vesant-sdk 1.1.1 → 1.3.0

package/dist/geolocation/index.js

@@ -56,6 +56,146 @@ var TimeoutError = class _TimeoutError extends CGSError {
     Object.setPrototypeOf(this, _TimeoutError.prototype);
   }
 };
+var CircuitBreakerOpenError = class _CircuitBreakerOpenError extends CGSError {
+  constructor() {
+    super("Circuit breaker is open \u2014 requests are temporarily blocked", "CIRCUIT_BREAKER_OPEN", 503);
+    this.name = "CircuitBreakerOpenError";
+    Object.setPrototypeOf(this, _CircuitBreakerOpenError.prototype);
+  }
+};
+
+// src/core/circuit-breaker.ts
+var CircuitBreaker = class {
+  constructor(config = {}) {
+    this.state = "closed";
+    this.failures = 0;
+    this.successes = 0;
+    this.lastFailureTime = null;
+    this.failureThreshold = config.failureThreshold ?? 5;
+    this.resetTimeout = config.resetTimeout ?? 3e4;
+    this.successThreshold = config.successThreshold ?? 1;
+  }
+  /**
+   * Check if a request can proceed through the circuit breaker.
+   */
+  canExecute() {
+    if (this.state === "closed") {
+      return true;
+    }
+    if (this.state === "open") {
+      const now = Date.now();
+      if (this.lastFailureTime && now - this.lastFailureTime >= this.resetTimeout) {
+        this.state = "half-open";
+        this.successes = 0;
+        return true;
+      }
+      return false;
+    }
+    return true;
+  }
+  /**
+   * Record a successful request.
+   */
+  onSuccess() {
+    if (this.state === "half-open") {
+      this.successes++;
+      if (this.successes >= this.successThreshold) {
+        this.state = "closed";
+        this.failures = 0;
+        this.successes = 0;
+        this.lastFailureTime = null;
+      }
+    } else if (this.state === "closed") {
+      this.failures = 0;
+    }
+  }
+  /**
+   * Record a failed request.
+   */
+  onFailure() {
+    this.failures++;
+    this.lastFailureTime = Date.now();
+    if (this.state === "half-open") {
+      this.state = "open";
+      this.successes = 0;
+    } else if (this.state === "closed" && this.failures >= this.failureThreshold) {
+      this.state = "open";
+    }
+  }
+  /**
+   * Get current circuit breaker status.
+   */
+  getStatus() {
+    return {
+      state: this.state,
+      failures: this.failures,
+      successes: this.successes,
+      lastFailureTime: this.lastFailureTime,
+      nextRetryTime: this.state === "open" && this.lastFailureTime ? this.lastFailureTime + this.resetTimeout : null
+    };
+  }
+  /**
+   * Reset the circuit breaker to its initial closed state.
+   */
+  reset() {
+    this.state = "closed";
+    this.failures = 0;
+    this.successes = 0;
+    this.lastFailureTime = null;
+  }
+};
+
+// src/core/rate-limiter.ts
+var RateLimitTracker = class {
+  constructor() {
+    this.limit = null;
+    this.remaining = null;
+    this.reset = null;
+    this.retryAfter = null;
+  }
+  /**
+   * Extract rate limit information from response headers.
+   */
+  updateFromHeaders(headers) {
+    const limit = headers.get("x-ratelimit-limit");
+    const remaining = headers.get("x-ratelimit-remaining");
+    const reset = headers.get("x-ratelimit-reset");
+    const retryAfter = headers.get("retry-after");
+    if (limit !== null) this.limit = parseInt(limit, 10);
+    if (remaining !== null) this.remaining = parseInt(remaining, 10);
+    if (reset !== null) this.reset = parseInt(reset, 10);
+    if (retryAfter !== null) this.retryAfter = parseInt(retryAfter, 10);
+  }
+  /**
+   * Check if the rate limit has been exceeded based on tracked headers.
+   */
+  isLimitExceeded() {
+    if (this.remaining !== null && this.remaining <= 0) {
+      if (this.reset !== null) {
+        const now = Math.floor(Date.now() / 1e3);
+        if (now >= this.reset) {
+          this.remaining = null;
+          this.reset = null;
+          this.retryAfter = null;
+          return false;
+        }
+      }
+      return true;
+    }
+    return false;
+  }
+  /**
+   * Get current rate limit status.
