string;
+    error?: string;
+}>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/client/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/client/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAInC,MAAM,WAAW,UAAU;IAC1B,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAkCD;;GAEG;AACH,wBAAsB,UAAU,CAC/B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,UAAU,GAChB,OAAO,CAAC,UAAU,CAAC,CAgCrB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC/B,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,UAAU,GAChB,OAAO,CAAC,UAAU,CAAC,CAoCrB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACtC,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,UAAU,GAChB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBpE"}

package/dist/client/sync.js

@@ -0,0 +1,115 @@
+/**
+ * Sync Client for local signers → Sigma-Auth backup synchronization
+ *
+ * Uses bitcoin-auth tokens signed by BAP member key for authentication.
+ * Pushes/pulls encrypted BapMasterBackup format to cloud storage.
+ */
+import { getAuthToken } from "bitcoin-auth";
+const SYNC_ENDPOINT = "/api/backup/sync";
+/**
+ * Get the WIF (private key) for the primary BAP identity's member key
+ */
+function getMemberWif(bap, bapId) {
+    const identity = bap.getId(bapId);
+    if (!identity) {
+        throw new Error(`Identity ${bapId} not found in BAP`);
+    }
+    const memberData = identity.exportMember();
+    if (!memberData?.wif) {
+        throw new Error("Failed to export member WIF");
+    }
+    return memberData.wif;
+}
+/**
+ * Create a bitcoin-auth token for sync authentication
+ */
+function createSyncAuthToken(wif, requestPath, body) {
+    return getAuthToken({
+        privateKeyWif: wif,
+        requestPath,
+        body,
+    });
+}
+/**
+ * Push encrypted backup to sigma-auth cloud storage
+ */
+export async function pushBackup(bap, bapId, encryptedBackup, config) {
+    try {
+        const wif = getMemberWif(bap, bapId);
+        const body = JSON.stringify({ bapId, encryptedBackup });
+        const authToken = createSyncAuthToken(wif, SYNC_ENDPOINT, body);
+        const response = await fetch(`${config.serverUrl}${SYNC_ENDPOINT}`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bitcoin-Auth ${authToken}`,
+            },
+            body,
+        });
+        const data = await response.json();
+        if (!response.ok) {
+            return {
+                success: false,
+                error: data.message || data.error || `HTTP ${response.status}`,
+            };
+        }
+        return { success: true };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+/**
+ * Pull encrypted backup from sigma-auth cloud storage
+ */
+export async function pullBackup(bap, bapId, config) {
+    try {
+        const wif = getMemberWif(bap, bapId);
+        const authToken = createSyncAuthToken(wif, SYNC_ENDPOINT);
+        const response = await fetch(`${config.serverUrl}${SYNC_ENDPOINT}?bapId=${encodeURIComponent(bapId)}`, {
+            method: "GET",
+            headers: {
+                Authorization: `Bitcoin-Auth ${authToken}`,
+            },
+        });
+        const data = await response.json();
+        if (!response.ok) {
+            return {
+                success: false,
+                error: data.message || data.error || `HTTP ${response.status}`,
+            };
+        }
+        return {
+            success: true,
+            encryptedBackup: data.encryptedBackup,
+            lastUpdated: data.lastUpdated,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+/**
+ * Check if cloud backup exists and get its timestamp
+ */
+export async function checkBackupStatus(bap, bapId, config) {
+    const result = await pullBackup(bap, bapId, config);
+    if (result.success) {
+        return {
+            exists: true,
+            lastUpdated: result.lastUpdated,
+        };
+    }
+    // 404 means no backup exists (not an error)
+    if (result.error?.includes("404") || result.error?.includes("not_found")) {
+        return { exists: false };
+    }
+    return { exists: false, error: result.error };
+}
+//# sourceMappingURL=sync.js.map

package/dist/client/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/client/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAczC;;GAEG;AACH,SAAS,YAAY,CAAC,GAAQ,EAAE,KAAa;IAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,mBAAmB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC3B,GAAW,EACX,WAAmB,EACnB,IAAa;IAEb,OAAO,YAAY,CAAC;QACnB,aAAa,EAAE,GAAG;QAClB,WAAW;QACX,IAAI;KACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAQ,EACR,KAAa,EACb,eAAuB,EACvB,MAAkB;IAElB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,aAAa,EAAE,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,gBAAgB,SAAS,EAAE;aAC1C;YACD,IAAI;SACJ,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE;aAC9D,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC/D,CAAC;IACH,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAQ,EACR,KAAa,EACb,MAAkB;IAElB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC3B,GAAG,MAAM,CAAC,SAAS,GAAG,aAAa,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACxE;YACC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,aAAa,EAAE,gBAAgB,SAAS,EAAE;aAC1C;SACD,CACD,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE;aAC9D,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC/D,CAAC;IACH,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,GAAQ,EACR,KAAa,EACb,MAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEpD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACN,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC/C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigma-auth/better-auth-plugin",
-	"version": "0.0.49",
+	"version": "0.0.50",
 	"description": "Better Auth plugins for Sigma Identity - client, server, and provider integrations",
 	"type": "module",
 	"main": "./dist/types/index.js",
@@ -18,6 +18,10 @@
 			"types": "./dist/client/local-signer.d.ts",
 			"import": "./dist/client/local-signer.js"
 		},
+		"./client/sync": {
+			"types": "./dist/client/sync.d.ts",
+			"import": "./dist/client/sync.js"
+		},
 		"./server": {
 			"types": "./dist/server/index.d.ts",
 			"import": "./dist/server/index.js"
@@ -74,6 +78,7 @@
 		"better-auth": "^1.4.5",
 		"@bsv/sdk": "^1.9.9",
 		"@neondatabase/serverless": "^1.0.2",
+		"bsv-bap": "^0.1.16",
 		"payload-auth": "^0.6.0",
 		"zod": "^4.1.12"
 	},
@@ -84,6 +89,9 @@
 		"@neondatabase/serverless": {
 			"optional": true
 		},
+		"bsv-bap": {
+			"optional": true
+		},
 		"payload-auth": {
 			"optional": true
 		},
@@ -102,6 +110,7 @@
 		"@neondatabase/serverless": "^1.0.2",
 		"@types/node": "^24.10.7",
 		"better-auth": "^1.4.10",
+		"bsv-bap": "^0.1.16",
 		"typescript": "^5.9.3",
 		"zod": "^4.3.5"
 	}