@sparkvault/sdk-mobile 6.0.1 → 7.0.0

package/README.md

@@ -59,7 +59,7 @@ The SDK depends on `tweetnacl` for Ed25519 Identity JWT verification and declare
 | Adapter | Required | Default if omitted |
 |---------|----------|--------------------|
 | `tokenStorage` | Yes | Throws at client construction |
-| `identityAccountId` | Yes (must start with `acc_`) | Throws at client construction |
+| `identityAccountId` | Yes (a SparkVault account id, `acc_…`, by the platform's resource-id grammar) | Throws at client construction |
 | `fetch` | No | Falls back to `globalThis.fetch`; throws if neither exists |
 | `fileReader` | Only for `ingots.uploadFromUri` | Throws on first upload-from-URI call |
 | `fileDownloader` | Only for `ingots.downloadToFile` | Throws on first file-download call |
@@ -69,18 +69,18 @@ The SDK depends on `tweetnacl` for Ed25519 Identity JWT verification and declare
 
 - `products.identity`: Identity Product config, OTP/passkey login, JWKS/JWT verification, second-factor submission, and post-login backup/recommendation flows.
 - `account`: First-party Core session — Identity-token exchange, signup completion, profile, and account APIs.
-- `vaults`: Vault CRUD, unseal/seal, sharing, access retention, and upload portal/widget settings.
+- `vaults`: Vault CRUD, unseal, ending one session (`endSession`) or every session (`seal`), sharing, access retention, and upload portal/widget settings.
 - `folders`: Folder CRUD, breadcrumbs, folder moves, and ingot moves.
 - `ingots`: List/search/get, URI streaming upload/replace, rename/delete/move, sharing, read-only audit logs, SDK-managed file downloads, and the discrete `createUpload` (Forge upload URL + token) / `createDownloadLink` primitives.
 - `health`: Root API availability checks.
 - `sparks`: SparkSync ephemeral secrets — list/get/create/delete and SparkLink sharing (`share`/`getShare`/`unshare`).
-- `entropy`: HSM-backed entropy generation.
+- `entropy`: HSM-backed entropy generation (`generate`, `generateBytes`), and `drawFirstParty` for the signed-in app's own working values (`POST /v1/entropy/first-party`: a SparkVault session's draw, never plan- or bandwidth-gated or recorded as the account's usage).
 - `pushTokens`: Expo push-token registration/removal.
-- `billing`: Subscription status and usage, Stripe portal session, and native in-app purchase receipt validation.
+- `billing`: Subscription status and usage, and native in-app purchase receipt validation.
 
 ## Identity Dialog
 
-`SparkVaultIdentityDialog` is the mobile equivalent of the web SDK Identity popup. It fetches Identity Product config, derives email/phone input from enabled delivery methods, offers the enabled one-time-code methods (`otp_email`, `otp_sms`, `otp_voice`), applies configured branding and light/dark mode, and returns the raw signed Identity JWT plus JWKS metadata. Configured branding drives the header: a logo replaces the company name and is drawn at its own proportions; without one (or if it fails to load) the header shows the company lettermark and name.
+`SparkVaultIdentityDialog` is the mobile equivalent of the web SDK Identity popup. It fetches Identity Product config, derives email/phone input from enabled delivery methods, offers the enabled one-time-code methods (`otp_email`, `otp_sms`, `otp_voice`), applies configured branding and light/dark mode, and returns the raw signed Identity JWT plus JWKS metadata. Input reads as a phone number only when it has no `@` and holds phone characters only, so an email that starts with a digit (`2024user@gmail.com`) signs in by email; while email is enabled the field keeps the email keyboard. Configured branding drives the header: a logo replaces the company name and is drawn at its own proportions; without one (or if it fails to load) the header shows the company lettermark and name.
 