+   */
+  getStatus() {
+    return {
+      limit: this.limit,
+      remaining: this.remaining,
+      reset: this.reset,
+      retryAfter: this.retryAfter
+    };
+  }
+};
 
 // src/core/logger.ts
 function createConsoleLogger() {
@@ -76,11 +216,82 @@ function createConsoleLogger() {
 }
 
 // src/core/version.ts
-var SDK_VERSION = "1.1.0";
+var SDK_VERSION = "1.3.0";
+
+// src/shared/browser-utils.ts
+function generateUUID() {
+  if (typeof crypto !== "undefined" && crypto.randomUUID) {
+    return crypto.randomUUID();
+  }
+  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+    const r = Math.random() * 16 | 0;
+    const v = c === "x" ? r : r & 3 | 8;
+    return v.toString(16);
+  });
+}
+function generateDeviceId() {
+  if (typeof window === "undefined" || typeof localStorage === "undefined") {
+    return generateUUID();
+  }
+  const storageKey = "cgs_device_id";
+  let deviceId = localStorage.getItem(storageKey);
+  if (!deviceId) {
+    deviceId = generateUUID();
+    localStorage.setItem(storageKey, deviceId);
+  }
+  return deviceId;
+}
+function getBrowserInfo() {
+  if (typeof navigator === "undefined") {
+    return { browser: "unknown", browser_version: "", os: "unknown", os_version: "" };
+  }
+  const ua = navigator.userAgent;
+  let browser = "unknown";
+  let browserVersion = "";
+  let os = "unknown";
+  let osVersion = "";
+  if (ua.includes("Firefox/")) {
+    browser = "Firefox";
+    browserVersion = ua.match(/Firefox\/([\d.]+)/)?.[1] || "";
+  } else if (ua.includes("Edg/")) {
+    browser = "Edge";
+    browserVersion = ua.match(/Edg\/([\d.]+)/)?.[1] || "";
+  } else if (ua.includes("Chrome/")) {
+    browser = "Chrome";
+    browserVersion = ua.match(/Chrome\/([\d.]+)/)?.[1] || "";
+  } else if (ua.includes("Safari/") && !ua.includes("Chrome")) {
+    browser = "Safari";
+    browserVersion = ua.match(/Version\/([\d.]+)/)?.[1] || "";
+  } else if (ua.includes("Opera") || ua.includes("OPR/")) {
+    browser = "Opera";
+    browserVersion = ua.match(/(?:Opera|OPR)\/([\d.]+)/)?.[1] || "";
+  }
+  if (ua.includes("Windows")) {
+    os = "Windows";
+    if (ua.includes("Windows NT 10.0")) osVersion = "10";
+    else if (ua.includes("Windows NT 6.3")) osVersion = "8.1";
+    else if (ua.includes("Windows NT 6.2")) osVersion = "8";
+    else if (ua.includes("Windows NT 6.1")) osVersion = "7";
+  } else if (ua.includes("Mac OS X")) {
+    os = "macOS";
+    osVersion = ua.match(/Mac OS X ([\d_]+)/)?.[1]?.replace(/_/g, ".") || "";
+  } else if (ua.includes("Linux")) {
+    os = "Linux";
+  } else if (ua.includes("Android")) {
+    os = "Android";
+    osVersion = ua.match(/Android ([\d.]+)/)?.[1] || "";
+  } else if (ua.includes("iOS") || ua.includes("iPhone") || ua.includes("iPad")) {
+    os = "iOS";
+    osVersion = ua.match(/OS ([\d_]+)/)?.[1]?.replace(/_/g, ".") || "";
+  }
+  return { browser, browser_version: browserVersion, os, os_version: osVersion };
+}
 
 // src/core/client.ts
 var BaseClient = class {
   constructor(config) {
+    this.circuitBreaker = null;
+    this.rateLimitTracker = null;
     if (!config.baseURL?.trim()) {
       throw new ValidationError("baseURL is required and must be a non-empty string", ["baseURL"]);
     }
@@ -90,8 +301,7 @@ var BaseClient = class {
     this.interceptors = config.interceptors || [];
     this.logger = config.logger || createConsoleLogger();
     this.config = {
-      baseURL: config.baseURL,
-      tenantId: config.tenantId,
+      ...config,
       apiKey: config.apiKey || "",
       headers: config.headers || {},
       timeout: config.timeout || 1e4,
@@ -100,22 +310,49 @@ var BaseClient = class {
       interceptors: this.interceptors,
       logger: this.logger
     };
+    if (config.circuitBreaker) {
+      this.circuitBreaker = new CircuitBreaker(config.circuitBreaker);
+    }
+    if (config.enableRateLimitTracking) {
+      this.rateLimitTracker = new RateLimitTracker();
+    }
   }
   /**
    * Make an HTTP request with timeout and error handling
    */
   async request(endpoint, options = {}, serviceURL, requestOptions) {
-    const url = `${serviceURL || this.config.baseURL}${endpoint}`;
+    const requestId = generateUUID();
+    if (this.circuitBreaker && !this.circuitBreaker.canExecute()) {
+      const error = new CircuitBreakerOpenError();
