@sparkvault/sdk-mobile 6.0.2 → 7.0.1

package/dist/app-sdk/upload-publication.d.ts

@@ -0,0 +1,81 @@
+/**
+ * The ledger reference of an upload's transfer charge,
+ * `forge_ingot_transfer_upload_<first 24 ISTK chars>`: every charge of one
+ * upload carries it — Core's activation, Core's charge of an upload that never
+ * publishes, Forge's cancel — so whichever lands first is the upload's one
+ * ledger row and the others are duplicates.
+ *
+ * @param {string} istk - The upload's ISTK, as its session carries it
+ * @returns {string}
+ * @throws {TypeError} When the ISTK is not a string of at least
+ *   TRANSFER_REFERENCE_ISTK_CHARS characters
+ */
+export function uploadTransferReference(istk: string): string;
+/**
+ * The upload publication contract between Forge and Core's activation.
+ *
+ * Forge stamps UPLOAD_PUBLICATION_PROTOCOL on every upload session it creates
+ * and on the final state it hands Core's activation (POST
+ * /v1/vaults/:vault_id/ingots/:ingot_id/activate); activation refuses any
+ * other version. The two services deploy separately, so a change to what
+ * either side sends or expects moves this number: a session or a finalize
+ * from the other side's contract then fails closed ("restart the upload")
+ * instead of publishing under a contract the other side does not hold.
+ *
+ * Version 2: an upload's own metadata (content type, original file name,
+ * uploader, content HMAC) travels on its upload token and its session, and
+ * activation publishes it from the session; the final state Forge sends
+ * carries only the storage facts Forge owns.
+ *
+ * Isomorphic: no Node imports.
+ */
+export const UPLOAD_PUBLICATION_PROTOCOL: 2;
+/**
+ * An upload's id as both services spell it: `tus_` and the 32 lowercase hex
+ * digits of 16 random bytes. An encrypt token that names one (`upload_id`)
+ * was staged by Core under it, and Forge keys the upload's session, its chunk
+ * prefix and its VAK wrapping by it, so Core finds and settles the upload by
+ * the session's id.
+ */
+export const UPLOAD_ID_PATTERN: RegExp;
+/**
+ * How much of an ISTK names a transfer's charge on the usage ledger: enough to
+ * be unique to the token, never the whole bearer credential.
+ */
+export const TRANSFER_REFERENCE_ISTK_CHARS: 24;
+/**
+ * The codes Core's activation refuses an upload with, which Forge's refusal
+ * map reads (the status is Core's):
+ * - UPLOAD_CONTRACT_MISMATCH (409): a finalize or session from another
+ *   publication contract than Core's, a mixed deployment that converges — the
+ *   upload is kept and its finalize tried again.
+ * - UPLOAD_PROTOCOL_RETIRED (410): a session from a contract Core no longer
+ *   publishes, which never can be.
+ * - UPLOAD_SUPERSEDED (410): a session a later staging of its ingot
+ *   superseded, which never can be.
+ * - UPLOAD_POOL_FULL (402): an upload the owner's storage pool cannot take at
+ *   publication, which is final.
+ */
+export const UPLOAD_REFUSAL_CODES: Readonly<{
+    UPLOAD_CONTRACT_MISMATCH: "UPLOAD_CONTRACT_MISMATCH";
+    UPLOAD_PROTOCOL_RETIRED: "UPLOAD_PROTOCOL_RETIRED";
+    UPLOAD_SUPERSEDED: "UPLOAD_SUPERSEDED";
+    UPLOAD_POOL_FULL: "UPLOAD_POOL_FULL";
+}>;
+/**
+ * The refusals of Core's that a new upload of the same file cannot remedy:
+ * the owner's storage pool cannot take it (UPLOAD_POOL_FULL), or a later
+ * upload of its ingot replaced it (UPLOAD_SUPERSEDED). Any other code Core
+ * ends an upload with ends its session alone, which a new upload starts
+ * over. Every client reads a terminal answer's code by it
+ * (transfer-retry.js): one of these is a refusal it reports in Core's words,
+ * any other a gone session.
+ */
+export const UPLOAD_FINAL_REFUSAL_CODES: readonly ("UPLOAD_SUPERSEDED" | "UPLOAD_POOL_FULL")[];
+/**
+ * The response header that names the code Core refused an upload with for
+ * good: Forge sends it on every terminal answer to a tus request, a HEAD's
+ * (which has no body) included, so a client tells an upload the owner's pool
+ * cannot take from one a later upload superseded without reading a body.
+ */
+export const UPLOAD_REFUSAL_HEADER: "X-Upload-Refusal";

