pauth-js 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 pauth.me
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,125 @@
+# pauth-js
+
+> Official JavaScript/TypeScript SDK for [pauth.me](https://pauth.me)
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D18-brightgreen)]()
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.x-blue)]()
+
+## Installation
+
+```bash
+npm install github:pauth-me/pauth-js
+```
+
+## Quick Start
+
+```typescript
+import { PauthClient } from 'pauth-js';
+
+const client = new PauthClient({ apiKey: 'test_your-api-key' });
+const result = await client.verify('+819012345678');
+console.log(result.pin); // "1234"（サンドボックスでは約2秒後に返る）
+```
+
+## Sandbox Mode
+
+- APIキーが `test_` で始まる場合、サンドボックスモードで動作
+- 実際に着信はせず、約2秒後に自動でPIN=1234が返る
+- [pauth.me](https://pauth.me) でサインアップすれば無料枠（100回/月）で利用可能
+
+## API Reference
+
+### `new PauthClient(options)`
+
+| Option | Type | Required | Description |
+|--------|------|----------|-------------|
+| `apiKey` | `string` | Yes | Your API key (`test_` prefix for sandbox) |
+| `baseUrl` | `string` | No | Base URL (default: `https://pauth.me`) |
+
+### `client.authenticate(): Promise<string>`
+
+APIキーでBearer トークンを取得します。トークンはクライアント内部でキャッシュされるため、通常は直接呼び出す必要はありません。
+
+### `client.entry(callerNumber, signal?): Promise<EntryEvent>`
+
+SSEストリームで着信PINを待ち受けます。
+
+| Parameter | Type | Description |
+|-----------|------|-------------|
+| `callerNumber` | `string` | 電話番号（国際形式: `+819012345678`） |
+| `signal` | `AbortSignal` | (optional) キャンセル用シグナル |
+
+Returns: `EntryEvent` — `{ expires_in: number, callerd_number: string, pin: string | null }`
+
+### `client.apply(callerNumber, pin): Promise<boolean>`
+
+PINを照合します。
+
+| Parameter | Type | Description |
+|-----------|------|-------------|
+| `callerNumber` | `string` | 電話番号（国際形式） |
+| `pin` | `string` | PIN コード |
+
+Returns: `true` (認証成功) / `false` (PIN不一致)
+
+### `client.verify(callerNumber, options?): Promise<VerifyResult>`
+
+電話番号認証を一括実行します（authenticate → entry → apply）。
+
+| Parameter | Type | Description |
+|-----------|------|-------------|
+| `callerNumber` | `string` | 電話番号（国際形式） |
+| `options.onStep` | `function` | ステップ進捗コールバック |
+| `options.signal` | `AbortSignal` | キャンセル用シグナル |
+
+```typescript
+const result = await client.verify('+819012345678', {
+  onStep: (step) => console.log('Step:', step),
+  // step: 'authenticating' | 'waiting_for_call' | 'verifying_pin'
+});
+// result: { callerNumber: string, pin: string }
+```
+
+## Error Handling
+
+```typescript
+import {
+  PauthError, AuthenticationError, ConflictError,
+  RateLimitError, StreamError, TimeoutError, PauthAPIError
+} from 'pauth-js';
+
+try {
+  const result = await client.verify('+819012345678');
+} catch (err) {
+  if (err instanceof RateLimitError) {
+    console.log('Rate limited. Retry after:', err.retryAfter);
+  } else if (err instanceof ConflictError) {
+    console.log('Duplicate request detected');
+  } else if (err instanceof TimeoutError) {
+    console.log('Timed out waiting for call');
+  } else if (err instanceof AuthenticationError) {
+    console.log('Invalid or expired API key');
+  } else if (err instanceof PauthAPIError) {
+    console.log('API error:', err.status, err.message);
+  }
+}
+```
+
+| Error Class | Trigger |
+|-------------|---------|
+| `AuthenticationError` | 無効または期限切れのAPIキー/トークン (401) |
+| `ConflictError` | 同一番号で認証が既に進行中 (409) |
+| `RateLimitError` | レート制限超過 (429)。`err.retryAfter` (秒) を参照 |
+| `StreamError` | SSEストリームエラー |
+| `TimeoutError` | PIN待機タイムアウト |
+| `PauthAPIError` | その他のAPIエラー。`err.status` でHTTPステータスを取得 |
+
+## Examples
+
+- [examples/node-basic](./examples/node-basic/) — Node.js での基本的な使い方
+- [examples/nextjs-form](./examples/nextjs-form/) — Next.js (App Router) フォームサンプル
+
+## License
+
+MIT

package/dist/index.d.mts

@@ -0,0 +1,75 @@
+interface PauthClientOptions {
+    apiKey: string;
+    baseUrl?: string;
+}
+interface AuthResponse {
+    token: string;
+}
+interface EntryEvent {
+    expires_in: number;
+    callerd_number: string;
+    pin: string | null;
+}
+interface VerifyResult {
+    callerNumber: string;
+    pin: string;
+}
+interface VerifyOptions {
+    onStep?: (step: 'authenticating' | 'waiting_for_call' | 'verifying_pin') => void;
+    signal?: AbortSignal;
+}
+
+declare class PauthClient {
+    private apiKey;
+    private baseUrl;
+    private token;
+    private tokenExpiresAt;
+    constructor(options: PauthClientOptions);
+    /**
+     * APIキーでトークンを取得（内部キャッシュあり）
+     */
+    authenticate(): Promise<string>;
+    /**
+     * SSEストリームで PIN を待ち受ける
+     * @param callerNumber 電話番号（国際形式: +819012345678）
+     * @param signal AbortSignal for cancellation
+     */
+    entry(callerNumber: string, signal?: AbortSignal): Promise<EntryEvent>;
+    /**
+     * PIN照合
+     * @returns true: 認証成功, false: PIN不一致
+     */
+    apply(callerNumber: string, pin: string): Promise<boolean>;
+    /**
+     * 電話番号認証の一括実行（authenticate + entry + apply）
+     * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る
+     */
+    verify(callerNumber: string, options?: VerifyOptions): Promise<VerifyResult>;
+    private handleErrors;
+}
+
+declare class PauthError extends Error {
+    constructor(message: string);
+}
+declare class AuthenticationError extends PauthError {
+    constructor();
+}
+declare class ConflictError extends PauthError {
+    constructor(callerNumber: string);
+}
+declare class RateLimitError extends PauthError {
+    retryAfter: number;
