@arkadiadev/sdk 0.0.0-stage → 1.1.0

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+## 1.1.0
+
+Première version publiée sur npm (la 1.0.0 était un fichier à copier).
+
+- Utilise l'API v1 (`/v1/events`) : acceptation partielle, callback `onRejected`.
+- Nouvelles méthodes `status()`, `analytics()`, `shutdown()` et `createArkadiaClient()`.
+- Nouveau point d'entrée `@arkadiadev/sdk/webhooks` (`verifyWebhookSignature`, `constructWebhookEvent`).
+- Corrigé : les envois à la fermeture de page (sendBeacon) étaient refusés faute d'en-tête `Authorization` ; ils passent désormais par `fetch` keepalive et sont rejoués sans doublon s'ils n'aboutissent pas.
+- Corrigé : lots limités à 20 events pour les clés test (au-delà, le serveur rejetait le lot).
+- Corrigé : la clé d'idempotence est conservée d'un essai à l'autre ; `Retry-After` est respecté ; un quota mensuel atteint n'est plus réessayé en boucle.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Arkadia Dev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,114 @@
-# Temporary Holding Version
+# @arkadiadev/sdk
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+SDK officiel de l'API **Arkadia** : envoyez l'activité et les ventes de votre application, lisez votre quota et vos statistiques, vérifiez les webhooks.
+
+- Aucune dépendance · navigateur, Node.js 18+, React Native
+- File d'attente hors ligne, renvois automatiques sans doublon (clé d'idempotence)
+- Types TypeScript inclus
+
+## Installation
+
+```bash
+npm install @arkadiadev/sdk
+```
+
+Sans bundler, en `<script>` :
+
+```html
+<script src="https://cdn.jsdelivr.net/npm/@arkadiadev/sdk@1.1.0/dist/arkadia.global.js"></script>
+<script>
+  ArkadiaClient.init({ apiKey: 'ark_live_…', appCode: 'APP-XXXX-XXXX' });
+</script>
+```
+
+## Démarrage
+
+```js
+import { ArkadiaClient } from '@arkadiadev/sdk';
+
+await ArkadiaClient.init({
+  apiKey: 'ark_live_…',      // onglet « API » de votre espace Arkadia
+  appCode: 'APP-XXXX-XXXX',
+  platform: 'web',           // 'web' | 'node' | 'react-native' | …
+  appVersion: '2.3.0',
+  debug: false,
+});
+
+ArkadiaClient.screenView('dashboard', { previousScreen: 'login' });
+ArkadiaClient.featureUsed('export_pdf', { metadata: { format: 'a4' } });
+ArkadiaClient.purchaseCompleted('module-crm', 'Module CRM', 250000, { userId: hashedUserId });
+```
+
+Les events sont regroupés et envoyés toutes les 30 secondes, dès que le lot est plein, à la fermeture de la page, ou quand vous appelez `ArkadiaClient.flush()`. Les crashs partent immédiatement.
+
+> Les montants sont en **centimes** de la devise de votre compte (XOF par défaut). Pour `userId`, envoyez un identifiant **anonymisé** (un hash, par exemple).
+
+### Méthodes
+
+| Méthode | Event envoyé |
+|---|---|
+| `track(event, { properties, userId, sessionId })` | n'importe quel event du catalogue |
+| `screenView(screen, { previousScreen })` | `app.screen_view` |
+| `sessionStart()` / `sessionEnd(durationSeconds)` | `app.session_start` / `app.session_end` |
+| `featureUsed(name, { metadata })` | `app.feature_used` |
+| `crash(type, message, { stackTrace })` | `app.crash` (envoi immédiat) |
+| `subscriptionStarted(plan, montant, interval)` | `sale.subscription_started` |
+| `subscriptionCancelled(plan, { reason, daysActive })` | `sale.subscription_cancelled` |
+| `purchaseCompleted(productId, productName, montant)` | `sale.purchase_completed` |
+| `trialStarted(plan, jours)` / `trialConverted(plan, montant)` | `sale.trial_started` / `sale.trial_converted` |
+
+### Lire son quota et ses statistiques
+
+```js
+const { quota } = await ArkadiaClient.status();
+console.log(`${quota.used_this_month} / ${quota.limit} events ce mois`);
+
+const { days } = await ArkadiaClient.analytics({ from: '2026-09-01', to: '2026-09-30' });
+```
+
+Ces deux méthodes lèvent une `ArkadiaApiError` (`status`, `code`, `body`) en cas d'erreur.
+
+### Node.js (scripts, serveurs)
+
+Appelez `await ArkadiaClient.shutdown()` avant la fin du processus pour envoyer les derniers events. Pour envoyer au nom de plusieurs apps, créez un client par app avec `createArkadiaClient()`.
+
+## Webhooks
+
+Arkadia peut appeler votre serveur à chaque vente, crash ou alerte de quota (configuration dans l'onglet « API » de votre espace). Chaque requête est signée : **vérifiez-la toujours** sur le corps brut.
+
+```js
+import express from 'express';
+import { constructWebhookEvent } from '@arkadiadev/sdk/webhooks';
+
+const app = express();
+
+app.post('/webhooks/arkadia', express.raw({ type: 'application/json' }), (req, res) => {
+  let event;
+  try {
+    event = constructWebhookEvent(req.body, req.get('X-Arkadia-Signature'), process.env.ARKADIA_WEBHOOK_SECRET);
+  } catch {
+    return res.sendStatus(400);
+  }
+
+  if (event.type === 'events') {
+    for (const ev of event.data.events) {
+      // ev.event === 'sale.purchase_completed', ev.properties.amount, …
+    }
+  }
+  res.sendStatus(200); // répondez vite (< 10 s) ; traitez en arrière-plan si besoin
+});
+```
+
+- Répondez par un code **2xx** ; sinon Arkadia réessaie (1 min, 5 min, 15 min, 1 h, 3 h, 6 h, 12 h).
+- Une même livraison peut arriver deux fois : dédupliquez sur `event.id` (aussi dans l'en-tête `X-Arkadia-Delivery`).
+- Types : `events`, `quota.warning`, `quota.exceeded`, `webhook.test`.
+
+## Limites
+
+| | Clé live | Clé test |
+|---|---|---|
+| Events par requête | 50 | 20 |
+| Events par minute | 300 | 60 |
+| Lectures (`status`, `analytics`) par minute | 60 | 30 |
+
+Le SDK respecte automatiquement ces limites et l'en-tête `Retry-After`.

