@ledewire/browser 0.7.0 → 0.8.1

package/dist/index.js

@@ -1,705 +1,479 @@
-var f = Object.defineProperty;
-var k = (s, e, t) => e in s ? f(s, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : s[e] = t;
-var n = (s, e, t) => k(s, typeof e != "symbol" ? e + "" : e, t);
-function w(s) {
-  return atob(s);
+//#region ../core/src/base64.ts
+function e(e) {
+	return atob(e);
 }
-function u(s) {
-  return {
-    ...s,
-    ...typeof s.content_body == "string" && {
-      content_body: w(s.content_body)
-    },
-    ...typeof s.teaser == "string" && { teaser: w(s.teaser) }
-  };
+function t(t) {
+	return {
+		...t,
+		...typeof t.content_body == "string" && { content_body: e(t.content_body) },
+		...typeof t.teaser == "string" && { teaser: e(t.teaser) }
+	};
 }
-class c extends Error {
-  constructor(t, r, o) {
-    super(t);
-    /** HTTP status code returned by the API (e.g. 400, 401, 404, 422). */
-    n(this, "statusCode");
-    /** Machine-readable error code from the API error body, if present. */
-    n(this, "code");
-    this.name = "LedewireError", this.statusCode = r, this.code = o, Object.setPrototypeOf(this, new.target.prototype);
-  }
+//#endregion
+//#region \0@oxc-project+runtime@0.137.0/helpers/esm/typeof.js
+function n(e) {
+	"@babel/helpers - typeof";
+	return n = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
+		return typeof e;
+	} : function(e) {
+		return e && typeof Symbol == "function" && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e;
+	}, n(e);
 }
-class l extends c {
-  constructor(e, t) {
-    super(e, 401, t), this.name = "AuthError";
-  }
+//#endregion
+//#region \0@oxc-project+runtime@0.137.0/helpers/esm/toPrimitive.js
+function r(e, t) {
+	if (n(e) != "object" || !e) return e;
+	var r = e[Symbol.toPrimitive];
+	if (r !== void 0) {
+		var i = r.call(e, t || "default");
+		if (n(i) != "object") return i;
+		throw TypeError("@@toPrimitive must return a primitive value.");
+	}
+	return (t === "string" ? String : Number)(e);
 }
-class y extends c {
-  constructor(e, t) {
-    super(e, 403, t), this.name = "ForbiddenError";
-  }
+//#endregion
+//#region \0@oxc-project+runtime@0.137.0/helpers/esm/toPropertyKey.js
+function i(e) {
+	var t = r(e, "string");
+	return n(t) == "symbol" ? t : t + "";
 }
-class T extends c {
-  constructor(e, t) {
-    super(e, 404, t), this.name = "NotFoundError";
-  }
+//#endregion
+//#region \0@oxc-project+runtime@0.137.0/helpers/esm/defineProperty.js
+function a(e, t, n) {
+	return (t = i(t)) in e ? Object.defineProperty(e, t, {
+		value: n,
+		enumerable: !0,
+		configurable: !0,
+		writable: !0
+	}) : e[t] = n, e;
 }
-class M extends c {
-  constructor(e, t, r) {
-    super(e, t, r), this.name = "PurchaseError";
-  }
-}
-const d = "https://api.ledewire.com";
-class m {
-  constructor(e = {}) {
-    n(this, "baseUrl");
-    n(this, "getAccessToken");
-    n(this, "onUnauthorized");
-    this.baseUrl = (e.baseUrl ?? d).replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
-  }
-  /**
-   * GET request with optional query parameters.
-   * @param path - API path (e.g. `/v1/wallet/balance`)
-   * @param params - Query string parameters. `undefined` values are omitted; numbers are coerced to strings.
-   */
-  async get(e, t) {
-    return this.request("GET", this.buildUrl(e, t));
-  }
-  /**
-   * POST request.
-   * @param path - API path
-   * @param body - Request body (JSON-serialized)
-   * @param params - Optional query string parameters. `undefined` values are omitted; numbers are coerced to strings.
-   */
-  async post(e, t, r) {
-    return this.request("POST", this.buildUrl(e, r), t);
-  }
-  /**
-   * PUT request.
-   * @param path - API path
-   * @param body - Request body (JSON-serialized)
-   */
-  async put(e, t) {
-    return this.request("PUT", this.buildUrl(e), t);
-  }
-  /**
-   * PATCH request.
-   * @param path - API path
-   * @param body - Partial update body (JSON-serialized)
-   */
-  async patch(e, t) {
-    return this.request("PATCH", this.buildUrl(e), t);
-  }
-  /**
-   * DELETE request.
