@pushary/server 2.1.1 → 2.2.1

package/dist/adapters.js

@@ -6,7 +6,7 @@ import {
   isApproved,
   parseDecisionCallback,
   verifyWebhookSignature
-} from "./chunk-AG6DI4RF.js";
+} from "./chunk-DLJ3L77X.js";
 
 // src/adapters.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-AG6DI4RF.js → chunk-DLJ3L77X.js}

@@ -230,6 +230,7 @@ var createDecisionsResource = (request) => {
   return Object.freeze({
     create: (data) => request("POST", "/decisions", data),
     get: (id, opts) => request("GET", `/decisions/${id}`, opts?.wait ? { wait: opts.wait } : void 0),
+    list: (opts) => request("GET", "/decisions", opts ? { ...opts } : void 0),
     ask,
     answer: (id, answer) => request("POST", `/decisions/${id}`, { answer }),
     cancel: (id) => request("DELETE", `/decisions/${id}`),
@@ -423,4 +424,4 @@ export {
   verifyWebhookSignature,
   parseDecisionCallback
 };
-//# sourceMappingURL=chunk-AG6DI4RF.js.map
+//# sourceMappingURL=chunk-DLJ3L77X.js.map

package/dist/chunk-DLJ3L77X.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/error.ts","../src/util.ts","../src/request.ts","../src/resources/subscribers.ts","../src/resources/campaigns.ts","../src/resources/templates.ts","../src/resources/notifications.ts","../src/resources/flows.ts","../src/resources/decisions.ts","../src/resources/keys.ts","../src/authorize.ts","../src/permits.ts","../src/client.ts","../src/webhook.ts"],"sourcesContent":["/**\n * Thrown for any non-2xx response from the API.\n *\n * Extends Error rather than replacing it, so every existing `catch (e)` that\n * reads `e.message` keeps working unchanged. What it adds is the thing callers\n * previously had to string-match the message for: an HTTP status they can branch\n * on. Telling a revoked key (401) apart from a plan limit (403), a bad argument\n * (400) and an outage (5xx) is the difference between \"stop and re-authenticate\"\n * and \"retry in a minute\", and message text is not a stable API to decide that on.\n */\nexport class PusharyApiError extends Error {\n  /** HTTP status of the response that failed. */\n  readonly status: number\n  /** HTTP status text, when the runtime provides one. */\n  readonly statusText: string\n  /** The API's own machine-readable error code, when it sent one. */\n  readonly code?: string\n  /** The parsed response body, for anything the fields above do not cover. */\n  readonly body?: unknown\n\n  constructor(\n    message: string,\n    init: { status: number; statusText?: string; code?: string; body?: unknown }\n  ) {\n    super(message)\n    this.name = 'PusharyApiError'\n    this.status = init.status\n    this.statusText = init.statusText ?? ''\n    this.code = init.code\n    this.body = init.body\n    // Restores the prototype chain so `err instanceof PusharyApiError` holds\n    // even when this package is consumed as ES5-targeted CommonJS.\n    Object.setPrototypeOf(this, PusharyApiError.prototype)\n  }\n\n  /** The key is missing, malformed, or revoked. Re-authenticate; do not retry. */\n  get isAuthError(): boolean {\n    return this.status === 401 || this.status === 403\n  }\n\n  /** Rate limited. Back off and retry. */\n  get isRateLimited(): boolean {\n    return this.status === 429\n  }\n\n  /** Server-side fault. Safe to retry an idempotent call. */\n  get isServerError(): boolean {\n    return this.status >= 500\n  }\n}\n","import { createHash } from 'crypto'\nimport type { DecisionStatus, DecisionType } from './types'\n\n// A collision-safe idempotency key that is STABLE across process restarts\n// (unlike the builtin salted hash()), so a retried create reuses the same key\n// and never asks the same human twice. Pass the parts that make the ask unique\n// (e.g. [externalId, stepId, question]). Parts are joined with a NUL separator\n// so ['a', 'bc'] and ['ab', 'c'] never collide.\nexport const deterministicKey = (parts: readonly string[]): string =>\n  createHash('sha256').update(parts.join('\\x00')).digest('hex').slice(0, 40)\n\nexport const decisionFingerprint = (value: unknown): string => {\n  const ancestors = new Set<object>()\n  const serialize = (item: unknown): string => {\n    if (item === null || typeof item === 'string' || typeof item === 'boolean') return JSON.stringify(item)\n    if (typeof item === 'number' && Number.isFinite(item)) return JSON.stringify(item)\n    if (typeof item !== 'object' || ancestors.has(item)) {\n      throw new TypeError('Pushary: decision identity must contain finite, acyclic JSON values.')\n    }\n    if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null) {\n      throw new TypeError('Pushary: decision identity must contain plain JSON objects.')\n    }\n    ancestors.add(item)\n    const entries = Object.entries(item)\n      .filter(([, entry]) => entry !== undefined)\n      .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)\n    const serialized = Array.isArray(item)\n      ? `[${Array.from(item, serialize).join(',')}]`\n      : `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${serialize(entry)}`).join(',')}}`\n    ancestors.delete(item)\n    return serialized\n  }\n  return createHash('sha256').update(serialize(value)).digest('hex')\n}\n\nconst AFFIRMATIVE: ReadonlySet<string> = new Set([\n  'yes',\n  'y',\n  'approve',\n  'approved',\n  'ok',\n  'okay',\n  'confirm',\n  'accept',\n  'true',\n])\n\n// Fail-closed approval check. A `confirm` decision is approved ONLY on an\n// affirmative answer; `select`/`input` decisions are \"approved\" once answered.\n// Anything not answered — pending, expired, or cancelled — is NOT approved.\nexport const isApproved = (decision: {\n  readonly status: DecisionStatus\n  readonly type?: DecisionType\n  readonly value: string | null\n}): boolean => {\n  if (decision.status !== 'answered') return false\n  if (decision.type && decision.type !== 'confirm') return true\n  return decision.value != null && AFFIRMATIVE.has(decision.value.trim().toLowerCase())\n}\n","import type { RequestContext, RequestFn } from './types'\nimport { PusharyApiError } from './error'\n\nconst buildUrl = (baseUrl: string, path: string, params?: Record<string, unknown>): string => {\n  // Build from the full absolute URL so the base path (e.g. /api/v1/server) is\n  // preserved. `new URL(path, baseUrl)` treats a leading-slash path as absolute\n  // and would drop that prefix, sending GET-with-query calls to the wrong URL.\n  const url = new URL(`${baseUrl}${path}`)\n\n  if (params) {\n    Object.entries(params).forEach(([key, value]) => {\n      if (value !== undefined && value !== null) {\n        url.searchParams.set(key, String(value))\n      }\n    })\n  }\n  \n  return url.toString()\n}\n\nconst handleResponse = async <T>(response: Response): Promise<T> => {\n  if (!response.ok) {\n    // The API returns its reason under `error`; older paths use `message`. Read\n    // both so callers get the real reason (e.g. \"No subscribers found\") instead\n    // of a bare \"HTTP 400\" they cannot classify.\n    const body = (await response.json().catch(() => ({}))) as {\n      message?: string\n      error?: string\n      code?: string\n    }\n    // PusharyApiError extends Error, so an existing `catch (e) { e.message }`\n    // is unaffected. It carries the status too, because the reason to branch on\n    // a failure (re-authenticate vs back off vs retry) was previously only\n    // recoverable by string-matching this message, which is not a stable API.\n    throw new PusharyApiError(body.message || body.error || `HTTP ${response.status}`, {\n      status: response.status,\n      statusText: response.statusText,\n      code: body.code,\n      body,\n    })\n  }\n  return response.json() as Promise<T>\n}\n\nexport const createRequest = (ctx: RequestContext): RequestFn =>\n  async <T>(method: string, path: string, body?: unknown, options?: { readonly signal?: AbortSignal }): Promise<T> => {\n    const isGet = method === 'GET'\n    const url = isGet && body \n      ? buildUrl(ctx.baseUrl, path, body as Record<string, unknown>)\n      : `${ctx.baseUrl}${path}`\n    \n    const response = await fetch(url, {\n      method,\n      signal: options?.signal ?? AbortSignal.timeout(ctx.timeoutMs ?? 65_000),\n      headers: ctx.headers,\n      body: !isGet && body ? JSON.stringify(body) : undefined,\n    })\n    \n    return handleResponse<T>(response)\n  }\n\n","import type {\n  RequestFn,\n  Subscriber,\n  SubscriberListParams,\n  UpdateSubscriber,\n  PaginatedResponse,\n  SubscriberCount,\n} from '../types'\n\nexport interface SubscribersResource {\n  readonly list: (params?: SubscriberListParams) => Promise<PaginatedResponse<Subscriber>>\n  readonly get: (id: string) => Promise<Subscriber>\n  readonly update: (id: string, data: UpdateSubscriber) => Promise<Subscriber>\n  readonly delete: (id: string) => Promise<void>\n  readonly count: () => Promise<SubscriberCount>\n}\n\nexport const createSubscribersResource = (request: RequestFn): SubscribersResource =>\n  Object.freeze({\n    list: (params?: SubscriberListParams) =>\n      request<PaginatedResponse<Subscriber>>('GET', '/subscribers', params),\n    \n    get: (id: string) =>\n      request<Subscriber>('GET', `/subscribers/${id}`),\n    \n    update: (id: string, data: UpdateSubscriber) =>\n      request<Subscriber>('PATCH', `/subscribers/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/subscribers/${id}`),\n    \n    count: () =>\n      request<SubscriberCount>('GET', '/subscribers/count'),\n  })\n\n","import type {\n  RequestFn,\n  Campaign,\n  CreateCampaign,\n  UpdateCampaign,\n  ListParams,\n  PaginatedResponse,\n  CampaignStats,\n} from '../types'\n\nexport interface CampaignsResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Campaign>>\n  readonly create: (data: CreateCampaign) => Promise<Campaign>\n  readonly get: (id: string) => Promise<Campaign>\n  readonly update: (id: string, data: UpdateCampaign) => Promise<Campaign>\n  readonly delete: (id: string) => Promise<void>\n  readonly send: (id: string) => Promise<Campaign>\n  readonly pause: (id: string) => Promise<Campaign>\n  readonly resume: (id: string) => Promise<Campaign>\n  readonly stats: (id: string) => Promise<CampaignStats>\n}\n\nexport const createCampaignsResource = (request: RequestFn): CampaignsResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Campaign>>('GET', '/campaigns', params),\n    \n    create: (data: CreateCampaign) =>\n      request<Campaign>('POST', '/campaigns', data),\n    \n    get: (id: string) =>\n      request<Campaign>('GET', `/campaigns/${id}`),\n    \n    update: (id: string, data: UpdateCampaign) =>\n      request<Campaign>('PATCH', `/campaigns/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/campaigns/${id}`),\n    \n    send: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/send`),\n    \n    pause: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/pause`),\n    \n    resume: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/resume`),\n    \n    stats: (id: string) =>\n      request<CampaignStats>('GET', `/campaigns/${id}/stats`),\n  })\n\n","import type {\n  RequestFn,\n  Template,\n  CreateTemplate,\n  UpdateTemplate,\n  ListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface TemplatesResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Template>>\n  readonly create: (data: CreateTemplate) => Promise<Template>\n  readonly get: (id: string) => Promise<Template>\n  readonly update: (id: string, data: UpdateTemplate) => Promise<Template>\n  readonly delete: (id: string) => Promise<void>\n}\n\nexport const createTemplatesResource = (request: RequestFn): TemplatesResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Template>>('GET', '/templates', params),\n    \n    create: (data: CreateTemplate) =>\n      request<Template>('POST', '/templates', data),\n    \n    get: (id: string) =>\n      request<Template>('GET', `/templates/${id}`),\n    \n    update: (id: string, data: UpdateTemplate) =>\n      request<Template>('PATCH', `/templates/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/templates/${id}`),\n  })\n\n","import type { RequestFn, SendNotification, SendResult } from '../types'\n\nexport interface NotificationsResource {\n  readonly send: (data: SendNotification) => Promise<SendResult>\n}\n\nexport const createNotificationsResource = (request: RequestFn): NotificationsResource =>\n  Object.freeze({\n    send: (data: SendNotification) =>\n      request<SendResult>('POST', '/send', data),\n  })\n\n","import type {\n  RequestFn,\n  Flow,\n  CreateFlow,\n  UpdateFlow,\n  FlowListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface FlowsResource {\n  readonly list: (params?: FlowListParams) => Promise<PaginatedResponse<Flow>>\n  readonly create: (data: CreateFlow) => Promise<Flow>\n  readonly get: (id: string) => Promise<Flow>\n  readonly update: (id: string, data: UpdateFlow) => Promise<Flow>\n  readonly delete: (id: string) => Promise<void>\n  readonly activate: (id: string) => Promise<Flow>\n  readonly pause: (id: string) => Promise<Flow>\n}\n\nexport const createFlowsResource = (request: RequestFn): FlowsResource =>\n  Object.freeze({\n    list: (params?: FlowListParams) =>\n      request<PaginatedResponse<Flow>>('GET', '/flows', params),\n    \n    create: (data: CreateFlow) =>\n      request<Flow>('POST', '/flows', data),\n    \n    get: (id: string) =>\n      request<Flow>('GET', `/flows/${id}`),\n    \n    update: (id: string, data: UpdateFlow) =>\n      request<Flow>('PATCH', `/flows/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/flows/${id}`),\n    \n    activate: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/activate`),\n    \n    pause: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/pause`),\n  })\n","import type {\n  RequestFn,\n  CreateDecision,\n  DecisionResult,\n  Decision,\n  DecisionList,\n  DecisionListOptions,\n  DecisionAnswerResult,\n  CancelDecisionResult,\n  WebhookSecret,\n  AskDecision,\n  AskResult,\n  DecisionType,\n  DecisionStatus,\n} from '../types'\nimport { randomUUID } from 'crypto'\nimport { isApproved } from '../util'\n\n// A single long-poll window. The server clamps GET ?wait to 55s, so ask() loops\n// windows of this size until the decision resolves or the caller deadline passes.\nconst POLL_WINDOW_SECONDS = 50\nconst DEFAULT_ASK_TIMEOUT_MS = 55_000\n\n// Human-in-the-loop decisions: ask a specific end-user to approve, then resume\n// on their answer via webhook or poll. See the Partner integration guide.\nexport interface DecisionsResource {\n  // Create a decision. Defaults to async (returns immediately with a decisionId);\n  // pass wait:true to block up to ~55s for a fast answer. Always pass\n  // idempotencyKey so a retried call does not ask the same human twice.\n  readonly create: (data: CreateDecision) => Promise<DecisionResult>\n  // Poll for the outcome. opts.wait long-polls up to N seconds. Reads durably, so\n  // it still resolves after the live window closes.\n  readonly get: (id: string, opts?: { readonly wait?: number }) => Promise<Decision>\n  readonly list: (opts?: DecisionListOptions) => Promise<DecisionList>\n  // Create a decision and block until the human answers or the deadline passes,\n  // polling durably (so a crashed/resumed process still gets the answer). Returns\n  // a fail-closed `approved` flag. Default deadline 55s (serverless-safe); the\n  // decision stays answerable for its full TTL, so an {answered:false} return is\n  // resolvable later via get() or a callbackUrl. This is the one call most agents\n  // need. Each call reaches the human: without an idempotencyKey a fresh unique\n  // key is generated per call, so two asks with the same text never collapse into\n  // one silent auto-approval. Pass your own stable idempotencyKey (tied to your\n  // operation id) only when you WANT a retried call to dedupe.\n  readonly ask: (data: AskDecision) => Promise<AskResult>\n  // Relay the end-user's answer from your own authenticated app (delegated auth).\n  readonly answer: (id: string, answer: string) => Promise<DecisionAnswerResult>\n  readonly cancel: (id: string) => Promise<CancelDecisionResult>\n  // Your webhook signing secret (created on first call). Verify callbacks with\n  // verifyWebhookSignature(rawBody, header, secret).\n  readonly getWebhookSecret: () => Promise<WebhookSecret>\n  readonly rotateWebhookSecret: () => Promise<WebhookSecret>\n}\n\nexport const createDecisionsResource = (request: RequestFn): DecisionsResource => {\n  const ask = async (data: AskDecision): Promise<AskResult> => {\n    // Idempotency is caller intent, never inferred from content: two asks with the\n    // same text are usually two distinct decisions, so a content hash would make\n    // the second silently replay the first answer (auto-approving a second refund,\n    // or blocking a re-ask for the server's whole idempotency window). Default to a\n    // unique key per call so every ask reaches the human; callers wanting retry\n    // dedup pass their own stable key tied to their operation.\n    const idempotencyKey = data.idempotencyKey ?? randomUUID()\n\n    const timeoutMs = Math.max(0, data.timeoutMs ?? DEFAULT_ASK_TIMEOUT_MS)\n    // Zero retains the create-only API. Positive budgets include creation and polling.\n    const deadline = Date.now() + timeoutMs\n    const controller = new AbortController()\n    const abort = () => controller.abort(data.signal?.reason)\n    if (data.signal?.aborted) abort()\n    else data.signal?.addEventListener('abort', abort, { once: true })\n    const timer = setTimeout(() => controller.abort(new DOMException('Pushary ask timed out', 'TimeoutError')), timeoutMs || 65_000)\n    try {\n      const created = await request<DecisionResult>('POST', '/decisions', {\n        question: data.question,\n        type: data.type,\n        options: data.options,\n        externalId: data.externalId,\n        email: data.email,\n        agentName: data.agentName,\n        context: data.context,\n        placeholder: data.placeholder,\n        toolName: data.toolName,\n        toolTarget: data.toolTarget,\n        actor: data.actor,\n        environment: data.environment,\n        parameters: data.parameters,\n        // Its changes name parameters rather than carrying values, so what the\n        // person sees is read from the same numbers a rule compares.\n        presentation: data.presentation,\n        approvalUrl: data.approvalUrl,\n        expiresInSeconds: data.expiresInSeconds,\n        poweredBy: data.poweredBy,\n        callbackUrl: data.callbackUrl,\n        requireReachable: data.requireReachable,\n        // Read only by a key issued on your workspace's sandbox site, where the\n        // simulator answers instead of a person. Ignored in production.\n        sandboxOutcome: data.sandboxOutcome,\n        idempotencyKey,\n        wait: false,\n      }, { signal: controller.signal })\n\n      const type: DecisionType = created.type ?? data.type ?? 'confirm'\n      let status: DecisionStatus = created.status\n      let answered = created.answered\n      let value: string | null = created.value ?? null\n\n      while (status === 'pending' && Date.now() < deadline) {\n        const waitSeconds = Math.max(\n          1,\n          Math.min(POLL_WINDOW_SECONDS, Math.ceil((deadline - Date.now()) / 1000)),\n        )\n        try {\n          const polled = await request<Decision>('GET', `/decisions/${created.decisionId}`, {\n            wait: waitSeconds,\n          }, { signal: controller.signal })\n          status = polled.status\n          answered = polled.answered\n          value = polled.value\n        } catch (error) {\n          if (controller.signal.aborted && !data.signal?.aborted) break\n          throw error\n        }\n      }\n\n      return {\n        decisionId: created.decisionId,\n        status,\n        answered,\n        value,\n        type,\n        approved: isApproved({ status, type, value }),\n        // Surfaced from the create response so a caller can tell an unanswered\n        // decision that reached nobody (reachable:false) apart from a real decline.\n        reachable: created.reachable,\n        reachableChannels: created.reachableChannels,\n        deviceCount: created.deviceCount,\n      }\n    } finally {\n      clearTimeout(timer)\n      data.signal?.removeEventListener('abort', abort)\n    }\n  }\n\n  return Object.freeze({\n    create: (data: CreateDecision) => request<DecisionResult>('POST', '/decisions', data),\n    get: (id: string, opts?: { readonly wait?: number }) =>\n      request<Decision>('GET', `/decisions/${id}`, opts?.wait ? { wait: opts.wait } : undefined),\n    list: (opts?: DecisionListOptions) =>\n      request<DecisionList>('GET', '/decisions', opts ? { ...opts } : undefined),\n    ask,\n    answer: (id: string, answer: string) =>\n      request<DecisionAnswerResult>('POST', `/decisions/${id}`, { answer }),\n    cancel: (id: string) => request<CancelDecisionResult>('DELETE', `/decisions/${id}`),\n    getWebhookSecret: () => request<WebhookSecret>('GET', '/webhook-secret'),\n    rotateWebhookSecret: () => request<WebhookSecret>('POST', '/webhook-secret'),\n  })\n}\n","import type {\n  RequestFn,\n  IssueBoundKey,\n  BoundKeyResult,\n  BoundKeySummary,\n  RevokeKeyResult,\n} from '../types'\n\n// Per-end-user (bound) key issuance for multi-tenant Partners. Call issue() from\n// your backend with your own (unbound, Partner-plan) key to mint a child key bound\n// to one end-user, hand that key to the agent runtime acting for that user, then\n// revoke() it when the session ends. A bound key can only create/resolve decisions\n// and enroll that exact end-user, so a prompt-injected agent can never reach\n// another of your users. Requires the Partner plan.\nexport interface KeysResource {\n  // Mint a key bound to externalId. The full key is returned once in `apiKey` and\n  // cannot be retrieved again — store it as the session credential.\n  readonly issue: (data: IssueBoundKey) => Promise<BoundKeyResult>\n  // List this site's bound keys (never the secret) for audit/rotation.\n  readonly list: () => Promise<readonly BoundKeySummary[]>\n  // Revoke (deactivate) a bound key by its prefix. Returns revoked:false if the\n  // prefix is unknown or already inactive.\n  readonly revoke: (keyPrefix: string) => Promise<RevokeKeyResult>\n}\n\nexport const createKeysResource = (request: RequestFn): KeysResource =>\n  Object.freeze({\n    issue: (data: IssueBoundKey) => request<BoundKeyResult>('POST', '/keys', data),\n    list: () =>\n      request<{ keys: readonly BoundKeySummary[] }>('GET', '/keys').then((r) => r.keys),\n    revoke: (keyPrefix: string) =>\n      request<RevokeKeyResult>('DELETE', `/keys/${encodeURIComponent(keyPrefix)}`),\n  })\n","import type {\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  AuthorizeRequest,\n  AuthorizeResult,\n  DecisionSubject,\n  RequestFn,\n} from './types'\nimport type { DecisionsResource } from './resources/decisions'\n\nconst defaultQuestion = (toolName: string, toolTarget?: string): string =>\n  `Approve ${toolName}${toolTarget ? ` ${toolTarget}` : ''}?`\n\n// The evaluation and the ask must describe the same action. Built once so a field\n// added to the subject cannot reach one call and not the other, which would let a\n// decision be recorded under a different description than the one policy saw.\nexport const authorizationSubject = (input: DecisionSubject): DecisionSubject => ({\n  toolName: input.toolName,\n  toolTarget: input.toolTarget,\n  actor: input.actor,\n  environment: input.environment,\n  parameters: input.parameters,\n})\n\n/**\n * The raw boundary: what the site's policy says about one action, with nobody\n * paged and no decision opened.\n *\n * Exported separately from {@link createAuthorize} because a caller that owns its\n * own escalation — the adapter gate, or a custom harness with its own approval\n * surface — needs to tell \"policy had no opinion\" apart from \"the ask failed\".\n * Composing the two calls hides that difference, and the two failures want\n * opposite handling.\n */\nexport const createEvaluateAuthorization =\n  (request: RequestFn) =>\n  (input: AuthorizationQuery): Promise<AuthorizationEvaluation> =>\n    request<AuthorizationEvaluation>('POST', '/authorize', {\n      ...authorizationSubject(input),\n      externalId: input.externalId,\n      question: input.question,\n      agentName: input.agentName,\n    })\n\n/**\n * Ask policy first, and a person only if policy defers.\n *\n * Two calls rather than one server round trip on purpose. POST /authorize\n * evaluates and nothing else, so every limit, reachability check and delivery\n * rung stays in the one path that already owns them, and this composes the two.\n * The extra hop only happens when a human is needed, where it is lost in the\n * time that person takes to answer.\n *\n * Fail-closed throughout: a denial and an unanswered ask both return\n * approved: false, and the reason says which it was.\n */\nexport const createAuthorize = (request: RequestFn, decisions: DecisionsResource) => {\n  const evaluate = createEvaluateAuthorization(request)\n\n  return async (input: AuthorizeRequest): Promise<AuthorizeResult> => {\n    const subject = authorizationSubject(input)\n    const evaluation = await evaluate(input)\n\n    if (evaluation.verdict !== 'requires_human') {\n      return {\n        approved: evaluation.verdict === 'allow',\n        resolvedBy: 'policy',\n        policy: evaluation.policy,\n        reason: evaluation.reason,\n        decisionId: null,\n        authorizationId: evaluation.authorizationId,\n      }\n    }\n\n    const answer = await decisions.ask({\n      question: input.question ?? defaultQuestion(input.toolName, input.toolTarget),\n      type: 'confirm',\n      externalId: input.externalId,\n      agentName: input.agentName,\n      ...subject,\n      timeoutMs: input.timeoutMs,\n      expiresInSeconds: input.expiresInSeconds,\n      idempotencyKey: input.idempotencyKey,\n      requireReachable: input.requireReachable,\n    })\n\n    return {\n      approved: answer.approved,\n      resolvedBy: 'human',\n      policy: evaluation.policy,\n      reason: answer.approved\n        ? 'A person approved it.'\n        : answer.answered\n          ? 'A person denied it.'\n          : 'Nobody answered, so this was not approved.',\n      decisionId: answer.decisionId,\n      authorizationId: null,\n    }\n  }\n}\n","import { PusharyApiError } from './error'\nimport type {\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ConsumedAuthorization,\n  ExecutionReceipt,\n  PermitExecutionState,\n  PermitRefusal,\n  RequestFn,\n} from './types'\n\nconst REFUSALS: readonly PermitRefusal[] = [\n  'not_authorized',\n  'action_mismatch',\n  'expired',\n  'already_consumed',\n]\n\nconst EXECUTION_STATES: readonly PermitExecutionState[] = ['running', 'succeeded', 'failed']\n\n// A refusal is an answer, not a failure: the server looked, and said no. A\n// transport error is neither, and must not be dressed up as one — a caller that\n// reads \"already consumed\" stops, and a caller that reads a network error may\n// try again. Only a body the server actually sent gets read as a refusal.\nconst refusalOf = (error: unknown): ConsumeAuthorizationResult | null => {\n  if (!(error instanceof PusharyApiError)) return null\n  const body = error.body as { refusal?: unknown; executionState?: unknown } | undefined\n  const refusal = body?.refusal\n  if (typeof refusal !== 'string' || !REFUSALS.includes(refusal as PermitRefusal)) return null\n  const state = body?.executionState\n  return {\n    consumed: false,\n    refusal: refusal as PermitRefusal,\n    reason: error.message,\n    ...(typeof state === 'string' && EXECUTION_STATES.includes(state as PermitExecutionState)\n      ? { executionState: state as PermitExecutionState }\n      : {}),\n  }\n}\n\n/**\n * Spend one settled authorization, at most once.\n *\n * Re-states the action about to run. That is the point: the server digests what\n * you claim and what it recorded, and refuses unless they are the same action.\n * An amount changed between the approval and the execution does not fail a check\n * that could be skipped — it simply has no permit.\n *\n * Refusals come back as `consumed: false` with a machine-readable reason.\n * Anything else throws, because \"the network was down\" is not \"you may not do\n * this\", and a caller that cannot tell them apart will eventually guess wrong.\n */\nexport const createConsumeAuthorization =\n  (request: RequestFn) =>\n  async (binding: AuthorizationBinding): Promise<ConsumeAuthorizationResult> => {\n    try {\n      const permit = await request<ConsumedAuthorization>('POST', '/authorizations/consume', {\n        authorizationId: binding.authorizationId,\n        toolName: binding.toolName,\n        toolTarget: binding.toolTarget,\n        actor: binding.actor,\n        environment: binding.environment,\n        externalId: binding.externalId,\n        parameters: binding.parameters,\n      })\n      return { consumed: true, permit }\n    } catch (error) {\n      const refused = refusalOf(error)\n      if (refused) return refused\n      throw error\n    }\n  }\n\n/**\n * Say what the authorized action did.\n *\n * The evidence half. \"Was this allowed\" and \"did this happen\" are different\n * questions, and only the second one answers a customer asking where their\n * refund is. The first report wins; a late duplicate cannot rewrite it.\n */\nexport const createRecordExecution =\n  (request: RequestFn) =>\n  (receipt: ExecutionReceipt): Promise<{ readonly executionState: PermitExecutionState }> =>\n    request('POST', `/authorizations/${encodeURIComponent(receipt.permitId)}/receipt`, {\n      outcome: receipt.outcome,\n      summary: receipt.summary,\n    })\n","import type {\n  PusharyConfig,\n  RequestContext,\n  EnrollResult,\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  DecisionReach,\n  AuthorizeRequest,\n  AuthorizeResult,\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ExecutionReceipt,\n  PermitExecutionState,\n} from './types'\nimport { createRequest } from './request'\nimport { createSubscribersResource, type SubscribersResource } from './resources/subscribers'\nimport { createCampaignsResource, type CampaignsResource } from './resources/campaigns'\nimport { createTemplatesResource, type TemplatesResource } from './resources/templates'\nimport { createNotificationsResource, type NotificationsResource } from './resources/notifications'\nimport { createFlowsResource, type FlowsResource } from './resources/flows'\nimport { createDecisionsResource, type DecisionsResource } from './resources/decisions'\nimport { createKeysResource, type KeysResource } from './resources/keys'\nimport { createAuthorize, createEvaluateAuthorization } from './authorize'\nimport { createConsumeAuthorization, createRecordExecution } from './permits'\n\nconst DEFAULT_BASE_URL = 'https://pushary.com/api/v1/server'\n\nexport interface PusharyServer {\n  readonly subscribers: SubscribersResource\n  readonly campaigns: CampaignsResource\n  readonly templates: TemplatesResource\n  readonly notifications: NotificationsResource\n  readonly flows: FlowsResource\n  readonly decisions: DecisionsResource\n  // Mint/rotate per-end-user bound keys for multi-tenant Partner integrations.\n  readonly keys: KeysResource\n  // Ask policy whether one action may proceed, and a person only if policy\n  // defers. allow and deny come back without anyone being paged. Requires the\n  // Partner plan.\n  readonly authorize: (input: AuthorizeRequest) => Promise<AuthorizeResult>\n  // The verdict alone, with no decision opened and nobody paged. For a caller\n  // that owns its own escalation and needs to tell \"policy deferred\" apart from\n  // \"the ask failed\", which `authorize` folds together. Requires the Partner plan.\n  readonly evaluateAuthorization: (input: AuthorizationQuery) => Promise<AuthorizationEvaluation>\n  // Spend one settled authorization, at most once. Re-state the action you are\n  // about to run: the server refuses unless it is the action that was approved.\n  // Requires the Partner plan.\n  readonly consumeAuthorization: (binding: AuthorizationBinding) => Promise<ConsumeAuthorizationResult>\n  // Say what the authorized action did. The first report wins.\n  readonly recordExecution: (receipt: ExecutionReceipt) => Promise<{ readonly executionState: PermitExecutionState }>\n  // Connect one of your end-users' phones (keyless, no Pushary account for them).\n  // Returns a single-use universalLink to show them; one tap turns on approvals.\n  // Requires the Partner plan.\n  readonly enroll: (externalId: string) => Promise<EnrollResult>\n  // Can this end-user be reached, and by whose hands? A read-only preflight, so\n  // you can decide how to deliver BEFORE opening a decision and parking a run on\n  // it. Opens nothing, mints nothing, costs no quota.\n  readonly reachability: (externalId: string) => Promise<DecisionReach>\n}\n\nconst validateApiKey = (apiKey: string): void => {\n  if (!apiKey) {\n    throw new Error('API key is required. Get your API key from https://pushary.com/dashboard/settings')\n  }\n  \n  if (!apiKey.includes('.')) {\n    throw new Error('Invalid API key format. Use the full API key (pk_xxx.sk_xxx)')\n  }\n}\n\nconst createContext = (config: PusharyConfig): RequestContext => {\n  validateApiKey(config.apiKey)\n  \n  return Object.freeze({\n    baseUrl: config.baseUrl ?? DEFAULT_BASE_URL,\n    timeoutMs: config.requestTimeoutMs ?? 65_000,\n    headers: Object.freeze({\n      'Content-Type': 'application/json',\n      'Authorization': `Bearer ${config.apiKey}`,\n    }),\n  })\n}\n\nexport const createPusharyServer = (config: PusharyConfig): PusharyServer => {\n  const ctx = createContext(config)\n  const request = createRequest(ctx)\n  \n  const decisions = createDecisionsResource(request)\n\n  return Object.freeze({\n    subscribers: createSubscribersResource(request),\n    campaigns: createCampaignsResource(request),\n    templates: createTemplatesResource(request),\n    notifications: createNotificationsResource(request),\n    flows: createFlowsResource(request),\n    decisions,\n    keys: createKeysResource(request),\n    authorize: createAuthorize(request, decisions),\n    evaluateAuthorization: createEvaluateAuthorization(request),\n    consumeAuthorization: createConsumeAuthorization(request),\n    recordExecution: createRecordExecution(request),\n    enroll: (externalId: string) => request<EnrollResult>('POST', '/enroll', { externalId }),\n    reachability: (externalId: string) =>\n      request<DecisionReach>('GET', '/reachability', { externalId }),\n  })\n}\n\n","import { createHmac, timingSafeEqual } from 'crypto'\nimport type { DecisionCallback } from './types'\n\n// The header carrying the HMAC-SHA256 signature of the raw callback body.\nexport const SIGNATURE_HEADER = 'x-pushary-signature'\n\n// Verify a Pushary webhook. Pass the RAW request body (not re-serialized JSON),\n// the X-Pushary-Signature header, and your webhook secret (decisions.getWebhookSecret()).\n// Constant-time comparison; returns false on any mismatch.\nexport const verifyWebhookSignature = (\n  rawBody: string,\n  signature: string | null | undefined,\n  secret: string,\n): boolean => {\n  if (!signature || !secret) return false\n  const expected = createHmac('sha256', secret).update(rawBody).digest('hex')\n  const a = Buffer.from(expected)\n  const b = Buffer.from(signature)\n  if (a.length !== b.length) return false\n  return timingSafeEqual(a, b)\n}\n\n// Parse a verified decision callback body into a typed object. Returns null if the\n// body is not a decision callback (missing correlationId/answer). Verify the\n// signature FIRST — this does no verification. Read `answer` (canonical) keyed by\n// `correlationId`; `context` echoes what you passed at create time.\nexport const parseDecisionCallback = (rawBody: string): DecisionCallback | null => {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(rawBody)\n  } catch {\n    return null\n  }\n  if (!parsed || typeof parsed !== 'object') return null\n  const p = parsed as Record<string, unknown>\n  if (typeof p.correlationId !== 'string' || typeof p.answer !== 'string') return null\n  return {\n    correlationId: p.correlationId,\n    answer: p.answer,\n    value: typeof p.value === 'string' ? p.value : p.answer,\n    answeredAt: typeof p.answeredAt === 'string' ? p.answeredAt : '',\n    ...(typeof p.context === 'string' ? { context: p.context } : {}),\n  }\n}\n"],"mappings":";AAUO,IAAM,kBAAN,MAAM,yBAAwB,MAAM;AAAA,EAUzC,YACE,SACA,MACA;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,OAAO,KAAK;AACjB,SAAK,OAAO,KAAK;AAGjB,WAAO,eAAe,MAAM,iBAAgB,SAAS;AAAA,EACvD;AAAA;AAAA,EAGA,IAAI,cAAuB;AACzB,WAAO,KAAK,WAAW,OAAO,KAAK,WAAW;AAAA,EAChD;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,UAAU;AAAA,EACxB;AACF;;;ACjDA,SAAS,kBAAkB;AAQpB,IAAM,mBAAmB,CAAC,UAC/B,WAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,IAAM,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAEpE,IAAM,sBAAsB,CAAC,UAA2B;AAC7D,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,YAAY,CAAC,SAA0B;AAC3C,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,OAAO,SAAS,UAAW,QAAO,KAAK,UAAU,IAAI;AACtG,QAAI,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,EAAG,QAAO,KAAK,UAAU,IAAI;AACjF,QAAI,OAAO,SAAS,YAAY,UAAU,IAAI,IAAI,GAAG;AACnD,YAAM,IAAI,UAAU,sEAAsE;AAAA,IAC5F;AACA,QAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,OAAO,eAAe,IAAI,MAAM,OAAO,aAAa,OAAO,eAAe,IAAI,MAAM,MAAM;AACpH,YAAM,IAAI,UAAU,6DAA6D;AAAA,IACnF;AACA,cAAU,IAAI,IAAI;AAClB,UAAM,UAAU,OAAO,QAAQ,IAAI,EAChC,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,UAAU,MAAS,EACzC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC;AAChD,UAAM,aAAa,MAAM,QAAQ,IAAI,IACjC,IAAI,MAAM,KAAK,MAAM,SAAS,EAAE,KAAK,GAAG,CAAC,MACzC,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAU,KAAK,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC;AAC7F,cAAU,OAAO,IAAI;AACrB,WAAO;AAAA,EACT;AACA,SAAO,WAAW,QAAQ,EAAE,OAAO,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AACnE;AAEA,IAAM,cAAmC,oBAAI,IAAI;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,aAAa,CAAC,aAIZ;AACb,MAAI,SAAS,WAAW,WAAY,QAAO;AAC3C,MAAI,SAAS,QAAQ,SAAS,SAAS,UAAW,QAAO;AACzD,SAAO,SAAS,SAAS,QAAQ,YAAY,IAAI,SAAS,MAAM,KAAK,EAAE,YAAY,CAAC;AACtF;;;ACvDA,IAAM,WAAW,CAAC,SAAiB,MAAc,WAA6C;AAI5F,QAAM,MAAM,IAAI,IAAI,GAAG,OAAO,GAAG,IAAI,EAAE;AAEvC,MAAI,QAAQ;AACV,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC,YAAI,aAAa,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,IAAI,SAAS;AACtB;AAEA,IAAM,iBAAiB,OAAU,aAAmC;AAClE,MAAI,CAAC,SAAS,IAAI;AAIhB,UAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AASpD,UAAM,IAAI,gBAAgB,KAAK,WAAW,KAAK,SAAS,QAAQ,SAAS,MAAM,IAAI;AAAA,MACjF,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS;AAAA,MACrB,MAAM,KAAK;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,SAAS,KAAK;AACvB;AAEO,IAAM,gBAAgB,CAAC,QAC5B,OAAU,QAAgB,MAAc,MAAgB,YAA4D;AAClH,QAAM,QAAQ,WAAW;AACzB,QAAM,MAAM,SAAS,OACjB,SAAS,IAAI,SAAS,MAAM,IAA+B,IAC3D,GAAG,IAAI,OAAO,GAAG,IAAI;AAEzB,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC;AAAA,IACA,QAAQ,SAAS,UAAU,YAAY,QAAQ,IAAI,aAAa,IAAM;AAAA,IACtE,SAAS,IAAI;AAAA,IACb,MAAM,CAAC,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EAChD,CAAC;AAED,SAAO,eAAkB,QAAQ;AACnC;;;AC1CK,IAAM,4BAA4B,CAAC,YACxC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAuC,OAAO,gBAAgB,MAAM;AAAA,EAEtE,KAAK,CAAC,OACJ,QAAoB,OAAO,gBAAgB,EAAE,EAAE;AAAA,EAEjD,QAAQ,CAAC,IAAY,SACnB,QAAoB,SAAS,gBAAgB,EAAE,IAAI,IAAI;AAAA,EAEzD,QAAQ,CAAC,OACP,QAAc,UAAU,gBAAgB,EAAE,EAAE;AAAA,EAE9C,OAAO,MACL,QAAyB,OAAO,oBAAoB;AACxD,CAAC;;;ACXI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAAA,EAE5C,MAAM,CAAC,OACL,QAAkB,QAAQ,cAAc,EAAE,OAAO;AAAA,EAEnD,OAAO,CAAC,OACN,QAAkB,QAAQ,cAAc,EAAE,QAAQ;AAAA,EAEpD,QAAQ,CAAC,OACP,QAAkB,QAAQ,cAAc,EAAE,SAAS;AAAA,EAErD,OAAO,CAAC,OACN,QAAuB,OAAO,cAAc,EAAE,QAAQ;AAC1D,CAAC;;;ACjCI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAC9C,CAAC;;;AC3BI,IAAM,8BAA8B,CAAC,YAC1C,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,SACL,QAAoB,QAAQ,SAAS,IAAI;AAC7C,CAAC;;;ACSI,IAAM,sBAAsB,CAAC,YAClC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAiC,OAAO,UAAU,MAAM;AAAA,EAE1D,QAAQ,CAAC,SACP,QAAc,QAAQ,UAAU,IAAI;AAAA,EAEtC,KAAK,CAAC,OACJ,QAAc,OAAO,UAAU,EAAE,EAAE;AAAA,EAErC,QAAQ,CAAC,IAAY,SACnB,QAAc,SAAS,UAAU,EAAE,IAAI,IAAI;AAAA,EAE7C,QAAQ,CAAC,OACP,QAAc,UAAU,UAAU,EAAE,EAAE;AAAA,EAExC,UAAU,CAAC,OACT,QAAc,QAAQ,UAAU,EAAE,WAAW;AAAA,EAE/C,OAAO,CAAC,OACN,QAAc,QAAQ,UAAU,EAAE,QAAQ;AAC9C,CAAC;;;AC1BH,SAAS,kBAAkB;AAK3B,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAgCxB,IAAM,0BAA0B,CAAC,YAA0C;AAChF,QAAM,MAAM,OAAO,SAA0C;AAO3D,UAAM,iBAAiB,KAAK,kBAAkB,WAAW;AAEzD,UAAM,YAAY,KAAK,IAAI,GAAG,KAAK,aAAa,sBAAsB;AAEtE,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,MAAM,WAAW,MAAM,KAAK,QAAQ,MAAM;AACxD,QAAI,KAAK,QAAQ,QAAS,OAAM;AAAA,QAC3B,MAAK,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AACjE,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,IAAI,aAAa,yBAAyB,cAAc,CAAC,GAAG,aAAa,IAAM;AAC/H,QAAI;AACF,YAAM,UAAU,MAAM,QAAwB,QAAQ,cAAc;AAAA,QAClE,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,SAAS,KAAK;AAAA,QACd,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,aAAa,KAAK;AAAA,QAClB,YAAY,KAAK;AAAA;AAAA;AAAA,QAGjB,cAAc,KAAK;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA,QACvB,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA;AAAA;AAAA,QAGvB,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAEhC,YAAM,OAAqB,QAAQ,QAAQ,KAAK,QAAQ;AACxD,UAAI,SAAyB,QAAQ;AACrC,UAAI,WAAW,QAAQ;AACvB,UAAI,QAAuB,QAAQ,SAAS;AAE5C,aAAO,WAAW,aAAa,KAAK,IAAI,IAAI,UAAU;AACpD,cAAM,cAAc,KAAK;AAAA,UACvB;AAAA,UACA,KAAK,IAAI,qBAAqB,KAAK,MAAM,WAAW,KAAK,IAAI,KAAK,GAAI,CAAC;AAAA,QACzE;AACA,YAAI;AACF,gBAAM,SAAS,MAAM,QAAkB,OAAO,cAAc,QAAQ,UAAU,IAAI;AAAA,YAChF,MAAM;AAAA,UACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAChC,mBAAS,OAAO;AAChB,qBAAW,OAAO;AAClB,kBAAQ,OAAO;AAAA,QACjB,SAAS,OAAO;AACd,cAAI,WAAW,OAAO,WAAW,CAAC,KAAK,QAAQ,QAAS;AACxD,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,aAAO;AAAA,QACL,YAAY,QAAQ;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,WAAW,EAAE,QAAQ,MAAM,MAAM,CAAC;AAAA;AAAA;AAAA,QAG5C,WAAW,QAAQ;AAAA,QACnB,mBAAmB,QAAQ;AAAA,QAC3B,aAAa,QAAQ;AAAA,MACvB;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAClB,WAAK,QAAQ,oBAAoB,SAAS,KAAK;AAAA,IACjD;AAAA,EACF;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,CAAC,SAAyB,QAAwB,QAAQ,cAAc,IAAI;AAAA,IACpF,KAAK,CAAC,IAAY,SAChB,QAAkB,OAAO,cAAc,EAAE,IAAI,MAAM,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,MAAS;AAAA,IAC3F,MAAM,CAAC,SACL,QAAsB,OAAO,cAAc,OAAO,EAAE,GAAG,KAAK,IAAI,MAAS;AAAA,IAC3E;AAAA,IACA,QAAQ,CAAC,IAAY,WACnB,QAA8B,QAAQ,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC;AAAA,IACtE,QAAQ,CAAC,OAAe,QAA8B,UAAU,cAAc,EAAE,EAAE;AAAA,IAClF,kBAAkB,MAAM,QAAuB,OAAO,iBAAiB;AAAA,IACvE,qBAAqB,MAAM,QAAuB,QAAQ,iBAAiB;AAAA,EAC7E,CAAC;AACH;;;ACnIO,IAAM,qBAAqB,CAAC,YACjC,OAAO,OAAO;AAAA,EACZ,OAAO,CAAC,SAAwB,QAAwB,QAAQ,SAAS,IAAI;AAAA,EAC7E,MAAM,MACJ,QAA8C,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAClF,QAAQ,CAAC,cACP,QAAyB,UAAU,SAAS,mBAAmB,SAAS,CAAC,EAAE;AAC/E,CAAC;;;ACtBH,IAAM,kBAAkB,CAAC,UAAkB,eACzC,WAAW,QAAQ,GAAG,aAAa,IAAI,UAAU,KAAK,EAAE;AAKnD,IAAM,uBAAuB,CAAC,WAA6C;AAAA,EAChF,UAAU,MAAM;AAAA,EAChB,YAAY,MAAM;AAAA,EAClB,OAAO,MAAM;AAAA,EACb,aAAa,MAAM;AAAA,EACnB,YAAY,MAAM;AACpB;AAYO,IAAM,8BACX,CAAC,YACD,CAAC,UACC,QAAiC,QAAQ,cAAc;AAAA,EACrD,GAAG,qBAAqB,KAAK;AAAA,EAC7B,YAAY,MAAM;AAAA,EAClB,UAAU,MAAM;AAAA,EAChB,WAAW,MAAM;AACnB,CAAC;AAcE,IAAM,kBAAkB,CAAC,SAAoB,cAAiC;AACnF,QAAM,WAAW,4BAA4B,OAAO;AAEpD,SAAO,OAAO,UAAsD;AAClE,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,aAAa,MAAM,SAAS,KAAK;AAEvC,QAAI,WAAW,YAAY,kBAAkB;AAC3C,aAAO;AAAA,QACL,UAAU,WAAW,YAAY;AAAA,QACjC,YAAY;AAAA,QACZ,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,YAAY;AAAA,QACZ,iBAAiB,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,UAAU,IAAI;AAAA,MACjC,UAAU,MAAM,YAAY,gBAAgB,MAAM,UAAU,MAAM,UAAU;AAAA,MAC5E,MAAM;AAAA,MACN,YAAY,MAAM;AAAA,MAClB,WAAW,MAAM;AAAA,MACjB,GAAG;AAAA,MACH,WAAW,MAAM;AAAA,MACjB,kBAAkB,MAAM;AAAA,MACxB,gBAAgB,MAAM;AAAA,MACtB,kBAAkB,MAAM;AAAA,IAC1B,CAAC;AAED,WAAO;AAAA,MACL,UAAU,OAAO;AAAA,MACjB,YAAY;AAAA,MACZ,QAAQ,WAAW;AAAA,MACnB,QAAQ,OAAO,WACX,0BACA,OAAO,WACL,wBACA;AAAA,MACN,YAAY,OAAO;AAAA,MACnB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;;;ACxFA,IAAM,WAAqC;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,mBAAoD,CAAC,WAAW,aAAa,QAAQ;AAM3F,IAAM,YAAY,CAAC,UAAsD;AACvE,MAAI,EAAE,iBAAiB,iBAAkB,QAAO;AAChD,QAAM,OAAO,MAAM;AACnB,QAAM,UAAU,MAAM;AACtB,MAAI,OAAO,YAAY,YAAY,CAAC,SAAS,SAAS,OAAwB,EAAG,QAAO;AACxF,QAAM,QAAQ,MAAM;AACpB,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,GAAI,OAAO,UAAU,YAAY,iBAAiB,SAAS,KAA6B,IACpF,EAAE,gBAAgB,MAA8B,IAChD,CAAC;AAAA,EACP;AACF;AAcO,IAAM,6BACX,CAAC,YACD,OAAO,YAAuE;AAC5E,MAAI;AACF,UAAM,SAAS,MAAM,QAA+B,QAAQ,2BAA2B;AAAA,MACrF,iBAAiB,QAAQ;AAAA,MACzB,UAAU,QAAQ;AAAA,MAClB,YAAY,QAAQ;AAAA,MACpB,OAAO,QAAQ;AAAA,MACf,aAAa,QAAQ;AAAA,MACrB,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,WAAO,EAAE,UAAU,MAAM,OAAO;AAAA,EAClC,SAAS,OAAO;AACd,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAS,QAAO;AACpB,UAAM;AAAA,EACR;AACF;AASK,IAAM,wBACX,CAAC,YACD,CAAC,YACC,QAAQ,QAAQ,mBAAmB,mBAAmB,QAAQ,QAAQ,CAAC,YAAY;AAAA,EACjF,SAAS,QAAQ;AAAA,EACjB,SAAS,QAAQ;AACnB,CAAC;;;AC7DL,IAAM,mBAAmB;AAmCzB,IAAM,iBAAiB,CAAC,WAAyB;AAC/C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AAEA,MAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACF;AAEA,IAAM,gBAAgB,CAAC,WAA0C;AAC/D,iBAAe,OAAO,MAAM;AAE5B,SAAO,OAAO,OAAO;AAAA,IACnB,SAAS,OAAO,WAAW;AAAA,IAC3B,WAAW,OAAO,oBAAoB;AAAA,IACtC,SAAS,OAAO,OAAO;AAAA,MACrB,gBAAgB;AAAA,MAChB,iBAAiB,UAAU,OAAO,MAAM;AAAA,IAC1C,CAAC;AAAA,EACH,CAAC;AACH;AAEO,IAAM,sBAAsB,CAAC,WAAyC;AAC3E,QAAM,MAAM,cAAc,MAAM;AAChC,QAAM,UAAU,cAAc,GAAG;AAEjC,QAAM,YAAY,wBAAwB,OAAO;AAEjD,SAAO,OAAO,OAAO;AAAA,IACnB,aAAa,0BAA0B,OAAO;AAAA,IAC9C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,eAAe,4BAA4B,OAAO;AAAA,IAClD,OAAO,oBAAoB,OAAO;AAAA,IAClC;AAAA,IACA,MAAM,mBAAmB,OAAO;AAAA,IAChC,WAAW,gBAAgB,SAAS,SAAS;AAAA,IAC7C,uBAAuB,4BAA4B,OAAO;AAAA,IAC1D,sBAAsB,2BAA2B,OAAO;AAAA,IACxD,iBAAiB,sBAAsB,OAAO;AAAA,IAC9C,QAAQ,CAAC,eAAuB,QAAsB,QAAQ,WAAW,EAAE,WAAW,CAAC;AAAA,IACvF,cAAc,CAAC,eACb,QAAuB,OAAO,iBAAiB,EAAE,WAAW,CAAC;AAAA,EACjE,CAAC;AACH;;;ACzGA,SAAS,YAAY,uBAAuB;AAIrC,IAAM,mBAAmB;AAKzB,IAAM,yBAAyB,CACpC,SACA,WACA,WACY;AACZ,MAAI,CAAC,aAAa,CAAC,OAAQ,QAAO;AAClC,QAAM,WAAW,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC1E,QAAM,IAAI,OAAO,KAAK,QAAQ;AAC9B,QAAM,IAAI,OAAO,KAAK,SAAS;AAC/B,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,SAAO,gBAAgB,GAAG,CAAC;AAC7B;AAMO,IAAM,wBAAwB,CAAC,YAA6C;AACjF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,EAAE,WAAW,SAAU,QAAO;AAChF,SAAO;AAAA,IACL,eAAe,EAAE;AAAA,IACjB,QAAQ,EAAE;AAAA,IACV,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,EAAE;AAAA,IACjD,YAAY,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,IAC9D,GAAI,OAAO,EAAE,YAAY,WAAW,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChE;AACF;","names":[]}

