@ledewire/browser 0.5.0 → 0.6.1

package/dist/index.js

@@ -1,6 +1,18 @@
-var p = Object.defineProperty;
-var w = (s, e, t) => e in s ? p(s, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : s[e] = t;
-var n = (s, e, t) => w(s, typeof e != "symbol" ? e + "" : e, t);
+var g = Object.defineProperty;
+var k = (s, e, t) => e in s ? g(s, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : s[e] = t;
+var n = (s, e, t) => k(s, typeof e != "symbol" ? e + "" : e, t);
+function w(s) {
+  return atob(s);
+}
+function u(s) {
+  return {
+    ...s,
+    ...typeof s.content_body == "string" && {
+      content_body: w(s.content_body)
+    },
+    ...typeof s.teaser == "string" && { teaser: w(s.teaser) }
+  };
+}
 class c extends Error {
   constructor(t, r, o) {
     super(t);
@@ -11,38 +23,38 @@ class c extends Error {
     this.name = "LedewireError", this.statusCode = r, this.code = o, Object.setPrototypeOf(this, new.target.prototype);
   }
 }
-class u extends c {
+class l extends c {
   constructor(e, t) {
     super(e, 401, t), this.name = "AuthError";
   }
 }
-class d extends c {
+class T extends c {
   constructor(e, t) {
     super(e, 403, t), this.name = "ForbiddenError";
   }
 }
-class g extends c {
+class y extends c {
   constructor(e, t) {
     super(e, 404, t), this.name = "NotFoundError";
   }
 }
-class $ extends c {
+class q extends c {
   constructor(e, t, r) {
     super(e, t, r), this.name = "PurchaseError";
   }
 }
-const k = "https://api.ledewire.com";
-class f {
+const d = "https://api.ledewire.com";
+class A {
   constructor(e = {}) {
     n(this, "baseUrl");
     n(this, "getAccessToken");
     n(this, "onUnauthorized");
-    this.baseUrl = (e.baseUrl ?? k).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
+    this.baseUrl = (e.baseUrl ?? d).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
   }
   /**
    * GET request with optional query parameters.
    * @param path - API path (e.g. `/v1/wallet/balance`)
-   * @param params - Query string parameters
+   * @param params - Query string parameters. `undefined` values are omitted; numbers are coerced to strings.
    */
   async get(e, t) {
     return this.request("GET", this.buildUrl(e, t));
@@ -51,9 +63,10 @@ class f {
    * POST request.
    * @param path - API path
    * @param body - Request body (JSON-serialized)
+   * @param params - Optional query string parameters. `undefined` values are omitted; numbers are coerced to strings.
    */
-  async post(e, t) {
-    return this.request("POST", this.buildUrl(e), t);
+  async post(e, t, r) {
+    return this.request("POST", this.buildUrl(e, r), t);
   }
   /**
    * PUT request.
@@ -83,7 +96,13 @@ class f {
   // ---------------------------------------------------------------------------
   buildUrl(e, t) {
     const r = `${this.baseUrl}${e}`;
-    return !t || Object.keys(t).length === 0 ? r : `${r}?${new URLSearchParams(t).toString()}`;
+    if (!t) return r;
+    const o = Object.entries(t).filter(
+      (i) => i[1] !== void 0
+    );
+    if (o.length === 0) return r;
+    const h = new URLSearchParams(o.map(([i, a]) => [i, String(a)]));
+    return `${r}?${h.toString()}`;
   }
   async request(e, t, r, o = !1) {
     const h = await this.getAccessToken(), i = {
@@ -99,7 +118,7 @@ class f {
     if (a.status === 401 && !o) {
       if (await this.onUnauthorized())
         return this.request(e, t, r, !0);
-      throw new u("Session expired. Please re-authenticate.");
+      throw new l("Session expired. Please re-authenticate.");
     }
     if (a.ok || await this.throwApiError(a), a.status !== 204)
       return a.json();
@@ -113,18 +132,18 @@ class f {
     const r = t?.error.message ?? e.statusText, o = t?.error.code;
     switch (e.status) {
       case 401:
-        throw new u(r, o);
+        throw new l(r, o);
       case 403:
-        throw new d(r, o);
+        throw new T(r, o);
       case 404:
-        throw new g(r, o);
+        throw new y(r, o);
       default:
         throw new c(r, e.status, o);
     }
   }
 }
-const T = 6e4;
-class y {
+const m = 6e4;
+class E {
   constructor(e) {
     n(this, "storage");
     n(this, "refreshFn");
@@ -139,7 +158,7 @@ class y {
    */
   async getAccessToken() {
     const e = await this.storage.getTokens();
-    return e ? e.expiresAt - Date.now() < T ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
+    return e ? e.expiresAt - Date.now() < m ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
   }
   /**
    * Called by `HttpClient` when a 401 is received.