-   * @param path - API path
-   */
-  async delete(e) {
-    return this.request("DELETE", this.buildUrl(e));
-  }
-  // ---------------------------------------------------------------------------
-  // Private helpers
-  // ---------------------------------------------------------------------------
-  buildUrl(e, t) {
-    const r = `${this.baseUrl}${e}`;
-    if (!t) return r;
-    const o = Object.entries(t).filter(
-      (i) => i[1] !== void 0
-    );
-    if (o.length === 0) return r;
-    const h = new URLSearchParams(o.map(([i, a]) => [i, String(a)]));
-    return `${r}?${h.toString()}`;
-  }
-  async request(e, t, r, o = !1) {
-    const h = await this.getAccessToken(), i = {
-      "Content-Type": "application/json",
-      Accept: "application/json"
-    };
-    h && (i.Authorization = `Bearer ${h}`);
-    const a = await fetch(t, {
-      method: e,
-      headers: i,
-      ...r !== void 0 && { body: JSON.stringify(r) }
-    });
-    if (a.status === 401 && !o) {
-      if (await this.onUnauthorized())
-        return this.request(e, t, r, !0);
-      throw new l("Session expired. Please re-authenticate.");
-    }
-    if (a.ok || await this.throwApiError(a), a.status !== 204)
-      return a.json();
-  }
-  async throwApiError(e) {
-    let t;
-    try {
-      t = await e.json();
-    } catch {
-    }
-    const r = t?.error.message ?? e.statusText, o = t?.error.code;
-    switch (e.status) {
-      case 401:
-        throw new l(r, o);
-      case 403:
-        throw new y(r, o);
-      case 404:
-        throw new T(r, o);
-      default:
-        throw new c(r, e.status, o);
-    }
-  }
-}
-const A = 6e4;
-class E {
-  constructor(e) {
-    n(this, "storage");
-    n(this, "refreshFn");
-    n(this, "onTokenRefreshed");
-    n(this, "onAuthExpired");
-    n(this, "refreshPromise", null);
-    this.storage = e.storage, this.refreshFn = e.refreshFn, this.onTokenRefreshed = e.onTokenRefreshed, this.onAuthExpired = e.onAuthExpired;
-  }
-  /**
-   * Returns a valid access token, refreshing proactively if needed.
-   * Returns `null` if no tokens are stored (user not authenticated).
-   */
-  async getAccessToken() {
-    const e = await this.storage.getTokens();
-    return e ? e.expiresAt - Date.now() < A ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
-  }
-  /**
-   * Called by `HttpClient` when a 401 is received.
-   * Attempts one refresh; returns the new access token or null.
-   */
-  async handleUnauthorized() {
-    const e = await this.storage.getTokens();
-    if (!e)
-      return await this.onAuthExpired?.(), null;
-    const t = await this.performRefresh(e.refreshToken);
-    return t || await this.onAuthExpired?.(), t?.accessToken ?? null;
-  }
-  /** Store new tokens after a successful login or signup. */
-  async setTokens(e) {
-    await this.storage.setTokens(e);
-  }
-  /** Clear all stored tokens (call on logout). */
-  async clearTokens() {
-    await this.storage.clearTokens();
-  }
-  // ---------------------------------------------------------------------------
-  // Private
-  // ---------------------------------------------------------------------------
-  performRefresh(e) {
-    return this.refreshPromise ? this.refreshPromise : (this.refreshPromise = this.refreshFn(e).then(async (t) => (await this.storage.setTokens(t), await this.onTokenRefreshed?.(t), t)).catch((t) => {
-      throw this.storage.clearTokens(), new l("Token refresh failed. Please re-authenticate.");
-    }).finally(() => {
-      this.refreshPromise = null;
-    }), this.refreshPromise);
-  }
-}
-class U {
-  constructor() {
-    n(this, "tokens", null);
-  }
-  getTokens() {
-    return this.tokens;
-  }
-  setTokens(e) {
-    this.tokens = e;
-  }
-  clearTokens() {
-    this.tokens = null;
-  }
-}
-function p(s) {
-  return new Date(s).getTime();
-}
-function v(s) {
-  return async (e) => {
-    const t = await fetch(`${s}/v1/auth/token/refresh`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ refresh_token: e })
-    });
-    if (!t.ok) throw new Error("Token refresh failed");
-    const r = await t.json();
-    return {
-      accessToken: r.access_token,
-      refreshToken: r.refresh_token,
-      expiresAt: p(r.expires_at)
-    };
-  };
-}
-class x {
-  /** @internal */
-  constructor(e, t) {
-    this.http = e, this.tokenManager = t;
-  }
-  /**
-   * Register a new buyer account with email and password.
-   * Tokens are stored automatically after successful signup.
-   *
-   * @param body - Signup credentials and display name.
-   * @returns The authentication token response.
-   */
-  async signup(e) {
-    const t = await this.http.post("/v1/auth/signup", e);
-    return await this.storeTokens(t), t;
-  }
-  /**
-   * Log in with email and password.
-   * Tokens are stored automatically after successful login.
-   *
-   * @param body - Email and password credentials.
-   * @returns The authentication token response.
-   */
-  async loginWithEmail(e) {
-    const t = await this.http.post("/v1/auth/login/email", e);
-    return await this.storeTokens(t), t;
-  }
-  /**
-   * Log in with a Google ID token obtained from the Google OAuth flow.