+    constructor(retryAfter: number);
+}
+declare class StreamError extends PauthError {
+    constructor(message: string);
+}
+declare class TimeoutError extends PauthError {
+    constructor();
+}
+declare class PauthAPIError extends PauthError {
+    status: number;
+    constructor(status: number, message: string);
+}
+
+export { type AuthResponse, AuthenticationError, ConflictError, type EntryEvent, PauthAPIError, PauthClient, type PauthClientOptions, PauthError, RateLimitError, StreamError, TimeoutError, type VerifyOptions, type VerifyResult };

package/dist/index.d.ts

@@ -0,0 +1,75 @@
+interface PauthClientOptions {
+    apiKey: string;
+    baseUrl?: string;
+}
+interface AuthResponse {
+    token: string;
+}
+interface EntryEvent {
+    expires_in: number;
+    callerd_number: string;
+    pin: string | null;
+}
+interface VerifyResult {
+    callerNumber: string;
+    pin: string;
+}
+interface VerifyOptions {
+    onStep?: (step: 'authenticating' | 'waiting_for_call' | 'verifying_pin') => void;
+    signal?: AbortSignal;
+}
+
+declare class PauthClient {
+    private apiKey;
+    private baseUrl;
+    private token;
+    private tokenExpiresAt;
+    constructor(options: PauthClientOptions);
+    /**
+     * APIキーでトークンを取得（内部キャッシュあり）
+     */
+    authenticate(): Promise<string>;
+    /**
+     * SSEストリームで PIN を待ち受ける
+     * @param callerNumber 電話番号（国際形式: +819012345678）
+     * @param signal AbortSignal for cancellation
+     */
+    entry(callerNumber: string, signal?: AbortSignal): Promise<EntryEvent>;
+    /**
+     * PIN照合
+     * @returns true: 認証成功, false: PIN不一致
+     */
+    apply(callerNumber: string, pin: string): Promise<boolean>;
+    /**
+     * 電話番号認証の一括実行（authenticate + entry + apply）
+     * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る
+     */
+    verify(callerNumber: string, options?: VerifyOptions): Promise<VerifyResult>;
+    private handleErrors;
+}
+
+declare class PauthError extends Error {
+    constructor(message: string);
+}
+declare class AuthenticationError extends PauthError {
+    constructor();
+}
+declare class ConflictError extends PauthError {
+    constructor(callerNumber: string);
+}
+declare class RateLimitError extends PauthError {
+    retryAfter: number;
+    constructor(retryAfter: number);
+}
+declare class StreamError extends PauthError {
+    constructor(message: string);
+}
+declare class TimeoutError extends PauthError {
+    constructor();
+}
+declare class PauthAPIError extends PauthError {
+    status: number;
+    constructor(status: number, message: string);
+}
+
+export { type AuthResponse, AuthenticationError, ConflictError, type EntryEvent, PauthAPIError, PauthClient, type PauthClientOptions, PauthError, RateLimitError, StreamError, TimeoutError, type VerifyOptions, type VerifyResult };

package/dist/index.js

@@ -0,0 +1,240 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthenticationError: () => AuthenticationError,
+  ConflictError: () => ConflictError,
+  PauthAPIError: () => PauthAPIError,
+  PauthClient: () => PauthClient,
+  PauthError: () => PauthError,
+  RateLimitError: () => RateLimitError,
+  StreamError: () => StreamError,
+  TimeoutError: () => TimeoutError
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+var PauthError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PauthError";
+  }
+};
+var AuthenticationError = class extends PauthError {
+  constructor() {
+    super("Authentication failed: invalid or expired API key / token");
+    this.name = "AuthenticationError";
+  }
+};
+var ConflictError = class extends PauthError {
+  constructor(callerNumber) {
+    super(`Authentication already in progress for ${callerNumber}`);
+    this.name = "ConflictError";
+  }
+};
+var RateLimitError = class extends PauthError {
+  constructor(retryAfter) {
+    super(`Rate limit exceeded. Retry after ${retryAfter} seconds`);
+    this.name = "RateLimitError";
+    this.retryAfter = retryAfter;
+  }
+};
+var StreamError = class extends PauthError {
+  constructor(message) {
+    super(`SSE stream error: ${message}`);
+    this.name = "StreamError";
+  }
+};
+var TimeoutError = class extends PauthError {
+  constructor() {
+    super("SSE stream timed out waiting for PIN");
+    this.name = "TimeoutError";
+  }
+};
+var PauthAPIError = class extends PauthError {
+  constructor(status, message) {
+    super(`API error ${status}: ${message}`);
+    this.name = "PauthAPIError";
+    this.status = status;
+  }
+};
+
+// src/sse.ts
+async function readSSEStream(url, token, signal) {
+  const response = await fetch(url, {
+    headers: {
+      Authorization: `Bearer ${token}`,
+      Accept: "text/event-stream"
+    },
+    signal
+  });
+  if (!response.ok) {
+    throw new StreamError(`HTTP ${response.status}`);
+  }
+  if (!response.body) {
+    throw new StreamError("Response body is null");
+  }
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      const events = buffer.split("\n\n");
+      buffer = events.pop() ?? "";
+      for (const event of events) {
+        const line = event.trim();
+        if (!line.startsWith("data:")) continue;
+        const dataStr = line.slice("data:".length).trim();
+        if (!dataStr || dataStr === "{}") continue;
+        try {
+          const data = JSON.parse(dataStr);
+          if (data.pin !== null && data.pin !== void 0) {
+            reader.cancel();
+            return data;
+          }
+        } catch {
+        }
+      }
+    }
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw err;
