npm - @ledewire/browser - Versions diffs - 0.7.0 → 0.8.1 - Mend

@ledewire/browser 0.7.0 → 0.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/ledewire.min.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ledewire.min.js","sources":["../../core/src/base64.ts","../../core/src/errors.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/resources/user/api-keys.ts","../src/resources/user/index.ts","../src/client.ts","../src/web-storage-adapter.ts","../src/local-storage-adapter.ts","../src/session-storage-adapter.ts"],"sourcesContent":["/*\n Decode a base64-encoded string to plain UTF-8 text.\n \n Used internally by SDK response handlers to transparently decode\n * `content_body` and `teaser` fields from the API wire format.\n \n @internal\n /\nexport function decodeBase64(value: string): string {\n return atob(value)\n}\n\n/\n Encode a plain UTF-8 string to base64.\n \n Used internally by SDK request handlers to re-encode plain-text\n * `content_body` and `teaser` fields before they are sent to the API.\n \n @internal\n /\nexport function encodeBase64(value: string): string {\n return btoa(value)\n}\n\n/\n Decode base64-encoded `content_body` and `teaser` fields on a content\n * response object. Works with both `ContentResponse` (which may carry\n * `content_body`) and `ContentListItem` (which only carries `teaser`).\n * Null and absent fields are left untouched.\n \n @internal\n /\nexport function decodeContentFields<\n T extends { content_body?: string \| null; teaser?: string \| null },\n>(item: T): T {\n return {\n ...item,\n ...(typeof item.content_body === 'string' && {\n content_body: decodeBase64(item.content_body),\n }),\n ...(typeof item.teaser === 'string' && { teaser: decodeBase64(item.teaser) }),\n } as T\n}\n\n/\n Encode plain-text `content_body` and `teaser` fields to base64 before\n * they are sent to the API. Absent and undefined fields are left untouched.\n \n @internal\n /\nexport function encodeContentFields<\n T extends {\n content_body?: string \| undefined\n teaser?: string \| undefined\n [key: string]: unknown\n },\n>(body: T): T {\n const out = { ...body } as Record<string, unknown>\n if (typeof out['content_body'] === 'string')\n out['content_body'] = encodeBase64(out['content_body'])\n if (typeof out['teaser'] === 'string') out['teaser'] = encodeBase64(out['teaser'])\n return out as T\n}\n","/\n Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n \n @example\n * ```ts\n * try {\n * await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n * if (err instanceof LedewireError) {\n * console.error(err.statusCode, err.message)\n * }\n * }\n * ```\n /\nexport class LedewireError extends Error {\n /* HTTP status code returned by the API (e.g. 400, 401, 404, 422). /\n public readonly statusCode: number\n\n /* Machine-readable error code from the API error body, if present. /\n public readonly code: number \| undefined\n\n constructor(message: string, statusCode: number, code?: number) {\n super(message)\n this.name = 'LedewireError'\n this.statusCode = statusCode\n this.code = code\n // Restore prototype chain (required for extending built-in Error in TS)\n Object.setPrototypeOf(this, new.target.prototype)\n }\n}\n\n/\n Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n /\nexport class AuthError extends LedewireError {\n constructor(message: string, code?: number) {\n super(message, 401, code)\n this.name = 'AuthError'\n }\n}\n\n/\n Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n \n Common cause — merchant login with the wrong account role:\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n \n Use a different account or ask a store owner to add your account as a member.\n \n @example\n * ```ts\n * // Browser\n * import { ForbiddenError, AuthError } from '@ledewire/browser'\n \n try {\n * await lw.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n * if (err instanceof ForbiddenError) {\n * // Credentials were valid but account lacks the required role.\n * console.error('Access denied:', err.message)\n * } else if (err instanceof AuthError) {\n * // Bad credentials or expired token — re-authenticate.\n * console.error('Authentication failed:', err.message)\n * }\n * }\n * ```\n \n @example\n * ```ts\n * // Node\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n \n try {\n * await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n * if (err instanceof ForbiddenError) {\n * // Credentials were valid but account has no merchant store access.\n * // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n * console.error('Wrong account role:', err.message)\n * } else if (err instanceof AuthError) {\n * // Bad credentials or expired token — re-authenticate.\n * console.error('Authentication failed:', err.message)\n * }\n * }\n * ```\n /\nexport class ForbiddenError extends LedewireError {\n constructor(message: string, code?: number) {\n super(message, 403, code)\n this.name = 'ForbiddenError'\n }\n}\n\n/\n Thrown when the requested resource does not exist.\n /\nexport class NotFoundError extends LedewireError {\n constructor(message: string, code?: number) {\n super(message, 404, code)\n this.name = 'NotFoundError'\n }\n}\n\n/\n Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n /\nexport class PurchaseError extends LedewireError {\n constructor(message: string, statusCode: number, code?: number) {\n super(message, statusCode, code)\n this.name = 'PurchaseError'\n }\n}\n","import type { components } from './api.gen.js'\nimport { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\n\n/* @internal /\ntype ApiErrorBody = components['schemas']['ErrorResponse']\n\n/\n Configuration options for `HttpClient`.\n /\nexport interface HttpClientConfig {\n /* API base URL. Defaults to the production API. /\n baseUrl?: string\n /\n Returns the current access token (or null) before each request.\n * If null, requests are sent without an Authorization header.\n /\n getAccessToken?: () => string \| null \| Promise<string \| null>\n /\n Called when a 401 is received on the first attempt.\n * Should refresh and return the new access token, or null to propagate\n * an `AuthError` to the caller.\n /\n onUnauthorized?: () => string \| null \| Promise<string \| null>\n}\n\n/* The default LedeWire API base URL used by all SDK packages. /\nexport const DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/\n Core HTTP client used by all SDK packages.\n \n Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n \n This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n /\nexport class HttpClient {\n private readonly baseUrl: string\n private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n constructor(config: HttpClientConfig = {}) {\n this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n this.getAccessToken = config.getAccessToken ?? (() => null)\n this.onUnauthorized = config.onUnauthorized ?? (() => null)\n }\n\n /\n GET request with optional query parameters.\n * @param path - API path (e.g. `/v1/wallet/balance`)\n * @param params - Query string parameters. `undefined` values are omitted; numbers are coerced to strings.\n /\n async get<T>(path: string, params?: Record<string, string \| number \| undefined>): Promise<T> {\n return this.request<T>('GET', this.buildUrl(path, params))\n }\n\n /\n POST request.\n * @param path - API path\n * @param body - Request body (JSON-serialized)\n * @param params - Optional query string parameters. `undefined` values are omitted; numbers are coerced to strings.\n /\n async post<T>(\n path: string,\n body?: unknown,\n params?: Record<string, string \| number \| undefined>,\n ): Promise<T> {\n return this.request<T>('POST', this.buildUrl(path, params), body)\n }\n\n /\n PUT request.\n * @param path - API path\n * @param body - Request body (JSON-serialized)\n /\n async put<T>(path: string, body?: unknown): Promise<T> {\n return this.request<T>('PUT', this.buildUrl(path), body)\n }\n\n /\n PATCH request.\n * @param path - API path\n * @param body - Partial update body (JSON-serialized)\n /\n async patch<T>(path: string, body?: unknown): Promise<T> {\n return this.request<T>('PATCH', this.buildUrl(path), body)\n }\n\n /\n DELETE request.\n * @param path - API path\n /\n async delete<T = void>(path: string): Promise<T> {\n return this.request<T>('DELETE', this.buildUrl(path))\n }\n\n // ---------------------------------------------------------------------------\n // Private helpers\n // ---------------------------------------------------------------------------\n\n private buildUrl(path: string, params?: Record<string, string \| number \| undefined>): string {\n const url = `${this.baseUrl}${path}`\n if (!params) return url\n const filtered = Object.entries(params).filter(\n (entry): entry is [string, string \| number] => entry[1] !== undefined,\n )\n if (filtered.length === 0) return url\n const qs = new URLSearchParams(filtered.map(([k, v]) => [k, String(v)]))\n return `${url}?${qs.toString()}`\n }\n\n private async request<T>(\n method: string,\n url: string,\n body?: unknown,\n isRetry = false,\n ): Promise<T> {\n const token = await this.getAccessToken()\n const headers: Record<string, string> = {\n 'Content-Type': 'application/json',\n Accept: 'application/json',\n }\n if (token) headers['Authorization'] = `Bearer ${token}`\n\n const response = await fetch(url, {\n method,\n headers,\n ...(body !== undefined && { body: JSON.stringify(body) }),\n })\n\n if (response.status === 401 && !isRetry) {\n const newToken = await this.onUnauthorized()\n if (newToken) {\n return this.request<T>(method, url, body, true)\n }\n throw new AuthError('Session expired. Please re-authenticate.')\n }\n\n if (!response.ok) {\n await this.throwApiError(response)\n }\n\n if (response.status === 204) {\n return undefined as T\n }\n\n return response.json() as Promise<T>\n }\n\n private async throwApiError(response: Response): Promise<never> {\n let body: ApiErrorBody \| undefined\n try {\n body = (await response.json()) as ApiErrorBody\n } catch {\n // Non-JSON body - fall through to use statusText\n }\n\n const message = body?.error.message ?? response.statusText\n const code = body?.error.code\n\n switch (response.status) {\n case 401:\n throw new AuthError(message, code)\n case 403:\n throw new ForbiddenError(message, code)\n case 404:\n throw new NotFoundError(message, code)\n default:\n throw new LedewireError(message, response.status, code)\n }\n }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/* How many milliseconds before expiry to proactively refresh the token. /\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/\n Options for constructing a `TokenManager`.\n /\nexport interface TokenManagerOptions {\n storage: TokenStorage\n /\n Exchanges a refresh token for a new token pair.\n * Implemented by each package's client factory using the\n * `/v1/auth/token/refresh` endpoint.\n /\n refreshFn: (refreshToken: string) => Promise<StoredTokens>\n /\n Called after a successful background token refresh (not on initial login).\n * Use for side-effects only — e.g. audit logging, cache invalidation, or\n * notifying a secondary system when tokens rotate.\n \n Do not use this for token persistence. The `storage` adapter's\n * `setTokens` is the canonical persistence hook and is already called on\n * every refresh. Providing both will result in double-writes.\n \n @example\n * ```ts\n * onTokenRefreshed: async (tokens) => {\n * await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n * }\n * ```\n /\n onTokenRefreshed?: (tokens: StoredTokens) => void \| Promise<void>\n /\n Called when a refresh attempt fails and the user must re-authenticate.\n * Typically used to redirect to login or emit a UI event.\n \n @example\n * ```ts\n * onAuthExpired: () => { window.location.href = '/login' }\n * ```\n /\n onAuthExpired?: () => void \| Promise<void>\n}\n\n/\n Manages the JWT token lifecycle transparently.\n \n - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n \n This is an internal class - use the package-level client factories instead.\n /\nexport class TokenManager {\n private readonly storage: TokenStorage\n private readonly refreshFn: TokenManagerOptions['refreshFn']\n private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n private refreshPromise: Promise<StoredTokens \| null> \| null = null\n\n constructor(options: TokenManagerOptions) {\n this.storage = options.storage\n this.refreshFn = options.refreshFn\n this.onTokenRefreshed = options.onTokenRefreshed\n this.onAuthExpired = options.onAuthExpired\n }\n\n /\n Returns a valid access token, refreshing proactively if needed.\n * Returns `null` if no tokens are stored (user not authenticated).\n /\n async getAccessToken(): Promise<string \| null> {\n const stored = await this.storage.getTokens()\n if (!stored) return null\n\n const expiresInMs = stored.expiresAt - Date.now()\n if (expiresInMs < REFRESH_THRESHOLD_MS) {\n const refreshed = await this.performRefresh(stored.refreshToken)\n return refreshed?.accessToken ?? null\n }\n\n return stored.accessToken\n }\n\n /\n Called by `HttpClient` when a 401 is received.\n * Attempts one refresh; returns the new access token or null.\n /\n async handleUnauthorized(): Promise<string \| null> {\n const stored = await this.storage.getTokens()\n if (!stored) {\n await this.onAuthExpired?.()\n return null\n }\n const refreshed = await this.performRefresh(stored.refreshToken)\n if (!refreshed) await this.onAuthExpired?.()\n return refreshed?.accessToken ?? null\n }\n\n /* Store new tokens after a successful login or signup. /\n async setTokens(tokens: StoredTokens): Promise<void> {\n await this.storage.setTokens(tokens)\n }\n\n /* Clear all stored tokens (call on logout). /\n async clearTokens(): Promise<void> {\n await this.storage.clearTokens()\n }\n\n // ---------------------------------------------------------------------------\n // Private\n // ---------------------------------------------------------------------------\n\n private performRefresh(refreshToken: string): Promise<StoredTokens \| null> {\n if (this.refreshPromise) return this.refreshPromise\n\n this.refreshPromise = this.refreshFn(refreshToken)\n .then(async (tokens) => {\n await this.storage.setTokens(tokens)\n await this.onTokenRefreshed?.(tokens)\n return tokens\n })\n .catch((_err: unknown) => {\n void this.storage.clearTokens()\n throw new AuthError('Token refresh failed. Please re-authenticate.')\n })\n .finally(() => {\n this.refreshPromise = null\n })\n\n return this.refreshPromise\n }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/\n In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n /\nexport class MemoryTokenStorage implements TokenStorage {\n private tokens: StoredTokens \| null = null\n\n getTokens(): StoredTokens \| null {\n return this.tokens\n }\n\n setTokens(tokens: StoredTokens): void {\n this.tokens = tokens\n }\n\n clearTokens(): void {\n this.tokens = null\n }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/\n Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n \n @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n /\nexport function parseExpiresAt(expiresAt: string): number {\n return new Date(expiresAt).getTime()\n}\n\n/\n Creates the standard LedeWire token refresh function for use with `TokenManager`.\n \n Encapsulates the `/v1/auth/token/refresh` fetch call, response mapping, and\n * error handling so both `createClient` (node) and `init` (browser) share a\n * single implementation.\n \n @param baseUrl - The resolved API base URL (e.g. `'https://api.ledewire.com'`)\n * @returns A `refreshFn` compatible with `TokenManagerOptions['refreshFn']`\n /\nexport function createRefreshFn(baseUrl: string): TokenManagerOptions['refreshFn'] {\n return async (refreshToken: string): Promise<StoredTokens> => {\n const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ refresh_token: refreshToken }),\n })\n if (!res.ok) throw new Error('Token refresh failed')\n const data = (await res.json()) as {\n access_token: string\n refresh_token: string\n expires_at: string\n }\n return {\n accessToken: data.access_token,\n refreshToken: data.refresh_token,\n expiresAt: parseExpiresAt(data.expires_at),\n }\n }\n}\n","/\n Buyer authentication namespace for browser environments.\n \n Handles buyer signup, email/password login, Google OAuth, and password reset.\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n \n For seller/API key authentication, use {@link BrowserSellerNamespace.loginWithApiKey}\n * via `lw.seller.loginWithApiKey()`.\n \n @module\n /\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n AuthLoginEmailRequest,\n AuthLoginBuyerApiKeyRequest,\n AuthLoginOAuthRequest,\n AuthPasswordResetBody,\n AuthPasswordResetRequestBody,\n AuthPasswordResetResponse,\n AuthSignupRequest,\n AuthenticationResponse,\n} from '@ledewire/core'\n\n/\n Buyer authentication: signup, email/password login, Google OAuth, password reset.\n \n Obtain via `lw.auth` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n /\nexport class BrowserAuthNamespace {\n /* @internal /\n constructor(\n private readonly http: HttpClient,\n private readonly tokenManager: TokenManager,\n ) {}\n\n /\n Register a new buyer account with email and password.\n * Tokens are stored automatically after successful signup.\n \n @param body - Signup credentials and display name.\n * @returns The authentication token response.\n /\n async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in with email and password.\n * Tokens are stored automatically after successful login.\n \n @param body - Email and password credentials.\n * @returns The authentication token response.\n /\n async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in with a Google ID token obtained from the Google OAuth flow.\n * Tokens are stored automatically after successful login.\n \n @param body - The Google ID token.\n * @returns The authentication token response.\n /\n async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in using a buyer API key and secret.