package/dist/app-sdk/upload-publication.js

@@ -0,0 +1,93 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/upload-publication.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * The upload publication contract between Forge and Core's activation.
+ *
+ * Forge stamps UPLOAD_PUBLICATION_PROTOCOL on every upload session it creates
+ * and on the final state it hands Core's activation (POST
+ * /v1/vaults/:vault_id/ingots/:ingot_id/activate); activation refuses any
+ * other version. The two services deploy separately, so a change to what
+ * either side sends or expects moves this number: a session or a finalize
+ * from the other side's contract then fails closed ("restart the upload")
+ * instead of publishing under a contract the other side does not hold.
+ *
+ * Version 2: an upload's own metadata (content type, original file name,
+ * uploader, content HMAC) travels on its upload token and its session, and
+ * activation publishes it from the session; the final state Forge sends
+ * carries only the storage facts Forge owns.
+ *
+ * Isomorphic: no Node imports.
+ */
+export const UPLOAD_PUBLICATION_PROTOCOL = 2;
+/**
+ * An upload's id as both services spell it: `tus_` and the 32 lowercase hex
+ * digits of 16 random bytes. An encrypt token that names one (`upload_id`)
+ * was staged by Core under it, and Forge keys the upload's session, its chunk
+ * prefix and its VAK wrapping by it, so Core finds and settles the upload by
+ * the session's id.
+ */
+export const UPLOAD_ID_PATTERN = /^tus_[0-9a-f]{32}$/;
+/**
+ * How much of an ISTK names a transfer's charge on the usage ledger: enough to
+ * be unique to the token, never the whole bearer credential.
+ */
+export const TRANSFER_REFERENCE_ISTK_CHARS = 24;
+/**
+ * The ledger reference of an upload's transfer charge,
+ * `forge_ingot_transfer_upload_<first 24 ISTK chars>`: every charge of one
+ * upload carries it — Core's activation, Core's charge of an upload that never
+ * publishes, Forge's cancel — so whichever lands first is the upload's one
+ * ledger row and the others are duplicates.
+ *
+ * @param {string} istk - The upload's ISTK, as its session carries it
+ * @returns {string}
+ * @throws {TypeError} When the ISTK is not a string of at least
+ *   TRANSFER_REFERENCE_ISTK_CHARS characters
+ */
+export function uploadTransferReference(istk) {
+    if (typeof istk !== 'string' || istk.length < TRANSFER_REFERENCE_ISTK_CHARS) {
+        throw new TypeError(`An upload's transfer reference is named from its ISTK, a string of at least ${TRANSFER_REFERENCE_ISTK_CHARS} characters`);
+    }
+    return `forge_ingot_transfer_upload_${istk.slice(0, TRANSFER_REFERENCE_ISTK_CHARS)}`;
+}
+/**
+ * The codes Core's activation refuses an upload with, which Forge's refusal
+ * map reads (the status is Core's):
+ * - UPLOAD_CONTRACT_MISMATCH (409): a finalize or session from another
+ *   publication contract than Core's, a mixed deployment that converges — the
+ *   upload is kept and its finalize tried again.
+ * - UPLOAD_PROTOCOL_RETIRED (410): a session from a contract Core no longer
+ *   publishes, which never can be.
+ * - UPLOAD_SUPERSEDED (410): a session a later staging of its ingot
+ *   superseded, which never can be.
+ * - UPLOAD_POOL_FULL (402): an upload the owner's storage pool cannot take at
+ *   publication, which is final.
+ */
+export const UPLOAD_REFUSAL_CODES = Object.freeze({
+    UPLOAD_CONTRACT_MISMATCH: 'UPLOAD_CONTRACT_MISMATCH',
+    UPLOAD_PROTOCOL_RETIRED: 'UPLOAD_PROTOCOL_RETIRED',
+    UPLOAD_SUPERSEDED: 'UPLOAD_SUPERSEDED',
+    UPLOAD_POOL_FULL: 'UPLOAD_POOL_FULL'
+});
+/**
+ * The refusals of Core's that a new upload of the same file cannot remedy:
+ * the owner's storage pool cannot take it (UPLOAD_POOL_FULL), or a later
+ * upload of its ingot replaced it (UPLOAD_SUPERSEDED). Any other code Core
+ * ends an upload with ends its session alone, which a new upload starts
+ * over. Every client reads a terminal answer's code by it
+ * (transfer-retry.js): one of these is a refusal it reports in Core's words,
+ * any other a gone session.
+ */
+export const UPLOAD_FINAL_REFUSAL_CODES = Object.freeze([
+    UPLOAD_REFUSAL_CODES.UPLOAD_POOL_FULL,
+    UPLOAD_REFUSAL_CODES.UPLOAD_SUPERSEDED
+]);
+/**
+ * The response header that names the code Core refused an upload with for
+ * good: Forge sends it on every terminal answer to a tus request, a HEAD's
+ * (which has no body) included, so a client tells an upload the owner's pool
+ * cannot take from one a later upload superseded without reading a body.
+ */
+export const UPLOAD_REFUSAL_HEADER = 'X-Upload-Refusal';
+//# sourceMappingURL=upload-publication.js.map