-   * Tokens are stored automatically after successful login.
-   *
-   * @param body - The Google ID token.
-   * @returns The authentication token response.
-   */
-  async loginWithGoogle(e) {
-    const t = await this.http.post("/v1/auth/login/google", e);
-    return await this.storeTokens(t), t;
-  }
-  /**
-   * Log in using a buyer API key and secret.
-   * Returns a buyer-scoped JWT, stored automatically after successful authentication.
-   *
-   * Primarily useful when building buyer-facing dashboards where the user
-   * has created a named API key and wishes to authenticate with it programmatically,
-   * or for agent workflows running inside a browser context.
-   *
-   * @param body - The buyer API key and secret.
-   * @returns The authentication token response.
-   *
-   * @example
-   * ```ts
-   * await lw.auth.loginWithBuyerApiKey({
-   *   key: 'bktst_abc123',
-   *   secret: 'deadbeef...',
-   * })
-   * ```
-   */
-  async loginWithBuyerApiKey(e) {
-    const t = await this.http.post("/v1/auth/login/buyer-api-key", e);
-    return await this.storeTokens(t), t;
-  }
-  /**
-   * Request a password reset code to be sent to the buyer's email address.
-   *
-   * The response is intentionally ambiguous — if the email does not exist,
-   * the API returns the same success message to prevent account enumeration.
-   *
-   * @param body - The buyer's email address.
-   * @returns A response with a confirmation message.
-   *
-   * @example
-   * ```ts
-   * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })
-   * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }
-   * ```
-   */
-  async requestPasswordReset(e) {
-    return this.http.post("/v1/auth/password/reset-request", e);
-  }
-  /**
-   * Reset a buyer's password using the code delivered to their email.
-   *
-   * Obtain the reset code first by calling `requestPasswordReset()`.
-   *
-   * @param body - Email address, 6-digit reset code, and the new password.
-   * @returns A response with a confirmation message.
-   *
-   * @example
-   * ```ts
-   * await lw.auth.resetPassword({
-   *   email: 'buyer@example.com',
-   *   reset_code: '123456',
-   *   password: 'new-secure-password',
-   * })
-   * ```
-   */
-  async resetPassword(e) {
-    return this.http.post("/v1/auth/password/reset", e);
-  }
-  async storeTokens(e) {
-    await this.tokenManager.setTokens({
-      accessToken: e.access_token,
-      refreshToken: e.refresh_token,
-      expiresAt: p(e.expires_at)
-    });
-  }
-}
-class b {
-  /** @internal */
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Returns platform-level public configuration.
-   * No authentication required — safe to call before the user has signed in.
-   *
-   * Use `google_client_id` to initialise the Google Identity Services library
-   * on the storefront login page without requiring a prior authenticated call.
-   *
-   * @example
-   * ```ts
-   * const lw = init({ apiKey: 'your_api_key' })
-   * const { google_client_id } = await lw.config.getPublic()
-   * google.accounts.id.initialize({ client_id: google_client_id, callback })
-   * ```
-   */
-  async getPublic() {
-    return this.http.get("/v1/config/public");
-  }
-}
-class S {
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Returns a content item together with access information for the
-   * authenticated buyer (or a generic access response when unauthenticated).
-   *
-   * @param id - The content ID.
-   * @returns The content item with access information. `content_body` and
-   * `teaser` are returned as plain UTF-8 text — the SDK decodes base64
-   * transparently so you can render them directly.
-   *
-   * @example
-   * ```ts
-   * const result = await lw.content.getWithAccess('article-123')
-   * if (result.access_info.next_required_action === 'view_content') {
-   *   renderMarkdown(result.content_body ?? '')
-   * }
-   * ```
-   */
-  async getWithAccess(e) {
-    const t = await this.http.get(
-      `/v1/content/${encodeURIComponent(e)}/with-access`
-    );
-    return u(t);
-  }
-}
-class P {
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Completes a content purchase using the buyer's wallet balance.
-   *
-   * @param body - The content ID and expected price in cents.
-   * @returns The completed purchase record.
-   */
-  async create(e) {
-    return this.http.post("/v1/purchases", e);
-  }
-  /**
-   * Returns all purchases made by the authenticated buyer.
-   *
-   * @returns A list of purchase records, newest first.
-   */
-  async list() {
-    return this.http.get("/v1/purchases");
-  }
-  /**
-   * Returns a single purchase by ID.
-   *
-   * @param id - The purchase ID.
-   * @returns The purchase record.
-   */
-  async get(e) {
-    return this.http.get(`/v1/purchases/${encodeURIComponent(e)}`);
-  }
-}
-class R {
-  /** @internal */
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * List all content for the authenticated seller's store.
-   * Requires a token with at least `view` permission.
-   *
-   * @returns Array of content items. `teaser` is returned as plain text —
-   * the SDK decodes base64 automatically.