package/dist/index.cjs

@@ -245,6 +245,7 @@ var createDecisionsResource = (request) => {
   return Object.freeze({
     create: (data) => request("POST", "/decisions", data),
     get: (id, opts) => request("GET", `/decisions/${id}`, opts?.wait ? { wait: opts.wait } : void 0),
+    list: (opts) => request("GET", "/decisions", opts ? { ...opts } : void 0),
     ask,
     answer: (id, answer) => request("POST", `/decisions/${id}`, { answer }),
     cancel: (id) => request("DELETE", `/decisions/${id}`),

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/error.ts","../src/request.ts","../src/resources/subscribers.ts","../src/resources/campaigns.ts","../src/resources/templates.ts","../src/resources/notifications.ts","../src/resources/flows.ts","../src/resources/decisions.ts","../src/util.ts","../src/resources/keys.ts","../src/authorize.ts","../src/permits.ts","../src/client.ts","../src/webhook.ts"],"sourcesContent":["export { createPusharyServer, type PusharyServer } from './client'\n\nexport { PusharyApiError } from './error'\n\nexport type {\n  PusharyConfig,\n  Subscriber,\n  SubscriberListParams,\n  UpdateSubscriber,\n  SubscriberCount,\n  Campaign,\n  CreateCampaign,\n  UpdateCampaign,\n  CampaignStats,\n  Template,\n  CreateTemplate,\n  UpdateTemplate,\n  SendNotification,\n  SendResult,\n  Flow,\n  CreateFlow,\n  UpdateFlow,\n  FlowListParams,\n  FlowTriggerType,\n  FlowStepType,\n  FlowStatus,\n  FlowStep,\n  FlowStepConfig,\n  FlowStepInput,\n  ListParams,\n  PaginatedResponse,\n  DecisionType,\n  DecisionStatus,\n  DecisionSubject,\n  DecisionDeliverability,\n  DecisionReach,\n  DecisionParameters,\n  ActionPresentation,\n  PresentedChange,\n  PresentedFormat,\n  SandboxOutcome,\n  AuthorizationVerdict,\n  AuthorizationQuery,\n  AuthorizeRequest,\n  AuthorizeResult,\n  AuthorizationEvaluation,\n  AuthorizationBinding,\n  AuthorizationAuthority,\n  ConsumedAuthorization,\n  ConsumeAuthorizationResult,\n  ExecutionOutcome,\n  ExecutionReceipt,\n  PermitRefusal,\n  PermitExecutionState,\n  CreateDecision,\n  DecisionReachability,\n  DecisionResult,\n  Decision,\n  DecisionAnswerResult,\n  CancelDecisionResult,\n  DecisionCallback,\n  WebhookSecret,\n  EnrollResult,\n  AskDecision,\n  AskResult,\n  IssueBoundKey,\n  BoundKeyResult,\n  BoundKeySummary,\n  RevokeKeyResult,\n} from './types'\n\nexport type { SubscribersResource } from './resources/subscribers'\nexport type { CampaignsResource } from './resources/campaigns'\nexport type { TemplatesResource } from './resources/templates'\nexport type { NotificationsResource } from './resources/notifications'\nexport type { FlowsResource } from './resources/flows'\nexport type { DecisionsResource } from './resources/decisions'\nexport type { KeysResource } from './resources/keys'\n\nexport { verifyWebhookSignature, parseDecisionCallback, SIGNATURE_HEADER } from './webhook'\n\nexport { deterministicKey, isApproved } from './util'\n\n","/**\n * Thrown for any non-2xx response from the API.\n *\n * Extends Error rather than replacing it, so every existing `catch (e)` that\n * reads `e.message` keeps working unchanged. What it adds is the thing callers\n * previously had to string-match the message for: an HTTP status they can branch\n * on. Telling a revoked key (401) apart from a plan limit (403), a bad argument\n * (400) and an outage (5xx) is the difference between \"stop and re-authenticate\"\n * and \"retry in a minute\", and message text is not a stable API to decide that on.\n */\nexport class PusharyApiError extends Error {\n  /** HTTP status of the response that failed. */\n  readonly status: number\n  /** HTTP status text, when the runtime provides one. */\n  readonly statusText: string\n  /** The API's own machine-readable error code, when it sent one. */\n  readonly code?: string\n  /** The parsed response body, for anything the fields above do not cover. */\n  readonly body?: unknown\n\n  constructor(\n    message: string,\n    init: { status: number; statusText?: string; code?: string; body?: unknown }\n  ) {\n    super(message)\n    this.name = 'PusharyApiError'\n    this.status = init.status\n    this.statusText = init.statusText ?? ''\n    this.code = init.code\n    this.body = init.body\n    // Restores the prototype chain so `err instanceof PusharyApiError` holds\n    // even when this package is consumed as ES5-targeted CommonJS.\n    Object.setPrototypeOf(this, PusharyApiError.prototype)\n  }\n\n  /** The key is missing, malformed, or revoked. Re-authenticate; do not retry. */\n  get isAuthError(): boolean {\n    return this.status === 401 || this.status === 403\n  }\n\n  /** Rate limited. Back off and retry. */\n  get isRateLimited(): boolean {\n    return this.status === 429\n  }\n\n  /** Server-side fault. Safe to retry an idempotent call. */\n  get isServerError(): boolean {\n    return this.status >= 500\n  }\n}\n","import type { RequestContext, RequestFn } from './types'\nimport { PusharyApiError } from './error'\n\nconst buildUrl = (baseUrl: string, path: string, params?: Record<string, unknown>): string => {\n  // Build from the full absolute URL so the base path (e.g. /api/v1/server) is\n  // preserved. `new URL(path, baseUrl)` treats a leading-slash path as absolute\n  // and would drop that prefix, sending GET-with-query calls to the wrong URL.\n  const url = new URL(`${baseUrl}${path}`)\n\n  if (params) {\n    Object.entries(params).forEach(([key, value]) => {\n      if (value !== undefined && value !== null) {\n        url.searchParams.set(key, String(value))\n      }\n    })\n  }\n  \n  return url.toString()\n}\n\nconst handleResponse = async <T>(response: Response): Promise<T> => {\n  if (!response.ok) {\n    // The API returns its reason under `error`; older paths use `message`. Read\n    // both so callers get the real reason (e.g. \"No subscribers found\") instead\n    // of a bare \"HTTP 400\" they cannot classify.\n    const body = (await response.json().catch(() => ({}))) as {\n      message?: string\n      error?: string\n      code?: string\n    }\n    // PusharyApiError extends Error, so an existing `catch (e) { e.message }`\n    // is unaffected. It carries the status too, because the reason to branch on\n    // a failure (re-authenticate vs back off vs retry) was previously only\n    // recoverable by string-matching this message, which is not a stable API.\n    throw new PusharyApiError(body.message || body.error || `HTTP ${response.status}`, {\n      status: response.status,\n      statusText: response.statusText,\n      code: body.code,\n      body,\n    })\n  }\n  return response.json() as Promise<T>\n}\n\nexport const createRequest = (ctx: RequestContext): RequestFn =>\n  async <T>(method: string, path: string, body?: unknown, options?: { readonly signal?: AbortSignal }): Promise<T> => {\n    const isGet = method === 'GET'\n    const url = isGet && body \n      ? buildUrl(ctx.baseUrl, path, body as Record<string, unknown>)\n      : `${ctx.baseUrl}${path}`\n    \n    const response = await fetch(url, {\n      method,\n      signal: options?.signal ?? AbortSignal.timeout(ctx.timeoutMs ?? 65_000),\n      headers: ctx.headers,\n      body: !isGet && body ? JSON.stringify(body) : undefined,\n    })\n    \n    return handleResponse<T>(response)\n  }\n\n","import type {\n  RequestFn,\n  Subscriber,\n  SubscriberListParams,\n  UpdateSubscriber,\n  PaginatedResponse,\n  SubscriberCount,\n} from '../types'\n\nexport interface SubscribersResource {\n  readonly list: (params?: SubscriberListParams) => Promise<PaginatedResponse<Subscriber>>\n  readonly get: (id: string) => Promise<Subscriber>\n  readonly update: (id: string, data: UpdateSubscriber) => Promise<Subscriber>\n  readonly delete: (id: string) => Promise<void>\n  readonly count: () => Promise<SubscriberCount>\n}\n\nexport const createSubscribersResource = (request: RequestFn): SubscribersResource =>\n  Object.freeze({\n    list: (params?: SubscriberListParams) =>\n      request<PaginatedResponse<Subscriber>>('GET', '/subscribers', params),\n    \n    get: (id: string) =>\n      request<Subscriber>('GET', `/subscribers/${id}`),\n    \n    update: (id: string, data: UpdateSubscriber) =>\n      request<Subscriber>('PATCH', `/subscribers/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/subscribers/${id}`),\n    \n    count: () =>\n      request<SubscriberCount>('GET', '/subscribers/count'),\n  })\n\n","import type {\n  RequestFn,\n  Campaign,\n  CreateCampaign,\n  UpdateCampaign,\n  ListParams,\n  PaginatedResponse,\n  CampaignStats,\n} from '../types'\n\nexport interface CampaignsResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Campaign>>\n  readonly create: (data: CreateCampaign) => Promise<Campaign>\n  readonly get: (id: string) => Promise<Campaign>\n  readonly update: (id: string, data: UpdateCampaign) => Promise<Campaign>\n  readonly delete: (id: string) => Promise<void>\n  readonly send: (id: string) => Promise<Campaign>\n  readonly pause: (id: string) => Promise<Campaign>\n  readonly resume: (id: string) => Promise<Campaign>\n  readonly stats: (id: string) => Promise<CampaignStats>\n}\n\nexport const createCampaignsResource = (request: RequestFn): CampaignsResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Campaign>>('GET', '/campaigns', params),\n    \n    create: (data: CreateCampaign) =>\n      request<Campaign>('POST', '/campaigns', data),\n    \n    get: (id: string) =>\n      request<Campaign>('GET', `/campaigns/${id}`),\n    \n    update: (id: string, data: UpdateCampaign) =>\n      request<Campaign>('PATCH', `/campaigns/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/campaigns/${id}`),\n    \n    send: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/send`),\n    \n    pause: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/pause`),\n    \n    resume: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/resume`),\n    \n    stats: (id: string) =>\n      request<CampaignStats>('GET', `/campaigns/${id}/stats`),\n  })\n\n","import type {\n  RequestFn,\n  Template,\n  CreateTemplate,\n  UpdateTemplate,\n  ListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface TemplatesResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Template>>\n  readonly create: (data: CreateTemplate) => Promise<Template>\n  readonly get: (id: string) => Promise<Template>\n  readonly update: (id: string, data: UpdateTemplate) => Promise<Template>\n  readonly delete: (id: string) => Promise<void>\n}\n\nexport const createTemplatesResource = (request: RequestFn): TemplatesResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Template>>('GET', '/templates', params),\n    \n    create: (data: CreateTemplate) =>\n      request<Template>('POST', '/templates', data),\n    \n    get: (id: string) =>\n      request<Template>('GET', `/templates/${id}`),\n    \n    update: (id: string, data: UpdateTemplate) =>\n      request<Template>('PATCH', `/templates/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/templates/${id}`),\n  })\n\n","import type { RequestFn, SendNotification, SendResult } from '../types'\n\nexport interface NotificationsResource {\n  readonly send: (data: SendNotification) => Promise<SendResult>\n}\n\nexport const createNotificationsResource = (request: RequestFn): NotificationsResource =>\n  Object.freeze({\n    send: (data: SendNotification) =>\n      request<SendResult>('POST', '/send', data),\n  })\n\n","import type {\n  RequestFn,\n  Flow,\n  CreateFlow,\n  UpdateFlow,\n  FlowListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface FlowsResource {\n  readonly list: (params?: FlowListParams) => Promise<PaginatedResponse<Flow>>\n  readonly create: (data: CreateFlow) => Promise<Flow>\n  readonly get: (id: string) => Promise<Flow>\n  readonly update: (id: string, data: UpdateFlow) => Promise<Flow>\n  readonly delete: (id: string) => Promise<void>\n  readonly activate: (id: string) => Promise<Flow>\n  readonly pause: (id: string) => Promise<Flow>\n}\n\nexport const createFlowsResource = (request: RequestFn): FlowsResource =>\n  Object.freeze({\n    list: (params?: FlowListParams) =>\n      request<PaginatedResponse<Flow>>('GET', '/flows', params),\n    \n    create: (data: CreateFlow) =>\n      request<Flow>('POST', '/flows', data),\n    \n    get: (id: string) =>\n      request<Flow>('GET', `/flows/${id}`),\n    \n    update: (id: string, data: UpdateFlow) =>\n      request<Flow>('PATCH', `/flows/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/flows/${id}`),\n    \n    activate: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/activate`),\n    \n    pause: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/pause`),\n  })\n","import type {\n  RequestFn,\n  CreateDecision,\n  DecisionResult,\n  Decision,\n  DecisionAnswerResult,\n  CancelDecisionResult,\n  WebhookSecret,\n  AskDecision,\n  AskResult,\n  DecisionType,\n  DecisionStatus,\n} from '../types'\nimport { randomUUID } from 'crypto'\nimport { isApproved } from '../util'\n\n// A single long-poll window. The server clamps GET ?wait to 55s, so ask() loops\n// windows of this size until the decision resolves or the caller deadline passes.\nconst POLL_WINDOW_SECONDS = 50\nconst DEFAULT_ASK_TIMEOUT_MS = 55_000\n\n// Human-in-the-loop decisions: ask a specific end-user to approve, then resume\n// on their answer via webhook or poll. See the Partner integration guide.\nexport interface DecisionsResource {\n  // Create a decision. Defaults to async (returns immediately with a decisionId);\n  // pass wait:true to block up to ~55s for a fast answer. Always pass\n  // idempotencyKey so a retried call does not ask the same human twice.\n  readonly create: (data: CreateDecision) => Promise<DecisionResult>\n  // Poll for the outcome. opts.wait long-polls up to N seconds. Reads durably, so\n  // it still resolves after the live window closes.\n  readonly get: (id: string, opts?: { readonly wait?: number }) => Promise<Decision>\n  // Create a decision and block until the human answers or the deadline passes,\n  // polling durably (so a crashed/resumed process still gets the answer). Returns\n  // a fail-closed `approved` flag. Default deadline 55s (serverless-safe); the\n  // decision stays answerable for its full TTL, so an {answered:false} return is\n  // resolvable later via get() or a callbackUrl. This is the one call most agents\n  // need. Each call reaches the human: without an idempotencyKey a fresh unique\n  // key is generated per call, so two asks with the same text never collapse into\n  // one silent auto-approval. Pass your own stable idempotencyKey (tied to your\n  // operation id) only when you WANT a retried call to dedupe.\n  readonly ask: (data: AskDecision) => Promise<AskResult>\n  // Relay the end-user's answer from your own authenticated app (delegated auth).\n  readonly answer: (id: string, answer: string) => Promise<DecisionAnswerResult>\n  readonly cancel: (id: string) => Promise<CancelDecisionResult>\n  // Your webhook signing secret (created on first call). Verify callbacks with\n  // verifyWebhookSignature(rawBody, header, secret).\n  readonly getWebhookSecret: () => Promise<WebhookSecret>\n  readonly rotateWebhookSecret: () => Promise<WebhookSecret>\n}\n\nexport const createDecisionsResource = (request: RequestFn): DecisionsResource => {\n  const ask = async (data: AskDecision): Promise<AskResult> => {\n    // Idempotency is caller intent, never inferred from content: two asks with the\n    // same text are usually two distinct decisions, so a content hash would make\n    // the second silently replay the first answer (auto-approving a second refund,\n    // or blocking a re-ask for the server's whole idempotency window). Default to a\n    // unique key per call so every ask reaches the human; callers wanting retry\n    // dedup pass their own stable key tied to their operation.\n    const idempotencyKey = data.idempotencyKey ?? randomUUID()\n\n    const timeoutMs = Math.max(0, data.timeoutMs ?? DEFAULT_ASK_TIMEOUT_MS)\n    // Zero retains the create-only API. Positive budgets include creation and polling.\n    const deadline = Date.now() + timeoutMs\n    const controller = new AbortController()\n    const abort = () => controller.abort(data.signal?.reason)\n    if (data.signal?.aborted) abort()\n    else data.signal?.addEventListener('abort', abort, { once: true })\n    const timer = setTimeout(() => controller.abort(new DOMException('Pushary ask timed out', 'TimeoutError')), timeoutMs || 65_000)\n    try {\n      const created = await request<DecisionResult>('POST', '/decisions', {\n        question: data.question,\n        type: data.type,\n        options: data.options,\n        externalId: data.externalId,\n        email: data.email,\n        agentName: data.agentName,\n        context: data.context,\n        placeholder: data.placeholder,\n        toolName: data.toolName,\n        toolTarget: data.toolTarget,\n        actor: data.actor,\n        environment: data.environment,\n        parameters: data.parameters,\n        // Its changes name parameters rather than carrying values, so what the\n        // person sees is read from the same numbers a rule compares.\n        presentation: data.presentation,\n        approvalUrl: data.approvalUrl,\n        expiresInSeconds: data.expiresInSeconds,\n        poweredBy: data.poweredBy,\n        callbackUrl: data.callbackUrl,\n        requireReachable: data.requireReachable,\n        // Read only by a key issued on your workspace's sandbox site, where the\n        // simulator answers instead of a person. Ignored in production.\n        sandboxOutcome: data.sandboxOutcome,\n        idempotencyKey,\n        wait: false,\n      }, { signal: controller.signal })\n\n      const type: DecisionType = created.type ?? data.type ?? 'confirm'\n      let status: DecisionStatus = created.status\n      let answered = created.answered\n      let value: string | null = created.value ?? null\n\n      while (status === 'pending' && Date.now() < deadline) {\n        const waitSeconds = Math.max(\n          1,\n          Math.min(POLL_WINDOW_SECONDS, Math.ceil((deadline - Date.now()) / 1000)),\n        )\n        try {\n          const polled = await request<Decision>('GET', `/decisions/${created.decisionId}`, {\n            wait: waitSeconds,\n          }, { signal: controller.signal })\n          status = polled.status\n          answered = polled.answered\n          value = polled.value\n        } catch (error) {\n          if (controller.signal.aborted && !data.signal?.aborted) break\n          throw error\n        }\n      }\n\n      return {\n        decisionId: created.decisionId,\n        status,\n        answered,\n        value,\n        type,\n        approved: isApproved({ status, type, value }),\n        // Surfaced from the create response so a caller can tell an unanswered\n        // decision that reached nobody (reachable:false) apart from a real decline.\n        reachable: created.reachable,\n        reachableChannels: created.reachableChannels,\n        deviceCount: created.deviceCount,\n      }\n    } finally {\n      clearTimeout(timer)\n      data.signal?.removeEventListener('abort', abort)\n    }\n  }\n\n  return Object.freeze({\n    create: (data: CreateDecision) => request<DecisionResult>('POST', '/decisions', data),\n    get: (id: string, opts?: { readonly wait?: number }) =>\n      request<Decision>('GET', `/decisions/${id}`, opts?.wait ? { wait: opts.wait } : undefined),\n    ask,\n    answer: (id: string, answer: string) =>\n      request<DecisionAnswerResult>('POST', `/decisions/${id}`, { answer }),\n    cancel: (id: string) => request<CancelDecisionResult>('DELETE', `/decisions/${id}`),\n    getWebhookSecret: () => request<WebhookSecret>('GET', '/webhook-secret'),\n    rotateWebhookSecret: () => request<WebhookSecret>('POST', '/webhook-secret'),\n  })\n}\n","import { createHash } from 'crypto'\nimport type { DecisionStatus, DecisionType } from './types'\n\n// A collision-safe idempotency key that is STABLE across process restarts\n// (unlike the builtin salted hash()), so a retried create reuses the same key\n// and never asks the same human twice. Pass the parts that make the ask unique\n// (e.g. [externalId, stepId, question]). Parts are joined with a NUL separator\n// so ['a', 'bc'] and ['ab', 'c'] never collide.\nexport const deterministicKey = (parts: readonly string[]): string =>\n  createHash('sha256').update(parts.join('\\x00')).digest('hex').slice(0, 40)\n\nexport const decisionFingerprint = (value: unknown): string => {\n  const ancestors = new Set<object>()\n  const serialize = (item: unknown): string => {\n    if (item === null || typeof item === 'string' || typeof item === 'boolean') return JSON.stringify(item)\n    if (typeof item === 'number' && Number.isFinite(item)) return JSON.stringify(item)\n    if (typeof item !== 'object' || ancestors.has(item)) {\n      throw new TypeError('Pushary: decision identity must contain finite, acyclic JSON values.')\n    }\n    if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null) {\n      throw new TypeError('Pushary: decision identity must contain plain JSON objects.')\n    }\n    ancestors.add(item)\n    const entries = Object.entries(item)\n      .filter(([, entry]) => entry !== undefined)\n      .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)\n    const serialized = Array.isArray(item)\n      ? `[${Array.from(item, serialize).join(',')}]`\n      : `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${serialize(entry)}`).join(',')}}`\n    ancestors.delete(item)\n    return serialized\n  }\n  return createHash('sha256').update(serialize(value)).digest('hex')\n}\n\nconst AFFIRMATIVE: ReadonlySet<string> = new Set([\n  'yes',\n  'y',\n  'approve',\n  'approved',\n  'ok',\n  'okay',\n  'confirm',\n  'accept',\n  'true',\n])\n\n// Fail-closed approval check. A `confirm` decision is approved ONLY on an\n// affirmative answer; `select`/`input` decisions are \"approved\" once answered.\n// Anything not answered — pending, expired, or cancelled — is NOT approved.\nexport const isApproved = (decision: {\n  readonly status: DecisionStatus\n  readonly type?: DecisionType\n  readonly value: string | null\n}): boolean => {\n  if (decision.status !== 'answered') return false\n  if (decision.type && decision.type !== 'confirm') return true\n  return decision.value != null && AFFIRMATIVE.has(decision.value.trim().toLowerCase())\n}\n","import type {\n  RequestFn,\n  IssueBoundKey,\n  BoundKeyResult,\n  BoundKeySummary,\n  RevokeKeyResult,\n} from '../types'\n\n// Per-end-user (bound) key issuance for multi-tenant Partners. Call issue() from\n// your backend with your own (unbound, Partner-plan) key to mint a child key bound\n// to one end-user, hand that key to the agent runtime acting for that user, then\n// revoke() it when the session ends. A bound key can only create/resolve decisions\n// and enroll that exact end-user, so a prompt-injected agent can never reach\n// another of your users. Requires the Partner plan.\nexport interface KeysResource {\n  // Mint a key bound to externalId. The full key is returned once in `apiKey` and\n  // cannot be retrieved again — store it as the session credential.\n  readonly issue: (data: IssueBoundKey) => Promise<BoundKeyResult>\n  // List this site's bound keys (never the secret) for audit/rotation.\n  readonly list: () => Promise<readonly BoundKeySummary[]>\n  // Revoke (deactivate) a bound key by its prefix. Returns revoked:false if the\n  // prefix is unknown or already inactive.