wolfronix-sdk 1.1.0 → 1.3.0

package/README.md

@@ -1,35 +1,44 @@
-# @wolfronix/sdk
+# wolfronix-sdk
 
 Official JavaScript/TypeScript SDK for Wolfronix - Zero-knowledge encryption made simple.
 
-[![npm version](https://badge.fury.io/js/@wolfronix%2Fsdk.svg)](https://www.npmjs.com/package/@wolfronix/sdk)
+[![npm version](https://badge.fury.io/js/wolfronix-sdk.svg)](https://www.npmjs.com/package/wolfronix-sdk)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 ## Features
 
 - 🔐 **Zero-Knowledge Encryption** - Keys generated client-side, never leave your device
 - 🏢 **Enterprise Ready** - Seamless integration with your existing storage
-
 - 🚀 **Simple API** - Encrypt files in 2 lines of code
 - 📦 **TypeScript Native** - Full type definitions included
-- 🌐 **Universal** - Works in Node.js and browsers
-- ⚡ **Streaming** - Handle large files with progress tracking
+- 🌐 **Universal** - Works in Node.js 16+ and modern browsers
 - 🔄 **Auto Retry** - Built-in retry logic with exponential backoff
 
+## Backend Integration (Enterprise Mode)
+
+To use this SDK, your backend API must implement 3 storage endpoints that Wolfronix will call:
+
+1.  **POST** `/wolfronix/files/upload` - Store encrypted file + metadata
+2.  **GET** `/wolfronix/files/{id}` - Retrieve metadata
+3.  **GET** `/wolfronix/files/{id}/data` - Retrieve encrypted file blob
+
+Wolfronix handles all encryption/decryption keys and logic; you only handle the encrypted blobs.
+
+
 ## Installation
 
 ```bash
-npm install @wolfronix/sdk
+npm install wolfronix-sdk
 # or
-yarn add @wolfronix/sdk
+yarn add wolfronix-sdk
 # or
-pnpm add @wolfronix/sdk
+pnpm add wolfronix-sdk
 ```
 
 ## Quick Start
 
 ```typescript
-import Wolfronix from '@wolfronix/sdk';
+import Wolfronix from 'wolfronix-sdk';
 
 // Initialize client
 const wfx = new Wolfronix({
@@ -37,7 +46,10 @@ const wfx = new Wolfronix({
   clientId: 'your-enterprise-client-id'
 });
 
-// Login
+// Register (First time only) - Generates keys client-side
+await wfx.register('user@example.com', 'password123');
+
+// Login (Subsequent visits)
 await wfx.login('user@example.com', 'password123');
 
 // Encrypt a file
@@ -53,7 +65,7 @@ const decrypted = await wfx.decrypt(result.file_id);
 ### Browser (React, Vue, Angular, etc.)
 
 ```typescript
-import Wolfronix from '@wolfronix/sdk';
+import Wolfronix from 'wolfronix-sdk';
 
 const wfx = new Wolfronix('https://wolfronix-server:5002');
 
@@ -63,7 +75,6 @@ const handleFileUpload = async (event: React.ChangeEvent<HTMLInputElement>) => {
   if (!file) return;
 
   try {
-    // Keys are automatically handled by the SDK
     const { file_id } = await wfx.encrypt(file);
     console.log('File encrypted with your private key:', file_id);
   } catch (error) {
@@ -88,7 +99,7 @@ const handleDownload = async (fileId: string, filename: string) => {
 ### Node.js
 
 ```typescript
-import Wolfronix from '@wolfronix/sdk';
+import Wolfronix from 'wolfronix-sdk';
 import * as fs from 'fs';
 
 const wfx = new Wolfronix({
@@ -118,23 +129,6 @@ async function main() {
 main();
 ```
 
-### Large File Streaming with Progress
-
-```typescript
-const wfx = new Wolfronix('https://wolfronix-server:5002');
-
-// Encrypt with progress
-const result = await wfx.encryptStream(largeFile, (percent) => {
-  console.log(`Uploading: ${percent}%`);
-  progressBar.value = percent;
-});
-
-// Decrypt with progress
-const blob = await wfx.decryptStream(fileId, (percent) => {
-  console.log(`Downloading: ${percent}%`);
-});
-```
-
 ## API Reference
 
