@orangecheck/me-client 0.23.0 → 0.25.0

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { v as verifyActivityAttestation, r as refreshEnvelopeJwks } from './identity-1VYMOhzV.mjs';
 export { A as ActivityAttestation, a as ActivityAttestationBundle, b as ActivityVerifyCheck, c as ActivityVerifyResult, V as VerifyActivityOptions, i as identity } from './identity-1VYMOhzV.mjs';
-import { E as EventKey, B as BillableEvent, I as IntegratorPriceConfig, S as SessionPolicy, a as Session, T as TelemetryEvent, b as SignInOptions, P as PaymentAuthorizeOptions, c as PaymentResult, V as ValidationResult, f as fromTemplate, g as getArchetypeTemplate, A as ArchetypeTemplate, F as Federation } from './integrator-XkSgSrD4.mjs';
-export { d as ALL_EVENT_SUBTYPES, e as ARCHETYPE_TEMPLATES, h as AgentClassOverride, i as AttestTier, C as ClassASubtype, j as ClassBSubtype, k as ClassCSubtype, l as ComputedFees, D as DropCadence, m as DropClosedWebhookPayload, n as DropResponseBlock, o as DropScheduleSummary, p as EVENT_SUBTYPES, q as EventClass, r as EventSubtype, s as EventSubtypeMetadata, t as FederationStatus, u as IntegratorArchetype, v as IntegratorEventConfig, M as MAX_DROP_WINDOW_DAYS, w as MIN_INTEGRATOR_PRICE_SATS, x as PLATFORM_FEE_POLICY, y as SigningMethod, z as SiteFeeShape, G as SystemWebhookPayload, W as WebhookHeaders, H as WebhookPayload, J as computeFees, K as subtypesForClass, L as validateIntegratorConfig } from './integrator-XkSgSrD4.mjs';
+import { E as EventKey, B as BillableEvent, I as IntegratorPriceConfig, S as SessionPolicy, a as Session, T as TelemetryEvent, b as SignInOptions, P as PaymentAuthorizeOptions, c as PaymentResult, V as ValidationResult, f as fromTemplate, g as getArchetypeTemplate, A as ArchetypeTemplate, F as Federation } from './integrator-BVzzkZ6l.mjs';
+export { d as ALL_EVENT_SUBTYPES, e as ARCHETYPE_TEMPLATES, h as AgentClassOverride, i as AttestTier, C as ClassASubtype, j as ClassBSubtype, k as ClassCSubtype, l as ComputedFees, D as DropCadence, m as DropClosedWebhookPayload, n as DropResponseBlock, o as DropScheduleSummary, p as EVENT_SUBTYPES, q as EventClass, r as EventSubtype, s as EventSubtypeMetadata, t as FederationStatus, u as IntegratorArchetype, v as IntegratorEventConfig, M as MAX_DROP_WINDOW_DAYS, w as MIN_INTEGRATOR_PRICE_SATS, x as PLATFORM_FEE_POLICY, y as SigningMethod, z as SiteFeeShape, G as SystemWebhookPayload, W as WebhookHeaders, H as WebhookPayload, J as computeFees, K as subtypesForClass, L as validateIntegratorConfig } from './integrator-BVzzkZ6l.mjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as React from 'react';
 
@@ -84,9 +84,11 @@ interface FireEventOptions {
     subtype: EventKey;
     action_label?: string;
     payment_amount_sats?: number;
-    user_address?: string;
     metadata?: Record<string, unknown>;
     is_agent?: boolean;
+    signingSecret?: string;
+    bearerToken?: string;
+    idempotencyKey?: string;
 }
 declare function fire(options: FireEventOptions): Promise<BillableEvent>;
 interface BatchEventInput {
@@ -113,6 +115,8 @@ type BatchEventResult = {
 interface FireBatchOptions {
     project_key: string;
     events: BatchEventInput[];
+    signingSecret?: string;
+    bearerToken?: string;
 }
 interface FireBatchResponse {
     ok: boolean;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { v as verifyActivityAttestation, r as refreshEnvelopeJwks } from './identity-1VYMOhzV.js';
 export { A as ActivityAttestation, a as ActivityAttestationBundle, b as ActivityVerifyCheck, c as ActivityVerifyResult, V as VerifyActivityOptions, i as identity } from './identity-1VYMOhzV.js';
-import { E as EventKey, B as BillableEvent, I as IntegratorPriceConfig, S as SessionPolicy, a as Session, T as TelemetryEvent, b as SignInOptions, P as PaymentAuthorizeOptions, c as PaymentResult, V as ValidationResult, f as fromTemplate, g as getArchetypeTemplate, A as ArchetypeTemplate, F as Federation } from './integrator-XkSgSrD4.js';
-export { d as ALL_EVENT_SUBTYPES, e as ARCHETYPE_TEMPLATES, h as AgentClassOverride, i as AttestTier, C as ClassASubtype, j as ClassBSubtype, k as ClassCSubtype, l as ComputedFees, D as DropCadence, m as DropClosedWebhookPayload, n as DropResponseBlock, o as DropScheduleSummary, p as EVENT_SUBTYPES, q as EventClass, r as EventSubtype, s as EventSubtypeMetadata, t as FederationStatus, u as IntegratorArchetype, v as IntegratorEventConfig, M as MAX_DROP_WINDOW_DAYS, w as MIN_INTEGRATOR_PRICE_SATS, x as PLATFORM_FEE_POLICY, y as SigningMethod, z as SiteFeeShape, G as SystemWebhookPayload, W as WebhookHeaders, H as WebhookPayload, J as computeFees, K as subtypesForClass, L as validateIntegratorConfig } from './integrator-XkSgSrD4.js';
+import { E as EventKey, B as BillableEvent, I as IntegratorPriceConfig, S as SessionPolicy, a as Session, T as TelemetryEvent, b as SignInOptions, P as PaymentAuthorizeOptions, c as PaymentResult, V as ValidationResult, f as fromTemplate, g as getArchetypeTemplate, A as ArchetypeTemplate, F as Federation } from './integrator-BVzzkZ6l.js';
+export { d as ALL_EVENT_SUBTYPES, e as ARCHETYPE_TEMPLATES, h as AgentClassOverride, i as AttestTier, C as ClassASubtype, j as ClassBSubtype, k as ClassCSubtype, l as ComputedFees, D as DropCadence, m as DropClosedWebhookPayload, n as DropResponseBlock, o as DropScheduleSummary, p as EVENT_SUBTYPES, q as EventClass, r as EventSubtype, s as EventSubtypeMetadata, t as FederationStatus, u as IntegratorArchetype, v as IntegratorEventConfig, M as MAX_DROP_WINDOW_DAYS, w as MIN_INTEGRATOR_PRICE_SATS, x as PLATFORM_FEE_POLICY, y as SigningMethod, z as SiteFeeShape, G as SystemWebhookPayload, W as WebhookHeaders, H as WebhookPayload, J as computeFees, K as subtypesForClass, L as validateIntegratorConfig } from './integrator-BVzzkZ6l.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as React from 'react';
 
