@akira-io/billing-js 0.1.5 → 0.1.7

package/dist/{client-types-CN3dVIrX.d.cts → client-types-CIqyeWNV.d.cts}

@@ -134,6 +134,8 @@ interface LicenseSnapshotPayload {
     valid_until: string;
     paid_up_until?: string | null;
     fallback_release_date?: string | null;
+    updates_window_days?: number | null;
+    offline_grace_days?: number | null;
 }
 interface LicenseSyncUsagePayload {
     product: string;
@@ -146,5 +148,41 @@ interface LicenseSyncUsageResponse {
     applied: Record<string, number>;
     serial: number;
 }
+type OauthProvider = 'google' | 'github' | 'apple' | 'microsoft' | 'gitlab' | 'bitbucket';
+interface OauthProviderInfo {
+    provider: OauthProvider;
+    label: string;
+    scopes: string[];
+}
+interface OauthProvidersResponse {
+    product: string;
+    providers: OauthProviderInfo[];
+}
+interface OauthExchangePayload {
+    code: string;
+    code_verifier: string;
+}
+interface OauthExchangeResponse {
+    access_token: string;
+    token_type: string;
+    customer: {
+        id: string;
+        product_id: string;
+    };
+}
+interface PkceChallenge {
+    verifier: string;
+    challenge: string;
+    method: 'S256';
+}
+interface BuildOauthInitUrlOptions {
+    baseUrl: string;
+    provider: OauthProvider;
+    product: string;
+    redirectUri: string;
+    codeChallenge: string;
+    codeChallengeMethod?: 'S256' | 'plain';
+    state?: string;
+}
 
-export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OtpCustomer as O, SignedLicense as S, UsageFeatureState as U, EntitlementsResponse as a, LicenseActivateResponse as b, LicenseCheckPayload as c, LicenseCheckResponse as d, LicensePublicKey as e, LicensePublicKeysResponse as f, LicenseRefreshPayload as g, LicenseSnapshotPayload as h, LicenseSyncUsagePayload as i, LicenseSyncUsageResponse as j, LicensingMode as k, OtpRequestPayload as l, OtpVerifyPayload as m, OtpVerifyResponse as n, UsagePayload as o, UsageResponse as p };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OauthExchangePayload as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, LicenseActivateResponse as c, LicenseCheckPayload as d, LicenseCheckResponse as e, LicensePublicKey as f, LicensePublicKeysResponse as g, LicenseRefreshPayload as h, LicenseSnapshotPayload as i, LicenseSyncUsagePayload as j, LicenseSyncUsageResponse as k, LicensingMode as l, OauthExchangeResponse as m, OauthProvider as n, OauthProviderInfo as o, OauthProvidersResponse as p, OtpCustomer as q, OtpRequestPayload as r, OtpVerifyPayload as s, OtpVerifyResponse as t, UsagePayload as u, UsageResponse as v };

package/dist/{client-types-CN3dVIrX.d.ts → client-types-CIqyeWNV.d.ts}

@@ -134,6 +134,8 @@ interface LicenseSnapshotPayload {
     valid_until: string;
     paid_up_until?: string | null;
     fallback_release_date?: string | null;
+    updates_window_days?: number | null;
+    offline_grace_days?: number | null;
 }
 interface LicenseSyncUsagePayload {
     product: string;
@@ -146,5 +148,41 @@ interface LicenseSyncUsageResponse {
     applied: Record<string, number>;
     serial: number;
 }
+type OauthProvider = 'google' | 'github' | 'apple' | 'microsoft' | 'gitlab' | 'bitbucket';
+interface OauthProviderInfo {
+    provider: OauthProvider;
+    label: string;
+    scopes: string[];
+}
+interface OauthProvidersResponse {
+    product: string;
+    providers: OauthProviderInfo[];
+}
+interface OauthExchangePayload {
+    code: string;
+    code_verifier: string;
+}
+interface OauthExchangeResponse {
+    access_token: string;
+    token_type: string;
+    customer: {
+        id: string;
+        product_id: string;
+    };
+}
+interface PkceChallenge {
+    verifier: string;
+    challenge: string;
+    method: 'S256';
+}
+interface BuildOauthInitUrlOptions {
+    baseUrl: string;
+    provider: OauthProvider;
+    product: string;
+    redirectUri: string;
+    codeChallenge: string;
+    codeChallengeMethod?: 'S256' | 'plain';
+    state?: string;
+}
 