\n  readonly revoke: (keyPrefix: string) => Promise<RevokeKeyResult>\n}\n\nexport const createKeysResource = (request: RequestFn): KeysResource =>\n  Object.freeze({\n    issue: (data: IssueBoundKey) => request<BoundKeyResult>('POST', '/keys', data),\n    list: () =>\n      request<{ keys: readonly BoundKeySummary[] }>('GET', '/keys').then((r) => r.keys),\n    revoke: (keyPrefix: string) =>\n      request<RevokeKeyResult>('DELETE', `/keys/${encodeURIComponent(keyPrefix)}`),\n  })\n","import type {\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  AuthorizeRequest,\n  AuthorizeResult,\n  DecisionSubject,\n  RequestFn,\n} from './types'\nimport type { DecisionsResource } from './resources/decisions'\n\nconst defaultQuestion = (toolName: string, toolTarget?: string): string =>\n  `Approve ${toolName}${toolTarget ? ` ${toolTarget}` : ''}?`\n\n// The evaluation and the ask must describe the same action. Built once so a field\n// added to the subject cannot reach one call and not the other, which would let a\n// decision be recorded under a different description than the one policy saw.\nexport const authorizationSubject = (input: DecisionSubject): DecisionSubject => ({\n  toolName: input.toolName,\n  toolTarget: input.toolTarget,\n  actor: input.actor,\n  environment: input.environment,\n  parameters: input.parameters,\n})\n\n/**\n * The raw boundary: what the site's policy says about one action, with nobody\n * paged and no decision opened.\n *\n * Exported separately from {@link createAuthorize} because a caller that owns its\n * own escalation — the adapter gate, or a custom harness with its own approval\n * surface — needs to tell \"policy had no opinion\" apart from \"the ask failed\".\n * Composing the two calls hides that difference, and the two failures want\n * opposite handling.\n */\nexport const createEvaluateAuthorization =\n  (request: RequestFn) =>\n  (input: AuthorizationQuery): Promise<AuthorizationEvaluation> =>\n    request<AuthorizationEvaluation>('POST', '/authorize', {\n      ...authorizationSubject(input),\n      externalId: input.externalId,\n      question: input.question,\n      agentName: input.agentName,\n    })\n\n/**\n * Ask policy first, and a person only if policy defers.\n *\n * Two calls rather than one server round trip on purpose. POST /authorize\n * evaluates and nothing else, so every limit, reachability check and delivery\n * rung stays in the one path that already owns them, and this composes the two.\n * The extra hop only happens when a human is needed, where it is lost in the\n * time that person takes to answer.\n *\n * Fail-closed throughout: a denial and an unanswered ask both return\n * approved: false, and the reason says which it was.\n */\nexport const createAuthorize = (request: RequestFn, decisions: DecisionsResource) => {\n  const evaluate = createEvaluateAuthorization(request)\n\n  return async (input: AuthorizeRequest): Promise<AuthorizeResult> => {\n    const subject = authorizationSubject(input)\n    const evaluation = await evaluate(input)\n\n    if (evaluation.verdict !== 'requires_human') {\n      return {\n        approved: evaluation.verdict === 'allow',\n        resolvedBy: 'policy',\n        policy: evaluation.policy,\n        reason: evaluation.reason,\n        decisionId: null,\n        authorizationId: evaluation.authorizationId,\n      }\n    }\n\n    const answer = await decisions.ask({\n      question: input.question ?? defaultQuestion(input.toolName, input.toolTarget),\n      type: 'confirm',\n      externalId: input.externalId,\n      agentName: input.agentName,\n      ...subject,\n      timeoutMs: input.timeoutMs,\n      expiresInSeconds: input.expiresInSeconds,\n      idempotencyKey: input.idempotencyKey,\n      requireReachable: input.requireReachable,\n    })\n\n    return {\n      approved: answer.approved,\n      resolvedBy: 'human',\n      policy: evaluation.policy,\n      reason: answer.approved\n        ? 'A person approved it.'\n        : answer.answered\n          ? 'A person denied it.'\n          : 'Nobody answered, so this was not approved.',\n      decisionId: answer.decisionId,\n      authorizationId: null,\n    }\n  }\n}\n","import { PusharyApiError } from './error'\nimport type {\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ConsumedAuthorization,\n  ExecutionReceipt,\n  PermitExecutionState,\n  PermitRefusal,\n  RequestFn,\n} from './types'\n\nconst REFUSALS: readonly PermitRefusal[] = [\n  'not_authorized',\n  'action_mismatch',\n  'expired',\n  'already_consumed',\n]\n\nconst EXECUTION_STATES: readonly PermitExecutionState[] = ['running', 'succeeded', 'failed']\n\n// A refusal is an answer, not a failure: the server looked, and said no. A\n// transport error is neither, and must not be dressed up as one — a caller that\n// reads \"already consumed\" stops, and a caller that reads a network error may\n// try again. Only a body the server actually sent gets read as a refusal.\nconst refusalOf = (error: unknown): ConsumeAuthorizationResult | null => {\n  if (!(error instanceof PusharyApiError)) return null\n  const body = error.body as { refusal?: unknown; executionState?: unknown } | undefined\n  const refusal = body?.refusal\n  if (typeof refusal !== 'string' || !REFUSALS.includes(refusal as PermitRefusal)) return null\n  const state = body?.executionState\n  return {\n    consumed: false,\n    refusal: refusal as PermitRefusal,\n    reason: error.message,\n    ...(typeof state === 'string' && EXECUTION_STATES.includes(state as PermitExecutionState)\n      ? { executionState: state as PermitExecutionState }\n      : {}),\n  }\n}\n\n/**\n * Spend one settled authorization, at most once.\n *\n * Re-states the action about to run. That is the point: the server digests what\n * you claim and what it recorded, and refuses unless they are the same action.\n * An amount changed between the approval and the execution does not fail a check\n * that could be skipped — it simply has no permit.\n *\n * Refusals come back as `consumed: false` with a machine-readable reason.\n * Anything else throws, because \"the network was down\" is not \"you may not do\n * this\", and a caller that cannot tell them apart will eventually guess wrong.\n */\nexport const createConsumeAuthorization =\n  (request: RequestFn) =>\n  async (binding: AuthorizationBinding): Promise<ConsumeAuthorizationResult> => {\n    try {\n      const permit = await request<ConsumedAuthorization>('POST', '/authorizations/consume', {\n        authorizationId: binding.authorizationId,\n        toolName: binding.toolName,\n        toolTarget: binding.toolTarget,\n        actor: binding.actor,\n        environment: binding.environment,\n        externalId: binding.externalId,\n        parameters: binding.parameters,\n      })\n      return { consumed: true, permit }\n    } catch (error) {\n      const refused = refusalOf(error)\n      if (refused) return refused\n      throw error\n    }\n  }\n\n/**\n * Say what the authorized action did.\n *\n * The evidence half. \"Was this allowed\" and \"did this happen\" are different\n * questions, and only the second one answers a customer asking where their\n * refund is. The first report wins; a late duplicate cannot rewrite it.\n */\nexport const createRecordExecution =\n  (request: RequestFn) =>\n  (receipt: ExecutionReceipt): Promise<{ readonly executionState: PermitExecutionState }> =>\n    request('POST', `/authorizations/${encodeURIComponent(receipt.permitId)}/receipt`, {\n      outcome: receipt.outcome,\n      summary: receipt.summary,\n    })\n","import type {\n  PusharyConfig,\n  RequestContext,\n  EnrollResult,\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  DecisionReach,\n  AuthorizeRequest,\n  AuthorizeResult,\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ExecutionReceipt,\n  PermitExecutionState,\n} from './types'\nimport { createRequest } from './request'\nimport { createSubscribersResource, type SubscribersResource } from './resources/subscribers'\nimport { createCampaignsResource, type CampaignsResource } from './resources/campaigns'\nimport { createTemplatesResource, type TemplatesResource } from './resources/templates'\nimport { createNotificationsResource, type NotificationsResource } from './resources/notifications'\nimport { createFlowsResource, type FlowsResource } from './resources/flows'\nimport { createDecisionsResource, type DecisionsResource } from './resources/decisions'\nimport { createKeysResource, type KeysResource } from './resources/keys'\nimport { createAuthorize, createEvaluateAuthorization } from './authorize'\nimport { createConsumeAuthorization, createRecordExecution } from './permits'\n\nconst DEFAULT_BASE_URL = 'https://pushary.com/api/v1/server'\n\nexport interface PusharyServer {\n  readonly subscribers: SubscribersResource\n  readonly campaigns: CampaignsResource\n  readonly templates: TemplatesResource\n  readonly notifications: NotificationsResource\n  readonly flows: FlowsResource\n  readonly decisions: DecisionsResource\n  // Mint/rotate per-end-user bound keys for multi-tenant Partner integrations.\n  readonly keys: KeysResource\n  // Ask policy whether one action may proceed, and a person only if policy\n  // defers. allow and deny come back without anyone being paged. Requires the\n  // Partner plan.\n  readonly authorize: (input: AuthorizeRequest) => Promise<AuthorizeResult>\n  // The verdict alone, with no decision opened and nobody paged. For a caller\n  // that owns its own escalation and needs to tell \"policy deferred\" apart from\n  // \"the ask failed\", which `authorize` folds together. Requires the Partner plan.\n  readonly evaluateAuthorization: (input: AuthorizationQuery) => Promise<AuthorizationEvaluation>\n  // Spend one settled authorization, at most once. Re-state the action you are\n  // about to run: the server refuses unless it is the action that was approved.\n  // Requires the Partner plan.\n  readonly consumeAuthorization: (binding: AuthorizationBinding) => Promise<ConsumeAuthorizationResult>\n  // Say what the authorized action did. The first report wins.\n  readonly recordExecution: (receipt: ExecutionReceipt) => Promise<{ readonly executionState: PermitExecutionState }>\n  // Connect one of your end-users' phones (keyless, no Pushary account for them).\n  // Returns a single-use universalLink to show them; one tap turns on approvals.\n  // Requires the Partner plan.\n  readonly enroll: (externalId: string) => Promise<EnrollResult>\n  // Can this end-user be reached, and by whose hands? A read-only preflight, so\n  // you can decide how to deliver BEFORE opening a decision and parking a run on\n  // it. Opens nothing, mints nothing, costs no quota.\n  readonly reachability: (externalId: string) => Promise<DecisionReach>\n}\n\nconst validateApiKey = (apiKey: string): void => {\n  if (!apiKey) {\n    throw new Error('API key is required. Get your API key from https://pushary.com/dashboard/settings')\n  }\n  \n  if (!apiKey.includes('.')) {\n    throw new Error('Invalid API key format. Use the full API key (pk_xxx.sk_xxx)')\n  }\n}\n\nconst createContext = (config: PusharyConfig): RequestContext => {\n  validateApiKey(config.apiKey)\n  \n  return Object.freeze({\n    baseUrl: config.baseUrl ?? DEFAULT_BASE_URL,\n    timeoutMs: config.requestTimeoutMs ?? 65_000,\n    headers: Object.freeze({\n      'Content-Type': 'application/json',\n      'Authorization': `Bearer ${config.apiKey}`,\n    }),\n  })\n}\n\nexport const createPusharyServer = (config: PusharyConfig): PusharyServer => {\n  const ctx = createContext(config)\n  const request = createRequest(ctx)\n  \n  const decisions = createDecisionsResource(request)\n\n  return Object.freeze({\n    subscribers: createSubscribersResource(request),\n    campaigns: createCampaignsResource(request),\n    templates: createTemplatesResource(request),\n    notifications: createNotificationsResource(request),\n    flows: createFlowsResource(request),\n    decisions,\n    keys: createKeysResource(request),\n    authorize: createAuthorize(request, decisions),\n    evaluateAuthorization: createEvaluateAuthorization(request),\n    consumeAuthorization: createConsumeAuthorization(request),\n    recordExecution: createRecordExecution(request),\n    enroll: (externalId: string) => request<EnrollResult>('POST', '/enroll', { externalId }),\n    reachability: (externalId: string) =>\n      request<DecisionReach>('GET', '/reachability', { externalId }),\n  })\n}\n\n","import { createHmac, timingSafeEqual } from 'crypto'\nimport type { DecisionCallback } from './types'\n\n// The header carrying the HMAC-SHA256 signature of the raw callback body.\nexport const SIGNATURE_HEADER = 'x-pushary-signature'\n\n// Verify a Pushary webhook. Pass the RAW request body (not re-serialized JSON),\n// the X-Pushary-Signature header, and your webhook secret (decisions.getWebhookSecret()).\n// Constant-time comparison; returns false on any mismatch.\nexport const verifyWebhookSignature = (\n  rawBody: string,\n  signature: string | null | undefined,\n  secret: string,\n): boolean => {\n  if (!signature || !secret) return false\n  const expected = createHmac('sha256', secret).update(rawBody).digest('hex')\n  const a = Buffer.from(expected)\n  const b = Buffer.from(signature)\n  if (a.length !== b.length) return false\n  return timingSafeEqual(a, b)\n}\n\n// Parse a verified decision callback body into a typed object. Returns null if the\n// body is not a decision callback (missing correlationId/answer). Verify the\n// signature FIRST — this does no verification. Read `answer` (canonical) keyed by\n// `correlationId`; `context` echoes what you passed at create time.\nexport const parseDecisionCallback = (rawBody: string): DecisionCallback | null => {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(rawBody)\n  } catch {\n    return null\n  }\n  if (!parsed || typeof parsed !== 'object') return null\n  const p = parsed as Record<string, unknown>\n  if (typeof p.correlationId !== 'string' || typeof p.answer !== 'string') return null\n  return {\n    correlationId: p.correlationId,\n    answer: p.answer,\n    value: typeof p.value === 'string' ? p.value : p.answer,\n    answeredAt: typeof p.answeredAt === 'string' ? p.answeredAt : '',\n    ...(typeof p.context === 'string' ? { context: p.context } : {}),\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,IAAM,kBAAN,MAAM,yBAAwB,MAAM;AAAA,EAUzC,YACE,SACA,MACA;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,OAAO,KAAK;AACjB,SAAK,OAAO,KAAK;AAGjB,WAAO,eAAe,MAAM,iBAAgB,SAAS;AAAA,EACvD;AAAA;AAAA,EAGA,IAAI,cAAuB;AACzB,WAAO,KAAK,WAAW,OAAO,KAAK,WAAW;AAAA,EAChD;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,UAAU;AAAA,EACxB;AACF;;;AC9CA,IAAM,WAAW,CAAC,SAAiB,MAAc,WAA6C;AAI5F,QAAM,MAAM,IAAI,IAAI,GAAG,OAAO,GAAG,IAAI,EAAE;AAEvC,MAAI,QAAQ;AACV,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC,YAAI,aAAa,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,IAAI,SAAS;AACtB;AAEA,IAAM,iBAAiB,OAAU,aAAmC;AAClE,MAAI,CAAC,SAAS,IAAI;AAIhB,UAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AASpD,UAAM,IAAI,gBAAgB,KAAK,WAAW,KAAK,SAAS,QAAQ,SAAS,MAAM,IAAI;AAAA,MACjF,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS;AAAA,MACrB,MAAM,KAAK;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,SAAS,KAAK;AACvB;AAEO,IAAM,gBAAgB,CAAC,QAC5B,OAAU,QAAgB,MAAc,MAAgB,YAA4D;AAClH,QAAM,QAAQ,WAAW;AACzB,QAAM,MAAM,SAAS,OACjB,SAAS,IAAI,SAAS,MAAM,IAA+B,IAC3D,GAAG,IAAI,OAAO,GAAG,IAAI;AAEzB,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC;AAAA,IACA,QAAQ,SAAS,UAAU,YAAY,QAAQ,IAAI,aAAa,IAAM;AAAA,IACtE,SAAS,IAAI;AAAA,IACb,MAAM,CAAC,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EAChD,CAAC;AAED,SAAO,eAAkB,QAAQ;AACnC;;;AC1CK,IAAM,4BAA4B,CAAC,YACxC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAuC,OAAO,gBAAgB,MAAM;AAAA,EAEtE,KAAK,CAAC,OACJ,QAAoB,OAAO,gBAAgB,EAAE,EAAE;AAAA,EAEjD,QAAQ,CAAC,IAAY,SACnB,QAAoB,SAAS,gBAAgB,EAAE,IAAI,IAAI;AAAA,EAEzD,QAAQ,CAAC,OACP,QAAc,UAAU,gBAAgB,EAAE,EAAE;AAAA,EAE9C,OAAO,MACL,QAAyB,OAAO,oBAAoB;AACxD,CAAC;;;ACXI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAAA,EAE5C,MAAM,CAAC,OACL,QAAkB,QAAQ,cAAc,EAAE,OAAO;AAAA,EAEnD,OAAO,CAAC,OACN,QAAkB,QAAQ,cAAc,EAAE,QAAQ;AAAA,EAEpD,QAAQ,CAAC,OACP,QAAkB,QAAQ,cAAc,EAAE,SAAS;AAAA,EAErD,OAAO,CAAC,OACN,QAAuB,OAAO,cAAc,EAAE,QAAQ;AAC1D,CAAC;;;ACjCI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAC9C,CAAC;;;AC3BI,IAAM,8BAA8B,CAAC,YAC1C,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,SACL,QAAoB,QAAQ,SAAS,IAAI;AAC7C,CAAC;;;ACSI,IAAM,sBAAsB,CAAC,YAClC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAiC,OAAO,UAAU,MAAM;AAAA,EAE1D,QAAQ,CAAC,SACP,QAAc,QAAQ,UAAU,IAAI;AAAA,EAEtC,KAAK,CAAC,OACJ,QAAc,OAAO,UAAU,EAAE,EAAE;AAAA,EAErC,QAAQ,CAAC,IAAY,SACnB,QAAc,SAAS,UAAU,EAAE,IAAI,IAAI;AAAA,EAE7C,QAAQ,CAAC,OACP,QAAc,UAAU,UAAU,EAAE,EAAE;AAAA,EAExC,UAAU,CAAC,OACT,QAAc,QAAQ,UAAU,EAAE,WAAW;AAAA,EAE/C,OAAO,CAAC,OACN,QAAc,QAAQ,UAAU,EAAE,QAAQ;AAC9C,CAAC;;;AC5BH,IAAAA,iBAA2B;;;ACb3B,oBAA2B;AAQpB,IAAM,mBAAmB,CAAC,cAC/B,0BAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,IAAM,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AA0B3E,IAAM,cAAmC,oBAAI,IAAI;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,aAAa,CAAC,aAIZ;AACb,MAAI,SAAS,WAAW,WAAY,QAAO;AAC3C,MAAI,SAAS,QAAQ,SAAS,SAAS,UAAW,QAAO;AACzD,SAAO,SAAS,SAAS,QAAQ,YAAY,IAAI,SAAS,MAAM,KAAK,EAAE,YAAY,CAAC;AACtF;;;ADxCA,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AA+BxB,IAAM,0BAA0B,CAAC,YAA0C;AAChF,QAAM,MAAM,OAAO,SAA0C;AAO3D,UAAM,iBAAiB,KAAK,sBAAkB,2BAAW;AAEzD,UAAM,YAAY,KAAK,IAAI,GAAG,KAAK,aAAa,sBAAsB;AAEtE,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,MAAM,WAAW,MAAM,KAAK,QAAQ,MAAM;AACxD,QAAI,KAAK,QAAQ,QAAS,OAAM;AAAA,QAC3B,MAAK,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AACjE,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,IAAI,aAAa,yBAAyB,cAAc,CAAC,GAAG,aAAa,IAAM;AAC/H,QAAI;AACF,YAAM,UAAU,MAAM,QAAwB,QAAQ,cAAc;AAAA,QAClE,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,SAAS,KAAK;AAAA,QACd,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,aAAa,KAAK;AAAA,QAClB,YAAY,KAAK;AAAA;AAAA;AAAA,QAGjB,cAAc,KAAK;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA,QACvB,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA;AAAA;AAAA,QAGvB,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAEhC,YAAM,OAAqB,QAAQ,QAAQ,KAAK,QAAQ;AACxD,UAAI,SAAyB,QAAQ;AACrC,UAAI,WAAW,QAAQ;AACvB,UAAI,QAAuB,QAAQ,SAAS;AAE5C,aAAO,WAAW,aAAa,KAAK,IAAI,IAAI,UAAU;AACpD,cAAM,cAAc,KAAK;AAAA,UACvB;AAAA,UACA,KAAK,IAAI,qBAAqB,KAAK,MAAM,WAAW,KAAK,IAAI,KAAK,GAAI,CAAC;AAAA,QACzE;AACA,YAAI;AACF,gBAAM,SAAS,MAAM,QAAkB,OAAO,cAAc,QAAQ,UAAU,IAAI;AAAA,YAChF,MAAM;AAAA,UACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAChC,mBAAS,OAAO;AAChB,qBAAW,OAAO;AAClB,kBAAQ,OAAO;AAAA,QACjB,SAAS,OAAO;AACd,cAAI,WAAW,OAAO,WAAW,CAAC,KAAK,QAAQ,QAAS;AACxD,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,aAAO;AAAA,QACL,YAAY,QAAQ;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,WAAW,EAAE,QAAQ,MAAM,MAAM,CAAC;AAAA;AAAA;AAAA,QAG5C,WAAW,QAAQ;AAAA,QACnB,mBAAmB,QAAQ;AAAA,QAC3B,aAAa,QAAQ;AAAA,MACvB;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAClB,WAAK,QAAQ,oBAAoB,SAAS,KAAK;AAAA,IACjD;AAAA,EACF;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,CAAC,SAAyB,QAAwB,QAAQ,cAAc,IAAI;AAAA,IACpF,KAAK,CAAC,IAAY,SAChB,QAAkB,OAAO,cAAc,EAAE,IAAI,MAAM,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,MAAS;AAAA,IAC3F;AAAA,IACA,QAAQ,CAAC,IAAY,WACnB,QAA8B,QAAQ,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC;AAAA,IACtE,QAAQ,CAAC,OAAe,QAA8B,UAAU,cAAc,EAAE,EAAE;AAAA,IAClF,kBAAkB,MAAM,QAAuB,OAAO,iBAAiB;AAAA,IACvE,qBAAqB,MAAM,QAAuB,QAAQ,iBAAiB;AAAA,EAC7E,CAAC;AACH;;;AE9HO,IAAM,qBAAqB,CAAC,YACjC,OAAO,OAAO;AAAA,EACZ,OAAO,CAAC,SAAwB,QAAwB,QAAQ,SAAS,IAAI;AAAA,EAC7E,MAAM,MACJ,QAA8C,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAClF,QAAQ,CAAC,cACP,QAAyB,UAAU,SAAS,mBAAmB,SAAS,CAAC,EAAE;AAC/E,CAAC;;;ACtBH,IAAM,kBAAkB,CAAC,UAAkB,eACzC,WAAW,QAAQ,GAAG,aAAa,IAAI,UAAU,KAAK,EAAE;AAKnD,IAAM,uBAAuB,CAAC,WAA6C;AAAA,EAChF,UAAU,MAAM;AAAA,EAChB,YAAY,MAAM;AAAA,EAClB,OAAO,MAAM;AAAA,EACb,aAAa,MAAM;AAAA,EACnB,YAAY,MAAM;AACpB;AAYO,IAAM,8BACX,CAAC,YACD,CAAC,UACC,QAAiC,QAAQ,cAAc;AAAA,EACrD,GAAG,qBAAqB,KAAK;AAAA,EAC7B,YAAY,MAAM;AAAA,EAClB,UAAU,MAAM;AAAA,EAChB,WAAW,MAAM;AACnB,CAAC;AAcE,IAAM,kBAAkB,CAAC,SAAoB,cAAiC;AACnF,QAAM,WAAW,4BAA4B,OAAO;AAEpD,SAAO,OAAO,UAAsD;AAClE,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,aAAa,MAAM,SAAS,KAAK;AAEvC,QAAI,WAAW,YAAY,kBAAkB;AAC3C,aAAO;AAAA,QACL,UAAU,WAAW,YAAY;AAAA,QACjC,YAAY;AAAA,QACZ,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,YAAY;AAAA,QACZ,iBAAiB,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,UAAU,IAAI;AAAA,MACjC,UAAU,MAAM,YAAY,gBAAgB,MAAM,UAAU,MAAM,UAAU;AAAA,MAC5E,MAAM;AAAA,MACN,YAAY,MAAM;AAAA,MAClB,WAAW,MAAM;AAAA,MACjB,GAAG;AAAA,MACH,WAAW,MAAM;AAAA,MACjB,kBAAkB,MAAM;AAAA,MACxB,gBAAgB,MAAM;AAAA,MACtB,kBAAkB,MAAM;AAAA,IAC1B,CAAC;AAED,WAAO;AAAA,MACL,UAAU,OAAO;AAAA,MACjB,YAAY;AAAA,MACZ,QAAQ,WAAW;AAAA,MACnB,QAAQ,OAAO,WACX,0BACA,OAAO,WACL,wBACA;AAAA,MACN,YAAY,OAAO;AAAA,MACnB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;;;ACxFA,IAAM,WAAqC;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,mBAAoD,CAAC,WAAW,aAAa,QAAQ;AAM3F,IAAM,YAAY,CAAC,UAAsD;AACvE,MAAI,EAAE,iBAAiB,iBAAkB,QAAO;AAChD,QAAM,OAAO,MAAM;AACnB,QAAM,UAAU,MAAM;AACtB,MAAI,OAAO,YAAY,YAAY,CAAC,SAAS,SAAS,OAAwB,EAAG,QAAO;AACxF,QAAM,QAAQ,MAAM;AACpB,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,GAAI,OAAO,UAAU,YAAY,iBAAiB,SAAS,KAA6B,IACpF,EAAE,gBAAgB,MAA8B,IAChD,CAAC;AAAA,EACP;AACF;AAcO,IAAM,6BACX,CAAC,YACD,OAAO,YAAuE;AAC5E,MAAI;AACF,UAAM,SAAS,MAAM,QAA+B,QAAQ,2BAA2B;AAAA,MACrF,iBAAiB,QAAQ;AAAA,MACzB,UAAU,QAAQ;AAAA,MAClB,YAAY,QAAQ;AAAA,MACpB,OAAO,QAAQ;AAAA,MACf,aAAa,QAAQ;AAAA,MACrB,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,WAAO,EAAE,UAAU,MAAM,OAAO;AAAA,EAClC,SAAS,OAAO;AACd,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAS,QAAO;AACpB,UAAM;AAAA,EACR;AACF;AASK,IAAM,wBACX,CAAC,YACD,CAAC,YACC,QAAQ,QAAQ,mBAAmB,mBAAmB,QAAQ,QAAQ,CAAC,YAAY;AAAA,EACjF,SAAS,QAAQ;AAAA,EACjB,SAAS,QAAQ;AACnB,CAAC;;;AC7DL,IAAM,mBAAmB;AAmCzB,IAAM,iBAAiB,CAAC,WAAyB;AAC/C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AAEA,MAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACF;AAEA,IAAM,gBAAgB,CAAC,WAA0C;AAC/D,iBAAe,OAAO,MAAM;AAE5B,SAAO,OAAO,OAAO;AAAA,IACnB,SAAS,OAAO,WAAW;AAAA,IAC3B,WAAW,OAAO,oBAAoB;AAAA,IACtC,SAAS,OAAO,OAAO;AAAA,MACrB,gBAAgB;AAAA,MAChB,iBAAiB,UAAU,OAAO,MAAM;AAAA,IAC1C,CAAC;AAAA,EACH,CAAC;AACH;AAEO,IAAM,sBAAsB,CAAC,WAAyC;AAC3E,QAAM,MAAM,cAAc,MAAM;AAChC,QAAM,UAAU,cAAc,GAAG;AAEjC,QAAM,YAAY,wBAAwB,OAAO;AAEjD,SAAO,OAAO,OAAO;AAAA,IACnB,aAAa,0BAA0B,OAAO;AAAA,IAC9C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,eAAe,4BAA4B,OAAO;AAAA,IAClD,OAAO,oBAAoB,OAAO;AAAA,IAClC;AAAA,IACA,MAAM,mBAAmB,OAAO;AAAA,IAChC,WAAW,gBAAgB,SAAS,SAAS;AAAA,IAC7C,uBAAuB,4BAA4B,OAAO;AAAA,IAC1D,sBAAsB,2BAA2B,OAAO;AAAA,IACxD,iBAAiB,sBAAsB,OAAO;AAAA,IAC9C,QAAQ,CAAC,eAAuB,QAAsB,QAAQ,WAAW,EAAE,WAAW,CAAC;AAAA,IACvF,cAAc,CAAC,eACb,QAAuB,OAAO,iBAAiB,EAAE,WAAW,CAAC;AAAA,EACjE,CAAC;AACH;;;ACzGA,IAAAC,iBAA4C;AAIrC,IAAM,mBAAmB;AAKzB,IAAM,yBAAyB,CACpC,SACA,WACA,WACY;AACZ,MAAI,CAAC,aAAa,CAAC,OAAQ,QAAO;AAClC,QAAM,eAAW,2BAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC1E,QAAM,IAAI,OAAO,KAAK,QAAQ;AAC9B,QAAM,IAAI,OAAO,KAAK,SAAS;AAC/B,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAO,gCAAgB,GAAG,CAAC;AAC7B;AAMO,IAAM,wBAAwB,CAAC,YAA6C;AACjF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,EAAE,WAAW,SAAU,QAAO;AAChF,SAAO;AAAA,IACL,eAAe,EAAE;AAAA,IACjB,QAAQ,EAAE;AAAA,IACV,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,EAAE;AAAA,IACjD,YAAY,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,IAC9D,GAAI,OAAO,EAAE,YAAY,WAAW,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChE;AACF;","names":["import_crypto","import_crypto"]}
