@orangecheck/me-client 0.25.3 → 0.26.1

package/dist/index.mjs

@@ -250,6 +250,7 @@ var PLATFORM_FEE_POLICY = {
   ratified: "2026-04-30"
 };
 var MIN_INTEGRATOR_PRICE_SATS = 1;
+var MAX_INTEGRATOR_PRICE_SATS = 1e7;
 var MAX_DROP_WINDOW_DAYS = 92;
 function computeFees(cfg, payment_amount_sats, opts) {
   const is_agent = opts?.is_agent === true;
@@ -270,6 +271,7 @@ function computeFees(cfg, payment_amount_sats, opts) {
       Math.round(payment_amount_sats * effective_site_pays.pct)
     );
   }
+  gross = Math.min(gross, MAX_INTEGRATOR_PRICE_SATS);
   const platform_fee_sats = Math.min(
     gross,
     Math.max(PLATFORM_FEE_POLICY.min_floor_sats, Math.round(gross * PLATFORM_FEE_POLICY.pct))
@@ -340,6 +342,11 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
+  if (options.userAddress && !options.signingSecret) {
+    throw new Error(
+      "event.fire: userAddress names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
+    );
+  }
   const requestBody = {
     project_key: options.project_key,
     subtype: options.subtype
@@ -349,6 +356,7 @@ async function fire(options) {
   if (options.action_label !== void 0) requestBody.action_label = options.action_label;
   if (options.metadata !== void 0) requestBody.metadata = options.metadata;
   if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
+  if (options.userAddress !== void 0) requestBody.user_address = options.userAddress;
   const headers = {};
   if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
   if (options.signingSecret) {