@ledewire/browser 0.4.0 → 0.5.0

package/README.md

@@ -40,15 +40,15 @@ const lw = init({
 
 ## Client Namespaces
 
-| Namespace           | Description                                                     |
-| ------------------- | --------------------------------------------------------------- |
-| `lw.config`         | Platform public config (no auth required)                       |
-| `lw.auth`           | Buyer signup, email/password login, Google OAuth, API key login |
-| `lw.wallet`         | Wallet balance, fund wallet via payment session                 |
-| `lw.purchases`      | List and create content purchases                               |
-| `lw.content`        | Fetch content with buyer access info                            |
-| `lw.checkout`       | Checkout state — what action is required next                   |
-| `lw.seller.content` | List, search, and get store content (API key auth)              |
+| Namespace           | Description                                                                     |
+| ------------------- | ------------------------------------------------------------------------------- |
+| `lw.config`         | Platform public config (no auth required)                                       |
+| `lw.auth`           | Buyer signup, email/password login, Google OAuth, API key login, password reset |
+| `lw.wallet`         | Wallet balance, fund wallet via payment session                                 |
+| `lw.purchases`      | List and create content purchases                                               |
+| `lw.content`        | Fetch content with buyer access info                                            |
+| `lw.checkout`       | Checkout state — what action is required next                                   |
+| `lw.seller.content` | List, search, and get store content (API key auth)                              |
 
 ## Example: Fetch Google OAuth Client ID Before Sign-In
 

package/dist/index.d.ts

@@ -56,6 +56,38 @@ declare type AuthLoginEmailRequest = components['schemas']['AuthLoginEmailReques
 /** Request body for buyer Google OAuth login. */
 declare type AuthLoginOAuthRequest = components['schemas']['AuthLoginOAuthRequest'];
 
+/**
+ * Request body for completing a buyer password reset.
+ * Sent to `POST /v1/auth/password/reset`.
+ */
+export declare interface AuthPasswordResetBody {
+    /** The buyer's registered email address. */
+    email: string;
+    /** 6-digit numeric code delivered to the buyer's email. */
+    reset_code: string;
+    /** New password (minimum 6 characters). */
+    password: string;
+}
+
+/**
+ * Request body for initiating a buyer password reset.
+ * Sent to `POST /v1/auth/password/reset-request`.
+ */
+export declare interface AuthPasswordResetRequestBody {
+    /** The buyer's registered email address. */
+    email: string;
+}
+
+/**
+ * Response returned by both password reset endpoints.
+ * Contains a human-readable confirmation message.
+ */
+export declare interface AuthPasswordResetResponse {
+    data?: {
+        message?: string;
+    };
+}
+
 /** Request body for buyer email/password signup. */
 declare type AuthSignupRequest = components['schemas']['AuthSignupRequest'];
 
@@ -119,6 +151,40 @@ declare class BrowserAuthNamespace {
      * ```
      */
     loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse>;
+    /**
+     * Request a password reset code to be sent to the buyer's email address.
+     *
+     * The response is intentionally ambiguous — if the email does not exist,
+     * the API returns the same success message to prevent account enumeration.
+     *
+     * @param body - The buyer's email address.
+     * @returns A response with a confirmation message.
+     *
+     * @example
+     * ```ts
+     * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })
+     * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }
+     * ```
+     */
+    requestPasswordReset(body: AuthPasswordResetRequestBody): Promise<AuthPasswordResetResponse>;
+    /**
+     * Reset a buyer's password using the code delivered to their email.
+     *
+     * Obtain the reset code first by calling `requestPasswordReset()`.
+     *
+     * @param body - Email address, 6-digit reset code, and the new password.
+     * @returns A response with a confirmation message.
+     *
+     * @example
+     * ```ts
+     * await lw.auth.resetPassword({
+     *   email: 'buyer@example.com',
+     *   reset_code: '123456',
+     *   password: 'new-secure-password',
+     * })
+     * ```
+     */
+    resetPassword(body: AuthPasswordResetBody): Promise<AuthPasswordResetResponse>;
     private storeTokens;
 }
 