+{"version":3,"sources":["../src/index.ts","../src/error.ts","../src/request.ts","../src/resources/subscribers.ts","../src/resources/campaigns.ts","../src/resources/templates.ts","../src/resources/notifications.ts","../src/resources/flows.ts","../src/resources/decisions.ts","../src/util.ts","../src/resources/keys.ts","../src/authorize.ts","../src/permits.ts","../src/client.ts","../src/webhook.ts"],"sourcesContent":["export { createPusharyServer, type PusharyServer } from './client'\n\nexport { PusharyApiError } from './error'\n\nexport type {\n  PusharyConfig,\n  Subscriber,\n  SubscriberListParams,\n  UpdateSubscriber,\n  SubscriberCount,\n  Campaign,\n  CreateCampaign,\n  UpdateCampaign,\n  CampaignStats,\n  Template,\n  CreateTemplate,\n  UpdateTemplate,\n  SendNotification,\n  SendResult,\n  Flow,\n  CreateFlow,\n  UpdateFlow,\n  FlowListParams,\n  FlowTriggerType,\n  FlowStepType,\n  FlowStatus,\n  FlowStep,\n  FlowStepConfig,\n  FlowStepInput,\n  ListParams,\n  PaginatedResponse,\n  DecisionType,\n  DecisionStatus,\n  DecisionSubject,\n  DecisionDeliverability,\n  DecisionReach,\n  DecisionParameters,\n  ActionPresentation,\n  PresentedChange,\n  PresentedFormat,\n  SandboxOutcome,\n  AuthorizationVerdict,\n  AuthorizationQuery,\n  AuthorizeRequest,\n  AuthorizeResult,\n  AuthorizationEvaluation,\n  AuthorizationBinding,\n  AuthorizationAuthority,\n  ConsumedAuthorization,\n  ConsumeAuthorizationResult,\n  ExecutionOutcome,\n  ExecutionReceipt,\n  PermitRefusal,\n  PermitExecutionState,\n  CreateDecision,\n  DecisionReachability,\n  DecisionResult,\n  Decision,\n  ListedDecision,\n  DecisionList,\n  DecisionListOptions,\n  DecisionAnswerResult,\n  CancelDecisionResult,\n  DecisionCallback,\n  WebhookSecret,\n  EnrollResult,\n  AskDecision,\n  AskResult,\n  IssueBoundKey,\n  BoundKeyResult,\n  BoundKeySummary,\n  RevokeKeyResult,\n} from './types'\n\nexport type { SubscribersResource } from './resources/subscribers'\nexport type { CampaignsResource } from './resources/campaigns'\nexport type { TemplatesResource } from './resources/templates'\nexport type { NotificationsResource } from './resources/notifications'\nexport type { FlowsResource } from './resources/flows'\nexport type { DecisionsResource } from './resources/decisions'\nexport type { KeysResource } from './resources/keys'\n\nexport { verifyWebhookSignature, parseDecisionCallback, SIGNATURE_HEADER } from './webhook'\n\nexport { deterministicKey, isApproved } from './util'\n\n","/**\n * Thrown for any non-2xx response from the API.\n *\n * Extends Error rather than replacing it, so every existing `catch (e)` that\n * reads `e.message` keeps working unchanged. What it adds is the thing callers\n * previously had to string-match the message for: an HTTP status they can branch\n * on. Telling a revoked key (401) apart from a plan limit (403), a bad argument\n * (400) and an outage (5xx) is the difference between \"stop and re-authenticate\"\n * and \"retry in a minute\", and message text is not a stable API to decide that on.\n */\nexport class PusharyApiError extends Error {\n  /** HTTP status of the response that failed. */\n  readonly status: number\n  /** HTTP status text, when the runtime provides one. */\n  readonly statusText: string\n  /** The API's own machine-readable error code, when it sent one. */\n  readonly code?: string\n  /** The parsed response body, for anything the fields above do not cover. */\n  readonly body?: unknown\n\n  constructor(\n    message: string,\n    init: { status: number; statusText?: string; code?: string; body?: unknown }\n  ) {\n    super(message)\n    this.name = 'PusharyApiError'\n    this.status = init.status\n    this.statusText = init.statusText ?? ''\n    this.code = init.code\n    this.body = init.body\n    // Restores the prototype chain so `err instanceof PusharyApiError` holds\n    // even when this package is consumed as ES5-targeted CommonJS.\n    Object.setPrototypeOf(this, PusharyApiError.prototype)\n  }\n\n  /** The key is missing, malformed, or revoked. Re-authenticate; do not retry. */\n  get isAuthError(): boolean {\n    return this.status === 401 || this.status === 403\n  }\n\n  /** Rate limited. Back off and retry. */\n  get isRateLimited(): boolean {\n    return this.status === 429\n  }\n\n  /** Server-side fault. Safe to retry an idempotent call. */\n  get isServerError(): boolean {\n    return this.status >= 500\n  }\n}\n","import type { RequestContext, RequestFn } from './types'\nimport { PusharyApiError } from './error'\n\nconst buildUrl = (baseUrl: string, path: string, params?: Record<string, unknown>): string => {\n  // Build from the full absolute URL so the base path (e.g. /api/v1/server) is\n  // preserved. `new URL(path, baseUrl)` treats a leading-slash path as absolute\n  // and would drop that prefix, sending GET-with-query calls to the wrong URL.\n  const url = new URL(`${baseUrl}${path}`)\n\n  if (params) {\n    Object.entries(params).forEach(([key, value]) => {\n      if (value !== undefined && value !== null) {\n        url.searchParams.set(key, String(value))\n      }\n    })\n  }\n  \n  return url.toString()\n}\n\nconst handleResponse = async <T>(response: Response): Promise<T> => {\n  if (!response.ok) {\n    // The API returns its reason under `error`; older paths use `message`. Read\n    // both so callers get the real reason (e.g. \"No subscribers found\") instead\n    // of a bare \"HTTP 400\" they cannot classify.\n    const body = (await response.json().catch(() => ({}))) as {\n      message?: string\n      error?: string\n      code?: string\n    }\n    // PusharyApiError extends Error, so an existing `catch (e) { e.message }`\n    // is unaffected. It carries the status too, because the reason to branch on\n    // a failure (re-authenticate vs back off vs retry) was previously only\n    // recoverable by string-matching this message, which is not a stable API.\n    throw new PusharyApiError(body.message || body.error || `HTTP ${response.status}`, {\n      status: response.status,\n      statusText: response.statusText,\n      code: body.code,\n      body,\n    })\n  }\n  return response.json() as Promise<T>\n}\n\nexport const createRequest = (ctx: RequestContext): RequestFn =>\n  async <T>(method: string, path: string, body?: unknown, options?: { readonly signal?: AbortSignal }): Promise<T> => {\n    const isGet = method === 'GET'\n    const url = isGet && body \n      ? buildUrl(ctx.baseUrl, path, body as Record<string, unknown>)\n      : `${ctx.baseUrl}${path}`\n    \n    const response = await fetch(url, {\n      method,\n      signal: options?.signal ?? AbortSignal.timeout(ctx.timeoutMs ?? 65_000),\n      headers: ctx.headers,\n      body: !isGet && body ? JSON.stringify(body) : undefined,\n    })\n    \n    return handleResponse<T>(response)\n  }\n\n","import type {\n  RequestFn,\n  Subscriber,\n  SubscriberListParams,\n  UpdateSubscriber,\n  PaginatedResponse,\n  SubscriberCount,\n} from '../types'\n\nexport interface SubscribersResource {\n  readonly list: (params?: SubscriberListParams) => Promise<PaginatedResponse<Subscriber>>\n  readonly get: (id: string) => Promise<Subscriber>\n  readonly update: (id: string, data: UpdateSubscriber) => Promise<Subscriber>\n  readonly delete: (id: string) => Promise<void>\n  readonly count: () => Promise<SubscriberCount>\n}\n\nexport const createSubscribersResource = (request: RequestFn): SubscribersResource =>\n  Object.freeze({\n    list: (params?: SubscriberListParams) =>\n      request<PaginatedResponse<Subscriber>>('GET', '/subscribers', params),\n    \n    get: (id: string) =>\n      request<Subscriber>('GET', `/subscribers/${id}`),\n    \n    update: (id: string, data: UpdateSubscriber) =>\n      request<Subscriber>('PATCH', `/subscribers/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/subscribers/${id}`),\n    \n    count: () =>\n      request<SubscriberCount>('GET', '/subscribers/count'),\n  })\n\n","import type {\n  RequestFn,\n  Campaign,\n  CreateCampaign,\n  UpdateCampaign,\n  ListParams,\n  PaginatedResponse,\n  CampaignStats,\n} from '../types'\n\nexport interface CampaignsResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Campaign>>\n  readonly create: (data: CreateCampaign) => Promise<Campaign>\n  readonly get: (id: string) => Promise<Campaign>\n  readonly update: (id: string, data: UpdateCampaign) => Promise<Campaign>\n  readonly delete: (id: string) => Promise<void>\n  readonly send: (id: string) => Promise<Campaign>\n  readonly pause: (id: string) => Promise<Campaign>\n  readonly resume: (id: string) => Promise<Campaign>\n  readonly stats: (id: string) => Promise<CampaignStats>\n}\n\nexport const createCampaignsResource = (request: RequestFn): CampaignsResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Campaign>>('GET', '/campaigns', params),\n    \n    create: (data: CreateCampaign) =>\n      request<Campaign>('POST', '/campaigns', data),\n    \n    get: (id: string) =>\n      request<Campaign>('GET', `/campaigns/${id}`),\n    \n    update: (id: string, data: UpdateCampaign) =>\n      request<Campaign>('PATCH', `/campaigns/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/campaigns/${id}`),\n    \n    send: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/send`),\n    \n    pause: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/pause`),\n    \n    resume: (id: string) =>\n      request<Campaign>('POST', `/campaigns/${id}/resume`),\n    \n    stats: (id: string) =>\n      request<CampaignStats>('GET', `/campaigns/${id}/stats`),\n  })\n\n","import type {\n  RequestFn,\n  Template,\n  CreateTemplate,\n  UpdateTemplate,\n  ListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface TemplatesResource {\n  readonly list: (params?: ListParams) => Promise<PaginatedResponse<Template>>\n  readonly create: (data: CreateTemplate) => Promise<Template>\n  readonly get: (id: string) => Promise<Template>\n  readonly update: (id: string, data: UpdateTemplate) => Promise<Template>\n  readonly delete: (id: string) => Promise<void>\n}\n\nexport const createTemplatesResource = (request: RequestFn): TemplatesResource =>\n  Object.freeze({\n    list: (params?: ListParams) =>\n      request<PaginatedResponse<Template>>('GET', '/templates', params),\n    \n    create: (data: CreateTemplate) =>\n      request<Template>('POST', '/templates', data),\n    \n    get: (id: string) =>\n      request<Template>('GET', `/templates/${id}`),\n    \n    update: (id: string, data: UpdateTemplate) =>\n      request<Template>('PATCH', `/templates/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/templates/${id}`),\n  })\n\n","import type { RequestFn, SendNotification, SendResult } from '../types'\n\nexport interface NotificationsResource {\n  readonly send: (data: SendNotification) => Promise<SendResult>\n}\n\nexport const createNotificationsResource = (request: RequestFn): NotificationsResource =>\n  Object.freeze({\n    send: (data: SendNotification) =>\n      request<SendResult>('POST', '/send', data),\n  })\n\n","import type {\n  RequestFn,\n  Flow,\n  CreateFlow,\n  UpdateFlow,\n  FlowListParams,\n  PaginatedResponse,\n} from '../types'\n\nexport interface FlowsResource {\n  readonly list: (params?: FlowListParams) => Promise<PaginatedResponse<Flow>>\n  readonly create: (data: CreateFlow) => Promise<Flow>\n  readonly get: (id: string) => Promise<Flow>\n  readonly update: (id: string, data: UpdateFlow) => Promise<Flow>\n  readonly delete: (id: string) => Promise<void>\n  readonly activate: (id: string) => Promise<Flow>\n  readonly pause: (id: string) => Promise<Flow>\n}\n\nexport const createFlowsResource = (request: RequestFn): FlowsResource =>\n  Object.freeze({\n    list: (params?: FlowListParams) =>\n      request<PaginatedResponse<Flow>>('GET', '/flows', params),\n    \n    create: (data: CreateFlow) =>\n      request<Flow>('POST', '/flows', data),\n    \n    get: (id: string) =>\n      request<Flow>('GET', `/flows/${id}`),\n    \n    update: (id: string, data: UpdateFlow) =>\n      request<Flow>('PATCH', `/flows/${id}`, data),\n    \n    delete: (id: string) =>\n      request<void>('DELETE', `/flows/${id}`),\n    \n    activate: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/activate`),\n    \n    pause: (id: string) =>\n      request<Flow>('POST', `/flows/${id}/pause`),\n  })\n","import type {\n  RequestFn,\n  CreateDecision,\n  DecisionResult,\n  Decision,\n  DecisionList,\n  DecisionListOptions,\n  DecisionAnswerResult,\n  CancelDecisionResult,\n  WebhookSecret,\n  AskDecision,\n  AskResult,\n  DecisionType,\n  DecisionStatus,\n} from '../types'\nimport { randomUUID } from 'crypto'\nimport { isApproved } from '../util'\n\n// A single long-poll window. The server clamps GET ?wait to 55s, so ask() loops\n// windows of this size until the decision resolves or the caller deadline passes.\nconst POLL_WINDOW_SECONDS = 50\nconst DEFAULT_ASK_TIMEOUT_MS = 55_000\n\n// Human-in-the-loop decisions: ask a specific end-user to approve, then resume\n// on their answer via webhook or poll. See the Partner integration guide.\nexport interface DecisionsResource {\n  // Create a decision. Defaults to async (returns immediately with a decisionId);\n  // pass wait:true to block up to ~55s for a fast answer. Always pass\n  // idempotencyKey so a retried call does not ask the same human twice.\n  readonly create: (data: CreateDecision) => Promise<DecisionResult>\n  // Poll for the outcome. opts.wait long-polls up to N seconds. Reads durably, so\n  // it still resolves after the live window closes.\n  readonly get: (id: string, opts?: { readonly wait?: number }) => Promise<Decision>\n  readonly list: (opts?: DecisionListOptions) => Promise<DecisionList>\n  // Create a decision and block until the human answers or the deadline passes,\n  // polling durably (so a crashed/resumed process still gets the answer). Returns\n  // a fail-closed `approved` flag. Default deadline 55s (serverless-safe); the\n  // decision stays answerable for its full TTL, so an {answered:false} return is\n  // resolvable later via get() or a callbackUrl. This is the one call most agents\n  // need. Each call reaches the human: without an idempotencyKey a fresh unique\n  // key is generated per call, so two asks with the same text never collapse into\n  // one silent auto-approval. Pass your own stable idempotencyKey (tied to your\n  // operation id) only when you WANT a retried call to dedupe.\n  readonly ask: (data: AskDecision) => Promise<AskResult>\n  // Relay the end-user's answer from your own authenticated app (delegated auth).\n  readonly answer: (id: string, answer: string) => Promise<DecisionAnswerResult>\n  readonly cancel: (id: string) => Promise<CancelDecisionResult>\n  // Your webhook signing secret (created on first call). Verify callbacks with\n  // verifyWebhookSignature(rawBody, header, secret).\n  readonly getWebhookSecret: () => Promise<WebhookSecret>\n  readonly rotateWebhookSecret: () => Promise<WebhookSecret>\n}\n\nexport const createDecisionsResource = (request: RequestFn): DecisionsResource => {\n  const ask = async (data: AskDecision): Promise<AskResult> => {\n    // Idempotency is caller intent, never inferred from content: two asks with the\n    // same text are usually two distinct decisions, so a content hash would make\n    // the second silently replay the first answer (auto-approving a second refund,\n    // or blocking a re-ask for the server's whole idempotency window). Default to a\n    // unique key per call so every ask reaches the human; callers wanting retry\n    // dedup pass their own stable key tied to their operation.\n    const idempotencyKey = data.idempotencyKey ?? randomUUID()\n\n    const timeoutMs = Math.max(0, data.timeoutMs ?? DEFAULT_ASK_TIMEOUT_MS)\n    // Zero retains the create-only API. Positive budgets include creation and polling.\n    const deadline = Date.now() + timeoutMs\n    const controller = new AbortController()\n    const abort = () => controller.abort(data.signal?.reason)\n    if (data.signal?.aborted) abort()\n    else data.signal?.addEventListener('abort', abort, { once: true })\n    const timer = setTimeout(() => controller.abort(new DOMException('Pushary ask timed out', 'TimeoutError')), timeoutMs || 65_000)\n    try {\n      const created = await request<DecisionResult>('POST', '/decisions', {\n        question: data.question,\n        type: data.type,\n        options: data.options,\n        externalId: data.externalId,\n        email: data.email,\n        agentName: data.agentName,\n        context: data.context,\n        placeholder: data.placeholder,\n        toolName: data.toolName,\n        toolTarget: data.toolTarget,\n        actor: data.actor,\n        environment: data.environment,\n        parameters: data.parameters,\n        // Its changes name parameters rather than carrying values, so what the\n        // person sees is read from the same numbers a rule compares.\n        presentation: data.presentation,\n        approvalUrl: data.approvalUrl,\n        expiresInSeconds: data.expiresInSeconds,\n        poweredBy: data.poweredBy,\n        callbackUrl: data.callbackUrl,\n        requireReachable: data.requireReachable,\n        // Read only by a key issued on your workspace's sandbox site, where the\n        // simulator answers instead of a person. Ignored in production.\n        sandboxOutcome: data.sandboxOutcome,\n        idempotencyKey,\n        wait: false,\n      }, { signal: controller.signal })\n\n      const type: DecisionType = created.type ?? data.type ?? 'confirm'\n      let status: DecisionStatus = created.status\n      let answered = created.answered\n      let value: string | null = created.value ?? null\n\n      while (status === 'pending' && Date.now() < deadline) {\n        const waitSeconds = Math.max(\n          1,\n          Math.min(POLL_WINDOW_SECONDS, Math.ceil((deadline - Date.now()) / 1000)),\n        )\n        try {\n          const polled = await request<Decision>('GET', `/decisions/${created.decisionId}`, {\n            wait: waitSeconds,\n          }, { signal: controller.signal })\n          status = polled.status\n          answered = polled.answered\n          value = polled.value\n        } catch (error) {\n          if (controller.signal.aborted && !data.signal?.aborted) break\n          throw error\n        }\n      }\n\n      return {\n        decisionId: created.decisionId,\n        status,\n        answered,\n        value,\n        type,\n        approved: isApproved({ status, type, value }),\n        // Surfaced from the create response so a caller can tell an unanswered\n        // decision that reached nobody (reachable:false) apart from a real decline.\n        reachable: created.reachable,\n        reachableChannels: created.reachableChannels,\n        deviceCount: created.deviceCount,\n      }\n    } finally {\n      clearTimeout(timer)\n      data.signal?.removeEventListener('abort', abort)\n    }\n  }\n\n  return Object.freeze({\n    create: (data: CreateDecision) => request<DecisionResult>('POST', '/decisions', data),\n    get: (id: string, opts?: { readonly wait?: number }) =>\n      request<Decision>('GET', `/decisions/${id}`, opts?.wait ? { wait: opts.wait } : undefined),\n    list: (opts?: DecisionListOptions) =>\n      request<DecisionList>('GET', '/decisions', opts ? { ...opts } : undefined),\n    ask,\n    answer: (id: string, answer: string) =>\n      request<DecisionAnswerResult>('POST', `/decisions/${id}`, { answer }),\n    cancel: (id: string) => request<CancelDecisionResult>('DELETE', `/decisions/${id}`),\n    getWebhookSecret: () => request<WebhookSecret>('GET', '/webhook-secret'),\n    rotateWebhookSecret: () => request<WebhookSecret>('POST', '/webhook-secret'),\n  })\n}\n","import { createHash } from 'crypto'\nimport type { DecisionStatus, DecisionType } from './types'\n\n// A collision-safe idempotency key that is STABLE across process restarts\n// (unlike the builtin salted hash()), so a retried create reuses the same key\n// and never asks the same human twice. Pass the parts that make the ask unique\n// (e.g. [externalId, stepId, question]). Parts are joined with a NUL separator\n// so ['a', 'bc'] and ['ab', 'c'] never collide.\nexport const deterministicKey = (parts: readonly string[]): string =>\n  createHash('sha256').update(parts.join('\\x00')).digest('hex').slice(0, 40)\n\nexport const decisionFingerprint = (value: unknown): string => {\n  const ancestors = new Set<object>()\n  const serialize = (item: unknown): string => {\n    if (item === null || typeof item === 'string' || typeof item === 'boolean') return JSON.stringify(item)\n    if (typeof item === 'number' && Number.isFinite(item)) return JSON.stringify(item)\n    if (typeof item !== 'object' || ancestors.has(item)) {\n      throw new TypeError('Pushary: decision identity must contain finite, acyclic JSON values.')\n    }\n    if (!Array.isArray(item) && Object.getPrototypeOf(item) !== Object.prototype && Object.getPrototypeOf(item) !== null) {\n      throw new TypeError('Pushary: decision identity must contain plain JSON objects.')\n    }\n    ancestors.add(item)\n    const entries = Object.entries(item)\n      .filter(([, entry]) => entry !== undefined)\n      .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)\n    const serialized = Array.isArray(item)\n      ? `[${Array.from(item, serialize).join(',')}]`\n      : `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${serialize(entry)}`).join(',')}}`\n    ancestors.delete(item)\n    return serialized\n  }\n  return createHash('sha256').update(serialize(value)).digest('hex')\n}\n\nconst AFFIRMATIVE: ReadonlySet<string> = new Set([\n  'yes',\n  'y',\n  'approve',\n  'approved',\n  'ok',\n  'okay',\n  'confirm',\n  'accept',\n  'true',\n])\n\n// Fail-closed approval check. A `confirm` decision is approved ONLY on an\n// affirmative answer; `select`/`input` decisions are \"approved\" once answered.\n// Anything not answered — pending, expired, or cancelled — is NOT approved.\nexport const isApproved = (decision: {\n  readonly status: DecisionStatus\n  readonly type?: DecisionType\n  readonly value: string | null\n}): boolean => {\n  if (decision.status !== 'answered') return false\n  if (decision.type && decision.type !== 'confirm') return true\n  return decision.value != null && AFFIRMATIVE.has(decision.value.trim().toLowerCase())\n}\n","import type {\n  RequestFn,\n  IssueBoundKey,\n  BoundKeyResult,\n  BoundKeySummary,\n  RevokeKeyResult,\n} from '../types'\n\n// Per-end-user (bound) key issuance for multi-tenant Partners. Call issue() from\n// your backend with your own (unbound, Partner-plan) key to mint a child key bound\n// to one end-user, hand that key to the agent runtime acting for that user, then\n// revoke() it when the session ends. A bound key can only create/resolve decisions\n// and enroll that exact end-user, so a prompt-injected agent can never reach\n// another of your users. Requires the Partner plan.\nexport interface KeysResource {\n  // Mint a key bound to externalId. The full key is returned once in `apiKey` and\n  // cannot be retrieved again — store it as the session credential.\n  readonly issue: (data: IssueBoundKey) => Promise<BoundKeyResult>\n  // List this site's bound keys (never the secret) for audit/rotation.\n  readonly list: () => Promise<readonly BoundKeySummary[]>\n  // Revoke (deactivate) a bound key by its prefix. Returns revoked:false if the\n  // prefix is unknown or already inactive.\n  readonly revoke: (keyPrefix: string) => Promise<RevokeKeyResult>\n}\n\nexport const createKeysResource = (request: RequestFn): KeysResource =>\n  Object.freeze({\n    issue: (data: IssueBoundKey) => request<BoundKeyResult>('POST', '/keys', data),\n    list: () =>\n      request<{ keys: readonly BoundKeySummary[] }>('GET', '/keys').then((r) => r.keys),\n    revoke: (keyPrefix: string) =>\n      request<RevokeKeyResult>('DELETE', `/keys/${encodeURIComponent(keyPrefix)}`),\n  })\n","import type {\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  AuthorizeRequest,\n  AuthorizeResult,\n  DecisionSubject,\n  RequestFn,\n} from './types'\nimport type { DecisionsResource } from './resources/decisions'\n\nconst defaultQuestion = (toolName: string, toolTarget?: string): string =>\n  `Approve ${toolName}${toolTarget ? ` ${toolTarget}` : ''}?