@@ -165,13 +184,13 @@ class y {
   // ---------------------------------------------------------------------------
   performRefresh(e) {
     return this.refreshPromise ? this.refreshPromise : (this.refreshPromise = this.refreshFn(e).then(async (t) => (await this.storage.setTokens(t), await this.onTokenRefreshed?.(t), t)).catch((t) => {
-      throw this.storage.clearTokens(), new u("Token refresh failed. Please re-authenticate.");
+      throw this.storage.clearTokens(), new l("Token refresh failed. Please re-authenticate.");
     }).finally(() => {
       this.refreshPromise = null;
     }), this.refreshPromise);
   }
 }
-class m {
+class v {
   constructor() {
     n(this, "tokens", null);
   }
@@ -185,10 +204,26 @@ class m {
     this.tokens = null;
   }
 }
-function l(s) {
+function p(s) {
   return new Date(s).getTime();
 }
-class E {
+function x(s) {
+  return async (e) => {
+    const t = await fetch(`${s}/v1/auth/token/refresh`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ refresh_token: e })
+    });
+    if (!t.ok) throw new Error("Token refresh failed");
+    const r = await t.json();
+    return {
+      accessToken: r.access_token,
+      refreshToken: r.refresh_token,
+      expiresAt: p(r.expires_at)
+    };
+  };
+}
+class S {
   /** @internal */
   constructor(e, t) {
     this.http = e, this.tokenManager = t;
@@ -226,30 +261,6 @@ class E {
     const t = await this.http.post("/v1/auth/login/google", e);
     return await this.storeTokens(t), t;
   }
-  /**
-   * Log in using an API key to obtain a seller token.
-   * Provide only `key` for read-only (`view`) access.
-   * Provide both `key` and `secret` for read/write (`full`) access.
-   * Tokens are stored automatically after successful authentication.
-   *
-   * Use this before calling `lw.seller.content.*` methods.
-   *
-   * @param body - API key credentials.
-   * @returns The authentication token response.
-   *
-   * @example
-   * ```ts
-   * // View access (read-only) — sufficient for seller.content.list/search/get
-   * await lw.auth.loginWithApiKey({ key: 'your_api_key' })
-   *
-   * // Full access (read/write)
-   * await lw.auth.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
-   * ```
-   */
-  async loginWithApiKey(e) {
-    const t = await this.http.post("/v1/auth/login/api-key", e);
-    return await this.storeTokens(t), t;
-  }
   /**
    * Request a password reset code to be sent to the buyer's email address.
    *
@@ -292,11 +303,11 @@ class E {
     await this.tokenManager.setTokens({
       accessToken: e.access_token,
       refreshToken: e.refresh_token,
-      expiresAt: l(e.expires_at)
+      expiresAt: p(e.expires_at)
     });
   }
 }
-class A {
+class b {
   /** @internal */
   constructor(e) {
     this.http = e;
@@ -319,7 +330,7 @@ class A {
     return this.http.get("/v1/config/public");
   }
 }
-class v {
+class U {
   constructor(e) {
     this.http = e;
   }
@@ -328,18 +339,24 @@ class v {
    * authenticated buyer (or a generic access response when unauthenticated).
    *
    * @param id - The content ID.
-   * @param userId - Optional user ID to check a specific user's access status.
-   * @returns The content item with access information.
+   * @returns The content item with access information. `content_body` and
+   * `teaser` are returned as plain UTF-8 text — the SDK decodes base64
+   * transparently so you can render them directly.