package/dist/app-sdk/upload-publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-publication.js","sourceRoot":"","sources":["../../src/app-sdk/upload-publication.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,8DAA8D;AAC9D,8DAA8D;AAE9D;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAI;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CACjB,+EAA+E,6BAA6B,aAAa,CAC1H,CAAC;IACJ,CAAC;IACD,OAAO,+BAA+B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,wBAAwB,EAAE,0BAA0B;IACpD,uBAAuB,EAAE,yBAAyB;IAClD,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;CACrC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,oBAAoB,CAAC,gBAAgB;IACrC,oBAAoB,CAAC,iBAAiB;CACvC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC"}

package/dist/app-sdk/vat-refusal.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The VAT refusal a Core error answer names, or null when it is not one.
+ *
+ * @param {{ statusCode?: number, details?: { reason?: string } }} error - An
+ *   error as parsed from a Core response (status plus the body's `details`)
+ * @returns {string|null} One of VAT_REFUSAL_REASONS, or null
+ */
+export function vatRefusalReason(error: {
+    statusCode?: number;
+    details?: {
+        reason?: string;
+    };
+}): string | null;
+/**
+ * Whether a refusal says the token's vault session is over: an invalid or an
+ * expired token, which only a new unseal replaces, so a client forgets it. A
+ * read-only refusal leaves the session standing (the token still reads), and
+ * so does a refusal that names no VAT reason.
+ *
+ * @param {string|null} reason - What vatRefusalReason returned
+ * @returns {boolean}
+ */
+export function endsVatSession(reason: string | null): boolean;
+/**
+ * True when Core refused the request's login, not a Vault Access Token it
+ * carried: a 401 bearing Core's session code (AUTHENTICATION_ERROR, the
+ * mapped error's `upstreamCode`) that names no VAT refusal. Its token was
+ * refused, or its account is unavailable (details.reason ACCOUNT_UNAVAILABLE,
+ * ./refusal-reasons.js). A 401 for a credential in the request body (an
+ * unseal key) carries Core's credential code (UNAUTHORIZED) and is not one.
+ *
+ * @param {{ statusCode?: number, upstreamCode?: string|null, details?: { reason?: string } }} error -
+ *   An error as parsed from a Core response (parseApiError)
+ * @returns {boolean}
+ */
+export function isRefusedLogin(error: {
+    statusCode?: number;
+    upstreamCode?: string | null;
+    details?: {
+        reason?: string;
+    };
+}): boolean;
+/**
+ * Why Core refused a Vault Access Token (VAT): the `details.reason` every VAT
+ * refusal carries, and the one reading of it clients share.
+ *
+ *   401 VAT_INVALID    no token, or a malformed, unknown or swept one, or one a
+ *                      since-revoked DVAK minted — unseal again
+ *   403 VAT_EXPIRED    the token outlived its TTL — unseal again, retry as-is
+ *   403 VAT_READ_ONLY  a View Only token on a write — no unseal fixes it
+ *
+ * A 403 with no reason is a token for another vault or account, which no
+ * unseal of this vault fixes; a 401 with no reason is the login itself, never
+ * the VAT. Browser-safe: no imports.
+ */
+export const VAT_REFUSAL_REASONS: Readonly<{
+    INVALID: "VAT_INVALID";
+    EXPIRED: "VAT_EXPIRED";
+    READ_ONLY: "VAT_READ_ONLY";
+}>;
+/** The status each refusal is answered with. */
+export const VAT_REFUSAL_STATUS: Readonly<{
+    VAT_INVALID: 401;
+    VAT_EXPIRED: 403;
+    VAT_READ_ONLY: 403;
+}>;