`\n\n// The evaluation and the ask must describe the same action. Built once so a field\n// added to the subject cannot reach one call and not the other, which would let a\n// decision be recorded under a different description than the one policy saw.\nexport const authorizationSubject = (input: DecisionSubject): DecisionSubject => ({\n  toolName: input.toolName,\n  toolTarget: input.toolTarget,\n  actor: input.actor,\n  environment: input.environment,\n  parameters: input.parameters,\n})\n\n/**\n * The raw boundary: what the site's policy says about one action, with nobody\n * paged and no decision opened.\n *\n * Exported separately from {@link createAuthorize} because a caller that owns its\n * own escalation — the adapter gate, or a custom harness with its own approval\n * surface — needs to tell \"policy had no opinion\" apart from \"the ask failed\".\n * Composing the two calls hides that difference, and the two failures want\n * opposite handling.\n */\nexport const createEvaluateAuthorization =\n  (request: RequestFn) =>\n  (input: AuthorizationQuery): Promise<AuthorizationEvaluation> =>\n    request<AuthorizationEvaluation>('POST', '/authorize', {\n      ...authorizationSubject(input),\n      externalId: input.externalId,\n      question: input.question,\n      agentName: input.agentName,\n    })\n\n/**\n * Ask policy first, and a person only if policy defers.\n *\n * Two calls rather than one server round trip on purpose. POST /authorize\n * evaluates and nothing else, so every limit, reachability check and delivery\n * rung stays in the one path that already owns them, and this composes the two.\n * The extra hop only happens when a human is needed, where it is lost in the\n * time that person takes to answer.\n *\n * Fail-closed throughout: a denial and an unanswered ask both return\n * approved: false, and the reason says which it was.\n */\nexport const createAuthorize = (request: RequestFn, decisions: DecisionsResource) => {\n  const evaluate = createEvaluateAuthorization(request)\n\n  return async (input: AuthorizeRequest): Promise<AuthorizeResult> => {\n    const subject = authorizationSubject(input)\n    const evaluation = await evaluate(input)\n\n    if (evaluation.verdict !== 'requires_human') {\n      return {\n        approved: evaluation.verdict === 'allow',\n        resolvedBy: 'policy',\n        policy: evaluation.policy,\n        reason: evaluation.reason,\n        decisionId: null,\n        authorizationId: evaluation.authorizationId,\n      }\n    }\n\n    const answer = await decisions.ask({\n      question: input.question ?? defaultQuestion(input.toolName, input.toolTarget),\n      type: 'confirm',\n      externalId: input.externalId,\n      agentName: input.agentName,\n      ...subject,\n      timeoutMs: input.timeoutMs,\n      expiresInSeconds: input.expiresInSeconds,\n      idempotencyKey: input.idempotencyKey,\n      requireReachable: input.requireReachable,\n    })\n\n    return {\n      approved: answer.approved,\n      resolvedBy: 'human',\n      policy: evaluation.policy,\n      reason: answer.approved\n        ? 'A person approved it.'\n        : answer.answered\n          ? 'A person denied it.'\n          : 'Nobody answered, so this was not approved.',\n      decisionId: answer.decisionId,\n      authorizationId: null,\n    }\n  }\n}\n","import { PusharyApiError } from './error'\nimport type {\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ConsumedAuthorization,\n  ExecutionReceipt,\n  PermitExecutionState,\n  PermitRefusal,\n  RequestFn,\n} from './types'\n\nconst REFUSALS: readonly PermitRefusal[] = [\n  'not_authorized',\n  'action_mismatch',\n  'expired',\n  'already_consumed',\n]\n\nconst EXECUTION_STATES: readonly PermitExecutionState[] = ['running', 'succeeded', 'failed']\n\n// A refusal is an answer, not a failure: the server looked, and said no. A\n// transport error is neither, and must not be dressed up as one — a caller that\n// reads \"already consumed\" stops, and a caller that reads a network error may\n// try again. Only a body the server actually sent gets read as a refusal.\nconst refusalOf = (error: unknown): ConsumeAuthorizationResult | null => {\n  if (!(error instanceof PusharyApiError)) return null\n  const body = error.body as { refusal?: unknown; executionState?: unknown } | undefined\n  const refusal = body?.refusal\n  if (typeof refusal !== 'string' || !REFUSALS.includes(refusal as PermitRefusal)) return null\n  const state = body?.executionState\n  return {\n    consumed: false,\n    refusal: refusal as PermitRefusal,\n    reason: error.message,\n    ...(typeof state === 'string' && EXECUTION_STATES.includes(state as PermitExecutionState)\n      ? { executionState: state as PermitExecutionState }\n      : {}),\n  }\n}\n\n/**\n * Spend one settled authorization, at most once.\n *\n * Re-states the action about to run. That is the point: the server digests what\n * you claim and what it recorded, and refuses unless they are the same action.\n * An amount changed between the approval and the execution does not fail a check\n * that could be skipped — it simply has no permit.\n *\n * Refusals come back as `consumed: false` with a machine-readable reason.\n * Anything else throws, because \"the network was down\" is not \"you may not do\n * this\", and a caller that cannot tell them apart will eventually guess wrong.\n */\nexport const createConsumeAuthorization =\n  (request: RequestFn) =>\n  async (binding: AuthorizationBinding): Promise<ConsumeAuthorizationResult> => {\n    try {\n      const permit = await request<ConsumedAuthorization>('POST', '/authorizations/consume', {\n        authorizationId: binding.authorizationId,\n        toolName: binding.toolName,\n        toolTarget: binding.toolTarget,\n        actor: binding.actor,\n        environment: binding.environment,\n        externalId: binding.externalId,\n        parameters: binding.parameters,\n      })\n      return { consumed: true, permit }\n    } catch (error) {\n      const refused = refusalOf(error)\n      if (refused) return refused\n      throw error\n    }\n  }\n\n/**\n * Say what the authorized action did.\n *\n * The evidence half. \"Was this allowed\" and \"did this happen\" are different\n * questions, and only the second one answers a customer asking where their\n * refund is. The first report wins; a late duplicate cannot rewrite it.\n */\nexport const createRecordExecution =\n  (request: RequestFn) =>\n  (receipt: ExecutionReceipt): Promise<{ readonly executionState: PermitExecutionState }> =>\n    request('POST', `/authorizations/${encodeURIComponent(receipt.permitId)}/receipt`, {\n      outcome: receipt.outcome,\n      summary: receipt.summary,\n    })\n","import type {\n  PusharyConfig,\n  RequestContext,\n  EnrollResult,\n  AuthorizationEvaluation,\n  AuthorizationQuery,\n  DecisionReach,\n  AuthorizeRequest,\n  AuthorizeResult,\n  AuthorizationBinding,\n  ConsumeAuthorizationResult,\n  ExecutionReceipt,\n  PermitExecutionState,\n} from './types'\nimport { createRequest } from './request'\nimport { createSubscribersResource, type SubscribersResource } from './resources/subscribers'\nimport { createCampaignsResource, type CampaignsResource } from './resources/campaigns'\nimport { createTemplatesResource, type TemplatesResource } from './resources/templates'\nimport { createNotificationsResource, type NotificationsResource } from './resources/notifications'\nimport { createFlowsResource, type FlowsResource } from './resources/flows'\nimport { createDecisionsResource, type DecisionsResource } from './resources/decisions'\nimport { createKeysResource, type KeysResource } from './resources/keys'\nimport { createAuthorize, createEvaluateAuthorization } from './authorize'\nimport { createConsumeAuthorization, createRecordExecution } from './permits'\n\nconst DEFAULT_BASE_URL = 'https://pushary.com/api/v1/server'\n\nexport interface PusharyServer {\n  readonly subscribers: SubscribersResource\n  readonly campaigns: CampaignsResource\n  readonly templates: TemplatesResource\n  readonly notifications: NotificationsResource\n  readonly flows: FlowsResource\n  readonly decisions: DecisionsResource\n  // Mint/rotate per-end-user bound keys for multi-tenant Partner integrations.\n  readonly keys: KeysResource\n  // Ask policy whether one action may proceed, and a person only if policy\n  // defers. allow and deny come back without anyone being paged. Requires the\n  // Partner plan.\n  readonly authorize: (input: AuthorizeRequest) => Promise<AuthorizeResult>\n  // The verdict alone, with no decision opened and nobody paged. For a caller\n  // that owns its own escalation and needs to tell \"policy deferred\" apart from\n  // \"the ask failed\", which `authorize` folds together. Requires the Partner plan.\n  readonly evaluateAuthorization: (input: AuthorizationQuery) => Promise<AuthorizationEvaluation>\n  // Spend one settled authorization, at most once. Re-state the action you are\n  // about to run: the server refuses unless it is the action that was approved.\n  // Requires the Partner plan.\n  readonly consumeAuthorization: (binding: AuthorizationBinding) => Promise<ConsumeAuthorizationResult>\n  // Say what the authorized action did. The first report wins.\n  readonly recordExecution: (receipt: ExecutionReceipt) => Promise<{ readonly executionState: PermitExecutionState }>\n  // Connect one of your end-users' phones (keyless, no Pushary account for them).\n  // Returns a single-use universalLink to show them; one tap turns on approvals.\n  // Requires the Partner plan.\n  readonly enroll: (externalId: string) => Promise<EnrollResult>\n  // Can this end-user be reached, and by whose hands? A read-only preflight, so\n  // you can decide how to deliver BEFORE opening a decision and parking a run on\n  // it. Opens nothing, mints nothing, costs no quota.\n  readonly reachability: (externalId: string) => Promise<DecisionReach>\n}\n\nconst validateApiKey = (apiKey: string): void => {\n  if (!apiKey) {\n    throw new Error('API key is required. Get your API key from https://pushary.com/dashboard/settings')\n  }\n  \n  if (!apiKey.includes('.')) {\n    throw new Error('Invalid API key format. Use the full API key (pk_xxx.sk_xxx)')\n  }\n}\n\nconst createContext = (config: PusharyConfig): RequestContext => {\n  validateApiKey(config.apiKey)\n  \n  return Object.freeze({\n    baseUrl: config.baseUrl ?? DEFAULT_BASE_URL,\n    timeoutMs: config.requestTimeoutMs ?? 65_000,\n    headers: Object.freeze({\n      'Content-Type': 'application/json',\n      'Authorization': `Bearer ${config.apiKey}`,\n    }),\n  })\n}\n\nexport const createPusharyServer = (config: PusharyConfig): PusharyServer => {\n  const ctx = createContext(config)\n  const request = createRequest(ctx)\n  \n  const decisions = createDecisionsResource(request)\n\n  return Object.freeze({\n    subscribers: createSubscribersResource(request),\n    campaigns: createCampaignsResource(request),\n    templates: createTemplatesResource(request),\n    notifications: createNotificationsResource(request),\n    flows: createFlowsResource(request),\n    decisions,\n    keys: createKeysResource(request),\n    authorize: createAuthorize(request, decisions),\n    evaluateAuthorization: createEvaluateAuthorization(request),\n    consumeAuthorization: createConsumeAuthorization(request),\n    recordExecution: createRecordExecution(request),\n    enroll: (externalId: string) => request<EnrollResult>('POST', '/enroll', { externalId }),\n    reachability: (externalId: string) =>\n      request<DecisionReach>('GET', '/reachability', { externalId }),\n  })\n}\n\n","import { createHmac, timingSafeEqual } from 'crypto'\nimport type { DecisionCallback } from './types'\n\n// The header carrying the HMAC-SHA256 signature of the raw callback body.\nexport const SIGNATURE_HEADER = 'x-pushary-signature'\n\n// Verify a Pushary webhook. Pass the RAW request body (not re-serialized JSON),\n// the X-Pushary-Signature header, and your webhook secret (decisions.getWebhookSecret()).\n// Constant-time comparison; returns false on any mismatch.\nexport const verifyWebhookSignature = (\n  rawBody: string,\n  signature: string | null | undefined,\n  secret: string,\n): boolean => {\n  if (!signature || !secret) return false\n  const expected = createHmac('sha256', secret).update(rawBody).digest('hex')\n  const a = Buffer.from(expected)\n  const b = Buffer.from(signature)\n  if (a.length !== b.length) return false\n  return timingSafeEqual(a, b)\n}\n\n// Parse a verified decision callback body into a typed object. Returns null if the\n// body is not a decision callback (missing correlationId/answer). Verify the\n// signature FIRST — this does no verification. Read `answer` (canonical) keyed by\n// `correlationId`; `context` echoes what you passed at create time.\nexport const parseDecisionCallback = (rawBody: string): DecisionCallback | null => {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(rawBody)\n  } catch {\n    return null\n  }\n  if (!parsed || typeof parsed !== 'object') return null\n  const p = parsed as Record<string, unknown>\n  if (typeof p.correlationId !== 'string' || typeof p.answer !== 'string') return null\n  return {\n    correlationId: p.correlationId,\n    answer: p.answer,\n    value: typeof p.value === 'string' ? p.value : p.answer,\n    answeredAt: typeof p.answeredAt === 'string' ? p.answeredAt : '',\n    ...(typeof p.context === 'string' ? { context: p.context } : {}),\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,IAAM,kBAAN,MAAM,yBAAwB,MAAM;AAAA,EAUzC,YACE,SACA,MACA;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,OAAO,KAAK;AACjB,SAAK,OAAO,KAAK;AAGjB,WAAO,eAAe,MAAM,iBAAgB,SAAS;AAAA,EACvD;AAAA;AAAA,EAGA,IAAI,cAAuB;AACzB,WAAO,KAAK,WAAW,OAAO,KAAK,WAAW;AAAA,EAChD;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,gBAAyB;AAC3B,WAAO,KAAK,UAAU;AAAA,EACxB;AACF;;;AC9CA,IAAM,WAAW,CAAC,SAAiB,MAAc,WAA6C;AAI5F,QAAM,MAAM,IAAI,IAAI,GAAG,OAAO,GAAG,IAAI,EAAE;AAEvC,MAAI,QAAQ;AACV,WAAO,QAAQ,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AAC/C,UAAI,UAAU,UAAa,UAAU,MAAM;AACzC,YAAI,aAAa,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,MACzC;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,IAAI,SAAS;AACtB;AAEA,IAAM,iBAAiB,OAAU,aAAmC;AAClE,MAAI,CAAC,SAAS,IAAI;AAIhB,UAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AASpD,UAAM,IAAI,gBAAgB,KAAK,WAAW,KAAK,SAAS,QAAQ,SAAS,MAAM,IAAI;AAAA,MACjF,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS;AAAA,MACrB,MAAM,KAAK;AAAA,MACX;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,SAAS,KAAK;AACvB;AAEO,IAAM,gBAAgB,CAAC,QAC5B,OAAU,QAAgB,MAAc,MAAgB,YAA4D;AAClH,QAAM,QAAQ,WAAW;AACzB,QAAM,MAAM,SAAS,OACjB,SAAS,IAAI,SAAS,MAAM,IAA+B,IAC3D,GAAG,IAAI,OAAO,GAAG,IAAI;AAEzB,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC;AAAA,IACA,QAAQ,SAAS,UAAU,YAAY,QAAQ,IAAI,aAAa,IAAM;AAAA,IACtE,SAAS,IAAI;AAAA,IACb,MAAM,CAAC,SAAS,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,EAChD,CAAC;AAED,SAAO,eAAkB,QAAQ;AACnC;;;AC1CK,IAAM,4BAA4B,CAAC,YACxC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAuC,OAAO,gBAAgB,MAAM;AAAA,EAEtE,KAAK,CAAC,OACJ,QAAoB,OAAO,gBAAgB,EAAE,EAAE;AAAA,EAEjD,QAAQ,CAAC,IAAY,SACnB,QAAoB,SAAS,gBAAgB,EAAE,IAAI,IAAI;AAAA,EAEzD,QAAQ,CAAC,OACP,QAAc,UAAU,gBAAgB,EAAE,EAAE;AAAA,EAE9C,OAAO,MACL,QAAyB,OAAO,oBAAoB;AACxD,CAAC;;;ACXI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAAA,EAE5C,MAAM,CAAC,OACL,QAAkB,QAAQ,cAAc,EAAE,OAAO;AAAA,EAEnD,OAAO,CAAC,OACN,QAAkB,QAAQ,cAAc,EAAE,QAAQ;AAAA,EAEpD,QAAQ,CAAC,OACP,QAAkB,QAAQ,cAAc,EAAE,SAAS;AAAA,EAErD,OAAO,CAAC,OACN,QAAuB,OAAO,cAAc,EAAE,QAAQ;AAC1D,CAAC;;;ACjCI,IAAM,0BAA0B,CAAC,YACtC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAqC,OAAO,cAAc,MAAM;AAAA,EAElE,QAAQ,CAAC,SACP,QAAkB,QAAQ,cAAc,IAAI;AAAA,EAE9C,KAAK,CAAC,OACJ,QAAkB,OAAO,cAAc,EAAE,EAAE;AAAA,EAE7C,QAAQ,CAAC,IAAY,SACnB,QAAkB,SAAS,cAAc,EAAE,IAAI,IAAI;AAAA,EAErD,QAAQ,CAAC,OACP,QAAc,UAAU,cAAc,EAAE,EAAE;AAC9C,CAAC;;;AC3BI,IAAM,8BAA8B,CAAC,YAC1C,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,SACL,QAAoB,QAAQ,SAAS,IAAI;AAC7C,CAAC;;;ACSI,IAAM,sBAAsB,CAAC,YAClC,OAAO,OAAO;AAAA,EACZ,MAAM,CAAC,WACL,QAAiC,OAAO,UAAU,MAAM;AAAA,EAE1D,QAAQ,CAAC,SACP,QAAc,QAAQ,UAAU,IAAI;AAAA,EAEtC,KAAK,CAAC,OACJ,QAAc,OAAO,UAAU,EAAE,EAAE;AAAA,EAErC,QAAQ,CAAC,IAAY,SACnB,QAAc,SAAS,UAAU,EAAE,IAAI,IAAI;AAAA,EAE7C,QAAQ,CAAC,OACP,QAAc,UAAU,UAAU,EAAE,EAAE;AAAA,EAExC,UAAU,CAAC,OACT,QAAc,QAAQ,UAAU,EAAE,WAAW;AAAA,EAE/C,OAAO,CAAC,OACN,QAAc,QAAQ,UAAU,EAAE,QAAQ;AAC9C,CAAC;;;AC1BH,IAAAA,iBAA2B;;;ACf3B,oBAA2B;AAQpB,IAAM,mBAAmB,CAAC,cAC/B,0BAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,IAAM,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AA0B3E,IAAM,cAAmC,oBAAI,IAAI;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,aAAa,CAAC,aAIZ;AACb,MAAI,SAAS,WAAW,WAAY,QAAO;AAC3C,MAAI,SAAS,QAAQ,SAAS,SAAS,UAAW,QAAO;AACzD,SAAO,SAAS,SAAS,QAAQ,YAAY,IAAI,SAAS,MAAM,KAAK,EAAE,YAAY,CAAC;AACtF;;;ADtCA,IAAM,sBAAsB;AAC5B,IAAM,yBAAyB;AAgCxB,IAAM,0BAA0B,CAAC,YAA0C;AAChF,QAAM,MAAM,OAAO,SAA0C;AAO3D,UAAM,iBAAiB,KAAK,sBAAkB,2BAAW;AAEzD,UAAM,YAAY,KAAK,IAAI,GAAG,KAAK,aAAa,sBAAsB;AAEtE,UAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,MAAM,WAAW,MAAM,KAAK,QAAQ,MAAM;AACxD,QAAI,KAAK,QAAQ,QAAS,OAAM;AAAA,QAC3B,MAAK,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AACjE,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,IAAI,aAAa,yBAAyB,cAAc,CAAC,GAAG,aAAa,IAAM;AAC/H,QAAI;AACF,YAAM,UAAU,MAAM,QAAwB,QAAQ,cAAc;AAAA,QAClE,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,WAAW,KAAK;AAAA,QAChB,SAAS,KAAK;AAAA,QACd,aAAa,KAAK;AAAA,QAClB,UAAU,KAAK;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,OAAO,KAAK;AAAA,QACZ,aAAa,KAAK;AAAA,QAClB,YAAY,KAAK;AAAA;AAAA;AAAA,QAGjB,cAAc,KAAK;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA,QACvB,WAAW,KAAK;AAAA,QAChB,aAAa,KAAK;AAAA,QAClB,kBAAkB,KAAK;AAAA;AAAA;AAAA,QAGvB,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA,MAAM;AAAA,MACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAEhC,YAAM,OAAqB,QAAQ,QAAQ,KAAK,QAAQ;AACxD,UAAI,SAAyB,QAAQ;AACrC,UAAI,WAAW,QAAQ;AACvB,UAAI,QAAuB,QAAQ,SAAS;AAE5C,aAAO,WAAW,aAAa,KAAK,IAAI,IAAI,UAAU;AACpD,cAAM,cAAc,KAAK;AAAA,UACvB;AAAA,UACA,KAAK,IAAI,qBAAqB,KAAK,MAAM,WAAW,KAAK,IAAI,KAAK,GAAI,CAAC;AAAA,QACzE;AACA,YAAI;AACF,gBAAM,SAAS,MAAM,QAAkB,OAAO,cAAc,QAAQ,UAAU,IAAI;AAAA,YAChF,MAAM;AAAA,UACR,GAAG,EAAE,QAAQ,WAAW,OAAO,CAAC;AAChC,mBAAS,OAAO;AAChB,qBAAW,OAAO;AAClB,kBAAQ,OAAO;AAAA,QACjB,SAAS,OAAO;AACd,cAAI,WAAW,OAAO,WAAW,CAAC,KAAK,QAAQ,QAAS;AACxD,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,aAAO;AAAA,QACL,YAAY,QAAQ;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,WAAW,EAAE,QAAQ,MAAM,MAAM,CAAC;AAAA;AAAA;AAAA,QAG5C,WAAW,QAAQ;AAAA,QACnB,mBAAmB,QAAQ;AAAA,QAC3B,aAAa,QAAQ;AAAA,MACvB;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAClB,WAAK,QAAQ,oBAAoB,SAAS,KAAK;AAAA,IACjD;AAAA,EACF;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,CAAC,SAAyB,QAAwB,QAAQ,cAAc,IAAI;AAAA,IACpF,KAAK,CAAC,IAAY,SAChB,QAAkB,OAAO,cAAc,EAAE,IAAI,MAAM,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,MAAS;AAAA,IAC3F,MAAM,CAAC,SACL,QAAsB,OAAO,cAAc,OAAO,EAAE,GAAG,KAAK,IAAI,MAAS;AAAA,IAC3E;AAAA,IACA,QAAQ,CAAC,IAAY,WACnB,QAA8B,QAAQ,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC;AAAA,IACtE,QAAQ,CAAC,OAAe,QAA8B,UAAU,cAAc,EAAE,EAAE;AAAA,IAClF,kBAAkB,MAAM,QAAuB,OAAO,iBAAiB;AAAA,IACvE,qBAAqB,MAAM,QAAuB,QAAQ,iBAAiB;AAAA,EAC7E,CAAC;AACH;;;AEnIO,IAAM,qBAAqB,CAAC,YACjC,OAAO,OAAO;AAAA,EACZ,OAAO,CAAC,SAAwB,QAAwB,QAAQ,SAAS,IAAI;AAAA,EAC7E,MAAM,MACJ,QAA8C,OAAO,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAAA,EAClF,QAAQ,CAAC,cACP,QAAyB,UAAU,SAAS,mBAAmB,SAAS,CAAC,EAAE;AAC/E,CAAC;;;ACtBH,IAAM,kBAAkB,CAAC,UAAkB,eACzC,WAAW,QAAQ,GAAG,aAAa,IAAI,UAAU,KAAK,EAAE;AAKnD,IAAM,uBAAuB,CAAC,WAA6C;AAAA,EAChF,UAAU,MAAM;AAAA,EAChB,YAAY,MAAM;AAAA,EAClB,OAAO,MAAM;AAAA,EACb,aAAa,MAAM;AAAA,EACnB,YAAY,MAAM;AACpB;AAYO,IAAM,8BACX,CAAC,YACD,CAAC,UACC,QAAiC,QAAQ,cAAc;AAAA,EACrD,GAAG,qBAAqB,KAAK;AAAA,EAC7B,YAAY,MAAM;AAAA,EAClB,UAAU,MAAM;AAAA,EAChB,WAAW,MAAM;AACnB,CAAC;AAcE,IAAM,kBAAkB,CAAC,SAAoB,cAAiC;AACnF,QAAM,WAAW,4BAA4B,OAAO;AAEpD,SAAO,OAAO,UAAsD;AAClE,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,aAAa,MAAM,SAAS,KAAK;AAEvC,QAAI,WAAW,YAAY,kBAAkB;AAC3C,aAAO;AAAA,QACL,UAAU,WAAW,YAAY;AAAA,QACjC,YAAY;AAAA,QACZ,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,YAAY;AAAA,QACZ,iBAAiB,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,UAAU,IAAI;AAAA,MACjC,UAAU,MAAM,YAAY,gBAAgB,MAAM,UAAU,MAAM,UAAU;AAAA,MAC5E,MAAM;AAAA,MACN,YAAY,MAAM;AAAA,MAClB,WAAW,MAAM;AAAA,MACjB,GAAG;AAAA,MACH,WAAW,MAAM;AAAA,MACjB,kBAAkB,MAAM;AAAA,MACxB,gBAAgB,MAAM;AAAA,MACtB,kBAAkB,MAAM;AAAA,IAC1B,CAAC;AAED,WAAO;AAAA,MACL,UAAU,OAAO;AAAA,MACjB,YAAY;AAAA,MACZ,QAAQ,WAAW;AAAA,MACnB,QAAQ,OAAO,WACX,0BACA,OAAO,WACL,wBACA;AAAA,MACN,YAAY,OAAO;AAAA,MACnB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;;;ACxFA,IAAM,WAAqC;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,mBAAoD,CAAC,WAAW,aAAa,QAAQ;AAM3F,IAAM,YAAY,CAAC,UAAsD;AACvE,MAAI,EAAE,iBAAiB,iBAAkB,QAAO;AAChD,QAAM,OAAO,MAAM;AACnB,QAAM,UAAU,MAAM;AACtB,MAAI,OAAO,YAAY,YAAY,CAAC,SAAS,SAAS,OAAwB,EAAG,QAAO;AACxF,QAAM,QAAQ,MAAM;AACpB,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,QAAQ,MAAM;AAAA,IACd,GAAI,OAAO,UAAU,YAAY,iBAAiB,SAAS,KAA6B,IACpF,EAAE,gBAAgB,MAA8B,IAChD,CAAC;AAAA,EACP;AACF;AAcO,IAAM,6BACX,CAAC,YACD,OAAO,YAAuE;AAC5E,MAAI;AACF,UAAM,SAAS,MAAM,QAA+B,QAAQ,2BAA2B;AAAA,MACrF,iBAAiB,QAAQ;AAAA,MACzB,UAAU,QAAQ;AAAA,MAClB,YAAY,QAAQ;AAAA,MACpB,OAAO,QAAQ;AAAA,MACf,aAAa,QAAQ;AAAA,MACrB,YAAY,QAAQ;AAAA,MACpB,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,WAAO,EAAE,UAAU,MAAM,OAAO;AAAA,EAClC,SAAS,OAAO;AACd,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,QAAS,QAAO;AACpB,UAAM;AAAA,EACR;AACF;AASK,IAAM,wBACX,CAAC,YACD,CAAC,YACC,QAAQ,QAAQ,mBAAmB,mBAAmB,QAAQ,QAAQ,CAAC,YAAY;AAAA,EACjF,SAAS,QAAQ;AAAA,EACjB,SAAS,QAAQ;AACnB,CAAC;;;AC7DL,IAAM,mBAAmB;AAmCzB,IAAM,iBAAiB,CAAC,WAAyB;AAC/C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,mFAAmF;AAAA,EACrG;AAEA,MAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACF;AAEA,IAAM,gBAAgB,CAAC,WAA0C;AAC/D,iBAAe,OAAO,MAAM;AAE5B,SAAO,OAAO,OAAO;AAAA,IACnB,SAAS,OAAO,WAAW;AAAA,IAC3B,WAAW,OAAO,oBAAoB;AAAA,IACtC,SAAS,OAAO,OAAO;AAAA,MACrB,gBAAgB;AAAA,MAChB,iBAAiB,UAAU,OAAO,MAAM;AAAA,IAC1C,CAAC;AAAA,EACH,CAAC;AACH;AAEO,IAAM,sBAAsB,CAAC,WAAyC;AAC3E,QAAM,MAAM,cAAc,MAAM;AAChC,QAAM,UAAU,cAAc,GAAG;AAEjC,QAAM,YAAY,wBAAwB,OAAO;AAEjD,SAAO,OAAO,OAAO;AAAA,IACnB,aAAa,0BAA0B,OAAO;AAAA,IAC9C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,WAAW,wBAAwB,OAAO;AAAA,IAC1C,eAAe,4BAA4B,OAAO;AAAA,IAClD,OAAO,oBAAoB,OAAO;AAAA,IAClC;AAAA,IACA,MAAM,mBAAmB,OAAO;AAAA,IAChC,WAAW,gBAAgB,SAAS,SAAS;AAAA,IAC7C,uBAAuB,4BAA4B,OAAO;AAAA,IAC1D,sBAAsB,2BAA2B,OAAO;AAAA,IACxD,iBAAiB,sBAAsB,OAAO;AAAA,IAC9C,QAAQ,CAAC,eAAuB,QAAsB,QAAQ,WAAW,EAAE,WAAW,CAAC;AAAA,IACvF,cAAc,CAAC,eACb,QAAuB,OAAO,iBAAiB,EAAE,WAAW,CAAC;AAAA,EACjE,CAAC;AACH;;;ACzGA,IAAAC,iBAA4C;AAIrC,IAAM,mBAAmB;AAKzB,IAAM,yBAAyB,CACpC,SACA,WACA,WACY;AACZ,MAAI,CAAC,aAAa,CAAC,OAAQ,QAAO;AAClC,QAAM,eAAW,2BAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC1E,QAAM,IAAI,OAAO,KAAK,QAAQ;AAC9B,QAAM,IAAI,OAAO,KAAK,SAAS;AAC/B,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,aAAO,gCAAgB,GAAG,CAAC;AAC7B;AAMO,IAAM,wBAAwB,CAAC,YAA6C;AACjF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,EAAE,WAAW,SAAU,QAAO;AAChF,SAAO;AAAA,IACL,eAAe,EAAE;AAAA,IACjB,QAAQ,EAAE;AAAA,IACV,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,EAAE;AAAA,IACjD,YAAY,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa;AAAA,IAC9D,GAAI,OAAO,EAAE,YAAY,WAAW,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChE;AACF;","names":["import_crypto","import_crypto"]}

