@agg-build/sdk 4.26.0 → 4.27.2

package/dist/server.js

@@ -1,313 +1,185 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var __async = (__this, __arguments, generator) => {
-  return new Promise((resolve, reject) => {
-    var fulfilled = (value) => {
-      try {
-        step(generator.next(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var rejected = (value) => {
-      try {
-        step(generator.throw(value));
-      } catch (e) {
-        reject(e);
-      }
-    };
-    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
-    step((generator = generator.apply(__this, __arguments)).next());
-  });
-};
-
-// src/server.ts
-var server_exports = {};
-__export(server_exports, {
-  AggAdminClient: () => AggAdminClient,
-  WebhookVerificationError: () => WebhookVerificationError,
-  parseWebhookEvent: () => parseWebhookEvent,
-  parseWebhookEventAsync: () => parseWebhookEventAsync,
-  signExternalId: () => signExternalId,
-  verifyWebhook: () => verifyWebhook,
-  verifyWebhookAsync: () => verifyWebhookAsync
-});
-module.exports = __toCommonJS(server_exports);
-var import_node_crypto = require("crypto");
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let node_crypto = require("node:crypto");
+//#region src/server.ts
 function signExternalId(appSecret, externalId) {
-  const timestamp = Date.now();
-  const hmac = (0, import_node_crypto.createHmac)("sha256", Buffer.from(appSecret, "hex")).update(`${externalId}:${timestamp}`).digest("hex");
-  return {
-    externalId,
-    timestamp,
-    hmac
-  };
+	const timestamp = Date.now();
+	return {
+		externalId,
+		timestamp,
+		hmac: (0, node_crypto.createHmac)("sha256", Buffer.from(appSecret, "hex")).update(`${externalId}:${timestamp}`).digest("hex")
+	};
 }
-var textEncoder = new TextEncoder();
+const textEncoder = new TextEncoder();
 function base64Decode(s) {
-  const bin = atob(s);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return out;
+	const bin = atob(s);
+	const out = new Uint8Array(bin.length);
+	for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+	return out;
 }
-function importHmacKey(secret) {
-  return __async(this, null, function* () {
-    const keyBytes = base64Decode(secret.replace(/^whsec_/, ""));
-    return crypto.subtle.importKey("raw", keyBytes, { name: "HMAC", hash: "SHA-256" }, false, [
-      "sign",
-      "verify"
-    ]);
-  });
+async function importHmacKey(secret) {
+	const keyBytes = base64Decode(secret.replace(/^whsec_/, ""));
+	return crypto.subtle.importKey("raw", keyBytes, {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign", "verify"]);
 }
 var WebhookVerificationError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "WebhookVerificationError";
-  }
+	constructor(message) {
+		super(message);
+		this.name = "WebhookVerificationError";
+	}
 };
 function verifyWebhook(payload, headers, secret, options) {
-  var _a;
-  const tolerance = (_a = options == null ? void 0 : options.toleranceSeconds) != null ? _a : 300;
-  const msgId = getHeader(headers, "webhook-id");
-  const timestamp = getHeader(headers, "webhook-timestamp");
-  const signatures = getHeader(headers, "webhook-signature");
-  if (!msgId) throw new WebhookVerificationError("Missing Webhook-Id header");
-  if (!timestamp) throw new WebhookVerificationError("Missing Webhook-Timestamp header");
-  if (!signatures) throw new WebhookVerificationError("Missing Webhook-Signature header");
-  const ts = parseInt(timestamp, 10);
-  if (isNaN(ts)) throw new WebhookVerificationError("Invalid Webhook-Timestamp");
-  const now = Math.floor(Date.now() / 1e3);
-  if (Math.abs(now - ts) > tolerance) {
-    throw new WebhookVerificationError("Webhook timestamp outside tolerance window");
-  }
-  const secretBytes = Buffer.from(secret.replace(/^whsec_/, ""), "base64");
-  const signedContent = `${msgId}.${timestamp}.${payload}`;
