spaps-sdk 1.1.2 → 1.1.3

package/dist/index.mjs

@@ -259,6 +259,30 @@ var SPAPSClient = class {
       }
     );
   }
+  // -------- Helper methods (for tests and convenience) --------
+  /** Raw API request helper that returns an ApiResponse-like shape */
+  async request(method, url, data, requiresAuth = false) {
+    try {
+      const config = { method, url, data };
+      if (requiresAuth && this.accessToken) {
+        config.headers = { ...config.headers || {}, Authorization: `Bearer ${this.accessToken}` };
+      }
+      const res = await this.client.request(config);
+      return { success: true, data: res.data };
+    } catch (err) {
+      const message = err?.response?.data?.error?.message || err?.message || "Request failed";
+      return Promise.reject(new Error(message));
+    }
+  }
+  /** Health check helper that returns boolean */
+  async healthCheck() {
+    try {
+      const res = await this.client.get("/health");
+      return Boolean(res.data?.success);
+    } catch {
+      return false;
+    }
+  }
   // Authentication Methods
   async login(email, password) {
     const response = await this.client.post("/api/auth/login", {
@@ -305,6 +329,327 @@ var SPAPSClient = class {
   async getUser() {
     return this.client.get("/api/auth/user");
   }
+  // -------- Facade namespaces (compat with previous SDK shape) --------
+  auth = {
+    /**
+     * Verify magic link token without mutating token state.
+     * Returns a simple success object from the API.
+     */
+    getNonce: async (walletAddress) => {
+      const res = await this.client.post("/api/auth/nonce", { wallet_address: walletAddress });
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Failed to generate nonce");
+      return body?.data ?? body;
+    },
+    signInWithWallet: async (req) => {
+      const res = await this.client.post("/api/auth/wallet-sign-in", req);
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Wallet sign-in failed");
+      const data = body?.data ?? body;
+      this.accessToken = data.access_token;
+      this.refreshToken = data.refresh_token;
+      return data;
+    },
+    authenticateWallet: async (walletAddress, signFn, chainType, username) => {
+      const nonce = await this.auth.getNonce(walletAddress);
+      const signature = await signFn(nonce.message);
+      return this.auth.signInWithWallet({ wallet_address: walletAddress, signature, message: nonce.message, chain_type: chainType, username });
+    },
+    signInWithPassword: async (payload) => {
+      const res = await this.client.post("/api/auth/login", payload);
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Login failed");
+      const data = body?.data ?? body;
+      this.accessToken = data.access_token;
+      this.refreshToken = data.refresh_token;
+      return data;
+    },
+    requestMagicLink: async (payload) => {
+      await this.client.post("/api/auth/magic-link", payload);
+    },
+    requestPasswordReset: async (payload) => {
+      await this.client.post("/api/auth/password-reset", payload);
+    },
+    confirmPasswordReset: async (payload) => {
+      await this.client.post("/api/auth/reset-password-confirm", payload);
+    },
+    register: async (payload) => {
+      const res = await this.client.post("/api/auth/register", payload);
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Register failed");
+      const data = body?.data ?? body;
+      this.accessToken = data.access_token;
+      this.refreshToken = data.refresh_token;
+      return data;
+    },
+    /**
+     * Verify a magic link token. Does not set access/refresh tokens.
+     * Consumers should redirect or prompt login based on the returned status.
