@hecks/client 2.7.0

package/dist/client.js

@@ -0,0 +1,107 @@
+// A client for the body-shaped dispatch protocol a Hecks host answers. Two
+// request shapes, both posted to `<url>/dispatch`:
+//
+//   { "read": true }
+//     -> { instances: { "Domain::Aggregate#<id>": { ...state } }, refusals: [] }
+//   { "verb": "Domain::Aggregate.Verb", "to": "<id>", "with": { ... }, "role": "Role" }
+//     -> the same shape after the command ran
+//
+// The host answers HTTP 200 whether or not the domain refused, and its
+// `refusals` list can carry entries replayed from history, so a command is
+// judged by the state that comes back (see `HostClient#apply`), never by the
+// list alone.
+//
+// The protocol carries no authentication. It is meant for server-to-server
+// calls on a private network, never for a browser.
+import { refusalOf, DomainUnavailable } from "./errors.js";
+import { instancesOf } from "./answer.js";
+const DEFAULT_TIMEOUT_MS = 8000;
+const fromEnv = (name) => {
+    const value = typeof process === "undefined" ? undefined : process.env?.[name];
+    return value ? value : undefined;
+};
+/** Talks to one domain on one host. */
+export class HostClient {
+    /** The domain's name, as configured. */
+    domain;
+    /** The host's base URL, without a trailing slash. */
+    url;
+    role;
+    timeoutMs;
+    fetchImpl;
+    constructor(options = {}) {
+        const domain = options.domain ?? fromEnv("HECKS_DOMAIN");
+        const url = options.url ?? fromEnv("HECKS_SERVICE_URL");
+        if (!domain)
+            throw new TypeError("HostClient needs a domain: pass `domain` or set HECKS_DOMAIN");
+        if (!url)
+            throw new TypeError("HostClient needs a service URL: pass `url` or set HECKS_SERVICE_URL");
+        this.domain = domain;
+        this.url = url.replace(/\/+$/, "");
+        this.role = options.role;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.fetchImpl = options.fetch;
+    }
+    /** A name in full: one that already carries `::` is left alone, any other is placed in this client's domain. */
+    qualify(name) {
+        return name.includes("::") ? name : `${this.domain}::${name}`;
+    }
+    /** The states of one aggregate in an answer, as `[id, state]` pairs. `aggregate` may be bare ("Event") or qualified. */
+    instancesOf(answer, aggregate) {
+        return instancesOf(answer, this.qualify(aggregate));
+    }
+    /** Everything the domain holds, as the protocol answers it. */
+    read() {
+        return this.post({ read: true });
+    }
+    /**
+     * Sends one command and returns the raw answer. Callers judge the outcome
+     * from the state in it and turn a miss into a refusal with `refusalOf`.
+     */
+    dispatch(verb, args = {}, to, role) {
+        const asRole = role ?? this.role;
+        return this.post({ verb: this.qualify(verb), ...(to ? { to } : {}), with: args, ...(asRole ? { role: asRole } : {}) });
+    }
+    /**
+     * Runs one command and returns what `command.parse` reads from the answer.
+     * Throws `DomainRefusal` when that state does not show the change,
+     * carrying the domain's own words for why.
+     */
+    async apply(command) {
+        const answer = await this.dispatch(command.verb, command.with, command.to, command.role);
+        const parsed = command.parse(answer);
+        if (command.confirm(parsed))
+            return parsed;
+        throw refusalOf(answer, command.verb);
+    }
+    async post(body) {
+        const send = this.fetchImpl ?? globalThis.fetch;
+        let res;
+        try {
+            res = await send(`${this.url}/dispatch`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(body),
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new DomainUnavailable(`could not reach the domain at ${this.url}: ${err}`);
+        }
+        if (!res.ok)
+            throw new DomainUnavailable(`the domain answered HTTP ${res.status}`);
+        let answer;
+        try {
+            answer = (await res.json());
+        }
+        catch {
+            throw new DomainUnavailable("the domain did not answer with JSON");
+        }
+        if (answer.error)
+            throw new DomainUnavailable(answer.error);
+        return answer;
+    }
+}
+/** Shorthand for `new HostClient(options)`. */
+export const createClient = (options = {}) => new HostClient(options);
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,mDAAmD;AACnD,EAAE;AACF,qBAAqB;AACrB,iFAAiF;AACjF,wFAAwF;AACxF,8CAA8C;AAC9C,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,6EAA6E;AAC7E,cAAc;AACd,EAAE;AACF,2EAA2E;AAC3E,mDAAmD;AAEnD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAqChC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE;IACnD,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC,CAAC;AAEF,uCAAuC;AACvC,MAAM,OAAO,UAAU;IACrB,wCAAwC;IAC/B,MAAM,CAAS;IACxB,qDAAqD;IAC5C,GAAG,CAAS;IACJ,IAAI,CAAqB;IACzB,SAAS,CAAS;IAClB,SAAS,CAA2B;IAErD,YAAY,UAAyB,EAAE;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACjG,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;IACjC,CAAC;IAED,gHAAgH;IAChH,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,wHAAwH;IACxH,WAAW,CAAC,MAAc,EAAE,SAAiB;QAC3C,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,+DAA+D;IAC/D,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAY,EAAE,OAAgC,EAAE,EAAE,EAAW,EAAE,IAAa;QACnF,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAI,OAAmB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC3C,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAA6B;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAW,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAyB,EAAE,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,16 @@
+import type { Answer } from "./answer.js";
+/** The domain understood the command and said no (a `given` or an invariant failed). */
+export declare class DomainRefusal extends Error {
+    readonly kind: string;
+    constructor(kind: string, message: string);
+}
+/** The domain could not be reached, or did not answer in the protocol. */
+export declare class DomainUnavailable extends Error {
+    constructor(message: string);
+}
+/**
+ * The domain's own words for why a command changed nothing: the last refusal
+ * the answer carries. Falls back to a generic `NotApplied` refusal when the
+ * answer names none.
+ */
+export declare function refusalOf(answer: Answer, verb: string): DomainRefusal;

