prividium 0.20.0 → 0.21.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prividium",
-  "version": "0.20.0",
+  "version": "0.21.1",
   "type": "module",
   "bin": {
     "prividium": "bin/cli.js"
@@ -15,6 +15,16 @@
       "types": "./dist/sdk/siwe.d.ts"
     }
   },
+  "imports": {
+    "#sdk": {
+      "import": "./dist/sdk/index.js",
+      "types": "./dist/sdk/index.d.ts"
+    },
+    "#sdk/siwe": {
+      "import": "./dist/sdk/siwe.js",
+      "types": "./dist/sdk/siwe.d.ts"
+    }
+  },
   "license": "MIT OR Apache-2.0",
   "files": [
     "dist",
@@ -29,7 +39,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc -b --noEmit",
-    "cli": "tsx cli/index.ts",
+    "cli": "tsc -b tsconfig.sdk.json && tsx bin/cli.js",
     "typecheck:test": "tsc --project tsconfig.test.json --noEmit"
   },
   "dependencies": {

package/dist/cli/cli/base-cli.js

@@ -1,9 +0,0 @@
-import yargs from 'yargs';
-export const BASE_CLI = yargs(process.argv.slice(2))
-    .scriptName('prividium-cli')
-    .option('configPath', {
-    alias: ['c', 'config-path', 'config'],
-    description: 'Path for config file. By default config file is stored under user personal folder',
-    type: 'string',
-    demandOption: false
-});

package/dist/cli/cli/index.js

@@ -1,13 +0,0 @@
-import { BASE_CLI } from './base-cli.js';
-import { addConfig } from './commands/config.js';
-import { addDoctor } from './commands/doctor.js';
-import { addProxy } from './commands/proxy.js';
-const actions = [addProxy, addDoctor, addConfig];
-const baseCli = actions.reduce((argv, applyAction) => {
-    return applyAction(argv);
-}, BASE_CLI);
-const cli = baseCli.help().strict().demandCommand();
-cli.parseAsync().catch((e) => {
-    console.error(e);
-    process.exit(1);
-});

package/dist/cli/cli/server/config-file.js

@@ -1,78 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import path from 'node:path';
-import { log } from '@clack/prompts';
-import appDirs from 'appdirsjs';
-import color from 'kleur';
-import { z } from 'zod';
-// biome-ignore lint/suspicious/noExplicitAny: CJS/ESM interop
-const appDirsFn = appDirs.default;
-const dirs = appDirsFn({ appName: 'prividium-proxy' });
-// Source of truth for the on-disk config-file shapes the SDK accepts.
-// `latest` is what `write()` produces today.
-// Any other entry is keyed by the last SDK version that wrote that shape;
-// it exists only so older config files keep working after a user upgrades.
-// To add a new legacy entry: copy the previous `latest` into a new `vX_Y`
-// key, then change `latest` to the new shape and add a branch in `migrate()`.
-const schemas = {
-    latest: z.object({
-        apiUrl: z.string()
-    }),
-    v0_17: z.object({
-        prividiumRpcUrl: z.string(),
-        userPanelUrl: z.string()
-    })
-};
-function migrate(json) {
-    const latest = schemas.latest.safeParse(json);
-    if (latest.success)
-        return latest.data;
-    const v0_17 = schemas.v0_17.safeParse(json);
-    if (v0_17.success)
-        return { apiUrl: v0_17.data.prividiumRpcUrl };
-    return null;
-}
-export class ConfigFile {
-    filePath;
-    constructor(filePath) {
-        if (filePath) {
-            this.filePath = filePath;
-        }
-        else {
-            this.filePath = path.join(dirs.config, 'config.json');
-        }
-    }
-    read() {
-        if (!existsSync(this.filePath)) {
-            return {};
-        }
-        else {
-            const data = readFileSync(this.filePath).toString();
-            try {
-                const json = JSON.parse(data);
-                return migrate(json) ?? {};
-            }
-            catch {
-                rmSync(this.filePath);
-                log.warn('Corrupted configuration file');
-                return {};
-            }
-        }
-    }
-    write(param) {
-        const dir = path.parse(this.filePath).dir;
-        mkdirSync(dir, { recursive: true });
-        writeFileSync(this.filePath, JSON.stringify(param));
-    }
-    remove() {
-        if (existsSync(this.filePath)) {
-            rmSync(this.filePath);
-        }
-    }
-    print() {
-        const { apiUrl } = this.read();
-        console.log(`${color.bold('Prividium™ API url')}: ${apiUrl}`);
-    }
-    printPath() {
-        console.log(this.filePath);
-    }
-}

