@akira-io/billing-js 0.2.0 → 0.3.1

package/dist/client.cjs

@@ -86,6 +86,12 @@ var BillingClient = class {
   setCustomerToken(token) {
     this.customerToken = token;
   }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  getProductSlug() {
+    return this.productSlug;
+  }
   async requestOtp(payload) {
     await this.signed("POST", "/api/auth/customer/otp/request", payload);
   }

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,UAAA,GAAqB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEA,cAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.cjs","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    getBaseUrl(): string {\n        return this.baseUrl;\n    }\n\n    getProductSlug(): string {\n        return this.productSlug;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/client.d.cts

@@ -20,6 +20,8 @@ declare class BillingClient {
     private readonly fetcher;
     constructor(config: BillingClientConfig);
     setCustomerToken(token: string): void;
+    getBaseUrl(): string;
+    getProductSlug(): string;
     requestOtp(payload: OtpRequestPayload): Promise<void>;
     verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
     customerMe(): Promise<Customer>;

package/dist/client.d.ts

@@ -20,6 +20,8 @@ declare class BillingClient {
     private readonly fetcher;
     constructor(config: BillingClientConfig);
     setCustomerToken(token: string): void;
+    getBaseUrl(): string;
+    getProductSlug(): string;
     requestOtp(payload: OtpRequestPayload): Promise<void>;
     verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse>;
     customerMe(): Promise<Customer>;

