spaps-sdk 0.1.0 → 1.0.0

package/dist/index.d.mts

@@ -1,3 +1,86 @@
+/**
+ * Permission checking utilities for SPAPS SDK
+ * Client-side role and permission management
+ */
+interface User$1 {
+    id: string;
+    email?: string;
+    wallet_address?: string;
+    role?: string;
+    permissions?: string[];
+    tier?: string;
+}
+interface AdminConfig {
+    email: string;
+    wallets: {
+        ethereum: string;
+        solana: string;
+    };
+}
+interface PermissionCheckResult {
+    allowed: boolean;
+    reason?: string;
+    userRole: string;
+    requiredRole?: string;
+}
+declare const DEFAULT_ADMIN_ACCOUNTS: AdminConfig;
+/**
+ * Check if an identifier (email/wallet) is an admin account
+ */
+declare function isAdminAccount(identifier: string, customAdmins?: (string | AdminConfig)[]): boolean;
+/**
+ * Get user role based on identifier
+ */
+declare function getUserRole(identifier?: string, customAdmins?: (string | AdminConfig)[]): string;
+/**
+ * Check if user has specific permissions
+ */
+declare function hasPermission(user: User$1 | null, requiredPermissions: string | string[], customAdmins?: (string | AdminConfig)[]): boolean;
+/**
+ * Check if user can access admin features
+ */
+declare function canAccessAdmin(user: User$1 | null, customAdmins?: (string | AdminConfig)[]): PermissionCheckResult;
+/**
+ * Get role-aware error message
+ */
+declare function getRoleAwareErrorMessage(requiredRole: string, userRole: string, action?: string): string;
+/**
+ * Get user display information with role indicators
+ */
+declare function getUserDisplay(user: User$1 | null, customAdmins?: (string | AdminConfig)[]): {
+    displayName: string;
+    role: string;
+    badge: string | null;
+    isAdmin: boolean;
+};
+/**
+ * Permission checker class for easier usage
+ */
+declare class PermissionChecker {
+    private customAdmins;
+    constructor(customAdmins?: (string | AdminConfig)[]);
+    isAdmin(identifier: string): boolean;
+    getRole(identifier?: string): string;
+    hasPermission(user: User$1 | null, permissions: string | string[]): boolean;
+    canAccessAdmin(user: User$1 | null): PermissionCheckResult;
+    getErrorMessage(requiredRole: string, userRole: string, action?: string): string;
+    getUserDisplay(user: User$1 | null): {
+        displayName: string;
+        role: string;
+        badge: string | null;
+        isAdmin: boolean;
+    };
+    requiresAuth(user: User$1 | null): boolean;
+    requiresAdmin(user: User$1 | null): boolean;
+    addCustomAdmin(admin: string | AdminConfig): void;
+    removeCustomAdmin(admin: string | AdminConfig): void;
+}
+/**
+ * Create a permission checker instance
+ */
+declare function createPermissionChecker(customAdmins?: (string | AdminConfig)[]): PermissionChecker;
+declare const defaultPermissionChecker: PermissionChecker;
+
 /**
  * @spaps/sdk - Sweet Potato Authentication & Payment Service SDK
  * Zero-config client for SPAPS authentication and payments
@@ -79,4 +162,4 @@ declare class SPAPSClient {
     }>;
 }
 
-export { type AuthResponse, type CheckoutSession, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type Subscription, SPAPSClient as SweetPotatoSDK, type UsageBalance, type User, SPAPSClient as default };
+export { type AdminConfig, type AuthResponse, type CheckoutSession, DEFAULT_ADMIN_ACCOUNTS, type PermissionCheckResult, PermissionChecker, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type Subscription, SPAPSClient as SweetPotatoSDK, type UsageBalance, type User, canAccessAdmin, createPermissionChecker, SPAPSClient as default, defaultPermissionChecker, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount };

package/dist/index.d.ts

@@ -1,3 +1,86 @@
+/**
+ * Permission checking utilities for SPAPS SDK
+ * Client-side role and permission management
+ */
+interface User$1 {
+    id: string;
+    email?: string;
+    wallet_address?: string;
+    role?: string;
+    permissions?: string[];
+    tier?: string;
+}
+interface AdminConfig {
+    email: string;
+    wallets: {
+        ethereum: string;
+        solana: string;
+    };
+}
+interface PermissionCheckResult {
+    allowed: boolean;
+    reason?: string;
+    userRole: string;
+    requiredRole?: string;
+}
+declare const DEFAULT_ADMIN_ACCOUNTS: AdminConfig;
+/**
+ * Check if an identifier (email/wallet) is an admin account
+ */
+declare function isAdminAccount(identifier: string, customAdmins?: (string | AdminConfig)[]): boolean;
+/**
+ * Get user role based on identifier
+ */
+declare function getUserRole(identifier?: string, customAdmins?: (string | AdminConfig)[]): string;
+/**
+ * Check if user has specific permissions
+ */
+declare function hasPermission(user: User$1 | null, requiredPermissions: string | string[], customAdmins?: (string | AdminConfig)[]): boolean;
+/**
+ * Check if user can access admin features
+ */
+declare function canAccessAdmin(user: User$1 | null, customAdmins?: (string | AdminConfig)[]): PermissionCheckResult;
+/**
+ * Get role-aware error message
+ */
+declare function getRoleAwareErrorMessage(requiredRole: string, userRole: string, action?: string): string;
+/**
+ * Get user display information with role indicators
+ */
+declare function getUserDisplay(user: User$1 | null, customAdmins?: (string | AdminConfig)[]): {
+    displayName: string;
+    role: string;
+    badge: string | null;
+    isAdmin: boolean;
+};
+/**
+ * Permission checker class for easier usage
+ */
+declare class PermissionChecker {
+    private customAdmins;
+    constructor(customAdmins?: (string | AdminConfig)[]);
+    isAdmin(identifier: string): boolean;
+    getRole(identifier?: string): string;
+    hasPermission(user: User$1 | null, permissions: string | string[]): boolean;
+    canAccessAdmin(user: User$1 | null): PermissionCheckResult;
+    getErrorMessage(requiredRole: string, userRole: string, action?: string): string;
+    getUserDisplay(user: User$1 | null): {
+        displayName: string;
+        role: string;
+        badge: string | null;
+        isAdmin: boolean;
+    };
+    requiresAuth(user: User$1 | null): boolean;
+    requiresAdmin(user: User$1 | null): boolean;
+    addCustomAdmin(admin: string | AdminConfig): void;
+    removeCustomAdmin(admin: string | AdminConfig): void;
+}
+/**
+ * Create a permission checker instance
+ */
+declare function createPermissionChecker(customAdmins?: (string | AdminConfig)[]): PermissionChecker;
+declare const defaultPermissionChecker: PermissionChecker;
+
 /**
  * @spaps/sdk - Sweet Potato Authentication & Payment Service SDK
  * Zero-config client for SPAPS authentication and payments
@@ -79,4 +162,4 @@ declare class SPAPSClient {
     }>;
 }
 
-export { type AuthResponse, type CheckoutSession, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type Subscription, SPAPSClient as SweetPotatoSDK, type UsageBalance, type User, SPAPSClient as default };
+export { type AdminConfig, type AuthResponse, type CheckoutSession, DEFAULT_ADMIN_ACCOUNTS, type PermissionCheckResult, PermissionChecker, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type Subscription, SPAPSClient as SweetPotatoSDK, type UsageBalance, type User, canAccessAdmin, createPermissionChecker, SPAPSClient as default, defaultPermissionChecker, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount };

package/dist/index.js

@@ -30,13 +30,167 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  DEFAULT_ADMIN_ACCOUNTS: () => DEFAULT_ADMIN_ACCOUNTS,
+  PermissionChecker: () => PermissionChecker,
   SPAPS: () => SPAPSClient,
   SPAPSClient: () => SPAPSClient,
   SweetPotatoSDK: () => SPAPSClient,
-  default: () => index_default
+  canAccessAdmin: () => canAccessAdmin,
+  createPermissionChecker: () => createPermissionChecker,
+  default: () => index_default,
+  defaultPermissionChecker: () => defaultPermissionChecker,
+  getRoleAwareErrorMessage: () => getRoleAwareErrorMessage,
+  getUserDisplay: () => getUserDisplay,
+  getUserRole: () => getUserRole,
+  hasPermission: () => hasPermission,
+  isAdminAccount: () => isAdminAccount
 });
 module.exports = __toCommonJS(index_exports);
 var import_axios = __toESM(require("axios"));
+
+// src/permissions.ts
+var DEFAULT_ADMIN_ACCOUNTS = {
+  email: "buildooor@gmail.com",
+  wallets: {
+    ethereum: "0xa72bb7CeF1e4B2Cc144373d8dE0Add7CCc8DF4Ba",
+    solana: "HVEbdiYU3Rr34NHBSgKs7q8cvdTeZLqNL77Z1FB2vjLy"
+  }
+};
+function isAdminAccount(identifier, customAdmins = []) {
+  if (!identifier) return false;
+  const normalized = identifier.toLowerCase();
+  if (normalized === DEFAULT_ADMIN_ACCOUNTS.email.toLowerCase() || normalized === DEFAULT_ADMIN_ACCOUNTS.wallets.ethereum.toLowerCase() || normalized === DEFAULT_ADMIN_ACCOUNTS.wallets.solana.toLowerCase()) {
+    return true;
+  }
+  return customAdmins.some((admin) => {
+    if (typeof admin === "string") {
+      return admin.toLowerCase() === normalized;
+    }
+    if ("email" in admin && admin.email.toLowerCase() === normalized) {
+      return true;
+    }
+    if ("wallets" in admin) {
+      return Object.values(admin.wallets).some(
+        (wallet) => wallet.toLowerCase() === normalized
+      );
+    }
+    return false;
+  });
+}
+function getUserRole(identifier, customAdmins = []) {
+  if (!identifier) return "guest";
+  if (isAdminAccount(identifier, customAdmins)) {
+    return "admin";
+  }
+  return "user";
+}
+function hasPermission(user, requiredPermissions, customAdmins = []) {
+  if (!user) return false;
+  const identifier = user.email || user.wallet_address;
+  const userRole = getUserRole(identifier, customAdmins);
+  if (userRole === "admin") {
+    return true;
+  }
+  if (Array.isArray(requiredPermissions)) {
+    return requiredPermissions.every(
+      (permission) => user.permissions?.includes(permission)
+    );
+  }
+  return user.permissions?.includes(requiredPermissions) || false;
+}
+function canAccessAdmin(user, customAdmins = []) {
+  if (!user) {
+    return {
+      allowed: false,
+      reason: "Authentication required",
+      userRole: "guest",
+      requiredRole: "admin"
+    };
+  }
+  const identifier = user.email || user.wallet_address;
+  const userRole = getUserRole(identifier, customAdmins);
+  const isAdmin = userRole === "admin";
+  return {