+      error.requestId = requestId;
+      throw error;
+    }
+    if (this.rateLimitTracker && this.rateLimitTracker.isLimitExceeded()) {
+      const status = this.rateLimitTracker.getStatus();
+      const error = new RateLimitError(status.retryAfter ?? void 0);
+      error.requestId = requestId;
+      throw error;
+    }
+    const baseURL = this.config.environment === "sandbox" && this.config.sandboxBaseURL ? this.config.sandboxBaseURL : serviceURL || this.config.baseURL;
+    const url = `${serviceURL || baseURL}${endpoint}`;
     const headers = {
       "Content-Type": "application/json",
       "X-Tenant-ID": this.config.tenantId,
       "X-SDK-Version": `vesant-sdk-ts/${SDK_VERSION}`,
+      "X-Request-ID": requestId,
       ...this.config.headers,
       ...options.headers || {}
     };
     if (this.config.apiKey) {
       headers["Authorization"] = `Bearer ${this.config.apiKey}`;
     }
+    if (this.config.environment === "sandbox") {
+      headers["X-Sandbox"] = "true";
+    }
+    const method = (options.method || "GET").toUpperCase();
+    if (["POST", "PUT", "PATCH"].includes(method)) {
+      headers["Idempotency-Key"] = requestOptions?.idempotencyKey || generateUUID();
+    }
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
     if (requestOptions?.signal) {
@@ -143,6 +380,9 @@ var BaseClient = class {
         signal: controller.signal
       });
       clearTimeout(timeoutId);
+      if (this.rateLimitTracker) {
+        this.rateLimitTracker.updateFromHeaders(response.headers);
+      }
       let data;
       try {
         data = await response.json();
@@ -151,13 +391,15 @@ var BaseClient = class {
           this.handleErrorResponse(response.status, {
             error: `HTTP ${response.status}`,
             message: response.statusText
-          });
+          }, requestId);
         }
+        this.circuitBreaker?.onSuccess();
         return void 0;
       }
       if (!response.ok) {
-        this.handleErrorResponse(response.status, data || {});
+        this.handleErrorResponse(response.status, data || {}, requestId);
       }
+      this.circuitBreaker?.onSuccess();
       let result = data;
       for (const interceptor of this.interceptors) {
         if (interceptor.onResponse) {
@@ -170,6 +412,14 @@ var BaseClient = class {
       return result;
     } catch (error) {
       clearTimeout(timeoutId);
+      if (error instanceof CGSError && error.statusCode && error.statusCode >= 500) {
+        this.circuitBreaker?.onFailure();
+      } else if (error instanceof NetworkError || error instanceof TimeoutError) {
+        this.circuitBreaker?.onFailure();
+      }
+      if (error instanceof CGSError && !error.requestId) {
+        error.requestId = requestId;
+      }
       if (error instanceof Error) {
         for (const interceptor of this.interceptors) {
           if (interceptor.onError) {
@@ -180,15 +430,23 @@ var BaseClient = class {
       if (error instanceof Error) {
         if (error.name === "AbortError") {
           if (requestOptions?.signal?.aborted) {
-            throw new CGSError("Request aborted", "REQUEST_ABORTED");
+            const abortError = new CGSError("Request aborted", "REQUEST_ABORTED");
+            abortError.requestId = requestId;
+            throw abortError;
           }
-          throw new TimeoutError(this.config.timeout);
+          this.circuitBreaker?.onFailure();
+          const timeoutError = new TimeoutError(this.config.timeout);
+          timeoutError.requestId = requestId;
+          throw timeoutError;
         }
         if (error instanceof CGSError) {
           throw error;
         }
       }
-      throw new NetworkError("Network request failed", error);
+      const networkError = new NetworkError("Network request failed", error);
+      networkError.requestId = requestId;
+      this.circuitBreaker?.onFailure();
+      throw networkError;
     }
   }
   /**
@@ -227,29 +485,36 @@ var BaseClient = class {
   /**
    * Handle error responses from API
    */
-  handleErrorResponse(status, data) {
+  handleErrorResponse(status, data, requestId) {
     const message = data.error || data.message || `HTTP ${status}`;
-    switch (status) {
-      case 400:
-        throw new CGSError(message, "BAD_REQUEST", 400, data);
-      case 401:
-        throw new AuthenticationError(message);