 ### Constructor
@@ -167,10 +161,8 @@ new Wolfronix(config: WolfronixConfig | string)
 | Method | Description |
 |--------|-------------|
 | `encrypt(file, filename?)` | Encrypt and store file |
-| `encryptStream(file, onProgress?)` | Encrypt large file with progress |
 | `decrypt(fileId)` | Decrypt file (returns Blob) |
 | `decryptToBuffer(fileId)` | Decrypt file (returns ArrayBuffer) |
-| `decryptStream(fileId, onProgress?)` | Decrypt large file with progress |
 | `listFiles()` | List user's encrypted files |
 | `deleteFile(fileId)` | Delete encrypted file |
 
@@ -193,7 +185,7 @@ import Wolfronix, {
   PermissionDeniedError,
   NetworkError,
   ValidationError
-} from '@wolfronix/sdk';
+} from 'wolfronix-sdk';
 
 try {
   await wfx.encrypt(file);
@@ -232,7 +224,7 @@ import Wolfronix, {
   FileInfo,
   ListFilesResponse,
   MetricsResponse
-} from '@wolfronix/sdk';
+} from 'wolfronix-sdk';
 
 // All methods are fully typed
 const config: WolfronixConfig = {
@@ -249,7 +241,7 @@ const response: EncryptResponse = await wfx.encrypt(file);
 ```typescript
 // useWolfronix.ts
 import { useState, useCallback, useMemo } from 'react';
-import Wolfronix, { FileInfo as WolfronixFile } from '@wolfronix/sdk';
+import Wolfronix, { FileInfo as WolfronixFile } from 'wolfronix-sdk';
 
 export function useWolfronix(baseUrl: string, clientId?: string) {
   const [isLoading, setIsLoading] = useState(false);
@@ -337,10 +329,25 @@ function FileManager() {
 }
 ```
 
+## Real-World Use Cases
+
+Wolfronix can be integrated into **any application** that handles sensitive data:
+
+| Industry | Application | How Wolfronix Helps |
+|----------|------------|---------------------|
+| 🏥 **Healthcare** | Patient records, lab reports | HIPAA-compliant encryption at rest |
+| 🏦 **Finance** | Invoices, tax docs, receipts | End-to-end encrypted banking documents |
+| ⚖️ **Legal** | Contracts, case files | Zero-knowledge confidential storage |
+| ☁️ **Cloud Storage** | Drive/Dropbox alternatives | Encrypted file vault with user-owned keys |
+| 🏢 **Enterprise** | HR records, internal docs | Per-employee encryption isolation |
+| 🎓 **Education** | Exam papers, student data | Tamper-proof academic records |
+| 💬 **Messaging** | File attachments | Encrypted file sharing in chat apps |
+| 🛒 **E-commerce** | Order docs, payment receipts | PCI-compliant document storage |
+
 ## Requirements
 
 - Node.js 16+ (for Node.js usage)
-- Modern browser with Fetch API support
+- Modern browser with Web Crypto API support
 
 ## License
 

package/dist/index.d.mts

@@ -3,7 +3,7 @@
  * Zero-knowledge encryption made simple
  *
  * @package @wolfronix/sdk
- * @version 1.1.0
+ * @version 1.3.0
  */
 interface WolfronixConfig {
     /** Wolfronix server base URL */
@@ -24,11 +24,10 @@ interface AuthResponse {
     message: string;
 }
 interface EncryptResponse {
-    success: boolean;
+    status: string;
     file_id: string;
-    original_name: string;
-    encrypted_size: number;
-    message: string;
+    file_size: number;
+    enc_time_ms: number;
 }
 interface FileInfo {
     file_id: string;
@@ -52,10 +51,6 @@ interface MetricsResponse {
     total_bytes_encrypted: number;
     total_bytes_decrypted: number;
 }
-interface StreamToken {
-    token: string;
-    expires_at: string;
-}
 declare class WolfronixError extends Error {
     readonly code: string;
     readonly statusCode?: number;
@@ -155,17 +150,6 @@ declare class Wolfronix {
      * ```
      */
     encrypt(file: File | Blob | ArrayBuffer | Uint8Array, filename?: string): Promise<EncryptResponse>;
-    /**
-     * Encrypt a file using streaming (for large files)
-     *
-     * @example
-     * ```typescript
-     * const result = await wfx.encryptStream(largeFile, (progress) => {
-     *   console.log(`Progress: ${progress}%`);
-     * });
-     * ```
-     */
-    encryptStream(file: File | Blob, onProgress?: (percent: number) => void): Promise<EncryptResponse>;
     /**
      * Decrypt and retrieve a file
      *
@@ -185,10 +169,6 @@ declare class Wolfronix {
      * Decrypt and return as ArrayBuffer
      */
     decryptToBuffer(fileId: string): Promise<ArrayBuffer>;
-    /**
-     * Decrypt using streaming (for large files)
-     */
-    decryptStream(fileId: string, onProgress?: (percent: number) => void): Promise<Blob>;
     /**
      * List all encrypted files for current user
      *
@@ -238,4 +218,4 @@ declare class Wolfronix {
  */
 declare function createClient(config: WolfronixConfig | string): Wolfronix;
 
