@sylphx/sdk 0.3.2 → 0.3.4

package/dist/server/index.mjs

@@ -1,4 +1,4 @@
-// ../../node_modules/jose/dist/webapi/lib/buffer_utils.js
+// node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder();
 var decoder = new TextDecoder();
 var MAX_INT32 = 2 ** 32;
@@ -24,7 +24,7 @@ function encode(string) {
   return bytes;
 }
 
-// ../../node_modules/jose/dist/webapi/lib/base64.js
+// node_modules/jose/dist/webapi/lib/base64.js
 function decodeBase64(encoded) {
   if (Uint8Array.fromBase64) {
     return Uint8Array.fromBase64(encoded);
@@ -37,7 +37,7 @@ function decodeBase64(encoded) {
   return bytes;
 }
 
-// ../../node_modules/jose/dist/webapi/util/base64url.js
+// node_modules/jose/dist/webapi/util/base64url.js
 function decode(input) {
   if (Uint8Array.fromBase64) {
     return Uint8Array.fromBase64(typeof input === "string" ? input : decoder.decode(input), {
@@ -56,7 +56,7 @@ function decode(input) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/util/errors.js
+// node_modules/jose/dist/webapi/util/errors.js
 var JOSEError = class extends Error {
   static code = "ERR_JOSE_GENERIC";
   code = "ERR_JOSE_GENERIC";
@@ -116,7 +116,7 @@ var JWSSignatureVerificationFailed = class extends JOSEError {
   }
 };
 
-// ../../node_modules/jose/dist/webapi/lib/crypto_key.js
+// node_modules/jose/dist/webapi/lib/crypto_key.js
 var unusable = (name, prop = "algorithm.name") => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
 var isAlgorithm = (algorithm, name) => algorithm.name === name;
 function getHashLength(hash) {
@@ -204,7 +204,7 @@ function checkSigCryptoKey(key, alg, usage) {
   checkUsage(key, usage);
 }
 
-// ../../node_modules/jose/dist/webapi/lib/invalid_key_input.js
+// node_modules/jose/dist/webapi/lib/invalid_key_input.js
 function message(msg, actual, ...types) {
   types = types.filter(Boolean);
   if (types.length > 2) {
@@ -229,7 +229,7 @@ function message(msg, actual, ...types) {
 var invalidKeyInput = (actual, ...types) => message("Key must be ", actual, ...types);
 var withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);
 
-// ../../node_modules/jose/dist/webapi/lib/is_key_like.js
+// node_modules/jose/dist/webapi/lib/is_key_like.js
 var isCryptoKey = (key) => {
   if (key?.[Symbol.toStringTag] === "CryptoKey")
     return true;
@@ -242,7 +242,7 @@ var isCryptoKey = (key) => {
 var isKeyObject = (key) => key?.[Symbol.toStringTag] === "KeyObject";
 var isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);
 
-// ../../node_modules/jose/dist/webapi/lib/is_disjoint.js
+// node_modules/jose/dist/webapi/lib/is_disjoint.js
 function isDisjoint(...headers) {
   const sources = headers.filter(Boolean);
   if (sources.length === 0 || sources.length === 1) {
@@ -265,7 +265,7 @@ function isDisjoint(...headers) {
   return true;
 }
 
-// ../../node_modules/jose/dist/webapi/lib/is_object.js
+// node_modules/jose/dist/webapi/lib/is_object.js
 var isObjectLike = (value) => typeof value === "object" && value !== null;
 function isObject(input) {
   if (!isObjectLike(input) || Object.prototype.toString.call(input) !== "[object Object]") {
@@ -281,7 +281,7 @@ function isObject(input) {
   return Object.getPrototypeOf(input) === proto;
 }
 
-// ../../node_modules/jose/dist/webapi/lib/check_key_length.js
+// node_modules/jose/dist/webapi/lib/check_key_length.js
 function checkKeyLength(alg, key) {
   if (alg.startsWith("RS") || alg.startsWith("PS")) {
     const { modulusLength } = key.algorithm;
@@ -291,7 +291,7 @@ function checkKeyLength(alg, key) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/lib/jwk_to_key.js
+// node_modules/jose/dist/webapi/lib/jwk_to_key.js
 function subtleMapping(jwk) {
   let algorithm;
   let keyUsages;
@@ -401,7 +401,7 @@ async function jwkToKey(jwk) {
   return crypto.subtle.importKey("jwk", keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);
 }
 
