entity-server-client 0.2.5 → 0.3.0

package/src/packet.ts

@@ -0,0 +1,84 @@
+// @ts-ignore
+import { xchacha20poly1305 } from "@noble/ciphers/chacha";
+// @ts-ignore
+import { sha256 } from "@noble/hashes/sha2";
+// @ts-ignore
+import { hkdf } from "@noble/hashes/hkdf";
+
+export const PACKET_KEY_SIZE = 32;
+export const PACKET_MAGIC_MIN = 2;
+export const PACKET_MAGIC_RANGE = 14;
+export const PACKET_NONCE_SIZE = 24;
+export const PACKET_TAG_SIZE = 16;
+export const PACKET_HKDF_SALT = "entity-server:hkdf:v1";
+export const PACKET_INFO_LABEL = "entity-server:packet-encryption";
+
+function toUint8Array(data: ArrayBuffer | Uint8Array): Uint8Array {
+    return data instanceof Uint8Array ? data : new Uint8Array(data);
+}
+
+export function derivePacketKey(
+    source: string,
+    infoLabel = PACKET_INFO_LABEL,
+): Uint8Array {
+    return hkdf(
+        sha256,
+        new TextEncoder().encode(source),
+        new TextEncoder().encode(PACKET_HKDF_SALT),
+        new TextEncoder().encode(infoLabel),
+        PACKET_KEY_SIZE,
+    );
+}
+
+export function packetMagicLenFromKey(
+    key: ArrayBuffer | Uint8Array,
+    magicMin = PACKET_MAGIC_MIN,
+    magicRange = PACKET_MAGIC_RANGE,
+): number {
+    const keyBytes = toUint8Array(key);
+    if (keyBytes.length < PACKET_KEY_SIZE) return magicMin;
+    return magicMin + (keyBytes[PACKET_KEY_SIZE - 1]! % magicRange);
+}
+
+export function encryptPacket(
+    plaintext: ArrayBuffer | Uint8Array,
+    key: ArrayBuffer | Uint8Array,
+    magicMin = PACKET_MAGIC_MIN,
+    magicRange = PACKET_MAGIC_RANGE,
+): Uint8Array {
+    const plaintextBytes = toUint8Array(plaintext);
+    const keyBytes = toUint8Array(key);
+    const magicLen = packetMagicLenFromKey(keyBytes, magicMin, magicRange);
+    const magic = crypto.getRandomValues(new Uint8Array(magicLen));
+    const nonce = crypto.getRandomValues(new Uint8Array(PACKET_NONCE_SIZE));
+    const cipher = xchacha20poly1305(keyBytes, nonce);
+    const ciphertext = cipher.encrypt(plaintextBytes);
+    const result = new Uint8Array(
+        magicLen + PACKET_NONCE_SIZE + ciphertext.length,
+    );
+
+    result.set(magic, 0);
+    result.set(nonce, magicLen);
+    result.set(ciphertext, magicLen + PACKET_NONCE_SIZE);
+    return result;
+}
+
+export function decryptPacket(
+    buffer: ArrayBuffer | Uint8Array,
+    key: ArrayBuffer | Uint8Array,
+    magicMin = PACKET_MAGIC_MIN,
+    magicRange = PACKET_MAGIC_RANGE,
+): Uint8Array {
+    const data = toUint8Array(buffer);
+    const keyBytes = toUint8Array(key);
+    const magicLen = packetMagicLenFromKey(keyBytes, magicMin, magicRange);
+
+    if (data.length < magicLen + PACKET_NONCE_SIZE + PACKET_TAG_SIZE) {
+        throw new Error("Encrypted packet too short");
+    }
+
+    const nonce = data.slice(magicLen, magicLen + PACKET_NONCE_SIZE);
+    const ciphertext = data.slice(magicLen + PACKET_NONCE_SIZE);
+    const cipher = xchacha20poly1305(keyBytes, nonce);
+    return cipher.decrypt(ciphertext);
+}

