@fundedfast/sdk 1.3.0

package/dist/cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}

package/dist/cjs/webhooks.d.ts

@@ -0,0 +1,104 @@
+/**
+ * @fundedfast/sdk/webhooks - Webhook Signature Verification
+ *
+ * Helpers for verifying FAST webhook deliveries in your backend.
+ * FAST signs all webhook payloads with HMAC-SHA256 using your webhook secret.
+ *
+ * @example
+ * ```typescript
+ * import { verifyWebhookSignature, parseWebhookEvent } from '@fundedfast/sdk/webhooks';
+ *
+ * app.post('/webhooks/fast', express.raw({ type: 'application/json' }), async (req, res) => {
+ *   const signature = req.headers['x-webhook-signature'] as string;
+ *   const rawBody = req.body.toString('utf-8'); // the raw bytes, not parsed JSON
+ *
+ *   // It is async: without `await` the check is a Promise, always truthy, and
+ *   // every request passes.
+ *   if (!await verifyWebhookSignature(rawBody, signature, process.env.FAST_WEBHOOK_SECRET!)) {
+ *     return res.status(401).send('Invalid signature');
+ *   }
+ *
+ *   const event = parseWebhookEvent(rawBody);
+ *   switch (event.eventType) {
+ *     case 'challenge.completed':
+ *       handleChallengeCompleted(event.userId, event.data);
+ *       break;
+ *     case 'funded_account.revoked':
+ *       handleRevocation(event.userId, event.data);
+ *       break;
+ *   }
+ *
+ *   res.status(200).send({ received: true });
+ * });
+ * ```
+ *
+ * @module webhooks
+ */
+import type { WebhookPayload, WebhookEventType } from './types.js';
+/**
+ * Verify the HMAC-SHA256 signature of a webhook payload.
+ *
+ * Uses timing-safe comparison to prevent timing attacks.
+ * Works in Node.js (crypto module) and edge runtimes (Web Crypto API).
+ *
+ * @param rawBody - The raw request body as a string (NOT parsed JSON)
+ * @param signature - The X-Webhook-Signature header value
+ * @param secret - Your webhook secret (from tenant setup)
+ * @returns true if signature is valid
+ *
+ * @example
+ * ```typescript
+ * // Express with raw body parser
+ * app.use('/webhooks', express.raw({ type: 'application/json' }));
+ *
+ * app.post('/webhooks/fast', async (req, res) => {
+ *   const rawBody = req.body.toString('utf-8');
+ *   const sig = req.headers['x-webhook-signature'] as string;
+ *
+ *   if (!await verifyWebhookSignature(rawBody, sig, WEBHOOK_SECRET)) {
+ *     return res.status(401).json({ error: 'invalid_signature' });
+ *   }
+ *   // ... handle event
+ * });
+ * ```
+ */
+export declare function verifyWebhookSignature(rawBody: string, signature: string, secret: string): Promise<boolean>;
+/**
+ * Synchronous signature verification using Web Crypto (browser/edge compatible).
+ *
+ * NOTE: This is async because Web Crypto API is async.
+ * If you need sync verification in Node.js, import crypto directly:
+ *
+ * ```typescript
+ * import { createHmac, timingSafeEqual } from 'node:crypto';
+ * const expected = createHmac('sha256', secret).update(rawBody).digest('hex');
+ * const valid = timingSafeEqual(Buffer.from(expected, 'hex'), Buffer.from(signature, 'hex'));
+ * ```
+ */
+/**
+ * Parse a webhook event payload.
+ *
+ * @param rawBody - The raw request body as a string or parsed object
+ * @returns Typed webhook payload with eventId, eventType, userId, timestamp, and data
+ *
+ * @example
+ * ```typescript
+ * const event = parseWebhookEvent(rawBody);
+ * console.log(event.eventType); // 'challenge.completed'
+ * console.log(event.data);      // { challengeId: '...', balance: 105.50, ... }
+ * ```
+ */
+export declare function parseWebhookEvent<T = Record<string, unknown>>(rawBody: string | Record<string, unknown>): WebhookPayload<T>;
+/**
+ * Check if an event type is one of the challenge lifecycle events.
+ */
+export declare function isChallengeEvent(eventType: WebhookEventType): boolean;
+/**
+ * Check if an event type is one of the funded account lifecycle events.
+ */
+export declare function isFundedAccountEvent(eventType: WebhookEventType): boolean;
+/**
+ * Check if an event type is one of the user lifecycle events.