package/dist/errors.js

@@ -0,0 +1,26 @@
+/** The domain understood the command and said no (a `given` or an invariant failed). */
+export class DomainRefusal extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+        this.name = "DomainRefusal";
+    }
+}
+/** The domain could not be reached, or did not answer in the protocol. */
+export class DomainUnavailable extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DomainUnavailable";
+    }
+}
+/**
+ * The domain's own words for why a command changed nothing: the last refusal
+ * the answer carries. Falls back to a generic `NotApplied` refusal when the
+ * answer names none.
+ */
+export function refusalOf(answer, verb) {
+    const refusal = (answer.refusals ?? []).at(-1);
+    return new DomainRefusal(refusal?.kind ?? "NotApplied", refusal?.error ?? `the domain did not apply ${verb}`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,wFAAwF;AACxF,MAAM,OAAO,aAAc,SAAQ,KAAK;IAE3B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,IAAY;IACpD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,4BAA4B,IAAI,EAAE,CAAC,CAAC;AAChH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { HostClient, createClient } from "./client.js";
+export type { ClientOptions, Command } from "./client.js";
+export { instancesOf, text, whole, optionalWhole } from "./answer.js";
+export type { Answer, Refusal } from "./answer.js";
+export { DomainRefusal, DomainUnavailable, refusalOf } from "./errors.js";
+export { createResilientFetch, ResilientFetchError } from "./resilientFetch.js";
+export type { ResilientFetch, ResilientFetchConfig, ResilientRequest } from "./resilientFetch.js";
+export { PaymentsConnection } from "./payments.js";
+export type { PaymentConnectionState, PaymentMode, PaymentStatus, PaymentsConnectionOptions, PaymentsResult, } from "./payments.js";
+export { pastedKeys, savedMessage } from "./paymentKeys.js";
+export type { FormFields, PastedKeys } from "./paymentKeys.js";
+export { DEFAULT_ACCOUNT_COOKIE, accountFromCookieHeader, accountToken, cookieValue, resolveAccountCookieName, verifyAccountToken, } from "./accountToken.js";
+export type { AccountClaims, Clock, CookieVerifyOptions, VerifyOptions } from "./accountToken.js";