 Sign-in is code-only. The native passkey ceremony does not work in the mobile app, so the dialog never offers `passkey` even when the tenant has it enabled; `products.identity` still exposes the passkey APIs for a host that drives the ceremony itself.
 

package/dist/account.d.ts

@@ -24,9 +24,10 @@ export declare class MobileAccountClient {
     getAccount(): Promise<SparkVaultAccount>;
     /**
      * Update organization settings (member admins only). Sends a JSON body — the
-     * logo-upload variant of PUT /account is web-only. The PUT returns a partial
-     * settings projection, so re-read the full account to refresh the cache and
-     * return a complete, canonical SparkVaultAccount.
+     * logo-upload variant of PUT /account is web-only. The PUT answers with the
+     * account as it now stands (the same projection GET /account serves), which
+     * refreshes the cache as is: a read right after the write could land on a
+     * replica that has not seen it yet.
      */
     updateAccount(updates: UpdateAccountRequest): Promise<SparkVaultAccount>;
     revokeRefreshToken(refreshToken?: string): Promise<void>;

package/dist/account.js

@@ -1,4 +1,5 @@
 import { SparkVaultValidationError } from './errors.js';
+import { apiPath } from './request-path.js';
 /**
  * First-party SparkVault Core session, profile, and account client. Exchanges a
  * verified Identity token for an app session and owns the authenticated
@@ -10,7 +11,7 @@ export class MobileAccountClient {
         this.http = http;
     }
     async exchangeIdentityToken(identityToken) {
-        const sessionResponse = await this.http.post('/auth/identity/verify', { token: identityToken }, { skipAuth: true });
+        const sessionResponse = await this.http.post(apiPath `/auth/identity/verify`, { token: identityToken }, { skipAuth: true });
         const session = sessionResponse.data;
         if (session.user) {
             await this.storeSession(session);
@@ -30,7 +31,7 @@ export class MobileAccountClient {
         };
     }
     async completeSignup(signupToken, request) {
-        const response = await this.http.post('/auth/complete-signup', request, {
+        const response = await this.http.post(apiPath `/auth/complete-signup`, request, {
             skipAuth: true,
             headers: { Authorization: `Bearer ${signupToken}` },
         });
@@ -44,21 +45,21 @@ export class MobileAccountClient {
         });
     }
     async getProfile() {
-        const response = await this.http.get('/profile');
+        const response = await this.http.get(apiPath `/profile`);
         if (this.config.tokenStorage.setUser) {
             await this.config.tokenStorage.setUser(response.data);
         }
         return response.data;
     }
     async updateProfile(updates) {
-        const response = await this.http.put('/profile', updates);
+        const response = await this.http.put(apiPath `/profile`, updates);
         if (this.config.tokenStorage.setUser) {
             await this.config.tokenStorage.setUser(response.data);
         }
         return response.data;
     }
     async getAccount() {
-        const response = await this.http.get('/account');
+        const response = await this.http.get(apiPath `/account`);
         if (this.config.tokenStorage.setAccount) {
             await this.config.tokenStorage.setAccount(response.data);
         }
@@ -66,19 +67,23 @@ export class MobileAccountClient {
     }
     /**
      * Update organization settings (member admins only). Sends a JSON body — the
-     * logo-upload variant of PUT /account is web-only. The PUT returns a partial
-     * settings projection, so re-read the full account to refresh the cache and
-     * return a complete, canonical SparkVaultAccount.
+     * logo-upload variant of PUT /account is web-only. The PUT answers with the
+     * account as it now stands (the same projection GET /account serves), which
+     * refreshes the cache as is: a read right after the write could land on a
+     * replica that has not seen it yet.
      */
     async updateAccount(updates) {
-        await this.http.put('/account', updates);
-        return this.getAccount();
+        const response = await this.http.put(apiPath `/account`, updates);
+        if (this.config.tokenStorage.setAccount) {
+            await this.config.tokenStorage.setAccount(response.data);
+        }
+        return response.data;
     }
     async revokeRefreshToken(refreshToken) {
         const token = refreshToken ?? await this.config.tokenStorage.getRefreshToken();
         if (!token)
             return;
-        await this.http.post('/auth/logout', { refresh_token: token }).catch(err => {
+        await this.http.post(apiPath `/auth/logout`, { refresh_token: token }).catch(err => {
             this.config.logger.warn('Logout API call failed', { error: String(err) });
         });
     }