package/dist/arkadia.global.js

@@ -0,0 +1,2 @@
+var ArkadiaSDK=(()=>{var T=Object.defineProperty;var V=Object.getOwnPropertyDescriptor;var K=Object.getOwnPropertyNames;var L=Object.prototype.hasOwnProperty;var D=(i,a)=>{for(var s in a)T(i,s,{get:a[s],enumerable:!0})},q=(i,a,s,c)=>{if(a&&typeof a=="object"||typeof a=="function")for(let o of K(a))!L.call(i,o)&&o!==s&&T(i,o,{get:()=>a[o],enumerable:!(c=V(a,o))||c.enumerable});return i};var P=i=>q(T({},"__esModule",{value:!0}),i);var B={};D(B,{ArkadiaApiError:()=>y,ArkadiaClient:()=>j,DEFAULT_BASE_URL:()=>U,SDK_VERSION:()=>$,createArkadiaClient:()=>x,default:()=>J});var $="1.1.0",U="https://europe-west1-arkadiadev.cloudfunctions.net/arkadiaApi",S="arkadia_offline_queue";var y=class extends Error{constructor(a,s){super(s?.message||`Erreur API Arkadia (${a})`),this.name="ArkadiaApiError",this.status=a,this.code=s?.error??null,this.body=s}};function Q(){let i={},a={get:s=>i[s]??null,set:(s,c)=>{i[s]=c},remove:s=>{delete i[s]}};try{let s=globalThis.localStorage;return s?(s.setItem("__arkadia_test__","1"),s.removeItem("__arkadia_test__"),{get:c=>{try{return JSON.parse(s.getItem(c))}catch{return null}},set:(c,o)=>{try{s.setItem(c,JSON.stringify(o))}catch{}},remove:c=>{try{s.removeItem(c)}catch{}}}):a}catch{return a}}function A(){let i=globalThis.crypto;if(i?.randomUUID)return i.randomUUID();let a=new Uint8Array(16);if(i?.getRandomValues)i.getRandomValues(a);else for(let c=0;c<16;c++)a[c]=Math.floor(Math.random()*256);a[6]=a[6]&15|64,a[8]=a[8]&63|128;let s=[...a].map(c=>c.toString(16).padStart(2,"0")).join("");return`${s.slice(0,8)}-${s.slice(8,12)}-${s.slice(12,16)}-${s.slice(16,20)}-${s.slice(20)}`}var d=i=>Object.fromEntries(Object.entries(i).filter(([,a])=>a!=null));function x(i={}){let a=i.fetch??((...e)=>globalThis.fetch(...e)),s=i.sleep??(e=>new Promise(n=>setTimeout(n,e))),c=i.now??(()=>new Date),o=null,g=i.storage??null,f=null,I=!1,m=[],p=(...e)=>{o?.debug&&console.log("[Arkadia]",...e)},_=()=>o.apiKey.startsWith("ark_test_")?20:50,v=e=>`${o.baseUrl.replace(/\/+$/,"")}/v1${e}`,b=(e={})=>({Authorization:`Bearer ${o.apiKey}`,"X-Arkadia-Version":"1",...e});function w(){let e=g.get(S);return Array.isArray(e)?e.length&&!e[0]?.events?[{id:A(),events:e}]:e:[]}function M(e,n){let t=w().filter(l=>l.id!==n);t.push({id:n,events:e});let r=t.reduce((l,h)=>l+h.events.length,0);for(;r>500&&t.length>1;)r-=t.shift().events.length;g.set(S,t),p(`${e.length} events gard\xE9s hors ligne (total : ${r})`)}function R(e){let n=w().filter(t=>t.id!==e);n.length?g.set(S,n):g.remove(S)}function N(e,n){let t=Number(e.headers?.get?.("retry-after"));return Number.isFinite(t)&&t>0?Math.min(t*1e3,6e4):n}async function k(e,n=A()){for(let t=0;t<=3;t++){let r;try{r=await a(v("/events"),{method:"POST",headers:b({"Content-Type":"application/json","X-Idempotency-Key":n}),body:JSON.stringify({appCode:o.appCode,batch:e}),signal:AbortSignal.timeout?.(15e3)})}catch(h){p(`Erreur r\xE9seau (tentative ${t+1}) :`,h?.message??h),t<3&&await s(2**t*1e3);continue}let l=await r.json().catch(()=>null);if(r.ok)return p(`Lot accept\xE9 \u2014 ${l?.ingested??e.length} events`),l?.rejected?.length&&(p("Events rejet\xE9s :",l.rejected),o.onRejected?.(l.rejected,e)),"sent";if(r.status===429&&l?.error==="quota_exceeded")return p("Quota mensuel atteint \u2014 lot abandonn\xE9"),"dropped";if(r.status===429||r.status===409){let h=N(r,5e3);p(`${r.status} \u2014 nouvel essai dans ${Math.round(h/1e3)} s`),t<3&&await s(h);continue}if(r.status>=400&&r.status<500)return p(`Erreur ${r.status} (${l?.error}) \u2014 lot abandonn\xE9 :`,l?.message),"dropped";p(`Erreur serveur ${r.status} (tentative ${t+1})`),t<3&&await s(2**t*1e3)}return M(e,n),"offline"}async function E(){for(;m.length;)await k(m.splice(0,_()))}async function X(){let e=w();if(e.length){p(`Renvoi de ${e.length} lot(s) hors ligne`);for(let{id:n,events:t}of e){R(n);for(let r=0;r<t.length;r+=_()){let l=t.slice(r,r+_());await k(l,t.length<=_()?n:`${n}-${r}`)}}}}function O(){if(!m.length)return;let e=m.splice(0,_()),n=A();M(e,n);try{a(v("/events"),{method:"POST",keepalive:!0,headers:b({"Content-Type":"application/json","X-Idempotency-Key":n}),body:JSON.stringify({appCode:o.appCode,batch:e})}).then(t=>{t.ok&&R(n)},()=>{})}catch{}}async function F(e){if(!e?.apiKey||!e?.appCode)throw new Error("ArkadiaClient.init : apiKey et appCode sont requis.");o={platform:"web",appVersion:"1.0.0",debug:!1,baseUrl:U,flushIntervalMs:3e4,...e},g=g??Q(),f&&clearInterval(f),f=setInterval(()=>{E().catch(()=>{})},o.flushIntervalMs),f.unref?.();let n=globalThis.document;!I&&globalThis.addEventListener&&n&&(globalThis.addEventListener("pagehide",O),n.addEventListener("visibilitychange",()=>{n.visibilityState==="hidden"&&O()}),I=!0),p(`SDK ${$} initialis\xE9 \u2014 appCode ${o.appCode}`),await X()}function u(e,{properties:n,sessionId:t,userId:r}={}){if(!o){console.warn(`[Arkadia] SDK non initialis\xE9 \u2014 event ignor\xE9 : ${e}`);return}m.push(d({event:e,timestamp:c().toISOString(),properties:n??{},context:{platform:o.platform,appVersion:o.appVersion,sdkVersion:$},sessionId:t,userId:r})),m.length>=_()&&E().catch(()=>{})}async function C(e){if(!o)throw new Error("ArkadiaClient non initialis\xE9.");let n=await a(v(e),{headers:b(),signal:AbortSignal.timeout?.(15e3)}),t=await n.json().catch(()=>null);if(!n.ok)throw new y(n.status,t);return t}return{init:F,track:u,flush:()=>E(),async shutdown(){f&&clearInterval(f),f=null,await E()},status:()=>C("/status"),analytics:({from:e,to:n}={})=>{let t=new URLSearchParams(d({from:e,to:n})).toString();return C(`/analytics${t?`?${t}`:""}`)},screenView(e,{previousScreen:n,userId:t,sessionId:r}={}){u("app.screen_view",{properties:d({screen:e,previousScreen:n}),sessionId:r,userId:t})},sessionStart({userId:e,sessionId:n}={}){u("app.session_start",{sessionId:n,userId:e})},sessionEnd(e,{userId:n,sessionId:t}={}){u("app.session_end",{properties:{durationSeconds:e},sessionId:t,userId:n})},featureUsed(e,{metadata:n,userId:t,sessionId:r}={}){u("app.feature_used",{properties:d({featureName:e,metadata:n}),sessionId:r,userId:t})},crash(e,n,{stackTrace:t,userId:r,sessionId:l}={}){u("app.crash",{properties:d({errorType:e,errorMessage:String(n).slice(0,500),stackTrace:t!=null?String(t).slice(0,2e3):null}),sessionId:l,userId:r}),E().catch(()=>{})},subscriptionStarted(e,n,t,{userId:r,couponCode:l}={}){u("sale.subscription_started",{properties:d({plan:e,amount:n,interval:t,couponCode:l}),userId:r})},subscriptionCancelled(e,{reason:n,daysActive:t,userId:r}={}){u("sale.subscription_cancelled",{properties:d({plan:e,reason:n,daysActive:t}),userId:r})},purchaseCompleted(e,n,t,{userId:r,couponCode:l}={}){u("sale.purchase_completed",{properties:d({productId:e,productName:n,amount:t,couponCode:l}),userId:r})},trialStarted(e,n,{userId:t}={}){u("sale.trial_started",{properties:{plan:e,trialDays:n},userId:t})},trialConverted(e,n,{userId:t}={}){u("sale.trial_converted",{properties:{plan:e,amount:n},userId:t})}}}var j=x(),J=j;return P(B);})();
+window.ArkadiaClient=ArkadiaSDK.ArkadiaClient;