+    }
+    throw new StreamError(err instanceof Error ? err.message : "Unknown error");
+  } finally {
+    reader.releaseLock();
+  }
+  throw new TimeoutError();
+}
+
+// src/client.ts
+var PauthClient = class {
+  constructor(options) {
+    this.token = null;
+    this.tokenExpiresAt = 0;
+    this.apiKey = options.apiKey;
+    this.baseUrl = options.baseUrl ?? "https://pauth.me";
+  }
+  /**
+   * APIキーでトークンを取得（内部キャッシュあり）
+   */
+  async authenticate() {
+    if (this.token && Date.now() < this.tokenExpiresAt - 3e4) {
+      return this.token;
+    }
+    const response = await fetch(`${this.baseUrl}/api/v1/auth`, {
+      headers: { "api-key": this.apiKey }
+    });
+    await this.handleErrors(response);
+    const data = await response.json();
+    this.token = data.token;
+    this.tokenExpiresAt = Date.now() + 6e5;
+    return this.token;
+  }
+  /**
+   * SSEストリームで PIN を待ち受ける
+   * @param callerNumber 電話番号（国際形式: +819012345678）
+   * @param signal AbortSignal for cancellation
+   */
+  async entry(callerNumber, signal) {
+    const token = await this.authenticate();
+    const encodedNumber = encodeURIComponent(callerNumber);
+    const url = `${this.baseUrl}/api/v1/entry/${encodedNumber}`;
+    return readSSEStream(url, token, signal);
+  }
+  /**
+   * PIN照合
+   * @returns true: 認証成功, false: PIN不一致
+   */
+  async apply(callerNumber, pin) {
+    const token = await this.authenticate();
+    const params = new URLSearchParams({
+      callerd_number: callerNumber,
+      pin
+    });
+    const response = await fetch(
+      `${this.baseUrl}/api/v1/apply?${params}`,
+      { headers: { Authorization: `Bearer ${token}` } }
+    );
+    if (response.status === 200) return true;
+    if (response.status === 204) return false;
+    await this.handleErrors(response);
+    return false;
+  }
+  /**
+   * 電話番号認証の一括実行（authenticate + entry + apply）
+   * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る
+   */
+  async verify(callerNumber, options) {
+    options?.onStep?.("authenticating");
+    await this.authenticate();
+    options?.onStep?.("waiting_for_call");
+    const entryResult = await this.entry(callerNumber, options?.signal);
+    if (!entryResult.pin) {
+      throw new Error("PIN not received from SSE stream");
+    }
+    options?.onStep?.("verifying_pin");
+    await this.apply(callerNumber, entryResult.pin);
+    return {
+      callerNumber,
+      pin: entryResult.pin
+    };
+  }
+  async handleErrors(response) {
+    if (response.ok) return;
+    switch (response.status) {
+      case 401:
+        this.token = null;
+        this.tokenExpiresAt = 0;
+        throw new AuthenticationError();
+      case 409:
+        throw new ConflictError("unknown");
+      case 429: {
+        const retryAfter = parseInt(response.headers.get("Retry-After") ?? "60", 10);
+        throw new RateLimitError(retryAfter);
+      }
+      default: {
+        let message = response.statusText;
+        try {
+          const body = await response.json();
+          if (body.message) message = body.message;
+        } catch {
+        }
+        throw new PauthAPIError(response.status, message);
+      }
+    }
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthenticationError,
+  ConflictError,
+  PauthAPIError,
+  PauthClient,
+  PauthError,
+  RateLimitError,
+  StreamError,
+  TimeoutError
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/sse.ts","../src/client.ts"],"sourcesContent":["export { PauthClient } from './client';\r\nexport type {\r\n  PauthClientOptions,\r\n  AuthResponse,\r\n  EntryEvent,\r\n  VerifyResult,\r\n  VerifyOptions,\r\n} from './types';\r\nexport {\r\n  PauthError,\r\n  AuthenticationError,\r\n  ConflictError,\r\n  RateLimitError,\r\n  StreamError,\r\n  TimeoutError,\r\n  PauthAPIError,\r\n} from './errors';\r\n","export class PauthError extends Error {\r\n  constructor(message: string) {\r\n    super(message);\r\n    this.name = 'PauthError';\r\n  }\r\n}\r\n\r\nexport class AuthenticationError extends PauthError {\r\n  constructor() {\r\n    super('Authentication failed: invalid or expired API key / token');\r\n    this.name = 'AuthenticationError';\r\n  }\r\n}\r\n\r\nexport class ConflictError extends PauthError {\r\n  constructor(callerNumber: string) {\r\n    super(`Authentication already in progress for ${callerNumber}`);\r\n    this.name = 'ConflictError';\r\n  }\r\n}\r\n\r\nexport class RateLimitError extends PauthError {\r\n  retryAfter: number;\r\n  constructor(retryAfter: number) {\r\n    super(`Rate limit exceeded. Retry after ${retryAfter} seconds`);\r\n    this.name = 'RateLimitError';\r\n    this.retryAfter = retryAfter;\r\n  }\r\n}\r\n\r\nexport class StreamError extends PauthError {\r\n  constructor(message: string) {\r\n    super(`SSE stream error: ${message}`);\r\n    this.name = 'StreamError';\r\n  }\r\n}\r\n\r\nexport class TimeoutError extends PauthError {\r\n  constructor() {\r\n    super('SSE stream timed out waiting for PIN');\r\n    this.name = 'TimeoutError';\r\n  }\r\n}\r\n\r\nexport class PauthAPIError extends PauthError {\r\n  status: number;\r\n  constructor(status: number, message: string) {\r\n    super(`API error ${status}: ${message}`);\r\n    this.name = 'PauthAPIError';\r\n    this.status = status;\r\n  }\r\n}\r\n","import { StreamError, TimeoutError } from './errors';\r\nimport type { EntryEvent } from './types';\r\n\r\n/**\r\n * SSEストリームを読み取り、PIN受信で resolve する Promise を返す\r\n * @param url