-  const expected = (0, import_node_crypto.createHmac)("sha256", secretBytes).update(signedContent).digest("base64");
-  const expectedSig = `v1,${expected}`;
-  const expectedBuf = Buffer.from(expectedSig);
-  const matched = signatures.split(" ").some((sig) => {
-    const sigBuf = Buffer.from(sig);
-    return sigBuf.length === expectedBuf.length && (0, import_node_crypto.timingSafeEqual)(sigBuf, expectedBuf);
-  });
-  if (!matched) {
-    throw new WebhookVerificationError("Invalid webhook signature");
-  }
+	const tolerance = options?.toleranceSeconds ?? 300;
+	const msgId = getHeader(headers, "webhook-id");
+	const timestamp = getHeader(headers, "webhook-timestamp");
+	const signatures = getHeader(headers, "webhook-signature");
+	if (!msgId) throw new WebhookVerificationError("Missing Webhook-Id header");
+	if (!timestamp) throw new WebhookVerificationError("Missing Webhook-Timestamp header");
+	if (!signatures) throw new WebhookVerificationError("Missing Webhook-Signature header");
+	const ts = parseInt(timestamp, 10);
+	if (isNaN(ts)) throw new WebhookVerificationError("Invalid Webhook-Timestamp");
+	const now = Math.floor(Date.now() / 1e3);
+	if (Math.abs(now - ts) > tolerance) throw new WebhookVerificationError("Webhook timestamp outside tolerance window");
+	const secretBytes = Buffer.from(secret.replace(/^whsec_/, ""), "base64");
+	const signedContent = `${msgId}.${timestamp}.${payload}`;
+	const expectedSig = `v1,${(0, node_crypto.createHmac)("sha256", secretBytes).update(signedContent).digest("base64")}`;
+	const expectedBuf = Buffer.from(expectedSig);
+	if (!signatures.split(" ").some((sig) => {
+		const sigBuf = Buffer.from(sig);
+		return sigBuf.length === expectedBuf.length && (0, node_crypto.timingSafeEqual)(sigBuf, expectedBuf);
+	})) throw new WebhookVerificationError("Invalid webhook signature");
 }
 function parseWebhookEvent(payload, headers, secret, options) {
-  verifyWebhook(payload, headers, secret, options);
-  const parsed = JSON.parse(payload);
-  return parsed;
+	verifyWebhook(payload, headers, secret, options);
+	return JSON.parse(payload);
 }
-function verifyWebhookAsync(payload, headers, secret, options) {
-  return __async(this, null, function* () {
-    var _a;
-    const tolerance = (_a = options == null ? void 0 : options.toleranceSeconds) != null ? _a : 300;
-    const msgId = getHeader(headers, "webhook-id");
-    const timestamp = getHeader(headers, "webhook-timestamp");
-    const signatures = getHeader(headers, "webhook-signature");
-    if (!msgId) throw new WebhookVerificationError("Missing Webhook-Id header");
-    if (!timestamp) throw new WebhookVerificationError("Missing Webhook-Timestamp header");
-    if (!signatures) throw new WebhookVerificationError("Missing Webhook-Signature header");
-    const ts = parseInt(timestamp, 10);
-    if (isNaN(ts)) throw new WebhookVerificationError("Invalid Webhook-Timestamp");
-    const now = Math.floor(Date.now() / 1e3);
-    if (Math.abs(now - ts) > tolerance) {
-      throw new WebhookVerificationError("Webhook timestamp outside tolerance window");
-    }
-    const key = yield importHmacKey(secret);
-    const signed = textEncoder.encode(`${msgId}.${timestamp}.${payload}`);
-    for (const sig of signatures.split(" ")) {
-      if (!sig.startsWith("v1,")) continue;
-      let sigBytes;
-      try {
-        sigBytes = base64Decode(sig.slice(3));
-      } catch (e) {
-        continue;
-      }
-      const ok = yield crypto.subtle.verify("HMAC", key, sigBytes, signed);
-      if (ok) return;
-    }
-    throw new WebhookVerificationError("Invalid webhook signature");
-  });
+/**
+* Async, edge-runtime-friendly variant of {@link verifyWebhook}. Same
+* Svix v1 signing scheme. Use this in Cloudflare Workers / Vercel Edge /
+* Deno / Bun. The sync variant remains available for Node.js consumers.