-export { type AuthResponse, AuthenticationError, type DeleteResponse, type EncryptResponse, type FileInfo, FileNotFoundError, type ListFilesResponse, type MetricsResponse, NetworkError, PermissionDeniedError, type StreamToken, ValidationError, Wolfronix, type WolfronixConfig, WolfronixError, createClient, Wolfronix as default };
+export { type AuthResponse, AuthenticationError, type DeleteResponse, type EncryptResponse, type FileInfo, FileNotFoundError, type ListFilesResponse, type MetricsResponse, NetworkError, PermissionDeniedError, ValidationError, Wolfronix, type WolfronixConfig, WolfronixError, createClient, Wolfronix as default };

package/dist/index.d.ts

@@ -3,7 +3,7 @@
  * Zero-knowledge encryption made simple
  *
  * @package @wolfronix/sdk
- * @version 1.1.0
+ * @version 1.3.0
  */
 interface WolfronixConfig {
     /** Wolfronix server base URL */
@@ -24,11 +24,10 @@ interface AuthResponse {
     message: string;
 }
 interface EncryptResponse {
-    success: boolean;
+    status: string;
     file_id: string;
-    original_name: string;
-    encrypted_size: number;
-    message: string;
+    file_size: number;
+    enc_time_ms: number;
 }
 interface FileInfo {
     file_id: string;
@@ -52,10 +51,6 @@ interface MetricsResponse {
     total_bytes_encrypted: number;
     total_bytes_decrypted: number;
 }
-interface StreamToken {
-    token: string;
-    expires_at: string;
-}
 declare class WolfronixError extends Error {
     readonly code: string;
     readonly statusCode?: number;
@@ -155,17 +150,6 @@ declare class Wolfronix {
      * ```
      */
     encrypt(file: File | Blob | ArrayBuffer | Uint8Array, filename?: string): Promise<EncryptResponse>;
-    /**
-     * Encrypt a file using streaming (for large files)
-     *
-     * @example
-     * ```typescript
-     * const result = await wfx.encryptStream(largeFile, (progress) => {
-     *   console.log(`Progress: ${progress}%`);
-     * });
-     * ```
-     */
-    encryptStream(file: File | Blob, onProgress?: (percent: number) => void): Promise<EncryptResponse>;
     /**
      * Decrypt and retrieve a file
      *
@@ -185,10 +169,6 @@ declare class Wolfronix {
      * Decrypt and return as ArrayBuffer
      */
     decryptToBuffer(fileId: string): Promise<ArrayBuffer>;
-    /**
-     * Decrypt using streaming (for large files)
-     */
-    decryptStream(fileId: string, onProgress?: (percent: number) => void): Promise<Blob>;
     /**
      * List all encrypted files for current user
      *
@@ -238,4 +218,4 @@ declare class Wolfronix {
  */
 declare function createClient(config: WolfronixConfig | string): Wolfronix;
 
-export { type AuthResponse, AuthenticationError, type DeleteResponse, type EncryptResponse, type FileInfo, FileNotFoundError, type ListFilesResponse, type MetricsResponse, NetworkError, PermissionDeniedError, type StreamToken, ValidationError, Wolfronix, type WolfronixConfig, WolfronixError, createClient, Wolfronix as default };
+export { type AuthResponse, AuthenticationError, type DeleteResponse, type EncryptResponse, type FileInfo, FileNotFoundError, type ListFilesResponse, type MetricsResponse, NetworkError, PermissionDeniedError, ValidationError, Wolfronix, type WolfronixConfig, WolfronixError, createClient, Wolfronix as default };