-   *
-   * @example
-   * ```ts
-   * const items = await lw.seller.content.list()
-   * ```
-   */
-  async list() {
-    return (await this.http.get("/v1/seller/content")).map(u);
-  }
-  /**
-   * Search content by title, URI, and/or metadata (AND logic).
-   * At least one criterion must be supplied.
-   * Requires a token with at least `view` permission.
-   *
-   * @param body - Search criteria (title, uri, and/or metadata).
-   * @returns Array of matching content items. `teaser` is returned as plain
-   * text — the SDK decodes base64 automatically.
-   *
-   * @example
-   * ```ts
-   * const results = await lw.seller.content.search({ title: 'intro' })
-   * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })
-   * const byId = await lw.seller.content.search({ external_identifier: 'vimeo:123456789' })
-   * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })
-   * ```
-   */
-  async search(e) {
-    return (await this.http.post("/v1/seller/content/search", e)).map(u);
-  }
-  /**
-   * Get a single content item by ID.
-   * Requires a token with at least `view` permission.
-   *
-   * @param id - The content ID.
-   * @returns The content item. `content_body` and `teaser` are returned as
-   * plain UTF-8 text — the SDK decodes base64 automatically so you can render
-   * them directly without calling `atob()`.
-   *
-   * @example
-   * ```ts
-   * const item = await lw.seller.content.get('content-id')
-   * // item.content_body is plain markdown — no atob() needed
-   * ```
-   */
-  async get(e) {
-    const t = await this.http.get(`/v1/seller/content/${encodeURIComponent(e)}`);
-    return u(t);
-  }
-}
-class C {
-  /** @internal */
-  constructor(e, t) {
-    /** Seller content: list, search, and get by API key. */
-    n(this, "content");
-    this.http = e, this.tokenManager = t, this.content = new R(e);
-  }
-  /**
-   * Log in using an API key to obtain a seller token.
-   * Provide only `key` for read-only (`view`) access.
-   * Provide both `key` and `secret` for read/write (`full`) access.
-   * Tokens are stored automatically after successful authentication.
-   *
-   * Use this before calling `lw.seller.content.*` methods.
-   *
-   * @param body - API key credentials.
-   * @returns The authentication token response.
-   *
-   * @example
-   * ```ts
-   * // View access (read-only) — sufficient for seller.content.list/search/get
-   * await lw.seller.loginWithApiKey({ key: 'your_api_key' })
-   *
-   * // Full access (read/write)
-   * await lw.seller.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })
-   * ```
-   */
-  async loginWithApiKey(e) {
-    const t = await this.http.post("/v1/auth/login/api-key", e);
-    return await this.tokenManager.setTokens({
-      accessToken: t.access_token,
-      refreshToken: t.refresh_token,
-      expiresAt: p(t.expires_at)
-    }), t;
-  }
-}
-class N {
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Returns the authenticated buyer's current wallet balance.
-   *
-   * @returns The current wallet balance in cents.
-   */
-  async balance() {
-    return this.http.get("/v1/wallet/balance");
-  }
-  /**
-   * Returns the authenticated buyer's wallet transaction history, newest first.
-   *
-   * @returns A list of completed wallet transaction entries.
-   */
-  async transactions() {
-    return this.http.get("/v1/wallet/transactions");
-  }
-  /**
-   * Creates a payment session for funding the buyer's wallet.
-   *
-   * @param body - The amount and currency to fund.
-   * @returns Payment session details for use with the payment provider widget.
-   */
-  async createPaymentSession(e) {
-    return this.http.post("/v1/wallet/payment-session", e);
-  }
-  /**
-   * Polls the status of a wallet funding payment session.
-   *
-   * @param sessionId - The session ID returned by `createPaymentSession`.
-   * @returns The current payment status.
-   */
-  async getPaymentStatus(e) {
-    return this.http.get(
-      `/v1/wallet/payment-status/${encodeURIComponent(e)}`
-    );
-  }
-}
-class F {
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Returns the authenticated buyer's checkout readiness for a given piece of
-   * content. Indicates whether the buyer needs to authenticate, fund their
-   * wallet, or purchase before accessing the content.
-   *
-   * Works without authentication — returns anonymous checkout state when the
-   * buyer is not logged in.
-   *
-   * @param contentId - The content item ID.
-   * @returns The checkout state, including what action is required next.