-      case 403:
-        throw new CGSError(message, "FORBIDDEN", 403, data);
-      case 404:
-        throw new CGSError(message, "NOT_FOUND", 404, data);
-      case 429: {
-        const retryAfter = data.retry_after || data.retryAfter;
-        throw new RateLimitError(retryAfter);
+    const createError = () => {
+      switch (status) {
+        case 400:
+          return new CGSError(message, "BAD_REQUEST", 400, data);
+        case 401:
+          return new AuthenticationError(message);
+        case 403:
+          return new CGSError(message, "FORBIDDEN", 403, data);
+        case 404:
+          return new CGSError(message, "NOT_FOUND", 404, data);
+        case 429: {
+          const retryAfter = data.retry_after || data.retryAfter;
+          return new RateLimitError(retryAfter);
+        }
+        case 500:
+        case 502:
+        case 503:
+        case 504:
+          return new ServiceUnavailableError(message);
+        default:
+          return new CGSError(message, "UNKNOWN_ERROR", status, data);
       }
-      case 500:
-      case 502:
-      case 503:
-      case 504:
-        throw new ServiceUnavailableError(message);
-      default:
-        throw new CGSError(message, "UNKNOWN_ERROR", status, data);
+    };
+    const error = createError();
+    if (requestId) {
+      error.requestId = requestId;
     }
+    throw error;
   }
   /**
    * Build query string from parameters
@@ -293,6 +558,18 @@ var BaseClient = class {
   getConfig() {
     return { ...this.config };
   }
+  /**
+   * Get rate limit status from tracked response headers.
+   */
+  getRateLimitStatus() {
+    return this.rateLimitTracker?.getStatus() ?? null;
+  }
+  /**
+   * Get circuit breaker status.
+   */
+  getCircuitBreakerStatus() {
+    return this.circuitBreaker?.getStatus() ?? null;
+  }
   /**
    * Health check endpoint
    */
@@ -301,6 +578,212 @@ var BaseClient = class {
   }
 };
 
+// src/geolocation/ciphertext.ts
+var CIPHER_TEXT_EXPIRY_MINUTES = 5;
+async function computeHMAC(key, message) {
+  if (typeof globalThis.crypto !== "undefined" && globalThis.crypto.subtle) {
+    const encoder = new TextEncoder();
+    const keyData = encoder.encode(key);
+    const msgData = encoder.encode(message);
+    const cryptoKey = await globalThis.crypto.subtle.importKey(
+      "raw",
+      keyData,
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["sign"]
+    );
+    const signature = await globalThis.crypto.subtle.sign("HMAC", cryptoKey, msgData);
+    const bytes = new Uint8Array(signature);
+    return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  const { createHmac } = await import('crypto');
+  return createHmac("sha256", key).update(message).digest("hex");
+}
+function getWebGLInfo() {
+  if (typeof document === "undefined") return null;
+  try {
+    const canvas = document.createElement("canvas");
+    const gl = canvas.getContext("webgl") || canvas.getContext("experimental-webgl");
+    if (!gl) return null;
+    const debugInfo = gl.getExtension("WEBGL_debug_renderer_info");
+    if (!debugInfo) return null;
+    return {
+      vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL) || "",
+      renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) || ""
+    };
+  } catch {
+    return null;
+  }
+}
+function getNetworkInfo() {
+  if (typeof navigator === "undefined") return void 0;
+  const connection = navigator.connection || navigator.mozConnection || navigator.webkitConnection;
+  if (!connection) return void 0;
+  return {
+    effective_type: connection.effectiveType,
+    downlink: connection.downlink,
+    rtt: connection.rtt,
+    save_data: connection.saveData
+  };
+}
+async function requestGPSLocation(timeout = 1e4, highAccuracy = true) {
+  if (typeof navigator === "undefined" || !navigator.geolocation) {
+    return null;
+  }
+  return new Promise((resolve) => {
+    navigator.geolocation.getCurrentPosition(
+      (position) => {
+        const { latitude, longitude, accuracy } = position.coords;
+        if (latitude < -90 || latitude > 90) {
+          resolve(null);
+          return;
+        }
+        if (longitude < -180 || longitude > 180) {
+          resolve(null);
+          return;
+        }
+        if (accuracy !== null && accuracy !== void 0 && accuracy <= 0) {