+    allowed: isAdmin,
+    reason: isAdmin ? void 0 : "Admin privileges required",
+    userRole,
+    requiredRole: "admin"
+  };
+}
+function getRoleAwareErrorMessage(requiredRole, userRole, action = "perform this action") {
+  const messages = {
+    admin: {
+      user: `\u{1F512} Admin privileges required to ${action}. Please authenticate with an admin account.`,
+      guest: `\u{1F510} Authentication required. Please sign in with an admin account to ${action}.`
+    },
+    user: {
+      guest: `\u{1F510} Authentication required. Please sign in to ${action}.`
+    }
+  };
+  return messages[requiredRole]?.[userRole] || `Access denied. Required role: ${requiredRole}, current role: ${userRole}`;
+}
+function getUserDisplay(user, customAdmins = []) {
+  if (!user) {
+    return {
+      displayName: "Guest",
+      role: "guest",
+      badge: null,
+      isAdmin: false
+    };
+  }
+  const identifier = user.email || user.wallet_address;
+  const role = getUserRole(identifier, customAdmins);
+  const isAdmin = role === "admin";
+  return {
+    displayName: user.email || `${user.wallet_address?.slice(0, 6)}...${user.wallet_address?.slice(-4)}` || "User",
+    role,
+    badge: isAdmin ? "\u{1F451} Admin" : null,
+    isAdmin
+  };
+}
+var PermissionChecker = class {
+  customAdmins;
+  constructor(customAdmins = []) {
+    this.customAdmins = customAdmins;
+  }
+  isAdmin(identifier) {
+    return isAdminAccount(identifier, this.customAdmins);
+  }
+  getRole(identifier) {
+    return getUserRole(identifier, this.customAdmins);
+  }
+  hasPermission(user, permissions) {
+    return hasPermission(user, permissions, this.customAdmins);
+  }
+  canAccessAdmin(user) {
+    return canAccessAdmin(user, this.customAdmins);
+  }
+  getErrorMessage(requiredRole, userRole, action) {
+    return getRoleAwareErrorMessage(requiredRole, userRole, action);
+  }
+  getUserDisplay(user) {
+    return getUserDisplay(user, this.customAdmins);
+  }
+  // Convenience methods
+  requiresAuth(user) {
+    return !user;
+  }
+  requiresAdmin(user) {
+    return !this.canAccessAdmin(user).allowed;
+  }
+  addCustomAdmin(admin) {
+    this.customAdmins.push(admin);
+  }
+  removeCustomAdmin(admin) {
+    this.customAdmins = this.customAdmins.filter((a) => a !== admin);
+  }
+};
+function createPermissionChecker(customAdmins = []) {
+  return new PermissionChecker(customAdmins);
+}
+var defaultPermissionChecker = new PermissionChecker();
+
+// src/index.ts
 var SPAPSClient = class {
   client;
   apiKey;
@@ -185,7 +339,17 @@ var SPAPSClient = class {
 var index_default = SPAPSClient;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DEFAULT_ADMIN_ACCOUNTS,
+  PermissionChecker,
   SPAPS,
   SPAPSClient,
-  SweetPotatoSDK
+  SweetPotatoSDK,
+  canAccessAdmin,
+  createPermissionChecker,
+  defaultPermissionChecker,
+  getRoleAwareErrorMessage,
+  getUserDisplay,
+  getUserRole,
+  hasPermission,
+  isAdminAccount
 });