-// ../../node_modules/jose/dist/webapi/key/import.js
+// node_modules/jose/dist/webapi/key/import.js
 async function importJWK(jwk, alg, options) {
   if (!isObject(jwk)) {
     throw new TypeError("JWK must be an object");
@@ -437,7 +437,7 @@ async function importJWK(jwk, alg, options) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/lib/validate_crit.js
+// node_modules/jose/dist/webapi/lib/validate_crit.js
 function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
   if (joseHeader.crit !== void 0 && protectedHeader?.crit === void 0) {
     throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
@@ -468,7 +468,7 @@ function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader,
   return new Set(protectedHeader.crit);
 }
 
-// ../../node_modules/jose/dist/webapi/lib/validate_algorithms.js
+// node_modules/jose/dist/webapi/lib/validate_algorithms.js
 function validateAlgorithms(option, algorithms) {
   if (algorithms !== void 0 && (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== "string"))) {
     throw new TypeError(`"${option}" option must be an array of strings`);
@@ -479,13 +479,13 @@ function validateAlgorithms(option, algorithms) {
   return new Set(algorithms);
 }
 
-// ../../node_modules/jose/dist/webapi/lib/is_jwk.js
+// node_modules/jose/dist/webapi/lib/is_jwk.js
 var isJWK = (key) => isObject(key) && typeof key.kty === "string";
 var isPrivateJWK = (key) => key.kty !== "oct" && (key.kty === "AKP" && typeof key.priv === "string" || typeof key.d === "string");
 var isPublicJWK = (key) => key.kty !== "oct" && key.d === void 0 && key.priv === void 0;
 var isSecretJWK = (key) => key.kty === "oct" && typeof key.k === "string";
 
-// ../../node_modules/jose/dist/webapi/lib/normalize_key.js
+// node_modules/jose/dist/webapi/lib/normalize_key.js
 var cache;
 var handleJWK = async (key, jwk, alg, freeze = false) => {
   cache ||= /* @__PURE__ */ new WeakMap();
@@ -656,7 +656,7 @@ async function normalizeKey(key, alg) {
   throw new Error("unreachable");
 }
 
-// ../../node_modules/jose/dist/webapi/lib/check_key_type.js
+// node_modules/jose/dist/webapi/lib/check_key_type.js
 var tag = (key) => key?.[Symbol.toStringTag];
 var jwkMatchesOp = (alg, key, usage) => {
   if (key.use !== void 0) {
@@ -776,7 +776,7 @@ function checkKeyType(alg, key, usage) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/lib/subtle_dsa.js
+// node_modules/jose/dist/webapi/lib/subtle_dsa.js
 function subtleAlgorithm(alg, algorithm) {
   const hash = `SHA-${alg.slice(-3)}`;
   switch (alg) {
@@ -808,7 +808,7 @@ function subtleAlgorithm(alg, algorithm) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/lib/get_sign_verify_key.js
+// node_modules/jose/dist/webapi/lib/get_sign_verify_key.js
 async function getSigKey(alg, key, usage) {
   if (key instanceof Uint8Array) {
     if (!alg.startsWith("HS")) {
@@ -820,7 +820,7 @@ async function getSigKey(alg, key, usage) {
   return key;
 }
 
-// ../../node_modules/jose/dist/webapi/lib/verify.js
+// node_modules/jose/dist/webapi/lib/verify.js
 async function verify(alg, key, signature, data) {
   const cryptoKey = await getSigKey(alg, key, "verify");
   checkKeyLength(alg, cryptoKey);
@@ -832,7 +832,7 @@ async function verify(alg, key, signature, data) {
   }
 }
 
