@ledewire/browser 0.2.2 → 0.4.0

package/dist/ledewire.min.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful token refresh.\n   * Use in server environments to persist the new tokens to a database or cache.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await redis.set('session:tokens', JSON.stringify(tokens))\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAMO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CCjDA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IA+CtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CC9IO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAEA,MAAc,YAAYA,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CCnEO,MAAMC,CAAwB,CACnC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcI,EAAYC,EAAqD,CACnF,MAAMzB,EAAiC,CAAA,EACvC,OAAIyB,IAAW,SACbzB,EAAO,QAAayB,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKxB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM0B,CAA0B,CACrC,YAA+BN,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIuB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCzBO,MAAMG,CAAuB,CAClC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB2B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BT,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMU,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCiCO,SAASC,EAAKjC,EAA4C,CAC/D,MAAMkC,EAAUlC,EAAO,SAAW,2BAC5BmC,EAAUnC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAAwB,EACA,UAAW,MAAOnB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGU,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAelB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMY,EAAQ,MAAMZ,EAAI,KAAA,EAKxB,MAAO,CACL,YAAaY,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWjB,EAAeiB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIpC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAmC,EACA,eAAgB,IAAMX,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIc,EAAcf,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMqC,CAAc,CAiBzB,YACkBC,EACAC,EACAC,EAChB,CAnBO/C,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAIS,KAAA,MAAA6C,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,KAAO,IAAInB,EAAqBiB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIV,EAA0BU,CAAK,EACpD,KAAK,QAAU,IAAIb,EAAwBa,CAAK,CAClD,CACF,CCtIA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAU7B,EAA4B,CACpC,aAAa,QAAQ4B,EAAK,KAAK,UAAU5B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW4B,CAAG,CAC7B,CAAA,CAEJ"}
+{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAiCO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CC5EA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IAoDtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CClJO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAsBA,MAAM,gBAAgBrB,EAA+D,CACnF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0BrB,CAAI,EACvF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAEA,MAAc,YAAYA,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CC7FO,MAAMC,CAAuB,CAElC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCtBO,MAAMI,CAAwB,CACnC,YAA+BJ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcK,EAAYC,EAAqD,CACnF,MAAM1B,EAAiC,CAAA,EACvC,OAAI0B,IAAW,SACb1B,EAAO,QAAa0B,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKzB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM2B,CAA0B,CACrC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIwB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCLO,MAAMG,CAA8B,CAEzC,YAA6BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAahD,MAAM,MAAmC,CACvC,OAAO,KAAK,KAAK,IAAuB,oBAAoB,CAC9D,CAiBA,MAAM,OAAOnB,EAA8D,CACzE,OAAO,KAAK,KAAK,KAAwB,4BAA6BA,CAAI,CAC5E,CAcA,MAAM,IAAIwB,EAAsC,CAC9C,OAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE,CAClE,CACF,CCzEO,MAAMI,CAAuB,CAKlC,YAAYT,EAAkB,CAHrB7B,EAAA,gBAIP,KAAK,QAAU,IAAIqC,EAA8BR,CAAI,CACvD,CACF,CCRO,MAAMU,CAAuB,CAClC,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB8B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BZ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMa,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCmCO,SAASC,EAAKpC,EAA4C,CAC/D,MAAMqC,EAAUrC,EAAO,SAAW,2BAC5BsC,EAAUtC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAA2B,EACA,UAAW,MAAOtB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGa,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAerB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMe,EAAQ,MAAMf,EAAI,KAAA,EAKxB,MAAO,CACL,YAAae,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWpB,EAAeoB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIvC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAsC,EACA,eAAgB,IAAMd,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIiB,EAAclB,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMwC,CAAc,CAuBzB,YACkBC,EACAC,EACAC,EAChB,CAzBOlD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAGAA,EAAA,eAIS,KAAA,MAAAgD,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,OAAS,IAAIlB,EAAuBgB,CAAK,EAC9C,KAAK,KAAO,IAAIpB,EAAqBoB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIZ,EAA0BY,CAAK,EACpD,KAAK,QAAU,IAAIf,EAAwBe,CAAK,EAChD,KAAK,OAAS,IAAIV,EAAuBU,CAAK,CAChD,CACF,CChJA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAUhC,EAA4B,CACpC,aAAa,QAAQ+B,EAAK,KAAK,UAAU/B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW+B,CAAG,CAC7B,CAAA,CAEJ"}

package/llms.txt

@@ -0,0 +1,290 @@
+# @ledewire/browser
+
+> LedeWire Browser SDK — buyer authentication, checkout, wallet, and purchases for web apps.
+> Works as a CDN script tag (no build step) or as an ESM npm package.
