@akira-io/billing-js 0.1.8 → 0.2.0

package/dist/{client-types-B3lf4xBs.d.cts → client-types-CtRkHWna.d.cts}

@@ -189,6 +189,26 @@ interface GithubInstallationTokenResponse {
     account_login: string;
     account_type: string;
 }
+interface GithubAppInfo {
+    slug: string;
+    install_url: string;
+}
+interface GithubUserSummary {
+    id: number;
+    login: string;
+}
+interface GithubUserInstallation {
+    id: number;
+    html_url: string;
+    account_id: number;
+    account_login: string;
+    account_type: string;
+    target_type: string;
+}
+interface GithubUserInstallationsResponse {
+    user: GithubUserSummary;
+    installations: GithubUserInstallation[];
+}
 interface PkceChallenge {
     verifier: string;
     challenge: string;
@@ -204,4 +224,4 @@ interface BuildOauthInitUrlOptions {
     state?: string;
 }
 
-export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, GithubInstallationTokenPayload as G, LicenseActivatePayload as L, OauthExchangeEntitlement as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, GithubInstallationTokenResponse as c, LicenseActivateResponse as d, LicenseCheckPayload as e, LicenseCheckResponse as f, LicensePublicKey as g, LicensePublicKeysResponse as h, LicenseRefreshPayload as i, LicenseSnapshotPayload as j, LicenseSyncUsagePayload as k, LicenseSyncUsageResponse as l, LicensingMode as m, OauthExchangePayload as n, OauthExchangeResponse as o, OauthProvider as p, OauthProviderInfo as q, OauthProvidersResponse as r, OtpCustomer as s, OtpRequestPayload as t, OtpVerifyPayload as u, OtpVerifyResponse as v, UsagePayload as w, UsageResponse as x };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, UsagePayload as D, EntitlementCustomer as E, UsageResponse as F, GithubAppInfo as G, LicenseActivatePayload as L, OauthExchangeEntitlement as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, GithubInstallationTokenPayload as c, GithubInstallationTokenResponse as d, GithubUserInstallation as e, GithubUserInstallationsResponse as f, GithubUserSummary as g, LicenseActivateResponse as h, LicenseCheckPayload as i, LicenseCheckResponse as j, LicensePublicKey as k, LicensePublicKeysResponse as l, LicenseRefreshPayload as m, LicenseSnapshotPayload as n, LicenseSyncUsagePayload as o, LicenseSyncUsageResponse as p, LicensingMode as q, OauthExchangePayload as r, OauthExchangeResponse as s, OauthProvider as t, OauthProviderInfo as u, OauthProvidersResponse as v, OtpCustomer as w, OtpRequestPayload as x, OtpVerifyPayload as y, OtpVerifyResponse as z };

package/dist/{client-types-B3lf4xBs.d.ts → client-types-CtRkHWna.d.ts}

@@ -189,6 +189,26 @@ interface GithubInstallationTokenResponse {
     account_login: string;
     account_type: string;
 }
+interface GithubAppInfo {
+    slug: string;
+    install_url: string;
+}
+interface GithubUserSummary {
+    id: number;
+    login: string;
+}
+interface GithubUserInstallation {
+    id: number;
+    html_url: string;
+    account_id: number;
+    account_login: string;
+    account_type: string;
+    target_type: string;
+}
+interface GithubUserInstallationsResponse {
+    user: GithubUserSummary;
+    installations: GithubUserInstallation[];
+}
 interface PkceChallenge {
     verifier: string;
     challenge: string;
@@ -204,4 +224,4 @@ interface BuildOauthInitUrlOptions {
     state?: string;
 }
 