+          resolve(null);
+          return;
+        }
+        resolve({
+          latitude,
+          longitude,
+          accuracy,
+          altitude: position.coords.altitude ?? void 0,
+          altitude_accuracy: position.coords.altitudeAccuracy ?? void 0,
+          heading: position.coords.heading ?? void 0,
+          speed: position.coords.speed ?? void 0,
+          timestamp: position.timestamp
+        });
+      },
+      () => {
+        resolve(null);
+      },
+      {
+        enableHighAccuracy: highAccuracy,
+        timeout,
+        maximumAge: 0
+      }
+    );
+  });
+}
+function collectDeviceData(includeWebGL) {
+  const browserInfo = getBrowserInfo();
+  const webglInfo = includeWebGL ? getWebGLInfo() : null;
+  return {
+    device_id: generateDeviceId(),
+    user_agent: typeof navigator !== "undefined" ? navigator.userAgent : "",
+    platform: typeof navigator !== "undefined" ? navigator.platform : "",
+    browser: browserInfo.browser,
+    browser_version: browserInfo.browser_version,
+    os: browserInfo.os,
+    os_version: browserInfo.os_version,
+    screen_resolution: typeof screen !== "undefined" ? `${screen.width}x${screen.height}` : void 0,
+    language: typeof navigator !== "undefined" ? navigator.language : void 0,
+    timezone: Intl?.DateTimeFormat?.()?.resolvedOptions?.()?.timeZone,
+    color_depth: typeof screen !== "undefined" ? screen.colorDepth : void 0,
+    hardware_concurrency: typeof navigator !== "undefined" ? navigator.hardwareConcurrency : void 0,
+    device_memory: typeof navigator !== "undefined" ? navigator.deviceMemory : void 0,
+    touch_support: typeof navigator !== "undefined" ? navigator.maxTouchPoints > 0 : void 0,
+    webgl_vendor: webglInfo?.vendor,
+    webgl_renderer: webglInfo?.renderer
+  };
+}
+function encodePayload(payload) {
+  const json = JSON.stringify(payload);
+  if (typeof btoa !== "undefined") {
+    return btoa(unescape(encodeURIComponent(json)));
+  } else if (typeof Buffer !== "undefined") {
+    return Buffer.from(json, "utf-8").toString("base64");
+  }
+  throw new Error("No base64 encoding method available");
+}
+async function generateCipherText(options, config) {
+  const warnings = [];
+  let requestLocation = options.requestLocation ?? false;
+  if (config?.require_gps) {
+    const reason = options.reason;
+    if (reason === "login" && config.require_gps.login || reason === "registration" && config.require_gps.registration || reason === "transaction" && config.require_gps.transaction) {
+      requestLocation = true;
+    }
+  }
+  const deviceData = collectDeviceData(options.includeWebGL !== false);
+  let locationData;
+  if (requestLocation) {
+    const location = await requestGPSLocation(
+      options.locationTimeout || 1e4,
+      options.highAccuracy !== false
+    );
+    if (location) {
+      locationData = location;
+    } else {
+      warnings.push("GPS location not available or permission denied");
+    }
+  }
+  let networkData;
+  if (options.includeNetworkInfo !== false) {
+    networkData = getNetworkInfo();
+  }
+  const now = /* @__PURE__ */ new Date();
+  const expiry = new Date(now.getTime() + CIPHER_TEXT_EXPIRY_MINUTES * 60 * 1e3);
+  const payload = {
+    device: deviceData,
+    location: locationData,
+    network: networkData,
+    metadata: {
+      collected_at: now.toISOString(),
+      sdk_version: SDK_VERSION,
+      collection_reason: options.reason,
+      page_url: typeof window !== "undefined" ? window.location.href : void 0,
+      referrer: typeof document !== "undefined" ? document.referrer || void 0 : void 0
+    }
+  };
+  const encoded = encodePayload(payload);
+  const timestamp = now.getTime().toString(36);
+  let cipherText;
+  const hmacKey = options.signingKey || options.apiKey;
+  if (hmacKey) {
+    const message = `02.${timestamp}.${encoded}`;
+    const hmac = await computeHMAC(hmacKey, message);
+    cipherText = `${message}.${hmac}`;
+  } else {
+    cipherText = `01.${timestamp}.${encoded}`;
+  }
+  return {
+    cipherText,
+    locationCaptured: !!locationData,
+    warnings: warnings.length > 0 ? warnings : void 0,
+    generatedAt: now.toISOString(),
+    expiresAt: expiry.toISOString()
+  };
+}
+function decodeCipherText(cipherText) {
+  try {
+    const parts = cipherText.split(".");
