@simplr-ai/node 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Simplr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,96 @@
+# @simplr-ai/node
+
+Simplr's **server-side** SDK for Node.js — run fraud/identity checks, score orders, ingest edge logs, and verify webhook signatures, all with your secret key.
+
+> This is the backend SDK. For client-side device signals, RUM, and feature-flag evaluation use [`@simplr-ai/fraud-sdk`](https://www.npmjs.com/package/@simplr-ai/fraud-sdk) (browser) or `simplify_fraud` (Flutter).
+
+Docs: https://docs.simplr.so/docs/sdks/node
+
+## Install
+
+```bash
+npm install @simplr-ai/node
+```
+
+Requires Node 18+ (uses the built-in `fetch` and `crypto`).
+
+## Quick start
+
+```ts
+import { Simplr } from "@simplr-ai/node";
+
+const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! }); // sk_live_… / sk_test_…
+
+const result = await simplr.check({ email: "user@example.com", event_type: "signup" });
+if (result.risk_level === "high" || result.risk_level === "critical") {
+  // require extra verification
+}
+```
+
+`baseUrl` defaults to `https://api.simplr.sh`; override it for local/dev:
+
+```ts
+new Simplr({ apiKey: "sk_test_…", baseUrl: "http://localhost:7002" });
+```
+
+## Checks
+
+```ts
+await simplr.check({ phone: "+14155550100", event_type: "login" });
+await simplr.checkBulk([{ email: "a@x.com" }, { phone: "+1..." }]); // up to 100
+```
+
+## Orders
+
+```ts
+await simplr.orders.submit({ order_id: "o_1", external_id: "cust_1", amount: 249, currency: "USD" });
+await simplr.orders.submitBulk([/* up to 100 orders */]);
+```
+
+## Phone intelligence
+
+```ts
+await simplr.phone.report({ phone: "+14155550100", outcome: "sim_swap_fraud", confidence: 0.9 });
+await simplr.phone.intelligence("+14155550100");
+```
+
+## Edge devices & logs
+
+```ts
+await simplr.edge.registerDevice({ device_id: "POS-0042", name: "Front till" });
+await simplr.edge.heartbeat("POS-0042", { cpu: 0.34, battery: 0.78 });
+await simplr.edge.ingestLogs("POS-0042", [{ category: "transaction", level: "info", message: "sale ok" }]);
+```
+
+## Webhooks
+
+Verify the `X-Simplr-Signature` header against the **raw** request body (don't re-serialize parsed JSON):
+
+```ts
+import express from "express";
+import { Simplr } from "@simplr-ai/node";
+
+const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });
+const app = express();
+
+app.post("/hooks/simplify", express.raw({ type: "application/json" }), (req, res) => {
+  const sig = req.header("X-Simplr-Signature")!;
+  try {
+    const event = simplr.webhooks.constructEvent(req.body, sig, process.env.SIMPLR_WEBHOOK_SECRET!);
+    // event.event, event.data
+    res.sendStatus(200);
+  } catch {
+    res.sendStatus(400); // invalid signature
+  }
+});
+```
+
+`verify(payload, header, secret, { toleranceSec })` returns a boolean; `constructEvent(...)` returns the parsed event or throws `WebhookVerificationError`.
+
+## Errors
+
+Non-2xx responses throw `SimplrError` with `.status` and `.body`.