package/dist/account.js.map

@@ -1 +1 @@
-{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAYxD;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAI9B,YAAY,MAA4B,EAAE,IAAsB;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,aAAqB;QAC/C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC1C,uBAAuB,EACvB,EAAE,KAAK,EAAE,aAAa,EAAE,EACxB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QAEF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ;gBAC1C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;gBACtC,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,OAA8B;QAE9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,uBAAuB,EACvB,OAAO,EACP;YACE,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CACF,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAIZ;QACC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE;YAC9C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,UAAU,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,UAAU,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAqB;QAC5C,MAAM,KAAK,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAC/E,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACzE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAuD,EAAE;QACpE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAK1B;QACC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF"}
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAWxD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAI9B,YAAY,MAA4B,EAAE,IAAsB;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,aAAqB;QAC/C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAC1C,OAAO,CAAA,uBAAuB,EAC9B,EAAE,KAAK,EAAE,aAAa,EAAE,EACxB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QAEF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ;gBAC1C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;gBACtC,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,OAA8B;QAE9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACnC,OAAO,CAAA,uBAAuB,EAC9B,OAAO,EACP;YACE,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CACF,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAIZ;QACC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE;YAC9C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,OAAO,CAAA,UAAU,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,OAAO,CAAA,UAAU,EAAE,OAAO,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,OAAO,CAAA,UAAU,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,OAAO,CAAA,UAAU,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAqB;QAC5C,MAAM,KAAK,GAAG,YAAY,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAC/E,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAA,cAAc,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YAChF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAuD,EAAE;QACpE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAK1B;QACC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/app-sdk/email-address.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The canonical form of an address: trimmed and lowercased.
+ *
+ * @param {string} value
+ * @returns {string}
+ * @throws {TypeError} when `value` is not a string: it has no canonical form,
+ *   and a caller that would key or compare by one must not carry on without it
+ */
+export function canonicalEmailAddress(value: string): string;
+/**
+ * What makes `value` an address SparkVault cannot deliver to, or null when
+ * nothing does.
+ *
+ * @param {*} value
+ * @returns {string|null} One of EMAIL_ADDRESS_PROBLEMS, or null
+ */
+export function emailAddressProblem(value: any): string | null;
+/**
+ * Whether SparkVault can deliver to `value`.
+ *
+ * @param {*} value
+ * @returns {boolean}
+ */
+export function isValidEmailAddress(value: any): boolean;
+/** RFC 5321 length limits, in characters. */
+export const EMAIL_ADDRESS_LIMITS: Readonly<{
+    ADDRESS: 320;
+    LOCAL_PART: 64;
+    DOMAIN: 255;
+}>;
+/** Why an address is not valid, as emailAddressProblem reports it. */
+export const EMAIL_ADDRESS_PROBLEMS: Readonly<{
+    FORMAT: "format";
+    TOO_LONG: "too_long";
+    LOCAL_PART_TOO_LONG: "local_part_too_long";
+    DOMAIN_TOO_LONG: "domain_too_long";
+}>;