package/dist/index.js

@@ -250,6 +250,44 @@ class E {
     const t = await this.http.post("/v1/auth/login/api-key", e);
     return await this.storeTokens(t), t;
   }
+  /**
+   * Request a password reset code to be sent to the buyer's email address.
+   *
+   * The response is intentionally ambiguous — if the email does not exist,
+   * the API returns the same success message to prevent account enumeration.
+   *
+   * @param body - The buyer's email address.
+   * @returns A response with a confirmation message.
+   *
+   * @example
+   * ```ts
+   * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })
+   * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }
+   * ```
+   */
+  async requestPasswordReset(e) {
+    return this.http.post("/v1/auth/password/reset-request", e);
+  }
+  /**
+   * Reset a buyer's password using the code delivered to their email.
+   *
+   * Obtain the reset code first by calling `requestPasswordReset()`.
+   *
+   * @param body - Email address, 6-digit reset code, and the new password.
+   * @returns A response with a confirmation message.
+   *
+   * @example
+   * ```ts
+   * await lw.auth.resetPassword({
+   *   email: 'buyer@example.com',
+   *   reset_code: '123456',
+   *   password: 'new-secure-password',
+   * })
+   * ```
+   */
+  async resetPassword(e) {
+    return this.http.post("/v1/auth/password/reset", e);
+  }
   async storeTokens(e) {
     await this.tokenManager.setTokens({
       accessToken: e.access_token,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":";;;AAgBO,MAAMA,UAAsB,MAAM;AAAA,EAOvC,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,CAAO;AANC;AAAA,IAAAG,EAAA;AAGA;AAAA,IAAAA,EAAA;AAId,SAAK,OAAO,iBACZ,KAAK,aAAaF,GAClB,KAAK,OAAOC,GAEZ,OAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAMO,MAAME,UAAkBL,EAAc;AAAA,EAC3C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAiCO,MAAMG,UAAuBN,EAAc;AAAA,EAChD,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAKO,MAAMI,UAAsBP,EAAc;AAAA,EAC/C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAMO,MAAMK,UAAsBR,EAAc;AAAA,EAC/C,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,GAASC,GAAYC,CAAI,GAC/B,KAAK,OAAO;AAAA,EACd;AACF;AC5EA,MAAMM,IAAmB;AAalB,MAAMC,EAAW;AAAA,EAKtB,YAAYC,IAA2B,IAAI;AAJ1B,IAAAP,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AAGf,SAAK,WAAWO,EAAO,WAAWF,GAAkB,QAAQ,OAAO,EAAE,GACrE,KAAK,iBAAiBE,EAAO,mBAAmB,MAAM,OACtD,KAAK,iBAAiBA,EAAO,mBAAmB,MAAM;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOC,GAAcC,GAA6C;AACtE,WAAO,KAAK,QAAW,OAAO,KAAK,SAASD,GAAMC,CAAM,CAAC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAQD,GAAcE,GAA4B;AACtD,WAAO,KAAK,QAAW,QAAQ,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOF,GAAcE,GAA4B;AACrD,WAAO,KAAK,QAAW,OAAO,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAASF,GAAcE,GAA4B;AACvD,WAAO,KAAK,QAAW,SAAS,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAiBF,GAA0B;AAC/C,WAAO,KAAK,QAAW,UAAU,KAAK,SAASA,CAAI,CAAC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAMQ,SAASA,GAAcC,GAAyC;AACtE,UAAME,IAAM,GAAG,KAAK,OAAO,GAAGH,CAAI;AAClC,WAAI,CAACC,KAAU,OAAO,KAAKA,CAAM,EAAE,WAAW,IAAUE,IACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU;AAAA,EACzD;AAAA,EAEA,MAAc,QACZG,GACAD,GACAD,GACAG,IAAU,IACE;AACZ,UAAMC,IAAQ,MAAM,KAAK,eAAA,GACnBC,IAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IAAA;AAEV,IAAID,MAAOC,EAAQ,gBAAmB,UAAUD,CAAK;AAErD,UAAME,IAAW,MAAM,MAAML,GAAK;AAAA,MAChC,QAAAC;AAAA,MACA,SAAAG;AAAA,MACA,GAAIL,MAAS,UAAa,EAAE,MAAM,KAAK,UAAUA,CAAI,EAAA;AAAA,IAAE,CACxD;AAED,QAAIM,EAAS,WAAW,OAAO,CAACH,GAAS;AAEvC,UADiB,MAAM,KAAK,eAAA;AAE1B,eAAO,KAAK,QAAWD,GAAQD,GAAKD,GAAM,EAAI;AAEhD,YAAM,IAAIT,EAAU,0CAA0C;AAAA,IAChE;AAMA,QAJKe,EAAS,MACZ,MAAM,KAAK,cAAcA,CAAQ,GAG/BA,EAAS,WAAW;AAIxB,aAAOA,EAAS,KAAA;AAAA,EAClB;AAAA,EAEA,MAAc,cAAcA,GAAoC;AAC9D,QAAIN;AACJ,QAAI;AACF,MAAAA,IAAQ,MAAMM,EAAS,KAAA;AAAA,IACzB,QAAQ;AAAA,IAER;AAEA,UAAMnB,IAAUa,GAAM,MAAM,WAAWM,EAAS,YAC1CjB,IAAOW,GAAM,MAAM;AAEzB,YAAQM,EAAS,QAAA;AAAA,MACf,KAAK;AACH,cAAM,IAAIf,EAAUJ,GAASE,CAAI;AAAA,MACnC,KAAK;AACH,cAAM,IAAIG,EAAeL,GAASE,CAAI;AAAA,MACxC,KAAK;AACH,cAAM,IAAII,EAAcN,GAASE,CAAI;AAAA,MACvC;AACE,cAAM,IAAIH,EAAcC,GAASmB,EAAS,QAAQjB,CAAI;AAAA,IAAA;AAAA,EAE5D;AACF;AC/JA,MAAMkB,IAAuB;AAoDtB,MAAMC,EAAa;AAAA,EAOxB,YAAYC,GAA8B;AANzB,IAAAnB,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACT,IAAAA,EAAA,wBAAsD;AAG5D,SAAK,UAAUmB,EAAQ,SACvB,KAAK,YAAYA,EAAQ,WACzB,KAAK,mBAAmBA,EAAQ,kBAChC,KAAK,gBAAgBA,EAAQ;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAyC;AAC7C,UAAMC,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,WAAKA,IAEeA,EAAO,YAAY,KAAK,IAAA,IAC1BH,KACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,eAAe,OAG5BA,EAAO,cARM;AAAA,EAStB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAA6C;AACjD,UAAMA,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,QAAI,CAACA;AACH,mBAAM,KAAK,gBAAA,GACJ;AAET,UAAMC,IAAY,MAAM,KAAK,eAAeD,EAAO,YAAY;AAC/D,WAAKC,KAAW,MAAM,KAAK,gBAAA,GACpBA,GAAW,eAAe;AAAA,EACnC;AAAA;AAAA,EAGA,MAAM,UAAUC,GAAqC;AACnD,UAAM,KAAK,QAAQ,UAAUA,CAAM;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,cAA6B;AACjC,UAAM,KAAK,QAAQ,YAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAeC,GAAoD;AACzE,WAAI,KAAK,iBAAuB,KAAK,kBAErC,KAAK,iBAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,OAAOD,OACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,GACnC,MAAM,KAAK,mBAAmBA,CAAM,GAC7BA,EACR,EACA,MAAM,CAACE,MAAkB;AACxB,YAAK,KAAK,QAAQ,YAAA,GACZ,IAAIvB,EAAU,+CAA+C;AAAA,IACrE,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,iBAAiB;AAAA,IACxB,CAAC,GAEI,KAAK;AAAA,EACd;AACF;AAWO,MAAMwB,EAA2C;AAAA,EAAjD;AACG,IAAAzB,EAAA,gBAA8B;AAAA;AAAA,EAEtC,YAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAUsB,GAA4B;AACpC,SAAK,SAASA;AAAA,EAChB;AAAA,EAEA,cAAoB;AAClB,SAAK,SAAS;AAAA,EAChB;AACF;AAaO,SAASI,EAAeC,GAA2B;AACxD,SAAO,IAAI,KAAKA,CAAS,EAAE,QAAA;AAC7B;AClJO,MAAMC,EAAqB;AAAA;AAAA,EAEhC,YACmBC,GACAC,GACjB;AAFiB,SAAA,OAAAD,GACA,KAAA,eAAAC;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASH,MAAM,OAAOpB,GAA0D;AACrE,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,mBAAmBrB,CAAI;AAChF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAAerB,GAA8D;AACjF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,wBAAwBrB,CAAI;AACrF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAgBrB,GAA8D;AAClF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,yBAAyBrB,CAAI;AACtF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,gBAAgBrB,GAA+D;AACnF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,0BAA0BrB,CAAI;AACvF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA,EAEA,MAAc,YAAYA,GAA4C;AACpE,UAAM,KAAK,aAAa,UAAU;AAAA,MAChC,aAAaA,EAAI;AAAA,MACjB,cAAcA,EAAI;AAAA,MAClB,WAAWL,EAAeK,EAAI,UAAU;AAAA,IAAA,CACzC;AAAA,EACH;AACF;AC7FO,MAAMC,EAAuB;AAAA;AAAA,EAElC,YAA+BH,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBlD,MAAM,YAA2C;AAC/C,WAAO,KAAK,KAAK,IAA0B,mBAAmB;AAAA,EAChE;AACF;ACtBO,MAAMI,EAAwB;AAAA,EACnC,YAA+BJ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlD,MAAM,cAAcK,GAAYC,GAAqD;AACnF,UAAM1B,IAAiC,CAAA;AACvC,WAAI0B,MAAW,WACb1B,EAAO,UAAa0B,IAEf,KAAK,KAAK;AAAA,MACf,eAAeD,CAAE;AAAA,MACjB,OAAO,KAAKzB,CAAM,EAAE,SAAS,IAAIA,IAAS;AAAA,IAAA;AAAA,EAE9C;AACF;ACrBO,MAAM2B,EAA0B;AAAA,EACrC,YAA+BP,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlD,MAAM,OAAOnB,GAAwD;AACnE,WAAO,KAAK,KAAK,KAAuB,iBAAiBA,CAAI;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAoC;AACxC,WAAO,KAAK,KAAK,IAAwB,eAAe;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAIwB,GAAuC;AAC/C,WAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE;AAAA,EAC9D;AACF;ACLO,MAAMG,EAA8B;AAAA;AAAA,EAEzC,YAA6BR,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAahD,MAAM,OAAmC;AACvC,WAAO,KAAK,KAAK,IAAuB,oBAAoB;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,OAAOnB,GAA8D;AACzE,WAAO,KAAK,KAAK,KAAwB,6BAA6BA,CAAI;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,IAAIwB,GAAsC;AAC9C,WAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE;AAAA,EAClE;AACF;ACzEO,MAAMI,EAAuB;AAAA;AAAA,EAKlC,YAAYT,GAAkB;AAHrB;AAAA,IAAA7B,EAAA;AAIP,SAAK,UAAU,IAAIqC,EAA8BR,CAAI;AAAA,EACvD;AACF;ACRO,MAAMU,EAAuB;AAAA,EAClC,YAA+BV,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlD,MAAM,UAA0C;AAC9C,WAAO,KAAK,KAAK,IAA2B,oBAAoB;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAiD;AACrD,WAAO,KAAK,KAAK,IAA6B,yBAAyB;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,qBACJnB,GACuC;AACvC,WAAO,KAAK,KAAK,KAAmC,8BAA8BA,CAAI;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAiB8B,GAAyD;AAC9E,WAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE;AAAA,EAC5F;AACF;AC/CO,MAAMC,EAAkB;AAAA,EAC7B,YAA+BZ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAalD,MAAM,MAAMa,GAAmD;AAC7D,WAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE;AAAA,EAC/E;AACF;ACmCO,SAASC,EAAKpC,GAA4C;AAC/D,QAAMqC,IAAUrC,EAAO,WAAW,4BAC5BsC,IAAUtC,EAAO,WAAW,IAAIkB,EAAA,GAEhCK,IAAe,IAAIZ,EAAa;AAAA,IACpC,SAAA2B;AAAA,IACA,WAAW,OAAOtB,MAAiB;AACjC,YAAMQ,IAAM,MAAM,MAAM,GAAGa,CAAO,0BAA0B;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,EAAE,eAAerB,GAAc;AAAA,MAAA,CACrD;AACD,UAAI,CAACQ,EAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,YAAMe,IAAQ,MAAMf,EAAI,KAAA;AAKxB,aAAO;AAAA,QACL,aAAae,EAAK;AAAA,QAClB,cAAcA,EAAK;AAAA,QACnB,WAAWpB,EAAeoB,EAAK,UAAU;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,GAAIvC,EAAO,kBAAkB,UAAa,EAAE,eAAeA,EAAO,cAAA;AAAA,EAAc,CACjF,GAEKsB,IAAO,IAAIvB,EAAW;AAAA,IAC1B,SAAAsC;AAAA,IACA,gBAAgB,MAAMd,EAAa,eAAA;AAAA,IACnC,gBAAgB,MAAMA,EAAa,mBAAA;AAAA,EAAmB,CACvD;AAED,SAAO,IAAIiB,EAAclB,GAAMC,GAAcvB,CAAM;AACrD;AASO,MAAMwC,EAAc;AAAA;AAAA,EAuBzB,YACkBC,GACAC,GACAC,GAChB;AAzBO;AAAA,IAAAlD,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAIS,SAAA,QAAAgD,GACA,KAAA,gBAAAC,GACA,KAAA,UAAAC,GAEhB,KAAK,SAAS,IAAIlB,EAAuBgB,CAAK,GAC9C,KAAK,OAAO,IAAIpB,EAAqBoB,GAAOC,CAAa,GACzD,KAAK,WAAW,IAAIR,EAAkBO,CAAK,GAC3C,KAAK,SAAS,IAAIT,EAAuBS,CAAK,GAC9C,KAAK,YAAY,IAAIZ,EAA0BY,CAAK,GACpD,KAAK,UAAU,IAAIf,EAAwBe,CAAK,GAChD,KAAK,SAAS,IAAIV,EAAuBU,CAAK;AAAA,EAChD;AACF;AChJA,MAAMG,IAAsB;AA0BrB,SAASC,EAAoBC,IAAMF,GAAmC;AAC3E,SAAO;AAAA,IACL,YAAiC;AAC/B,YAAMG,IAAM,aAAa,QAAQD,CAAG;AACpC,UAAI,CAACC,EAAK,QAAO;AACjB,UAAI;AACF,eAAO,KAAK,MAAMA,CAAG;AAAA,MACvB,QAAQ;AAEN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,UAAUhC,GAA4B;AACpC,mBAAa,QAAQ+B,GAAK,KAAK,UAAU/B,CAAM,CAAC;AAAA,IAClD;AAAA,IACA,cAAoB;AAClB,mBAAa,WAAW+B,CAAG;AAAA,IAC7B;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"index.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthPasswordResetBody,\n  AuthPasswordResetRequestBody,\n  AuthPasswordResetResponse,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Request a password reset code to be sent to the buyer's email address.\n   *\n   * The response is intentionally ambiguous — if the email does not exist,\n   * the API returns the same success message to prevent account enumeration.\n   *\n   * @param body - The buyer's email address.\n   * @returns A response with a confirmation message.\n   *\n   * @example\n   * ```ts\n   * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })\n   * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }\n   * ```\n   */\n  async requestPasswordReset(\n    body: AuthPasswordResetRequestBody,\n  ): Promise<AuthPasswordResetResponse> {\n    return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset-request', body)\n  }\n\n  /**\n   * Reset a buyer's password using the code delivered to their email.\n   *\n   * Obtain the reset code first by calling `requestPasswordReset()`.\n   *\n   * @param body - Email address, 6-digit reset code, and the new password.\n   * @returns A response with a confirmation message.\n   *\n   * @example\n   * ```ts\n   * await lw.auth.resetPassword({\n   *   email: 'buyer@example.com',\n   *   reset_code: '123456',\n   *   password: 'new-secure-password',\n   * })\n   * ```\n   */\n  async resetPassword(body: AuthPasswordResetBody): Promise<AuthPasswordResetResponse> {\n    return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset', body)\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":";;;AAgBO,MAAMA,UAAsB,MAAM;AAAA,EAOvC,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,CAAO;AANC;AAAA,IAAAG,EAAA;AAGA;AAAA,IAAAA,EAAA;AAId,SAAK,OAAO,iBACZ,KAAK,aAAaF,GAClB,KAAK,OAAOC,GAEZ,OAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAMO,MAAME,UAAkBL,EAAc;AAAA,EAC3C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAiCO,MAAMG,UAAuBN,EAAc;AAAA,EAChD,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAKO,MAAMI,UAAsBP,EAAc;AAAA,EAC/C,YAAYC,GAAiBE,GAAe;AAC1C,UAAMF,GAAS,KAAKE,CAAI,GACxB,KAAK,OAAO;AAAA,EACd;AACF;AAMO,MAAMK,UAAsBR,EAAc;AAAA,EAC/C,YAAYC,GAAiBC,GAAoBC,GAAe;AAC9D,UAAMF,GAASC,GAAYC,CAAI,GAC/B,KAAK,OAAO;AAAA,EACd;AACF;AC5EA,MAAMM,IAAmB;AAalB,MAAMC,EAAW;AAAA,EAKtB,YAAYC,IAA2B,IAAI;AAJ1B,IAAAP,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AAGf,SAAK,WAAWO,EAAO,WAAWF,GAAkB,QAAQ,OAAO,EAAE,GACrE,KAAK,iBAAiBE,EAAO,mBAAmB,MAAM,OACtD,KAAK,iBAAiBA,EAAO,mBAAmB,MAAM;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOC,GAAcC,GAA6C;AACtE,WAAO,KAAK,QAAW,OAAO,KAAK,SAASD,GAAMC,CAAM,CAAC;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAQD,GAAcE,GAA4B;AACtD,WAAO,KAAK,QAAW,QAAQ,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAOF,GAAcE,GAA4B;AACrD,WAAO,KAAK,QAAW,OAAO,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAASF,GAAcE,GAA4B;AACvD,WAAO,KAAK,QAAW,SAAS,KAAK,SAASF,CAAI,GAAGE,CAAI;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAiBF,GAA0B;AAC/C,WAAO,KAAK,QAAW,UAAU,KAAK,SAASA,CAAI,CAAC;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAMQ,SAASA,GAAcC,GAAyC;AACtE,UAAME,IAAM,GAAG,KAAK,OAAO,GAAGH,CAAI;AAClC,WAAI,CAACC,KAAU,OAAO,KAAKA,CAAM,EAAE,WAAW,IAAUE,IACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU;AAAA,EACzD;AAAA,EAEA,MAAc,QACZG,GACAD,GACAD,GACAG,IAAU,IACE;AACZ,UAAMC,IAAQ,MAAM,KAAK,eAAA,GACnBC,IAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IAAA;AAEV,IAAID,MAAOC,EAAQ,gBAAmB,UAAUD,CAAK;AAErD,UAAME,IAAW,MAAM,MAAML,GAAK;AAAA,MAChC,QAAAC;AAAA,MACA,SAAAG;AAAA,MACA,GAAIL,MAAS,UAAa,EAAE,MAAM,KAAK,UAAUA,CAAI,EAAA;AAAA,IAAE,CACxD;AAED,QAAIM,