SSEエンドポイントURL\r\n * @param token Bearer token\r\n * @param signal AbortSignal for cancellation\r\n */\r\nexport async function readSSEStream(\r\n  url: string,\r\n  token: string,\r\n  signal?: AbortSignal\r\n): Promise<EntryEvent> {\r\n  const response = await fetch(url, {\r\n    headers: {\r\n      Authorization: `Bearer ${token}`,\r\n      Accept: 'text/event-stream',\r\n    },\r\n    signal,\r\n  });\r\n\r\n  if (!response.ok) {\r\n    throw new StreamError(`HTTP ${response.status}`);\r\n  }\r\n\r\n  if (!response.body) {\r\n    throw new StreamError('Response body is null');\r\n  }\r\n\r\n  const reader = response.body.getReader();\r\n  const decoder = new TextDecoder();\r\n  let buffer = '';\r\n\r\n  try {\r\n    while (true) {\r\n      const { done, value } = await reader.read();\r\n      if (done) break;\r\n\r\n      buffer += decoder.decode(value, { stream: true });\r\n\r\n      // \\n\\n をイベント区切りとしてパース\r\n      const events = buffer.split('\\n\\n');\r\n      buffer = events.pop() ?? '';  // 最後の不完全なチャンクをバッファに戻す\r\n\r\n      for (const event of events) {\r\n        const line = event.trim();\r\n        if (!line.startsWith('data:')) continue;\r\n\r\n        const dataStr = line.slice('data:'.length).trim();\r\n        if (!dataStr || dataStr === '{}') continue;\r\n\r\n        try {\r\n          const data = JSON.parse(dataStr) as EntryEvent;\r\n          if (data.pin !== null && data.pin !== undefined) {\r\n            // PIN受信 → ストリーム終了\r\n            reader.cancel();\r\n            return data;\r\n          }\r\n        } catch {\r\n          // パースエラーは無視（不完全なチャンクの残留の可能性）\r\n        }\r\n      }\r\n    }\r\n  } catch (err) {\r\n    if (err instanceof Error && err.name === 'AbortError') {\r\n      throw err;  // キャンセルはそのままスロー\r\n    }\r\n    throw new StreamError(err instanceof Error ? err.message : 'Unknown error');\r\n  } finally {\r\n    reader.releaseLock();\r\n  }\r\n\r\n  throw new TimeoutError();\r\n}\r\n","import { readSSEStream } from './sse';\r\nimport {\r\n  AuthenticationError, ConflictError, RateLimitError, PauthAPIError\r\n} from './errors';\r\nimport type {\r\n  PauthClientOptions, AuthResponse, VerifyResult, VerifyOptions\r\n} from './types';\r\n\r\nexport class PauthClient {\r\n  private apiKey: string;\r\n  private baseUrl: string;\r\n  private token: string | null = null;\r\n  private tokenExpiresAt: number = 0;\r\n\r\n  constructor(options: PauthClientOptions) {\r\n    this.apiKey = options.apiKey;\r\n    this.baseUrl = options.baseUrl ?? 'https://pauth.me';\r\n  }\r\n\r\n  /**\r\n   * APIキーでトークンを取得（内部キャッシュあり）\r\n   */\r\n  async authenticate(): Promise<string> {\r\n    // キャッシュが有効なら再利用（30秒マージン）\r\n    if (this.token && Date.now() < this.tokenExpiresAt - 30_000) {\r\n      return this.token;\r\n    }\r\n\r\n    const response = await fetch(`${this.baseUrl}/api/v1/auth`, {\r\n      headers: { 'api-key': this.apiKey },\r\n    });\r\n\r\n    await this.handleErrors(response);\r\n\r\n    const data = (await response.json()) as AuthResponse;\r\n    this.token = data.token;\r\n    this.tokenExpiresAt = Date.now() + 600_000; // 600秒\r\n    return this.token;\r\n  }\r\n\r\n  /**\r\n   * SSEストリームで PIN を待ち受ける\r\n   * @param callerNumber 電話番号（国際形式: +819012345678）\r\n   * @param signal AbortSignal for cancellation\r\n   */\r\n  async entry(callerNumber: string, signal?: AbortSignal) {\r\n    const token = await this.authenticate();\r\n    // 公開メソッドは callerNumber（正しいスペル）、API送信時は callerd_number（APIのtypo）\r\n    const encodedNumber = encodeURIComponent(callerNumber);\r\n    const url = `${this.baseUrl}/api/v1/entry/${encodedNumber}`;\r\n    return readSSEStream(url, token, signal);\r\n  }\r\n\r\n  /**\r\n   * PIN照合\r\n   * @returns true: 認証成功, false: PIN不一致\r\n   */\r\n  async apply(callerNumber: string, pin: string): Promise<boolean> {\r\n    const token = await this.authenticate();\r\n    const params = new URLSearchParams({\r\n      callerd_number: callerNumber,\r\n      pin,\r\n    });\r\n    const response = await fetch(\r\n      `${this.baseUrl}/api/v1/apply?${params}`,\r\n      { headers: { Authorization: `Bearer ${token}` } }\r\n    );\r\n\r\n    if (response.status === 200) return true;\r\n    if (response.status === 204) return false;\r\n\r\n    await this.handleErrors(response);\r\n    return false;\r\n  }\r\n\r\n  /**\r\n   * 電話番号認証の一括実行（authenticate + entry + apply）\r\n   * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る\r\n   */\r\n  async verify(callerNumber: string, options?: VerifyOptions): Promise<VerifyResult> {\r\n    options?.onStep?.('authenticating');\r\n    await this.authenticate();\r\n\r\n    options?.onStep?.('waiting_for_call');\r\n    const entryResult = await this.entry(callerNumber, options?.signal);\r\n\r\n    if (!entryResult.pin) {\r\n      throw new Error('PIN not received from SSE stream');\r\n    }\r\n\r\n    options?.onStep?.