telemetry-collector-core 0.0.0-stage → 0.0.0

package/dist/base32.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Crockford base32, lowercase, unpadded.
+ *
+ * Chosen over hex (shorter) and over standard RFC 4648 base32 (which includes the
+ * `i`/`l`/`o`/`u` characters — ambiguous when read aloud or retyped, and `u` is the
+ * one that lets a random token spell something unfortunate). Decoding is
+ * case-insensitive and folds the classic confusables, so a key transcribed by hand
+ * with `1` for `l` or `0` for `O` still resolves.
+ */
+/** Number of base32 characters needed to hold `byteLength` bytes. */
+export declare function base32Length(byteLength: number): number;
+export declare function base32Encode(bytes: Uint8Array): string;
+/** Returns `null` on any character outside the alphabet, rather than throwing. */
+export declare function base32Decode(text: string): Uint8Array | null;
+//# sourceMappingURL=base32.d.ts.map

package/dist/base32.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base32.d.ts","sourceRoot":"","sources":["../src/base32.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqBH,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAiBtD;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiB5D"}

package/dist/base32.js

@@ -0,0 +1,66 @@
+/**
+ * Crockford base32, lowercase, unpadded.
+ *
+ * Chosen over hex (shorter) and over standard RFC 4648 base32 (which includes the
+ * `i`/`l`/`o`/`u` characters — ambiguous when read aloud or retyped, and `u` is the
+ * one that lets a random token spell something unfortunate). Decoding is
+ * case-insensitive and folds the classic confusables, so a key transcribed by hand
+ * with `1` for `l` or `0` for `O` still resolves.
+ */
+const ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';
+const DECODE = {};
+for (let i = 0; i < ALPHABET.length; i++) {
+    DECODE[ALPHABET[i]] = i;
+    DECODE[ALPHABET[i].toUpperCase()] = i;
+}
+// Confusable folding, per the Crockford spec.
+for (const [from, to] of [
+    ['i', '1'],
+    ['I', '1'],
+    ['l', '1'],
+    ['L', '1'],
+    ['o', '0'],
+    ['O', '0'],
+]) {
+    DECODE[from] = DECODE[to];
+}
+/** Number of base32 characters needed to hold `byteLength` bytes. */
+export function base32Length(byteLength) {
+    return Math.ceil((byteLength * 8) / 5);
+}
+export function base32Encode(bytes) {
+    let out = '';
+    let bits = 0;
+    let value = 0;
+    for (const byte of bytes) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            out += ALPHABET[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    // Left-align the remainder into the final character rather than dropping it.
+    if (bits > 0)
+        out += ALPHABET[(value << (5 - bits)) & 31];
+    return out;
+}
+/** Returns `null` on any character outside the alphabet, rather than throwing. */
+export function base32Decode(text) {
+    const out = [];
+    let bits = 0;
+    let value = 0;
+    for (const char of text) {
+        const digit = DECODE[char];
+        if (digit === undefined)
+            return null;
+        value = (value << 5) | digit;
+        bits += 5;
+        if (bits >= 8) {
+            out.push((value >>> (bits - 8)) & 0xff);
+            bits -= 8;
+        }
+    }
+    return new Uint8Array(out);
+}
+//# sourceMappingURL=base32.js.map

package/dist/base32.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base32.js","sourceRoot":"","sources":["../src/base32.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAEpD,MAAM,MAAM,GAA2B,EAAE,CAAC;AAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;IACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AACD,8CAA8C;AAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;IACvB,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;CACF,EAAE,CAAC;IACX,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAE,CAAC;AAC7B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAE1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/fingerprint.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Grouping.
+ *
+ * Coalescing is what makes this service cheap: 10,000 copies of one crash must cost
+ * one row update, not 10,000 inserts. The fingerprint is the grouping key.
+ *
+ * Two deliberate choices:
+ *
+ * - **The channel and release are NOT part of the fingerprint.** An issue is meant to
+ *   span versions, so the admin view can say "this started in 1.4.2 and is still
+ *   happening in 1.4.4". `first_channel` / `last_channel` carry that instead.
+ * - **Line and column numbers are NOT part of the fingerprint.** They shift on every
+ *   unrelated edit to the file, which would fragment one long-lived issue into a new
+ *   one per build.
