@orangecheck/me-client 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 OrangeCheck
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,135 @@
+# @orangecheck/me-client
+
+Drop-in client for [me.ochk.io](https://me.ochk.io). Sign-in-with-OC button, session lifecycle hooks, payment authorization, developer telemetry, and the canonical billable-event taxonomy as TypeScript types.
+
+> You pay for sessions and actions, not for clicks.
+
+## Install
+
+```sh
+yarn add @orangecheck/me-client @orangecheck/auth-client
+```
+
+## Quick start
+
+```tsx
+import { OcSignInButton, useOcSession } from '@orangecheck/me-client';
+import { OcSessionProvider } from '@orangecheck/auth-client';
+
+export function App() {
+    return (
+        <OcSessionProvider>
+            <SignIn />
+        </OcSessionProvider>
+    );
+}
+
+function SignIn() {
+    const { account, status } = useOcSession();
+    if (status === 'authenticated') {
+        return <p>signed in as {account.address.slice(0, 8)}…</p>;
+    }
+    return (
+        <OcSignInButton
+            scope={['identity', 'attest_tier']}
+            sessionPolicy={{ duration_seconds: 7 * 86_400, refresh: 'sliding' }}
+            onSignin={(session) => console.log('class C envelope:', session)}
+        />
+    );
+}
+```
+
+## Session lifecycle
+
+Sessions are the billable atom for me.ochk.io. A signin within a still-valid session is **free** — no Class C event, no charge. Site declares the policy at integration time; the OC verifier enforces it both client-side and server-side.
+
+```ts
+import { oc } from '@orangecheck/me-client';
+
+// open a session — Class C billable event, once per real session
+const session = await oc.session.create({
+    scope: ['identity', 'payment'],
+    sessionPolicy: {
+        duration_seconds: 60 * 15, // 15 minutes — banking-shaped
+        refresh: 'sliding',
+        sensitive_actions: 're-auth',
+    },
+});
+
+// refresh inside the session — FREE, telemetry only
+await oc.session.refresh(session.id);
+
+// invalidate when the user signs out — FREE
+await oc.session.invalidate(session.id);
+```
+
+### Typical session policies
+
+| kind             | label                              | billable atom                              |
+|------------------|------------------------------------|--------------------------------------------|
+| banking-shaped   | 15–60 minute sessions              | every session                              |
+| standard SaaS    | 7–30 day sessions, sliding refresh | session creation only                      |
+| mobile app       | 90-day session with refresh        | initial creation, sensitive-action re-auth |
+
+## Payment authorization
+
+Class B billable event. Sub-Stripe rates (0.5–1.0% percentage-based). The user receives ~65% of the OC fee as Lightning cashback on `/me/earn`.
+
+```ts
+import { oc } from '@orangecheck/me-client';
+
+const payment = await oc.payment.authorize({
+    identity: session.identity,
+    amount_sats: 240_000,
+    description: 'breez · march invoice',
+});
+```
+
+## Developer telemetry
+
+Non-billable events the SDK emits for site-side observability. Subscribe with `onTelemetry`. None of these create billable records.
+
+```ts
+import { onTelemetry } from '@orangecheck/me-client';
+
+const unsubscribe = onTelemetry((event) => {
+    // event.code: 'session.token_refresh' | 'session.intra_signin' |
+    //             'session.navigation' | 'auth.signin_failed' |
+    //             'auth.signin_cancelled' | 'auth.signin_rejected' |
+    //             'verify.passive_check'
+    console.log('[oc telemetry]', event);
+});
+```
+
+See [me.ochk.io/integrate](https://me.ochk.io/integrate) for the full price-band table, the "what you do not pay for" panel, and the live SDK reference.
+
+## Types
+
+Every event class, subtype, and price band is exported as a TypeScript type so integrators can typecheck against the canonical taxonomy:
+
+```ts
+import type {
+    BillableEvent,
+    EventClass,         // 'A' | 'B' | 'C'
+    EventSubtype,       // every subtype across all three classes
+    SessionPolicy,
+    PaymentResult,
+    TelemetryEvent,
+} from '@orangecheck/me-client';
+```
+
+The canonical source of truth lives at [oc-me-web/src/lib/events/types.ts](https://github.com/orangecheck/oc-me-web/blob/main/src/lib/events/types.ts). This package mirrors that shape — any change there ships here in the next minor.
+
+## Custom origin
+
+For staging, self-hosted me-equivalents, or local dev:
+
+```ts
+import { setOrigin } from '@orangecheck/me-client';
+
+setOrigin('https://me.example-staging.com');
+```
+
+## License
+
+MIT.

package/dist/index.d.mts

@@ -0,0 +1,105 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as React from 'react';
+
+type EventClass = 'A' | 'B' | 'C';
+type ClassASubtype = 'account_creation' | 'account_recovery' | 'kyc_tier_upgrade' | 'payment_method_connected' | 'agent_delegation_issued' | 'recovery_method_updated';
+type ClassBSubtype = 'payment_authorization' | 'scoped_action_authorization' | 'attest_verification_at_gate' | 'stamp_signing' | 'pledge_resolution';
+type ClassCSubtype = 'session_creation';
+type EventSubtype = ClassASubtype | ClassBSubtype | ClassCSubtype;
+type AttestTier = 'anonymous' | 'bonded' | 'kyc_light' | 'kyc_strong';
+interface BillableEvent {
+    id: string;
+    occurred_at: string;
+    class: EventClass;
+    subtype: EventSubtype;
+    site: {
+        domain: string;
+        display_name: string;
+    };
+    gross_fee_sats: number;
+    platform_fee_sats: number;
+    user_earned_sats: number;
+    verify_url: string;
+}
+interface SessionPolicy {
+    duration_seconds: number;
+    refresh: 'sliding' | 'rolling' | 'none';
+    sensitive_actions?: 're-auth' | 'none';
+}
+interface Session {
+    id: string;
+    identity: string;
+    opens_at: string;
+    expires_at: string;
+    policy: SessionPolicy;
+    scope: string[];
+}
+interface SignInOptions {
+    scope: string[];
+    sessionPolicy?: Partial<SessionPolicy>;
+    returnTo?: string;
+}
+interface PaymentAuthorizeOptions {
+    identity: string;
+    amount_sats?: number;
+    usd_cents?: number;
+    description: string;
+    external_ref?: string;
+}
+interface PaymentResult {
+    id: string;
+    status: 'authorized' | 'failed' | 'cancelled';
+    sats_charged?: number;
+    user_envelope_id?: string;
+    verify_url?: string;
+}
+interface TelemetryEvent {
+    code: 'session.intra_signin' | 'session.token_refresh' | 'session.navigation' | 'auth.signin_failed' | 'auth.signin_cancelled' | 'auth.signin_rejected' | 'verify.passive_check';
+    timestamp: string;
+    session_id?: string;
+}
+