('verifying_pin');\r\n    await this.apply(callerNumber, entryResult.pin);\r\n\r\n    return {\r\n      callerNumber,\r\n      pin: entryResult.pin,\r\n    };\r\n  }\r\n\r\n  private async handleErrors(response: Response): Promise<void> {\r\n    if (response.ok) return;\r\n\r\n    switch (response.status) {\r\n      case 401:\r\n        // トークンをクリアして次回再取得\r\n        this.token = null;\r\n        this.tokenExpiresAt = 0;\r\n        throw new AuthenticationError();\r\n      case 409:\r\n        throw new ConflictError('unknown');\r\n      case 429: {\r\n        const retryAfter = parseInt(response.headers.get('Retry-After') ?? '60', 10);\r\n        throw new RateLimitError(retryAfter);\r\n      }\r\n      default: {\r\n        let message = response.statusText;\r\n        try {\r\n          const body = await response.json() as { message?: string };\r\n          if (body.message) message = body.message;\r\n        } catch { /* ignore */ }\r\n        throw new PauthAPIError(response.status, message);\r\n      }\r\n    }\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,WAAW;AAAA,EAClD,cAAc;AACZ,UAAM,2DAA2D;AACjE,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,WAAW;AAAA,EAC5C,YAAY,cAAsB;AAChC,UAAM,0CAA0C,YAAY,EAAE;AAC9D,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,iBAAN,cAA6B,WAAW;AAAA,EAE7C,YAAY,YAAoB;AAC9B,UAAM,oCAAoC,UAAU,UAAU;AAC9D,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAEO,IAAM,cAAN,cAA0B,WAAW;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,qBAAqB,OAAO,EAAE;AACpC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,eAAN,cAA2B,WAAW;AAAA,EAC3C,cAAc;AACZ,UAAM,sCAAsC;AAC5C,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,WAAW;AAAA,EAE5C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,aAAa,MAAM,KAAK,OAAO,EAAE;AACvC,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1CA,eAAsB,cACpB,KACA,OACA,QACqB;AACrB,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,SAAS;AAAA,MACP,eAAe,UAAU,KAAK;AAAA,MAC9B,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,YAAY,QAAQ,SAAS,MAAM,EAAE;AAAA,EACjD;AAEA,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,YAAY,uBAAuB;AAAA,EAC/C;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,SAAS;AAEb,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AAEV,gBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAGhD,YAAM,SAAS,OAAO,MAAM,MAAM;AAClC,eAAS,OAAO,IAAI,KAAK;AAEzB,iBAAW,SAAS,QAAQ;AAC1B,cAAM,OAAO,MAAM,KAAK;AACxB,YAAI,CAAC,KAAK,WAAW,OAAO,EAAG;AAE/B,cAAM,UAAU,KAAK,MAAM,QAAQ,MAAM,EAAE,KAAK;AAChD,YAAI,CAAC,WAAW,YAAY,KAAM;AAElC,YAAI;AACF,gBAAM,OAAO,KAAK,MAAM,OAAO;AAC/B,cAAI,KAAK,QAAQ,QAAQ,KAAK,QAAQ,QAAW;AAE/C,mBAAO,OAAO;AACd,mBAAO;AAAA,UACT;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM;AAAA,IACR;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,EAC5E,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,QAAM,IAAI,aAAa;AACzB;;;AClEO,IAAM,cAAN,MAAkB;AAAA,EAMvB,YAAY,SAA6B;AAHzC,SAAQ,QAAuB;AAC/B,SAAQ,iBAAyB;AAG/B,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAAgC;AAEpC,QAAI,KAAK,SAAS,KAAK,IAAI,IAAI,KAAK,iBAAiB,KAAQ;AAC3D,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,gBAAgB;AAAA,MAC1D,SAAS,EAAE,WAAW,KAAK,OAAO;AAAA,IACpC,CAAC;AAED,UAAM,KAAK,aAAa,QAAQ;AAEhC,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,SAAK,QAAQ,KAAK;AAClB,SAAK,iBAAiB,KAAK,IAAI,IAAI;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAM,cAAsB,QAAsB;AACtD,UAAM,QAAQ,MAAM,KAAK,aAAa;AAEtC,UAAM,gBAAgB,mBAAmB,YAAY;AACrD,UAAM,MAAM,GAAG,KAAK,OAAO,iBAAiB,aAAa;AACzD,WAAO,cAAc,KAAK,OAAO,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAM,cAAsB,KAA+B;AAC/D,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,KAAK,OAAO,iBAAiB,MAAM;AAAA,MACtC,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG,EAAE;AAAA,IAClD;AAEA,QAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAI,SAAS,WAAW,IAAK,QAAO;AAEpC,UAAM,KAAK,aAAa,QAAQ;AAChC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,cAAsB,SAAgD;AACjF,aAAS,SAAS,gBAAgB;AAClC,UAAM,KAAK,aAAa;AAExB,aAAS,SAAS,kBAAkB;AACpC,UAAM,cAAc,MAAM,KAAK,MAAM,cAAc,SAAS,MAAM;AAElE,QAAI,CAAC,YAAY,KAAK;AACpB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD;AAEA,aAAS,SAAS,eAAe;AACjC,UAAM,KAAK,MAAM,cAAc,YAAY,GAAG;AAE9C,WAAO;AAAA,MACL;AAAA,MACA,KAAK,YAAY;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAc,aAAa,UAAmC;AAC5D,QAAI,SAAS,GAAI;AAEjB,YAAQ,SAAS,QAAQ;AAAA,MACvB,KAAK;AAEH,aAAK,QAAQ;AACb,aAAK,iBAAiB;AACtB,cAAM,IAAI,oBAAoB;AAAA,MAChC,KAAK;AACH,cAAM,IAAI,cAAc,SAAS;AAAA,MACnC,KAAK,KAAK;AACR,cAAM,aAAa,SAAS,SAAS,QAAQ,IAAI,aAAa,KAAK,MAAM,EAAE;AAC3E,cAAM,IAAI,eAAe,UAAU;AAAA,MACrC;AAAA,MACA,SAAS;AACP,YAAI,UAAU,SAAS;AACvB,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAI,KAAK,QAAS,WAAU,KAAK;AAAA,QACnC,QAAQ;AAAA,QAAe;AACvB,cAAM,IAAI,cAAc,SAAS,QAAQ,OAAO;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,206 @@
+// src/errors.ts
+var PauthError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PauthError";
+  }
+};
+var AuthenticationError = class extends PauthError {
+  constructor() {
+    super("Authentication failed: invalid or expired API key / token");
+    this.name = "AuthenticationError";
+  }
+};
+var ConflictError = class extends PauthError {
+  constructor(callerNumber) {
+    super(`Authentication already in progress for ${callerNumber}`);
+    this.name = "ConflictError";
+  }
+};
+var RateLimitError = class extends PauthError {
+  constructor(retryAfter) {
+    super(`Rate limit exceeded. Retry after ${retryAfter} seconds`);
+    this.name = "RateLimitError";
+    this.retryAfter = retryAfter;
+  }
+};
+var StreamError = class extends PauthError {
+  constructor(message) {
+    super(`SSE stream error: ${message}`);
+    this.name = "StreamError";
+  }
+};
+var TimeoutError = class extends PauthError {
+  constructor() {
+    super("SSE stream timed out waiting for PIN");
+    this.name = "TimeoutError";
+  }
+};
+var PauthAPIError = class extends PauthError {
+  constructor(status, message) {
+    super(`API error ${status}: ${message}`);
+    this.name = "PauthAPIError";
+    this.status = status;
+  }
+};
+
+// src/sse.ts
+async function readSSEStream(url, token, signal) {