-export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OtpCustomer as O, SignedLicense as S, UsageFeatureState as U, EntitlementsResponse as a, LicenseActivateResponse as b, LicenseCheckPayload as c, LicenseCheckResponse as d, LicensePublicKey as e, LicensePublicKeysResponse as f, LicenseRefreshPayload as g, LicenseSnapshotPayload as h, LicenseSyncUsagePayload as i, LicenseSyncUsageResponse as j, LicensingMode as k, OtpRequestPayload as l, OtpVerifyPayload as m, OtpVerifyResponse as n, UsagePayload as o, UsageResponse as p };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, LicenseActivatePayload as L, OauthExchangePayload as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, LicenseActivateResponse as c, LicenseCheckPayload as d, LicenseCheckResponse as e, LicensePublicKey as f, LicensePublicKeysResponse as g, LicenseRefreshPayload as h, LicenseSnapshotPayload as i, LicenseSyncUsagePayload as j, LicenseSyncUsageResponse as k, LicensingMode as l, OauthExchangeResponse as m, OauthProvider as n, OauthProviderInfo as o, OauthProvidersResponse as p, OtpCustomer as q, OtpRequestPayload as r, OtpVerifyPayload as s, OtpVerifyResponse as t, UsagePayload as u, UsageResponse as v };

package/dist/client.cjs

@@ -109,6 +109,14 @@ var BillingClient = class {
   async licenseSyncUsage(payload) {
     return this.signed("POST", "/api/licenses/sync-usage", payload);
   }
+  async listOauthProviders(product) {
+    return this.signed("GET", `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);
+  }
+  async exchangeOauthCode(payload) {
+    const res = await this.signed("POST", "/api/auth/oauth/exchange", payload);
+    this.setCustomerToken(res.access_token);
+    return res;
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC1BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACvBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/client.d.cts

@@ -1,4 +1,4 @@
-import { l as OtpRequestPayload, m as OtpVerifyPayload, n as OtpVerifyResponse, C as Customer, c as LicenseCheckPayload, d as LicenseCheckResponse, L as LicenseActivatePayload, b as LicenseActivateResponse, g as LicenseRefreshPayload, i as LicenseSyncUsagePayload, j as LicenseSyncUsageResponse, a as EntitlementsResponse, B as BillingPortalResponse, o as UsagePayload, p as UsageResponse, f as LicensePublicKeysResponse } from './client-types-CN3dVIrX.cjs';
+import { r as OtpRequestPayload, s as OtpVerifyPayload, t as OtpVerifyResponse, C as Customer, d as LicenseCheckPayload, e as LicenseCheckResponse, L as LicenseActivatePayload, c as LicenseActivateResponse, h as LicenseRefreshPayload, j as LicenseSyncUsagePayload, k as LicenseSyncUsageResponse, p as OauthProvidersResponse, O as OauthExchangePayload, m as OauthExchangeResponse, b as EntitlementsResponse, B as BillingPortalResponse, u as UsagePayload, v as UsageResponse, g as LicensePublicKeysResponse } from './client-types-CIqyeWNV.cjs';
 
 interface BillingClientConfig {
     baseUrl: string;
@@ -27,6 +27,8 @@ declare class BillingClient {
     licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
     licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
     licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse>;
+    listOauthProviders(product: string): Promise<OauthProvidersResponse>;
+    exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse>;
     entitlements(): Promise<EntitlementsResponse>;
     billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
     trackUsage(payload: UsagePayload): Promise<UsageResponse>;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { l as OtpRequestPayload, m as OtpVerifyPayload, n as OtpVerifyResponse, C as Customer, c as LicenseCheckPayload, d as LicenseCheckResponse, L as LicenseActivatePayload, b as LicenseActivateResponse, g as LicenseRefreshPayload, i as LicenseSyncUsagePayload, j as LicenseSyncUsageResponse, a as EntitlementsResponse, B as BillingPortalResponse, o as UsagePayload, p as UsageResponse, f as LicensePublicKeysResponse } from './client-types-CN3dVIrX.js';
+import { r as OtpRequestPayload, s as OtpVerifyPayload, t as OtpVerifyResponse, C as Customer, d as LicenseCheckPayload, e as LicenseCheckResponse, L as LicenseActivatePayload, c as LicenseActivateResponse, h as LicenseRefreshPayload, j as LicenseSyncUsagePayload, k as LicenseSyncUsageResponse, p as OauthProvidersResponse, O as OauthExchangePayload, m as OauthExchangeResponse, b as EntitlementsResponse, B as BillingPortalResponse, u as UsagePayload, v as UsageResponse, g as LicensePublicKeysResponse } from './client-types-CIqyeWNV.js';
 
 interface BillingClientConfig {
     baseUrl: string;
@@ -27,6 +27,8 @@ declare class BillingClient {
     licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse>;
     licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse>;
     licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse>;
+    listOauthProviders(product: string): Promise<OauthProvidersResponse>;
+    exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse>;
     entitlements(): Promise<EntitlementsResponse>;
     billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
     trackUsage(payload: UsagePayload): Promise<UsageResponse>;

package/dist/client.js

@@ -107,6 +107,14 @@ var BillingClient = class {
   async licenseSyncUsage(payload) {
     return this.signed("POST", "/api/licenses/sync-usage", payload);
   }
+  async listOauthProviders(product) {
+    return this.signed("GET", `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);
+  }
+  async exchangeOauthCode(payload) {
+    const res = await this.signed("POST", "/api/auth/oauth/exchange", payload);
+    this.setCustomerToken(res.access_token);
+    return res;
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;AC1BO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACvBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/index.cjs