+ *
+ * Normalization is deliberately moderate. Over-normalizing silently merges unrelated
+ * bugs (lossy, and very hard to notice); under-normalizing shatters one bug into
+ * thousands (noisy, but obvious). When the default is wrong, a reporter can send an
+ * explicit `fingerprint` array, which wins outright.
+ */
+import type { StoredEvent } from './types.js';
+/**
+ * Collapses the parts of a message that vary per occurrence — ids, addresses,
+ * counters — while leaving the parts that identify the bug.
+ *
+ * Quoted substrings are intentionally left alone: in `Cannot read property 'foo' of
+ * undefined`, the `'foo'` usually *is* the distinguishing detail.
+ */
+export declare function normalizeMessage(message: string): string;
+/**
+ * The material the fingerprint hashes. Returned separately from the hash so tests
+ * (and the admin UI's "why is this grouped here?" view) can show the reasoning.
+ */
+export declare function fingerprintComponents(event: StoredEvent, appId: string): string[];
+export declare function computeFingerprint(event: StoredEvent, appId: string, seed: string): Promise<string>;
+/** Honors an explicit `fingerprint` override from the reporter. */
+export declare function resolveFingerprint(event: StoredEvent, appId: string, seed: string, override?: string[]): Promise<string>;
+export declare function titleFor(event: StoredEvent): string;
+/** The frame a human should look at first: the innermost in-app frame. */
+export declare function culpritFor(event: StoredEvent): string | null;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../src/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAA0C,WAAW,EAAE,MAAM,YAAY,CAAC;AAatF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIxD;AA6CD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAmBjF;AAUD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGzG;AAED,mEAAmE;AACnE,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,MAAM,CAAC,CAKjB;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAQnD;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAQ5D"}

package/dist/fingerprint.js

@@ -0,0 +1,151 @@
+/**
+ * Grouping.
+ *
+ * Coalescing is what makes this service cheap: 10,000 copies of one crash must cost
+ * one row update, not 10,000 inserts. The fingerprint is the grouping key.
+ *
+ * Two deliberate choices:
+ *
+ * - **The channel and release are NOT part of the fingerprint.** An issue is meant to
+ *   span versions, so the admin view can say "this started in 1.4.2 and is still
+ *   happening in 1.4.4". `first_channel` / `last_channel` carry that instead.
+ * - **Line and column numbers are NOT part of the fingerprint.** They shift on every
+ *   unrelated edit to the file, which would fragment one long-lived issue into a new
+ *   one per build.
+ *
+ * Normalization is deliberately moderate. Over-normalizing silently merges unrelated
+ * bugs (lossy, and very hard to notice); under-normalizing shatters one bug into
+ * thousands (noisy, but obvious). When the default is wrong, a reporter can send an
+ * explicit `fingerprint` array, which wins outright.
+ */
+import { sha256Hex } from './keys.js';
+/** How many innermost frames contribute to the fingerprint. */
+const FINGERPRINT_FRAMES = 5;
+const NORMALIZERS = [
+    [/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, '<uuid>'],
+    [/\bhttps?:\/\/[^\s'"`)]+/gi, '<url>'],
+    [/\b0x[0-9a-f]+\b/gi, '<hex>'],
+    [/\b[0-9a-f]{8,}\b/gi, '<hex>'],
+    [/\b\d+(?:\.\d+)*\b/g, '<n>'],
+];
+/**
+ * Collapses the parts of a message that vary per occurrence — ids, addresses,
+ * counters — while leaving the parts that identify the bug.
+ *
+ * Quoted substrings are intentionally left alone: in `Cannot read property 'foo' of
+ * undefined`, the `'foo'` usually *is* the distinguishing detail.
+ */
+export function normalizeMessage(message) {
+    let out = message.trim().slice(0, 1000);
+    for (const [pattern, replacement] of NORMALIZERS)
+        out = out.replace(pattern, replacement);
+    return out.replace(/\s+/g, ' ');
+}
+function basename(path) {
+    const cut = Math.max(path.lastIndexOf('/'), path.lastIndexOf('\\'));
+    return cut === -1 ? path : path.slice(cut + 1);
+}
+/** Strips query strings and cache-busting hashes so `app.4f3a1b.js` groups with `app.9cd02e.js`. */
+function normalizeFilename(filename) {
+    const name = basename(filename.split('?')[0].split('#')[0]);
+    return name.replace(/[.-][0-9a-f]{6,}(?=\.[a-z]+$)/i, '');
+}
+function frameIdentity(frame) {
+    const where = frame.module ?? (frame.filename ? normalizeFilename(frame.filename) : '?');
+    return `${where}:${frame.function ?? '?'}`;
+}
+/**
+ * Frames follow Sentry's ordering convention: **oldest first, innermost last**. The
+ * innermost frames are the ones that identify the bug, so we take from the end.