\n * Returns a buyer-scoped JWT, stored automatically after successful authentication.\n \n Primarily useful when building buyer-facing dashboards where the user\n * has created a named API key and wishes to authenticate with it programmatically,\n * or for agent workflows running inside a browser context.\n \n @param body - The buyer API key and secret.\n * @returns The authentication token response.\n \n @example\n * ```ts\n * await lw.auth.loginWithBuyerApiKey({\n * key: 'bktst_abc123',\n * secret: 'deadbeef...',\n * })\n * ```\n /\n async loginWithBuyerApiKey(body: AuthLoginBuyerApiKeyRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/buyer-api-key', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Request a password reset code to be sent to the buyer's email address.\n \n The response is intentionally ambiguous — if the email does not exist,\n * the API returns the same success message to prevent account enumeration.\n \n @param body - The buyer's email address.\n * @returns A response with a confirmation message.\n \n @example\n * ```ts\n * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })\n * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }\n * ```\n /\n async requestPasswordReset(\n body: AuthPasswordResetRequestBody,\n ): Promise<AuthPasswordResetResponse> {\n return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset-request', body)\n }\n\n /\n Reset a buyer's password using the code delivered to their email.\n \n Obtain the reset code first by calling `requestPasswordReset()`.\n \n @param body - Email address, 6-digit reset code, and the new password.\n * @returns A response with a confirmation message.\n \n @example\n * ```ts\n * await lw.auth.resetPassword({\n * email: 'buyer@example.com',\n * reset_code: '123456',\n * password: 'new-secure-password',\n * })\n * ```\n /\n async resetPassword(body: AuthPasswordResetBody): Promise<AuthPasswordResetResponse> {\n return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset', body)\n }\n\n private async storeTokens(res: AuthenticationResponse): Promise<void> {\n await this.tokenManager.setTokens({\n accessToken: res.access_token,\n refreshToken: res.refresh_token,\n expiresAt: parseExpiresAt(res.expires_at),\n })\n }\n}\n","/\n Platform configuration namespace (browser).\n \n Provides access to public (unauthenticated) platform-level configuration.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/\n Platform-level configuration for browser clients.\n \n Obtain via `client.config` — do not construct directly.\n /\nexport class BrowserConfigNamespace {\n /* @internal /\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns platform-level public configuration.\n * No authentication required — safe to call before the user has signed in.\n \n Use `google_client_id` to initialise the Google Identity Services library\n * on the storefront login page without requiring a prior authenticated call.\n \n @example\n * ```ts\n * const lw = init({ apiKey: 'your_api_key' })\n * const { google_client_id } = await lw.config.getPublic()\n * google.accounts.id.initialize({ client_id: google_client_id, callback })\n * ```\n /\n async getPublic(): Promise<PublicConfigResponse> {\n return this.http.get<PublicConfigResponse>('/v1/config/public')\n }\n}\n","import { decodeContentFields } from '@ledewire/core'\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/\n Buyer content namespace — fetch content with real-time access information.\n \n Obtain via `lw.content` — do not construct directly.\n \n @example\n * ```ts\n * const result = await lw.content.getWithAccess('content-id')\n * if (result.access_info.next_required_action === 'view_content') {\n * renderMarkdown(result.content_body ?? '')\n * }\n * ```\n /\nexport class BrowserContentNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns a content item together with access information for the\n * authenticated buyer (or a generic access response when unauthenticated).\n \n @param id - The content ID.\n * @returns The content item with access information. `content_body` and\n * `teaser` are returned as plain UTF-8 text — the SDK decodes base64\n * transparently so you can render them directly.\n \n @example\n * ```ts\n * const result = await lw.content.getWithAccess('article-123')\n * if (result.access_info.next_required_action === 'view_content') {\n * renderMarkdown(result.content_body ?? '')\n * }\n * ```\n /\n async getWithAccess(id: string): Promise<ContentWithAccessResponse> {\n const res = await this.http.get<ContentWithAccessResponse>(\n `/v1/content/${encodeURIComponent(id)}/with-access`,\n )\n return decodeContentFields(res)\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/\n Buyer purchases namespace — create and retrieve content purchases.\n \n Obtain via `lw.purchases` — do not construct directly.\n \n @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n /\nexport class BrowserPurchasesNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Completes a content purchase using the buyer's wallet balance.\n \n @param body - The content ID and expected price in cents.\n * @returns The completed purchase record.\n /\n async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n return this.http.post<PurchaseResponse>('/v1/purchases', body)\n }\n\n /\n Returns all purchases made by the authenticated buyer.\n \n @returns A list of purchase records, newest first.\n /\n async list(): Promise<PurchaseResponse[]> {\n return this.http.get<PurchaseResponse[]>('/v1/purchases')\n }\n\n /\n Returns a single purchase by ID.\n \n @param id - The purchase ID.\n * @returns The purchase record.\n /\n async get(id: string): Promise<PurchaseResponse> {\n return this.http.get<PurchaseResponse>(`/v1/purchases/${encodeURIComponent(id)}`)\n }\n}\n","/\n Seller content namespace for browser environments.\n \n Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n \n @module\n /\nimport { decodeContentFields } from '@ledewire/core'\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/\n Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n /\nexport interface SellerContentSearchRequest {\n /* Case-insensitive partial match against the content title. /\n title?: string\n /* Case-insensitive partial match against the content URI (`external_ref` content only). /\n uri?: string\n /\n Exact match against the content's external identifier.\n * Use the full formatted value as it appears in `ContentResponse.external_identifier`,\n * e.g. `'vimeo:123456789'`.\n /\n external_identifier?: string\n /* Exact key/value pairs to AND-match against content metadata. /\n metadata?: Record<string, unknown>\n}\n\n/\n Seller content namespace — list, search, and fetch store content by API key.\n \n Obtain via `lw.seller.content` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n \n const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n /\nexport class BrowserSellerContentNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n List all content for the authenticated seller's store.\n * Requires a token with at least `view` permission.\n \n @returns Array of content items. `teaser` is returned as plain text —\n * the SDK decodes base64 automatically.\n \n @example\n * ```ts\n * const items = await lw.seller.content.list()\n * ```\n /\n async list(): Promise<ContentResponse[]> {\n const res = await this.http.get<ContentResponse[]>('/v1/seller/content')\n return res.map(decodeContentFields)\n }\n\n /\n Search content by title, URI, and/or metadata (AND logic).\n * At least one criterion must be supplied.\n * Requires a token with at least `view` permission.\n \n @param body - Search criteria (title, uri, and/or metadata).\n * @returns Array of matching content items. `teaser` is returned as plain\n * text — the SDK decodes base64 automatically.\n \n @example\n * ```ts\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n * const byId = await lw.seller.content.search({ external_identifier: 'vimeo:123456789' })\n * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n * ```\n /\n async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n const res = await this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n return res.map(decodeContentFields)\n }\n\n /\n Get a single content item by ID.\n * Requires a token with at least `view` permission.\n \n @param id - The content ID.\n * @returns The content item. `content_body` and `teaser` are returned as\n * plain UTF-8 text — the SDK decodes base64 automatically so you can render\n * them directly without calling `atob()`.\n \n @example\n * ```ts\n * const item = await lw.seller.content.get('content-id')\n * // item.content_body is plain markdown — no atob() needed\n * ```\n /\n async get(id: string): Promise<ContentResponse> {\n const res = await this.http.get<ContentResponse>(`/v1/seller/content/${encodeURIComponent(id)}`)\n return decodeContentFields(res)\n }\n}\n","/\n Browser seller namespace — API-key-authenticated read operations.\n \n @module\n /\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type { AuthLoginApiKeyRequest, AuthenticationResponse } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/\n Seller operations accessible with a view-permission API key token.\n \n Obtain via `lw.seller` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n \n // Authenticate as a seller (key-only = view; key+secret = full)\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n /\nexport class BrowserSellerNamespace {\n /* Seller content: list, search, and get by API key. /\n readonly content: BrowserSellerContentNamespace\n\n /* @internal /\n constructor(\n private readonly http: HttpClient,\n private readonly tokenManager: TokenManager,\n ) {\n this.content = new BrowserSellerContentNamespace(http)\n }\n\n /\n Log in using an API key to obtain a seller token.\n * Provide only `key` for read-only (`view`) access.\n * Provide both `key` and `secret` for read/write (`full`) access.\n * Tokens are stored automatically after successful authentication.\n \n Use this before calling `lw.seller.content.` methods.\n \n * @param body - API key credentials.\n * @returns The authentication token response.\n \n @example\n * ```ts\n * // View access (read-only) — sufficient for seller.content.list/search/get\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n \n // Full access (read/write)\n * await lw.seller.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n * ```\n /\n async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n await this.tokenManager.setTokens({\n accessToken: res.access_token,\n refreshToken: res.refresh_token,\n expiresAt: parseExpiresAt(res.expires_at),\n })\n return res\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n WalletBalanceResponse,\n WalletPaymentSessionRequest,\n WalletPaymentSessionResponse,\n WalletPaymentStatusResponse,\n WalletTransactionItem,\n} from '@ledewire/core'\n\n/\n Buyer wallet namespace — balance, transactions, and payment session management.\n \n Obtain via `lw.wallet` — do not construct directly.\n \n @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n /\nexport class BrowserWalletNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns the authenticated buyer's current wallet balance.\n \n @returns The current wallet balance in cents.\n /\n async balance(): Promise<WalletBalanceResponse> {\n return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n }\n\n /\n Returns the authenticated buyer's wallet transaction history, newest first.\n \n @returns A list of completed wallet transaction entries.\n /\n async transactions(): Promise<WalletTransactionItem[]> {\n return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n }\n\n /\n Creates a payment session for funding the buyer's wallet.\n \n @param body - The amount and currency to fund.\n * @returns Payment session details for use with the payment provider widget.\n /\n async createPaymentSession(\n body: WalletPaymentSessionRequest,\n ): Promise<WalletPaymentSessionResponse> {\n return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n }\n\n /\n Polls the status of a wallet funding payment session.\n \n @param sessionId - The session ID returned by `createPaymentSession`.\n * @returns The current payment status.\n /\n async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n return this.http.get<WalletPaymentStatusResponse>(\n `/v1/wallet/payment-status/${encodeURIComponent(sessionId)}`,\n )\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/\n Checkout namespace — buyer checkout state for a specific content item.\n \n Obtain via `lw.checkout` — do not construct directly.\n \n @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' \| 'fund_wallet' \| 'purchase' \| 'view_content'\n * ```\n /\nexport class CheckoutNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns the authenticated buyer's checkout readiness for a given piece of\n * content. Indicates whether the buyer needs to authenticate, fund their\n * wallet, or purchase before accessing the content.\n \n Works without authentication — returns anonymous checkout state when the\n * buyer is not logged in.\n \n @param contentId - The content item ID.\n * @returns The checkout state, including what action is required next.\n /\n async state(contentId: string): Promise<CheckoutStateResponse> {\n return this.http.get<CheckoutStateResponse>(\n `/v1/checkout/state/${encodeURIComponent(contentId)}`,\n )\n }\n}\n","/\n Buyer API key management namespace.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { UserApiKey, UserApiKeyCreateRequest, UserApiKeyCreateResponse } from '@ledewire/core'\n\n/\n Manage buyer API keys for the authenticated user.\n \n Buyer API keys are the authentication credential for autonomous agents — they\n * allow an agent to obtain a buyer JWT via `auth.loginWithBuyerApiKey()` without\n * requiring a username and password. Each key is named, independently revocable,\n * and can carry an optional `spending_limit_cents` ceiling.\n \n Secret handling: `create()` returns the `secret` exactly once. It is never\n * retrievable again after the response is received — store it immediately in a\n * secrets manager (e.g. environment variable, Vault, AWS Secrets Manager).\n \n Obtain via `client.user.apiKeys` — do not construct directly.\n \n @example\n * ```ts\n * // Create a key for an agent, with a $10 spend ceiling\n * const { key, secret } = await client.user.apiKeys.create({\n * name: 'my-rag-agent',\n * spending_limit_cents: 1000,\n * })\n * // Store secret immediately — it cannot be retrieved again\n * await secretsManager.put('LEDEWIRE_BUYER_SECRET', secret)\n \n // List all keys (secrets never included)\n * const keys = await client.user.apiKeys.list()\n \n // Revoke a compromised key\n * await client.user.apiKeys.revoke(keys[0].id)\n * ```\n /\nexport class UserApiKeysNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n Returns all buyer API keys for the authenticated user.\n * The `secret` is never included in list responses.\n \n @returns Array of API key records.\n /\n async list(): Promise<UserApiKey[]> {\n return this.http.get<UserApiKey[]>('/v1/user/api-keys')\n }\n\n /\n Creates a new buyer API key.\n \n The `secret` in the response is shown exactly once and cannot be retrieved\n * again. Store it immediately in a secrets manager before discarding the\n * response object.\n \n @param body - Name and optional spend ceiling for the new key.\n * @returns The new key's public identifier and one-time secret.\n \n @example\n * ```ts\n * const { key, secret } = await client.user.apiKeys.create({\n * name: 'production-agent',\n * spending_limit_cents: 5000, // $50 cap\n * })\n * // ⚠️ Store secret NOW — it is shown once only\n * process.env.LEDEWIRE_BUYER_SECRET = secret\n * ```\n /\n async create(body: UserApiKeyCreateRequest): Promise<UserApiKeyCreateResponse> {\n return this.http.post<UserApiKeyCreateResponse>('/v1/user/api-keys', body)\n }\n\n /\n Revokes (permanently deletes) a buyer API key by ID.\n \n Any agent currently using this key will receive `401` on its next\n * token refresh. Revocation takes effect immediately.\n \n @param id - UUID of the API key to revoke.\n /\n async revoke(id: string): Promise<void> {\n return this.http.delete(`/v1/user/api-keys/${encodeURIComponent(id)}`)\n }\n}\n","/\n User namespace — authenticated buyer account operations.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport { UserApiKeysNamespace } from './api-keys.js'\n\n/\n Authenticated buyer account operations.\n \n Obtain via `client.user` — do not construct directly.\n /\nexport class UserNamespace {\n /\n Buyer API key management: create, list, and revoke named API keys.\n * Keys are used by autonomous agents to authenticate without a username/password.\n /\n readonly apiKeys: UserApiKeysNamespace\n\n /* @internal /\n constructor(http: HttpClient) {\n this.apiKeys = new UserApiKeysNamespace(http)\n }\n}\n","import {\n DEFAULT_BASE_URL,\n HttpClient,\n MemoryTokenStorage,\n TokenManager,\n createRefreshFn,\n} from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\nimport { UserNamespace } from './resources/user/index.js'\n\n/\n Configuration options for the LedeWire browser client.\n /\nexport interface BrowserClientConfig {\n /\n LedeWire API key that identifies the store.\n * Obtained from the LedeWire merchant dashboard.\n /\n apiKey: string\n /\n Override the API base URL.\n * Defaults to `https://api.ledewire.com`.\n /\n baseUrl?: string\n /\n Token storage adapter.\n * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n \n To persist sessions across page reloads, use the built-in\n * `localStorageAdapter`:\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n * ```\n /\n storage?: TokenStorage\n /\n Called when the user's session expires and cannot be refreshed.\n * Use this to show a re-authentication prompt.