@clawpro/node 0.1.2 → 0.1.4

package/dist/index.cjs

@@ -21,9 +21,56 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   ClawPro: () => ClawPro,
-  ClawProError: () => ClawProError
+  ClawProError: () => ClawProError,
+  verifyWebhook: () => verifyWebhook
 });
 module.exports = __toCommonJS(index_exports);
+
+// src/internal.ts
+var import_node_crypto = require("crypto");
+function parseSignature(header) {
+  const parts = {};
+  for (const p of header.split(",")) {
+    const i = p.indexOf("=");
+    if (i > 0) parts[p.slice(0, i).trim()] = p.slice(i + 1).trim();
+  }
+  const t = Number(parts.t);
+  if (!Number.isFinite(t) || t <= 0 || !parts.v1) return null;
+  return { t, v1: parts.v1 };
+}
+var signingString = (t, payload) => `${t}.${payload}`;
+var hmacHex = (secret, message) => (0, import_node_crypto.createHmac)("sha256", secret).update(message).digest("hex");
+function timestampFresh(t, toleranceSec, nowMs) {
+  return toleranceSec <= 0 || Math.abs(nowMs / 1e3 - t) <= toleranceSec;
+}
+function timingSafeEqualStr(a, b) {
+  const ba = Buffer.from(a);
+  const bb = Buffer.from(b);
+  return ba.length === bb.length && (0, import_node_crypto.timingSafeEqual)(ba, bb);
+}
+function buildUrl(base, path, query) {
+  const url = new URL(base + path);
+  if (query) {
+    for (const [k, v] of Object.entries(query)) {
+      if (v !== void 0 && v !== null && v !== "") url.searchParams.set(k, String(v));
+    }
+  }
+  return url.toString();
+}
+var isIdempotent = (method) => method === "GET" || method === "DELETE" || method === "PUT";
+var shouldRetryNetwork = (method, attempt, maxRetries) => isIdempotent(method) && attempt < maxRetries;
+function shouldRetryStatus(method, status, attempt, maxRetries) {
+  const transient = status === 429 || status >= 500;
+  const allowed = status === 429 || isIdempotent(method);
+  return transient && allowed && attempt < maxRetries;
+}
+var backoffMs = (attempt, rand) => Math.round(250 * 2 ** attempt * (0.8 + rand() * 0.4));
+function retryDelayMs(retryAfter, attempt, rand) {
+  const ra = Number(retryAfter);
+  return Number.isFinite(ra) && ra > 0 ? ra * 1e3 : backoffMs(attempt, rand);
+}
+
+// src/index.ts
 var ClawProError = class extends Error {
   status;
   code;
@@ -48,6 +95,8 @@ var ClawPro = class {
   fetchImpl;
   timeoutMs;
   maxRetries;
+  sleep;
+  rand;
   constructor(opts) {
     if (!opts?.apiKey) throw new Error("ClawPro: `apiKey` is required");
     this.apiKey = opts.apiKey;
@@ -57,6 +106,8 @@ var ClawPro = class {
     if (!this.fetchImpl) throw new Error("ClawPro: no fetch available \u2014 pass `fetch` (Node <18)");
     this.timeoutMs = opts.timeoutMs ?? 3e4;
     this.maxRetries = opts.maxRetries ?? 2;
+    this.sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    this.rand = opts.rand ?? Math.random;
     this.accounts = new AccountsResource(this);
     this.campaigns = new CampaignsResource(this);
     this.leads = new LeadsResource(this);
@@ -66,19 +117,13 @@ var ClawPro = class {
   }
   /** @internal */
   async request(method, path, opts = {}) {
-    const url = new URL(this.base + path);
-    if (opts.query) {
-      for (const [k, v] of Object.entries(opts.query)) {
-        if (v !== void 0 && v !== null && v !== "") url.searchParams.set(k, String(v));
-      }
-    }
-    const idempotent = method === "GET" || method === "DELETE" || method === "PUT";
+    const url = buildUrl(this.base, path, opts.query);
     for (let attempt = 0; ; attempt++) {
       const ctrl = new AbortController();
       const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
       let res;
       try {
-        res = await this.fetchImpl(url.toString(), {
+        res = await this.fetchImpl(url, {
           method,
           headers: {
             "X-API-Key": this.apiKey,
@@ -90,21 +135,18 @@ var ClawPro = class {
         });
       } catch (err) {
         clearTimeout(timer);
-        if (idempotent && attempt < this.maxRetries) {
-          await sleep(backoff(attempt));
+        if (shouldRetryNetwork(method, attempt, this.maxRetries)) {
+          await this.sleep(backoffMs(attempt, this.rand));
           continue;
         }
         throw new ClawProError(`Network error: ${err.message}`, { status: 0, code: "network_error" });
       }
       clearTimeout(timer);
-      const requestId = res.headers.get("x-request-id") ?? void 0;
-      const transient = res.status === 429 || res.status >= 500;
-      const retryable = res.status === 429 || idempotent;
-      if (transient && retryable && attempt < this.maxRetries) {
-        const ra = Number(res.headers.get("retry-after"));
-        await sleep(Number.isFinite(ra) && ra > 0 ? ra * 1e3 : backoff(attempt));
+      if (shouldRetryStatus(method, res.status, attempt, this.maxRetries)) {
+        await this.sleep(retryDelayMs(res.headers.get("retry-after"), attempt, this.rand));
         continue;
       }
+      const requestId = res.headers.get("x-request-id") ?? void 0;
       const text = await res.text();
       const data = text ? safeJson(text) : void 0;
       if (!res.ok) {
@@ -115,8 +157,6 @@ var ClawPro = class {
     }
   }
 };
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-var backoff = (attempt) => Math.round(250 * 2 ** attempt * (0.8 + Math.random() * 0.4));
 function safeJson(text) {
   try {
     return JSON.parse(text);
@@ -246,9 +286,18 @@ var UsageResource = class {
     }
   }
 };
+function verifyWebhook(opts) {
+  const { payload, signature, secret, toleranceSec = 300 } = opts;
+  const parsed = parseSignature(signature);
+  if (!parsed) return false;
+  if (!timestampFresh(parsed.t, toleranceSec, Date.now())) return false;
+  const expected = hmacHex(secret, signingString(parsed.t, payload));
+  return timingSafeEqualStr(expected, parsed.v1);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ClawPro,
-  ClawProError
+  ClawProError,
+  verifyWebhook
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @clawpro/node — official SDK for the ClawPro Instagram outbound API.\n *\n * ```ts\n * import { ClawPro } from '@clawpro/node'\n * const clawpro = new ClawPro({ apiKey: process.env.CLAWPRO_API_KEY! })\n * const { accounts } = await clawpro.accounts.list()\n * ```\n */\n\n// ─────────────────────────────── Types ───────────────────────────────────────\n\nexport type AccountStatus = 'new' | 'warming' | 'active' | 'challenged' | 'banned' | 'disconnected';\nexport type ProxyType = 'mobile' | 'isp' | 'residential' | 'none';\n\nexport interface Account {\n  id: string;\n  username: string;\n  status: AccountStatus;\n  warmupTier?: number;\n  dailyDmCap?: number;\n}\n\nexport type CampaignStatus = 'draft' | 'active' | 'paused';\n\nexport interface CampaignTarget {\n  username: string;\n  lastCheckedPostId: string | null;\n}\n\nexport interface Campaign {\n  id: string;\n  accountId: string;\n  name: string;\n  status: CampaignStatus;\n  targets: CampaignTarget[];\n  offer: string;\n  icpCriteria: string;\n  dailyDmTarget: number;\n}\n\nexport type LeadStatus =\n  | 'discovered' | 'enriched' | 'scored' | 'qualified' | 'rejected'\n  | 'queued' | 'dmed' | 'replied' | 'booked';\n\nexport interface Message {\n  id: string;\n  direction: 'out' | 'in';\n  body: string;\n  status: string;\n  sentAt: string | null;\n  createdAt: string;\n}\n\nexport interface Lead {\n  id: string;\n  igUsername: string;\n  fullName: string | null;\n  sourceTargetUsername: string;\n  engagementType: 'like' | 'comment';\n  commentText: string | null;\n  score: number | null;\n  scoreReason: string | null;\n  status: LeadStatus;\n  messages?: Message[];\n}\n\nexport type WebhookType = 'generic' | 'slack';\nexport type WebhookEvent =\n  | 'reply.received' | 'dm.sent' | 'dm.failed'\n  | 'lead.qualified' | 'lead.booked'\n  | 'account.active' | 'account.challenged' | 'account.banned';\n\nexport interface Webhook {\n  id: string;\n  label: string;\n  url: string;\n  type: WebhookType;\n  events: (WebhookEvent | '*')[];\n  active: boolean;\n  lastStatus: number | null;\n  lastDeliveryAt: string | null;\n  lastError: string | null;\n  /** Present only on the create response (generic HMAC secret). */\n  secret?: string;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  event: string;\n  status: 'pending' | 'delivered' | 'dead';\n  attempts: number;\n  lastStatusCode: number | null;\n  lastError: string | null;\n  nextRetryAt: string | null;\n  deliveredAt: string | null;\n  createdAt: string;\n}\n\nexport type ApiKeyEnv = 'production' | 'development';\nexport type ApiKeyAccess = 'full' | 'read' | 'write';\n\nexport interface ApiKey {\n  id: string;\n  name: string;\n  environment: ApiKeyEnv;\n  access: ApiKeyAccess;\n  keyPrefix: string;\n  createdAt: string;\n  expiresAt: string | null;\n  lastUsedAt: string | null;\n}\n\nexport interface UsageSummary {\n  callsThisMonth: number;\n  calls24h: number;\n  errors: number;\n  avgLatencyMs: number;\n}\n\nexport interface RequestLog {\n  id: string;\n  requestId: string;\n  method: string;\n  path: string;\n  status: number;\n  latencyMs: number;\n  error: string | null;\n  createdAt: string;\n  keyName: string | null;\n  keyPrefix: string | null;\n}\n\n// ─────────────────────────────── Errors ──────────────────────────────────────\n\n/** Thrown for any non-2xx API response. Inspect `status` / `requestId`. */\nexport class ClawProError extends Error {\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  constructor(message: string, opts: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = 'ClawProError';\n    this.status = opts.status;\n    this.code = opts.code ?? 'error';\n    this.requestId = opts.requestId;\n  }\n}\n\n// ─────────────────────────────── Client ──────────────────────────────────────\n\nexport interface ClawProOptions {\n  /** A `sk_live_…` / `sk_test_…` key from the developer portal. Sent as `X-API-Key`. */\n  apiKey: string;\n  /** API origin (no trailing slash). Defaults to https://api.tryclawpro.com */\n  baseUrl?: string;\n  /** Override the fetch implementation (defaults to global fetch). */\n  fetch?: typeof fetch;\n  /** Per-request timeout in ms (default 30000). */\n  timeoutMs?: number;\n  /** Auto-retry transient failures (network, 429, 5xx) with exponential backoff.\n   *  Default 2. 429s honor the `Retry-After` header; only idempotent methods\n   *  (GET/DELETE/PUT) are retried on network/5xx. */\n  maxRetries?: number;\n}\n\ntype Query = Record<string, string | number | boolean | undefined | null>;\n\nexport class ClawPro {\n  readonly accounts: AccountsResource;\n  readonly campaigns: CampaignsResource;\n  readonly leads: LeadsResource;\n  readonly webhooks: WebhooksResource;\n  readonly keys: ApiKeysResource;\n  readonly usage: UsageResource;\n\n  private readonly apiKey: string;\n  private readonly base: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly maxRetries: number;\n\n  constructor(opts: ClawProOptions) {\n    if (!opts?.apiKey) throw new Error('ClawPro: `apiKey` is required');\n    this.apiKey = opts.apiKey;\n    const origin = (opts.baseUrl ?? 'https://api.tryclawpro.com').replace(/\\/$/, '');\n    this.base = `${origin}/api/instagram`;\n    this.fetchImpl = opts.fetch ?? globalThis.fetch;\n    if (!this.fetchImpl) throw new Error('ClawPro: no fetch available — pass `fetch` (Node <18)');\n    this.timeoutMs = opts.timeoutMs ?? 30_000;\n    this.maxRetries = opts.maxRetries ?? 2;\n\n    this.accounts = new AccountsResource(this);\n    this.campaigns = new CampaignsResource(this);\n    this.leads = new LeadsResource(this);\n    this.webhooks = new WebhooksResource(this);\n    this.keys = new ApiKeysResource(this);\n    this.usage = new UsageResource(this);\n  }\n\n  /** @internal */\n  async request<T>(method: string, path: string, opts: { body?: unknown; query?: Query } = {}): Promise<T> {\n    const url = new URL(this.base + path);\n    if (opts.query) {\n      for (const [k, v] of Object.entries(opts.query)) {\n        if (v !== undefined && v !== null && v !== '') url.searchParams.set(k, String(v));\n      }\n    }\n    const idempotent = method === 'GET' || method === 'DELETE' || method === 'PUT';\n\n    for (let attempt = 0; ; attempt++) {\n      const ctrl = new AbortController();\n      const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n      let res: Response;\n      try {\n        res = await this.fetchImpl(url.toString(), {\n          method,\n          headers: {\n            'X-API-Key': this.apiKey,\n            Accept: 'application/json',\n            ...(opts.body !== undefined ? { 'Content-Type': 'application/json' } : {}),\n          },\n          body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n          signal: ctrl.signal,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        // Network/timeout: safe to retry only idempotent methods.\n        if (idempotent && attempt < this.maxRetries) { await sleep(backoff(attempt)); continue; }\n        throw new ClawProError(`Network error: ${(err as Error).message}`, { status: 0, code: 'network_error' });\n      }\n      clearTimeout(timer);\n\n      const requestId = res.headers.get('x-request-id') ?? undefined;\n      // Transient server-side: 429 (didn't process → retry any method) or 5xx (idempotent only).