@akira-io/billing-js 0.1.0 → 0.1.5

package/README.md

@@ -79,9 +79,10 @@ const features = await client.entitlements();
 | `licenseCheck(payload)` | `POST /api/licenses/check` |
 | `licenseActivate(payload)` | `POST /api/licenses/activate` |
 | `licenseRefresh(payload)` | `POST /api/licenses/refresh` |
+| `licenseSyncUsage(payload)` | `POST /api/licenses/sync-usage` (offline_snapshot mode) |
 | `entitlements()` | `GET /api/me/entitlements` |
 | `billingPortal(returnUrl)` | `GET /api/billing/portal` |
-| `trackUsage(payload)` | `POST /api/me/usage` |
+| `trackUsage(payload)` | `POST /api/me/usage` (variable `count` for tokens/units) |
 | `publicLicenseKeys()` | `GET /api/v1/license-keys/public` (no HMAC) |
 
 ### Errors
@@ -168,6 +169,75 @@ document.querySelector('#download-arm')!.addEventListener('click', () =>
 Need more control? `issueDownload` returns the payload without redirecting; `downloadUrl`
 just builds the endpoint URL; `sendCompletionBeacon` ships the beacon on its own.
 
+## Licensing modes
+
+The server tags every product with a `licensing_mode`:
+
+| Mode | When to use | Client flow |
+|---|---|---|
+| `offline_snapshot` | Desktop / IDE-style apps. Long-lived entitlement, infrequent usage events. | Refresh signed snapshot, decrement local counter, sync deltas periodically. |
+| `online_realtime` | Pay-per-unit (AI tokens, API calls). Hard caps + accurate billing. | Pre-check budget + post-commit actual `count`. |
+
+### Offline snapshot helpers (`/license`)
+
+```ts
+import {
+    decodeLicense,
+    verifyLicense,
+    computeRemaining,
+    isExpired,
+    isInGrace,
+    canUseUpdate,
+    periodResetAt,
+} from '@akira-io/billing-js/license';
+
+const { license } = await client.licenseRefresh({ product: 'maintainer', fingerprint });
+const decoded = decodeLicense(license);
+
+const pub = await client.publicLicenseKeys();
+const ok = await verifyLicense(license, pub.keys[0].public_key_base64);
+if (!ok) throw new Error('forged license');
+
+// Pre-run gate
+const remaining = computeRemaining(decoded.payload, 'agent_run', localConsumed);
+if (remaining === 0) throw new Error('limit reached');
+
+// Background sync
+await client.licenseSyncUsage({
+    product: 'maintainer',
+    fingerprint,
+    serial: decoded.payload.serial ?? 0,
+    deltas: { agent_run: 3 },
+});
+```
+
+### Online realtime (variable `count`)
+
+```ts
+// Pre-check budget for an AI prompt
+const pre = await client.trackUsage({
+    product: 'aisite',
+    feature: 'llm_tokens',
+    device_fp: deviceFingerprint,
+    date: '2026-05-15',
+    action: 'check',
+    count: 4000, // max_tokens estimate
+});
+if (!pre.allowed) throw new Error('budget exhausted');
+
+const response = await openai.chat.completions.create({ ... });
+
+// Post-commit actuals
+await client.trackUsage({
+    product: 'aisite',
+    feature: 'llm_tokens',
+    device_fp: deviceFingerprint,
+    date: '2026-05-15',
+    action: 'increment',
+    count: response.usage.total_tokens,
+});
+```
+
 ## Checkout
 
 ```ts

package/dist/{client-DpOXhuxx.d.cts → client-types-CN3dVIrX.d.cts}

@@ -96,46 +96,55 @@ interface UsagePayload {
     date: string;
     device_fp: string;
     action: 'check' | 'increment';
+    count?: number;
+    platform?: string;
+    device_type?: string;
+    app_version?: string;
 }
 interface UsageResponse {
     count: number;
     limit: number | null;
+    period?: string;
     allowed: boolean;
 }
-
-interface BillingClientConfig {
-    baseUrl: string;
-    productSlug: string;
-    productSecret: string;
-    customerToken?: string;
-    fetcher?: typeof fetch;
-}
-declare class BillingApiError extends Error {
-    status: number;
-    code: string;
-    constructor(status: number, code: string);
-}
-declare class BillingClient {
-    private readonly baseUrl;
-    private readonly productSlug;
-    private readonly productSecret;
-    private customerToken;
-    private readonly fetcher;
-    constructor(config: BillingClientConfig);
-    setCustomerToken(token: string): void;
-    requestOtp(payload: OtpRequestPayload): Promise<void>;
-    verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
-    customerMe(): Promise<Customer>;
-    licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse>;
-    licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
-    licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