package/src/types.ts

@@ -129,7 +129,11 @@ export interface RegisterPushDeviceOptions {
 export interface EntityServerClientOptions {
     baseUrl?: string;
     token?: string;
-    packetMagicLen?: number;
+    /**
+     * 익명 패킷 암호화용 부트스트랩 토큰입니다.
+     * entity-app-server의 `/v1/health` 응답으로 설정되는 용도입니다.
+     */
+    anonymousPacketToken?: string;
     /**
      * `true`이면 인증된 POST/PUT 요청 바디를 XChaCha20-Poly1305로 암호화합니다.
      *
@@ -184,3 +188,91 @@ export interface EntityServerClientOptions {
      */
     hmacSecret?: string;
 }
+
+// ─── SMTP ─────────────────────────────────────────────────────────────────────
+
+/** `smtpSend()` 요청 파라미터입니다. */
+export interface SmtpSendRequest {
+    /** provider 식별자 (생략 시 기본 provider 사용) */
+    provider?: string;
+    from?: string;
+    to: string[];
+    cc?: string[];
+    bcc?: string[];
+    subject?: string;
+    body_text?: string;
+    body_html?: string;
+    /** 이메일 템플릿 이름 */
+    template_name?: string;
+    /** 템플릿 변수 */
+    template_data?: Record<string, unknown>;
+    /** 첨부 파일 seq 배열 */
+    attachments?: number[];
+    reply_to?: string;
+    ref_entity?: string;
+    ref_seq?: number;
+}
+
+// ─── Utils ────────────────────────────────────────────────────────────────────
+
+/** `qrcode()` / `qrcodeBase64()` / `qrcodeText()` 공통 옵션 */
+export interface QRCodeOptions {
+    /** PNG 크기 픽셀 (기본 256, 최대 2048) */
+    size?: number;
+    /** 오류 복구 수준 (기본 `"medium"`) */
+    error_correction?: "low" | "medium" | "high" | "highest";
+    /** 전경색 hex (기본 `"#000000"`) */
+    fg_color?: string;
+    /** 배경색 hex (기본 `"#ffffff"`) */
+    bg_color?: string;
+}
+
+/** `barcode()` 옵션 */
+export interface BarcodeOptions {
+    /** 바코드 타입 (기본 `"code128"`) */
+    type?:
+        | "code128"
+        | "code39"
+        | "ean13"
+        | "ean8"
+        | "codabar"
+        | "datamatrix"
+        | "itf";
+    /** 너비 픽셀 (기본 300, 최대 2048) */
+    width?: number;
+    /** 높이 픽셀 (기본 100, 최대 2048) */
+    height?: number;
+}
+
+/** `pdf2png()` 옵션 */
+export interface Pdf2PngOptions {
+    /** 해상도 DPI (기본 300) */
+    dpi?: number;
+    /** 시작 페이지 1-based (기본: 첫 번째 페이지) */
+    firstPage?: number;
+    /** 종료 페이지 1-based (기본: 마지막 페이지) */
+    lastPage?: number;
+}
+
+// ─── 파일 ─────────────────────────────────────────────────────────────────────
+
+/** 파일 메타 정보 */
+export interface FileMeta {
+    uuid: string;
+    original_name: string;
+    size: number;
+    mime_type: string;
+    entity: string;
+    ref_seq?: number;
+    is_public?: boolean;
+    created_time: string;
+    url?: string;
+}
+
+/** `fileUpload()` 옵션 */
+export interface FileUploadOptions {
+    /** 파일에 연결할 ref_seq */
+    refSeq?: number;
+    /** 공개 파일 여부 (기본 서버 설정 따름) */
+    isPublic?: boolean;
+}

package/tests/packet.test.mjs

@@ -0,0 +1,50 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+
+import {
+    derivePacketKey,
+    packetMagicLenFromKey,
+    encryptPacket,
+    decryptPacket,
+    PACKET_MAGIC_MIN,
+    PACKET_MAGIC_RANGE,
+    PACKET_NONCE_SIZE,
+    PACKET_TAG_SIZE,
+} from "../dist/packet.js";
+
+test("packet core roundtrips plaintext", () => {
+    const key = derivePacketKey("packet-test-token");
+    const payload = new TextEncoder().encode(
+        JSON.stringify({ ok: true, message: "hello" }),
+    );
+
+    const encrypted = encryptPacket(payload, key);
+    const decrypted = decryptPacket(encrypted, key);
+
+    assert.equal(
+        new TextDecoder().decode(decrypted),
+        JSON.stringify({ ok: true, message: "hello" }),
+    );
+});
+
+test("packet core derives a stable magic length from key", () => {
+    const key = derivePacketKey("packet-test-token");
+    const magicLen = packetMagicLenFromKey(key);
+
+    assert.ok(magicLen >= PACKET_MAGIC_MIN);
+    assert.ok(magicLen < PACKET_MAGIC_MIN + PACKET_MAGIC_RANGE);
+    assert.equal(magicLen, packetMagicLenFromKey(key));
+});
+
+test("encrypted packet has expected minimum shape", () => {
+    const key = derivePacketKey("packet-test-token");
+    const payload = new TextEncoder().encode("abc");
+    const magicLen = packetMagicLenFromKey(key);
+
+    const encrypted = encryptPacket(payload, key);
+
+    assert.ok(
+        encrypted.length >=
+            magicLen + PACKET_NONCE_SIZE + PACKET_TAG_SIZE + payload.length,
+    );
+});