package/dist/app-sdk/email-address.js

@@ -0,0 +1,91 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/email-address.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * The one email-address grammar: the addresses SparkVault can deliver to, so
+ * the only ones a front door may accept. A door that took an address the
+ * email transport then refuses answers its caller with a success while the
+ * recipient gets nothing (a Notify send, a SparkLink invite, a share), so the
+ * accepting doors and the transport ask this one question.
+ *
+ * An address is read in its canonical form (trimmed, lowercased) and is valid
+ * when it has an RFC 5322 dot-atom-text local part in ASCII, exactly one `@`,
+ * a domain of at least two labels of letters, digits and inner hyphens, and
+ * fits the RFC 5321 lengths (address 320, local part 64, domain 255).
+ *
+ * The canonical form is also the one every stored email key is spelled in:
+ * Identity's directory normalizes an email identifier through
+ * canonicalEmailAddress, and Core keys its account and login-claim rows and
+ * compares a signed-in address through it, so one spelling of an address
+ * finds every row another spelling wrote.
+ *
+ * Pure and import-free, so every runtime that decides deliverability loads it
+ * alike.
+ */
+const LOCAL_PART = /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+$/;
+const DOMAIN_LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** RFC 5321 length limits, in characters. */
+export const EMAIL_ADDRESS_LIMITS = Object.freeze({
+    ADDRESS: 320,
+    LOCAL_PART: 64,
+    DOMAIN: 255
+});
+/** Why an address is not valid, as emailAddressProblem reports it. */
+export const EMAIL_ADDRESS_PROBLEMS = Object.freeze({
+    FORMAT: 'format',
+    TOO_LONG: 'too_long',
+    LOCAL_PART_TOO_LONG: 'local_part_too_long',
+    DOMAIN_TOO_LONG: 'domain_too_long'
+});
+/**
+ * The canonical form of an address: trimmed and lowercased.
+ *
+ * @param {string} value
+ * @returns {string}
+ * @throws {TypeError} when `value` is not a string: it has no canonical form,
+ *   and a caller that would key or compare by one must not carry on without it
+ */
+export function canonicalEmailAddress(value) {
+    if (typeof value !== 'string') {
+        throw new TypeError('An email address is a string');
+    }
+    return value.trim().toLowerCase();
+}
+/**
+ * What makes `value` an address SparkVault cannot deliver to, or null when
+ * nothing does.
+ *
+ * @param {*} value
+ * @returns {string|null} One of EMAIL_ADDRESS_PROBLEMS, or null
+ */
+export function emailAddressProblem(value) {
+    if (typeof value !== 'string')
+        return EMAIL_ADDRESS_PROBLEMS.FORMAT;
+    const address = canonicalEmailAddress(value);
+    const at = address.indexOf('@');
+    if (at <= 0 || at !== address.lastIndexOf('@'))
+        return EMAIL_ADDRESS_PROBLEMS.FORMAT;
+    const localPart = address.slice(0, at);
+    const domain = address.slice(at + 1);
+    const labels = domain.split('.');
+    if (!LOCAL_PART.test(localPart) || labels.length < 2 || !labels.every((label) => DOMAIN_LABEL.test(label))) {
+        return EMAIL_ADDRESS_PROBLEMS.FORMAT;
+    }
+    if (address.length > EMAIL_ADDRESS_LIMITS.ADDRESS)
+        return EMAIL_ADDRESS_PROBLEMS.TOO_LONG;
+    if (localPart.length > EMAIL_ADDRESS_LIMITS.LOCAL_PART)
+        return EMAIL_ADDRESS_PROBLEMS.LOCAL_PART_TOO_LONG;
+    if (domain.length > EMAIL_ADDRESS_LIMITS.DOMAIN)
+        return EMAIL_ADDRESS_PROBLEMS.DOMAIN_TOO_LONG;
+    return null;
+}
+/**
+ * Whether SparkVault can deliver to `value`.
+ *
+ * @param {*} value
+ * @returns {boolean}
+ */
+export function isValidEmailAddress(value) {
+    return emailAddressProblem(value) === null;
+}
+//# sourceMappingURL=email-address.js.map

package/dist/app-sdk/email-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-address.js","sourceRoot":"","sources":["../../src/app-sdk/email-address.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,yDAAyD;AACzD,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,UAAU,GAAG,iCAAiC,CAAC;AACrD,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,GAAG;IACZ,UAAU,EAAE,EAAE;IACd,MAAM,EAAE,GAAG;CACZ,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;CACnC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAK;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAK;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,sBAAsB,CAAC,MAAM,CAAC;IACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,sBAAsB,CAAC,MAAM,CAAC;IAErF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,sBAAsB,CAAC,MAAM,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,oBAAoB,CAAC,OAAO;QAAE,OAAO,sBAAsB,CAAC,QAAQ,CAAC;IAC1F,IAAI,SAAS,CAAC,MAAM,GAAG,oBAAoB,CAAC,UAAU;QAAE,OAAO,sBAAsB,CAAC,mBAAmB,CAAC;IAC1G,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM;QAAE,OAAO,sBAAsB,CAAC,eAAe,CAAC;IAC/F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAK;IACvC,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC"}