-    entitlements(): Promise<EntitlementsResponse>;
-    billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
-    trackUsage(payload: UsagePayload): Promise<UsageResponse>;
-    publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
-    private signed;
-    private unsigned;
-    private parseResponse;
+type LicensingMode = 'offline_snapshot' | 'online_realtime';
+type UsageFeatureState = {
+    type: 'bool';
+    enabled: boolean;
+} | {
+    type: 'counter';
+    allowance: number;
+    period: 'daily' | 'weekly' | 'monthly' | 'yearly';
+    period_start: string;
+    period_end: string;
+    consumed_at_issue: number;
+};
+interface LicenseSnapshotPayload {
+    v?: number;
+    key_id: string;
+    customer_id: string;
+    product_key: string;
+    plan_key: string;
+    licensing_mode?: LicensingMode;
+    features: Record<string, boolean>;
+    usage?: Record<string, UsageFeatureState>;
+    fingerprint_hash: string;
+    serial?: number;
+    issued_at: string;
+    valid_until: string;
+    paid_up_until?: string | null;
+    fallback_release_date?: string | null;
+}
+interface LicenseSyncUsagePayload {
+    product: string;
+    fingerprint: string;
+    serial: number;
+    deltas: Record<string, number>;
+}
+interface LicenseSyncUsageResponse {
+    license: SignedLicense;
+    applied: Record<string, number>;
+    serial: number;
 }
 
-export { type ActivatedDevice as A, BillingApiError as B, type Customer as C, type EntitlementCustomer as E, type LicenseActivatePayload as L, type OtpCustomer as O, type SignedLicense as S, type UsagePayload as U, BillingClient as a, type BillingClientConfig as b, type BillingPortalResponse as c, type EntitlementsResponse as d, type LicenseActivateResponse as e, type LicenseCheckPayload as f, type LicenseCheckResponse as g, type LicensePublicKey as h, type LicensePublicKeysResponse as i, type LicenseRefreshPayload as j, type OtpRequestPayload as k, type OtpVerifyPayload as l, type OtpVerifyResponse as m, type UsageResponse as n };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OtpCustomer as O, SignedLicense as S, UsageFeatureState as U, EntitlementsResponse as a, LicenseActivateResponse as b, LicenseCheckPayload as c, LicenseCheckResponse as d, LicensePublicKey as e, LicensePublicKeysResponse as f, LicenseRefreshPayload as g, LicenseSnapshotPayload as h, LicenseSyncUsagePayload as i, LicenseSyncUsageResponse as j, LicensingMode as k, OtpRequestPayload as l, OtpVerifyPayload as m, OtpVerifyResponse as n, UsagePayload as o, UsageResponse as p };

package/dist/{client-DpOXhuxx.d.ts → client-types-CN3dVIrX.d.ts}

@@ -96,46 +96,55 @@ interface UsagePayload {
     date: string;
     device_fp: string;
     action: 'check' | 'increment';
+    count?: number;
+    platform?: string;
+    device_type?: string;
+    app_version?: string;
 }
 interface UsageResponse {
     count: number;
     limit: number | null;
+    period?: string;
     allowed: boolean;
 }
-
-interface BillingClientConfig {
-    baseUrl: string;
-    productSlug: string;
-    productSecret: string;
-    customerToken?: string;
-    fetcher?: typeof fetch;
-}
-declare class BillingApiError extends Error {
-    status: number;
-    code: string;
-    constructor(status: number, code: string);
-}
-declare class BillingClient {
-    private readonly baseUrl;
-    private readonly productSlug;
-    private readonly productSecret;
-    private customerToken;
-    private readonly fetcher;
-    constructor(config: BillingClientConfig);
-    setCustomerToken(token: string): void;
-    requestOtp(payload: OtpRequestPayload): Promise<void>;
-    verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
-    customerMe(): Promise<Customer>;
-    licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse>;
-    licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
-    licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
-    entitlements(): Promise<EntitlementsResponse>;
-    billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
-    trackUsage(payload: UsagePayload): Promise<UsageResponse>;
-    publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
-    private signed;
-    private unsigned;
-    private parseResponse;
+type LicensingMode = 'offline_snapshot' | 'online_realtime';
+type UsageFeatureState = {
+    type: 'bool';