-   */
-  async state(e) {
-    return this.http.get(
-      `/v1/checkout/state/${encodeURIComponent(e)}`
-    );
-  }
+//#endregion
+//#region ../core/src/errors.ts
+var o, s = Symbol.for("@ledewire/error-brands");
+o = Symbol.hasInstance;
+var c = class extends Error {
+	constructor(e, t, n, r, i) {
+		super(e), a(this, "statusCode", void 0), a(this, "code", void 0), a(this, "type", void 0), a(this, "details", void 0), this.name = "LedewireError", this.statusCode = t, this.code = n, this.type = r, this.details = i, Object.setPrototypeOf(this, new.target.prototype);
+		let o = [], c = new.target;
+		for (; typeof c == "function";) {
+			let e = c.brand;
+			typeof e == "string" && Object.prototype.hasOwnProperty.call(c, "brand") && o.push(e), c = Object.getPrototypeOf(c);
+		}
+		Object.defineProperty(this, s, {
+			value: o,
+			enumerable: !1,
+			configurable: !0
+		});
+	}
+	static [o](e) {
+		if (Function.prototype[Symbol.hasInstance].call(this, e)) return !0;
+		if (!e || typeof e != "object" && typeof e != "function") return !1;
+		let t = e[s];
+		return Array.isArray(t) && t.includes(this.brand);
+	}
+};
+a(c, "brand", "LedewireError");
+var l = class extends c {
+	constructor(e, t, n, r) {
+		super(e, 401, t, n, r), this.name = "AuthError";
+	}
+};
+a(l, "brand", "AuthError");
+var u = class extends c {
+	constructor(e, t, n, r) {
+		super(e, 403, t, n, r), this.name = "ForbiddenError";
+	}
+};
+a(u, "brand", "ForbiddenError");
+var d = class extends c {
+	constructor(e, t, n, r) {
+		super(e, 404, t, n, r), this.name = "NotFoundError";
+	}
+};
+a(d, "brand", "NotFoundError");
+var f = class extends c {
+	constructor(e, t, n, r, i) {
+		super(e, t, n, r, i), this.name = "PurchaseError";
+	}
+};
+a(f, "brand", "PurchaseError");
+var p = class extends c {
+	constructor(e, t, n) {
+		super(e, 402, n, "daily_spend_cap_reached"), a(this, "capCents", void 0), a(this, "spentCents", void 0), a(this, "remainingCents", void 0), a(this, "resetsAt", void 0), a(this, "bulkExempt", void 0), this.name = "SpendCapReachedError", this.capCents = t.capCents, this.spentCents = t.spentCents, this.remainingCents = t.remainingCents, this.resetsAt = t.resetsAt, this.bulkExempt = t.bulkExempt, Object.setPrototypeOf(this, new.target.prototype);
+	}
+};
+a(p, "brand", "SpendCapReachedError");
+//#endregion
+//#region ../core/src/spend-cap.ts
+function m(e) {
+	if (!e || typeof e != "object") return null;
+	let t = e, n = t.error;
+	if (!n || typeof n != "object") return null;
+	let r = n;
+	if (r.type !== "daily_spend_cap_reached") return null;
+	let i = t.cap_cents, a = t.spent_cents, o = t.remaining_cents, s = t.resets_at, c = t.bulk_exempt;
+	if (typeof i != "number" || typeof a != "number" || typeof o != "number" || typeof s != "string" || typeof c != "boolean") return null;
+	let l = typeof r.message == "string" ? r.message : "Daily spend cap reached.", u = typeof r.code == "number" ? r.code : void 0;
+	return new p(l, {
+		capCents: i,
+		spentCents: a,
+		remainingCents: o,
+		resetsAt: s,
+		bulkExempt: c
+	}, u);
 }
-class _ {
-  /** @internal */
-  constructor(e) {
-    this.http = e;
-  }
-  /**
-   * Returns all buyer API keys for the authenticated user.
-   * The `secret` is never included in list responses.
-   *
-   * @returns Array of API key records.
-   */
-  async list() {
-    return this.http.get("/v1/user/api-keys");
-  }
-  /**
-   * Creates a new buyer API key.
-   *
-   * The `secret` in the response is shown exactly once and cannot be retrieved
-   * again. Store it immediately in a secrets manager before discarding the
-   * response object.
-   *
-   * @param body - Name and optional spend ceiling for the new key.
-   * @returns The new key's public identifier and one-time secret.
-   *
-   * @example
-   * ```ts
-   * const { key, secret } = await client.user.apiKeys.create({
-   *   name: 'production-agent',
-   *   spending_limit_cents: 5000, // $50 cap
-   * })
-   * // ⚠️ Store secret NOW — it is shown once only
-   * process.env.LEDEWIRE_BUYER_SECRET = secret
-   * ```
-   */
-  async create(e) {
-    return this.http.post("/v1/user/api-keys", e);
-  }
-  /**
-   * Revokes (permanently deletes) a buyer API key by ID.
-   *
-   * Any agent currently using this key will receive `401` on its next
-   * token refresh. Revocation takes effect immediately.
-   *
-   * @param id - UUID of the API key to revoke.
-   */
-  async revoke(e) {
-    return this.http.delete(`/v1/user/api-keys/${encodeURIComponent(e)}`);
-  }
+function h(e, t) {
+	if (!e || typeof e != "object" || Array.isArray(e)) return {
+		message: t,
+		code: void 0,
+		type: void 0,
+		details: void 0
+	};
+	let { error: n, ...r } = e, i = Object.keys(r).length > 0 ? r : void 0;
+	if (typeof n == "string") return {
+		message: n,
+		code: void 0,
+		type: void 0,
+		details: i
+	};
+	if (!n || typeof n != "object" || Array.isArray(n)) return {
+		message: t,
+		code: void 0,
+		type: void 0,
+		details: i
+	};
+	let a = n;
+	return {
+		message: typeof a.message == "string" ? a.message : t,
+		code: typeof a.code == "number" ? a.code : void 0,
+		type: typeof a.type == "string" ? a.type : void 0,
+		details: i
+	};
 }
-class $ {
-  /** @internal */
-  constructor(e) {
-    /**
-     * Buyer API key management: create, list, and revoke named API keys.
