@voltro/plugin-licensing 0.85.0 → 0.87.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +5987 -0
- package/README.md +44 -0
- package/THIRD-PARTY-NOTICES.md +864 -253
- package/dist/cloud.d.ts +31 -0
- package/dist/cloud.js +61 -0
- package/dist/games.d.ts +39 -0
- package/dist/games.js +65 -0
- package/dist/gate.d.ts +7 -0
- package/dist/gate.js +28 -0
- package/dist/index.d.ts +28 -7
- package/dist/index.js +86 -121
- package/dist/inspect.d.ts +56 -0
- package/dist/inspect.js +48 -0
- package/dist/resolver.js +9 -0
- package/dist/snapshot.js +33 -0
- package/dist/verify.js +88 -0
- package/package.json +26 -6
package/dist/resolver.js
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { getSnapshot as e } from "./snapshot.js";
|
|
2
|
+
import { Effect as t } from "effect";
|
|
3
|
+
//#region src/resolver.ts
|
|
4
|
+
var n = (n, r) => t.sync(() => {
|
|
5
|
+
let t = e()?.limitFor(n, r);
|
|
6
|
+
return t === void 0 ? null : t;
|
|
7
|
+
});
|
|
8
|
+
//#endregion
|
|
9
|
+
export { n as entitlementResolver };
|
package/dist/snapshot.js
ADDED
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
//#region src/snapshot.ts
|
|
2
|
+
var e = (e, t = {}) => {
|
|
3
|
+
let n = {};
|
|
4
|
+
for (let [t, r] of Object.entries(e.entitlements)) Object.defineProperty(n, t, {
|
|
5
|
+
value: r,
|
|
6
|
+
enumerable: !0
|
|
7
|
+
});
|
|
8
|
+
let r = Object.freeze({
|
|
9
|
+
...e,
|
|
10
|
+
entitlements: Object.freeze(n),
|
|
11
|
+
features: Object.freeze([...e.features]),
|
|
12
|
+
plugins: Object.freeze([...e.plugins])
|
|
13
|
+
}), i = new Set(r.features), a = new Set(r.plugins), o = t.graceSeconds ?? 0;
|
|
14
|
+
if (!Number.isSafeInteger(o) || o < 0) throw TypeError("Invalid license snapshot grace");
|
|
15
|
+
let s = t.now ?? (() => Date.now() / 1e3), c = () => r.exp <= 0 || s() < r.exp + o;
|
|
16
|
+
return Object.freeze({
|
|
17
|
+
claims: r,
|
|
18
|
+
state: () => r.exp <= 0 || s() < r.exp ? "active" : c() ? "grace" : "expired",
|
|
19
|
+
limitFor: (e, t) => {
|
|
20
|
+
if (!c() || r.tenant !== void 0 && r.tenant !== e || !Object.hasOwn(r.entitlements, t)) return;
|
|
21
|
+
let n = r.entitlements[t];
|
|
22
|
+
if (n !== void 0) return n === "unlimited" ? Infinity : n;
|
|
23
|
+
},
|
|
24
|
+
hasFeature: (e) => c() && i.has(e),
|
|
25
|
+
allowsPlugin: (e) => c() && a.has(e)
|
|
26
|
+
});
|
|
27
|
+
}, t, n = (e) => {
|
|
28
|
+
t = e;
|
|
29
|
+
}, r = () => t, i, a = (e) => {
|
|
30
|
+
i = e;
|
|
31
|
+
}, o = () => i;
|
|
32
|
+
//#endregion
|
|
33
|
+
export { o as getRejection, r as getSnapshot, e as makeSnapshot, a as setRejection, n as setSnapshot };
|
package/dist/verify.js
ADDED
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
import { Data as e, Effect as t } from "effect";
|
|
2
|
+
import { decodeProtectedHeader as n, errors as r, importSPKI as i, jwtVerify as a } from "jose";