package/dist/index.cjs

@@ -0,0 +1,336 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.js
+var index_exports = {};
+__export(index_exports, {
+  ArkadiaApiError: () => ArkadiaApiError,
+  ArkadiaClient: () => ArkadiaClient,
+  DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
+  SDK_VERSION: () => SDK_VERSION,
+  createArkadiaClient: () => createArkadiaClient,
+  default: () => index_default
+});
+module.exports = __toCommonJS(index_exports);
+var SDK_VERSION = "1.1.0";
+var DEFAULT_BASE_URL = "https://europe-west1-arkadiadev.cloudfunctions.net/arkadiaApi";
+var OFFLINE_KEY = "arkadia_offline_queue";
+var MAX_OFFLINE_EVENTS = 500;
+var MAX_RETRIES = 3;
+var MAX_RETRY_AFTER_MS = 6e4;
+var REQUEST_TIMEOUT_MS = 15e3;
+var ArkadiaApiError = class extends Error {
+  constructor(status, body) {
+    super(body?.message || `Erreur API Arkadia (${status})`);
+    this.name = "ArkadiaApiError";
+    this.status = status;
+    this.code = body?.error ?? null;
+    this.body = body;
+  }
+};
+function defaultStorage() {
+  const mem = {};
+  const memory = {
+    get: (k) => mem[k] ?? null,
+    set: (k, v) => {
+      mem[k] = v;
+    },
+    remove: (k) => {
+      delete mem[k];
+    }
+  };
+  try {
+    const ls = globalThis.localStorage;
+    if (!ls) return memory;
+    ls.setItem("__arkadia_test__", "1");
+    ls.removeItem("__arkadia_test__");
+    return {
+      get: (k) => {
+        try {
+          return JSON.parse(ls.getItem(k));
+        } catch {
+          return null;
+        }
+      },
+      set: (k, v) => {
+        try {
+          ls.setItem(k, JSON.stringify(v));
+        } catch {
+        }
+      },
+      remove: (k) => {
+        try {
+          ls.removeItem(k);
+        } catch {
+        }
+      }
+    };
+  } catch {
+    return memory;
+  }
+}
+function uuid() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  const bytes = new Uint8Array(16);
+  if (c?.getRandomValues) c.getRandomValues(bytes);
+  else for (let i = 0; i < 16; i++) bytes[i] = Math.floor(Math.random() * 256);
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const h = [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+var pick = (obj) => Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null));
+function createArkadiaClient(deps = {}) {
+  const fetchFn = deps.fetch ?? ((...args) => globalThis.fetch(...args));
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+  let config = null;
+  let storage = deps.storage ?? null;
+  let timer = null;
+  let listenersAttached = false;
+  const queue = [];
+  const log = (...args) => {
+    if (config?.debug) console.log("[Arkadia]", ...args);
+  };
+  const batchMax = () => config.apiKey.startsWith("ark_test_") ? 20 : 50;
+  const url = (path) => `${config.baseUrl.replace(/\/+$/, "")}/v1${path}`;
+  const headers = (extra = {}) => ({
+    Authorization: `Bearer ${config.apiKey}`,
+    "X-Arkadia-Version": "1",
+    ...extra
+  });
+  function loadOffline() {
+    const stored = storage.get(OFFLINE_KEY);
+    if (!Array.isArray(stored)) return [];
+    if (stored.length && !stored[0]?.events) return [{ id: uuid(), events: stored }];
+    return stored;
+  }
+  function saveOffline(events, id) {
+    const batches = loadOffline().filter((b) => b.id !== id);
+    batches.push({ id, events });
+    let total = batches.reduce((n, b) => n + b.events.length, 0);
+    while (total > MAX_OFFLINE_EVENTS && batches.length > 1) total -= batches.shift().events.length;
+    storage.set(OFFLINE_KEY, batches);
+    log(`${events.length} events gard\xE9s hors ligne (total : ${total})`);
+  }
+  function removeOffline(id) {
+    const batches = loadOffline().filter((b) => b.id !== id);
+    if (batches.length) storage.set(OFFLINE_KEY, batches);
+    else storage.remove(OFFLINE_KEY);
+  }
+  function retryAfterMs(res, fallback) {
+    const seconds = Number(res.headers?.get?.("retry-after"));
+    return Number.isFinite(seconds) && seconds > 0 ? Math.min(seconds * 1e3, MAX_RETRY_AFTER_MS) : fallback;
+  }
+  async function sendBatch(events, batchId = uuid()) {
+    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+      let res;
+      try {
+        res = await fetchFn(url("/events"), {
+          method: "POST",
+          headers: headers({ "Content-Type": "application/json", "X-Idempotency-Key": batchId }),
+          body: JSON.stringify({ appCode: config.appCode, batch: events }),
+          signal: AbortSignal.timeout?.(REQUEST_TIMEOUT_MS)
+        });
+      } catch (err) {
+        log(`Erreur r\xE9seau (tentative ${attempt + 1}) :`, err?.message ?? err);
+        if (attempt < MAX_RETRIES) await sleep(2 ** attempt * 1e3);
+        continue;
+      }
+      const body = await res.json().catch(() => null);
+      if (res.ok) {
+        log(`Lot accept\xE9 \u2014 ${body?.ingested ?? events.length} events`);
+        if (body?.rejected?.length) {
+          log("Events rejet\xE9s :", body.rejected);
+          config.onRejected?.(body.rejected, events);
+        }
+        return "sent";
+      }
+      if (res.status === 429 && body?.error === "quota_exceeded") {
+        log("Quota mensuel atteint \u2014 lot abandonn\xE9");
+        return "dropped";
+      }
+      if (res.status === 429 || res.status === 409) {
+        const wait = retryAfterMs(res, 5e3);
+        log(`${res.status} \u2014 nouvel essai dans ${Math.round(wait / 1e3)} s`);
+        if (attempt < MAX_RETRIES) await sleep(wait);
+        continue;
+      }
+      if (res.status >= 400 && res.status < 500) {
+        log(`Erreur ${res.status} (${body?.error}) \u2014 lot abandonn\xE9 :`, body?.message);
+        return "dropped";
+      }
+      log(`Erreur serveur ${res.status} (tentative ${attempt + 1})`);
+      if (attempt < MAX_RETRIES) await sleep(2 ** attempt * 1e3);
+    }
+    saveOffline(events, batchId);
+    return "offline";
+  }
+  async function flushQueue() {