-export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, EntitlementCustomer as E, GithubInstallationTokenPayload as G, LicenseActivatePayload as L, OauthExchangeEntitlement as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, GithubInstallationTokenResponse as c, LicenseActivateResponse as d, LicenseCheckPayload as e, LicenseCheckResponse as f, LicensePublicKey as g, LicensePublicKeysResponse as h, LicenseRefreshPayload as i, LicenseSnapshotPayload as j, LicenseSyncUsagePayload as k, LicenseSyncUsageResponse as l, LicensingMode as m, OauthExchangePayload as n, OauthExchangeResponse as o, OauthProvider as p, OauthProviderInfo as q, OauthProvidersResponse as r, OtpCustomer as s, OtpRequestPayload as t, OtpVerifyPayload as u, OtpVerifyResponse as v, UsagePayload as w, UsageResponse as x };
+export type { ActivatedDevice as A, BillingPortalResponse as B, Customer as C, UsagePayload as D, EntitlementCustomer as E, UsageResponse as F, GithubAppInfo as G, LicenseActivatePayload as L, OauthExchangeEntitlement as O, PkceChallenge as P, SignedLicense as S, UsageFeatureState as U, BuildOauthInitUrlOptions as a, EntitlementsResponse as b, GithubInstallationTokenPayload as c, GithubInstallationTokenResponse as d, GithubUserInstallation as e, GithubUserInstallationsResponse as f, GithubUserSummary as g, LicenseActivateResponse as h, LicenseCheckPayload as i, LicenseCheckResponse as j, LicensePublicKey as k, LicensePublicKeysResponse as l, LicenseRefreshPayload as m, LicenseSnapshotPayload as n, LicenseSyncUsagePayload as o, LicenseSyncUsageResponse as p, LicensingMode as q, OauthExchangePayload as r, OauthExchangeResponse as s, OauthProvider as t, OauthProviderInfo as u, OauthProvidersResponse as v, OtpCustomer as w, OtpRequestPayload as x, OtpVerifyPayload as y, OtpVerifyResponse as z };

package/dist/client.cjs

@@ -124,6 +124,9 @@ var BillingClient = class {
       payload
     );
   }
+  async meGithubInstallations() {
+    return this.signed("GET", "/api/me/github/installations");
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -140,6 +143,9 @@ var BillingClient = class {
   async publicLicenseKeys() {
     return this.unsigned("GET", "/api/v1/license-keys/public");
   }
+  async githubAppInfo() {
+    return this.unsigned("GET", "/api/v1/github/app");
+  }
   async signed(method, path, body) {
     const bodyBytes = body === void 0 ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));
     const timestamp = Math.floor(Date.now() / 1e3);

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACrBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/client.d.cts

@@ -1,4 +1,4 @@
-import { t as OtpRequestPayload, u as OtpVerifyPayload, v as OtpVerifyResponse, C as Customer, e as LicenseCheckPayload, f as LicenseCheckResponse, L as LicenseActivatePayload, d as LicenseActivateResponse, i as LicenseRefreshPayload, k as LicenseSyncUsagePayload, l as LicenseSyncUsageResponse, r as OauthProvidersResponse, n as OauthExchangePayload, o as OauthExchangeResponse, G as GithubInstallationTokenPayload, c as GithubInstallationTokenResponse, b as EntitlementsResponse, B as BillingPortalResponse, w as UsagePayload, x as UsageResponse, h as LicensePublicKeysResponse } from './client-types-B3lf4xBs.cjs';
+import { x as OtpRequestPayload, y as OtpVerifyPayload, z as OtpVerifyResponse, C as Customer, i as LicenseCheckPayload, j as LicenseCheckResponse, L as LicenseActivatePayload, h as LicenseActivateResponse, m as LicenseRefreshPayload, o as LicenseSyncUsagePayload, p as LicenseSyncUsageResponse, v as OauthProvidersResponse, r as OauthExchangePayload, s as OauthExchangeResponse, c as GithubInstallationTokenPayload, d as GithubInstallationTokenResponse, f as GithubUserInstallationsResponse, b as EntitlementsResponse, B as BillingPortalResponse, D as UsagePayload, F as UsageResponse, l as LicensePublicKeysResponse, G as GithubAppInfo } from './client-types-CtRkHWna.cjs';
 