package/dist/index.js

@@ -0,0 +1,8 @@
+export { HostClient, createClient } from "./client.js";
+export { instancesOf, text, whole, optionalWhole } from "./answer.js";
+export { DomainRefusal, DomainUnavailable, refusalOf } from "./errors.js";
+export { createResilientFetch, ResilientFetchError } from "./resilientFetch.js";
+export { PaymentsConnection } from "./payments.js";
+export { pastedKeys, savedMessage } from "./paymentKeys.js";
+export { DEFAULT_ACCOUNT_COOKIE, accountFromCookieHeader, accountToken, cookieValue, resolveAccountCookieName, verifyAccountToken, } from "./accountToken.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAQnD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC"}

package/dist/paymentKeys.d.ts

@@ -0,0 +1,25 @@
+/** The two keys, under the field names the host's `/payments/connection/direct` route reads. */
+export interface PastedKeys {
+    secret_key: string;
+    publishable_key: string;
+}
+/** Anything that reads a form field by name: a `FormData`, a `Map`, `URLSearchParams`. */
+export interface FormFields {
+    get(name: string): unknown;
+}
+/**
+ * Reads the pasted `secret_key` and `publishable_key` fields, trimmed, and
+ * says in plain words which one is missing when either is. An error never
+ * repeats a pasted value.
+ */
+export declare function pastedKeys(form: FormFields): {
+    keys: PastedKeys;
+} | {
+    error: string;
+};
+/**
+ * The confirmation shown after a save: the business's name and the mode, both
+ * public facts the host answers with. A missing name reads "your Stripe
+ * account"; any mode but `"live"` reads as test.
+ */
+export declare function savedMessage(displayName: string | null | undefined, mode: string | null | undefined): string;

package/dist/paymentKeys.js

@@ -0,0 +1,36 @@
+// What a "paste your two keys and Save" form posts, cleaned up, and the
+// sentence a person reads afterwards. Pure on purpose, so it needs no server.
+// The keys go to the host once and are never stored, logged or shown again
+// here; nothing this file returns (an error, a notice) ever contains what was
+// pasted.
+//
+// Whether a key is well formed for its processor is the host's call: it
+// checks the prefixes and that both keys are from the same mode, and answers
+// 422 with a message that never quotes a key (see `PaymentsConnection`).
+/**
+ * Reads the pasted `secret_key` and `publishable_key` fields, trimmed, and
+ * says in plain words which one is missing when either is. An error never
+ * repeats a pasted value.
+ */
+export function pastedKeys(form) {
+    const secret = String(form.get("secret_key") ?? "").trim();
+    const publishable = String(form.get("publishable_key") ?? "").trim();
+    if (!secret && !publishable)
+        return { error: "Paste both keys to save them." };
+    if (!secret)
+        return { error: "Paste the restricted key as well." };
+    if (!publishable)
+        return { error: "Paste the publishable key as well." };
+    return { keys: { secret_key: secret, publishable_key: publishable } };
+}
+/**
+ * The confirmation shown after a save: the business's name and the mode, both
+ * public facts the host answers with. A missing name reads "your Stripe
+ * account"; any mode but `"live"` reads as test.
+ */
+export function savedMessage(displayName, mode) {
+    const name = displayName && displayName.trim() ? displayName.trim() : "your Stripe account";
+    const label = mode === "live" ? "live" : "test";
+    return `Saved. Connected to ${name} in ${label} mode.`;
+}
+//# sourceMappingURL=paymentKeys.js.map

