@akira-io/billing-js 0.1.0

package/dist/client.cjs

@@ -0,0 +1,179 @@
+'use strict';
+
+// src/signature.ts
+var HEADER_PRODUCT = "X-Akira-Product";
+var HEADER_TIMESTAMP = "X-Akira-Timestamp";
+var HEADER_NONCE = "X-Akira-Nonce";
+var HEADER_SIGNATURE = "X-Akira-Signature";
+async function sha256Hex(bytes) {
+  const digest = await getSubtle().digest("SHA-256", bytes);
+  return bufferToHex(new Uint8Array(digest));
+}
+function getSubtle() {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) {
+    throw new Error("Web Crypto SubtleCrypto API is not available in this runtime.");
+  }
+  return subtle;
+}
+function bufferToHex(buffer) {
+  let out = "";
+  for (const byte of buffer) {
+    out += byte.toString(16).padStart(2, "0");
+  }
+  return out;
+}
+function newNonce() {
+  const buf = new Uint8Array(16);
+  if (globalThis.crypto?.getRandomValues) {
+    globalThis.crypto.getRandomValues(buf);
+  } else {
+    for (let i = 0; i < buf.length; i += 1) {
+      buf[i] = Math.floor(Math.random() * 256);
+    }
+  }
+  return bufferToHex(buf);
+}
+async function canonical(productSlug, timestamp, nonce, method, path, body) {
+  const bodyHash = await sha256Hex(body);
+  return `${productSlug}
+${timestamp}
+${nonce}
+${method.toUpperCase()}
+${path}
+${bodyHash}`;
+}
+async function sign(productSecret, canonicalString) {
+  const subtle = getSubtle();
+  const keyData = new TextEncoder().encode(productSecret);
+  const key = await subtle.importKey(
+    "raw",
+    keyData,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await subtle.sign("HMAC", key, new TextEncoder().encode(canonicalString));
+  return bufferToHex(new Uint8Array(sig));
+}
+
+// src/client.ts
+var BillingApiError = class extends Error {
+  status;
+  code;
+  constructor(status, code) {
+    super(`billing api ${status}: ${code}`);
+    this.status = status;
+    this.code = code;
+  }
+};
+var BillingClient = class {
+  baseUrl;
+  productSlug;
+  productSecret;
+  customerToken;
+  fetcher;
+  constructor(config) {
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.productSlug = config.productSlug;
+    this.productSecret = config.productSecret;
+    this.customerToken = config.customerToken;
+    this.fetcher = config.fetcher ?? globalThis.fetch;
+    if (!this.fetcher) {
+      throw new Error("No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.");
+    }
+  }
+  setCustomerToken(token) {
+    this.customerToken = token;
+  }
+  async requestOtp(payload) {
+    await this.signed("POST", "/api/auth/customer/otp/request", payload);
+  }
+  async verifyOtp(payload) {
+    const res = await this.signed("POST", "/api/auth/customer/otp/verify", payload);
+    this.setCustomerToken(res.access_token);
+    return res;
+  }
+  async customerMe() {
+    return this.signed("GET", "/api/me");
+  }
+  async licenseCheck(payload) {
+    return this.signed("POST", "/api/licenses/check", payload);
+  }
+  async licenseActivate(payload) {
+    return this.signed("POST", "/api/licenses/activate", payload);
+  }
+  async licenseRefresh(payload) {
+    return this.signed("POST", "/api/licenses/refresh", payload);
+  }
+  async entitlements() {
+    return this.signed("GET", "/api/me/entitlements");
+  }
+  async billingPortal(returnUrl) {
+    const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;
+    return this.signed("GET", path);
+  }
+  async trackUsage(payload) {
+    return this.signed("POST", "/api/me/usage", payload);
+  }
+  async publicLicenseKeys() {
+    return this.unsigned("GET", "/api/v1/license-keys/public");
+  }
+  async signed(method, path, body) {
+    const bodyBytes = body === void 0 ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));
+    const timestamp = Math.floor(Date.now() / 1e3);
+    const nonce = newNonce();
+    const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);
+    const signature = await sign(this.productSecret, canonicalString);
+    const headers = {
+      Accept: "application/json",
+      [HEADER_PRODUCT]: this.productSlug,
+      [HEADER_TIMESTAMP]: String(timestamp),
+      [HEADER_NONCE]: nonce,
+      [HEADER_SIGNATURE]: signature
+    };
+    if (bodyBytes.length > 0) headers["Content-Type"] = "application/json";
+    if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;
+    const res = await this.fetcher(`${this.baseUrl}${path}`, {
+      method,
+      headers,
+      body: bodyBytes.length > 0 ? bodyBytes : void 0
+    });
+    return this.parseResponse(res);
+  }
+  async unsigned(method, path, body) {
+    const headers = { Accept: "application/json" };
+    let bodyInit;
+    if (body !== void 0) {
+      headers["Content-Type"] = "application/json";
+      bodyInit = JSON.stringify(body);
+    }
+    const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });
+    return this.parseResponse(res);
+  }
+  async parseResponse(res) {
+    if (!res.ok) {
+      let code = "";
+      try {
+        const parsed = await res.json();
+        code = parsed?.error ?? "";
+      } catch {
+        try {
+          code = await res.text();
+        } catch {
+          code = "";
+        }
+      }
+      throw new BillingApiError(res.status, code);
+    }
+    if (res.status === 204) {
+      return void 0;
+    }
+    return await res.json();
+  }
+};
+
+exports.BillingApiError = BillingApiError;
+exports.BillingClient = BillingClient;
+//# sourceMappingURL=client.cjs.map
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC5BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA,GAAO,EAAA;AACX,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code = '';\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/client.d.cts

