@skia-id/sdk 0.1.0

package/README.md

@@ -0,0 +1,72 @@
+# @skia-id/sdk
+
+OAuth 2.1 / OIDC client SDK for [Skia ID](https://skiaid.org) — anonymous identity verification for websites.
+
+Users verify their age once, then sign into your site with a privacy-preserving proxy identity. No passwords, no personal data exposed.
+
+## Install
+
+```bash
+npm install @skia-id/sdk
+```
+
+## Quick Start
+
+```ts
+import { SkiaOAuthClient } from "@skia-id/sdk";
+
+const skia = new SkiaOAuthClient({
+  clientId: "your-client-id",       // from dev.skiaid.org
+  redirectUri: "https://yourapp.com/callback",
+  scopes: ["openid", "email", "age"],
+});
+
+// 1. Redirect user to Skia login
+await skia.login();
+
+// 2. On your callback page — exchange the code for tokens
+const tokens = await skia.handleCallback();
+
+// 3. Get user info
+const user = await skia.getUserInfo(tokens.access_token);
+// { sub: "unique-per-site", email: "ab12cd@pyle.skiaid.org",
+//   name: "CosmicBadger", age_over_18: true }
+```
+
+## Configuration
+
+```ts
+new SkiaOAuthClient({
+  clientId: string;        // Required — OAuth client ID
+  redirectUri: string;     // Required — must match registered URI
+  scopes?: string[];       // Default: ["openid", "email"]
+  apiUrl?: string;         // Default: "https://oauth.skiaid.org"
+  usePKCE?: boolean;       // Default: true (recommended for SPAs)
+});
+```
+
+## Available Scopes
+
+| Scope | Claims |
+|-------|--------|
+| `openid` | `sub` (unique pairwise identifier) |
+| `email` | `email`, `email_verified` |
+| `profile` | `name` (pseudonym) |
+| `age` | `age_over_18` |
+
+## API
+
+| Method | Description |
+|--------|-------------|
+| `login()` | Redirect to Skia authorization |
+| `handleCallback(clientSecret?)` | Exchange auth code for tokens |
+| `getUserInfo(accessToken)` | Fetch user claims |
+| `decodeIdToken(idToken)` | Decode JWT payload (client-side, no verification) |
+
+## Register Your App
+
+Create OAuth credentials at [dev.skiaid.org](https://dev.skiaid.org).
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { SkiaOAuthClient } from "./oauth.js";
+export type { SkiaOAuthConfig, OAuthTokenResponse, UserInfo, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,QAAQ,GACT,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+// Skia ID — OAuth 2.1 / OIDC SDK for third-party integrations
+export { SkiaOAuthClient } from "./oauth.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,30 @@
+import type { SkiaOAuthConfig, OAuthTokenResponse, UserInfo } from "./types.js";
+export declare class SkiaOAuthClient {
+    private readonly config;
+    constructor(config: SkiaOAuthConfig);
+    /**
+     * Initiate OAuth login — redirect the user to the Skia
+     * authorization endpoint.
+     */
+    login(): Promise<void>;
+    /**
+     * Handle the OAuth callback. Call this on your redirect_uri page.
+     * Exchanges the authorization code for tokens.
+     *
+     * @param clientSecret - Required for confidential clients (server-side).
+     *                        Omit for public clients using PKCE.
+     */
+    handleCallback(clientSecret?: string): Promise<OAuthTokenResponse>;
+    /**
+     * Fetch user info from the Skia's userinfo endpoint.
+     */
+    getUserInfo(accessToken: string): Promise<UserInfo>;
+    /**
+     * Decode an ID token's payload without verification.
+     * For display purposes only — always verify tokens server-side.
