@orangecheck/me-client 0.8.1 → 0.11.0

package/dist/index.mjs

@@ -109,7 +109,7 @@ async function invalidate(sessionId) {
 }
 var session = { create, refresh, invalidate };
 function OcSignInButton({
-  scope,
+  scope: scope2,
   sessionPolicy,
   returnTo,
   onSignin,
@@ -130,7 +130,7 @@ function OcSignInButton({
         if (event2.defaultPrevented) return;
         setPending(true);
         try {
-          const result = await session.create({ scope, sessionPolicy, returnTo });
+          const result = await session.create({ scope: scope2, sessionPolicy, returnTo });
           onSignin?.(result);
         } catch (err) {
           onSignInError?.(err instanceof Error ? err : new Error(String(err)));
@@ -190,21 +190,6 @@ async function authorize(opts) {
 }
 var payment = { authorize };
 
-// src/event.ts
-async function fire(options) {
-  if (!options.project_key) {
-    throw new Error("event.fire requires project_key");
-  }
-  if (!options.subtype) {
-    throw new Error("event.fire requires subtype");
-  }
-  return api("/api/integrator/event", {
-    method: "POST",
-    body: options
-  });
-}
-var event = { fire };
-
 // src/types.ts
 var PLATFORM_FEE_POLICY = {
   /** Fraction of every gross_fee that OC retains. */
@@ -274,6 +259,122 @@ function validateIntegratorConfig(cfg) {
   return { ok: errors.length === 0, errors };
 }
 
+// src/event.ts
+async function fire(options) {
+  if (!options.project_key) {
+    throw new Error("event.fire requires project_key");
+  }
+  if (!options.subtype) {
+    throw new Error("event.fire requires subtype");
+  }
+  return api("/api/integrator/event", {
+    method: "POST",
+    body: options
+  });
+}
+async function fireBatch(options) {
+  if (!options.project_key) {
+    throw new Error("event.fireBatch requires project_key");
+  }
+  if (!Array.isArray(options.events) || options.events.length === 0) {
+    throw new Error("event.fireBatch requires at least one event");
+  }
+  if (options.events.length > 100) {
+    throw new Error(
+      `event.fireBatch \xB7 max 100 events per call (got ${options.events.length}). Split client-side.`
+    );
+  }
+  return api("/api/integrator/event/batch", {
+    method: "POST",
+    body: options
+  });
+}
+function verify(envelope, config2, payment_amount_sats) {
+  const issues = [];
+  const eventCfg = config2.events[envelope.subtype];
+  if (!eventCfg) {
+    return {
+      ok: false,
+      expected: null,
+      issues: [
+        {
+          field: "subtype_unconfigured",
+          expected: null,
+          actual: null,
+          message: `subtype ${envelope.subtype} is not configured on integrator ${config2.project_key}`
+        }
+      ]
+    };
+  }
+  if (!eventCfg.enabled) {
+    return {
+      ok: false,
+      expected: null,
+      issues: [
+        {
+          field: "subtype_disabled",
+          expected: null,
+          actual: null,
+          message: `subtype ${envelope.subtype} is disabled on integrator ${config2.project_key} but the envelope was billed`
+        }
+      ]
+    };
+  }
+  if (eventCfg.site_pays.kind === "percent_of_amount" && payment_amount_sats == null) {
+    return {
+      ok: false,
+      expected: null,
+      issues: [
+        {
+          field: "percent_amount_missing",
+          expected: null,
+          actual: null,
+          message: `subtype ${envelope.subtype} is percent_of_amount-priced; payment_amount_sats is required to verify`
+        }
+      ]
+    };
+  }
+  const expected = computeFees(eventCfg, payment_amount_sats);
+  if (envelope.gross_fee_sats !== expected.gross_fee_sats) {
+    issues.push({
+      field: "gross_fee_sats",
+      expected: expected.gross_fee_sats,
+      actual: envelope.gross_fee_sats,
+      message: `gross_fee_sats mismatch \xB7 expected ${expected.gross_fee_sats}, recorded ${envelope.gross_fee_sats}`
+    });
+  }
+  if (envelope.platform_fee_sats !== expected.platform_fee_sats) {
+    issues.push({
+      field: "platform_fee_sats",
+      expected: expected.platform_fee_sats,
+      actual: envelope.platform_fee_sats,
+      message: `platform_fee_sats mismatch \xB7 expected ${expected.platform_fee_sats}, recorded ${envelope.platform_fee_sats}`
+    });
+  }
+  if (envelope.user_earned_sats !== expected.user_earned_sats) {
+    issues.push({
+      field: "user_earned_sats",
+      expected: expected.user_earned_sats,
+      actual: envelope.user_earned_sats,
+      message: `user_earned_sats mismatch \xB7 expected ${expected.user_earned_sats}, recorded ${envelope.user_earned_sats}`
+    });
+  }
+  if (envelope.site_rebate_sats !== expected.site_rebate_sats) {
+    issues.push({
+      field: "site_rebate_sats",
+      expected: expected.site_rebate_sats,
+      actual: envelope.site_rebate_sats,
+      message: `site_rebate_sats mismatch \xB7 expected ${expected.site_rebate_sats}, recorded ${envelope.site_rebate_sats}`
+    });
+  }
+  return {
+    ok: issues.length === 0,
+    expected,
+    issues
+  };
+}
+var event = { fire, fireBatch, verify };
+
 // src/config.ts
 function validate(cfg) {
   return validateIntegratorConfig(cfg);
@@ -578,7 +679,7 @@ async function verifyEd25519(key, sig, msg) {
     return false;
   }
 }
-async function verify(rawBody, sigHex, kid, options = {}) {
+async function verify2(rawBody, sigHex, kid, options = {}) {
   if (!sigHex) return { ok: false, reason: "missing signature" };
   if (!kid) return { ok: false, reason: "missing kid" };
   const sig = hexToBytes(sigHex);
@@ -617,7 +718,7 @@ async function fetchJwksForce(issuer = DEFAULT_ISSUER) {
   jwksCache.delete(issuer);
   await fetchJwks(issuer, DEFAULT_TTL_MS);
 }
-var webhook = { verify, fetchJwks: fetchJwksForce };
+var webhook = { verify: verify2, fetchJwks: fetchJwksForce };
 