package/dist/paymentKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paymentKeys.js","sourceRoot":"","sources":["../src/paymentKeys.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,UAAU;AACV,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AAazE;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACnE,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzE,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,WAAsC,EAAE,IAA+B;IAClG,MAAM,IAAI,GAAG,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,uBAAuB,IAAI,OAAO,KAAK,QAAQ,CAAC;AACzD,CAAC"}

package/dist/payments.d.ts

@@ -0,0 +1,80 @@
+import type { PastedKeys } from "./paymentKeys.js";
+export type PaymentMode = "test" | "live";
+export type PaymentStatus = "not_connected" | "connected" | "enabled" | "paused" | "disconnected";
+/** What the host says about the business's payment connection. It never carries a credential. */
+export interface PaymentConnectionState {
+    status: PaymentStatus;
+    /** The processor's key, such as `"stripe"`; `null` while nothing is connected. */
+    processor: string | null;
+    /** The processor's display name, such as `"Stripe"`. */
+    label: string | null;
+    account_ref: string | null;
+    mode: PaymentMode | null;
+    /** The business's name at the processor, when it has one. */
+    display_name: string | null;
+    /** Modes in which the business's own account has keys on the host. */
+    direct_modes: PaymentMode[];
+    /** Whether the current connection uses the business's own account. */
+    direct: boolean;
+    /** Whether the host can keep keys pasted into a form (so the form is worth showing). */
+    can_save_keys: boolean;
+    /** Whether the caller may connect and disconnect the account. */
+    can_manage: boolean;
+    /** Whether the caller may turn real payments on and off. */
+    can_enable: boolean;
+    /** Always empty on this host; kept so a page that still reads the list renders. */
+    adapters?: unknown[];
+}
+/**
+ * The outcome of one call. A `200` with a connection is `ok`. Anything else
+ * (`401` not logged in, `403` not permitted, `409` wrong state, `422` refused
+ * or malformed keys, ...) carries the host's own words in `error` when it sent
+ * JSON with one, and `undefined` when it did not, which is what an older host
+ * without these routes does by redirecting to an HTML login page.
+ */
+export type PaymentsResult = {
+    ok: true;
+    status: number;
+    connection: PaymentConnectionState;
+} | {
+    ok: false;
+    status: number;
+    error: string | undefined;
+};
+/** What a `PaymentsConnection` needs to reach a host. */
+export interface PaymentsConnectionOptions {
+    /** Where the host listens ("http://127.0.0.1:4322"). Trailing slashes are trimmed. Required. */
+    url: string;
+    /** The name of the cookie the host reads the account token from. Defaults to `hecks_session`, the host's own default. */
+    cookieName?: string;
+    /** How long one request may take before it counts as unreachable. Defaults to 8000. */
+    timeoutMs?: number;
+    /** The fetch to send requests with. Defaults to the global `fetch`, looked up on each call. */
+    fetch?: typeof fetch;
+}
+/** Talks to one host's payment-connection routes on behalf of one signed-in person per call. */
+export declare class PaymentsConnection {
+    /** The host's base URL, without a trailing slash. */
+    readonly url: string;
+    /** The cookie name the account token is sent under. */
+    readonly cookieName: string;
+    private readonly timeoutMs;
+    private readonly fetchImpl;
+    constructor(options: PaymentsConnectionOptions);
+    /** The connection as the host describes it. Readable by an Owner or the operator. */
+    show(session: string): Promise<PaymentsResult>;
+    /**
+     * Saves two pasted keys and connects the business's own account. The host
+     * checks them with the processor, so this can take a few seconds. Owner only.
+     */
+    saveKeys(session: string, keys: PastedKeys): Promise<PaymentsResult>;
+    /** Connects the business's own account using keys already set on the host, for `mode`. Owner only. */
+    useOwnAccount(session: string, mode: PaymentMode): Promise<PaymentsResult>;
+    /** Disconnects the account; once payments are enabled, pauses registrations instead. Owner only. */
+    disconnect(session: string): Promise<PaymentsResult>;
+    /** Turns real payments on for the connected account. Platform operator only. */
+    enable(session: string): Promise<PaymentsResult>;
+    /** Turns real payments off. Platform operator only. */
+    disable(session: string): Promise<PaymentsResult>;
+    private call;
+}