+ *
+ * (Browser `Error.stack` is the opposite order — innermost first. SDKs are
+ * responsible for reversing before handing an event over. Getting this backwards
+ * silently produces fingerprints built from `main()`, which group everything
+ * together, so it is worth being explicit.)
+ */
+function significantFrames(frames) {
+    const inApp = frames.filter(frame => frame.in_app !== false);
+    const pool = inApp.length > 0 ? inApp : frames;
+    return pool.slice(-FINGERPRINT_FRAMES);
+}
+/**
+ * The exception a human (and the fingerprint) should key on.
+ *
+ * Sentry orders `exception.values` oldest-first, so the last entry is the error
+ * actually thrown and the earlier ones are the causes it wrapped. Keying on the
+ * thrown error keeps two unrelated bugs that both wrap, say, an `ECONNRESET` from
+ * collapsing into one issue.
+ */
+function primaryException(exception) {
+    return exception && exception.length > 0 ? exception[exception.length - 1] : undefined;
+}
+/**
+ * The material the fingerprint hashes. Returned separately from the hash so tests
+ * (and the admin UI's "why is this grouped here?" view) can show the reasoning.
+ */
+export function fingerprintComponents(event, appId) {
+    const parts = [`app:${appId}`, `kind:${event.kind}`];
+    const exception = primaryException(event.exception?.values);
+    const frames = exception?.stacktrace?.frames ?? [];
+    if (exception) {
+        parts.push(`type:${exception.type ?? 'Error'}`);
+        if (frames.length > 0) {
+            for (const frame of significantFrames(frames))
+                parts.push(`frame:${frameIdentity(frame)}`);
+        }
+        else {
+            // No stack to group on, so the message has to carry it.
+            parts.push(`message:${normalizeMessage(exception.value ?? '')}`);
+        }
+    }
+    else {
+        parts.push(`message:${normalizeMessage(event.message ?? '')}`);
+    }
+    return parts;
+}
+/**
+ * Feedback never coalesces — two people reporting "the button is broken" are two
+ * things to read, not one thing seen twice. `seed` makes each submission distinct.
+ */
+function isUngrouped(kind) {
+    return kind === 'feedback';
+}
+export async function computeFingerprint(event, appId, seed) {
+    if (isUngrouped(event.kind))
+        return sha256Hex(`app:${appId}\nkind:feedback\nseed:${seed}`);
+    return sha256Hex(fingerprintComponents(event, appId).join('\n'));
+}
+/** Honors an explicit `fingerprint` override from the reporter. */
+export async function resolveFingerprint(event, appId, seed, override) {
+    if (override && override.length > 0) {
+        return sha256Hex([`app:${appId}`, ...override.map(part => `custom:${part}`)].join('\n'));
+    }
+    return computeFingerprint(event, appId, seed);
+}
+// ---------------------------------------------------------------------------
+// Human-facing labels
+// ---------------------------------------------------------------------------
+export function titleFor(event) {
+    const exception = primaryException(event.exception?.values);
+    if (exception) {
+        const type = exception.type ?? 'Error';
+        const value = exception.value?.trim();
+        return truncate(value ? `${type}: ${value}` : type, 200);
+    }
+    return truncate(event.message?.trim() || '(no message)', 200);
+}
+/** The frame a human should look at first: the innermost in-app frame. */
+export function culpritFor(event) {
+    const frames = primaryException(event.exception?.values)?.stacktrace?.frames ?? [];
+    const chosen = significantFrames(frames).at(-1);
+    if (!chosen)
+        return null;
+    const where = chosen.module ?? (chosen.filename ? normalizeFilename(chosen.filename) : null);
+    if (!where)
+        return chosen.function ?? null;
+    return chosen.function ? `${chosen.function} (${where})` : where;
+}
+function truncate(value, max) {
+    return value.length <= max ? value : `${value.slice(0, max - 1)}…`;