-// ../../node_modules/jose/dist/webapi/jws/flattened/verify.js
+// node_modules/jose/dist/webapi/jws/flattened/verify.js
 async function flattenedVerify(jws, key, options) {
   if (!isObject(jws)) {
     throw new JWSInvalid("Flattened JWS must be an object");
@@ -934,7 +934,7 @@ async function flattenedVerify(jws, key, options) {
   return result;
 }
 
-// ../../node_modules/jose/dist/webapi/jws/compact/verify.js
+// node_modules/jose/dist/webapi/jws/compact/verify.js
 async function compactVerify(jws, key, options) {
   if (jws instanceof Uint8Array) {
     jws = decoder.decode(jws);
@@ -954,7 +954,7 @@ async function compactVerify(jws, key, options) {
   return result;
 }
 
-// ../../node_modules/jose/dist/webapi/lib/jwt_claims_set.js
+// node_modules/jose/dist/webapi/lib/jwt_claims_set.js
 var epoch = (date) => Math.floor(date.getTime() / 1e3);
 var minute = 60;
 var hour = minute * 60;
@@ -1111,7 +1111,7 @@ function validateClaimsSet(protectedHeader, encodedPayload, options = {}) {
   return payload;
 }
 
-// ../../node_modules/jose/dist/webapi/jwt/verify.js
+// node_modules/jose/dist/webapi/jwt/verify.js
 async function jwtVerify(jwt, key, options) {
   const verified = await compactVerify(jwt, key, options);
   if (verified.protectedHeader.crit?.includes("b64") && verified.protectedHeader.b64 === false) {
@@ -1126,17 +1126,12 @@ async function jwtVerify(jwt, key, options) {
 }
 
 // src/constants.ts
-var DEFAULT_PLATFORM_URL = "https://sylphx.com";
-var ENV_PLATFORM_URL = "SYLPHX_PLATFORM_URL";
-var ENV_PLATFORM_URL_LEGACY = "SYLPHX_URL";
 var ENV_SECRET_KEY = "SYLPHX_SECRET_KEY";
-function resolvePlatformUrl(explicit) {
-  return (explicit || process.env[ENV_PLATFORM_URL] || process.env[ENV_PLATFORM_URL_LEGACY] || DEFAULT_PLATFORM_URL).trim();
-}
 function resolveSecretKey(explicit) {
   return explicit || process.env[ENV_SECRET_KEY];
 }
-var SDK_API_PATH = `/api/v1`;
+var SDK_API_PATH = `/v1`;
+var DEFAULT_SDK_API_HOST = "api.sylphx.com";
 var SDK_VERSION = "0.1.0";
 var SDK_PLATFORM = typeof window !== "undefined" ? "browser" : typeof process !== "undefined" && process.versions?.node ? "node" : "unknown";
 var DEFAULT_TIMEOUT_MS = 3e4;
@@ -1859,7 +1854,7 @@ function createRetryMiddleware(retryConfig) {
 function validateClientConfig(config) {
   return {
     secretKey: validateAndSanitizeSecretKey(config.secretKey),
-    baseUrl: (config.platformUrl || DEFAULT_PLATFORM_URL).trim()
+    baseUrl: (config.platformUrl || `https://${DEFAULT_SDK_API_HOST}`).trim()
   };
 }
 function createRestClient(config) {
@@ -1910,9 +1905,72 @@ function createDynamicRestClient(config) {
   return client;
 }
 