\n      const transient = res.status === 429 || res.status >= 500;\n      const retryable = res.status === 429 || idempotent;\n      if (transient && retryable && attempt < this.maxRetries) {\n        const ra = Number(res.headers.get('retry-after'));\n        await sleep(Number.isFinite(ra) && ra > 0 ? ra * 1000 : backoff(attempt));\n        continue;\n      }\n\n      const text = await res.text();\n      const data = text ? safeJson(text) : undefined;\n      if (!res.ok) {\n        const message = (data && (data.message || data.error)) || `HTTP ${res.status}`;\n        throw new ClawProError(message, { status: res.status, code: (data && data.error) || 'error', requestId });\n      }\n      return data as T;\n    }\n  }\n}\n\nconst sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));\n/** Exponential backoff with jitter: ~250ms, ~500ms, ~1s … */\nconst backoff = (attempt: number) => Math.round((250 * 2 ** attempt) * (0.8 + Math.random() * 0.4));\n\nfunction safeJson(text: string): any {\n  try { return JSON.parse(text); } catch { return { raw: text }; }\n}\n\n// ───────────────────────────── Resources ─────────────────────────────────────\n\nclass AccountsResource {\n  constructor(private c: ClawPro) {}\n  /** List connected sending accounts. */\n  list() { return this.c.request<{ accounts: Account[] }>('GET', '/accounts').then((r) => r.accounts); }\n  /** Connect a new sending account (a geo-matched mobile proxy is assigned). */\n  create(input: { username: string; country?: string; proxyType?: ProxyType; proxyUrl?: string; timezone?: string }) {\n    return this.c.request<{ account: Account }>('POST', '/accounts', { body: input }).then((r) => r.account);\n  }\n  /** Remove an account (cascades to its campaigns/leads/messages). */\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/accounts/${id}`); }\n}\n\nclass CampaignsResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ campaigns: Campaign[] }>('GET', '/campaigns').then((r) => r.campaigns); }\n  create(input: { accountId: string; name: string; targets: string[]; offer?: string; icpCriteria?: string; dailyDmTarget?: number }) {\n    return this.c.request<{ campaign: Campaign }>('POST', '/campaigns', { body: input }).then((r) => r.campaign);\n  }\n  update(id: string, patch: Partial<{ status: CampaignStatus; targets: string[]; offer: string; icpCriteria: string; dailyDmTarget: number; name: string }>) {\n    return this.c.request<{ campaign: Campaign }>('PATCH', `/campaigns/${id}`, { body: patch }).then((r) => r.campaign);\n  }\n  /** Kick a discovery/scoring/queue run for a campaign. */\n  run(id: string) { return this.c.request<{ discovered: number; scored: number; queued: number }>('POST', `/campaigns/${id}/run`); }\n  /** Leads for a campaign, optionally filtered by status. */\n  leads(id: string, opts: { status?: LeadStatus } = {}) {\n    return this.c.request<{ leads: Lead[] }>('GET', `/campaigns/${id}/leads`, { query: { status: opts.status } }).then((r) => r.leads);\n  }\n  /** Threads with at least one message (the unified inbox). */\n  inbox(id: string) { return this.c.request<{ threads: Lead[] }>('GET', `/campaigns/${id}/inbox`).then((r) => r.threads); }\n}\n\nclass LeadsResource {\n  constructor(private c: ClawPro) {}\n  /** Advance a lead — e.g. `{ status: 'booked' }` once a call is set (fires `lead.booked`). */\n  update(id: string, patch: { status: 'qualified' | 'rejected' | 'booked' }) {\n    return this.c.request<{ lead: Lead }>('PATCH', `/leads/${id}`, { body: patch }).then((r) => r.lead);\n  }\n}\n\nclass WebhooksResource {\n  constructor(private c: ClawPro) {}\n  /** The catalog of subscribable event types. */\n  events() { return this.c.request<{ events: WebhookEvent[] }>('GET', '/webhooks/events').then((r) => r.events); }\n  list() { return this.c.request<{ webhooks: Webhook[] }>('GET', '/webhooks').then((r) => r.webhooks); }\n  /** Create an endpoint. The generic HMAC `secret` is returned once, here. */\n  create(input: { url: string; type?: WebhookType; events?: (WebhookEvent | '*')[]; label?: string }) {\n    return this.c.request<{ webhook: Webhook }>('POST', '/webhooks', { body: { type: 'generic', events: ['*'], ...input } }).then((r) => r.webhook);\n  }\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/webhooks/${id}`); }\n  /** Send a `webhook.test` delivery. */\n  test(id: string) { return this.c.request<unknown>('POST', `/webhooks/${id}/test`); }\n  deliveries(id: string) { return this.c.request<{ deliveries: WebhookDelivery[] }>('GET', `/webhooks/${id}/deliveries`).then((r) => r.deliveries); }\n}\n\nclass ApiKeysResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ keys: ApiKey[] }>('GET', '/keys').then((r) => r.keys); }\n  /** Returns `{ secret, key }` — the plaintext `secret` is shown only here. */\n  create(input: { name: string; environment?: ApiKeyEnv; access?: ApiKeyAccess; expiresAt?: string | null }) {\n    return this.c.request<{ secret: string; key: ApiKey }>('POST', '/keys', { body: input });\n  }\n  revoke(id: string) { return this.c.request<{ ok: true }>('DELETE', `/keys/${id}`); }\n}\n\nexport interface LogFilter {\n  key?: string; method?: string; status?: '2xx' | '4xx' | '5xx';\n  from?: string; to?: string; endpoint?: string; requestId?: string; search?: string;\n  limit?: number; offset?: number;\n}\n\nclass UsageResource {\n  constructor(private c: ClawPro) {}\n  /** Calls this month / 24h / errors / avg latency. */\n  summary() { return this.c.request<UsageSummary>('GET', '/usage'); }\n  /** A single page of request logs (`limit` + `offset`). */\n  logs(filter: LogFilter = {}) {\n    return this.c.request<{ logs: RequestLog[] }>('GET', '/logs', { query: filter as Query }).then((r) => r.logs);\n  }\n  /** Auto-paginate every matching log:\n   *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */\n  async *iterateLogs(filter: Omit<LogFilter, 'offset'> = {}): AsyncGenerator<RequestLog, void, unknown> {\n    const pageSize = filter.limit ?? 100;\n    for (let offset = 0; ; offset += pageSize) {\n      const page = await this.logs({ ...filter, limit: pageSize, offset });\n      for (const row of page) yield row;\n      if (page.length < pageSize) return;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwIO,IAAM,eAAN,cAA2B,MAAM;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,SAAiB,MAA6D;AACxF,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK,QAAQ;AACzB,SAAK,YAAY,KAAK;AAAA,EACxB;AACF;AAqBO,IAAM,UAAN,MAAc;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAsB;AAChC,QAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAClE,SAAK,SAAS,KAAK;AACnB,UAAM,UAAU,KAAK,WAAW,8BAA8B,QAAQ,OAAO,EAAE;AAC/E,SAAK,OAAO,GAAG,MAAM;AACrB,SAAK,YAAY,KAAK,SAAS,WAAW;AAC1C,QAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,4DAAuD;AAC5F,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,aAAa,KAAK,cAAc;AAErC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,YAAY,IAAI,kBAAkB,IAAI;AAC3C,SAAK,QAAQ,IAAI,cAAc,IAAI;AACnC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,OAAO,IAAI,gBAAgB,IAAI;AACpC,SAAK,QAAQ,IAAI,cAAc,IAAI;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,QAAW,QAAgB,MAAc,OAA0C,CAAC,GAAe;AACvG,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI;AACpC,QAAI,KAAK,OAAO;AACd,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,KAAK,GAAG;AAC/C,YAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,GAAI,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MAClF;AAAA,IACF;AACA,UAAM,aAAa,WAAW,SAAS,WAAW,YAAY,WAAW;AAEzE,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,OAAO,IAAI,gBAAgB;AACjC,YAAM,QAAQ,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,SAAS;AAC3D,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,UACzC;AAAA,UACA,SAAS;AAAA,YACP,aAAa,KAAK;AAAA,YAClB,QAAQ;AAAA,YACR,GAAI,KAAK,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1E;AAAA,UACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,UAC5D,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,qBAAa,KAAK;AAElB,YAAI,cAAc,UAAU,KAAK,YAAY;AAAE,gBAAM,MAAM,QAAQ,OAAO,CAAC;AAAG;AAAA,QAAU;AACxF,cAAM,IAAI,aAAa,kBAAmB,IAAc,OAAO,IAAI,EAAE,QAAQ,GAAG,MAAM,gBAAgB,CAAC;AAAA,MACzG;AACA,mBAAa,KAAK;AAElB,YAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AAErD,YAAM,YAAY,IAAI,WAAW,OAAO,IAAI,UAAU;AACtD,YAAM,YAAY,IAAI,WAAW,OAAO;AACxC,UAAI,aAAa,aAAa,UAAU,KAAK,YAAY;AACvD,cAAM,KAAK,OAAO,IAAI,QAAQ,IAAI,aAAa,CAAC;AAChD,cAAM,MAAM,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,MAAO,QAAQ,OAAO,CAAC;AACxE;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAM,OAAO,OAAO,SAAS,IAAI,IAAI;AACrC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,SAAS,KAAK,WAAW,KAAK,UAAW,QAAQ,IAAI,MAAM;AAC5E,cAAM,IAAI,aAAa,SAAS,EAAE,QAAQ,IAAI,QAAQ,MAAO,QAAQ,KAAK,SAAU,SAAS,UAAU,CAAC;AAAA,MAC1G;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAc,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAExE,IAAM,UAAU,CAAC,YAAoB,KAAK,MAAO,MAAM,KAAK,WAAY,MAAM,KAAK,OAAO,IAAI,IAAI;AAElG,SAAS,SAAS,MAAmB;AACnC,MAAI;AAAE,WAAO,KAAK,MAAM,IAAI;AAAA,EAAG,QAAQ;AAAE,WAAO,EAAE,KAAK,KAAK;AAAA,EAAG;AACjE;AAIA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA4G;AACjH,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EACzG;AAAA;AAAA,EAEA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AACzF;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACtB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAmC,OAAO,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS;AAAA,EAAG;AAAA,EACzG,OAAO,OAA6H;AAClI,WAAO,KAAK,EAAE,QAAgC,QAAQ,cAAc,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAC7G;AAAA,EACA,OAAO,IAAY,OAAwI;AACzJ,WAAO,KAAK,EAAE,QAAgC,SAAS,cAAc,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EACpH;AAAA;AAAA,EAEA,IAAI,IAAY;AAAE,WAAO,KAAK,EAAE,QAAgE,QAAQ,cAAc,EAAE,MAAM;AAAA,EAAG;AAAA;AAAA,EAEjI,MAAM,IAAY,OAAgC,CAAC,GAAG;AACpD,WAAO,KAAK,EAAE,QAA2B,OAAO,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EACnI;AAAA;AAAA,EAEA,MAAM,IAAY;AAAE,WAAO,KAAK,EAAE,QAA6B,OAAO,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAAG;AAC1H;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO,IAAY,OAAwD;AACzE,WAAO,KAAK,EAAE,QAAwB,SAAS,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EACpG;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,SAAS;AAAE,WAAO,KAAK,EAAE,QAAoC,OAAO,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;AAAA,EAAG;AAAA,EAC/G,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA6F;AAClG,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,WAAW,QAAQ,CAAC,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAChJ;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AAAA;AAAA,EAEvF,KAAK,IAAY;AAAE,WAAO,KAAK,EAAE,QAAiB,QAAQ,aAAa,EAAE,OAAO;AAAA,EAAG;AAAA,EACnF,WAAW,IAAY;AAAE,WAAO,KAAK,EAAE,QAA2C,OAAO,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;AAAA,EAAG;AACpJ;AAEA,IAAM,kBAAN,MAAsB;AAAA,EACpB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAA4B,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAAG;AAAA;AAAA,EAExF,OAAO,OAAoG;AACzG,WAAO,KAAK,EAAE,QAAyC,QAAQ,SAAS,EAAE,MAAM,MAAM,CAAC;AAAA,EACzF;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,SAAS,EAAE,EAAE;AAAA,EAAG;AACrF;AAQA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,UAAU;AAAE,WAAO,KAAK,EAAE,QAAsB,OAAO,QAAQ;AAAA,EAAG;AAAA;AAAA,EAElE,KAAK,SAAoB,CAAC,GAAG;AAC3B,WAAO,KAAK,EAAE,QAAgC,OAAO,SAAS,EAAE,OAAO,OAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAC9G;AAAA;AAAA;AAAA,EAGA,OAAO,YAAY,SAAoC,CAAC,GAA8C;AACpG,UAAM,WAAW,OAAO,SAAS;AACjC,aAAS,SAAS,KAAK,UAAU,UAAU;AACzC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,GAAG,QAAQ,OAAO,UAAU,OAAO,CAAC;AACnE,iBAAW,OAAO,KAAM,OAAM;AAC9B,UAAI,KAAK,SAAS,SAAU;AAAA,IAC9B;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/internal.ts"],"sourcesContent":["/**\n * @clawpro/node — official SDK for the ClawPro Instagram outbound API.\n *\n * ```ts\n * import { ClawPro } from '@clawpro/node'\n * const clawpro = new ClawPro({ apiKey: process.env.CLAWPRO_API_KEY! })\n * const { accounts } = await clawpro.accounts.list()\n * ```\n */\n\nimport {\n  parseSignature, timestampFresh, hmacHex, signingString, timingSafeEqualStr,\n  buildUrl, shouldRetryNetwork, shouldRetryStatus, backoffMs, retryDelayMs,\n} from './internal';\n\n// ─────────────────────────────── Types ───────────────────────────────────────\n\nexport type AccountStatus = 'new' | 'warming' | 'active' | 'challenged' | 'banned' | 'disconnected';\nexport type ProxyType = 'mobile' | 'isp' | 'residential' | 'none';\n\nexport interface Account {\n  id: string;\n  username: string;\n  status: AccountStatus;\n  warmupTier?: number;\n  dailyDmCap?: number;\n}\n\nexport type CampaignStatus = 'draft' | 'active' | 'paused';\n\nexport interface CampaignTarget {\n  username: string;\n  lastCheckedPostId: string | null;\n}\n\nexport interface Campaign {\n  id: string;\n  accountId: string;\n  name: string;\n  status: CampaignStatus;\n  targets: CampaignTarget[];\n  offer: string;\n  icpCriteria: string;\n  dailyDmTarget: number;\n}\n\nexport type LeadStatus =\n  | 'discovered' | 'enriched' | 'scored' | 'qualified' | 'rejected'\n  | 'queued' | 'dmed' | 'replied' | 'booked';\n\nexport interface Message {\n  id: string;\n  direction: 'out' | 'in';\n  body: string;\n  status: string;\n  sentAt: string | null;\n  createdAt: string;\n}\n\nexport interface Lead {\n  id: string;\n  igUsername: string;\n  fullName: string | null;\n  sourceTargetUsername: string;\n  engagementType: 'like' | 'comment';\n  commentText: string | null;\n  score: number | null;\n  scoreReason: string | null;\n  status: LeadStatus;\n  messages?: Message[];\n}\n\nexport type WebhookType = 'generic' | 'slack';\nexport type WebhookEvent =\n  | 'reply.received' | 'dm.sent' | 'dm.failed'\n  | 'lead.qualified' | 'lead.booked'\n  | 'account.active' | 'account.challenged' | 'account.banned';\n\nexport interface Webhook {\n  id: string;\n  label: string;\n  url: string;\n  type: WebhookType;\n  events: (WebhookEvent | '*')[];\n  active: boolean;\n  lastStatus: number | null;\n  lastDeliveryAt: string | null;\n  lastError: string | null;\n  /** Present only on the create response (generic HMAC secret). */\n  secret?: string;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  event: string;\n  status: 'pending' | 'delivered' | 'dead';\n  attempts: number;\n  lastStatusCode: number | null;\n  lastError: string | null;\n  nextRetryAt: string | null;\n  deliveredAt: string | null;\n  createdAt: string;\n}\n\nexport type ApiKeyEnv = 'production' | 'development';\nexport type ApiKeyAccess = 'full' | 'read' | 'write';\n\nexport interface ApiKey {\n  id: string;\n  name: string;\n  environment: ApiKeyEnv;\n  access: ApiKeyAccess;\n  keyPrefix: string;\n  createdAt: string;\n  expiresAt: string | null;\n  lastUsedAt: string | null;\n}\n\nexport interface UsageSummary {\n  callsThisMonth: number;\n  calls24h: number;\n  errors: number;\n  avgLatencyMs: number;\n}\n\nexport interface RequestLog {\n  id: string;\n  requestId: string;\n  method: string;\n  path: string;\n  status: number;\n  latencyMs: number;\n  error: string | null;\n  createdAt: string;\n  keyName: string | null;\n  keyPrefix: string | null;\n}\n\n// ─────────────────────────────── Errors ──────────────────────────────────────\n\n/** Thrown for any non-2xx API response. Inspect `status` / `requestId`. */\nexport class ClawProError extends Error {\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  constructor(message: string, opts: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = 'ClawProError';\n    this.status = opts.status;\n    this.code = opts.code ?? 