@@ -0,0 +1 @@
+export { B as BillingApiError, a as BillingClient, b as BillingClientConfig } from './client-DpOXhuxx.cjs';

package/dist/client.d.ts

@@ -0,0 +1 @@
+export { B as BillingApiError, a as BillingClient, b as BillingClientConfig } from './client-DpOXhuxx.js';

package/dist/client.js

@@ -0,0 +1,176 @@
+// src/signature.ts
+var HEADER_PRODUCT = "X-Akira-Product";
+var HEADER_TIMESTAMP = "X-Akira-Timestamp";
+var HEADER_NONCE = "X-Akira-Nonce";
+var HEADER_SIGNATURE = "X-Akira-Signature";
+async function sha256Hex(bytes) {
+  const digest = await getSubtle().digest("SHA-256", bytes);
+  return bufferToHex(new Uint8Array(digest));
+}
+function getSubtle() {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) {
+    throw new Error("Web Crypto SubtleCrypto API is not available in this runtime.");
+  }
+  return subtle;
+}
+function bufferToHex(buffer) {
+  let out = "";
+  for (const byte of buffer) {
+    out += byte.toString(16).padStart(2, "0");
+  }
+  return out;
+}
+function newNonce() {
+  const buf = new Uint8Array(16);
+  if (globalThis.crypto?.getRandomValues) {
+    globalThis.crypto.getRandomValues(buf);
+  } else {
+    for (let i = 0; i < buf.length; i += 1) {
+      buf[i] = Math.floor(Math.random() * 256);
+    }
+  }
+  return bufferToHex(buf);
+}
+async function canonical(productSlug, timestamp, nonce, method, path, body) {
+  const bodyHash = await sha256Hex(body);
+  return `${productSlug}
+${timestamp}
+${nonce}
+${method.toUpperCase()}
+${path}
+${bodyHash}`;
+}
+async function sign(productSecret, canonicalString) {
+  const subtle = getSubtle();
+  const keyData = new TextEncoder().encode(productSecret);
+  const key = await subtle.importKey(
+    "raw",
+    keyData,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await subtle.sign("HMAC", key, new TextEncoder().encode(canonicalString));
+  return bufferToHex(new Uint8Array(sig));
+}
+
+// src/client.ts
+var BillingApiError = class extends Error {
+  status;
+  code;
+  constructor(status, code) {
+    super(`billing api ${status}: ${code}`);
+    this.status = status;
+    this.code = code;
+  }
+};
+var BillingClient = class {
+  baseUrl;
+  productSlug;
+  productSecret;
+  customerToken;
+  fetcher;
+  constructor(config) {
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.productSlug = config.productSlug;
+    this.productSecret = config.productSecret;
+    this.customerToken = config.customerToken;
+    this.fetcher = config.fetcher ?? globalThis.fetch;
+    if (!this.fetcher) {
+      throw new Error("No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.");
+    }
+  }
+  setCustomerToken(token) {
+    this.customerToken = token;
+  }
+  async requestOtp(payload) {
+    await this.signed("POST", "/api/auth/customer/otp/request", payload);
+  }
+  async verifyOtp(payload) {
+    const res = await this.signed("POST", "/api/auth/customer/otp/verify", payload);
+    this.setCustomerToken(res.access_token);
+    return res;
+  }
+  async customerMe() {
+    return this.signed("GET", "/api/me");
+  }
+  async licenseCheck(payload) {
+    return this.signed("POST", "/api/licenses/check", payload);
+  }
+  async licenseActivate(payload) {
+    return this.signed("POST", "/api/licenses/activate", payload);
+  }
+  async licenseRefresh(payload) {
+    return this.signed("POST", "/api/licenses/refresh", payload);
+  }
+  async entitlements() {
+    return this.signed("GET", "/api/me/entitlements");
+  }
+  async billingPortal(returnUrl) {
+    const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;
+    return this.signed("GET", path);
+  }
+  async trackUsage(payload) {
+    return this.signed("POST", "/api/me/usage", payload);
+  }
+  async publicLicenseKeys() {
+    return this.unsigned("GET", "/api/v1/license-keys/public");
+  }
+  async signed(method, path, body) {
