@agg-build/sdk 1.0.0

package/dist/server.mjs

@@ -0,0 +1,194 @@
+import {
+  __async,
+  __spreadProps,
+  __spreadValues
+} from "./chunk-AXBFBHS2.mjs";
+
+// src/server.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function signExternalId(appSecret, externalId) {
+  const timestamp = Date.now();
+  const hmac = createHmac("sha256", Buffer.from(appSecret, "hex")).update(`${externalId}:${timestamp}`).digest("hex");
+  return {
+    externalId,
+    timestamp,
+    hmac
+  };
+}
+var WebhookVerificationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookVerificationError";
+  }
+};
+function verifyWebhook(payload, headers, secret, options) {
+  var _a;
+  const tolerance = (_a = options == null ? void 0 : options.toleranceSeconds) != null ? _a : 300;
+  const msgId = getHeader(headers, "webhook-id");
+  const timestamp = getHeader(headers, "webhook-timestamp");
+  const signatures = getHeader(headers, "webhook-signature");
+  if (!msgId) throw new WebhookVerificationError("Missing Webhook-Id header");
+  if (!timestamp) throw new WebhookVerificationError("Missing Webhook-Timestamp header");
+  if (!signatures) throw new WebhookVerificationError("Missing Webhook-Signature header");
+  const ts = parseInt(timestamp, 10);
+  if (isNaN(ts)) throw new WebhookVerificationError("Invalid Webhook-Timestamp");
+  const now = Math.floor(Date.now() / 1e3);
+  if (Math.abs(now - ts) > tolerance) {
+    throw new WebhookVerificationError("Webhook timestamp outside tolerance window");
+  }
+  const secretBytes = Buffer.from(secret.replace(/^whsec_/, ""), "base64");
+  const signedContent = `${msgId}.${timestamp}.${payload}`;
+  const expected = createHmac("sha256", secretBytes).update(signedContent).digest("base64");
+  const expectedSig = `v1,${expected}`;
+  const expectedBuf = Buffer.from(expectedSig);
+  const matched = signatures.split(" ").some((sig) => {
+    const sigBuf = Buffer.from(sig);
+    return sigBuf.length === expectedBuf.length && timingSafeEqual(sigBuf, expectedBuf);
+  });
+  if (!matched) {
+    throw new WebhookVerificationError("Invalid webhook signature");
+  }
+}
+function parseWebhookEvent(payload, headers, secret, options) {
+  verifyWebhook(payload, headers, secret, options);
+  const parsed = JSON.parse(payload);
+  return parsed;
+}
+var AggAdminClient = class {
+  constructor(options) {
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.apiKey = options.apiKey;
+  }
+  // ── Core HTTP ────────────────────────────────────────────────────────
+  request(path, init) {
+    return __async(this, null, function* () {
+      const response = yield this.rawFetch(path, init);
+      if (!response.ok) {
+        return this.throwResponseError(response);
+      }
+      return response.json();
+    });
+  }
+  rawFetch(path, init) {
+    return __async(this, null, function* () {
+      const headers = {
+        "Content-Type": "application/json",
+        "x-app-api-key": this.apiKey
+      };
+      const url = new URL(`${this.baseUrl}${path}`);
+      if (init == null ? void 0 : init.query) {
+        for (const [key, value] of Object.entries(init.query)) {
+          if (value === void 0) continue;
+          if (Array.isArray(value)) {
+            for (const v of value) url.searchParams.append(key, v);
+          } else {
+            url.searchParams.set(key, value);
+          }
+        }
+      }
+      return fetch(url, __spreadProps(__spreadValues({}, init), {
+        headers: __spreadValues(__spreadValues({}, headers), init == null ? void 0 : init.headers)
+      }));
+    });
+  }
+  throwResponseError(response) {
+    return __async(this, null, function* () {
+      let message = `AGG API error: ${response.status} ${response.statusText}`;
+      try {
+        const body = yield response.json();
+        if (typeof body.message === "string" && body.message.length > 0) {
+          message = body.message;
+        }
+      } catch (e) {
+      }
+      const error = new Error(message);
+      error.status = response.status;
+      throw error;
+    });
+  }
+  // ── Users ────────────────────────────────────────────────────────────
+  listUsers(appId, query) {
+    return __async(this, null, function* () {
+      var _a;
+      return this.request(`/apps/${appId}/users`, {
+        query: {
+          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
+          cursor: query == null ? void 0 : query.cursor,
+          search: query == null ? void 0 : query.search
+        }
+      });
+    });
+  }
+  getUser(appId, userId) {
+    return __async(this, null, function* () {
+      return this.request(`/apps/${appId}/users/${userId}`);
+    });
+  }
+  // ── Analytics & Orders ───────────────────────────────────────────────
+  getAnalytics(appId) {
+    return __async(this, null, function* () {
+      return this.request(`/apps/${appId}/analytics`);
+    });
+  }
+  listOrders(appId, query) {
+    return __async(this, null, function* () {
+      var _a;
+      return this.request(`/apps/${appId}/orders`, {
+        query: {
+          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
+          cursor: query == null ? void 0 : query.cursor,
+          venue: query == null ? void 0 : query.venue,
+          status: query == null ? void 0 : query.status
+        }
+      });
+    });
+  }
+  // ── Webhooks ─────────────────────────────────────────────────────────
+  rotateWebhookSecret(appId, webhookId) {
+    return __async(this, null, function* () {
+      return this.request(`/apps/${appId}/webhooks/${webhookId}/rotate-secret`, {
+        method: "POST"
+      });
+    });
+  }
+  replayWebhookDeliveries(appId, webhookId) {
+    return __async(this, null, function* () {
+      return this.request(`/apps/${appId}/webhooks/${webhookId}/replay`, {
+        method: "POST"
+      });
+    });
+  }
+  // ── Market Resolutions ───────────────────────────────────────────────
+  listMarketResolutionUsers(appId, venueMarketId, query) {
+    return __async(this, null, function* () {
+      var _a;
+      return this.request(`/apps/${appId}/market-resolutions/${venueMarketId}/users`, {
+        query: {
+          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
+          cursor: query == null ? void 0 : query.cursor,
+          includeEmails: (query == null ? void 0 : query.includeEmails) ? "true" : void 0
+        }
+      });
+    });
+  }
+};
+function getHeader(headers, name) {
+  var _a;
+  const val = (_a = headers[name]) != null ? _a : headers[name.toLowerCase()];
+  if (val !== void 0) return Array.isArray(val) ? val[0] : val;
+  const lower = name.toLowerCase();
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() === lower) {
+      const v = headers[key];
+      return Array.isArray(v) ? v[0] : v;
+    }
+  }
+  return void 0;
+}
+export {
+  AggAdminClient,
+  WebhookVerificationError,
+  parseWebhookEvent,
+  signExternalId,
+  verifyWebhook
+};