package/dist/app-sdk/vat-refusal.js

@@ -0,0 +1,69 @@
+// GENERATED FILE — do not edit by hand.
+// Source of truth: packages/app-sdk/src/vat-refusal.js
+// Regenerate with: pnpm --filter @sparkvault/sdk-mobile build
+/**
+ * Why Core refused a Vault Access Token (VAT): the `details.reason` every VAT
+ * refusal carries, and the one reading of it clients share.
+ *
+ *   401 VAT_INVALID    no token, or a malformed, unknown or swept one, or one a
+ *                      since-revoked DVAK minted — unseal again
+ *   403 VAT_EXPIRED    the token outlived its TTL — unseal again, retry as-is
+ *   403 VAT_READ_ONLY  a View Only token on a write — no unseal fixes it
+ *
+ * A 403 with no reason is a token for another vault or account, which no
+ * unseal of this vault fixes; a 401 with no reason is the login itself, never
+ * the VAT. Browser-safe: no imports.
+ */
+export const VAT_REFUSAL_REASONS = Object.freeze({
+    INVALID: 'VAT_INVALID',
+    EXPIRED: 'VAT_EXPIRED',
+    READ_ONLY: 'VAT_READ_ONLY'
+});
+/** The status each refusal is answered with. */
+export const VAT_REFUSAL_STATUS = Object.freeze({
+    [VAT_REFUSAL_REASONS.INVALID]: 401,
+    [VAT_REFUSAL_REASONS.EXPIRED]: 403,
+    [VAT_REFUSAL_REASONS.READ_ONLY]: 403
+});
+/**
+ * The VAT refusal a Core error answer names, or null when it is not one.
+ *
+ * @param {{ statusCode?: number, details?: { reason?: string } }} error - An
+ *   error as parsed from a Core response (status plus the body's `details`)
+ * @returns {string|null} One of VAT_REFUSAL_REASONS, or null
+ */
+export function vatRefusalReason(error) {
+    const reason = error?.details?.reason;
+    return typeof reason === 'string' && Object.hasOwn(VAT_REFUSAL_STATUS, reason) &&
+        VAT_REFUSAL_STATUS[reason] === error?.statusCode
+        ? reason
+        : null;
+}
+/**
+ * Whether a refusal says the token's vault session is over: an invalid or an
+ * expired token, which only a new unseal replaces, so a client forgets it. A
+ * read-only refusal leaves the session standing (the token still reads), and
+ * so does a refusal that names no VAT reason.
+ *
+ * @param {string|null} reason - What vatRefusalReason returned
+ * @returns {boolean}
+ */
+export function endsVatSession(reason) {
+    return reason === VAT_REFUSAL_REASONS.INVALID || reason === VAT_REFUSAL_REASONS.EXPIRED;
+}
+/**
+ * True when Core refused the request's login, not a Vault Access Token it
+ * carried: a 401 bearing Core's session code (AUTHENTICATION_ERROR, the
+ * mapped error's `upstreamCode`) that names no VAT refusal. Its token was
+ * refused, or its account is unavailable (details.reason ACCOUNT_UNAVAILABLE,
+ * ./refusal-reasons.js). A 401 for a credential in the request body (an
+ * unseal key) carries Core's credential code (UNAUTHORIZED) and is not one.
+ *
+ * @param {{ statusCode?: number, upstreamCode?: string|null, details?: { reason?: string } }} error -
+ *   An error as parsed from a Core response (parseApiError)
+ * @returns {boolean}
+ */
+export function isRefusedLogin(error) {
+    return error?.statusCode === 401 && error?.upstreamCode === 'AUTHENTICATION_ERROR' && vatRefusalReason(error) === null;
+}
+//# sourceMappingURL=vat-refusal.js.map

