@relume_io/partner-node 2.0.1 → 2.2.0

package/dist/index.cjs

@@ -419,7 +419,7 @@ function isHttpsUrl(value) {
 
 // src/api.ts
 var DEFAULT_API_BASE_URL = "https://apis.relume.io/nova/partner/v1";
-var SDK_VERSION = "2.0.1";
+var SDK_VERSION = "2.2.0";
 var USER_AGENT = `relume-partner-node/${SDK_VERSION}`;
 var DEFAULT_API_TIMEOUT_MS = 15e3;
 var DEFAULT_MAX_RETRIES = 2;
@@ -577,6 +577,11 @@ var CALL_TYPES = [
   "credits.charge",
   "credits.reverse"
 ];
+function keyEnvironment(secretKey) {
+  if (secretKey.startsWith("sk_test_")) return "test";
+  if (secretKey.startsWith("sk_live_")) return "live";
+  return null;
+}
 var InvalidCallbackResultError = class extends Error {
   constructor(message) {
     super(message);
@@ -589,10 +594,19 @@ function optionalString(value, max) {
   }
   return isString(value, 1, max) ? { ok: true, value } : { ok: false };
 }
+function optionalStrings(value, max, maxItems) {
+  if (value === void 0 || value === null) {
+    return { ok: true, value: void 0 };
+  }
+  if (!Array.isArray(value) || value.length === 0 || value.length > maxItems || !value.every((item) => isString(item, 1, max))) {
+    return { ok: false };
+  }
+  return { ok: true, value: [...value] };
+}
 function isCallType(value) {
   return CALL_TYPES.some((type) => type === value);
 }
-function parseCall(body) {
+function parseCall(body, environment) {
   if (!isRecord(body)) {
     return {
       ok: false,
@@ -614,6 +628,17 @@ function parseCall(body) {
     message: `Invalid ${field} for ${type}.`,
     type
   });
+  if (body.environment !== void 0 && body.environment !== "test" && body.environment !== "live") {
+    return invalid("environment");
+  }
+  if (body.environment !== void 0 && body.environment !== environment) {
+    return {
+      ok: false,
+      code: "environment_mismatch",
+      message: `This ${type} is for ${body.environment}, but this server's secret key is for ${environment}.`,
+      type
+    };
+  }
   const { userId } = body;
   if (!isString(userId, 1, 128)) return invalid("userId");
   switch (type) {
@@ -631,6 +656,8 @@ function parseCall(body) {
       if (!siteId.ok) return invalid("siteId");
       const pageId = optionalString(body.pageId, 200);
       if (!pageId.ok) return invalid("pageId");
+      const pageIds = optionalStrings(body.pageIds, 200, 1e3);
+      if (!pageIds.ok) return invalid("pageIds");
       const charge = {
         userId,
         chargeId,
@@ -641,6 +668,7 @@ function parseCall(body) {
       };
       if (siteId.value !== void 0) charge.siteId = siteId.value;
       if (pageId.value !== void 0) charge.pageId = pageId.value;
+      if (pageIds.value !== void 0) charge.pageIds = pageIds.value;
       return { ok: true, call: { type, charge } };
     }
     case "credits.reverse": {
@@ -799,8 +827,9 @@ var isLedgerEntryDetail = hasStrings(
   "type",
   "status"
 );
+var isCreditUnit = hasStrings("singular", "plural");
 function isPriceList(value) {
-  return isRecord(value) && Array.isArray(value.data);
+  return isRecord(value) && Array.isArray(value.data) && isCreditUnit(value.creditUnit);
 }
 function segment(name, value) {
   if (typeof value !== "string" || value === "") {
@@ -879,7 +908,8 @@ function partnerApi(config) {
       })
     },
     prices: {
-      list: async () => (await get("/prices", isPriceList)).data
+      list: async () => (await get("/prices", isPriceList)).data,
+      get: () => get("/prices", isPriceList)
     }
   };
 }
@@ -974,6 +1004,7 @@ var Relume = class _Relume {
    */
   fetchHandler;
   #secretKey;
+  #environment;
   #api;
   #callbacks = {};
   #onHandlerError;
@@ -993,6 +1024,12 @@ var Relume = class _Relume {
         "Relume.init: that is a publishable key. Pass the secret key (sk_\u2026); the publishable key goes to the embed."
       );
     }
+    const environment = keyEnvironment(secretKey);
+    if (environment === null) {
+      throw new TypeError(
+        "Relume.init: secretKey must start with sk_test_ or sk_live_."
+      );
+    }
     const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
     if (!Number.isSafeInteger(maxRetries) || maxRetries < 0) {
       throw new TypeError(
@@ -1000,6 +1037,7 @@ var Relume = class _Relume {
       );
     }
     this.#secretKey = secretKey;
+    this.#environment = environment;
     this.#now = options.now ?? Date.now;
     this.#api = {
       secretKey,
@@ -1075,8 +1113,9 @@ var Relume = class _Relume {
   }
   /**
    * `POST /relume/calls`, framework-agnostic: verifies the signature and the
-   * 5-minute window, routes by `type`, runs your callback and validates what
-   * it returns. Pass the raw body exactly as received.
+   * 5-minute window, refuses a call for another environment than the secret
+   * key's (`400 environment_mismatch`), routes by `type`, runs your callback
+   * and validates what it returns. Pass the raw body exactly as received.
    */
   async handleCall(input) {
     const requestId = input.requestId ?? null;
@@ -1100,10 +1139,14 @@ var Relume = class _Relume {
         "The body is not valid JSON."
       );
     }
-    const parsed = parseCall(body);
+    const parsed = parseCall(body, this.#environment);
     if (!parsed.ok) return errorResponse(400, parsed.code, parsed.message);
     const { call } = parsed;
-    const context = { type: call.type, requestId };
+    const context = {
+      type: call.type,
+      environment: this.#environment,
+      requestId
+    };
     const callbackName = CALLBACK_FOR[call.type];
     if (!this.#callbacks[callbackName]) {
       this.#onHandlerError(