\n \n @example\n * ```ts\n * onAuthExpired: () => showLoginModal()\n * ```\n /\n onAuthExpired?: () => void\n}\n\n/\n Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n \n @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n \n @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n /\nexport function init(config: BrowserClientConfig): BrowserClient {\n const baseUrl = config.baseUrl ?? DEFAULT_BASE_URL\n const storage = config.storage ?? new MemoryTokenStorage()\n\n const tokenManager = new TokenManager({\n storage,\n refreshFn: createRefreshFn(baseUrl),\n ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n })\n\n const http = new HttpClient({\n baseUrl,\n getAccessToken: () => tokenManager.getAccessToken(),\n onUnauthorized: () => tokenManager.handleUnauthorized(),\n })\n\n return new BrowserClient(http, tokenManager, config)\n}\n\n/\n The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n \n @remarks\n * Instantiate with {@link init} rather than constructing directly.\n /\nexport class BrowserClient {\n /* Platform-level public configuration (no auth required) /\n readonly config: BrowserConfigNamespace\n\n /* Buyer authentication: email/password signup/login, Google OAuth, password reset /\n readonly auth: BrowserAuthNamespace\n\n /* Checkout state machine: determines next action for a piece of content /\n readonly checkout: CheckoutNamespace\n\n /* Wallet: balance, fund via payment session, transaction history /\n readonly wallet: BrowserWalletNamespace\n\n /* Content purchases for the authenticated buyer /\n readonly purchases: BrowserPurchasesNamespace\n\n /* Public content with per-user access information /\n readonly content: BrowserContentNamespace\n\n /* Seller operations: API key login, content list/search/get /\n readonly seller: BrowserSellerNamespace\n\n /* Authenticated buyer account: API key management /\n readonly user: UserNamespace\n\n /* @internal /\n constructor(\n private readonly _http: HttpClient,\n private readonly _tokenManager: TokenManager,\n private readonly _config: BrowserClientConfig,\n ) {\n this.config = new BrowserConfigNamespace(_http)\n this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n this.checkout = new CheckoutNamespace(_http)\n this.wallet = new BrowserWalletNamespace(_http)\n this.purchases = new BrowserPurchasesNamespace(_http)\n this.content = new BrowserContentNamespace(_http)\n this.seller = new BrowserSellerNamespace(_http, _tokenManager)\n this.user = new UserNamespace(_http)\n }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/\n Shared implementation for `localStorage` and `sessionStorage` adapters.\n * Not exported from the public API — use {@link localStorageAdapter} or\n * {@link sessionStorageAdapter} instead.\n \n @internal\n /\nexport function webStorageAdapter(backend: Storage, key = DEFAULT_STORAGE_KEY): TokenStorage {\n return {\n getTokens(): StoredTokens \| null {\n const raw = backend.getItem(key)\n if (!raw) return null\n try {\n return JSON.parse(raw) as StoredTokens\n } catch {\n // Corrupted value — treat as empty\n return null\n }\n },\n setTokens(tokens: StoredTokens): void {\n backend.setItem(key, JSON.stringify(tokens))\n },\n clearTokens(): void {\n backend.removeItem(key)\n },\n }\n}\n","import type { TokenStorage } from '@ledewire/core'\nimport { webStorageAdapter } from './web-storage-adapter.js'\n\n/\n A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n \n Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n \n Security note: `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n \n @param key - The `localStorage` key used to store tokens.\n * Defaults to `'lw:tokens'`. Override this if you have multiple\n * LedeWire integrations on the same origin.\n \n @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n \n const lw = init({\n * apiKey: 'your_api_key',\n * storage: localStorageAdapter(),\n * })\n * ```\n /\nexport function localStorageAdapter(key?: string): TokenStorage {\n return webStorageAdapter(localStorage, key)\n}\n","import type { TokenStorage } from '@ledewire/core'\nimport { webStorageAdapter } from './web-storage-adapter.js'\n\n/\n A {@link TokenStorage} adapter that persists tokens in `sessionStorage`.\n \n Tokens survive page reloads within the same tab but are cleared when the\n * tab is closed or the session ends. This prevents token leakage across\n * tabs and is a good default for sites where users do not expect persistent\n * sessions (e.g. embedded checkout widgets, kiosk-mode UIs).\n \n Security note: `sessionStorage` is accessible to any JavaScript on the\n * same origin and tab. It is more isolated than `localStorage` (no\n * cross-tab sharing), but the default in-memory storage is still safer for\n * high-security use cases.\n \n @param key - The `sessionStorage` key used to store tokens.\n * Defaults to `'lw:tokens'`. Override this if you have multiple\n * LedeWire integrations on the same origin.\n \n @example\n * ```ts\n * import { init, sessionStorageAdapter } from '@ledewire/browser'\n \n const lw = init({\n * apiKey: 'your_api_key',\n * storage: sessionStorageAdapter(),\n * })\n * ```\n */\nexport function sessionStorageAdapter(key?: string): TokenStorage {\n return webStorageAdapter(sessionStorage, key)\n}\n"],"names":["decodeBase64","value","decodeContentFields","item","LedewireError","message","statusCode","code","__publicField","AuthError","ForbiddenError","NotFoundError","PurchaseError","DEFAULT_BASE_URL","HttpClient","config","path","params","body","url","filtered","entry","qs","k","v","method","isRetry","token","headers","response","REFRESH_THRESHOLD_MS","TokenManager","options","stored","refreshed","tokens","refreshToken","_err","MemoryTokenStorage","parseExpiresAt","expiresAt","createRefreshFn","baseUrl","res","data","BrowserAuthNamespace","http","tokenManager","BrowserConfigNamespace","BrowserContentNamespace","id","BrowserPurchasesNamespace","BrowserSellerContentNamespace","BrowserSellerNamespace","BrowserWalletNamespace","sessionId","CheckoutNamespace","contentId","UserApiKeysNamespace","UserNamespace","init","storage","BrowserClient","_http","_tokenManager","_config","DEFAULT_STORAGE_KEY","webStorageAdapter","backend","key","raw","localStorageAdapter","sessionStorageAdapter"],"mappings":"2MAQO,SAASA,EAAaC,EAAuB,CAClD,OAAO,KAAKA,CAAK,CACnB,CAsBO,SAASC,EAEdC,EAAY,CACZ,MAAO,CACL,GAAGA,EACH,GAAI,OAAOA,EAAK,cAAiB,UAAY,CAC3C,aAAcH,EAAaG,EAAK,YAAY,CAAA,EAE9C,GAAI,OAAOA,EAAK,QAAW,UAAY,CAAE,OAAQH,EAAaG,EAAK,MAAM,CAAA,CAAE,CAE/E,CC1BO,MAAMC,UAAsB,KAAM,CAOvC,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,CAAO,EANCG,EAAA,mBAGAA,EAAA,aAId,KAAK,KAAO,gBACZ,KAAK,WAAaF,EAClB,KAAK,KAAOC,EAEZ,OAAO,eAAe,KAAM,WAAW,SAAS,CAClD,CACF,CAMO,MAAME,UAAkBL,CAAc,CAC3C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,WACd,CACF,CAoDO,MAAMG,UAAuBN,CAAc,CAChD,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,gBACd,CACF,CAKO,MAAMI,UAAsBP,CAAc,CAC/C,YAAYC,EAAiBE,EAAe,CAC1C,MAAMF,EAAS,IAAKE,CAAI,EACxB,KAAK,KAAO,eACd,CACF,CAMO,MAAMK,UAAsBR,CAAc,CAC/C,YAAYC,EAAiBC,EAAoBC,EAAe,CAC9D,MAAMF,EAASC,EAAYC,CAAI,EAC/B,KAAK,KAAO,eACd,CACF,CC9FO,MAAMM,EAAmB,2BAazB,MAAMC,CAAW,CAKtB,YAAYC,EAA2B,GAAI,CAJ1BP,EAAA,gBACAA,EAAA,uBACAA,EAAA,uBAGf,KAAK,SAAWO,EAAO,SAAWF,GAAkB,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiBE,EAAO,iBAAmB,IAAM,MACtD,KAAK,eAAiBA,EAAO,iBAAmB,IAAM,KACxD,CAOA,MAAM,IAAOC,EAAcC,EAAkE,CAC3F,OAAO,KAAK,QAAW,MAAO,KAAK,SAASD,EAAMC,CAAM,CAAC,CAC3D,CAQA,MAAM,KACJD,EACAE,EACAD,EACY,CACZ,OAAO,KAAK,QAAW,OAAQ,KAAK,SAASD,EAAMC,CAAM,EAAGC,CAAI,CAClE,CAOA,MAAM,IAAOF,EAAcE,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAASF,CAAI,EAAGE,CAAI,CACzD,CAOA,MAAM,MAASF,EAAcE,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAASF,CAAI,EAAGE,CAAI,CAC3D,CAMA,MAAM,OAAiBF,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAASA,CAAI,CAAC,CACtD,CAMQ,SAASA,EAAcC,EAA8D,CAC3F,MAAME,EAAM,GAAG,KAAK,OAAO,GAAGH,CAAI,GAClC,GAAI,CAACC,EAAQ,OAAOE,EACpB,MAAMC,EAAW,OAAO,QAAQH,CAAM,EAAE,OACrCI,GAA8CA,EAAM,CAAC,IAAM,MAAA,EAE9D,GAAID,EAAS,SAAW,EAAG,OAAOD,EAClC,MAAMG,EAAK,IAAI,gBAAgBF,EAAS,IAAI,CAAC,CAACG,EAAGC,CAAC,IAAM,CAACD,EAAG,OAAOC,CAAC,CAAC,CAAC,CAAC,EACvE,MAAO,GAAGL,CAAG,IAAIG,EAAG,UAAU,EAChC,CAEA,MAAc,QACZG,EACAN,EACAD,EACAQ,EAAU,GACE,CACZ,MAAMC,EAAQ,MAAM,KAAK,eAAA,EACnBC,EAAkC,CACtC,eAAgB,mBAChB,OAAQ,kBAAA,EAEND,IAAOC,EAAQ,cAAmB,UAAUD,CAAK,IAErD,MAAME,EAAW,MAAM,MAAMV,EAAK,CAChC,OAAAM,EACA,QAAAG,EACA,GAAIV,IAAS,QAAa,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAA,CAAE,CACxD,EAED,GAAIW,EAAS,SAAW,KAAO,CAACH,EAAS,CAEvC,GADiB,MAAM,KAAK,eAAA,EAE1B,OAAO,KAAK,QAAWD,EAAQN,EAAKD,EAAM,EAAI,EAEhD,MAAM,IAAIT,EAAU,0CAA0C,CAChE,CAMA,GAJKoB,EAAS,IACZ,MAAM,KAAK,cAAcA,CAAQ,EAG/BA,EAAS,SAAW,IAIxB,OAAOA,EAAS,KAAA,CAClB,CAEA,MAAc,cAAcA,EAAoC,CAC9D,IAAIX,EACJ,GAAI,CACFA,EAAQ,MAAMW,EAAS,KAAA,CACzB,MAAQ,CAER,CAEA,MAAMxB,EAAUa,GAAM,MAAM,SAAWW,EAAS,WAC1CtB,EAAOW,GAAM,MAAM,KAEzB,OAAQW,EAAS,OAAA,CACf,IAAK,KACH,MAAM,IAAIpB,EAAUJ,EAASE,CAAI,EACnC,IAAK,KACH,MAAM,IAAIG,EAAeL,EAASE,CAAI,EACxC,IAAK,KACH,MAAM,IAAII,EAAcN,EAASE,CAAI,EACvC,QACE,MAAM,IAAIH,EAAcC,EAASwB,EAAS,OAAQtB,CAAI,CAAA,CAE5D,CACF,CC1KA,MAAMuB,EAAuB,IAoDtB,MAAMC,CAAa,CAOxB,YAAYC,EAA8B,CANzBxB,EAAA,gBACAA,EAAA,kBACAA,EAAA,yBACAA,EAAA,sBACTA,EAAA,sBAAsD,MAG5D,KAAK,QAAUwB,EAAQ,QACvB,KAAK,UAAYA,EAAQ,UACzB,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,cAAgBA,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,MAAMC,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,OAAKA,EAEeA,EAAO,UAAY,KAAK,IAAA,EAC1BH,GACE,MAAM,KAAK,eAAeG,EAAO,YAAY,IAC7C,aAAe,KAG5BA,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,MAAMA,EAAS,MAAM,KAAK,QAAQ,UAAA,EAClC,GAAI,CAACA,EACH,aAAM,KAAK,gBAAA,EACJ,KAET,MAAMC,EAAY,MAAM,KAAK,eAAeD,EAAO,YAAY,EAC/D,OAAKC,GAAW,MAAM,KAAK,gBAAA,EACpBA,GAAW,aAAe,IACnC,CAGA,MAAM,UAAUC,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAUA,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAA,CACrB,CAMQ,eAAeC,EAAoD,CACzE,OAAI,KAAK,eAAuB,KAAK,gBAErC,KAAK,eAAiB,KAAK,UAAUA,CAAY,EAC9C,KAAK,MAAOD,IACX,MAAM,KAAK,QAAQ,UAAUA,CAAM,EACnC,MAAM,KAAK,mBAAmBA,CAAM,EAC7BA,EACR,EACA,MAAOE,GAAkB,CACxB,MAAK,KAAK,QAAQ,YAAA,EACZ,IAAI5B,EAAU,+CAA+C,CACrE,CAAC,EACA,QAAQ,IAAM,CACb,KAAK,eAAiB,IACxB,CAAC,EAEI,KAAK,eACd,CACF,CAWO,MAAM6B,CAA2C,CAAjD,cACG9B,EAAA,cAA8B,MAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAU2B,EAA4B,CACpC,KAAK,OAASA,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,CAaO,SAASI,EAAeC,EAA2B,CACxD,OAAO,IAAI,KAAKA,CAAS,EAAE,QAAA,CAC7B,CAYO,SAASC,EAAgBC,EAAmD,CACjF,MAAO,OAAON,GAAgD,CAC5D,MAAMO,EAAM,MAAM,MAAM,GAAGD,CAAO,yBAA0B,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAA,EAC3B,KAAM,KAAK,UAAU,CAAE,cAAeN,EAAc,CAAA,CACrD,EACD,GAAI,CAACO,EAAI,GAAI,MAAM,IAAI,MAAM,sBAAsB,EACnD,MAAMC,EAAQ,MAAMD,EAAI,KAAA,EAKxB,MAAO,CACL,YAAaC,EAAK,aAClB,aAAcA,EAAK,cACnB,UAAWL,EAAeK,EAAK,UAAU,CAAA,CAE7C,CACF,CC1KO,MAAMC,CAAqB,CAEhC,YACmBC,EACAC,EACjB,CAFiB,KAAA,KAAAD,EACA,KAAA,aAAAC,CAChB,CASH,MAAM,OAAO7B,EAA0D,CACrE,MAAMyB,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmBzB,CAAI,EAChF,aAAM,KAAK,YAAYyB,CAAG,EACnBA,CACT,CASA,MAAM,eAAezB,EAA8D,CACjF,MAAMyB,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwBzB,CAAI,EACrF,aAAM,KAAK,YAAYyB,CAAG,EACnBA,CACT,CASA,MAAM,gBAAgBzB,EAA8D,CAClF,MAAMyB,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyBzB,CAAI,EACtF,aAAM,KAAK,YAAYyB,CAAG,EACnBA,CACT,CAqBA,MAAM,qBAAqBzB,EAAoE,CAC7F,MAAMyB,EAAM,MAAM,KAAK,KAAK,KAA6B,+BAAgCzB,CAAI,EAC7F,aAAM,KAAK,YAAYyB,CAAG,EACnBA,CACT,CAiBA,MAAM,qBACJzB,EACoC,CACpC,OAAO,KAAK,KAAK,KAAgC,kCAAmCA,CAAI,CAC1F,CAmBA,MAAM,cAAcA,EAAiE,CACnF,OAAO,KAAK,KAAK,KAAgC,0BAA2BA,CAAI,CAClF,CAEA,MAAc,YAAYyB,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAaA,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWJ,EAAeI,EAAI,UAAU,CAAA,CACzC,CACH,CACF,CC7IO,MAAMK,CAAuB,CAElC,YAA+BF,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,CCnBO,MAAMG,CAAwB,CACnC,YAA+BH,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAmBlD,MAAM,cAAcI,EAAgD,CAClE,MAAMP,EAAM,MAAM,KAAK,KAAK,IAC1B,eAAe,mBAAmBO,CAAE,CAAC,cAAA,EAEvC,OAAOhD,EAAoByC,CAAG,CAChC,CACF,CC7BO,MAAMQ,CAA0B,CACrC,YAA+BL,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQlD,MAAM,OAAO5B,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiBA,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAIgC,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiB,mBAAmBA,CAAE,CAAC,EAAE,CAClF,CACF,CCEO,MAAME,CAA8B,CAEzC,YAA6BN,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAchD,MAAM,MAAmC,CAEvC,OADY,MAAM,KAAK,KAAK,IAAuB,oBAAoB,GAC5D,IAAI5C,CAAmB,CACpC,CAmBA,MAAM,OAAOgB,EAA8D,CAEzE,OADY,MAAM,KAAK,KAAK,KAAwB,4BAA6BA,CAAI,GAC1E,IAAIhB,CAAmB,CACpC,CAiBA,MAAM,IAAIgD,EAAsC,CAC9C,MAAMP,EAAM,MAAM,KAAK,KAAK,IAAqB,sBAAsB,mBAAmBO,CAAE,CAAC,EAAE,EAC/F,OAAOhD,EAAoByC,CAAG,CAChC,CACF,CCrFO,MAAMU,CAAuB,CAKlC,YACmBP,EACAC,EACjB,CANOvC,EAAA,gBAIU,KAAA,KAAAsC,EACA,KAAA,aAAAC,EAEjB,KAAK,QAAU,IAAIK,EAA8BN,CAAI,CACvD,CAsBA,MAAM,gBAAgB5B,EAA+D,CACnF,MAAMyB,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0BzB,CAAI,EACvF,aAAM,KAAK,aAAa,UAAU,CAChC,YAAayB,EAAI,aACjB,aAAcA,EAAI,cAClB,UAAWJ,EAAeI,EAAI,UAAU,CAAA,CACzC,EACMA,CACT,CACF,CC7CO,MAAMW,CAAuB,CAClC,YAA+BR,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAOlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAOA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJ5B,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8BA,CAAI,CACxF,CAQA,MAAM,iBAAiBqC,EAAyD,CAC9E,OAAO,KAAK,KAAK,IACf,6BAA6B,mBAAmBA,CAAS,CAAC,EAAA,CAE9D,CACF,CCjDO,MAAMC,CAAkB,CAC7B,YAA+BV,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAalD,MAAM,MAAMW,EAAmD,CAC7D,OAAO,KAAK,KAAK,IACf,sBAAsB,mBAAmBA,CAAS,CAAC,EAAA,CAEvD,CACF,CCKO,MAAMC,CAAqB,CAEhC,YAA6BZ,EAAkB,CAAlB,KAAA,KAAAA,CAAmB,CAQhD,MAAM,MAA8B,CAClC,OAAO,KAAK,KAAK,IAAkB,mBAAmB,CACxD,CAsBA,MAAM,OAAO5B,EAAkE,CAC7E,OAAO,KAAK,KAAK,KAA+B,oBAAqBA,CAAI,CAC3E,CAUA,MAAM,OAAOgC,EAA2B,CACtC,OAAO,KAAK,KAAK,OAAO,qBAAqB,mBAAmBA,CAAE,CAAC,EAAE,CACvE,CACF,CC3EO,MAAMS,CAAc,CAQzB,YAAYb,EAAkB,CAHrBtC,EAAA,gBAIP,KAAK,QAAU,IAAIkD,EAAqBZ,CAAI,CAC9C,CACF,CCkDO,SAASc,EAAK7C,EAA4C,CAC/D,MAAM2B,EAAU3B,EAAO,SAAWF,EAC5BgD,EAAU9C,EAAO,SAAW,IAAIuB,EAEhCS,EAAe,IAAIhB,EAAa,CACpC,QAAA8B,EACA,UAAWpB,EAAgBC,CAAO,EAClC,GAAI3B,EAAO,gBAAkB,QAAa,CAAE,cAAeA,EAAO,aAAA,CAAc,CACjF,EAEK+B,EAAO,IAAIhC,EAAW,CAC1B,QAAA4B,EACA,eAAgB,IAAMK,EAAa,eAAA,EACnC,eAAgB,IAAMA,EAAa,mBAAA,CAAmB,CACvD,EAED,OAAO,IAAIe,EAAchB,EAAMC,EAAchC,CAAM,CACrD,CASO,MAAM+C,CAAc,CA0BzB,YACmBC,EACAC,EACAC,EACjB,CA5BOzD,EAAA,eAGAA,EAAA,aAGAA,EAAA,iBAGAA,EAAA,eAGAA,EAAA,kBAGAA,EAAA,gBAGAA,EAAA,eAGAA,EAAA,aAIU,KAAA,MAAAuD,EACA,KAAA,cAAAC,EACA,KAAA,QAAAC,EAEjB,KAAK,OAAS,IAAIjB,EAAuBe,CAAK,EAC9C,KAAK,KAAO,IAAIlB,EAAqBkB,EAAOC,CAAa,EACzD,KAAK,SAAW,IAAIR,EAAkBO,CAAK,EAC3C,KAAK,OAAS,IAAIT,EAAuBS,CAAK,EAC9C,KAAK,UAAY,IAAIZ,EAA0BY,CAAK,EACpD,KAAK,QAAU,IAAId,EAAwBc,CAAK,EAChD,KAAK,OAAS,IAAIV,EAAuBU,EAAOC,CAAa,EAC7D,KAAK,KAAO,IAAIL,EAAcI,CAAK,CACrC,CACF,CC1IA,MAAMG,EAAsB,YASrB,SAASC,EAAkBC,EAAkBC,EAAMH,EAAmC,CAC3F,MAAO,CACL,WAAiC,CAC/B,MAAMI,EAAMF,EAAQ,QAAQC,CAAG,EAC/B,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAMA,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAUnC,EAA4B,CACpCiC,EAAQ,QAAQC,EAAK,KAAK,UAAUlC,CAAM,CAAC,CAC7C,EACA,aAAoB,CAClBiC,EAAQ,WAAWC,CAAG,CACxB,CAAA,CAEJ,CCHO,SAASE,EAAoBF,EAA4B,CAC9D,OAAOF,EAAkB,aAAcE,CAAG,CAC5C,CCCO,SAASG,EAAsBH,EAA4B,CAChE,OAAOF,EAAkB,eAAgBE,CAAG,CAC9C"}
1	+ {"version":3,"file":"ledewire.min.js","names":[],"sources":["../../core/src/base64.ts","../../core/src/errors.ts","../../core/src/spend-cap.ts","../../core/src/http-client.ts","../../core/src/token-manager.ts","../src/resources/auth.ts","../src/resources/config.ts","../src/resources/content.ts","../src/resources/purchases.ts","../src/resources/seller/content.ts","../src/resources/seller/index.ts","../src/resources/wallet.ts","../src/resources/checkout.ts","../src/resources/user/api-keys.ts","../src/resources/user/spend-cap.ts","../src/resources/user/mcp-keys.ts","../src/resources/user/index.ts","../src/client.ts","../src/web-storage-adapter.ts","../src/local-storage-adapter.ts","../src/session-storage-adapter.ts"],"sourcesContent":["/*\n Decode a base64-encoded string to plain UTF-8 text.\n \n Used internally by SDK response handlers to transparently decode\n * `content_body` and `teaser` fields from the API wire format.\n \n @internal\n /\nexport function decodeBase64(value: string): string {\n return atob(value)\n}\n\n/\n Encode a plain UTF-8 string to base64.\n \n Used internally by SDK request handlers to re-encode plain-text\n * `content_body` and `teaser` fields before they are sent to the API.\n \n @internal\n /\nexport function encodeBase64(value: string): string {\n return btoa(value)\n}\n\n/\n Decode base64-encoded `content_body` and `teaser` fields on a content\n * response object. Works with both `ContentResponse` (which may carry\n * `content_body`) and `ContentListItem` (which only carries `teaser`).\n * Null and absent fields are left untouched.\n \n @internal\n /\nexport function decodeContentFields<\n T extends { content_body?: string \| null; teaser?: string \| null },\n>(item: T): T {\n return {\n ...item,\n ...(typeof item.content_body === 'string' && {\n content_body: decodeBase64(item.content_body),\n }),\n ...(typeof item.teaser === 'string' && { teaser: decodeBase64(item.teaser) }),\n } as T\n}\n\n/\n Encode plain-text `content_body` and `teaser` fields to base64 before\n * they are sent to the API. Absent and undefined fields are left untouched.\n \n @internal\n /\nexport function encodeContentFields<\n T extends {\n content_body?: string \| undefined\n teaser?: string \| undefined\n [key: string]: unknown\n },\n>(body: T): T {\n const out = { ...body } as Record<string, unknown>\n if (typeof out['content_body'] === 'string')\n out['content_body'] = encodeBase64(out['content_body'])\n if (typeof out['teaser'] === 'string') out['teaser'] = encodeBase64(out['teaser'])\n return out as T\n}\n","import type { ErrorType } from './types.js'\n\n/\n Known {@link ErrorType} values, widened to accept any other string the API\n * may introduce. `ErrorType` still drives editor autocomplete; a value the API\n * emits that isn't (yet) in the spec's enum — e.g. `selection_too_large` on\n * `POST /v1/acquisitions` — still type-checks and survives on {@link\n * LedewireError.type} instead of being narrowed away.