+
+## License
+
+MIT

package/dist/index.cjs

@@ -0,0 +1,236 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  Simplr: () => Simplr,
+  SimplrError: () => SimplrError,
+  WebhookVerificationError: () => WebhookVerificationError,
+  constructWebhookEvent: () => constructEvent,
+  default: () => src_default,
+  verifyWebhook: () => verify
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/errors.ts
+var SimplrError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "SimplrError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var WebhookVerificationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookVerificationError";
+  }
+};
+
+// src/http.ts
+async function apiRequest(cfg, method, path, body) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);
+  try {
+    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {
+      method,
+      headers: {
+        "Content-Type": "application/json",
+        "X-API-Key": cfg.apiKey
+      },
+      body: body !== void 0 ? JSON.stringify(body) : void 0,
+      signal: controller.signal
+    });
+    const text = await res.text();
+    let parsed;
+    try {
+      parsed = text ? JSON.parse(text) : void 0;
+    } catch {
+      parsed = text;
+    }
+    if (!res.ok) {
+      const message = parsed && (parsed.message || parsed.error) || `Simplr API error ${res.status}`;
+      throw new SimplrError(message, res.status, parsed);
+    }
+    return parsed && typeof parsed === "object" && "content" in parsed ? parsed.content : parsed;
+  } catch (err) {
+    if (err instanceof SimplrError) throw err;
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);
+    }
+    throw new SimplrError(err instanceof Error ? err.message : "Network error", 0, null);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/resources.ts
+var OrdersResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Submit a single order for fraud scoring. */
+  submit(order) {
+    return apiRequest(this.cfg, "POST", "/v1/orders", order);
+  }
+  /** Submit up to 100 orders at once. */
+  submitBulk(orders) {
+    return apiRequest(this.cfg, "POST", "/v1/orders/bulk", { orders });
+  }
+};
+var PhoneResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Report the real-world outcome for a phone number to improve scoring. */
+  report(input) {
+    return apiRequest(this.cfg, "POST", "/v1/check/phone/report", input);
+  }
+  /** Fetch stored risk intelligence for a phone number. */
+  intelligence(phone) {
+    return apiRequest(this.cfg, "GET", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);
+  }
+};
+var EdgeResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Register an edge device. */
+  registerDevice(input) {
+    return apiRequest(this.cfg, "POST", "/v1/edge/devices/register", input);
+  }
+  /** Report a device heartbeat with health metrics. */
+  heartbeat(deviceId, metrics) {
+    return apiRequest(
+      this.cfg,
+      "POST",
+      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,
+      metrics
+    );
+  }
+  /** Batch-ingest structured logs for a device. */
+  ingestLogs(deviceId, logs) {
+    return apiRequest(this.cfg, "POST", "/v1/edge/logs", { device_id: deviceId, logs });
+  }
+};
+
+// src/webhooks.ts
+var webhooks_exports = {};
+__export(webhooks_exports, {
+  constructEvent: () => constructEvent,
+  verify: () => verify,
+  webhooks: () => webhooks
+});
+var import_node_crypto = require("crypto");
+function parseHeader(header) {
+  const parts = header.split(",").map((p) => p.trim());
+  let t = "";
+  let v1 = "";
+  for (const part of parts) {
+    const [k, v] = part.split("=");
+    if (k === "t") t = v;
+    if (k === "v1") v1 = v;
+  }
+  return t && v1 ? { t, v1 } : null;
+}
+function expectedSignature(timestamp, payload, secret) {
+  return (0, import_node_crypto.createHmac)("sha256", secret).update(`${timestamp}.${payload}`).digest("hex");
+}
+function safeEqualHex(a, b) {
+  if (a.length !== b.length) return false;
+  try {
+    return (0, import_node_crypto.timingSafeEqual)(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+  } catch {
+    return false;
+  }
+}
+function verify(payload, header, secret, options = {}) {
+  const tolerance = options.toleranceSec ?? 300;
+  const parsed = parseHeader(header || "");
+  if (!parsed) return false;
+  const body = typeof payload === "string" ? payload : payload.toString("utf8");
+  const expected = expectedSignature(parsed.t, body, secret);
+  if (!safeEqualHex(parsed.v1, expected)) return false;
+  if (tolerance > 0) {
+    const ts = Number(parsed.t);
+    if (!Number.isFinite(ts)) return false;
+    const ageSec = Math.abs(Date.now() / 1e3 - ts);
+    if (ageSec > tolerance) return false;
+  }
+  return true;
+}
+function constructEvent(payload, header, secret, options = {}) {
+  if (!verify(payload, header, secret, options)) {
+    throw new WebhookVerificationError("Webhook signature verification failed");
+  }
+  const body = typeof payload === "string" ? payload : payload.toString("utf8");
+  return JSON.parse(body);
+}
+var webhooks = { verify, constructEvent };
+
+// src/index.ts
+var DEFAULT_BASE_URL = "https://api.simplr.sh";
+var Simplr = class {
+  cfg;
+  orders;
+  phone;
+  edge;
+  /** Webhook signature helpers (no network). */
+  webhooks = webhooks_exports;
+  constructor(options) {
+    if (!options?.apiKey) throw new Error("Simplr: `apiKey` is required");