EAAS,WAAW,OAAO,CAACH,GAAS;AAEvC,UADiB,MAAM,KAAK,eAAA;AAE1B,eAAO,KAAK,QAAWD,GAAQD,GAAKD,GAAM,EAAI;AAEhD,YAAM,IAAIT,EAAU,0CAA0C;AAAA,IAChE;AAMA,QAJKe,EAAS,MACZ,MAAM,KAAK,cAAcA,CAAQ,GAG/BA,EAAS,WAAW;AAIxB,aAAOA,EAAS,KAAA;AAAA,EAClB;AAAA,EAEA,MAAc,cAAcA,GAAoC;AAC9D,QAAIN;AACJ,QAAI;AACF,MAAAA,IAAQ,MAAMM,EAAS,KAAA;AAAA,IACzB,QAAQ;AAAA,IAER;AAEA,UAAMnB,IAAUa,GAAM,MAAM,WAAWM,EAAS,YAC1CjB,IAAOW,GAAM,MAAM;AAEzB,YAAQM,EAAS,QAAA;AAAA,MACf,KAAK;AACH,cAAM,IAAIf,EAAUJ,GAASE,CAAI;AAAA,MACnC,KAAK;AACH,cAAM,IAAIG,EAAeL,GAASE,CAAI;AAAA,MACxC,KAAK;AACH,cAAM,IAAII,EAAcN,GAASE,CAAI;AAAA,MACvC;AACE,cAAM,IAAIH,EAAcC,GAASmB,EAAS,QAAQjB,CAAI;AAAA,IAAA;AAAA,EAE5D;AACF;AC/JA,MAAMkB,IAAuB;AAoDtB,MAAMC,EAAa;AAAA,EAOxB,YAAYC,GAA8B;AANzB,IAAAnB,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACA,IAAAA,EAAA;AACT,IAAAA,EAAA,wBAAsD;AAG5D,SAAK,UAAUmB,EAAQ,SACvB,KAAK,YAAYA,EAAQ,WACzB,KAAK,mBAAmBA,EAAQ,kBAChC,KAAK,gBAAgBA,EAAQ;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAyC;AAC7C,UAAMC,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,WAAKA,IAEeA,EAAO,YAAY,KAAK,IAAA,IAC1BH,KACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,eAAe,OAG5BA,EAAO,cARM;AAAA,EAStB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAA6C;AACjD,UAAMA,IAAS,MAAM,KAAK,QAAQ,UAAA;AAClC,QAAI,CAACA;AACH,mBAAM,KAAK,gBAAA,GACJ;AAET,UAAMC,IAAY,MAAM,KAAK,eAAeD,EAAO,YAAY;AAC/D,WAAKC,KAAW,MAAM,KAAK,gBAAA,GACpBA,GAAW,eAAe;AAAA,EACnC;AAAA;AAAA,EAGA,MAAM,UAAUC,GAAqC;AACnD,UAAM,KAAK,QAAQ,UAAUA,CAAM;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,cAA6B;AACjC,UAAM,KAAK,QAAQ,YAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAeC,GAAoD;AACzE,WAAI,KAAK,iBAAuB,KAAK,kBAErC,KAAK,iBAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,OAAOD,OACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,GACnC,MAAM,KAAK,mBAAmBA,CAAM,GAC7BA,EACR,EACA,MAAM,CAACE,MAAkB;AACxB,YAAK,KAAK,QAAQ,YAAA,GACZ,IAAIvB,EAAU,+CAA+C;AAAA,IACrE,CAAC,EACA,QAAQ,MAAM;AACb,WAAK,iBAAiB;AAAA,IACxB,CAAC,GAEI,KAAK;AAAA,EACd;AACF;AAWO,MAAMwB,EAA2C;AAAA,EAAjD;AACG,IAAAzB,EAAA,gBAA8B;AAAA;AAAA,EAEtC,YAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAUsB,GAA4B;AACpC,SAAK,SAASA;AAAA,EAChB;AAAA,EAEA,cAAoB;AAClB,SAAK,SAAS;AAAA,EAChB;AACF;AAaO,SAASI,EAAeC,GAA2B;AACxD,SAAO,IAAI,KAAKA,CAAS,EAAE,QAAA;AAC7B;AC/IO,MAAMC,EAAqB;AAAA;AAAA,EAEhC,YACmBC,GACAC,GACjB;AAFiB,SAAA,OAAAD,GACA,KAAA,eAAAC;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASH,MAAM,OAAOpB,GAA0D;AACrE,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,mBAAmBrB,CAAI;AAChF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAAerB,GAA8D;AACjF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,wBAAwBrB,CAAI;AACrF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBAAgBrB,GAA8D;AAClF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,yBAAyBrB,CAAI;AACtF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,gBAAgBrB,GAA+D;AACnF,UAAMqB,IAAM,MAAM,KAAK,KAAK,KAA6B,0BAA0BrB,CAAI;AACvF,iBAAM,KAAK,YAAYqB,CAAG,GACnBA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,qBACJrB,GACoC;AACpC,WAAO,KAAK,KAAK,KAAgC,mCAAmCA,CAAI;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAM,cAAcA,GAAiE;AACnF,WAAO,KAAK,KAAK,KAAgC,2BAA2BA,CAAI;AAAA,EAClF;AAAA,EAEA,MAAc,YAAYqB,GAA4C;AACpE,UAAM,KAAK,aAAa,UAAU;AAAA,MAChC,aAAaA,EAAI;AAAA,MACjB,cAAcA,EAAI;AAAA,MAClB,WAAWL,EAAeK,EAAI,UAAU;AAAA,IAAA,CACzC;AAAA,EACH;AACF;AC1IO,MAAMC,EAAuB;AAAA;AAAA,EAElC,YAA+BH,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBlD,MAAM,YAA2C;AAC/C,WAAO,KAAK,KAAK,IAA0B,mBAAmB;AAAA,EAChE;AACF;ACtBO,MAAMI,EAAwB;AAAA,EACnC,YAA+BJ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlD,MAAM,cAAcK,GAAYC,GAAqD;AACnF,UAAM1B,IAAiC,CAAA;AACvC,WAAI0B,MAAW,WACb1B,EAAO,UAAa0B,IAEf,KAAK,KAAK;AAAA,MACf,eAAeD,CAAE;AAAA,MACjB,OAAO,KAAKzB,CAAM,EAAE,SAAS,IAAIA,IAAS;AAAA,IAAA;AAAA,EAE9C;AACF;ACrBO,MAAM2B,EAA0B;AAAA,EACrC,YAA+BP,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQlD,MAAM,OAAOnB,GAAwD;AACnE,WAAO,KAAK,KAAK,KAAuB,iBAAiBA,CAAI;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAoC;AACxC,WAAO,KAAK,KAAK,IAAwB,eAAe;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,IAAIwB,GAAuC;AAC/C,WAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE;AAAA,EAC9D;AACF;ACLO,MAAMG,EAA8B;AAAA;AAAA,EAEzC,YAA6BR,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAahD,MAAM,OAAmC;AACvC,WAAO,KAAK,KAAK,IAAuB,oBAAoB;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,OAAOnB,GAA8D;AACzE,WAAO,KAAK,KAAK,KAAwB,6BAA6BA,CAAI;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,IAAIwB,GAAsC;AAC9C,WAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE;AAAA,EAClE;AACF;ACzEO,MAAMI,EAAuB;AAAA;AAAA,EAKlC,YAAYT,GAAkB;AAHrB;AAAA,IAAA7B,EAAA;AAIP,SAAK,UAAU,IAAIqC,EAA8BR,CAAI;AAAA,EACvD;AACF;ACRO,MAAMU,EAAuB;AAAA,EAClC,YAA+BV,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOlD,MAAM,UAA0C;AAC9C,WAAO,KAAK,KAAK,IAA2B,oBAAoB;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eAAiD;AACrD,WAAO,KAAK,KAAK,IAA6B,yBAAyB;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,qBACJnB,GACuC;AACvC,WAAO,KAAK,KAAK,KAAmC,8BAA8BA,CAAI;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAiB8B,GAAyD;AAC9E,WAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE;AAAA,EAC5F;AACF;AC/CO,MAAMC,EAAkB;AAAA,EAC7B,YAA+BZ,GAAkB;AAAlB,SAAA,OAAAA;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAalD,MAAM,MAAMa,GAAmD;AAC7D,WAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE;AAAA,EAC/E;AACF;ACmCO,SAASC,EAAKpC,GAA4C;AAC/D,QAAMqC,IAAUrC,EAAO,WAAW,4BAC5BsC,IAAUtC,EAAO,WAAW,IAAIkB,EAAA,GAEhCK,IAAe,IAAIZ,EAAa;AAAA,IACpC,SAAA2B;AAAA,IACA,WAAW,OAAOtB,MAAiB;AACjC,YAAMQ,IAAM,MAAM,MAAM,GAAGa,CAAO,0BAA0B;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,QAC3B,MAAM,KAAK,UAAU,EAAE,eAAerB,GAAc;AAAA,MAAA,CACrD;AACD,UAAI,CAACQ,EAAI,GAAI,OAAM,IAAI,MAAM,sBAAsB;AACnD,YAAMe,IAAQ,MAAMf,EAAI,KAAA;AAKxB,aAAO;AAAA,QACL,aAAae,EAAK;AAAA,QAClB,cAAcA,EAAK;AAAA,QACnB,WAAWpB,EAAeoB,EAAK,UAAU;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,GAAIvC,EAAO,kBAAkB,UAAa,EAAE,eAAeA,EAAO,cAAA;AAAA,EAAc,CACjF,GAEKsB,IAAO,IAAIvB,EAAW;AAAA,IAC1B,SAAAsC;AAAA,IACA,gBAAgB,MAAMd,EAAa,eAAA;AAAA,IACnC,gBAAgB,MAAMA,EAAa,mBAAA;AAAA,EAAmB,CACvD;AAED,SAAO,IAAIiB,EAAclB,GAAMC,GAAcvB,CAAM;AACrD;AASO,MAAMwC,EAAc;AAAA;AAAA,EAuBzB,YACkBC,GACAC,GACAC,GAChB;AAzBO;AAAA,IAAAlD,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAGA;AAAA,IAAAA,EAAA;AAIS,SAAA,QAAAgD,GACA,KAAA,gBAAAC,GACA,KAAA,UAAAC,GAEhB,KAAK,SAAS,IAAIlB,EAAuBgB,CAAK,GAC9C,KAAK,OAAO,IAAIpB,EAAqBoB,GAAOC,CAAa,GACzD,KAAK,WAAW,IAAIR,EAAkBO,CAAK,GAC3C,KAAK,SAAS,IAAIT,EAAuBS,CAAK,GAC9C,KAAK,YAAY,IAAIZ,EAA0BY,CAAK,GACpD,KAAK,UAAU,IAAIf,EAAwBe,CAAK,GAChD,KAAK,SAAS,IAAIV,EAAuBU,CAAK;AAAA,EAChD;AACF;AChJA,MAAMG,IAAsB;AA0BrB,SAASC,EAAoBC,IAAMF,GAAmC;AAC3E,SAAO;AAAA,IACL,YAAiC;AAC/B,YAAMG,IAAM,aAAa,QAAQD,CAAG;AACpC,UAAI,CAACC,EAAK,QAAO;AACjB,UAAI;AACF,eAAO,KAAK,MAAMA,CAAG;AAAA,MACvB,QAAQ;AAEN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,UAAUhC,GAA4B;AACpC,mBAAa,QAAQ+B,GAAK,KAAK,UAAU/B,CAAM,CAAC;AAAA,IAClD;AAAA,IACA,cAAoB;AAClB,mBAAa,WAAW+B,CAAG;AAAA,IAC7B;AAAA,EAAA;AAEJ;"}