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../src/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,MAAM,WAAW,GAA2C;IAC1D,CAAC,gEAAgE,EAAE,QAAQ,CAAC;IAC5E,CAAC,2BAA2B,EAAE,OAAO,CAAC;IACtC,CAAC,mBAAmB,EAAE,OAAO,CAAC;IAC9B,CAAC,oBAAoB,EAAE,OAAO,CAAC;IAC/B,CAAC,oBAAoB,EAAE,KAAK,CAAC;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,WAAW;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,oGAAoG;AACpG,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzF,OAAO,GAAG,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,SAAuC;IAC/D,OAAO,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,KAAa;IACrE,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,EAAE,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC;IAEnD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,SAAS,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,KAAK,CAAC,IAAI,CAAC,WAAW,gBAAgB,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,gBAAgB,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAgB;IACnC,OAAO,IAAI,KAAK,UAAU,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAkB,EAAE,KAAa,EAAE,IAAY;IACtF,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,OAAO,KAAK,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC3F,OAAO,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAkB,EAClB,KAAa,EACb,IAAY,EACZ,QAAmB;IAEnB,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,UAAU,QAAQ,CAAC,KAAkB;IACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,KAAkB;IAC3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AACrE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from './base32.js';
+export * from './keys.js';
+export * from './types.js';
+export * from './fingerprint.js';
+export * from './normalize.js';
+export * from './usage.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from './base32.js';
+export * from './keys.js';
+export * from './types.js';
+export * from './fingerprint.js';
+export * from './normalize.js';
+export * from './usage.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Credentials.
+ *
+ * Three distinct kinds of key material, deliberately not derived from one another:
+ *
+ * 1. **App secret** (`ecs_…`) — 32 random bytes, held by the developer and by CI.
+ *    Never shipped to a client. Everything else about an app hangs off this.
+ * 2. **Ingest key** (`ek1.app.channel.mac`) — HMAC-derived from the app secret.
+ *    **Public by design**: it is baked into shipped client bundles, so it identifies
+ *    and routes, it does not authenticate. Its value is that it is *derivable
+ *    offline* — a build computes its own key with no API call, and the server
+ *    verifies it with no prior registration, so a new version provisions itself on
+ *    its first report.
+ * 3. **Read token** (`ert_…`) — 32 random bytes, independent of the app secret,
+ *    stored server-side only as a SHA-256 hash.
+ *
+ * Why (3) is not derived from (1): the two have opposite lifecycle requirements. An
+ * ingest key is compiled into binaries already in users' hands and is effectively
+ * unrotatable; a read token lives in agent and CI environments, which is where
+ * credentials actually leak from, and must be cheap to revoke. Deriving both from one
+ * secret would mean revoking a leaked agent token forces re-keying every deployed
+ * app instance.
+ */
+export declare const INGEST_KEY_PREFIX = "ek1";
+export declare const APP_SECRET_PREFIX = "ecs_";
+export declare const READ_TOKEN_PREFIX = "ert_";
+/** Default tolerance for attestation timestamp skew. */
+export declare const SIGNATURE_MAX_SKEW_SECONDS = 300;
+export declare function isValidAppId(value: string): boolean;
+export declare function isValidChannel(value: string): boolean;
+export declare function generateAppSecret(): string;
+export declare function generateReadToken(): string;
+/** Decodes an `ecs_…` secret to raw bytes. Returns `null` if malformed. */
+export declare function parseAppSecret(secret: string): Uint8Array | null;
+export declare function sha256Hex(value: string): Promise<string>;
+/**
+ * Constant-time string comparison. Compares every character of the longer input so
+ * the loop count does not reveal where the first difference is; the length check is
+ * folded into the result rather than short-circuiting.
+ */
+export declare function timingSafeEqual(a: string, b: string): boolean;
+export interface ParsedIngestKey {
+    appId: string;
+    channel: string;
+    mac: string;
+}
+/**
+ * `ek1.<appId>.<channel>.<mac>` — readable on purpose. Someone who finds this string
+ * in an app bundle should be able to tell at a glance that it is a routing
+ * identifier and not a leaked credential.
+ *
+ * Parsed from both ends because the channel is the only field allowed to contain
+ * `.`: the MAC is a fixed width at the tail, the app id runs to the first `.`, and
+ * whatever is between them is the channel.