-     * Keys are used by autonomous agents to authenticate without a username/password.
-     */
-    n(this, "apiKeys");
-    this.apiKeys = new _(e);
-  }
+var g = class {
+	constructor(e = {}) {
+		a(this, "baseUrl", void 0), a(this, "getAccessToken", void 0), a(this, "onUnauthorized", void 0), this.baseUrl = (e.baseUrl ?? "https://api.ledewire.com").replace(/\/$/, ""), this.getAccessToken = e.getAccessToken ?? (() => null), this.onUnauthorized = e.onUnauthorized ?? (() => null);
+	}
+	async get(e, t, n) {
+		return this.request("GET", this.buildUrl(e, t), void 0, n);
+	}
+	async post(e, t, n) {
+		return this.request("POST", this.buildUrl(e, n), t);
+	}
+	async put(e, t) {
+		return this.request("PUT", this.buildUrl(e), t);
+	}
+	async patch(e, t) {
+		return this.request("PATCH", this.buildUrl(e), t);
+	}
+	async delete(e) {
+		return this.request("DELETE", this.buildUrl(e));
+	}
+	async getRaw(e) {
+		return this.performRequest("GET", this.buildUrl(e), { Accept: "application/gzip, application/json" });
+	}
+	buildUrl(e, t) {
+		let n = `${this.baseUrl}${e}`;
+		if (!t) return n;
+		let r = Object.entries(t).filter((e) => e[1] !== void 0);
+		return r.length === 0 ? n : `${n}?${new URLSearchParams(r.map(([e, t]) => [e, String(t)])).toString()}`;
+	}
+	async request(e, t, n, r) {
+		let i = await this.performRequest(e, t, {
+			"Content-Type": "application/json",
+			Accept: "application/json"
+		}, n, !1, r);
+		if (i.status !== 204) return i.json();
+	}
+	async performRequest(e, t, n, r, i = !1, a) {
+		let o = a?.auth !== !1, s = o ? await this.getAccessToken() : null, c = { ...n };
+		s && (c.Authorization = `Bearer ${s}`);
+		let u = await fetch(t, {
+			method: e,
+			headers: c,
+			...r !== void 0 && { body: JSON.stringify(r) }
+		});
+		if (u.status === 401 && !i) {
+			if (o && await this.onUnauthorized()) return this.performRequest(e, t, n, r, !0, a);
+			throw new l("Session expired. Please re-authenticate.");
+		}
+		return u.ok || await this.throwApiError(u), u;
+	}
+	async throwApiError(e) {
+		let t;
+		try {
+			t = await e.json();
+		} catch {}
+		let n = m(t);
+		if (n) throw n;
+		let { message: r, code: i, type: a, details: o } = h(t, e.statusText);
+		switch (e.status) {
+			case 401: throw new l(r, i, a, o);
+			case 403: throw new u(r, i, a, o);
+			case 404: throw new d(r, i, a, o);
+			default: throw new c(r, e.status, i, a, o);
+		}
+	}
+}, _ = 6e4, v = class {
+	constructor(e) {
+		a(this, "storage", void 0), a(this, "refreshFn", void 0), a(this, "onTokenRefreshed", void 0), a(this, "onAuthExpired", void 0), a(this, "refreshPromise", null), this.storage = e.storage, this.refreshFn = e.refreshFn, this.onTokenRefreshed = e.onTokenRefreshed, this.onAuthExpired = e.onAuthExpired;
+	}
+	async getAccessToken() {
+		let e = await this.storage.getTokens();
+		return e ? e.expiresAt - Date.now() < _ ? (await this.performRefresh(e.refreshToken))?.accessToken ?? null : e.accessToken : null;
+	}
+	async handleUnauthorized() {
+		let e = await this.storage.getTokens();
+		if (!e) return await this.onAuthExpired?.(), null;
+		let t = await this.performRefresh(e.refreshToken);
+		return t || await this.onAuthExpired?.(), t?.accessToken ?? null;
+	}
+	async setTokens(e) {
+		await this.storage.setTokens(e);
+	}
+	async clearTokens() {
+		await this.storage.clearTokens();
+	}
+	performRefresh(e) {
+		return this.refreshPromise || (this.refreshPromise = this.refreshFn(e).then(async (e) => (await this.storage.setTokens(e), await this.onTokenRefreshed?.(e), e)).catch((e) => {
+			throw this.storage.clearTokens(), new l("Token refresh failed. Please re-authenticate.");
+		}).finally(() => {
+			this.refreshPromise = null;
+		})), this.refreshPromise;
+	}
+}, y = class {
+	constructor() {
+		a(this, "tokens", null);
+	}
+	getTokens() {
+		return this.tokens;
+	}
+	setTokens(e) {
+		this.tokens = e;
+	}
+	clearTokens() {
+		this.tokens = null;
+	}
+};
+function b(e) {
+	return new Date(e).getTime();
 }
-function j(s) {
-  const e = s.baseUrl ?? d, t = s.storage ?? new U(), r = new E({
-    storage: t,
-    refreshFn: v(e),