+> npm install @ledewire/browser
+> Source: https://github.com/ledewire/ledewire-js-sdk
+> API docs: https://ledewire.github.io/ledewire-js-sdk/api/
+
+## CDN (no install required)
+
+```html
+<!-- Pin to a major version in production -->
+<script src="https://cdn.jsdelivr.net/npm/@ledewire/browser@0/dist/ledewire.min.js"></script>
+<script>
+  const lw = Ledewire.init({ apiKey: 'your_api_key' })
+</script>
+```
+
+The global is `Ledewire`. All methods return Promises — use async/await or `.then()`.
+
+## npm / ESM install
+
+```bash
+npm install @ledewire/browser
+```
+
+```ts
+import { init, localStorageAdapter } from '@ledewire/browser'
+```
+
+## init() configuration
+
+```ts
+import { init } from '@ledewire/browser'
+import type { BrowserClientConfig } from '@ledewire/browser'
+
+const lw = init({
+  apiKey: string,           // required — your LedeWire platform API key
+
+  baseUrl?: string,         // defaults to 'https://api.ledewire.com'
+
+  // Token persistence — defaults to MemoryTokenStorage (cleared on page unload)
+  storage?: TokenStorage,
+
+  onTokenRefreshed?: (tokens: StoredTokens) => void,
+  onAuthExpired?: () => void,  // called when refresh fails — show login UI
+})
+```
+
+Token refresh is automatic — never call a refresh method manually.
+
+## localStorageAdapter
+
+Persist sessions across page reloads using `localStorage`:
+
+```ts
+import { init, localStorageAdapter } from '@ledewire/browser'
+
+const lw = init({
+  apiKey: 'your_api_key',
+  storage: localStorageAdapter(),     // persists under 'lw_tokens' key
+  onAuthExpired: () => showLoginModal(),
+})
+```
+
+Use `MemoryTokenStorage` (default) for highest security — tokens are never written
+to disk and are cleared when the page unloads.
+
+## Field naming convention
+
+All API response types use `snake_case` field names (`access_token`, `price_cents`,
+`content_uri`), matching the wire format exactly.
+
+SDK-owned types use `camelCase` where they do not map 1:1 to a raw API response
+field: `StoredTokens.accessToken`, `StoredTokens.expiresAt: number` (a converted
+Unix ms timestamp, not the raw `expires_at: string`).
+
+Do not attempt to remap snake_case fields — the SDK has no `transformKeys` option.
+
+## Complete method reference
+
+### lw.config
+
+```ts
+lw.config.getPublic() → Promise<PublicConfigResponse>
+// { google_client_id: string, ... }
+// Safe to call before authentication — use to get the Google Client ID for sign-in UI.
+```
+
+### lw.auth (buyer and seller auth)
+
+```ts
+lw.auth.signup(body)                           → Promise<AuthenticationResponse>
+lw.auth.loginWithEmail({ email, password })    → Promise<AuthenticationResponse>
+lw.auth.loginWithGoogle({ id_token })          → Promise<AuthenticationResponse>
+lw.auth.loginWithApiKey({ key, secret? })      → Promise<AuthenticationResponse>
+// key-only → view permission (read-only, sufficient for lw.seller.content.*)
+// key + secret → full permission (read/write)
+lw.auth.logout()                               → Promise<void>
+lw.auth.requestPasswordReset({ email })        → Promise<void>
+lw.auth.resetPassword({ token, password })     → Promise<void>
+```
+
+Tokens are stored automatically after every successful login.
+
+### lw.checkout
+
+```ts
+lw.checkout.state(contentId: string)  → Promise<CheckoutStateResponse>
+```
+
+Use this to determine what the current visitor needs to do before accessing content:
+
+```ts
+const { checkout_state } = await lw.checkout.state('article-id')
+
+switch (checkout_state.next_required_action) {
+  case 'authenticate':
+    // Show login/signup UI
+    break
+  case 'fund_wallet':
+    // Show wallet funding UI (checkout_state.has_sufficient_funds === false)
+    break
+  case 'purchase':
+    // Show purchase confirmation UI
+    break
+  case 'view_content':
+    // User has access — fetch and render the content
+    break
+}
+```
+
+### lw.wallet
+
+```ts
+lw.wallet.balance()                                    → Promise<WalletBalanceResponse>
+// { balance_cents: number }
+
+lw.wallet.transactions(params?: PaginationParams)      → Promise<{ data: WalletTransactionItem[], pagination: PaginationMeta }>
+
+lw.wallet.createPaymentSession({ amount_cents: number }) → Promise<WalletPaymentSessionResponse>
+// { payment_url: string, session_id: string, ... } — redirect user to payment_url
+
+lw.wallet.getPaymentStatus(sessionId: string)          → Promise<WalletPaymentStatusResponse>
+// Poll after return from payment redirect to confirm funding
+```
+
+### lw.purchases
+
+```ts
+lw.purchases.create({ content_id: string })           → Promise<PurchaseResponse>
+lw.purchases.list(params?: PaginationParams)          → Promise<{ data: PurchaseResponse[], pagination: PaginationMeta }>
+lw.purchases.get(purchaseId: string)                  → Promise<PurchaseResponse>
+```
+
+### lw.content
+
+```ts
+lw.content.getWithAccess(contentId: string, options?) → Promise<ContentWithAccessResponse>
+// Returns content payload + access info. Requires a valid buyer session.