package/dist/app-sdk/vat-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vat-refusal.js","sourceRoot":"","sources":["../../src/app-sdk/vat-refusal.js"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,uDAAuD;AACvD,8DAA8D;AAE9D;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,GAAG;IAClC,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,GAAG;IAClC,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,GAAG;CACrC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAK;IACpC,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;IACtC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAC5E,kBAAkB,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,UAAU;QAChD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAM;IACnC,OAAO,MAAM,KAAK,mBAAmB,CAAC,OAAO,IAAI,MAAM,KAAK,mBAAmB,CAAC,OAAO,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,KAAK;IAClC,OAAO,KAAK,EAAE,UAAU,KAAK,GAAG,IAAI,KAAK,EAAE,YAAY,KAAK,sBAAsB,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACzH,CAAC"}

package/dist/billing.d.ts

@@ -1,27 +1,19 @@
 import type { MobileHttpClient } from './http.js';
-import type { IapPlatform, SparkVaultSubscription } from './types.js';
-/** Short-lived Stripe Customer Portal URL for managing the subscription on web. */
-export interface PortalSession {
-    portal_url: string;
-}
+import type { IapPlatform, IapValidation, SparkVaultSubscription } from './types.js';
 export declare class MobileBillingClient {
     private readonly http;
     constructor(http: MobileHttpClient);
     /**
-     * Current subscription: plan, licensed vs. used seats, capacity blocks, live
-     * pool usage, and Identity attempts. Drives the subscription / usage view.
+     * Current subscription: billing lifecycle, licensed vs. used seats, capacity
+     * blocks, live pool usage, and Identity attempts. Drives the subscription /
+     * usage view.
      */
     getSubscription(): Promise<SparkVaultSubscription>;
     /**
-     * Open the Stripe Customer Portal to manage the subscription on web (seat /
-     * block changes that fixed native SKUs cannot carry route here). The caller
-     * loads the returned URL in the WebView.
-     */
-    createPortalSession(): Promise<PortalSession>;
-    /**
-     * Validate a native in-app purchase receipt server-side and apply the
-     * resulting entitlements. Returns the refreshed subscription so the client
-     * can update its plan / usage view immediately after purchase.
+     * Validate a native in-app purchase server-side and apply the entitlements
+     * it buys. `receipt` is the App Store signed transaction (JWS) or the Play
+     * purchase token. Answers whether Core provisioned the purchase; read the
+     * subscription again with getSubscription() to show the change.
      */
-    iapValidate(platform: IapPlatform, productId: string, receipt: string): Promise<SparkVaultSubscription>;
+    iapValidate(platform: IapPlatform, productId: string, receipt: string): Promise<IapValidation>;
 }

package/dist/billing.js

@@ -1,34 +1,31 @@
+import { apiPath } from './request-path.js';
 export class MobileBillingClient {
     constructor(http) {
         this.http = http;
     }
     /**
-     * Current subscription: plan, licensed vs. used seats, capacity blocks, live
-     * pool usage, and Identity attempts. Drives the subscription / usage view.
+     * Current subscription: billing lifecycle, licensed vs. used seats, capacity
+     * blocks, live pool usage, and Identity attempts. Drives the subscription /
+     * usage view.
      */
     async getSubscription() {
-        const response = await this.http.get('/billing/subscription');
+        const response = await this.http.get(apiPath `/billing/subscription`);
         return response.data;
     }
     /**
-     * Open the Stripe Customer Portal to manage the subscription on web (seat /
-     * block changes that fixed native SKUs cannot carry route here). The caller
-     * loads the returned URL in the WebView.
-     */
-    async createPortalSession() {
-        const response = await this.http.post('/billing/portal');
-        return response.data;
-    }
-    /**
-     * Validate a native in-app purchase receipt server-side and apply the
-     * resulting entitlements. Returns the refreshed subscription so the client
-     * can update its plan / usage view immediately after purchase.
+     * Validate a native in-app purchase server-side and apply the entitlements
+     * it buys. `receipt` is the App Store signed transaction (JWS) or the Play
+     * purchase token. Answers whether Core provisioned the purchase; read the
+     * subscription again with getSubscription() to show the change.
      */
     async iapValidate(platform, productId, receipt) {
-        const response = await this.http.post('/billing/iap/validate', {
+        // Core reads an App Store purchase's signed transaction as `receipt` and a
+        // Play purchase's token as `purchase_token`.
+        const credential = platform === 'android' ? { purchase_token: receipt } : { receipt };
+        const response = await this.http.post(apiPath `/billing/iap/validate`, {
             platform,
             product_id: productId,
-            receipt,
+            ...credential,
         });
         return response.data;
     }