|
|
3
|
+
//#region src/verify.ts
|
|
4
|
+
var o = class extends e.TaggedError("LicenseVerifyError") {}, s = (e) => typeof e == "object" && e && "code" in e ? String(e.code) : "", c = (e) => {
|
|
5
|
+
let t = e instanceof Error ? e.message : String(e);
|
|
6
|
+
return s(e) === "ERR_JWT_EXPIRED" ? new o({
|
|
7
|
+
reason: "expired",
|
|
8
|
+
message: t
|
|
9
|
+
}) : new o({
|
|
10
|
+
reason: "invalid",
|
|
11
|
+
message: t
|
|
12
|
+
});
|
|
13
|
+
}, l = (e) => e === "unlimited" || typeof e == "number" && Number.isFinite(e) && e >= 0, u = (e) => typeof e == "string" && e.length > 0 && e.length <= 256 && e.trim() === e, d = (e) => Array.isArray(e) && e.every(u), f = (e) => typeof e == "number" && Number.isSafeInteger(e) && e >= 0 && e <= 864e10, p = (e, n) => {
|
|
14
|
+
let r = e.edition, i = e.entitlements, a = e.features, s = e.plugins, c = e.tenant;
|
|
15
|
+
if (!u(r) || typeof i != "object" || !i || Array.isArray(i)) return t.fail(new o({
|
|
16
|
+
reason: "malformed",
|
|
17
|
+
message: "missing edition/entitlements"
|
|
18
|
+
}));
|
|
19
|
+
if (c !== void 0 && !u(c) || a !== void 0 && !d(a) || s !== void 0 && !d(s)) return t.fail(new o({
|
|
20
|
+
reason: "malformed",
|
|
21
|
+
message: "invalid license scope or grants"
|
|
22
|
+
}));
|
|
23
|
+
if (e.exp !== void 0 && !f(e.exp) || e.iat !== void 0 && !f(e.iat) || n !== void 0 && !u(n)) return t.fail(new o({
|
|
24
|
+
reason: "malformed",
|
|
25
|
+
message: "invalid license time or key identity"
|
|
26
|
+
}));
|
|
27
|
+
let p = {};
|
|
28
|
+
for (let [e, n] of Object.entries(i)) {
|
|
29
|
+
if (!u(e) || !l(n)) return t.fail(new o({
|
|
30
|
+
reason: "malformed",
|
|
31
|
+
message: `bad entitlement '${e}'`
|
|
32
|
+
}));
|
|
33
|
+
Object.defineProperty(p, e, {
|
|
34
|
+
value: n,
|
|
35
|
+
enumerable: !0
|
|
36
|
+
});
|
|
37
|
+
}
|
|
38
|
+
let m = a === void 0 ? [] : a, h = s === void 0 ? [] : s;
|
|
39
|
+
return t.succeed({
|
|
40
|
+
...c === void 0 ? {} : { tenant: c },
|
|
41
|
+
edition: r,
|
|
42
|
+
entitlements: p,
|
|
43
|
+
features: m,
|
|
44
|
+
plugins: h,
|
|
45
|
+
exp: typeof e.exp == "number" ? e.exp : 0,
|
|
46
|
+
...typeof e.iat == "number" ? { iat: e.iat } : {},
|
|
47
|
+
...n === void 0 ? {} : { kid: n }
|
|
48
|
+
});
|
|
49
|
+
}, m = (e, s, l = {}) => {
|
|
50
|
+
let u = l.graceSeconds ?? 0, d = l.nowSeconds;
|
|
51
|
+
return t.suspend(() => {
|
|
52
|
+
let l = d ?? Math.floor(Date.now() / 1e3);
|
|
53
|
+
return !Number.isSafeInteger(u) || u < 0 || !Number.isSafeInteger(l) || l < 0 || !Number.isFinite((/* @__PURE__ */ new Date(l * 1e3)).getTime()) ? t.fail(new o({
|
|
54
|
+
reason: "malformed",
|
|
55
|
+
message: "invalid trusted verification clock or grace"
|
|
56
|
+
})) : t.tryPromise({
|
|
57
|
+
try: () => i(s, "EdDSA"),
|
|
58
|
+
catch: (e) => new o({
|
|
59
|
+
reason: "key",
|
|
60
|
+
message: e instanceof Error ? e.message : String(e)
|
|
61
|
+
})
|
|
62
|
+
}).pipe(t.flatMap((i) => t.tryPromise({
|
|
63
|
+
try: async () => {
|
|
64
|
+
try {
|
|
65
|
+
let { payload: t, protectedHeader: n } = await a(e, i, {
|
|
66
|
+
algorithms: ["EdDSA"],
|
|
67
|
+
currentDate: /* @__PURE__ */ new Date(l * 1e3)
|
|
68
|
+
});
|
|
69
|
+
return {
|
|
70
|
+
payload: t,
|
|
71
|
+
kid: n.kid
|
|
72
|
+
};
|
|
73
|
+
} catch (t) {
|
|
74
|
+
if (!(t instanceof r.JWTExpired) || t.claim !== "exp" || u === 0) throw t;
|
|
75
|
+
let i = t.payload.exp;
|
|
76
|
+
if (i === void 0 || !Number.isSafeInteger(i) || i <= 0 || !Number.isSafeInteger(i + u) || l >= i + u) throw t;
|
|
77
|
+
return {
|
|
78
|
+
payload: t.payload,
|
|
79
|
+
kid: n(e).kid
|
|
80
|
+
};
|
|
81
|
+
}
|
|
82
|
+
},
|
|
83
|
+
catch: c
|
|
84
|
+
})), t.flatMap(({ payload: e, kid: t }) => p(e, t)));
|
|
85
|
+
});
|
|
86
|
+
};
|
|
87
|
+
//#endregion
|
|
88
|
+
export { o as LicenseVerifyError, m as verifyLicense };
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@voltro/plugin-licensing",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.87.0",
|
|
4
4
|
"description": "Offline-verified license keys + cloud-issued entitlement snapshots for @voltro apps",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"voltro",
|
|
@@ -28,7 +28,27 @@
|
|
|
28
28
|
"import": "./dist/sign.js",
|
|
29
29
|
"default": "./dist/sign.js"
|
|
30
30
|
},
|
|
31
|
-
"./package.json": "./package.json"
|
|
31
|
+
"./package.json": "./package.json",
|
|
32
|
+
"./games": {
|
|
33
|
+
"types": "./dist/games.d.ts",
|
|
34
|
+
"import": "./dist/games.js",
|
|
35
|
+
"default": "./dist/games.js"
|
|
36
|
+
},
|
|
37
|
+
"./cloud": {
|
|
38
|
+
"types": "./dist/cloud.d.ts",
|
|
39
|
+
"import": "./dist/cloud.js",
|
|
40
|
+
"default": "./dist/cloud.js"
|
|
41
|
+
},
|
|
42
|
+
"./gate": {
|
|
43
|
+
"types": "./dist/gate.d.ts",
|
|
44
|
+
"import": "./dist/gate.js",
|
|
45
|
+
"default": "./dist/gate.js"
|
|
46
|
+
},
|
|
47
|
+
"./inspect": {
|
|
48
|
+
"types": "./dist/inspect.d.ts",
|
|
49
|
+
"import": "./dist/inspect.js",
|
|
50
|
+
"default": "./dist/inspect.js"
|
|
51
|
+
}
|
|
32
52
|
},
|
|
33
53
|
"main": "./dist/index.js",
|
|
34
54
|
"module": "./dist/index.js",
|
|
@@ -38,10 +58,10 @@
|
|
|
38
58
|
"node": ">=24.0.0"
|
|
39
59
|
},
|
|
40
60
|
"dependencies": {
|
|
41
|
-
"@voltro/database": "0.
|
|
42
|
-
"@voltro/env": "0.
|
|
43
|
-
"@voltro/logger": "0.
|
|
44
|
-
"@voltro/protocol": "0.
|
|
61
|
+
"@voltro/database": "0.87.0",
|
|
62
|
+
"@voltro/env": "0.87.0",
|
|
63
|
+
"@voltro/logger": "0.87.0",
|
|
64
|
+
"@voltro/protocol": "0.87.0",
|
|
45
65
|
"jose": "^6.2.12"
|
|
46
66
|
},
|
|
47
67
|
"peerDependencies": {
|