package/dist/cli/src/error-utils.js

@@ -1,73 +0,0 @@
-import { z } from 'zod';
-import { UNAUTHORIZED_ERROR_CODE } from './rpc-error-codes.js';
-const jsonRpcErrorSchema = z.object({
-    error: z.object({
-        code: z.number(),
-        message: z.string().optional(),
-        data: z.unknown().optional()
-    })
-});
-const apiErrorSchema = z.object({
-    error: z.object({
-        code: z.string(),
-        message: z.string()
-    })
-});
-/**
- * Checks if a Response contains a Prividium unauthorized/forbidden error.
- */
-export async function hasPrividiumUnauthorizedError(response) {
-    try {
-        const clonedResponse = response.clone();
-        const parsed = jsonRpcErrorSchema.safeParse(await clonedResponse.json());
-        if (parsed.success) {
-            return parsed.data.error.code === UNAUTHORIZED_ERROR_CODE;
-        }
-        return false;
-    }
-    catch {
-        return false;
-    }
-}
-export function isPrividiumUnauthorizedRpcError(error) {
-    if (!error || typeof error !== 'object') {
-        return false;
-    }
-    const value = error;
-    if (value.code === UNAUTHORIZED_ERROR_CODE) {
-        return true;
-    }
-    return isPrividiumUnauthorizedRpcError(value.cause);
-}
-/**
- * Extracts a human-readable error string from a failed HTTP response.
- * Attempts to parse the server's `{ error: { code, message } }` JSON structure,
- * falls back to plain text, and ultimately to status + statusText.
- * Never throws — always returns a usable string.
- */
-export async function extractResponseError(response) {
-    const base = `${response.status} ${response.statusText}`;
-    try {
-        const cloned = response.clone();
-        const text = await cloned.text();
-        if (!text) {
-            return base;
-        }
-        try {
-            const json = JSON.parse(text);
-            const parsed = apiErrorSchema.safeParse(json);
-            if (parsed.success) {
-                const { code, message } = parsed.data.error;
-                return `${base}: ${message} (${code})`;
-            }
-        }
-        catch {
-            // Not JSON
-        }
-        return `${base}: ${text}`;
-    }
-    catch {
-        // Body unreadable
-    }
-    return base;
-}

package/dist/cli/src/memory-storage.js

@@ -1,12 +0,0 @@
-export class MemoryStorage {
-    store = new Map();
-    getItem(key) {
-        return this.store.get(key) ?? null;
-    }
-    setItem(key, value) {
-        this.store.set(key, value);
-    }
-    removeItem(key) {
-        this.store.delete(key);
-    }
-}