+    this.cfg = {
+      apiKey: options.apiKey,
+      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    if (typeof this.cfg.fetchImpl !== "function") {
+      throw new Error("Simplr: no global fetch available \u2014 use Node 18+ or pass `fetch` in options");
+    }
+    this.orders = new OrdersResource(this.cfg);
+    this.phone = new PhoneResource(this.cfg);
+    this.edge = new EdgeResource(this.cfg);
+  }
+  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
+  check(input) {
+    return apiRequest(this.cfg, "POST", "/v1/check", input);
+  }
+  /** Run up to 100 checks at once. */
+  checkBulk(items) {
+    return apiRequest(this.cfg, "POST", "/v1/check/bulk", { items });
+  }
+};
+var src_default = Simplr;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Simplr,
+  SimplrError,
+  WebhookVerificationError,
+  constructWebhookEvent,
+  verifyWebhook
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/http.ts","../src/resources.ts","../src/webhooks.ts"],"sourcesContent":["import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      apiKey: options.apiKey,\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n","/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  apiKey: string;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-API-Key\": cfg.apiKey,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACNA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,aAAa,IAAI;AAAA,MACnB;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;AC9DA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA4C;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,aAAO,+BAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,eAAO,oCAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;AJzEjD,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEpB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,180 @@
+interface HttpConfig {
+    apiKey: string;
+    baseUrl: string;
+    timeoutMs: number;
+    fetchImpl: typeof fetch;
+}
+
+type RiskLevel = "low" | "medium" | "high" | "critical";
+interface SimplrOptions {
+    /** Secret API key (sk_live_… / sk_test_…). Keep this server-side only. */
+    apiKey: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    /** Per-request timeout in ms (default 15000). */
+    timeoutMs?: number;
+    /** Override the fetch implementation (defaults to global fetch). */
+    fetch?: typeof fetch;
+}
+interface CheckInput {
+    email?: string;
+    phone?: string;
+    device?: Record<string, unknown>;
+    behavior?: Record<string, unknown>;
+    event_type?: string;
+    event_id?: string;
+    metadata?: Record<string, unknown>;
+}
+interface CheckResult {
+    type?: string;
+    risk_score: number;
+    risk_level: RiskLevel;
+    signals?: Record<string, unknown>;
+    email?: string;
+    phone_number?: string;
+    fingerprint_hash?: string;
+    checked_at?: string;
+    is_sandbox?: boolean;
+    [key: string]: unknown;
+}
+interface BulkResult<T = unknown> {
+    total: number;
+    successful: number;
+    failed: number;
+    results: T[];
+}
+interface OrderInput {
+    order_id: string;
+    external_id?: string;
+    amount: number;
+    currency: string;
+    fingerprint_hash?: string;
+    [key: string]: unknown;
+}
+interface OrderResult {
+    order_id: string;
+    risk_score: number;
+    risk_level: RiskLevel;
+    [key: string]: unknown;
+}
+type PhoneOutcome = "fraud" | "sim_swap_fraud" | "account_takeover" | "spam" | "bot" | "legitimate";
+interface PhoneReportInput {
+    phone: string;
+    outcome: PhoneOutcome;
+    check_id?: string;
+    confidence?: number;
+    metadata?: Record<string, unknown>;
+}
+interface EdgeLogEntry {
+    category: "transaction" | "health" | "security" | "audit" | "network" | string;
+    level?: "debug" | "info" | "warn" | "error" | string;
+    message: string;
+    [key: string]: unknown;
+}
+
+/** Order fraud scoring. */
+declare class OrdersResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Submit a single order for fraud scoring. */
+    submit(order: OrderInput): Promise<OrderResult>;
+    /** Submit up to 100 orders at once. */
+    submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>>;
+}
+/** Phone intelligence + outcome reporting. */
+declare class PhoneResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Report the real-world outcome for a phone number to improve scoring. */
+    report(input: PhoneReportInput): Promise<{
+        success: boolean;
+    }>;
+    /** Fetch stored risk intelligence for a phone number. */
+    intelligence(phone: string): Promise<Record<string, unknown>>;
+}
+/** Edge device registration + log ingestion. */
+declare class EdgeResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Register an edge device. */
+    registerDevice(input: {
+        device_id: string;
+        name?: string;
+        firmware?: string;
+        [k: string]: unknown;
+    }): Promise<unknown>;
+    /** Report a device heartbeat with health metrics. */
+    heartbeat(deviceId: string, metrics: Record<string, unknown>): Promise<unknown>;
+    /** Batch-ingest structured logs for a device. */
+    ingestLogs(deviceId: string, logs: EdgeLogEntry[]): Promise<unknown>;
+}
+
+interface VerifyOptions {
+    /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */
+    toleranceSec?: number;
+}
+/**
+ * Verify a Simplr webhook signature.