+// content_type: 'markdown' | 'external_ref'
+// content_body: base64-encoded string (use atob() to decode markdown)
+// content_uri: URL for external_ref content (Vimeo, YouTube, PDF, etc.)
+```
+
+### lw.seller.content (requires API key login)
+
+Read-only operations scoped to the authenticated seller's store.
+Store identity is derived server-side from the token — no `store_id` needed.
+
+```ts
+// 1. Obtain a view token (key-only is sufficient)
+await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+
+// 2. List all store content
+lw.seller.content.list()                              → Promise<ContentResponse[]>
+
+// 3. Search by title, URI, or metadata (AND logic — at least one field required)
+lw.seller.content.search({ title?: string, uri?: string, metadata?: Record<string, unknown> })
+                                                      → Promise<ContentResponse[]>
+
+// 4. Fetch a single item
+lw.seller.content.get(contentId: string)              → Promise<ContentResponse>
+```
+
+## Full checkout flow example
+
+```ts
+const lw = Ledewire.init({ apiKey: 'your_api_key' })
+
+const { checkout_state } = await lw.checkout.state('article-123')
+
+switch (checkout_state.next_required_action) {
+  case 'authenticate':
+    await lw.auth.loginWithEmail({ email, password })
+    break
+
+  case 'fund_wallet':
+    const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })
+    window.location.href = session.payment_url  // Stripe checkout
+    break
+
+  case 'purchase':
+    await lw.purchases.create({ content_id: 'article-123' })
+    break
+
+  case 'view_content':
+    const { content_type, content_body, content_uri } =
+      await lw.content.getWithAccess('article-123')
+    if (content_type === 'markdown') {
+      renderMarkdown(atob(content_body))  // base64-decode then render
+    } else {
+      window.location.href = content_uri  // redirect to gated video/PDF
+    }
+    break
+}
+```
+
+## Google OAuth sign-in setup
+
+```ts
+// Fetch the platform's Google Client ID before the user signs in:
+const { google_client_id } = await lw.config.getPublic()
+google.accounts.id.initialize({
+  client_id: google_client_id,
+  callback: async ({ credential }) => {
+    await lw.auth.loginWithGoogle({ id_token: credential })
+  },
+})
+google.accounts.id.renderButton(document.getElementById('signin-btn'), { theme: 'outline' })
+```
+
+## Key types
+
+```ts
+interface CheckoutStateResponse {
+  content_id: string
+  content_title: string
+  price_cents: number
+  checkout_state: {
+    is_authenticated: boolean
+    has_sufficient_funds: boolean | null  // null when not authenticated
+    has_purchased: boolean
+    next_required_action: 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'
+  }
+}
+
+interface StoredTokens {
+  accessToken: string
+  refreshToken: string
+  expiresAt: number  // Unix timestamp (ms)
+}
+
+interface TokenStorage {
+  getTokens(): Promise<StoredTokens | null>
+  setTokens(tokens: StoredTokens): Promise<void>
+  clearTokens(): Promise<void>
+}
+```
+
+## Error classes
+
+All errors extend `LedewireError`. Import named subclasses for actionable handling:
+
+```ts
+import { LedewireError, AuthError, ForbiddenError, NotFoundError, PurchaseError } from '@ledewire/browser'
+
+class LedewireError extends Error {
+  statusCode: number        // HTTP status code
+  code: number | undefined  // machine-readable code from API body
+  message: string           // human-readable description from API body
+}
+
+class AuthError extends LedewireError {}       // 401 — bad credentials / session expired
+class ForbiddenError extends LedewireError {}  // 403 — authenticated but access denied
+class NotFoundError extends LedewireError {}   // 404 — resource not found
+class PurchaseError extends LedewireError {}   // 409/422 — purchase validation failure
+```
+
+```ts
+try {
+  await lw.purchases.create({ content_id: 'article-123' })
+} catch (err) {
+  if (err instanceof AuthError) {
+    showLoginModal()
+  } else if (err instanceof PurchaseError) {
+    showError('Purchase failed: ' + err.message)
+  }
+}
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledewire/browser",
-  "version": "0.2.2",
+  "version": "0.4.0",
   "description": "LedeWire SDK for browsers — embed a paywall with a single script tag",
   "type": "module",
   "exports": {
@@ -15,7 +15,8 @@
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "llms.txt"
   ],
   "keywords": [
     "ledewire",