+interface OcSignInButtonProps extends Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onError'> {
+    scope: string[];
+    sessionPolicy?: Partial<SessionPolicy>;
+    returnTo?: string;
+    onSignin?: (session: Session) => void;
+    onSignInError?: (error: Error) => void;
+    label?: string;
+}
+declare function OcSignInButton({ scope, sessionPolicy, returnTo, onSignin, onSignInError, label, children, onClick, style, ...rest }: OcSignInButtonProps): react_jsx_runtime.JSX.Element;
+
+declare function onTelemetry(listener: (e: TelemetryEvent) => void): () => void;
+declare function create(opts: SignInOptions): Promise<Session>;
+declare function refresh(sessionId: string): Promise<Session>;
+declare function invalidate(sessionId: string): Promise<void>;
+declare const session: {
+    create: typeof create;
+    refresh: typeof refresh;
+    invalidate: typeof invalidate;
+};
+
+declare function authorize(opts: PaymentAuthorizeOptions): Promise<PaymentResult>;
+declare const payment: {
+    authorize: typeof authorize;
+};
+
+declare function setOrigin(url: string): void;
+declare function getOrigin(): string;
+declare class MeClientError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+
+declare const oc: {
+    session: {
+        create: (opts: SignInOptions) => Promise<Session>;
+        refresh: (sessionId: string) => Promise<Session>;
+        invalidate: (sessionId: string) => Promise<void>;
+    };
+    payment: {
+        authorize: (opts: PaymentAuthorizeOptions) => Promise<PaymentResult>;
+    };
+};
+
+export { type AttestTier, type BillableEvent, type ClassASubtype, type ClassBSubtype, type ClassCSubtype, type EventClass, type EventSubtype, MeClientError, OcSignInButton, type OcSignInButtonProps, type PaymentAuthorizeOptions, type PaymentResult, type Session, type SessionPolicy, type SignInOptions, type TelemetryEvent, getOrigin, oc, onTelemetry, payment, session, setOrigin };

package/dist/index.d.ts

@@ -0,0 +1,105 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as React from 'react';
+
+type EventClass = 'A' | 'B' | 'C';
+type ClassASubtype = 'account_creation' | 'account_recovery' | 'kyc_tier_upgrade' | 'payment_method_connected' | 'agent_delegation_issued' | 'recovery_method_updated';
+type ClassBSubtype = 'payment_authorization' | 'scoped_action_authorization' | 'attest_verification_at_gate' | 'stamp_signing' | 'pledge_resolution';
+type ClassCSubtype = 'session_creation';
+type EventSubtype = ClassASubtype | ClassBSubtype | ClassCSubtype;
+type AttestTier = 'anonymous' | 'bonded' | 'kyc_light' | 'kyc_strong';
+interface BillableEvent {
+    id: string;
+    occurred_at: string;
+    class: EventClass;
+    subtype: EventSubtype;
+    site: {
+        domain: string;
+        display_name: string;
+    };
+    gross_fee_sats: number;
+    platform_fee_sats: number;
+    user_earned_sats: number;
+    verify_url: string;
+}
+interface SessionPolicy {
+    duration_seconds: number;
+    refresh: 'sliding' | 'rolling' | 'none';
+    sensitive_actions?: 're-auth' | 'none';
+}
+interface Session {
+    id: string;
+    identity: string;
+    opens_at: string;
+    expires_at: string;
+    policy: SessionPolicy;
+    scope: string[];
+}
+interface SignInOptions {
+    scope: string[];
+    sessionPolicy?: Partial<SessionPolicy>;
+    returnTo?: string;
+}
+interface PaymentAuthorizeOptions {
+    identity: string;
+    amount_sats?: number;
+    usd_cents?: number;
+    description: string;
+    external_ref?: string;
+}
+interface PaymentResult {
+    id: string;
+    status: 'authorized' | 'failed' | 'cancelled';
+    sats_charged?: number;
+    user_envelope_id?: string;
+    verify_url?: string;
+}
+interface TelemetryEvent {
+    code: 'session.intra_signin' | 'session.token_refresh' | 'session.navigation' | 'auth.signin_failed' | 'auth.signin_cancelled' | 'auth.signin_rejected' | 'verify.passive_check';
+    timestamp: string;
+    session_id?: string;
+}
+
+interface OcSignInButtonProps extends Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onError'> {
+    scope: string[];
+    sessionPolicy?: Partial<SessionPolicy>;
+    returnTo?: string;
+    onSignin?: (session: Session) => void;
+    onSignInError?: (error: Error) => void;
+    label?: string;
+}
+declare function OcSignInButton({ scope, sessionPolicy, returnTo, onSignin, onSignInError, label, children, onClick, style, ...rest }: OcSignInButtonProps): react_jsx_runtime.JSX.Element;
+
+declare function onTelemetry(listener: (e: TelemetryEvent) => void): () => void;
+declare function create(opts: SignInOptions): Promise<Session>;
+declare function refresh(sessionId: string): Promise<Session>;
+declare function invalidate(sessionId: string): Promise<void>;
+declare const session: {
+    create: typeof create;
+    refresh: typeof refresh;
+    invalidate: typeof invalidate;
+};
+
+declare function authorize(opts: PaymentAuthorizeOptions): Promise<PaymentResult>;
+declare const payment: {
+    authorize: typeof authorize;
+};
+
+declare function setOrigin(url: string): void;
+declare function getOrigin(): string;
+declare class MeClientError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+
+declare const oc: {
+    session: {
+        create: (opts: SignInOptions) => Promise<Session>;
+        refresh: (sessionId: string) => Promise<Session>;
+        invalidate: (sessionId: string) => Promise<void>;
+    };
+    payment: {
+        authorize: (opts: PaymentAuthorizeOptions) => Promise<PaymentResult>;
+    };
+};
+
+export { type AttestTier, type BillableEvent, type ClassASubtype, type ClassBSubtype, type ClassCSubtype, type EventClass, type EventSubtype, MeClientError, OcSignInButton, type OcSignInButtonProps, type PaymentAuthorizeOptions, type PaymentResult, type Session, type SessionPolicy, type SignInOptions, type TelemetryEvent, getOrigin, oc, onTelemetry, payment, session, setOrigin };

package/dist/index.js

@@ -0,0 +1,210 @@
+'use strict';
+
+var React = require('react');
+var jsxRuntime = require('react/jsx-runtime');
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var React__namespace = /*#__PURE__*/_interopNamespace(React);
+
+// src/SignInButton.tsx
+
+// src/transport.ts
+var origin = "https://me.ochk.io";
+function setOrigin(url) {
+  origin = url.replace(/\/$/, "");
+}
+function getOrigin() {
+  return origin;
+}
+async function api(path, opts = {}) {
+  const res = await fetch(`${origin}${path}`, {
+    method: opts.method ?? "GET",
+    credentials: "include",
+    headers: { "content-type": "application/json", accept: "application/json" },
+    body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0,
+    signal: opts.signal
+  });
+  if (!res.ok) {
+    let message = `me.ochk.io ${res.status}`;
