@stamprally/core 0.4.0 → 0.5.0

package/dist/index.cjs

@@ -225,7 +225,7 @@ function evaluateCheckIn(spot, input) {
 // src/engine/order.ts
 function getOrderedStamps(config) {
   return config.stamps.map((stamp, index) => ({ stamp, index })).sort((left, right) => {
-    const orderDifference = (left.stamp.order ?? Number.POSITIVE_INFINITY) - (right.stamp.order ?? Number.POSITIVE_INFINITY);
+    const orderDifference = (left.stamp.orderIndex ?? left.stamp.order ?? Number.POSITIVE_INFINITY) - (right.stamp.orderIndex ?? right.stamp.order ?? Number.POSITIVE_INFINITY);
     return orderDifference === 0 ? left.index - right.index : orderDifference;
   }).map(({ stamp }) => stamp);
 }
@@ -261,10 +261,10 @@ function hash(value) {
   return result.toString(36).toUpperCase().padStart(7, "0");
 }
 function createRandomHash() {
-  const cryptoApi2 = globalThis.crypto;
-  if (cryptoApi2 !== void 0 && typeof cryptoApi2.getRandomValues === "function") {
+  const cryptoApi3 = globalThis.crypto;
+  if (cryptoApi3 !== void 0 && typeof cryptoApi3.getRandomValues === "function") {
     const values = new Uint32Array(2);
-    cryptoApi2.getRandomValues(values);
+    cryptoApi3.getRandomValues(values);
     return Array.from(values, (value) => value.toString(36).toUpperCase().padStart(7, "0")).join(
       ""
     );
@@ -633,7 +633,8 @@ function reconcileRewardStates(rewards, currentStates, acquiredStampCount, now)
     if (reward.validUntil !== void 0 && Date.parse(reward.validUntil) <= Date.parse(now)) {
       return { rewardId: reward.id, status: "EXPIRED" };
     }
-    if (reward.maxStock !== void 0 && (current?.redeemedCount ?? 0) >= reward.maxStock) {
+    const stockLimit = reward.stockLimit ?? reward.maxStock;
+    if (stockLimit !== void 0 && (current?.redeemedCount ?? 0) >= stockLimit) {
       return {
         rewardId: reward.id,
         status: "EXPIRED",
@@ -670,10 +671,12 @@ function consumeReward(params) {
   if (reward.validUntil !== void 0 && Date.parse(reward.validUntil) <= Date.parse(params.now)) {
     return { ok: false, error: { code: "EXPIRED", reason: "EXPIRED", rewardId: reward.id } };
   }
-  if (reward.maxStock !== void 0 && (currentState.redeemedCount ?? 0) >= reward.maxStock) {
+  const stockLimit = reward.stockLimit ?? reward.maxStock;
+  const userClaimLimit = reward.userClaimLimit ?? reward.limitPerUser;
+  if (stockLimit !== void 0 && (currentState.redeemedCount ?? 0) >= stockLimit) {
     return { ok: false, error: { code: "OUT_OF_STOCK", rewardId: reward.id } };
   }
-  if (reward.limitPerUser !== void 0 && (params.userRedemptionCount ?? currentState.userRedemptionCount ?? 0) >= reward.limitPerUser) {
+  if (userClaimLimit !== void 0 && (params.userRedemptionCount ?? currentState.userRedemptionCount ?? 0) >= userClaimLimit) {
     return {
       ok: false,
       error: { code: "USER_LIMIT_REACHED", reason: "LIMIT_EXCEEDED", rewardId: reward.id }
@@ -702,7 +705,7 @@ function consumeReward(params) {
       status: "CONSUMED",
       consumedAt: params.now,
       claimTicketNumber: createUniqueClaimTicketNumber(reward.id, params.now),
-      ...reward.maxStock !== void 0 || params.userId !== void 0 || params.userRedemptionCount !== void 0 ? { redeemedCount: (currentState.redeemedCount ?? 0) + 1 } : {},
+      ...stockLimit !== void 0 || params.userId !== void 0 || params.userRedemptionCount !== void 0 ? { redeemedCount: (currentState.redeemedCount ?? 0) + 1 } : {},
       ...params.userId === void 0 ? {} : { userRedemptionCount: (currentState.userRedemptionCount ?? 0) + 1 },
       ...params.staffId === void 0 ? {} : { consumedByStaffId: params.staffId }