 interface BillingClientConfig {
     baseUrl: string;
@@ -30,11 +30,13 @@ declare class BillingClient {
     listOauthProviders(product: string): Promise<OauthProvidersResponse>;
     exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse>;
     githubInstallationToken(payload?: GithubInstallationTokenPayload): Promise<GithubInstallationTokenResponse>;
+    meGithubInstallations(): Promise<GithubUserInstallationsResponse>;
     entitlements(): Promise<EntitlementsResponse>;
     billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
     trackUsage(payload: UsagePayload): Promise<UsageResponse>;
     trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse>;
     publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
+    githubAppInfo(): Promise<GithubAppInfo>;
     private signed;
     private unsigned;
     private parseResponse;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { t as OtpRequestPayload, u as OtpVerifyPayload, v as OtpVerifyResponse, C as Customer, e as LicenseCheckPayload, f as LicenseCheckResponse, L as LicenseActivatePayload, d as LicenseActivateResponse, i as LicenseRefreshPayload, k as LicenseSyncUsagePayload, l as LicenseSyncUsageResponse, r as OauthProvidersResponse, n as OauthExchangePayload, o as OauthExchangeResponse, G as GithubInstallationTokenPayload, c as GithubInstallationTokenResponse, b as EntitlementsResponse, B as BillingPortalResponse, w as UsagePayload, x as UsageResponse, h as LicensePublicKeysResponse } from './client-types-B3lf4xBs.js';
+import { x as OtpRequestPayload, y as OtpVerifyPayload, z as OtpVerifyResponse, C as Customer, i as LicenseCheckPayload, j as LicenseCheckResponse, L as LicenseActivatePayload, h as LicenseActivateResponse, m as LicenseRefreshPayload, o as LicenseSyncUsagePayload, p as LicenseSyncUsageResponse, v as OauthProvidersResponse, r as OauthExchangePayload, s as OauthExchangeResponse, c as GithubInstallationTokenPayload, d as GithubInstallationTokenResponse, f as GithubUserInstallationsResponse, b as EntitlementsResponse, B as BillingPortalResponse, D as UsagePayload, F as UsageResponse, l as LicensePublicKeysResponse, G as GithubAppInfo } from './client-types-CtRkHWna.js';
 
 interface BillingClientConfig {
     baseUrl: string;
@@ -30,11 +30,13 @@ declare class BillingClient {
     listOauthProviders(product: string): Promise<OauthProvidersResponse>;
     exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse>;
     githubInstallationToken(payload?: GithubInstallationTokenPayload): Promise<GithubInstallationTokenResponse>;
+    meGithubInstallations(): Promise<GithubUserInstallationsResponse>;
     entitlements(): Promise<EntitlementsResponse>;
     billingPortal(returnUrl: string): Promise<BillingPortalResponse>;
     trackUsage(payload: UsagePayload): Promise<UsageResponse>;
     trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse>;
     publicLicenseKeys(): Promise<LicensePublicKeysResponse>;
+    githubAppInfo(): Promise<GithubAppInfo>;
     private signed;
     private unsigned;
     private parseResponse;

package/dist/client.js

@@ -122,6 +122,9 @@ var BillingClient = class {
       payload
     );
   }
+  async meGithubInstallations() {
+    return this.signed("GET", "/api/me/github/installations");
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -138,6 +141,9 @@ var BillingClient = class {
   async publicLicenseKeys() {
     return this.unsigned("GET", "/api/v1/license-keys/public");
   }
+  async githubAppInfo() {
+    return this.unsigned("GET", "/api/v1/github/app");
+  }
   async signed(method, path, body) {
     const bodyBytes = body === void 0 ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));
     const timestamp = Math.floor(Date.now() / 1e3);

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACrBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/index.cjs

@@ -124,6 +124,9 @@ var BillingClient = class {
       payload
     );
   }
+  async meGithubInstallations() {
+    return this.signed("GET", "/api/me/github/installations");
+  }
   async entitlements() {
     return this.signed("GET", "/api/me/entitlements");
   }
@@ -140,6 +143,9 @@ var BillingClient = class {
   async publicLicenseKeys() {
     return this.unsigned("GET", "/api/v1/license-keys/public");
   }
+  async githubAppInfo() {
+    return this.unsigned("GET", "/api/v1/github/app");
+  }
   async signed(method, path, body) {
     const bodyBytes = body === void 0 ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));
     const timestamp = Math.floor(Date.now() / 1e3);
@@ -530,17 +536,248 @@ function buildOauthInitUrl(opts) {
   return `${base}/auth/${opts.provider}?${params.toString()}`;
 }
 