+    while (queue.length) {
+      await sendBatch(queue.splice(0, batchMax()));
+    }
+  }
+  async function flushOffline() {
+    const batches = loadOffline();
+    if (!batches.length) return;
+    log(`Renvoi de ${batches.length} lot(s) hors ligne`);
+    for (const { id, events } of batches) {
+      removeOffline(id);
+      for (let i = 0; i < events.length; i += batchMax()) {
+        const slice = events.slice(i, i + batchMax());
+        await sendBatch(slice, events.length <= batchMax() ? id : `${id}-${i}`);
+      }
+    }
+  }
+  function flushOnExit() {
+    if (!queue.length) return;
+    const events = queue.splice(0, batchMax());
+    const id = uuid();
+    saveOffline(events, id);
+    try {
+      fetchFn(url("/events"), {
+        method: "POST",
+        keepalive: true,
+        headers: headers({ "Content-Type": "application/json", "X-Idempotency-Key": id }),
+        body: JSON.stringify({ appCode: config.appCode, batch: events })
+      }).then((res) => {
+        if (res.ok) removeOffline(id);
+      }, () => {
+      });
+    } catch {
+    }
+  }
+  async function init(options) {
+    if (!options?.apiKey || !options?.appCode) {
+      throw new Error("ArkadiaClient.init : apiKey et appCode sont requis.");
+    }
+    config = {
+      platform: "web",
+      appVersion: "1.0.0",
+      debug: false,
+      baseUrl: DEFAULT_BASE_URL,
+      flushIntervalMs: 3e4,
+      ...options
+    };
+    storage = storage ?? defaultStorage();
+    if (timer) clearInterval(timer);
+    timer = setInterval(() => {
+      flushQueue().catch(() => {
+      });
+    }, config.flushIntervalMs);
+    timer.unref?.();
+    const doc = globalThis.document;
+    if (!listenersAttached && globalThis.addEventListener && doc) {
+      globalThis.addEventListener("pagehide", flushOnExit);
+      doc.addEventListener("visibilitychange", () => {
+        if (doc.visibilityState === "hidden") flushOnExit();
+      });
+      listenersAttached = true;
+    }
+    log(`SDK ${SDK_VERSION} initialis\xE9 \u2014 appCode ${config.appCode}`);
+    await flushOffline();
+  }
+  function track(event, { properties, sessionId, userId } = {}) {
+    if (!config) {
+      console.warn(`[Arkadia] SDK non initialis\xE9 \u2014 event ignor\xE9 : ${event}`);
+      return;
+    }
+    queue.push(pick({
+      event,
+      timestamp: now().toISOString(),
+      properties: properties ?? {},
+      context: { platform: config.platform, appVersion: config.appVersion, sdkVersion: SDK_VERSION },
+      sessionId,
+      userId
+    }));
+    if (queue.length >= batchMax()) flushQueue().catch(() => {
+    });
+  }
+  async function request(path) {
+    if (!config) throw new Error("ArkadiaClient non initialis\xE9.");
+    const res = await fetchFn(url(path), { headers: headers(), signal: AbortSignal.timeout?.(REQUEST_TIMEOUT_MS) });
+    const body = await res.json().catch(() => null);
+    if (!res.ok) throw new ArkadiaApiError(res.status, body);
+    return body;
+  }
+  return {
+    init,
+    track,
+    /** Envoie immédiatement tout ce qui est en file. */
+    flush: () => flushQueue(),
+    /** Arrête le minuteur et envoie ce qui reste (Node, tests, fin de script). */
+    async shutdown() {
+      if (timer) clearInterval(timer);
+      timer = null;
+      await flushQueue();
+    },
+    /** Quota, limites et informations sur la clé. */
+    status: () => request("/status"),
+    /** Agrégats quotidiens : { from?: 'YYYY-MM-DD', to?: 'YYYY-MM-DD' }. */
+    analytics: ({ from, to } = {}) => {
+      const qs = new URLSearchParams(pick({ from, to })).toString();
+      return request(`/analytics${qs ? `?${qs}` : ""}`);
+    },
+    // ── Raccourcis ────────────────────────────────────────────────────────────
+    screenView(screen, { previousScreen, userId, sessionId } = {}) {
+      track("app.screen_view", { properties: pick({ screen, previousScreen }), sessionId, userId });
+    },
+    sessionStart({ userId, sessionId } = {}) {
+      track("app.session_start", { sessionId, userId });
+    },
+    sessionEnd(durationSeconds, { userId, sessionId } = {}) {
+      track("app.session_end", { properties: { durationSeconds }, sessionId, userId });
+    },
+    featureUsed(featureName, { metadata, userId, sessionId } = {}) {
+      track("app.feature_used", { properties: pick({ featureName, metadata }), sessionId, userId });
+    },
+    /** Crash : envoyé immédiatement. */
+    crash(errorType, errorMessage, { stackTrace, userId, sessionId } = {}) {
+      track("app.crash", {
+        properties: pick({
+          errorType,
+          errorMessage: String(errorMessage).slice(0, 500),
+          stackTrace: stackTrace != null ? String(stackTrace).slice(0, 2e3) : null
+        }),
+        sessionId,
+        userId
+      });
+      flushQueue().catch(() => {
+      });
+    },
+    subscriptionStarted(plan, amountCentimes, interval, { userId, couponCode } = {}) {
+      track("sale.subscription_started", { properties: pick({ plan, amount: amountCentimes, interval, couponCode }), userId });
+    },
+    subscriptionCancelled(plan, { reason, daysActive, userId } = {}) {
+      track("sale.subscription_cancelled", { properties: pick({ plan, reason, daysActive }), userId });
+    },
+    purchaseCompleted(productId, productName, amountCentimes, { userId, couponCode } = {}) {
+      track("sale.purchase_completed", { properties: pick({ productId, productName, amount: amountCentimes, couponCode }), userId });
+    },
+    trialStarted(plan, trialDays, { userId } = {}) {
+      track("sale.trial_started", { properties: { plan, trialDays }, userId });
+    },
+    trialConverted(plan, amountCentimes, { userId } = {}) {
+      track("sale.trial_converted", { properties: { plan, amount: amountCentimes }, userId });
+    }
+  };
+}
+var ArkadiaClient = createArkadiaClient();
+var index_default = ArkadiaClient;