+ */
+export declare function isUserEvent(eventType: WebhookEventType): boolean;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/cjs/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAuClB;AAED;;;;;;;;;;;GAWG;AAIH;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAG3H;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAErE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEzE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEhE"}

package/dist/cjs/webhooks.js

@@ -0,0 +1,199 @@
+"use strict";
+/**
+ * @fundedfast/sdk/webhooks - Webhook Signature Verification
+ *
+ * Helpers for verifying FAST webhook deliveries in your backend.
+ * FAST signs all webhook payloads with HMAC-SHA256 using your webhook secret.
+ *
+ * @example
+ * ```typescript
+ * import { verifyWebhookSignature, parseWebhookEvent } from '@fundedfast/sdk/webhooks';
+ *
+ * app.post('/webhooks/fast', express.raw({ type: 'application/json' }), async (req, res) => {
+ *   const signature = req.headers['x-webhook-signature'] as string;
+ *   const rawBody = req.body.toString('utf-8'); // the raw bytes, not parsed JSON
+ *
+ *   // It is async: without `await` the check is a Promise, always truthy, and
+ *   // every request passes.
+ *   if (!await verifyWebhookSignature(rawBody, signature, process.env.FAST_WEBHOOK_SECRET!)) {
+ *     return res.status(401).send('Invalid signature');
+ *   }
+ *
+ *   const event = parseWebhookEvent(rawBody);
+ *   switch (event.eventType) {
+ *     case 'challenge.completed':
+ *       handleChallengeCompleted(event.userId, event.data);
+ *       break;
+ *     case 'funded_account.revoked':
+ *       handleRevocation(event.userId, event.data);
+ *       break;
+ *   }
+ *
+ *   res.status(200).send({ received: true });
+ * });
+ * ```
+ *
+ * @module webhooks
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyWebhookSignature = verifyWebhookSignature;
+exports.parseWebhookEvent = parseWebhookEvent;
+exports.isChallengeEvent = isChallengeEvent;
+exports.isFundedAccountEvent = isFundedAccountEvent;
+exports.isUserEvent = isUserEvent;
+/**
+ * Verify the HMAC-SHA256 signature of a webhook payload.
+ *
+ * Uses timing-safe comparison to prevent timing attacks.
+ * Works in Node.js (crypto module) and edge runtimes (Web Crypto API).
+ *
+ * @param rawBody - The raw request body as a string (NOT parsed JSON)
+ * @param signature - The X-Webhook-Signature header value
+ * @param secret - Your webhook secret (from tenant setup)
+ * @returns true if signature is valid
+ *
+ * @example
+ * ```typescript
+ * // Express with raw body parser
+ * app.use('/webhooks', express.raw({ type: 'application/json' }));
+ *
+ * app.post('/webhooks/fast', async (req, res) => {
+ *   const rawBody = req.body.toString('utf-8');
+ *   const sig = req.headers['x-webhook-signature'] as string;
+ *
+ *   if (!await verifyWebhookSignature(rawBody, sig, WEBHOOK_SECRET)) {
+ *     return res.status(401).json({ error: 'invalid_signature' });
+ *   }
+ *   // ... handle event
+ * });
+ * ```
+ */
+async function verifyWebhookSignature(rawBody, signature, secret) {
+    if (!rawBody || !signature || !secret)
+        return false;
+    // SHA-256 hex is exactly 64 hex characters. Anything else is not a signature
+    // FAST produced; refuse it before parsing rather than let parseInt guess.
+    if (typeof signature !== 'string' || !/^[0-9a-f]{64}$/i.test(signature))
+        return false;
+    signature = signature.toLowerCase();
+    // Try Node.js crypto first (fastest path)
+    try {
+        const crypto = await Promise.resolve().then(() => __importStar(require('node:crypto')));
+        const expected = crypto.createHmac('sha256', secret).update(rawBody).digest('hex');
+        if (expected.length !== signature.length)
+            return false;
+        const a = new Uint8Array(expected.length / 2);
+        const b = new Uint8Array(signature.length / 2);
+        for (let i = 0; i < a.length; i++) {
+            a[i] = parseInt(expected.slice(i * 2, i * 2 + 2), 16);
+            b[i] = parseInt(signature.slice(i * 2, i * 2 + 2), 16);
+        }
+        return crypto.timingSafeEqual(a, b);
+    }
+    catch {
+        // Not in Node.js - fall through to Web Crypto
+    }
+    // Web Crypto API (edge runtimes, Deno, Bun, Cloudflare Workers)
+    try {
+        const encoder = new TextEncoder();
+        const key = await crypto.subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        const sig = await crypto.subtle.sign('HMAC', key, encoder.encode(rawBody));
+        const expected = Array.from(new Uint8Array(sig)).map(b => b.toString(16).padStart(2, '0')).join('');
+        return timingSafeCompare(expected, signature);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Synchronous signature verification using Web Crypto (browser/edge compatible).
