@ledewire/browser 0.3.0 → 0.4.0

package/README.md

@@ -3,7 +3,7 @@
 [![npm](https://img.shields.io/npm/v/@ledewire/browser)](https://www.npmjs.com/package/@ledewire/browser)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](../../LICENSE)
 
-Browser SDK for the [LedeWire](https://api.ledewire.com/api-docs/index.html) content marketplace — embed buyer authentication, wallet funding, and content purchases on any website with a single script tag.
+Browser SDK for the [LedeWire](https://api.ledewire.com/api-docs/index.html) content marketplace — embed buyer authentication, wallet funding, content purchases, and seller content discovery on any website with a single script tag.
 
 ## CDN — No Install Required
 
@@ -40,14 +40,15 @@ const lw = init({
 
 ## Client Namespaces
 
-| Namespace      | Description                                      |
-| -------------- | ------------------------------------------------ |
-| `lw.config`    | Platform public config (no auth required)        |
-| `lw.auth`      | Buyer signup, email/password login, Google OAuth |
-| `lw.wallet`    | Wallet balance, fund wallet via payment session  |
-| `lw.purchases` | List and create content purchases                |
-| `lw.content`   | Fetch content with buyer access info             |
-| `lw.checkout`  | Checkout state — what action is required next    |
+| Namespace           | Description                                                     |
+| ------------------- | --------------------------------------------------------------- |
+| `lw.config`         | Platform public config (no auth required)                       |
+| `lw.auth`           | Buyer signup, email/password login, Google OAuth, API key login |
+| `lw.wallet`         | Wallet balance, fund wallet via payment session                 |
+| `lw.purchases`      | List and create content purchases                               |
+| `lw.content`        | Fetch content with buyer access info                            |
+| `lw.checkout`       | Checkout state — what action is required next                   |
+| `lw.seller.content` | List, search, and get store content (API key auth)              |
 
 ## Example: Fetch Google OAuth Client ID Before Sign-In
 
@@ -92,6 +93,28 @@ switch (checkout_state.next_required_action) {
 }
 ```
 
+## Example: Seller Content Discovery
+
+Use `lw.auth.loginWithApiKey` with only the `key` to obtain a read-only token,
+then browse your store's content catalogue directly from the browser:
+
+```ts
+const lw = Ledewire.init({ apiKey: 'your_api_key' })
+
+// Obtain a view-only seller token (key only — no secret needed)
+await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+
+// List all content
+const items = await lw.seller.content.list()
+
+// Search by title, URI, or metadata
+const results = await lw.seller.content.search({ title: 'intro' })
+const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
+
+// Fetch a single item
+const item = await lw.seller.content.get('content-id')
+```
+
 ## Token Storage
 
 By default tokens are stored **in memory** (most secure — cleared on page unload).

package/dist/index.d.ts

@@ -47,6 +47,9 @@ export declare class AuthError extends LedewireError {
     constructor(message: string, code?: number);
 }
 
+/** Request body for API key authentication (seller). */
+declare type AuthLoginApiKeyRequest = components['schemas']['AuthLoginApiKeyRequest'];
+
 /** Request body for buyer email/password login. */
 declare type AuthLoginEmailRequest = components['schemas']['AuthLoginEmailRequest'];
 
@@ -95,6 +98,27 @@ declare class BrowserAuthNamespace {
      * @returns The authentication token response.
      */
     loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse>;
+    /**
+     * Log in using an API key to obtain a seller token.
+     * Provide only `key` for read-only (`view`) access.
+     * Provide both `key` and `secret` for read/write (`full`) access.
+     * Tokens are stored automatically after successful authentication.
+     *
+     * Use this before calling `lw.seller.content.*` methods.
+     *
+     * @param body - API key credentials.
+     * @returns The authentication token response.
+     *
+     * @example
+     * ```ts
+     * // View access (read-only) — sufficient for seller.content.list/search/get
+     * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+     *
+     * // Full access (read/write)
+     * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
+     * ```
+     */
+    loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse>;
     private storeTokens;
 }
 
@@ -121,6 +145,8 @@ declare class BrowserClient {
     readonly purchases: BrowserPurchasesNamespace;
     /** Public content with per-user access information */
     readonly content: BrowserContentNamespace;
+    /** Seller content: list, search, and get (requires API key view token) */
+    readonly seller: BrowserSellerNamespace;
     /* Excluded from this release type: __constructor */
 }
 
@@ -248,6 +274,85 @@ declare class BrowserPurchasesNamespace {
     get(id: string): Promise<PurchaseResponse>;
 }
 
+/**
+ * Seller content namespace — list, search, and fetch store content by API key.
+ *
+ * Obtain via `lw.seller.content` — do not construct directly.
+ *
+ * @example
+ * ```ts
+ * const lw = Ledewire.init({ apiKey: 'your_api_key' })
+ * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+ *
+ * const items = await lw.seller.content.list()
+ * const results = await lw.seller.content.search({ title: 'intro' })
+ * const item = await lw.seller.content.get('content-id')
+ * ```
+ */
+declare class BrowserSellerContentNamespace {
+    private readonly http;
+    /* Excluded from this release type: __constructor */
+    /**
+     * List all content for the authenticated seller's store.
+     * Requires a token with at least `view` permission.
+     *
+     * @returns Array of content items.
+     *
+     * @example
+     * ```ts
+     * const items = await lw.seller.content.list()
+     * ```
+     */
+    list(): Promise<ContentResponse[]>;
+    /**
+     * Search content by title, URI, and/or metadata (AND logic).
+     * At least one criterion must be supplied.
+     * Requires a token with at least `view` permission.
+     *
+     * @param body - Search criteria (title, uri, and/or metadata).
+     * @returns Array of matching content items.
+     *
+     * @example
+     * ```ts
+     * const results = await lw.seller.content.search({ title: 'intro' })
+     * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })
+     * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
+     * ```
+     */
+    search(body: SellerContentSearchRequest): Promise<ContentResponse[]>;
+    /**
+     * Get a single content item by ID.
+     * Requires a token with at least `view` permission.
+     *
+     * @param id - The content ID.
+     * @returns The content item.
+     *
+     * @example
+     * ```ts
+     * const item = await lw.seller.content.get('content-id')
+     * ```
+     */
+    get(id: string): Promise<ContentResponse>;
+}
+
+/**
+ * Seller operations accessible with a view-permission API key token.
+ *
+ * Obtain via `lw.seller` — do not construct directly.
+ *
+ * @example
+ * ```ts
+ * const lw = Ledewire.init({ apiKey: 'your_api_key' })
+ * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+ * const items = await lw.seller.content.list()
+ * ```
+ */
+declare class BrowserSellerNamespace {
+    /** Seller content: list, search, and get by API key. */
+    readonly content: BrowserSellerContentNamespace;
+    /* Excluded from this release type: __constructor */
+}
+
 /**
  * Buyer wallet namespace — balance, transactions, and payment session management.
  *
@@ -455,8 +560,8 @@ declare interface components {
             refresh_token?: string;
         };
         ManageableStore: {
-            store_id: string;
-            store_name: string;
+            id: string;
+            name: string;
             store_key: string;
             /**
              * @description Derived role. `owner` if the user owns this store; `author` if they have author permissions only.
@@ -986,7 +1091,7 @@ declare interface components {
             data: components['schemas']['MerchantUser'][];
             pagination: components['schemas']['PaginationMeta'];
         };
-        /** @description Lightweight content representation returned by list and search endpoints. Omits body fields to keep list payloads small. Use the detail endpoint (`GET /v1/merchant/:store_id/content/:id`) to retrieve the full body or URI. */
+        /** @description Lightweight content representation returned by list and search endpoints. Omits `content_body` to keep list payloads small. Use the detail endpoint (`GET /v1/merchant/:store_id/content/:id`) to retrieve the full body. */
         ContentListItem: {
             id: string;
             /** @enum {string} */
@@ -1002,6 +1107,8 @@ declare interface components {
             visibility: 'public' | 'unlisted' | 'private';
             /** Format: date-time */
             created_at: string;
+            /** @description External URI for `external_ref` content; optional supplementary link for `markdown` content. Null when not set. */
+            content_uri: string | null;
             /** @description Namespaced platform ID for `external_ref` content. Null for other types. */
             external_identifier?: string | null;
         };
@@ -1139,12 +1246,42 @@ declare interface components {
 /** Checkout state for a specific piece of content and user. */
 export declare type ContentAccessInfo = components['schemas']['ContentAccessInfo'];
 
+/** Full content item returned by all seller content endpoints. */
+declare type ContentResponse = components['schemas']['ContentResponse'];
+
 /** A piece of content with buyer access information. */
 export declare type ContentWithAccessResponse = components['schemas']['ContentWithAccessResponse'];
 
 /**
  * Thrown when the authenticated user does not have permission
  * to perform the requested operation.
+ *
+ * **Common cause — merchant login with the wrong account role:**
+ * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`
+ * return `403 Forbidden` (not `401`) when the credentials are valid but the
+ * account has no merchant store associations (e.g. a buyer account used on the
+ * merchant endpoint). The `err.message` will be:
+ * `"This account does not have merchant access. Use a merchant or owner account."`
+ *
+ * Use a different account or ask a store owner to add your account as a member.