+    const bodyBytes = body === void 0 ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));
+    const timestamp = Math.floor(Date.now() / 1e3);
+    const nonce = newNonce();
+    const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);
+    const signature = await sign(this.productSecret, canonicalString);
+    const headers = {
+      Accept: "application/json",
+      [HEADER_PRODUCT]: this.productSlug,
+      [HEADER_TIMESTAMP]: String(timestamp),
+      [HEADER_NONCE]: nonce,
+      [HEADER_SIGNATURE]: signature
+    };
+    if (bodyBytes.length > 0) headers["Content-Type"] = "application/json";
+    if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;
+    const res = await this.fetcher(`${this.baseUrl}${path}`, {
+      method,
+      headers,
+      body: bodyBytes.length > 0 ? bodyBytes : void 0
+    });
+    return this.parseResponse(res);
+  }
+  async unsigned(method, path, body) {
+    const headers = { Accept: "application/json" };
+    let bodyInit;
+    if (body !== void 0) {
+      headers["Content-Type"] = "application/json";
+      bodyInit = JSON.stringify(body);
+    }
+    const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });
+    return this.parseResponse(res);
+  }
+  async parseResponse(res) {
+    if (!res.ok) {
+      let code = "";
+      try {
+        const parsed = await res.json();
+        code = parsed?.error ?? "";
+      } catch {
+        try {
+          code = await res.text();
+        } catch {
+          code = "";
+        }
+      }
+      throw new BillingApiError(res.status, code);
+    }
+    if (res.status === 204) {
+      return void 0;
+    }
+    return await res.json();
+  }
+};
+
+export { BillingApiError, BillingClient };
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC5BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA,GAAO,EAAA;AACX,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code = '';\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/downloads.cjs

@@ -0,0 +1,51 @@
+'use strict';
+
+// src/downloads.ts
+function downloadUrl(config) {
+  const base = config.baseUrl.replace(/\/$/, "");
+  const path = `/api/v1/downloads/${config.product}/${config.channel}/${config.platform}`;
+  const params = new URLSearchParams();
+  for (const [k, v] of Object.entries(config.query ?? {})) {
+    if (v !== void 0 && v !== "") params.set(k, v);
+  }
+  const qs = params.toString();
+  return qs ? `${base}${path}?${qs}` : `${base}${path}`;
+}
+async function issueDownload(config) {
+  const f = config.fetcher ?? globalThis.fetch;
+  if (!f) {
+    throw new Error("No fetch implementation available. Pass a fetcher in config or use Node 18+.");
+  }
+  const url = downloadUrl(config);
+  const res = await f(url, { headers: { Accept: "application/json" } });
+  if (!res.ok) {
+    throw new Error(`download issue failed: HTTP ${res.status}`);
+  }
+  return await res.json();
+}
+function sendCompletionBeacon(beaconUrl) {
+  if (typeof navigator !== "undefined" && typeof navigator.sendBeacon === "function") {
+    navigator.sendBeacon(beaconUrl);
+    return;
+  }
+  if (typeof fetch !== "undefined") {
+    void fetch(beaconUrl, { method: "POST", keepalive: true }).catch(() => {
+    });
+  }
+}
+async function triggerDownload(config) {
+  const issued = await issueDownload(config);
+  const delay = config.beaconDelayMs ?? 1500;
+  if (typeof window !== "undefined") {
+    window.location.href = issued.signedUrl;
+    setTimeout(() => sendCompletionBeacon(issued.beaconUrl), delay);
+  }
+  return issued;
+}
+
+exports.downloadUrl = downloadUrl;
+exports.issueDownload = issueDownload;
+exports.sendCompletionBeacon = sendCompletionBeacon;
+exports.triggerDownload = triggerDownload;
+//# sourceMappingURL=downloads.cjs.map
+//# sourceMappingURL=downloads.cjs.map