package/dist/index.js

@@ -33,6 +33,14 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/crypto.ts
+var getCrypto = () => {
+  if (typeof globalThis.crypto !== "undefined") {
+    return globalThis.crypto;
+  }
+  throw new Error(
+    "Web Crypto API not available. Requires a modern browser or Node.js 16+."
+  );
+};
 var RSA_ALG = {
   name: "RSA-OAEP",
   modulusLength: 2048,
@@ -42,7 +50,7 @@ var RSA_ALG = {
 var WRAP_ALG = "AES-GCM";
 var PBKDF2_ITERATIONS = 1e5;
 async function generateKeyPair() {
-  return await window.crypto.subtle.generateKey(
+  return await getCrypto().subtle.generateKey(
     RSA_ALG,
     true,
     // extractable
@@ -51,7 +59,7 @@ async function generateKeyPair() {
 }
 async function exportKeyToPEM(key, type) {
   const format = type === "public" ? "spki" : "pkcs8";
-  const exported = await window.crypto.subtle.exportKey(format, key);
+  const exported = await getCrypto().subtle.exportKey(format, key);
   const exportedAsBase64 = arrayBufferToBase64(exported);
   const pemHeader = type === "public" ? "-----BEGIN PUBLIC KEY-----" : "-----BEGIN PRIVATE KEY-----";
   const pemFooter = type === "public" ? "-----END PUBLIC KEY-----" : "-----END PRIVATE KEY-----";
@@ -66,7 +74,7 @@ async function importKeyFromPEM(pem, type) {
   const binaryDer = base64ToArrayBuffer(pemContents);
   const format = type === "public" ? "spki" : "pkcs8";
   const usage = type === "public" ? ["encrypt", "wrapKey"] : ["decrypt", "unwrapKey"];
-  return await window.crypto.subtle.importKey(
+  return await getCrypto().subtle.importKey(
     format,
     binaryDer,
     RSA_ALG,
@@ -76,7 +84,7 @@ async function importKeyFromPEM(pem, type) {
 }
 async function deriveWrappingKey(password, saltHex) {
   const enc = new TextEncoder();
-  const passwordKey = await window.crypto.subtle.importKey(
+  const passwordKey = await getCrypto().subtle.importKey(
     "raw",
     enc.encode(password),
     "PBKDF2",
@@ -84,7 +92,7 @@ async function deriveWrappingKey(password, saltHex) {
     ["deriveKey"]
   );
   const salt = hexToArrayBuffer(saltHex);
-  return await window.crypto.subtle.deriveKey(
+  return await getCrypto().subtle.deriveKey(
     {
       name: "PBKDF2",
       salt,
@@ -98,12 +106,13 @@ async function deriveWrappingKey(password, saltHex) {
   );
 }
 async function wrapPrivateKey(privateKey, password) {
-  const salt = window.crypto.getRandomValues(new Uint8Array(16));
+  const crypto = getCrypto();
+  const salt = crypto.getRandomValues(new Uint8Array(16));
   const saltHex = arrayBufferToHex(salt.buffer);
   const wrappingKey = await deriveWrappingKey(password, saltHex);
-  const exportedKey = await window.crypto.subtle.exportKey("pkcs8", privateKey);
-  const iv = window.crypto.getRandomValues(new Uint8Array(12));
-  const encryptedContent = await window.crypto.subtle.encrypt(
+  const exportedKey = await crypto.subtle.exportKey("pkcs8", privateKey);
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const encryptedContent = await crypto.subtle.encrypt(
     {
       name: WRAP_ALG,
       iv
@@ -125,7 +134,7 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
   const iv = combinedArray.slice(0, 12);
   const data = combinedArray.slice(12);
   const wrappingKey = await deriveWrappingKey(password, saltHex);
-  const decryptedKeyData = await window.crypto.subtle.decrypt(
+  const decryptedKeyData = await getCrypto().subtle.decrypt(
     {
       name: WRAP_ALG,
       iv
@@ -133,7 +142,7 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
     wrappingKey,
     data
   );
-  return await window.crypto.subtle.importKey(
+  return await getCrypto().subtle.importKey(
     "pkcs8",
     decryptedKeyData,
     RSA_ALG,
@@ -142,16 +151,23 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
   );
 }
 function arrayBufferToBase64(buffer) {
-  let binary = "";
   const bytes = new Uint8Array(buffer);
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(bytes).toString("base64");
+  }
+  let binary = "";
   const len = bytes.byteLength;
   for (let i = 0; i < len; i++) {
     binary += String.fromCharCode(bytes[i]);
   }
-  return window.btoa(binary);
+  return btoa(binary);
 }
 function base64ToArrayBuffer(base64) {
-  const binary_string = window.atob(base64);
+  if (typeof Buffer !== "undefined") {
+    const buf = Buffer.from(base64, "base64");
+    return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+  }
+  const binary_string = atob(base64);
   const len = binary_string.length;
   const bytes = new Uint8Array(len);
   for (let i = 0; i < len; i++) {
@@ -261,6 +277,9 @@ var Wolfronix = class {
     }
     if (includeAuth && this.token) {
       headers["Authorization"] = `Bearer ${this.token}`;
+      if (this.userId) {
+        headers["X-User-ID"] = this.userId;
+      }
     }
     return headers;
   }
@@ -489,60 +508,15 @@ var Wolfronix = class {
       throw new Error("Public key not available. Is user logged in?");
     }
     formData.append("client_public_key", this.publicKeyPEM);
-    return this.request("POST", "/api/v1/encrypt", {
-      formData
-    });
-  }
-  /**