     }
@@ -1199,6 +1202,7 @@ var IndexedDBAdapter = class {
 var systemClock = () => (/* @__PURE__ */ new Date()).toISOString();
 var StampRallyClient = class {
   #listeners = /* @__PURE__ */ new Set();
+  #eventListeners = /* @__PURE__ */ new Set();
   #config;
   #storage;
   #clock;
@@ -1216,12 +1220,38 @@ var StampRallyClient = class {
   getConfig() {
     return this.#config;
   }
-  subscribe(listener) {
+  subscribe(listener, options = {}) {
+    if (options.events === true) {
+      this.#eventListeners.add(listener);
+      return () => this.#eventListeners.delete(listener);
+    }
     this.#listeners.add(listener);
     return () => {
       this.#listeners.delete(listener);
     };
   }
+  subscribeEvents(listener) {
+    this.#eventListeners.add(listener);
+    return () => this.#eventListeners.delete(listener);
+  }
+  async updateConfig(newConfig) {
+    return this.#enqueue(async () => {
+      const current = await this.initialize();
+      this.#config = newConfig;
+      const next = this.#reconcileState(cloneState(current), this.#clock());
+      await this.#storage.save(next);
+      this.#currentState = next;
+      this.#initialization = Promise.resolve(next);
+      this.#emit(next);
+      return next;
+    });
+  }
+  notifyRewardClaimed(rewardId, state = this.#currentState) {
+    if (state !== null) this.#emitEvent({ type: "rewardClaimed", rewardId, state });
+  }
+  notifySyncCompleted(state = this.#currentState) {
+    if (state !== null) this.#emitEvent({ type: "syncCompleted", state });
+  }
   init() {
     return this.initialize();
   }
@@ -1247,11 +1277,13 @@ var StampRallyClient = class {
       const currentState = await this.initialize();
       const result = processStamp(currentState, this.#config, stampId, context, now);
       if (!result.ok) {
+        this.#emitEvent({ type: "error", error: result.error });
         return result;
       }
       await this.#storage.save(result.value.nextState);
       this.#currentState = result.value.nextState;
       this.#emit(result.value.nextState);
+      this.#emitEvent({ type: "checkIn", stampId, state: result.value.nextState });
       return result;
     });
   }
@@ -1301,6 +1333,9 @@ var StampRallyClient = class {
       listener(state);
     }
   }
+  #emitEvent(event) {
+    for (const listener of this.#eventListeners) listener(event);
+  }
   #createEmptyState(now) {
     const state = {
       rallyId: this.#config.id,
@@ -1336,12 +1371,144 @@ var StampRallyClient = class {
   }
 };
 
+// src/crypto/token.ts
+var encoder = new TextEncoder();
+var decoder = new TextDecoder();
+function cryptoApi() {
+  if (globalThis.crypto?.subtle === void 0) {
+    throw new Error("Web Crypto API is unavailable in this environment.");
+  }
+  return globalThis.crypto;
+}
+function bytes(value) {
+  return typeof value === "string" ? encoder.encode(value) : new Uint8Array(value);
+}
+function source(value) {
+  return value.buffer;
+}
+function encode(value) {
+  let binary = "";
+  for (const byte of value) binary += String.fromCharCode(byte);
+  return globalThis.btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+}
+function decode(value) {
+  const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+  const padded = `${base64}${"=".repeat((4 - base64.length % 4) % 4)}`;
+  return Uint8Array.from(globalThis.atob(padded), (character) => character.charCodeAt(0));
+}
+async function hmacKey(secret) {
+  return cryptoApi().subtle.importKey(
+    "raw",
+    source(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign", "verify"]
+  );
+}
+async function aesKey(secret) {