package/dist/EntityServerClient.d.ts

@@ -1,203 +0,0 @@
-import type { EntityHistoryRecord, EntityListParams, EntityListResult, EntityQueryRequest, EntityServerClientOptions, RegisterPushDeviceOptions } from "./types";
-export declare class EntityServerClient {
-    private baseUrl;
-    private token;
-    private apiKey;
-    private hmacSecret;
-    private packetMagicLen;
-    private encryptRequests;
-    private activeTxId;
-    private keepSession;
-    private refreshBuffer;
-    private onTokenRefreshed?;
-    private onSessionExpired?;
-    private _sessionRefreshToken;
-    private _refreshTimer;
-    /**
-     * EntityServerClient 인스턴스를 생성합니다.
-     *
-     * 기본값:
-     * - `baseUrl`: `VITE_ENTITY_SERVER_URL` 또는 `http://localhost:47200`
-     * - `packetMagicLen`: `VITE_ENTITY_SERVER_PACKET_MAGIC_LEN` 또는 `4`
-     */
-    constructor(options?: EntityServerClientOptions);
-    /** baseUrl, token, packetMagicLen, encryptRequests 값을 런타임에 갱신합니다. */
-    configure(options: Partial<EntityServerClientOptions>): void;
-    /** 인증 요청에 사용할 JWT Access Token을 설정합니다. */
-    setToken(token: string): void;
-    /** HMAC 인증용 API Key를 설정합니다. */
-    setApiKey(apiKey: string): void;
-    /** HMAC 인증용 시크릿을 설정합니다. */
-    setHmacSecret(secret: string): void;
-    /** 암호화 패킷 magic 길이(`packet_magic_len`)를 설정합니다. */
-    setPacketMagicLen(length: number): void;
-    /** 현재 암호화 패킷 magic 길이를 반환합니다. */
-    getPacketMagicLen(): number;
-    /** @internal 자동 토큰 갱신 타이머를 시작합니다. */
-    private _scheduleKeepSession;
-    /** @internal 자동 갱신 타이머를 정리합니다. */
-    private _clearRefreshTimer;
-    /**
-     * 세션 유지 타이머를 중지합니다.
-     * `logout()` 호출 시 자동으로 중지되며, 직접 호출이 필요한 경우는 드뭅니다.
-     */
-    stopKeepSession(): void;
-    /**
-     * 서버 헬스 체크를 수행하고 패킷 암호화 활성 여부를 자동으로 감지합니다.
-     *
-     * 서버가 `packet_encryption: true`를 응답하면 이후 모든 요청에 암호화가 자동 적용됩니다.
-     *
-     * ```ts
-     * await client.checkHealth();
-     * await client.login(email, password);
-     * ```
-     */
-    checkHealth(): Promise<{
-        ok: boolean;
-        packet_encryption?: boolean;
-    }>;
-    /** 로그인 후 `access_token`을 내부 상태에 저장합니다. */
-    login(email: string, password: string): Promise<{
-        access_token: string;
-        refresh_token: string;
-        expires_in: number;
-    }>;
-    /** Refresh Token으로 Access Token을 재발급받아 내부 토큰을 교체합니다. */
-    refreshToken(refreshToken: string): Promise<{
-        access_token: string;
-        expires_in: number;
-    }>;
-    /**
-     * 서버에 로그아웃을 요청하고 내부 토큰을 초기화합니다.
-     * refresh_token을 서버에 전달해 무효화합니다.
-     */
-    logout(refreshToken: string): Promise<{
-        ok: boolean;
-    }>;
-    /** 트랜잭션을 시작하고 활성 트랜잭션 ID를 저장합니다. */
-    transStart(): Promise<string>;
-    /** 활성 트랜잭션(또는 전달된 transactionId)을 롤백합니다. */
-    transRollback(transactionId?: string): Promise<{
-        ok: boolean;
-    }>;
-    /**
-     * 활성 트랜잭션(또는 전달된 transactionId)을 커밋합니다.
-     *
-     * @returns `results` 배열: commit된 각 작업의 `entity`, `action`, `seq`
-     */
-    transCommit(transactionId?: string): Promise<{
-        ok: boolean;
-        results: Array<{
-            entity: string;
-            action: string;
-            seq: number;
-        }>;
-    }>;
-    /** 시퀀스 ID로 엔티티 단건을 조회합니다. */
-    get<T = unknown>(entity: string, seq: number, opts?: {