-   * Encrypt a file using streaming (for large files)
-   * 
-   * @example
-   * ```typescript
-   * const result = await wfx.encryptStream(largeFile, (progress) => {
-   *   console.log(`Progress: ${progress}%`);
-   * });
-   * ```
-   */
-  async encryptStream(file, onProgress) {
-    this.ensureAuthenticated();
-    const tokenResponse = await this.request("POST", "/api/v1/stream/token", {
-      body: {
-        user_id: this.userId,
-        client_id: this.config.clientId
-      }
-    });
-    const formData = new FormData();
-    formData.append("file", file);
-    formData.append("user_id", this.userId || "");
-    formData.append("stream_token", tokenResponse.token);
-    if (onProgress && typeof XMLHttpRequest !== "undefined") {
-      return new Promise((resolve, reject) => {
-        const xhr = new XMLHttpRequest();
-        xhr.upload.onprogress = (event) => {
-          if (event.lengthComputable) {
-            onProgress(Math.round(event.loaded / event.total * 100));
-          }
-        };
-        xhr.onload = () => {
-          if (xhr.status >= 200 && xhr.status < 300) {
-            resolve(JSON.parse(xhr.responseText));
-          } else {
-            reject(new WolfronixError("Upload failed", "UPLOAD_ERROR", xhr.status));
-          }
-        };
-        xhr.onerror = () => reject(new NetworkError("Upload failed"));
-        xhr.open("POST", `${this.config.baseUrl}/api/v1/stream/encrypt`);
-        const headers = this.getHeaders();
-        Object.entries(headers).forEach(([key, value]) => {
-          xhr.setRequestHeader(key, value);
-        });
-        xhr.send(formData);
-      });
-    }
-    return this.request("POST", "/api/v1/stream/encrypt", {
+    const response = await this.request("POST", "/api/v1/encrypt", {
       formData
-      // Stream endpoint might need update to accept public key too if re-implemented
     });
+    return {
+      status: response.status,
+      file_id: String(response.file_id),
+      file_size: response.file_size,
+      enc_time_ms: response.enc_time_ms
+    };
   }
   /**
    * Decrypt and retrieve a file
@@ -567,9 +541,6 @@ var Wolfronix = class {
       throw new Error("Private key not available. Is user logged in?");
     }
     const privateKeyPEM = await exportKeyToPEM(this.privateKey, "private");
-    const headers = this.getHeaders();
-    headers["X-Private-Key"] = privateKeyPEM;
-    headers["X-User-Role"] = "owner";
     return this.request("POST", `/api/v1/files/${fileId}/decrypt`, {
       responseType: "blob",
       headers: {
@@ -598,51 +569,6 @@ var Wolfronix = class {
       }
     });
   }
-  /**
-   * Decrypt using streaming (for large files)
-   */
-  async decryptStream(fileId, onProgress) {
-    this.ensureAuthenticated();
-    if (!fileId) {
-      throw new ValidationError("File ID is required");
-    }
-    if (!this.privateKey) {
-      throw new Error("Private key not available. Is user logged in?");
-    }
-    const privateKeyPEM = await exportKeyToPEM(this.privateKey, "private");
-    if (onProgress && typeof XMLHttpRequest !== "undefined") {
-      return new Promise((resolve, reject) => {
-        const xhr = new XMLHttpRequest();
-        xhr.responseType = "blob";
-        xhr.onprogress = (event) => {
-          if (event.lengthComputable) {
-            onProgress(Math.round(event.loaded / event.total * 100));
-          }
-        };
-        xhr.onload = () => {
-          if (xhr.status >= 200 && xhr.status < 300) {
-            resolve(xhr.response);
-          } else {
-            reject(new WolfronixError("Download failed", "DOWNLOAD_ERROR", xhr.status));
-          }
-        };
-        xhr.onerror = () => reject(new NetworkError("Download failed"));
-        xhr.open("POST", `${this.config.baseUrl}/api/v1/files/${fileId}/decrypt`);
-        const headers = { ...this.getHeaders(), "X-Private-Key": privateKeyPEM, "X-User-Role": "owner" };
-        Object.entries(headers).forEach(([key, value]) => {
-          xhr.setRequestHeader(key, value);
-        });
-        xhr.send();
-      });
-    }
-    return this.request("POST", `/api/v1/files/${fileId}/decrypt`, {
-      responseType: "blob",
-      headers: {
-        "X-Private-Key": privateKeyPEM,
-        "X-User-Role": "owner"
-      }
-    });
-  }
   /**
    * List all encrypted files for current user
    * 
@@ -654,7 +580,17 @@ var Wolfronix = class {
    */
   async listFiles() {
     this.ensureAuthenticated();
-    return this.request("GET", "/api/v1/files");
+    const files = await this.request("GET", "/api/v1/files");
+    return {
+      success: true,
+      files: (files || []).map((f) => ({
+        file_id: f.id,
+        original_name: f.name,
+        encrypted_size: f.size_bytes,
+        created_at: f.date
+      })),
+      total: (files || []).length
+    };
   }
   /**
    * Delete an encrypted file
@@ -685,7 +621,7 @@ var Wolfronix = class {
    */
   async getMetrics() {
     this.ensureAuthenticated();
-    return this.request("GET", "/api/v1/metrics");
+    return this.request("GET", "/api/v1/metrics/summary");
   }
   /**
    * Check if server is healthy