+  const digest = await cryptoApi().subtle.digest("SHA-256", source(secret));
+  return cryptoApi().subtle.importKey("raw", digest, "AES-GCM", false, ["encrypt", "decrypt"]);
+}
+async function createSecureToken(payload, secretKey, options = {}) {
+  const api = cryptoApi();
+  const expiresInSeconds = options.expiresInSeconds;
+  const effectivePayload = expiresInSeconds === void 0 || payload.exp !== void 0 ? payload : { ...payload, exp: Math.floor(Date.now() / 1e3) + expiresInSeconds };
+  const secret = bytes(secretKey);
+  const plaintext = encoder.encode(JSON.stringify(effectivePayload));
+  const actualBody = options.encrypt === true ? await encryptPayload(plaintext, secret, api) : encode(plaintext);
+  const signature = new Uint8Array(
+    await api.subtle.sign("HMAC", await hmacKey(secret), encoder.encode(actualBody))
+  );
+  return `sr3.${options.encrypt === true ? "e" : "p"}.${actualBody}.${encode(signature)}`;
+}
+async function encryptPayload(plaintext, secret, api) {
+  const iv = api.getRandomValues(new Uint8Array(12));
+  const encrypted = new Uint8Array(
+    await api.subtle.encrypt(
+      { name: "AES-GCM", iv: source(iv) },
+      await aesKey(secret),
+      source(plaintext)
+    )
+  );
+  return encode(new Uint8Array([...iv, ...encrypted]));
+}
+async function verifySecureToken(token, secretKey, now = Date.now()) {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 4 || parts[0] !== "sr3" || parts[1] !== "e" && parts[1] !== "p") {
+      return {
+        ok: false,
+        valid: false,
+        error: { code: "MALFORMED", message: "Secure token is malformed." }
+      };
+    }
+    const mode = parts[1];
+    const body = parts[2];
+    const encodedSignature = parts[3];
+    if (body === void 0 || encodedSignature === void 0 || mode === void 0) {
+      return {
+        ok: false,
+        valid: false,
+        error: { code: "MALFORMED", message: "Secure token is malformed." }
+      };
+    }
+    const secret = bytes(secretKey);
+    const valid = await cryptoApi().subtle.verify(
+      "HMAC",
+      await hmacKey(secret),
+      source(decode(encodedSignature)),
+      source(encoder.encode(body))
+    );
+    if (!valid)
+      return {
+        ok: false,
+        valid: false,
+        error: { code: "INVALID_SIGNATURE", message: "Secure token signature is invalid." }
+      };
+    const plaintext = mode === "e" ? await decryptPayload(body, secret) : decode(body);
+    const parsed = JSON.parse(decoder.decode(plaintext));
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+      return {
+        ok: false,
+        valid: false,
+        error: { code: "INVALID_PAYLOAD", message: "Secure token payload is invalid." }
+      };
+    }
+    const payload = parsed;
+    if (typeof payload.exp === "number" && now >= payload.exp * 1e3) {
+      return {
+        ok: false,
+        valid: false,
+        error: { code: "EXPIRED", message: "Secure token has expired." }
+      };
+    }
+    return { ok: true, valid: true, payload };
+  } catch {
+    return {
+      ok: false,
+      valid: false,
+      error: { code: "DECRYPTION_FAILED", message: "Secure token could not be verified." }
+    };
+  }
+}
+async function decryptPayload(body, secret) {
+  const encrypted = decode(body);
+  if (encrypted.length <= 12) throw new Error("Invalid encrypted payload.");
+  return new Uint8Array(
+    await cryptoApi().subtle.decrypt(
+      { name: "AES-GCM", iv: source(encrypted.slice(0, 12)) },
+      await aesKey(secret),
+      source(encrypted.slice(12))
+    )
+  );
+}
+
 // src/domain/i18n.ts