package/dist/cli/src/rpc-error-codes.js

@@ -1,28 +0,0 @@
-/**
- * RPC error codes used in Prividium SDK.
- * Standard codes follow JSON-RPC 2.0 spec, custom codes handle auth/authz.
- */
-/**
- * Internal error (-32603). Standard JSON-RPC 2.0 code for server errors.
- */
-export const INTERNAL_RPC_ERROR = -32603;
-/**
- * Invalid Request (-32600). Standard JSON-RPC 2.0 code for malformed requests.
- */
-export const INVALID_REQUEST_ERROR_CODE = -32600;
-/**
- * Method not found (-32601). Standard JSON-RPC 2.0 code for unknown/unavailable methods.
- */
-export const METHOD_NOT_FOUND_ERROR_CODE = -32601;
-/**
- * Invalid params (-32602). Standard JSON-RPC 2.0 code for bad parameters.
- */
-export const BAD_RPC_PARAMS_ERROR_CODE = -32602;
-/**
- * Unauthorized (-32090). Custom code for authentication failures (no/invalid token).
- */
-export const UNAUTHORIZED_ERROR_CODE = -32090;
-/**
- * Forbidden (-32001). Custom code for authorization failures (valid token, insufficient permissions).
- */
-export const FORBIDDEN_ERROR_CODE = -32001;

package/dist/cli/src/siwe-auth.js

@@ -1,70 +0,0 @@
-import { z } from 'zod';
-import { extractResponseError } from './error-utils.js';
-const siweMessageResponseSchema = z.object({
-    msg: z.string(),
-    nonceToken: z.string()
-});
-const siweLoginResponseSchema = z.object({
-    token: z.string(),
-    expiresAt: z.string()
-});
-const mfaResponseSchema = z.object({
-    requiresMfa: z.literal(true)
-});
-export class SiweAuth {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    get address() {
-        return this.config.account.address;
-    }
-    async authorize() {
-        // Step 1: Request SIWE message
-        const siweResponse = await fetch(new URL('/api/siwe-messages', this.config.prividiumApiBaseUrl), {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                address: this.config.account.address,
-                ...(this.config.domain && { domain: this.config.domain })
-            })
-        });
-        if (!siweResponse.ok) {
-            const detail = await extractResponseError(siweResponse);
-            throw new Error(`Failed to get SIWE message: ${detail}`);
-        }
-        const siweData = siweMessageResponseSchema.parse(await siweResponse.json());
-        // Step 2: Sign the message
-        const signature = await this.config.account.signMessage({ message: siweData.msg });
-        // Step 3: Login
-        const loginResponse = await fetch(new URL('/api/auth/login/crypto-native', this.config.prividiumApiBaseUrl), {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ message: siweData.msg, signature, nonceToken: siweData.nonceToken })
-        });
-        if (!loginResponse.ok) {
-            const detail = await extractResponseError(loginResponse);
-            throw new Error(`SIWE login failed: ${detail}`);
-        }
-        const loginJson = await loginResponse.json();
-        // Check for MFA requirement (admin users with passkeys)
-        const mfaParsed = mfaResponseSchema.safeParse(loginJson);
-        if (mfaParsed.success) {
-            throw new Error('SIWE login requires MFA which is not supported in programmatic auth');
-        }
-        const loginData = siweLoginResponseSchema.parse(loginJson);
-        // Step 4: Store token directly (login response includes expiresAt)
-        const tokenData = {
-            rawToken: loginData.token,
-            expiresAt: new Date(loginData.expiresAt)
-        };
-        this.config.tokenManager.setTokenDirect(tokenData);
-        return tokenData;
-    }
-    unauthorize() {
-        this.config.tokenManager.clearToken();
-    }
-    isAuthorized() {
-        return this.config.tokenManager.isAuthorized();
-    }
-}