+   *
+   * @example
+   * ```ts
+   * const result = await lw.content.getWithAccess('article-123')
+   * if (result.access_info.next_required_action === 'view_content') {
+   *   renderMarkdown(result.content_body ?? '')
+   * }
+   * ```
    */
-  async getWithAccess(e, t) {
-    const r = {};
-    return t !== void 0 && (r.user_id = t), this.http.get(
-      `/v1/content/${e}/with-access`,
-      Object.keys(r).length > 0 ? r : void 0
-    );
+  async getWithAccess(e) {
+    const t = await this.http.get(`/v1/content/${e}/with-access`);
+    return u(t);
   }
 }
-class x {
+class P {
   constructor(e) {
     this.http = e;
   }
@@ -370,7 +387,7 @@ class x {
     return this.http.get(`/v1/purchases/${e}`);
   }
 }
-class U {
+class R {
   /** @internal */
   constructor(e) {
     this.http = e;
@@ -379,7 +396,8 @@ class U {
    * List all content for the authenticated seller's store.
    * Requires a token with at least `view` permission.
    *
-   * @returns Array of content items.
+   * @returns Array of content items. `teaser` is returned as plain text —
+   * the SDK decodes base64 automatically.
    *
    * @example
    * ```ts
@@ -387,7 +405,7 @@ class U {
    * ```
    */
   async list() {
-    return this.http.get("/v1/seller/content");
+    return (await this.http.get("/v1/seller/content")).map(u);
   }
   /**
    * Search content by title, URI, and/or metadata (AND logic).
@@ -395,43 +413,77 @@ class U {
    * Requires a token with at least `view` permission.
    *
    * @param body - Search criteria (title, uri, and/or metadata).
-   * @returns Array of matching content items.
+   * @returns Array of matching content items. `teaser` is returned as plain
+   * text — the SDK decodes base64 automatically.
    *
    * @example
    * ```ts
    * const results = await lw.seller.content.search({ title: 'intro' })
    * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })
+   * const byId = await lw.seller.content.search({ external_identifier: 'vimeo:123456789' })
    * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
    * ```
    */
   async search(e) {
-    return this.http.post("/v1/seller/content/search", e);
+    return (await this.http.post("/v1/seller/content/search", e)).map(u);
   }
   /**
    * Get a single content item by ID.
    * Requires a token with at least `view` permission.
    *
    * @param id - The content ID.
-   * @returns The content item.
+   * @returns The content item. `content_body` and `teaser` are returned as
+   * plain UTF-8 text — the SDK decodes base64 automatically so you can render
+   * them directly without calling `atob()`.
    *
    * @example
    * ```ts
    * const item = await lw.seller.content.get('content-id')
+   * // item.content_body is plain markdown — no atob() needed
    * ```
    */
   async get(e) {
-    return this.http.get(`/v1/seller/content/${e}`);
+    const t = await this.http.get(`/v1/seller/content/${e}`);
+    return u(t);
   }
 }
-class S {
+class F {
   /** @internal */
-  constructor(e) {
+  constructor(e, t) {
     /** Seller content: list, search, and get by API key. */
     n(this, "content");
-    this.content = new U(e);
+    this.http = e, this.tokenManager = t, this.content = new R(e);
+  }
+  /**
+   * Log in using an API key to obtain a seller token.
+   * Provide only `key` for read-only (`view`) access.
+   * Provide both `key` and `secret` for read/write (`full`) access.
+   * Tokens are stored automatically after successful authentication.
+   *
+   * Use this before calling `lw.seller.content.*` methods.
+   *
+   * @param body - API key credentials.
+   * @returns The authentication token response.