package/dist/payments.js

@@ -0,0 +1,95 @@
+// A client for the payment-connection JSON API a Hecks host answers under
+// `/payments/connection` (rust/host/src/payments.rs). The routes:
+//
+//   GET  /payments/connection             the connection as `PaymentConnectionState`
+//   POST /payments/connection/direct      connect the business's own account
+//                                         ({secret_key, publishable_key}, or {mode})
+//   POST /payments/connection/disconnect  disconnect (or pause, once enabled)
+//   POST /payments/connection/enable      turn real payments on   (operator only)
+//   POST /payments/connection/disable     turn real payments off  (operator only)
+//
+// Every route acts as the person behind the account cookie, so each call
+// forwards that person's own session: the host decides who may connect the
+// account (an Owner) and who may turn real payments on (the platform
+// operator). Nothing here stores or logs a key; the connection the host
+// answers with holds only public facts about the account.
+//
+// Like the dispatch protocol, this is for server-to-server calls, never for a
+// browser.
+import { DEFAULT_ACCOUNT_COOKIE } from "./accountToken.js";
+import { DomainUnavailable } from "./errors.js";
+const DEFAULT_TIMEOUT_MS = 8000;
+const CONNECTION_PATH = "/payments/connection";
+/** Talks to one host's payment-connection routes on behalf of one signed-in person per call. */
+export class PaymentsConnection {
+    /** The host's base URL, without a trailing slash. */
+    url;
+    /** The cookie name the account token is sent under. */
+    cookieName;
+    timeoutMs;
+    fetchImpl;
+    constructor(options) {
+        if (!options?.url)
+            throw new TypeError("PaymentsConnection needs the host's `url`");
+        this.url = options.url.replace(/\/+$/, "");
+        this.cookieName = options.cookieName ?? DEFAULT_ACCOUNT_COOKIE;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.fetchImpl = options.fetch;
+    }
+    /** The connection as the host describes it. Readable by an Owner or the operator. */
+    show(session) {
+        return this.call(session, "GET", "");
+    }
+    /**
+     * Saves two pasted keys and connects the business's own account. The host
+     * checks them with the processor, so this can take a few seconds. Owner only.
+     */
+    saveKeys(session, keys) {
+        return this.call(session, "POST", "/direct", keys);
+    }
+    /** Connects the business's own account using keys already set on the host, for `mode`. Owner only. */
+    useOwnAccount(session, mode) {
+        return this.call(session, "POST", "/direct", { mode });
+    }
+    /** Disconnects the account; once payments are enabled, pauses registrations instead. Owner only. */
+    disconnect(session) {
+        return this.call(session, "POST", "/disconnect", {});
+    }
+    /** Turns real payments on for the connected account. Platform operator only. */
+    enable(session) {
+        return this.call(session, "POST", "/enable", {});
+    }
+    /** Turns real payments off. Platform operator only. */
+    disable(session) {
+        return this.call(session, "POST", "/disable", {});
+    }
+    async call(session, method, path, body) {
+        // A session is one cookie value; anything that could end it early or
+        // start another header is refused rather than sent.
+        if (!session || /[\s;,"\\]/.test(session))
+            throw new TypeError("PaymentsConnection needs the account cookie's value as `session`");
+        const send = this.fetchImpl ?? globalThis.fetch;
+        let res;
+        try {
+            res = await send(`${this.url}${CONNECTION_PATH}${path}`, {
+                method,
+                headers: { "Content-Type": "application/json", Cookie: `${this.cookieName}=${session}` },
+                body: body === undefined ? undefined : JSON.stringify(body),
+                // An older host has no such route and redirects to an HTML login page.
+                redirect: "manual",
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new DomainUnavailable(`could not reach the host at ${this.url}: ${err}`);
+        }
+        const isJson = (res.headers.get("content-type") ?? "").includes("application/json");
+        const parsed = isJson ? await res.json().catch(() => null) : null;
+        const fields = parsed && typeof parsed === "object" ? parsed : null;
+        if (res.status === 200 && fields && typeof fields.status === "string") {
+            return { ok: true, status: res.status, connection: fields };
+        }
+        return { ok: false, status: res.status, error: typeof fields?.error === "string" ? fields.error : undefined };
+    }
+}
+//# sourceMappingURL=payments.js.map