 function resolveLocalizedText(text2, locale, fallbackLocale) {
   if (text2 === void 0 || text2 === "") return "";
   if (typeof text2 === "string") return text2;
-  const fallback = fallbackLocale ?? "ja";
-  return text2[locale] || text2[fallback] || "";
+  const fallback = fallbackLocale === void 0 ? Object.values(text2).find((value) => typeof value === "string") : text2[fallbackLocale];
+  return text2[locale] || fallback || "";
 }
 function toLocalizedString(text2) {
   if (text2 === void 0) return { ja: "", en: "" };
@@ -1443,6 +1610,11 @@ function validateSpot(value, index, errors) {
       add(errors, `${path}.${field}`, "INVALID_TYPE", `${field} must be an array of IDs.`);
     }
   }
+  for (const field of ["order", "orderIndex"]) {
+    if (value[field] !== void 0 && (typeof value[field] !== "number" || !Number.isFinite(value[field]))) {
+      add(errors, `${path}.${field}`, "INVALID_TYPE", `${field} must be a finite number.`);
+    }
+  }
 }
 function validateReward(value, index, stampCount, errors) {
   const path = `rewards[${index}]`;
@@ -1471,7 +1643,7 @@ function validateReward(value, index, stampCount, errors) {
   if (value.validUntil !== void 0 && (typeof value.validUntil !== "string" || Number.isNaN(Date.parse(value.validUntil)))) {
     add(errors, `${path}.validUntil`, "INVALID_DATE", "Reward expiry must be a valid ISO date.");
   }
-  for (const field of ["maxStock", "limitPerUser"]) {
+  for (const field of ["maxStock", "limitPerUser", "stockLimit", "userClaimLimit"]) {
     const count = value[field];
     if (count !== void 0 && (typeof count !== "number" || !Number.isInteger(count) || count <= 0)) {
       add(errors, `${path}.${field}`, "INVALID_REWARD", `${field} must be a positive integer.`);
@@ -1631,66 +1803,68 @@ function condition(value) {
   }
 }
 function migrateSpot(value, index) {
-  const source = isObject2(value) ? value : {};
-  const id = typeof source.id === "string" && source.id.trim() !== "" ? source.id.trim() : `spot-${index + 1}`;
-  const description = text(source.description);
-  const hint = text(source.hint);
+  const source2 = isObject2(value) ? value : {};
+  const id = typeof source2.id === "string" && source2.id.trim() !== "" ? source2.id.trim() : `spot-${index + 1}`;
+  const description = text(source2.description);
+  const hint = text(source2.hint);
   return {
     id,
-    name: text(source.name) ?? `Spot ${index + 1}`,
+    name: text(source2.name) ?? `Spot ${index + 1}`,
     ...description === void 0 ? {} : { description },
     ...hint === void 0 ? {} : { hint },
     condition: condition(
-      source.condition ?? (typeof source.token === "string" ? { type: "token", token: source.token } : void 0)
+      source2.condition ?? (typeof source2.token === "string" ? { type: "token", token: source2.token } : void 0)
     ),
-    ...typeof source.order === "number" ? { order: source.order } : {},
-    ...typeof source.deckId === "string" ? { deckId: source.deckId } : {},
-    ...typeof source.groupId === "string" ? { groupId: source.groupId } : {},
-    ...typeof source.guideId === "string" ? { guideId: source.guideId } : {},
-    ...typeof source.iconUrl === "string" ? { iconUrl: source.iconUrl } : {},
-    ...typeof source.imageUrl === "string" ? { imageUrl: source.imageUrl } : {},
-    ...typeof source.externalUrl === "string" ? { externalUrl: source.externalUrl } : {},
-    ...typeof source.redirectUrlAfterClaim === "string" ? { redirectUrlAfterClaim: source.redirectUrlAfterClaim } : {},
-    ...isObject2(source.metadata) ? { metadata: source.metadata } : {},
