@orangecheck/me-client 0.25.2 → 0.26.0

package/dist/index.mjs

@@ -340,6 +340,11 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
+  if (options.userAddress && !options.signingSecret) {
+    throw new Error(
+      "event.fire: userAddress names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
+    );
+  }
   const requestBody = {
     project_key: options.project_key,
     subtype: options.subtype
@@ -349,6 +354,7 @@ async function fire(options) {
   if (options.action_label !== void 0) requestBody.action_label = options.action_label;
   if (options.metadata !== void 0) requestBody.metadata = options.metadata;
   if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
+  if (options.userAddress !== void 0) requestBody.user_address = options.userAddress;
   const headers = {};
   if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
   if (options.signingSecret) {
@@ -935,7 +941,8 @@ async function importJWK(jwk, alg, options) {
 }
 
 // src/webhook.ts
-var DEFAULT_ISSUER = "https://ochk.io";
+var DEFAULT_ISSUER = "https://me.ochk.io";
+var JWKS_PATH = "/api/dev-jwks";
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
 var jwksCache = /* @__PURE__ */ new Map();
 var inflight = /* @__PURE__ */ new Map();
@@ -946,7 +953,7 @@ async function fetchJwks(issuer, ttlMs) {
   if (existing) return existing;
   const p = (async () => {
     try {
-      const url = `${issuer.replace(/\/$/, "")}/.well-known/jwks.json`;
+      const url = `${issuer.replace(/\/$/, "")}${JWKS_PATH}`;
       const res = await fetch(url, { headers: { Accept: "application/json" } });
       if (!res.ok) throw new Error(`JWKS fetch ${url} returned ${res.status}`);
       const json = await res.json();