@vasanthcambium/marketplace-auth 0.1.0

package/dist/shared/errors.js

@@ -0,0 +1,59 @@
+/**
+ * Error classes shared across server, browser, and React subpaths.
+ * Branded so consumers can `instanceof`-check across module boundaries.
+ */
+export class AuthError extends Error {
+    code;
+    cause;
+    constructor(message, code, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = new.target.name;
+    }
+}
+// Server-side errors
+export class NonceVerificationError extends AuthError {
+    constructor(cause) {
+        super('Launch nonce failed verification', 'nonce_verification_failed', cause);
+    }
+}
+export class TokenExchangeError extends AuthError {
+    status;
+    constructor(status, body) {
+        super(`Auth Service token exchange failed (${status})`, 'token_exchange_failed', body);
+        this.status = status;
+    }
+}
+export class SessionNotFoundError extends AuthError {
+    constructor() {
+        super('Session not found', 'session_not_found');
+    }
+}
+export class UpstreamError extends AuthError {
+    status;
+    constructor(status, message) {
+        super(message, 'upstream_error');
+        this.status = status;
+    }
+}
+// Browser-side errors
+export class BridgeHttpError extends Error {
+    status;
+    statusText;
+    body;
+    constructor(status, statusText, body) {
+        super(`HTTP ${status} ${statusText}`);
+        this.status = status;
+        this.statusText = statusText;
+        this.body = body;
+        this.name = 'BridgeHttpError';
+    }
+}
+export class SessionExpiredError extends Error {
+    constructor() {
+        super('Session expired. The user must re-launch from cnMaestro.');
+        this.name = 'SessionExpiredError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/shared/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACW;IAA8B;IAA3E,YAAY,OAAe,EAAkB,IAAY,EAAkB,KAAe;QACxF,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAQ;QAAkB,UAAK,GAAL,KAAK,CAAU;QAExF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED,qBAAqB;AAErB,MAAM,OAAO,sBAAuB,SAAQ,SAAS;IACnD,YAAY,KAAe;QACzB,KAAK,CAAC,kCAAkC,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IACnB;IAA5B,YAA4B,MAAc,EAAE,IAAa;QACvD,KAAK,CAAC,uCAAuC,MAAM,GAAG,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAD7D,WAAM,GAAN,MAAM,CAAQ;IAE1C,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjD;QACE,KAAK,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAClD,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IACd;IAA5B,YAA4B,MAAc,EAAE,OAAe;QACzD,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QADP,WAAM,GAAN,MAAM,CAAQ;IAE1C,CAAC;CACF;AAED,sBAAsB;AAEtB,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IACA;IAHlB,YACkB,MAAc,EACd,UAAkB,EAClB,IAAa;QAE7B,KAAK,CAAC,QAAQ,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC;QAJtB,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}

package/dist/shared/regions.d.ts

@@ -0,0 +1,3 @@
+import type { Region } from './types.js';
+export declare function regionToNbiUrl(region: Region): string;
+//# sourceMappingURL=regions.d.ts.map

package/dist/shared/regions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regions.d.ts","sourceRoot":"","sources":["../../src/shared/regions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AASzC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIrD"}

package/dist/shared/regions.js

@@ -0,0 +1,13 @@
+const REGION_TO_NBI = {
+    'us-e1': 'https://us-e1.cloud.cambiumnetworks.com',
+    'eu-w1': 'https://eu-w1.cloud.cambiumnetworks.com',
+    'ap-s1': 'https://ap-s1.cloud.cambiumnetworks.com',
+    'ap-n1': 'https://ap-n1.cloud.cambiumnetworks.com',
+};
+export function regionToNbiUrl(region) {
+    const url = REGION_TO_NBI[region];
+    if (!url)
+        throw new Error(`Unknown region: ${region}`);
+    return url;
+}
+//# sourceMappingURL=regions.js.map

package/dist/shared/regions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regions.js","sourceRoot":"","sources":["../../src/shared/regions.ts"],"names":[],"mappings":"AAEA,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,yCAAyC;IAClD,OAAO,EAAE,yCAAyC;IAClD,OAAO,EAAE,yCAAyC;IAClD,OAAO,EAAE,yCAAyC;CACnD,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shared/types.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Types shared between server, browser, and React subpaths.
+ *
+ * Keep this file environment-neutral — no Node-only or DOM-only imports.
+ */
+export type Region = 'us-e1' | 'eu-w1' | 'ap-s1' | 'ap-n1';
+export type Permission = 'read-only' | 'read-write' | 'full-access';
+export type UserRole = 'super-admin' | 'admin' | 'operator' | 'monitor';
+export interface ApiRoute {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';
+    path: string;
+    description: string;
+}
+export interface Session {
+    /** Server stores this internally; browser only knows it via the cn_session cookie. */
+    id: string;
+    appId: string;
+    /** Present on the server side only; never serialized to the browser. */
+    jwt?: string;
+    /** Present on the server side only; never serialized to the browser. */
+    accessToken?: string;
+    /** Epoch ms. */
+    expiresAt: number;
+    accountCid: string;
+    userRole: UserRole;
+    permission: Permission;
+    scopes: {
+        tenant: {
+            account_cid: string;
+            mcids: string[];
+        };
+        network: {
+            network_ids?: string[];
+            site_ids?: string[];
+            device_ids?: string[];
+        };
+    };
+    /** Resolved at credential-mint time from the Manifest's api_routes_url. */
+    apiRoutes: ApiRoute[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;AAEpE,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAExE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,sFAAsF;IACtF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE;QACN,MAAM,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACjD,OAAO,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACjF,CAAC;IACF,2EAA2E;IAC3E,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB"}

package/dist/shared/types.js

@@ -0,0 +1,7 @@
+/**
+ * Types shared between server, browser, and React subpaths.
+ *
+ * Keep this file environment-neutral — no Node-only or DOM-only imports.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@vasanthcambium/marketplace-auth",
+  "version": "0.1.0",
+  "description": "Frontend auth + NBI client for MarketApps Platform apps. Browser fetch wrapper and React hooks.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vasanthcambium/marketapps-developer-platform.git",
+    "directory": "sdk/packages/marketplace-auth"
+  },
+  "bugs": "https://github.com/vasanthcambium/marketapps-developer-platform/issues",
+  "keywords": ["cnmaestro", "cambium", "marketapps", "auth", "react", "nbi"],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".":         { "types": "./dist/index.d.ts",         "import": "./dist/index.js" },
+    "./browser": { "types": "./dist/browser/index.d.ts", "import": "./dist/browser/index.js" },
+    "./react":   { "types": "./dist/react/index.d.ts",   "import": "./dist/react/index.js" }
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "scripts": {
+    "build":     "tsc -p tsconfig.build.json",
+    "test":      "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "peerDependencies": {
+    "react":   "^18.0.0 || ^19.0.0",
+    "react-dom": "^18.0.0 || ^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react":     { "optional": true },
+    "react-dom": { "optional": true }
+  },
+  "dependencies": {
+    "jose":   "^5.9.0",
+    "undici": "^6.19.0",
+    "cookie": "^1.0.0",
+    "swr":    "^2.2.0"
+  },
+  "devDependencies": {
+    "@types/node":    "^22.0.0",
+    "@types/express": "^4.17.0",
+    "@types/cookie":  "^1.0.0",
+    "@types/react":   "^18.0.0",
+    "express":        "^4.19.0",
+    "hono":           "^4.0.0",
+    "react":          "^18.0.0",
+    "typescript":     "~6.0.0",
+    "vitest":         "^4.0.0"
+  },
+  "engines": { "node": ">=22.0" },
+  "sideEffects": false
+}