+   *
+   * @example
+   * ```ts
+   * // View access (read-only) — sufficient for seller.content.list/search/get
+   * await lw.seller.loginWithApiKey({ key: 'your_api_key' })
+   *
+   * // Full access (read/write)
+   * await lw.seller.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
+   * ```
+   */
+  async loginWithApiKey(e) {
+    const t = await this.http.post("/v1/auth/login/api-key", e);
+    return await this.tokenManager.setTokens({
+      accessToken: t.access_token,
+      refreshToken: t.refresh_token,
+      expiresAt: p(t.expires_at)
+    }), t;
   }
 }
-class b {
+class N {
   constructor(e) {
     this.http = e;
   }
@@ -470,7 +522,7 @@ class b {
     return this.http.get(`/v1/wallet/payment-status/${e}`);
   }
 }
-class P {
+class _ {
   constructor(e) {
     this.http = e;
   }
@@ -489,37 +541,24 @@ class P {
     return this.http.get(`/v1/checkout/state/${e}`);
   }
 }
-function C(s) {
-  const e = s.baseUrl ?? "https://api.ledewire.com", t = s.storage ?? new m(), r = new y({
+function M(s) {
+  const e = s.baseUrl ?? d, t = s.storage ?? new v(), r = new E({
     storage: t,
-    refreshFn: async (h) => {
-      const i = await fetch(`${e}/v1/auth/token/refresh`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ refresh_token: h })
-      });
-      if (!i.ok) throw new Error("Token refresh failed");
-      const a = await i.json();
-      return {
-        accessToken: a.access_token,
-        refreshToken: a.refresh_token,
-        expiresAt: l(a.expires_at)
-      };
-    },
+    refreshFn: x(e),
     ...s.onAuthExpired !== void 0 && { onAuthExpired: s.onAuthExpired }
-  }), o = new f({
+  }), o = new A({
     baseUrl: e,
     getAccessToken: () => r.getAccessToken(),
     onUnauthorized: () => r.handleUnauthorized()
   });
-  return new N(o, r, s);
+  return new C(o, r, s);
 }
-class N {
+class C {
   /** @internal */
   constructor(e, t, r) {
     /** Platform-level public configuration (no auth required) */
     n(this, "config");
-    /** Buyer authentication: email/password signup/login, Google, password reset */
+    /** Buyer authentication: email/password signup/login, Google OAuth, password reset */
     n(this, "auth");
     /** Checkout state machine: determines next action for a piece of content */
     n(this, "checkout");
@@ -529,40 +568,47 @@ class N {
     n(this, "purchases");
     /** Public content with per-user access information */
     n(this, "content");
-    /** Seller content: list, search, and get (requires API key view token) */
+    /** Seller operations: API key login, content list/search/get */
     n(this, "seller");
-    this._http = e, this._tokenManager = t, this._config = r, this.config = new A(e), this.auth = new E(e, t), this.checkout = new P(e), this.wallet = new b(e), this.purchases = new x(e), this.content = new v(e), this.seller = new S(e);
+    this._http = e, this._tokenManager = t, this._config = r, this.config = new b(e), this.auth = new S(e, t), this.checkout = new _(e), this.wallet = new N(e), this.purchases = new P(e), this.content = new U(e), this.seller = new F(e, t);
   }
 }
-const R = "lw:tokens";
-function B(s = R) {
+const $ = "lw:tokens";
+function f(s, e = $) {
   return {
     getTokens() {
-      const e = localStorage.getItem(s);
-      if (!e) return null;
+      const t = s.getItem(e);
+      if (!t) return null;
       try {
-        return JSON.parse(e);
+        return JSON.parse(t);
       } catch {
         return null;
       }
     },
-    setTokens(e) {
-      localStorage.setItem(s, JSON.stringify(e));
+    setTokens(t) {
+      s.setItem(e, JSON.stringify(t));
     },
     clearTokens() {
-      localStorage.removeItem(s);
+      s.removeItem(e);
     }
   };
 }
+function j(s) {
+  return f(localStorage, s);
+}
+function z(s) {
+  return f(sessionStorage, s);
+}
 export {
-  u as AuthError,
-  d as ForbiddenError,
+  l as AuthError,
+  T as ForbiddenError,
   c as LedewireError,
-  m as MemoryTokenStorage,
-  g as NotFoundError,
-  $ as PurchaseError,
-  C as init,
-  B as localStorageAdapter,
-  l as parseExpiresAt
+  v as MemoryTokenStorage,
+  y as NotFoundError,
+  q as PurchaseError,
+  M as init,
+  j as localStorageAdapter,
+  p as parseExpiresAt,
+  z as sessionStorageAdapter
 };
 //# sourceMappingURL=index.js.map