package/dist/app-sdk/encoding.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Whether a value is a Uint8Array from any realm (a browser frame, a test
+ * DOM), a Node Buffer included: the platform's one Uint8Array test, since a
+ * realm's own `instanceof Uint8Array` refuses another realm's arrays.
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+export function isUint8Array(value: unknown): boolean;
+/**
+ * Encode bytes as standard base64, padded.
+ * @param {Uint8Array} bytes
+ * @returns {string}
+ * @throws {TypeError} when `bytes` is not a Uint8Array
+ */
+export function bytesToBase64(bytes: Uint8Array): string;
+/**
+ * Encode bytes as base64url, unpadded.
+ * @param {Uint8Array} bytes
+ * @returns {string}
+ * @throws {TypeError} when `bytes` is not a Uint8Array
+ */
+export function bytesToBase64url(bytes: Uint8Array): string;
+/**
+ * Decode standard base64.
+ * @param {unknown} text
+ * @param {{ canonical?: boolean }} [options] - `canonical`: accept only what `bytesToBase64` writes
+ * @returns {Uint8Array | null} the bytes, or null when the text is not base64
+ */
+export function base64ToBytes(text: unknown, { canonical }?: {
+    canonical?: boolean;
+}): Uint8Array | null;
+/**
+ * Decode base64url.
+ * @param {unknown} text
+ * @param {{ canonical?: boolean }} [options] - `canonical`: accept only what `bytesToBase64url` writes
+ * @returns {Uint8Array | null} the bytes, or null when the text is not base64url
+ */
+export function base64urlToBytes(text: unknown, { canonical }?: {
+    canonical?: boolean;
+}): Uint8Array | null;
+/**
+ * Encode a string as standard base64, padded, of its UTF-8 bytes.
+ * @param {string} value
+ * @returns {string}
+ */
+export function base64EncodeUtf8(value: string): string;
+/**
+ * Decode what `base64EncodeUtf8` writes, strictly: canonical standard base64
+ * of well-formed UTF-8, so a mangled value is refused rather than read as
+ * whatever text a lenient decoder makes of it.
+ * @param {unknown} text
+ * @returns {string | null} the string, or null when the text is not canonical base64 of UTF-8
+ */
+export function base64DecodeUtf8(text: unknown): string | null;
+/**
+ * This module's codec as the source of a classic browser script, for a page
+ * that cannot import an ES module (Identity's passkey popup, the x.sv reveal
+ * page): it declares `bytesToBase64`, `bytesToBase64url`, `base64ToBytes` and
+ * `base64urlToBytes` and everything they read at the script's top level, built
+ * from the functions and constants above, so the page runs this codec, not a
+ * copy. A new module-scope binding any of them reads must be added here.
+ * Marked pure so a bundle that never reads it (the browser SDK's) drops it.
+ */
+export const ENCODING_SCRIPT: string;