package/dist/client.js

@@ -84,6 +84,12 @@ var BillingClient = class {
   setCustomerToken(token) {
     this.customerToken = token;
   }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  getProductSlug() {
+    return this.productSlug;
+  }
   async requestOtp(payload) {
     await this.signed("POST", "/api/auth/customer/otp/request", payload);
   }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}
+{"version":3,"sources":["../src/signature.ts","../src/client.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB,iBAAA;AACvB,IAAM,gBAAA,GAAmB,mBAAA;AACzB,IAAM,YAAA,GAAe,eAAA;AACrB,IAAM,gBAAA,GAAmB,mBAAA;AAEhC,eAAe,UAAU,KAAA,EAAoC;AACzD,EAAA,MAAM,SAAS,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,WAAW,KAAqB,CAAA;AACxE,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AAC7C;AAEA,SAAS,SAAA,GAA0B;AAC/B,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,MAAA;AACX;AAEA,SAAS,YAAY,MAAA,EAA4B;AAC7C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,QAAQ,MAAA,EAAQ;AACvB,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACX;AAEO,SAAS,QAAA,GAAmB;AAC/B,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,EAAE,CAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,QAAQ,eAAA,EAAiB;AACpC,IAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,GAAG,CAAA;AAAA,EACzC,CAAA,MAAO;AACH,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA,EAAG;AACpC,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,KAAW,GAAG,CAAA;AAAA,IAC3C;AAAA,EACJ;AACA,EAAA,OAAO,YAAY,GAAG,CAAA;AAC1B;AAEA,eAAsB,UAClB,WAAA,EACA,SAAA,EACA,KAAA,EACA,MAAA,EACA,MACA,IAAA,EACe;AACf,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAI,CAAA;AACrC,EAAA,OAAO,GAAG,WAAW;AAAA,EAAK,SAAS;AAAA,EAAK,KAAK;AAAA,EAAK,MAAA,CAAO,aAAa;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ,CAAA,CAAA;AAChG;AAEA,eAAsB,IAAA,CAAK,eAAuB,eAAA,EAA0C;AACxF,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACtD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,SAAA;AAAA,IACrB,KAAA;AAAA,IACA,OAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACX;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,eAAe,CAAiB,CAAA;AACpG,EAAA,OAAO,WAAA,CAAY,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;;;ACnBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACvC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,WAAA,CAAY,QAAgB,IAAA,EAAc;AACtC,IAAA,KAAA,CAAM,CAAA,YAAA,EAAe,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AACtC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EAChB;AACJ;AAEO,IAAM,gBAAN,MAAoB;AAAA,EACN,OAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACT,aAAA;AAAA,EACS,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA6B;AACrC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAC1B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,gBAAgB,MAAA,CAAO,aAAA;AAC5B,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,CAAW,KAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACf,MAAA,MAAM,IAAI,MAAM,uFAAuF,CAAA;AAAA,IAC3G;AAAA,EACJ;AAAA,EAEA,iBAAiB,KAAA,EAAqB;AAClC,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA;AAAA,EACzB;AAAA,EAEA,UAAA,GAAqB;AACjB,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EAEA,cAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA,EAEA,MAAM,WAAW,OAAA,EAA2C;AACxD,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,gCAAA,EAAkC,OAAO,CAAA;AAAA,EACvE;AAAA,EAEA,MAAM,UAAU,OAAA,EAAuD;AACnE,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA0B,MAAA,EAAQ,iCAAiC,OAAO,CAAA;AACjG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,UAAA,GAAgC;AAClC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiB,KAAA,EAAO,SAAS,CAAA;AAAA,EACjD;AAAA,EAEA,MAAM,aAAa,OAAA,EAA6D;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,MAAA,EAAQ,qBAAA,EAAuB,OAAO,CAAA;AAAA,EACnF;AAAA,EAEA,MAAM,gBAAgB,OAAA,EAAmE;AACrF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,wBAAA,EAA0B,OAAO,CAAA;AAAA,EACzF;AAAA,EAEA,MAAM,eAAe,OAAA,EAAkE;AACnF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAgC,MAAA,EAAQ,uBAAA,EAAyB,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,iBAAiB,OAAA,EAAqE;AACxF,IAAA,OAAO,IAAA,CAAK,MAAA,CAAiC,MAAA,EAAQ,0BAAA,EAA4B,OAAO,CAAA;AAAA,EAC5F;AAAA,EAEA,MAAM,mBAAmB,OAAA,EAAkD;AACvE,IAAA,OAAO,KAAK,MAAA,CAA+B,KAAA,EAAO,oBAAoB,kBAAA,CAAmB,OAAO,CAAC,CAAA,eAAA,CAAiB,CAAA;AAAA,EACtH;AAAA,EAEA,MAAM,kBAAkB,OAAA,EAA+D;AACnF,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,MAAA,CAA8B,MAAA,EAAQ,4BAA4B,OAAO,CAAA;AAChG,IAAA,IAAA,CAAK,gBAAA,CAAiB,IAAI,YAAY,CAAA;AACtC,IAAA,OAAO,GAAA;AAAA,EACX;AAAA,EAEA,MAAM,uBAAA,CACF,OAAA,GAA0C,EAAC,EACH;AACxC,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,MACR,MAAA;AAAA,MACA,mCAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAAA,EAEA,MAAM,qBAAA,GAAkE;AACpE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAwC,KAAA,EAAO,8BAA8B,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,YAAA,GAA8C;AAChD,IAAA,OAAO,IAAA,CAAK,MAAA,CAA6B,KAAA,EAAO,sBAAsB,CAAA;AAAA,EAC1E;AAAA,EAEA,MAAM,cAAc,SAAA,EAAmD;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,+BAAA,EAAkC,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,MAAA,CAA8B,KAAA,EAAO,IAAI,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAW,OAAA,EAA+C;AAC5D,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,eAAA,EAAiB,OAAO,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,oBAAoB,OAAA,EAA+C;AACrE,IAAA,OAAO,IAAA,CAAK,MAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,OAAO,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,iBAAA,GAAwD;AAC1D,IAAA,OAAO,IAAA,CAAK,QAAA,CAAoC,KAAA,EAAO,6BAA6B,CAAA;AAAA,EACxF;AAAA,EAEA,MAAM,aAAA,GAAwC;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAwB,KAAA,EAAO,oBAAoB,CAAA;AAAA,EACnE;AAAA,EAEA,MAAc,MAAA,CAAoB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AACxF,IAAA,MAAM,SAAA,GAAY,IAAA,KAAS,MAAA,GAAY,IAAI,UAAA,EAAW,GAAI,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvG,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,MAAM,eAAA,GAAkB,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,SAAS,CAAA;AACnG,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,eAAe,eAAe,CAAA;AAEhE,IAAA,MAAM,OAAA,GAAkC;AAAA,MACpC,MAAA,EAAQ,kBAAA;AAAA,MACR,CAAC,cAAc,GAAG,IAAA,CAAK,WAAA;AAAA,MACvB,CAAC,gBAAgB,GAAG,MAAA,CAAO,SAAS,CAAA;AAAA,MACpC,CAAC,YAAY,GAAG,KAAA;AAAA,MAChB,CAAC,gBAAgB,GAAG;AAAA,KACxB;AACA,IAAA,IAAI,SAAA,CAAU,MAAA,GAAS,CAAA,EAAG,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACpD,IAAA,IAAI,KAAK,aAAA,EAAe,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,aAAa,CAAA,CAAA;AAE5E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MACrD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA,EAAM,SAAA,CAAU,MAAA,GAAS,CAAA,GAAI,SAAA,GAAY;AAAA,KAC5C,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,QAAA,CAAsB,MAAA,EAAgB,IAAA,EAAc,IAAA,EAA4B;AAC1F,IAAA,MAAM,OAAA,GAAkC,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AACrE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAS,MAAA,EAAW;AACpB,MAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,MAAA,QAAA,GAAW,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,IAClC;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAI,IAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,CAAA;AAC5F,IAAA,OAAO,IAAA,CAAK,cAAiB,GAAG,CAAA;AAAA,EACpC;AAAA,EAEA,MAAc,cAAiB,GAAA,EAA2B;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACA,QAAA,MAAM,MAAA,GAAU,MAAM,GAAA,CAAI,IAAA,EAAK;AAC/B,QAAA,IAAA,GAAO,QAAQ,KAAA,IAAS,EAAA;AAAA,MAC5B,CAAA,CAAA,MAAQ;AACJ,QAAA,IAAI;AACA,UAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,QAC1B,CAAA,CAAA,MAAQ;AACJ,UAAA,IAAA,GAAO,EAAA;AAAA,QACX;AAAA,MACJ;AACA,MAAA,MAAM,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACpB,MAAA,OAAO,MAAA;AAAA,IACX;AAEA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EAC3B;AACJ","file":"client.js","sourcesContent":["export const HEADER_PRODUCT = 'X-Akira-Product';\nexport const HEADER_TIMESTAMP = 'X-Akira-Timestamp';\nexport const HEADER_NONCE = 'X-Akira-Nonce';\nexport const HEADER_SIGNATURE = 'X-Akira-Signature';\n\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n    const digest = await getSubtle().digest('SHA-256', bytes as BufferSource);\n    return bufferToHex(new Uint8Array(digest));\n}\n\nfunction getSubtle(): SubtleCrypto {\n    const subtle = globalThis.crypto?.subtle;\n    if (!subtle) {\n        throw new Error('Web Crypto SubtleCrypto API is not available in this runtime.');\n    }\n    return subtle;\n}\n\nfunction bufferToHex(buffer: Uint8Array): string {\n    let out = '';\n    for (const byte of buffer) {\n        out += byte.toString(16).padStart(2, '0');\n    }\n    return out;\n}\n\nexport function newNonce(): string {\n    const buf = new Uint8Array(16);\n    if (globalThis.crypto?.getRandomValues) {\n        globalThis.crypto.getRandomValues(buf);\n    } else {\n        for (let i = 0; i < buf.length; i += 1) {\n            buf[i] = Math.floor(Math.random() * 256);\n        }\n    }\n    return bufferToHex(buf);\n}\n\nexport async function canonical(\n    productSlug: string,\n    timestamp: number,\n    nonce: string,\n    method: string,\n    path: string,\n    body: Uint8Array,\n): Promise<string> {\n    const bodyHash = await sha256Hex(body);\n    return `${productSlug}\\n${timestamp}\\n${nonce}\\n${method.toUpperCase()}\\n${path}\\n${bodyHash}`;\n}\n\nexport async function sign(productSecret: string, canonicalString: string): Promise<string> {\n    const subtle = getSubtle();\n    const keyData = new TextEncoder().encode(productSecret) as BufferSource;\n    const key = await subtle.importKey(\n        'raw',\n        keyData,\n        { name: 'HMAC', hash: 'SHA-256' },\n        false,\n        ['sign'],\n    );\n    const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(canonicalString) as BufferSource);\n    return bufferToHex(new Uint8Array(sig));\n}\n","import {\n    HEADER_NONCE,\n    HEADER_PRODUCT,\n    HEADER_SIGNATURE,\n    HEADER_TIMESTAMP,\n    canonical,\n    newNonce,\n    sign,\n} from './signature';\nimport type {\n    BillingPortalResponse,\n    Customer,\n    EntitlementsResponse,\n    LicenseActivatePayload,\n    LicenseActivateResponse,\n    LicenseCheckPayload,\n    LicenseCheckResponse,\n    LicensePublicKeysResponse,\n    LicenseRefreshPayload,\n    LicenseSyncUsagePayload,\n    LicenseSyncUsageResponse,\n    GithubAppInfo,\n    GithubInstallationTokenPayload,\n    GithubInstallationTokenResponse,\n    GithubUserInstallationsResponse,\n    OauthExchangePayload,\n    OauthExchangeResponse,\n    OauthProvidersResponse,\n    OtpRequestPayload,\n    OtpVerifyPayload,\n    OtpVerifyResponse,\n    UsagePayload,\n    UsageResponse,\n} from './client-types';\n\nexport interface BillingClientConfig {\n    baseUrl: string;\n    productSlug: string;\n    productSecret: string;\n    customerToken?: string;\n    fetcher?: typeof fetch;\n}\n\nexport class BillingApiError extends Error {\n    status: number;\n    code: string;\n    constructor(status: number, code: string) {\n        super(`billing api ${status}: ${code}`);\n        this.status = status;\n        this.code = code;\n    }\n}\n\nexport class BillingClient {\n    private readonly baseUrl: string;\n    private readonly productSlug: string;\n    private readonly productSecret: string;\n    private customerToken: string | undefined;\n    private readonly fetcher: typeof fetch;\n\n    constructor(config: BillingClientConfig) {\n        this.baseUrl = config.baseUrl.replace(/\\/$/, '');\n        this.productSlug = config.productSlug;\n        this.productSecret = config.productSecret;\n        this.customerToken = config.customerToken;\n        this.fetcher = config.fetcher ?? globalThis.fetch;\n        if (!this.fetcher) {\n            throw new Error('No fetch implementation available. Pass `fetcher` or use a runtime with global fetch.');\n        }\n    }\n\n    setCustomerToken(token: string): void {\n        this.customerToken = token;\n    }\n\n    getBaseUrl(): string {\n        return this.baseUrl;\n    }\n\n    getProductSlug(): string {\n        return this.productSlug;\n    }\n\n    async requestOtp(payload: OtpRequestPayload): Promise<void> {\n        await this.signed('POST', '/api/auth/customer/otp/request', payload);\n    }\n\n    async verifyOtp(payload: OtpVerifyPayload): Promise<OtpVerifyResponse> {\n        const res = await this.signed<OtpVerifyResponse>('POST', '/api/auth/customer/otp/verify', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async customerMe(): Promise<Customer> {\n        return this.signed<Customer>('GET', '/api/me');\n    }\n\n    async licenseCheck(payload: LicenseCheckPayload): Promise<LicenseCheckResponse> {\n        return this.signed<LicenseCheckResponse>('POST', '/api/licenses/check', payload);\n    }\n\n    async licenseActivate(payload: LicenseActivatePayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/activate', payload);\n    }\n\n    async licenseRefresh(payload: LicenseRefreshPayload): Promise<LicenseActivateResponse> {\n        return this.signed<LicenseActivateResponse>('POST', '/api/licenses/refresh', payload);\n    }\n\n    async licenseSyncUsage(payload: LicenseSyncUsagePayload): Promise<LicenseSyncUsageResponse> {\n        return this.signed<LicenseSyncUsageResponse>('POST', '/api/licenses/sync-usage', payload);\n    }\n\n    async listOauthProviders(product: string): Promise<OauthProvidersResponse> {\n        return this.signed<OauthProvidersResponse>('GET', `/api/v1/products/${encodeURIComponent(product)}/auth/providers`);\n    }\n\n    async exchangeOauthCode(payload: OauthExchangePayload): Promise<OauthExchangeResponse> {\n        const res = await this.signed<OauthExchangeResponse>('POST', '/api/auth/oauth/exchange', payload);\n        this.setCustomerToken(res.access_token);\n        return res;\n    }\n\n    async githubInstallationToken(\n        payload: GithubInstallationTokenPayload = {},\n    ): Promise<GithubInstallationTokenResponse> {\n        return this.signed<GithubInstallationTokenResponse>(\n            'POST',\n            '/api/me/github/installation-token',\n            payload,\n        );\n    }\n\n    async meGithubInstallations(): Promise<GithubUserInstallationsResponse> {\n        return this.signed<GithubUserInstallationsResponse>('GET', '/api/me/github/installations');\n    }\n\n    async entitlements(): Promise<EntitlementsResponse> {\n        return this.signed<EntitlementsResponse>('GET', '/api/me/entitlements');\n    }\n\n    async billingPortal(returnUrl: string): Promise<BillingPortalResponse> {\n        const path = `/api/billing/portal?return_url=${encodeURIComponent(returnUrl)}`;\n        return this.signed<BillingPortalResponse>('GET', path);\n    }\n\n    async trackUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/me/usage', payload);\n    }\n\n    async trackAnonymousUsage(payload: UsagePayload): Promise<UsageResponse> {\n        return this.signed<UsageResponse>('POST', '/api/v1/usage/anonymous', payload);\n    }\n\n    async publicLicenseKeys(): Promise<LicensePublicKeysResponse> {\n        return this.unsigned<LicensePublicKeysResponse>('GET', '/api/v1/license-keys/public');\n    }\n\n    async githubAppInfo(): Promise<GithubAppInfo> {\n        return this.unsigned<GithubAppInfo>('GET', '/api/v1/github/app');\n    }\n\n    private async signed<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const bodyBytes = body === undefined ? new Uint8Array() : new TextEncoder().encode(JSON.stringify(body));\n        const timestamp = Math.floor(Date.now() / 1000);\n        const nonce = newNonce();\n        const canonicalString = await canonical(this.productSlug, timestamp, nonce, method, path, bodyBytes);\n        const signature = await sign(this.productSecret, canonicalString);\n\n        const headers: Record<string, string> = {\n            Accept: 'application/json',\n            [HEADER_PRODUCT]: this.productSlug,\n            [HEADER_TIMESTAMP]: String(timestamp),\n            [HEADER_NONCE]: nonce,\n            [HEADER_SIGNATURE]: signature,\n        };\n        if (bodyBytes.length > 0) headers['Content-Type'] = 'application/json';\n        if (this.customerToken) headers.Authorization = `Bearer ${this.customerToken}`;\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, {\n            method,\n            headers,\n            body: bodyBytes.length > 0 ? bodyBytes : undefined,\n        });\n\n        return this.parseResponse<T>(res);\n    }\n\n    private async unsigned<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n        const headers: Record<string, string> = { Accept: 'application/json' };\n        let bodyInit: BodyInit | undefined;\n        if (body !== undefined) {\n            headers['Content-Type'] = 'application/json';\n            bodyInit = JSON.stringify(body);\n        }\n\n        const res = await this.fetcher(`${this.baseUrl}${path}`, { method, headers, body: bodyInit });\n        return this.parseResponse<T>(res);\n    }\n\n    private async parseResponse<T>(res: Response): Promise<T> {\n        if (!res.ok) {\n            let code: string;\n            try {\n                const parsed = (await res.json()) as { error?: string };\n                code = parsed?.error ?? '';\n            } catch {\n                try {\n                    code = await res.text();\n                } catch {\n                    code = '';\n                }\n            }\n            throw new BillingApiError(res.status, code);\n        }\n\n        if (res.status === 204) {\n            return undefined as T;\n        }\n\n        return (await res.json()) as T;\n    }\n}\n"]}