package/dist/downloads.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/downloads.ts"],"names":[],"mappings":";;;AAcO,SAAS,YAAY,MAAA,EAAgG;AACxH,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAA,GAAO,qBAAqB,MAAA,CAAO,OAAO,IAAI,MAAA,CAAO,OAAO,CAAA,CAAA,EAAI,MAAA,CAAO,QAAQ,CAAA,CAAA;AACrF,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,MAAA,CAAO,QAAQ,MAAA,CAAO,KAAA,IAAS,EAAE,CAAA,EAAG;AACrD,IAAA,IAAI,MAAM,MAAA,IAAa,CAAA,KAAM,IAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACpD;AACA,EAAA,MAAM,EAAA,GAAK,OAAO,QAAA,EAAS;AAC3B,EAAA,OAAO,EAAA,GAAK,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA;AACvD;AAOA,eAAsB,cAAc,MAAA,EAAiD;AACjF,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AACvC,EAAA,IAAI,CAAC,CAAA,EAAG;AACJ,IAAA,MAAM,IAAI,MAAM,8EAA8E,CAAA;AAAA,EAClG;AAEA,EAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,GAAA,EAAK,EAAE,SAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB,EAAG,CAAA;AAEpE,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/D;AAEA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAC3B;AAOO,SAAS,qBAAqB,SAAA,EAAyB;AAC1D,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,IAAe,OAAO,SAAA,CAAU,eAAe,UAAA,EAAY;AAChF,IAAA,SAAA,CAAU,WAAW,SAAS,CAAA;AAC9B,IAAA;AAAA,EACJ;AAEA,EAAA,IAAI,OAAO,UAAU,WAAA,EAAa;AAC9B,IAAA,KAAK,KAAA,CAAM,SAAA,EAAW,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAW,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EAC7E;AACJ;AAOA,eAAsB,gBAAgB,MAAA,EAAiD;AACnF,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,MAAM,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,OAAO,aAAA,IAAiB,IAAA;AAEtC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,MAAA,CAAO,QAAA,CAAS,OAAO,MAAA,CAAO,SAAA;AAC9B,IAAA,UAAA,CAAW,MAAM,oBAAA,CAAqB,MAAA,CAAO,SAAS,GAAG,KAAK,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,MAAA;AACX","file":"downloads.cjs","sourcesContent":["import type { AssetPlatform, IssuedDownload, ReleaseChannel } from './types';\n\nexport type DownloadConfig = {\n    baseUrl: string;\n    product: string;\n    channel: ReleaseChannel;\n    platform: AssetPlatform;\n    /** Optional UTM + landing tracking. */\n    query?: Record<string, string | undefined>;\n    /** Delay before firing the completion beacon, ms. Default 1500. */\n    beaconDelayMs?: number;\n    fetcher?: typeof fetch;\n};\n\nexport function downloadUrl(config: Pick<DownloadConfig, 'baseUrl' | 'product' | 'channel' | 'platform' | 'query'>): string {\n    const base = config.baseUrl.replace(/\\/$/, '');\n    const path = `/api/v1/downloads/${config.product}/${config.channel}/${config.platform}`;\n    const params = new URLSearchParams();\n    for (const [k, v] of Object.entries(config.query ?? {})) {\n        if (v !== undefined && v !== '') params.set(k, v);\n    }\n    const qs = params.toString();\n    return qs ? `${base}${path}?${qs}` : `${base}${path}`;\n}\n\n/**\n * Issues a download via the billing API and returns the signed asset URL +\n * beacon URL without redirecting. Useful when you want full control of the\n * UX (e.g. fetch then trigger your own `<a download>` flow).\n */\nexport async function issueDownload(config: DownloadConfig): Promise<IssuedDownload> {\n    const f = config.fetcher ?? globalThis.fetch;\n    if (!f) {\n        throw new Error('No fetch implementation available. Pass a fetcher in config or use Node 18+.');\n    }\n\n    const url = downloadUrl(config);\n    const res = await f(url, { headers: { Accept: 'application/json' } });\n\n    if (!res.ok) {\n        throw new Error(`download issue failed: HTTP ${res.status}`);\n    }\n\n    return (await res.json()) as IssuedDownload;\n}\n\n/**\n * Fires the completion beacon for an issued download. Uses\n * `navigator.sendBeacon` when available (survives page navigation), falls\n * back to `fetch` with `keepalive: true`. Safe to call at unload time.\n */\nexport function sendCompletionBeacon(beaconUrl: string): void {\n    if (typeof navigator !== 'undefined' && typeof navigator.sendBeacon === 'function') {\n        navigator.sendBeacon(beaconUrl);\n        return;\n    }\n\n    if (typeof fetch !== 'undefined') {\n        void fetch(beaconUrl, { method: 'POST', keepalive: true }).catch(() => {});\n    }\n}\n\n/**\n * One-shot helper for landing-page download CTAs: fetches a signed URL,\n * navigates the current tab to the asset, then schedules the completion\n * beacon. The function resolves once the navigation has been triggered.\n */\nexport async function triggerDownload(config: DownloadConfig): Promise<IssuedDownload> {\n    const issued = await issueDownload(config);\n    const delay = config.beaconDelayMs ?? 1500;\n\n    if (typeof window !== 'undefined') {\n        window.location.href = issued.signedUrl;\n        setTimeout(() => sendCompletionBeacon(issued.beaconUrl), delay);\n    }\n\n    return issued;\n}\n"]}