+     */
+    verifyMagicLink: async (payload) => {
+      const res = await this.client.post("/api/auth/verify-magic-link", payload);
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Failed to verify magic link");
+      return body?.data || body || { success: true };
+    },
+    solana: {
+      linkWallet: async (payload) => {
+        const res = await this.client.post("/api/auth/solana/link-wallet", payload);
+        return res.data;
+      },
+      verifySignature: async (payload) => {
+        const res = await this.client.post("/api/auth/solana/verify-signature", payload);
+        return res.data;
+      },
+      generateMessage: async (wallet_address) => {
+        const res = await this.client.get(`/api/auth/solana/generate-message/${wallet_address}`);
+        return res.data;
+      },
+      getWallets: async () => {
+        const res = await this.client.get("/api/auth/solana/wallets");
+        return res.data;
+      },
+      networkInfo: async () => {
+        const res = await this.client.get("/api/auth/solana/network-info");
+        return res.data;
+      }
+    },
+    ethereum: {
+      linkWallet: async (payload) => {
+        const res = await this.client.post("/api/auth/ethereum/link-wallet", payload);
+        return res.data;
+      },
+      verifySignature: async (payload) => {
+        const res = await this.client.post("/api/auth/ethereum/verify-signature", payload);
+        return res.data;
+      },
+      verifyTypedData: async (payload) => {
+        const res = await this.client.post("/api/auth/ethereum/verify-typed-data", payload);
+        return res.data;
+      },
+      generateMessage: async (wallet_address) => {
+        const res = await this.client.get(`/api/auth/ethereum/generate-message/${wallet_address}`);
+        return res.data;
+      },
+      generateTypedData: async (wallet_address) => {
+        const res = await this.client.get(`/api/auth/ethereum/generate-typed-data/${wallet_address}`);
+        return res.data;
+      },
+      getWallets: async () => {
+        const res = await this.client.get("/api/auth/ethereum/wallets");
+        return res.data;
+      },
+      networkInfo: async () => {
+        const res = await this.client.get("/api/auth/ethereum/network-info");
+        return res.data;
+      },
+      balance: async (wallet_address) => {
+        const res = await this.client.get(`/api/auth/ethereum/balance/${wallet_address}`);
+        return res.data;
+      },
+      contractCheck: async (wallet_address, contract_address) => {
+        const res = await this.client.get(`/api/auth/ethereum/contract-check/${wallet_address}/${contract_address}`);
+        return res.data;
+      }
+    },
+    refreshToken: async (refreshToken) => {
+      const res = await this.client.post("/api/auth/refresh", { refresh_token: refreshToken });
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Token refresh failed");
+      const data = body?.data ?? body;
+      this.accessToken = data.access_token;
+      this.refreshToken = data.refresh_token;
+      return data;
+    },
+    /**
+     * Logout and clear tokens. Network errors are intentionally swallowed
+     * to avoid trapping users in a bad state during sign‑out flows.
+     */
+    logout: async () => {
+      try {
+        await this.client.post("/api/auth/logout");
+      } catch {
+      } finally {
+        this.accessToken = void 0;
+        this.refreshToken = void 0;
+      }
+    },
+    getCurrentUser: async () => {
+      const res = await this.client.get("/api/auth/user");
+      const body = res.data;
+      if (body?.success === false) throw new Error(body?.error?.message || "Failed to get user profile");
+      return body?.data?.user ?? body?.user;
+    },
+    isAuthenticated: () => !!this.accessToken
+  };
+  payments = {
+    createCheckoutSession: async (payload) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.post("/api/stripe/checkout-sessions", payload, { headers });
+      return res.data;
+    },
+    createPaymentCheckout: async (params) => {
+      const payload = { mode: "payment", line_items: [{ price_id: params.price_id, quantity: params.quantity ?? 1 }], success_url: params.success_url, cancel_url: params.cancel_url };
+      return this.payments.createCheckoutSession(payload);
+    },
+    createSubscriptionCheckout: async (params) => {
+      const payload = { mode: "subscription", line_items: [{ price_id: params.price_id, quantity: 1 }], success_url: params.success_url, cancel_url: params.cancel_url };
+      if (params.trial_period_days) payload.subscription_data = { trial_period_days: params.trial_period_days };
+      return this.payments.createCheckoutSession(payload);
+    },
+    getCheckoutSession: async (sessionId) => {
+      const res = await this.client.get(`/api/stripe/checkout-sessions/${sessionId}`);
+      return res.data;
+    },
+    listCheckoutSessions: async (query = {}) => {
+      const q = new URLSearchParams();
+      if (query.limit) q.append("limit", String(query.limit));
+      if (query.starting_after) q.append("starting_after", query.starting_after);
+      const res = await this.client.get(`/api/stripe/checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`);
+      return res.data;
+    },
+    expireCheckoutSession: async (sessionId) => {
+      const res = await this.client.post(`/api/stripe/checkout-sessions/${sessionId}/expire`);