\n /\nexport type ErrorTypeValue = ErrorType \| (string & {})\n\n/\n Global-symbol-registry key for the non-enumerable class-brand list every\n * `LedewireError` instance carries. See {@link LedewireError[Symbol.hasInstance]}.\n \n `@ledewire/core` is private and bundled separately into every published\n * package (via tsup), so `SpendCapReachedError` — and every other class in\n * this file — exists as a distinct class object in `@ledewire/node`,\n * `@ledewire/browser`, and `@ledewire/x402-client`. `Symbol.for` (the global\n * symbol registry, keyed by string and shared process-wide) rather than\n * `Symbol()` means every one of those bundle copies resolves this constant to\n * the same symbol, so a brand list written by one copy's constructor is\n * still readable by another copy's `hasInstance` check.\n /\nconst ERROR_BRAND = Symbol.for('@ledewire/error-brands')\n\n/\n Base error class for all LedeWire SDK errors.\n * All errors thrown by the SDK are instances of this class,\n * making it safe to use `err instanceof LedewireError` as a type guard.\n \n `instanceof` works even when `err` was constructed by a different bundled\n * copy of this class — e.g. an error thrown by `@ledewire/x402-client`\n * checked with the `SpendCapReachedError` bundled into `@ledewire/node`. See\n * {@link LedewireError[Symbol.hasInstance]}.\n \n @example\n * ```ts\n * try {\n * await client.purchases.create({ contentId: '...' })\n * } catch (err) {\n * if (err instanceof LedewireError) {\n * console.error(err.statusCode, err.message)\n * }\n * }\n * ```\n /\nexport class LedewireError extends Error {\n /\n Class-identity brand used for cross-bundle `instanceof` (see {@link\n * LedewireError[Symbol.hasInstance]}). Hardcoded per class — never derived\n * from `constructor.name` or `this.name`, either of which a minifier can\n * rewrite, silently breaking the brand match.\n /\n static readonly brand: string = 'LedewireError'\n\n /* HTTP status code returned by the API (e.g. 400, 401, 404, 422). /\n public readonly statusCode: number\n\n /* Machine-readable error code from the API error body, if present. /\n public readonly code: number \| undefined\n\n /\n Machine-readable reason from the API error body's `error.type`, if present.\n * See {@link ErrorType} for the documented values and how to branch on them —\n * the API may emit other values it hasn't documented yet, which still land\n * here as a plain string rather than being dropped.\n /\n public readonly type: ErrorTypeValue \| undefined\n\n /\n Extra top-level fields from the API error response body, excluding\n * `error` itself. For example, a `selection_too_large` refusal from `POST\n * /v1/acquisitions` (422) carries `maximum` and `submitted` alongside\n * `error`. `undefined` when the body carried no other top-level fields,\n * which is the common case.\n /\n public readonly details: Readonly<Record<string, unknown>> \| undefined\n\n constructor(\n message: string,\n statusCode: number,\n code?: number,\n type?: ErrorTypeValue,\n details?: Record<string, unknown>,\n ) {\n super(message)\n this.name = 'LedewireError'\n this.statusCode = statusCode\n this.code = code\n this.type = type\n this.details = details\n // Restore prototype chain (required for extending built-in Error in TS)\n Object.setPrototypeOf(this, new.target.prototype)\n\n // Collect this instance's class brands by walking new.target's own\n // prototype (constructor) chain, so hasInstance can fall back to a\n // brand check when the normal prototype check fails across bundles.\n const brands: string[] = []\n let ctor: unknown = new.target\n while (typeof ctor === 'function') {\n const ownBrand = (ctor as { brand?: unknown }).brand\n if (typeof ownBrand === 'string' && Object.prototype.hasOwnProperty.call(ctor, 'brand')) {\n brands.push(ownBrand)\n }\n ctor = Object.getPrototypeOf(ctor)\n }\n Object.defineProperty(this, ERROR_BRAND, {\n value: brands,\n enumerable: false,\n configurable: true,\n })\n }\n\n /\n Makes `err instanceof LedewireError` (and every subclass below) true even\n * when `err` was constructed by a different bundled copy of this module.\n * Each published package (`@ledewire/node`, `@ledewire/browser`,\n * `@ledewire/x402-client`) bundles its own copy of `@ledewire/core` via\n * tsup, so the classes are distinct objects with unrelated prototypes —\n * the plain prototype-chain check `instanceof` normally does would fail.\n \n Falls back to the brand list every instance carries under a\n * `Symbol.for('@ledewire/error-brands')` key (collected from the `brand`\n * static along the constructing class's prototype chain): true when the\n * ordinary check passes, OR the instance's brand list includes this\n * class's own `brand`.\n /\n static override [Symbol.hasInstance](instance: unknown): boolean {\n if (Function.prototype[Symbol.hasInstance].call(this, instance)) {\n return true\n }\n if (!instance \|\| (typeof instance !== 'object' && typeof instance !== 'function')) {\n return false\n }\n const brands = (instance as Record<PropertyKey, unknown>)[ERROR_BRAND]\n return Array.isArray(brands) && brands.includes(this.brand)\n }\n}\n\n/\n Thrown when the request lacks valid authentication credentials,\n * or when a token refresh fails and re-authentication is required.\n /\nexport class AuthError extends LedewireError {\n static override readonly brand: string = 'AuthError'\n\n constructor(\n message: string,\n code?: number,\n type?: ErrorTypeValue,\n details?: Record<string, unknown>,\n ) {\n super(message, 401, code, type, details)\n this.name = 'AuthError'\n }\n}\n\n/\n Thrown when the authenticated user does not have permission\n * to perform the requested operation.\n \n Common cause — merchant login with the wrong account role:\n * `POST /v1/auth/merchant/login/email` and `POST /v1/auth/merchant/login/google`\n * return `403 Forbidden` (not `401`) when the credentials are valid but the\n * account has no merchant store associations (e.g. a buyer account used on the\n * merchant endpoint). The `err.message` will be:\n * `\"This account does not have merchant access. Use a merchant or owner account.\"`\n \n Use a different account or ask a store owner to add your account as a member.\n \n @example\n * ```ts\n * // Browser\n * import { ForbiddenError, AuthError } from '@ledewire/browser'\n \n try {\n * await lw.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n * if (err instanceof ForbiddenError) {\n * // Credentials were valid but account lacks the required role.\n * console.error('Access denied:', err.message)\n * } else if (err instanceof AuthError) {\n * // Bad credentials or expired token — re-authenticate.\n * console.error('Authentication failed:', err.message)\n * }\n * }\n * ```\n \n @example\n * ```ts\n * // Node\n * import { ForbiddenError, AuthError } from '@ledewire/node'\n \n try {\n * await client.merchant.auth.loginWithGoogle({ id_token })\n * } catch (err) {\n * if (err instanceof ForbiddenError) {\n * // Credentials were valid but account has no merchant store access.\n * // err.message → \"This account does not have merchant access. Use a merchant or owner account.\"\n * console.error('Wrong account role:', err.message)\n * } else if (err instanceof AuthError) {\n * // Bad credentials or expired token — re-authenticate.\n * console.error('Authentication failed:', err.message)\n * }\n * }\n * ```\n /\nexport class ForbiddenError extends LedewireError {\n static override readonly brand: string = 'ForbiddenError'\n\n constructor(\n message: string,\n code?: number,\n type?: ErrorTypeValue,\n details?: Record<string, unknown>,\n ) {\n super(message, 403, code, type, details)\n this.name = 'ForbiddenError'\n }\n}\n\n/\n Thrown when the requested resource does not exist.\n /\nexport class NotFoundError extends LedewireError {\n static override readonly brand: string = 'NotFoundError'\n\n constructor(\n message: string,\n code?: number,\n type?: ErrorTypeValue,\n details?: Record<string, unknown>,\n ) {\n super(message, 404, code, type, details)\n this.name = 'NotFoundError'\n }\n}\n\n/\n Thrown when the purchase cannot be completed due to a validation\n * failure, such as a price mismatch or a duplicate purchase.\n /\nexport class PurchaseError extends LedewireError {\n static override readonly brand: string = 'PurchaseError'\n\n constructor(\n message: string,\n statusCode: number,\n code?: number,\n type?: ErrorTypeValue,\n details?: Record<string, unknown>,\n ) {\n super(message, statusCode, code, type, details)\n this.name = 'PurchaseError'\n }\n}\n\n/\n Thrown when the buyer's daily spend cap has been reached. Returned as HTTP `402`\n * by `POST /v1/purchases`, `GET /v1/x402/contents/{id}`, and acquisition\n * authorization, whenever the API error body's `error.type` is\n * `'daily_spend_cap_reached'`.\n \n Funding the wallet does not clear this. Unlike a plain `insufficient_funds`\n * 402 — where adding money to the wallet is enough to retry — a spend cap refusal\n * is a daily policy limit on the buyer's account (every new buyer starts with a\n * default cap). It clears only when the spend window rolls over at {@link\n * SpendCapReachedError.resetsAt}, or when the buyer raises or removes the cap via\n * `user.spendCap.update()`.\n \n @example\n * ```ts\n * try {\n * await client.purchases.create({ content_id })\n * } catch (err) {\n * if (err instanceof SpendCapReachedError) {\n * // Do NOT prompt the buyer to fund their wallet — that won't help.\n * console.error(\n * `Spend cap reached: spent ${err.spentCents} of ${err.capCents} cents. ` +\n * `Resets at ${err.resetsAt}.`,\n * )\n * }\n * }\n * ```\n /\nexport class SpendCapReachedError extends LedewireError {\n static override readonly brand: string = 'SpendCapReachedError'\n\n /* The buyer's daily spend cap in cents. /\n public readonly capCents: number\n\n /* Total spent so far in the current spend window. /\n public readonly spentCents: number\n\n /* Cap minus spend so far, floored at zero — what the buyer may still spend in this window. /\n public readonly remainingCents: number\n\n /* ISO 8601 timestamp (UTC) of the instant the current spend window rolls. /\n public readonly resetsAt: string\n\n /\n Whether this buyer's bulk acquisitions are exempt from the cap. When `true`,\n * `spentCents` and `remainingCents` describe ordinary spend only — an authorized\n * bulk acquisition does not consume them.\n /\n public readonly bulkExempt: boolean\n\n constructor(\n message: string,\n capInfo: {\n capCents: number\n spentCents: number\n remainingCents: number\n resetsAt: string\n bulkExempt: boolean\n },\n code?: number,\n ) {\n super(message, 402, code, 'daily_spend_cap_reached')\n this.name = 'SpendCapReachedError'\n this.capCents = capInfo.capCents\n this.spentCents = capInfo.spentCents\n this.remainingCents = capInfo.remainingCents\n this.resetsAt = capInfo.resetsAt\n this.bulkExempt = capInfo.bulkExempt\n Object.setPrototypeOf(this, new.target.prototype)\n }\n}\n","import { SpendCapReachedError } from './errors.js'\n\n/\n Builds a {@link SpendCapReachedError} from a parsed `402` response body, or\n * `null` when the body isn't a well-formed daily-spend-cap-reached refusal.\n \n Shared by {@link HttpClient}'s error mapping (`POST /v1/purchases`,\n * acquisition authorization) and the `@ledewire/x402-client` fetch/Axios\n * adapters, which see the same body shape on a bare `GET /v1/x402/contents/{id}`\n * `402` — one with no `PAYMENT-REQUIRED` header, so there is nothing to\n * challenge and retrying or funding the wallet cannot clear it.\n \n Requires `error.type === 'daily_spend_cap_reached'` and `cap_cents`,\n * `spent_cents`, `remaining_cents` to be numbers, `resets_at` to be a string,\n * and `bulk_exempt` to be a boolean. A body with the right `error.type` but a\n * missing or mistyped field returns `null` — never `NaN`/`'undefined'` fields\n * on a shape that's merely close — so the caller falls back to its generic\n * error path.\n \n @param body - The parsed JSON body of a `402` response, or `undefined`/`null`\n * if it couldn't be parsed.\n /\nexport function spendCapErrorFromBody(body: unknown): SpendCapReachedError \| null {\n if (!body \|\| typeof body !== 'object') return null\n const record = body as Record<string, unknown>\n\n const error = record['error']\n if (!error \|\| typeof error !== 'object') return null\n const errorRecord = error as Record<string, unknown>\n if (errorRecord['type'] !== 'daily_spend_cap_reached') return null\n\n const capCents = record['cap_cents']\n const spentCents = record['spent_cents']\n const remainingCents = record['remaining_cents']\n const resetsAt = record['resets_at']\n const bulkExempt = record['bulk_exempt']\n\n if (\n typeof capCents !== 'number' \|\|\n typeof spentCents !== 'number' \|\|\n typeof remainingCents !== 'number' \|\|\n typeof resetsAt !== 'string' \|\|\n typeof bulkExempt !== 'boolean'\n ) {\n return null\n }\n\n const message =\n typeof errorRecord['message'] === 'string' ? errorRecord['message'] : 'Daily spend cap reached.'\n const code = typeof errorRecord['code'] === 'number' ? errorRecord['code'] : undefined\n\n return new SpendCapReachedError(\n message,\n { capCents, spentCents, remainingCents, resetsAt, bulkExempt },\n code,\n )\n}\n","import { AuthError, ForbiddenError, LedewireError, NotFoundError } from './errors.js'\nimport type { ErrorTypeValue } from './errors.js'\nimport { spendCapErrorFromBody } from './spend-cap.js'\n\n/\n Configuration options for `HttpClient`.\n /\nexport interface HttpClientConfig {\n /* API base URL. Defaults to the production API. /\n baseUrl?: string\n /\n Returns the current access token (or null) before each request.\n * If null, requests are sent without an Authorization header.\n /\n getAccessToken?: () => string \| null \| Promise<string \| null>\n /\n Called when a 401 is received on the first attempt.\n * Should refresh and return the new access token, or null to propagate\n * an `AuthError` to the caller.\n /\n onUnauthorized?: () => string \| null \| Promise<string \| null>\n}\n\n/\n Per-request overrides accepted by {@link HttpClient} methods.\n /\nexport interface RequestOptions {\n /\n Whether to attach authentication to this request. Defaults to `true`.\n * Pass `false` for public endpoints: skips `getAccessToken`, sends no\n * `Authorization` header, and maps a `401` straight to an {@link AuthError}\n * without invoking `onUnauthorized`.\n /\n auth?: boolean\n}\n\n/* The default LedeWire API base URL used by all SDK packages. /\nexport const DEFAULT_BASE_URL = 'https://api.ledewire.com'\n\n/\n Extracts `{ message, code, type, details }` from a parsed API error body,\n * tolerating shapes that don't match the documented `ErrorResponse` envelope:\n * an empty object, a body with no `error` field at all, `error` as a bare\n * string (e.g. the spec's `{ \"error\": \"Content ... not found\" }` 404 purchase\n * example), `null`, or non-object JSON. Never throws; falls back to\n * `fallbackMessage` (the response's `statusText`) whenever the body doesn't\n * carry a usable message.\n /\nfunction extractErrorInfo(\n body: unknown,\n fallbackMessage: string,\n): {\n message: string\n code: number \| undefined\n type: ErrorTypeValue \| undefined\n details: Record<string, unknown> \| undefined\n} {\n if (!body \|\| typeof body !== 'object' \|\| Array.isArray(body)) {\n return { message: fallbackMessage, code: undefined, type: undefined, details: undefined }\n }\n\n const record = body as Record<string, unknown>\n const { error, ...rest } = record\n const details = Object.keys(rest).length > 0 ? rest : undefined\n\n if (typeof error === 'string') {\n return { message: error, code: undefined, type: undefined, details }\n }\n\n if (!error \|\| typeof error !== 'object' \|\| Array.isArray(error)) {\n return { message: fallbackMessage, code: undefined, type: undefined, details }\n }\n\n const errorRecord = error as Record<string, unknown>\n const message =\n typeof errorRecord['message'] === 'string' ? errorRecord['message'] : fallbackMessage\n const code = typeof errorRecord['code'] === 'number' ? errorRecord['code'] : undefined\n const type = typeof errorRecord['type'] === 'string' ? errorRecord['type'] : undefined\n\n return { message, code, type, details }\n}\n\n/\n Core HTTP client used by all SDK packages.\n \n Features:\n * - Injects `Authorization: Bearer <token>` headers automatically\n * - Maps HTTP error responses to typed `LedewireError` subclasses\n * - On receiving a 401, calls `onUnauthorized` once and retries the request\n * - Per-request `{ auth: false }` (see {@link RequestOptions}) skips all of\n * the above for public endpoints\n \n This is an internal class - consumers should use the\n * package-level client factories (`init` / `createClient`) instead.\n /\nexport class HttpClient {\n private readonly baseUrl: string\n private readonly getAccessToken: NonNullable<HttpClientConfig['getAccessToken']>\n private readonly onUnauthorized: NonNullable<HttpClientConfig['onUnauthorized']>\n\n constructor(config: HttpClientConfig = {}) {\n this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/$/, '')\n this.getAccessToken = config.getAccessToken ?? (() => null)\n this.onUnauthorized = config.onUnauthorized ?? (() => null)\n }\n\n /\n GET request with optional query parameters.\n * @param path - API path (e.g. `/v1/wallet/balance`)\n * @param params - Query string parameters. `undefined` values are omitted; numbers are coerced to strings.\n * @param options - Per-request overrides. Pass `{ auth: false }` for public endpoints.\n /\n async get<T>(\n path: string,\n params?: Record<string, string \| number \| undefined>,\n options?: RequestOptions,\n ): Promise<T> {\n return this.request<T>('GET', this.buildUrl(path, params), undefined, options)\n }\n\n /\n POST request.