package/dist/cli/src/storage.js

@@ -1,142 +0,0 @@
-import { addYears } from 'date-fns/addYears';
-import { z } from 'zod';
-import { STORAGE_KEYS, tokenDataSchema } from './types.js';
-export class LocalStorage {
-    getItem(key) {
-        if (typeof localStorage === 'undefined') {
-            return null;
-        }
-        return localStorage.getItem(key);
-    }
-    setItem(key, value) {
-        if (typeof localStorage !== 'undefined') {
-            localStorage.setItem(key, value);
-        }
-    }
-    removeItem(key) {
-        if (typeof localStorage !== 'undefined') {
-            localStorage.removeItem(key);
-        }
-    }
-}
-export class TokenManager {
-    storage;
-    chainId;
-    prividiumApiUrl;
-    tokenCache = null;
-    onAuthExpiry;
-    constructor(storage, chainId, prividiumApiUrl, onAuthExpiry) {
-        this.storage = storage;
-        this.chainId = chainId;
-        this.prividiumApiUrl = prividiumApiUrl;
-        this.onAuthExpiry = onAuthExpiry ?? (() => { });
-    }
-    get tokenKey() {
-        return `${STORAGE_KEYS.TOKEN_PREFIX}${this.chainId}`;
-    }
-    get stateKey() {
-        return `${STORAGE_KEYS.STATE_PREFIX}${this.chainId}`;
-    }
-    getToken() {
-        if (this.tokenCache) {
-            return this.tokenCache;
-        }
-        const tokenDataStr = this.storage.getItem(this.tokenKey);
-        if (!tokenDataStr) {
-            return null;
-        }
-        try {
-            const tokenData = tokenDataSchema.safeParse(JSON.parse(tokenDataStr));
-            if (!tokenData.success) {
-                return null;
-            }
-            if (new Date() > tokenData.data.expiresAt) {
-                this.clearToken();
-                this.onAuthExpiry();
-                return null;
-            }
-            this.tokenCache = tokenData.data;
-            return tokenData.data;
-        }
-        catch (e) {
-            if (e instanceof SyntaxError) {
-                return null;
-            }
-            throw e;
-        }
-    }
-    async getTokenExpiration(token) {
-        const currentSessionRes = await fetch(new URL('/api/auth/current-session', this.prividiumApiUrl), {
-            headers: {
-                authorization: `Bearer ${token}`
-            }
-        });
-        if (!currentSessionRes.ok) {
-            throw new Error('Error accessing prividium api');
-        }
-        if (currentSessionRes.status === 404) {
-            // NOTE: 404 indicates /api/auth/current-session is unavailable (older API),
-            // so the token expiration cannot be retrieved. The SDK must defer expiry
-            // handling until a 403 response is received; a far-future date prevents
-            // premature onExpiry callbacks before validation fails.
-            return addYears(new Date(), 100);
-        }
-        if (!currentSessionRes.ok || currentSessionRes.status !== 200) {
-            throw new Error('Error accessing prividium api');
-        }
-        const schema = z.object({
-            expiresAt: z.iso.datetime()
-        });
-        const parsed = schema.safeParse(await currentSessionRes.json());
-        if (!parsed.success) {
-            throw new Error('Invalid response from prividium api');
-        }
-        return new Date(parsed.data.expiresAt);
-    }
-    async setToken(rawToken) {
-        try {
-            const expiresAt = await this.getTokenExpiration(rawToken);
-            const tokenData = { rawToken, expiresAt };
-            this.storage.setItem(this.tokenKey, JSON.stringify(tokenData));
-            this.tokenCache = tokenData;
-            return tokenData;
-        }
-        catch (error) {
-            this.clearToken();
-            throw error;
-        }
-    }
-    /**
-     * Stores token data directly without fetching expiration from the API.
-     * Used by SIWE auth where the login response already includes expiresAt.
-     */
-    setTokenDirect(tokenData) {
-        this.storage.setItem(this.tokenKey, JSON.stringify(tokenData));
-        this.tokenCache = tokenData;
-    }
-    clearToken() {
-        this.tokenCache = null;
-        this.storage.removeItem(this.tokenKey);
-    }
-    isAuthorized() {
-        const tokenData = this.getToken();
-        if (tokenData === null) {
-            return false;
-        }
-        const isExpired = new Date() > tokenData.expiresAt;
-        if (isExpired) {
-            this.onAuthExpiry();
-            this.clearToken();
-        }
-        return !isExpired;
-    }
-    setState(state) {
-        this.storage.setItem(this.stateKey, state);
-    }
-    getState() {
-        return this.storage.getItem(this.stateKey);
-    }
-    clearState() {
-        this.storage.removeItem(this.stateKey);
-    }
-}