+    if (parts.length !== 3 && parts.length !== 4) return null;
+    const [version, , encodedB64] = parts;
+    if (version !== "01" && version !== "02") return null;
+    const json = decodeURIComponent(escape(atob(encodedB64)));
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+}
+function isCipherTextExpired(cipherText) {
+  try {
+    const parts = cipherText.split(".");
+    if (parts.length !== 3 && parts.length !== 4) return true;
+    const timestampB36 = parts[1];
+    const timestamp = parseInt(timestampB36, 36);
+    const now = Date.now();
+    const expiryMs = CIPHER_TEXT_EXPIRY_MINUTES * 60 * 1e3;
+    return now - timestamp > expiryMs;
+  } catch {
+    return true;
+  }
+}
+
 // src/geolocation/client.ts
 var GeolocationClient = class extends BaseClient {
   constructor(config) {
@@ -401,7 +884,11 @@ var GeolocationClient = class extends BaseClient {
    * ```
    */
   async getGPSConfig(requestOptions) {
-    return this.requestWithRetry("/api/v1/geo/config", void 0, void 0, void 0, requestOptions);
+    const config = await this.requestWithRetry("/api/v1/geo/config", void 0, void 0, void 0, requestOptions);
+    if (config.signing_key) {
+      this.cachedSigningKey = config.signing_key;
+    }
+    return config;
   }
   // ============================================================================
   // CipherText Validation
@@ -661,258 +1148,39 @@ var GeolocationClient = class extends BaseClient {
     }, void 0, requestOptions);
   }
   // ============================================================================
-  // Utility Methods (inherited from BaseClient: healthCheck, updateConfig, getConfig, buildQueryString)
+  // CipherText Generation
   // ============================================================================
-};
-
-// src/shared/browser-utils.ts
-function generateUUID() {
-  if (typeof crypto !== "undefined" && crypto.randomUUID) {
-    return crypto.randomUUID();
-  }
-  return "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
-    const r = Math.random() * 16 | 0;
-    const v = c === "x" ? r : r & 3 | 8;
-    return v.toString(16);
-  });
-}
-function generateDeviceId() {
-  if (typeof window === "undefined" || typeof localStorage === "undefined") {
-    return generateUUID();
-  }
-  const storageKey = "cgs_device_id";
-  let deviceId = localStorage.getItem(storageKey);
-  if (!deviceId) {
-    deviceId = generateUUID();
-    localStorage.setItem(storageKey, deviceId);
-  }
-  return deviceId;
-}
-function getBrowserInfo() {
-  if (typeof navigator === "undefined") {
-    return { browser: "unknown", browser_version: "", os: "unknown", os_version: "" };
-  }
-  const ua = navigator.userAgent;
-  let browser = "unknown";
-  let browserVersion = "";
-  let os = "unknown";
-  let osVersion = "";
-  if (ua.includes("Firefox/")) {
-    browser = "Firefox";
-    browserVersion = ua.match(/Firefox\/([\d.]+)/)?.[1] || "";
-  } else if (ua.includes("Edg/")) {
-    browser = "Edge";
-    browserVersion = ua.match(/Edg\/([\d.]+)/)?.[1] || "";
-  } else if (ua.includes("Chrome/")) {
-    browser = "Chrome";
-    browserVersion = ua.match(/Chrome\/([\d.]+)/)?.[1] || "";
-  } else if (ua.includes("Safari/") && !ua.includes("Chrome")) {
-    browser = "Safari";
-    browserVersion = ua.match(/Version\/([\d.]+)/)?.[1] || "";
-  } else if (ua.includes("Opera") || ua.includes("OPR/")) {
-    browser = "Opera";
-    browserVersion = ua.match(/(?:Opera|OPR)\/([\d.]+)/)?.[1] || "";
-  }
-  if (ua.includes("Windows")) {
-    os = "Windows";
-    if (ua.includes("Windows NT 10.0")) osVersion = "10";
-    else if (ua.includes("Windows NT 6.3")) osVersion = "8.1";
-    else if (ua.includes("Windows NT 6.2")) osVersion = "8";
-    else if (ua.includes("Windows NT 6.1")) osVersion = "7";
-  } else if (ua.includes("Mac OS X")) {
-    os = "macOS";
-    osVersion = ua.match(/Mac OS X ([\d_]+)/)?.[1]?.replace(/_/g, ".") || "";
-  } else if (ua.includes("Linux")) {
-    os = "Linux";
-  } else if (ua.includes("Android")) {
-    os = "Android";
-    osVersion = ua.match(/Android ([\d.]+)/)?.[1] || "";
-  } else if (ua.includes("iOS") || ua.includes("iPhone") || ua.includes("iPad")) {
-    os = "iOS";
-    osVersion = ua.match(/OS ([\d_]+)/)?.[1]?.replace(/_/g, ".") || "";
-  }
-  return { browser, browser_version: browserVersion, os, os_version: osVersion };