package/dist/desktop-react.cjs

@@ -0,0 +1,26 @@
+'use strict';
+
+var react = require('react');
+
+// src/desktop/react.ts
+function useDesktopAuth(controller) {
+  const [status, setStatus] = react.useState(controller.snapshot());
+  react.useEffect(() => controller.subscribe(setStatus), [controller]);
+  return react.useMemo(() => ({
+    status,
+    bootstrap: () => controller.bootstrap(),
+    refresh: () => controller.refresh(),
+    requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),
+    verifyOtp: async (email, code, deviceFp) => {
+      await controller.verifyOtp(email, code, deviceFp);
+    },
+    oauthLogin: async (provider) => {
+      await controller.oauthLogin(provider);
+    },
+    logout: () => controller.logout()
+  }), [controller, status]);
+}
+
+exports.useDesktopAuth = useDesktopAuth;
+//# sourceMappingURL=desktop-react.cjs.map
+//# sourceMappingURL=desktop-react.cjs.map

package/dist/desktop-react.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/react.ts"],"names":["useState","useEffect","useMemo"],"mappings":";;;;;AAcO,SAAS,eAAe,UAAA,EAAkD;AAC7E,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,IAAIA,cAAA,CAA0B,UAAA,CAAW,UAAU,CAAA;AAE3E,EAAAC,eAAA,CAAU,MAAM,UAAA,CAAW,SAAA,CAAU,SAAS,CAAA,EAAG,CAAC,UAAU,CAAC,CAAA;AAE7D,EAAA,OAAOC,cAA8B,OAAO;AAAA,IACxC,MAAA;AAAA,IACA,SAAA,EAAW,MAAM,UAAA,CAAW,SAAA,EAAU;AAAA,IACtC,OAAA,EAAS,MAAM,UAAA,CAAW,OAAA,EAAQ;AAAA,IAClC,YAAY,CAAC,KAAA,EAAO,aAAa,UAAA,CAAW,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACtE,SAAA,EAAW,OAAO,KAAA,EAAO,IAAA,EAAM,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACjG,UAAA,EAAY,OAAO,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,WAAW,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACzE,MAAA,EAAQ,MAAM,UAAA,CAAW,MAAA;AAAO,GACpC,CAAA,EAAI,CAAC,UAAA,EAAY,MAAM,CAAC,CAAA;AAC5B","file":"desktop-react.cjs","sourcesContent":["import { useEffect, useMemo, useState } from 'react';\n\nimport type { AuthController, AuthStatusState } from './use-auth';\n\nexport interface UseDesktopAuthResult {\n    status: AuthStatusState;\n    bootstrap: () => Promise<void>;\n    refresh: () => Promise<void>;\n    requestOtp: (email: string, deviceFp?: string) => Promise<void>;\n    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;\n    oauthLogin: (provider: string) => Promise<void>;\n    logout: () => Promise<void>;\n}\n\nexport function useDesktopAuth(controller: AuthController): UseDesktopAuthResult {\n    const [status, setStatus] = useState<AuthStatusState>(controller.snapshot());\n\n    useEffect(() => controller.subscribe(setStatus), [controller]);\n\n    return useMemo<UseDesktopAuthResult>(() => ({\n        status,\n        bootstrap: () => controller.bootstrap(),\n        refresh: () => controller.refresh(),\n        requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),\n        verifyOtp: async (email, code, deviceFp) => { await controller.verifyOtp(email, code, deviceFp); },\n        oauthLogin: async (provider) => { await controller.oauthLogin(provider); },\n        logout: () => controller.logout(),\n    }), [controller, status]);\n}\n"]}

package/dist/desktop-react.d.cts

@@ -0,0 +1,17 @@
+import { b as AuthStatusState, A as AuthController } from './use-auth-BzN6Wcpm.cjs';
+import './client.cjs';
+import './client-types-CtRkHWna.cjs';
+import './loopback.cjs';
+
+interface UseDesktopAuthResult {
+    status: AuthStatusState;
+    bootstrap: () => Promise<void>;
+    refresh: () => Promise<void>;
+    requestOtp: (email: string, deviceFp?: string) => Promise<void>;
+    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;
+    oauthLogin: (provider: string) => Promise<void>;
+    logout: () => Promise<void>;
+}
+declare function useDesktopAuth(controller: AuthController): UseDesktopAuthResult;
+
+export { type UseDesktopAuthResult, useDesktopAuth };

package/dist/desktop-react.d.ts

@@ -0,0 +1,17 @@
+import { b as AuthStatusState, A as AuthController } from './use-auth-Bf4NrNdE.js';
+import './client.js';
+import './client-types-CtRkHWna.js';
+import './loopback.js';
+
+interface UseDesktopAuthResult {
+    status: AuthStatusState;
+    bootstrap: () => Promise<void>;
+    refresh: () => Promise<void>;
+    requestOtp: (email: string, deviceFp?: string) => Promise<void>;
+    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;
+    oauthLogin: (provider: string) => Promise<void>;
+    logout: () => Promise<void>;
+}
+declare function useDesktopAuth(controller: AuthController): UseDesktopAuthResult;
+
+export { type UseDesktopAuthResult, useDesktopAuth };

package/dist/desktop-react.js

@@ -0,0 +1,24 @@
+import { useState, useEffect, useMemo } from 'react';
+
+// src/desktop/react.ts
+function useDesktopAuth(controller) {
+  const [status, setStatus] = useState(controller.snapshot());
+  useEffect(() => controller.subscribe(setStatus), [controller]);
+  return useMemo(() => ({
+    status,
+    bootstrap: () => controller.bootstrap(),
+    refresh: () => controller.refresh(),
+    requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),
+    verifyOtp: async (email, code, deviceFp) => {
+      await controller.verifyOtp(email, code, deviceFp);
+    },
+    oauthLogin: async (provider) => {
+      await controller.oauthLogin(provider);
+    },
+    logout: () => controller.logout()
+  }), [controller, status]);
+}
+
+export { useDesktopAuth };
+//# sourceMappingURL=desktop-react.js.map
+//# sourceMappingURL=desktop-react.js.map