\n * @param path - API path\n * @param body - Request body (JSON-serialized)\n * @param params - Optional query string parameters. `undefined` values are omitted; numbers are coerced to strings.\n /\n async post<T>(\n path: string,\n body?: unknown,\n params?: Record<string, string \| number \| undefined>,\n ): Promise<T> {\n return this.request<T>('POST', this.buildUrl(path, params), body)\n }\n\n /\n PUT request.\n * @param path - API path\n * @param body - Request body (JSON-serialized)\n /\n async put<T>(path: string, body?: unknown): Promise<T> {\n return this.request<T>('PUT', this.buildUrl(path), body)\n }\n\n /\n PATCH request.\n * @param path - API path\n * @param body - Partial update body (JSON-serialized)\n /\n async patch<T>(path: string, body?: unknown): Promise<T> {\n return this.request<T>('PATCH', this.buildUrl(path), body)\n }\n\n /\n DELETE request.\n * @param path - API path\n /\n async delete<T = void>(path: string): Promise<T> {\n return this.request<T>('DELETE', this.buildUrl(path))\n }\n\n /\n GET request that returns the raw, unparsed `Response` instead of decoded JSON.\n * Used for binary downloads (e.g. `GET /v1/acquisitions/{id}/corpus/download`,\n * which streams a gzip archive when the corpus is ready, or a JSON\n * `CorpusResponse` body otherwise).\n \n Applies the same `Authorization` header injection and single-retry-on-401\n * behaviour as {@link HttpClient.get}, and maps a non-2xx response to the same\n * typed errors — it just skips the `response.json()` decode step so the caller\n * can read the body as a stream, blob, or array buffer.\n \n @param path - API path (e.g. `/v1/acquisitions/{id}/corpus/download`)\n * @returns The raw `Response`. Callers are responsible for reading its body.\n /\n async getRaw(path: string): Promise<Response> {\n return this.performRequest('GET', this.buildUrl(path), {\n Accept: 'application/gzip, application/json',\n })\n }\n\n // ---------------------------------------------------------------------------\n // Private helpers\n // ---------------------------------------------------------------------------\n\n private buildUrl(path: string, params?: Record<string, string \| number \| undefined>): string {\n const url = `${this.baseUrl}${path}`\n if (!params) return url\n const filtered = Object.entries(params).filter(\n (entry): entry is [string, string \| number] => entry[1] !== undefined,\n )\n if (filtered.length === 0) return url\n const qs = new URLSearchParams(filtered.map(([k, v]) => [k, String(v)]))\n return `${url}?${qs.toString()}`\n }\n\n private async request<T>(\n method: string,\n url: string,\n body?: unknown,\n options?: RequestOptions,\n ): Promise<T> {\n const response = await this.performRequest(\n method,\n url,\n { 'Content-Type': 'application/json', Accept: 'application/json' },\n body,\n false,\n options,\n )\n\n if (response.status === 204) {\n return undefined as T\n }\n\n return response.json() as Promise<T>\n }\n\n /\n Shared auth-injection, single-401-retry, and error-mapping logic behind both\n * `request()` (JSON in, JSON out) and `getRaw()` (JSON in, raw `Response` out).\n /\n private async performRequest(\n method: string,\n url: string,\n headers: Record<string, string>,\n body?: unknown,\n isRetry = false,\n options?: RequestOptions,\n ): Promise<Response> {\n const useAuth = options?.auth !== false\n const token = useAuth ? await this.getAccessToken() : null\n const finalHeaders: Record<string, string> = { ...headers }\n if (token) finalHeaders['Authorization'] = `Bearer ${token}`\n\n const response = await fetch(url, {\n method,\n headers: finalHeaders,\n ...(body !== undefined && { body: JSON.stringify(body) }),\n })\n\n if (response.status === 401 && !isRetry) {\n if (useAuth) {\n const newToken = await this.onUnauthorized()\n if (newToken) {\n return this.performRequest(method, url, headers, body, true, options)\n }\n }\n throw new AuthError('Session expired. Please re-authenticate.')\n }\n\n if (!response.ok) {\n await this.throwApiError(response)\n }\n\n return response\n }\n\n private async throwApiError(response: Response): Promise<never> {\n let body: unknown\n try {\n body = await response.json()\n } catch {\n // Non-JSON body - fall through to use statusText\n }\n\n const spendCapError = spendCapErrorFromBody(body)\n if (spendCapError) {\n throw spendCapError\n }\n\n const { message, code, type, details } = extractErrorInfo(body, response.statusText)\n\n switch (response.status) {\n case 401:\n throw new AuthError(message, code, type, details)\n case 403:\n throw new ForbiddenError(message, code, type, details)\n case 404:\n throw new NotFoundError(message, code, type, details)\n default:\n throw new LedewireError(message, response.status, code, type, details)\n }\n }\n}\n","import type { StoredTokens, TokenStorage } from './types.js'\nimport { AuthError } from './errors.js'\n\n/* How many milliseconds before expiry to proactively refresh the token. /\nconst REFRESH_THRESHOLD_MS = 60_000 // 60 seconds\n\n/\n Options for constructing a `TokenManager`.\n /\nexport interface TokenManagerOptions {\n storage: TokenStorage\n /\n Exchanges a refresh token for a new token pair.\n * Implemented by each package's client factory using the\n * `/v1/auth/token/refresh` endpoint.\n /\n refreshFn: (refreshToken: string) => Promise<StoredTokens>\n /\n Called after a successful background token refresh (not on initial login).\n * Use for side-effects only — e.g. audit logging, cache invalidation, or\n * notifying a secondary system when tokens rotate.\n \n Do not use this for token persistence. The `storage` adapter's\n * `setTokens` is the canonical persistence hook and is already called on\n * every refresh. Providing both will result in double-writes.\n \n @example\n * ```ts\n * onTokenRefreshed: async (tokens) => {\n * await auditLog.record('token_refreshed', { expiresAt: tokens.expiresAt })\n * }\n * ```\n /\n onTokenRefreshed?: (tokens: StoredTokens) => void \| Promise<void>\n /\n Called when a refresh attempt fails and the user must re-authenticate.\n * Typically used to redirect to login or emit a UI event.\n \n @example\n * ```ts\n * onAuthExpired: () => { window.location.href = '/login' }\n * ```\n /\n onAuthExpired?: () => void \| Promise<void>\n}\n\n/\n Manages the JWT token lifecycle transparently.\n \n - Proactively refreshes the access token when it expires within 60 seconds\n * - Handles reactive refresh on 401 responses from the HTTP client\n * - Deduplicates concurrent refresh calls (only one in-flight refresh at a time)\n * - Fires `onAuthExpired` when refresh fails so the UI can prompt re-login\n \n This is an internal class - use the package-level client factories instead.\n /\nexport class TokenManager {\n private readonly storage: TokenStorage\n private readonly refreshFn: TokenManagerOptions['refreshFn']\n private readonly onTokenRefreshed: TokenManagerOptions['onTokenRefreshed']\n private readonly onAuthExpired: TokenManagerOptions['onAuthExpired']\n private refreshPromise: Promise<StoredTokens \| null> \| null = null\n\n constructor(options: TokenManagerOptions) {\n this.storage = options.storage\n this.refreshFn = options.refreshFn\n this.onTokenRefreshed = options.onTokenRefreshed\n this.onAuthExpired = options.onAuthExpired\n }\n\n /\n Returns a valid access token, refreshing proactively if needed.\n * Returns `null` if no tokens are stored (user not authenticated).\n /\n async getAccessToken(): Promise<string \| null> {\n const stored = await this.storage.getTokens()\n if (!stored) return null\n\n const expiresInMs = stored.expiresAt - Date.now()\n if (expiresInMs < REFRESH_THRESHOLD_MS) {\n const refreshed = await this.performRefresh(stored.refreshToken)\n return refreshed?.accessToken ?? null\n }\n\n return stored.accessToken\n }\n\n /\n Called by `HttpClient` when a 401 is received.\n * Attempts one refresh; returns the new access token or null.\n /\n async handleUnauthorized(): Promise<string \| null> {\n const stored = await this.storage.getTokens()\n if (!stored) {\n await this.onAuthExpired?.()\n return null\n }\n const refreshed = await this.performRefresh(stored.refreshToken)\n if (!refreshed) await this.onAuthExpired?.()\n return refreshed?.accessToken ?? null\n }\n\n /* Store new tokens after a successful login or signup. /\n async setTokens(tokens: StoredTokens): Promise<void> {\n await this.storage.setTokens(tokens)\n }\n\n /* Clear all stored tokens (call on logout). /\n async clearTokens(): Promise<void> {\n await this.storage.clearTokens()\n }\n\n // ---------------------------------------------------------------------------\n // Private\n // ---------------------------------------------------------------------------\n\n private performRefresh(refreshToken: string): Promise<StoredTokens \| null> {\n if (this.refreshPromise) return this.refreshPromise\n\n this.refreshPromise = this.refreshFn(refreshToken)\n .then(async (tokens) => {\n await this.storage.setTokens(tokens)\n await this.onTokenRefreshed?.(tokens)\n return tokens\n })\n .catch((_err: unknown) => {\n void this.storage.clearTokens()\n throw new AuthError('Token refresh failed. Please re-authenticate.')\n })\n .finally(() => {\n this.refreshPromise = null\n })\n\n return this.refreshPromise\n }\n}\n\n// ---------------------------------------------------------------------------\n// Built-in storage adapters\n// ---------------------------------------------------------------------------\n\n/\n In-memory token storage (default for both packages).\n * Tokens are cleared when the page unloads or the process exits.\n * This is the most secure default for browser environments.\n /\nexport class MemoryTokenStorage implements TokenStorage {\n private tokens: StoredTokens \| null = null\n\n getTokens(): StoredTokens \| null {\n return this.tokens\n }\n\n setTokens(tokens: StoredTokens): void {\n this.tokens = tokens\n }\n\n clearTokens(): void {\n this.tokens = null\n }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/\n Converts an `expires_at` ISO 8601 string from an API auth response\n * into a Unix timestamp (milliseconds) for use in `StoredTokens.expiresAt`.\n \n @param expiresAt - ISO 8601 datetime string, e.g. `\"2026-01-01T12:00:00Z\"`\n * @returns Unix timestamp in milliseconds\n /\nexport function parseExpiresAt(expiresAt: string): number {\n return new Date(expiresAt).getTime()\n}\n\n/\n Creates the standard LedeWire token refresh function for use with `TokenManager`.\n \n Encapsulates the `/v1/auth/token/refresh` fetch call, response mapping, and\n * error handling so both `createClient` (node) and `init` (browser) share a\n * single implementation.\n \n @param baseUrl - The resolved API base URL (e.g. `'https://api.ledewire.com'`)\n * @returns A `refreshFn` compatible with `TokenManagerOptions['refreshFn']`\n /\nexport function createRefreshFn(baseUrl: string): TokenManagerOptions['refreshFn'] {\n return async (refreshToken: string): Promise<StoredTokens> => {\n const res = await fetch(`${baseUrl}/v1/auth/token/refresh`, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ refresh_token: refreshToken }),\n })\n if (!res.ok) throw new Error('Token refresh failed')\n const data = (await res.json()) as {\n access_token: string\n refresh_token: string\n expires_at: string\n }\n return {\n accessToken: data.access_token,\n refreshToken: data.refresh_token,\n expiresAt: parseExpiresAt(data.expires_at),\n }\n }\n}\n","/\n Buyer authentication namespace for browser environments.\n \n Handles buyer signup, email/password login, Google OAuth, and password reset.\n * Tokens are stored automatically in the `TokenManager` after every\n * successful call — callers never need to manage tokens directly.\n \n For seller/API key authentication, use {@link BrowserSellerNamespace.loginWithApiKey}\n * via `lw.seller.loginWithApiKey()`.\n \n @module\n /\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type {\n AuthLoginEmailRequest,\n AuthLoginBuyerApiKeyRequest,\n AuthLoginOAuthRequest,\n AuthPasswordResetBody,\n AuthPasswordResetRequestBody,\n AuthPasswordResetResponse,\n AuthSignupRequest,\n AuthenticationResponse,\n} from '@ledewire/core'\n\n/\n Buyer authentication: signup, email/password login, Google OAuth, password reset.\n \n Obtain via `lw.auth` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.auth.loginWithEmail({ email: 'u@example.com', password: 'pw' })\n * ```\n /\nexport class BrowserAuthNamespace {\n /* @internal /\n constructor(\n private readonly http: HttpClient,\n private readonly tokenManager: TokenManager,\n ) {}\n\n /\n Register a new buyer account with email and password.\n * Tokens are stored automatically after successful signup.\n \n @param body - Signup credentials and display name.\n * @returns The authentication token response.\n /\n async signup(body: AuthSignupRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/signup', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in with email and password.\n * Tokens are stored automatically after successful login.\n \n @param body - Email and password credentials.\n * @returns The authentication token response.\n /\n async loginWithEmail(body: AuthLoginEmailRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/email', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in with a Google ID token obtained from the Google OAuth flow.\n * Tokens are stored automatically after successful login.\n \n @param body - The Google ID token.\n * @returns The authentication token response.\n /\n async loginWithGoogle(body: AuthLoginOAuthRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/google', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Log in using a buyer API key and secret.\n * Returns a buyer-scoped JWT, stored automatically after successful authentication.\n \n Primarily useful when building buyer-facing dashboards where the user\n * has created a named API key and wishes to authenticate with it programmatically,\n * or for agent workflows running inside a browser context.\n \n @param body - The buyer API key and secret.\n * @returns The authentication token response.\n \n @example\n * ```ts\n * await lw.auth.loginWithBuyerApiKey({\n * key: 'bktst_abc123',\n * secret: 'deadbeef...',\n * })\n * ```\n /\n async loginWithBuyerApiKey(body: AuthLoginBuyerApiKeyRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/buyer-api-key', body)\n await this.storeTokens(res)\n return res\n }\n\n /\n Request a password reset code to be sent to the buyer's email address.\n \n The response is intentionally ambiguous — if the email does not exist,\n * the API returns the same success message to prevent account enumeration.\n \n @param body - The buyer's email address.\n * @returns A response with a confirmation message.\n \n @example\n * ```ts\n * await lw.auth.requestPasswordReset({ email: 'buyer@example.com' })\n * // → { data: { message: 'If an account with this email exists, a reset code has been sent.' } }\n * ```\n /\n async requestPasswordReset(\n body: AuthPasswordResetRequestBody,\n ): Promise<AuthPasswordResetResponse> {\n return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset-request', body)\n }\n\n /\n Reset a buyer's password using the code delivered to their email.\n \n Obtain the reset code first by calling `requestPasswordReset()`.\n \n @param body - Email address, 6-digit reset code, and the new password.\n * @returns A response with a confirmation message.\n \n @example\n * ```ts\n * await lw.auth.resetPassword({\n * email: 'buyer@example.com',\n * reset_code: '123456',\n * password: 'new-secure-password',\n * })\n * ```\n /\n async resetPassword(body: AuthPasswordResetBody): Promise<AuthPasswordResetResponse> {\n return this.http.post<AuthPasswordResetResponse>('/v1/auth/password/reset', body)\n }\n\n private async storeTokens(res: AuthenticationResponse): Promise<void> {\n await this.tokenManager.setTokens({\n accessToken: res.access_token,\n refreshToken: res.refresh_token,\n expiresAt: parseExpiresAt(res.expires_at),\n })\n }\n}\n","/\n Platform configuration namespace (browser).\n \n Provides access to public (unauthenticated) platform-level configuration.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { PublicConfigResponse } from '@ledewire/core'\n\n/\n Platform-level configuration for browser clients.\n \n Obtain via `client.config` — do not construct directly.\n /\nexport class BrowserConfigNamespace {\n /* @internal /\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns platform-level public configuration.\n * No authentication required — safe to call before the user has signed in.\n \n Use `google_client_id` to initialise the Google Identity Services library\n * on the storefront login page without requiring a prior authenticated call.\n \n @example\n * ```ts\n * const lw = init({ apiKey: 'your_api_key' })\n * const { google_client_id } = await lw.config.getPublic()\n * google.accounts.id.initialize({ client_id: google_client_id, callback })\n * ```\n /\n async getPublic(): Promise<PublicConfigResponse> {\n return this.http.get<PublicConfigResponse>('/v1/config/public')\n }\n}\n","import { decodeContentFields } from '@ledewire/core'\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentWithAccessResponse } from '@ledewire/core'\n\n/\n Buyer content namespace — fetch content with real-time access information.\n \n Obtain via `lw.content` — do not construct directly.\n \n @example\n * ```ts\n * const result = await lw.content.getWithAccess('content-id')\n * if (result.access_info.has_purchased) {\n * // Note: single-use — a past purchase does not imply access. Buy again\n * // via lw.purchases.create() to receive the content; the delivery comes\n * // back directly in that response, not from this endpoint.\n * }\n * ```\n /\nexport class BrowserContentNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns a content item together with access information for the\n * authenticated buyer (or a generic access response when unauthenticated).\n \n @param id - The content ID.