package/dist/app-sdk/encoding.js

@@ -0,0 +1,245 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/encoding.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * Base64 and base64url (RFC 4648 §4 and §5): the platform's one codec.
+ *
+ * Dependency-free, and the codec uses no runtime globals (no Buffer, atob or
+ * btoa), so the same code runs on the server, in browsers and in React Native:
+ * sdk-js bundles this module, and sdk-mobile (which publishes standalone)
+ * carries a build-time copy pinned byte-for-byte by its drift test.
+ *
+ * - `bytesToBase64` writes the standard alphabet with `=` padding;
+ *   `bytesToBase64url` writes the URL-safe alphabet without padding.
+ * - `base64ToBytes` and `base64urlToBytes` each read one alphabet, by the WHATWG
+ *   forgiving-base64 rules `atob` implements: ASCII whitespace is ignored,
+ *   padding is optional but, when present, is one or two `=` completing the
+ *   final quartet, and bits past the last whole byte are dropped. Any other
+ *   character (the other alphabet's included), `=` anywhere else, or a single
+ *   character left over after the last whole quartet refuses the text.
+ * - `{ canonical: true }` accepts only the exact text the matching encoder
+ *   writes (no whitespace, the encoder's padding, zero trailing bits), for a
+ *   value whose spelling is itself compared or signed.
+ *
+ * - `base64EncodeUtf8` writes standard base64 of a string's UTF-8 bytes, the
+ *   one form that carries any Unicode through an HTTP header value (a header
+ *   holds latin1 bytes only); `base64DecodeUtf8` reads back exactly what it
+ *   writes. These two use TextEncoder and TextDecoder, which Node and every
+ *   browser provide; sdk-mobile converts UTF-8 itself for the React Native
+ *   engines that need not.
+ * - `isUint8Array` is the platform's one Uint8Array test; every app-sdk check
+ *   for a Uint8Array applies it.
+ *
+ * A refused text decodes to null, never to other bytes: each caller raises its
+ * own error at its own trust boundary.
+ *
+ * A page that cannot import an ES module runs this module's own codec
+ * (ENCODING_SCRIPT).
+ */
+const PAD = 0x3d; // '='
+/** Characters per String.fromCharCode call: far below every engine's argument limit. */
+const CHAR_CODE_CHUNK = 0x2000;
+function alphabet(characters, padded) {
+    const codes = new Uint8Array(64);
+    const values = new Int8Array(128).fill(-1);
+    for (let index = 0; index < 64; index += 1) {
+        codes[index] = characters.charCodeAt(index);
+        values[codes[index]] = index;
+    }
+    return { codes, values, padded };
+}
+const BASE64_CHARACTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const BASE64URL_CHARACTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+const BASE64 = alphabet(BASE64_CHARACTERS, true);
+const BASE64URL = alphabet(BASE64URL_CHARACTERS, false);
+/** Tab, line feed, form feed, carriage return or space. */
+function isAsciiWhitespace(code) {
+    return code === 0x09 || code === 0x0a || code === 0x0c || code === 0x0d || code === 0x20;
+}
+/**
+ * Whether a value is a Uint8Array from any realm (a browser frame, a test
+ * DOM), a Node Buffer included: the platform's one Uint8Array test, since a
+ * realm's own `instanceof Uint8Array` refuses another realm's arrays.
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+export function isUint8Array(value) {
+    return ArrayBuffer.isView(value) && Object.prototype.toString.call(value) === '[object Uint8Array]';
+}
+function fromCharCodes(codes) {
+    let text = '';
+    for (let start = 0; start < codes.length; start += CHAR_CODE_CHUNK) {
+        text += String.fromCharCode.apply(null, codes.subarray(start, start + CHAR_CODE_CHUNK));
+    }
+    return text;
+}
+function encode(bytes, table) {
+    if (!isUint8Array(bytes)) {
+        throw new TypeError('Base64 encoding takes a Uint8Array');
+    }
+    const { codes } = table;
+    const tail = bytes.length % 3;
+    const whole = bytes.length - tail;
+    let tailLength = 0;
+    if (tail > 0)
+        tailLength = table.padded ? 4 : tail + 1;
+    const chars = new Uint8Array((whole / 3) * 4 + tailLength);
+    let out = 0;
+    for (let index = 0; index < whole; index += 3) {
+        const group = (bytes[index] << 16) | (bytes[index + 1] << 8) | bytes[index + 2];
+        chars[out++] = codes[group >> 18];
+        chars[out++] = codes[(group >> 12) & 63];
+        chars[out++] = codes[(group >> 6) & 63];
+        chars[out++] = codes[group & 63];
+    }
+    if (tail > 0) {
+        const group = (bytes[whole] << 16) | (tail === 2 ? bytes[whole + 1] << 8 : 0);
+        chars[out++] = codes[group >> 18];
+        chars[out++] = codes[(group >> 12) & 63];
+        if (tail === 2)
+            chars[out++] = codes[(group >> 6) & 63];
+        chars.fill(PAD, out);
+    }
+    return fromCharCodes(chars);
+}
+function decode(text, table, canonical) {
+    if (typeof text !== 'string')
+        return null;
+    const { values } = table;
+    // First pass: refuse anything malformed and count the digits, so the output
+    // is allocated once at its exact size (multi-megabyte reads decode here).
+    let digits = 0;
+    let padding = 0;
+    for (let index = 0; index < text.length; index += 1) {
+        const code = text.charCodeAt(index);
+        if (isAsciiWhitespace(code)) {
+            if (canonical)
+                return null;
+        }
+        else if (code === PAD) {
+            padding += 1;
+        }
+        else if (padding > 0 || code > 127 || values[code] < 0) {
+            return null;
+        }
+        else {
+            digits += 1;
+        }
+    }
+    const remainder = digits % 4;
+    if (remainder === 1)
+        return null;
+    if (padding > 0 && (padding > 2 || (digits + padding) % 4 !== 0))
+        return null;
+    if (canonical && padding !== (table.padded ? (4 - remainder) % 4 : 0))
+        return null;
+    const bytes = new Uint8Array((digits * 3) >> 2);
+    let buffer = 0;
+    let bits = 0;
+    let out = 0;
+    for (let index = 0; index < text.length; index += 1) {
+        const code = text.charCodeAt(index);
+        if (code === PAD)
+            break;
+        if (isAsciiWhitespace(code))
+            continue;
+        buffer = ((buffer << 6) | values[code]) & 0xfff;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            bytes[out++] = buffer >> bits;
+        }
+    }
+    if (canonical && (buffer & ((1 << bits) - 1)) !== 0)
+        return null;
+    return bytes;
+}
+/**
+ * Encode bytes as standard base64, padded.
+ * @param {Uint8Array} bytes
+ * @returns {string}
+ * @throws {TypeError} when `bytes` is not a Uint8Array
+ */
+export function bytesToBase64(bytes) {
+    return encode(bytes, BASE64);
+}
+/**
+ * Encode bytes as base64url, unpadded.
+ * @param {Uint8Array} bytes
+ * @returns {string}
+ * @throws {TypeError} when `bytes` is not a Uint8Array
+ */
+export function bytesToBase64url(bytes) {
+    return encode(bytes, BASE64URL);
+}
+/**
+ * Decode standard base64.
+ * @param {unknown} text
+ * @param {{ canonical?: boolean }} [options] - `canonical`: accept only what `bytesToBase64` writes
+ * @returns {Uint8Array | null} the bytes, or null when the text is not base64
+ */
+export function base64ToBytes(text, { canonical = false } = {}) {
+    return decode(text, BASE64, canonical);
+}
+/**
+ * Decode base64url.
+ * @param {unknown} text
+ * @param {{ canonical?: boolean }} [options] - `canonical`: accept only what `bytesToBase64url` writes
+ * @returns {Uint8Array | null} the bytes, or null when the text is not base64url
+ */
+export function base64urlToBytes(text, { canonical = false } = {}) {
+    return decode(text, BASE64URL, canonical);
+}
+/**
+ * Encode a string as standard base64, padded, of its UTF-8 bytes.
+ * @param {string} value
+ * @returns {string}
+ */
+export function base64EncodeUtf8(value) {
+    return bytesToBase64(new TextEncoder().encode(value));
+}
+/**
+ * Decode what `base64EncodeUtf8` writes, strictly: canonical standard base64
+ * of well-formed UTF-8, so a mangled value is refused rather than read as
+ * whatever text a lenient decoder makes of it.
+ * @param {unknown} text
+ * @returns {string | null} the string, or null when the text is not canonical base64 of UTF-8
+ */
+export function base64DecodeUtf8(text) {
+    const bytes = base64ToBytes(text, { canonical: true });
+    if (bytes === null)
+        return null;
+    try {
+        return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        // A fatal decoder signals bytes that are not UTF-8 only by throwing.
+        return null;
+    }
+}
+/**
+ * This module's codec as the source of a classic browser script, for a page
+ * that cannot import an ES module (Identity's passkey popup, the x.sv reveal
+ * page): it declares `bytesToBase64`, `bytesToBase64url`, `base64ToBytes` and
+ * `base64urlToBytes` and everything they read at the script's top level, built
+ * from the functions and constants above, so the page runs this codec, not a
+ * copy. A new module-scope binding any of them reads must be added here.
+ * Marked pure so a bundle that never reads it (the browser SDK's) drops it.
+ */
+export const ENCODING_SCRIPT = /* @__PURE__ */ [
+    `var PAD = ${PAD};`,
+    `var CHAR_CODE_CHUNK = ${CHAR_CODE_CHUNK};`,
+    alphabet,
+    `var BASE64 = alphabet(${JSON.stringify(BASE64_CHARACTERS)}, true);`,
+    `var BASE64URL = alphabet(${JSON.stringify(BASE64URL_CHARACTERS)}, false);`,
+    isAsciiWhitespace,
+    isUint8Array,
+    fromCharCodes,
+    encode,
+    decode,
+    bytesToBase64,
+    bytesToBase64url,
+    base64ToBytes,
+    base64urlToBytes
+].join('\n');
+//# sourceMappingURL=encoding.js.map