'error';\n    this.requestId = opts.requestId;\n  }\n}\n\n// ─────────────────────────────── Client ──────────────────────────────────────\n\nexport interface ClawProOptions {\n  /** A `sk_live_…` / `sk_test_…` key from the developer portal. Sent as `X-API-Key`. */\n  apiKey: string;\n  /** API origin (no trailing slash). Defaults to https://api.tryclawpro.com */\n  baseUrl?: string;\n  /** Override the fetch implementation (defaults to global fetch). */\n  fetch?: typeof fetch;\n  /** Per-request timeout in ms (default 30000). */\n  timeoutMs?: number;\n  /** Auto-retry transient failures (network, 429, 5xx) with exponential backoff.\n   *  Default 2. 429s honor the `Retry-After` header; only idempotent methods\n   *  (GET/DELETE/PUT) are retried on network/5xx. */\n  maxRetries?: number;\n  /** Injected for determinism/testing — defaults to a real timer. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injected for determinism/testing — defaults to Math.random. */\n  rand?: () => number;\n}\n\ntype Query = Record<string, string | number | boolean | undefined | null>;\n\nexport class ClawPro {\n  readonly accounts: AccountsResource;\n  readonly campaigns: CampaignsResource;\n  readonly leads: LeadsResource;\n  readonly webhooks: WebhooksResource;\n  readonly keys: ApiKeysResource;\n  readonly usage: UsageResource;\n\n  private readonly apiKey: string;\n  private readonly base: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly maxRetries: number;\n  private readonly sleep: (ms: number) => Promise<void>;\n  private readonly rand: () => number;\n\n  constructor(opts: ClawProOptions) {\n    if (!opts?.apiKey) throw new Error('ClawPro: `apiKey` is required');\n    this.apiKey = opts.apiKey;\n    const origin = (opts.baseUrl ?? 'https://api.tryclawpro.com').replace(/\\/$/, '');\n    this.base = `${origin}/api/instagram`;\n    this.fetchImpl = opts.fetch ?? globalThis.fetch;\n    if (!this.fetchImpl) throw new Error('ClawPro: no fetch available — pass `fetch` (Node <18)');\n    this.timeoutMs = opts.timeoutMs ?? 30_000;\n    this.maxRetries = opts.maxRetries ?? 2;\n    this.sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));\n    this.rand = opts.rand ?? Math.random;\n\n    this.accounts = new AccountsResource(this);\n    this.campaigns = new CampaignsResource(this);\n    this.leads = new LeadsResource(this);\n    this.webhooks = new WebhooksResource(this);\n    this.keys = new ApiKeysResource(this);\n    this.usage = new UsageResource(this);\n  }\n\n  /** @internal */\n  async request<T>(method: string, path: string, opts: { body?: unknown; query?: Query } = {}): Promise<T> {\n    const url = buildUrl(this.base, path, opts.query);\n\n    for (let attempt = 0; ; attempt++) {\n      const ctrl = new AbortController();\n      const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n      let res: Response;\n      try {\n        res = await this.fetchImpl(url, {\n          method,\n          headers: {\n            'X-API-Key': this.apiKey,\n            Accept: 'application/json',\n            ...(opts.body !== undefined ? { 'Content-Type': 'application/json' } : {}),\n          },\n          body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n          signal: ctrl.signal,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        if (shouldRetryNetwork(method, attempt, this.maxRetries)) {\n          await this.sleep(backoffMs(attempt, this.rand));\n          continue;\n        }\n        throw new ClawProError(`Network error: ${(err as Error).message}`, { status: 0, code: 'network_error' });\n      }\n      clearTimeout(timer);\n\n      if (shouldRetryStatus(method, res.status, attempt, this.maxRetries)) {\n        await this.sleep(retryDelayMs(res.headers.get('retry-after'), attempt, this.rand));\n        continue;\n      }\n\n      const requestId = res.headers.get('x-request-id') ?? undefined;\n      const text = await res.text();\n      const data = text ? safeJson(text) : undefined;\n      if (!res.ok) {\n        const message = (data && (data.message || data.error)) || `HTTP ${res.status}`;\n        throw new ClawProError(message, { status: res.status, code: (data && data.error) || 'error', requestId });\n      }\n      return data as T;\n    }\n  }\n}\n\nfunction safeJson(text: string): any {\n  try { return JSON.parse(text); } catch { return { raw: text }; }\n}\n\n// ───────────────────────────── Resources ─────────────────────────────────────\n\nclass AccountsResource {\n  constructor(private c: ClawPro) {}\n  /** List connected sending accounts. */\n  list() { return this.c.request<{ accounts: Account[] }>('GET', '/accounts').then((r) => r.accounts); }\n  /** Connect a new sending account (a geo-matched mobile proxy is assigned). */\n  create(input: { username: string; country?: string; proxyType?: ProxyType; proxyUrl?: string; timezone?: string }) {\n    return this.c.request<{ account: Account }>('POST', '/accounts', { body: input }).then((r) => r.account);\n  }\n  /** Remove an account (cascades to its campaigns/leads/messages). */\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/accounts/${id}`); }\n}\n\nclass CampaignsResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ campaigns: Campaign[] }>('GET', '/campaigns').then((r) => r.campaigns); }\n  create(input: { accountId: string; name: string; targets: string[]; offer?: string; icpCriteria?: string; dailyDmTarget?: number }) {\n    return this.c.request<{ campaign: Campaign }>('POST', '/campaigns', { body: input }).then((r) => r.campaign);\n  }\n  update(id: string, patch: Partial<{ status: CampaignStatus; targets: string[]; offer: string; icpCriteria: string; dailyDmTarget: number; name: string }>) {\n    return this.c.request<{ campaign: Campaign }>('PATCH', `/campaigns/${id}`, { body: patch }).then((r) => r.campaign);\n  }\n  /** Kick a discovery/scoring/queue run for a campaign. */\n  run(id: string) { return this.c.request<{ discovered: number; scored: number; queued: number }>('POST', `/campaigns/${id}/run`); }\n  /** Leads for a campaign, optionally filtered by status. */\n  leads(id: string, opts: { status?: LeadStatus } = {}) {\n    return this.c.request<{ leads: Lead[] }>('GET', `/campaigns/${id}/leads`, { query: { status: opts.status } }).then((r) => r.leads);\n  }\n  /** Threads with at least one message (the unified inbox). */\n  inbox(id: string) { return this.c.request<{ threads: Lead[] }>('GET', `/campaigns/${id}/inbox`).then((r) => r.threads); }\n}\n\nclass LeadsResource {\n  constructor(private c: ClawPro) {}\n  /** Advance a lead — e.g. `{ status: 'booked' }` once a call is set (fires `lead.booked`). */\n  update(id: string, patch: { status: 'qualified' | 'rejected' | 'booked' }) {\n    return this.c.request<{ lead: Lead }>('PATCH', `/leads/${id}`, { body: patch }).then((r) => r.lead);\n  }\n}\n\nclass WebhooksResource {\n  constructor(private c: ClawPro) {}\n  /** The catalog of subscribable event types. */\n  events() { return this.c.request<{ events: WebhookEvent[] }>('GET', '/webhooks/events').then((r) => r.events); }\n  list() { return this.c.request<{ webhooks: Webhook[] }>('GET', '/webhooks').then((r) => r.webhooks); }\n  /** Create an endpoint. The generic HMAC `secret` is returned once, here. */\n  create(input: { url: string; type?: WebhookType; events?: (WebhookEvent | '*')[]; label?: string }) {\n    return this.c.request<{ webhook: Webhook }>('POST', '/webhooks', { body: { type: 'generic', events: ['*'], ...input } }).then((r) => r.webhook);\n  }\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/webhooks/${id}`); }\n  /** Send a `webhook.test` delivery. */\n  test(id: string) { return this.c.request<unknown>('POST', `/webhooks/${id}/test`); }\n  deliveries(id: string) { return this.c.request<{ deliveries: WebhookDelivery[] }>('GET', `/webhooks/${id}/deliveries`).then((r) => r.deliveries); }\n}\n\nclass ApiKeysResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ keys: ApiKey[] }>('GET', '/keys').then((r) => r.keys); }\n  /** Returns `{ secret, key }` — the plaintext `secret` is shown only here. */\n  create(input: { name: string; environment?: ApiKeyEnv; access?: ApiKeyAccess; expiresAt?: string | null }) {\n    return this.c.request<{ secret: string; key: ApiKey }>('POST', '/keys', { body: input });\n  }\n  revoke(id: string) { return this.c.request<{ ok: true }>('DELETE', `/keys/${id}`); }\n}\n\nexport interface LogFilter {\n  key?: string; method?: string; status?: '2xx' | '4xx' | '5xx';\n  from?: string; to?: string; endpoint?: string; requestId?: string; search?: string;\n  limit?: number; offset?: number;\n}\n\nclass UsageResource {\n  constructor(private c: ClawPro) {}\n  /** Calls this month / 24h / errors / avg latency. */\n  summary() { return this.c.request<UsageSummary>('GET', '/usage'); }\n  /** A single page of request logs (`limit` + `offset`). */\n  logs(filter: LogFilter = {}) {\n    return this.c.request<{ logs: RequestLog[] }>('GET', '/logs', { query: filter as Query }).then((r) => r.logs);\n  }\n  /** Auto-paginate every matching log:\n   *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */\n  async *iterateLogs(filter: Omit<LogFilter, 'offset'> = {}): AsyncGenerator<RequestLog, void, unknown> {\n    const pageSize = filter.limit ?? 100;\n    for (let offset = 0; ; offset += pageSize) {\n      const page = await this.logs({ ...filter, limit: pageSize, offset });\n      for (const row of page) yield row;\n      if (page.length < pageSize) return;\n    }\n  }\n}\n\n// ─────────────────────────── Webhook verification ────────────────────────────\n\nexport interface VerifyWebhookOptions {\n  /** The raw request body, exactly as received (string). */\n  payload: string;\n  /** The `X-Souk-Signature` header value (`t=…,v1=…`). */\n  signature: string;\n  /** The endpoint's signing secret (shown once on webhook creation). */\n  secret: string;\n  /** Reject signatures older than this many seconds (default 300; 0 disables). */\n  toleranceSec?: number;\n}\n\n/** Verify a ClawPro webhook's HMAC signature (timing-safe). Returns true if valid.\n *\n *  ```ts\n *  if (!verifyWebhook({ payload: rawBody, signature: req.headers['x-souk-signature'], secret })) return res.sendStatus(400)\n *  ```\n */\nexport function verifyWebhook(opts: VerifyWebhookOptions): boolean {\n  const { payload, signature, secret, toleranceSec = 300 } = opts;\n  const parsed = parseSignature(signature);\n  if (!parsed) return false;\n  if (!timestampFresh(parsed.t, toleranceSec, Date.now())) return false;\n  const expected = hmacHex(secret, signingString(parsed.t, payload));\n  return timingSafeEqualStr(expected, parsed.v1);\n}\n","/**\n * Pure, total helpers — the testable core of the SDK. No I/O, no throwing\n * (except the deliberately-effectful `hmacHex`, which is referentially\n * transparent: same inputs → same digest). The client (index.ts) is the thin\n * effectful shell that threads `fetch`, sleep, and randomness around these.\n */\nimport { createHmac, timingSafeEqual } from 'node:crypto';\n\n// ── Webhook signatures ───────────────────────────────────────────────────────\nexport interface ParsedSignature { t: number; v1: string }\n\n/** Parse `t=<unix>,v1=<hex>`. Returns null for anything malformed (total). */\nexport function parseSignature(header: string): ParsedSignature | null {\n  const parts: Record<string, string> = {};\n  for (const p of header.split(',')) {\n    const i = p.indexOf('=');\n    if (i > 0) parts[p.slice(0, i).trim()] = p.slice(i + 1).trim();\n  }\n  const t = Number(parts.t);\n  if (!Number.isFinite(t) || t <= 0 || !parts.v1) return null;\n  return { t, v1: parts.v1 };\n}\n\nexport const signingString = (t: number, payload: string): string => `${t}.