package/dist/payments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payments.js","sourceRoot":"","sources":["../src/payments.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,kEAAkE;AAClE,EAAE;AACF,qFAAqF;AACrF,6EAA6E;AAC7E,qFAAqF;AACrF,8EAA8E;AAC9E,kFAAkF;AAClF,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,qEAAqE;AACrE,wEAAwE;AACxE,0DAA0D;AAC1D,EAAE;AACF,8EAA8E;AAC9E,WAAW;AAEX,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAsD/C,gGAAgG;AAChG,MAAM,OAAO,kBAAkB;IAC7B,qDAAqD;IAC5C,GAAG,CAAS;IACrB,uDAAuD;IAC9C,UAAU,CAAS;IACX,SAAS,CAAS;IAClB,SAAS,CAA2B;IAErD,YAAY,OAAkC;QAC5C,IAAI,CAAC,OAAO,EAAE,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;IACjC,CAAC;IAED,qFAAqF;IACrF,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,OAAe,EAAE,IAAgB;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,sGAAsG;IACtG,aAAa,CAAC,OAAe,EAAE,IAAiB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,oGAAoG;IACpG,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,uDAAuD;IACvD,OAAO,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,MAAsB,EAAE,IAAY,EAAE,IAAc;QACtF,qEAAqE;QACrE,oDAAoD;QACpD,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;QACnI,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,eAAe,GAAG,IAAI,EAAE,EAAE;gBACvD,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,EAAE,EAAE;gBACxF,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,uEAAuE;gBACvE,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACpF,MAAM,MAAM,GAAY,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAA2C,EAAE,CAAC;QACnG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChH,CAAC;CACF"}