+ *
+ * @example
+ * ```ts
+ * import { ForbiddenError, AuthError } from '@ledewire/node'
+ *
+ * try {
+ *   await client.merchant.auth.loginWithGoogle({ id_token })
+ * } catch (err) {
+ *   if (err instanceof ForbiddenError) {
+ *     // Credentials were valid but account has no merchant store access.
+ *     // err.message → "This account does not have merchant access. Use a merchant or owner account."
+ *     console.error('Wrong account role:', err.message)
+ *   } else if (err instanceof AuthError) {
+ *     // Bad credentials or expired token — re-authenticate.
+ *     console.error('Authentication failed:', err.message)
+ *   }
+ * }
+ * ```
  */
 export declare class ForbiddenError extends LedewireError {
     constructor(message: string, code?: number);
@@ -1342,6 +1479,19 @@ export declare class PurchaseError extends LedewireError {
 /** A purchase record. */
 export declare type PurchaseResponse = components['schemas']['PurchaseResponse'];
 
+/**
+ * Search criteria for seller content search.
+ * At least one field must be supplied. All supplied fields must match (AND logic).
+ */
+export declare interface SellerContentSearchRequest {
+    /** Case-insensitive partial match against the content title. */
+    title?: string;
+    /** Case-insensitive partial match against the content URI (`external_ref` content only). */
+    uri?: string;
+    /** Exact key/value pairs to AND-match against content metadata. */
+    metadata?: Record<string, unknown>;
+}
+
 /** Internal representation of stored authentication tokens. */
 export declare interface StoredTokens {
     accessToken: string;
@@ -1396,13 +1546,18 @@ declare interface TokenManagerOptions {
      */
     refreshFn: (refreshToken: string) => Promise<StoredTokens>;
     /**
-     * Called after a successful token refresh.
-     * Use in server environments to persist the new tokens to a database or cache.
+     * Called after a successful background token refresh (not on initial login).
+     * Use for side-effects only — e.g. audit logging, cache invalidation, or
+     * notifying a secondary system when tokens rotate.
+     *
+     * **Do not use this for token persistence.** The `storage` adapter's
+     * `setTokens` is the canonical persistence hook and is already called on
+     * every refresh. Providing both will result in double-writes.
      *
      * @example
      * ```ts
      * onTokenRefreshed: async (tokens) => {
-     *   await redis.set('session:tokens', JSON.stringify(tokens))
+     *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })
      * }
      * ```
      */

package/dist/index.js

@@ -21,23 +21,23 @@ class d extends c {
     super(e, 403, t), this.name = "ForbiddenError";
   }
 }
-class k extends c {
+class g extends c {
   constructor(e, t) {
     super(e, 404, t), this.name = "NotFoundError";
   }
 }
-class N extends c {
+class $ extends c {
   constructor(e, t, r) {
     super(e, t, r), this.name = "PurchaseError";
   }
 }
-const g = "https://api.ledewire.com";
+const k = "https://api.ledewire.com";
 class f {
   constructor(e = {}) {
     n(this, "baseUrl");
     n(this, "getAccessToken");
     n(this, "onUnauthorized");
-    this.baseUrl = (e.baseUrl ?? g).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
+    this.baseUrl = (e.baseUrl ?? k).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
   }
   /**
    * GET request with optional query parameters.
@@ -117,7 +117,7 @@ class f {
       case 403:
         throw new d(r, o);
       case 404:
-        throw new k(r, o);
+        throw new g(r, o);
       default:
         throw new c(r, e.status, o);
     }
@@ -226,6 +226,30 @@ class E {
     const t = await this.http.post("/v1/auth/login/google", e);
     return await this.storeTokens(t), t;
   }
+  /**
+   * Log in using an API key to obtain a seller token.
+   * Provide only `key` for read-only (`view`) access.
+   * Provide both `key` and `secret` for read/write (`full`) access.
+   * Tokens are stored automatically after successful authentication.
+   *
+   * Use this before calling `lw.seller.content.*` methods.
+   *
+   * @param body - API key credentials.
+   * @returns The authentication token response.
+   *
+   * @example
+   * ```ts
+   * // View access (read-only) — sufficient for seller.content.list/search/get
+   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+   *
+   * // Full access (read/write)
+   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
+   * ```
+   */
+  async loginWithApiKey(e) {
+    const t = await this.http.post("/v1/auth/login/api-key", e);
+    return await this.storeTokens(t), t;
+  }
   async storeTokens(e) {
     await this.tokenManager.setTokens({
       accessToken: e.access_token,
@@ -257,7 +281,7 @@ class A {
     return this.http.get("/v1/config/public");
   }
 }
-class x {
+class v {
   constructor(e) {
     this.http = e;
   }
@@ -277,7 +301,7 @@ class x {
     );
   }
 }
-class U {
+class x {
   constructor(e) {
     this.http = e;
   }
@@ -308,6 +332,67 @@ class U {
     return this.http.get(`/v1/purchases/${e}`);
   }
 }
+class U {
+  /** @internal */
+  constructor(e) {
+    this.http = e;
+  }
+  /**
+   * List all content for the authenticated seller's store.
+   * Requires a token with at least `view` permission.
+   *
+   * @returns Array of content items.
+   *
+   * @example
+   * ```ts
+   * const items = await lw.seller.content.list()
+   * ```
+   */
+  async list() {
+    return this.http.get("/v1/seller/content");
+  }
+  /**
+   * Search content by title, URI, and/or metadata (AND logic).
+   * At least one criterion must be supplied.
+   * Requires a token with at least `view` permission.
+   *
+   * @param body - Search criteria (title, uri, and/or metadata).
+   * @returns Array of matching content items.
+   *
+   * @example
+   * ```ts
+   * const results = await lw.seller.content.search({ title: 'intro' })
+   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })
+   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
+   * ```
+   */
+  async search(e) {
+    return this.http.post("/v1/seller/content/search", e);
+  }
+  /**
+   * Get a single content item by ID.
+   * Requires a token with at least `view` permission.
+   *
+   * @param id - The content ID.
+   * @returns The content item.
+   *
+   * @example
+   * ```ts
+   * const item = await lw.seller.content.get('content-id')
+   * ```
+   */
+  async get(e) {
+    return this.http.get(`/v1/seller/content/${e}`);
+  }
+}
+class S {
+  /** @internal */
+  constructor(e) {
+    /** Seller content: list, search, and get by API key. */
+    n(this, "content");
+    this.content = new U(e);
+  }
+}
 class b {
   constructor(e) {
     this.http = e;
@@ -347,7 +432,7 @@ class b {
     return this.http.get(`/v1/wallet/payment-status/${e}`);
   }
 }
-class v {
+class P {
   constructor(e) {
     this.http = e;
   }
@@ -366,7 +451,7 @@ class v {
     return this.http.get(`/v1/checkout/state/${e}`);
   }
 }
-function O(s) {
+function C(s) {
   const e = s.baseUrl ?? "https://api.ledewire.com", t = s.storage ?? new m(), r = new y({
     storage: t,
     refreshFn: async (h) => {
@@ -389,9 +474,9 @@ function O(s) {
     getAccessToken: () => r.getAccessToken(),
     onUnauthorized: () => r.handleUnauthorized()
   });
-  return new S(o, r, s);
+  return new N(o, r, s);
 }
-class S {
+class N {
   /** @internal */
   constructor(e, t, r) {