+// src/lib/ids.ts
+var CB32 = "0123456789abcdefghjkmnpqrstvwxyz";
+var CB32_MAP = Object.fromEntries([...CB32].map((c, i) => [c, i]));
+var B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var B58_MAP = Object.fromEntries([...B58].map((c, i) => [c, i]));
+function cb32Encode(hex) {
+  const num = BigInt(`0x${hex}`);
+  const chars = [];
+  let n = num;
+  for (let i = 0; i < 26; i++) {
+    chars.unshift(CB32[Number(n & 0x1fn)]);
+    n >>= 5n;
+  }
+  return chars.join("");
+}
+function cb32Decode(str) {
+  if (str.length !== 26) return null;
+  let n = 0n;
+  for (const c of str.toLowerCase()) {
+    const idx = CB32_MAP[c];
+    if (idx === void 0) return null;
+    n = n << 5n | BigInt(idx);
+  }
+  return n.toString(16).padStart(32, "0");
+}
+function b58Decode(str) {
+  let n = 0n;
+  for (const c of str) {
+    const i = B58_MAP[c] ?? -1;
+    if (i === -1) return null;
+    n = n * 58n + BigInt(i);
+  }
+  const hex = n.toString(16).padStart(32, "0");
+  return hex.length === 32 ? hex : null;
+}
+function hexToUuid(hex) {
+  return [
+    hex.slice(0, 8),
+    hex.slice(8, 12),
+    hex.slice(12, 16),
+    hex.slice(16, 20),
+    hex.slice(20)
+  ].join("-");
+}
+function encodeUserId(uuid) {
+  const hex = uuid.replace(/-/g, "");
+  if (hex.length !== 32)
+    throw new Error("Invalid UUID: expected 32 hex chars after stripping dashes");
+  return `user_${cb32Encode(hex)}`;
+}
+function decodeUserId(prefixedId) {
+  if (!prefixedId.startsWith("user_")) return null;
+  const enc = prefixedId.slice(5);
+  if (!enc) return null;
+  if (enc.length === 26) {
+    const hex2 = cb32Decode(enc);
+    if (hex2) return hexToUuid(hex2);
+  }
+  const hex = b58Decode(enc);
+  if (hex) return hexToUuid(hex);
+  return null;
+}
+
 // src/server/ai.ts
 function createAI(options = {}) {
-  const baseURL = (options.platformUrl || process.env.SYLPHX_PLATFORM_URL || DEFAULT_PLATFORM_URL).trim();
+  const baseURL = (options.platformUrl || `https://${DEFAULT_SDK_API_HOST}`).trim();
   const rawApiKey = options.secretKey || process.env.SYLPHX_SECRET_KEY;
   const apiKey = validateAndSanitizeSecretKey(rawApiKey);
   const headers = {
@@ -2005,7 +2063,7 @@ function getAI() {
 
 // src/server/kv.ts
 function createKv(options = {}) {
-  const platformUrl = resolvePlatformUrl(options.platformUrl);
+  const platformUrl = (options.platformUrl || `https://${DEFAULT_SDK_API_HOST}`).trim();
   const secretKey = validateAndSanitizeSecretKey(resolveSecretKey(options.secretKey));
   const headers = {
     "Content-Type": "application/json",
@@ -2194,7 +2252,7 @@ function getKv() {
 