\n * @returns The content item with access information. `content_body` and\n * `teaser` are returned as plain UTF-8 text — the SDK decodes base64\n * transparently so you can render them directly.\n \n @example\n * ```ts\n * const result = await lw.content.getWithAccess('article-123')\n * if (result.access_info.next_required_action === 'purchase') {\n * // Buy (or re-buy) via lw.purchases.create() — the response carries\n * // content_body / content_uri directly. has_purchased means only\n * // \"has ever bought\" and does not by itself grant access.\n * }\n * ```\n /\n async getWithAccess(id: string): Promise<ContentWithAccessResponse> {\n const res = await this.http.get<ContentWithAccessResponse>(\n `/v1/content/${encodeURIComponent(id)}/with-access`,\n )\n return decodeContentFields(res)\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { PurchaseCreateRequest, PurchaseResponse } from '@ledewire/core'\n\n/\n Buyer purchases namespace — create and retrieve content purchases.\n \n Single-use purchase model: a completed purchase does not imply\n * standing access. `has_purchased` on other endpoints means only \"has ever\n * bought\" — it is not a re-access grant. Buying again is how the buyer\n * receives the content a second time; see {@link BrowserPurchasesNamespace.create}.\n \n Obtain via `lw.purchases` — do not construct directly.\n \n @example\n * ```ts\n * await lw.purchases.create({ content_id: 'content-id' })\n * const all = await lw.purchases.list()\n * ```\n /\nexport class BrowserPurchasesNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Completes a content purchase using the buyer's wallet balance and\n * delivers the content in the same response.\n \n This response is the only place the delivered content ever arrives.\n * For a deliverable LedeWire holds, `content_body` carries the full body as\n * plain UTF-8 text — it is never base64-encoded on the wire, so no\n * `atob()` or decoding step is needed. For a deliverable hosted elsewhere,\n * `content_uri` carries its URL instead. Neither field is present on\n * {@link BrowserPurchasesNamespace.get} or {@link BrowserPurchasesNamespace.list}\n * — there is no route that serves the same content a second time — so\n * persist `content_body` / `content_uri` immediately if you need it later.\n * A past purchase does not grant re-access: buying the same content again\n * is a new charge that delivers it again.\n \n @param body - The content ID and expected price in cents.\n * @returns The completed purchase record, including the delivered content.\n * @throws {SpendCapReachedError} `402` — the buyer's daily spend cap has\n * been reached. There is no funding URL for this refusal: adding money\n * to the wallet does not clear it. It clears only when the spend window\n * rolls over at `resetsAt`, or when the cap is raised via\n * `lw.user.spendCap.update()`.\n * @throws {NotFoundError} `404` — the content does not exist, or its\n * visibility is `unlisted` (non-public) and this buyer has no standing\n * grant to see it. Non-public content is not purchasable through this\n * endpoint.\n \n @example\n * ```ts\n * const purchase = await lw.purchases.create({ content_id: 'content-id' })\n * await saveDeliveredContent(purchase) // persist now — one-time delivery\n \n if (purchase.content_body && purchase.content.content_type === 'markdown') {\n * renderMarkdown(purchase.content_body)\n * } else if (purchase.content_body && purchase.content.content_type === 'html') {\n * // Inline HTML is seller-supplied — sanitise before inserting it.\n * container.innerHTML = DOMPurify.sanitize(purchase.content_body)\n * } else if (purchase.content_uri) {\n * // Seller-supplied URI — check the scheme before navigating to it.\n * const uri = new URL(purchase.content_uri)\n * if (['https:', 'http:'].includes(uri.protocol)) {\n * window.location.href = purchase.content_uri\n * }\n * }\n * ```\n /\n async create(body: PurchaseCreateRequest): Promise<PurchaseResponse> {\n return this.http.post<PurchaseResponse>('/v1/purchases', body)\n }\n\n /\n Returns all purchases made by the authenticated buyer.\n \n @returns A list of purchase records, newest first.\n /\n async list(): Promise<PurchaseResponse[]> {\n return this.http.get<PurchaseResponse[]>('/v1/purchases')\n }\n\n /\n Returns a single purchase by ID.\n \n @param id - The purchase ID.\n * @returns The purchase record.\n /\n async get(id: string): Promise<PurchaseResponse> {\n return this.http.get<PurchaseResponse>(`/v1/purchases/${encodeURIComponent(id)}`)\n }\n}\n","/\n Seller content namespace for browser environments.\n \n Read-only operations using a view-permission API key token.\n * Hits the `/v1/seller/content` family of endpoints — store identity is\n * derived server-side from the token, so no `store_id` is required.\n \n @module\n /\nimport { decodeContentFields } from '@ledewire/core'\nimport type { HttpClient } from '@ledewire/core'\nimport type { ContentResponse } from '@ledewire/core'\n\n/\n Search criteria for seller content search.\n * At least one field must be supplied. All supplied fields must match (AND logic).\n /\nexport interface SellerContentSearchRequest {\n /* Case-insensitive partial match against the content title. /\n title?: string\n /* Case-insensitive partial match against the content URI (`external_ref` content only). /\n uri?: string\n /\n Exact match against the content's external identifier.\n * Use the full formatted value as it appears in `ContentResponse.external_identifier`,\n * e.g. `'vimeo:123456789'`.\n /\n external_identifier?: string\n /* Exact key/value pairs to AND-match against content metadata. /\n metadata?: Record<string, unknown>\n}\n\n/\n Seller content namespace — list, search, and fetch store content by API key.\n \n Obtain via `lw.seller.content` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n \n const items = await lw.seller.content.list()\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const item = await lw.seller.content.get('content-id')\n * ```\n /\nexport class BrowserSellerContentNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n List all content for the authenticated seller's store.\n * Requires a token with at least `view` permission.\n \n @returns Array of content items. `teaser` is returned as plain text —\n * the SDK decodes base64 automatically.\n \n @example\n * ```ts\n * const items = await lw.seller.content.list()\n * ```\n /\n async list(): Promise<ContentResponse[]> {\n const res = await this.http.get<ContentResponse[]>('/v1/seller/content')\n return res.map(decodeContentFields)\n }\n\n /\n Search content by title, URI, and/or metadata (AND logic).\n * At least one criterion must be supplied.\n * Requires a token with at least `view` permission.\n \n @param body - Search criteria (title, uri, and/or metadata).\n * @returns Array of matching content items. `teaser` is returned as plain\n * text — the SDK decodes base64 automatically.\n \n @example\n * ```ts\n * const results = await lw.seller.content.search({ title: 'intro' })\n * const byUri = await lw.seller.content.search({ uri: 'vimeo.com' })\n * const byId = await lw.seller.content.search({ external_identifier: 'vimeo:123456789' })\n * const byMeta = await lw.seller.content.search({ metadata: { author: 'Alice' } })\n * ```\n /\n async search(body: SellerContentSearchRequest): Promise<ContentResponse[]> {\n const res = await this.http.post<ContentResponse[]>('/v1/seller/content/search', body)\n return res.map(decodeContentFields)\n }\n\n /\n Get a single content item by ID.\n * Requires a token with at least `view` permission.\n \n @param id - The content ID.\n * @returns The content item. `content_body` and `teaser` are returned as\n * plain UTF-8 text — the SDK decodes base64 automatically so you can render\n * them directly without calling `atob()`.\n \n @example\n * ```ts\n * const item = await lw.seller.content.get('content-id')\n * // item.content_body is plain markdown — no atob() needed\n * ```\n /\n async get(id: string): Promise<ContentResponse> {\n const res = await this.http.get<ContentResponse>(`/v1/seller/content/${encodeURIComponent(id)}`)\n return decodeContentFields(res)\n }\n}\n","/\n Browser seller namespace — API-key-authenticated read operations.\n \n @module\n /\nimport { parseExpiresAt } from '@ledewire/core'\nimport type { HttpClient, TokenManager } from '@ledewire/core'\nimport type { AuthLoginApiKeyRequest, AuthenticationResponse } from '@ledewire/core'\nimport { BrowserSellerContentNamespace } from './content.js'\n\n/\n Seller operations accessible with a view-permission API key token.\n \n Obtain via `lw.seller` — do not construct directly.\n \n @example\n * ```ts\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n \n // Authenticate as a seller (key-only = view; key+secret = full)\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n * const items = await lw.seller.content.list()\n * ```\n /\nexport class BrowserSellerNamespace {\n /* Seller content: list, search, and get by API key. /\n readonly content: BrowserSellerContentNamespace\n\n /* @internal /\n constructor(\n private readonly http: HttpClient,\n private readonly tokenManager: TokenManager,\n ) {\n this.content = new BrowserSellerContentNamespace(http)\n }\n\n /\n Log in using an API key to obtain a seller token.\n * Provide only `key` for read-only (`view`) access.\n * Provide both `key` and `secret` for read/write (`full`) access.\n * Tokens are stored automatically after successful authentication.\n \n Use this before calling `lw.seller.content.` methods.\n \n * @param body - API key credentials.\n * @returns The authentication token response.\n \n @example\n * ```ts\n * // View access (read-only) — sufficient for seller.content.list/search/get\n * await lw.seller.loginWithApiKey({ key: 'your_api_key' })\n \n // Full access (read/write)\n * await lw.seller.loginWithApiKey({ key: 'your_api_key', secret: 'your_secret' })\n * ```\n /\n async loginWithApiKey(body: AuthLoginApiKeyRequest): Promise<AuthenticationResponse> {\n const res = await this.http.post<AuthenticationResponse>('/v1/auth/login/api-key', body)\n await this.tokenManager.setTokens({\n accessToken: res.access_token,\n refreshToken: res.refresh_token,\n expiresAt: parseExpiresAt(res.expires_at),\n })\n return res\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type {\n WalletBalanceResponse,\n WalletPaymentSessionRequest,\n WalletPaymentSessionResponse,\n WalletPaymentStatusResponse,\n WalletTransactionItem,\n} from '@ledewire/core'\n\n/\n Buyer wallet namespace — balance, transactions, and payment session management.\n \n Obtain via `lw.wallet` — do not construct directly.\n \n @example\n * ```ts\n * const { balance_cents } = await lw.wallet.balance()\n * const session = await lw.wallet.createPaymentSession({ amount_cents: 500 })\n * ```\n /\nexport class BrowserWalletNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns the authenticated buyer's current wallet balance.\n \n `balance_cents` and `spendable_cents` are always the same number —\n * `balance_cents` has always meant \"what you can spend,\" and money committed to\n * a bulk acquisition is a hold, which moves it out of the wallet rather than\n * annotating it. `held_cents` is the total currently committed to active bulk\n * acquisitions and not yet spent or released, and `holds` lists one entry per\n * such acquisition (`acquisition_id`, `held_cents`, `authorized_at`) so a buyer\n * mid-acquisition can see why their balance is lower than their purchase\n * history explains.\n \n @returns The current wallet balance in cents, including held funds detail.\n /\n async balance(): Promise<WalletBalanceResponse> {\n return this.http.get<WalletBalanceResponse>('/v1/wallet/balance')\n }\n\n /\n Returns the authenticated buyer's wallet transaction history, newest first.\n \n `bulk_acquisition` and `bulk_hold` are each a single entry for a whole bulk\n * acquisition — its per-work purchases are deliberately not listed here,\n * because one acquisition can hold tens of thousands of them and they describe\n * one decision. A `bulk_hold` entry is an acquisition still holding funds (money\n * left the wallet but has not been spent); it becomes a `bulk_acquisition` entry\n * for the amount actually captured once the acquisition ends, and an\n * acquisition never produces both. Note that a bulk acquisition's per-work\n * purchases each carry a display `price_cents` that is not summable — bulk\n * prices at micro precision and rounds to cents once, on the acquisition total,\n * so `amount_cents` on the `bulk_acquisition` / `bulk_hold` entry is the figure\n * to read.\n \n @returns A list of completed wallet transaction entries.\n /\n async transactions(): Promise<WalletTransactionItem[]> {\n return this.http.get<WalletTransactionItem[]>('/v1/wallet/transactions')\n }\n\n /\n Creates a payment session for funding the buyer's wallet.\n \n @param body - The amount and currency to fund.\n * @returns Payment session details for use with the payment provider widget.\n /\n async createPaymentSession(\n body: WalletPaymentSessionRequest,\n ): Promise<WalletPaymentSessionResponse> {\n return this.http.post<WalletPaymentSessionResponse>('/v1/wallet/payment-session', body)\n }\n\n /\n Polls the status of a wallet funding payment session.\n \n @param sessionId - The session ID returned by `createPaymentSession`.\n * @returns The current payment status.\n /\n async getPaymentStatus(sessionId: string): Promise<WalletPaymentStatusResponse> {\n return this.http.get<WalletPaymentStatusResponse>(\n `/v1/wallet/payment-status/${encodeURIComponent(sessionId)}`,\n )\n }\n}\n","import type { HttpClient } from '@ledewire/core'\nimport type { CheckoutStateResponse } from '@ledewire/core'\n\n/\n Checkout namespace — buyer checkout state for a specific content item.\n \n Obtain via `lw.checkout` — do not construct directly.\n \n @example\n * ```ts\n * const state = await lw.checkout.state('content-id')\n * // state.checkout_state.next_required_action:\n * // 'authenticate' \| 'fund_wallet' \| 'purchase'\n * //\n * // Single-use model: a completed purchase does not imply access, so\n * // 'purchase' can still be the next action even when has_purchased is\n * // true. Buying delivers the content directly in the POST /v1/purchases\n * // response — there is no separate \"view content\" step.\n * ```\n /\nexport class CheckoutNamespace {\n constructor(protected readonly http: HttpClient) {}\n\n /\n Returns the authenticated buyer's checkout readiness for a given piece of\n * content. Indicates whether the buyer needs to authenticate, fund their\n * wallet, or purchase before accessing the content.\n \n Works without authentication — returns anonymous checkout state when the\n * buyer is not logged in.\n \n @param contentId - The content item ID.\n * @returns The checkout state, including what action is required next.\n /\n async state(contentId: string): Promise<CheckoutStateResponse> {\n return this.http.get<CheckoutStateResponse>(\n `/v1/checkout/state/${encodeURIComponent(contentId)}`,\n )\n }\n}\n","/\n Buyer API key management namespace.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { UserApiKey, UserApiKeyCreateRequest, UserApiKeyCreateResponse } from '@ledewire/core'\n\n/\n Manage buyer API keys for the authenticated user.\n \n Buyer API keys are the authentication credential for autonomous agents — they\n * allow an agent to obtain a buyer JWT via `auth.loginWithBuyerApiKey()` without\n * requiring a username and password. Each key is named, independently revocable,\n * and can carry an optional `spending_limit_cents` ceiling.\n \n Secret handling: `create()` returns the `secret` exactly once. It is never\n * retrievable again after the response is received — store it immediately in a\n * secrets manager (e.g. environment variable, Vault, AWS Secrets Manager).\n \n Obtain via `client.user.apiKeys` — do not construct directly.\n \n @example\n * ```ts\n * // Create a key for an agent, with a $10 spend ceiling\n * const { key, secret } = await client.user.apiKeys.create({\n * name: 'my-rag-agent',\n * spending_limit_cents: 1000,\n * })\n * // Store secret immediately — it cannot be retrieved again\n * await secretsManager.put('LEDEWIRE_BUYER_SECRET', secret)\n \n // List all keys (secrets never included)\n * const keys = await client.user.apiKeys.list()\n \n // Revoke a compromised key\n * await client.user.apiKeys.revoke(keys[0].id)\n * ```\n /\nexport class UserApiKeysNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n Returns all buyer API keys for the authenticated user.\n * The `secret` is never included in list responses.\n \n @returns Array of API key records.\n /\n async list(): Promise<UserApiKey[]> {\n return this.http.get<UserApiKey[]>('/v1/user/api-keys')\n }\n\n /\n Creates a new buyer API key.\n \n The `secret` in the response is shown exactly once and cannot be retrieved\n * again. Store it immediately in a secrets manager before discarding the\n * response object.\n \n @param body - Name and optional spend ceiling for the new key.\n * @returns The new key's public identifier and one-time secret.\n \n @example\n * ```ts\n * const { key, secret } = await client.user.apiKeys.create({\n * name: 'production-agent',\n * spending_limit_cents: 5000, // $50 cap\n * })\n * // ⚠️ Store secret NOW — it is shown once only\n * process.env.LEDEWIRE_BUYER_SECRET = secret\n * ```\n /\n async create(body: UserApiKeyCreateRequest): Promise<UserApiKeyCreateResponse> {\n return this.http.post<UserApiKeyCreateResponse>('/v1/user/api-keys', body)\n }\n\n /\n Revokes (permanently deletes) a buyer API key by ID.\n \n Any agent currently using this key will receive `401` on its next\n * token refresh. Revocation takes effect immediately.\n \n @param id - UUID of the API key to revoke.\n /\n async revoke(id: string): Promise<void> {\n return this.http.delete(`/v1/user/api-keys/${encodeURIComponent(id)}`)\n }\n}\n","/\n Buyer daily spend cap namespace.