@tegis/server 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -2,7 +2,16 @@
 
 All notable changes to `@tegis/server` are documented here. This project follows [semver](https://semver.org).
 
-## [0.1.0] — unreleased
+## [0.1.2]
+
+- First release from the public `tegisio/tegis-js` repo, published with GitHub build provenance. No API changes.
+
+## [0.1.1]
+
+- First working publish. (`0.1.0` did not persist to the registry — a concurrent first-publish race on the
+  brand-new `@tegis` scope.) CI now serializes publishes and verifies the bundle is self-contained first.
+
+## [0.1.0]
 
 Initial extraction from the Tegis reference SDK (formerly the private `@aegis/sdk`).
 

package/dist/index.js

@@ -1,3 +1,42 @@
+// src/crypto/ed25519.ts
+import { createPrivateKey, createPublicKey, sign as nodeSign, verify as nodeVerify } from "node:crypto";
+var PKCS8_ED25519_PREFIX = Buffer.from("302e020100300506032b657004220420", "hex");
+function privateKeyFromSeed(seed) {
+  if (seed.length !== 32)
+    throw new Error(`seed must be 32 bytes, got ${seed.length}`);
+  return createPrivateKey({ key: Buffer.concat([PKCS8_ED25519_PREFIX, seed]), format: "der", type: "pkcs8" });
+}
+function signEd25519(seed, msg) {
+  return nodeSign(null, msg, privateKeyFromSeed(seed));
+}
+var b64u = (b) => Buffer.from(b).toString("base64url");
+var utf8 = (s) => Buffer.from(s, "utf8");
+
+// src/crypto/jose.ts
+function jwsSign(header, payload, seed) {
+  const signingInput = `${b64u(utf8(JSON.stringify({ alg: "EdDSA", ...header })))}.${b64u(utf8(JSON.stringify(payload)))}`;
+  return `${signingInput}.${b64u(signEd25519(seed, utf8(signingInput)))}`;
+}
+
+// src/server.ts
+class TegisServer {
+  cfg;
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  mintEntitlement(sub, assetId, opts) {
+    const now = Math.floor(Date.now() / 1000);
+    return jwsSign({ typ: "JWT", kid: this.cfg.jwksKid }, {
+      iss: this.cfg.issuer,
+      tid: this.cfg.tid,
+      sub,
+      aud: assetId,
+      ent: { maxRes: opts?.maxRes ?? "1080p", drm: opts?.drm ?? "none" },
+      iat: now,
+      exp: now + (this.cfg.ttlSeconds ?? 300)
+    }, this.cfg.signSeed);
+  }
+}
 export {
   TegisServer
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tegis/server",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Tegis backend SDK — mint short-lived, EdDSA-signed entitlement grants. The tenant signing key never leaves your server.",
   "type": "module",
   "license": "MIT",
@@ -8,8 +8,8 @@
   "homepage": "https://tegis.io",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/okbrk/aegis.git",
-    "directory": "reference/sdk-ts/packages/server"
+    "url": "git+https://github.com/tegisio/tegis-js.git",
+    "directory": "packages/server"
   },
   "keywords": [
     "tegis",