+// src/lifecycle.ts
+function computeState(payload, graceWindowMs, now = /* @__PURE__ */ new Date()) {
+  if (!payload) return "none";
+  if (!payload.valid_until) return "invalid";
+  const expiry = Date.parse(payload.valid_until);
+  if (Number.isNaN(expiry)) return "invalid";
+  const nowMs = now.getTime();
+  if (nowMs <= expiry) {
+    return isTrialPayload(payload) ? "trialing" : "active";
+  }
+  const cutoff = expiry + graceWindowMs;
+  if (nowMs <= cutoff) return "grace";
+  return "expired";
+}
+function trialDaysLeft(payload, now = /* @__PURE__ */ new Date()) {
+  if (!payload || !isTrialPayload(payload)) return 0;
+  const expiry = Date.parse(payload.valid_until);
+  if (Number.isNaN(expiry)) return 0;
+  const delta = expiry - now.getTime();
+  if (delta <= 0) return 0;
+  const dayMs = 24 * 60 * 60 * 1e3;
+  return Math.ceil(delta / dayMs);
+}
+function isTrialPayload(payload) {
+  if (payload.features?.__trial === true) return true;
+  if (payload.plan_key && payload.plan_key.endsWith(":trial")) return true;
+  return false;
+}
+
+// src/gate.ts
+var GateDeniedError = class extends Error {
+  access;
+  constructor(access) {
+    super(`billing: feature "${access.feature}" denied (${access.reason})`);
+    this.name = "GateDeniedError";
+    this.access = access;
+  }
+};
+function isGateDenied(err) {
+  return err instanceof GateDeniedError;
+}
+var Gate = class {
+  loader;
+  localConsumption;
+  graceWindowMs;
+  now;
+  inflight = null;
+  constructor(opts) {
+    if (!opts.loader) throw new Error("billing: Gate requires loader");
+    this.loader = opts.loader;
+    this.localConsumption = opts.localConsumption ?? (() => 0);
+    this.graceWindowMs = opts.graceWindowMs ?? 0;
+    this.now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  }
+  async check(feature) {
+    const prev = this.inflight;
+    const run = (async () => {
+      if (prev) {
+        try {
+          await prev;
+        } catch {
+        }
+      }
+      return this.evaluate(feature);
+    })();
+    this.inflight = run.catch(() => ({}));
+    return run;
+  }
+  async require(feature) {
+    const access = await this.check(feature);
+    if (!access.allowed) throw new GateDeniedError(access);
+    return access;
+  }
+  async evaluate(feature) {
+    const access = {
+      feature,
+      allowed: false,
+      hasFeature: false,
+      unlimited: false,
+      remaining: 0,
+      reason: "",
+      plan: "",
+      state: "none"
+    };
+    let loaded;
+    try {
+      loaded = await this.loader();
+    } catch (err) {
+      access.reason = "verify_failed";
+      throw Object.assign(err instanceof Error ? err : new Error(String(err)), { access });
+    }
+    if (!loaded) {
+      access.reason = "no_license";
+      return access;
+    }
+    const { payload } = loaded;
+    access.plan = payload.plan_key;
+    access.state = computeState(payload, this.graceWindowMs, this.now());
+    if (access.state === "expired" || access.state === "invalid") {
+      access.reason = `license_${access.state}`;
+      return access;
+    }
+    const featureFlag = payload.features?.[feature];
+    if (featureFlag !== void 0) {
+      access.hasFeature = featureFlag;
+      if (!featureFlag) {
+        access.reason = "feature_disabled";
+        return access;
+      }
+    }
+    let consumed;
+    try {
+      consumed = await this.localConsumption(feature);
+    } catch (err) {
+      access.reason = "local_consumption_failed";
+      throw Object.assign(err instanceof Error ? err : new Error(String(err)), { access });
+    }
+    const remaining = computeRemaining(payload, feature, consumed);
+    if (remaining === null) {
+      if (access.hasFeature) {
+        access.allowed = true;
+        access.unlimited = true;
+        return access;
+      }
+      access.reason = "feature_missing";
+      return access;
+    }