package/dist/downloads.d.cts

@@ -0,0 +1,34 @@
+import { R as ReleaseChannel, A as AssetPlatform, I as IssuedDownload } from './types-CH4Vkivj.cjs';
+
+type DownloadConfig = {
+    baseUrl: string;
+    product: string;
+    channel: ReleaseChannel;
+    platform: AssetPlatform;
+    /** Optional UTM + landing tracking. */
+    query?: Record<string, string | undefined>;
+    /** Delay before firing the completion beacon, ms. Default 1500. */
+    beaconDelayMs?: number;
+    fetcher?: typeof fetch;
+};
+declare function downloadUrl(config: Pick<DownloadConfig, 'baseUrl' | 'product' | 'channel' | 'platform' | 'query'>): string;
+/**
+ * Issues a download via the billing API and returns the signed asset URL +
+ * beacon URL without redirecting. Useful when you want full control of the
+ * UX (e.g. fetch then trigger your own `<a download>` flow).
+ */
+declare function issueDownload(config: DownloadConfig): Promise<IssuedDownload>;
+/**
+ * Fires the completion beacon for an issued download. Uses
+ * `navigator.sendBeacon` when available (survives page navigation), falls
+ * back to `fetch` with `keepalive: true`. Safe to call at unload time.
+ */
+declare function sendCompletionBeacon(beaconUrl: string): void;
+/**
+ * One-shot helper for landing-page download CTAs: fetches a signed URL,
+ * navigates the current tab to the asset, then schedules the completion
+ * beacon. The function resolves once the navigation has been triggered.
+ */
+declare function triggerDownload(config: DownloadConfig): Promise<IssuedDownload>;
+
+export { type DownloadConfig, downloadUrl, issueDownload, sendCompletionBeacon, triggerDownload };