package/dist/index.d.cts

@@ -0,0 +1,126 @@
+export declare const SDK_VERSION: string;
+export declare const DEFAULT_BASE_URL: string;
+
+export type ArkadiaEventType =
+  | 'app.install' | 'app.update' | 'app.session_start' | 'app.session_end'
+  | 'app.screen_view' | 'app.feature_used' | 'app.crash'
+  | 'app.onboarding_step' | 'app.onboarding_completed' | 'app.search'
+  | 'sale.subscription_started' | 'sale.subscription_renewed'
+  | 'sale.subscription_cancelled' | 'sale.subscription_paused'
+  | 'sale.subscription_resumed' | 'sale.plan_upgraded' | 'sale.plan_downgraded'
+  | 'sale.purchase_completed' | 'sale.module_activated' | 'sale.module_deactivated'
+  | 'sale.trial_started' | 'sale.trial_converted' | 'sale.trial_expired'
+  | 'sale.refund_issued' | 'sale.coupon_used';
+
+export interface RejectedEvent {
+  index: number;
+  error: 'invalid_event_type' | 'invalid_event';
+  message: string;
+}
+
+export interface ArkadiaInitOptions {
+  /** Clé API : ark_live_… ou ark_test_… */
+  apiKey: string;
+  /** Code de l'application dans Arkadia. */
+  appCode: string;
+  /** 'web' | 'node' | 'react-native' | 'android' | 'ios'… (défaut : 'web') */
+  platform?: string;
+  /** Version de votre app (défaut : '1.0.0'). */
+  appVersion?: string;
+  /** Logs console si true. */
+  debug?: boolean;
+  /** URL de base de l'API (défaut : production Arkadia). */
+  baseUrl?: string;
+  /** Intervalle d'envoi automatique en ms (défaut : 30 000). */
+  flushIntervalMs?: number;
+  /** Appelé quand le serveur écarte des events invalides d'un lot. */
+  onRejected?: (rejected: RejectedEvent[], batch: object[]) => void;
+}
+
+export interface TrackOptions {
+  properties?: Record<string, unknown>;
+  sessionId?: string;
+  userId?: string;
+}
+
+export interface ArkadiaStatus {
+  appCode: string;
+  quota: {
+    limit: number;
+    used_this_month: number;
+    remaining: number;
+    reset_at: string | null;
+    percent_used: number;
+    is_unlimited: boolean;
+  };
+  rate_limit: { limit_per_minute: number; batch_max: number; reads_per_minute: number };
+  key: { type: 'live' | 'test'; label: string; expires_at: string | null };
+}
+
+export interface ArkadiaDailyAnalytics {
+  date: string;
+  appCode: string;
+  sessions: number;
+  uniqueUsers: number;
+  avgSessionDuration: number;
+  screenViews: number;
+  crashes: number;
+  installs: number;
+  updates: number;
+  revenue: number;
+  currency: string;
+  newSubscriptions: number;
+  renewals: number;
+  cancellations: number;
+  oneTimePurchases: number;
+  activeModules: number;
+  trialStarts: number;
+  trialConversions: number;
+  topScreens: { screen: string; views: number }[];
+  topFeatures: { feature: string; uses: number }[];
+  eventCount: number;
+  updatedAt: string | null;
+}
+
+export interface ArkadiaAnalytics {
+  appCode: string;
+  from: string;
+  to: string;
+  days: ArkadiaDailyAnalytics[];
+}
+
+export declare class ArkadiaApiError extends Error {
+  readonly status: number;
+  readonly code: string | null;
+  readonly body: unknown;
+}
+
+export interface ArkadiaClientInstance {
+  init(options: ArkadiaInitOptions): Promise<void>;
+  track(event: ArkadiaEventType | (string & {}), options?: TrackOptions): void;
+  flush(): Promise<void>;
+  shutdown(): Promise<void>;
+  status(): Promise<ArkadiaStatus>;
+  analytics(range?: { from?: string; to?: string }): Promise<ArkadiaAnalytics>;
+
+  screenView(screen: string, options?: { previousScreen?: string; userId?: string; sessionId?: string }): void;
+  sessionStart(options?: { userId?: string; sessionId?: string }): void;
+  sessionEnd(durationSeconds: number, options?: { userId?: string; sessionId?: string }): void;
+  featureUsed(featureName: string, options?: { metadata?: Record<string, unknown>; userId?: string; sessionId?: string }): void;
+  crash(errorType: string, errorMessage: unknown, options?: { stackTrace?: unknown; userId?: string; sessionId?: string }): void;
+  subscriptionStarted(plan: string, amountCentimes: number, interval: string, options?: { userId?: string; couponCode?: string }): void;
+  subscriptionCancelled(plan: string, options?: { reason?: string; daysActive?: number; userId?: string }): void;
+  purchaseCompleted(productId: string, productName: string, amountCentimes: number, options?: { userId?: string; couponCode?: string }): void;
+  trialStarted(plan: string, trialDays: number, options?: { userId?: string }): void;
+  trialConverted(plan: string, amountCentimes: number, options?: { userId?: string }): void;
+}
+
+export declare function createArkadiaClient(deps?: {
+  fetch?: typeof fetch;
+  storage?: { get(key: string): unknown; set(key: string, value: unknown): void; remove(key: string): void };
+  sleep?: (ms: number) => Promise<void>;
+  now?: () => Date;
+}): ArkadiaClientInstance;
+
+export declare const ArkadiaClient: ArkadiaClientInstance;
+export default ArkadiaClient;

package/dist/index.d.ts

@@ -0,0 +1,126 @@
+export declare const SDK_VERSION: string;
+export declare const DEFAULT_BASE_URL: string;
+
+export type ArkadiaEventType =
+  | 'app.install' | 'app.update' | 'app.session_start' | 'app.session_end'
+  | 'app.screen_view' | 'app.feature_used' | 'app.crash'
+  | 'app.onboarding_step' | 'app.onboarding_completed' | 'app.search'
+  | 'sale.subscription_started' | 'sale.subscription_renewed'
+  | 'sale.subscription_cancelled' | 'sale.subscription_paused'
+  | 'sale.subscription_resumed' | 'sale.plan_upgraded' | 'sale.plan_downgraded'
+  | 'sale.purchase_completed' | 'sale.module_activated' | 'sale.module_deactivated'
+  | 'sale.trial_started' | 'sale.trial_converted' | 'sale.trial_expired'
+  | 'sale.refund_issued' | 'sale.coupon_used';
+
+export interface RejectedEvent {
+  index: number;
+  error: 'invalid_event_type' | 'invalid_event';
+  message: string;
+}
+
+export interface ArkadiaInitOptions {
+  /** Clé API : ark_live_… ou ark_test_… */
+  apiKey: string;
+  /** Code de l'application dans Arkadia. */
+  appCode: string;
+  /** 'web' | 'node' | 'react-native' | 'android' | 'ios'… (défaut : 'web') */
+  platform?: string;
+  /** Version de votre app (défaut : '1.0.0'). */
+  appVersion?: string;
+  /** Logs console si true. */
+  debug?: boolean;
+  /** URL de base de l'API (défaut : production Arkadia). */
+  baseUrl?: string;
+  /** Intervalle d'envoi automatique en ms (défaut : 30 000). */
+  flushIntervalMs?: number;
+  /** Appelé quand le serveur écarte des events invalides d'un lot. */
+  onRejected?: (rejected: RejectedEvent[], batch: object[]) => void;
+}
+
+export interface TrackOptions {
+  properties?: Record<string, unknown>;
+  sessionId?: string;
+  userId?: string;
+}
+
+export interface ArkadiaStatus {
+  appCode: string;
+  quota: {
+    limit: number;
+    used_this_month: number;
+    remaining: number;
+    reset_at: string | null;
+    percent_used: number;
+    is_unlimited: boolean;
+  };
+  rate_limit: { limit_per_minute: number; batch_max: number; reads_per_minute: number };
+  key: { type: 'live' | 'test'; label: string; expires_at: string | null };
+}
+
+export interface ArkadiaDailyAnalytics {
+  date: string;
+  appCode: string;
+  sessions: number;
+  uniqueUsers: number;
+  avgSessionDuration: number;
+  screenViews: number;
+  crashes: number;
+  installs: number;
+  updates: number;
+  revenue: number;
+  currency: string;
+  newSubscriptions: number;
+  renewals: number;
+  cancellations: number;
+  oneTimePurchases: number;
+  activeModules: number;
+  trialStarts: number;
+  trialConversions: number;
+  topScreens: { screen: string; views: number }[];
+  topFeatures: { feature: string; uses: number }[];
+  eventCount: number;
+  updatedAt: string | null;
+}
+
+export interface ArkadiaAnalytics {
+  appCode: string;
+  from: string;
+  to: string;
+  days: ArkadiaDailyAnalytics[];
+}
+
+export declare class ArkadiaApiError extends Error {
+  readonly status: number;
+  readonly code: string | null;
+  readonly body: unknown;
+}
+
+export interface ArkadiaClientInstance {
+  init(options: ArkadiaInitOptions): Promise<void>;
+  track(event: ArkadiaEventType | (string & {}), options?: TrackOptions): void;
+  flush(): Promise<void>;
+  shutdown(): Promise<void>;
+  status(): Promise<ArkadiaStatus>;
+  analytics(range?: { from?: string; to?: string }): Promise<ArkadiaAnalytics>;
+
+  screenView(screen: string, options?: { previousScreen?: string; userId?: string; sessionId?: string }): void;
+  sessionStart(options?: { userId?: string; sessionId?: string }): void;
+  sessionEnd(durationSeconds: number, options?: { userId?: string; sessionId?: string }): void;
+  featureUsed(featureName: string, options?: { metadata?: Record<string, unknown>; userId?: string; sessionId?: string }): void;
+  crash(errorType: string, errorMessage: unknown, options?: { stackTrace?: unknown; userId?: string; sessionId?: string }): void;
+  subscriptionStarted(plan: string, amountCentimes: number, interval: string, options?: { userId?: string; couponCode?: string }): void;
+  subscriptionCancelled(plan: string, options?: { reason?: string; daysActive?: number; userId?: string }): void;
+  purchaseCompleted(productId: string, productName: string, amountCentimes: number, options?: { userId?: string; couponCode?: string }): void;
+  trialStarted(plan: string, trialDays: number, options?: { userId?: string }): void;
+  trialConverted(plan: string, amountCentimes: number, options?: { userId?: string }): void;
+}
+
+export declare function createArkadiaClient(deps?: {
+  fetch?: typeof fetch;
+  storage?: { get(key: string): unknown; set(key: string, value: unknown): void; remove(key: string): void };
+  sleep?: (ms: number) => Promise<void>;
+  now?: () => Date;
+}): ArkadiaClientInstance;
+
+export declare const ArkadiaClient: ArkadiaClientInstance;
+export default ArkadiaClient;