-}
-
-// src/geolocation/ciphertext.ts
-var CIPHER_TEXT_EXPIRY_MINUTES = 5;
-function getWebGLInfo() {
-  if (typeof document === "undefined") return null;
-  try {
-    const canvas = document.createElement("canvas");
-    const gl = canvas.getContext("webgl") || canvas.getContext("experimental-webgl");
-    if (!gl) return null;
-    const debugInfo = gl.getExtension("WEBGL_debug_renderer_info");
-    if (!debugInfo) return null;
-    return {
-      vendor: gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL) || "",
-      renderer: gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL) || ""
-    };
-  } catch {
-    return null;
-  }
-}
-function getNetworkInfo() {
-  if (typeof navigator === "undefined") return void 0;
-  const connection = navigator.connection || navigator.mozConnection || navigator.webkitConnection;
-  if (!connection) return void 0;
-  return {
-    effective_type: connection.effectiveType,
-    downlink: connection.downlink,
-    rtt: connection.rtt,
-    save_data: connection.saveData
-  };
-}
-async function requestGPSLocation(timeout = 1e4, highAccuracy = true) {
-  if (typeof navigator === "undefined" || !navigator.geolocation) {
-    return null;
-  }
-  return new Promise((resolve) => {
-    navigator.geolocation.getCurrentPosition(
-      (position) => {
-        const { latitude, longitude, accuracy } = position.coords;
-        if (latitude < -90 || latitude > 90) {
-          resolve(null);
-          return;
-        }
-        if (longitude < -180 || longitude > 180) {
-          resolve(null);
-          return;
-        }
-        if (accuracy !== null && accuracy !== void 0 && accuracy <= 0) {
-          resolve(null);
-          return;
-        }
-        resolve({
-          latitude,
-          longitude,
-          accuracy,
-          altitude: position.coords.altitude ?? void 0,
-          altitude_accuracy: position.coords.altitudeAccuracy ?? void 0,
-          heading: position.coords.heading ?? void 0,
-          speed: position.coords.speed ?? void 0,
-          timestamp: position.timestamp
-        });
-      },
-      () => {
-        resolve(null);
-      },
-      {
-        enableHighAccuracy: highAccuracy,
-        timeout,
-        maximumAge: 0
-      }
-    );
-  });
-}
-function collectDeviceData(includeWebGL) {
-  const browserInfo = getBrowserInfo();
-  const webglInfo = includeWebGL ? getWebGLInfo() : null;
-  return {
-    device_id: generateDeviceId(),
-    user_agent: typeof navigator !== "undefined" ? navigator.userAgent : "",
-    platform: typeof navigator !== "undefined" ? navigator.platform : "",
-    browser: browserInfo.browser,
-    browser_version: browserInfo.browser_version,
-    os: browserInfo.os,
-    os_version: browserInfo.os_version,
-    screen_resolution: typeof screen !== "undefined" ? `${screen.width}x${screen.height}` : void 0,
-    language: typeof navigator !== "undefined" ? navigator.language : void 0,
-    timezone: Intl?.DateTimeFormat?.()?.resolvedOptions?.()?.timeZone,
-    color_depth: typeof screen !== "undefined" ? screen.colorDepth : void 0,
-    hardware_concurrency: typeof navigator !== "undefined" ? navigator.hardwareConcurrency : void 0,
-    device_memory: typeof navigator !== "undefined" ? navigator.deviceMemory : void 0,
-    touch_support: typeof navigator !== "undefined" ? navigator.maxTouchPoints > 0 : void 0,
-    webgl_vendor: webglInfo?.vendor,
-    webgl_renderer: webglInfo?.renderer
-  };
-}
-function encodePayload(payload) {
-  const json = JSON.stringify(payload);
-  if (typeof btoa !== "undefined") {
-    return btoa(unescape(encodeURIComponent(json)));
-  } else if (typeof Buffer !== "undefined") {
-    return Buffer.from(json, "utf-8").toString("base64");
-  }
-  throw new Error("No base64 encoding method available");
-}
-async function generateCipherText(options, config) {
-  const warnings = [];
-  let requestLocation = options.requestLocation ?? false;
-  if (config?.require_gps) {
-    const reason = options.reason;
-    if (reason === "login" && config.require_gps.login || reason === "registration" && config.require_gps.registration || reason === "transaction" && config.require_gps.transaction) {
-      requestLocation = true;
+  /**
+   * Generate a signed cipherText containing device and location data.