     /** Platform-level public configuration (no auth required) */
@@ -406,11 +491,13 @@ class S {
     n(this, "purchases");
     /** Public content with per-user access information */
     n(this, "content");
-    this._http = e, this._tokenManager = t, this._config = r, this.config = new A(e), this.auth = new E(e, t), this.checkout = new v(e), this.wallet = new b(e), this.purchases = new U(e), this.content = new x(e);
+    /** Seller content: list, search, and get (requires API key view token) */
+    n(this, "seller");
+    this._http = e, this._tokenManager = t, this._config = r, this.config = new A(e), this.auth = new E(e, t), this.checkout = new P(e), this.wallet = new b(e), this.purchases = new x(e), this.content = new v(e), this.seller = new S(e);
   }
 }
-const P = "lw:tokens";
-function _(s = P) {
+const R = "lw:tokens";
+function B(s = R) {
   return {
     getTokens() {
       const e = localStorage.getItem(s);
@@ -434,10 +521,10 @@ export {
   d as ForbiddenError,
   c as LedewireError,
   m as MemoryTokenStorage,
-  k as NotFoundError,
-  N as PurchaseError,
-  O as init,
-  _ as localStorageAdapter,
+  g as NotFoundError,
+  $ as PurchaseError,
+  C as init,
+  B as localStorageAdapter,
   l as parseExpiresAt
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful token refresh.\n   * Use in server environments to persist the new tokens to a database or cache.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await redis.set('session:tokens', JSON.stringify(tokens))\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":";;;AAgBO,MAAMA,UAAsB,MAAM;AAAA,EAOvC,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,CAAO;AANC;AAAA,IAAAG,EAAA;AAGA;AAAA,IAAAA,EAAA;AAId,SAAK,OAAO,iBACZ,KAAK,aAAaF,GAClB,KAAK,OAAOC,GAEZ,OAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAMO,MAAME,UAAkBL,EAAc;AAAA,EAC3C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAMO,MAAMG,UAAuBN,EAAc;AAAA,EAChD,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAKO,MAAMI,UAAsBP,EAAc;AAAA,EAC/C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAMO,MAAMK,UAAsBR,EAAc;AAAA,EAC/C,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,GAASC,GAAYC,CAAI,GAC/B,KAAK,OAAO;AAAA,EACd;AACF;ACjDA,MAAMM,IAAmB;AAalB,MAAMC,EAAW;AAAA,EAKtB,YAAYC,IAA2B,IAAI;AAJ1B,IAAAP,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AAGf,SAAK,WAAWO,EAAO,WAAWF,GAAkB,QAAQ,OAAO,EAAE,GACrE,KAAK,iBAAiBE,EAAO,mBAAmB,MAAM,OACtD,KAAK,iBAAiBA,EAAO,mBAAmB,MAAM;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOC,GAAcC,GAA6C;AACtE,WAAO,KAAK,QAAW,OAAO,KAAK,SAASD,GAAMC,CAAM,CAAC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAQD,GAAcE,GAA4B;AACtD,WAAO,KAAK,QAAW,QAAQ,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOF,GAAcE,GAA4B;AACrD,WAAO,KAAK,QAAW,OAAO,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAASF,GAAcE,GAA4B;AACvD,WAAO,KAAK,QAAW,SAAS,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAiBF,GAA0B;AAC/C,WAAO,KAAK,QAAW,UAAU,KAAK,SAASA,CAAI,CAAC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAMQ,SAASA,GAAcC,GAAyC;AACtE,UAAME,IAAM,GAAG,KAAK,OAAO,GAAGH,CAAI;AAClC,WAAI,CAACC,KAAU,OAAO,KAAKA,CAAM,EAAE,WAAW,IAAUE,IACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU;AAAA,EACzD;AAAA,EAEA,MAAc,QACZG,GACAD,GACAD,GACAG,IAAU,IACE;AACZ,UAAMC,IAAQ,MAAM,KAAK,eAAA,GACnBC,IAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IAAA;AAEV,IAAID,MAAOC,EAAQ,gBAAmB,UAAUD,CAAK;AAErD,UAAME,IAAW,MAAM,MAAML,GAAK;AAAA,MAChC,QAAAC;AAAA,MACA,SAAAG;AAAA,MACA,GAAIL,MAAS,UAAa,EAAE,MAAM,KAAK,UAAUA,CAAI,EAAA;AAAA,IAAE,CACxD;AAED,QAAIM,EAAS,WAAW,OAAO,CAACH,GAAS;AAEvC,UADiB,MAAM,KAAK,eAAA;AAE1B,eAAO,KAAK,QAAWD,GAAQD,GAAKD,GAAM,EAAI;AAEhD,YAAM,IAAIT,EAAU,0CAA0C;AAAA,IAChE;AAMA,QAJKe,EAAS,MACZ,MAAM,KAAK,cAAcA,CAAQ,GAG/BA,EAAS,WAAW;AAIxB,aAAOA,EAAS,KAAA;AAAA,EAClB;AAAA,EAEA,MAAc,cAAcA,GAAoC;AAC9D,QAAIN;AACJ,QAAI;AACF,MAAAA,IAAQ,MAAMM,EAAS,KAAA;AAAA,IACzB,QAAQ;AAAA,IAER;AAEA,UAAMnB,IAAUa,GAAM,MAAM,WAAWM,EAAS,YAC1CjB,IAAOW,GAAM,MAAM;AAEzB,YAAQM,EAAS,QAAA;AAAA,MACf,KAAK;AACH,cAAM,IAAIf,EAAUJ,GAASE,CAAI;AAAA,MACnC,KAAK;AACH,cAAM,IAAIG,EAAeL,GAASE,CAAI;AAAA,MACxC,KAAK;AACH,cAAM,IAAII,EAAcN,GAASE,CAAI;AAAA,MACvC;AACE,cAAM,IAAIH,EAAcC,GAASmB,EAAS,QAAQjB,CAAI;AAAA,IAAA;AAAA,EAE5D;AACF;AC/JA,MAAMkB,IAAuB;AA+CtB,MAAMC,EAAa;AAAA,EAOxB,YAAYC,GAA8B;AANzB,IAAAnB,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACT,IAAAA,EAAA,wBAAsD;AAG5D,SAAK,UAAUmB,EAAQ,SACvB,KAAK,YAAYA,EAAQ,WACzB,KAAK,mBAAmBA,EAAQ,kBAChC,KAAK,gBAAgBA,EAAQ;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAyC;AAC7C,UAAMC,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,WAAKA,IAEeA,EAAO,YAAY,KAAK,IAAA,IAC1BH,KACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,eAAe,OAG5BA,EAAO,cARM;AAAA,EAStB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAA6C;AACjD,UAAMA,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,QAAI,CAACA;AACH,mBAAM,KAAK,gBAAA,GACJ;AAET,UAAMC,IAAY,MAAM,KAAK,eAAeD,EAAO,YAAY;AAC/D,WAAKC,KAAW,MAAM,KAAK,gBAAA,GACpBA,GAAW,eAAe;AAAA,EACnC;AAAA;AAAA,EAGA,MAAM,UAAUC,GAAqC;AACnD,UAAM,KAAK,QAAQ,UAAUA,CAAM;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,cAA6B;AACjC,UAAM,KAAK,QAAQ,YAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAeC,GAAoD;AACzE,WAAI,KAAK,iBAAuB,KAAK,kBAErC,KAAK,iBAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,OAAOD,OACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,GACnC,MAAM,KAAK,mBAAmBA,CAAM,GAC7BA,EACR,EACA,MAAM,CAACE,MAAkB;AACxB,YAAK,KAAK,QAAQ,YAAA,GACZ,IAAIvB,EAAU,+CAA+C;AAAA,IACrE,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,iBAAiB;AAAA,IACxB,CAAC,GAEI,KAAK;AAAA,EACd;AACF;AAWO,MAAMwB,EAA2C;AAAA,EAAjD;AACG,IAAAzB,EAAA,gBAA8B;AAAA;AAAA,EAEtC,YAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAUsB,GAA4B;AACpC,SAAK,SAASA;AAAA,EAChB;AAAA,EAEA,cAAoB;AAClB,SAAK,SAAS;AAAA,EAChB;AACF;AAaO,SAASI,EAAeC,GAA2B;AACxD,SAAO,IAAI,KAAKA,CAAS,EAAE,QAAA;AAC7B;AC9IO,MAAMC,EAAqB;AAAA;AAAA,EAEhC,YACmBC,GACAC,GACjB;AAFiB,SAAA,OAAAD,GACA,KAAA,eAAAC;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASH,MAAM,OAAOpB,GAA0D;AACrE,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,mBAAmBrB,CAAI;AAChF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAAerB,GAA8D;AACjF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,wBAAwBrB,CAAI;AACrF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAgBrB,GAA8D;AAClF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,yBAAyBrB,CAAI;AACtF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA,EAEA,MAAc,YAAYA,GAA4C;AACpE,UAAM,KAAK,aAAa,UAAU;AAAA,MAChC,aAAaA,EAAI;AAAA,MACjB,cAAcA,EAAI;AAAA,MAClB,WAAWL,EAAeK,EAAI,UAAU;AAAA,IAAA,CACzC;AAAA,EACH;AACF;AClEO,MAAMC,EAAuB;AAAA;AAAA,EAElC,YAA+BH,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBlD,MAAM,YAA2C;AAC/C,WAAO,KAAK,KAAK,IAA0B,mBAAmB;AAAA,EAChE;AACF;ACtBO,MAAMI,EAAwB;AAAA,EACnC,YAA+BJ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlD,MAAM,cAAcK,GAAYC,GAAqD;AACnF,UAAM1B,IAAiC,CAAA;AACvC,WAAI0B,MAAW,WACb1B,EAAO,UAAa0B,IAEf,KAAK,KAAK;AAAA,MACf,eAAeD,CAAE;AAAA,MACjB,OAAO,KAAKzB,CAAM,EAAE,SAAS,IAAIA,IAAS;AAAA,IAAA;AAAA,EAE9C;AACF;ACrBO,MAAM2B,EAA0B;AAAA,EACrC,YAA+BP,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlD,MAAM,OAAOnB,GAAwD;AACnE,WAAO,KAAK,KAAK,KAAuB,iBAAiBA,CAAI;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAoC;AACxC,WAAO,KAAK,KAAK,IAAwB,eAAe;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAIwB,GAAuC;AAC/C,WAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE;AAAA,EAC9D;AACF;ACzBO,MAAMG