package/dist/ledewire.min.js

@@ -1,2 +1,2 @@
-var Ledewire=(function(o){"use strict";var $=Object.defineProperty;var C=(o,a,c)=>a in o?$(o,a,{enumerable:!0,configurable:!0,writable:!0,value:c}):o[a]=c;var n=(o,a,c)=>C(o,typeof a!="symbol"?a+"":a,c);class a extends Error{constructor(t,r,i){super(t);n(this,"statusCode");n(this,"code");this.name="LedewireError",this.statusCode=r,this.code=i,Object.setPrototypeOf(this,new.target.prototype)}}class c extends a{constructor(e,t){super(e,401,t),this.name="AuthError"}}class w extends a{constructor(e,t){super(e,403,t),this.name="ForbiddenError"}}class d extends a{constructor(e,t){super(e,404,t),this.name="NotFoundError"}}class k extends a{constructor(e,t,r){super(e,t,r),this.name="PurchaseError"}}const f="https://api.ledewire.com";class T{constructor(e={}){n(this,"baseUrl");n(this,"getAccessToken");n(this,"onUnauthorized");this.baseUrl=(e.baseUrl??f).replace(/\/$/,""),this.getAccessToken=e.getAccessToken??(()=>null),this.onUnauthorized=e.onUnauthorized??(()=>null)}async get(e,t){return this.request("GET",this.buildUrl(e,t))}async post(e,t){return this.request("POST",this.buildUrl(e),t)}async put(e,t){return this.request("PUT",this.buildUrl(e),t)}async patch(e,t){return this.request("PATCH",this.buildUrl(e),t)}async delete(e){return this.request("DELETE",this.buildUrl(e))}buildUrl(e,t){const r=`${this.baseUrl}${e}`;return!t||Object.keys(t).length===0?r:`${r}?${new URLSearchParams(t).toString()}`}async request(e,t,r,i=!1){const l=await this.getAccessToken(),u={"Content-Type":"application/json",Accept:"application/json"};l&&(u.Authorization=`Bearer ${l}`);const h=await fetch(t,{method:e,headers:u,...r!==void 0&&{body:JSON.stringify(r)}});if(h.status===401&&!i){if(await this.onUnauthorized())return this.request(e,t,r,!0);throw new c("Session expired. Please re-authenticate.")}if(h.ok||await this.throwApiError(h),h.status!==204)return h.json()}async throwApiError(e){let t;try{t=await e.json()}catch{}const r=t?.error.message??e.statusText,i=t?.error.code;switch(e.status){case 401:throw new c(r,i);case 403:throw new w(r,i);case 404:throw new d(r,i);default:throw new a(r,e.status,i)}}}const y=6e4;class E{constructor(e){n(this,"storage");n(this,"refreshFn");n(this,"onTokenRefreshed");n(this,"onAuthExpired");n(this,"refreshPromise",null);this.storage=e.storage,this.refreshFn=e.refreshFn,this.onTokenRefreshed=e.onTokenRefreshed,this.onAuthExpired=e.onAuthExpired}async getAccessToken(){const e=await this.storage.getTokens();return e?e.expiresAt-Date.now()<y?(await this.performRefresh(e.refreshToken))?.accessToken??null:e.accessToken:null}async handleUnauthorized(){const e=await this.storage.getTokens();if(!e)return await this.onAuthExpired?.(),null;const t=await this.performRefresh(e.refreshToken);return t||await this.onAuthExpired?.(),t?.accessToken??null}async setTokens(e){await this.storage.setTokens(e)}async clearTokens(){await this.storage.clearTokens()}performRefresh(e){return this.refreshPromise?this.refreshPromise:(this.refreshPromise=this.refreshFn(e).then(async t=>(await this.storage.setTokens(t),await this.onTokenRefreshed?.(t),t)).catch(t=>{throw this.storage.clearTokens(),new c("Token refresh failed. Please re-authenticate.")}).finally(()=>{this.refreshPromise=null}),this.refreshPromise)}}class g{constructor(){n(this,"tokens",null)}getTokens(){return this.tokens}setTokens(e){this.tokens=e}clearTokens(){this.tokens=null}}function p(s){return new Date(s).getTime()}class m{constructor(e,t){this.http=e,this.tokenManager=t}async signup(e){const t=await this.http.post("/v1/auth/signup",e);return await this.storeTokens(t),t}async loginWithEmail(e){const t=await this.http.post("/v1/auth/login/email",e);return await this.storeTokens(t),t}async loginWithGoogle(e){const t=await this.http.post("/v1/auth/login/google",e);return await this.storeTokens(t),t}async loginWithApiKey(e){const t=await this.http.post("/v1/auth/login/api-key",e);return await this.storeTokens(t),t}async storeTokens(e){await this.tokenManager.setTokens({accessToken:e.access_token,refreshToken:e.refresh_token,expiresAt:p(e.expires_at)})}}class A{constructor(e){this.http=e}async getPublic(){return this.http.get("/v1/config/public")}}class v{constructor(e){this.http=e}async getWithAccess(e,t){const r={};return t!==void 0&&(r.user_id=t),this.http.get(`/v1/content/${e}/with-access`,Object.keys(r).length>0?r:void 0)}}class S{constructor(e){this.http=e}async create(e){return this.http.post("/v1/purchases",e)}async list(){return this.http.get("/v1/purchases")}async get(e){return this.http.get(`/v1/purchases/${e}`)}}class b{constructor(e){this.http=e}async list(){return this.http.get("/v1/seller/content")}async search(e){return this.http.post("/v1/seller/content/search",e)}async get(e){return this.http.get(`/v1/seller/content/${e}`)}}class U{constructor(e){n(this,"content");this.content=new b(e)}}class P{constructor(e){this.http=e}async balance(){return this.http.get("/v1/wallet/balance")}async transactions(){return this.http.get("/v1/wallet/transactions")}async createPaymentSession(e){return this.http.post("/v1/wallet/payment-session",e)}async getPaymentStatus(e){return this.http.get(`/v1/wallet/payment-status/${e}`)}}class N{constructor(e){this.http=e}async state(e){return this.http.get(`/v1/checkout/state/${e}`)}}function x(s){const e=s.baseUrl??"https://api.ledewire.com",t=s.storage??new g,r=new E({storage:t,refreshFn:async l=>{const u=await fetch(`${e}/v1/auth/token/refresh`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:l})});if(!u.ok)throw new Error("Token refresh failed");const h=await u.json();return{accessToken:h.access_token,refreshToken:h.refresh_token,expiresAt:p(h.expires_at)}},...s.onAuthExpired!==void 0&&{onAuthExpired:s.onAuthExpired}}),i=new T({baseUrl:e,getAccessToken:()=>r.getAccessToken(),onUnauthorized:()=>r.handleUnauthorized()});return new F(i,r,s)}class F{constructor(e,t,r){n(this,"config");n(this,"auth");n(this,"checkout");n(this,"wallet");n(this,"purchases");n(this,"content");n(this,"seller");this._http=e,this._tokenManager=t,this._config=r,this.config=new A(e),this.auth=new m(e,t),this.checkout=new N(e),this.wallet=new P(e),this.purchases=new S(e),this.content=new v(e),this.seller=new U(e)}}const O="lw:tokens";function R(s=O){return{getTokens(){const e=localStorage.getItem(s);if(!e)return null;try{return JSON.parse(e)}catch{return null}},setTokens(e){localStorage.setItem(s,JSON.stringify(e))},clearTokens(){localStorage.removeItem(s)}}}return o.AuthError=c,o.ForbiddenError=w,o.LedewireError=a,o.MemoryTokenStorage=g,o.NotFoundError=d,o.PurchaseError=k,o.init=x,o.localStorageAdapter=R,o.parseExpiresAt=p,Object.defineProperty(o,Symbol.toStringTag,{value:"Module"}),o})({});
+var Ledewire=(function(o){"use strict";var $=Object.defineProperty;var C=(o,a,c)=>a in o?$(o,a,{enumerable:!0,configurable:!0,writable:!0,value:c}):o[a]=c;var n=(o,a,c)=>C(o,typeof a!="symbol"?a+"":a,c);class a extends Error{constructor(t,r,i){super(t);n(this,"statusCode");n(this,"code");this.name="LedewireError",this.statusCode=r,this.code=i,Object.setPrototypeOf(this,new.target.prototype)}}class c extends a{constructor(e,t){super(e,401,t),this.name="AuthError"}}class w extends a{constructor(e,t){super(e,403,t),this.name="ForbiddenError"}}class d extends a{constructor(e,t){super(e,404,t),this.name="NotFoundError"}}class k extends a{constructor(e,t,r){super(e,t,r),this.name="PurchaseError"}}const f="https://api.ledewire.com";class T{constructor(e={}){n(this,"baseUrl");n(this,"getAccessToken");n(this,"onUnauthorized");this.baseUrl=(e.baseUrl??f).replace(/\/$/,""),this.getAccessToken=e.getAccessToken??(()=>null),this.onUnauthorized=e.onUnauthorized??(()=>null)}async get(e,t){return this.request("GET",this.buildUrl(e,t))}async post(e,t){return this.request("POST",this.buildUrl(e),t)}async put(e,t){return this.request("PUT",this.buildUrl(e),t)}async patch(e,t){return this.request("PATCH",this.buildUrl(e),t)}async delete(e){return this.request("DELETE",this.buildUrl(e))}buildUrl(e,t){const r=`${this.baseUrl}${e}`;return!t||Object.keys(t).length===0?r:`${r}?${new URLSearchParams(t).toString()}`}async request(e,t,r,i=!1){const l=await this.getAccessToken(),u={"Content-Type":"application/json",Accept:"application/json"};l&&(u.Authorization=`Bearer ${l}`);const h=await fetch(t,{method:e,headers:u,...r!==void 0&&{body:JSON.stringify(r)}});if(h.status===401&&!i){if(await this.onUnauthorized())return this.request(e,t,r,!0);throw new c("Session expired. Please re-authenticate.")}if(h.ok||await this.throwApiError(h),h.status!==204)return h.json()}async throwApiError(e){let t;try{t=await e.json()}catch{}const r=t?.error.message??e.statusText,i=t?.error.code;switch(e.status){case 401:throw new c(r,i);case 403:throw new w(r,i);case 404:throw new d(r,i);default:throw new a(r,e.status,i)}}}const y=6e4;class E{constructor(e){n(this,"storage");n(this,"refreshFn");n(this,"onTokenRefreshed");n(this,"onAuthExpired");n(this,"refreshPromise",null);this.storage=e.storage,this.refreshFn=e.refreshFn,this.onTokenRefreshed=e.onTokenRefreshed,this.onAuthExpired=e.onAuthExpired}async getAccessToken(){const e=await this.storage.getTokens();return e?e.expiresAt-Date.now()<y?(await this.performRefresh(e.refreshToken))?.accessToken??null:e.accessToken:null}async handleUnauthorized(){const e=await this.storage.getTokens();if(!e)return await this.onAuthExpired?.(),null;const t=await this.performRefresh(e.refreshToken);return t||await this.onAuthExpired?.(),t?.accessToken??null}async setTokens(e){await this.storage.setTokens(e)}async clearTokens(){await this.storage.clearTokens()}performRefresh(e){return this.refreshPromise?this.refreshPromise:(this.refreshPromise=this.refreshFn(e).then(async t=>(await this.storage.setTokens(t),await this.onTokenRefreshed?.(t),t)).catch(t=>{throw this.storage.clearTokens(),new c("Token refresh failed. Please re-authenticate.")}).finally(()=>{this.refreshPromise=null}),this.refreshPromise)}}class g{constructor(){n(this,"tokens",null)}getTokens(){return this.tokens}setTokens(e){this.tokens=e}clearTokens(){this.tokens=null}}function p(s){return new Date(s).getTime()}class m{constructor(e,t){this.http=e,this.tokenManager=t}async signup(e){const t=await this.http.post("/v1/auth/signup",e);return await this.storeTokens(t),t}async loginWithEmail(e){const t=await this.http.post("/v1/auth/login/email",e);return await this.storeTokens(t),t}async loginWithGoogle(e){const t=await this.http.post("/v1/auth/login/google",e);return await this.storeTokens(t),t}async loginWithApiKey(e){const t=await this.http.post("/v1/auth/login/api-key",e);return await this.storeTokens(t),t}async requestPasswordReset(e){return this.http.post("/v1/auth/password/reset-request",e)}async resetPassword(e){return this.http.post("/v1/auth/password/reset",e)}async storeTokens(e){await this.tokenManager.setTokens({accessToken:e.access_token,refreshToken:e.refresh_token,expiresAt:p(e.expires_at)})}}class A{constructor(e){this.http=e}async getPublic(){return this.http.get("/v1/config/public")}}class v{constructor(e){this.http=e}async getWithAccess(e,t){const r={};return t!==void 0&&(r.user_id=t),this.http.get(`/v1/content/${e}/with-access`,Object.keys(r).length>0?r:void 0)}}class S{constructor(e){this.http=e}async create(e){return this.http.post("/v1/purchases",e)}async list(){return this.http.get("/v1/purchases")}async get(e){return this.http.get(`/v1/purchases/${e}`)}}class b{constructor(e){this.http=e}async list(){return this.http.get("/v1/seller/content")}async search(e){return this.http.post("/v1/seller/content/search",e)}async get(e){return this.http.get(`/v1/seller/content/${e}`)}}class P{constructor(e){n(this,"content");this.content=new b(e)}}class U{constructor(e){this.http=e}async balance(){return this.http.get("/v1/wallet/balance")}async transactions(){return this.http.get("/v1/wallet/transactions")}async createPaymentSession(e){return this.http.post("/v1/wallet/payment-session",e)}async getPaymentStatus(e){return this.http.get(`/v1/wallet/payment-status/${e}`)}}class N{constructor(e){this.http=e}async state(e){return this.http.get(`/v1/checkout/state/${e}`)}}function x(s){const e=s.baseUrl??"https://api.ledewire.com",t=s.storage??new g,r=new E({storage:t,refreshFn:async l=>{const u=await fetch(`${e}/v1/auth/token/refresh`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({refresh_token:l})});if(!u.ok)throw new Error("Token refresh failed");const h=await u.json();return{accessToken:h.access_token,refreshToken:h.refresh_token,expiresAt:p(h.expires_at)}},...s.onAuthExpired!==void 0&&{onAuthExpired:s.onAuthExpired}}),i=new T({baseUrl:e,getAccessToken:()=>r.getAccessToken(),onUnauthorized:()=>r.handleUnauthorized()});return new F(i,r,s)}class F{constructor(e,t,r){n(this,"config");n(this,"auth");n(this,"checkout");n(this,"wallet");n(this,"purchases");n(this,"content");n(this,"seller");this._http=e,this._tokenManager=t,this._config=r,this.config=new A(e),this.auth=new m(e,t),this.checkout=new N(e),this.wallet=new U(e),this.purchases=new S(e),this.content=new v(e),this.seller=new P(e)}}const R="lw:tokens";function O(s=R){return{getTokens(){const e=localStorage.getItem(s);if(!e)return null;try{return JSON.parse(e)}catch{return null}},setTokens(e){localStorage.setItem(s,JSON.stringify(e))},clearTokens(){localStorage.removeItem(s)}}}return o.AuthError=c,o.ForbiddenError=w,o.LedewireError=a,o.MemoryTokenStorage=g,o.NotFoundError=d,o.PurchaseError=k,o.init=x,o.localStorageAdapter=O,o.parseExpiresAt=p,Object.defineProperty(o,Symbol.toStringTag,{value:"Module"}),o})({});
 //# sourceMappingURL=ledewire.min.js.map