+   *
+   * Automatically passes the client's API key for HMAC signing (v02 format).
+   * If no API key is configured, falls back to unsigned v01 format.
+   *
+   * @param options - Options for cipherText generation
+   * @param gpsConfig - Optional GPS config (from getGPSConfig)
+   * @returns CipherText result with the signed string
+   *
+   * @example
+   * ```typescript
+   * const result = await client.generateCipherText({ reason: 'login' });
+   * console.log(result.cipherText); // v02 signed cipherText
+   * ```
+   */
+  async generateCipherText(options, gpsConfig) {
+    let signingKey = this.cachedSigningKey;
+    if (!signingKey) {
+      const config = await this.getGPSConfig();
+      signingKey = config.signing_key;
     }
-  }
-  const deviceData = collectDeviceData(options.includeWebGL !== false);
-  let locationData;
-  if (requestLocation) {
-    const location = await requestGPSLocation(
-      options.locationTimeout || 1e4,
-      options.highAccuracy !== false
+    return generateCipherText(
+      { ...options, signingKey: signingKey || void 0 },
+      gpsConfig
     );
-    if (location) {
-      locationData = location;
-    } else {
-      warnings.push("GPS location not available or permission denied");
-    }
-  }
-  let networkData;
-  if (options.includeNetworkInfo !== false) {
-    networkData = getNetworkInfo();
-  }
-  const now = /* @__PURE__ */ new Date();
-  const expiry = new Date(now.getTime() + CIPHER_TEXT_EXPIRY_MINUTES * 60 * 1e3);
-  const payload = {
-    device: deviceData,
-    location: locationData,
-    network: networkData,
-    metadata: {
-      collected_at: now.toISOString(),
-      sdk_version: SDK_VERSION,
-      collection_reason: options.reason,
-      page_url: typeof window !== "undefined" ? window.location.href : void 0,
-      referrer: typeof document !== "undefined" ? document.referrer || void 0 : void 0
-    }
-  };
-  const encoded = encodePayload(payload);
-  const version = "01";
-  const timestamp = now.getTime().toString(36);
-  const cipherText = `${version}.${timestamp}.${encoded}`;
-  return {
-    cipherText,
-    locationCaptured: !!locationData,
-    warnings: warnings.length > 0 ? warnings : void 0,
-    generatedAt: now.toISOString(),
-    expiresAt: expiry.toISOString()
-  };
-}
-function decodeCipherText(cipherText) {
-  try {
-    const parts = cipherText.split(".");
-    if (parts.length !== 3) return null;
-    const [version, , encodedB64] = parts;
-    if (version !== "01") return null;
-    const json = decodeURIComponent(escape(atob(encodedB64)));
-    return JSON.parse(json);
-  } catch {
-    return null;
-  }
-}
-function isCipherTextExpired(cipherText) {
-  try {
-    const parts = cipherText.split(".");
-    if (parts.length !== 3) return true;
-    const timestampB36 = parts[1];
-    const timestamp = parseInt(timestampB36, 36);
-    const now = Date.now();
-    const expiryMs = CIPHER_TEXT_EXPIRY_MINUTES * 60 * 1e3;
-    return now - timestamp > expiryMs;
-  } catch {
-    return true;
   }
-}
+  // ============================================================================
+  // Utility Methods (inherited from BaseClient: healthCheck, updateConfig, getConfig, buildQueryString)
+  // ============================================================================
+};
 
 exports.GeolocationClient = GeolocationClient;
 exports.decodeCipherText = decodeCipherText;