,EAAuB;AAAA,EAClC,YAA+BR,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlD,MAAM,UAA0C;AAC9C,WAAO,KAAK,KAAK,IAA2B,oBAAoB;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAiD;AACrD,WAAO,KAAK,KAAK,IAA6B,yBAAyB;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,qBACJnB,GACuC;AACvC,WAAO,KAAK,KAAK,KAAmC,8BAA8BA,CAAI;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAiB4B,GAAyD;AAC9E,WAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE;AAAA,EAC5F;AACF;AC/CO,MAAMC,EAAkB;AAAA,EAC7B,YAA+BV,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAalD,MAAM,MAAMW,GAAmD;AAC7D,WAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE;AAAA,EAC/E;AACF;ACkCO,SAASC,EAAKlC,GAA4C;AAC/D,QAAMmC,IAAUnC,EAAO,WAAW,4BAC5BoC,IAAUpC,EAAO,WAAW,IAAIkB,EAAA,GAEhCK,IAAe,IAAIZ,EAAa;AAAA,IACpC,SAAAyB;AAAA,IACA,WAAW,OAAOpB,MAAiB;AACjC,YAAMQ,IAAM,MAAM,MAAM,GAAGW,CAAO,0BAA0B;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,EAAE,eAAenB,GAAc;AAAA,MAAA,CACrD;AACD,UAAI,CAACQ,EAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,YAAMa,IAAQ,MAAMb,EAAI,KAAA;AAKxB,aAAO;AAAA,QACL,aAAaa,EAAK;AAAA,QAClB,cAAcA,EAAK;AAAA,QACnB,WAAWlB,EAAekB,EAAK,UAAU;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,GAAIrC,EAAO,kBAAkB,UAAa,EAAE,eAAeA,EAAO,cAAA;AAAA,EAAc,CACjF,GAEKsB,IAAO,IAAIvB,EAAW;AAAA,IAC1B,SAAAoC;AAAA,IACA,gBAAgB,MAAMZ,EAAa,eAAA;AAAA,IACnC,gBAAgB,MAAMA,EAAa,mBAAA;AAAA,EAAmB,CACvD;AAED,SAAO,IAAIe,EAAchB,GAAMC,GAAcvB,CAAM;AACrD;AASO,MAAMsC,EAAc;AAAA;AAAA,EAoBzB,YACkBC,GACAC,GACAC,GAChB;AAtBO;AAAA,IAAAhD,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAIS,SAAA,QAAA8C,GACA,KAAA,gBAAAC,GACA,KAAA,UAAAC,GAEhB,KAAK,SAAS,IAAIhB,EAAuBc,CAAK,GAC9C,KAAK,OAAO,IAAIlB,EAAqBkB,GAAOC,CAAa,GACzD,KAAK,WAAW,IAAIR,EAAkBO,CAAK,GAC3C,KAAK,SAAS,IAAIT,EAAuBS,CAAK,GAC9C,KAAK,YAAY,IAAIV,EAA0BU,CAAK,GACpD,KAAK,UAAU,IAAIb,EAAwBa,CAAK;AAAA,EAClD;AACF;AC3IA,MAAMG,IAAsB;AA0BrB,SAASC,EAAoBC,IAAMF,GAAmC;AAC3E,SAAO;AAAA,IACL,YAAiC;AAC/B,YAAMG,IAAM,aAAa,QAAQD,CAAG;AACpC,UAAI,CAACC,EAAK,QAAO;AACjB,UAAI;AACF,eAAO,KAAK,MAAMA,CAAG;AAAA,MACvB,QAAQ;AAEN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,UAAU9B,GAA4B;AACpC,mBAAa,QAAQ6B,GAAK,KAAK,UAAU7B,CAAM,CAAC;AAAA,IAClD;AAAA,IACA,cAAoB;AAClB,mBAAa,WAAW6B,CAAG;AAAA,IAC7B;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"index.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":";;;AAgBO,MAAMA,UAAsB,MAAM;AAAA,EAOvC,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,CAAO;AANC;AAAA,IAAAG,EAAA;AAGA;AAAA,IAAAA,EAAA;AAId,SAAK,OAAO,iBACZ,KAAK,aAAaF,GAClB,KAAK,OAAOC,GAEZ,OAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAMO,MAAME,UAAkBL,EAAc;AAAA,EAC3C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAiCO,MAAMG,UAAuBN,EAAc;AAAA,EAChD,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAKO,MAAMI,UAAsBP,EAAc;AAAA,EAC/C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAMO,MAAMK,UAAsBR,EAAc;AAAA,EAC/C,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,GAASC,GAAYC,CAAI,GAC/B,KAAK,OAAO;AAAA,EACd;AACF;AC5EA,MAAMM,IAAmB;AAalB,MAAMC,EAAW;AAAA,EAKtB,YAAYC,IAA2B,IAAI;AAJ1B,IAAAP,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AAGf,SAAK,WAAWO,EAAO,WAAWF,GAAkB,QAAQ,OAAO,EAAE,GACrE,KAAK,iBAAiBE,EAAO,mBAAmB,MAAM,OACtD,KAAK,iBAAiBA,EAAO,mBAAmB,MAAM;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOC,GAAcC,GAA6C;AACtE,WAAO,KAAK,QAAW,OAAO,KAAK,SAASD,GAAMC,CAAM,CAAC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAQD,GAAcE,GAA4B;AACtD,WAAO,KAAK,QAAW,QAAQ,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOF,GAAcE,GAA4B;AACrD,WAAO,KAAK,QAAW,OAAO,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAASF,GAAcE,GAA4B;AACvD,WAAO,KAAK,QAAW,SAAS,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAiBF,GAA0B;AAC/C,WAAO,KAAK,QAAW,UAAU,KAAK,SAASA,CAAI,CAAC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAMQ,SAASA,GAAcC,GAAyC;AACtE,UAAME,IAAM,GAAG,KAAK,OAAO,GAAGH,CAAI;AAClC,WAAI,CAACC,KAAU,OAAO,KAAKA,CAAM,EAAE,WAAW,IAAUE,IACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU;AAAA,EACzD;AAAA,EAEA,MAAc,QACZG,GACAD,GACAD,GACAG,IAAU,IACE;AACZ,UAAMC,IAAQ,MAAM,KAAK,eAAA,GACnBC,IAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IAAA;AAEV,IAAID,MAAOC,EAAQ,gBAAmB,UAAUD,CAAK;AAErD,UAAME,IAAW,MAAM,MAAML,GAAK;AAAA,MAChC,QAAAC;AAAA,MACA,SAAAG;AAAA,MACA,GAAIL,MAAS,UAAa,EAAE,MAAM,KAAK,UAAUA,CAAI,EAAA;AAAA,IAAE,CACxD;AAED,QAAIM,EAAS,WAAW,OAAO,CAACH,GAAS;AAEvC,UADiB,MAAM,KAAK,eAAA;AAE1B,eAAO,KAAK,QAAWD,GAAQD,GAAKD,GAAM,EAAI;AAEhD,YAAM,IAAIT,EAAU,0CAA0C;AAAA,IAChE;AAMA,QAJKe,EAAS,MACZ,MAAM,KAAK,cAAcA,CAAQ,GAG/BA,EAAS,WAAW;AAIxB,aAAOA,EAAS,KAAA;AAAA,EAClB;AAAA,EAEA,MAAc,cAAcA,GAAoC;AAC9D,QAAIN;AACJ,QAAI;AACF,MAAAA,IAAQ,MAAMM,EAAS,KAAA;AAAA,IACzB,QAAQ;AAAA,IAER;AAEA,UAAMnB,IAAUa,GAAM,MAAM,WAAWM,EAAS,YAC1CjB,IAAOW,GAAM,MAAM;AAEzB,YAAQM,EAAS,QAAA;AAAA,MACf,KAAK;AACH,cAAM,IAAIf,EAAUJ,GAASE,CAAI;AAAA,MACnC,KAAK;AACH,cAAM,IAAIG,EAAeL,GAASE,CAAI;AAAA,MACxC,KAAK;AACH,cAAM,IAAII,EAAcN,GAASE,CAAI;AAAA,MACvC;AACE,cAAM,IAAIH,EAAcC,GAASmB,EAAS,QAAQjB,CAAI;AAAA,IAAA;AAAA,EAE5D;AACF;AC/JA,MAAMkB,IAAuB;AAoDtB,MAAMC,EAAa;AAAA,EAOxB,YAAYC,GAA8B;AANzB,IAAAnB,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACT,IAAAA,EAAA,wBAAsD;AAG5D,SAAK,UAAUmB,EAAQ,SACvB,KAAK,YAAYA,EAAQ,WACzB,KAAK,mBAAmBA,EAAQ,kBAChC,KAAK,gBAAgBA,EAAQ;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAyC;AAC7C,UAAMC,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,WAAKA,IAEeA,EAAO,YAAY,KAAK,IAAA,IAC1BH,KACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,eAAe,OAG5BA,EAAO,cARM;AAAA,EAStB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAA6C;AACjD,UAAMA,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,QAAI,CAACA;AACH,mBAAM,KAAK,gBAAA,GACJ;AAET,UAAMC,IAAY,MAAM,KAAK,eAAeD,EAAO,YAAY;AAC/D,WAAKC,KAAW,MAAM,KAAK,gBAAA,GACpBA,GAAW,eAAe;AAAA,EACnC;AAAA;AAAA,EAGA,MAAM,UAAUC,GAAqC;AACnD,UAAM,KAAK,QAAQ,UAAUA,CAAM;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,cAA6B;AACjC,UAAM,KAAK,QAAQ,YAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAeC,GAAoD;AACzE,WAAI,KAAK,iBAAuB,KAAK,kBAErC,KAAK,iBAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,OAAOD,OACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,GACnC,MAAM,KAAK,mBAAmBA,CAAM,GAC7BA,EACR,EACA,MAAM,CAACE,MAAkB;AACxB,YAAK,KAAK,QAAQ,YAAA,GACZ,IAAIvB,EAAU,+CAA+C;AAAA,IACrE,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,iBAAiB;AAAA,IACxB,CAAC,GAEI,KAAK;AAAA,EACd;AACF;AAWO,MAAMwB,EAA2C;AAAA,EAAjD;AACG,IAAAzB,EAAA,gBAA8B;AAAA;AAAA,EAEtC,YAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAUsB,GAA4B;AACpC,SAAK,SAASA;AAAA,EAChB;AAAA,EAEA,cAAoB;AAClB,SAAK,SAAS;AAAA,EAChB;AACF;AAaO,SAASI,EAAeC,GAA2B;AACxD,SAAO,IAAI,KAAKA,CAAS,EAAE,QAAA;AAC7B;AClJO,MAAMC,EAAqB;AAAA;AAAA,EAEhC,YACmBC,GACAC,GACjB;AAFiB,SAAA,OAAAD,GACA,KAAA,eAAAC;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASH,MAAM,OAAOpB,GAA0D;AACrE,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,mBAAmBrB,CAAI;AAChF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAAerB,GAA8D;AACjF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,wBAAwBrB,CAAI;AACrF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAgBrB,GAA8D;AAClF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,yBAAyBrB,CAAI;AACtF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,gBAAgBrB,GAA+D;AACnF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,0BAA0BrB,CAAI;AACvF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA,EAEA,MAAc,YAAYA,GAA4C;AACpE,UAAM,KAAK,aAAa,UAAU;AAAA,MAChC,aAAaA,EAAI;AAAA,MACjB,cAAcA,EAAI;AAAA,MAClB,WAAWL,EAAeK,EAAI,UAAU;AAAA,IAAA,CACzC;AAAA,EACH;AACF;AC7FO,MAAMC,EAAuB;AAAA;AAAA,EAElC,YAA+BH,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBlD,MAAM,YAA2C;AAC/C,WAAO,KAAK,KAAK,IAA0B,mBAAmB;AAAA,EAChE;AACF;ACtBO,MAAMI,EAAwB;AAAA,EACnC,YAA+BJ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlD,MAAM,cAAcK,GAAYC,GAAqD;AACnF,UAAM1B,IAAiC,CAAA;AACvC,WAAI0B,MAAW,WACb1B,EAAO,UAAa0B,IAEf,KAAK,KAAK;AAAA,MACf,eAAeD,CAAE;AAAA,MACjB,OAAO,KAAKzB,CAAM,EAAE,SAAS,IAAIA,IAAS;AAAA,IAAA;AAAA,EAE9C;AACF;ACrBO,MAAM2B,EAA0B;AAAA,EACrC,YAA+BP,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlD,MAAM,OAAOnB,GAAwD;AACnE,WAAO,KAAK,KAAK,KAAuB,iBAAiBA,CAAI;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAoC;AACxC,WAAO,KAAK,KAAK,IAAwB,eAAe;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAIwB,GAAuC;AAC/C,WAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE;AAAA,EAC9D;AACF;ACLO,MAAMG,EAA8B;AAAA;AAAA,EAEzC,YAA6BR,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAahD,MAAM,OAAmC;AACvC,WAAO,KAAK,KAAK,IAAuB,oBAAoB;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,OAAOnB,GAA8D;AACzE,WAAO,KAAK,KAAK,KAAwB,6BAA6BA,CAAI;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,IAAIwB,GAAsC;AAC9C,WAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE;AAAA,EAClE;AACF;ACzEO,MAAMI,EAAuB;AAAA;AAAA,EAKlC,YAAYT,GAAkB;AAHrB;AAAA,IAAA7B,EAAA;AAIP,SAAK,UAAU,IAAIqC,EAA8BR,CAAI;AAAA,EACvD;AACF;ACRO,MAAMU,EAAuB;AAAA,EAClC,YAA+BV,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlD,MAAM,UAA0C;AAC9C,WAAO,KAAK,KAAK,IAA2B,oBAAoB;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAiD;AACrD,WAAO,KAAK,KAAK,IAA6B,yBAAyB;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,qBACJnB,GACuC;AACvC,WAAO,KAAK,KAAK,KAAmC,8BAA8BA,CAAI;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAiB8B,GAAyD;AAC9E,WAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE;AAAA,EAC5F;AACF;AC/CO,MAAMC,EAAkB;AAAA,EAC7B,YAA+BZ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAalD,MAAM,MAAMa,GAAmD;AAC7D,WAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE;AAAA,EAC/E;AACF;ACmCO,SAASC,EAAKpC,GAA4C;AAC/D,QAAMqC,IAAUrC,EAAO,WAAW,4BAC5BsC,IAAUtC,EAAO,WAAW,IAAIkB,EAAA,GAEhCK,IAAe,IAAIZ,EAAa;AAAA,IACpC,SAAA2B;AAAA,IACA,WAAW,OAAOtB,MAAiB;AACjC,YAAMQ,IAAM,MAAM,MAAM,GAAGa,CAAO,0BAA0B;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,EAAE,eAAerB,GAAc;AAAA,MAAA,CACrD;AACD,UAAI,CAACQ,EAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,YAAMe,IAAQ,MAAMf,EAAI,KAAA;AAKxB,aAAO;AAAA,QACL,aAAae,EAAK;AAAA,QAClB,cAAcA,EAAK;AAAA,QACnB,WAAWpB,EAAeoB,EAAK,UAAU;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,GAAIvC,EAAO,kBAAkB,UAAa,EAAE,eAAeA,EAAO,cAAA;AAAA,EAAc,CACjF,GAEKsB,IAAO,IAAIvB,EAAW;AAAA,IAC1B,SAAAsC;AAAA,IACA,gBAAgB,MAAMd,EAAa,eAAA;AAAA,IACnC,gBAAgB,MAAMA,EAAa,mBAAA;AAAA,EAAmB,CACvD;AAED,SAAO,IAAIiB,EAAclB,GAAMC,GAAcvB,CAAM;AACrD;AASO,MAAMwC,EAAc;AAAA;AAAA,EAuBzB,YACkBC,GACAC,GACAC,GAChB;AAzBO;AAAA,IAAAlD,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAIS,SAAA,QAAAgD,GACA,KAAA,gBAAAC,GACA,KAAA,UAAAC,GAEhB,KAAK,SAAS,IAAIlB,EAAuBgB,CAAK,GAC9C,KAAK,OAAO,IAAIpB,EAAqBoB,GAAOC,CAAa,GACzD,KAAK,WAAW,IAAIR,EAAkBO,CAAK,GAC3C,KAAK,SAAS,IAAIT,EAAuBS,CAAK,GAC9C,KAAK,YAAY,IAAIZ,EAA0BY,CAAK,GACpD,KAAK,UAAU,IAAIf,EAAwBe,CAAK,GAChD,KAAK,SAAS,IAAIV,EAAuBU,CAAK;AAAA,EAChD;AACF;AChJA,MAAMG,IAAsB;AA0BrB,SAASC,EAAoBC,IAAMF,GAAmC;AAC3E,SAAO;AAAA,IACL,YAAiC;AAC/B,YAAMG,IAAM,aAAa,QAAQD,CAAG;AACpC,UAAI,CAACC,EAAK,QAAO;AACjB,UAAI;AACF,eAAO,KAAK,MAAMA,CAAG;AAAA,MACvB,QAAQ;AAEN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,UAAUhC,GAA4B;AACpC,mBAAa,QAAQ+B,GAAK,KAAK,UAAU/B,CAAM,CAAC;AAAA,IAClD;AAAA,IACA,cAAoB;AAClB,mBAAa,WAAW+B,CAAG;AAAA,IAC7B;AAAA,EAAA;AAEJ;"}

package/dist/ledewire.min.js

@@ -1,2 +1,2 @@
-var Ledewire=(function(o){"use strict";var O=Object.defineProperty;var R=(o,a,c)=>a in o?O(o,a,{enumerable:!0,configurable:!0,writable:!0,value:c}):o[a]=c;var n=(o,a,c)=>R(o,typeof a!="symbol"?a+"":a,c);class a extends Error{constructor(t,r,i){super(t);n(this,"statusCode");n(this,"code");this.name="LedewireError",this.statusCode=r,this.code=i,Object.setPrototypeOf(this,new.target.prototype)}}class c extends a{constructor(e,t){super(e,401,t),this.name="AuthError"}}class d extends a{constructor(e,t){super(e,403,t),this.name="ForbiddenError"}}class p extends a{constructor(e,t){super(e,404,t),this.name="NotFoundError"}}class k extends a{constructor(e,t,r){super(e,t,r),this.name="PurchaseError"}}const f="https://api.ledewire.com";class T{constructor(e={}){n(this,"baseUrl");n(this,"getAccessToken");n(this,"onUnauthorized");this.baseUrl=(e.baseUrl??f).replace(/\/$/,""),this.getAccessToken=e.getAccessToken??(()=>null),this.onUnauthorized=e.onUnauthorized??(()=>null)}async get(e,t){return this.request("GET",this.buildUrl(e,t))}async post(e,t){return this.request("POST",this.buildUrl(e),t)}async put(e,t){return this.request("PUT",this.buildUrl(e),t)}async patch(e,t){return this.request("PATCH",this.buildUrl(e),t)}async delete(e){return this.request("DELETE",this.buildUrl(e))}buildUrl(e,t){const r=`${this.baseUrl}${e}`;return!t||Object.keys(t).length===0?r:`${r}?${new URLSearchParams(t).toString()}`}async request(e,t,r,i=!1){const l=await this.getAccessToken(),u={"Content-Type":"application/json",Accept:"application/json"};l&&(u.Authorization=`Bearer ${l}`);const h=await fetch(t,{method:e,headers:u,...r!==void 0&&{body:JSON.stringify(r)}});if(h.status===401&&!i){if(await this.onUnauthorized())return this.request(e,t,r,!0);throw new c("Session expired. Please re-authenticate.")}if(h.ok||await this.throwApiError(h),h.status!==204)return h.json()}async throwApiError(e){let t;try{t=await e.json()}catch{}const r=t?.error.message??e.statusText,i=t?.error.code;switch(e.status){case 401:throw new c(r,i);case 403:throw new d(r,i);case 404:throw new p(r,i);default:throw new a(r,e.status,i)}}}const y=6e4;class E{constructor(e){n(this,"storage");n(this,"refreshFn");n(this,"onTokenRefreshed");n(this,"onAuthExpired");n(this,"refreshPromise",null);this.storage=e.storage,this.refreshFn=e.refreshFn,this.onTokenRefreshed=e.onTokenRefreshed,this.onAuthExpired=e.onAuthExpired}async getAccessToken(){const e=await this.storage.getTokens();return e?e.expiresAt-Date.now()<y?(await this.performRefresh(e.refreshToken))?.accessToken??null:e.accessToken:null}async handleUnauthorized(){const e=await this.storage.getTokens();if(!e)return await this.onAuthExpired?.(),null;const t=await this.performRefresh(e.refreshToken);return t||await this.onAuthExpired?.(),t?.accessToken??null}async setTokens(e){await this.storage.setTokens(e)}async clearTokens(){await this.storage.clearTokens()}performRefresh(e){return this.refreshPromise?this.refreshPromise:(this.refreshPromise=this.refreshFn(e).then(async t=>(await this.storage.setTokens(t),await this.onTokenRefreshed?.(t),t)).catch(t=>{throw this.storage.clearTokens(),new c("Token refresh failed. Please re-authenticate.")}).finally(()=>{this.refreshPromise=null}),this.refreshPromise)}}class g{constructor(){n(this,"tokens",null)}getTokens(){return this.tokens}setTokens(e){this.tokens=e}clearTokens(){this.tokens=null}}function w(s){return new Date(s).getTime()}class m{constructor(e,t){this.http=e,this.tokenManager=t}async signup(e){const t=await this.http.post("/v1/auth/signup",e);return await this.storeTokens(t),t}async loginWithEmail(e){const t=await this.http.post("/v1/auth/login/email",e);return await this.storeTokens(t),t}async loginWithGoogle(e){const t=await this.http.post("/v1/auth/login/google",e);return await this.storeTokens(t),t}async storeTokens(e){await this.tokenManager.setTokens({accessToken:e.access_token,refreshToken:e.refresh_token,expiresAt:w(e.expires_at)})}}class A{constructor(e){this.http=e}async getPublic(){return this.http.get("/v1/config/public")}}class b{constructor(e){this.http=e}async getWithAccess(e,t){const r={};return t!