${payload}`;\n\nexport const hmacHex = (secret: string, message: string): string =>\n  createHmac('sha256', secret).update(message).digest('hex');\n\n/** Is `t` within `toleranceSec` of `nowMs`? `toleranceSec <= 0` disables. */\nexport function timestampFresh(t: number, toleranceSec: number, nowMs: number): boolean {\n  return toleranceSec <= 0 || Math.abs(nowMs / 1000 - t) <= toleranceSec;\n}\n\n/** Constant-time string equality (length-aware). */\nexport function timingSafeEqualStr(a: string, b: string): boolean {\n  const ba = Buffer.from(a);\n  const bb = Buffer.from(b);\n  return ba.length === bb.length && timingSafeEqual(ba, bb);\n}\n\n// ── URL building ─────────────────────────────────────────────────────────────\nexport type QueryValue = string | number | boolean | undefined | null;\n\nexport function buildUrl(base: string, path: string, query?: Record<string, QueryValue>): string {\n  const url = new URL(base + path);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v !== undefined && v !== null && v !== '') url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n// ── Retry decisions (pure) ───────────────────────────────────────────────────\nexport const isIdempotent = (method: string): boolean =>\n  method === 'GET' || method === 'DELETE' || method === 'PUT';\n\n/** Network/timeout error: retry only idempotent methods, within budget. */\nexport const shouldRetryNetwork = (method: string, attempt: number, maxRetries: number): boolean =>\n  isIdempotent(method) && attempt < maxRetries;\n\n/** A 429 (didn't process → any method) or 5xx (idempotent only), within budget. */\nexport function shouldRetryStatus(method: string, status: number, attempt: number, maxRetries: number): boolean {\n  const transient = status === 429 || status >= 500;\n  const allowed = status === 429 || isIdempotent(method);\n  return transient && allowed && attempt < maxRetries;\n}\n\n/** Exponential backoff with jitter: ~250ms · 2^attempt · [0.8,1.2). `rand` injected. */\nexport const backoffMs = (attempt: number, rand: () => number): number =>\n  Math.round(250 * 2 ** attempt * (0.8 + rand() * 0.4));\n\n/** Honor a numeric `Retry-After` (seconds), else fall back to backoff. */\nexport function retryDelayMs(retryAfter: string | null, attempt: number, rand: () => number): number {\n  const ra = Number(retryAfter);\n  return Number.isFinite(ra) && ra > 0 ? ra * 1000 : backoffMs(attempt, rand);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,yBAA4C;AAMrC,SAAS,eAAe,QAAwC;AACrE,QAAM,QAAgC,CAAC;AACvC,aAAW,KAAK,OAAO,MAAM,GAAG,GAAG;AACjC,UAAM,IAAI,EAAE,QAAQ,GAAG;AACvB,QAAI,IAAI,EAAG,OAAM,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK;AAAA,EAC/D;AACA,QAAM,IAAI,OAAO,MAAM,CAAC;AACxB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,GAAI,QAAO;AACvD,SAAO,EAAE,GAAG,IAAI,MAAM,GAAG;AAC3B;AAEO,IAAM,gBAAgB,CAAC,GAAW,YAA4B,GAAG,CAAC,IAAI,OAAO;AAE7E,IAAM,UAAU,CAAC,QAAgB,gBACtC,+BAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAGpD,SAAS,eAAe,GAAW,cAAsB,OAAwB;AACtF,SAAO,gBAAgB,KAAK,KAAK,IAAI,QAAQ,MAAO,CAAC,KAAK;AAC5D;AAGO,SAAS,mBAAmB,GAAW,GAAoB;AAChE,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,SAAO,GAAG,WAAW,GAAG,cAAU,oCAAgB,IAAI,EAAE;AAC1D;AAKO,SAAS,SAAS,MAAc,MAAc,OAA4C;AAC/F,QAAM,MAAM,IAAI,IAAI,OAAO,IAAI;AAC/B,MAAI,OAAO;AACT,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,GAAI,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,IAClF;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAGO,IAAM,eAAe,CAAC,WAC3B,WAAW,SAAS,WAAW,YAAY,WAAW;AAGjD,IAAM,qBAAqB,CAAC,QAAgB,SAAiB,eAClE,aAAa,MAAM,KAAK,UAAU;AAG7B,SAAS,kBAAkB,QAAgB,QAAgB,SAAiB,YAA6B;AAC9G,QAAM,YAAY,WAAW,OAAO,UAAU;AAC9C,QAAM,UAAU,WAAW,OAAO,aAAa,MAAM;AACrD,SAAO,aAAa,WAAW,UAAU;AAC3C;AAGO,IAAM,YAAY,CAAC,SAAiB,SACzC,KAAK,MAAM,MAAM,KAAK,WAAW,MAAM,KAAK,IAAI,IAAI;AAG/C,SAAS,aAAa,YAA2B,SAAiB,MAA4B;AACnG,QAAM,KAAK,OAAO,UAAU;AAC5B,SAAO,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,MAAO,UAAU,SAAS,IAAI;AAC5E;;;ADiEO,IAAM,eAAN,cAA2B,MAAM;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,SAAiB,MAA6D;AACxF,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK,QAAQ;AACzB,SAAK,YAAY,KAAK;AAAA,EACxB;AACF;AAyBO,IAAM,UAAN,MAAc;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAsB;AAChC,QAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAClE,SAAK,SAAS,KAAK;AACnB,UAAM,UAAU,KAAK,WAAW,8BAA8B,QAAQ,OAAO,EAAE;AAC/E,SAAK,OAAO,GAAG,MAAM;AACrB,SAAK,YAAY,KAAK,SAAS,WAAW;AAC1C,QAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,4DAAuD;AAC5F,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,QAAQ,KAAK,UAAU,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AACxE,SAAK,OAAO,KAAK,QAAQ,KAAK;AAE9B,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,YAAY,IAAI,kBAAkB,IAAI;AAC3C,SAAK,QAAQ,IAAI,cAAc,IAAI;AACnC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,OAAO,IAAI,gBAAgB,IAAI;AACpC,SAAK,QAAQ,IAAI,cAAc,IAAI;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,QAAW,QAAgB,MAAc,OAA0C,CAAC,GAAe;AACvG,UAAM,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,KAAK;AAEhD,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,OAAO,IAAI,gBAAgB;AACjC,YAAM,QAAQ,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,SAAS;AAC3D,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,KAAK,UAAU,KAAK;AAAA,UAC9B;AAAA,UACA,SAAS;AAAA,YACP,aAAa,KAAK;AAAA,YAClB,QAAQ;AAAA,YACR,GAAI,KAAK,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1E;AAAA,UACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,UAC5D,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,qBAAa,KAAK;AAClB,YAAI,mBAAmB,QAAQ,SAAS,KAAK,UAAU,GAAG;AACxD,gBAAM,KAAK,MAAM,UAAU,SAAS,KAAK,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,cAAM,IAAI,aAAa,kBAAmB,IAAc,OAAO,IAAI,EAAE,QAAQ,GAAG,MAAM,gBAAgB,CAAC;AAAA,MACzG;AACA,mBAAa,KAAK;AAElB,UAAI,kBAAkB,QAAQ,IAAI,QAAQ,SAAS,KAAK,UAAU,GAAG;AACnE,cAAM,KAAK,MAAM,aAAa,IAAI,QAAQ,IAAI,aAAa,GAAG,SAAS,KAAK,IAAI,CAAC;AACjF;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AACrD,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAM,OAAO,OAAO,SAAS,IAAI,IAAI;AACrC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,SAAS,KAAK,WAAW,KAAK,UAAW,QAAQ,IAAI,MAAM;AAC5E,cAAM,IAAI,aAAa,SAAS,EAAE,QAAQ,IAAI,QAAQ,MAAO,QAAQ,KAAK,SAAU,SAAS,UAAU,CAAC;AAAA,MAC1G;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAmB;AACnC,MAAI;AAAE,WAAO,KAAK,MAAM,IAAI;AAAA,EAAG,QAAQ;AAAE,WAAO,EAAE,KAAK,KAAK;AAAA,EAAG;AACjE;AAIA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA4G;AACjH,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EACzG;AAAA;AAAA,EAEA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AACzF;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACtB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAmC,OAAO,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS;AAAA,EAAG;AAAA,EACzG,OAAO,OAA6H;AAClI,WAAO,KAAK,EAAE,QAAgC,QAAQ,cAAc,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAC7G;AAAA,EACA,OAAO,IAAY,OAAwI;AACzJ,WAAO,KAAK,EAAE,QAAgC,SAAS,cAAc,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EACpH;AAAA;AAAA,EAEA,IAAI,IAAY;AAAE,WAAO,KAAK,EAAE,QAAgE,QAAQ,cAAc,EAAE,MAAM;AAAA,EAAG;AAAA;AAAA,EAEjI,MAAM,IAAY,OAAgC,CAAC,GAAG;AACpD,WAAO,KAAK,EAAE,QAA2B,OAAO,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EACnI;AAAA;AAAA,EAEA,MAAM,IAAY;AAAE,WAAO,KAAK,EAAE,QAA6B,OAAO,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAAG;AAC1H;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO,IAAY,OAAwD;AACzE,WAAO,KAAK,EAAE,QAAwB,SAAS,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EACpG;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,SAAS;AAAE,WAAO,KAAK,EAAE,QAAoC,OAAO,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;AAAA,EAAG;AAAA,EAC/G,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA6F;AAClG,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,WAAW,QAAQ,CAAC,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAChJ;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AAAA;AAAA,EAEvF,KAAK,IAAY;AAAE,WAAO,KAAK,EAAE,QAAiB,QAAQ,aAAa,EAAE,OAAO;AAAA,EAAG;AAAA,EACnF,WAAW,IAAY;AAAE,WAAO,KAAK,EAAE,QAA2C,OAAO,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;AAAA,EAAG;AACpJ;AAEA,IAAM,kBAAN,MAAsB;AAAA,EACpB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAA4B,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAAG;AAAA;AAAA,EAExF,OAAO,OAAoG;AACzG,WAAO,KAAK,EAAE,QAAyC,QAAQ,SAAS,EAAE,MAAM,MAAM,CAAC;AAAA,EACzF;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,SAAS,EAAE,EAAE;AAAA,EAAG;AACrF;AAQA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,UAAU;AAAE,WAAO,KAAK,EAAE,QAAsB,OAAO,QAAQ;AAAA,EAAG;AAAA;AAAA,EAElE,KAAK,SAAoB,CAAC,GAAG;AAC3B,WAAO,KAAK,EAAE,QAAgC,OAAO,SAAS,EAAE,OAAO,OAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAC9G;AAAA;AAAA;AAAA,EAGA,OAAO,YAAY,SAAoC,CAAC,GAA8C;AACpG,UAAM,WAAW,OAAO,SAAS;AACjC,aAAS,SAAS,KAAK,UAAU,UAAU;AACzC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,GAAG,QAAQ,OAAO,UAAU,OAAO,CAAC;AACnE,iBAAW,OAAO,KAAM,OAAM;AAC9B,UAAI,KAAK,SAAS,SAAU;AAAA,IAC9B;AAAA,EACF;AACF;AAqBO,SAAS,cAAc,MAAqC;AACjE,QAAM,EAAE,SAAS,WAAW,QAAQ,eAAe,IAAI,IAAI;AAC3D,QAAM,SAAS,eAAe,SAAS;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,CAAC,eAAe,OAAO,GAAG,cAAc,KAAK,IAAI,CAAC,EAAG,QAAO;AAChE,QAAM,WAAW,QAAQ,QAAQ,cAAc,OAAO,GAAG,OAAO,CAAC;AACjE,SAAO,mBAAmB,UAAU,OAAO,EAAE;AAC/C;","names":[]}

package/dist/index.d.cts

@@ -132,6 +132,10 @@ interface ClawProOptions {
      *  Default 2. 429s honor the `Retry-After` header; only idempotent methods
      *  (GET/DELETE/PUT) are retried on network/5xx. */
     maxRetries?: number;
+    /** Injected for determinism/testing — defaults to a real timer. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Injected for determinism/testing — defaults to Math.random. */
+    rand?: () => number;
 }
 type Query = Record<string, string | number | boolean | undefined | null>;
 declare class ClawPro {
@@ -146,6 +150,8 @@ declare class ClawPro {
     private readonly fetchImpl;
     private readonly timeoutMs;
     private readonly maxRetries;
+    private readonly sleep;
+    private readonly rand;
     constructor(opts: ClawProOptions);
     /** @internal */
     request<T>(method: string, path: string, opts?: {
@@ -273,5 +279,22 @@ declare class UsageResource {
      *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */
     iterateLogs(filter?: Omit<LogFilter, 'offset'>): AsyncGenerator<RequestLog, void, unknown>;
 }
+interface VerifyWebhookOptions {
+    /** The raw request body, exactly as received (string). */
+    payload: string;
+    /** The `X-Souk-Signature` header value (`t=…,v1=…`). */
+    signature: string;
+    /** The endpoint's signing secret (shown once on webhook creation). */
+    secret: string;
+    /** Reject signatures older than this many seconds (default 300; 0 disables). */
+    toleranceSec?: number;
+}
+/** Verify a ClawPro webhook's HMAC signature (timing-safe). Returns true if valid.
+ *
+ *  ```ts
+ *  if (!verifyWebhook({ payload: rawBody, signature: req.headers['x-souk-signature'], secret })) return res.sendStatus(400)
+ *  ```
+ */
+declare function verifyWebhook(opts: VerifyWebhookOptions): boolean;
 
-export { type Account, type AccountStatus, type ApiKey, type ApiKeyAccess, type ApiKeyEnv, type Campaign, type CampaignStatus, type CampaignTarget, ClawPro, ClawProError, type ClawProOptions, type Lead, type LeadStatus, type LogFilter, type Message, type ProxyType, type RequestLog, type UsageSummary, type Webhook, type WebhookDelivery, type WebhookEvent, type WebhookType };
+export { type Account, type AccountStatus, type ApiKey, type ApiKeyAccess, type ApiKeyEnv, type Campaign, type CampaignStatus, type CampaignTarget, ClawPro, ClawProError, type ClawProOptions, type Lead, type LeadStatus, type LogFilter, type Message, type ProxyType, type RequestLog, type UsageSummary, type VerifyWebhookOptions, type Webhook, type WebhookDelivery, type WebhookEvent, type WebhookType, verifyWebhook };

package/dist/index.d.ts

@@ -132,6 +132,10 @@ interface ClawProOptions {
      *  Default 2. 429s honor the `Retry-After` header; only idempotent methods
      *  (GET/DELETE/PUT) are retried on network/5xx. */
     maxRetries?: number;
+    /** Injected for determinism/testing — defaults to a real timer. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Injected for determinism/testing — defaults to Math.random. */
+    rand?: () => number;
 }
 type Query = Record<string, string | number | boolean | undefined | null>;
 declare class ClawPro {
@@ -146,6 +150,8 @@ declare class ClawPro {
     private readonly fetchImpl;
     private readonly timeoutMs;
     private readonly maxRetries;
+    private readonly sleep;
+    private readonly rand;
     constructor(opts: ClawProOptions);
     /** @internal */
     request<T>(method: string, path: string, opts?: {
@@ -273,5 +279,22 @@ declare class UsageResource {
      *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */
     iterateLogs(filter?: Omit<LogFilter, 'offset'>): AsyncGenerator<RequestLog, void, unknown>;
 }
+interface VerifyWebhookOptions {
+    /** The raw request body, exactly as received (string). */
+    payload: string;
+    /** The `X-Souk-Signature` header value (`t=…,v1=…`). */
+    signature: string;
+    /** The endpoint's signing secret (shown once on webhook creation). */
+    secret: string;
+    /** Reject signatures older than this many seconds (default 300; 0 disables). */
+    toleranceSec?: number;
+}
+/** Verify a ClawPro webhook's HMAC signature (timing-safe). Returns true if valid.