package/dist/index.mjs

@@ -1,5 +1,149 @@
 // src/index.ts
 import axios from "axios";
+
+// src/permissions.ts
+var DEFAULT_ADMIN_ACCOUNTS = {
+  email: "buildooor@gmail.com",
+  wallets: {
+    ethereum: "0xa72bb7CeF1e4B2Cc144373d8dE0Add7CCc8DF4Ba",
+    solana: "HVEbdiYU3Rr34NHBSgKs7q8cvdTeZLqNL77Z1FB2vjLy"
+  }
+};
+function isAdminAccount(identifier, customAdmins = []) {
+  if (!identifier) return false;
+  const normalized = identifier.toLowerCase();
+  if (normalized === DEFAULT_ADMIN_ACCOUNTS.email.toLowerCase() || normalized === DEFAULT_ADMIN_ACCOUNTS.wallets.ethereum.toLowerCase() || normalized === DEFAULT_ADMIN_ACCOUNTS.wallets.solana.toLowerCase()) {
+    return true;
+  }
+  return customAdmins.some((admin) => {
+    if (typeof admin === "string") {
+      return admin.toLowerCase() === normalized;
+    }
+    if ("email" in admin && admin.email.toLowerCase() === normalized) {
+      return true;
+    }
+    if ("wallets" in admin) {
+      return Object.values(admin.wallets).some(
+        (wallet) => wallet.toLowerCase() === normalized
+      );
+    }
+    return false;
+  });
+}
+function getUserRole(identifier, customAdmins = []) {
+  if (!identifier) return "guest";
+  if (isAdminAccount(identifier, customAdmins)) {
+    return "admin";
+  }
+  return "user";
+}
+function hasPermission(user, requiredPermissions, customAdmins = []) {
+  if (!user) return false;
+  const identifier = user.email || user.wallet_address;
+  const userRole = getUserRole(identifier, customAdmins);
+  if (userRole === "admin") {
+    return true;
+  }
+  if (Array.isArray(requiredPermissions)) {
+    return requiredPermissions.every(
+      (permission) => user.permissions?.includes(permission)
+    );
+  }
+  return user.permissions?.includes(requiredPermissions) || false;
+}
+function canAccessAdmin(user, customAdmins = []) {
+  if (!user) {
+    return {
+      allowed: false,
+      reason: "Authentication required",
+      userRole: "guest",
+      requiredRole: "admin"
+    };
+  }
+  const identifier = user.email || user.wallet_address;
+  const userRole = getUserRole(identifier, customAdmins);
+  const isAdmin = userRole === "admin";
+  return {
+    allowed: isAdmin,
+    reason: isAdmin ? void 0 : "Admin privileges required",
+    userRole,
+    requiredRole: "admin"
+  };
+}
+function getRoleAwareErrorMessage(requiredRole, userRole, action = "perform this action") {
+  const messages = {
+    admin: {
+      user: `\u{1F512} Admin privileges required to ${action}. Please authenticate with an admin account.`,
+      guest: `\u{1F510} Authentication required. Please sign in with an admin account to ${action}.`
+    },
+    user: {
+      guest: `\u{1F510} Authentication required. Please sign in to ${action}.`
+    }
+  };
+  return messages[requiredRole]?.[userRole] || `Access denied. Required role: ${requiredRole}, current role: ${userRole}`;
+}
+function getUserDisplay(user, customAdmins = []) {
+  if (!user) {
+    return {
+      displayName: "Guest",
+      role: "guest",
+      badge: null,
+      isAdmin: false
+    };
+  }
+  const identifier = user.email || user.wallet_address;
+  const role = getUserRole(identifier, customAdmins);
+  const isAdmin = role === "admin";
+  return {
+    displayName: user.email || `${user.wallet_address?.slice(0, 6)}...${user.wallet_address?.slice(-4)}` || "User",
+    role,
+    badge: isAdmin ? "\u{1F451} Admin" : null,
+    isAdmin
+  };
+}
+var PermissionChecker = class {
+  customAdmins;
+  constructor(customAdmins = []) {
+    this.customAdmins = customAdmins;
+  }
+  isAdmin(identifier) {
+    return isAdminAccount(identifier, this.customAdmins);
+  }
+  getRole(identifier) {
+    return getUserRole(identifier, this.customAdmins);
+  }
+  hasPermission(user, permissions) {
+    return hasPermission(user, permissions, this.customAdmins);
+  }
+  canAccessAdmin(user) {
+    return canAccessAdmin(user, this.customAdmins);
+  }
+  getErrorMessage(requiredRole, userRole, action) {
+    return getRoleAwareErrorMessage(requiredRole, userRole, action);
+  }
+  getUserDisplay(user) {
+    return getUserDisplay(user, this.customAdmins);
+  }
+  // Convenience methods
+  requiresAuth(user) {
+    return !user;
+  }
+  requiresAdmin(user) {
+    return !this.canAccessAdmin(user).allowed;
+  }
+  addCustomAdmin(admin) {
+    this.customAdmins.push(admin);
+  }
+  removeCustomAdmin(admin) {
+    this.customAdmins = this.customAdmins.filter((a) => a !== admin);
+  }
+};
+function createPermissionChecker(customAdmins = []) {
+  return new PermissionChecker(customAdmins);
+}
+var defaultPermissionChecker = new PermissionChecker();
+
+// src/index.ts
 var SPAPSClient = class {
   client;
   apiKey;
@@ -147,8 +291,18 @@ var SPAPSClient = class {
 };
 var index_default = SPAPSClient;
 export {
+  DEFAULT_ADMIN_ACCOUNTS,
+  PermissionChecker,
   SPAPSClient as SPAPS,
   SPAPSClient,
   SPAPSClient as SweetPotatoSDK,
-  index_default as default
+  canAccessAdmin,
+  createPermissionChecker,
+  index_default as default,
+  defaultPermissionChecker,
+  getRoleAwareErrorMessage,
+  getUserDisplay,
+  getUserRole,
+  hasPermission,
+  isAdminAccount
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "spaps-sdk",
-  "version": "0.1.0",
-  "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client for SPAPS",
+  "version": "1.0.0",
+  "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking and role-based access control",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {