@orangecheck/me-client 0.29.0 → 0.30.0

package/README.md

@@ -4,7 +4,7 @@
 > Hand-written prose below is the high-level overview; the docs site is the source of truth for every export, type, and signature.
 
 
-Client for [me.ochk.io](https://me.ochk.io). Popup sign-in for any site, framework-agnostic server-side verification, session lifecycle hooks, payment authorization, webhook signature verification, the canonical billable-event taxonomy as TypeScript types. `OcSignInButton` rides the family cookie, so it works only on orangecheck's own sites; anywhere else, sign people in with `signInWithOc()` from `/popup`.
+Client for [me.ochk.io](https://me.ochk.io). Popup sign-in for any site, framework-agnostic server-side verification, session lifecycle hooks, payment authorization, webhook signature verification, the canonical billable-event taxonomy as TypeScript types. Sign people in with `signInWithOc()` from `/popup`; the deprecated `OcSignInButton` rides the family cookie and works only on orangecheck's own sites.
 
 > Sign-in is free. Paying your users is optional: always, in promos you schedule, or never.
 
@@ -82,7 +82,7 @@ const res = await oc.event.fire({
     project_key: 'pk_live_yourcompany',
     subtype: 'account_creation',
     signingSecret: process.env.OC_SIGNING_SECRET,
-    userAddress: didOc,
+    accountId: didOc,
 });
 if (!res.earned) {
     // res.reason === 'not_paying'; res.next_pay_period says when paying starts, if scheduled

package/dist/index.d.mts

@@ -102,6 +102,7 @@ interface FireEventOptions {
     metadata?: Record<string, unknown>;
     is_agent?: boolean;
     signingSecret?: string;
+    accountId?: string;
     userAddress?: string;
     bearerToken?: string;
     idempotencyKey?: string;

package/dist/index.d.ts

@@ -102,6 +102,7 @@ interface FireEventOptions {
     metadata?: Record<string, unknown>;
     is_agent?: boolean;
     signingSecret?: string;
+    accountId?: string;
     userAddress?: string;
     bearerToken?: string;
     idempotencyKey?: string;

package/dist/index.js

@@ -376,9 +376,13 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
-  if (options.userAddress && !options.signingSecret) {
+  if (options.accountId !== void 0 && options.userAddress !== void 0 && options.accountId !== options.userAddress) {
+    throw new Error("event.fire: accountId and userAddress name different earners");
+  }
+  const earner = options.accountId ?? options.userAddress;
+  if (earner && !options.signingSecret) {
     throw new Error(
-      "event.fire: userAddress names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
+      "event.fire: accountId names who earns, so it requires signingSecret \u2014 the signature over the request body is what authorises that earner. Without the secret, pass bearerToken (or rely on the oc_session cookie) and the caller earns instead."
     );
   }
   const requestBody = {
@@ -390,7 +394,7 @@ async function fire(options) {
   if (options.action_label !== void 0) requestBody.action_label = options.action_label;
   if (options.metadata !== void 0) requestBody.metadata = options.metadata;
   if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
-  if (options.userAddress !== void 0) requestBody.user_address = options.userAddress;
+  if (earner !== void 0) requestBody.user_address = earner;
   const headers = {};
   if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
   if (options.signingSecret) {