@@ -84,9 +84,11 @@ interface FireEventOptions {
     subtype: EventKey;
     action_label?: string;
     payment_amount_sats?: number;
-    user_address?: string;
     metadata?: Record<string, unknown>;
     is_agent?: boolean;
+    signingSecret?: string;
+    bearerToken?: string;
+    idempotencyKey?: string;
 }
 declare function fire(options: FireEventOptions): Promise<BillableEvent>;
 interface BatchEventInput {
@@ -113,6 +115,8 @@ type BatchEventResult = {
 interface FireBatchOptions {
     project_key: string;
     events: BatchEventInput[];
+    signingSecret?: string;
+    bearerToken?: string;
 }
 interface FireBatchResponse {
     ok: boolean;

package/dist/index.js

@@ -48,9 +48,11 @@ function clearBearerToken() {
 async function api(path, opts = {}) {
   const headers = {
     "content-type": "application/json",
-    accept: "application/json"
+    accept: "application/json",
+    ...opts.headers ?? {}
   };
-  if (bearerToken) headers["authorization"] = `Bearer ${bearerToken}`;
+  const token = opts.bearerToken ?? bearerToken;
+  if (token) headers["authorization"] = `Bearer ${token}`;
   const res = await fetch(`${origin}${path}`, {
     method: opts.method ?? "GET",
     credentials: "include",
@@ -170,7 +172,7 @@ async function refresh(sessionId) {
   });
 }
 async function invalidate(sessionId) {
-  emitTelemetry("session.intra_signin", sessionId);
+  emitTelemetry("session.teardown", sessionId);
   await api("/api/session/invalidate", {
     method: "POST",
     body: { session_id: sessionId }
@@ -336,6 +338,23 @@ function validateIntegratorConfig(cfg) {
 }
 
 // src/event.ts
+async function hmacSha256Hex(secret, message) {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(message));
+  return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function signBody(secret, serializedBody) {
+  const t = Math.floor(Date.now() / 1e3);
+  const mac = await hmacSha256Hex(secret, `${t}.${serializedBody}`);
+  return `t=${t},v1=${mac}`;
+}
 async function fire(options) {
   if (!options.project_key) {
     throw new Error("event.fire requires project_key");
@@ -343,9 +362,28 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
+  const requestBody = {
+    project_key: options.project_key,
+    subtype: options.subtype
+  };
+  if (options.payment_amount_sats !== void 0)
+    requestBody.payment_amount_sats = options.payment_amount_sats;
+  if (options.action_label !== void 0) requestBody.action_label = options.action_label;
+  if (options.metadata !== void 0) requestBody.metadata = options.metadata;
+  if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
+  const headers = {};
+  if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
+  if (options.signingSecret) {
+    headers["x-oc-signature"] = await signBody(
+      options.signingSecret,
+      JSON.stringify(requestBody)
+    );
+  }
   return api("/api/integrator/event", {
     method: "POST",
-    body: options
+    body: requestBody,
+    headers,
+    bearerToken: options.bearerToken
   });
 }
 async function fireBatch(options) {
@@ -360,9 +398,19 @@ async function fireBatch(options) {
       `event.fireBatch \xB7 max 100 events per call (got ${options.events.length}). Split client-side.`
     );
   }
+  const requestBody = { project_key: options.project_key, events: options.events };
+  const headers = {};
+  if (options.signingSecret) {
+    headers["x-oc-signature"] = await signBody(
+      options.signingSecret,
+      JSON.stringify(requestBody)
+    );
+  }
   return api("/api/integrator/event/batch", {
     method: "POST",
-    body: options
+    body: requestBody,
+    headers,
+    bearerToken: options.bearerToken
   });
 }
 function verify(envelope, config2, payment_amount_sats) {