-    ...Array.isArray(source.dependsOn) ? { dependsOn: source.dependsOn.filter((item) => typeof item === "string") } : {}
+    ...typeof source2.orderIndex === "number" ? { orderIndex: source2.orderIndex } : typeof source2.order === "number" ? { order: source2.order } : {},
+    ...typeof source2.deckId === "string" ? { deckId: source2.deckId } : {},
+    ...typeof source2.groupId === "string" ? { groupId: source2.groupId } : {},
+    ...typeof source2.guideId === "string" ? { guideId: source2.guideId } : {},
+    ...typeof source2.iconUrl === "string" ? { iconUrl: source2.iconUrl } : {},
+    ...typeof source2.imageUrl === "string" ? { imageUrl: source2.imageUrl } : {},
+    ...typeof source2.externalUrl === "string" ? { externalUrl: source2.externalUrl } : {},
+    ...typeof source2.redirectUrlAfterClaim === "string" ? { redirectUrlAfterClaim: source2.redirectUrlAfterClaim } : {},
+    ...isObject2(source2.metadata) ? { metadata: source2.metadata } : {},
+    ...Array.isArray(source2.dependsOn) ? { dependsOn: source2.dependsOn.filter((item) => typeof item === "string") } : {}
   };
 }
 function migrateReward(value, index) {
-  const source = isObject2(value) ? value : {};
+  const source2 = isObject2(value) ? value : {};
   return {
-    id: typeof source.id === "string" && source.id.trim() !== "" ? source.id.trim() : `reward-${index + 1}`,
-    title: text(source.title) ?? `Reward ${index + 1}`,
-    description: text(source.description) ?? "",
-    type: source.type === "digital" ? "digital" : "in_person",
-    redemptionMethod: source.redemptionMethod === "staff_passcode" || source.redemptionMethod === "view_only" ? source.redemptionMethod : "manual_slide",
-    requiredStampCount: typeof source.requiredStampCount === "number" && Number.isFinite(source.requiredStampCount) ? Math.max(0, Math.trunc(source.requiredStampCount)) : 0,
-    ...typeof source.digitalContentUrl === "string" ? { digitalContentUrl: source.digitalContentUrl } : {},
-    ...typeof source.staffPasscode === "string" ? { staffPasscode: source.staffPasscode } : {},
-    ...typeof source.validUntil === "string" ? { validUntil: source.validUntil } : {},
-    ...typeof source.maxStock === "number" ? { maxStock: source.maxStock } : {},
-    ...typeof source.limitPerUser === "number" ? { limitPerUser: source.limitPerUser } : {},
-    ...typeof source.claimTicketNumber === "string" ? { claimTicketNumber: source.claimTicketNumber } : {}
+    id: typeof source2.id === "string" && source2.id.trim() !== "" ? source2.id.trim() : `reward-${index + 1}`,
+    title: text(source2.title) ?? `Reward ${index + 1}`,
+    description: text(source2.description) ?? "",
+    type: source2.type === "digital" ? "digital" : "in_person",
+    redemptionMethod: source2.redemptionMethod === "staff_passcode" || source2.redemptionMethod === "view_only" || source2.redemptionMethod === "server_claim" ? source2.redemptionMethod : "manual_slide",
+    requiredStampCount: typeof source2.requiredStampCount === "number" && Number.isFinite(source2.requiredStampCount) ? Math.max(0, Math.trunc(source2.requiredStampCount)) : 0,
+    ...typeof source2.digitalContentUrl === "string" ? { digitalContentUrl: source2.digitalContentUrl } : {},
+    ...typeof source2.staffPasscode === "string" ? { staffPasscode: source2.staffPasscode } : {},
+    ...typeof source2.validUntil === "string" ? { validUntil: source2.validUntil } : {},
+    ...typeof source2.maxStock === "number" ? { maxStock: source2.maxStock } : {},
+    ...typeof source2.limitPerUser === "number" ? { limitPerUser: source2.limitPerUser } : {},
+    ...typeof source2.stockLimit === "number" ? { stockLimit: source2.stockLimit } : {},