package/dist/billing.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing.js","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,mBAAmB;IAG9B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAyB,uBAAuB,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAgB,iBAAiB,CAAC,CAAC;QACxE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CACf,QAAqB,EACrB,SAAiB,EACjB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAyB,uBAAuB,EAAE;YACrF,QAAQ;YACR,UAAU,EAAE,SAAS;YACrB,OAAO;SACR,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,OAAO,mBAAmB;IAG9B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAyB,OAAO,CAAA,uBAAuB,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,QAAqB,EACrB,SAAiB,EACjB,OAAe;QAEf,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAgB,OAAO,CAAA,uBAAuB,EAAE;YACnF,QAAQ;YACR,UAAU,EAAE,SAAS;YACrB,GAAG,UAAU;SACd,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/config.d.ts

@@ -1,4 +1,5 @@
 import type { FetchLike, MobileBackgroundTransfer, MobileBackgroundUploader, MobileFileDownloader, MobileFileReader, SparkVaultLogger, TokenStorageAdapter } from './types.js';
+import { type ApiPath } from './request-path.js';
 export interface SparkVaultMobileConfig {
     tokenStorage: TokenStorageAdapter;
     apiBaseUrl?: string;
@@ -8,6 +9,11 @@ export interface SparkVaultMobileConfig {
     userAgent?: string;
     timeoutMs?: number;
     fileTransferTimeoutMs?: number;
+    /**
+     * Timeout of a tus create POST and DELETE. A HEAD and the receipt (the
+     * PATCH at the final offset) wait HEAD_AND_RECEIPT_TIMEOUT_MS instead:
+     * Forge answers either only after its own call to Core.
+     */
     tusPostTimeoutMs?: number;
     /** Stall watchdog per tus chunk PATCH: aborts after this long with NO upload progress (not an absolute deadline). */
     tusChunkTimeoutMs?: number;
@@ -30,9 +36,34 @@ export interface SparkVaultMobileConfig {
      * upload, and every upload when this is unset, streams over XHR.
      */
     backgroundUploader?: MobileBackgroundUploader;
+    /**
+     * Whether the device has a network path right now (an app wires it to its
+     * OS network signal). Read when an upload request got no answer: while it
+     * answers false the upload waits for `onOnline` instead of spending its
+     * retries, then asks Forge where the session stands. Only a definite
+     * "offline" should answer false; a path that may come up is online. Given
+     * together with `onOnline`, or not at all.
+     */
+    isOnline?: () => boolean;
+    /**
+     * Subscribe to the network coming back; returns the unsubscribe. The pair
+     * of `isOnline`. A wait it ends is otherwise ended only by the upload's
+     * `abortSignal`.
+     */
+    onOnline?: (listener: () => void) => () => void;
     logger?: Partial<SparkVaultLogger>;
+    /**
+     * Host allowlist for the backend-issued Forge transfer URLs the SDK sends an
+     * ingot's ISTK to (downloads and uploads alike). Defaults to the SparkVault
+     * platform's own hosts; override only when pointing at another deployment.
+     */
     allowedDownloadHostPatterns?: RegExp[];
 }
+/** The device's network signal, as the upload's offline wait reads it (`isOnline` with `onOnline`). */
+export interface MobileConnectivity {
+    isOnline(): boolean;
+    onOnline(listener: () => void): () => void;
+}
 export interface ResolvedMobileConfig {
     tokenStorage: TokenStorageAdapter;
     apiBaseUrl: string;
@@ -49,8 +80,9 @@ export interface ResolvedMobileConfig {
     fileDownloader?: MobileFileDownloader;
     backgroundTransfer?: MobileBackgroundTransfer;
     backgroundUploader?: MobileBackgroundUploader;
+    connectivity?: MobileConnectivity;
     logger: SparkVaultLogger;
     allowedDownloadHostPatterns: RegExp[];
 }
 export declare function resolveMobileConfig(config: SparkVaultMobileConfig): ResolvedMobileConfig;
-export declare function identityUrl(config: ResolvedMobileConfig, path: string): string;
+export declare function identityUrl(config: ResolvedMobileConfig, path: ApiPath): string;