-        skipHooks?: boolean;
-    }): Promise<{
-        ok: boolean;
-        data: T;
-    }>;
-    /** 조건으로 엔티티 단건을 조회합니다. data 컬럼을 완전히 복호화하여 반환합니다. */
-    find<T = unknown>(entity: string, conditions?: Record<string, unknown>, opts?: {
-        skipHooks?: boolean;
-    }): Promise<{
-        ok: boolean;
-        data: T;
-    }>;
-    /** 페이지네이션/정렬/필터 조건으로 엔티티 목록을 조회합니다. */
-    list<T = unknown>(entity: string, params?: EntityListParams): Promise<{
-        ok: boolean;
-        data: EntityListResult<T>;
-    }>;
-    /**
-     * 엔티티 총 건수를 조회합니다.
-     *
-     * @param conditions 필터 조건 (예: `{ status: "active" }`)
-     */
-    count(entity: string, conditions?: Record<string, unknown>): Promise<{
-        ok: boolean;
-        count: number;
-    }>;
-    /**
-     * 커스텀 SQL로 엔티티를 조회합니다.
-     *
-     * SELECT 전용이며 인덱스 테이블만 조회 가능합니다. JOIN 지원.
-     */
-    query<T = unknown>(entity: string, req: EntityQueryRequest): Promise<{
-        ok: boolean;
-        data: {
-            items: T[];
-            count: number;
-        };
-    }>;
-    /** 엔티티 데이터를 생성/수정(Submit)합니다. `seq`가 없으면 INSERT, 있으면 UPDATE입니다. */
-    submit(entity: string, data: Record<string, unknown>, opts?: {
-        transactionId?: string;
-        skipHooks?: boolean;
-    }): Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /** 시퀀스 ID로 엔티티를 삭제합니다(`hard=true`면 하드 삭제, 기본은 소프트 삭제). */
-    delete(entity: string, seq: number, opts?: {
-        transactionId?: string;
-        hard?: boolean;
-        skipHooks?: boolean;
-    }): Promise<{
-        ok: boolean;
-        deleted: number;
-    }>;
-    /** 엔티티 단건의 변경 이력을 조회합니다. */
-    history<T = unknown>(entity: string, seq: number, params?: Pick<EntityListParams, "page" | "limit">): Promise<{
-        ok: boolean;
-        data: EntityListResult<EntityHistoryRecord<T>>;
-    }>;
-    /** 특정 이력 시점으로 엔티티를 롤백합니다. */
-    rollback(entity: string, historySeq: number): Promise<{
-        ok: boolean;
-    }>;
-    /** 푸시 관련 엔티티로 payload를 전송(Submit)합니다. */
-    push(pushEntity: string, payload: Record<string, unknown>, opts?: {
-        transactionId?: string;
-    }): Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /** 푸시 로그 엔티티 목록을 조회합니다. */
-    pushLogList<T = unknown>(params?: EntityListParams): Promise<{
-        ok: boolean;
-        data: EntityListResult<T>;
-    }>;
-    /** 계정의 푸시 디바이스를 등록합니다. */
-    registerPushDevice(accountSeq: number, deviceId: string, pushToken: string, opts?: RegisterPushDeviceOptions): Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /** 디바이스 레코드의 푸시 토큰을 갱신합니다. */
-    updatePushDeviceToken(deviceSeq: number, pushToken: string, opts?: {
-        pushEnabled?: boolean;
-        transactionId?: string;
-    }): Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /** 디바이스의 푸시 수신을 비활성화합니다. */
-    disablePushDevice(deviceSeq: number, opts?: {
-        transactionId?: string;
-    }): Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /**
-     * 요청 바디를 파싱합니다.
-     * `application/octet-stream`이면 XChaCha20-Poly1305 복호화, 그 외는 JSON 파싱합니다.
-     *
-     * @param requireEncrypted `true`이면 암호화된 요청만 허용합니다.
-     */
-    readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
-    private get _reqOpts();
-    private request;
-}