 // src/server/streams.ts
 function createStreams(options = {}) {
-  const baseURL = (options.platformUrl || process.env.SYLPHX_PLATFORM_URL || DEFAULT_PLATFORM_URL).trim();
+  const baseURL = (options.platformUrl || `https://${DEFAULT_SDK_API_HOST}`).trim();
   const rawApiKey = options.secretKey || process.env.SYLPHX_SECRET_KEY;
   const apiKey = validateAndSanitizeSecretKey(rawApiKey);
   const headers = {
@@ -2277,7 +2335,7 @@ var jwksCache = null;
 function resetJwksCache() {
   jwksCache = null;
 }
-async function getJwks(platformUrl = DEFAULT_PLATFORM_URL) {
+async function getJwks(platformUrl = `https://${DEFAULT_SDK_API_HOST}`) {
   const now = Date.now();
   if (jwksCache && jwksCache.expiresAt > now) {
     return jwksCache.keys;
@@ -2298,7 +2356,7 @@ async function getJwks(platformUrl = DEFAULT_PLATFORM_URL) {
   return data.keys;
 }
 async function verifyAccessToken(token, options) {
-  const platformUrl = options.platformUrl || DEFAULT_PLATFORM_URL;
+  const platformUrl = options.platformUrl || `https://${DEFAULT_SDK_API_HOST}`;
   const keys = await getJwks(platformUrl);
   if (!keys.length) {
     throw new Error("No keys in JWKS");
@@ -2315,6 +2373,7 @@ async function verifyAccessToken(token, options) {
       }
       return {
         sub: payload.sub,
+        pid: payload.pid,
         email: payload.email,
         name: payload.name,
         picture: payload.picture,
@@ -2471,7 +2530,7 @@ function sanitizeOptions(options) {
   return {
     ...options,
     secretKey: validateAndSanitizeSecretKey(options.secretKey),
-    platformUrl: (options.platformUrl ?? DEFAULT_PLATFORM_URL).trim()
+    platformUrl: (options.platformUrl ?? `https://${DEFAULT_SDK_API_HOST}`).trim()
   };
 }
 function sdkHeaders(secretKey) {
@@ -2486,7 +2545,7 @@ async function getOAuthProvidersWithInfo(options) {
   return data.providers || [];
 }
 async function fetchOAuthProviders(options) {
-  const baseURL = (options.platformUrl ?? DEFAULT_PLATFORM_URL).trim();
+  const baseURL = (options.platformUrl ?? `https://${DEFAULT_SDK_API_HOST}`).trim();
   const appId = validateAndSanitizeAppId(options.appId);
   return cachedFetch({
     url: `${baseURL}/api/auth/providers`,
@@ -2496,7 +2555,7 @@ async function fetchOAuthProviders(options) {
   });
 }
 async function getPlans(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   return cachedFetch({
     url: `${platformUrl}${SDK_API_PATH}/billing/plans`,
     headers: sdkHeaders(secretKey),
@@ -2505,7 +2564,7 @@ async function getPlans(options) {
   });
 }
 async function getConsentTypes(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   return cachedFetch({
     url: `${platformUrl}${SDK_API_PATH}/consent/types`,
     headers: sdkHeaders(secretKey),
@@ -2514,7 +2573,7 @@ async function getConsentTypes(options) {
   });
 }
 async function getFeatureFlags(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   return cachedFetch({
     url: `${platformUrl}${SDK_API_PATH}/flags`,
     headers: sdkHeaders(secretKey),
@@ -2523,7 +2582,7 @@ async function getFeatureFlags(options) {
   });
 }
 async function getAppMetadata(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   return cachedFetch({
     url: `${platformUrl}${SDK_API_PATH}/app`,
     headers: sdkHeaders(secretKey),
@@ -2552,7 +2611,7 @@ async function getAppConfig(options) {
 async function getReferralLeaderboard(options) {
   const {
     secretKey,
-    platformUrl = DEFAULT_PLATFORM_URL,
+    platformUrl = `https://${DEFAULT_SDK_API_HOST}`,
     limit = 10,
     period = "all"
   } = sanitizeOptions(options);
@@ -2570,7 +2629,7 @@ async function getEngagementLeaderboard(options) {
   const {
     secretKey,
     leaderboardId,
-    platformUrl = DEFAULT_PLATFORM_URL,
+    platformUrl = `https://${DEFAULT_SDK_API_HOST}`,
     limit = 10
   } = sanitizeOptions(options);
   const url = new URL(
@@ -2591,7 +2650,7 @@ async function getEngagementLeaderboard(options) {
   });
 }
 async function getDatabaseConnection(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   try {
     const response = await fetch(`${platformUrl}${SDK_API_PATH}/database/connection-string`, {
       headers: sdkHeaders(secretKey),
@@ -2616,7 +2675,7 @@ async function getDatabaseConnection(options) {
   }
 }
 async function getDatabaseStatus(options) {
-  const { secretKey, platformUrl = DEFAULT_PLATFORM_URL } = sanitizeOptions(options);
+  const { secretKey, platformUrl = `https://${DEFAULT_SDK_API_HOST}` } = sanitizeOptions(options);
   return cachedFetch({
     url: `${platformUrl}${SDK_API_PATH}/database/status`,
     headers: sdkHeaders(secretKey),
@@ -2636,8 +2695,10 @@ export {
   createServerClient,
   createStreams,
   createWebhookHandler,
+  decodeUserId,
   detectEnvironment,
   detectKeyType,
+  encodeUserId,
   getAI,
   getAppConfig,
   getAppMetadata,