package/dist/app-sdk/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/app-sdk/encoding.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,oDAAoD;AACpD,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM;AAExB,wFAAwF;AACxF,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,SAAS,QAAQ,CAAC,UAAU,EAAE,MAAM;IAClC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,iBAAiB,GAAG,kEAAkE,CAAC;AAC7F,MAAM,oBAAoB,GAAG,kEAAkE,CAAC;AAEhG,MAAM,MAAM,GAAG,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACjD,MAAM,SAAS,GAAG,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;AAExD,2DAA2D;AAC3D,SAAS,iBAAiB,CAAC,IAAI;IAC7B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAK;IAChC,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,qBAAqB,CAAC;AACtG,CAAC;AAED,SAAS,aAAa,CAAC,KAAK;IAC1B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC;QACnE,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,KAAK,EAAE,KAAK;IAC1B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,CAAC;QAAE,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAE3D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAClC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEzB,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,SAAS;gBAAE,OAAO,IAAI,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC;IAC7B,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM;QACxB,IAAI,iBAAiB,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAChD,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAK;IACjC,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAK;IACpC,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IAC5D,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IAC/D,OAAO,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAK;IACpC,OAAO,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAI;IACnC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;IAC7C,aAAa,GAAG,GAAG;IACnB,yBAAyB,eAAe,GAAG;IAC3C,QAAQ;IACR,yBAAyB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,UAAU;IACpE,4BAA4B,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,WAAW;IAC3E,iBAAiB;IACjB,YAAY;IACZ,aAAa;IACb,MAAM;IACN,MAAM;IACN,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,gBAAgB;CACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC"}