package/dist/index.mjs

@@ -1,4 +1,12 @@
 // src/crypto.ts
+var getCrypto = () => {
+  if (typeof globalThis.crypto !== "undefined") {
+    return globalThis.crypto;
+  }
+  throw new Error(
+    "Web Crypto API not available. Requires a modern browser or Node.js 16+."
+  );
+};
 var RSA_ALG = {
   name: "RSA-OAEP",
   modulusLength: 2048,
@@ -8,7 +16,7 @@ var RSA_ALG = {
 var WRAP_ALG = "AES-GCM";
 var PBKDF2_ITERATIONS = 1e5;
 async function generateKeyPair() {
-  return await window.crypto.subtle.generateKey(
+  return await getCrypto().subtle.generateKey(
     RSA_ALG,
     true,
     // extractable
@@ -17,7 +25,7 @@ async function generateKeyPair() {
 }
 async function exportKeyToPEM(key, type) {
   const format = type === "public" ? "spki" : "pkcs8";
-  const exported = await window.crypto.subtle.exportKey(format, key);
+  const exported = await getCrypto().subtle.exportKey(format, key);
   const exportedAsBase64 = arrayBufferToBase64(exported);
   const pemHeader = type === "public" ? "-----BEGIN PUBLIC KEY-----" : "-----BEGIN PRIVATE KEY-----";
   const pemFooter = type === "public" ? "-----END PUBLIC KEY-----" : "-----END PRIVATE KEY-----";
@@ -32,7 +40,7 @@ async function importKeyFromPEM(pem, type) {
   const binaryDer = base64ToArrayBuffer(pemContents);
   const format = type === "public" ? "spki" : "pkcs8";
   const usage = type === "public" ? ["encrypt", "wrapKey"] : ["decrypt", "unwrapKey"];
-  return await window.crypto.subtle.importKey(
+  return await getCrypto().subtle.importKey(
     format,
     binaryDer,
     RSA_ALG,
@@ -42,7 +50,7 @@ async function importKeyFromPEM(pem, type) {
 }
 async function deriveWrappingKey(password, saltHex) {
   const enc = new TextEncoder();
-  const passwordKey = await window.crypto.subtle.importKey(
+  const passwordKey = await getCrypto().subtle.importKey(
     "raw",
     enc.encode(password),
     "PBKDF2",
@@ -50,7 +58,7 @@ async function deriveWrappingKey(password, saltHex) {
     ["deriveKey"]
   );
   const salt = hexToArrayBuffer(saltHex);
-  return await window.crypto.subtle.deriveKey(
+  return await getCrypto().subtle.deriveKey(
     {
       name: "PBKDF2",
       salt,
@@ -64,12 +72,13 @@ async function deriveWrappingKey(password, saltHex) {
   );
 }
 async function wrapPrivateKey(privateKey, password) {
-  const salt = window.crypto.getRandomValues(new Uint8Array(16));
+  const crypto = getCrypto();
+  const salt = crypto.getRandomValues(new Uint8Array(16));
   const saltHex = arrayBufferToHex(salt.buffer);
   const wrappingKey = await deriveWrappingKey(password, saltHex);
-  const exportedKey = await window.crypto.subtle.exportKey("pkcs8", privateKey);
-  const iv = window.crypto.getRandomValues(new Uint8Array(12));
-  const encryptedContent = await window.crypto.subtle.encrypt(
+  const exportedKey = await crypto.subtle.exportKey("pkcs8", privateKey);
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const encryptedContent = await crypto.subtle.encrypt(
     {
       name: WRAP_ALG,
       iv
@@ -91,7 +100,7 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
   const iv = combinedArray.slice(0, 12);
   const data = combinedArray.slice(12);
   const wrappingKey = await deriveWrappingKey(password, saltHex);
-  const decryptedKeyData = await window.crypto.subtle.decrypt(
+  const decryptedKeyData = await getCrypto().subtle.decrypt(
     {
       name: WRAP_ALG,
       iv
@@ -99,7 +108,7 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
     wrappingKey,