==void 0&&(r.user_id=t),this.http.get(`/v1/content/${e}/with-access`,Object.keys(r).length>0?r:void 0)}}class S{constructor(e){this.http=e}async create(e){return this.http.post("/v1/purchases",e)}async list(){return this.http.get("/v1/purchases")}async get(e){return this.http.get(`/v1/purchases/${e}`)}}class U{constructor(e){this.http=e}async balance(){return this.http.get("/v1/wallet/balance")}async transactions(){return this.http.get("/v1/wallet/transactions")}async createPaymentSession(e){return this.http.post("/v1/wallet/payment-session",e)}async getPaymentStatus(e){return this.http.get(`/v1/wallet/payment-status/${e}`)}}class v{constructor(e){this.http=e}async state(e){return this.http.get(`/v1/checkout/state/${e}`)}}function P(s){const e=s.baseUrl??"https://api.ledewire.com",t=s.storage??new g,r=new E({storage:t,refreshFn:async l=>{const u=await fetch(`${e}/v1/auth/token/refresh`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:l})});if(!u.ok)throw new Error("Token refresh failed");const h=await u.json();return{accessToken:h.access_token,refreshToken:h.refresh_token,expiresAt:w(h.expires_at)}},...s.onAuthExpired!==void 0&&{onAuthExpired:s.onAuthExpired}}),i=new T({baseUrl:e,getAccessToken:()=>r.getAccessToken(),onUnauthorized:()=>r.handleUnauthorized()});return new x(i,r,s)}class x{constructor(e,t,r){n(this,"config");n(this,"auth");n(this,"checkout");n(this,"wallet");n(this,"purchases");n(this,"content");this._http=e,this._tokenManager=t,this._config=r,this.config=new A(e),this.auth=new m(e,t),this.checkout=new v(e),this.wallet=new U(e),this.purchases=new S(e),this.content=new b(e)}}const F="lw:tokens";function N(s=F){return{getTokens(){const e=localStorage.getItem(s);if(!e)return null;try{return JSON.parse(e)}catch{return null}},setTokens(e){localStorage.setItem(s,JSON.stringify(e))},clearTokens(){localStorage.removeItem(s)}}}return o.AuthError=c,o.ForbiddenError=d,o.LedewireError=a,o.MemoryTokenStorage=g,o.NotFoundError=p,o.PurchaseError=k,o.init=P,o.localStorageAdapter=N,o.parseExpiresAt=w,Object.defineProperty(o,Symbol.toStringTag,{value:"Module"}),o})({});
+var Ledewire=(function(o){"use strict";var $=Object.defineProperty;var C=(o,a,c)=>a in o?$(o,a,{enumerable:!0,configurable:!0,writable:!0,value:c}):o[a]=c;var n=(o,a,c)=>C(o,typeof a!="symbol"?a+"":a,c);class a extends Error{constructor(t,r,i){super(t);n(this,"statusCode");n(this,"code");this.name="LedewireError",this.statusCode=r,this.code=i,Object.setPrototypeOf(this,new.target.prototype)}}class c extends a{constructor(e,t){super(e,401,t),this.name="AuthError"}}class w extends a{constructor(e,t){super(e,403,t),this.name="ForbiddenError"}}class d extends a{constructor(e,t){super(e,404,t),this.name="NotFoundError"}}class k extends a{constructor(e,t,r){super(e,t,r),this.name="PurchaseError"}}const f="https://api.ledewire.com";class T{constructor(e={}){n(this,"baseUrl");n(this,"getAccessToken");n(this,"onUnauthorized");this.baseUrl=(e.baseUrl??f).replace(/\/$/,""),this.getAccessToken=e.getAccessToken??(()=>null),this.onUnauthorized=e.onUnauthorized??(()=>null)}async get(e,t){return this.request("GET",this.buildUrl(e,t))}async post(e,t){return this.request("POST",this.buildUrl(e),t)}async put(e,t){return this.request("PUT",this.buildUrl(e),t)}async patch(e,t){return this.request("PATCH",this.buildUrl(e),t)}async delete(e){return this.request("DELETE",this.buildUrl(e))}buildUrl(e,t){const r=`${this.baseUrl}${e}`;return!t||Object.keys(t).length===0?r:`${r}?${new URLSearchParams(t).toString()}`}async request(e,t,r,i=!1){const l=await this.getAccessToken(),u={"Content-Type":"application/json",Accept:"application/json"};l&&(u.Authorization=`Bearer ${l}`);const h=await fetch(t,{method:e,headers:u,...r!==void 0&&{body:JSON.stringify(r)}});if(h.status===401&&!i){if(await this.onUnauthorized())return this.request(e,t,r,!0);throw new c("Session expired. Please re-authenticate.")}if(h.ok||await this.throwApiError(h),h.status!==204)return h.json()}async throwApiError(e){let t;try{t=await e.json()}catch{}const r=t?.error.message??e.statusText,i=t?.error.code;switch(e.status){case 401:throw new c(r,i);case 403:throw new w(r,i);case 404:throw new d(r,i);default:throw new a(r,e.status,i)}}}const y=6e4;class E{constructor(e){n(this,"storage");n(this,"refreshFn");n(this,"onTokenRefreshed");n(this,"onAuthExpired");n(this,"refreshPromise",null);this.storage=e.storage,this.refreshFn=e.refreshFn,this.onTokenRefreshed=e.onTokenRefreshed,this.onAuthExpired=e.onAuthExpired}async getAccessToken(){const e=await this.storage.getTokens();return e?e.expiresAt-Date.now()<y?(await this.performRefresh(e.refreshToken))?.accessToken??null:e.accessToken:null}async handleUnauthorized(){const e=await this.storage.getTokens();if(!e)return await this.onAuthExpired?.(),null;const t=await this.performRefresh(e.refreshToken);return t||await this.onAuthExpired?.(),t?.accessToken??null}async setTokens(e){await this.storage.setTokens(e)}async clearTokens(){await this.storage.clearTokens()}performRefresh(e){return this.refreshPromise?this.refreshPromise:(this.refreshPromise=this.refreshFn(e).then(async t=>(await this.storage.setTokens(t),await this.onTokenRefreshed?.(t),t)).catch(t=>{throw this.storage.clearTokens(),new c("Token refresh failed. Please re-authenticate.")}).finally(()=>{this.refreshPromise=null}),this.refreshPromise)}}class g{constructor(){n(this,"tokens",null)}getTokens(){return this.tokens}setTokens(e){this.tokens=e}clearTokens(){this.tokens=null}}function p(s){return new Date(s).getTime()}class m{constructor(e,t){this.http=e,this.tokenManager=t}async signup(e){const t=await this.http.post("/v1/auth/signup",e);return await this.storeTokens(t),t}async loginWithEmail(e){const t=await this.http.post("/v1/auth/login/email",e);return await this.storeTokens(t),t}async loginWithGoogle(e){const t=await this.http.post("/v1/auth/login/google",e);return await this.storeTokens(t),t}async loginWithApiKey(e){const t=await this.http.post("/v1/auth/login/api-key",e);return await this.storeTokens(t),t}async storeTokens(e){await this.tokenManager.setTokens({accessToken:e.access_token,refreshToken:e.refresh_token,expiresAt:p(e.expires_at)})}}class A{constructor(e){this.http=e}async getPublic(){return this.http.get("/v1/config/public")}}class v{constructor(e){this.http=e}async getWithAccess(e,t){const r={};return t!