+    ...typeof source2.userClaimLimit === "number" ? { userClaimLimit: source2.userClaimLimit } : {},
+    ...typeof source2.claimTicketNumber === "string" ? { claimTicketNumber: source2.claimTicketNumber } : {}
   };
 }
 function migrateRallyConfig(raw) {
-  const source = isObject2(raw) ? raw : {};
-  const rawStamps = Array.isArray(source.stamps) ? source.stamps : Array.isArray(source.spots) ? source.spots : [];
-  const rawRewards = Array.isArray(source.rewards) ? source.rewards : [];
-  const id = typeof source.id === "string" && source.id.trim() !== "" ? source.id.trim() : "migrated-rally";
-  const title = text(source.title);
-  const description = text(source.description);
-  const theme = isObject2(source.theme) ? source.theme : void 0;
+  const source2 = isObject2(raw) ? raw : {};
+  const rawStamps = Array.isArray(source2.stamps) ? source2.stamps : Array.isArray(source2.spots) ? source2.spots : [];
+  const rawRewards = Array.isArray(source2.rewards) ? source2.rewards : [];
+  const id = typeof source2.id === "string" && source2.id.trim() !== "" ? source2.id.trim() : "migrated-rally";
+  const title = text(source2.title);
+  const description = text(source2.description);
+  const theme = isObject2(source2.theme) ? source2.theme : void 0;
   return {
     id,
     ...title === void 0 ? {} : { title },
     ...description === void 0 ? {} : { description },
     stamps: rawStamps.map(migrateSpot),
     ...rawRewards.length === 0 ? {} : { rewards: rawRewards.map(migrateReward) },
-    ...typeof source.isSequential === "boolean" ? { isSequential: source.isSequential } : {},
+    ...typeof source2.isSequential === "boolean" ? { isSequential: source2.isSequential } : {},
     ...theme === void 0 ? {} : { theme },
     version: CURRENT_RALLY_CONFIG_VERSION,
-    ...typeof source.startDate === "string" ? { startDate: source.startDate } : typeof source.startsAt === "string" ? { startDate: source.startsAt } : {},
-    ...typeof source.endDate === "string" ? { endDate: source.endDate } : typeof source.endsAt === "string" ? { endDate: source.endsAt } : {}
+    ...typeof source2.startDate === "string" ? { startDate: source2.startDate } : typeof source2.startsAt === "string" ? { startDate: source2.startsAt } : {},
+    ...typeof source2.endDate === "string" ? { endDate: source2.endDate } : typeof source2.endsAt === "string" ? { endDate: source2.endsAt } : {}
   };
 }
 
@@ -1815,22 +1989,22 @@ var THEME_PRESETS = [
 ];
 
 // src/security/snapshotToken.ts
-var encoder = new TextEncoder();
-function cryptoApi() {
+var encoder2 = new TextEncoder();
+function cryptoApi2() {
   if (globalThis.crypto === void 0 || globalThis.crypto.subtle === void 0) {
     throw new Error("Web Crypto API is unavailable in this environment.");
   }
   return globalThis.crypto;
 }
 function secretBytes(secretKey) {
-  return typeof secretKey === "string" ? encoder.encode(secretKey) : new Uint8Array(secretKey);
+  return typeof secretKey === "string" ? encoder2.encode(secretKey) : new Uint8Array(secretKey);
 }
-function webCryptoBytes(bytes) {
-  return bytes.buffer;
+function webCryptoBytes(bytes2) {
+  return bytes2.buffer;
 }
-function base64Url(bytes) {
+function base64Url(bytes2) {
   let binary = "";
-  for (const byte of bytes) binary += String.fromCharCode(byte);
+  for (const byte of bytes2) binary += String.fromCharCode(byte);
   return globalThis.btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
 }
 function fromBase64Url(value) {
@@ -1840,7 +2014,7 @@ function fromBase64Url(value) {
   return Uint8Array.from(binary, (character) => character.charCodeAt(0));
 }