package/dist/config.js

@@ -1,24 +1,27 @@
 import { SparkVaultValidationError } from './errors.js';
-import { SPARKVAULT_PLATFORM_SV_HOSTS, SPARKVAULT_ROOT_DOMAIN, } from './platform-domains.generated.js';
+import { isResourceIdOf } from './app-sdk/ids.js';
+import { SPARKVAULT_IDENTITY_HOST, SPARKVAULT_OWNED_HOST_PATTERNS } from './app-sdk/platform-domains.js';
+import { apiPath } from './request-path.js';
 const DEFAULT_API_BASE_URL = 'https://api.sparkvault.com/v1';
-const DEFAULT_IDENTITY_BASE_URL = 'https://auth.sparkvault.com';
-function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-// Hosts that are allowed to serve backend-issued ingot download URLs, derived
-// from the canonical platform domain registry baked in at build time.
-const DEFAULT_ALLOWED_DOWNLOAD_HOST_PATTERNS = [
-    new RegExp(`(^|\\.)${escapeRegExp(SPARKVAULT_ROOT_DOMAIN)}$`, 'i'),
-    new RegExp(`(^|\\.)(${SPARKVAULT_PLATFORM_SV_HOSTS.map(escapeRegExp).join('|')})$`, 'i'),
-    /\.amazonaws\.com$/i,
-    /\.cloudfront\.net$/i,
-];
+const DEFAULT_IDENTITY_BASE_URL = `https://${SPARKVAULT_IDENTITY_HOST}`;
 const noopLogger = {
     debug: () => undefined,
     info: () => undefined,
     warn: () => undefined,
     error: () => undefined,
 };
+/** The `isOnline` / `onOnline` pair as one signal, or none: one without the other cannot wait for the network. */
+function resolveConnectivity(config) {
+    const { isOnline, onOnline } = config;
+    if (isOnline === undefined && onOnline === undefined)
+        return undefined;
+    if (typeof isOnline !== 'function' || typeof onOnline !== 'function') {
+        throw new SparkVaultValidationError('isOnline and onOnline are given together, as functions', {
+            field: typeof isOnline === 'function' ? 'onOnline' : 'isOnline',
+        });
+    }
+    return { isOnline, onOnline };
+}
 function normalizeBaseUrl(url, field) {
     if (!url || typeof url !== 'string') {
         throw new SparkVaultValidationError(`${field} must be a non-empty string`, { field });
@@ -60,8 +63,10 @@ export function resolveMobileConfig(config) {
             received: identityAccountId,
         });
     }
-    if (!identityAccountId.startsWith('acc_')) {
-        throw new SparkVaultValidationError('identityAccountId must start with "acc_"', {
+    // The account id names Identity request paths: the platform's one id
+    // grammar keeps it a single path segment.
+    if (!isResourceIdOf('account', identityAccountId)) {
+        throw new SparkVaultValidationError('identityAccountId must be a SparkVault account id (acc_...)', {
             field: 'identityAccountId',
             received: identityAccountId,
         });
@@ -82,11 +87,12 @@ export function resolveMobileConfig(config) {
         fileDownloader: config.fileDownloader,
         backgroundTransfer: config.backgroundTransfer,
         backgroundUploader: config.backgroundUploader,
+        connectivity: resolveConnectivity(config),
         logger: { ...noopLogger, ...config.logger },
-        allowedDownloadHostPatterns: config.allowedDownloadHostPatterns ?? DEFAULT_ALLOWED_DOWNLOAD_HOST_PATTERNS,
+        allowedDownloadHostPatterns: config.allowedDownloadHostPatterns ?? [...SPARKVAULT_OWNED_HOST_PATTERNS],
     };
 }
 export function identityUrl(config, path) {
-    return `${config.identityBaseUrl}/${config.identityAccountId}${path}`;
+    return `${config.identityBaseUrl}${apiPath `/${config.identityAccountId}`}${path}`;
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAWzC,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;AAC7D,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEhE,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,sCAAsC,GAAa;IACvD,IAAI,MAAM,CAAC,UAAU,YAAY,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC;IAClE,IAAI,MAAM,CAAC,WAAW,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;IACxF,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACvB,CAAC;AAyDF,SAAS,gBAAgB,CAAC,GAAW,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,OAA8C;IAE9C,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,yBAAyB,CAAC,oDAAoD,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA8B;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnD,IAAI,CAAC,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,EAAE;YACnE,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,EAAE;YAC9E,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,EAAE,YAAY,CAAC;QACrF,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,eAAe,IAAI,yBAAyB,EAAE,iBAAiB,CAAC;QACzG,iBAAiB;QACjB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,IAAI;QAC3D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,2BAA2B;QAC1D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;QACpC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,MAAM;QAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,KAAK;QAClD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,MAAM;QACrD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,YAAY;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;QAC3C,2BAA2B,EAAE,MAAM,CAAC,2BAA2B,IAAI,sCAAsC;KAC1G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA4B,EAAE,IAAY;IACpE,OAAO,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,iBAAiB,GAAG,IAAI,EAAE,CAAC;AACxE,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAUzG,OAAO,EAAE,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAE1D,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;AAC7D,MAAM,yBAAyB,GAAG,WAAW,wBAAwB,EAAE,CAAC;AAExE,MAAM,UAAU,GAAqB;IACnC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACvB,CAAC;AAyFF,kHAAkH;AAClH,SAAS,mBAAmB,CAAC,MAA8B;IACzD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,yBAAyB,CAAC,wDAAwD,EAAE;YAC5F,KAAK,EAAE,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;SAChE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,OAA8C;IAE9C,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,yBAAyB,CAAC,oDAAoD,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA8B;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnD,IAAI,CAAC,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,EAAE;YACnE,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,0CAA0C;IAC1C,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,yBAAyB,CAAC,6DAA6D,EAAE;YACjG,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,EAAE,YAAY,CAAC;QACrF,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,eAAe,IAAI,yBAAyB,EAAE,iBAAiB,CAAC;QACzG,iBAAiB;QACjB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,IAAI;QAC3D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,2BAA2B;QAC1D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;QACpC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,MAAM;QAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,KAAK;QAClD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,MAAM;QACrD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,YAAY;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;QAC3C,2BAA2B,EAAE,MAAM,CAAC,2BAA2B,IAAI,CAAC,GAAG,8BAA8B,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA4B,EAAE,IAAa;IACrE,OAAO,GAAG,MAAM,CAAC,eAAe,GAAG,OAAO,CAAA,IAAI,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,EAAE,CAAC;AACpF,CAAC"}