package/dist/desktop-react.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/react.ts"],"names":[],"mappings":";;;AAcO,SAAS,eAAe,UAAA,EAAkD;AAC7E,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,IAAI,QAAA,CAA0B,UAAA,CAAW,UAAU,CAAA;AAE3E,EAAA,SAAA,CAAU,MAAM,UAAA,CAAW,SAAA,CAAU,SAAS,CAAA,EAAG,CAAC,UAAU,CAAC,CAAA;AAE7D,EAAA,OAAO,QAA8B,OAAO;AAAA,IACxC,MAAA;AAAA,IACA,SAAA,EAAW,MAAM,UAAA,CAAW,SAAA,EAAU;AAAA,IACtC,OAAA,EAAS,MAAM,UAAA,CAAW,OAAA,EAAQ;AAAA,IAClC,YAAY,CAAC,KAAA,EAAO,aAAa,UAAA,CAAW,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACtE,SAAA,EAAW,OAAO,KAAA,EAAO,IAAA,EAAM,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACjG,UAAA,EAAY,OAAO,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,WAAW,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACzE,MAAA,EAAQ,MAAM,UAAA,CAAW,MAAA;AAAO,GACpC,CAAA,EAAI,CAAC,UAAA,EAAY,MAAM,CAAC,CAAA;AAC5B","file":"desktop-react.js","sourcesContent":["import { useEffect, useMemo, useState } from 'react';\n\nimport type { AuthController, AuthStatusState } from './use-auth';\n\nexport interface UseDesktopAuthResult {\n    status: AuthStatusState;\n    bootstrap: () => Promise<void>;\n    refresh: () => Promise<void>;\n    requestOtp: (email: string, deviceFp?: string) => Promise<void>;\n    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;\n    oauthLogin: (provider: string) => Promise<void>;\n    logout: () => Promise<void>;\n}\n\nexport function useDesktopAuth(controller: AuthController): UseDesktopAuthResult {\n    const [status, setStatus] = useState<AuthStatusState>(controller.snapshot());\n\n    useEffect(() => controller.subscribe(setStatus), [controller]);\n\n    return useMemo<UseDesktopAuthResult>(() => ({\n        status,\n        bootstrap: () => controller.bootstrap(),\n        refresh: () => controller.refresh(),\n        requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),\n        verifyOtp: async (email, code, deviceFp) => { await controller.verifyOtp(email, code, deviceFp); },\n        oauthLogin: async (provider) => { await controller.oauthLogin(provider); },\n        logout: () => controller.logout(),\n    }), [controller, status]);\n}\n"]}

package/dist/desktop-vue.cjs

@@ -0,0 +1,29 @@
+'use strict';
+
+var vue = require('vue');
+
+// src/desktop/vue.ts
+function useDesktopAuth(controller) {
+  const status = vue.ref(controller.snapshot());
+  const unsubscribe = controller.subscribe((next) => {
+    status.value = next;
+  });
+  vue.onBeforeUnmount(() => unsubscribe());
+  return {
+    status,
+    bootstrap: () => controller.bootstrap(),
+    refresh: () => controller.refresh(),
+    requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),
+    verifyOtp: async (email, code, deviceFp) => {
+      await controller.verifyOtp(email, code, deviceFp);
+    },
+    oauthLogin: async (provider) => {
+      await controller.oauthLogin(provider);
+    },
+    logout: () => controller.logout()
+  };
+}
+
+exports.useDesktopAuth = useDesktopAuth;
+//# sourceMappingURL=desktop-vue.cjs.map
+//# sourceMappingURL=desktop-vue.cjs.map

package/dist/desktop-vue.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/vue.ts"],"names":["ref","onBeforeUnmount"],"mappings":";;;;;AAcO,SAAS,eAAe,UAAA,EAAkD;AAC7E,EAAA,MAAM,MAAA,GAASA,OAAA,CAAqB,UAAA,CAAW,QAAA,EAAU,CAAA;AACzD,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,SAAA,CAAU,CAAC,IAAA,KAAS;AAC/C,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AAAA,EACnB,CAAC,CAAA;AACD,EAAAC,mBAAA,CAAgB,MAAM,aAAa,CAAA;AAEnC,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,SAAA,EAAW,MAAM,UAAA,CAAW,SAAA,EAAU;AAAA,IACtC,OAAA,EAAS,MAAM,UAAA,CAAW,OAAA,EAAQ;AAAA,IAClC,YAAY,CAAC,KAAA,EAAO,aAAa,UAAA,CAAW,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACtE,SAAA,EAAW,OAAO,KAAA,EAAO,IAAA,EAAM,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACjG,UAAA,EAAY,OAAO,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,WAAW,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACzE,MAAA,EAAQ,MAAM,UAAA,CAAW,MAAA;AAAO,GACpC;AACJ","file":"desktop-vue.cjs","sourcesContent":["import { onBeforeUnmount, ref, type Ref } from 'vue';\n\nimport type { AuthController, AuthStatusState } from './use-auth';\n\nexport interface UseDesktopAuthResult {\n    status: Ref<AuthStatusState>;\n    bootstrap: () => Promise<void>;\n    refresh: () => Promise<void>;\n    requestOtp: (email: string, deviceFp?: string) => Promise<void>;\n    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;\n    oauthLogin: (provider: string) => Promise<void>;\n    logout: () => Promise<void>;\n}\n\nexport function useDesktopAuth(controller: AuthController): UseDesktopAuthResult {\n    const status = ref<AuthStatusState>(controller.snapshot());\n    const unsubscribe = controller.subscribe((next) => {\n        status.value = next;\n    });\n    onBeforeUnmount(() => unsubscribe());\n\n    return {\n        status,\n        bootstrap: () => controller.bootstrap(),\n        refresh: () => controller.refresh(),\n        requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),\n        verifyOtp: async (email, code, deviceFp) => { await controller.verifyOtp(email, code, deviceFp); },\n        oauthLogin: async (provider) => { await controller.oauthLogin(provider); },\n        logout: () => controller.logout(),\n    };\n}\n"]}