     data
   );
-  return await window.crypto.subtle.importKey(
+  return await getCrypto().subtle.importKey(
     "pkcs8",
     decryptedKeyData,
     RSA_ALG,
@@ -108,16 +117,23 @@ async function unwrapPrivateKey(encryptedKeyBase64, password, saltHex) {
   );
 }
 function arrayBufferToBase64(buffer) {
-  let binary = "";
   const bytes = new Uint8Array(buffer);
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(bytes).toString("base64");
+  }
+  let binary = "";
   const len = bytes.byteLength;
   for (let i = 0; i < len; i++) {
     binary += String.fromCharCode(bytes[i]);
   }
-  return window.btoa(binary);
+  return btoa(binary);
 }
 function base64ToArrayBuffer(base64) {
-  const binary_string = window.atob(base64);
+  if (typeof Buffer !== "undefined") {
+    const buf = Buffer.from(base64, "base64");
+    return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+  }
+  const binary_string = atob(base64);
   const len = binary_string.length;
   const bytes = new Uint8Array(len);
   for (let i = 0; i < len; i++) {
@@ -227,6 +243,9 @@ var Wolfronix = class {
     }
     if (includeAuth && this.token) {
       headers["Authorization"] = `Bearer ${this.token}`;
+      if (this.userId) {
+        headers["X-User-ID"] = this.userId;
+      }
     }
     return headers;
   }
@@ -455,60 +474,15 @@ var Wolfronix = class {
       throw new Error("Public key not available. Is user logged in?");
     }
     formData.append("client_public_key", this.publicKeyPEM);
-    return this.request("POST", "/api/v1/encrypt", {
-      formData
-    });
-  }
-  /**
-   * Encrypt a file using streaming (for large files)
-   * 
-   * @example
-   * ```typescript
-   * const result = await wfx.encryptStream(largeFile, (progress) => {
-   *   console.log(`Progress: ${progress}%`);
-   * });
-   * ```
-   */
-  async encryptStream(file, onProgress) {
-    this.ensureAuthenticated();
-    const tokenResponse = await this.request("POST", "/api/v1/stream/token", {
-      body: {
-        user_id: this.userId,
-        client_id: this.config.clientId
-      }
-    });
-    const formData = new FormData();
-    formData.append("file", file);
-    formData.append("user_id", this.userId || "");
-    formData.append("stream_token", tokenResponse.token);
-    if (onProgress && typeof XMLHttpRequest !== "undefined") {
-      return new Promise((resolve, reject) => {
-        const xhr = new XMLHttpRequest();
-        xhr.upload.onprogress = (event) => {
-          if (event.lengthComputable) {
-            onProgress(Math.round(event.loaded / event.total * 100));
-          }
-        };
-        xhr.onload = () => {
-          if (xhr.status >= 200 && xhr.status < 300) {
-            resolve(JSON.parse(xhr.responseText));
-          } else {
-            reject(new WolfronixError("Upload failed", "UPLOAD_ERROR", xhr.status));
-          }
-        };
-        xhr.onerror = () => reject(new NetworkError("Upload failed"));
-        xhr.open("POST", `${this.config.baseUrl}/api/v1/stream/encrypt`);
-        const headers = this.getHeaders();
-        Object.entries(headers).forEach(([key, value]) => {
-          xhr.setRequestHeader(key, value);
-        });
-        xhr.send(formData);
-      });
-    }
-    return this.request("POST", "/api/v1/stream/encrypt", {
+    const response = await this.request("POST", "/api/v1/encrypt", {
       formData
-      // Stream endpoint might need update to accept public key too if re-implemented
     });
+    return {