+     */
+    decodeIdToken(idToken: string): Record<string, unknown>;
+    /** Get the configured client ID */
+    getClientId(): string;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACT,MAAM,YAAY,CAAC;AAkDpB,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAMrB;gBAEU,MAAM,EAAE,eAAe;IAUnC;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5B;;;;;;OAMG;IACG,cAAc,CAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,kBAAkB,CAAC;IAwD9B;;OAEG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYzD;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAUvD,mCAAmC;IACnC,WAAW,IAAI,MAAM;CAGtB"}

package/dist/oauth.js

@@ -0,0 +1,154 @@
+// ---------------------------------------------------------------------------
+// Default OAuth URL — production Skia identity provider
+// ---------------------------------------------------------------------------
+const DEFAULT_OAUTH_URL = "https://oauth.skiaid.org";
+// ---------------------------------------------------------------------------
+// PKCE helpers — browser-safe (SubtleCrypto)
+// ---------------------------------------------------------------------------
+function generateRandomString(length) {
+    const array = new Uint8Array(length);
+    crypto.getRandomValues(array);
+    return Array.from(array, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function sha256(plain) {
+    const encoder = new TextEncoder();
+    return crypto.subtle.digest("SHA-256", encoder.encode(plain));
+}
+function base64urlEncode(buffer) {
+    const bytes = new Uint8Array(buffer);
+    let str = "";
+    for (const b of bytes) {
+        str += String.fromCharCode(b);
+    }
+    return btoa(str).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+async function generateCodeChallenge(verifier) {
+    const hash = await sha256(verifier);
+    return base64urlEncode(hash);
+}
+// ---------------------------------------------------------------------------
+// Storage keys
+// ---------------------------------------------------------------------------
+const PKCE_VERIFIER_KEY = "skia_pkce_verifier";
+const OAUTH_STATE_KEY = "skia_oauth_state";
+// ---------------------------------------------------------------------------
+// SkiaOAuthClient — OAuth 2.1 client for sites
+// ---------------------------------------------------------------------------
+export class SkiaOAuthClient {
+    config;
+    constructor(config) {
+        this.config = {
+            clientId: config.clientId,
+            redirectUri: config.redirectUri,
+            scopes: config.scopes ?? ["openid", "email"],
+            apiUrl: config.apiUrl ?? DEFAULT_OAUTH_URL,
+            usePKCE: config.usePKCE ?? true,
+        };
+    }
+    /**
+     * Initiate OAuth login — redirect the user to the Skia
+     * authorization endpoint.
+     */
+    async login() {
+        const state = generateRandomString(16);
+        sessionStorage.setItem(OAUTH_STATE_KEY, state);
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUri,
+            response_type: "code",
+            scope: this.config.scopes.join(" "),
+            state,
+        });
+        if (this.config.usePKCE) {
+            const codeVerifier = generateRandomString(32);
+            sessionStorage.setItem(PKCE_VERIFIER_KEY, codeVerifier);
+            const codeChallenge = await generateCodeChallenge(codeVerifier);
+            params.set("code_challenge", codeChallenge);
+            params.set("code_challenge_method", "S256");
+        }
+        window.location.href = `${this.config.apiUrl}/oauth/authorize?${params.toString()}`;
+    }
+    /**
+     * Handle the OAuth callback. Call this on your redirect_uri page.
+     * Exchanges the authorization code for tokens.
+     *
+     * @param clientSecret - Required for confidential clients (server-side).
+     *                        Omit for public clients using PKCE.
