hotpipe 0.1.0 → 0.10.0

package/dist/server/index.js

@@ -1,103 +1,243 @@
 import { SignJWT } from 'jose';
-const DEFAULT_BROKER_URL = 'https://api.hotpipe.dev';
+import { DEFAULT_TOKEN_EXPIRY_SECONDS } from '../constants';
+import { SDK_VERSION } from '../version';
+import { parseSecret } from './parse-secret';
+const DEFAULT_API_URL = 'https://api.hotpipe.dev';
 /**
- * Creates a typed server-side publisher for emitting events to the broker
+ * Derives a publish-specific auth token from the shared secret via HMAC.
+ * This ensures the raw secret is never sent over the wire as a Bearer token.
+ */
+async function derivePublishToken(apiKey) {
+    const encoder = new TextEncoder();
+    const key = await crypto.subtle.importKey('raw', encoder.encode(apiKey), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const signature = await crypto.subtle.sign('HMAC', key, encoder.encode('hotpipe-publish-v1'));
+    return Array.from(new Uint8Array(signature))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Creates a typed server-side publisher for emitting events to the hotpipe API
  * from API routes, server actions, webhooks, cron jobs, etc.
  *
  * ```ts
- * const realtime = createRealtimePublisher({
- *   apiKey: process.env.HOTPIPE_API_KEY!,
+ * const realtime = createPipePublisher({
+ *   secret: process.env.HOTPIPE_SECRET!,
  *   events: realtimeEvents,
  * });
  *
- * await realtime.publish('general', 'message.created', { ... });
+ * const teamChat = realtime.pipe('team-chat');
+ * await teamChat.publish('message.created', { ... });
  * ```
  */
-export function createRealtimePublisher(config) {
-    const brokerUrl = config.brokerUrl ?? DEFAULT_BROKER_URL;
-    const headers = {
-        'Content-Type': 'application/json',
-        Authorization: `Bearer ${config.apiKey}`,
-    };
+export function createPipePublisher(config) {
+    const { projectId, apiKey } = parseSecret(config.secret);
+    const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
+    let cachedHeaders = null;
+    async function getHeaders() {
+        if (!cachedHeaders) {
+            const publishToken = await derivePublishToken(apiKey);
+            cachedHeaders = {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${publishToken}`,
+                'X-Hotpipe-SDK': SDK_VERSION,
+            };
+        }
+        return cachedHeaders;
+    }
+    async function publishToApi(pipe, event, data, options) {
+        const schema = config.events[event];
+        if (schema) {
+            schema.parse(data);
+        }
+        const body = { projectId, pipe, event, data };
+        if (options?.sender) {
+            body.sender = options.sender;
+        }
+        const res = await fetch(`${apiUrl}/publish`, {
+            method: 'POST',
+            headers: await getHeaders(),
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            throw new Error(`hotpipe publish failed: ${res.status} ${await res.text()}`);
+        }
+    }
     return {
         /**
-         * Publish a single event to a channel.
-         */
-        async publish(channel, event, data) {
-            const schema = config.events[event];
-            if (schema) {
-                schema.parse(data);
-            }
-            const res = await fetch(`${brokerUrl}/publish`, {
-                method: 'POST',
-                headers,
-                body: JSON.stringify({ channel, event, data }),
-            });
-            if (!res.ok) {
-                throw new Error(`hotpipe publish failed: ${res.status} ${await res.text()}`);
-            }
-        },
-        /**
-         * Publish multiple events in a single HTTP request.
+         * Get a reference to a pipe. Returns a `{ publish }` object with
+         * the same signature as the client-side `usePipe` publish function.
+         *
+         * ```ts
+         * const teamChat = realtime.pipe('team-chat');
+         * await teamChat.publish('message.created', { ... });
+         * ```
          */
-        async publishBatch(events) {
-            const res = await fetch(`${brokerUrl}/publish/batch`, {
-                method: 'POST',
-                headers,
-                body: JSON.stringify({ events }),
-            });
-            if (!res.ok) {
-                throw new Error(`hotpipe batch publish failed: ${res.status} ${await res.text()}`);
-            }
+        pipe(pipe) {
+            return {
+                async publish(event, data, options) {
+                    return publishToApi(pipe, event, data, options);
+                },
+            };
         },
     };
 }
 /**
- * Creates a Next.js-compatible route handler for client auth.
- * The client SDK calls this endpoint to get a signed token before
- * opening the WebSocket connection to the broker.
+ * Creates a Next.js-compatible catch-all route handler for hotpipe.
+ * Mount this at `app/api/realtime/[...all]/route.ts` and the SDK
+ * handles the rest.
  *
  * ```ts
- * // app/api/realtime/auth/route.ts