+      status: response.status,
+      file_id: String(response.file_id),
+      file_size: response.file_size,
+      enc_time_ms: response.enc_time_ms
+    };
   }
   /**
    * Decrypt and retrieve a file
@@ -533,9 +507,6 @@ var Wolfronix = class {
       throw new Error("Private key not available. Is user logged in?");
     }
     const privateKeyPEM = await exportKeyToPEM(this.privateKey, "private");
-    const headers = this.getHeaders();
-    headers["X-Private-Key"] = privateKeyPEM;
-    headers["X-User-Role"] = "owner";
     return this.request("POST", `/api/v1/files/${fileId}/decrypt`, {
       responseType: "blob",
       headers: {
@@ -564,51 +535,6 @@ var Wolfronix = class {
       }
     });
   }
-  /**
-   * Decrypt using streaming (for large files)
-   */
-  async decryptStream(fileId, onProgress) {
-    this.ensureAuthenticated();
-    if (!fileId) {
-      throw new ValidationError("File ID is required");
-    }
-    if (!this.privateKey) {
-      throw new Error("Private key not available. Is user logged in?");
-    }
-    const privateKeyPEM = await exportKeyToPEM(this.privateKey, "private");
-    if (onProgress && typeof XMLHttpRequest !== "undefined") {
-      return new Promise((resolve, reject) => {
-        const xhr = new XMLHttpRequest();
-        xhr.responseType = "blob";
-        xhr.onprogress = (event) => {
-          if (event.lengthComputable) {
-            onProgress(Math.round(event.loaded / event.total * 100));
-          }
-        };
-        xhr.onload = () => {
-          if (xhr.status >= 200 && xhr.status < 300) {
-            resolve(xhr.response);
-          } else {
-            reject(new WolfronixError("Download failed", "DOWNLOAD_ERROR", xhr.status));
-          }
-        };
-        xhr.onerror = () => reject(new NetworkError("Download failed"));
-        xhr.open("POST", `${this.config.baseUrl}/api/v1/files/${fileId}/decrypt`);
-        const headers = { ...this.getHeaders(), "X-Private-Key": privateKeyPEM, "X-User-Role": "owner" };
-        Object.entries(headers).forEach(([key, value]) => {
-          xhr.setRequestHeader(key, value);
-        });
-        xhr.send();
-      });
-    }
-    return this.request("POST", `/api/v1/files/${fileId}/decrypt`, {
-      responseType: "blob",
-      headers: {
-        "X-Private-Key": privateKeyPEM,
-        "X-User-Role": "owner"
-      }
-    });
-  }
   /**
    * List all encrypted files for current user
    * 
@@ -620,7 +546,17 @@ var Wolfronix = class {
    */
   async listFiles() {
     this.ensureAuthenticated();
-    return this.request("GET", "/api/v1/files");
+    const files = await this.request("GET", "/api/v1/files");
+    return {
+      success: true,
+      files: (files || []).map((f) => ({
+        file_id: f.id,
+        original_name: f.name,
+        encrypted_size: f.size_bytes,
+        created_at: f.date
+      })),
+      total: (files || []).length
+    };
   }
   /**
    * Delete an encrypted file
@@ -651,7 +587,7 @@ var Wolfronix = class {
    */
   async getMetrics() {
     this.ensureAuthenticated();
-    return this.request("GET", "/api/v1/metrics");
+    return this.request("GET", "/api/v1/metrics/summary");
   }
   /**
    * Check if server is healthy

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfronix-sdk",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Official Wolfronix SDK for JavaScript/TypeScript - Zero-knowledge encryption made simple",
   "main": "dist/index.js",
   "module": "dist/index.mjs",