+ *
+ *  ```ts
+ *  if (!verifyWebhook({ payload: rawBody, signature: req.headers['x-souk-signature'], secret })) return res.sendStatus(400)
+ *  ```
+ */
+declare function verifyWebhook(opts: VerifyWebhookOptions): boolean;
 
-export { type Account, type AccountStatus, type ApiKey, type ApiKeyAccess, type ApiKeyEnv, type Campaign, type CampaignStatus, type CampaignTarget, ClawPro, ClawProError, type ClawProOptions, type Lead, type LeadStatus, type LogFilter, type Message, type ProxyType, type RequestLog, type UsageSummary, type Webhook, type WebhookDelivery, type WebhookEvent, type WebhookType };
+export { type Account, type AccountStatus, type ApiKey, type ApiKeyAccess, type ApiKeyEnv, type Campaign, type CampaignStatus, type CampaignTarget, ClawPro, ClawProError, type ClawProOptions, type Lead, type LeadStatus, type LogFilter, type Message, type ProxyType, type RequestLog, type UsageSummary, type VerifyWebhookOptions, type Webhook, type WebhookDelivery, type WebhookEvent, type WebhookType, verifyWebhook };

package/dist/index.js

@@ -1,3 +1,47 @@
+// src/internal.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function parseSignature(header) {
+  const parts = {};
+  for (const p of header.split(",")) {
+    const i = p.indexOf("=");
+    if (i > 0) parts[p.slice(0, i).trim()] = p.slice(i + 1).trim();
+  }
+  const t = Number(parts.t);
+  if (!Number.isFinite(t) || t <= 0 || !parts.v1) return null;
+  return { t, v1: parts.v1 };
+}
+var signingString = (t, payload) => `${t}.${payload}`;
+var hmacHex = (secret, message) => createHmac("sha256", secret).update(message).digest("hex");
+function timestampFresh(t, toleranceSec, nowMs) {
+  return toleranceSec <= 0 || Math.abs(nowMs / 1e3 - t) <= toleranceSec;
+}
+function timingSafeEqualStr(a, b) {
+  const ba = Buffer.from(a);
+  const bb = Buffer.from(b);
+  return ba.length === bb.length && timingSafeEqual(ba, bb);
+}
+function buildUrl(base, path, query) {
+  const url = new URL(base + path);
+  if (query) {
+    for (const [k, v] of Object.entries(query)) {
+      if (v !== void 0 && v !== null && v !== "") url.searchParams.set(k, String(v));
+    }
+  }
+  return url.toString();
+}
+var isIdempotent = (method) => method === "GET" || method === "DELETE" || method === "PUT";
+var shouldRetryNetwork = (method, attempt, maxRetries) => isIdempotent(method) && attempt < maxRetries;
+function shouldRetryStatus(method, status, attempt, maxRetries) {
+  const transient = status === 429 || status >= 500;
+  const allowed = status === 429 || isIdempotent(method);
+  return transient && allowed && attempt < maxRetries;
+}
+var backoffMs = (attempt, rand) => Math.round(250 * 2 ** attempt * (0.8 + rand() * 0.4));
+function retryDelayMs(retryAfter, attempt, rand) {
+  const ra = Number(retryAfter);
+  return Number.isFinite(ra) && ra > 0 ? ra * 1e3 : backoffMs(attempt, rand);
+}
+
 // src/index.ts
 var ClawProError = class extends Error {
   status;
@@ -23,6 +67,8 @@ var ClawPro = class {
   fetchImpl;
   timeoutMs;
   maxRetries;
+  sleep;
+  rand;
   constructor(opts) {
     if (!opts?.apiKey) throw new Error("ClawPro: `apiKey` is required");
     this.apiKey = opts.apiKey;
@@ -32,6 +78,8 @@ var ClawPro = class {
     if (!this.fetchImpl) throw new Error("ClawPro: no fetch available \u2014 pass `fetch` (Node <18)");
     this.timeoutMs = opts.timeoutMs ?? 3e4;
     this.maxRetries = opts.maxRetries ?? 2;
+    this.sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    this.rand = opts.rand ?? Math.random;
     this.accounts = new AccountsResource(this);
     this.campaigns = new CampaignsResource(this);
     this.leads = new LeadsResource(this);
@@ -41,19 +89,13 @@ var ClawPro = class {
   }
   /** @internal */
   async request(method, path, opts = {}) {
-    const url = new URL(this.base + path);
-    if (opts.query) {
-      for (const [k, v] of Object.entries(opts.query)) {
-        if (v !== void 0 && v !== null && v !== "") url.searchParams.set(k, String(v));
-      }
-    }
-    const idempotent = method === "GET" || method === "DELETE" || method === "PUT";
+    const url = buildUrl(this.base, path, opts.query);
     for (let attempt = 0; ; attempt++) {
       const ctrl = new AbortController();
       const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
       let res;
       try {
-        res = await this.fetchImpl(url.toString(), {
+        res = await this.fetchImpl(url, {
           method,
           headers: {
             "X-API-Key": this.apiKey,
@@ -65,21 +107,18 @@ var ClawPro = class {
         });
       } catch (err) {
         clearTimeout(timer);
-        if (idempotent && attempt < this.maxRetries) {
-          await sleep(backoff(attempt));
+        if (shouldRetryNetwork(method, attempt, this.maxRetries)) {
+          await this.sleep(backoffMs(attempt, this.rand));
           continue;
         }
         throw new ClawProError(`Network error: ${err.message}`, { status: 0, code: "network_error" });
       }
       clearTimeout(timer);
-      const requestId = res.headers.get("x-request-id") ?? void 0;
-      const transient = res.status === 429 || res.status >= 500;
-      const retryable = res.status === 429 || idempotent;
-      if (transient && retryable && attempt < this.maxRetries) {
-        const ra = Number(res.headers.get("retry-after"));
-        await sleep(Number.isFinite(ra) && ra > 0 ? ra * 1e3 : backoff(attempt));
+      if (shouldRetryStatus(method, res.status, attempt, this.maxRetries)) {
+        await this.sleep(retryDelayMs(res.headers.get("retry-after"), attempt, this.rand));
         continue;
       }
+      const requestId = res.headers.get("x-request-id") ?? void 0;
       const text = await res.text();
       const data = text ? safeJson(text) : void 0;
       if (!res.ok) {
@@ -90,8 +129,6 @@ var ClawPro = class {
     }
   }
 };
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-var backoff = (attempt) => Math.round(250 * 2 ** attempt * (0.8 + Math.random() * 0.4));
 function safeJson(text) {
   try {
     return JSON.parse(text);
@@ -221,8 +258,17 @@ var UsageResource = class {
     }
   }
 };
+function verifyWebhook(opts) {
+  const { payload, signature, secret, toleranceSec = 300 } = opts;
+  const parsed = parseSignature(signature);
+  if (!parsed) return false;
+  if (!timestampFresh(parsed.t, toleranceSec, Date.now())) return false;
+  const expected = hmacHex(secret, signingString(parsed.t, payload));
+  return timingSafeEqualStr(expected, parsed.v1);
+}
 export {
   ClawPro,
-  ClawProError
+  ClawProError,
+  verifyWebhook
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @clawpro/node — official SDK for the ClawPro Instagram outbound API.\n *\n * ```ts\n * import { ClawPro } from '@clawpro/node'\n * const clawpro = new ClawPro({ apiKey: process.env.CLAWPRO_API_KEY! })\n * const { accounts } = await clawpro.accounts.list()\n * ```\n */\n\n// ─────────────────────────────── Types ───────────────────────────────────────\n\nexport type AccountStatus = 'new' | 'warming' | 'active' | 'challenged' | 'banned' | 'disconnected';\nexport type ProxyType = 'mobile' | 'isp' | 'residential' | 'none';\n\nexport interface Account {\n  id: string;\n  username: string;\n  status: AccountStatus;\n  warmupTier?: number;\n  dailyDmCap?: number;\n}\n\nexport type CampaignStatus = 'draft' | 'active' | 'paused';\n\nexport interface CampaignTarget {\n  username: string;\n  lastCheckedPostId: string | null;\n}\n\nexport interface Campaign {\n  id: string;\n  accountId: string;\n  name: string;\n  status: CampaignStatus;\n  targets: CampaignTarget[];\n  offer: string;\n  icpCriteria: string;\n  dailyDmTarget: number;\n}\n\nexport type LeadStatus =\n  | 'discovered' | 'enriched' | 'scored' | 'qualified' | 'rejected'\n  | 'queued' | 'dmed' | 'replied' | 'booked';\n\nexport interface Message {\n  id: string;\n  direction: 'out' | 'in';\n  body: string;\n  status: string;\n  sentAt: string | null;\n  createdAt: string;\n}\n\nexport interface Lead {\n  id: string;\n  igUsername: string;\n  fullName: string | null;\n  sourceTargetUsername: string;\n  engagementType: 'like' | 'comment';\n  commentText: string | null;\n  score: number | null;\n  scoreReason: string | null;\n  status: LeadStatus;\n  messages?: Message[];\n}\n\nexport type WebhookType = 'generic' | 'slack';\nexport type WebhookEvent =\n  | 'reply.received' | 'dm.sent' | 'dm.failed'\n  | 'lead.qualified' | 'lead.booked'\n  | 'account.active' | 'account.challenged' | 'account.banned';\n\nexport interface Webhook {\n  id: string;\n  label: string;\n  url: string;\n  type: WebhookType;\n  events: (WebhookEvent | '*')[];\n  active: boolean;\n  lastStatus: number | null;\n  lastDeliveryAt: string | null;\n  lastError: string | null;\n  /** Present only on the create response (generic HMAC secret). */\n  secret?: string;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  event: string;\n  status: 'pending' | 'delivered' | 'dead';\n  attempts: number;\n  lastStatusCode: number | null;\n  lastError: string | null;\n  nextRetryAt: string | null;\n  deliveredAt: string | null;\n  createdAt: string;\n}\n\nexport type ApiKeyEnv = 'production' | 'development';\nexport type ApiKeyAccess = 'full' | 'read' | 'write';\n\nexport interface ApiKey {\n  id: string;\n  name: string;\n  environment: ApiKeyEnv;\n  access: ApiKeyAccess;\n  keyPrefix: string;\n  createdAt: string;\n  expiresAt: string | null;\n  lastUsedAt: string | null;\n}\n\nexport interface UsageSummary {\n  callsThisMonth: number;\n  calls24h: number;\n  errors: number;\n  avgLatencyMs: number;\n}\n\nexport interface RequestLog {\n  id: string;\n  requestId: string;\n  method: string;\n  path: string;\n  status: number;\n  latencyMs: number;\n  error: string | null;\n  createdAt: string;\n  keyName: string | null;\n  keyPrefix: string | null;\n}\n\n// ─────────────────────────────── Errors ──────────────────────────────────────\n\n/** Thrown for any non-2xx API response. Inspect `status` / `requestId`. */\nexport class ClawProError extends Error {\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  constructor(message: string, opts: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = 'ClawProError';\n    this.status = opts.status;\n    this.code = opts.code ?? 'error';\n    this.requestId = opts.requestId;\n  }\n}\n\n// ─────────────────────────────── Client ──────────────────────────────────────\n\nexport interface ClawProOptions {\n  /** A `sk_live_…` / `sk_test_…` key from the developer portal. Sent as `X-API-Key`. */\n  apiKey: string;\n  /** API origin (no trailing slash). Defaults to https://api.tryclawpro.com */\n  baseUrl?: string;\n  /** Override the fetch implementation (defaults to global fetch). */\n  fetch?: typeof fetch;\n  /** Per-request timeout in ms (default 30000). */\n  timeoutMs?: number;\n  /** Auto-retry transient failures (network, 429, 5xx) with exponential backoff.\n   *  Default 2. 429s honor the `Retry-After` header; only idempotent methods\n   *  (GET/DELETE/PUT) are retried on network/5xx. */\n  maxRetries?: number;\n}\n\ntype Query = Record<string, string | number | boolean | undefined | null>;\n\nexport class ClawPro {\n  readonly accounts: AccountsResource;\n  readonly campaigns: CampaignsResource;\n  readonly leads: LeadsResource;\n  readonly webhooks: WebhooksResource;\n  readonly keys: ApiKeysResource;\n  readonly usage: UsageResource;\n\n  private readonly apiKey: string;\n  private readonly base: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly maxRetries: number;\n\n  constructor(opts: ClawProOptions) {\n    if (!opts?.apiKey) throw new Error('ClawPro: `apiKey` is required');\n    this.apiKey = opts.apiKey;\n    const origin = (opts.baseUrl ?? 'https://api.tryclawpro.com').replace(/\\/$/, '');\n    this.base = `${origin}/api/instagram`;\n    this.fetchImpl = opts.fetch ?? globalThis.fetch;\n    if (!this.fetchImpl) throw new Error('ClawPro: no fetch available — pass `fetch` (Node <18)');\n    this.timeoutMs = opts.timeoutMs ?? 30_000;\n    this.maxRetries = opts.maxRetries ?? 2;\n\n    this.accounts = new AccountsResource(this);\n    this.campaigns = new CampaignsResource(this);\n    this.leads = new LeadsResource(this);\n    this.webhooks = new WebhooksResource(this);\n    this.keys = new ApiKeysResource(this);\n    this.usage = new UsageResource(this);\n  }\n\n  /** @internal */\n  async request<T>(method: string, path: string, opts: { body?: unknown; query?: Query } = {}): Promise<T> {\n    const url = new URL(this.base + path);\n    if (opts.query) {\n      for (const [k, v] of Object.entries(opts.query)) {\n        if (v !== undefined && v !== null && v !== '') url.searchParams.set(k, String(v));\n      }\n    }\n    const idempotent = method === 'GET' || method === 'DELETE' || method === 'PUT';\n\n    for (let attempt = 0; ; attempt++) {\n      const ctrl = new AbortController();\n      const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n      let res: Response;\n      try {\n        res = await this.fetchImpl(url.toString(), {\n          method,\n          headers: {\n            'X-API-Key': this.apiKey,\n            Accept: 'application/json',\n            ...