package/dist/ledewire.min.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAiCO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CC5EA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IAoDtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CClJO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAsBA,MAAM,gBAAgBrB,EAA+D,CACnF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0BrB,CAAI,EACvF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAEA,MAAc,YAAYA,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CC7FO,MAAMC,CAAuB,CAElC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCtBO,MAAMI,CAAwB,CACnC,YAA+BJ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcK,EAAYC,EAAqD,CACnF,MAAM1B,EAAiC,CAAA,EACvC,OAAI0B,IAAW,SACb1B,EAAO,QAAa0B,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKzB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM2B,CAA0B,CACrC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIwB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCLO,MAAMG,CAA8B,CAEzC,YAA6BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAahD,MAAM,MAAmC,CACvC,OAAO,KAAK,KAAK,IAAuB,oBAAoB,CAC9D,CAiBA,MAAM,OAAOnB,EAA8D,CACzE,OAAO,KAAK,KAAK,KAAwB,4BAA6BA,CAAI,CAC5E,CAcA,MAAM,IAAIwB,EAAsC,CAC9C,OAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE,CAClE,CACF,CCzEO,MAAMI,CAAuB,CAKlC,YAAYT,EAAkB,CAHrB7B,EAAA,gBAIP,KAAK,QAAU,IAAIqC,EAA8BR,CAAI,CACvD,CACF,CCRO,MAAMU,CAAuB,CAClC,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB8B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BZ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMa,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCmCO,SAASC,EAAKpC,EAA4C,CAC/D,MAAMqC,EAAUrC,EAAO,SAAW,2BAC5BsC,EAAUtC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAA2B,EACA,UAAW,MAAOtB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGa,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAerB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMe,EAAQ,MAAMf,EAAI,KAAA,EAKxB,MAAO,CACL,YAAae,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWpB,EAAeoB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIvC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAsC,EACA,eAAgB,IAAMd,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIiB,EAAclB,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMwC,CAAc,CAuBzB,YACkBC,EACAC,EACAC,EAChB,CAzBOlD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAGAA,EAAA,eAIS,KAAA,MAAAgD,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,OAAS,IAAIlB,EAAuBgB,CAAK,EAC9C,KAAK,KAAO,IAAIpB,EAAqBoB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIZ,EAA0BY,CAAK,EACpD,KAAK,QAAU,IAAIf,EAAwBe,CAAK,EAChD,KAAK,OAAS,IAAIV,EAAuBU,CAAK,CAChD,CACF,CChJA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAUhC,EAA4B,CACpC,aAAa,QAAQ+B,EAAK,KAAK,UAAU/B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW+B,CAAG,CAC7B,CAAA,CAEJ"}
+{"version":3,"file":"ledewire.min.js","sources":["../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/client.ts","../src/local-storage-adapter.ts"],"sourcesContent":["/**\n * Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n *\n * @example\n * ```ts\n * try {\n *   await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n *   if (err instanceof LedewireError) {\n *     console.error(err.statusCode, err.message)\n *   }\n * }\n * ```\n */\nexport class LedewireError extends Error {\n  /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */\n  public readonly statusCode: number\n\n  /** Machine-readable error code from the API error body, if present. */\n  public readonly code: number | undefined\n\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message)\n    this.name = 'LedewireError'\n    this.statusCode = statusCode\n    this.code = code\n    // Restore prototype chain (required for extending built-in Error in TS)\n    Object.setPrototypeOf(this, new.target.prototype)\n  }\n}\n\n/**\n * Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n */\nexport class AuthError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 401, code)\n    this.name = 'AuthError'\n  }\n}\n\n/**\n * Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n *\n * **Common cause — merchant login with the wrong account role:**\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n *\n * Use a different account or ask a store owner to add your account as a member.\n *\n * @example\n * ```ts\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n *\n * try {\n *   await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n *   if (err instanceof ForbiddenError) {\n *     // Credentials were valid but account has no merchant store access.\n *     // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n *     console.error('Wrong account role:', err.message)\n *   } else if (err instanceof AuthError) {\n *     // Bad credentials or expired token — re-authenticate.\n *     console.error('Authentication failed:', err.message)\n *   }\n * }\n * ```\n */\nexport class ForbiddenError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 403, code)\n    this.name = 'ForbiddenError'\n  }\n}\n\n/**\n * Thrown when the requested resource does not exist.\n */\nexport class NotFoundError extends LedewireError {\n  constructor(message: string, code?: number) {\n    super(message, 404, code)\n    this.name = 'NotFoundError'\n  }\n}\n\n/**\n * Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n */\nexport class PurchaseError extends LedewireError {\n  constructor(message: string, statusCode: number, code?: number) {\n    super(message, statusCode, code)\n    this.name = 'PurchaseError'\n  }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/** @internal */\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/**\n * Configuration options for `HttpClient`.\n */\nexport interface HttpClientConfig {\n  /** API base URL. Defaults to the production API. */\n  baseUrl?: string\n  /**\n   * Returns the current access token (or null) before each request.\n   * If null, requests are sent without an Authorization header.\n   */\n  getAccessToken?: () => string | null | Promise<string | null>\n  /**\n   * Called when a 401 is received on the first attempt.\n   * Should refresh and return the new access token, or null to propagate\n   * an `AuthError` to the caller.\n   */\n  onUnauthorized?: () => string | null | Promise<string | null>\n}\n\nconst DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/**\n * Core HTTP client used by all SDK packages.\n *\n * Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n *\n * This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n */\nexport class HttpClient {\n  private readonly baseUrl: string\n  private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n  private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n  constructor(config: HttpClientConfig = {}) {\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n    this.getAccessToken = config.getAccessToken ?? (() => null)\n    this.onUnauthorized = config.onUnauthorized ?? (() => null)\n  }\n\n  /**\n   * GET request with optional query parameters.\n   * @param path - API path (e.g. `/v1/wallet/balance`)\n   * @param params - Query string parameters\n   */\n  async get<T>(path: string, params?: Record<string, string>): Promise<T> {\n    return this.request<T>('GET', this.buildUrl(path, params))\n  }\n\n  /**\n   * POST request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async post<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('POST', this.buildUrl(path), body)\n  }\n\n  /**\n   * PUT request.\n   * @param path - API path\n   * @param body - Request body (JSON-serialized)\n   */\n  async put<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PUT', this.buildUrl(path), body)\n  }\n\n  /**\n   * PATCH request.\n   * @param path - API path\n   * @param body - Partial update body (JSON-serialized)\n   */\n  async patch<T>(path: string, body?: unknown): Promise<T> {\n    return this.request<T>('PATCH', this.buildUrl(path), body)\n  }\n\n  /**\n   * DELETE request.\n   * @param path - API path\n   */\n  async delete<T = void>(path: string): Promise<T> {\n    return this.request<T>('DELETE', this.buildUrl(path))\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private helpers\n  // ---------------------------------------------------------------------------\n\n  private buildUrl(path: string, params?: Record<string, string>): string {\n    const url = `${this.baseUrl}${path}`\n    if (!params || Object.keys(params).length === 0) return url\n    return `${url}?${new URLSearchParams(params).toString()}`\n  }\n\n  private async request<T>(\n    method: string,\n    url: string,\n    body?: unknown,\n    isRetry = false,\n  ): Promise<T> {\n    const token = await this.getAccessToken()\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    }\n    if (token) headers['Authorization'] = `Bearer ${token}`\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      ...(body !== undefined && { body: JSON.stringify(body) }),\n    })\n\n    if (response.status === 401 && !isRetry) {\n      const newToken = await this.onUnauthorized()\n      if (newToken) {\n        return this.request<T>(method, url, body, true)\n      }\n      throw new AuthError('Session expired. Please re-authenticate.')\n    }\n\n    if (!response.ok) {\n      await this.throwApiError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return response.json() as Promise<T>\n  }\n\n  private async throwApiError(response: Response): Promise<never> {\n    let body: ApiErrorBody | undefined\n    try {\n      body = (await response.json()) as ApiErrorBody\n    } catch {\n      // Non-JSON body - fall through to use statusText\n    }\n\n    const message = body?.error.message ?? response.statusText\n    const code = body?.error.code\n\n    switch (response.status) {\n      case 401:\n        throw new AuthError(message, code)\n      case 403:\n        throw new ForbiddenError(message, code)\n      case 404:\n        throw new NotFoundError(message, code)\n      default:\n        throw new LedewireError(message, response.status, code)\n    }\n  }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/** How many milliseconds before expiry to proactively refresh the token. */\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/**\n * Options for constructing a `TokenManager`.\n */\nexport interface TokenManagerOptions {\n  storage: TokenStorage\n  /**\n   * Exchanges a refresh token for a new token pair.\n   * Implemented by each package's client factory using the\n   * `/v1/auth/token/refresh` endpoint.\n   */\n  refreshFn: (refreshToken: string) => Promise<StoredTokens>\n  /**\n   * Called after a successful background token refresh (not on initial login).\n   * Use for side-effects only — e.g. audit logging, cache invalidation, or\n   * notifying a secondary system when tokens rotate.\n   *\n   * **Do not use this for token persistence.** The `storage` adapter's\n   * `setTokens` is the canonical persistence hook and is already called on\n   * every refresh. Providing both will result in double-writes.\n   *\n   * @example\n   * ```ts\n   * onTokenRefreshed: async (tokens) => {\n   *   await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n   * }\n   * ```\n   */\n  onTokenRefreshed?: (tokens: StoredTokens) => void | Promise<void>\n  /**\n   * Called when a refresh attempt fails and the user must re-authenticate.\n   * Typically used to redirect to login or emit a UI event.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => { window.location.href = '/login' }\n   * ```\n   */\n  onAuthExpired?: () => void | Promise<void>\n}\n\n/**\n * Manages the JWT token lifecycle transparently.\n *\n * - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n *\n * This is an internal class - use the package-level client factories instead.\n */\nexport class TokenManager {\n  private readonly storage: TokenStorage\n  private readonly refreshFn: TokenManagerOptions['refreshFn']\n  private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n  private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n  private refreshPromise: Promise<StoredTokens | null> | null = null\n\n  constructor(options: TokenManagerOptions) {\n    this.storage = options.storage\n    this.refreshFn = options.refreshFn\n    this.onTokenRefreshed = options.onTokenRefreshed\n    this.onAuthExpired = options.onAuthExpired\n  }\n\n  /**\n   * Returns a valid access token, refreshing proactively if needed.\n   * Returns `null` if no tokens are stored (user not authenticated).\n   */\n  async getAccessToken(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) return null\n\n    const expiresInMs = stored.expiresAt - Date.now()\n    if (expiresInMs < REFRESH_THRESHOLD_MS) {\n      const refreshed = await this.performRefresh(stored.refreshToken)\n      return refreshed?.accessToken ?? null\n    }\n\n    return stored.accessToken\n  }\n\n  /**\n   * Called by `HttpClient` when a 401 is received.\n   * Attempts one refresh; returns the new access token or null.\n   */\n  async handleUnauthorized(): Promise<string | null> {\n    const stored = await this.storage.getTokens()\n    if (!stored) {\n      await this.onAuthExpired?.()\n      return null\n    }\n    const refreshed = await this.performRefresh(stored.refreshToken)\n    if (!refreshed) await this.onAuthExpired?.