@ledewire/browser 0.4.0 → 0.6.0

package/dist/index.js

@@ -1,6 +1,18 @@
-var p = Object.defineProperty;
-var w = (s, e, t) => e in s ? p(s, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : s[e] = t;
-var n = (s, e, t) => w(s, typeof e != "symbol" ? e + "" : e, t);
+var d = Object.defineProperty;
+var g = (s, e, t) => e in s ? d(s, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : s[e] = t;
+var n = (s, e, t) => g(s, typeof e != "symbol" ? e + "" : e, t);
+function w(s) {
+  return atob(s);
+}
+function u(s) {
+  return {
+    ...s,
+    ...typeof s.content_body == "string" && {
+      content_body: w(s.content_body)
+    },
+    ...typeof s.teaser == "string" && { teaser: w(s.teaser) }
+  };
+}
 class c extends Error {
   constructor(t, r, o) {
     super(t);
@@ -11,33 +23,33 @@ class c extends Error {
     this.name = "LedewireError", this.statusCode = r, this.code = o, Object.setPrototypeOf(this, new.target.prototype);
   }
 }
-class u extends c {
+class l extends c {
   constructor(e, t) {
     super(e, 401, t), this.name = "AuthError";
   }
 }
-class d extends c {
+class k extends c {
   constructor(e, t) {
     super(e, 403, t), this.name = "ForbiddenError";
   }
 }
-class g extends c {
+class f extends c {
   constructor(e, t) {
     super(e, 404, t), this.name = "NotFoundError";
   }
 }
-class $ extends c {
+class B extends c {
   constructor(e, t, r) {
     super(e, t, r), this.name = "PurchaseError";
   }
 }
-const k = "https://api.ledewire.com";
-class f {
+const T = "https://api.ledewire.com";
+class y {
   constructor(e = {}) {
     n(this, "baseUrl");
     n(this, "getAccessToken");
     n(this, "onUnauthorized");
-    this.baseUrl = (e.baseUrl ?? k).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
+    this.baseUrl = (e.baseUrl ?? T).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
   }
   /**
    * GET request with optional query parameters.
@@ -99,7 +111,7 @@ class f {
     if (a.status === 401 && !o) {
       if (await this.onUnauthorized())
         return this.request(e, t, r, !0);
-      throw new u("Session expired. Please re-authenticate.");
+      throw new l("Session expired. Please re-authenticate.");
     }
     if (a.ok || await this.throwApiError(a), a.status !== 204)
       return a.json();
@@ -113,18 +125,18 @@ class f {
     const r = t?.error.message ?? e.statusText, o = t?.error.code;
     switch (e.status) {
       case 401:
-        throw new u(r, o);
+        throw new l(r, o);
       case 403:
-        throw new d(r, o);
+        throw new k(r, o);
       case 404:
-        throw new g(r, o);
+        throw new f(r, o);
       default:
         throw new c(r, e.status, o);
     }
   }
 }
-const T = 6e4;
-class y {
+const m = 6e4;
+class E {
   constructor(e) {
     n(this, "storage");
     n(this, "refreshFn");
@@ -139,7 +151,7 @@ class y {
    */
   async getAccessToken() {
     const e = await this.storage.getTokens();
-    return e ? e.expiresAt - Date.now() < T ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
+    return e ? e.expiresAt - Date.now() < m ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
   }
   /**
    * Called by `HttpClient` when a 401 is received.
@@ -165,13 +177,13 @@ class y {
   // ---------------------------------------------------------------------------
   performRefresh(e) {
     return this.refreshPromise ? this.refreshPromise : (this.refreshPromise = this.refreshFn(e).then(async (t) => (await this.storage.setTokens(t), await this.onTokenRefreshed?.(t), t)).catch((t) => {
-      throw this.storage.clearTokens(), new u("Token refresh failed. Please re-authenticate.");
+      throw this.storage.clearTokens(), new l("Token refresh failed. Please re-authenticate.");
     }).finally(() => {
       this.refreshPromise = null;
     }), this.refreshPromise);
   }
 }
-class m {
+class A {
   constructor() {
     n(this, "tokens", null);
   }
@@ -185,10 +197,10 @@ class m {
     this.tokens = null;
   }
 }
-function l(s) {
+function p(s) {
   return new Date(s).getTime();
 }
-class E {
+class S {
   /** @internal */
   constructor(e, t) {
     this.http = e, this.tokenManager = t;
@@ -227,38 +239,52 @@ class E {
     return await this.storeTokens(t), t;
   }
   /**
-   * Log in using an API key to obtain a seller token.
-   * Provide only `key` for read-only (`view`) access.
-   * Provide both `key` and `secret` for read/write (`full`) access.
-   * Tokens are stored automatically after successful authentication.
+   * Request a password reset code to be sent to the buyer's email address.
    *
-   * Use this before calling `lw.seller.content.*` methods.
+   * The response is intentionally ambiguous — if the email does not exist,
+   * the API returns the same success message to prevent account enumeration.
    *
-   * @param body - API key credentials.
-   * @returns The authentication token response.