==void 0&&(r.user_id=t),this.http.get(`/v1/content/${e}/with-access`,Object.keys(r).length>0?r:void 0)}}class S{constructor(e){this.http=e}async create(e){return this.http.post("/v1/purchases",e)}async list(){return this.http.get("/v1/purchases")}async get(e){return this.http.get(`/v1/purchases/${e}`)}}class b{constructor(e){this.http=e}async list(){return this.http.get("/v1/seller/content")}async search(e){return this.http.post("/v1/seller/content/search",e)}async get(e){return this.http.get(`/v1/seller/content/${e}`)}}class U{constructor(e){n(this,"content");this.content=new b(e)}}class P{constructor(e){this.http=e}async balance(){return this.http.get("/v1/wallet/balance")}async transactions(){return this.http.get("/v1/wallet/transactions")}async createPaymentSession(e){return this.http.post("/v1/wallet/payment-session",e)}async getPaymentStatus(e){return this.http.get(`/v1/wallet/payment-status/${e}`)}}class N{constructor(e){this.http=e}async state(e){return this.http.get(`/v1/checkout/state/${e}`)}}function x(s){const e=s.baseUrl??"https://api.ledewire.com",t=s.storage??new g,r=new E({storage:t,refreshFn:async l=>{const u=await fetch(`${e}/v1/auth/token/refresh`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:l})});if(!u.ok)throw new Error("Token refresh failed");const h=await u.json();return{accessToken:h.access_token,refreshToken:h.refresh_token,expiresAt:p(h.expires_at)}},...s.onAuthExpired!==void 0&&{onAuthExpired:s.onAuthExpired}}),i=new T({baseUrl:e,getAccessToken:()=>r.getAccessToken(),onUnauthorized:()=>r.handleUnauthorized()});return new F(i,r,s)}class F{constructor(e,t,r){n(this,"config");n(this,"auth");n(this,"checkout");n(this,"wallet");n(this,"purchases");n(this,"content");n(this,"seller");this._http=e,this._tokenManager=t,this._config=r,this.config=new A(e),this.auth=new m(e,t),this.checkout=new N(e),this.wallet=new P(e),this.purchases=new S(e),this.content=new v(e),this.seller=new U(e)}}const O="lw:tokens";function R(s=O){return{getTokens(){const e=localStorage.getItem(s);if(!e)return null;try{return JSON.parse(e)}catch{return null}},setTokens(e){localStorage.setItem(s,JSON.stringify(e))},clearTokens(){localStorage.removeItem(s)}}}return o.AuthError=c,o.ForbiddenError=w,o.LedewireError=a,o.MemoryTokenStorage=g,o.NotFoundError=d,o.PurchaseError=k,o.init=x,o.localStorageAdapter=R,o.parseExpiresAt=p,Object.defineProperty(o,Symbol.toStringTag,{value:"Module"}),o})({});
 //# sourceMappingURL=ledewire.min.js.map

package/dist/ledewire.min.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful token refresh.\n   * Use in server environments to persist the new tokens to a database or cache.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await redis.set('session:tokens', JSON.stringify(tokens))\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAMO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CCjDA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IA+CtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CC9IO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAEA,MAAc,YAAYA,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CClEO,MAAMC,CAAuB,CAElC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCtBO,MAAMI,CAAwB,CACnC,YAA+BJ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcK,EAAYC,EAAqD,CACnF,MAAM1B,EAAiC,CAAA,EACvC,OAAI0B,IAAW,SACb1B,EAAO,QAAa0B,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKzB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM2B,CAA0B,CACrC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIwB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCzBO,MAAMG,CAAuB,CAClC,YAA+BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB4B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMW,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCkCO,SAASC,EAAKlC,EAA4C,CAC/D,MAAMmC,EAAUnC,EAAO,SAAW,2BAC5BoC,EAAUpC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAAyB,EACA,UAAW,MAAOpB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGW,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAenB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMa,EAAQ,MAAMb,EAAI,KAAA,EAKxB,MAAO,CACL,YAAaa,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWlB,EAAekB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIrC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAoC,EACA,eAAgB,IAAMZ,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIe,EAAchB,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMsC,CAAc,CAoBzB,YACkBC,EACAC,EACAC,EAChB,CAtBOhD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAIS,KAAA,MAAA8C,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,OAAS,IAAIhB,EAAuBc,CAAK,EAC9C,KAAK,KAAO,IAAIlB,EAAqBkB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIV,EAA0BU,CAAK,EACpD,KAAK,QAAU,IAAIb,EAAwBa,CAAK,CAClD,CACF,CC3IA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAU9B,EAA4B,CACpC,aAAa,QAAQ6B,EAAK,KAAK,UAAU7B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW6B,CAAG,CAC7B,CAAA,CAEJ"}
+{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAiCO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CC5EA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IAoDtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CClJO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAsBA,MAAM,gBAAgBrB,EAA+D,CACnF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0BrB,CAAI,EACvF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAEA,MAAc,YAAYA,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CC7FO,MAAMC,CAAuB,CAElC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCtBO,MAAMI,CAAwB,CACnC,YAA+BJ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcK,EAAYC,EAAqD,CACnF,MAAM1B,EAAiC,CAAA,EACvC,OAAI0B,IAAW,SACb1B,EAAO,QAAa0B,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKzB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM2B,CAA0B,CACrC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIwB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCLO,MAAMG,CAA8B,CAEzC,YAA6BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAahD,MAAM,MAAmC,CACvC,OAAO,KAAK,KAAK,IAAuB,oBAAoB,CAC9D,CAiBA,MAAM,OAAOnB,EAA8D,CACzE,OAAO,KAAK,KAAK,KAAwB,4BAA6BA,CAAI,CAC5E,CAcA,MAAM,IAAIwB,EAAsC,CAC9C,OAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE,CAClE,CACF,CCzEO,MAAMI,CAAuB,CAKlC,YAAYT,EAAkB,CAHrB7B,EAAA,gBAIP,KAAK,QAAU,IAAIqC,EAA8BR,CAAI,CACvD,CACF,CCRO,MAAMU,CAAuB,CAClC,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB8B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BZ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMa,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCmCO,SAASC,EAAKpC,EAA4C,CAC/D,MAAMqC,EAAUrC,EAAO,SAAW,2BAC5BsC,EAAUtC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAA2B,EACA,UAAW,MAAOtB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGa,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAerB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMe,EAAQ,MAAMf,EAAI,KAAA,EAKxB,MAAO,CACL,YAAae,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWpB,EAAeoB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIvC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAsC,EACA,eAAgB,IAAMd,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIiB,EAAclB,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMwC,CAAc,CAuBzB,YACkBC,EACAC,EACAC,EAChB,CAzBOlD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAGAA,EAAA,eAIS,KAAA,MAAAgD,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,OAAS,IAAIlB,EAAuBgB,CAAK,EAC9C,KAAK,KAAO,IAAIpB,EAAqBoB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIZ,EAA0BY,CAAK,EACpD,KAAK,QAAU,IAAIf,EAAwBe,CAAK,EAChD,KAAK,OAAS,IAAIV,EAAuBU,CAAK,CAChD,CACF,CChJA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAUhC,EAA4B,CACpC,aAAa,QAAQ+B,EAAK,KAAK,UAAU/B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW+B,CAAG,CAC7B,CAAA,CAEJ"}

package/llms.txt

@@ -0,0 +1,290 @@
+# @ledewire/browser
+
+> LedeWire Browser SDK — buyer authentication, checkout, wallet, and purchases for web apps.
+> Works as a CDN script tag (no build step) or as an ESM npm package.