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-export { A as ActionPresentation, a6 as AskDecision, a7 as AskResult, O as AuthorizationAuthority, N as AuthorizationBinding, M as AuthorizationEvaluation, I as AuthorizationQuery, H as AuthorizationVerdict, J as AuthorizeRequest, K as AuthorizeResult, a9 as BoundKeyResult, aa as BoundKeySummary, C as Campaign, g as CampaignStats, ad as CampaignsResource, a2 as CancelDecisionResult, R as ConsumeAuthorizationResult, Q as ConsumedAuthorization, e as CreateCampaign, Z as CreateDecision, l as CreateFlow, h as CreateTemplate, a0 as Decision, a1 as DecisionAnswerResult, a3 as DecisionCallback, x as DecisionDeliverability, z as DecisionParameters, y as DecisionReach, _ as DecisionReachability, $ as DecisionResult, v as DecisionStatus, w as DecisionSubject, D as DecisionType, ah as DecisionsResource, a5 as EnrollResult, V as ExecutionOutcome, W as ExecutionReceipt, F as Flow, n as FlowListParams, q as FlowStatus, r as FlowStep, s as FlowStepConfig, t as FlowStepInput, p as FlowStepType, o as FlowTriggerType, ag as FlowsResource, a8 as IssueBoundKey, ai as KeysResource, L as ListParams, af as NotificationsResource, u as PaginatedResponse, Y as PermitExecutionState, X as PermitRefusal, B as PresentedChange, E as PresentedFormat, a as PusharyConfig, P as PusharyServer, ab as RevokeKeyResult, al as SIGNATURE_HEADER, G as SandboxOutcome, j as SendNotification, k as SendResult, S as Subscriber, d as SubscriberCount, b as SubscriberListParams, ac as SubscribersResource, T as Template, ae as TemplatesResource, f as UpdateCampaign, m as UpdateFlow, U as UpdateSubscriber, i as UpdateTemplate, a4 as WebhookSecret, c as createPusharyServer, am as deterministicKey, an as isApproved, ak as parseDecisionCallback, aj as verifyWebhookSignature } from './util-CX6-cXFb.cjs';
+export { A as ActionPresentation, a9 as AskDecision, aa as AskResult, O as AuthorizationAuthority, N as AuthorizationBinding, M as AuthorizationEvaluation, I as AuthorizationQuery, H as AuthorizationVerdict, J as AuthorizeRequest, K as AuthorizeResult, ac as BoundKeyResult, ad as BoundKeySummary, C as Campaign, g as CampaignStats, ag as CampaignsResource, a5 as CancelDecisionResult, R as ConsumeAuthorizationResult, Q as ConsumedAuthorization, e as CreateCampaign, Z as CreateDecision, l as CreateFlow, h as CreateTemplate, a0 as Decision, a4 as DecisionAnswerResult, a6 as DecisionCallback, x as DecisionDeliverability, a2 as DecisionList, a3 as DecisionListOptions, z as DecisionParameters, y as DecisionReach, _ as DecisionReachability, $ as DecisionResult, v as DecisionStatus, w as DecisionSubject, D as DecisionType, ak as DecisionsResource, a8 as EnrollResult, V as ExecutionOutcome, W as ExecutionReceipt, F as Flow, n as FlowListParams, q as FlowStatus, r as FlowStep, s as FlowStepConfig, t as FlowStepInput, p as FlowStepType, o as FlowTriggerType, aj as FlowsResource, ab as IssueBoundKey, al as KeysResource, L as ListParams, a1 as ListedDecision, ai as NotificationsResource, u as PaginatedResponse, Y as PermitExecutionState, X as PermitRefusal, B as PresentedChange, E as PresentedFormat, a as PusharyConfig, P as PusharyServer, ae as RevokeKeyResult, ao as SIGNATURE_HEADER, G as SandboxOutcome, j as SendNotification, k as SendResult, S as Subscriber, d as SubscriberCount, b as SubscriberListParams, af as SubscribersResource, T as Template, ah as TemplatesResource, f as UpdateCampaign, m as UpdateFlow, U as UpdateSubscriber, i as UpdateTemplate, a7 as WebhookSecret, c as createPusharyServer, ap as deterministicKey, aq as isApproved, an as parseDecisionCallback, am as verifyWebhookSignature } from './util-M0kCZWd-.cjs';
 