+   * @param body - The buyer's email address.
+   * @returns A response with a confirmation message.
    *
    * @example
    * ```ts
-   * // View access (read-only) — sufficient for seller.content.list/search/get
-   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
+   * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })
+   * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }
+   * ```
+   */
+  async requestPasswordReset(e) {
+    return this.http.post("/v1/auth/password/reset-request", e);
+  }
+  /**
+   * Reset a buyer's password using the code delivered to their email.
    *
-   * // Full access (read/write)
-   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
+   * Obtain the reset code first by calling `requestPasswordReset()`.
+   *
+   * @param body - Email address, 6-digit reset code, and the new password.
+   * @returns A response with a confirmation message.
+   *
+   * @example
+   * ```ts
+   * await lw.auth.resetPassword({
+   *   email: 'buyer@example.com',
+   *   reset_code: '123456',
+   *   password: 'new-secure-password',
+   * })
    * ```
    */
-  async loginWithApiKey(e) {
-    const t = await this.http.post("/v1/auth/login/api-key", e);
-    return await this.storeTokens(t), t;
+  async resetPassword(e) {
+    return this.http.post("/v1/auth/password/reset", e);
   }
   async storeTokens(e) {
     await this.tokenManager.setTokens({
       accessToken: e.access_token,
       refreshToken: e.refresh_token,
-      expiresAt: l(e.expires_at)
+      expiresAt: p(e.expires_at)
     });
   }
 }
-class A {
+class v {
   /** @internal */
   constructor(e) {
     this.http = e;
@@ -281,7 +307,7 @@ class A {
     return this.http.get("/v1/config/public");
   }
 }
-class v {
+class x {
   constructor(e) {
     this.http = e;
   }
@@ -290,18 +316,24 @@ class v {
    * authenticated buyer (or a generic access response when unauthenticated).
    *
    * @param id - The content ID.
-   * @param userId - Optional user ID to check a specific user's access status.
-   * @returns The content item with access information.
+   * @returns The content item with access information. `content_body` and
+   * `teaser` are returned as plain UTF-8 text — the SDK decodes base64
+   * transparently so you can render them directly.
+   *
+   * @example
+   * ```ts
+   * const result = await lw.content.getWithAccess('article-123')
+   * if (result.access_info.next_required_action === 'view_content') {
+   *   renderMarkdown(result.content_body ?? '')
+   * }
+   * ```
    */
-  async getWithAccess(e, t) {
-    const r = {};
-    return t !== void 0 && (r.user_id = t), this.http.get(
-      `/v1/content/${e}/with-access`,
-      Object.keys(r).length > 0 ? r : void 0
-    );
+  async getWithAccess(e) {
+    const t = await this.http.get(`/v1/content/${e}/with-access`);
+    return u(t);
   }
 }
-class x {
+class b {
   constructor(e) {
     this.http = e;
   }
@@ -341,7 +373,8 @@ class U {
    * List all content for the authenticated seller's store.
    * Requires a token with at least `view` permission.
    *
-   * @returns Array of content items.
+   * @returns Array of content items. `teaser` is returned as plain text —
+   * the SDK decodes base64 automatically.
    *
    * @example
    * ```ts
@@ -349,7 +382,7 @@ class U {
    * ```
    */
   async list() {
-    return this.http.get("/v1/seller/content");
+    return (await this.http.get("/v1/seller/content")).map(u);
   }
   /**
    * Search content by title, URI, and/or metadata (AND logic).
@@ -357,43 +390,77 @@ class U {
    * Requires a token with at least `view` permission.
    *
    * @param body - Search criteria (title, uri, and/or metadata).
-   * @returns Array of matching content items.
+   * @returns Array of matching content items. `teaser` is returned as plain
+   * text — the SDK decodes base64 automatically.
    *
    * @example
    * ```ts
    * const results = await lw.seller.content.search({ title: 'intro' })
    * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })
+   * const byId = await lw.seller.content.search({ external_identifier: 'vimeo:123456789' })
    * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
    * ```
    */
   async search(e) {
-    return this.http.post("/v1/seller/content/search", e);
+    return (await this.http.post("/v1/seller/content/search", e)).map(u);
   }
   /**
    * Get a single content item by ID.
    * Requires a token with at least `view` permission.
    *
    * @param id - The content ID.
-   * @returns The content item.
+   * @returns The content item. `content_body` and `teaser` are returned as
+   * plain UTF-8 text — the SDK decodes base64 automatically so you can render
+   * them directly without calling `atob()`.
    *
    * @example
    * ```ts
    * const item = await lw.seller.content.get('content-id')
+   * // item.content_body is plain markdown — no atob() needed
    * ```
    */
   async get(e) {
-    return this.http.get(`/v1/seller/content/${e}`);
+    const t = await this.http.get(`/v1/seller/content/${e}`);
+    return u(t);
   }
 }
-class S {
+class P {
   /** @internal */
-  constructor(e) {
+  constructor(e, t) {
     /** Seller content: list, search, and get by API key. */
     n(this, "content");
-    this.content = new U(e);
+    this.http = e, this.tokenManager = t, this.content = new U(e);
+  }
+  /**
+   * Log in using an API key to obtain a seller token.