+*/
+async function verifyWebhookAsync(payload, headers, secret, options) {
+	const tolerance = options?.toleranceSeconds ?? 300;
+	const msgId = getHeader(headers, "webhook-id");
+	const timestamp = getHeader(headers, "webhook-timestamp");
+	const signatures = getHeader(headers, "webhook-signature");
+	if (!msgId) throw new WebhookVerificationError("Missing Webhook-Id header");
+	if (!timestamp) throw new WebhookVerificationError("Missing Webhook-Timestamp header");
+	if (!signatures) throw new WebhookVerificationError("Missing Webhook-Signature header");
+	const ts = parseInt(timestamp, 10);
+	if (isNaN(ts)) throw new WebhookVerificationError("Invalid Webhook-Timestamp");
+	const now = Math.floor(Date.now() / 1e3);
+	if (Math.abs(now - ts) > tolerance) throw new WebhookVerificationError("Webhook timestamp outside tolerance window");
+	const key = await importHmacKey(secret);
+	const signed = textEncoder.encode(`${msgId}.${timestamp}.${payload}`);
+	for (const sig of signatures.split(" ")) {
+		if (!sig.startsWith("v1,")) continue;
+		let sigBytes;
+		try {
+			sigBytes = base64Decode(sig.slice(3));
+		} catch {
+			continue;
+		}
+		if (await crypto.subtle.verify("HMAC", key, sigBytes, signed)) return;
+	}
+	throw new WebhookVerificationError("Invalid webhook signature");
 }
-function parseWebhookEventAsync(payload, headers, secret, options) {
-  return __async(this, null, function* () {
-    yield verifyWebhookAsync(payload, headers, secret, options);
-    const parsed = JSON.parse(payload);
-    return parsed;
-  });
+/**
+* Async, edge-runtime-friendly variant of {@link parseWebhookEvent}.
+*/
+async function parseWebhookEventAsync(payload, headers, secret, options) {
+	await verifyWebhookAsync(payload, headers, secret, options);
+	return JSON.parse(payload);
 }
 var AggAdminClient = class {
-  constructor(options) {
-    this.baseUrl = options.baseUrl.replace(/\/$/, "");
-    this.apiKey = options.apiKey;
-  }
-  // ── Core HTTP ────────────────────────────────────────────────────────
-  request(path, init) {
-    return __async(this, null, function* () {
-      const response = yield this.rawFetch(path, init);
-      if (!response.ok) {
-        return this.throwResponseError(response);
-      }
-      return response.json();
-    });
-  }
-  rawFetch(path, init) {
-    return __async(this, null, function* () {
-      const headers = {
-        "Content-Type": "application/json",
-        "x-app-api-key": this.apiKey
-      };
-      const url = new URL(`${this.baseUrl}${path}`);
-      if (init == null ? void 0 : init.query) {
-        for (const [key, value] of Object.entries(init.query)) {
-          if (value === void 0) continue;
-          if (Array.isArray(value)) {
-            for (const v of value) url.searchParams.append(key, v);
-          } else {
-            url.searchParams.set(key, value);
-          }
-        }
-      }
-      return fetch(url, __spreadProps(__spreadValues({}, init), {
-        headers: __spreadValues(__spreadValues({}, headers), init == null ? void 0 : init.headers)
-      }));
-    });
-  }
-  throwResponseError(response) {
-    return __async(this, null, function* () {
-      let message = `AGG API error: ${response.status} ${response.statusText}`;
-      try {
-        const body = yield response.json();
-        if (typeof body.message === "string" && body.message.length > 0) {
-          message = body.message;
-        }
-      } catch (e) {
-      }
-      const error = new Error(message);
-      error.status = response.status;
-      throw error;
-    });
-  }
-  // ── Users ────────────────────────────────────────────────────────────
-  listUsers(appId, query) {
-    return __async(this, null, function* () {
-      var _a;
-      return this.request(`/apps/${appId}/users`, {
-        query: {
-          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
-          cursor: query == null ? void 0 : query.cursor,
-          search: query == null ? void 0 : query.search
-        }
-      });
-    });
-  }
-  getUser(appId, userId) {
-    return __async(this, null, function* () {
-      return this.request(`/apps/${appId}/users/${userId}`);
-    });
-  }
-  // ── Analytics & Orders ───────────────────────────────────────────────
-  getAnalytics(appId) {
-    return __async(this, null, function* () {
-      return this.request(`/apps/${appId}/analytics`);
-    });
-  }
-  listOrders(appId, query) {
-    return __async(this, null, function* () {
-      var _a;
-      return this.request(`/apps/${appId}/orders`, {
-        query: {
-          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
-          cursor: query == null ? void 0 : query.cursor,
-          venue: query == null ? void 0 : query.venue,
-          status: query == null ? void 0 : query.status