+  const response = await fetch(url, {
+    headers: {
+      Authorization: `Bearer ${token}`,
+      Accept: "text/event-stream"
+    },
+    signal
+  });
+  if (!response.ok) {
+    throw new StreamError(`HTTP ${response.status}`);
+  }
+  if (!response.body) {
+    throw new StreamError("Response body is null");
+  }
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      const events = buffer.split("\n\n");
+      buffer = events.pop() ?? "";
+      for (const event of events) {
+        const line = event.trim();
+        if (!line.startsWith("data:")) continue;
+        const dataStr = line.slice("data:".length).trim();
+        if (!dataStr || dataStr === "{}") continue;
+        try {
+          const data = JSON.parse(dataStr);
+          if (data.pin !== null && data.pin !== void 0) {
+            reader.cancel();
+            return data;
+          }
+        } catch {
+        }
+      }
+    }
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw err;
+    }
+    throw new StreamError(err instanceof Error ? err.message : "Unknown error");
+  } finally {
+    reader.releaseLock();
+  }
+  throw new TimeoutError();
+}
+
+// src/client.ts
+var PauthClient = class {
+  constructor(options) {
+    this.token = null;
+    this.tokenExpiresAt = 0;
+    this.apiKey = options.apiKey;
+    this.baseUrl = options.baseUrl ?? "https://pauth.me";
+  }
+  /**
+   * APIキーでトークンを取得（内部キャッシュあり）
+   */
+  async authenticate() {
+    if (this.token && Date.now() < this.tokenExpiresAt - 3e4) {
+      return this.token;
+    }
+    const response = await fetch(`${this.baseUrl}/api/v1/auth`, {
+      headers: { "api-key": this.apiKey }
+    });
+    await this.handleErrors(response);
+    const data = await response.json();
+    this.token = data.token;
+    this.tokenExpiresAt = Date.now() + 6e5;
+    return this.token;
+  }
+  /**
+   * SSEストリームで PIN を待ち受ける
+   * @param callerNumber 電話番号（国際形式: +819012345678）
+   * @param signal AbortSignal for cancellation
+   */
+  async entry(callerNumber, signal) {
+    const token = await this.authenticate();
+    const encodedNumber = encodeURIComponent(callerNumber);
+    const url = `${this.baseUrl}/api/v1/entry/${encodedNumber}`;
+    return readSSEStream(url, token, signal);
+  }
+  /**
+   * PIN照合
+   * @returns true: 認証成功, false: PIN不一致
+   */
+  async apply(callerNumber, pin) {
+    const token = await this.authenticate();
+    const params = new URLSearchParams({
+      callerd_number: callerNumber,
+      pin
+    });
+    const response = await fetch(
+      `${this.baseUrl}/api/v1/apply?${params}`,
+      { headers: { Authorization: `Bearer ${token}` } }
+    );
+    if (response.status === 200) return true;
+    if (response.status === 204) return false;
+    await this.handleErrors(response);
+    return false;
+  }
+  /**
+   * 電話番号認証の一括実行（authenticate + entry + apply）
+   * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る
+   */
+  async verify(callerNumber, options) {
+    options?.onStep?.("authenticating");
+    await this.authenticate();
+    options?.onStep?.("waiting_for_call");
+    const entryResult = await this.entry(callerNumber, options?.signal);
+    if (!entryResult.pin) {
+      throw new Error("PIN not received from SSE stream");
+    }
+    options?.onStep?.("verifying_pin");
+    await this.apply(callerNumber, entryResult.pin);
+    return {
+      callerNumber,
+      pin: entryResult.pin
+    };
+  }
+  async handleErrors(response) {
+    if (response.ok) return;
+    switch (response.status) {
+      case 401:
+        this.token = null;
+        this.tokenExpiresAt = 0;
+        throw new AuthenticationError();
+      case 409:
+        throw new ConflictError("unknown");
+      case 429: {
+        const retryAfter = parseInt(response.headers.get("Retry-After") ?? "60", 10);
+        throw new RateLimitError(retryAfter);
+      }
+      default: {
+        let message = response.statusText;
+        try {
+          const body = await response.json();
+          if (body.message) message = body.message;
+        } catch {
+        }
+        throw new PauthAPIError(response.status, message);
+      }
+    }
+  }
+};
+export {
+  AuthenticationError,
+  ConflictError,
+  PauthAPIError,
+  PauthClient,
+  PauthError,
+  RateLimitError,
+  StreamError,
+  TimeoutError
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/sse.ts","../src/client.ts"],"sourcesContent":["export class PauthError extends Error {\r\n  constructor(message: string) {\r\n    super(message);\r\n    this.name = 'PauthError';\r\n  }\r\n}\r\n\r\nexport class AuthenticationError extends PauthError {\r\n  constructor() {\r\n    super('Authentication failed: invalid or expired API key / token');\r\n    this.name = 'AuthenticationError';\r\n  }\r\n}\r\n\r\nexport class ConflictError extends PauthError {\r\n  constructor(callerNumber: string) {\r\n    super(`Authentication already in progress for ${callerNumber}`);\r\n    this.name = 'ConflictError';\r\n  }\r\n}\r\n\r\nexport class RateLimitError extends PauthError {\r\n  retryAfter: number;\r\n  constructor(retryAfter: number) {\r\n    super(`Rate limit exceeded. Retry after ${retryAfter} seconds`);\r\n    this.name = 'RateLimitError';\r\n    this.retryAfter = retryAfter;\r\n  }\r\n}\r\n\r\nexport class StreamError extends PauthError {\r\n  constructor(message: string) {\r\n    super(`SSE stream error: ${message}`);\r\n    this.name = 'StreamError';\r\n  }\r\n}\r\n\r\nexport class TimeoutError extends PauthError {\r\n  constructor() {\r\n    super('SSE stream timed out waiting for PIN');\r\n    this.name = 'TimeoutError';\r\n  }\r\n}\r\n\r\nexport class PauthAPIError extends PauthError {\r\n  status: number;\r\n  constructor(status: number, message: string) {\r\n    super(`API error ${status}: ${message}`);\r\n    this.name = 'PauthAPIError';\r\n    this.status = status;\r\n  }\r\n}\r\n","import { StreamError, TimeoutError } from './errors';\r\nimport type { EntryEvent } from './types';\r\n\r\n/**\r\n * SSEストリームを読み取り、PIN受信で resolve する Promise を返す\r\n * @param url SSEエンドポイントURL\r\n * @param token Bearer token\r\n * @param signal AbortSignal for cancellation\r\n */\r\nexport async function readSSEStream(\r\n  url: string,\r\n  token: string,\r\n  signal?: AbortSignal\r\n): Promise<EntryEvent> {\r\n  const response = await fetch(url, {\r\n    headers: {\r\n      Authorization: `Bearer ${token}`,\r\n      Accept: 'text/event-stream',\r\n    },\r\n    signal,\r\n  });\r\n\r\n  if (!response.ok) {\r\n    throw new StreamError(`HTTP ${response.status}`);\r\n  }\r\n\r\n  if (!response.body) {\r\n    throw new StreamError('Response body is null');\r\n  }\r\n\r\n  const reader = response.body.getReader();\r\n  const decoder = new TextDecoder();\r\n  let buffer = '';\r\n\r\n  try {\r\n    while (true) {\r\n      const { done, value } = await reader.read();\r\n      if (done) break;\r\n\r\n      buffer += decoder.decode(value, { stream: true });\r\n\r\n      // \\n\\n をイベント区切りとしてパース\r\n      const events = buffer.split('\\n\\n');\r\n      buffer = events.pop() ?? '';  // 最後の不完全なチャンクをバッファに戻す\r\n\r\n      for (const event of events) {\r\n        const line = event.trim();\r\n        if (!line.startsWith('data:')) continue;\r\n\r\n        const dataStr = line.slice('data:'.length).trim();\r\n        if (!dataStr || dataStr === '{}') continue;\r\n\r\n        try {\r\n          const data = JSON.parse(dataStr) as EntryEvent;\r\n          if (data.pin !== null && data.pin !== undefined) {\r\n            // PIN受信 → ストリーム終了\r\n            reader.cancel();\r\n            return data;\r\n          }\r\n        } catch {\r\n          // パースエラーは無視（不完全なチャンクの残留の可能性）\r\n        }\r\n      }\r\n    }\r\n  } catch (err) {\r\n    if (err instanceof Error && err.name === 'AbortError') {\r\n      throw err;  // キャンセルはそのままスロー\r\n    }\r\n    throw new StreamError(err instanceof Error ? err.message : 'Unknown error');\r\n  } finally {\r\n    reader.releaseLock();\r\n  }\r\n\r\n  throw new TimeoutError();\r\n}\r\n","import { readSSEStream } from './sse';\r\nimport {\r\n  AuthenticationError, ConflictError, RateLimitError, PauthAPIError\r\n} from './errors';\r\nimport type {\r\n  PauthClientOptions, AuthResponse, VerifyResult, VerifyOptions\r\n} from './types';\r\n\r\nexport class PauthClient {\r\n  private apiKey: string;\r\n  private baseUrl: string;\r\n  private token: string | null = null;\r\n  private tokenExpiresAt: number = 0;\r\n\r\n  constructor(options: PauthClientOptions) {\r\n    this.apiKey = options.apiKey;\r\n    this.baseUrl = options.baseUrl ?? 'https://pauth.me';\r\n  }\r\n\r\n  /**\r\n   * APIキーでトークンを取得（内部キャッシュあり）\r\n   */\r\n  async authenticate(): Promise<string> {\r\n    // キャッシュが有効なら再利用（30秒マージン）\r\n    if (this.token && Date.now() < this.tokenExpiresAt - 30_000) {\r\n      return this.token;\r\n    }\r\n\r\n    const response = await fetch(`${this.baseUrl}/api/v1/auth`, {\r\n      headers: { 'api-key': this.apiKey },\r\n    });\r\n\r\n    await this.handleErrors(response);\r\n\r\n    const data = (await response.json()) as AuthResponse;\r\n    this.token = data.token;\r\n    this.tokenExpiresAt = Date.now() + 600_000; // 600秒\r\n    return this.token;\r\n  }\r\n\r\n  /**\r\n   * SSEストリームで PIN を待ち受ける\r\n   * @param callerNumber 電話番号（国際形式: +819012345678）\r\n   * @param signal AbortSignal for cancellation\r\n   */\r\n  async entry(callerNumber: string, signal?: AbortSignal) {\r\n    const token = await this.authenticate();\r\n    // 公開メソッドは callerNumber（正しいスペル）、API送信時は callerd_number（APIのtypo）\r\n    const encodedNumber = encodeURIComponent(callerNumber);\r\n    const url = `${this.baseUrl}/api/v1/entry/${encodedNumber}`;\r\n    return readSSEStream(url, token, signal);\r\n  }\r\n\r\n  /**\r\n   * PIN照合\r\n   * @returns true: 認証成功, false: PIN不一致\r\n   */\r\n  async apply(callerNumber: string, pin: string): Promise<boolean> {\r\n    const token = await this.authenticate();\r\n    const params = new URLSearchParams({\r\n      callerd_number: callerNumber,\r\n      pin,\r\n    });\r\n    const response = await fetch(\r\n      `${this.baseUrl}/api/v1/apply?${params}`,\r\n      { headers: { Authorization: `Bearer ${token}` } }\r\n    );\r\n\r\n    if (response.status === 200) return true;\r\n    if (response.status === 204) return false;\r\n\r\n    await this.handleErrors(response);\r\n    return false;\r\n  }\r\n\r\n  /**\r\n   * 電話番号認証の一括実行（authenticate + entry + apply）\r\n   * サンドボックス（test_ キー）では約2秒後に PIN=1234 が返る\r\n   */\r\n  async verify(callerNumber: string, options?: VerifyOptions): Promise<VerifyResult> {\r\n    options?.onStep?.('authenticating');\r\n    await this.authenticate();\r\n\r\n    options?.onStep?.('waiting_for_call');\r\n    const entryResult = await this.entry(callerNumber, options?.signal);\r\n\r\n    if (!entryResult.pin) {\r\n      throw new Error('PIN not received from SSE stream');\r\n    }\r\n\r\n    options?.onStep?.