package/dist/encoding.d.ts

@@ -1,7 +1,33 @@
+/**
+ * Base64 and UTF-8 for the mobile SDK.
+ *
+ * The base64 codec is the platform's one copy, mirrored from
+ * `@sparkvault/app-sdk/encoding` into `./app-sdk/encoding.js`; the decoders here
+ * raise this SDK's validation error where that codec refuses a text. UTF-8 is
+ * converted here rather than with TextEncoder/TextDecoder, which the JavaScript
+ * engines of the React Native versions this SDK supports need not provide.
+ * Decoding UTF-8 is fatal: bytes that are not UTF-8 are refused, never read as
+ * invented characters.
+ */
+import { bytesToBase64, bytesToBase64url } from './app-sdk/encoding.js';
+export { bytesToBase64, bytesToBase64url };
+/**
+ * Decode standard base64.
+ * @throws SparkVaultValidationError when the text is not base64
+ */
+export declare function base64ToBytes(value: string): Uint8Array;
+/**
+ * Decode base64url.
+ * @throws SparkVaultValidationError when the text is not base64url
+ */
+export declare function base64UrlToBytes(value: string): Uint8Array;
 export declare function utf8ToBytes(value: string): Uint8Array;
-export declare function base64EncodeUtf8(value: string): string;
+/**
+ * Decode UTF-8 by the WHATWG decoder's rules in fatal mode: a byte that cannot
+ * start a sequence, a sequence cut short, an overlong form, a surrogate or a
+ * code point past U+10FFFF refuses the whole input.
+ * @throws SparkVaultValidationError when the bytes are not UTF-8
+ */
 export declare function bytesToUtf8(bytes: Uint8Array): string;
-export declare function base64UrlToBytes(value: string): Uint8Array;
+export declare function base64EncodeUtf8(value: string): string;
 export declare function base64UrlToUtf8(value: string): string;
-export declare function bytesToBase64(bytes: Uint8Array): string;
-export declare function base64ToBytes(value: string): Uint8Array;