scorezilla 0.3.0 → 0.3.1

package/dist/server.cjs

@@ -24,6 +24,29 @@ function validateSecretKey(cfg) {
   return { keyId: match[1], secret: sk };
 }
 
+// src/uuid.ts
+function uuidV4FromBytes(bytes) {
+  bytes[6] = (bytes[6] ?? 0) & 15 | 64;
+  bytes[8] = (bytes[8] ?? 0) & 63 | 128;
+  let hex = "";
+  for (const b of bytes) {
+    hex += b.toString(16).padStart(2, "0");
+  }
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function randomUUID() {
+  const c = globalThis.crypto;
+  if (c && typeof c.randomUUID === "function") {
+    return c.randomUUID();
+  }
+  if (c && typeof c.getRandomValues === "function") {
+    return uuidV4FromBytes(c.getRandomValues(new Uint8Array(16)));
+  }
+  throw new Error(
+    "scorezilla: no Web Crypto RNG available (neither crypto.randomUUID nor crypto.getRandomValues). The SDK requires Node \u2265 20 or a modern browser."
+  );
+}
+
 // src/hmac.ts
 var enc = new TextEncoder();
 var HMAC_AUTH_SCHEME = "Scorezilla-HMAC-SHA256";
@@ -86,13 +109,7 @@ async function buildHmacAuthHeader(args) {
   return `${HMAC_AUTH_SCHEME} keyId=${args.keyId}, ts=${ts}, nonce=${nonce}, signature=${signature}${vParam}`;
 }
 function generateNonce() {
-  const c = globalThis.crypto;
-  if (!c || typeof c.randomUUID !== "function") {
-    throw new Error(
-      "scorezilla: globalThis.crypto.randomUUID is unavailable. The HMAC server adapter requires Node \u2265 20 or a modern runtime."
-    );
-  }
-  return c.randomUUID();
+  return randomUUID();
 }
 function base64UrlEncode(bytes) {
   let bin = "";
@@ -360,14 +377,14 @@ function shouldRetryError(err) {
   return false;
 }
 function generateIdempotencyKey() {
-  const c = globalThis.crypto;
-  if (!c || typeof c.randomUUID !== "function") {
+  try {
+    return randomUUID();
+  } catch {
     throw new ScorezillaError(
-      "scorezilla: globalThis.crypto.randomUUID is unavailable. The SDK requires Node \u2265 20 or a modern browser. Check your runtime.",
+      "scorezilla: no Web Crypto RNG available (neither crypto.randomUUID nor crypto.getRandomValues). The SDK requires Node \u2265 20 or a modern browser.",
       { status: 0, code: "internal_error" }
     );
   }
-  return c.randomUUID();
 }
 function sleep(ms, signal) {
   return new Promise((resolve, reject) => {
@@ -842,7 +859,7 @@ var Scorezilla = class _Scorezilla {
    *  Mirrors the static on the public-key client so consumers can log
    *  the running SDK build the same way regardless of which surface
    *  they imported. */
-  static version = "0.3.0";
+  static version = "0.3.1";
   #keyId;
   #secret;
   #baseUrl;