@orangecheck/me-client 0.28.0 → 0.30.0

package/dist/index.mjs

@@ -317,6 +317,18 @@ function validateIntegratorConfig(cfg) {
   return { ok: errors.length === 0, errors };
 }
 
+// src/pay-periods.ts
+var ms = (iso) => Date.parse(iso);
+function payingAt(periods, at = /* @__PURE__ */ new Date()) {
+  const t = at.getTime();
+  const current = periods.find(
+    (p) => ms(p.starts_at) <= t && (p.ends_at === null || t < ms(p.ends_at))
+  );
+  if (current) return { paying: true, period: current };
+  const next = periods.filter((p) => ms(p.starts_at) > t).sort((a, b) => ms(a.starts_at) - ms(b.starts_at))[0];
+  return { paying: false, next: next ?? null };
+}
+
 // src/event.ts
 async function hmacSha256Hex(secret, message) {
   const enc = new TextEncoder();
@@ -342,9 +354,13 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
-  if (options.userAddress && !options.signingSecret) {
+  if (options.accountId !== void 0 && options.userAddress !== void 0 && options.accountId !== options.userAddress) {
+    throw new Error("event.fire: accountId and userAddress name different earners");
+  }
+  const earner = options.accountId ?? options.userAddress;
+  if (earner && !options.signingSecret) {
     throw new Error(
-      "event.fire: userAddress names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
+      "event.fire: accountId names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
     );
   }
   const requestBody = {
@@ -356,7 +372,7 @@ async function fire(options) {
   if (options.action_label !== void 0) requestBody.action_label = options.action_label;
   if (options.metadata !== void 0) requestBody.metadata = options.metadata;
   if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
-  if (options.userAddress !== void 0) requestBody.user_address = options.userAddress;
+  if (earner !== void 0) requestBody.user_address = earner;
   const headers = {};
   if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
   if (options.signingSecret) {
@@ -399,14 +415,23 @@ async function fireBatch(options) {
     bearerToken: options.bearerToken
   });
 }
-function verify(envelope, config2, payment_amount_sats) {
+function verify(envelope, config2, payment_amount_sats, opts = {}) {
   const issues = [];
+  if (opts.payPeriods && !payingAt(opts.payPeriods, new Date(envelope.occurred_at)).paying) {
+    issues.push({
+      field: "outside_pay_period",
+      expected: null,
+      actual: null,
+      message: `billed at ${envelope.occurred_at}, when ${config2.project_key} wasn't paying its users`
+    });
+  }
   const eventCfg = config2.events[envelope.subtype];
   if (!eventCfg) {
     return {
       ok: false,
       expected: null,
       issues: [
+        ...issues,
         {
           field: "subtype_unconfigured",
           expected: null,
@@ -421,6 +446,7 @@ function verify(envelope, config2, payment_amount_sats) {
       ok: false,
       expected: null,
       issues: [
+        ...issues,
         {
           field: "subtype_disabled",
           expected: null,
@@ -435,6 +461,7 @@ function verify(envelope, config2, payment_amount_sats) {
       ok: false,
       expected: null,
       issues: [
+        ...issues,
         {
           field: "percent_amount_missing",
           expected: null,
@@ -1530,6 +1557,6 @@ var oc = {
   identity
 };
 
-export { ALL_EVENT_SUBTYPES, ARCHETYPE_TEMPLATES, EVENT_SUBTYPES, MAX_DROP_WINDOW_DAYS, MIN_INTEGRATOR_PRICE_SATS, MeClientError, OcSignInButton, PLATFORM_FEE_POLICY, clearBearerToken, computeFees, config, fromTemplate as configFromTemplate, event, family, federations, getArchetypeTemplate, getBearerToken, getOrigin, identity, oc, onTelemetry, parseTrustAttestationCount, payment, refreshEnvelopeJwks, scope, session, setBearerToken, setOrigin, subtypesForClass, validateIntegratorConfig, verifyActivityAttestation, webhook, withRateLimitRetry };
+export { ALL_EVENT_SUBTYPES, ARCHETYPE_TEMPLATES, EVENT_SUBTYPES, MAX_DROP_WINDOW_DAYS, MIN_INTEGRATOR_PRICE_SATS, MeClientError, OcSignInButton, PLATFORM_FEE_POLICY, clearBearerToken, computeFees, config, fromTemplate as configFromTemplate, event, family, federations, getArchetypeTemplate, getBearerToken, getOrigin, identity, oc, onTelemetry, parseTrustAttestationCount, payingAt, payment, refreshEnvelopeJwks, scope, session, setBearerToken, setOrigin, subtypesForClass, validateIntegratorConfig, verifyActivityAttestation, webhook, withRateLimitRetry };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map