package/dist/cli/src/types.js

@@ -1,46 +0,0 @@
-import { z } from 'zod';
-export const roleSchema = z.object({
-    roleName: z.string()
-});
-export const profileSchema = z.object({
-    id: z.string(),
-    createdAt: z.coerce.date(),
-    displayName: z.string(),
-    updatedAt: z.coerce.date(),
-    roles: roleSchema.array(),
-    wallets: z.unknown().array()
-});
-export const authorizeTransactionResponseSchema = z.object({
-    message: z.string(),
-    activeUntil: z.string()
-});
-const methodSelectorSchema = z.string().regex(/^0x[0-9a-fA-F]{8}$/, 'Invalid method selector format');
-const addressSchema = z.string().regex(/^0x[0-9a-fA-F]{40}$/i, 'Invalid address format');
-export const contractAbiResponseSchema = z.object({
-    contractAddress: addressSchema,
-    name: z.string().nullable(),
-    abi: z.array(z.record(z.string(), z.unknown())),
-    functions: z.array(z.object({
-        selector: methodSelectorSchema,
-        signature: z.string(),
-        name: z.string(),
-        accessType: z.enum(['read', 'write'])
-    }))
-});
-export const tokenDataSchema = z.object({
-    rawToken: z.string(),
-    expiresAt: z.coerce.date()
-});
-export const AUTH_ERRORS = {
-    INVALID_STATE: 'Invalid state parameter',
-    NO_RECEIVED_STATE: 'No state parameter',
-    NO_SAVED_STATE: 'No saved state',
-    NO_TOKEN: 'No token received',
-    EXPIRED_TOKEN: 'Expired token',
-    INVALID_JWT: 'Invalid JWT format',
-    AUTH_REQUIRED: 'Authentication required'
-};
-export const STORAGE_KEYS = {
-    STATE_PREFIX: 'prividium_auth_state_',
-    TOKEN_PREFIX: 'prividium_token_'
-};

package/dist/cli/tsconfig.cli.tsbuildinfo

@@ -1 +0,0 @@
-{"root":["../../cli/base-cli.ts","../../cli/index.ts","../../cli/commands/config.ts","../../cli/commands/doctor.ts","../../cli/commands/proxy.ts","../../cli/commands/doctor/constants.ts","../../cli/commands/doctor/profile.ts","../../cli/commands/doctor/stages.ts","../../cli/commands/doctor/types.ts","../../cli/commands/doctor/utils.ts","../../cli/commands/doctor/clients/browser-auth.ts","../../cli/commands/doctor/clients/http.ts","../../cli/commands/doctor/clients/rpc.ts","../../cli/commands/doctor/clients/wallet-api.ts","../../cli/commands/doctor/probes/authentication.ts","../../cli/commands/doctor/probes/bridging.ts","../../cli/commands/doctor/probes/global.ts","../../cli/commands/doctor/probes/wallet-api.ts","../../cli/commands/doctor/probes/wallet.ts","../../cli/commands/doctor/probes/authentication/authentication.ts","../../cli/commands/doctor/probes/authentication/wallet-preconditions.ts","../../cli/commands/doctor/probes/bridging/bridging.ts","../../cli/commands/doctor/probes/global/input-validation.ts","../../cli/commands/doctor/probes/global/reachability.ts","../../cli/commands/doctor/probes/wallet/authenticated-rpc.ts","../../cli/commands/doctor/probes/wallet/authorization-and-wallet-rpc.ts","../../cli/commands/doctor/report/build.ts","../../cli/commands/doctor/report/render.ts","../../cli/commands/utils/show-prividium-header.ts","../../cli/commands/utils/url-config.ts","../../cli/server/config-file.ts","../../cli/server/connection-workflow.ts","../../cli/server/server.ts"],"version":"5.8.3"}