(opts.body !== undefined ? { 'Content-Type': 'application/json' } : {}),\n          },\n          body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n          signal: ctrl.signal,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        // Network/timeout: safe to retry only idempotent methods.\n        if (idempotent && attempt < this.maxRetries) { await sleep(backoff(attempt)); continue; }\n        throw new ClawProError(`Network error: ${(err as Error).message}`, { status: 0, code: 'network_error' });\n      }\n      clearTimeout(timer);\n\n      const requestId = res.headers.get('x-request-id') ?? undefined;\n      // Transient server-side: 429 (didn't process → retry any method) or 5xx (idempotent only).\n      const transient = res.status === 429 || res.status >= 500;\n      const retryable = res.status === 429 || idempotent;\n      if (transient && retryable && attempt < this.maxRetries) {\n        const ra = Number(res.headers.get('retry-after'));\n        await sleep(Number.isFinite(ra) && ra > 0 ? ra * 1000 : backoff(attempt));\n        continue;\n      }\n\n      const text = await res.text();\n      const data = text ? safeJson(text) : undefined;\n      if (!res.ok) {\n        const message = (data && (data.message || data.error)) || `HTTP ${res.status}`;\n        throw new ClawProError(message, { status: res.status, code: (data && data.error) || 'error', requestId });\n      }\n      return data as T;\n    }\n  }\n}\n\nconst sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms));\n/** Exponential backoff with jitter: ~250ms, ~500ms, ~1s … */\nconst backoff = (attempt: number) => Math.round((250 * 2 ** attempt) * (0.8 + Math.random() * 0.4));\n\nfunction safeJson(text: string): any {\n  try { return JSON.parse(text); } catch { return { raw: text }; }\n}\n\n// ───────────────────────────── Resources ─────────────────────────────────────\n\nclass AccountsResource {\n  constructor(private c: ClawPro) {}\n  /** List connected sending accounts. */\n  list() { return this.c.request<{ accounts: Account[] }>('GET', '/accounts').then((r) => r.accounts); }\n  /** Connect a new sending account (a geo-matched mobile proxy is assigned). */\n  create(input: { username: string; country?: string; proxyType?: ProxyType; proxyUrl?: string; timezone?: string }) {\n    return this.c.request<{ account: Account }>('POST', '/accounts', { body: input }).then((r) => r.account);\n  }\n  /** Remove an account (cascades to its campaigns/leads/messages). */\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/accounts/${id}`); }\n}\n\nclass CampaignsResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ campaigns: Campaign[] }>('GET', '/campaigns').then((r) => r.campaigns); }\n  create(input: { accountId: string; name: string; targets: string[]; offer?: string; icpCriteria?: string; dailyDmTarget?: number }) {\n    return this.c.request<{ campaign: Campaign }>('POST', '/campaigns', { body: input }).then((r) => r.campaign);\n  }\n  update(id: string, patch: Partial<{ status: CampaignStatus; targets: string[]; offer: string; icpCriteria: string; dailyDmTarget: number; name: string }>) {\n    return this.c.request<{ campaign: Campaign }>('PATCH', `/campaigns/${id}`, { body: patch }).then((r) => r.campaign);\n  }\n  /** Kick a discovery/scoring/queue run for a campaign. */\n  run(id: string) { return this.c.request<{ discovered: number; scored: number; queued: number }>('POST', `/campaigns/${id}/run`); }\n  /** Leads for a campaign, optionally filtered by status. */\n  leads(id: string, opts: { status?: LeadStatus } = {}) {\n    return this.c.request<{ leads: Lead[] }>('GET', `/campaigns/${id}/leads`, { query: { status: opts.status } }).then((r) => r.leads);\n  }\n  /** Threads with at least one message (the unified inbox). */\n  inbox(id: string) { return this.c.request<{ threads: Lead[] }>('GET', `/campaigns/${id}/inbox`).then((r) => r.threads); }\n}\n\nclass LeadsResource {\n  constructor(private c: ClawPro) {}\n  /** Advance a lead — e.g. `{ status: 'booked' }` once a call is set (fires `lead.booked`). */\n  update(id: string, patch: { status: 'qualified' | 'rejected' | 'booked' }) {\n    return this.c.request<{ lead: Lead }>('PATCH', `/leads/${id}`, { body: patch }).then((r) => r.lead);\n  }\n}\n\nclass WebhooksResource {\n  constructor(private c: ClawPro) {}\n  /** The catalog of subscribable event types. */\n  events() { return this.c.request<{ events: WebhookEvent[] }>('GET', '/webhooks/events').then((r) => r.events); }\n  list() { return this.c.request<{ webhooks: Webhook[] }>('GET', '/webhooks').then((r) => r.webhooks); }\n  /** Create an endpoint. The generic HMAC `secret` is returned once, here. */\n  create(input: { url: string; type?: WebhookType; events?: (WebhookEvent | '*')[]; label?: string }) {\n    return this.c.request<{ webhook: Webhook }>('POST', '/webhooks', { body: { type: 'generic', events: ['*'], ...input } }).then((r) => r.webhook);\n  }\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/webhooks/${id}`); }\n  /** Send a `webhook.test` delivery. */\n  test(id: string) { return this.c.request<unknown>('POST', `/webhooks/${id}/test`); }\n  deliveries(id: string) { return this.c.request<{ deliveries: WebhookDelivery[] }>('GET', `/webhooks/${id}/deliveries`).then((r) => r.deliveries); }\n}\n\nclass ApiKeysResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ keys: ApiKey[] }>('GET', '/keys').then((r) => r.keys); }\n  /** Returns `{ secret, key }` — the plaintext `secret` is shown only here. */\n  create(input: { name: string; environment?: ApiKeyEnv; access?: ApiKeyAccess; expiresAt?: string | null }) {\n    return this.c.request<{ secret: string; key: ApiKey }>('POST', '/keys', { body: input });\n  }\n  revoke(id: string) { return this.c.request<{ ok: true }>('DELETE', `/keys/${id}`); }\n}\n\nexport interface LogFilter {\n  key?: string; method?: string; status?: '2xx' | '4xx' | '5xx';\n  from?: string; to?: string; endpoint?: string; requestId?: string; search?: string;\n  limit?: number; offset?: number;\n}\n\nclass UsageResource {\n  constructor(private c: ClawPro) {}\n  /** Calls this month / 24h / errors / avg latency. */\n  summary() { return this.c.request<UsageSummary>('GET', '/usage'); }\n  /** A single page of request logs (`limit` + `offset`). */\n  logs(filter: LogFilter = {}) {\n    return this.c.request<{ logs: RequestLog[] }>('GET', '/logs', { query: filter as Query }).then((r) => r.logs);\n  }\n  /** Auto-paginate every matching log:\n   *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */\n  async *iterateLogs(filter: Omit<LogFilter, 'offset'> = {}): AsyncGenerator<RequestLog, void, unknown> {\n    const pageSize = filter.limit ?? 100;\n    for (let offset = 0; ; offset += pageSize) {\n      const page = await this.logs({ ...filter, limit: pageSize, offset });\n      for (const row of page) yield row;\n      if (page.length < pageSize) return;\n    }\n  }\n}\n"],"mappings":";AAwIO,IAAM,eAAN,cAA2B,MAAM;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,SAAiB,MAA6D;AACxF,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK,QAAQ;AACzB,SAAK,YAAY,KAAK;AAAA,EACxB;AACF;AAqBO,IAAM,UAAN,MAAc;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAsB;AAChC,QAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAClE,SAAK,SAAS,KAAK;AACnB,UAAM,UAAU,KAAK,WAAW,8BAA8B,QAAQ,OAAO,EAAE;AAC/E,SAAK,OAAO,GAAG,MAAM;AACrB,SAAK,YAAY,KAAK,SAAS,WAAW;AAC1C,QAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,4DAAuD;AAC5F,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,aAAa,KAAK,cAAc;AAErC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,YAAY,IAAI,kBAAkB,IAAI;AAC3C,SAAK,QAAQ,IAAI,cAAc,IAAI;AACnC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,OAAO,IAAI,gBAAgB,IAAI;AACpC,SAAK,QAAQ,IAAI,cAAc,IAAI;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,QAAW,QAAgB,MAAc,OAA0C,CAAC,GAAe;AACvG,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI;AACpC,QAAI,KAAK,OAAO;AACd,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,KAAK,GAAG;AAC/C,YAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,GAAI,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MAClF;AAAA,IACF;AACA,UAAM,aAAa,WAAW,SAAS,WAAW,YAAY,WAAW;AAEzE,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,OAAO,IAAI,gBAAgB;AACjC,YAAM,QAAQ,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,SAAS;AAC3D,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,UACzC;AAAA,UACA,SAAS;AAAA,YACP,aAAa,KAAK;AAAA,YAClB,QAAQ;AAAA,YACR,GAAI,KAAK,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1E;AAAA,UACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,UAC5D,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,qBAAa,KAAK;AAElB,YAAI,cAAc,UAAU,KAAK,YAAY;AAAE,gBAAM,MAAM,QAAQ,OAAO,CAAC;AAAG;AAAA,QAAU;AACxF,cAAM,IAAI,aAAa,kBAAmB,IAAc,OAAO,IAAI,EAAE,QAAQ,GAAG,MAAM,gBAAgB,CAAC;AAAA,MACzG;AACA,mBAAa,KAAK;AAElB,YAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AAErD,YAAM,YAAY,IAAI,WAAW,OAAO,IAAI,UAAU;AACtD,YAAM,YAAY,IAAI,WAAW,OAAO;AACxC,UAAI,aAAa,aAAa,UAAU,KAAK,YAAY;AACvD,cAAM,KAAK,OAAO,IAAI,QAAQ,IAAI,aAAa,CAAC;AAChD,cAAM,MAAM,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,MAAO,QAAQ,OAAO,CAAC;AACxE;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAM,OAAO,OAAO,SAAS,IAAI,IAAI;AACrC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,SAAS,KAAK,WAAW,KAAK,UAAW,QAAQ,IAAI,MAAM;AAC5E,cAAM,IAAI,aAAa,SAAS,EAAE,QAAQ,IAAI,QAAQ,MAAO,QAAQ,KAAK,SAAU,SAAS,UAAU,CAAC;AAAA,MAC1G;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAc,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAExE,IAAM,UAAU,CAAC,YAAoB,KAAK,MAAO,MAAM,KAAK,WAAY,MAAM,KAAK,OAAO,IAAI,IAAI;AAElG,SAAS,SAAS,MAAmB;AACnC,MAAI;AAAE,WAAO,KAAK,MAAM,IAAI;AAAA,EAAG,QAAQ;AAAE,WAAO,EAAE,KAAK,KAAK;AAAA,EAAG;AACjE;AAIA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA4G;AACjH,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EACzG;AAAA;AAAA,EAEA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AACzF;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACtB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAmC,OAAO,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS;AAAA,EAAG;AAAA,EACzG,OAAO,OAA6H;AAClI,WAAO,KAAK,EAAE,QAAgC,QAAQ,cAAc,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAC7G;AAAA,EACA,OAAO,IAAY,OAAwI;AACzJ,WAAO,KAAK,EAAE,QAAgC,SAAS,cAAc,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EACpH;AAAA;AAAA,EAEA,IAAI,IAAY;AAAE,WAAO,KAAK,EAAE,QAAgE,QAAQ,cAAc,EAAE,MAAM;AAAA,EAAG;AAAA;AAAA,EAEjI,MAAM,IAAY,OAAgC,CAAC,GAAG;AACpD,WAAO,KAAK,EAAE,QAA2B,OAAO,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EACnI;AAAA;AAAA,EAEA,MAAM,IAAY;AAAE,WAAO,KAAK,EAAE,QAA6B,OAAO,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAAG;AAC1H;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO,IAAY,OAAwD;AACzE,WAAO,KAAK,EAAE,QAAwB,SAAS,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EACpG;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,SAAS;AAAE,WAAO,KAAK,EAAE,QAAoC,OAAO,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;AAAA,EAAG;AAAA,EAC/G,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA6F;AAClG,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,WAAW,QAAQ,CAAC,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAChJ;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AAAA;AAAA,EAEvF,KAAK,IAAY;AAAE,WAAO,KAAK,EAAE,QAAiB,QAAQ,aAAa,EAAE,OAAO;AAAA,EAAG;AAAA,EACnF,WAAW,IAAY;AAAE,WAAO,KAAK,EAAE,QAA2C,OAAO,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;AAAA,EAAG;AACpJ;AAEA,IAAM,kBAAN,MAAsB;AAAA,EACpB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAA4B,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAAG;AAAA;AAAA,EAExF,OAAO,OAAoG;AACzG,WAAO,KAAK,EAAE,QAAyC,QAAQ,SAAS,EAAE,MAAM,MAAM,CAAC;AAAA,EACzF;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,SAAS,EAAE,EAAE;AAAA,EAAG;AACrF;AAQA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,UAAU;AAAE,WAAO,KAAK,EAAE,QAAsB,OAAO,QAAQ;AAAA,EAAG;AAAA;AAAA,EAElE,KAAK,SAAoB,CAAC,GAAG;AAC3B,WAAO,KAAK,EAAE,QAAgC,OAAO,SAAS,EAAE,OAAO,OAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAC9G;AAAA;AAAA;AAAA,EAGA,OAAO,YAAY,SAAoC,CAAC,GAA8C;AACpG,UAAM,WAAW,OAAO,SAAS;AACjC,aAAS,SAAS,KAAK,UAAU,UAAU;AACzC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,GAAG,QAAQ,OAAO,UAAU,OAAO,CAAC;AACnE,iBAAW,OAAO,KAAM,OAAM;AAC9B,UAAI,KAAK,SAAS,SAAU;AAAA,IAC9B;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/internal.ts","../src/index.ts"],"sourcesContent":["/**\n * Pure, total helpers — the testable core of the SDK. No I/O, no throwing\n * (except the deliberately-effectful `hmacHex`, which is referentially\n * transparent: same inputs → same digest). The client (index.ts) is the thin\n * effectful shell that threads `fetch`, sleep, and randomness around these.