+    try {
+      const data = await res.json();
+      if (data?.error) message = data.error;
+    } catch {
+    }
+    throw new MeClientError(message, res.status);
+  }
+  return await res.json();
+}
+var MeClientError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.name = "MeClientError";
+    this.status = status;
+  }
+};
+
+// src/session.ts
+var DEFAULT_POLICY = {
+  duration_seconds: 7 * 24 * 60 * 60,
+  // 7 days, standard SaaS shape
+  refresh: "sliding",
+  sensitive_actions: "re-auth"
+};
+var telemetrySubscribers = /* @__PURE__ */ new Set();
+function onTelemetry(listener) {
+  telemetrySubscribers.add(listener);
+  return () => {
+    telemetrySubscribers.delete(listener);
+  };
+}
+function emitTelemetry(code, session_id) {
+  const e = {
+    code,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    ...session_id ? { session_id } : {}
+  };
+  for (const fn of telemetrySubscribers) {
+    try {
+      fn(e);
+    } catch {
+    }
+  }
+}
+async function create(opts) {
+  const policy = { ...DEFAULT_POLICY, ...opts.sessionPolicy ?? {} };
+  return api("/api/session/create", {
+    method: "POST",
+    body: {
+      scope: opts.scope,
+      policy,
+      return_to: opts.returnTo ?? (typeof window !== "undefined" ? window.location.href : void 0)
+    }
+  });
+}
+async function refresh(sessionId) {
+  emitTelemetry("session.token_refresh", sessionId);
+  return api("/api/session/refresh", {
+    method: "POST",
+    body: { session_id: sessionId }
+  });
+}
+async function invalidate(sessionId) {
+  emitTelemetry("session.intra_signin", sessionId);
+  await api("/api/session/invalidate", {
+    method: "POST",
+    body: { session_id: sessionId }
+  });
+}
+var session = { create, refresh, invalidate };
+function OcSignInButton({
+  scope,
+  sessionPolicy,
+  returnTo,
+  onSignin,
+  onSignInError,
+  label = "sign in with oc",
+  children,
+  onClick,
+  style,
+  ...rest
+}) {
+  const [pending, setPending] = React__namespace.useState(false);
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "button",
+    {
+      type: "button",
+      onClick: async (event) => {
+        onClick?.(event);
+        if (event.defaultPrevented) return;
+        setPending(true);
+        try {
+          const result = await session.create({ scope, sessionPolicy, returnTo });
+          onSignin?.(result);
+        } catch (err) {
+          onSignInError?.(err instanceof Error ? err : new Error(String(err)));
+        } finally {
+          setPending(false);
+        }
+      },
+      style: {
+        display: "inline-flex",
+        alignItems: "center",
+        gap: 8,
+        padding: "10px 16px",
+        fontSize: 13,
+        fontWeight: 600,
+        fontFamily: 'ui-monospace, "JetBrains Mono", "SF Mono", Menlo, monospace',
+        letterSpacing: "0.18em",
+        textTransform: "uppercase",
+        background: "#f97316",
+        color: "#0b0909",
+        border: "1px solid #f97316",
+        borderRadius: 4,
+        cursor: pending ? "progress" : "pointer",
+        opacity: pending ? 0.7 : 1,
+        ...style ?? {}
+      },
+      disabled: pending || rest.disabled,
+      "data-oc-signin": true,
+      ...rest,
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "span",
+          {
+            "aria-hidden": true,
+            style: {
+              display: "inline-block",
+              width: 12,
+              height: 12,
+              background: "#0b0909"
+            }
+          }
+        ),
+        children ?? (pending ? "opening\u2026" : label)
+      ]
+    }
+  );
+}
+
+// src/payment.ts
+async function authorize(opts) {
+  if (opts.amount_sats == null && opts.usd_cents == null) {
+    throw new Error("payment.authorize requires amount_sats or usd_cents");
+  }
+  return api("/api/payment/authorize", {
+    method: "POST",
+    body: opts
+  });
+}
+var payment = { authorize };
+
+// src/index.ts
+var oc = { session, payment };
+
+exports.MeClientError = MeClientError;
+exports.OcSignInButton = OcSignInButton;
+exports.getOrigin = getOrigin;
+exports.oc = oc;
+exports.onTelemetry = onTelemetry;
+exports.payment = payment;
+exports.session = session;
+exports.setOrigin = setOrigin;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/transport.ts","../src/session.ts","../src/SignInButton.tsx","../src/payment.ts","../src/index.ts"],"names":["React","jsxs","jsx"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAI,MAAA,GAAS,oBAAA;AAEN,SAAS,UAAU,GAAA,EAAmB;AACzC,EAAA,MAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAClC;AAEO,SAAS,SAAA,GAAoB;AAChC,EAAA,OAAO,MAAA;AACX;AAQA,eAAsB,GAAA,CAAO,IAAA,EAAc,IAAA,GAAqB,EAAC,EAAe;AAC5E,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,MAAM,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,IACxC,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,IACvB,WAAA,EAAa,SAAA;AAAA,IACb,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,QAAQ,kBAAA,EAAmB;AAAA,IAC1E,IAAA,EAAM,KAAK,IAAA,KAAS,MAAA,GAAY,KAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AAAA,IAC5D,QAAQ,IAAA,CAAK;AAAA,GAChB,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,IAAA,IAAI,OAAA,GAAU,CAAA,WAAA,EAAc,GAAA,CAAI,MAAM,CAAA,CAAA;AACtC,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,MAAA,IAAI,IAAA,EAAM,KAAA,EAAO,OAAA,GAAU,IAAA,CAAK,KAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,aAAA,CAAc,OAAA,EAAS,GAAA,CAAI,MAAM,CAAA;AAAA,EAC/C;AACA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAC3B;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAErC,WAAA,CAAY,SAAiB,MAAA,EAAgB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAClB;AACJ;;;AC7CA,IAAM,cAAA,GAAgC;AAAA,EAClC,gBAAA,EAAkB,CAAA,GAAI,EAAA,GAAK,EAAA,GAAK,EAAA;AAAA;AAAA,EAChC,OAAA,EAAS,SAAA;AAAA,EACT,iBAAA,EAAmB;AACvB,CAAA;AAEA,IAAM,oBAAA,uBAA2B,GAAA,EAAiC;AAI3D,SAAS,YAAY,QAAA,EAAmD;AAC3E,EAAA,oBAAA,CAAqB,IAAI,QAAQ,CAAA;AACjC,EAAA,OAAO,MAAM;AACT,IAAA,oBAAA,CAAqB,OAAO,QAAQ,CAAA;AAAA,EACxC,CAAA;AACJ;AAEA,SAAS,aAAA,CAAc,MAA8B,UAAA,EAA2B;AAC5E,EAAA,MAAM,CAAA,GAAoB;AAAA,IACtB,IAAA;AAAA,IACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,GAAI,UAAA,GAAa,EAAE,UAAA,KAAe;AAAC,GACvC;AACA,EAAA,KAAA,MAAW,MAAM,oBAAA,EAAsB;AACnC,IAAA,IAAI;AACA,MAAA,EAAA,CAAG,CAAC,CAAA;AAAA,IACR,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACJ;AACJ;AAQA,eAAe,OAAO,IAAA,EAAuC;AACzD,EAAA,MAAM,MAAA,GAAwB,EAAE,GAAG,cAAA,EAAgB,GAAI,IAAA,CAAK,aAAA,IAAiB,EAAC,EAAG;AACjF,EAAA,OAAO,IAAa,qBAAA,EAAuB;AAAA,IACvC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM;AAAA,MACF,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,MAAA;AAAA,MACA,SAAA,EAAW,KAAK,QAAA,KAAa,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,MAAA;AAAA;AACxF,GACH,CAAA;AACL;AAOA,eAAe,QAAQ,SAAA,EAAqC;AACxD,EAAA,aAAA,CAAc,yBAAyB,SAAS,CAAA;AAChD,EAAA,OAAO,IAAa,sBAAA,EAAwB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,EAAE,UAAA,EAAY,SAAA;AAAU,GACjC,CAAA;AACL;AAGA,eAAe,WAAW,SAAA,EAAkC;AACxD,EAAA,aAAA,CAAc,wBAAwB,SAAS,CAAA;AAC/C,EAAA,MAAM,IAAkB,yBAAA,EAA2B;AAAA,IAC/C,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,EAAE,UAAA,EAAY,SAAA;AAAU,GACjC,CAAA;AACL;AAEO,IAAM,OAAA,GAAU,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAA;AChDnC,SAAS,cAAA,CAAe;AAAA,EAC3B,KAAA;AAAA,EACA,aAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,KAAA,GAAQ,iBAAA;AAAA,EACR,QAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAG;AACP,CAAA,EAAwB;AACpB,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAUA,0BAAS,KAAK,CAAA;AAElD,EAAA,uBACIC,eAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACG,IAAA,EAAK,QAAA;AAAA,MACL,OAAA,EAAS,OAAO,KAAA,KAAU;AACtB,QAAA,OAAA,GAAU,KAAK,CAAA;AACf,QAAA,IAAI,MAAM,gBAAA,EAAkB;AAC5B,QAAA,UAAA,CAAW,IAAI,CAAA;AACf,QAAA,IAAI;AACA,UAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,CAAO,EAAE,KAAA,EAAO,aAAA,EAAe,UAAU,CAAA;AACtE,UAAA,QAAA,GAAW,MAAM,CAAA;AAAA,QACrB,SAAS,GAAA,EAAK;AACV,UAAA,aAAA,GAAgB,GAAA,YAAe,QAAQ,GAAA,GAAM,IAAI,MAAM,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,QACvE,CAAA,SAAE;AACE,UAAA,UAAA,CAAW,KAAK,CAAA;AAAA,QACpB;AAAA,MACJ,CAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACH,OAAA,EAAS,aAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,GAAA,EAAK,CAAA;AAAA,QACL,OAAA,EAAS,WAAA;AAAA,QACT,QAAA,EAAU,EAAA;AAAA,QACV,UAAA,EAAY,GAAA;AAAA,QACZ,UAAA,EAAY,6DAAA;AAAA,QACZ,aAAA,EAAe,QAAA;AAAA,QACf,aAAA,EAAe,WAAA;AAAA,QACf,UAAA,EAAY,SAAA;AAAA,QACZ,KAAA,EAAO,SAAA;AAAA,QACP,MAAA,EAAQ,mBAAA;AAAA,QACR,YAAA,EAAc,CAAA;AAAA,QACd,MAAA,EAAQ,UAAU,UAAA,GAAa,SAAA;AAAA,QAC/B,OAAA,EAAS,UAAU,GAAA,GAAM,CAAA;AAAA,QACzB,GAAI,SAAS;AAAC,OAClB;AAAA,MACA,QAAA,EAAU,WAAW,IAAA,CAAK,QAAA;AAAA,MAC1B,gBAAA,EAAc,IAAA;AAAA,MACb,GAAG,IAAA;AAAA,MAGJ,QAAA,EAAA;AAAA,wBAAAC,cAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACG,aAAA,EAAW,IAAA;AAAA,YACX,KAAA,EAAO;AAAA,cACH,OAAA,EAAS,cAAA;AAAA,cACT,KAAA,EAAO,EAAA;AAAA,cACP,MAAA,EAAQ,EAAA;AAAA,cACR,UAAA,EAAY;AAAA;AAChB;AAAA,SACJ;AAAA,QACC,QAAA,KAAa,UAAU,eAAA,GAAa,KAAA;AAAA;AAAA;AAAA,GACzC;AAER;;;AC/EA,eAAe,UAAU,IAAA,EAAuD;AAC5E,EAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,IAAQ,IAAA,CAAK,aAAa,IAAA,EAAM;AACpD,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACzE;AACA,EAAA,OAAO,IAAmB,wBAAA,EAA0B;AAAA,IAChD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM;AAAA,GACT,CAAA;AACL;AAEO,IAAM,OAAA,GAAU,EAAE,SAAA;;;ACelB,IAAM,EAAA,GAAK,EAAE,OAAA,EAAS,OAAA","file":"index.js","sourcesContent":["/**\n * Tiny HTTP transport layer. The me.ochk.io origin is configurable so\n * staging deployments and self-hosted me-equivalents can swap it.\n */\n\nlet origin = 'https://me.ochk.io';\n\nexport function setOrigin(url: string): void {\n    origin = url.replace(/\\/$/, '');\n}\n\nexport function getOrigin(): string {\n    return origin;\n}\n\nexport interface FetchOptions {\n    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';\n    body?: unknown;\n    signal?: AbortSignal;\n}\n\nexport async function api<T>(path: string, opts: FetchOptions = {}): Promise<T> {\n    const res = await fetch(`${origin}${path}`, {\n        method: opts.method ?? 'GET',\n        credentials: 'include',\n        headers: { 'content-type': 'application/json', accept: 'application/json' },\n        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n        signal: opts.signal,\n    });\n    if (!res.ok) {\n        let message = `me.ochk.io ${res.status}`;\n        try {\n            const data = (await res.json()) as { error?: string };\n            if (data?.error) message = data.error;\n        } catch {\n            /* ignore */\n        }\n        throw new MeClientError(message, res.status);\n    }\n    return (await res.json()) as T;\n}\n\nexport class MeClientError extends Error {\n    public readonly status: number;\n    constructor(message: string, status: number) {\n        super(message);\n        this.name = 'MeClientError';\n        this.status = status;\n    }\n}\n","import type { Session, SessionPolicy, SignInOptions, TelemetryEvent } from './types';\n\nimport { api } from './transport';\n\nconst DEFAULT_POLICY: SessionPolicy = {\n    duration_seconds: 7 * 24 * 60 * 60, // 7 days, standard SaaS shape\n    refresh: 'sliding',\n    sensitive_actions: 're-auth',\n};\n\nconst telemetrySubscribers = new Set<(e: TelemetryEvent) => void>();\n\n/** Subscribe to non-billable developer telemetry events. Call the returned\n *  function to unsubscribe. */\nexport function onTelemetry(listener: (e: TelemetryEvent) => void): () => void {\n    telemetrySubscribers.add(listener);\n    return () => {\n        telemetrySubscribers.delete(listener);\n    };\n}\n\nfunction emitTelemetry(code: TelemetryEvent['code'], session_id?: string): void {\n    const e: TelemetryEvent = {\n        code,\n        timestamp: new Date().toISOString(),\n        ...(session_id ? { session_id } : {}),\n    };\n    for (const fn of telemetrySubscribers) {\n        try {\n            fn(e);\n        } catch {\n            /* listener errors must not break the session flow */\n        }\n    }\n}\n\n/**\n * Open a sign-in flow at me.ochk.io. Returns the resulting Session once\n * the user consents (Class C billable event for the integrating site,\n * cashback for the user). Internally this opens the OC consent UI in a\n * popup; v1 implementations may also redirect.\n */\nasync function create(opts: SignInOptions): Promise<Session> {\n    const policy: SessionPolicy = { ...DEFAULT_POLICY, ...(opts.sessionPolicy ?? {}) };\n    return api<Session>('/api/session/create', {\n        method: 'POST',\n        body: {\n            scope: opts.scope,\n            policy,\n            return_to: opts.returnTo ?? (typeof window !== 'undefined' ? window.location.href : undefined),\n        },\n    });\n}\n\n/**\n * Refresh a still-valid session inside its policy window. Free for the\n * integrating site (does NOT instantiate a billable event); emits a\n * `session.token_refresh` telemetry record.