()\n    return refreshed?.accessToken ?? null\n  }\n\n  /** Store new tokens after a successful login or signup. */\n  async setTokens(tokens: StoredTokens): Promise<void> {\n    await this.storage.setTokens(tokens)\n  }\n\n  /** Clear all stored tokens (call on logout). */\n  async clearTokens(): Promise<void> {\n    await this.storage.clearTokens()\n  }\n\n  // ---------------------------------------------------------------------------\n  // Private\n  // ---------------------------------------------------------------------------\n\n  private performRefresh(refreshToken: string): Promise<StoredTokens | null> {\n    if (this.refreshPromise) return this.refreshPromise\n\n    this.refreshPromise = this.refreshFn(refreshToken)\n      .then(async (tokens) => {\n        await this.storage.setTokens(tokens)\n        await this.onTokenRefreshed?.(tokens)\n        return tokens\n      })\n      .catch((_err: unknown) => {\n        void this.storage.clearTokens()\n        throw new AuthError('Token refresh failed. Please re-authenticate.')\n      })\n      .finally(() => {\n        this.refreshPromise = null\n      })\n\n    return this.refreshPromise\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/**\n * In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n */\nexport class MemoryTokenStorage implements TokenStorage {\n  private tokens: StoredTokens | null = null\n\n  getTokens(): StoredTokens | null {\n    return this.tokens\n  }\n\n  setTokens(tokens: StoredTokens): void {\n    this.tokens = tokens\n  }\n\n  clearTokens(): void {\n    this.tokens = null\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n *\n * @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n */\nexport function parseExpiresAt(expiresAt: string): number {\n  return new Date(expiresAt).getTime()\n}\n","/**\n * Buyer authentication namespace for browser environments.\n *\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n *\n * @module\n */\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n  AuthLoginApiKeyRequest,\n  AuthLoginEmailRequest,\n  AuthLoginOAuthRequest,\n  AuthPasswordResetBody,\n  AuthPasswordResetRequestBody,\n  AuthPasswordResetResponse,\n  AuthSignupRequest,\n  AuthenticationResponse,\n} from '@ledewire/core'\n\n/**\n * Buyer authentication: signup, email/password login, Google OAuth.\n *\n * Obtain via `lw.auth` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n */\nexport class BrowserAuthNamespace {\n  /** @internal */\n  constructor(\n    private readonly http: HttpClient,\n    private readonly tokenManager: TokenManager,\n  ) {}\n\n  /**\n   * Register a new buyer account with email and password.\n   * Tokens are stored automatically after successful signup.\n   *\n   * @param body - Signup credentials and display name.\n   * @returns The authentication token response.\n   */\n  async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with email and password.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - Email and password credentials.\n   * @returns The authentication token response.\n   */\n  async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in with a Google ID token obtained from the Google OAuth flow.\n   * Tokens are stored automatically after successful login.\n   *\n   * @param body - The Google ID token.\n   * @returns The authentication token response.\n   */\n  async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Log in using an API key to obtain a seller token.\n   * Provide only `key` for read-only (`view`) access.\n   * Provide both `key` and `secret` for read/write (`full`) access.\n   * Tokens are stored automatically after successful authentication.\n   *\n   * Use this before calling `lw.seller.content.*` methods.\n   *\n   * @param body - API key credentials.\n   * @returns The authentication token response.\n   *\n   * @example\n   * ```ts\n   * // View access (read-only) — sufficient for seller.content.list/search/get\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n   *\n   * // Full access (read/write)\n   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n   * ```\n   */\n  async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n    const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n    await this.storeTokens(res)\n    return res\n  }\n\n  /**\n   * Request a password reset code to be sent to the buyer's email address.\n   *\n   * The response is intentionally ambiguous — if the email does not exist,\n   * the API returns the same success message to prevent account enumeration.\n   *\n   * @param body - The buyer's email address.\n   * @returns A response with a confirmation message.\n   *\n   * @example\n   * ```ts\n   * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })\n   * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }\n   * ```\n   */\n  async requestPasswordReset(\n    body: AuthPasswordResetRequestBody,\n  ): Promise<AuthPasswordResetResponse> {\n    return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset-request', body)\n  }\n\n  /**\n   * Reset a buyer's password using the code delivered to their email.\n   *\n   * Obtain the reset code first by calling `requestPasswordReset()`.\n   *\n   * @param body - Email address, 6-digit reset code, and the new password.\n   * @returns A response with a confirmation message.\n   *\n   * @example\n   * ```ts\n   * await lw.auth.resetPassword({\n   *   email: 'buyer@example.com',\n   *   reset_code: '123456',\n   *   password: 'new-secure-password',\n   * })\n   * ```\n   */\n  async resetPassword(body: AuthPasswordResetBody): Promise<AuthPasswordResetResponse> {\n    return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset', body)\n  }\n\n  private async storeTokens(res: AuthenticationResponse): Promise<void> {\n    await this.tokenManager.setTokens({\n      accessToken: res.access_token,\n      refreshToken: res.refresh_token,\n      expiresAt: parseExpiresAt(res.expires_at),\n    })\n  }\n}\n","/**\n * Platform configuration namespace (browser).\n *\n * Provides access to public (unauthenticated) platform-level configuration.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/**\n * Platform-level configuration for browser clients.\n *\n * Obtain via `client.config` — do not construct directly.\n */\nexport class BrowserConfigNamespace {\n  /** @internal */\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns platform-level public configuration.\n   * No authentication required — safe to call before the user has signed in.\n   *\n   * Use `google_client_id` to initialise the Google Identity Services library\n   * on the storefront login page without requiring a prior authenticated call.\n   *\n   * @example\n   * ```ts\n   * const lw = init({ apiKey: 'your_api_key' })\n   * const { google_client_id } = await lw.config.getPublic()\n   * google.accounts.id.initialize({ client_id: google_client_id, callback })\n   * ```\n   */\n  async getPublic(): Promise<PublicConfigResponse> {\n    return this.http.get<PublicConfigResponse>('/v1/config/public')\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/**\n * Buyer content namespace — fetch content with real-time access information.\n *\n * Obtain via `lw.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const { content, access } = await lw.content.getWithAccess('content-id')\n * if (access.has_access) showFullContent(content)\n * ```\n */\nexport class BrowserContentNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns a content item together with access information for the\n   * authenticated buyer (or a generic access response when unauthenticated).\n   *\n   * @param id - The content ID.\n   * @param userId - Optional user ID to check a specific user's access status.\n   * @returns The content item with access information.\n   */\n  async getWithAccess(id: string, userId?: string): Promise<ContentWithAccessResponse> {\n    const params: Record<string, string> = {}\n    if (userId !== undefined) {\n      params['user_id'] = userId\n    }\n    return this.http.get<ContentWithAccessResponse>(\n      `/v1/content/${id}/with-access`,\n      Object.keys(params).length > 0 ? params : undefined,\n    )\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/**\n * Buyer purchases namespace — create and retrieve content purchases.\n *\n * Obtain via `lw.purchases` — do not construct directly.\n *\n * @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n */\nexport class BrowserPurchasesNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Completes a content purchase using the buyer's wallet balance.\n   *\n   * @param body - The content ID and expected price in cents.\n   * @returns The completed purchase record.\n   */\n  async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n    return this.http.post<PurchaseResponse>('/v1/purchases', body)\n  }\n\n  /**\n   * Returns all purchases made by the authenticated buyer.\n   *\n   * @returns A list of purchase records, newest first.\n   */\n  async list(): Promise<PurchaseResponse[]> {\n    return this.http.get<PurchaseResponse[]>('/v1/purchases')\n  }\n\n  /**\n   * Returns a single purchase by ID.\n   *\n   * @param id - The purchase ID.\n   * @returns The purchase record.\n   */\n  async get(id: string): Promise<PurchaseResponse> {\n    return this.http.get<PurchaseResponse>(`/v1/purchases/${id}`)\n  }\n}\n","/**\n * Seller content namespace for browser environments.\n *\n * Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/**\n * Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n */\nexport interface SellerContentSearchRequest {\n  /** Case-insensitive partial match against the content title. */\n  title?: string\n  /** Case-insensitive partial match against the content URI (`external_ref` content only). */\n  uri?: string\n  /** Exact key/value pairs to AND-match against content metadata. */\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Seller content namespace — list, search, and fetch store content by API key.\n *\n * Obtain via `lw.seller.content` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n *\n * const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n */\nexport class BrowserSellerContentNamespace {\n  /** @internal */\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * List all content for the authenticated seller's store.\n   * Requires a token with at least `view` permission.\n   *\n   * @returns Array of content items.\n   *\n   * @example\n   * ```ts\n   * const items = await lw.seller.content.list()\n   * ```\n   */\n  async list(): Promise<ContentResponse[]> {\n    return this.http.get<ContentResponse[]>('/v1/seller/content')\n  }\n\n  /**\n   * Search content by title, URI, and/or metadata (AND logic).\n   * At least one criterion must be supplied.\n   * Requires a token with at least `view` permission.\n   *\n   * @param body - Search criteria (title, uri, and/or metadata).\n   * @returns Array of matching content items.\n   *\n   * @example\n   * ```ts\n   * const results = await lw.seller.content.search({ title: 'intro' })\n   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n   * ```\n   */\n  async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n    return this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n  }\n\n  /**\n   * Get a single content item by ID.\n   * Requires a token with at least `view` permission.\n   *\n   * @param id - The content ID.\n   * @returns The content item.\n   *\n   * @example\n   * ```ts\n   * const item = await lw.seller.content.get('content-id')\n   * ```\n   */\n  async get(id: string): Promise<ContentResponse> {\n    return this.http.get<ContentResponse>(`/v1/seller/content/${id}`)\n  }\n}\n","/**\n * Browser seller namespace — API-key-authenticated read operations.\n *\n * @module\n */\nimport type { HttpClient } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/**\n * Seller operations accessible with a view-permission API key token.\n *\n * Obtain via `lw.seller` — do not construct directly.\n *\n * @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n */\nexport class BrowserSellerNamespace {\n  /** Seller content: list, search, and get by API key. */\n  readonly content: BrowserSellerContentNamespace\n\n  /** @internal */\n  constructor(http: HttpClient) {\n    this.content = new BrowserSellerContentNamespace(http)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n  WalletBalanceResponse,\n  WalletPaymentSessionRequest,\n  WalletPaymentSessionResponse,\n  WalletPaymentStatusResponse,\n  WalletTransactionItem,\n} from '@ledewire/core'\n\n/**\n * Buyer wallet namespace — balance, transactions, and payment session management.\n *\n * Obtain via `lw.wallet` — do not construct directly.\n *\n * @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n */\nexport class BrowserWalletNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's current wallet balance.\n   *\n   * @returns The current wallet balance in cents.\n   */\n  async balance(): Promise<WalletBalanceResponse> {\n    return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n  }\n\n  /**\n   * Returns the authenticated buyer's wallet transaction history, newest first.\n   *\n   * @returns A list of completed wallet transaction entries.\n   */\n  async transactions(): Promise<WalletTransactionItem[]> {\n    return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n  }\n\n  /**\n   * Creates a payment session for funding the buyer's wallet.