+ *
+ * NOTE: This is async because Web Crypto API is async.
+ * If you need sync verification in Node.js, import crypto directly:
+ *
+ * ```typescript
+ * import { createHmac, timingSafeEqual } from 'node:crypto';
+ * const expected = createHmac('sha256', secret).update(rawBody).digest('hex');
+ * const valid = timingSafeEqual(Buffer.from(expected, 'hex'), Buffer.from(signature, 'hex'));
+ * ```
+ */
+// Re-export verifyWebhookSignature as the primary API - it works everywhere.
+/**
+ * Parse a webhook event payload.
+ *
+ * @param rawBody - The raw request body as a string or parsed object
+ * @returns Typed webhook payload with eventId, eventType, userId, timestamp, and data
+ *
+ * @example
+ * ```typescript
+ * const event = parseWebhookEvent(rawBody);
+ * console.log(event.eventType); // 'challenge.completed'
+ * console.log(event.data);      // { challengeId: '...', balance: 105.50, ... }
+ * ```
+ */
+function parseWebhookEvent(rawBody) {
+    const parsed = typeof rawBody === 'string' ? JSON.parse(rawBody) : rawBody;
+    return parsed;
+}
+/**
+ * Check if an event type is one of the challenge lifecycle events.
+ */
+function isChallengeEvent(eventType) {
+    return eventType.startsWith('challenge.');
+}
+/**
+ * Check if an event type is one of the funded account lifecycle events.
+ */
+function isFundedAccountEvent(eventType) {
+    return eventType.startsWith('funded_account.');
+}
+/**
+ * Check if an event type is one of the user lifecycle events.
+ */
+function isUserEvent(eventType) {
+    return eventType.startsWith('user.');
+}
+// ---- Internals ----
+function timingSafeCompare(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let result = 0;
+    for (let i = 0; i < a.length; i++) {
+        result |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return result === 0;
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/cjs/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BH,wDA2CC;AA8BD,8CAGC;AAKD,4CAEC;AAKD,oDAEC;AAKD,kCAEC;AA5HD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACI,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,SAAiB,EACjB,MAAc;IAEd,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACpD,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAEpC,0CAA0C;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,wDAAa,aAAa,GAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IAED,gEAAgE;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpG,OAAO,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AAEH,6EAA6E;AAE7E;;;;;;;;;;;;GAYG;AACH,SAAgB,iBAAiB,CAA8B,OAAyC;IACtG,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3E,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,SAA2B;IAC1D,OAAO,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,SAA2B;IAC9D,OAAO,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,SAA2B;IACrD,OAAO,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,sBAAsB;AAEtB,SAAS,iBAAiB,CAAC,CAAS,EAAE,CAAS;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/esm/client.d.ts

@@ -0,0 +1,130 @@
+/**
+ * @fundedfast/sdk - Client
+ *
+ * Production-grade HTTP client for the FAST platform API.
+ * Features: automatic retries with exponential backoff, rate limit awareness,
+ * request/response hooks, idempotency support, debug logging, and proper error handling.
+ *
+ * @example
+ * ```typescript
+ * import { FastClient } from '@fundedfast/sdk';
+ *
+ * const fast = new FastClient({
+ *   apiKey: process.env.FAST_API_KEY!,
+ *   retry: { maxRetries: 3 },
+ *   onResponse: ({ status, durationMs, correlationId }) => {
+ *     metrics.histogram('fast.request.duration', durationMs, { status });
+ *   },
+ * });
+ *
+ * const result = await fast.bets.validate({
+ *   userId: 'player-42',
+ *   externalBetId: 'BET-001',
+ *   stakeAmount: 5.00,
+ *   odds: 2.10,
+ *   status: 'placed',
+ * });
+ * ```
+ *
+ * @module client
+ */
+import type { FastClientConfig, FastError } from './types.js';
+import { ChallengesApi, BetsApi, UsersApi, ReconciliationApi, EventsApi, SandboxApi, WidgetApi } from './resources/public.js';
+import { AdminApi } from './resources/admin.js';
+export declare const SDK_VERSION = "1.3.0";
+/**
+ * Error thrown when the FAST API returns a non-2xx response.