-    ...s.onAuthExpired !== void 0 && { onAuthExpired: s.onAuthExpired }
-  }), o = new m({
-    baseUrl: e,
-    getAccessToken: () => r.getAccessToken(),
-    onUnauthorized: () => r.handleUnauthorized()
-  });
-  return new B(o, r, s);
+function x(e) {
+	return async (t) => {
+		let n = await fetch(`${e}/v1/auth/token/refresh`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ refresh_token: t })
+		});
+		if (!n.ok) throw Error("Token refresh failed");
+		let r = await n.json();
+		return {
+			accessToken: r.access_token,
+			refreshToken: r.refresh_token,
+			expiresAt: b(r.expires_at)
+		};
+	};
 }
-class B {
-  /** @internal */
-  constructor(e, t, r) {
-    /** Platform-level public configuration (no auth required) */
-    n(this, "config");
-    /** Buyer authentication: email/password signup/login, Google OAuth, password reset */
-    n(this, "auth");
-    /** Checkout state machine: determines next action for a piece of content */
-    n(this, "checkout");
-    /** Wallet: balance, fund via payment session, transaction history */
-    n(this, "wallet");
-    /** Content purchases for the authenticated buyer */
-    n(this, "purchases");
-    /** Public content with per-user access information */
-    n(this, "content");
-    /** Seller operations: API key login, content list/search/get */
-    n(this, "seller");
-    /** Authenticated buyer account: API key management */
-    n(this, "user");
-    this._http = e, this._tokenManager = t, this._config = r, this.config = new b(e), this.auth = new x(e, t), this.checkout = new F(e), this.wallet = new N(e), this.purchases = new P(e), this.content = new S(e), this.seller = new C(e, t), this.user = new $(e);
-  }
+//#endregion
+//#region src/resources/auth.ts
+var S = class {
+	constructor(e, t) {
+		a(this, "http", void 0), a(this, "tokenManager", void 0), this.http = e, this.tokenManager = t;
+	}
+	async signup(e) {
+		let t = await this.http.post("/v1/auth/signup", e);
+		return await this.storeTokens(t), t;
+	}
+	async loginWithEmail(e) {
+		let t = await this.http.post("/v1/auth/login/email", e);
+		return await this.storeTokens(t), t;
+	}
+	async loginWithGoogle(e) {
+		let t = await this.http.post("/v1/auth/login/google", e);
+		return await this.storeTokens(t), t;
+	}
+	async loginWithBuyerApiKey(e) {
+		let t = await this.http.post("/v1/auth/login/buyer-api-key", e);
+		return await this.storeTokens(t), t;
+	}
+	async requestPasswordReset(e) {
+		return this.http.post("/v1/auth/password/reset-request", e);
+	}
+	async resetPassword(e) {
+		return this.http.post("/v1/auth/password/reset", e);
+	}
+	async storeTokens(e) {
+		await this.tokenManager.setTokens({
+			accessToken: e.access_token,
+			refreshToken: e.refresh_token,
+			expiresAt: b(e.expires_at)
+		});
+	}
+}, C = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async getPublic() {
+		return this.http.get("/v1/config/public");
+	}
+}, w = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async getWithAccess(e) {
+		return t(await this.http.get(`/v1/content/${encodeURIComponent(e)}/with-access`));
+	}
+}, T = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async create(e) {
+		return this.http.post("/v1/purchases", e);
+	}
+	async list() {
+		return this.http.get("/v1/purchases");
+	}
+	async get(e) {
+		return this.http.get(`/v1/purchases/${encodeURIComponent(e)}`);
+	}
+}, E = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async list() {
+		return (await this.http.get("/v1/seller/content")).map(t);
+	}
+	async search(e) {
+		return (await this.http.post("/v1/seller/content/search", e)).map(t);
+	}
+	async get(e) {
+		return t(await this.http.get(`/v1/seller/content/${encodeURIComponent(e)}`));
+	}
+}, D = class {
+	constructor(e, t) {
+		a(this, "http", void 0), a(this, "tokenManager", void 0), a(this, "content", void 0), this.http = e, this.tokenManager = t, this.content = new E(e);
+	}
+	async loginWithApiKey(e) {
+		let t = await this.http.post("/v1/auth/login/api-key", e);
+		return await this.tokenManager.setTokens({
+			accessToken: t.access_token,
+			refreshToken: t.refresh_token,
+			expiresAt: b(t.expires_at)
+		}), t;
+	}