package/dist/resilientFetch.d.ts

@@ -0,0 +1,61 @@
+/** What `createResilientFetch` needs; every field is optional. */
+export interface ResilientFetchConfig {
+    /** The fetch to send requests with. Defaults to the global `fetch`, looked up on each call. */
+    fetch?: typeof fetch;
+    /** Waits `ms` milliseconds between attempts. Defaults to a timer. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Told when a remembered answer is served instead of a live one. Defaults to `console.warn`. */
+    warn?: (message: string) => void;
+    /** Waits before each retry, in milliseconds; its length is the number of retries. Defaults to `[150, 500]`. */
+    retryDelaysMs?: number[];
+    /** How long one attempt may take before it counts as a network failure. Defaults to 10000. */
+    attemptTimeoutMs?: number;
+    /** How many URLs' last good answers are kept; the least recently answered is dropped first. Defaults to 200. */
+    maxRemembered?: number;
+}
+/** What one `json` call needs to know about the request. */
+export interface ResilientRequest {
+    /** A human description for error messages, such as `page "about"`. */
+    what: string;
+    /** The upstream's name or base URL, shown in error messages. */
+    source: string;
+    /** Answer from memory when the upstream is down. Defaults to true; turn it off where a stale answer would be acted on. */
+    allowStale?: boolean;
+    /** Resolve to `null` on a 404 instead of throwing. */
+    nullOn404?: boolean;
+    /** Replaces the configured retry delays for this call. */
+    retryDelaysMs?: number[];
+    /** Extra request headers, such as a viewer's `Cookie` to read a draft. */
+    headers?: Record<string, string>;
+    /**
+     * The response is for one viewer, read with their credentials: it is never
+     * remembered for later requests, and the answer remembered for the same URL
+     * (which is public) is never served in its place.
+     */
+    private?: boolean;
+}
+/** A read that failed and could not be answered from memory. */
+export declare class ResilientFetchError extends Error {
+    /** The last attempt's failure: a network error's message, or `<status> <statusText>`. */
+    readonly failure: string;
+    constructor(message: string, 
+    /** The last attempt's failure: a network error's message, or `<status> <statusText>`. */
+    failure: string);
+}
+/** A JSON reader with its own memory of last good answers. */
+export interface ResilientFetch {
+    /**
+     * Reads `url` as JSON, retrying transient failures and, when allowed,
+     * answering from the last good response for the same URL if the upstream
+     * stays down.
+     * @throws {ResilientFetchError} when the read fails and nothing may or can be served from memory
+     */
+    json<T>(url: string, request: ResilientRequest): Promise<T | null>;
+    /** Forgets every remembered answer. */
+    clear(): void;
+}
+/**
+ * Builds a JSON reader that survives a briefly unavailable upstream. Each
+ * reader keeps its own memory, so two readers never share answers.
+ */
+export declare function createResilientFetch(config?: ResilientFetchConfig): ResilientFetch;

package/dist/resilientFetch.js

@@ -0,0 +1,91 @@
+// Reads JSON from an upstream service that may be briefly down or restarting,
+// without turning that into a failure for every caller.
+//
+// Two layers, in order:
+//   1. Retry transient failures (network error, timeout, 502/503/504) a
+//      couple of times with a short backoff, enough for a container that is
+//      mid-restart.
+//   2. If the upstream is still failing (network error or any 5xx), answer
+//      with the last successful response for that exact URL from this
+//      process's memory, when the caller allows it. A cold process has
+//      nothing remembered and still throws, so a genuinely broken deploy is
+//      never masked.
+// A 4xx is a real answer (bad slug, bad credentials) and is never retried or
+// answered from memory.
+const DEFAULT_RETRY_DELAYS_MS = [150, 500];
+const DEFAULT_ATTEMPT_TIMEOUT_MS = 10_000;
+// URLs built from visitor-controlled paths can succeed with an empty answer
+// for any input, so the memory is bounded.
+const DEFAULT_MAX_REMEMBERED = 200;
+/** A read that failed and could not be answered from memory. */
+export class ResilientFetchError extends Error {
+    failure;
+    constructor(message, 
+    /** The last attempt's failure: a network error's message, or `<status> <statusText>`. */
+    failure) {
+        super(message);
+        this.failure = failure;
+        this.name = "ResilientFetchError";
+    }
+}
+const timer = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Builds a JSON reader that survives a briefly unavailable upstream. Each
+ * reader keeps its own memory, so two readers never share answers.
+ */
+export function createResilientFetch(config = {}) {
+    const sleep = config.sleep ?? timer;
+    const warn = config.warn ?? ((message) => console.warn(message));
+    const attemptTimeoutMs = config.attemptTimeoutMs ?? DEFAULT_ATTEMPT_TIMEOUT_MS;
+    const maxRemembered = config.maxRemembered ?? DEFAULT_MAX_REMEMBERED;
+    const lastGood = new Map();
+    const remember = (url, value) => {
+        lastGood.delete(url);
+        lastGood.set(url, value);
+        if (lastGood.size > maxRemembered)
+            lastGood.delete(lastGood.keys().next().value);
+    };
+    return {
+        async json(url, request) {
+            const { what, source, nullOn404 = false, headers } = request;
+            const delays = request.retryDelaysMs ?? config.retryDelaysMs ?? DEFAULT_RETRY_DELAYS_MS;
+            const allowStale = (request.allowStale ?? true) && !request.private;
+            let failure = "";
+            let staleable = false;
+            for (let attempt = 0; attempt <= delays.length; attempt++) {
+                if (attempt > 0)
+                    await sleep(delays[attempt - 1]);
+                let res;
+                try {
+                    const send = config.fetch ?? fetch;
+                    res = await send(url, { headers, signal: AbortSignal.timeout(attemptTimeoutMs) });
+                }
+                catch (err) {
+                    failure = err instanceof Error ? err.message : String(err);
+                    staleable = true;
+                    continue;
+                }
+                if (res.ok) {
+                    const data = (await res.json());
+                    if (!request.private)
+                        remember(url, data);
+                    return data;
+                }
+                if (res.status === 404 && nullOn404)
+                    return null;
+                failure = `${res.status} ${res.statusText}`;
+                if (res.status >= 500)
+                    staleable = true;
+                if (![502, 503, 504].includes(res.status))
+                    break;
+            }
+            if (allowStale && staleable && lastGood.has(url)) {
+                warn(`${what}: ${source} unavailable (${failure}); serving last known good`);
+                return lastGood.get(url);
+            }
+            throw new ResilientFetchError(`Failed to fetch ${what} from ${source}: ${failure}`, failure);
+        },
+        clear: () => lastGood.clear(),
+    };
+}
+//# sourceMappingURL=resilientFetch.js.map