+    enabled: boolean;
+} | {
+    type: 'counter';
+    allowance: number;
+    period: 'daily' | 'weekly' | 'monthly' | 'yearly';
+    period_start: string;
+    period_end: string;
+    consumed_at_issue: number;
+};
+interface LicenseSnapshotPayload {
+    v?: number;
+    key_id: string;
+    customer_id: string;
+    product_key: string;
+    plan_key: string;
+    licensing_mode?: LicensingMode;
+    features: Record<string, boolean>;
+    usage?: Record<string, UsageFeatureState>;
+    fingerprint_hash: string;
+    serial?: number;
+    issued_at: string;
+    valid_until: string;
+    paid_up_until?: string | null;
+    fallback_release_date?: string | null;
+}
+interface LicenseSyncUsagePayload {
+    product: string;
+    fingerprint: string;
+    serial: number;
+    deltas: Record<string, number>;
+}
+interface LicenseSyncUsageResponse {
+    license: SignedLicense;
+    applied: Record<string, number>;
+    serial: number;
 }
 
-export { type ActivatedDevice as A, BillingApiError as B, type Customer as C, type EntitlementCustomer as E, type LicenseActivatePayload as L, type OtpCustomer as O, type SignedLicense as S, type UsagePayload as U, BillingClient as a, type BillingClientConfig as b, type BillingPortalResponse as c, type EntitlementsResponse as d, type LicenseActivateResponse as e, type LicenseCheckPayload as f, type LicenseCheckResponse as g, type LicensePublicKey as h, type LicensePublicKeysResponse as i, type LicenseRefreshPayload as j, type OtpRequestPayload as k, type OtpVerifyPayload as l, type OtpVerifyResponse as m, type UsageResponse as n };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OtpCustomer as O, SignedLicense as S, UsageFeatureState as U, EntitlementsResponse as a, LicenseActivateResponse as b, LicenseCheckPayload as c, LicenseCheckResponse as d, LicensePublicKey as e, LicensePublicKeysResponse as f, LicenseRefreshPayload as g, LicenseSnapshotPayload as h, LicenseSyncUsagePayload as i, LicenseSyncUsageResponse as j, LicensingMode as k, OtpRequestPayload as l, OtpVerifyPayload as m, OtpVerifyResponse as n, UsagePayload as o, UsageResponse as p };

package/dist/client.cjs

@@ -106,6 +106,9 @@ var BillingClient = class {
   async licenseRefresh(payload) {
     return this.signed("POST", "/api/licenses/refresh", payload);
   }
+  async licenseSyncUsage(payload) {
+    return this.signed("POST", "/api/licenses/sync-usage", payload);
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -116,6 +119,9 @@ var BillingClient = class {
   async trackUsage(payload) {
     return this.signed("POST", "/api/me/usage", payload);
   }
+  async trackAnonymousUsage(payload) {
+    return this.signed("POST", "/api/v1/usage/anonymous", payload);
+  }
   async publicLicenseKeys() {
     return this.unsigned("GET", "/api/v1/license-keys/public");
   }
@@ -153,7 +159,7 @@ var BillingClient = class {
   }
   async parseResponse(res) {
     if (!res.ok) {
-      let code = "";
+      let code;
       try {
         const parsed = await res.json();
         code = parsed?.error ?? "";

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC5BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA,GAAO,EAAA;AACX,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code = '';\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC1BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/client.d.cts

@@ -1 +1,40 @@
-export { B as BillingApiError, a as BillingClient, b as BillingClientConfig } from './client-DpOXhuxx.cjs';
+import { l as OtpRequestPayload, m as OtpVerifyPayload, n as OtpVerifyResponse, C as Customer, c as LicenseCheckPayload, d as LicenseCheckResponse, L as LicenseActivatePayload, b as LicenseActivateResponse, g as LicenseRefreshPayload, i as LicenseSyncUsagePayload, j as LicenseSyncUsageResponse, a as EntitlementsResponse, B as BillingPortalResponse, o as UsagePayload, p as UsageResponse, f as LicensePublicKeysResponse } from './client-types-CN3dVIrX.cjs';
+
+interface BillingClientConfig {
+    baseUrl: string;
+    productSlug: string;
+    productSecret: string;
+    customerToken?: string;
+    fetcher?: typeof fetch;
+}
+declare class BillingApiError extends Error {
+    status: number;
+    code: string;
+    constructor(status: number, code: string);
+}
+declare class BillingClient {
+    private readonly baseUrl;
+    private readonly productSlug;