+     */
+    async handleCallback(clientSecret) {
+        const url = new URL(window.location.href);
+        const code = url.searchParams.get("code");
+        const state = url.searchParams.get("state");
+        const error = url.searchParams.get("error");
+        if (error) {
+            throw new Error(`OAuth error: ${error}`);
+        }
+        if (!code) {
+            throw new Error("No authorization code in callback URL");
+        }
+        // Validate state
+        const savedState = sessionStorage.getItem(OAUTH_STATE_KEY);
+        if (state !== savedState) {
+            throw new Error("OAuth state mismatch — possible CSRF attack");
+        }
+        sessionStorage.removeItem(OAUTH_STATE_KEY);
+        // Build token request
+        const body = {
+            grant_type: "authorization_code",
+            code,
+            redirect_uri: this.config.redirectUri,
+            client_id: this.config.clientId,
+        };
+        if (this.config.usePKCE) {
+            const verifier = sessionStorage.getItem(PKCE_VERIFIER_KEY);
+            if (!verifier) {
+                throw new Error("PKCE verifier not found — was login() called first?");
+            }
+            body.code_verifier = verifier;
+            sessionStorage.removeItem(PKCE_VERIFIER_KEY);
+        }
+        if (clientSecret) {
+            body.client_secret = clientSecret;
+        }
+        const res = await fetch(`${this.config.apiUrl}/oauth/token`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const err = await res.json().catch(() => ({ error: "Token exchange failed" }));
+            throw new Error(err.error ?? "Token exchange failed");
+        }
+        return res.json();
+    }
+    /**
+     * Fetch user info from the Skia's userinfo endpoint.
+     */
+    async getUserInfo(accessToken) {
+        const res = await fetch(`${this.config.apiUrl}/oauth/userinfo`, {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        if (!res.ok) {
+            throw new Error("Failed to fetch user info");
+        }
+        return res.json();
+    }
+    /**
+     * Decode an ID token's payload without verification.
+     * For display purposes only — always verify tokens server-side.
+     */
+    decodeIdToken(idToken) {
+        const parts = idToken.split(".");
+        if (parts.length !== 3) {
+            throw new Error("Invalid JWT format");
+        }
+        const payload = parts[1];
+        const decoded = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
+        return JSON.parse(decoded);
+    }
+    /** Get the configured client ID */
+    getClientId() {
+        return this.config.clientId;
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAMA,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E,SAAS,oBAAoB,CAAC,MAAc;IAC1C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB;IAC1C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,MAAM,OAAO,eAAe;IACT,MAAM,CAMrB;IAEF,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SAChC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACvC,cAAc,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;YAC9C,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAClB,YAAqB;QAErB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,iBAAiB;QACjB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,cAAc,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAE3C,sBAAsB;QACtB,MAAM,IAAI,GAA2B;YACnC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAChC,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;YAC9B,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,cAAc,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,uBAAuB,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAiC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,iBAAiB,EAAE;YAC9D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAuB,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IACxD,CAAC;IAED,mCAAmC;IACnC,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,31 @@
+export interface SkiaOAuthConfig {
+    /** OAuth client_id from registration */
+    clientId: string;
+    /** OAuth redirect_uri (must match registered URI) */
+    redirectUri: string;
+    /** Scopes to request (defaults to ["openid", "email"]) */
+    scopes?: string[];
+    /** Skia API base URL */
+    apiUrl?: string;
+    /** Use PKCE for public clients (defaults to true) */
+    usePKCE?: boolean;
+}
+export interface OAuthTokenResponse {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    id_token: string;
+    scope: string;
+}
+export interface UserInfo {
+    /** Unique proxy identifier (different per site) */
+    sub: string;
+    /** Proxy email address */
+    email?: string;
+    email_verified?: boolean;
+    /** Pseudonym / display name */
+    name?: string;
+    /** Age verification claim */
+    age_over_18?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// OAuth / OIDC types
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@skia-id/sdk",
+  "version": "0.1.0",
+  "description": "Skia ID OAuth 2.1 / OIDC client SDK — anonymous identity verification for websites",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc --project tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "devDependencies": {
+    "@skia-id/shared": "workspace:*",
+    "@skia-id/typescript-config": "workspace:*",
+    "typescript": "^5.7.0"
+  },
+  "keywords": [
+    "oauth",
+    "oidc",
+    "identity",
+    "age-verification",
+    "privacy",
+    "pkce",
+    "skia"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nickalready/agentic-auth",
+    "directory": "packages/sdk"
+  },
+  "homepage": "https://dev.skiaid.org",
+  "files": ["dist", "README.md"]
+}