package/dist/index.js

@@ -0,0 +1,316 @@
+// src/index.js
+var SDK_VERSION = "1.1.0";
+var DEFAULT_BASE_URL = "https://europe-west1-arkadiadev.cloudfunctions.net/arkadiaApi";
+var OFFLINE_KEY = "arkadia_offline_queue";
+var MAX_OFFLINE_EVENTS = 500;
+var MAX_RETRIES = 3;
+var MAX_RETRY_AFTER_MS = 6e4;
+var REQUEST_TIMEOUT_MS = 15e3;
+var ArkadiaApiError = class extends Error {
+  constructor(status, body) {
+    super(body?.message || `Erreur API Arkadia (${status})`);
+    this.name = "ArkadiaApiError";
+    this.status = status;
+    this.code = body?.error ?? null;
+    this.body = body;
+  }
+};
+function defaultStorage() {
+  const mem = {};
+  const memory = {
+    get: (k) => mem[k] ?? null,
+    set: (k, v) => {
+      mem[k] = v;
+    },
+    remove: (k) => {
+      delete mem[k];
+    }
+  };
+  try {
+    const ls = globalThis.localStorage;
+    if (!ls) return memory;
+    ls.setItem("__arkadia_test__", "1");
+    ls.removeItem("__arkadia_test__");
+    return {
+      get: (k) => {
+        try {
+          return JSON.parse(ls.getItem(k));
+        } catch {
+          return null;
+        }
+      },
+      set: (k, v) => {
+        try {
+          ls.setItem(k, JSON.stringify(v));
+        } catch {
+        }
+      },
+      remove: (k) => {
+        try {
+          ls.removeItem(k);
+        } catch {
+        }
+      }
+    };
+  } catch {
+    return memory;
+  }
+}
+function uuid() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  const bytes = new Uint8Array(16);
+  if (c?.getRandomValues) c.getRandomValues(bytes);
+  else for (let i = 0; i < 16; i++) bytes[i] = Math.floor(Math.random() * 256);
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const h = [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+var pick = (obj) => Object.fromEntries(Object.entries(obj).filter(([, v]) => v != null));
+function createArkadiaClient(deps = {}) {
+  const fetchFn = deps.fetch ?? ((...args) => globalThis.fetch(...args));
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+  let config = null;
+  let storage = deps.storage ?? null;
+  let timer = null;
+  let listenersAttached = false;
+  const queue = [];
+  const log = (...args) => {
+    if (config?.debug) console.log("[Arkadia]", ...args);
+  };
+  const batchMax = () => config.apiKey.startsWith("ark_test_") ? 20 : 50;
+  const url = (path) => `${config.baseUrl.replace(/\/+$/, "")}/v1${path}`;
+  const headers = (extra = {}) => ({
+    Authorization: `Bearer ${config.apiKey}`,
+    "X-Arkadia-Version": "1",
+    ...extra
+  });
+  function loadOffline() {
+    const stored = storage.get(OFFLINE_KEY);
+    if (!Array.isArray(stored)) return [];
+    if (stored.length && !stored[0]?.events) return [{ id: uuid(), events: stored }];
+    return stored;
+  }
+  function saveOffline(events, id) {
+    const batches = loadOffline().filter((b) => b.id !== id);
+    batches.push({ id, events });
+    let total = batches.reduce((n, b) => n + b.events.length, 0);
+    while (total > MAX_OFFLINE_EVENTS && batches.length > 1) total -= batches.shift().events.length;
+    storage.set(OFFLINE_KEY, batches);
+    log(`${events.length} events gard\xE9s hors ligne (total : ${total})`);
+  }
+  function removeOffline(id) {
+    const batches = loadOffline().filter((b) => b.id !== id);
+    if (batches.length) storage.set(OFFLINE_KEY, batches);
+    else storage.remove(OFFLINE_KEY);
+  }
+  function retryAfterMs(res, fallback) {
+    const seconds = Number(res.headers?.get?.("retry-after"));
+    return Number.isFinite(seconds) && seconds > 0 ? Math.min(seconds * 1e3, MAX_RETRY_AFTER_MS) : fallback;
+  }
+  async function sendBatch(events, batchId = uuid()) {
+    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+      let res;
+      try {
+        res = await fetchFn(url("/events"), {
+          method: "POST",
+          headers: headers({ "Content-Type": "application/json", "X-Idempotency-Key": batchId }),
+          body: JSON.stringify({ appCode: config.appCode, batch: events }),
+          signal: AbortSignal.timeout?.(REQUEST_TIMEOUT_MS)
+        });
+      } catch (err) {
+        log(`Erreur r\xE9seau (tentative ${attempt + 1}) :`, err?.message ?? err);
+        if (attempt < MAX_RETRIES) await sleep(2 ** attempt * 1e3);
+        continue;
+      }
+      const body = await res.json().catch(() => null);
+      if (res.ok) {
+        log(`Lot accept\xE9 \u2014 ${body?.ingested ?? events.length} events`);
+        if (body?.rejected?.length) {
+          log("Events rejet\xE9s :", body.rejected);
+          config.onRejected?.(body.rejected, events);
+        }
+        return "sent";
+      }
+      if (res.status === 429 && body?.error === "quota_exceeded") {
+        log("Quota mensuel atteint \u2014 lot abandonn\xE9");
+        return "dropped";
+      }
+      if (res.status === 429 || res.status === 409) {
+        const wait = retryAfterMs(res, 5e3);
+        log(`${res.status} \u2014 nouvel essai dans ${Math.round(wait / 1e3)} s`);
+        if (attempt < MAX_RETRIES) await sleep(wait);
+        continue;
+      }
+      if (res.status >= 400 && res.status < 500) {
+        log(`Erreur ${res.status} (${body?.error}) \u2014 lot abandonn\xE9 :`, body?.message);
+        return "dropped";
+      }
+      log(`Erreur serveur ${res.status} (tentative ${attempt + 1})`);
+      if (attempt < MAX_RETRIES) await sleep(2 ** attempt * 1e3);
+    }
+    saveOffline(events, batchId);
+    return "offline";
+  }
+  async function flushQueue() {
+    while (queue.length) {
+      await sendBatch(queue.splice(0, batchMax()));
+    }
+  }
+  async function flushOffline() {
+    const batches = loadOffline();
+    if (!batches.length) return;
+    log(`Renvoi de ${batches.length} lot(s) hors ligne`);