package/dist/client/hmac.d.ts

@@ -1,8 +0,0 @@
-/**
- * HMAC-SHA256 서명 헤더를 생성합니다.
- *
- * 서명 대상: `METHOD|PATH|TIMESTAMP|NONCE|BODY`
- *
- * @returns `X-API-Key`, `X-Timestamp`, `X-Nonce`, `X-Signature` 헤더 객체
- */
-export declare function buildHmacHeaders(method: string, path: string, bodyBytes: Uint8Array, apiKey: string, hmacSecret: string): Record<string, string>;

package/dist/client/packet.d.ts

@@ -1,22 +0,0 @@
-/**
- * 패킷 암호화 키를 유도합니다.
- * - HMAC 모드 (`hmacSecret` 유효 시): HKDF-SHA256(hmac_secret, "entity-server:packet-encryption")
- * - JWT 모드: SHA-256(jwt_token)
- */
-export declare function derivePacketKey(hmacSecret: string, token: string): Uint8Array;
-/**
- * 평문 바이트를 XChaCha20-Poly1305로 암호화합니다.
- * 포맷: [random_magic:magicLen][random_nonce:24][ciphertext+tag]
- */
-export declare function encryptPacket(plaintext: Uint8Array, key: Uint8Array, magicLen: number): Uint8Array;
-/**
- * XChaCha20-Poly1305 패킷을 복호화해 JSON 객체로 변환합니다.
- * 포맷: [magic:magicLen][nonce:24][ciphertext+tag]
- */
-export declare function decryptPacket<T>(buffer: ArrayBuffer, key: Uint8Array, magicLen: number): T;
-/**
- * 요청 바디를 파싱합니다. `application/octet-stream`이면 복호화, 그 외는 JSON 파싱합니다.
- *
- * @param requireEncrypted `true`이면 암호화된 요청만 허용합니다.
- */
-export declare function parseRequestBody<T>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType: string, requireEncrypted: boolean, key: Uint8Array, magicLen: number): T;

package/dist/client/request.d.ts

@@ -1,16 +0,0 @@
-export interface RequestOptions {
-    baseUrl: string;
-    token: string;
-    apiKey: string;
-    hmacSecret: string;
-    packetMagicLen: number;
-    encryptRequests: boolean;
-}
-/**
- * Entity Server에 HTTP 요청을 보냅니다.
- *
- * - `encryptRequests` 활성화 시 인증된 POST 바디를 자동 암호화합니다.
- * - 응답이 `application/octet-stream`이면 자동 복호화합니다.
- * - JSON 응답의 `ok`가 false이면 에러를 던집니다.
- */
-export declare function entityRequest<T>(opts: RequestOptions, method: string, path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;

package/dist/client/utils.d.ts

@@ -1,4 +0,0 @@
-/** Vite 환경변수(`import.meta.env`)에서 값을 읽습니다. */
-export declare function readEnv(name: string): string | undefined;
-/** 쿼리 파라미터 객체를 URL 쿼리 문자열로 변환합니다. `orderBy` 키는 `order_by`로 변환됩니다. */
-export declare function buildQuery(params: Record<string, unknown>): string;