package/package.json

@@ -0,0 +1,82 @@
+{
+  "name": "@agg-build/sdk",
+  "version": "1.0.0",
+  "description": "Vanilla TypeScript client for the AGG prediction market aggregator (auth, markets, orderbooks, charts, trading, managed execution, WebSockets). Works in browsers, Node.js, and React Native.",
+  "sideEffects": false,
+  "license": "MIT",
+  "homepage": "https://docs.agg.market/",
+  "keywords": [
+    "agg",
+    "agg-market",
+    "agg-build",
+    "prediction-markets",
+    "prediction-market",
+    "trading",
+    "sdk",
+    "typescript",
+    "siwe",
+    "siws",
+    "polymarket",
+    "kalshi",
+    "orderbook",
+    "websocket"
+  ],
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "typesVersions": {
+    "*": {
+      "server": [
+        "./dist/server.d.ts"
+      ]
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Snag-Solutions/Agg.git",
+    "directory": "packages/sdk"
+  },
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./server": {
+      "import": {
+        "types": "./dist/server.d.mts",
+        "default": "./dist/server.mjs"
+      },
+      "require": {
+        "types": "./dist/server.d.ts",
+        "default": "./dist/server.js"
+      }
+    }
+  },
+  "dependencies": {
+    "@polymarket/builder-signing-sdk": "^0.0.8",
+    "@polymarket/clob-client": "^5.2.3",
+    "ethers": "^5.7.2",
+    "viem": "^2.46.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "pnpm exec vitest run --config vitest.config.ts",
+    "test:coverage": "pnpm exec vitest run --config vitest.config.ts --coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint . --max-warnings 0",
+    "clean": "rm -rf .turbo node_modules dist"
+  }
+}