+ */
+export declare function parseIngestKey(key: string): ParsedIngestKey | null;
+export declare function deriveIngestKey(appSecret: string | Uint8Array, appId: string, channel: string): Promise<string>;
+/**
+ * Verifies a presented ingest key against the app's secret.
+ *
+ * A `true` result does **not** mean the caller is trusted — the key is public. It
+ * means the key is well-formed and really was minted from this app's secret, which
+ * is what lets the server accept a never-before-seen channel without any prior
+ * registration while still refusing channels invented by a stranger.
+ */
+export declare function verifyIngestKey(appSecret: string | Uint8Array, key: string): Promise<ParsedIngestKey | null>;
+/** Read tokens are stored only as this digest, so a database leak yields nothing usable. */
+export declare function hashReadToken(token: string): Promise<string>;
+/**
+ * Reporters that can legitimately hold the app secret — server-side apps, CLIs, CI
+ * jobs, dev machines — may sign their reports. Signed reports are stored with
+ * `attested = 1`, which is what makes a world-open ingest endpoint comfortable to
+ * live with: triage can filter to reports that provably came from us.
+ *
+ * The timestamp is inside the signed material so a captured request cannot be
+ * replayed indefinitely.
+ */
+export declare function signReport(appSecret: string | Uint8Array, timestamp: number, body: string): Promise<string>;
+export declare function verifyReportSignature(appSecret: string | Uint8Array, timestamp: number, body: string, signature: string, nowSeconds?: number, maxSkewSeconds?: number): Promise<boolean>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAQxC,wDAAwD;AACxD,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAiB9C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAYD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAKhE;AAeD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG9D;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAO7D;AAeD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAsBlE;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQrH;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAMlH;AAMD,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5D;AAMD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMjH;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,GAAG,UAAU,EAC9B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,MAAsC,EAClD,cAAc,GAAE,MAAmC,GAClD,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/keys.js

@@ -0,0 +1,212 @@
+/**
+ * Credentials.
+ *
+ * Three distinct kinds of key material, deliberately not derived from one another:
+ *
+ * 1. **App secret** (`ecs_…`) — 32 random bytes, held by the developer and by CI.
+ *    Never shipped to a client. Everything else about an app hangs off this.
+ * 2. **Ingest key** (`ek1.app.channel.mac`) — HMAC-derived from the app secret.
+ *    **Public by design**: it is baked into shipped client bundles, so it identifies
+ *    and routes, it does not authenticate. Its value is that it is *derivable
+ *    offline* — a build computes its own key with no API call, and the server
+ *    verifies it with no prior registration, so a new version provisions itself on
+ *    its first report.
+ * 3. **Read token** (`ert_…`) — 32 random bytes, independent of the app secret,
+ *    stored server-side only as a SHA-256 hash.
+ *
+ * Why (3) is not derived from (1): the two have opposite lifecycle requirements. An
+ * ingest key is compiled into binaries already in users' hands and is effectively
+ * unrotatable; a read token lives in agent and CI environments, which is where
+ * credentials actually leak from, and must be cheap to revoke. Deriving both from one
+ * secret would mean revoking a leaked agent token forces re-keying every deployed
+ * app instance.
+ */
+import { base32Decode, base32Encode, base32Length } from './base32.js';
+export const INGEST_KEY_PREFIX = 'ek1';
+export const APP_SECRET_PREFIX = 'ecs_';
+export const READ_TOKEN_PREFIX = 'ert_';
+const SECRET_BYTES = 32;
+const TOKEN_BYTES = 32;
+/** 128 bits is ample for a public, unguessable identifier. */
+const MAC_BYTES = 16;
+const MAC_CHARS = base32Length(MAC_BYTES);
+/** Default tolerance for attestation timestamp skew. */
+export const SIGNATURE_MAX_SKEW_SECONDS = 300;
+const encoder = new TextEncoder();
+// ---------------------------------------------------------------------------
+// Identifier validation
+// ---------------------------------------------------------------------------
+/**
+ * App ids may not contain `.` — that is what makes an ingest key unambiguously
+ * parseable even though channels (`1.4.2`) routinely do.