+   * Provide only `key` for read-only (`view`) access.
+   * Provide both `key` and `secret` for read/write (`full`) access.
+   * Tokens are stored automatically after successful authentication.
+   *
+   * Use this before calling `lw.seller.content.*` methods.
+   *
+   * @param body - API key credentials.
+   * @returns The authentication token response.
+   *
+   * @example
+   * ```ts
+   * // View access (read-only) — sufficient for seller.content.list/search/get
+   * await lw.seller.loginWithApiKey({ key: 'your_api_key' })
+   *
+   * // Full access (read/write)
+   * await lw.seller.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
+   * ```
+   */
+  async loginWithApiKey(e) {
+    const t = await this.http.post("/v1/auth/login/api-key", e);
+    return await this.tokenManager.setTokens({
+      accessToken: t.access_token,
+      refreshToken: t.refresh_token,
+      expiresAt: p(t.expires_at)
+    }), t;
   }
 }
-class b {
+class N {
   constructor(e) {
     this.http = e;
   }
@@ -432,7 +499,7 @@ class b {
     return this.http.get(`/v1/wallet/payment-status/${e}`);
   }
 }
-class P {
+class _ {
   constructor(e) {
     this.http = e;
   }
@@ -451,8 +518,8 @@ class P {
     return this.http.get(`/v1/checkout/state/${e}`);
   }
 }
-function C(s) {
-  const e = s.baseUrl ?? "https://api.ledewire.com", t = s.storage ?? new m(), r = new y({
+function q(s) {
+  const e = s.baseUrl ?? "https://api.ledewire.com", t = s.storage ?? new A(), r = new E({
     storage: t,
     refreshFn: async (h) => {
       const i = await fetch(`${e}/v1/auth/token/refresh`, {
@@ -465,23 +532,23 @@ function C(s) {
       return {
         accessToken: a.access_token,
         refreshToken: a.refresh_token,
-        expiresAt: l(a.expires_at)
+        expiresAt: p(a.expires_at)
       };
     },
     ...s.onAuthExpired !== void 0 && { onAuthExpired: s.onAuthExpired }
-  }), o = new f({
+  }), o = new y({
     baseUrl: e,
     getAccessToken: () => r.getAccessToken(),
     onUnauthorized: () => r.handleUnauthorized()
   });
-  return new N(o, r, s);
+  return new R(o, r, s);
 }
-class N {
+class R {
   /** @internal */
   constructor(e, t, r) {
     /** Platform-level public configuration (no auth required) */
     n(this, "config");
-    /** Buyer authentication: email/password signup/login, Google, password reset */
+    /** Buyer authentication: email/password signup/login, Google OAuth, password reset */
     n(this, "auth");
     /** Checkout state machine: determines next action for a piece of content */
     n(this, "checkout");
@@ -491,13 +558,13 @@ class N {
     n(this, "purchases");
     /** Public content with per-user access information */
     n(this, "content");
-    /** Seller content: list, search, and get (requires API key view token) */
+    /** Seller operations: API key login, content list/search/get */
     n(this, "seller");
-    this._http = e, this._tokenManager = t, this._config = r, this.config = new A(e), this.auth = new E(e, t), this.checkout = new P(e), this.wallet = new b(e), this.purchases = new x(e), this.content = new v(e), this.seller = new S(e);
+    this._http = e, this._tokenManager = t, this._config = r, this.config = new v(e), this.auth = new S(e, t), this.checkout = new _(e), this.wallet = new N(e), this.purchases = new b(e), this.content = new x(e), this.seller = new P(e, t);
   }
 }
-const R = "lw:tokens";
-function B(s = R) {
+const F = "lw:tokens";
+function L(s = F) {
   return {
     getTokens() {
       const e = localStorage.getItem(s);
@@ -516,15 +583,36 @@ function B(s = R) {
     }
   };
 }
+const O = "lw:tokens";
+function M(s = O) {
+  return {
+    getTokens() {
+      const e = sessionStorage.getItem(s);
+      if (!e) return null;
+      try {
+        return JSON.parse(e);
+      } catch {
+        return null;
+      }
+    },
+    setTokens(e) {
+      sessionStorage.setItem(s, JSON.stringify(e));
+    },
+    clearTokens() {
+      sessionStorage.removeItem(s);
+    }
+  };
+}
 export {
-  u as AuthError,
-  d as ForbiddenError,
+  l as AuthError,
+  k as ForbiddenError,
   c as LedewireError,
-  m as MemoryTokenStorage,
-  g as NotFoundError,
-  $ as PurchaseError,
-  C as init,
-  B as localStorageAdapter,
-  l as parseExpiresAt
+  A as MemoryTokenStorage,
+  f as NotFoundError,
+  B as PurchaseError,
+  q as init,
+  L as localStorageAdapter,
+  p as parseExpiresAt,
+  M as sessionStorageAdapter
 };
 //# sourceMappingURL=index.js.map