package/dist/downloads.d.ts

@@ -0,0 +1,34 @@
+import { R as ReleaseChannel, A as AssetPlatform, I as IssuedDownload } from './types-CH4Vkivj.js';
+
+type DownloadConfig = {
+    baseUrl: string;
+    product: string;
+    channel: ReleaseChannel;
+    platform: AssetPlatform;
+    /** Optional UTM + landing tracking. */
+    query?: Record<string, string | undefined>;
+    /** Delay before firing the completion beacon, ms. Default 1500. */
+    beaconDelayMs?: number;
+    fetcher?: typeof fetch;
+};
+declare function downloadUrl(config: Pick<DownloadConfig, 'baseUrl' | 'product' | 'channel' | 'platform' | 'query'>): string;
+/**
+ * Issues a download via the billing API and returns the signed asset URL +
+ * beacon URL without redirecting. Useful when you want full control of the
+ * UX (e.g. fetch then trigger your own `<a download>` flow).
+ */
+declare function issueDownload(config: DownloadConfig): Promise<IssuedDownload>;
+/**
+ * Fires the completion beacon for an issued download. Uses
+ * `navigator.sendBeacon` when available (survives page navigation), falls
+ * back to `fetch` with `keepalive: true`. Safe to call at unload time.
+ */
+declare function sendCompletionBeacon(beaconUrl: string): void;
+/**
+ * One-shot helper for landing-page download CTAs: fetches a signed URL,
+ * navigates the current tab to the asset, then schedules the completion
+ * beacon. The function resolves once the navigation has been triggered.
+ */
+declare function triggerDownload(config: DownloadConfig): Promise<IssuedDownload>;
+
+export { type DownloadConfig, downloadUrl, issueDownload, sendCompletionBeacon, triggerDownload };

package/dist/downloads.js

@@ -0,0 +1,46 @@
+// src/downloads.ts
+function downloadUrl(config) {
+  const base = config.baseUrl.replace(/\/$/, "");
+  const path = `/api/v1/downloads/${config.product}/${config.channel}/${config.platform}`;
+  const params = new URLSearchParams();
+  for (const [k, v] of Object.entries(config.query ?? {})) {
+    if (v !== void 0 && v !== "") params.set(k, v);
+  }
+  const qs = params.toString();
+  return qs ? `${base}${path}?${qs}` : `${base}${path}`;
+}
+async function issueDownload(config) {
+  const f = config.fetcher ?? globalThis.fetch;
+  if (!f) {
+    throw new Error("No fetch implementation available. Pass a fetcher in config or use Node 18+.");
+  }
+  const url = downloadUrl(config);
+  const res = await f(url, { headers: { Accept: "application/json" } });
+  if (!res.ok) {
+    throw new Error(`download issue failed: HTTP ${res.status}`);
+  }
+  return await res.json();
+}
+function sendCompletionBeacon(beaconUrl) {
+  if (typeof navigator !== "undefined" && typeof navigator.sendBeacon === "function") {
+    navigator.sendBeacon(beaconUrl);
+    return;
+  }
+  if (typeof fetch !== "undefined") {
+    void fetch(beaconUrl, { method: "POST", keepalive: true }).catch(() => {
+    });
+  }
+}
+async function triggerDownload(config) {
+  const issued = await issueDownload(config);
+  const delay = config.beaconDelayMs ?? 1500;
+  if (typeof window !== "undefined") {
+    window.location.href = issued.signedUrl;
+    setTimeout(() => sendCompletionBeacon(issued.beaconUrl), delay);
+  }
+  return issued;
+}
+
+export { downloadUrl, issueDownload, sendCompletionBeacon, triggerDownload };
+//# sourceMappingURL=downloads.js.map
+//# sourceMappingURL=downloads.js.map