\n   *\n   * @param body - The amount and currency to fund.\n   * @returns Payment session details for use with the payment provider widget.\n   */\n  async createPaymentSession(\n    body: WalletPaymentSessionRequest,\n  ): Promise<WalletPaymentSessionResponse> {\n    return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n  }\n\n  /**\n   * Polls the status of a wallet funding payment session.\n   *\n   * @param sessionId - The session ID returned by `createPaymentSession`.\n   * @returns The current payment status.\n   */\n  async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n    return this.http.get<WalletPaymentStatusResponse>(`/v1/wallet/payment-status/${sessionId}`)\n  }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/**\n * Checkout namespace — buyer checkout state for a specific content item.\n *\n * Obtain via `lw.checkout` — do not construct directly.\n *\n * @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'\n * ```\n */\nexport class CheckoutNamespace {\n  constructor(protected readonly http: HttpClient) {}\n\n  /**\n   * Returns the authenticated buyer's checkout readiness for a given piece of\n   * content. Indicates whether the buyer needs to authenticate, fund their\n   * wallet, or purchase before accessing the content.\n   *\n   * Works without authentication — returns anonymous checkout state when the\n   * buyer is not logged in.\n   *\n   * @param contentId - The content item ID.\n   * @returns The checkout state, including what action is required next.\n   */\n  async state(contentId: string): Promise<CheckoutStateResponse> {\n    return this.http.get<CheckoutStateResponse>(`/v1/checkout/state/${contentId}`)\n  }\n}\n","import { HttpClient, MemoryTokenStorage, TokenManager, parseExpiresAt } from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\n\n/**\n * Configuration options for the LedeWire browser client.\n */\nexport interface BrowserClientConfig {\n  /**\n   * LedeWire API key that identifies the store.\n   * Obtained from the LedeWire merchant dashboard.\n   */\n  apiKey: string\n  /**\n   * Override the API base URL.\n   * Defaults to `https://api.ledewire.com`.\n   */\n  baseUrl?: string\n  /**\n   * Token storage adapter.\n   * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n   *\n   * To persist sessions across page reloads, use the built-in\n   * `localStorageAdapter`:\n   * ```ts\n   * import { init, localStorageAdapter } from '@ledewire/browser'\n   * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n   * ```\n   */\n  storage?: TokenStorage\n  /**\n   * Called when the user's session expires and cannot be refreshed.\n   * Use this to show a re-authentication prompt.\n   *\n   * @example\n   * ```ts\n   * onAuthExpired: () => showLoginModal()\n   * ```\n   */\n  onAuthExpired?: () => void\n}\n\n/**\n * Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n *\n * @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n *   const lw = Ledewire.init({ apiKey: 'your_api_key' })\n *   const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n *\n * @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n */\nexport function init(config: BrowserClientConfig): BrowserClient {\n  const baseUrl = config.baseUrl ?? 'https://api.ledewire.com'\n  const storage = config.storage ?? new MemoryTokenStorage()\n\n  const tokenManager = new TokenManager({\n    storage,\n    refreshFn: async (refreshToken) => {\n      const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ refresh_token: refreshToken }),\n      })\n      if (!res.ok) throw new Error('Token refresh failed')\n      const data = (await res.json()) as {\n        access_token: string\n        refresh_token: string\n        expires_at: string\n      }\n      return {\n        accessToken: data.access_token,\n        refreshToken: data.refresh_token,\n        expiresAt: parseExpiresAt(data.expires_at),\n      }\n    },\n    ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n  })\n\n  const http = new HttpClient({\n    baseUrl,\n    getAccessToken: () => tokenManager.getAccessToken(),\n    onUnauthorized: () => tokenManager.handleUnauthorized(),\n  })\n\n  return new BrowserClient(http, tokenManager, config)\n}\n\n/**\n * The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n *\n * @remarks\n * Instantiate with {@link init} rather than constructing directly.\n */\nexport class BrowserClient {\n  /** Platform-level public configuration (no auth required) */\n  readonly config: BrowserConfigNamespace\n\n  /** Buyer authentication: email/password signup/login, Google, password reset */\n  readonly auth: BrowserAuthNamespace\n\n  /** Checkout state machine: determines next action for a piece of content */\n  readonly checkout: CheckoutNamespace\n\n  /** Wallet: balance, fund via payment session, transaction history */\n  readonly wallet: BrowserWalletNamespace\n\n  /** Content purchases for the authenticated buyer */\n  readonly purchases: BrowserPurchasesNamespace\n\n  /** Public content with per-user access information */\n  readonly content: BrowserContentNamespace\n\n  /** Seller content: list, search, and get (requires API key view token) */\n  readonly seller: BrowserSellerNamespace\n\n  /** @internal */\n  constructor(\n    public readonly _http: HttpClient,\n    public readonly _tokenManager: TokenManager,\n    public readonly _config: BrowserClientConfig,\n  ) {\n    this.config = new BrowserConfigNamespace(_http)\n    this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n    this.checkout = new CheckoutNamespace(_http)\n    this.wallet = new BrowserWalletNamespace(_http)\n    this.purchases = new BrowserPurchasesNamespace(_http)\n    this.content = new BrowserContentNamespace(_http)\n    this.seller = new BrowserSellerNamespace(_http)\n  }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/**\n * A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n *\n * Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n *\n * **Security note:** `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n *\n * @param key - The `localStorage` key used to store tokens.\n *   Defaults to `'lw:tokens'`. Override this if you have multiple\n *   LedeWire integrations on the same origin.\n *\n * @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n *\n * const lw = init({\n *   apiKey: 'your_api_key',\n *   storage: localStorageAdapter(),\n * })\n * ```\n */\nexport function localStorageAdapter(key = DEFAULT_STORAGE_KEY): TokenStorage {\n  return {\n    getTokens(): StoredTokens | null {\n      const raw = localStorage.getItem(key)\n      if (!raw) return null\n      try {\n        return JSON.parse(raw) as StoredTokens\n      } catch {\n        // Corrupted value - treat as empty\n        return null\n      }\n    },\n    setTokens(tokens: StoredTokens): void {\n      localStorage.setItem(key, JSON.stringify(tokens))\n    },\n    clearTokens(): void {\n      localStorage.removeItem(key)\n    },\n  }\n}\n"],"names":["LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","BrowserAuthNamespace","http","tokenManager","res","BrowserConfigNamespace","BrowserContentNamespace","id","userId","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","init","baseUrl","storage","data","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","localStorageAdapter","key","raw"],"mappings":"2MAgBO,MAAMA,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAiCO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CC5EA,MAAMM,EAAmB,2BAalB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAA6C,CACtE,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAOA,MAAM,KAAQD,EAAcE,EAA4B,CACtD,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC1D,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAAyC,CACtE,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,MAAI,CAACC,GAAU,OAAO,KAAKA,CAAM,EAAE,SAAW,EAAUE,EACjD,GAAGA,CAAG,IAAI,IAAI,gBAAgBF,CAAM,EAAE,UAAU,EACzD,CAEA,MAAc,QACZG,EACAD,EACAD,EACAG,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAML,EAAK,CAChC,OAAAC,EACA,QAAAG,EACA,GAAIL,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIM,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQD,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKe,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIN,EACJ,GAAI,CACFA,EAAQ,MAAMM,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMnB,EAAUa,GAAM,MAAM,SAAWM,EAAS,WAC1CjB,EAAOW,GAAM,MAAM,KAEzB,OAAQM,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIf,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASmB,EAAS,OAAQjB,CAAI,CAAA,CAE5D,CACF,CC/JA,MAAMkB,EAAuB,IAoDtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBnB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUmB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAIvB,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAMwB,CAA2C,CAAjD,cACGzB,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAUsB,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CC/IO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAOpB,EAA0D,CACrE,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBrB,CAAI,EAChF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,eAAerB,EAA8D,CACjF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBrB,CAAI,EACrF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBrB,EAA8D,CAClF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBrB,CAAI,EACtF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAsBA,MAAM,gBAAgBrB,EAA+D,CACnF,MAAMqB,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0BrB,CAAI,EACvF,aAAM,KAAK,YAAYqB,CAAG,EACnBA,CACT,CAiBA,MAAM,qBACJrB,EACoC,CACpC,OAAO,KAAK,KAAK,KAAgC,kCAAmCA,CAAI,CAC1F,CAmBA,MAAM,cAAcA,EAAiE,CACnF,OAAO,KAAK,KAAK,KAAgC,0BAA2BA,CAAI,CAClF,CAEA,MAAc,YAAYqB,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWL,EAAeK,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CC1IO,MAAMC,CAAuB,CAElC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCtBO,MAAMI,CAAwB,CACnC,YAA+BJ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAUlD,MAAM,cAAcK,EAAYC,EAAqD,CACnF,MAAM1B,EAAiC,CAAA,EACvC,OAAI0B,IAAW,SACb1B,EAAO,QAAa0B,GAEf,KAAK,KAAK,IACf,eAAeD,CAAE,eACjB,OAAO,KAAKzB,CAAM,EAAE,OAAS,EAAIA,EAAS,MAAA,CAE9C,CACF,CCrBO,MAAM2B,CAA0B,CACrC,YAA+BP,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAOnB,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIwB,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiBA,CAAE,EAAE,CAC9D,CACF,CCLO,MAAMG,CAA8B,CAEzC,YAA6BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAahD,MAAM,MAAmC,CACvC,OAAO,KAAK,KAAK,IAAuB,oBAAoB,CAC9D,CAiBA,MAAM,OAAOnB,EAA8D,CACzE,OAAO,KAAK,KAAK,KAAwB,4BAA6BA,CAAI,CAC5E,CAcA,MAAM,IAAIwB,EAAsC,CAC9C,OAAO,KAAK,KAAK,IAAqB,sBAAsBA,CAAE,EAAE,CAClE,CACF,CCzEO,MAAMI,CAAuB,CAKlC,YAAYT,EAAkB,CAHrB7B,EAAA,gBAIP,KAAK,QAAU,IAAIqC,EAA8BR,CAAI,CACvD,CACF,CCRO,MAAMU,CAAuB,CAClC,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJnB,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiB8B,EAAyD,CAC9E,OAAO,KAAK,KAAK,IAAiC,6BAA6BA,CAAS,EAAE,CAC5F,CACF,CC/CO,MAAMC,CAAkB,CAC7B,YAA+BZ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMa,EAAmD,CAC7D,OAAO,KAAK,KAAK,IAA2B,sBAAsBA,CAAS,EAAE,CAC/E,CACF,CCmCO,SAASC,EAAKpC,EAA4C,CAC/D,MAAMqC,EAAUrC,EAAO,SAAW,2BAC5BsC,EAAUtC,EAAO,SAAW,IAAIkB,EAEhCK,EAAe,IAAIZ,EAAa,CACpC,QAAA2B,EACA,UAAW,MAAOtB,GAAiB,CACjC,MAAMQ,EAAM,MAAM,MAAM,GAAGa,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAerB,EAAc,CAAA,CACrD,EACD,GAAI,CAACQ,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMe,EAAQ,MAAMf,EAAI,KAAA,EAKxB,MAAO,CACL,YAAae,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWpB,EAAeoB,EAAK,UAAU,CAAA,CAE7C,EACA,GAAIvC,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEKsB,EAAO,IAAIvB,EAAW,CAC1B,QAAAsC,EACA,eAAgB,IAAMd,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIiB,EAAclB,EAAMC,EAAcvB,CAAM,CACrD,CASO,MAAMwC,CAAc,CAuBzB,YACkBC,EACAC,EACAC,EAChB,CAzBOlD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAGAA,EAAA,eAIS,KAAA,MAAAgD,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEhB,KAAK,OAAS,IAAIlB,EAAuBgB,CAAK,EAC9C,KAAK,KAAO,IAAIpB,EAAqBoB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIZ,EAA0BY,CAAK,EACpD,KAAK,QAAU,IAAIf,EAAwBe,CAAK,EAChD,KAAK,OAAS,IAAIV,EAAuBU,CAAK,CAChD,CACF,CChJA,MAAMG,EAAsB,YA0BrB,SAASC,EAAoBC,EAAMF,EAAmC,CAC3E,MAAO,CACL,WAAiC,CAC/B,MAAMG,EAAM,aAAa,QAAQD,CAAG,EACpC,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAUhC,EAA4B,CACpC,aAAa,QAAQ+B,EAAK,KAAK,UAAU/B,CAAM,CAAC,CAClD,EACA,aAAoB,CAClB,aAAa,WAAW+B,CAAG,CAC7B,CAAA,CAEJ"}

package/llms.txt

@@ -97,8 +97,8 @@ lw.auth.loginWithApiKey({ key, secret? })      → Promise<AuthenticationRespons
 // key-only → view permission (read-only, sufficient for lw.seller.content.*)
 // key + secret → full permission (read/write)
 lw.auth.logout()                               → Promise<void>
-lw.auth.requestPasswordReset({ email })        → Promise<void>
-lw.auth.resetPassword({ token, password })     → Promise<void>
+lw.auth.requestPasswordReset({ email })        → Promise<AuthPasswordResetResponse>
+lw.auth.resetPassword({ email, reset_code, password }) → Promise<AuthPasswordResetResponse>
 ```
 
 Tokens are stored automatically after every successful login.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledewire/browser",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "LedeWire SDK for browsers — embed a paywall with a single script tag",
   "type": "module",
   "exports": {