package/dist/app-sdk/entropy-contract.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @param {unknown} format
+ * @returns {boolean} Whether the endpoint serves this output format
+ */
+export function isEntropyFormat(format: unknown): boolean;
+/**
+ * The most bytes one request may ask for in a format (`num_bytes` runs from 1
+ * to this). A `uuid` always draws 16 bytes, whatever the request names.
+ *
+ * @param {string} format - One of ENTROPY_FORMATS
+ * @returns {number}
+ */
+export function maxBytesFor(format: string): number;
+/**
+ * The request contract of the entropy endpoint (POST /v1/entropy/generate):
+ * the output formats it serves and how many bytes one request may ask for.
+ *
+ * Core's route enforces it; the console and both SDKs hold a request to it
+ * before sending, so a request the server would refuse is refused where it is
+ * made. Dependency-free: sdk-js bundles it and sdk-mobile carries a generated
+ * copy.
+ */
+/** Output formats the endpoint serves. `bytes` returns a number array; every other format a string. */
+export const ENTROPY_FORMATS: readonly string[];
+/** The hardware ceiling on one entropy draw, in bytes. */
+export const MAX_DRAW_BYTES: 1024;
+/**
+ * Formats whose characters are drawn from an alphabet by rejection sampling.
+ * They open with two raw bytes per output character, so one request's output
+ * caps at half a draw. `numeric` rejects so few bytes that it opens with one
+ * byte per digit and keeps the full ceiling.
+ */
+export const CHARSET_FORMATS: readonly string[];