\n */\nimport { createHmac, timingSafeEqual } from 'node:crypto';\n\n// ── Webhook signatures ───────────────────────────────────────────────────────\nexport interface ParsedSignature { t: number; v1: string }\n\n/** Parse `t=<unix>,v1=<hex>`. Returns null for anything malformed (total). */\nexport function parseSignature(header: string): ParsedSignature | null {\n  const parts: Record<string, string> = {};\n  for (const p of header.split(',')) {\n    const i = p.indexOf('=');\n    if (i > 0) parts[p.slice(0, i).trim()] = p.slice(i + 1).trim();\n  }\n  const t = Number(parts.t);\n  if (!Number.isFinite(t) || t <= 0 || !parts.v1) return null;\n  return { t, v1: parts.v1 };\n}\n\nexport const signingString = (t: number, payload: string): string => `${t}.${payload}`;\n\nexport const hmacHex = (secret: string, message: string): string =>\n  createHmac('sha256', secret).update(message).digest('hex');\n\n/** Is `t` within `toleranceSec` of `nowMs`? `toleranceSec <= 0` disables. */\nexport function timestampFresh(t: number, toleranceSec: number, nowMs: number): boolean {\n  return toleranceSec <= 0 || Math.abs(nowMs / 1000 - t) <= toleranceSec;\n}\n\n/** Constant-time string equality (length-aware). */\nexport function timingSafeEqualStr(a: string, b: string): boolean {\n  const ba = Buffer.from(a);\n  const bb = Buffer.from(b);\n  return ba.length === bb.length && timingSafeEqual(ba, bb);\n}\n\n// ── URL building ─────────────────────────────────────────────────────────────\nexport type QueryValue = string | number | boolean | undefined | null;\n\nexport function buildUrl(base: string, path: string, query?: Record<string, QueryValue>): string {\n  const url = new URL(base + path);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v !== undefined && v !== null && v !== '') url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n// ── Retry decisions (pure) ───────────────────────────────────────────────────\nexport const isIdempotent = (method: string): boolean =>\n  method === 'GET' || method === 'DELETE' || method === 'PUT';\n\n/** Network/timeout error: retry only idempotent methods, within budget. */\nexport const shouldRetryNetwork = (method: string, attempt: number, maxRetries: number): boolean =>\n  isIdempotent(method) && attempt < maxRetries;\n\n/** A 429 (didn't process → any method) or 5xx (idempotent only), within budget. */\nexport function shouldRetryStatus(method: string, status: number, attempt: number, maxRetries: number): boolean {\n  const transient = status === 429 || status >= 500;\n  const allowed = status === 429 || isIdempotent(method);\n  return transient && allowed && attempt < maxRetries;\n}\n\n/** Exponential backoff with jitter: ~250ms · 2^attempt · [0.8,1.2). `rand` injected. */\nexport const backoffMs = (attempt: number, rand: () => number): number =>\n  Math.round(250 * 2 ** attempt * (0.8 + rand() * 0.4));\n\n/** Honor a numeric `Retry-After` (seconds), else fall back to backoff. */\nexport function retryDelayMs(retryAfter: string | null, attempt: number, rand: () => number): number {\n  const ra = Number(retryAfter);\n  return Number.isFinite(ra) && ra > 0 ? ra * 1000 : backoffMs(attempt, rand);\n}\n","/**\n * @clawpro/node — official SDK for the ClawPro Instagram outbound API.\n *\n * ```ts\n * import { ClawPro } from '@clawpro/node'\n * const clawpro = new ClawPro({ apiKey: process.env.CLAWPRO_API_KEY! })\n * const { accounts } = await clawpro.accounts.list()\n * ```\n */\n\nimport {\n  parseSignature, timestampFresh, hmacHex, signingString, timingSafeEqualStr,\n  buildUrl, shouldRetryNetwork, shouldRetryStatus, backoffMs, retryDelayMs,\n} from './internal';\n\n// ─────────────────────────────── Types ───────────────────────────────────────\n\nexport type AccountStatus = 'new' | 'warming' | 'active' | 'challenged' | 'banned' | 'disconnected';\nexport type ProxyType = 'mobile' | 'isp' | 'residential' | 'none';\n\nexport interface Account {\n  id: string;\n  username: string;\n  status: AccountStatus;\n  warmupTier?: number;\n  dailyDmCap?: number;\n}\n\nexport type CampaignStatus = 'draft' | 'active' | 'paused';\n\nexport interface CampaignTarget {\n  username: string;\n  lastCheckedPostId: string | null;\n}\n\nexport interface Campaign {\n  id: string;\n  accountId: string;\n  name: string;\n  status: CampaignStatus;\n  targets: CampaignTarget[];\n  offer: string;\n  icpCriteria: string;\n  dailyDmTarget: number;\n}\n\nexport type LeadStatus =\n  | 'discovered' | 'enriched' | 'scored' | 'qualified' | 'rejected'\n  | 'queued' | 'dmed' | 'replied' | 'booked';\n\nexport interface Message {\n  id: string;\n  direction: 'out' | 'in';\n  body: string;\n  status: string;\n  sentAt: string | null;\n  createdAt: string;\n}\n\nexport interface Lead {\n  id: string;\n  igUsername: string;\n  fullName: string | null;\n  sourceTargetUsername: string;\n  engagementType: 'like' | 'comment';\n  commentText: string | null;\n  score: number | null;\n  scoreReason: string | null;\n  status: LeadStatus;\n  messages?: Message[];\n}\n\nexport type WebhookType = 'generic' | 'slack';\nexport type WebhookEvent =\n  | 'reply.received' | 'dm.sent' | 'dm.failed'\n  | 'lead.qualified' | 'lead.booked'\n  | 'account.active' | 'account.challenged' | 'account.banned';\n\nexport interface Webhook {\n  id: string;\n  label: string;\n  url: string;\n  type: WebhookType;\n  events: (WebhookEvent | '*')[];\n  active: boolean;\n  lastStatus: number | null;\n  lastDeliveryAt: string | null;\n  lastError: string | null;\n  /** Present only on the create response (generic HMAC secret). */\n  secret?: string;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  event: string;\n  status: 'pending' | 'delivered' | 'dead';\n  attempts: number;\n  lastStatusCode: number | null;\n  lastError: string | null;\n  nextRetryAt: string | null;\n  deliveredAt: string | null;\n  createdAt: string;\n}\n\nexport type ApiKeyEnv = 'production' | 'development';\nexport type ApiKeyAccess = 'full' | 'read' | 'write';\n\nexport interface ApiKey {\n  id: string;\n  name: string;\n  environment: ApiKeyEnv;\n  access: ApiKeyAccess;\n  keyPrefix: string;\n  createdAt: string;\n  expiresAt: string | null;\n  lastUsedAt: string | null;\n}\n\nexport interface UsageSummary {\n  callsThisMonth: number;\n  calls24h: number;\n  errors: number;\n  avgLatencyMs: number;\n}\n\nexport interface RequestLog {\n  id: string;\n  requestId: string;\n  method: string;\n  path: string;\n  status: number;\n  latencyMs: number;\n  error: string | null;\n  createdAt: string;\n  keyName: string | null;\n  keyPrefix: string | null;\n}\n\n// ─────────────────────────────── Errors ──────────────────────────────────────\n\n/** Thrown for any non-2xx API response. Inspect `status` / `requestId`. */\nexport class ClawProError extends Error {\n  readonly status: number;\n  readonly code: string;\n  readonly requestId?: string;\n  constructor(message: string, opts: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = 'ClawProError';\n    this.status = opts.status;\n    this.code = opts.code ?? 'error';\n    this.requestId = opts.requestId;\n  }\n}\n\n// ─────────────────────────────── Client ──────────────────────────────────────\n\nexport interface ClawProOptions {\n  /** A `sk_live_…` / `sk_test_…` key from the developer portal. Sent as `X-API-Key`. */\n  apiKey: string;\n  /** API origin (no trailing slash). Defaults to https://api.tryclawpro.com */\n  baseUrl?: string;\n  /** Override the fetch implementation (defaults to global fetch). */\n  fetch?: typeof fetch;\n  /** Per-request timeout in ms (default 30000). */\n  timeoutMs?: number;\n  /** Auto-retry transient failures (network, 429, 5xx) with exponential backoff.\n   *  Default 2. 429s honor the `Retry-After` header; only idempotent methods\n   *  (GET/DELETE/PUT) are retried on network/5xx. */\n  maxRetries?: number;\n  /** Injected for determinism/testing — defaults to a real timer. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injected for determinism/testing — defaults to Math.random. */\n  rand?: () => number;\n}\n\ntype Query = Record<string, string | number | boolean | undefined | null>;\n\nexport class ClawPro {\n  readonly accounts: AccountsResource;\n  readonly campaigns: CampaignsResource;\n  readonly leads: LeadsResource;\n  readonly webhooks: WebhooksResource;\n  readonly keys: ApiKeysResource;\n  readonly usage: UsageResource;\n\n  private readonly apiKey: string;\n  private readonly base: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly maxRetries: number;\n  private readonly sleep: (ms: number) => Promise<void>;\n  private readonly rand: () => number;\n\n  constructor(opts: ClawProOptions) {\n    if (!opts?.apiKey) throw new Error('ClawPro: `apiKey` is required');\n    this.apiKey = opts.apiKey;\n    const origin = (opts.baseUrl ?? 'https://api.tryclawpro.com').replace(/\\/$/, '');\n    this.base = `${origin}/api/instagram`;\n    this.fetchImpl = opts.fetch ?? globalThis.fetch;\n    if (!this.fetchImpl) throw new Error('ClawPro: no fetch available — pass `fetch` (Node <18)');\n    this.timeoutMs = opts.timeoutMs ?? 30_000;\n    this.maxRetries = opts.maxRetries ?? 2;\n    this.sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));\n    this.rand = opts.rand ?? Math.random;\n\n    this.accounts = new AccountsResource(this);\n    this.campaigns = new CampaignsResource(this);\n    this.leads = new LeadsResource(this);\n    this.webhooks = new WebhooksResource(this);\n    this.keys = new ApiKeysResource(this);\n    this.usage = new UsageResource(this);\n  }\n\n  /** @internal */\n  async request<T>(method: string, path: string, opts: { body?: unknown; query?: Query } = {}): Promise<T> {\n    const url = buildUrl(this.base, path, opts.query);\n\n    for (let attempt = 0; ; attempt++) {\n      const ctrl = new AbortController();\n      const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);\n      let res: Response;\n      try {\n        res = await this.fetchImpl(url, {\n          method,\n          headers: {\n            'X-API-Key': this.apiKey,\n            Accept: 'application/json',\n            ...(opts.body !== undefined ? { 'Content-Type': 'application/json' } : {}),\n          },\n          body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n          signal: ctrl.signal,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        if (shouldRetryNetwork(method, attempt, this.maxRetries)) {\n          await this.sleep(backoffMs(attempt, this.rand));\n          continue;\n        }\n        throw new ClawProError(`Network error: ${(err as Error).message}`, { status: 0, code: 'network_error' });\n      }\n      clearTimeout(timer);\n\n      if (shouldRetryStatus(method, res.status, attempt, this.maxRetries)) {\n        await this.sleep(retryDelayMs(res.headers.get('retry-after'), attempt, this.rand));\n        continue;\n      }\n\n      const requestId = res.headers.get('x-request-id') ?? undefined;\n      const text = await res.text();\n      const data = text ? safeJson(text) : undefined;\n      if (!res.ok) {\n        const message = (data && (data.message || data.error)) || `HTTP ${res.status}`;\n        throw new ClawProError(message, { status: res.status, code: (data && data.error) || 'error', requestId });\n      }\n      return data as T;\n    }\n  }\n}\n\nfunction safeJson(text: string): any {\n  try { return JSON.parse(text); } catch { return { raw: text }; }\n}\n\n// ───────────────────────────── Resources ─────────────────────────────────────\n\nclass AccountsResource {\n  constructor(private c: ClawPro) {}\n  /** List connected sending accounts. */\n  list() { return this.c.request<{ accounts: Account[] }>('GET', '/accounts').then((r) => r.accounts); }\n  /** Connect a new sending account (a geo-matched mobile proxy is assigned). */\n  create(input: { username: string; country?: string; proxyType?: ProxyType; proxyUrl?: string; timezone?: string }) {\n    return this.c.request<{ account: Account }>('POST', '/accounts', { body: input }).then((r) => r.account);\n  }\n  /** Remove an account (cascades to its campaigns/leads/messages). */\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/accounts/${id}`); }\n}\n\nclass CampaignsResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ campaigns: Campaign[] }>('GET', '/campaigns').then((r) => r.campaigns); }\n  create(input: { accountId: string; name: string; targets: string[]; offer?: string; icpCriteria?: string; dailyDmTarget?: number }) {\n    return this.c.request<{ campaign: Campaign }>('POST', '/campaigns', { body: input }).then((r) => r.campaign);\n  }\n  update(id: string, patch: Partial<{ status: CampaignStatus; targets: string[]; offer: string; icpCriteria: string; dailyDmTarget: number; name: string }>) {\n    return this.c.request<{ campaign: Campaign }>('PATCH', `/campaigns/${id}`, { body: patch }).then((r) => r.campaign);\n  }\n  /** Kick a discovery/scoring/queue run for a campaign. */\n  run(id: string) { return this.c.request<{ discovered: number; scored: number; queued: number }>('POST', `/campaigns/${id}/run`); }\n  /** Leads for a campaign, optionally filtered by status. */\n  leads(id: string, opts: { status?: LeadStatus } = {}) {\n    return this.c.request<{ leads: Lead[] }>('GET', `/campaigns/${id}/leads`, { query: { status: opts.status } }).then((r) => r.leads);\n  }\n  /** Threads with at least one message (the unified inbox). */\n  inbox(id: string) { return this.c.request<{ threads: Lead[] }>('GET', `/campaigns/${id}/inbox`).then((r) => r.threads); }\n}\n\nclass LeadsResource {\n  constructor(private c: ClawPro) {}\n  /** Advance a lead — e.g. `{ status: 'booked' }` once a call is set (fires `lead.booked`). */\n  update(id: string, patch: { status: 'qualified' | 'rejected' | 'booked' }) {\n    return this.c.request<{ lead: Lead }>('PATCH', `/leads/${id}`, { body: patch }).then((r) => r.lead);\n  }\n}\n\nclass WebhooksResource {\n  constructor(private c: ClawPro) {}\n  /** The catalog of subscribable event types. */\n  events() { return this.c.request<{ events: WebhookEvent[] }>('GET', '/webhooks/events').then((r) => r.events); }\n  list() { return this.c.request<{ webhooks: Webhook[] }>('GET', '/webhooks').then((r) => r.webhooks); }\n  /** Create an endpoint. The generic HMAC `secret` is returned once, here. */\n  create(input: { url: string; type?: WebhookType; events?: (WebhookEvent | '*')[]; label?: string }) {\n    return this.c.request<{ webhook: Webhook }>('POST', '/webhooks', { body: { type: 'generic', events: ['*'], ...input } }).then((r) => r.webhook);\n  }\n  delete(id: string) { return this.c.request<{ ok: true }>('DELETE', `/webhooks/${id}`); }\n  /** Send a `webhook.test` delivery. */\n  test(id: string) { return this.c.request<unknown>('POST', `/webhooks/${id}/test`); }\n  deliveries(id: string) { return this.c.request<{ deliveries: WebhookDelivery[] }>('GET', `/webhooks/${id}/deliveries`).then((r) => r.deliveries); }\n}\n\nclass ApiKeysResource {\n  constructor(private c: ClawPro) {}\n  list() { return this.c.request<{ keys: ApiKey[] }>('GET', '/keys').then((r) => r.keys); }\n  /** Returns `{ secret, key }` — the plaintext `secret` is shown only here. */\n  create(input: { name: string; environment?: ApiKeyEnv; access?: ApiKeyAccess; expiresAt?: string | null }) {\n    return this.c.request<{ secret: string; key: ApiKey }>('POST', '/keys', { body: input });\n  }\n  revoke(id: string) { return this.c.request<{ ok: true }>('DELETE', `/keys/${id}`); }\n}\n\nexport interface LogFilter {\n  key?: string; method?: string; status?: '2xx' | '4xx' | '5xx';\n  from?: string; to?: string; endpoint?: string; requestId?: string; search?: string;\n  limit?: number; offset?: number;\n}\n\nclass UsageResource {\n  constructor(private c: ClawPro) {}\n  /** Calls this month / 24h / errors / avg latency. */\n  summary() { return this.c.request<UsageSummary>('GET', '/usage'); }\n  /** A single page of request logs (`limit` + `offset`). */\n  logs(filter: LogFilter = {}) {\n    return this.c.request<{ logs: RequestLog[] }>('GET', '/logs', { query: filter as Query }).then((r) => r.logs);\n  }\n  /** Auto-paginate every matching log:\n   *  `for await (const log of clawpro.usage.iterateLogs()) { … }` */\n  async *iterateLogs(filter: Omit<LogFilter, 'offset'> = {}): AsyncGenerator<RequestLog, void, unknown> {\n    const pageSize = filter.limit ?? 100;\n    for (let offset = 0; ; offset += pageSize) {\n      const page = await this.logs({ ...filter, limit: pageSize, offset });\n      for (const row of page) yield row;\n      if (page.length < pageSize) return;\n    }\n  }\n}\n\n// ─────────────────────────── Webhook verification ────────────────────────────\n\nexport interface VerifyWebhookOptions {\n  /** The raw request body, exactly as received (string). */\n  payload: string;\n  /** The `X-Souk-Signature` header value (`t=…,v1=…`). */\n  signature: string;\n  /** The endpoint's signing secret (shown once on webhook creation). */\n  secret: string;\n  /** Reject signatures older than this many seconds (default 300; 0 disables). */\n  toleranceSec?: number;\n}\n\n/** Verify a ClawPro webhook's HMAC signature (timing-safe). Returns true if valid.\n *\n *  ```ts\n *  if (!verifyWebhook({ payload: rawBody, signature: req.headers['x-souk-signature'], secret })) return res.sendStatus(400)\n *  ```\n */\nexport function verifyWebhook(opts: VerifyWebhookOptions): boolean {\n  const { payload, signature, secret, toleranceSec = 300 } = opts;\n  const parsed = parseSignature(signature);\n  if (!parsed) return false;\n  if (!timestampFresh(parsed.t, toleranceSec, Date.now())) return false;\n  const expected = hmacHex(secret, signingString(parsed.t, payload));\n  return timingSafeEqualStr(expected, parsed.v1);\n}\n"],"mappings":";AAMA,SAAS,YAAY,uBAAuB;AAMrC,SAAS,eAAe,QAAwC;AACrE,QAAM,QAAgC,CAAC;AACvC,aAAW,KAAK,OAAO,MAAM,GAAG,GAAG;AACjC,UAAM,IAAI,EAAE,QAAQ,GAAG;AACvB,QAAI,IAAI,EAAG,OAAM,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,KAAK;AAAA,EAC/D;AACA,QAAM,IAAI,OAAO,MAAM,CAAC;AACxB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,GAAI,QAAO;AACvD,SAAO,EAAE,GAAG,IAAI,MAAM,GAAG;AAC3B;AAEO,IAAM,gBAAgB,CAAC,GAAW,YAA4B,GAAG,CAAC,IAAI,OAAO;AAE7E,IAAM,UAAU,CAAC,QAAgB,YACtC,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAGpD,SAAS,eAAe,GAAW,cAAsB,OAAwB;AACtF,SAAO,gBAAgB,KAAK,KAAK,IAAI,QAAQ,MAAO,CAAC,KAAK;AAC5D;AAGO,SAAS,mBAAmB,GAAW,GAAoB;AAChE,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,SAAO,GAAG,WAAW,GAAG,UAAU,gBAAgB,IAAI,EAAE;AAC1D;AAKO,SAAS,SAAS,MAAc,MAAc,OAA4C;AAC/F,QAAM,MAAM,IAAI,IAAI,OAAO,IAAI;AAC/B,MAAI,OAAO;AACT,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAI,MAAM,UAAa,MAAM,QAAQ,MAAM,GAAI,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,IAClF;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAGO,IAAM,eAAe,CAAC,WAC3B,WAAW,SAAS,WAAW,YAAY,WAAW;AAGjD,IAAM,qBAAqB,CAAC,QAAgB,SAAiB,eAClE,aAAa,MAAM,KAAK,UAAU;AAG7B,SAAS,kBAAkB,QAAgB,QAAgB,SAAiB,YAA6B;AAC9G,QAAM,YAAY,WAAW,OAAO,UAAU;AAC9C,QAAM,UAAU,WAAW,OAAO,aAAa,MAAM;AACrD,SAAO,aAAa,WAAW,UAAU;AAC3C;AAGO,IAAM,YAAY,CAAC,SAAiB,SACzC,KAAK,MAAM,MAAM,KAAK,WAAW,MAAM,KAAK,IAAI,IAAI;AAG/C,SAAS,aAAa,YAA2B,SAAiB,MAA4B;AACnG,QAAM,KAAK,OAAO,UAAU;AAC5B,SAAO,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,MAAO,UAAU,SAAS,IAAI;AAC5E;;;ACiEO,IAAM,eAAN,cAA2B,MAAM;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY,SAAiB,MAA6D;AACxF,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK,QAAQ;AACzB,SAAK,YAAY,KAAK;AAAA,EACxB;AACF;AAyBO,IAAM,UAAN,MAAc;AAAA,EACV;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAsB;AAChC,QAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAClE,SAAK,SAAS,KAAK;AACnB,UAAM,UAAU,KAAK,WAAW,8BAA8B,QAAQ,OAAO,EAAE;AAC/E,SAAK,OAAO,GAAG,MAAM;AACrB,SAAK,YAAY,KAAK,SAAS,WAAW;AAC1C,QAAI,CAAC,KAAK,UAAW,OAAM,IAAI,MAAM,4DAAuD;AAC5F,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,QAAQ,KAAK,UAAU,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AACxE,SAAK,OAAO,KAAK,QAAQ,KAAK;AAE9B,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,YAAY,IAAI,kBAAkB,IAAI;AAC3C,SAAK,QAAQ,IAAI,cAAc,IAAI;AACnC,SAAK,WAAW,IAAI,iBAAiB,IAAI;AACzC,SAAK,OAAO,IAAI,gBAAgB,IAAI;AACpC,SAAK,QAAQ,IAAI,cAAc,IAAI;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,QAAW,QAAgB,MAAc,OAA0C,CAAC,GAAe;AACvG,UAAM,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,KAAK;AAEhD,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,OAAO,IAAI,gBAAgB;AACjC,YAAM,QAAQ,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,SAAS;AAC3D,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,KAAK,UAAU,KAAK;AAAA,UAC9B;AAAA,UACA,SAAS;AAAA,YACP,aAAa,KAAK;AAAA,YAClB,QAAQ;AAAA,YACR,GAAI,KAAK,SAAS,SAAY,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1E;AAAA,UACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,UAC5D,QAAQ,KAAK;AAAA,QACf,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,qBAAa,KAAK;AAClB,YAAI,mBAAmB,QAAQ,SAAS,KAAK,UAAU,GAAG;AACxD,gBAAM,KAAK,MAAM,UAAU,SAAS,KAAK,IAAI,CAAC;AAC9C;AAAA,QACF;AACA,cAAM,IAAI,aAAa,kBAAmB,IAAc,OAAO,IAAI,EAAE,QAAQ,GAAG,MAAM,gBAAgB,CAAC;AAAA,MACzG;AACA,mBAAa,KAAK;AAElB,UAAI,kBAAkB,QAAQ,IAAI,QAAQ,SAAS,KAAK,UAAU,GAAG;AACnE,cAAM,KAAK,MAAM,aAAa,IAAI,QAAQ,IAAI,aAAa,GAAG,SAAS,KAAK,IAAI,CAAC;AACjF;AAAA,MACF;AAEA,YAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AACrD,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAM,OAAO,OAAO,SAAS,IAAI,IAAI;AACrC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,SAAS,KAAK,WAAW,KAAK,UAAW,QAAQ,IAAI,MAAM;AAC5E,cAAM,IAAI,aAAa,SAAS,EAAE,QAAQ,IAAI,QAAQ,MAAO,QAAQ,KAAK,SAAU,SAAS,UAAU,CAAC;AAAA,MAC1G;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAmB;AACnC,MAAI;AAAE,WAAO,KAAK,MAAM,IAAI;AAAA,EAAG,QAAQ;AAAE,WAAO,EAAE,KAAK,KAAK;AAAA,EAAG;AACjE;AAIA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA4G;AACjH,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EACzG;AAAA;AAAA,EAEA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AACzF;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACtB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAAmC,OAAO,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS;AAAA,EAAG;AAAA,EACzG,OAAO,OAA6H;AAClI,WAAO,KAAK,EAAE,QAAgC,QAAQ,cAAc,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAC7G;AAAA,EACA,OAAO,IAAY,OAAwI;AACzJ,WAAO,KAAK,EAAE,QAAgC,SAAS,cAAc,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EACpH;AAAA;AAAA,EAEA,IAAI,IAAY;AAAE,WAAO,KAAK,EAAE,QAAgE,QAAQ,cAAc,EAAE,MAAM;AAAA,EAAG;AAAA;AAAA,EAEjI,MAAM,IAAY,OAAgC,CAAC,GAAG;AACpD,WAAO,KAAK,EAAE,QAA2B,OAAO,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK;AAAA,EACnI;AAAA;AAAA,EAEA,MAAM,IAAY;AAAE,WAAO,KAAK,EAAE,QAA6B,OAAO,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAAG;AAC1H;AAEA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,OAAO,IAAY,OAAwD;AACzE,WAAO,KAAK,EAAE,QAAwB,SAAS,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EACpG;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACrB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,SAAS;AAAE,WAAO,KAAK,EAAE,QAAoC,OAAO,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;AAAA,EAAG;AAAA,EAC/G,OAAO;AAAE,WAAO,KAAK,EAAE,QAAiC,OAAO,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;AAAA,EAAG;AAAA;AAAA,EAErG,OAAO,OAA6F;AAClG,WAAO,KAAK,EAAE,QAA8B,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,WAAW,QAAQ,CAAC,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAAA,EAChJ;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,aAAa,EAAE,EAAE;AAAA,EAAG;AAAA;AAAA,EAEvF,KAAK,IAAY;AAAE,WAAO,KAAK,EAAE,QAAiB,QAAQ,aAAa,EAAE,OAAO;AAAA,EAAG;AAAA,EACnF,WAAW,IAAY;AAAE,WAAO,KAAK,EAAE,QAA2C,OAAO,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;AAAA,EAAG;AACpJ;AAEA,IAAM,kBAAN,MAAsB;AAAA,EACpB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA,EACpB,OAAO;AAAE,WAAO,KAAK,EAAE,QAA4B,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAAG;AAAA;AAAA,EAExF,OAAO,OAAoG;AACzG,WAAO,KAAK,EAAE,QAAyC,QAAQ,SAAS,EAAE,MAAM,MAAM,CAAC;AAAA,EACzF;AAAA,EACA,OAAO,IAAY;AAAE,WAAO,KAAK,EAAE,QAAsB,UAAU,SAAS,EAAE,EAAE;AAAA,EAAG;AACrF;AAQA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAAoB,GAAY;AAAZ;AAAA,EAAa;AAAA,EAAb;AAAA;AAAA,EAEpB,UAAU;AAAE,WAAO,KAAK,EAAE,QAAsB,OAAO,QAAQ;AAAA,EAAG;AAAA;AAAA,EAElE,KAAK,SAAoB,CAAC,GAAG;AAC3B,WAAO,KAAK,EAAE,QAAgC,OAAO,SAAS,EAAE,OAAO,OAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAC9G;AAAA;AAAA;AAAA,EAGA,OAAO,YAAY,SAAoC,CAAC,GAA8C;AACpG,UAAM,WAAW,OAAO,SAAS;AACjC,aAAS,SAAS,KAAK,UAAU,UAAU;AACzC,YAAM,OAAO,MAAM,KAAK,KAAK,EAAE,GAAG,QAAQ,OAAO,UAAU,OAAO,CAAC;AACnE,iBAAW,OAAO,KAAM,OAAM;AAC9B,UAAI,KAAK,SAAS,SAAU;AAAA,IAC9B;AAAA,EACF;AACF;AAqBO,SAAS,cAAc,MAAqC;AACjE,QAAM,EAAE,SAAS,WAAW,QAAQ,eAAe,IAAI,IAAI;AAC3D,QAAM,SAAS,eAAe,SAAS;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,CAAC,eAAe,OAAO,GAAG,cAAc,KAAK,IAAI,CAAC,EAAG,QAAO;AAChE,QAAM,WAAW,QAAQ,QAAQ,cAAc,OAAO,GAAG,OAAO,CAAC;AACjE,SAAO,mBAAmB,UAAU,OAAO,EAAE;AAC/C;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawpro/node",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Official Node.js / TypeScript SDK for the ClawPro Instagram outbound API.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -13,22 +13,43 @@
       "require": "./dist/index.cjs"
     }
   },
-  "files": ["dist", "README.md"],
+  "files": [
+    "dist",
+    "README.md"
+  ],
   "sideEffects": false,
   "scripts": {
     "build": "tsup",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "test": "vitest run"
   },
-  "keywords": ["clawpro", "instagram", "outbound", "dm", "sdk", "api", "tryclawpro"],
+  "keywords": [
+    "clawpro",
+    "instagram",
+    "outbound",
+    "dm",
+    "sdk",
+    "api",
+    "tryclawpro"
+  ],
   "author": "ClawPro",
   "license": "MIT",
   "homepage": "https://tryclawpro.com",
-  "repository": { "type": "git", "url": "git+https://github.com/Bojale-Labs/clawpro-node.git" },
-  "bugs": { "url": "https://github.com/Bojale-Labs/clawpro-node/issues" },
-  "engines": { "node": ">=18" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Bojale-Labs/clawpro-node.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Bojale-Labs/clawpro-node/issues"
+  },
+  "engines": {
+    "node": ">=18"
+  },
   "devDependencies": {
+    "@types/node": "^26.0.1",
     "tsup": "^8.3.0",
-    "typescript": "^5.6.0"
+    "typescript": "^5.6.0",
+    "vitest": "^4.1.9"
   }
 }