package/dist/desktop-vue.d.cts

@@ -0,0 +1,18 @@
+import { Ref } from 'vue';
+import { b as AuthStatusState, A as AuthController } from './use-auth-BzN6Wcpm.cjs';
+import './client.cjs';
+import './client-types-CtRkHWna.cjs';
+import './loopback.cjs';
+
+interface UseDesktopAuthResult {
+    status: Ref<AuthStatusState>;
+    bootstrap: () => Promise<void>;
+    refresh: () => Promise<void>;
+    requestOtp: (email: string, deviceFp?: string) => Promise<void>;
+    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;
+    oauthLogin: (provider: string) => Promise<void>;
+    logout: () => Promise<void>;
+}
+declare function useDesktopAuth(controller: AuthController): UseDesktopAuthResult;
+
+export { type UseDesktopAuthResult, useDesktopAuth };

package/dist/desktop-vue.d.ts

@@ -0,0 +1,18 @@
+import { Ref } from 'vue';
+import { b as AuthStatusState, A as AuthController } from './use-auth-Bf4NrNdE.js';
+import './client.js';
+import './client-types-CtRkHWna.js';
+import './loopback.js';
+
+interface UseDesktopAuthResult {
+    status: Ref<AuthStatusState>;
+    bootstrap: () => Promise<void>;
+    refresh: () => Promise<void>;
+    requestOtp: (email: string, deviceFp?: string) => Promise<void>;
+    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;
+    oauthLogin: (provider: string) => Promise<void>;
+    logout: () => Promise<void>;
+}
+declare function useDesktopAuth(controller: AuthController): UseDesktopAuthResult;
+
+export { type UseDesktopAuthResult, useDesktopAuth };

package/dist/desktop-vue.js

@@ -0,0 +1,27 @@
+import { ref, onBeforeUnmount } from 'vue';
+
+// src/desktop/vue.ts
+function useDesktopAuth(controller) {
+  const status = ref(controller.snapshot());
+  const unsubscribe = controller.subscribe((next) => {
+    status.value = next;
+  });
+  onBeforeUnmount(() => unsubscribe());
+  return {
+    status,
+    bootstrap: () => controller.bootstrap(),
+    refresh: () => controller.refresh(),
+    requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),
+    verifyOtp: async (email, code, deviceFp) => {
+      await controller.verifyOtp(email, code, deviceFp);
+    },
+    oauthLogin: async (provider) => {
+      await controller.oauthLogin(provider);
+    },
+    logout: () => controller.logout()
+  };
+}
+
+export { useDesktopAuth };
+//# sourceMappingURL=desktop-vue.js.map
+//# sourceMappingURL=desktop-vue.js.map

package/dist/desktop-vue.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/desktop/vue.ts"],"names":[],"mappings":";;;AAcO,SAAS,eAAe,UAAA,EAAkD;AAC7E,EAAA,MAAM,MAAA,GAAS,GAAA,CAAqB,UAAA,CAAW,QAAA,EAAU,CAAA;AACzD,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,SAAA,CAAU,CAAC,IAAA,KAAS;AAC/C,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AAAA,EACnB,CAAC,CAAA;AACD,EAAA,eAAA,CAAgB,MAAM,aAAa,CAAA;AAEnC,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,SAAA,EAAW,MAAM,UAAA,CAAW,SAAA,EAAU;AAAA,IACtC,OAAA,EAAS,MAAM,UAAA,CAAW,OAAA,EAAQ;AAAA,IAClC,YAAY,CAAC,KAAA,EAAO,aAAa,UAAA,CAAW,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACtE,SAAA,EAAW,OAAO,KAAA,EAAO,IAAA,EAAM,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACjG,UAAA,EAAY,OAAO,QAAA,KAAa;AAAE,MAAA,MAAM,UAAA,CAAW,WAAW,QAAQ,CAAA;AAAA,IAAG,CAAA;AAAA,IACzE,MAAA,EAAQ,MAAM,UAAA,CAAW,MAAA;AAAO,GACpC;AACJ","file":"desktop-vue.js","sourcesContent":["import { onBeforeUnmount, ref, type Ref } from 'vue';\n\nimport type { AuthController, AuthStatusState } from './use-auth';\n\nexport interface UseDesktopAuthResult {\n    status: Ref<AuthStatusState>;\n    bootstrap: () => Promise<void>;\n    refresh: () => Promise<void>;\n    requestOtp: (email: string, deviceFp?: string) => Promise<void>;\n    verifyOtp: (email: string, code: string, deviceFp?: string) => Promise<void>;\n    oauthLogin: (provider: string) => Promise<void>;\n    logout: () => Promise<void>;\n}\n\nexport function useDesktopAuth(controller: AuthController): UseDesktopAuthResult {\n    const status = ref<AuthStatusState>(controller.snapshot());\n    const unsubscribe = controller.subscribe((next) => {\n        status.value = next;\n    });\n    onBeforeUnmount(() => unsubscribe());\n\n    return {\n        status,\n        bootstrap: () => controller.bootstrap(),\n        refresh: () => controller.refresh(),\n        requestOtp: (email, deviceFp) => controller.requestOtp(email, deviceFp),\n        verifyOtp: async (email, code, deviceFp) => { await controller.verifyOtp(email, code, deviceFp); },\n        oauthLogin: async (provider) => { await controller.oauthLogin(provider); },\n        logout: () => controller.logout(),\n    };\n}\n"]}