-        }
-      });
-    });
-  }
-  // ── Webhooks ─────────────────────────────────────────────────────────
-  rotateWebhookSecret(appId, webhookId) {
-    return __async(this, null, function* () {
-      return this.request(`/apps/${appId}/webhooks/${webhookId}/rotate-secret`, {
-        method: "POST"
-      });
-    });
-  }
-  replayWebhookDeliveries(appId, webhookId) {
-    return __async(this, null, function* () {
-      return this.request(`/apps/${appId}/webhooks/${webhookId}/replay`, {
-        method: "POST"
-      });
-    });
-  }
-  // ── Market Resolutions ───────────────────────────────────────────────
-  listMarketResolutionUsers(appId, venueMarketId, query) {
-    return __async(this, null, function* () {
-      var _a;
-      return this.request(`/apps/${appId}/market-resolutions/${venueMarketId}/users`, {
-        query: {
-          limit: (_a = query == null ? void 0 : query.limit) == null ? void 0 : _a.toString(),
-          cursor: query == null ? void 0 : query.cursor,
-          includeEmails: (query == null ? void 0 : query.includeEmails) ? "true" : void 0
-        }
-      });
-    });
-  }
+	constructor(options) {
+		this.baseUrl = options.baseUrl.replace(/\/$/, "");
+		this.apiKey = options.apiKey;
+	}
+	async request(path, init) {
+		const response = await this.rawFetch(path, init);
+		if (!response.ok) return this.throwResponseError(response);
+		return response.json();
+	}
+	async rawFetch(path, init) {
+		const headers = {
+			"Content-Type": "application/json",
+			"x-app-api-key": this.apiKey
+		};
+		const url = new URL(`${this.baseUrl}${path}`);
+		if (init?.query) for (const [key, value] of Object.entries(init.query)) {
+			if (value === void 0) continue;
+			if (Array.isArray(value)) for (const v of value) url.searchParams.append(key, v);
+			else url.searchParams.set(key, value);
+		}
+		return fetch(url, {
+			...init,
+			headers: {
+				...headers,
+				...init?.headers
+			}
+		});
+	}
+	async throwResponseError(response) {
+		let message = `AGG API error: ${response.status} ${response.statusText}`;
+		try {
+			const body = await response.json();
+			if (typeof body.message === "string" && body.message.length > 0) message = body.message;
+		} catch {}
+		const error = new Error(message);
+		error.status = response.status;
+		throw error;
+	}
+	async listUsers(appId, query) {
+		return this.request(`/apps/${appId}/users`, { query: {
+			limit: query?.limit?.toString(),
+			cursor: query?.cursor,
+			search: query?.search
+		} });
+	}
+	async getUser(appId, userId) {
+		return this.request(`/apps/${appId}/users/${userId}`);
+	}
+	async getAnalytics(appId) {
+		return this.request(`/apps/${appId}/analytics`);
+	}
+	async listOrders(appId, query) {
+		return this.request(`/apps/${appId}/orders`, { query: {
+			limit: query?.limit?.toString(),
+			cursor: query?.cursor,
+			venue: query?.venue,
+			status: query?.status
+		} });
+	}
+	async rotateWebhookSecret(appId, webhookId) {
+		return this.request(`/apps/${appId}/webhooks/${webhookId}/rotate-secret`, { method: "POST" });
+	}
+	async replayWebhookDeliveries(appId, webhookId) {
+		return this.request(`/apps/${appId}/webhooks/${webhookId}/replay`, { method: "POST" });
+	}
+	async listMarketResolutionUsers(appId, venueMarketId, query) {
+		return this.request(`/apps/${appId}/market-resolutions/${venueMarketId}/users`, { query: {
+			limit: query?.limit?.toString(),
+			cursor: query?.cursor,
+			includeEmails: query?.includeEmails ? "true" : void 0
+		} });
+	}
 };
 function getHeader(headers, name) {
-  var _a;
-  const val = (_a = headers[name]) != null ? _a : headers[name.toLowerCase()];
-  if (val !== void 0) return Array.isArray(val) ? val[0] : val;
-  const lower = name.toLowerCase();
-  for (const key of Object.keys(headers)) {
-    if (key.toLowerCase() === lower) {
-      const v = headers[key];
-      return Array.isArray(v) ? v[0] : v;
-    }
-  }
-  return void 0;
+	const val = headers[name] ?? headers[name.toLowerCase()];
+	if (val !== void 0) return Array.isArray(val) ? val[0] : val;
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) {
+		const v = headers[key];
+		return Array.isArray(v) ? v[0] : v;
+	}
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AggAdminClient,
-  WebhookVerificationError,
-  parseWebhookEvent,
-  parseWebhookEventAsync,
-  signExternalId,
-  verifyWebhook,
-  verifyWebhookAsync
-});
+//#endregion
+exports.AggAdminClient = AggAdminClient;
+exports.WebhookVerificationError = WebhookVerificationError;
+exports.parseWebhookEvent = parseWebhookEvent;
+exports.parseWebhookEventAsync = parseWebhookEventAsync;
+exports.signExternalId = signExternalId;
+exports.verifyWebhook = verifyWebhook;
+exports.verifyWebhookAsync = verifyWebhookAsync;