+    if (remaining === Number.POSITIVE_INFINITY) {
+      access.unlimited = true;
+      access.hasFeature = true;
+      access.allowed = true;
+      return access;
+    }
+    access.remaining = remaining;
+    if (remaining > 0) {
+      access.allowed = true;
+      access.hasFeature = true;
+      return access;
+    }
+    access.reason = "limit_reached";
+    return access;
+  }
+};
+
+// src/usage.ts
+var MemoryBuffer = class {
+  state = {};
+  add(feature, delta) {
+    if (delta === 0) return;
+    this.state[feature] = (this.state[feature] ?? 0) + delta;
+  }
+  drain() {
+    const out = this.state;
+    this.state = {};
+    return out;
+  }
+  restore(deltas) {
+    for (const [k, v] of Object.entries(deltas)) {
+      this.state[k] = (this.state[k] ?? 0) + v;
+    }
+  }
+};
+var DEFAULT_FLUSH_INTERVAL_MS = 5 * 60 * 1e3;
+var UsageTracker = class {
+  buffer;
+  sync;
+  serial;
+  onRefresh;
+  flushIntervalMs;
+  timer = null;
+  running = false;
+  constructor(opts) {
+    if (!opts.buffer) throw new Error("billing: tracker requires buffer");
+    if (!opts.sync) throw new Error("billing: tracker requires sync");
+    this.buffer = opts.buffer;
+    this.sync = opts.sync;
+    if (opts.serial !== void 0) this.serial = opts.serial;
+    if (opts.onRefresh !== void 0) this.onRefresh = opts.onRefresh;
+    this.flushIntervalMs = opts.flushIntervalMs && opts.flushIntervalMs > 0 ? opts.flushIntervalMs : DEFAULT_FLUSH_INTERVAL_MS;
+  }
+  async track(feature, delta) {
+    if (delta === 0) return;
+    await this.buffer.add(feature, delta);
+  }
+  async flush() {
+    const deltas = await this.buffer.drain();
+    if (!deltas || Object.keys(deltas).length === 0) return;
+    let serial = 0;
+    if (this.serial) {
+      try {
+        serial = await this.serial();
+      } catch (err) {
+        await this.buffer.restore(deltas);
+        throw err;
+      }
+    }
+    let resp;
+    try {
+      resp = await this.sync(deltas, serial);
+    } catch (err) {
+      await this.buffer.restore(deltas);
+      throw err;
+    }
+    if (this.onRefresh && resp) {
+      await this.onRefresh(resp);
+    }
+  }
+  start() {
+    if (this.running) return;
+    this.running = true;
+    this.timer = setInterval(() => {
+      void this.flush().catch(() => {
+      });
+    }, this.flushIntervalMs);
+  }
+  async stop() {
+    if (!this.running) return;
+    this.running = false;
+    if (this.timer) {
+      clearInterval(this.timer);
+      this.timer = null;
+    }
+    await this.flush();
+  }
+};
+
 exports.BillingApiError = BillingApiError;
 exports.BillingClient = BillingClient;
+exports.Gate = Gate;
+exports.GateDeniedError = GateDeniedError;
 exports.HEADER_NONCE = HEADER_NONCE;
 exports.HEADER_PRODUCT = HEADER_PRODUCT;
 exports.HEADER_SIGNATURE = HEADER_SIGNATURE;
 exports.HEADER_TIMESTAMP = HEADER_TIMESTAMP;
+exports.MemoryBuffer = MemoryBuffer;
+exports.UsageTracker = UsageTracker;
 exports.buildOauthInitUrl = buildOauthInitUrl;
 exports.canUseUpdate = canUseUpdate;
 exports.canonical = canonical;
 exports.checkoutUrl = checkoutUrl;
 exports.computeRemaining = computeRemaining;
+exports.computeState = computeState;
 exports.decodeLicense = decodeLicense;
 exports.defaultInterval = defaultInterval;
 exports.downloadUrl = downloadUrl;
@@ -553,6 +790,7 @@ exports.getCtaProps = getCtaProps;
 exports.hasYearly = hasYearly;
 exports.isExpired = isExpired;
 exports.isFreeTier = isFreeTier;
+exports.isGateDenied = isGateDenied;
 exports.isInGrace = isInGrace;
 exports.isOneTimeTier = isOneTimeTier;
 exports.isUnlimited = isUnlimited;
@@ -561,6 +799,7 @@ exports.newNonce = newNonce;
 exports.periodResetAt = periodResetAt;
 exports.sendCompletionBeacon = sendCompletionBeacon;
 exports.sign = sign;
+exports.trialDaysLeft = trialDaysLeft;
 exports.triggerDownload = triggerDownload;
 exports.verifyLicense = verifyLicense;
 //# sourceMappingURL=index.cjs.map