\n */\nasync function refresh(sessionId: string): Promise<Session> {\n    emitTelemetry('session.token_refresh', sessionId);\n    return api<Session>('/api/session/refresh', {\n        method: 'POST',\n        body: { session_id: sessionId },\n    });\n}\n\n/** Invalidate a session. Free, telemetry-only. */\nasync function invalidate(sessionId: string): Promise<void> {\n    emitTelemetry('session.intra_signin', sessionId);\n    await api<{ ok: true }>('/api/session/invalidate', {\n        method: 'POST',\n        body: { session_id: sessionId },\n    });\n}\n\nexport const session = { create, refresh, invalidate };\n","import * as React from 'react';\n\nimport { session } from './session';\nimport type { Session, SessionPolicy } from './types';\n\nexport interface OcSignInButtonProps\n    extends Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onError'> {\n    scope: string[];\n    sessionPolicy?: Partial<SessionPolicy>;\n    returnTo?: string;\n    onSignin?: (session: Session) => void;\n    /** Called when the sign-in flow fails. Renamed from `onError` to avoid\n     *  shadowing the native button error handler. */\n    onSignInError?: (error: Error) => void;\n    /** Custom button text. Defaults to \"sign in with oc\". */\n    label?: string;\n}\n\n/**\n * Drop-in Sign-in-with-OC button. Triggers the me.ochk.io consent flow\n * for the requested scope, opens (or refreshes) a session, and calls\n * onSignin(session) on success. Class C billable event for the\n * integrating site; cashback flows to the user.\n *\n * Mounting requires <OcSessionProvider> from @orangecheck/auth-client\n * somewhere up the React tree so the resulting session can be read by\n * useOcSession() across the rest of the app.\n */\nexport function OcSignInButton({\n    scope,\n    sessionPolicy,\n    returnTo,\n    onSignin,\n    onSignInError,\n    label = 'sign in with oc',\n    children,\n    onClick,\n    style,\n    ...rest\n}: OcSignInButtonProps) {\n    const [pending, setPending] = React.useState(false);\n\n    return (\n        <button\n            type=\"button\"\n            onClick={async (event) => {\n                onClick?.(event);\n                if (event.defaultPrevented) return;\n                setPending(true);\n                try {\n                    const result = await session.create({ scope, sessionPolicy, returnTo });\n                    onSignin?.(result);\n                } catch (err) {\n                    onSignInError?.(err instanceof Error ? err : new Error(String(err)));\n                } finally {\n                    setPending(false);\n                }\n            }}\n            style={{\n                display: 'inline-flex',\n                alignItems: 'center',\n                gap: 8,\n                padding: '10px 16px',\n                fontSize: 13,\n                fontWeight: 600,\n                fontFamily: 'ui-monospace, \"JetBrains Mono\", \"SF Mono\", Menlo, monospace',\n                letterSpacing: '0.18em',\n                textTransform: 'uppercase',\n                background: '#f97316',\n                color: '#0b0909',\n                border: '1px solid #f97316',\n                borderRadius: 4,\n                cursor: pending ? 'progress' : 'pointer',\n                opacity: pending ? 0.7 : 1,\n                ...(style ?? {}),\n            }}\n            disabled={pending || rest.disabled}\n            data-oc-signin\n            {...rest}\n        >\n            {/* compact OC mark */}\n            <span\n                aria-hidden\n                style={{\n                    display: 'inline-block',\n                    width: 12,\n                    height: 12,\n                    background: '#0b0909',\n                }}\n            />\n            {children ?? (pending ? 'opening…' : label)}\n        </button>\n    );\n}\n","import type { PaymentAuthorizeOptions, PaymentResult } from './types';\n\nimport { api } from './transport';\n\n/**\n * Authorize a payment through the user's OC identity. Class B billable\n * event for the integrating site (sub-Stripe rate, percentage-based);\n * cashback flows to the user as Lightning credit on /me/earn.\n *\n * The user is prompted by me.ochk.io to consent to the specific payment\n * before this resolves. If the user declines or cancels, the result has\n * status `'cancelled'`, a non-billable telemetry record is emitted, and\n * NO billable event is created.\n */\nasync function authorize(opts: PaymentAuthorizeOptions): Promise<PaymentResult> {\n    if (opts.amount_sats == null && opts.usd_cents == null) {\n        throw new Error('payment.authorize requires amount_sats or usd_cents');\n    }\n    return api<PaymentResult>('/api/payment/authorize', {\n        method: 'POST',\n        body: opts,\n    });\n}\n\nexport const payment = { authorize };\n","/**\n * @orangecheck/me-client\n *\n * Drop-in client for me.ochk.io. Exports the canonical billable-event\n * taxonomy as TypeScript types, session lifecycle hooks, payment\n * authorization, the developer telemetry stream, and the React sign-in\n * button.\n *\n * Sign-in-with-OC. You pay for sessions and actions, not for clicks.\n */\n\nexport { OcSignInButton } from './SignInButton';\nexport type { OcSignInButtonProps } from './SignInButton';\n\nexport { session, onTelemetry } from './session';\nexport { payment } from './payment';\nexport { setOrigin, getOrigin, MeClientError } from './transport';\n\nexport type {\n    EventClass,\n    EventSubtype,\n    ClassASubtype,\n    ClassBSubtype,\n    ClassCSubtype,\n    AttestTier,\n    BillableEvent,\n    Session,\n    SessionPolicy,\n    SignInOptions,\n    PaymentAuthorizeOptions,\n    PaymentResult,\n    TelemetryEvent,\n} from './types';\n\nimport { session } from './session';\nimport { payment } from './payment';\n\n/** Convenience namespace mirroring the public API surface in /integrate\n *  code samples — `oc.session.create()`, `oc.payment.authorize()`. */\nexport const oc = { session, payment };\n"]}

package/dist/index.mjs

@@ -0,0 +1,181 @@
+import * as React from 'react';
+import { jsxs, jsx } from 'react/jsx-runtime';
+
+// src/SignInButton.tsx
+
+// src/transport.ts
+var origin = "https://me.ochk.io";
+function setOrigin(url) {
+  origin = url.replace(/\/$/, "");
+}
+function getOrigin() {
+  return origin;
+}
+async function api(path, opts = {}) {
+  const res = await fetch(`${origin}${path}`, {
+    method: opts.method ?? "GET",
+    credentials: "include",
+    headers: { "content-type": "application/json", accept: "application/json" },
+    body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0,
+    signal: opts.signal
+  });
+  if (!res.ok) {
+    let message = `me.ochk.io ${res.status}`;
+    try {
+      const data = await res.json();
+      if (data?.error) message = data.error;
+    } catch {
+    }
+    throw new MeClientError(message, res.status);
+  }
+  return await res.json();
+}
+var MeClientError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.name = "MeClientError";
+    this.status = status;
+  }
+};
+
+// src/session.ts
+var DEFAULT_POLICY = {
+  duration_seconds: 7 * 24 * 60 * 60,
+  // 7 days, standard SaaS shape
+  refresh: "sliding",
+  sensitive_actions: "re-auth"
+};