 // src/federations.ts
 async function list() {
@@ -638,9 +739,60 @@ async function defaultLive() {
 }
 var federations = { list, live, get, defaultLive };
 
+// src/scope.ts
+var VALID_SCOPES = [
+  "bitcoin_address",
+  "email",
+  "attest_tier",
+  "display_name"
+];
+async function granted(options) {
+  if (!options.project_key) {
+    throw new Error("oc.scope.granted: project_key is required");
+  }
+  const r = await api(
+    `/api/integrator/scopes/${encodeURIComponent(options.project_key)}`,
+    { method: "GET", signal: options.signal }
+  );
+  return {
+    sub: r.sub,
+    scopes_granted: r.scopes_granted,
+    scopes: r.scopes
+  };
+}
+function request(scopes, options) {
+  if (!options.project_key) {
+    throw new Error("oc.scope.request: project_key is required");
+  }
+  if (!options.return_to) {
+    throw new Error("oc.scope.request: return_to is required");
+  }
+  if (!Array.isArray(scopes) || scopes.length === 0) {
+    throw new Error("oc.scope.request: scopes must be a non-empty array");
+  }
+  for (const s of scopes) {
+    if (!VALID_SCOPES.includes(s)) {
+      throw new Error(
+        `oc.scope.request: unknown scope "${s}" \xB7 valid: ${VALID_SCOPES.join(", ")}`
+      );
+    }
+  }
+  if (typeof window === "undefined") {
+    throw new Error("oc.scope.request: must be called in a browser environment");
+  }
+  const origin2 = options.origin ?? getOrigin();
+  const url = new URL("/me/scope-grant", origin2);
+  url.searchParams.set("project_key", options.project_key);
+  url.searchParams.set("scopes", scopes.join(","));
+  url.searchParams.set("return_to", options.return_to);
+  window.location.assign(url.toString());
+  throw new Error("oc.scope.request: redirected to consent prompt");
+}
+var scope = { granted, request };
+
 // src/index.ts
-var oc = { session, payment, event, config, webhook, federations };
+var oc = { session, payment, event, config, webhook, federations, scope };
 
-export { MIN_INTEGRATOR_PRICE_SATS, MeClientError, OcSignInButton, PLATFORM_FEE_POLICY, clearBearerToken, computeFees, config, event, federations, getBearerToken, getOrigin, oc, onTelemetry, payment, session, setBearerToken, setOrigin, validateIntegratorConfig, webhook };
+export { MIN_INTEGRATOR_PRICE_SATS, MeClientError, OcSignInButton, PLATFORM_FEE_POLICY, clearBearerToken, computeFees, config, event, federations, getBearerToken, getOrigin, oc, onTelemetry, payment, scope, session, setBearerToken, setOrigin, validateIntegratorConfig, webhook };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map