+ */
+const APP_ID_RE = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wide enough for semver, git SHAs, `pr-812`, `staging`, `nightly+2026-09-21`. */
+const CHANNEL_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;
+export function isValidAppId(value) {
+    return APP_ID_RE.test(value);
+}
+export function isValidChannel(value) {
+    return CHANNEL_RE.test(value);
+}
+// ---------------------------------------------------------------------------
+// Random material
+// ---------------------------------------------------------------------------
+function randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+}
+export function generateAppSecret() {
+    return APP_SECRET_PREFIX + base32Encode(randomBytes(SECRET_BYTES));
+}
+export function generateReadToken() {
+    return READ_TOKEN_PREFIX + base32Encode(randomBytes(TOKEN_BYTES));
+}
+/** Decodes an `ecs_…` secret to raw bytes. Returns `null` if malformed. */
+export function parseAppSecret(secret) {
+    if (!secret.startsWith(APP_SECRET_PREFIX))
+        return null;
+    const bytes = base32Decode(secret.slice(APP_SECRET_PREFIX.length));
+    if (!bytes || bytes.length < SECRET_BYTES)
+        return null;
+    return bytes.slice(0, SECRET_BYTES);
+}
+// ---------------------------------------------------------------------------
+// HMAC
+// ---------------------------------------------------------------------------
+async function hmac(key, message) {
+    // Copied into a fresh buffer so the type is `Uint8Array<ArrayBuffer>` rather than
+    // `<ArrayBufferLike>`; `importKey` will not accept a possibly-shared buffer.
+    const material = new Uint8Array(key);
+    const cryptoKey = await crypto.subtle.importKey('raw', material, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const signature = await crypto.subtle.sign('HMAC', cryptoKey, encoder.encode(message));
+    return new Uint8Array(signature);
+}
+export async function sha256Hex(value) {
+    const digest = await crypto.subtle.digest('SHA-256', encoder.encode(value));
+    return toHex(new Uint8Array(digest));
+}
+function toHex(bytes) {
+    let out = '';
+    for (const byte of bytes)
+        out += byte.toString(16).padStart(2, '0');
+    return out;
+}
+/**
+ * Constant-time string comparison. Compares every character of the longer input so
+ * the loop count does not reveal where the first difference is; the length check is
+ * folded into the result rather than short-circuiting.
+ */
+export function timingSafeEqual(a, b) {
+    const length = Math.max(a.length, b.length);
+    let diff = a.length ^ b.length;
+    for (let i = 0; i < length; i++) {
+        diff |= (a.charCodeAt(i) || 0) ^ (b.charCodeAt(i) || 0);
+    }
+    return diff === 0;
+}
+// ---------------------------------------------------------------------------
+// Ingest keys
+// ---------------------------------------------------------------------------
+/**
+ * Domain-separated HMAC context. The `\n` separators are unambiguous because
+ * `isValidAppId` and `isValidChannel` both exclude newlines, and the version tag
+ * means a future key format cannot collide with this one.
+ */
+function ingestContext(appId, channel) {
+    return `telemetry-collector.ingest.v1\n${appId}\n${channel}`;
+}
+/**
+ * `ek1.<appId>.<channel>.<mac>` — readable on purpose. Someone who finds this string
+ * in an app bundle should be able to tell at a glance that it is a routing
+ * identifier and not a leaked credential.
+ *
+ * Parsed from both ends because the channel is the only field allowed to contain
+ * `.`: the MAC is a fixed width at the tail, the app id runs to the first `.`, and
+ * whatever is between them is the channel.
+ */
+export function parseIngestKey(key) {
+    const prefix = `${INGEST_KEY_PREFIX}.`;
+    if (!key.startsWith(prefix))
+        return null;
+    const rest = key.slice(prefix.length);
+    // Need at least `a.b.` before a full-width MAC.
+    if (rest.length < MAC_CHARS + 4)
+        return null;
+    if (rest[rest.length - MAC_CHARS - 1] !== '.')