 /**
  * Thrown for any non-2xx response from the API.

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { A as ActionPresentation, a6 as AskDecision, a7 as AskResult, O as AuthorizationAuthority, N as AuthorizationBinding, M as AuthorizationEvaluation, I as AuthorizationQuery, H as AuthorizationVerdict, J as AuthorizeRequest, K as AuthorizeResult, a9 as BoundKeyResult, aa as BoundKeySummary, C as Campaign, g as CampaignStats, ad as CampaignsResource, a2 as CancelDecisionResult, R as ConsumeAuthorizationResult, Q as ConsumedAuthorization, e as CreateCampaign, Z as CreateDecision, l as CreateFlow, h as CreateTemplate, a0 as Decision, a1 as DecisionAnswerResult, a3 as DecisionCallback, x as DecisionDeliverability, z as DecisionParameters, y as DecisionReach, _ as DecisionReachability, $ as DecisionResult, v as DecisionStatus, w as DecisionSubject, D as DecisionType, ah as DecisionsResource, a5 as EnrollResult, V as ExecutionOutcome, W as ExecutionReceipt, F as Flow, n as FlowListParams, q as FlowStatus, r as FlowStep, s as FlowStepConfig, t as FlowStepInput, p as FlowStepType, o as FlowTriggerType, ag as FlowsResource, a8 as IssueBoundKey, ai as KeysResource, L as ListParams, af as NotificationsResource, u as PaginatedResponse, Y as PermitExecutionState, X as PermitRefusal, B as PresentedChange, E as PresentedFormat, a as PusharyConfig, P as PusharyServer, ab as RevokeKeyResult, al as SIGNATURE_HEADER, G as SandboxOutcome, j as SendNotification, k as SendResult, S as Subscriber, d as SubscriberCount, b as SubscriberListParams, ac as SubscribersResource, T as Template, ae as TemplatesResource, f as UpdateCampaign, m as UpdateFlow, U as UpdateSubscriber, i as UpdateTemplate, a4 as WebhookSecret, c as createPusharyServer, am as deterministicKey, an as isApproved, ak as parseDecisionCallback, aj as verifyWebhookSignature } from './util-CX6-cXFb.js';
+export { A as ActionPresentation, a9 as AskDecision, aa as AskResult, O as AuthorizationAuthority, N as AuthorizationBinding, M as AuthorizationEvaluation, I as AuthorizationQuery, H as AuthorizationVerdict, J as AuthorizeRequest, K as AuthorizeResult, ac as BoundKeyResult, ad as BoundKeySummary, C as Campaign, g as CampaignStats, ag as CampaignsResource, a5 as CancelDecisionResult, R as ConsumeAuthorizationResult, Q as ConsumedAuthorization, e as CreateCampaign, Z as CreateDecision, l as CreateFlow, h as CreateTemplate, a0 as Decision, a4 as DecisionAnswerResult, a6 as DecisionCallback, x as DecisionDeliverability, a2 as DecisionList, a3 as DecisionListOptions, z as DecisionParameters, y as DecisionReach, _ as DecisionReachability, $ as DecisionResult, v as DecisionStatus, w as DecisionSubject, D as DecisionType, ak as DecisionsResource, a8 as EnrollResult, V as ExecutionOutcome, W as ExecutionReceipt, F as Flow, n as FlowListParams, q as FlowStatus, r as FlowStep, s as FlowStepConfig, t as FlowStepInput, p as FlowStepType, o as FlowTriggerType, aj as FlowsResource, ab as IssueBoundKey, al as KeysResource, L as ListParams, a1 as ListedDecision, ai as NotificationsResource, u as PaginatedResponse, Y as PermitExecutionState, X as PermitRefusal, B as PresentedChange, E as PresentedFormat, a as PusharyConfig, P as PusharyServer, ae as RevokeKeyResult, ao as SIGNATURE_HEADER, G as SandboxOutcome, j as SendNotification, k as SendResult, S as Subscriber, d as SubscriberCount, b as SubscriberListParams, af as SubscribersResource, T as Template, ah as TemplatesResource, f as UpdateCampaign, m as UpdateFlow, U as UpdateSubscriber, i as UpdateTemplate, a7 as WebhookSecret, c as createPusharyServer, ap as deterministicKey, aq as isApproved, an as parseDecisionCallback, am as verifyWebhookSignature } from './util-M0kCZWd-.js';
 