+    for (const { id, events } of batches) {
+      removeOffline(id);
+      for (let i = 0; i < events.length; i += batchMax()) {
+        const slice = events.slice(i, i + batchMax());
+        await sendBatch(slice, events.length <= batchMax() ? id : `${id}-${i}`);
+      }
+    }
+  }
+  function flushOnExit() {
+    if (!queue.length) return;
+    const events = queue.splice(0, batchMax());
+    const id = uuid();
+    saveOffline(events, id);
+    try {
+      fetchFn(url("/events"), {
+        method: "POST",
+        keepalive: true,
+        headers: headers({ "Content-Type": "application/json", "X-Idempotency-Key": id }),
+        body: JSON.stringify({ appCode: config.appCode, batch: events })
+      }).then((res) => {
+        if (res.ok) removeOffline(id);
+      }, () => {
+      });
+    } catch {
+    }
+  }
+  async function init(options) {
+    if (!options?.apiKey || !options?.appCode) {
+      throw new Error("ArkadiaClient.init : apiKey et appCode sont requis.");
+    }
+    config = {
+      platform: "web",
+      appVersion: "1.0.0",
+      debug: false,
+      baseUrl: DEFAULT_BASE_URL,
+      flushIntervalMs: 3e4,
+      ...options
+    };
+    storage = storage ?? defaultStorage();
+    if (timer) clearInterval(timer);
+    timer = setInterval(() => {
+      flushQueue().catch(() => {
+      });
+    }, config.flushIntervalMs);
+    timer.unref?.();
+    const doc = globalThis.document;
+    if (!listenersAttached && globalThis.addEventListener && doc) {
+      globalThis.addEventListener("pagehide", flushOnExit);
+      doc.addEventListener("visibilitychange", () => {
+        if (doc.visibilityState === "hidden") flushOnExit();
+      });
+      listenersAttached = true;
+    }
+    log(`SDK ${SDK_VERSION} initialis\xE9 \u2014 appCode ${config.appCode}`);
+    await flushOffline();
+  }
+  function track(event, { properties, sessionId, userId } = {}) {
+    if (!config) {
+      console.warn(`[Arkadia] SDK non initialis\xE9 \u2014 event ignor\xE9 : ${event}`);
+      return;
+    }
+    queue.push(pick({
+      event,
+      timestamp: now().toISOString(),
+      properties: properties ?? {},
+      context: { platform: config.platform, appVersion: config.appVersion, sdkVersion: SDK_VERSION },
+      sessionId,
+      userId
+    }));
+    if (queue.length >= batchMax()) flushQueue().catch(() => {
+    });
+  }
+  async function request(path) {
+    if (!config) throw new Error("ArkadiaClient non initialis\xE9.");
+    const res = await fetchFn(url(path), { headers: headers(), signal: AbortSignal.timeout?.(REQUEST_TIMEOUT_MS) });
+    const body = await res.json().catch(() => null);
+    if (!res.ok) throw new ArkadiaApiError(res.status, body);
+    return body;
+  }
+  return {
+    init,
+    track,
+    /** Envoie immédiatement tout ce qui est en file. */
+    flush: () => flushQueue(),
+    /** Arrête le minuteur et envoie ce qui reste (Node, tests, fin de script). */
+    async shutdown() {
+      if (timer) clearInterval(timer);
+      timer = null;
+      await flushQueue();
+    },
+    /** Quota, limites et informations sur la clé. */
+    status: () => request("/status"),
+    /** Agrégats quotidiens : { from?: 'YYYY-MM-DD', to?: 'YYYY-MM-DD' }. */
+    analytics: ({ from, to } = {}) => {
+      const qs = new URLSearchParams(pick({ from, to })).toString();
+      return request(`/analytics${qs ? `?${qs}` : ""}`);
+    },
+    // ── Raccourcis ────────────────────────────────────────────────────────────
+    screenView(screen, { previousScreen, userId, sessionId } = {}) {
+      track("app.screen_view", { properties: pick({ screen, previousScreen }), sessionId, userId });
+    },
+    sessionStart({ userId, sessionId } = {}) {
+      track("app.session_start", { sessionId, userId });
+    },
+    sessionEnd(durationSeconds, { userId, sessionId } = {}) {
+      track("app.session_end", { properties: { durationSeconds }, sessionId, userId });
+    },
+    featureUsed(featureName, { metadata, userId, sessionId } = {}) {
+      track("app.feature_used", { properties: pick({ featureName, metadata }), sessionId, userId });
+    },
+    /** Crash : envoyé immédiatement. */
+    crash(errorType, errorMessage, { stackTrace, userId, sessionId } = {}) {
+      track("app.crash", {
+        properties: pick({
+          errorType,
+          errorMessage: String(errorMessage).slice(0, 500),
+          stackTrace: stackTrace != null ? String(stackTrace).slice(0, 2e3) : null
+        }),
+        sessionId,
+        userId
+      });
+      flushQueue().catch(() => {
+      });
+    },
+    subscriptionStarted(plan, amountCentimes, interval, { userId, couponCode } = {}) {
+      track("sale.subscription_started", { properties: pick({ plan, amount: amountCentimes, interval, couponCode }), userId });
+    },
+    subscriptionCancelled(plan, { reason, daysActive, userId } = {}) {
+      track("sale.subscription_cancelled", { properties: pick({ plan, reason, daysActive }), userId });
+    },
+    purchaseCompleted(productId, productName, amountCentimes, { userId, couponCode } = {}) {
+      track("sale.purchase_completed", { properties: pick({ productId, productName, amount: amountCentimes, couponCode }), userId });
+    },
+    trialStarted(plan, trialDays, { userId } = {}) {
+      track("sale.trial_started", { properties: { plan, trialDays }, userId });
+    },
+    trialConverted(plan, amountCentimes, { userId } = {}) {
+      track("sale.trial_converted", { properties: { plan, amount: amountCentimes }, userId });
+    }
+  };
+}
+var ArkadiaClient = createArkadiaClient();
+var index_default = ArkadiaClient;
+export {
+  ArkadiaApiError,
+  ArkadiaClient,
+  DEFAULT_BASE_URL,
+  SDK_VERSION,
+  createArkadiaClient,
+  index_default as default
+};