package/dist/hooks/useEntityServer.d.ts

@@ -1,63 +0,0 @@
-import { EntityServerClient, type EntityQueryRequest, type EntityServerClientOptions } from "../index";
-export interface UseEntityServerOptions extends EntityServerClientOptions {
-    singleton?: boolean;
-    tokenResolver?: () => string | undefined | null;
-    /**
-     * 페이지 새로고침 후 로그인 상태를 복원할 때 사용합니다.
-     * 이 값이 있으면 마운트 시 `client.refreshToken()`을 호출해 새 access_token을 발급받습니다.
-     * `keepSession: true`와 함께 사용하면 세션 유지 타이머도 재시작됩니다.
-     * 갱신 성공 시 `onTokenRefreshed` 콜백이 호출됩니다.
-     */
-    resumeSession?: string;
-}
-export interface UseEntityServerResult {
-    /** EntityServerClient 인스턴스 (read 전용 메서드 직접 호출 시 사용) */
-    client: EntityServerClient;
-    /** submit 또는 delete 진행 중 여부 */
-    isPending: boolean;
-    /** 마지막 mutation 에러 (없으면 null) */
-    error: Error | null;
-    /** 에러·결과 상태 초기화 */
-    reset: () => void;
-    /** entity 데이터 생성/수정 (seq 없으면 INSERT, 있으면 UPDATE) */
-    submit: (entity: string, data: Record<string, unknown>, opts?: {
-        transactionId?: string;
-        skipHooks?: boolean;
-    }) => Promise<{
-        ok: boolean;
-        seq: number;
-    }>;
-    /** entity 데이터 삭제 */
-    del: (entity: string, seq: number, opts?: {
-        transactionId?: string;
-        hard?: boolean;
-        skipHooks?: boolean;
-    }) => Promise<{
-        ok: boolean;
-        deleted: number;
-    }>;
-    /** 커스텀 SQL 조회 */
-    query: <T = unknown>(entity: string, req: EntityQueryRequest) => Promise<{
-        ok: boolean;
-        data: {
-            items: T[];
-            count: number;
-        };
-    }>;
-}
-/**
- * React 환경에서 EntityServerClient 인스턴스와 mutation 상태를 반환합니다.
- *
- * - `singleton=true`(기본): 패키지 전역 `entityServer` 인스턴스를 사용합니다.
- * - `singleton=false`: 컴포넌트 스코프의 새 인스턴스를 생성합니다.
- *
- * @example
- * ```tsx
- * const { submit, del, isPending, error, reset } = useEntityServer();
- *
- * const handleSave = async () => {
- *     await submit("account", { name: "홍길동" });
- * };
- * ```
- */
-export declare function useEntityServer(options?: UseEntityServerOptions): UseEntityServerResult;

package/dist/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./types";
-export * from "./EntityServerClient";
-import { EntityServerClient } from "./EntityServerClient";
-export declare const entityServer: EntityServerClient;