+var telemetrySubscribers = /* @__PURE__ */ new Set();
+function onTelemetry(listener) {
+  telemetrySubscribers.add(listener);
+  return () => {
+    telemetrySubscribers.delete(listener);
+  };
+}
+function emitTelemetry(code, session_id) {
+  const e = {
+    code,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    ...session_id ? { session_id } : {}
+  };
+  for (const fn of telemetrySubscribers) {
+    try {
+      fn(e);
+    } catch {
+    }
+  }
+}
+async function create(opts) {
+  const policy = { ...DEFAULT_POLICY, ...opts.sessionPolicy ?? {} };
+  return api("/api/session/create", {
+    method: "POST",
+    body: {
+      scope: opts.scope,
+      policy,
+      return_to: opts.returnTo ?? (typeof window !== "undefined" ? window.location.href : void 0)
+    }
+  });
+}
+async function refresh(sessionId) {
+  emitTelemetry("session.token_refresh", sessionId);
+  return api("/api/session/refresh", {
+    method: "POST",
+    body: { session_id: sessionId }
+  });
+}
+async function invalidate(sessionId) {
+  emitTelemetry("session.intra_signin", sessionId);
+  await api("/api/session/invalidate", {
+    method: "POST",
+    body: { session_id: sessionId }
+  });
+}
+var session = { create, refresh, invalidate };
+function OcSignInButton({
+  scope,
+  sessionPolicy,
+  returnTo,
+  onSignin,
+  onSignInError,
+  label = "sign in with oc",
+  children,
+  onClick,
+  style,
+  ...rest
+}) {
+  const [pending, setPending] = React.useState(false);
+  return /* @__PURE__ */ jsxs(
+    "button",
+    {
+      type: "button",
+      onClick: async (event) => {
+        onClick?.(event);
+        if (event.defaultPrevented) return;
+        setPending(true);
+        try {
+          const result = await session.create({ scope, sessionPolicy, returnTo });
+          onSignin?.(result);
+        } catch (err) {
+          onSignInError?.(err instanceof Error ? err : new Error(String(err)));
+        } finally {
+          setPending(false);
+        }
+      },
+      style: {
+        display: "inline-flex",
+        alignItems: "center",
+        gap: 8,
+        padding: "10px 16px",
+        fontSize: 13,
+        fontWeight: 600,
+        fontFamily: 'ui-monospace, "JetBrains Mono", "SF Mono", Menlo, monospace',
+        letterSpacing: "0.18em",
+        textTransform: "uppercase",
+        background: "#f97316",
+        color: "#0b0909",
+        border: "1px solid #f97316",
+        borderRadius: 4,
+        cursor: pending ? "progress" : "pointer",
+        opacity: pending ? 0.7 : 1,
+        ...style ?? {}
+      },
+      disabled: pending || rest.disabled,
+      "data-oc-signin": true,
+      ...rest,
+      children: [
+        /* @__PURE__ */ jsx(
+          "span",
+          {
+            "aria-hidden": true,
+            style: {
+              display: "inline-block",
+              width: 12,
+              height: 12,
+              background: "#0b0909"
+            }
+          }
+        ),
+        children ?? (pending ? "opening\u2026" : label)
+      ]
+    }
+  );
+}
+
+// src/payment.ts
+async function authorize(opts) {
+  if (opts.amount_sats == null && opts.usd_cents == null) {
+    throw new Error("payment.authorize requires amount_sats or usd_cents");
+  }
+  return api("/api/payment/authorize", {
+    method: "POST",
+    body: opts
+  });
+}
+var payment = { authorize };
+
+// src/index.ts
+var oc = { session, payment };
+
+export { MeClientError, OcSignInButton, getOrigin, oc, onTelemetry, payment, session, setOrigin };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/transport.ts","../src/session.ts","../src/SignInButton.tsx","../src/payment.ts","../src/index.ts"],"names":[],"mappings":";;;;;;AAKA,IAAI,MAAA,GAAS,oBAAA;AAEN,SAAS,UAAU,GAAA,EAAmB;AACzC,EAAA,MAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAClC;AAEO,SAAS,SAAA,GAAoB;AAChC,EAAA,OAAO,MAAA;AACX;AAQA,eAAsB,GAAA,CAAO,IAAA,EAAc,IAAA,GAAqB,EAAC,EAAe;AAC5E,EAAA,MAAM,MAAM,MAAM,KAAA,CAAM,GAAG,MAAM,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,IACxC,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,IACvB,WAAA,EAAa,SAAA;AAAA,IACb,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,QAAQ,kBAAA,EAAmB;AAAA,IAC1E,IAAA,EAAM,KAAK,IAAA,KAAS,MAAA,GAAY,KAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,MAAA;AAAA,IAC5D,QAAQ,IAAA,CAAK;AAAA,GAChB,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACT,IAAA,IAAI,OAAA,GAAU,CAAA,WAAA,EAAc,GAAA,CAAI,MAAM,CAAA,CAAA;AACtC,IAAA,IAAI;AACA,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,MAAA,IAAI,IAAA,EAAM,KAAA,EAAO,OAAA,GAAU,IAAA,CAAK,KAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,aAAA,CAAc,OAAA,EAAS,GAAA,CAAI,MAAM,CAAA;AAAA,EAC/C;AACA,EAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAC3B;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAErC,WAAA,CAAY,SAAiB,MAAA,EAAgB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAClB;AACJ;;;AC7CA,IAAM,cAAA,GAAgC;AAAA,EAClC,gBAAA,EAAkB,CAAA,GAAI,EAAA,GAAK,EAAA,GAAK,EAAA;AAAA;AAAA,EAChC,OAAA,EAAS,SAAA;AAAA,EACT,iBAAA,EAAmB;AACvB,CAAA;AAEA,IAAM,oBAAA,uBAA2B,GAAA,EAAiC;AAI3D,SAAS,YAAY,QAAA,EAAmD;AAC3E,EAAA,oBAAA,CAAqB,IAAI,QAAQ,CAAA;AACjC,EAAA,OAAO,MAAM;AACT,IAAA,oBAAA,CAAqB,OAAO,QAAQ,CAAA;AAAA,EACxC,CAAA;AACJ;AAEA,SAAS,aAAA,CAAc,MAA8B,UAAA,EAA2B;AAC5E,EAAA,MAAM,CAAA,GAAoB;AAAA,IACtB,IAAA;AAAA,IACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,GAAI,UAAA,GAAa,EAAE,UAAA,KAAe;AAAC,GACvC;AACA,EAAA,KAAA,MAAW,MAAM,oBAAA,EAAsB;AACnC,IAAA,IAAI;AACA,MAAA,EAAA,CAAG,CAAC,CAAA;AAAA,IACR,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACJ;AACJ;AAQA,eAAe,OAAO,IAAA,EAAuC;AACzD,EAAA,MAAM,MAAA,GAAwB,EAAE,GAAG,cAAA,EAAgB,GAAI,IAAA,CAAK,aAAA,IAAiB,EAAC,EAAG;AACjF,EAAA,OAAO,IAAa,qBAAA,EAAuB;AAAA,IACvC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM;AAAA,MACF,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,MAAA;AAAA,MACA,SAAA,EAAW,KAAK,QAAA,KAAa,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,MAAA;AAAA;AACxF,GACH,CAAA;AACL;AAOA,eAAe,QAAQ,SAAA,EAAqC;AACxD,EAAA,aAAA,CAAc,yBAAyB,SAAS,CAAA;AAChD,EAAA,OAAO,IAAa,sBAAA,EAAwB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,EAAE,UAAA,EAAY,SAAA;AAAU,GACjC,CAAA;AACL;AAGA,eAAe,WAAW,SAAA,EAAkC;AACxD,EAAA,aAAA,CAAc,wBAAwB,SAAS,CAAA;AAC/C,EAAA,MAAM,IAAkB,yBAAA,EAA2B;AAAA,IAC/C,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,EAAE,UAAA,EAAY,SAAA;AAAU,GACjC,CAAA;AACL;AAEO,IAAM,OAAA,GAAU,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAA;AChDnC,SAAS,cAAA,CAAe;AAAA,EAC3B,KAAA;AAAA,EACA,aAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,KAAA,GAAQ,iBAAA;AAAA,EACR,QAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAG;AACP,CAAA,EAAwB;AACpB,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAU,eAAS,KAAK,CAAA;AAElD,EAAA,uBACI,IAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACG,IAAA,EAAK,QAAA;AAAA,MACL,OAAA,EAAS,OAAO,KAAA,KAAU;AACtB,QAAA,OAAA,GAAU,KAAK,CAAA;AACf,QAAA,IAAI,MAAM,gBAAA,EAAkB;AAC5B,QAAA,UAAA,CAAW,IAAI,CAAA;AACf,QAAA,IAAI;AACA,UAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,CAAO,EAAE,KAAA,EAAO,aAAA,EAAe,UAAU,CAAA;AACtE,UAAA,QAAA,GAAW,MAAM,CAAA;AAAA,QACrB,SAAS,GAAA,EAAK;AACV,UAAA,aAAA,GAAgB,GAAA,YAAe,QAAQ,GAAA,GAAM,IAAI,MAAM,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,QACvE,CAAA,SAAE;AACE,UAAA,UAAA,CAAW,KAAK,CAAA;AAAA,QACpB;AAAA,MACJ,CAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACH,OAAA,EAAS,aAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,GAAA,EAAK,CAAA;AAAA,QACL,OAAA,EAAS,WAAA;AAAA,QACT,QAAA,EAAU,EAAA;AAAA,QACV,UAAA,EAAY,GAAA;AAAA,QACZ,UAAA,EAAY,6DAAA;AAAA,QACZ,aAAA,EAAe,QAAA;AAAA,QACf,aAAA,EAAe,WAAA;AAAA,QACf,UAAA,EAAY,SAAA;AAAA,QACZ,KAAA,EAAO,SAAA;AAAA,QACP,MAAA,EAAQ,mBAAA;AAAA,QACR,YAAA,EAAc,CAAA;AAAA,QACd,MAAA,EAAQ,UAAU,UAAA,GAAa,SAAA;AAAA,QAC/B,OAAA,EAAS,UAAU,GAAA,GAAM,CAAA;AAAA,QACzB,GAAI,SAAS;AAAC,OAClB;AAAA,MACA,QAAA,EAAU,WAAW,IAAA,CAAK,QAAA;AAAA,MAC1B,gBAAA,EAAc,IAAA;AAAA,MACb,GAAG,IAAA;AAAA,MAGJ,QAAA,EAAA;AAAA,wBAAA,GAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACG,aAAA,EAAW,IAAA;AAAA,YACX,KAAA,EAAO;AAAA,cACH,OAAA,EAAS,cAAA;AAAA,cACT,KAAA,EAAO,EAAA;AAAA,cACP,MAAA,EAAQ,EAAA;AAAA,cACR,UAAA,EAAY;AAAA;AAChB;AAAA,SACJ;AAAA,QACC,QAAA,KAAa,UAAU,eAAA,GAAa,KAAA;AAAA;AAAA;AAAA,GACzC;AAER;;;AC/EA,eAAe,UAAU,IAAA,EAAuD;AAC5E,EAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,IAAQ,IAAA,CAAK,aAAa,IAAA,EAAM;AACpD,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACzE;AACA,EAAA,OAAO,IAAmB,wBAAA,EAA0B;AAAA,IAChD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM;AAAA,GACT,CAAA;AACL;AAEO,IAAM,OAAA,GAAU,EAAE,SAAA;;;ACelB,IAAM,EAAA,GAAK,EAAE,OAAA,EAAS,OAAA","file":"index.mjs","sourcesContent":["/**\n * Tiny HTTP transport layer. The me.ochk.io origin is configurable so\n * staging deployments and self-hosted me-equivalents can swap it.\n */\n\nlet origin = 'https://me.ochk.io';\n\nexport function setOrigin(url: string): void {\n    origin = url.replace(/\\/$/, '');\n}\n\nexport function getOrigin(): string {\n    return origin;\n}\n\nexport interface FetchOptions {\n    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';\n    body?: unknown;\n    signal?: AbortSignal;\n}\n\nexport async function api<T>(path: string, opts: FetchOptions = {}): Promise<T> {\n    const res = await fetch(`${origin}${path}`, {\n        method: opts.method ?? 'GET',\n        credentials: 'include',\n        headers: { 'content-type': 'application/json', accept: 'application/json' },\n        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n        signal: opts.signal,\n    });\n    if (!res.ok) {\n        let message = `me.ochk.io ${res.status}`;\n        try {\n            const data = (await res.json()) as { error?: string };\n            if (data?.error) message = data.error;\n        } catch {\n            /* ignore */\n        }\n        throw new MeClientError(message, res.status);\n    }\n    return (await res.json()) as T;\n}\n\nexport class MeClientError extends Error {\n    public readonly status: number;\n    constructor(message: string, status: number) {\n        super(message);\n        this.name = 'MeClientError';\n        this.status = status;\n    }\n}\n","import type { Session, SessionPolicy, SignInOptions, TelemetryEvent } from './types';\n\nimport { api } from './transport';\n\nconst DEFAULT_POLICY: SessionPolicy = {\n    duration_seconds: 7 * 24 * 60 * 60, // 7 days, standard SaaS shape\n    refresh: 'sliding',\n    sensitive_actions: 're-auth',\n};\n\nconst telemetrySubscribers = new Set<(e: TelemetryEvent) => void>();\n\n/** Subscribe to non-billable developer telemetry events. Call the returned\n *  function to unsubscribe. */\nexport function onTelemetry(listener: (e: TelemetryEvent) => void): () => void {\n    telemetrySubscribers.add(listener);\n    return () => {\n        telemetrySubscribers.delete(listener);\n    };\n}\n\nfunction emitTelemetry(code: TelemetryEvent['code'], session_id?: string): void {\n    const e: TelemetryEvent = {\n        code,\n        timestamp: new Date().toISOString(),\n        ...(session_id ? { session_id } : {}),\n    };\n    for (const fn of telemetrySubscribers) {\n        try {\n            fn(e);\n        } catch {\n            /* listener errors must not break the session flow */\n        }\n    }\n}\n\n/**\n * Open a sign-in flow at me.ochk.io. Returns the resulting Session once\n * the user consents (Class C billable event for the integrating site,\n * cashback for the user). Internally this opens the OC consent UI in a\n * popup; v1 implementations may also redirect.\n */\nasync function create(opts: SignInOptions): Promise<Session> {\n    const policy: SessionPolicy = { ...DEFAULT_POLICY, ...(opts.sessionPolicy ?? {}) };\n    return api<Session>('/api/session/create', {\n        method: 'POST',\n        body: {\n            scope: opts.scope,\n            policy,\n            return_to: opts.returnTo ?? (typeof window !== 'undefined' ? window.location.href : undefined),\n        },\n    });\n}\n\n/**\n * Refresh a still-valid session inside its policy window. Free for the\n * integrating site (does NOT instantiate a billable event); emits a\n * `session.token_refresh` telemetry record.\n */\nasync function refresh(sessionId: string): Promise<Session> {\n    emitTelemetry('session.token_refresh', sessionId);\n    return api<Session>('/api/session/refresh', {\n        method: 'POST',\n        body: { session_id: sessionId },\n    });\n}\n\n/** Invalidate a session. Free, telemetry-only. */\nasync function invalidate(sessionId: string): Promise<void> {\n    emitTelemetry('session.intra_signin', sessionId);\n    await api<{ ok: true }>('/api/session/invalidate', {\n        method: 'POST',\n        body: { session_id: sessionId },\n    });\n}\n\nexport const session = { create, refresh, invalidate };\n","import * as React from 'react';\n\nimport { session } from './session';\nimport type { Session, SessionPolicy } from './types';\n\nexport interface OcSignInButtonProps\n    extends Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onError'> {\n    scope: string[];\n    sessionPolicy?: Partial<SessionPolicy>;\n    returnTo?: string;\n    onSignin?: (session: Session) => void;\n    /** Called when the sign-in flow fails. Renamed from `onError` to avoid\n     *  shadowing the native button error handler. */\n    onSignInError?: (error: Error) => void;\n    /** Custom button text. Defaults to \"sign in with oc\". */\n    label?: string;\n}\n\n/**\n * Drop-in Sign-in-with-OC button. Triggers the me.ochk.io consent flow\n * for the requested scope, opens (or refreshes) a session, and calls\n * onSignin(session) on success. Class C billable event for the\n * integrating site; cashback flows to the user.