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { UserSpendCap, UserSpendCapUpdateRequest } from '@ledewire/core'\n\n/\n Manage the authenticated buyer's daily spend cap.\n \n Every new buyer starts with a default cap, so `null` on {@link\n * UserSpendCapNamespace.update} is the only way to become uncapped — there is no\n * separate \"remove the cap\" call. While capped, `cap_cents` and `remaining_cents`\n * are numbers; once uncapped, both read back as `null` because there is no ceiling\n * to report or subtract from.\n \n The cap governs every wallet debit the buyer makes — MCP, REST, or the web\n * payment gate — over a rolling window bounded by `spend_window_timezone` (an IANA\n * zone, UTC by default) and reset at `resets_at`. `bulk_exempt` says whether this\n * buyer's bulk acquisitions are excluded from that spend, in which case\n * `spent_cents` / `remaining_cents` describe ordinary purchases only.\n \n Exceeding the cap throws {@link SpendCapReachedError} (HTTP 402) from\n * `client.purchases.create()` and the x402 content gate. Funding the wallet does not\n * clear it — the buyer must wait for the window to roll at `resets_at`, or the cap\n * must be raised or cleared here.\n \n Obtain via `client.user.spendCap` — do not construct directly.\n \n @example\n * ```ts\n * const cap = await client.user.spendCap.get()\n * if (cap.remaining_cents !== null && cap.remaining_cents < 500) {\n * console.warn(`Only ${cap.remaining_cents}c left before the cap resets at ${cap.resets_at}`)\n * }\n \n // Raise the cap to $20/day\n * await client.user.spendCap.update({ daily_spend_limit_cents: 2000 })\n \n // Remove the cap entirely (become uncapped)\n * await client.user.spendCap.update({ daily_spend_limit_cents: null })\n * ```\n /\nexport class UserSpendCapNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n Returns the authenticated buyer's spend cap, read against the current spend\n * window.\n \n @returns The current spend cap, spend-to-date, and reset time.\n /\n async get(): Promise<UserSpendCap> {\n return this.http.get<UserSpendCap>('/v1/user/spend-cap')\n }\n\n /\n Sets or clears the authenticated buyer's daily spend cap.\n \n `daily_spend_limit_cents` is required and nullable: pass a number to set the\n * cap, or `null` to remove it (the only way to become uncapped). A cap set below\n * spend already made in the current window is accepted — it just leaves\n * `remaining_cents` at zero until the window rolls.\n \n @param body - The new cap in whole cents, or `null` to remove it.\n * @returns The updated spend cap.\n /\n async update(body: UserSpendCapUpdateRequest): Promise<UserSpendCap> {\n return this.http.patch<UserSpendCap>('/v1/user/spend-cap', body)\n }\n}\n","/\n MCP API key management namespace.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport type { McpApiKey, McpApiKeyCreateRequest, McpApiKeyCreateResponse } from '@ledewire/core'\n\n/\n Manage the authenticated buyer's MCP API keys.\n \n MCP API keys authenticate agent requests against the Ledewire MCP server, sent\n * as `Authorization: Bearer <key>:<secret>`. Each key carries an explicit set of\n * scopes — `can_search` (default `true`), `can_purchase` (default `false`), and\n * the seller-tier `can_manage_content` / `can_read_analytics`, which additionally\n * require `store_id` to be set to a store the user owns or authors.\n \n Secret handling: `create()` returns the `secret` exactly once. It is never\n * retrievable again — store it immediately, alongside the `key`, in a secrets\n * manager.\n \n Changing permissions: scopes are fixed at creation. To change what a key\n * can do, revoke it and create a replacement with the desired scopes.\n \n Obtain via `client.user.mcpKeys` — do not construct directly.\n \n @example\n * ```ts\n * // Create a search+purchase key for an autonomous agent\n * const { key, secret } = await client.user.mcpKeys.create({\n * label: 'my-rag-agent',\n * can_search: true,\n * can_purchase: true,\n * })\n * // Store immediately — the secret cannot be retrieved again\n * await secretsManager.put('LEDEWIRE_MCP_CREDENTIAL', `${key}:${secret}`)\n \n // List all keys (secrets never included)\n * const keys = await client.user.mcpKeys.list()\n \n // To change permissions: revoke and recreate\n * await client.user.mcpKeys.revoke(keys[0].id)\n * ```\n /\nexport class UserMcpKeysNamespace {\n /* @internal /\n constructor(private readonly http: HttpClient) {}\n\n /\n Returns all MCP API keys for the authenticated user.\n * The `secret` is never included in list responses.\n \n @returns Array of MCP API key records.\n /\n async list(): Promise<McpApiKey[]> {\n return this.http.get<McpApiKey[]>('/v1/mcp/keys')\n }\n\n /\n Creates a new MCP API key.\n \n The `secret` in the response is shown exactly once and cannot be retrieved\n * again. Store it immediately alongside `key` — the pair is used together as\n * `Authorization: Bearer <key>:<secret>` against the Ledewire MCP server.\n \n @param body - Label and scopes for the new key.\n * @returns The new key's public identifier, scopes, and one-time secret.\n \n @example\n * ```ts\n * const { key, secret } = await client.user.mcpKeys.create({\n * label: 'production-agent',\n * can_search: true,\n * can_purchase: true,\n * })\n * ```\n /\n async create(body: McpApiKeyCreateRequest): Promise<McpApiKeyCreateResponse> {\n return this.http.post<McpApiKeyCreateResponse>('/v1/mcp/keys', body)\n }\n\n /\n Revokes (permanently deletes) an MCP API key by ID.\n \n To change a key's permissions, revoke it and create a replacement with the\n * desired scopes — scopes cannot be edited in place.\n \n @param id - UUID of the MCP API key to revoke.\n /\n async revoke(id: string): Promise<void> {\n return this.http.delete(`/v1/mcp/keys/${encodeURIComponent(id)}`)\n }\n}\n","/\n User namespace — authenticated buyer account operations.\n \n @module\n /\nimport type { HttpClient } from '@ledewire/core'\nimport { UserApiKeysNamespace } from './api-keys.js'\nimport { UserSpendCapNamespace } from './spend-cap.js'\nimport { UserMcpKeysNamespace } from './mcp-keys.js'\n\n/\n Authenticated buyer account operations.\n \n Obtain via `client.user` — do not construct directly.\n /\nexport class UserNamespace {\n /\n Buyer API key management: create, list, and revoke named API keys.\n * Keys are used by autonomous agents to authenticate without a username/password.\n /\n readonly apiKeys: UserApiKeysNamespace\n\n /\n The authenticated buyer's daily spend cap: read and update the ceiling that\n * governs every wallet debit (MCP, REST, and the web payment gate).\n /\n readonly spendCap: UserSpendCapNamespace\n\n /\n MCP API key management: create, list, and revoke keys scoped for use against\n * the Ledewire MCP server.\n /\n readonly mcpKeys: UserMcpKeysNamespace\n\n /* @internal /\n constructor(http: HttpClient) {\n this.apiKeys = new UserApiKeysNamespace(http)\n this.spendCap = new UserSpendCapNamespace(http)\n this.mcpKeys = new UserMcpKeysNamespace(http)\n }\n}\n","import {\n DEFAULT_BASE_URL,\n HttpClient,\n MemoryTokenStorage,\n TokenManager,\n createRefreshFn,\n} from '@ledewire/core'\nimport type { TokenStorage } from '@ledewire/core'\nimport { BrowserAuthNamespace } from './resources/auth.js'\nimport { BrowserConfigNamespace } from './resources/config.js'\nimport { BrowserContentNamespace } from './resources/content.js'\nimport { BrowserPurchasesNamespace } from './resources/purchases.js'\nimport { BrowserSellerNamespace } from './resources/seller/index.js'\nimport { BrowserWalletNamespace } from './resources/wallet.js'\nimport { CheckoutNamespace } from './resources/checkout.js'\nimport { UserNamespace } from './resources/user/index.js'\n\n/\n Configuration options for the LedeWire browser client.\n /\nexport interface BrowserClientConfig {\n /\n LedeWire API key that identifies the store.\n * Obtained from the LedeWire merchant dashboard.\n /\n apiKey: string\n /\n Override the API base URL.\n * Defaults to `https://api.ledewire.com`.\n /\n baseUrl?: string\n /\n Token storage adapter.\n * Defaults to {@link MemoryTokenStorage} (in-memory, most secure).\n \n To persist sessions across page reloads, use the built-in\n * `localStorageAdapter`:\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n * const lw = init({ apiKey: '...', storage: localStorageAdapter() })\n * ```\n /\n storage?: TokenStorage\n /\n Called when the user's session expires and cannot be refreshed.\n * Use this to show a re-authentication prompt.\n \n @example\n * ```ts\n * onAuthExpired: () => showLoginModal()\n * ```\n /\n onAuthExpired?: () => void\n}\n\n/\n Initialises a LedeWire browser client.\n * This is the primary entry point for the browser SDK.\n \n @example CDN usage:\n * ```html\n * <script src=\"https://cdn.jsdelivr.net/npm/@ledewire/browser@1/dist/ledewire.min.js\"></script>\n * <script>\n * const lw = Ledewire.init({ apiKey: 'your_api_key' })\n * const state = await lw.checkout.state('content-id')\n * </script>\n * ```\n \n @example npm usage:\n * ```ts\n * import { init } from '@ledewire/browser'\n * const lw = init({ apiKey: 'your_api_key' })\n * ```\n /\nexport function init(config: BrowserClientConfig): BrowserClient {\n const baseUrl = config.baseUrl ?? DEFAULT_BASE_URL\n const storage = config.storage ?? new MemoryTokenStorage()\n\n const tokenManager = new TokenManager({\n storage,\n refreshFn: createRefreshFn(baseUrl),\n ...(config.onAuthExpired !== undefined && { onAuthExpired: config.onAuthExpired }),\n })\n\n const http = new HttpClient({\n baseUrl,\n getAccessToken: () => tokenManager.getAccessToken(),\n onUnauthorized: () => tokenManager.handleUnauthorized(),\n })\n\n return new BrowserClient(http, tokenManager, config)\n}\n\n/\n The LedeWire browser client.\n * Access buyer flows through the namespaced properties.\n \n @remarks\n * Instantiate with {@link init} rather than constructing directly.\n /\nexport class BrowserClient {\n /* Platform-level public configuration (no auth required) /\n readonly config: BrowserConfigNamespace\n\n /* Buyer authentication: email/password signup/login, Google OAuth, password reset /\n readonly auth: BrowserAuthNamespace\n\n /* Checkout state machine: determines next action for a piece of content /\n readonly checkout: CheckoutNamespace\n\n /* Wallet: balance, fund via payment session, transaction history /\n readonly wallet: BrowserWalletNamespace\n\n /* Content purchases for the authenticated buyer /\n readonly purchases: BrowserPurchasesNamespace\n\n /* Public content with per-user access information /\n readonly content: BrowserContentNamespace\n\n /* Seller operations: API key login, content list/search/get /\n readonly seller: BrowserSellerNamespace\n\n /* Authenticated buyer account: API key management /\n readonly user: UserNamespace\n\n /* @internal /\n constructor(\n private readonly _http: HttpClient,\n private readonly _tokenManager: TokenManager,\n private readonly _config: BrowserClientConfig,\n ) {\n this.config = new BrowserConfigNamespace(_http)\n this.auth = new BrowserAuthNamespace(_http, _tokenManager)\n this.checkout = new CheckoutNamespace(_http)\n this.wallet = new BrowserWalletNamespace(_http)\n this.purchases = new BrowserPurchasesNamespace(_http)\n this.content = new BrowserContentNamespace(_http)\n this.seller = new BrowserSellerNamespace(_http, _tokenManager)\n this.user = new UserNamespace(_http)\n }\n}\n","import type { TokenStorage, StoredTokens } from '@ledewire/core'\n\nconst DEFAULT_STORAGE_KEY = 'lw:tokens'\n\n/\n Shared implementation for `localStorage` and `sessionStorage` adapters.\n * Not exported from the public API — use {@link localStorageAdapter} or\n * {@link sessionStorageAdapter} instead.\n \n @internal\n /\nexport function webStorageAdapter(backend: Storage, key = DEFAULT_STORAGE_KEY): TokenStorage {\n return {\n getTokens(): StoredTokens \| null {\n const raw = backend.getItem(key)\n if (!raw) return null\n try {\n return JSON.parse(raw) as StoredTokens\n } catch {\n // Corrupted value — treat as empty\n return null\n }\n },\n setTokens(tokens: StoredTokens): void {\n backend.setItem(key, JSON.stringify(tokens))\n },\n clearTokens(): void {\n backend.removeItem(key)\n },\n }\n}\n","import type { TokenStorage } from '@ledewire/core'\nimport { webStorageAdapter } from './web-storage-adapter.js'\n\n/\n A {@link TokenStorage} adapter that persists tokens in `localStorage`.\n \n Tokens survive page reloads and browser restarts, which is convenient\n * for sites where users expect persistent sessions.\n \n Security note: `localStorage` is accessible to any JavaScript on the\n * same origin. Only use this adapter on sites you fully control and trust.\n * The default in-memory storage is safer for high-security use cases.\n \n @param key - The `localStorage` key used to store tokens.\n * Defaults to `'lw:tokens'`. Override this if you have multiple\n * LedeWire integrations on the same origin.\n \n @example\n * ```ts\n * import { init, localStorageAdapter } from '@ledewire/browser'\n \n const lw = init({\n * apiKey: 'your_api_key',\n * storage: localStorageAdapter(),\n * })\n * ```\n /\nexport function localStorageAdapter(key?: string): TokenStorage {\n return webStorageAdapter(localStorage, key)\n}\n","import type { TokenStorage } from '@ledewire/core'\nimport { webStorageAdapter } from './web-storage-adapter.js'\n\n/\n A {@link TokenStorage} adapter that persists tokens in `sessionStorage`.\n \n Tokens survive page reloads within the same tab but are cleared when the\n * tab is closed or the session ends. This prevents token leakage across\n * tabs and is a good default for sites where users do not expect persistent\n * sessions (e.g. embedded checkout widgets, kiosk-mode UIs).\n \n Security note: `sessionStorage` is accessible to any JavaScript on the\n * same origin and tab. It is more isolated than `localStorage` (no\n * cross-tab sharing), but the default in-memory storage is still safer for\n * high-security use cases.\n \n @param key - The `sessionStorage` key used to store tokens.\n * Defaults to `'lw:tokens'`. Override this if you have multiple\n * LedeWire integrations on the same origin.\n \n @example\n * ```ts\n * import { init, sessionStorageAdapter } from '@ledewire/browser'\n \n const lw = init({\n * apiKey: 'your_api_key',\n * storage: sessionStorageAdapter(),\n * })\n * ```\n */\nexport function sessionStorageAdapter(key?: string): TokenStorage {\n return webStorageAdapter(sessionStorage, key)\n}\n"],"mappings":"uFAQA,SAAgB,EAAa,EAAuB,CAClD,OAAO,KAAK,CAAK,CACnB,CAsBA,SAAgB,EAEd,EAAY,CACZ,MAAO,CACL,GAAG,EACH,GAAI,OAAO,EAAK,cAAiB,UAAY,CAC3C,aAAc,EAAa,EAAK,YAAY,CAC9C,EACA,GAAI,OAAO,EAAK,QAAW,UAAY,CAAE,OAAQ,EAAa,EAAK,MAAM,CAAE,CAC7E,CACF,2rBClBM,EAAc,OAAO,IAAI,wBAAwB,IAwGpC,OAAO,YAjF1B,IAAa,EAAb,cAAmC,KAAM,CAgCvC,YACE,EACA,EACA,EACA,EACA,EACA,CACA,MAAM,CAAO,SA7Bf,aAAA,IAAA,EAAA,SAGA,OAAA,IAAA,EAAA,SAQA,OAAA,IAAA,EAAA,SASA,UAAA,IAAA,EAAA,EAUE,KAAK,KAAO,gBACZ,KAAK,WAAa,EAClB,KAAK,KAAO,EACZ,KAAK,KAAO,EACZ,KAAK,QAAU,EAEf,OAAO,eAAe,KAAM,IAAI,OAAO,SAAS,EAKhD,IAAM,EAAmB,CAAC,EACtB,EAAgB,IAAI,OACxB,KAAO,OAAO,GAAS,YAAY,CACjC,IAAM,EAAY,EAA6B,MAC3C,OAAO,GAAa,UAAY,OAAO,UAAU,eAAe,KAAK,EAAM,OAAO,GACpF,EAAO,KAAK,CAAQ,EAEtB,EAAO,OAAO,eAAe,CAAI,CACnC,CACA,OAAO,eAAe,KAAM,EAAa,CACvC,MAAO,EACP,WAAY,GACZ,aAAc,EAChB,CAAC,CACH,CAgBA,OAAA,GAAqC,EAA4B,CAC/D,GAAI,SAAS,UAAU,OAAO,YAAY,CAAC,KAAK,KAAM,CAAQ,EAC5D,MAAO,GAET,GAAI,CAAC,GAAa,OAAO,GAAa,UAAY,OAAO,GAAa,WACpE,MAAO,GAET,IAAM,EAAU,EAA0C,GAC1D,OAAO,MAAM,QAAQ,CAAM,GAAK,EAAO,SAAS,KAAK,KAAK,CAC5D,CACF,MApFkB,QAAgB,eAAA,EA0FlC,IAAa,EAAb,cAA+B,CAAc,CAG3C,YACE,EACA,EACA,EACA,EACA,CACA,MAAM,EAAS,IAAK,EAAM,EAAM,CAAO,EACvC,KAAK,KAAO,WACd,CACF,MAX2B,QAAgB,WAAA,EA+D3C,IAAa,EAAb,cAAoC,CAAc,CAGhD,YACE,EACA,EACA,EACA,EACA,CACA,MAAM,EAAS,IAAK,EAAM,EAAM,CAAO,EACvC,KAAK,KAAO,gBACd,CACF,MAX2B,QAAgB,gBAAA,EAgB3C,IAAa,EAAb,cAAmC,CAAc,CAG/C,YACE,EACA,EACA,EACA,EACA,CACA,MAAM,EAAS,IAAK,EAAM,EAAM,CAAO,EACvC,KAAK,KAAO,eACd,CACF,MAX2B,QAAgB,eAAA,EAiB3C,IAAa,EAAb,cAAmC,CAAc,CAG/C,YACE,EACA,EACA,EACA,EACA,EACA,CACA,MAAM,EAAS,EAAY,EAAM,EAAM,CAAO,EAC9C,KAAK,KAAO,eACd,CACF,MAZ2B,QAAgB,eAAA,EA0C3C,IAAa,EAAb,cAA0C,CAAc,CAsBtD,YACE,EACA,EAOA,EACA,CACA,MAAM,EAAS,IAAK,EAAM,yBAAyB,SA7BrD,WAAA,IAAA,EAAA,SAGA,aAAA,IAAA,EAAA,SAGA,iBAAA,IAAA,EAAA,SAGA,WAAA,IAAA,EAAA,SAOA,aAAA,IAAA,EAAA,EAcE,KAAK,KAAO,uBACZ,KAAK,SAAW,EAAQ,SACxB,KAAK,WAAa,EAAQ,WAC1B,KAAK,eAAiB,EAAQ,eAC9B,KAAK,SAAW,EAAQ,SACxB,KAAK,WAAa,EAAQ,WAC1B,OAAO,eAAe,KAAM,IAAI,OAAO,SAAS,CAClD,CACF,MAzC2B,QAAgB,sBAAA,ECzQ3C,SAAgB,EAAsB,EAA4C,CAChF,GAAI,CAAC,GAAQ,OAAO,GAAS,SAAU,OAAO,KAC9C,IAAM,EAAS,EAET,EAAQ,EAAO,MACrB,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,OAAO,KAChD,IAAM,EAAc,EACpB,GAAI,EAAY,OAAY,0BAA2B,OAAO,KAE9D,IAAM,EAAW,EAAO,UAClB,EAAa,EAAO,YACpB,EAAiB,EAAO,gBACxB,EAAW,EAAO,UAClB,EAAa,EAAO,YAE1B,GACE,OAAO,GAAa,UACpB,OAAO,GAAe,UACtB,OAAO,GAAmB,UAC1B,OAAO,GAAa,UACpB,OAAO,GAAe,UAEtB,OAAO,KAGT,IAAM,EACJ,OAAO,EAAY,SAAe,SAAW,EAAY,QAAa,2BAClE,EAAO,OAAO,EAAY,MAAY,SAAW,EAAY,KAAU,IAAA,GAE7E,OAAO,IAAI,EACT,EACA,CAAE,WAAU,aAAY,iBAAgB,WAAU,YAAW,EAC7D,CACF,CACF,CCRA,SAAS,EACP,EACA,EAMA,CACA,GAAI,CAAC,GAAQ,OAAO,GAAS,UAAY,MAAM,QAAQ,CAAI,EACzD,MAAO,CAAE,QAAS,EAAiB,KAAM,IAAA,GAAW,KAAM,IAAA,GAAW,QAAS,IAAA,EAAU,EAI1F,GAAM,CAAE,QAAO,GAAG,GAAS,EACrB,EAAU,OAAO,KAAK,CAAI,CAAC,CAAC,OAAS,EAAI,EAAO,IAAA,GAEtD,GAAI,OAAO,GAAU,SACnB,MAAO,CAAE,QAAS,EAAO,KAAM,IAAA,GAAW,KAAM,IAAA,GAAW,SAAQ,EAGrE,GAAI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EAC5D,MAAO,CAAE,QAAS,EAAiB,KAAM,IAAA,GAAW,KAAM,IAAA,GAAW,SAAQ,EAG/E,IAAM,EAAc,EAMpB,MAAO,CAAE,QAJP,OAAO,EAAY,SAAe,SAAW,EAAY,QAAa,EAItD,KAHL,OAAO,EAAY,MAAY,SAAW,EAAY,KAAU,IAAA,GAGrD,KAFX,OAAO,EAAY,MAAY,SAAW,EAAY,KAAU,IAAA,GAE/C,SAAQ,CACxC,CAeA,IAAa,EAAb,KAAwB,CAKtB,YAAY,EAA2B,CAAC,EAAG,QAJ3C,UAAA,IAAA,EAAA,SACA,iBAAA,IAAA,EAAA,SACA,iBAAA,IAAA,EAAA,EAGE,KAAK,SAAW,EAAO,SAAA,2BAAA,CAA6B,QAAQ,MAAO,EAAE,EACrE,KAAK,eAAiB,EAAO,qBAAyB,MACtD,KAAK,eAAiB,EAAO,qBAAyB,KACxD,CAQA,MAAM,IACJ,EACA,EACA,EACY,CACZ,OAAO,KAAK,QAAW,MAAO,KAAK,SAAS,EAAM,CAAM,EAAG,IAAA,GAAW,CAAO,CAC/E,CAQA,MAAM,KACJ,EACA,EACA,EACY,CACZ,OAAO,KAAK,QAAW,OAAQ,KAAK,SAAS,EAAM,CAAM,EAAG,CAAI,CAClE,CAOA,MAAM,IAAO,EAAc,EAA4B,CACrD,OAAO,KAAK,QAAW,MAAO,KAAK,SAAS,CAAI,EAAG,CAAI,CACzD,CAOA,MAAM,MAAS,EAAc,EAA4B,CACvD,OAAO,KAAK,QAAW,QAAS,KAAK,SAAS,CAAI,EAAG,CAAI,CAC3D,CAMA,MAAM,OAAiB,EAA0B,CAC/C,OAAO,KAAK,QAAW,SAAU,KAAK,SAAS,CAAI,CAAC,CACtD,CAgBA,MAAM,OAAO,EAAiC,CAC5C,OAAO,KAAK,eAAe,MAAO,KAAK,SAAS,CAAI,EAAG,CACrD,OAAQ,oCACV,CAAC,CACH,CAMA,SAAiB,EAAc,EAA8D,CAC3F,IAAM,EAAM,GAAG,KAAK,UAAU,IAC9B,GAAI,CAAC,EAAQ,OAAO,EACpB,IAAM,EAAW,OAAO,QAAQ,CAAM,CAAC,CAAC,OACrC,GAA8C,EAAM,KAAO,IAAA,EAC9D,EAGA,OAFI,EAAS,SAAW,EAAU,EAE3B,GAAG,EAAI,GAAG,IADF,gBAAgB,EAAS,KAAK,CAAC,EAAG,KAAO,CAAC,EAAG,OAAO,CAAC,CAAC,CAAC,CACrD,CAAA,CAAG,SAAS,GAC/B,CAEA,MAAc,QACZ,EACA,EACA,EACA,EACY,CACZ,IAAM,EAAW,MAAM,KAAK,eAC1B,EACA,EACA,CAAE,eAAgB,mBAAoB,OAAQ,kBAAmB,EACjE,EACA,GACA,CACF,EAEI,KAAS,SAAW,IAIxB,OAAO,EAAS,KAAK,CACvB,CAMA,MAAc,eACZ,EACA,EACA,EACA,EACA,EAAU,GACV,EACmB,CACnB,IAAM,EAAU,GAAS,OAAS,GAC5B,EAAQ,EAAU,MAAM,KAAK,eAAe,EAAI,KAChD,EAAuC,CAAE,GAAG,CAAQ,EACtD,IAAO,EAAa,cAAmB,UAAU,KAErD,IAAM,EAAW,MAAM,MAAM,EAAK,CAChC,SACA,QAAS,EACT,GAAI,IAAS,IAAA,IAAa,CAAE,KAAM,KAAK,UAAU,CAAI,CAAE,CACzD,CAAC,EAED,GAAI,EAAS,SAAW,KAAO,CAAC,EAAS,CACvC,GAAI,GAEE,MADmB,KAAK,eAAe,EAEzC,OAAO,KAAK,eAAe,EAAQ,EAAK,EAAS,EAAM,GAAM,CAAO,EAGxE,MAAM,IAAI,EAAU,0CAA0C,CAChE,CAMA,OAJK,EAAS,IACZ,MAAM,KAAK,cAAc,CAAQ,EAG5B,CACT,CAEA,MAAc,cAAc,EAAoC,CAC9D,IAAI,EACJ,GAAI,CACF,EAAO,MAAM,EAAS,KAAK,CAC7B,MAAQ,CAER,CAEA,IAAM,EAAgB,EAAsB,CAAI,EAChD,GAAI,EACF,MAAM,EAGR,GAAM,CAAE,UAAS,OAAM,OAAM,WAAY,EAAiB,EAAM,EAAS,UAAU,EAEnF,OAAQ,EAAS,OAAjB,CACE,IAAK,KACH,MAAM,IAAI,EAAU,EAAS,EAAM,EAAM,CAAO,EAClD,IAAK,KACH,MAAM,IAAI,EAAe,EAAS,EAAM,EAAM,CAAO,EACvD,IAAK,KACH,MAAM,IAAI,EAAc,EAAS,EAAM,EAAM,CAAO,EACtD,QACE,MAAM,IAAI,EAAc,EAAS,EAAS,OAAQ,EAAM,EAAM,CAAO,CACzE,CACF,CACF,ECvRM,EAAuB,IAoDhB,EAAb,KAA0B,CAOxB,YAAY,EAA8B,QAN1C,UAAA,IAAA,EAAA,SACA,YAAA,IAAA,EAAA,SACA,mBAAA,IAAA,EAAA,SACA,gBAAA,IAAA,EAAA,SACA,iBAA8D,IAAA,EAG5D,KAAK,QAAU,EAAQ,QACvB,KAAK,UAAY,EAAQ,UACzB,KAAK,iBAAmB,EAAQ,iBAChC,KAAK,cAAgB,EAAQ,aAC/B,CAMA,MAAM,gBAAyC,CAC7C,IAAM,EAAS,MAAM,KAAK,QAAQ,UAAU,EAS5C,OARK,EAEe,EAAO,UAAY,KAAK,IAAI,EAC9B,GAET,MADiB,KAAK,eAAe,EAAO,YAAY,EAAA,EAC7C,aAAe,KAG5B,EAAO,YARM,IAStB,CAMA,MAAM,oBAA6C,CACjD,IAAM,EAAS,MAAM,KAAK,QAAQ,UAAU,EAC5C,GAAI,CAAC,EAEH,OADA,MAAM,KAAK,gBAAgB,EACpB,KAET,IAAM,EAAY,MAAM,KAAK,eAAe,EAAO,YAAY,EAE/D,OADK,GAAW,MAAM,KAAK,gBAAgB,EACpC,GAAW,aAAe,IACnC,CAGA,MAAM,UAAU,EAAqC,CACnD,MAAM,KAAK,QAAQ,UAAU,CAAM,CACrC,CAGA,MAAM,aAA6B,CACjC,MAAM,KAAK,QAAQ,YAAY,CACjC,CAMA,eAAuB,EAAoD,CAiBzE,OAhBI,KAAK,iBAET,KAAK,eAAiB,KAAK,UAAU,CAAY,CAAC,CAC/C,KAAK,KAAO,KACX,MAAM,KAAK,QAAQ,UAAU,CAAM,EACnC,MAAM,KAAK,mBAAmB,CAAM,EAC7B,EACR,CAAC,CACD,MAAO,GAAkB,CAExB,MADA,KAAU,QAAQ,YAAY,EACxB,IAAI,EAAU,+CAA+C,CACrE,CAAC,CAAC,CACD,YAAc,CACb,KAAK,eAAiB,IACxB,CAAC,GAd6B,KAAK,cAiBvC,CACF,EAWa,EAAb,KAAwD,sBACtD,SAAsC,IAAA,EAEtC,WAAiC,CAC/B,OAAO,KAAK,MACd,CAEA,UAAU,EAA4B,CACpC,KAAK,OAAS,CAChB,CAEA,aAAoB,CAClB,KAAK,OAAS,IAChB,CACF,EAaA,SAAgB,EAAe,EAA2B,CACxD,OAAO,IAAI,KAAK,CAAS,CAAC,CAAC,QAAQ,CACrC,CAYA,SAAgB,EAAgB,EAAmD,CACjF,OAAO,KAAO,IAAgD,CAC5D,IAAM,EAAM,MAAM,MAAM,GAAG,EAAQ,wBAAyB,CAC1D,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,KAAM,KAAK,UAAU,CAAE,cAAe,CAAa,CAAC,CACtD,CAAC,EACD,GAAI,CAAC,EAAI,GAAI,MAAU,MAAM,sBAAsB,EACnD,IAAM,EAAQ,MAAM,EAAI,KAAK,EAK7B,MAAO,CACL,YAAa,EAAK,aAClB,aAAc,EAAK,cACnB,UAAW,EAAe,EAAK,UAAU,CAC3C,CACF,CACF,CC1KA,IAAa,EAAb,KAAkC,CAEhC,YACE,EACA,EACA,QAFiB,OAAA,IAAA,EAAA,SACA,eAAA,IAAA,EAAA,EADA,KAAA,KAAA,EACA,KAAA,aAAA,CAChB,CASH,MAAM,OAAO,EAA0D,CACrE,IAAM,EAAM,MAAM,KAAK,KAAK,KAA6B,kBAAmB,CAAI,EAEhF,OADA,MAAM,KAAK,YAAY,CAAG,EACnB,CACT,CASA,MAAM,eAAe,EAA8D,CACjF,IAAM,EAAM,MAAM,KAAK,KAAK,KAA6B,uBAAwB,CAAI,EAErF,OADA,MAAM,KAAK,YAAY,CAAG,EACnB,CACT,CASA,MAAM,gBAAgB,EAA8D,CAClF,IAAM,EAAM,MAAM,KAAK,KAAK,KAA6B,wBAAyB,CAAI,EAEtF,OADA,MAAM,KAAK,YAAY,CAAG,EACnB,CACT,CAqBA,MAAM,qBAAqB,EAAoE,CAC7F,IAAM,EAAM,MAAM,KAAK,KAAK,KAA6B,+BAAgC,CAAI,EAE7F,OADA,MAAM,KAAK,YAAY,CAAG,EACnB,CACT,CAiBA,MAAM,qBACJ,EACoC,CACpC,OAAO,KAAK,KAAK,KAAgC,kCAAmC,CAAI,CAC1F,CAmBA,MAAM,cAAc,EAAiE,CACnF,OAAO,KAAK,KAAK,KAAgC,0BAA2B,CAAI,CAClF,CAEA,MAAc,YAAY,EAA4C,CACpE,MAAM,KAAK,aAAa,UAAU,CAChC,YAAa,EAAI,aACjB,aAAc,EAAI,cAClB,UAAW,EAAe,EAAI,UAAU,CAC1C,CAAC,CACH,CACF,EC7Ia,EAAb,KAAoC,CAElC,YAAY,EAAqC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAgBlD,MAAM,WAA2C,CAC/C,OAAO,KAAK,KAAK,IAA0B,mBAAmB,CAChE,CACF,ECjBa,EAAb,KAAqC,CACnC,YAAY,EAAqC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAqBlD,MAAM,cAAc,EAAgD,CAIlE,OAAO,EAAoB,MAHT,KAAK,KAAK,IAC1B,eAAe,mBAAmB,CAAE,EAAE,aACxC,CAC8B,CAChC,CACF,EC5Ba,EAAb,KAAuC,CACrC,YAAY,EAAqC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAgDlD,MAAM,OAAO,EAAwD,CACnE,OAAO,KAAK,KAAK,KAAuB,gBAAiB,CAAI,CAC/D,CAOA,MAAM,MAAoC,CACxC,OAAO,KAAK,KAAK,IAAwB,eAAe,CAC1D,CAQA,MAAM,IAAI,EAAuC,CAC/C,OAAO,KAAK,KAAK,IAAsB,iBAAiB,mBAAmB,CAAE,GAAG,CAClF,CACF,EC3Ca,EAAb,KAA2C,CAEzC,YAAY,EAAmC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAchD,MAAM,MAAmC,CAEvC,OAAO,MADW,KAAK,KAAK,IAAuB,oBAAoB,EAAA,CAC5D,IAAI,CAAmB,CACpC,CAmBA,MAAM,OAAO,EAA8D,CAEzE,OAAO,MADW,KAAK,KAAK,KAAwB,4BAA6B,CAAI,EAAA,CAC1E,IAAI,CAAmB,CACpC,CAiBA,MAAM,IAAI,EAAsC,CAE9C,OAAO,EAAoB,MADT,KAAK,KAAK,IAAqB,sBAAsB,mBAAmB,CAAE,GAAG,CACjE,CAChC,CACF,ECrFa,EAAb,KAAoC,CAKlC,YACE,EACA,EACA,QAFiB,OAAA,IAAA,EAAA,SACA,eAAA,IAAA,EAAA,SALnB,UAAA,IAAA,EAAA,EAImB,KAAA,KAAA,EACA,KAAA,aAAA,EAEjB,KAAK,QAAU,IAAI,EAA8B,CAAI,CACvD,CAsBA,MAAM,gBAAgB,EAA+D,CACnF,IAAM,EAAM,MAAM,KAAK,KAAK,KAA6B,yBAA0B,CAAI,EAMvF,OALA,MAAM,KAAK,aAAa,UAAU,CAChC,YAAa,EAAI,aACjB,aAAc,EAAI,cAClB,UAAW,EAAe,EAAI,UAAU,CAC1C,CAAC,EACM,CACT,CACF,EC7Ca,EAAb,KAAoC,CAClC,YAAY,EAAqC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAgBlD,MAAM,SAA0C,CAC9C,OAAO,KAAK,KAAK,IAA2B,oBAAoB,CAClE,CAmBA,MAAM,cAAiD,CACrD,OAAO,KAAK,KAAK,IAA6B,yBAAyB,CACzE,CAQA,MAAM,qBACJ,EACuC,CACvC,OAAO,KAAK,KAAK,KAAmC,6BAA8B,CAAI,CACxF,CAQA,MAAM,iBAAiB,EAAyD,CAC9E,OAAO,KAAK,KAAK,IACf,6BAA6B,mBAAmB,CAAS,GAC3D,CACF,CACF,ECjEa,EAAb,KAA+B,CAC7B,YAAY,EAAqC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAalD,MAAM,MAAM,EAAmD,CAC7D,OAAO,KAAK,KAAK,IACf,sBAAsB,mBAAmB,CAAS,GACpD,CACF,CACF,ECAa,EAAb,KAAkC,CAEhC,YAAY,EAAmC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAQhD,MAAM,MAA8B,CAClC,OAAO,KAAK,KAAK,IAAkB,mBAAmB,CACxD,CAsBA,MAAM,OAAO,EAAkE,CAC7E,OAAO,KAAK,KAAK,KAA+B,oBAAqB,CAAI,CAC3E,CAUA,MAAM,OAAO,EAA2B,CACtC,OAAO,KAAK,KAAK,OAAO,qBAAqB,mBAAmB,CAAE,GAAG,CACvE,CACF,EC5Ca,EAAb,KAAmC,CAEjC,YAAY,EAAmC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAQhD,MAAM,KAA6B,CACjC,OAAO,KAAK,KAAK,IAAkB,oBAAoB,CACzD,CAaA,MAAM,OAAO,EAAwD,CACnE,OAAO,KAAK,KAAK,MAAoB,qBAAsB,CAAI,CACjE,CACF,EC5Ba,EAAb,KAAkC,CAEhC,YAAY,EAAmC,QAAlB,OAAA,IAAA,EAAA,EAAA,KAAA,KAAA,CAAmB,CAQhD,MAAM,MAA6B,CACjC,OAAO,KAAK,KAAK,IAAiB,cAAc,CAClD,CAqBA,MAAM,OAAO,EAAgE,CAC3E,OAAO,KAAK,KAAK,KAA8B,eAAgB,CAAI,CACrE,CAUA,MAAM,OAAO,EAA2B,CACtC,OAAO,KAAK,KAAK,OAAO,gBAAgB,mBAAmB,CAAE,GAAG,CAClE,CACF,EC7Ea,EAAb,KAA2B,CAoBzB,YAAY,EAAkB,QAf9B,UAAA,IAAA,EAAA,SAMA,WAAA,IAAA,EAAA,SAMA,UAAA,IAAA,EAAA,EAIE,KAAK,QAAU,IAAI,EAAqB,CAAI,EAC5C,KAAK,SAAW,IAAI,EAAsB,CAAI,EAC9C,KAAK,QAAU,IAAI,EAAqB,CAAI,CAC9C,CACF,ECkCA,SAAgB,EAAK,EAA4C,CAC/D,IAAM,EAAU,EAAO,SAAA,2BAGjB,EAAe,IAAI,EAAa,CACpC,QAHc,EAAO,SAAW,IAAI,EAIpC,UAAW,EAAgB,CAAO,EAClC,GAAI,EAAO,gBAAkB,IAAA,IAAa,CAAE,cAAe,EAAO,aAAc,CAClF,CAAC,EAQD,OAAO,IAAI,EAAc,IANR,EAAW,CAC1B,UACA,mBAAsB,EAAa,eAAe,EAClD,mBAAsB,EAAa,mBAAmB,CACxD,CAEyB,EAAM,EAAc,CAAM,CACrD,CASA,IAAa,EAAb,KAA2B,CA0BzB,YACE,EACA,EACA,EACA,QAHiB,QAAA,IAAA,EAAA,SACA,gBAAA,IAAA,EAAA,SACA,UAAA,IAAA,EAAA,SA3BnB,SAAA,IAAA,EAAA,SAGA,OAAA,IAAA,EAAA,SAGA,WAAA,IAAA,EAAA,SAGA,SAAA,IAAA,EAAA,SAGA,YAAA,IAAA,EAAA,SAGA,UAAA,IAAA,EAAA,SAGA,SAAA,IAAA,EAAA,SAGA,OAAA,IAAA,EAAA,EAImB,KAAA,MAAA,EACA,KAAA,cAAA,EACA,KAAA,QAAA,EAEjB,KAAK,OAAS,IAAI,EAAuB,CAAK,EAC9C,KAAK,KAAO,IAAI,EAAqB,EAAO,CAAa,EACzD,KAAK,SAAW,IAAI,EAAkB,CAAK,EAC3C,KAAK,OAAS,IAAI,EAAuB,CAAK,EAC9C,KAAK,UAAY,IAAI,EAA0B,CAAK,EACpD,KAAK,QAAU,IAAI,EAAwB,CAAK,EAChD,KAAK,OAAS,IAAI,EAAuB,EAAO,CAAa,EAC7D,KAAK,KAAO,IAAI,EAAc,CAAK,CACrC,CACF,EC1IM,EAAsB,YAS5B,SAAgB,EAAkB,EAAkB,EAAM,EAAmC,CAC3F,MAAO,CACL,WAAiC,CAC/B,IAAM,EAAM,EAAQ,QAAQ,CAAG,EAC/B,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,KAAK,MAAM,CAAG,CACvB,MAAQ,CAEN,OAAO,IACT,CACF,EACA,UAAU,EAA4B,CACpC,EAAQ,QAAQ,EAAK,KAAK,UAAU,CAAM,CAAC,CAC7C,EACA,aAAoB,CAClB,EAAQ,WAAW,CAAG,CACxB,CACF,CACF,CCHA,SAAgB,EAAoB,EAA4B,CAC9D,OAAO,EAAkB,aAAc,CAAG,CAC5C,CCCA,SAAgB,EAAsB,EAA4B,CAChE,OAAO,EAAkB,eAAgB,CAAG,CAC9C"}

package/llms.txt CHANGED Viewed

@@ -137,10 +137,10 @@ switch (checkout_state.next_required_action) {
     // Show wallet funding UI (checkout_state.has_sufficient_funds === false)
     break
   case 'purchase':
-    // Show purchase confirmation UI
-    break
-  case 'view_content':
-    // User has access — fetch and render the content
+    // Show purchase confirmation UI. Single-use: has_purchased means only
+    // "has ever bought" — buying (again, if needed) is how the buyer
+    // receives the content, delivered directly in the purchases.create()
+    // response. There is no terminal "already has access" state.
     break
 }
 ```
@@ -149,7 +149,10 @@ switch (checkout_state.next_required_action) {
 ```ts
 lw.wallet.balance()                                    → Promise<WalletBalanceResponse>
-// { balance_cents: number }
+// { balance_cents: number, spendable_cents: number, held_cents: number, holds: Hold[] }
+// balance_cents always equals spendable_cents. held_cents is committed to active
+// bulk acquisitions (node-only feature); holds is one entry per such acquisition:
+// { acquisition_id, held_cents, authorized_at }.
 lw.wallet.transactions(params?: PaginationParams)      → Promise<{ data: WalletTransactionItem[], pagination: PaginationMeta }>
@@ -173,9 +176,9 @@ lw.purchases.get(purchaseId: string)                  → Promise<PurchaseRespon
 ```ts
 lw.content.getWithAccess(contentId: string) → Promise<ContentWithAccessResponse>
 // Returns content payload + access info. Requires a valid buyer session.
-// content_type: 'markdown' | 'external_ref'
-// content_body: plain text markdown (SDK decodes base64 automatically)
-// content_uri: URL for external_ref content (Vimeo, YouTube, PDF, etc.)
+// content_type: 'markdown' | 'html' | 'pdf' | 'image' | 'video' | 'external_ref' | 'brokered'
+// content_body: plain text (SDK decodes base64 automatically) — markdown, brokered, or inline html
+// content_uri: URL — external_ref, pdf, image, video, or remote html
 ```
 ### lw.user
@@ -193,6 +196,56 @@ The `secret` field in the create response is shown **once** — display it
 immediately in the UI and prompt the user to copy it. There is no way to retrieve
 it again.
+#### lw.user.spendCap
+Every buyer starts with a default daily spend cap governing every wallet debit
+(MCP, REST, and the web payment gate). `null` on `update()` is the only way to
+become uncapped.
+```ts
+lw.user.spendCap.get()                                        → Promise<UserSpendCap>
+lw.user.spendCap.update(body: UserSpendCapUpdateRequest)      → Promise<UserSpendCap>
+interface UserSpendCap {
+  cap_cents: number | null        // null once uncapped
+  spent_cents: number
+  remaining_cents: number | null  // null once uncapped
+  resets_at: string               // ISO 8601
+  spend_window_timezone: string   // IANA zone, UTC by default
+  bulk_exempt: boolean
+}
+interface UserSpendCapUpdateRequest {
+  daily_spend_limit_cents: number | null  // required; null removes the cap
+}
+```
+Exceeding the cap throws `SpendCapReachedError` (402) from
+`lw.purchases.create()` — funding the wallet does NOT clear it. It clears at
+`resetsAt`, or when the cap is raised/removed here.
+#### lw.user.mcpKeys
+MCP API keys authenticate agent requests to the Ledewire MCP server as
+`Authorization: Bearer <key>:<secret>`. Scopes are fixed at creation.
+```ts
+lw.user.mcpKeys.list()          → Promise<McpApiKey[]>   // secret never included
+lw.user.mcpKeys.create(body)    → Promise<McpApiKeyCreateResponse>
+lw.user.mcpKeys.revoke(id)      → Promise<void>
+interface McpApiKeyCreateRequest {
+  label: string
+  can_search?: boolean            // default true
+  can_purchase?: boolean          // default false
+  can_manage_content?: boolean    // seller-tier — requires store_id
+  can_read_analytics?: boolean    // seller-tier — requires store_id
+  store_id?: string
+}
+```
+The `secret` in the create response is shown once — store it alongside `key`.
 ### lw.seller
 Operations scoped to the authenticated seller's store.
@@ -220,6 +273,13 @@ lw.seller.content.get(contentId: string)              → Promise<ContentRespons
 ## Full checkout flow example
+Purchases are single-use: `has_purchased` means only "has ever bought", and a
+past purchase does not by itself grant access again. Buying is how the buyer
+receives the content — delivered directly in the `purchases.create()` response,
+which is the only place `content_body` / `content_uri` appear for a purchase.
+That delivery is one-time — persist it immediately; there is no route that
+serves the same content a second time.
 ```ts
 const lw = Ledewire.init({ apiKey: 'your_api_key' })
@@ -235,19 +295,26 @@ switch (checkout_state.next_required_action) {
     window.location.href = session.payment_url  // Stripe checkout
     break
-  case 'purchase':
-    await lw.purchases.create({ content_id: 'article-123' })
-    break
-  case 'view_content':
-    const { content_type, content_body, content_uri } =
-      await lw.content.getWithAccess('article-123')
-    if (content_type === 'markdown') {
-      renderMarkdown(content_body)  // plain text — SDK decodes base64 automatically
-    } else {
-      window.location.href = content_uri  // redirect to gated video/PDF
+  case 'purchase': {
+    const purchase = await lw.purchases.create({ content_id: 'article-123' })
+    await saveDeliveredContent(purchase) // persist now — one-time delivery
+    // content_body is always plain UTF-8 on the wire, never base64-encoded.
+    // What it contains depends on purchase.content.content_type.
+    if (purchase.content_body && purchase.content.content_type === 'markdown') {
+      renderMarkdown(purchase.content_body)
+    } else if (purchase.content_body && purchase.content.content_type === 'html') {
+      // Inline HTML is seller-supplied — sanitise before inserting it.
+      container.innerHTML = DOMPurify.sanitize(purchase.content_body)
+    } else if (purchase.content_uri) {
+      // Seller-supplied URI — check the scheme before navigating to it.
+      const uri = new URL(purchase.content_uri)
+      if (['https:', 'http:'].includes(uri.protocol)) {
+        window.location.href = purchase.content_uri  // redirect to gated video/PDF
+      }
     }
     break
+  }
 }
 ```
@@ -276,7 +343,7 @@ interface CheckoutStateResponse {
     is_authenticated: boolean
     has_sufficient_funds: boolean | null  // null when not authenticated
     has_purchased: boolean
-    next_required_action: 'authenticate' | 'fund_wallet' | 'purchase' | 'view_content'
+    next_required_action: 'authenticate' | 'fund_wallet' | 'purchase'
   }
 }
@@ -298,25 +365,52 @@ interface TokenStorage {
 All errors extend `LedewireError`. Import named subclasses for actionable handling:
 ```ts
-import { LedewireError, AuthError, ForbiddenError, NotFoundError, PurchaseError } from '@ledewire/browser'
+import {
+  LedewireError,
+  AuthError,
+  ForbiddenError,
+  NotFoundError,
+  PurchaseError,
+  SpendCapReachedError,
+} from '@ledewire/browser'
 class LedewireError extends Error {
   statusCode: number        // HTTP status code
   code: number | undefined  // machine-readable code from API body
   message: string           // human-readable description from API body
+  type: ErrorTypeValue | undefined  // machine-readable error.type, e.g. 'daily_spend_cap_reached'
+  details: Readonly<Record<string, unknown>> | undefined  // extra top-level error-body fields
 }
 class AuthError extends LedewireError {}       // 401 — bad credentials / session expired
 class ForbiddenError extends LedewireError {}  // 403 — authenticated but access denied
 class NotFoundError extends LedewireError {}   // 404 — resource not found
 class PurchaseError extends LedewireError {}   // 409/422 — purchase validation failure
+// 402 — daily_spend_cap_reached, thrown by lw.purchases.create(). Funding the
+// wallet does NOT clear this — it resets at `resetsAt`, or via
+// lw.user.spendCap.update().
+class SpendCapReachedError extends LedewireError {
+  capCents: number
+  spentCents: number
+  remainingCents: number
+  resetsAt: string    // ISO 8601
+  bulkExempt: boolean
+}
 ```
+`instanceof` checks work even across the separately bundled copies of
+`@ledewire/core` inside `@ledewire/browser`, `@ledewire/node`, and
+`@ledewire/x402-client`.
 ```ts
 try {
   await lw.purchases.create({ content_id: 'article-123' })
 } catch (err) {
-  if (err instanceof AuthError) {
+  if (err instanceof SpendCapReachedError) {
+    // A daily policy limit — do NOT prompt the buyer to fund their wallet.
+    showError(`Spend cap reached. Resets at ${err.resetsAt}.`)
+  } else if (err instanceof AuthError) {
     showLoginModal()
   } else if (err instanceof PurchaseError) {
     showError('Purchase failed: ' + err.message)

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@ledewire/browser",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "LedeWire SDK for browsers — embed a paywall with a single script tag",
   "type": "module",
   "exports": {
@@ -26,14 +26,19 @@
     "paywall"
   ],
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ledewire/ledewire-js-sdk.git",
+    "directory": "packages/browser"
+  },
   "devDependencies": {
-    "@vitest/coverage-v8": "^3.0.0",
+    "@vitest/coverage-v8": "^4.1.11",
     "jsdom": "^26.0.0",
     "msw": "^2.7.0",
     "typescript": "*",
-    "vite": "^6.0.0",
+    "vite": "^8.0.16",
     "vite-plugin-dts": "^4.0.0",
-    "vitest": "^3.0.0",
+    "vitest": "^4.1.11",
     "@ledewire/core": "0.1.0"
   },
   "publishConfig": {