+> npm install @ledewire/browser
+> Source: https://github.com/ledewire/ledewire-js-sdk
+> API docs: https://ledewire.github.io/ledewire-js-sdk/api/
+
+## CDN (no install required)
+
+```html
+<!-- Pin to a major version in production -->
+<script src="https://cdn.jsdelivr.net/npm/@ledewire/browser@0/dist/ledewire.min.js"></script>
+<script>
+  const lw = Ledewire.init({ apiKey: 'your_api_key' })
+</script>
+```
+
+The global is `Ledewire`. All methods return Promises — use async/await or `.then()`.
+
+## npm / ESM install
+
+```bash
+npm install @ledewire/browser
+```
+
+```ts
+import { init, localStorageAdapter } from '@ledewire/browser'
+```
+
+## init() configuration
+
+```ts
+import { init } from '@ledewire/browser'
+import type { BrowserClientConfig } from '@ledewire/browser'
+
+const lw = init({
+  apiKey: string,           // required — your LedeWire platform API key
+
+  baseUrl?: string,         // defaults to 'https://api.ledewire.com'
+
+  // Token persistence — defaults to MemoryTokenStorage (cleared on page unload)
+  storage?: TokenStorage,
+
+  onTokenRefreshed?: (tokens: StoredTokens) => void,
+  onAuthExpired?: () => void,  // called when refresh fails — show login UI
+})
+```
+
+Token refresh is automatic — never call a refresh method manually.
+
+## localStorageAdapter
+
+Persist sessions across page reloads using `localStorage`:
+
+```ts
+import { init, localStorageAdapter } from '@ledewire/browser'
+
+const lw = init({
+  apiKey: 'your_api_key',
+  storage: localStorageAdapter(),     // persists under 'lw_tokens' key
+  onAuthExpired: () => showLoginModal(),
+})
+```
+
+Use `MemoryTokenStorage` (default) for highest security — tokens are never written
+to disk and are cleared when the page unloads.
+
+## Field naming convention
+
+All API response types use `snake_case` field names (`access_token`, `price_cents`,
+`content_uri`), matching the wire format exactly.
+
+SDK-owned types use `camelCase` where they do not map 1:1 to a raw API response
+field: `StoredTokens.accessToken`, `StoredTokens.expiresAt: number` (a converted
+Unix ms timestamp, not the raw `expires_at: string`).
+
+Do not attempt to remap snake_case fields — the SDK has no `transformKeys` option.
+
+## Complete method reference
+
+### lw.config
+
+```ts
+lw.config.getPublic() → Promise<PublicConfigResponse>
+// { google_client_id: string, ... }
+// Safe to call before authentication — use to get the Google Client ID for sign-in UI.
+```
+
+### lw.auth (buyer and seller auth)
+
+```ts
+lw.auth.signup(body)                           → Promise<AuthenticationResponse>
+lw.auth.loginWithEmail({ email, password })    → Promise<AuthenticationResponse>
+lw.auth.loginWithGoogle({ id_token })          → Promise<AuthenticationResponse>
+lw.auth.loginWithApiKey({ key, secret? })      → Promise<AuthenticationResponse>
+// key-only → view permission (read-only, sufficient for lw.seller.content.*)
+// key + secret → full permission (read/write)
+lw.auth.logout()                               → Promise<void>
+lw.auth.requestPasswordReset({ email })        → Promise<void>
+lw.auth.resetPassword({ token, password })     → Promise<void>
+```
+
+Tokens are stored automatically after every successful login.
+
+### lw.checkout
+
+```ts
+lw.checkout.state(contentId: string)  → Promise<CheckoutStateResponse>
+```
+
+Use this to determine what the current visitor needs to do before accessing content:
+
+```ts
+const { checkout_state } = await lw.checkout.state('article-id')
+
+switch (checkout_state.next_required_action) {
+  case 'authenticate':
+    // Show login/signup UI
+    break
+  case 'fund_wallet':
+    // Show wallet funding UI (checkout_state.has_sufficient_funds === false)
+    break
+  case 'purchase':
+    // Show purchase confirmation UI
+    break
+  case 'view_content':
+    // User has access — fetch and render the content
+    break
+}
+```
+
+### lw.wallet
+
+```ts
+lw.wallet.balance()                                    → Promise<WalletBalanceResponse>
+// { balance_cents: number }
+
+lw.wallet.transactions(params?: PaginationParams)      → Promise<{ data: WalletTransactionItem[], pagination: PaginationMeta }>
+
+lw.wallet.createPaymentSession({ amount_cents: number }) → Promise<WalletPaymentSessionResponse>
+// { payment_url: string, session_id: string, ... } — redirect user to payment_url
+
+lw.wallet.getPaymentStatus(sessionId: string)          → Promise<WalletPaymentStatusResponse>
+// Poll after return from payment redirect to confirm funding
+```
+
+### lw.purchases
+
+```ts
+lw.purchases.create({ content_id: string })           → Promise<PurchaseResponse>
+lw.purchases.list(params?: PaginationParams)          → Promise<{ data: PurchaseResponse[], pagination: PaginationMeta }>
+lw.purchases.get(purchaseId: string)                  → Promise<PurchaseResponse>
+```
+
+### lw.content
+
+```ts
+lw.content.getWithAccess(contentId: string, options?) → Promise<ContentWithAccessResponse>
+// Returns content payload + access info. Requires a valid buyer session.
+// content_type: 'markdown' | 'external_ref'
+// content_body: base64-encoded string (use atob() to decode markdown)
+// content_uri: URL for external_ref content (Vimeo, YouTube, PDF, etc.)
+```
+
+### lw.seller.content (requires API key login)
+
+Read-only operations scoped to the authenticated seller's store.
+Store identity is derived server-side from the token — no `store_id` needed.
+
+```ts
+// 1. Obtain a view token (key-only is sufficient)
+await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+
+// 2. List all store content
+lw.seller.content.list()                              → Promise<ContentResponse[]>
+
+// 3. Search by title, URI, or metadata (AND logic — at least one field required)
+lw.seller.content.search({ title?: string, uri?: string, metadata?: Record<string, unknown> })
+                                                      → Promise<ContentResponse[]>
+
+// 4. Fetch a single item
+lw.seller.content.get(contentId: string)              → Promise<ContentResponse>
+```
+
+## Full checkout flow example
+
+```ts
+const lw = Ledewire.init({ apiKey: 'your_api_key' })
+
+const { checkout_state } = await lw.checkout.state('article-123')
+
+switch (checkout_state.next_required_action) {
+  case 'authenticate':
+    await lw.auth.loginWithEmail({ email, password })
+    break
+
+  case 'fund_wallet':
+    const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })
+    window.location.href = session.payment_url  // Stripe checkout
+    break
+
+  case 'purchase':
+    await lw.purchases.create({ content_id: 'article-123' })
+    break
+
+  case 'view_content':
+    const { content_type, content_body, content_uri } =
+      await lw.content.getWithAccess('article-123')
+    if (content_type === 'markdown') {
+      renderMarkdown(atob(content_body))  // base64-decode then render
+    } else {
+      window.location.href = content_uri  // redirect to gated video/PDF
+    }
+    break
+}
+```
+
+## Google OAuth sign-in setup
+
+```ts
+// Fetch the platform's Google Client ID before the user signs in:
+const { google_client_id } = await lw.config.getPublic()
+google.accounts.id.initialize({
+  client_id: google_client_id,
+  callback: async ({ credential }) => {
+    await lw.auth.loginWithGoogle({ id_token: credential })
+  },
+})
+google.accounts.id.renderButton(document.getElementById('signin-btn'), { theme: 'outline' })
+```
+
+## Key types
+
+```ts
+interface CheckoutStateResponse {
+  content_id: string
+  content_title: string
+  price_cents: number
+  checkout_state: {
+    is_authenticated: boolean
+    has_sufficient_funds: boolean | null  // null when not authenticated
+    has_purchased: boolean
+    next_required_action: 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'
+  }
+}
+
+interface StoredTokens {
+  accessToken: string
+  refreshToken: string
+  expiresAt: number  // Unix timestamp (ms)
+}
+
+interface TokenStorage {
+  getTokens(): Promise<StoredTokens | null>
+  setTokens(tokens: StoredTokens): Promise<void>
+  clearTokens(): Promise<void>
+}
+```
+
+## Error classes
+
+All errors extend `LedewireError`. Import named subclasses for actionable handling:
+
+```ts
+import { LedewireError, AuthError, ForbiddenError, NotFoundError, PurchaseError } from '@ledewire/browser'
+
+class LedewireError extends Error {
+  statusCode: number        // HTTP status code
+  code: number | undefined  // machine-readable code from API body
+  message: string           // human-readable description from API body
+}
+
+class AuthError extends LedewireError {}       // 401 — bad credentials / session expired
+class ForbiddenError extends LedewireError {}  // 403 — authenticated but access denied
+class NotFoundError extends LedewireError {}   // 404 — resource not found
+class PurchaseError extends LedewireError {}   // 409/422 — purchase validation failure
+```
+
+```ts
+try {
+  await lw.purchases.create({ content_id: 'article-123' })
+} catch (err) {
+  if (err instanceof AuthError) {
+    showLoginModal()
+  } else if (err instanceof PurchaseError) {
+    showError('Purchase failed: ' + err.message)
+  }
+}
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledewire/browser",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "LedeWire SDK for browsers — embed a paywall with a single script tag",
   "type": "module",
   "exports": {
@@ -15,7 +15,8 @@
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "llms.txt"
   ],
   "keywords": [
     "ledewire",