package/dist/resilientFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resilientFetch.js","sourceRoot":"","sources":["../src/resilientFetch.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,wDAAwD;AACxD,EAAE;AACF,wBAAwB;AACxB,wEAAwE;AACxE,4EAA4E;AAC5E,oBAAoB;AACpB,2EAA2E;AAC3E,sEAAsE;AACtE,uEAAuE;AACvE,4EAA4E;AAC5E,qBAAqB;AACrB,6EAA6E;AAC7E,wBAAwB;AAExB,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3C,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,4EAA4E;AAC5E,2CAA2C;AAC3C,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAwCnC,gEAAgE;AAChE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAIjC;IAHX,YACE,OAAe;IACf,yFAAyF;IAChF,OAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,YAAO,GAAP,OAAO,CAAQ;QAGxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAeD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA+B,EAAE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAC/E,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAc,EAAQ,EAAE;QACrD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,GAAG,aAAa;YAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;IAC7F,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,OAAyB;YAClD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;YACxF,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACpE,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,SAAS,GAAG,KAAK,CAAC;YAEtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC1D,IAAI,OAAO,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;gBAElD,IAAI,GAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;oBACnC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC3D,SAAS,GAAG,IAAI,CAAC;oBACjB,SAAS;gBACX,CAAC;gBAED,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,OAAO;wBAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC1C,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS;oBAAE,OAAO,IAAI,CAAC;gBAEjD,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;oBAAE,SAAS,GAAG,IAAI,CAAC;gBACxC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,MAAM;YACnD,CAAC;YAED,IAAI,UAAU,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,iBAAiB,OAAO,4BAA4B,CAAC,CAAC;gBAC7E,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAM,CAAC;YAChC,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,IAAI,SAAS,MAAM,KAAK,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@hecks/client",
+  "version": "2.7.0",
+  "description": "Client for the body-shaped dispatch protocol a Hecks host answers: read the domain, dispatch commands, read the answers.",
+  "license": "Apache-2.0",
+  "private": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/heckslabs/hecks.git",
+    "directory": "packages/hecks-client"
+  },
+  "homepage": "https://github.com/heckslabs/hecks/tree/main/packages/hecks-client",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "test:contract": "npm run build && node test/contract.mjs",
+    "prepack": "npm run build"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.3"
+  }
+}