+      return res.data;
+    },
+    listProducts: async (query = {}) => {
+      const q = new URLSearchParams();
+      if (query.category) q.append("category", query.category);
+      if (typeof query.active === "boolean") q.append("active", String(query.active));
+      if (query.limit) q.append("limit", String(query.limit));
+      if (query.starting_after) q.append("starting_after", query.starting_after);
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.get(`/api/stripe/products${q.toString() ? `?${q.toString()}` : ""}`, { headers });
+      return res.data;
+    },
+    getProduct: async (productId) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.get(`/api/stripe/products/${productId}`, { headers });
+      return res.data;
+    },
+    createCustomerPortalSession: async (payload) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.post("/api/stripe/portal-session", payload, { headers });
+      return res.data;
+    },
+    // Guest checkout helpers
+    createGuestCheckoutSession: async (payload) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.post("/api/stripe/guest-checkout-sessions", payload, { headers });
+      return res.data;
+    },
+    getGuestCheckoutSession: async (sessionId) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.get(`/api/stripe/guest-checkout-sessions/${sessionId}`, { headers });
+      return res.data;
+    },
+    listGuestCheckoutSessions: async (query = {}) => {
+      const q = new URLSearchParams();
+      if (query.limit) q.append("limit", String(query.limit));
+      if (query.starting_after) q.append("starting_after", query.starting_after);
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.get(`/api/stripe/guest-checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`, { headers });
+      return res.data;
+    },
+    convertGuestCheckoutSession: async (payload) => {
+      const headers = {};
+      if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
+      const res = await this.client.post("/api/stripe/guest-checkout-sessions/convert", payload, { headers });
+      return res.data;
+    },
+    convertGuestCheckout: async (payload) => this.payments.convertGuestCheckoutSession(payload),
+    // Super-admin product helpers (admin token required)
+    listAllProductsSuperAdmin: async () => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.get("/api/stripe/products/super-admin/all", { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    updateProductSuperAdmin: async (productId, updates) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.put(`/api/stripe/products/super-admin/${productId}`, updates, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    deleteProductSuperAdmin: async (productId) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.delete(`/api/stripe/products/super-admin/${productId}`, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    createProductWithPrice: async (payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post("/api/stripe/products/with-price", payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    createProductWithPriceSuperAdmin: async (productId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    setDefaultPrice: async (productId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post(`/api/stripe/products/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    setDefaultPriceSuperAdmin: async (productId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.put(`/api/stripe/products/super-admin/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    createDefaultNewPrice: async (productId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post(`/api/stripe/products/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    superAdminListAllProducts: async () => this.payments.listAllProductsSuperAdmin(),
+    superAdminUpdateProduct: async (productId, updates) => this.payments.updateProductSuperAdmin(productId, updates),
+    superAdminArchiveProduct: async (productId) => this.payments.deleteProductSuperAdmin(productId),
+    superAdminCreateProductWithPrice: async (applicationId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post(`/api/stripe/products/super-admin/${applicationId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    superAdminCreatePriceAndSetDefault: async (productId, payload) => {
+      if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
+      const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
+      return res.data;
+    },
+    superAdminSetDefaultPrice: async (productId, payload) => this.payments.setDefaultPriceSuperAdmin(productId, payload)
+  };
+  sessions = {
+    getCurrent: async () => {
+      const res = await this.client.get("/api/sessions/current", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data;
+    },
+    list: async (params = {}) => {
+      const q = new URLSearchParams();
+      if (params.limit) q.append("limit", String(params.limit));
+      if (params.starting_after) q.append("starting_after", params.starting_after);
+      const res = await this.client.get(`/api/sessions${q.toString() ? `?${q.toString()}` : ""}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data;
+    },
+    validate: async () => {
+      const res = await this.client.post("/api/sessions/validate", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data || { valid: true };
+    },
+    revoke: async (sessionId) => {