 /**
  * Thrown for any non-2xx response from the API.

package/dist/index.js

@@ -6,7 +6,7 @@ import {
   isApproved,
   parseDecisionCallback,
   verifyWebhookSignature
-} from "./chunk-AG6DI4RF.js";
+} from "./chunk-DLJ3L77X.js";
 export {
   PusharyApiError,
   SIGNATURE_HEADER,

package/dist/{util-CX6-cXFb.d.cts → util-M0kCZWd-.d.cts}

@@ -480,6 +480,33 @@ interface Decision {
     readonly answeredAt: string | null;
     readonly expiresAt: string | null;
 }
+interface ListedDecision {
+    readonly decisionId: string | null;
+    readonly status: DecisionStatus;
+    readonly answered: boolean;
+    readonly value: string | null;
+    readonly type: string | null;
+    readonly question: string;
+    readonly externalId: string | null;
+    readonly context: string | null;
+    readonly createdAt: string;
+    readonly answeredAt: string | null;
+    readonly toolName: string | null;
+    readonly toolTarget: string | null;
+    readonly autoResolved: boolean;
+    readonly decisionOrigin: string | null;
+}
+interface DecisionListOptions {
+    readonly limit?: number;
+    readonly cursor?: string;
+    readonly from?: string;
+    readonly to?: string;
+    readonly externalId?: string;
+}
+interface DecisionList {
+    readonly decisions: readonly ListedDecision[];
+    readonly nextCursor: string | null;
+}
 interface DecisionAnswerResult {
     readonly decisionId: string;
     readonly status: DecisionStatus;
@@ -610,6 +637,7 @@ interface DecisionsResource {
     readonly get: (id: string, opts?: {
         readonly wait?: number;
     }) => Promise<Decision>;
+    readonly list: (opts?: DecisionListOptions) => Promise<DecisionList>;
     readonly ask: (data: AskDecision) => Promise<AskResult>;
     readonly answer: (id: string, answer: string) => Promise<DecisionAnswerResult>;
     readonly cancel: (id: string) => Promise<CancelDecisionResult>;
@@ -654,4 +682,4 @@ declare const isApproved: (decision: {
     readonly value: string | null;
 }) => boolean;
 
-export { type DecisionResult as $, type ActionPresentation as A, type PresentedChange as B, type Campaign as C, type DecisionType as D, type PresentedFormat as E, type Flow as F, type SandboxOutcome as G, type AuthorizationVerdict as H, type AuthorizationQuery as I, type AuthorizeRequest as J, type AuthorizeResult as K, type ListParams as L, type AuthorizationEvaluation as M, type AuthorizationBinding as N, type AuthorizationAuthority as O, type PusharyServer as P, type ConsumedAuthorization as Q, type ConsumeAuthorizationResult as R, type Subscriber as S, type Template as T, type UpdateSubscriber as U, type ExecutionOutcome as V, type ExecutionReceipt as W, type PermitRefusal as X, type PermitExecutionState as Y, type CreateDecision as Z, type DecisionReachability as _, type PusharyConfig as a, type Decision as a0, type DecisionAnswerResult as a1, type CancelDecisionResult as a2, type DecisionCallback as a3, type WebhookSecret as a4, type EnrollResult as a5, type AskDecision as a6, type AskResult as a7, type IssueBoundKey as a8, type BoundKeyResult as a9, type BoundKeySummary as aa, type RevokeKeyResult as ab, type SubscribersResource as ac, type CampaignsResource as ad, type TemplatesResource as ae, type NotificationsResource as af, type FlowsResource as ag, type DecisionsResource as ah, type KeysResource as ai, verifyWebhookSignature as aj, parseDecisionCallback as ak, SIGNATURE_HEADER as al, deterministicKey as am, isApproved as an, decisionFingerprint as ao, type SubscriberListParams as b, createPusharyServer as c, type SubscriberCount as d, type CreateCampaign as e, type UpdateCampaign as f, type CampaignStats as g, type CreateTemplate as h, type UpdateTemplate as i, type SendNotification as j, type SendResult as k, type CreateFlow as l, type UpdateFlow as m, type FlowListParams as n, type FlowTriggerType as o, type FlowStepType as p, type FlowStatus as q, type FlowStep as r, type FlowStepConfig as s, type FlowStepInput as t, type PaginatedResponse as u, type DecisionStatus as v, type DecisionSubject as w, type DecisionDeliverability as x, type DecisionReach as y, type DecisionParameters as z };
+export { type DecisionResult as $, type ActionPresentation as A, type PresentedChange as B, type Campaign as C, type DecisionType as D, type PresentedFormat as E, type Flow as F, type SandboxOutcome as G, type AuthorizationVerdict as H, type AuthorizationQuery as I, type AuthorizeRequest as J, type AuthorizeResult as K, type ListParams as L, type AuthorizationEvaluation as M, type AuthorizationBinding as N, type AuthorizationAuthority as O, type PusharyServer as P, type ConsumedAuthorization as Q, type ConsumeAuthorizationResult as R, type Subscriber as S, type Template as T, type UpdateSubscriber as U, type ExecutionOutcome as V, type ExecutionReceipt as W, type PermitRefusal as X, type PermitExecutionState as Y, type CreateDecision as Z, type DecisionReachability as _, type PusharyConfig as a, type Decision as a0, type ListedDecision as a1, type DecisionList as a2, type DecisionListOptions as a3, type DecisionAnswerResult as a4, type CancelDecisionResult as a5, type DecisionCallback as a6, type WebhookSecret as a7, type EnrollResult as a8, type AskDecision as a9, type AskResult as aa, type IssueBoundKey as ab, type BoundKeyResult as ac, type BoundKeySummary as ad, type RevokeKeyResult as ae, type SubscribersResource as af, type CampaignsResource as ag, type TemplatesResource as ah, type NotificationsResource as ai, type FlowsResource as aj, type DecisionsResource as ak, type KeysResource as al, verifyWebhookSignature as am, parseDecisionCallback as an, SIGNATURE_HEADER as ao, deterministicKey as ap, isApproved as aq, decisionFingerprint as ar, type SubscriberListParams as b, createPusharyServer as c, type SubscriberCount as d, type CreateCampaign as e, type UpdateCampaign as f, type CampaignStats as g, type CreateTemplate as h, type UpdateTemplate as i, type SendNotification as j, type SendResult as k, type CreateFlow as l, type UpdateFlow as m, type FlowListParams as n, type FlowTriggerType as o, type FlowStepType as p, type FlowStatus as q, type FlowStep as r, type FlowStepConfig as s, type FlowStepInput as t, type PaginatedResponse as u, type DecisionStatus as v, type DecisionSubject as w, type DecisionDeliverability as x, type DecisionReach as y, type DecisionParameters as z };

package/dist/{util-CX6-cXFb.d.ts → util-M0kCZWd-.d.ts}

@@ -480,6 +480,33 @@ interface Decision {
     readonly answeredAt: string | null;
     readonly expiresAt: string | null;
 }
+interface ListedDecision {
+    readonly decisionId: string | null;
+    readonly status: DecisionStatus;
+    readonly answered: boolean;
+    readonly value: string | null;
+    readonly type: string | null;
+    readonly question: string;
+    readonly externalId: string | null;
+    readonly context: string | null;
+    readonly createdAt: string;
+    readonly answeredAt: string | null;
+    readonly toolName: string | null;
+    readonly toolTarget: string | null;
+    readonly autoResolved: boolean;
+    readonly decisionOrigin: string | null;
+}
+interface DecisionListOptions {
+    readonly limit?: number;
+    readonly cursor?: string;
+    readonly from?: string;
+    readonly to?: string;
+    readonly externalId?: string;
+}
+interface DecisionList {
+    readonly decisions: readonly ListedDecision[];
+    readonly nextCursor: string | null;
+}
 interface DecisionAnswerResult {
     readonly decisionId: string;
     readonly status: DecisionStatus;
@@ -610,6 +637,7 @@ interface DecisionsResource {
     readonly get: (id: string, opts?: {
         readonly wait?: number;
     }) => Promise<Decision>;
+    readonly list: (opts?: DecisionListOptions) => Promise<DecisionList>;
     readonly ask: (data: AskDecision) => Promise<AskResult>;
     readonly answer: (id: string, answer: string) => Promise<DecisionAnswerResult>;
     readonly cancel: (id: string) => Promise<CancelDecisionResult>;
@@ -654,4 +682,4 @@ declare const isApproved: (decision: {
     readonly value: string | null;
 }) => boolean;
 
-export { type DecisionResult as $, type ActionPresentation as A, type PresentedChange as B, type Campaign as C, type DecisionType as D, type PresentedFormat as E, type Flow as F, type SandboxOutcome as G, type AuthorizationVerdict as H, type AuthorizationQuery as I, type AuthorizeRequest as J, type AuthorizeResult as K, type ListParams as L, type AuthorizationEvaluation as M, type AuthorizationBinding as N, type AuthorizationAuthority as O, type PusharyServer as P, type ConsumedAuthorization as Q, type ConsumeAuthorizationResult as R, type Subscriber as S, type Template as T, type UpdateSubscriber as U, type ExecutionOutcome as V, type ExecutionReceipt as W, type PermitRefusal as X, type PermitExecutionState as Y, type CreateDecision as Z, type DecisionReachability as _, type PusharyConfig as a, type Decision as a0, type DecisionAnswerResult as a1, type CancelDecisionResult as a2, type DecisionCallback as a3, type WebhookSecret as a4, type EnrollResult as a5, type AskDecision as a6, type AskResult as a7, type IssueBoundKey as a8, type BoundKeyResult as a9, type BoundKeySummary as aa, type RevokeKeyResult as ab, type SubscribersResource as ac, type CampaignsResource as ad, type TemplatesResource as ae, type NotificationsResource as af, type FlowsResource as ag, type DecisionsResource as ah, type KeysResource as ai, verifyWebhookSignature as aj, parseDecisionCallback as ak, SIGNATURE_HEADER as al, deterministicKey as am, isApproved as an, decisionFingerprint as ao, type SubscriberListParams as b, createPusharyServer as c, type SubscriberCount as d, type CreateCampaign as e, type UpdateCampaign as f, type CampaignStats as g, type CreateTemplate as h, type UpdateTemplate as i, type SendNotification as j, type SendResult as k, type CreateFlow as l, type UpdateFlow as m, type FlowListParams as n, type FlowTriggerType as o, type FlowStepType as p, type FlowStatus as q, type FlowStep as r, type FlowStepConfig as s, type FlowStepInput as t, type PaginatedResponse as u, type DecisionStatus as v, type DecisionSubject as w, type DecisionDeliverability as x, type DecisionReach as y, type DecisionParameters as z };
+export { type DecisionResult as $, type ActionPresentation as A, type PresentedChange as B, type Campaign as C, type DecisionType as D, type PresentedFormat as E, type Flow as F, type SandboxOutcome as G, type AuthorizationVerdict as H, type AuthorizationQuery as I, type AuthorizeRequest as J, type AuthorizeResult as K, type ListParams as L, type AuthorizationEvaluation as M, type AuthorizationBinding as N, type AuthorizationAuthority as O, type PusharyServer as P, type ConsumedAuthorization as Q, type ConsumeAuthorizationResult as R, type Subscriber as S, type Template as T, type UpdateSubscriber as U, type ExecutionOutcome as V, type ExecutionReceipt as W, type PermitRefusal as X, type PermitExecutionState as Y, type CreateDecision as Z, type DecisionReachability as _, type PusharyConfig as a, type Decision as a0, type ListedDecision as a1, type DecisionList as a2, type DecisionListOptions as a3, type DecisionAnswerResult as a4, type CancelDecisionResult as a5, type DecisionCallback as a6, type WebhookSecret as a7, type EnrollResult as a8, type AskDecision as a9, type AskResult as aa, type IssueBoundKey as ab, type BoundKeyResult as ac, type BoundKeySummary as ad, type RevokeKeyResult as ae, type SubscribersResource as af, type CampaignsResource as ag, type TemplatesResource as ah, type NotificationsResource as ai, type FlowsResource as aj, type DecisionsResource as ak, type KeysResource as al, verifyWebhookSignature as am, parseDecisionCallback as an, SIGNATURE_HEADER as ao, deterministicKey as ap, isApproved as aq, decisionFingerprint as ar, type SubscriberListParams as b, createPusharyServer as c, type SubscriberCount as d, type CreateCampaign as e, type UpdateCampaign as f, type CampaignStats as g, type CreateTemplate as h, type UpdateTemplate as i, type SendNotification as j, type SendResult as k, type CreateFlow as l, type UpdateFlow as m, type FlowListParams as n, type FlowTriggerType as o, type FlowStepType as p, type FlowStatus as q, type FlowStep as r, type FlowStepConfig as s, type FlowStepInput as t, type PaginatedResponse as u, type DecisionStatus as v, type DecisionSubject as w, type DecisionDeliverability as x, type DecisionReach as y, type DecisionParameters as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pushary/server",
-  "version": "2.1.1",
-  "description": "Pushary Server SDK: send push notifications and add human-in-the-loop approvals to your AI agent (pause on a decision until a specific human answers).",
+  "version": "2.2.1",
+  "description": "The decision layer for AI agents. Your agent asks, your user decides on their phone. Also sends push notifications.",
   "author": "Pushary <business@pushary.com>",
   "homepage": "https://pushary.com",
   "bugs": {
@@ -53,7 +53,6 @@
   "keywords": [
     "pushary",
     "push-notifications",
-    "web-push",
     "notifications",
     "server-sdk",
     "api-client",
@@ -61,7 +60,10 @@
     "human-in-the-loop",
     "hitl",
     "agent-approvals",
-    "llm"
+    "llm",
+    "approvals",
+    "approval",
+    "tool-approval"
   ],
   "repository": {
     "type": "git",