@@ -109,6 +109,14 @@ var BillingClient = class {
   async licenseSyncUsage(payload) {
     return this.signed("POST", "/api/licenses/sync-usage", payload);
   }
+  async listOauthProviders(product) {
+    return this.signed("GET", `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);
+  }
+  async exchangeOauthCode(payload) {
+    const res = await this.signed("POST", "/api/auth/oauth/exchange", payload);
+    this.setCustomerToken(res.access_token);
+    return res;
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -467,10 +475,13 @@ function isInGrace(payload, graceSeconds, now = /* @__PURE__ */ new Date()) {
   return now.getTime() <= expiry + graceSeconds * 1e3;
 }
 function canUseUpdate(payload, releaseDate) {
-  if (!payload.paid_up_until) return true;
   const release = releaseDate instanceof Date ? releaseDate : new Date(releaseDate);
-  const paidUp = new Date(payload.paid_up_until);
-  return release.getTime() <= paidUp.getTime();
+  const paidUpMs = payload.paid_up_until ? new Date(payload.paid_up_until).getTime() : null;
+  const fallbackMs = payload.fallback_release_date ? new Date(payload.fallback_release_date).getTime() : null;
+  if (paidUpMs === null && fallbackMs === null) return true;
+  const effective = Math.max(paidUpMs ?? -Infinity, fallbackMs ?? -Infinity);
+  const windowMs = (payload.updates_window_days ?? 0) * 864e5;
+  return release.getTime() <= effective + windowMs;
 }
 function periodResetAt(payload, feature) {
   const state = payload.usage?.[feature];
@@ -478,12 +489,47 @@ function periodResetAt(payload, feature) {
   return new Date(state.period_end);
 }
 
+// src/oauth.ts
+function bytesToUrlSafeBase64(bytes) {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function randomBytes(length) {
+  const buf = new Uint8Array(length);
+  globalThis.crypto.getRandomValues(buf);
+  return buf;
+}
+async function generatePkceChallenge() {
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) throw new Error("crypto.subtle not available; cannot generate PKCE challenge");
+  const verifier = bytesToUrlSafeBase64(randomBytes(48));
+  const hash = await subtle.digest("SHA-256", new TextEncoder().encode(verifier));
+  const challenge = bytesToUrlSafeBase64(new Uint8Array(hash));
+  return { verifier, challenge, method: "S256" };
+}
+function generateOauthState() {
+  return bytesToUrlSafeBase64(randomBytes(24));
+}
+function buildOauthInitUrl(opts) {
+  const base = opts.baseUrl.replace(/\/$/, "");
+  const params = new URLSearchParams({
+    product: opts.product,
+    redirect_uri: opts.redirectUri,
+    code_challenge: opts.codeChallenge,
+    code_challenge_method: opts.codeChallengeMethod ?? "S256"
+  });
+  if (opts.state) params.set("state", opts.state);
+  return `${base}/auth/${opts.provider}?${params.toString()}`;
+}
+
 exports.BillingApiError = BillingApiError;
 exports.BillingClient = BillingClient;
 exports.HEADER_NONCE = HEADER_NONCE;
 exports.HEADER_PRODUCT = HEADER_PRODUCT;
 exports.HEADER_SIGNATURE = HEADER_SIGNATURE;
 exports.HEADER_TIMESTAMP = HEADER_TIMESTAMP;
+exports.buildOauthInitUrl = buildOauthInitUrl;
 exports.canUseUpdate = canUseUpdate;
 exports.canonical = canonical;
 exports.checkoutUrl = checkoutUrl;
@@ -493,6 +539,8 @@ exports.defaultInterval = defaultInterval;
 exports.downloadUrl = downloadUrl;
 exports.fetchPricing = fetchPricing;
 exports.formatPrice = formatPrice;
+exports.generateOauthState = generateOauthState;
+exports.generatePkceChallenge = generatePkceChallenge;
 exports.getActivePrice = getActivePrice;
 exports.getCtaProps = getCtaProps;
 exports.hasYearly = hasYearly;