+        return null;
+    const mac = rest.slice(-MAC_CHARS);
+    const head = rest.slice(0, -(MAC_CHARS + 1));
+    const split = head.indexOf('.');
+    if (split <= 0 || split === head.length - 1)
+        return null;
+    const appId = head.slice(0, split);
+    const channel = head.slice(split + 1);
+    if (!isValidAppId(appId) || !isValidChannel(channel))
+        return null;
+    if (base32Decode(mac) === null)
+        return null;
+    return { appId, channel, mac };
+}
+export async function deriveIngestKey(appSecret, appId, channel) {
+    const secret = typeof appSecret === 'string' ? parseAppSecret(appSecret) : appSecret;
+    if (!secret)
+        throw new Error('invalid app secret');
+    if (!isValidAppId(appId))
+        throw new Error(`invalid app id: ${JSON.stringify(appId)}`);
+    if (!isValidChannel(channel))
+        throw new Error(`invalid channel: ${JSON.stringify(channel)}`);
+    const mac = await hmac(secret, ingestContext(appId, channel));
+    return `${INGEST_KEY_PREFIX}.${appId}.${channel}.${base32Encode(mac.slice(0, MAC_BYTES))}`;
+}
+/**
+ * Verifies a presented ingest key against the app's secret.
+ *
+ * A `true` result does **not** mean the caller is trusted — the key is public. It
+ * means the key is well-formed and really was minted from this app's secret, which
+ * is what lets the server accept a never-before-seen channel without any prior
+ * registration while still refusing channels invented by a stranger.
+ */
+export async function verifyIngestKey(appSecret, key) {
+    const parsed = parseIngestKey(key);
+    if (!parsed)
+        return null;
+    const expected = await deriveIngestKey(appSecret, parsed.appId, parsed.channel);
+    return timingSafeEqual(expected, key) ? parsed : null;
+}
+// ---------------------------------------------------------------------------
+// Read tokens
+// ---------------------------------------------------------------------------
+/** Read tokens are stored only as this digest, so a database leak yields nothing usable. */
+export function hashReadToken(token) {
+    return sha256Hex(`telemetry-collector.read-token.v1\n${token}`);
+}
+// ---------------------------------------------------------------------------
+// Optional report attestation
+// ---------------------------------------------------------------------------
+/**
+ * Reporters that can legitimately hold the app secret — server-side apps, CLIs, CI
+ * jobs, dev machines — may sign their reports. Signed reports are stored with
+ * `attested = 1`, which is what makes a world-open ingest endpoint comfortable to
+ * live with: triage can filter to reports that provably came from us.
+ *
+ * The timestamp is inside the signed material so a captured request cannot be
+ * replayed indefinitely.
+ */
+export async function signReport(appSecret, timestamp, body) {
+    const secret = typeof appSecret === 'string' ? parseAppSecret(appSecret) : appSecret;
+    if (!secret)
+        throw new Error('invalid app secret');
+    const mac = await hmac(secret, `telemetry-collector.report.v1\n${timestamp}\n${body}`);
+    return `v1=${toHex(mac)}`;
+}
+export async function verifyReportSignature(appSecret, timestamp, body, signature, nowSeconds = Math.floor(Date.now() / 1000), maxSkewSeconds = SIGNATURE_MAX_SKEW_SECONDS) {
+    if (!Number.isFinite(timestamp))
+        return false;
+    if (Math.abs(nowSeconds - timestamp) > maxSkewSeconds)
+        return false;
+    const expected = await signReport(appSecret, timestamp, body);
+    return timingSafeEqual(expected, signature);
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,8DAA8D;AAC9D,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAE1C,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,SAAS,GAAG,wCAAwC,CAAC;AAE3D,mFAAmF;AACnF,MAAM,UAAU,GAAG,oCAAoC,CAAC;AAExD,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,iBAAiB,GAAG,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,iBAAiB,GAAG,YAAY,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,OAAe;IAClD,kFAAkF;IAClF,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,OAAe;IACnD,OAAO,kCAAkC,KAAK,KAAK,OAAO,EAAE,CAAC;AAC/D,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,GAAG,iBAAiB,GAAG,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,gDAAgD;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAA8B,EAAE,KAAa,EAAE,OAAe;IAClG,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAE7F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,OAAO,GAAG,iBAAiB,IAAI,KAAK,IAAI,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAA8B,EAAE,GAAW;IAC/E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,SAAS,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAA8B,EAAE,SAAiB,EAAE,IAAY;IAC9F,MAAM,MAAM,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,kCAAkC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA8B,EAC9B,SAAiB,EACjB,IAAY,EACZ,SAAiB,EACjB,aAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAClD,iBAAyB,0BAA0B;IAEnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,cAAc;QAAE,OAAO,KAAK,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC"}