package/dist/index.js

@@ -1,2 +0,0 @@
-function v(s){return import.meta?.env?.[s]}function R(s){return Object.entries(s).filter(([,e])=>e!=null).map(([e,t])=>`${encodeURIComponent(e==="orderBy"?"order_by":e)}=${encodeURIComponent(String(t))}`).join("&")}import{xchacha20poly1305 as E}from"@noble/ciphers/chacha";import{sha256 as S}from"@noble/hashes/sha2";import{hkdf as I}from"@noble/hashes/hkdf";function f(s,e){if(s){let t=new TextEncoder().encode("entity-server:hkdf:v1"),r=new TextEncoder().encode("entity-server:packet-encryption");return I(S,new TextEncoder().encode(s),t,r,32)}return S(new TextEncoder().encode(e))}function _(s,e,t){let r=new Uint8Array(t),n=new Uint8Array(24);crypto.getRandomValues(r),crypto.getRandomValues(n);let a=E(e,n).encrypt(s),o=new Uint8Array(t+24+a.length);return o.set(r,0),o.set(n,t),o.set(a,t+24),o}function k(s,e,t){let r=new Uint8Array(s);if(r.length<t+24+16)throw new Error("Encrypted packet too short");let n=r.slice(t,t+24),i=r.slice(t+24),o=E(e,n).decrypt(i);return JSON.parse(new TextDecoder().decode(o))}function P(s,e,t,r,n){let i=e.toLowerCase().includes("application/octet-stream");if(t&&!i)throw new Error("Encrypted request required: Content-Type must be application/octet-stream");if(i){if(s==null)throw new Error("Encrypted request body is empty");if(s instanceof ArrayBuffer)return k(s,r,n);if(s instanceof Uint8Array){let a=s.buffer.slice(s.byteOffset,s.byteOffset+s.byteLength);return k(a,r,n)}throw new Error("Encrypted request body must be ArrayBuffer or Uint8Array")}return s==null||s===""?{}:typeof s=="string"?JSON.parse(s):s}import{sha256 as U}from"@noble/hashes/sha2";import{hmac as $}from"@noble/hashes/hmac";function q(s,e,t,r,n){let i=String(Math.floor(Date.now()/1e3)),a=crypto.randomUUID(),o=new TextEncoder().encode(`${s}|${e}|${i}|${a}|`),c=new Uint8Array(o.length+t.length);c.set(o,0),c.set(t,o.length);let l=[...$(U,new TextEncoder().encode(n),c)].map(g=>g.toString(16).padStart(2,"0")).join("");return{"X-API-Key":r,"X-Timestamp":i,"X-Nonce":a,"X-Signature":l}}async function w(s,e,t,r,n=!0,i={}){let{baseUrl:a,token:o,apiKey:c,hmacSecret:p,packetMagicLen:l,encryptRequests:g}=s,T=n&&!!(c&&p),y={"Content-Type":"application/json",...i};!T&&n&&o&&(y.Authorization=`Bearer ${o}`);let u=null;if(r!=null)if(g&&n&&(o||T)&&e!=="GET"&&e!=="HEAD"){let x=f(p,o);u=_(new TextEncoder().encode(JSON.stringify(r)),x,l),y["Content-Type"]="application/octet-stream"}else u=JSON.stringify(r);if(T){let h=u instanceof Uint8Array?u:typeof u=="string"?new TextEncoder().encode(u):new Uint8Array(0);Object.assign(y,q(e,t,h,c,p))}let d=await fetch(a+t,{method:e,headers:y,...u!=null?{body:u}:{}});if((d.headers.get("Content-Type")??"").includes("application/octet-stream")){let h=f(p,o);return k(await d.arrayBuffer(),h,l)}let b=await d.json();if(!b.ok){let h=new Error(b.message??`EntityServer error (HTTP ${d.status})`);throw h.status=d.status,h}return b}var m=class{baseUrl;token;apiKey;hmacSecret;packetMagicLen;encryptRequests;activeTxId=null;keepSession;refreshBuffer;onTokenRefreshed;onSessionExpired;_sessionRefreshToken=null;_refreshTimer=null;constructor(e={}){let t=v("VITE_ENTITY_SERVER_URL"),r=v("VITE_ENTITY_SERVER_PACKET_MAGIC_LEN");this.baseUrl=(e.baseUrl??t??"http://localhost:47200").replace(/\/$/,""),this.token=e.token??"",this.apiKey=e.apiKey??"",this.hmacSecret=e.hmacSecret??"",this.packetMagicLen=e.packetMagicLen??(r?Number(r):4),this.encryptRequests=e.encryptRequests??!1,this.keepSession=e.keepSession??!1,this.refreshBuffer=e.refreshBuffer??60,this.onTokenRefreshed=e.onTokenRefreshed,this.onSessionExpired=e.onSessionExpired}configure(e){e.baseUrl&&(this.baseUrl=e.baseUrl.replace(/\/$/,"")),typeof e.token=="string"&&(this.token=e.token),typeof e.packetMagicLen=="number"&&(this.packetMagicLen=e.packetMagicLen),typeof e.encryptRequests=="boolean"&&(this.encryptRequests=e.encryptRequests),typeof e.apiKey=="string"&&(this.apiKey=e.apiKey),typeof e.hmacSecret=="string"&&(this.hmacSecret=e.hmacSecret),typeof e.keepSession=="boolean"&&(this.keepSession=e.keepSession),typeof e.refreshBuffer=="number"&&(this.refreshBuffer=e.refreshBuffer),e.onTokenRefreshed&&(this.onTokenRefreshed=e.onTokenRefreshed),e.onSessionExpired&&(this.onSessionExpired=e.onSessionExpired)}setToken(e){this.token=e}setApiKey(e){this.apiKey=e}setHmacSecret(e){this.hmacSecret=e}setPacketMagicLen(e){this.packetMagicLen=e}getPacketMagicLen(){return this.packetMagicLen}_scheduleKeepSession(e,t){this._clearRefreshTimer(),this._sessionRefreshToken=e;let r=Math.max((t-this.refreshBuffer)*1e3,0);this._refreshTimer=setTimeout(async()=>{if(this._sessionRefreshToken)try{let n=await this.refreshToken(this._sessionRefreshToken);this.onTokenRefreshed?.