('verifying_pin');\r\n    await this.apply(callerNumber, entryResult.pin);\r\n\r\n    return {\r\n      callerNumber,\r\n      pin: entryResult.pin,\r\n    };\r\n  }\r\n\r\n  private async handleErrors(response: Response): Promise<void> {\r\n    if (response.ok) return;\r\n\r\n    switch (response.status) {\r\n      case 401:\r\n        // トークンをクリアして次回再取得\r\n        this.token = null;\r\n        this.tokenExpiresAt = 0;\r\n        throw new AuthenticationError();\r\n      case 409:\r\n        throw new ConflictError('unknown');\r\n      case 429: {\r\n        const retryAfter = parseInt(response.headers.get('Retry-After') ?? '60', 10);\r\n        throw new RateLimitError(retryAfter);\r\n      }\r\n      default: {\r\n        let message = response.statusText;\r\n        try {\r\n          const body = await response.json() as { message?: string };\r\n          if (body.message) message = body.message;\r\n        } catch { /* ignore */ }\r\n        throw new PauthAPIError(response.status, message);\r\n      }\r\n    }\r\n  }\r\n}\r\n"],"mappings":";AAAO,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,WAAW;AAAA,EAClD,cAAc;AACZ,UAAM,2DAA2D;AACjE,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,WAAW;AAAA,EAC5C,YAAY,cAAsB;AAChC,UAAM,0CAA0C,YAAY,EAAE;AAC9D,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,iBAAN,cAA6B,WAAW;AAAA,EAE7C,YAAY,YAAoB;AAC9B,UAAM,oCAAoC,UAAU,UAAU;AAC9D,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAEO,IAAM,cAAN,cAA0B,WAAW;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,qBAAqB,OAAO,EAAE;AACpC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,eAAN,cAA2B,WAAW;AAAA,EAC3C,cAAc;AACZ,UAAM,sCAAsC;AAC5C,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,WAAW;AAAA,EAE5C,YAAY,QAAgB,SAAiB;AAC3C,UAAM,aAAa,MAAM,KAAK,OAAO,EAAE;AACvC,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1CA,eAAsB,cACpB,KACA,OACA,QACqB;AACrB,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,SAAS;AAAA,MACP,eAAe,UAAU,KAAK;AAAA,MAC9B,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,YAAY,QAAQ,SAAS,MAAM,EAAE;AAAA,EACjD;AAEA,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,YAAY,uBAAuB;AAAA,EAC/C;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,SAAS;AAEb,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AAEV,gBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAGhD,YAAM,SAAS,OAAO,MAAM,MAAM;AAClC,eAAS,OAAO,IAAI,KAAK;AAEzB,iBAAW,SAAS,QAAQ;AAC1B,cAAM,OAAO,MAAM,KAAK;AACxB,YAAI,CAAC,KAAK,WAAW,OAAO,EAAG;AAE/B,cAAM,UAAU,KAAK,MAAM,QAAQ,MAAM,EAAE,KAAK;AAChD,YAAI,CAAC,WAAW,YAAY,KAAM;AAElC,YAAI;AACF,gBAAM,OAAO,KAAK,MAAM,OAAO;AAC/B,cAAI,KAAK,QAAQ,QAAQ,KAAK,QAAQ,QAAW;AAE/C,mBAAO,OAAO;AACd,mBAAO;AAAA,UACT;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM;AAAA,IACR;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,EAC5E,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAEA,QAAM,IAAI,aAAa;AACzB;;;AClEO,IAAM,cAAN,MAAkB;AAAA,EAMvB,YAAY,SAA6B;AAHzC,SAAQ,QAAuB;AAC/B,SAAQ,iBAAyB;AAG/B,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAAgC;AAEpC,QAAI,KAAK,SAAS,KAAK,IAAI,IAAI,KAAK,iBAAiB,KAAQ;AAC3D,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,gBAAgB;AAAA,MAC1D,SAAS,EAAE,WAAW,KAAK,OAAO;AAAA,IACpC,CAAC;AAED,UAAM,KAAK,aAAa,QAAQ;AAEhC,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,SAAK,QAAQ,KAAK;AAClB,SAAK,iBAAiB,KAAK,IAAI,IAAI;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAM,cAAsB,QAAsB;AACtD,UAAM,QAAQ,MAAM,KAAK,aAAa;AAEtC,UAAM,gBAAgB,mBAAmB,YAAY;AACrD,UAAM,MAAM,GAAG,KAAK,OAAO,iBAAiB,aAAa;AACzD,WAAO,cAAc,KAAK,OAAO,MAAM;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAM,cAAsB,KAA+B;AAC/D,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,gBAAgB;AAAA,MAChB;AAAA,IACF,CAAC;AACD,UAAM,WAAW,MAAM;AAAA,MACrB,GAAG,KAAK,OAAO,iBAAiB,MAAM;AAAA,MACtC,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG,EAAE;AAAA,IAClD;AAEA,QAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAI,SAAS,WAAW,IAAK,QAAO;AAEpC,UAAM,KAAK,aAAa,QAAQ;AAChC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,cAAsB,SAAgD;AACjF,aAAS,SAAS,gBAAgB;AAClC,UAAM,KAAK,aAAa;AAExB,aAAS,SAAS,kBAAkB;AACpC,UAAM,cAAc,MAAM,KAAK,MAAM,cAAc,SAAS,MAAM;AAElE,QAAI,CAAC,YAAY,KAAK;AACpB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD;AAEA,aAAS,SAAS,eAAe;AACjC,UAAM,KAAK,MAAM,cAAc,YAAY,GAAG;AAE9C,WAAO;AAAA,MACL;AAAA,MACA,KAAK,YAAY;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAc,aAAa,UAAmC;AAC5D,QAAI,SAAS,GAAI;AAEjB,YAAQ,SAAS,QAAQ;AAAA,MACvB,KAAK;AAEH,aAAK,QAAQ;AACb,aAAK,iBAAiB;AACtB,cAAM,IAAI,oBAAoB;AAAA,MAChC,KAAK;AACH,cAAM,IAAI,cAAc,SAAS;AAAA,MACnC,KAAK,KAAK;AACR,cAAM,aAAa,SAAS,SAAS,QAAQ,IAAI,aAAa,KAAK,MAAM,EAAE;AAC3E,cAAM,IAAI,eAAe,UAAU;AAAA,MACrC;AAAA,MACA,SAAS;AACP,YAAI,UAAU,SAAS;AACvB,YAAI;AACF,gBAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAI,KAAK,QAAS,WAAU,KAAK;AAAA,QACnC,QAAQ;AAAA,QAAe;AACvB,cAAM,IAAI,cAAc,SAAS,QAAQ,OAAO;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "pauth-js",
+  "version": "0.1.0",
+  "description": "Official JavaScript/TypeScript SDK for pauth.me - Phone-based authentication API",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": ["pauth", "authentication", "phone", "api", "sdk", "typescript"],
+  "author": "pauth.me",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mskz-ptplus-jp/pauth-js.git"
+  },
+  "bugs": {
+    "url": "https://github.com/mskz-ptplus-jp/pauth-js/issues"
+  },
+  "homepage": "https://github.com/mskz-ptplus-jp/pauth-js#readme",
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0",
+    "@types/node": "^20.0.0",
+    "vitest": "^1.0.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}