 async function importHmacKey(secret) {
-  return cryptoApi().subtle.importKey(
+  return cryptoApi2().subtle.importKey(
     "raw",
     webCryptoBytes(secret),
     { name: "HMAC", hash: "SHA-256" },
@@ -1849,18 +2023,18 @@ async function importHmacKey(secret) {
   );
 }
 async function importAesKey(secret) {
-  const digest = await cryptoApi().subtle.digest("SHA-256", webCryptoBytes(secret));
-  return cryptoApi().subtle.importKey("raw", digest, "AES-GCM", false, ["encrypt", "decrypt"]);
+  const digest = await cryptoApi2().subtle.digest("SHA-256", webCryptoBytes(secret));
+  return cryptoApi2().subtle.importKey("raw", digest, "AES-GCM", false, ["encrypt", "decrypt"]);
 }
 function isExpired(payload, now) {
   if (typeof payload.exp === "number" && now >= payload.exp * 1e3) return true;
   return payload.expiresAt !== void 0 && Date.parse(payload.expiresAt) <= now;
 }
 async function createSignedSnapshotToken(payload, secretKey) {
-  const api = cryptoApi();
+  const api = cryptoApi2();
   const secret = secretBytes(secretKey);
   const iv = api.getRandomValues(new Uint8Array(12));
-  const plaintext = encoder.encode(JSON.stringify(payload));
+  const plaintext = encoder2.encode(JSON.stringify(payload));
   const encrypted = new Uint8Array(
     await api.subtle.encrypt(
       { name: "AES-GCM", iv: webCryptoBytes(iv) },
@@ -1870,7 +2044,7 @@ async function createSignedSnapshotToken(payload, secretKey) {
   );
   const body = base64Url(new Uint8Array([...iv, ...encrypted]));
   const signature = new Uint8Array(
-    await api.subtle.sign("HMAC", await importHmacKey(secret), encoder.encode(body))
+    await api.subtle.sign("HMAC", await importHmacKey(secret), encoder2.encode(body))
   );
   return `sr2.${body}.${base64Url(signature)}`;
 }
@@ -1893,11 +2067,11 @@ async function verifySnapshotToken(token, secretKey, now = Date.now()) {
       };
     }
     const secret = secretBytes(secretKey);
-    const validSignature = await cryptoApi().subtle.verify(
+    const validSignature = await cryptoApi2().subtle.verify(
       "HMAC",
       await importHmacKey(secret),
       webCryptoBytes(fromBase64Url(encodedSignature)),
-      webCryptoBytes(encoder.encode(body))
+      webCryptoBytes(encoder2.encode(body))
     );
     if (!validSignature) {
       return {
@@ -1908,7 +2082,7 @@ async function verifySnapshotToken(token, secretKey, now = Date.now()) {
     }
     const encrypted = fromBase64Url(body);
     if (encrypted.length <= 12) throw new Error("Invalid encrypted payload.");
-    const payloadText = await cryptoApi().subtle.decrypt(
+    const payloadText = await cryptoApi2().subtle.decrypt(
       { name: "AES-GCM", iv: webCryptoBytes(encrypted.slice(0, 12)) },
       await importAesKey(secret),
       webCryptoBytes(encrypted.slice(12))
@@ -1945,6 +2119,7 @@ exports.calculateDistanceMeters = calculateDistanceMeters;
 exports.calculateProgress = calculateProgress;
 exports.consumeReward = consumeReward;
 exports.createClaimTicketNumber = createClaimTicketNumber;
+exports.createSecureToken = createSecureToken;
 exports.createSignedSnapshotToken = createSignedSnapshotToken;
 exports.createUniqueClaimTicketNumber = createUniqueClaimTicketNumber;
 exports.evaluateCheckIn = evaluateCheckIn;
@@ -1970,6 +2145,7 @@ exports.stripSensitiveConfig = stripSensitiveConfig;
 exports.toLocalizedString = toLocalizedString;
 exports.validateRallyConfig = validateRallyConfig;
 exports.verifyPasscode = verifyPasscode;
+exports.verifySecureToken = verifySecureToken;
 exports.verifySnapshotToken = verifySnapshotToken;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map