package/dist/downloads.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/downloads.ts"],"names":[],"mappings":";AAcO,SAAS,YAAY,MAAA,EAAgG;AACxH,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAA,GAAO,qBAAqB,MAAA,CAAO,OAAO,IAAI,MAAA,CAAO,OAAO,CAAA,CAAA,EAAI,MAAA,CAAO,QAAQ,CAAA,CAAA;AACrF,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,MAAA,CAAO,QAAQ,MAAA,CAAO,KAAA,IAAS,EAAE,CAAA,EAAG;AACrD,IAAA,IAAI,MAAM,MAAA,IAAa,CAAA,KAAM,IAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACpD;AACA,EAAA,MAAM,EAAA,GAAK,OAAO,QAAA,EAAS;AAC3B,EAAA,OAAO,EAAA,GAAK,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA;AACvD;AAOA,eAAsB,cAAc,MAAA,EAAiD;AACjF,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AACvC,EAAA,IAAI,CAAC,CAAA,EAAG;AACJ,IAAA,MAAM,IAAI,MAAM,8EAA8E,CAAA;AAAA,EAClG;AAEA,EAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,GAAA,EAAK,EAAE,SAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB,EAAG,CAAA;AAEpE,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/D;AAEA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAC3B;AAOO,SAAS,qBAAqB,SAAA,EAAyB;AAC1D,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,IAAe,OAAO,SAAA,CAAU,eAAe,UAAA,EAAY;AAChF,IAAA,SAAA,CAAU,WAAW,SAAS,CAAA;AAC9B,IAAA;AAAA,EACJ;AAEA,EAAA,IAAI,OAAO,UAAU,WAAA,EAAa;AAC9B,IAAA,KAAK,KAAA,CAAM,SAAA,EAAW,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAW,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EAC7E;AACJ;AAOA,eAAsB,gBAAgB,MAAA,EAAiD;AACnF,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,MAAM,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,OAAO,aAAA,IAAiB,IAAA;AAEtC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,MAAA,CAAO,QAAA,CAAS,OAAO,MAAA,CAAO,SAAA;AAC9B,IAAA,UAAA,CAAW,MAAM,oBAAA,CAAqB,MAAA,CAAO,SAAS,GAAG,KAAK,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,MAAA;AACX","file":"downloads.js","sourcesContent":["import type { AssetPlatform, IssuedDownload, ReleaseChannel } from './types';\n\nexport type DownloadConfig = {\n    baseUrl: string;\n    product: string;\n    channel: ReleaseChannel;\n    platform: AssetPlatform;\n    /** Optional UTM + landing tracking. */\n    query?: Record<string, string | undefined>;\n    /** Delay before firing the completion beacon, ms. Default 1500. */\n    beaconDelayMs?: number;\n    fetcher?: typeof fetch;\n};\n\nexport function downloadUrl(config: Pick<DownloadConfig, 'baseUrl' | 'product' | 'channel' | 'platform' | 'query'>): string {\n    const base = config.baseUrl.replace(/\\/$/, '');\n    const path = `/api/v1/downloads/${config.product}/${config.channel}/${config.platform}`;\n    const params = new URLSearchParams();\n    for (const [k, v] of Object.entries(config.query ?? {})) {\n        if (v !== undefined && v !== '') params.set(k, v);\n    }\n    const qs = params.toString();\n    return qs ? `${base}${path}?${qs}` : `${base}${path}`;\n}\n\n/**\n * Issues a download via the billing API and returns the signed asset URL +\n * beacon URL without redirecting. Useful when you want full control of the\n * UX (e.g. fetch then trigger your own `<a download>` flow).\n */\nexport async function issueDownload(config: DownloadConfig): Promise<IssuedDownload> {\n    const f = config.fetcher ?? globalThis.fetch;\n    if (!f) {\n        throw new Error('No fetch implementation available. Pass a fetcher in config or use Node 18+.');\n    }\n\n    const url = downloadUrl(config);\n    const res = await f(url, { headers: { Accept: 'application/json' } });\n\n    if (!res.ok) {\n        throw new Error(`download issue failed: HTTP ${res.status}`);\n    }\n\n    return (await res.json()) as IssuedDownload;\n}\n\n/**\n * Fires the completion beacon for an issued download. Uses\n * `navigator.sendBeacon` when available (survives page navigation), falls\n * back to `fetch` with `keepalive: true`. Safe to call at unload time.\n */\nexport function sendCompletionBeacon(beaconUrl: string): void {\n    if (typeof navigator !== 'undefined' && typeof navigator.sendBeacon === 'function') {\n        navigator.sendBeacon(beaconUrl);\n        return;\n    }\n\n    if (typeof fetch !== 'undefined') {\n        void fetch(beaconUrl, { method: 'POST', keepalive: true }).catch(() => {});\n    }\n}\n\n/**\n * One-shot helper for landing-page download CTAs: fetches a signed URL,\n * navigates the current tab to the asset, then schedules the completion\n * beacon. The function resolves once the navigation has been triggered.\n */\nexport async function triggerDownload(config: DownloadConfig): Promise<IssuedDownload> {\n    const issued = await issueDownload(config);\n    const delay = config.beaconDelayMs ?? 1500;\n\n    if (typeof window !== 'undefined') {\n        window.location.href = issued.signedUrl;\n        setTimeout(() => sendCompletionBeacon(issued.beaconUrl), delay);\n    }\n\n    return issued;\n}\n"]}