+}, O = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async balance() {
+		return this.http.get("/v1/wallet/balance");
+	}
+	async transactions() {
+		return this.http.get("/v1/wallet/transactions");
+	}
+	async createPaymentSession(e) {
+		return this.http.post("/v1/wallet/payment-session", e);
+	}
+	async getPaymentStatus(e) {
+		return this.http.get(`/v1/wallet/payment-status/${encodeURIComponent(e)}`);
+	}
+}, k = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async state(e) {
+		return this.http.get(`/v1/checkout/state/${encodeURIComponent(e)}`);
+	}
+}, A = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async list() {
+		return this.http.get("/v1/user/api-keys");
+	}
+	async create(e) {
+		return this.http.post("/v1/user/api-keys", e);
+	}
+	async revoke(e) {
+		return this.http.delete(`/v1/user/api-keys/${encodeURIComponent(e)}`);
+	}
+}, j = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async get() {
+		return this.http.get("/v1/user/spend-cap");
+	}
+	async update(e) {
+		return this.http.patch("/v1/user/spend-cap", e);
+	}
+}, M = class {
+	constructor(e) {
+		a(this, "http", void 0), this.http = e;
+	}
+	async list() {
+		return this.http.get("/v1/mcp/keys");
+	}
+	async create(e) {
+		return this.http.post("/v1/mcp/keys", e);
+	}
+	async revoke(e) {
+		return this.http.delete(`/v1/mcp/keys/${encodeURIComponent(e)}`);
+	}
+}, N = class {
+	constructor(e) {
+		a(this, "apiKeys", void 0), a(this, "spendCap", void 0), a(this, "mcpKeys", void 0), this.apiKeys = new A(e), this.spendCap = new j(e), this.mcpKeys = new M(e);
+	}
+};
+//#endregion
+//#region src/client.ts
+function P(e) {
+	let t = e.baseUrl ?? "https://api.ledewire.com", n = new v({
+		storage: e.storage ?? new y(),
+		refreshFn: x(t),
+		...e.onAuthExpired !== void 0 && { onAuthExpired: e.onAuthExpired }
+	});
+	return new F(new g({
+		baseUrl: t,
+		getAccessToken: () => n.getAccessToken(),
+		onUnauthorized: () => n.handleUnauthorized()
+	}), n, e);
 }
-const I = "lw:tokens";
-function g(s, e = I) {
-  return {
-    getTokens() {
-      const t = s.getItem(e);
-      if (!t) return null;
-      try {
-        return JSON.parse(t);
-      } catch {
-        return null;
-      }
-    },
-    setTokens(t) {
-      s.setItem(e, JSON.stringify(t));
-    },
-    clearTokens() {
-      s.removeItem(e);
-    }
-  };
+var F = class {
+	constructor(e, t, n) {
+		a(this, "_http", void 0), a(this, "_tokenManager", void 0), a(this, "_config", void 0), a(this, "config", void 0), a(this, "auth", void 0), a(this, "checkout", void 0), a(this, "wallet", void 0), a(this, "purchases", void 0), a(this, "content", void 0), a(this, "seller", void 0), a(this, "user", void 0), this._http = e, this._tokenManager = t, this._config = n, this.config = new C(e), this.auth = new S(e, t), this.checkout = new k(e), this.wallet = new O(e), this.purchases = new T(e), this.content = new w(e), this.seller = new D(e, t), this.user = new N(e);
+	}
+}, I = "lw:tokens";
+function L(e, t = I) {
+	return {
+		getTokens() {
+			let n = e.getItem(t);
+			if (!n) return null;
+			try {
+				return JSON.parse(n);
+			} catch {
+				return null;
+			}
+		},
+		setTokens(n) {
+			e.setItem(t, JSON.stringify(n));
+		},
+		clearTokens() {
+			e.removeItem(t);
+		}
+	};
 }
-function z(s) {
-  return g(localStorage, s);
+//#endregion
+//#region src/local-storage-adapter.ts
+function R(e) {
+	return L(localStorage, e);
 }
-function L(s) {
-  return g(sessionStorage, s);
+//#endregion
+//#region src/session-storage-adapter.ts
+function z(e) {
+	return L(sessionStorage, e);
 }
-export {
-  l as AuthError,
-  y as ForbiddenError,
-  c as LedewireError,
-  U as MemoryTokenStorage,
-  T as NotFoundError,
-  M as PurchaseError,
-  j as init,
-  z as localStorageAdapter,
-  p as parseExpiresAt,
-  L as sessionStorageAdapter
-};
-//# sourceMappingURL=index.js.map
+//#endregion
+export { l as AuthError, u as ForbiddenError, c as LedewireError, y as MemoryTokenStorage, d as NotFoundError, f as PurchaseError, p as SpendCapReachedError, P as init, R as localStorageAdapter, b as parseExpiresAt, z as sessionStorageAdapter };
+
+//# sourceMappingURL=index.js.map