package/dist/webhooks.cjs

@@ -0,0 +1,69 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/webhooks.js
+var webhooks_exports = {};
+__export(webhooks_exports, {
+  WebhookSignatureError: () => WebhookSignatureError,
+  constructWebhookEvent: () => constructWebhookEvent,
+  verifyWebhookSignature: () => verifyWebhookSignature
+});
+module.exports = __toCommonJS(webhooks_exports);
+var import_node_crypto = require("node:crypto");
+var WebhookSignatureError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookSignatureError";
+  }
+};
+function parseHeader(header) {
+  const parts = {};
+  for (const item of String(header ?? "").split(",")) {
+    const i = item.indexOf("=");
+    if (i > 0) parts[item.slice(0, i).trim()] = item.slice(i + 1).trim();
+  }
+  return { timestamp: Number(parts.t), signature: parts.v1 };
+}
+function verifyWebhookSignature(payload, header, secret, { toleranceSeconds = 300, now = Date.now() } = {}) {
+  if (!secret) throw new WebhookSignatureError("Secret de webhook manquant.");
+  const { timestamp, signature } = parseHeader(header);
+  if (!Number.isFinite(timestamp) || !signature) {
+    throw new WebhookSignatureError("En-t\xEAte X-Arkadia-Signature absent ou mal form\xE9.");
+  }
+  if (toleranceSeconds > 0 && Math.abs(now / 1e3 - timestamp) > toleranceSeconds) {
+    throw new WebhookSignatureError("Signature expir\xE9e (horodatage hors tol\xE9rance).");
+  }
+  const body = typeof payload === "string" ? payload : Buffer.from(payload).toString("utf8");
+  const expected = (0, import_node_crypto.createHmac)("sha256", secret).update(`${timestamp}.${body}`).digest();
+  const received = Buffer.from(signature, "hex");
+  if (received.length !== expected.length || !(0, import_node_crypto.timingSafeEqual)(received, expected)) {
+    throw new WebhookSignatureError("Signature invalide.");
+  }
+  return true;
+}
+function constructWebhookEvent(payload, header, secret, options) {
+  verifyWebhookSignature(payload, header, secret, options);
+  const body = typeof payload === "string" ? payload : Buffer.from(payload).toString("utf8");
+  return JSON.parse(body);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  WebhookSignatureError,
+  constructWebhookEvent,
+  verifyWebhookSignature
+});

package/dist/webhooks.d.cts

@@ -0,0 +1,34 @@
+export declare class WebhookSignatureError extends Error {}
+
+export interface VerifyOptions {
+  /** Écart maximal accepté avec l'horodatage signé, en secondes (défaut : 300 ; 0 = désactivé). */
+  toleranceSeconds?: number;
+  /** Horloge (ms epoch), pour les tests. */
+  now?: number;
+}
+
+export type ArkadiaWebhookType = 'events' | 'quota.warning' | 'quota.exceeded' | 'webhook.test';
+
+export interface ArkadiaWebhookEvent<T = Record<string, unknown>> {
+  /** Identifiant unique de la livraison : à utiliser pour dédupliquer. */
+  id: string;
+  type: ArkadiaWebhookType;
+  created: string;
+  livemode: boolean;
+  appCode: string;
+  data: T;
+}
+
+export declare function verifyWebhookSignature(
+  payload: string | Uint8Array,
+  header: string | null | undefined,
+  secret: string,
+  options?: VerifyOptions,
+): true;
+
+export declare function constructWebhookEvent<T = Record<string, unknown>>(
+  payload: string | Uint8Array,
+  header: string | null | undefined,
+  secret: string,
+  options?: VerifyOptions,
+): ArkadiaWebhookEvent<T>;

package/dist/webhooks.d.ts

@@ -0,0 +1,34 @@
+export declare class WebhookSignatureError extends Error {}
+
+export interface VerifyOptions {
+  /** Écart maximal accepté avec l'horodatage signé, en secondes (défaut : 300 ; 0 = désactivé). */
+  toleranceSeconds?: number;
+  /** Horloge (ms epoch), pour les tests. */
+  now?: number;
+}
+
+export type ArkadiaWebhookType = 'events' | 'quota.warning' | 'quota.exceeded' | 'webhook.test';
+
+export interface ArkadiaWebhookEvent<T = Record<string, unknown>> {
+  /** Identifiant unique de la livraison : à utiliser pour dédupliquer. */
+  id: string;
+  type: ArkadiaWebhookType;
+  created: string;
+  livemode: boolean;
+  appCode: string;
+  data: T;
+}
+
+export declare function verifyWebhookSignature(
+  payload: string | Uint8Array,
+  header: string | null | undefined,
+  secret: string,
+  options?: VerifyOptions,
+): true;
+
+export declare function constructWebhookEvent<T = Record<string, unknown>>(
+  payload: string | Uint8Array,
+  header: string | null | undefined,
+  secret: string,
+  options?: VerifyOptions,
+): ArkadiaWebhookEvent<T>;

package/dist/webhooks.js

@@ -0,0 +1,43 @@
+// src/webhooks.js
+import { createHmac, timingSafeEqual } from "node:crypto";
+var WebhookSignatureError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookSignatureError";
+  }
+};
+function parseHeader(header) {
+  const parts = {};
+  for (const item of String(header ?? "").split(",")) {
+    const i = item.indexOf("=");
+    if (i > 0) parts[item.slice(0, i).trim()] = item.slice(i + 1).trim();
+  }
+  return { timestamp: Number(parts.t), signature: parts.v1 };
+}
+function verifyWebhookSignature(payload, header, secret, { toleranceSeconds = 300, now = Date.now() } = {}) {
+  if (!secret) throw new WebhookSignatureError("Secret de webhook manquant.");
+  const { timestamp, signature } = parseHeader(header);
+  if (!Number.isFinite(timestamp) || !signature) {
+    throw new WebhookSignatureError("En-t\xEAte X-Arkadia-Signature absent ou mal form\xE9.");
+  }
+  if (toleranceSeconds > 0 && Math.abs(now / 1e3 - timestamp) > toleranceSeconds) {
+    throw new WebhookSignatureError("Signature expir\xE9e (horodatage hors tol\xE9rance).");
+  }
+  const body = typeof payload === "string" ? payload : Buffer.from(payload).toString("utf8");
+  const expected = createHmac("sha256", secret).update(`${timestamp}.${body}`).digest();
+  const received = Buffer.from(signature, "hex");
+  if (received.length !== expected.length || !timingSafeEqual(received, expected)) {
+    throw new WebhookSignatureError("Signature invalide.");
+  }
+  return true;
+}
+function constructWebhookEvent(payload, header, secret, options) {
+  verifyWebhookSignature(payload, header, secret, options);
+  const body = typeof payload === "string" ? payload : Buffer.from(payload).toString("utf8");
+  return JSON.parse(body);
+}
+export {
+  WebhookSignatureError,
+  constructWebhookEvent,
+  verifyWebhookSignature
+};

package/package.json

@@ -1,6 +1,59 @@
 {
   "name": "@arkadiadev/sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.1.0",
+  "description": "SDK officiel de l'API Arkadia : analytics et ventes de vos apps, vérification des webhooks.",
+  "keywords": ["arkadia", "analytics", "sdk", "webhooks"],
+  "homepage": "https://arkadiadev.web.app",
+  "license": "MIT",
+  "author": "Arkadia Dev",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "unpkg": "./dist/arkadia.global.js",
+  "jsdelivr": "./dist/arkadia.global.js",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./webhooks": {
+      "import": {
+        "types": "./dist/webhooks.d.ts",
+        "default": "./dist/webhooks.js"
+      },
+      "require": {
+        "types": "./dist/webhooks.d.cts",
+        "default": "./dist/webhooks.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "node build.mjs",
+    "test": "node --test test/*.test.js",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "esbuild": "0.24.2"
+  }
+}