\n *\n * Mounting requires <OcSessionProvider> from @orangecheck/auth-client\n * somewhere up the React tree so the resulting session can be read by\n * useOcSession() across the rest of the app.\n */\nexport function OcSignInButton({\n    scope,\n    sessionPolicy,\n    returnTo,\n    onSignin,\n    onSignInError,\n    label = 'sign in with oc',\n    children,\n    onClick,\n    style,\n    ...rest\n}: OcSignInButtonProps) {\n    const [pending, setPending] = React.useState(false);\n\n    return (\n        <button\n            type=\"button\"\n            onClick={async (event) => {\n                onClick?.(event);\n                if (event.defaultPrevented) return;\n                setPending(true);\n                try {\n                    const result = await session.create({ scope, sessionPolicy, returnTo });\n                    onSignin?.(result);\n                } catch (err) {\n                    onSignInError?.(err instanceof Error ? err : new Error(String(err)));\n                } finally {\n                    setPending(false);\n                }\n            }}\n            style={{\n                display: 'inline-flex',\n                alignItems: 'center',\n                gap: 8,\n                padding: '10px 16px',\n                fontSize: 13,\n                fontWeight: 600,\n                fontFamily: 'ui-monospace, \"JetBrains Mono\", \"SF Mono\", Menlo, monospace',\n                letterSpacing: '0.18em',\n                textTransform: 'uppercase',\n                background: '#f97316',\n                color: '#0b0909',\n                border: '1px solid #f97316',\n                borderRadius: 4,\n                cursor: pending ? 'progress' : 'pointer',\n                opacity: pending ? 0.7 : 1,\n                ...(style ?? {}),\n            }}\n            disabled={pending || rest.disabled}\n            data-oc-signin\n            {...rest}\n        >\n            {/* compact OC mark */}\n            <span\n                aria-hidden\n                style={{\n                    display: 'inline-block',\n                    width: 12,\n                    height: 12,\n                    background: '#0b0909',\n                }}\n            />\n            {children ?? (pending ? 'opening…' : label)}\n        </button>\n    );\n}\n","import type { PaymentAuthorizeOptions, PaymentResult } from './types';\n\nimport { api } from './transport';\n\n/**\n * Authorize a payment through the user's OC identity. Class B billable\n * event for the integrating site (sub-Stripe rate, percentage-based);\n * cashback flows to the user as Lightning credit on /me/earn.\n *\n * The user is prompted by me.ochk.io to consent to the specific payment\n * before this resolves. If the user declines or cancels, the result has\n * status `'cancelled'`, a non-billable telemetry record is emitted, and\n * NO billable event is created.\n */\nasync function authorize(opts: PaymentAuthorizeOptions): Promise<PaymentResult> {\n    if (opts.amount_sats == null && opts.usd_cents == null) {\n        throw new Error('payment.authorize requires amount_sats or usd_cents');\n    }\n    return api<PaymentResult>('/api/payment/authorize', {\n        method: 'POST',\n        body: opts,\n    });\n}\n\nexport const payment = { authorize };\n","/**\n * @orangecheck/me-client\n *\n * Drop-in client for me.ochk.io. Exports the canonical billable-event\n * taxonomy as TypeScript types, session lifecycle hooks, payment\n * authorization, the developer telemetry stream, and the React sign-in\n * button.\n *\n * Sign-in-with-OC. You pay for sessions and actions, not for clicks.\n */\n\nexport { OcSignInButton } from './SignInButton';\nexport type { OcSignInButtonProps } from './SignInButton';\n\nexport { session, onTelemetry } from './session';\nexport { payment } from './payment';\nexport { setOrigin, getOrigin, MeClientError } from './transport';\n\nexport type {\n    EventClass,\n    EventSubtype,\n    ClassASubtype,\n    ClassBSubtype,\n    ClassCSubtype,\n    AttestTier,\n    BillableEvent,\n    Session,\n    SessionPolicy,\n    SignInOptions,\n    PaymentAuthorizeOptions,\n    PaymentResult,\n    TelemetryEvent,\n} from './types';\n\nimport { session } from './session';\nimport { payment } from './payment';\n\n/** Convenience namespace mirroring the public API surface in /integrate\n *  code samples — `oc.session.create()`, `oc.payment.authorize()`. */\nexport const oc = { session, payment };\n"]}

package/package.json

@@ -0,0 +1,69 @@
+{
+    "name": "@orangecheck/me-client",
+    "version": "0.1.0",
+    "description": "Drop-in client for me.ochk.io. Sign-in-with-OC button, session lifecycle hooks (oc.session.create / refresh / invalidate), payment authorization, and the canonical billable-event taxonomy as types.",
+    "keywords": [
+        "orangecheck",
+        "bitcoin",
+        "identity",
+        "sign-in-with-oc",
+        "react",
+        "sso",
+        "lightning"
+    ],
+    "author": "OrangeCheck",
+    "license": "MIT",
+    "homepage": "https://me.ochk.io",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/orangecheck/oc-packages.git",
+        "directory": "me-client"
+    },
+    "bugs": {
+        "url": "https://github.com/orangecheck/oc-packages/issues"
+    },
+    "main": "./dist/index.js",
+    "module": "./dist/index.mjs",
+    "types": "./dist/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.mjs",
+            "require": "./dist/index.js"
+        }
+    },
+    "files": [
+        "dist",
+        "README.md",
+        "LICENSE"
+    ],
+    "scripts": {
+        "build": "tsup",
+        "dev": "tsup --watch",
+        "test": "vitest run",
+        "type-check": "tsc --noEmit",
+        "clean": "rm -rf dist",
+        "prepublishOnly": "npm run clean && npm run build"
+    },
+    "peerDependencies": {
+        "@orangecheck/auth-client": "^0.4.0",
+        "react": "^18.0.0 || ^19.0.0",
+        "react-dom": "^18.0.0 || ^19.0.0"
+    },
+    "devDependencies": {
+        "@orangecheck/auth-client": "^0.4.0",
+        "@testing-library/react": "^16.3.2",
+        "@types/node": "^22.0.0",
+        "@types/react": "^18.3.12",
+        "@types/react-dom": "^18.3.1",
+        "jsdom": "^29.0.2",
+        "react": "^18.3.1",
+        "react-dom": "^18.3.1",
+        "tsup": "^8.3.5",
+        "typescript": "^5.6.3",
+        "vitest": "^3.0.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    }
+}