(n.access_token,n.expires_in),this._scheduleKeepSession(this._sessionRefreshToken,n.expires_in)}catch(n){this._clearRefreshTimer(),this.onSessionExpired?.(n instanceof Error?n:new Error(String(n)))}},r)}_clearRefreshTimer(){this._refreshTimer!==null&&(clearTimeout(this._refreshTimer),this._refreshTimer=null)}stopKeepSession(){this._clearRefreshTimer(),this._sessionRefreshToken=null}async checkHealth(){let t=await(await fetch(`${this.baseUrl}/v1/health`,{signal:AbortSignal.timeout(3e3)})).json();return t.packet_encryption&&(this.encryptRequests=!0),t}async login(e,t){let r=await this.request("POST","/v1/auth/login",{email:e,passwd:t},!1);return this.token=r.data.access_token,this.keepSession&&this._scheduleKeepSession(r.data.refresh_token,r.data.expires_in),r.data}async refreshToken(e){let t=await this.request("POST","/v1/auth/refresh",{refresh_token:e},!1);return this.token=t.data.access_token,this.keepSession&&this._scheduleKeepSession(e,t.data.expires_in),t.data}async logout(e){this.stopKeepSession();let t=await this.request("POST","/v1/auth/logout",{refresh_token:e},!1);return this.token="",t}async transStart(){let e=await this.request("POST","/v1/transaction/start",void 0,!1);return this.activeTxId=e.transaction_id,this.activeTxId}transRollback(e){let t=e??this.activeTxId;return t?(this.activeTxId=null,this.request("POST",`/v1/transaction/rollback/${t}`)):Promise.reject(new Error("No active transaction. Call transStart() first."))}transCommit(e){let t=e??this.activeTxId;return t?(this.activeTxId=null,this.request("POST",`/v1/transaction/commit/${t}`)):Promise.reject(new Error("No active transaction. Call transStart() first."))}get(e,t,r={}){let n=r.skipHooks?"?skipHooks=true":"";return this.request("GET",`/v1/entity/${e}/${t}${n}`)}find(e,t,r={}){let n=r.skipHooks?"?skipHooks=true":"";return this.request("POST",`/v1/entity/${e}/find${n}`,t??{})}list(e,t={}){let{conditions:r,fields:n,orderDir:i,orderBy:a,...o}=t,c={page:1,limit:20,...o};return a&&(c.orderBy=i==="DESC"?`-${a}`:a),n?.length&&(c.fields=n.join(",")),this.request("POST",`/v1/entity/${e}/list?${R(c)}`,r??{})}count(e,t){return this.request("POST",`/v1/entity/${e}/count`,t??{})}query(e,t){return this.request("POST",`/v1/entity/${e}/query`,t)}submit(e,t,r={}){let n=r.transactionId??this.activeTxId,i=n?{"X-Transaction-ID":n}:void 0,a=r.skipHooks?"?skipHooks=true":"";return this.request("POST",`/v1/entity/${e}/submit${a}`,t,!0,i)}delete(e,t,r={}){let n=new URLSearchParams;r.hard&&n.set("hard","true"),r.skipHooks&&n.set("skipHooks","true");let i=n.size?`?${n}`:"",a=r.transactionId??this.activeTxId,o=a?{"X-Transaction-ID":a}:void 0;return this.request("POST",`/v1/entity/${e}/delete/${t}${i}`,void 0,!0,o)}history(e,t,r={}){return this.request("GET",`/v1/entity/${e}/history/${t}?${R({page:1,limit:50,...r})}`)}rollback(e,t){return this.request("POST",`/v1/entity/${e}/rollback/${t}`)}push(e,t,r={}){return this.submit(e,t,r)}pushLogList(e={}){return this.list("push_log",e)}registerPushDevice(e,t,r,n={}){let{platform:i,deviceType:a,browser:o,browserVersion:c,pushEnabled:p=!0,transactionId:l}=n;return this.submit("account_device",{id:t,account_seq:e,push_token:r,push_enabled:p,...i?{platform:i}:{},...a?{device_type:a}:{},...o?{browser:o}:{},...c?{browser_version:c}:{}},{transactionId:l})}updatePushDeviceToken(e,t,r={}){let{pushEnabled:n=!0,transactionId:i}=r;return this.submit("account_device",{seq:e,push_token:t,push_enabled:n},{transactionId:i})}disablePushDevice(e,t={}){return this.submit("account_device",{seq:e,push_enabled:!1},{transactionId:t.transactionId})}readRequestBody(e,t="application/json",r=!1){let n=f(this.hmacSecret,this.token);return P(e,t,r,n,this.packetMagicLen)}get _reqOpts(){return{baseUrl:this.baseUrl,token:this.token,apiKey:this.apiKey,hmacSecret:this.hmacSecret,packetMagicLen:this.packetMagicLen,encryptRequests:this.encryptRequests}}request(e,t,r,n=!0,i){return w(this._reqOpts,e,t,r,n,i)}};var Y=new m;export{m as EntityServerClient,Y as entityServer};
-//# sourceMappingURL=index.js.map