+      const res = await this.client.delete(`/api/sessions/${sessionId}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data || { revoked: true };
+    },
+    revokeAll: async () => {
+      const res = await this.client.delete("/api/sessions/all", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data || { revoked: true };
+    },
+    touch: async () => {
+      const res = await this.client.post("/api/sessions/touch", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
+      return res.data || { touched: true };
+    }
+  };
   // Stripe Methods
   async createCheckoutSession(priceId, successUrl, cancelUrl) {
     return this.client.post("/api/stripe/create-checkout-session", {
@@ -434,12 +779,106 @@ var SPAPSClient = class {
   }
 };
 var index_default = SPAPSClient;
+var TokenManager = class _TokenManager {
+  static ACCESS_TOKEN_KEY = "sweet_potato_access_token";
+  static REFRESH_TOKEN_KEY = "sweet_potato_refresh_token";
+  static USER_KEY = "sweet_potato_user";
+  static getStorage() {
+    if (typeof globalThis !== "undefined" && globalThis.localStorage) return globalThis.localStorage;
+    if (typeof globalThis !== "undefined" && globalThis.window?.localStorage) return globalThis.window.localStorage;
+    if (typeof global !== "undefined" && global.window?.localStorage) return global.window.localStorage;
+    return null;
+  }
+  static storeTokens(tokens) {
+    const s = _TokenManager.getStorage();
+    if (s) {
+      s.setItem(_TokenManager.ACCESS_TOKEN_KEY, tokens.access_token);
+      s.setItem(_TokenManager.REFRESH_TOKEN_KEY, tokens.refresh_token);
+      s.setItem(_TokenManager.USER_KEY, JSON.stringify(tokens.user));
+    }
+  }
+  static getAccessToken() {
+    const s = _TokenManager.getStorage();
+    return s ? s.getItem(_TokenManager.ACCESS_TOKEN_KEY) : null;
+  }
+  static getRefreshToken() {
+    const s = _TokenManager.getStorage();
+    return s ? s.getItem(_TokenManager.REFRESH_TOKEN_KEY) : null;
+  }
+  static getStoredUser() {
+    const s = _TokenManager.getStorage();
+    if (!s) return null;
+    const v = s.getItem(_TokenManager.USER_KEY);
+    return v ? JSON.parse(v) : null;
+  }
+  static clearTokens() {
+    const s = _TokenManager.getStorage();
+    if (s) {
+      s.removeItem(_TokenManager.ACCESS_TOKEN_KEY);
+      s.removeItem(_TokenManager.REFRESH_TOKEN_KEY);
+      s.removeItem(_TokenManager.USER_KEY);
+    }
+  }
+  static isTokenExpired(token) {
+    try {
+      const parts = token.split(".");
+      if (parts.length !== 3 || !parts[1]) return true;
+      const payload = JSON.parse(atob(parts[1]));
+      const now = Math.floor(Date.now() / 1e3);
+      return payload.exp < now;
+    } catch {
+      return true;
+    }
+  }
+  static async autoRefreshToken(sdk) {
+    const accessToken = _TokenManager.getAccessToken();
+    const refreshToken = _TokenManager.getRefreshToken();
+    if (!accessToken || !refreshToken) return false;
+    if (!_TokenManager.isTokenExpired(accessToken)) {
+      sdk.setAccessToken(accessToken);
+      return true;
+    }
+    try {
+      const newTokens = await sdk.auth.refreshToken(refreshToken);
+      _TokenManager.storeTokens(newTokens);
+      return true;
+    } catch {
+      _TokenManager.clearTokens();
+      return false;
+    }
+  }
+};
+var WalletUtils = class _WalletUtils {
+  static detectChainType(address) {
+    if (/^0x[a-fA-F0-9]{40}$/.test(address)) return "ethereum";
+    if (/^bc1[a-z0-9]{39,59}$/.test(address)) return "bitcoin";
+    if (/^[1-9A-HJ-NP-Za-km-z]{32}$/.test(address) || /^[1-9A-HJ-NP-Za-km-z]{44}$/.test(address)) return "solana";
+    if (/^[13][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(address) && address.length >= 26 && address.length <= 35) return "bitcoin";
+    if (/^[1-9A-HJ-NP-Za-km-z]{35,44}$/.test(address)) return "solana";
+    return null;
+  }
+  static isValidAddress(address, chainType) {
+    if (!chainType) chainType = _WalletUtils.detectChainType(address) || "ethereum";
+    switch (chainType) {
+      case "solana":
+        return /^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(address);
+      case "ethereum":
+      case "base":
+        return /^0x[a-fA-F0-9]{40}$/.test(address);
+      case "bitcoin":
+        return /^[13][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(address) || /^bc1[a-z0-9]{39,59}$/.test(address);
+      default:
+        return false;
+    }
+  }
+};
 export {
   DEFAULT_ADMIN_ACCOUNTS,
   PermissionChecker,
   SPAPSClient as SPAPS,
   SPAPSClient,
-  SPAPSClient as SweetPotatoSDK,
+  TokenManager,
+  WalletUtils,
   canAccessAdmin,
   createPermissionChecker,
   index_default as default,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking and role-based access control",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -34,17 +34,17 @@
     "wallet-auth"
   ],
   "author": "buildooor",
-  "license": "MIT",
+  "license": "UNLICENSED",
   "repository": {
     "type": "git",
-    "url": "https://github.com/buildooor/sweet-potato",
-    "directory": "packages/sdk"
+    "url": "https://github.com/build000r"
   },
-  "homepage": "https://github.com/buildooor/sweet-potato/tree/main/packages/sdk",
+  "homepage": "https://www.buildooor.com/services",
   "bugs": {
-    "url": "https://github.com/buildooor/sweet-potato/issues"
+    "email": "buildooor@gmail.com"
   },
   "dependencies": {
+    "spaps-types": "^1.0.7",
     "axios": "^1.6.0",
     "cross-fetch": "^4.0.0"
   },