- * export const POST = createAuthHandler({
- *   secret: process.env.BROKER_SIGNING_SECRET!,
+ * // app/api/realtime/[...all]/route.ts
+ * export const { POST } = createPipeHandler({
+ *   secret: process.env.HOTPIPE_SECRET!,
  *   authorize: async (req) => {
- *     const session = await getServerSession();
+ *     const { session } = await getAuth(req);
  *     if (!session) return null;
  *     return {
- *       userId: session.user.id,
- *       channels: {
- *         general: ['subscribe', 'publish'],
- *         [`user-${session.user.id}`]: ['subscribe'],
+ *       userId: session.userId,
+ *       pipes: {
+ *         global: { subscribe: true, publish: true },
+ *         [`user-${session.userId}`]: { subscribe: true },
  *       },
  *     };
  *   },
  * });
  * ```
  */
-export function createAuthHandler(handlerConfig) {
-    const encodedSecret = new TextEncoder().encode(handlerConfig.secret);
-    const expiry = handlerConfig.tokenExpiry || 3600;
-    return async (req) => {
+export function createPipeHandler(handlerConfig) {
+    const { projectId, apiKey } = parseSecret(handlerConfig.secret);
+    const encodedApiKey = new TextEncoder().encode(apiKey);
+    const expiry = handlerConfig.tokenExpiry || DEFAULT_TOKEN_EXPIRY_SECONDS;
+    async function handleAuth(req) {
         try {
             const result = await handlerConfig.authorize(req);
             if (!result) {
                 return Response.json({ error: 'Unauthorized' }, { status: 401 });
             }
+            // Transform { subscribe?: boolean, publish?: boolean } to string arrays
+            // for the API wire format
+            const permissions = {};
+            for (const [pipe, perms] of Object.entries(result.pipes)) {
+                const arr = [];
+                if (perms.subscribe)
+                    arr.push('subscribe');
+                if (perms.publish)
+                    arr.push('publish');
+                permissions[pipe] = arr;
+            }
             const token = await new SignJWT({
-                channels: Object.keys(result.channels),
-                permissions: result.channels,
+                projectId,
+                pipes: Object.keys(result.pipes),
+                permissions,
             })
                 .setSubject(result.userId)
                 .setIssuedAt()
                 .setExpirationTime(`${expiry}s`)
                 .setProtectedHeader({ alg: 'HS256' })
-                .sign(encodedSecret);
+                .sign(encodedApiKey);
             return Response.json({ token });
         }
         catch {
             return Response.json({ error: 'Internal error' }, { status: 500 });
         }
+    }
+    async function handler(req) {
+        const url = new URL(req.url);
+        if (url.pathname.endsWith('/auth')) {
+            return handleAuth(req);
+        }
+        return Response.json({ error: 'Not found' }, { status: 404 });
+    }
+    return { POST: handler };
+}
+/**
+ * Creates a server-side admin client for revoking pipe access.
+ *
+ * ```ts
+ * const pipeAdmin = createPipeAdmin({
+ *   secret: process.env.HOTPIPE_SECRET!,
+ * });
+ *
+ * await pipeAdmin.revoke('user-123', 'room-xyz');
+ * await pipeAdmin.revokeAll('user-123');
+ * ```
+ */
+export function createPipeAdmin(config) {
+    const { projectId, apiKey } = parseSecret(config.secret);
+    const apiUrl = config.apiUrl ?? DEFAULT_API_URL;
+    let cachedHeaders = null;
+    async function getHeaders() {
+        if (!cachedHeaders) {
+            const publishToken = await derivePublishToken(apiKey);
+            cachedHeaders = {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${publishToken}`,
+                'X-Hotpipe-SDK': SDK_VERSION,
+            };
+        }
+        return cachedHeaders;
+    }
+    async function postRevoke(body) {
+        const res = await fetch(`${apiUrl}/revoke`, {
+            method: 'POST',
+            headers: await getHeaders(),
+            body: JSON.stringify({ projectId, ...body }),
+        });
+        if (!res.ok) {
+            throw new Error(`hotpipe revoke failed: ${res.status} ${await res.text()}`);
+        }
+    }
+    async function postBatchRevoke(body) {
+        const res = await fetch(`${apiUrl}/revoke/batch`, {
+            method: 'POST',
+            headers: await getHeaders(),
+            body: JSON.stringify({ projectId, ...body }),
+        });
+        if (!res.ok) {
+            throw new Error(`hotpipe batch revoke failed: ${res.status} ${await res.text()}`);
+        }
+    }
+    return {
+        /**
+         * Revoke access to one or more pipes for a user.
+         *
+         * ```ts
+         * await pipeAdmin.revoke('user-123', 'room-xyz');
+         * await pipeAdmin.revoke('user-123', ['room-xyz', 'room-abc']);
+         * ```
+         */
+        async revoke(userId, pipe, options) {
+            if (Array.isArray(pipe)) {
+                const revocations = pipe.map((p) => ({ userId, pipe: p }));
+                await postBatchRevoke({ revocations, ttl: options?.ttl });
+            }
+            else {
+                await postRevoke({ userId, pipe, ttl: options?.ttl });
+            }
+        },
+        /**
+         * Revoke all pipe access for a user (e.g., account suspension).
+         *
+         * ```ts
+         * await pipeAdmin.revokeAll('user-123');
+         * ```
+         */
+        async revokeAll(userId, options) {
+            await postRevoke({ userId, allPipes: true, ttl: options?.ttl });
+        },
+        /**
+         * Batch-revoke access for multiple user/pipe combinations.
+         *
+         * ```ts
+         * await pipeAdmin.revokeBatch([
+         *   { userId: 'user-123', pipe: 'room-xyz' },
+         *   { userId: 'user-456', pipe: 'room-xyz' },
+         * ]);
+         * ```
+         */
+        async revokeBatch(revocations, options) {
+            await postBatchRevoke({ revocations, ttl: options?.ttl });
+        },
     };
 }
 //# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAa/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAqB,MAK3D;IACC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEzD,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC;IAEF,OAAO;QACL;;WAEG;QACH,KAAK,CAAC,OAAO,CACX,OAAe,EACf,KAAQ,EACR,IAAmB;YAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,UAAU,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC/C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,YAAY,CAChB,MAIE;YAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,gBAAgB,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,iBAAiB,CAAC,aAIjC;IACC,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,IAAI,IAAI,CAAC;IAEjD,OAAO,KAAK,EAAE,GAAY,EAAqB,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACtC,WAAW,EAAE,MAAM,CAAC,QAAQ;aAC7B,CAAC;iBACC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;iBACzB,WAAW,EAAE;iBACb,iBAAiB,CAAC,GAAG,MAAM,GAAG,CAAC;iBAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;iBACpC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAG/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAgC7C,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAE9F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAqB,MAKvD;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;IAChD,IAAI,aAAa,GAAkC,IAAI,CAAC;IAExD,KAAK,UAAU,UAAU;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACtD,aAAa,GAAG;gBACd,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,YAAY,EAAE;gBACvC,eAAe,EAAE,WAAW;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,KAAQ,EACR,IAAmB,EACnB,OAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,GAA4B,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEvE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,UAAU,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO;QACL;;;;;;;;WAQG;QACH,IAAI,CAAC,IAAY;YACf,OAAO;gBACL,KAAK,CAAC,OAAO,CACX,KAAQ,EACR,IAAmB,EACnB,OAAwB;oBAExB,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,iBAAiB,CAAC,aAIjC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,IAAI,4BAA4B,CAAC;IAEzE,KAAK,UAAU,UAAU,CAAC,GAAY;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,wEAAwE;YACxE,0BAA0B;YAC1B,MAAM,WAAW,GAA6B,EAAE,CAAC;YAEjD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,GAAG,GAAa,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,SAAS;oBAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,OAAO;oBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvC,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YAC1B,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC;gBAC9B,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAChC,WAAW;aACZ,CAAC;iBACC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;iBACzB,WAAW,EAAE;iBACb,iBAAiB,CAAC,GAAG,MAAM,GAAG,CAAC;iBAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;iBACpC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,GAAY;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAkBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,MAI/B;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;IAChD,IAAI,aAAa,GAAkC,IAAI,CAAC;IAExD,KAAK,UAAU,UAAU;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACtD,aAAa,GAAG;gBACd,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,YAAY,EAAE;gBACvC,eAAe,EAAE,WAAW;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,IAA6B;QACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,UAAU,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,IAA6B;QAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,UAAU,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,OAAO;QACL;;;;;;;WAOG;QACH,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAAuB,EAAE,OAAuB;YAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3D,MAAM,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED;;;;;;WAMG;QACH,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAuB;YACrD,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED;;;;;;;;;WASG;QACH,KAAK,CAAC,WAAW,CAAC,WAA8B,EAAE,OAAuB;YACvE,MAAM,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/parse-secret.d.ts

@@ -0,0 +1,5 @@
+export declare function parseSecret(secret: string): {
+    projectId: string;
+    apiKey: string;
+};
+//# sourceMappingURL=parse-secret.d.ts.map

package/dist/server/parse-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-secret.d.ts","sourceRoot":"","sources":["../../src/server/parse-secret.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAMjF"}

package/dist/server/parse-secret.js

@@ -0,0 +1,8 @@
+export function parseSecret(secret) {
+    const match = secret.match(/^hp_([a-zA-Z0-9]{8})_([a-zA-Z0-9]{32})$/);
+    if (!match || !match[1]) {
+        throw new Error('Invalid hotpipe secret format. Expected: hp_<id>_<key>');
+    }
+    return { projectId: match[1], apiKey: secret };
+}
+//# sourceMappingURL=parse-secret.js.map

package/dist/server/parse-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-secret.js","sourceRoot":"","sources":["../../src/server/parse-secret.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const SDK_VERSION = "0.10.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,WAAW,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const SDK_VERSION = '0.10.0';
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hotpipe",
-  "version": "0.1.0",
-  "description": "Type-safe real-time event broker SDK for React and Next.js",
+  "version": "0.10.0",
+  "description": "Type-safe real-time events for React and Next.js",
   "license": "MIT",
   "type": "module",
   "keywords": [
@@ -10,7 +10,7 @@
     "react",
     "hooks",
     "pubsub",
-    "event-broker",
+    "events",
     "nextjs",
     "type-safe",
     "zod"
@@ -40,7 +40,7 @@
     "reset": "npm run clean && rm -rf node_modules"
   },
   "dependencies": {
-    "jose": "^5.0.0"
+    "jose": "^6.1.3"
   },
   "peerDependencies": {
     "react": ">=18",
@@ -48,7 +48,7 @@
   },
   "devDependencies": {
     "@pepper/tsconfig": "1.0.0",
-    "@types/react": ">=18",
-    "typescript": "^5.0.0"
+    "@types/react": ">=19",
+    "typescript": "^5.9.3"
   }
 }