+    private readonly productSecret;
+    private customerToken;
+    private readonly fetcher;
+    constructor(config: BillingClientConfig);
+    setCustomerToken(token: string): void;
+    requestOtp(payload: OtpRequestPayload): Promise<void>;
+    verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
+    customerMe(): Promise<Customer>;
+    licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse>;
+    licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
+    licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
+    licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse>;
+    entitlements(): Promise<EntitlementsResponse>;
+    billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
+    trackUsage(payload: UsagePayload): Promise<UsageResponse>;
+    trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse>;
+    publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
+    private signed;
+    private unsigned;
+    private parseResponse;
+}
+
+export { BillingApiError, BillingClient, type BillingClientConfig };

package/dist/client.d.ts

@@ -1 +1,40 @@
-export { B as BillingApiError, a as BillingClient, b as BillingClientConfig } from './client-DpOXhuxx.js';
+import { l as OtpRequestPayload, m as OtpVerifyPayload, n as OtpVerifyResponse, C as Customer, c as LicenseCheckPayload, d as LicenseCheckResponse, L as LicenseActivatePayload, b as LicenseActivateResponse, g as LicenseRefreshPayload, i as LicenseSyncUsagePayload, j as LicenseSyncUsageResponse, a as EntitlementsResponse, B as BillingPortalResponse, o as UsagePayload, p as UsageResponse, f as LicensePublicKeysResponse } from './client-types-CN3dVIrX.js';
+
+interface BillingClientConfig {
+    baseUrl: string;
+    productSlug: string;
+    productSecret: string;
+    customerToken?: string;
+    fetcher?: typeof fetch;
+}
+declare class BillingApiError extends Error {
+    status: number;
+    code: string;
+    constructor(status: number, code: string);
+}
+declare class BillingClient {
+    private readonly baseUrl;
+    private readonly productSlug;
+    private readonly productSecret;
+    private customerToken;
+    private readonly fetcher;
+    constructor(config: BillingClientConfig);
+    setCustomerToken(token: string): void;
+    requestOtp(payload: OtpRequestPayload): Promise<void>;
+    verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
+    customerMe(): Promise<Customer>;
+    licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse>;
+    licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
+    licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
+    licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse>;
+    entitlements(): Promise<EntitlementsResponse>;
+    billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
+    trackUsage(payload: UsagePayload): Promise<UsageResponse>;
+    trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse>;
+    publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
+    private signed;
+    private unsigned;
+    private parseResponse;
+}
+
+export { BillingApiError, BillingClient, type BillingClientConfig };

package/dist/client.js

@@ -104,6 +104,9 @@ var BillingClient = class {
   async licenseRefresh(payload) {
     return this.signed("POST", "/api/licenses/refresh", payload);
   }
+  async licenseSyncUsage(payload) {
+    return this.signed("POST", "/api/licenses/sync-usage", payload);
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -114,6 +117,9 @@ var BillingClient = class {
   async trackUsage(payload) {
     return this.signed("POST", "/api/me/usage", payload);
   }
+  async trackAnonymousUsage(payload) {
+    return this.signed("POST", "/api/v1/usage/anonymous", payload);
+  }
   async publicLicenseKeys() {
     return this.unsigned("GET", "/api/v1/license-keys/public");
   }
@@ -151,7 +157,7 @@ var BillingClient = class {
   }
   async parseResponse(res) {
     if (!res.ok) {
-      let code = "";
+      let code;
       try {
         const parsed = await res.json();
         code = parsed?.error ?? "";

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC5BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA,GAAO,EAAA;AACX,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code = '';\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC1BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}