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await fast.challenges.purchase({ userId: 'x', challengeTierId: 'invalid' });
+ * } catch (err) {
+ *   if (err instanceof FastApiError) {
+ *     console.log(err.status);        // 400
+ *     console.log(err.code);          // 'validation_error'
+ *     console.log(err.correlationId); // 'abc-123' (for support)
+ *     console.log(err.isRetryable);   // false
+ *   }
+ * }
+ * ```
+ */
+export declare class FastApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly correlationId: string;
+    readonly isRetryable: boolean;
+    readonly rateLimitReset?: number;
+    constructor(status: number, body: FastError, rateLimitReset?: number);
+}
+/**
+ * Error thrown when a request times out.
+ */
+export declare class FastTimeoutError extends Error {
+    readonly timeoutMs: number;
+    constructor(timeoutMs: number);
+}
+/**
+ * Error thrown when a network error occurs (DNS, connection refused, etc.)
+ */
+export declare class FastNetworkError extends Error {
+    readonly cause: Error;
+    constructor(cause: Error);
+}
+/**
+ * FAST Platform API client.
+ *
+ * Provides typed access to all operator-facing endpoints with automatic retry,
+ * rate limit handling, and observability hooks.
+ *
+ * @example
+ * ```typescript
+ * const fast = new FastClient({ apiKey: 'key-...' });
+ *
+ * // Namespaced APIs
+ * const tiers = await fast.challenges.listTiers();
+ * const result = await fast.bets.validate(betEvent);
+ * const progress = await fast.users.getProgress('player-42');
+ * ```
+ */
+export declare class FastClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly timeout;
+    private readonly retryConfig;
+    private readonly onRequest?;
+    private readonly onResponse?;
+    private readonly _fetch;
+    private readonly customHeaders;
+    private readonly debug;
+    /** Challenge purchase and tier management */
+    readonly challenges: ChallengesApi;
+    /** Bet validation and ingestion */
+    readonly bets: BetsApi;
+    /** User progress, history, and withdrawals */
+    readonly users: UsersApi;
+    /** Bet event reconciliation */
+    readonly reconciliation: ReconciliationApi;
+    /** Real-time event streaming (SSE) */
+    readonly events: EventsApi;
+    /** Sandbox operations (staging only) */
+    readonly sandbox: SandboxApi;
+    /** Widget module and branding configuration */
+    readonly widget: WidgetApi;
+    /** Admin / backoffice operations (tenant management) */
+    readonly admin: AdminApi;
+    constructor(config: FastClientConfig);
+    /**
+     * Execute an authenticated request against the FAST API.
+     * Handles retries, timeouts, rate limits, and hooks automatically.
+     *
+     * @internal Use the namespaced APIs (challenges, bets, users, etc.) instead.
+     */
+    request<T>(method: string, path: string, options?: {
+        body?: unknown;
+        query?: Record<string, string | undefined>;
+        idempotencyKey?: string;
+    }): Promise<T>;
+    private calculateDelay;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/esm/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,SAAS,EAIV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EACb,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,SAAS,EACV,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQhD,eAAO,MAAM,WAAW,UAAU,CAAC;AAgCnC;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,aAAa,EAAE,MAAM,CAAC;IACtC,SAAgB,WAAW,EAAE,OAAO,CAAC;IACrC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM;CASrE;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAK9B;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,KAAK,EAAE,KAAK,CAAC;gBAEjB,KAAK,EAAE,KAAK;CAKzB;AAMD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;IAEhC,6CAA6C;IAC7C,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,mCAAmC;IACnC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAC9B,8CAA8C;IAC9C,SAAgB,KAAK,EAAE,QAAQ,CAAC;IAChC,+BAA+B;IAC/B,SAAgB,cAAc,EAAE,iBAAiB,CAAC;IAClD,sCAAsC;IACtC,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,wCAAwC;IACxC,SAAgB,OAAO,EAAE,UAAU,CAAC;IACpC,+CAA+C;IAC/C,SAAgB,MAAM,EAAE,SAAS,CAAC;IAClC,wDAAwD;IACxD,SAAgB,KAAK,EAAE,QAAQ,CAAC;gBAEpB,MAAM,EAAE,gBAAgB;IAwCpC;;;;;OAKG;IACG,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,OAAO,CAAC,CAAC,CAAC;IAgKb,OAAO,CAAC,cAAc;CASvB"}