package/dist/desktop.cjs

@@ -0,0 +1,194 @@
+'use strict';
+
+var child_process = require('child_process');
+var crypto = require('crypto');
+var os = require('os');
+
+// src/desktop/browser.ts
+function openBrowser(url) {
+  return new Promise((resolve, reject) => {
+    let cmd;
+    let args;
+    switch (process.platform) {
+      case "darwin":
+        cmd = "open";
+        args = [url];
+        break;
+      case "win32":
+        cmd = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+        break;
+      default:
+        cmd = "xdg-open";
+        args = [url];
+    }
+    const child = child_process.spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.once("error", reject);
+    child.unref();
+    resolve();
+  });
+}
+async function machineId() {
+  const dyn = new Function("m", "return import(m)");
+  try {
+    const mod = await dyn("node-machine-id").catch(() => null);
+    if (mod?.machineIdSync) return mod.machineIdSync(true);
+  } catch {
+  }
+  return os.hostname();
+}
+async function deviceFingerprint(appVersion) {
+  const id = await machineId();
+  const plat = os.platform();
+  const hash = crypto.createHash("sha256");
+  hash.update(id);
+  hash.update("::");
+  hash.update(plat);
+  hash.update("::");
+  hash.update(appVersion);
+  return {
+    fingerprint: hash.digest("hex"),
+    platform: plat,
+    app_version: appVersion
+  };
+}
+
+// src/desktop/keyring.ts
+async function loadKeytar() {
+  const dyn = new Function("m", "return import(m)");
+  const mod = await dyn("keytar").catch(() => null);
+  if (!mod) throw new Error("TokenKeyring: install `keytar` to use the desktop keyring helper.");
+  return mod.default ?? mod;
+}
+var TokenKeyring = class {
+  service;
+  account;
+  constructor(opts) {
+    this.service = opts.service;
+    this.account = opts.account;
+  }
+  async get() {
+    const k = await loadKeytar();
+    return k.getPassword(this.service, this.account);
+  }
+  async set(value) {
+    const k = await loadKeytar();
+    await k.setPassword(this.service, this.account, value);
+  }
+  async delete() {
+    const k = await loadKeytar();
+    await k.deletePassword(this.service, this.account);
+  }
+};
+
+// src/desktop/session.ts
+var SessionStore = class {
+  constructor(keyring) {
+    this.keyring = keyring;
+  }
+  keyring;
+  async hydrate(client) {
+    const token = await this.keyring.get();
+    if (!token) return false;
+    client.setCustomerToken(token);
+    return true;
+  }
+  async persist(client, token) {
+    await this.keyring.set(token);
+    client.setCustomerToken(token);
+  }
+  async clear(client) {
+    await this.keyring.delete();
+    client.setCustomerToken("");
+  }
+  async hasToken() {
+    const v = await this.keyring.get();
+    return !!v;
+  }
+};
+
+// src/desktop/use-auth.ts
+var AuthController = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  opts;
+  listeners = /* @__PURE__ */ new Set();
+  current = { state: "loading" };
+  subscribe(listener) {
+    this.listeners.add(listener);
+    listener(this.current);
+    return () => this.listeners.delete(listener);
+  }
+  snapshot() {
+    return this.current;
+  }
+  emit(next) {
+    this.current = next;
+    this.listeners.forEach((l) => l(next));
+  }
+  async bootstrap() {
+    await this.opts.session.hydrate(this.opts.client);
+    await this.refresh();
+  }
+  async refresh() {
+    if (!await this.opts.session.hasToken()) {
+      this.emit({ state: "guest" });
+      return;
+    }
+    try {
+      const customer = await this.opts.client.customerMe();
+      const licensed = this.opts.checkLicense ? await this.opts.checkLicense(this.opts.client) : await this.runDefaultLicenseCheck();
+      this.emit({ state: "authenticated", customer, licensed });
+    } catch (e) {
+      if (e.status === 401) {
+        await this.opts.session.clear(this.opts.client);
+        this.emit({ state: "guest" });
+        return;
+      }
+      throw e;
+    }
+  }
+  async runDefaultLicenseCheck() {
+    try {
+      const resp = await this.opts.client.licenseCheck({
+        product: this.opts.product,
+        feature: this.opts.feature ?? "general"
+      });
+      return resp.allowed;
+    } catch {
+      return false;
+    }
+  }
+  async requestOtp(email, deviceFp) {
+    await this.opts.client.requestOtp({ email, device_fp: deviceFp ?? "" });
+  }
+  async verifyOtp(email, code, deviceFp) {
+    const resp = await this.opts.client.verifyOtp({
+      email,
+      code,
+      device_fp: deviceFp ?? ""
+    });
+    await this.opts.session.persist(this.opts.client, resp.access_token);
+    await this.refresh();
+    return await this.opts.client.customerMe();
+  }
+  async oauthLogin(provider) {
+    const outcome = await this.opts.loopbackLogin(provider);
+    await this.opts.session.persist(this.opts.client, outcome.exchange.access_token);
+    await this.refresh();
+    return outcome.exchange;
+  }
+  async logout() {
+    await this.opts.session.clear(this.opts.client);
+    this.emit({ state: "guest" });
+  }
+};
+
+exports.AuthController = AuthController;
+exports.SessionStore = SessionStore;
+exports.TokenKeyring = TokenKeyring;
+exports.deviceFingerprint = deviceFingerprint;
+exports.openBrowser = openBrowser;
+//# sourceMappingURL=desktop.cjs.map
+//# sourceMappingURL=desktop.cjs.map