+ *
+ * @param payload The RAW request body string (do not re-serialize parsed JSON).
+ * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).
+ * @param secret  The webhook's signing secret.
+ * @returns true if the signature is valid and within the tolerance window.
+ */
+declare function verify(payload: string | Buffer, header: string, secret: string, options?: VerifyOptions): boolean;
+/**
+ * Verify the signature and return the parsed event object.
+ * Throws {@link WebhookVerificationError} if verification fails.
+ */
+declare function constructEvent<T = {
+    event: string;
+    data: unknown;
+}>(payload: string | Buffer, header: string, secret: string, options?: VerifyOptions): T;
+declare const webhooks: {
+    verify: typeof verify;
+    constructEvent: typeof constructEvent;
+};
+
+type webhooks$1_VerifyOptions = VerifyOptions;
+declare const webhooks$1_constructEvent: typeof constructEvent;
+declare const webhooks$1_verify: typeof verify;
+declare const webhooks$1_webhooks: typeof webhooks;
+declare namespace webhooks$1 {
+  export { type webhooks$1_VerifyOptions as VerifyOptions, webhooks$1_constructEvent as constructEvent, webhooks$1_verify as verify, webhooks$1_webhooks as webhooks };
+}
+
+/** Thrown when the Simplr API returns a non-2xx response. */
+declare class SimplrError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+/** Thrown when a webhook signature fails verification. */
+declare class WebhookVerificationError extends Error {
+    constructor(message: string);
+}
+
+/**
+ * Simplr server-side client.
+ *
+ * ```ts
+ * import { Simplr } from "@simplr-ai/node";
+ * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });
+ * const result = await simplr.check({ email: "user@example.com", event_type: "signup" });
+ * ```
+ */
+declare class Simplr {
+    private readonly cfg;
+    readonly orders: OrdersResource;
+    readonly phone: PhoneResource;
+    readonly edge: EdgeResource;
+    /** Webhook signature helpers (no network). */
+    readonly webhooks: typeof webhooks$1;
+    constructor(options: SimplrOptions);
+    /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
+    check(input: CheckInput): Promise<CheckResult>;
+    /** Run up to 100 checks at once. */
+    checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>>;
+}
+
+export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrError, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };

package/dist/index.d.ts

@@ -0,0 +1,180 @@
+interface HttpConfig {
+    apiKey: string;
+    baseUrl: string;
+    timeoutMs: number;
+    fetchImpl: typeof fetch;
+}
+
+type RiskLevel = "low" | "medium" | "high" | "critical";
+interface SimplrOptions {
+    /** Secret API key (sk_live_… / sk_test_…). Keep this server-side only. */
+    apiKey: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    /** Per-request timeout in ms (default 15000). */
+    timeoutMs?: number;
+    /** Override the fetch implementation (defaults to global fetch). */
+    fetch?: typeof fetch;
+}
+interface CheckInput {
+    email?: string;
+    phone?: string;
+    device?: Record<string, unknown>;
+    behavior?: Record<string, unknown>;
+    event_type?: string;
+    event_id?: string;
+    metadata?: Record<string, unknown>;
+}
+interface CheckResult {
+    type?: string;
+    risk_score: number;
+    risk_level: RiskLevel;
+    signals?: Record<string, unknown>;
+    email?: string;
+    phone_number?: string;
+    fingerprint_hash?: string;
+    checked_at?: string;
+    is_sandbox?: boolean;
+    [key: string]: unknown;
+}
+interface BulkResult<T = unknown> {
+    total: number;
+    successful: number;
+    failed: number;
+    results: T[];
+}
+interface OrderInput {
+    order_id: string;
+    external_id?: string;
+    amount: number;
+    currency: string;
+    fingerprint_hash?: string;
+    [key: string]: unknown;
+}
+interface OrderResult {
+    order_id: string;
+    risk_score: number;
+    risk_level: RiskLevel;
+    [key: string]: unknown;
+}
+type PhoneOutcome = "fraud" | "sim_swap_fraud" | "account_takeover" | "spam" | "bot" | "legitimate";
+interface PhoneReportInput {
+    phone: string;
+    outcome: PhoneOutcome;
+    check_id?: string;
+    confidence?: number;
+    metadata?: Record<string, unknown>;
+}
+interface EdgeLogEntry {
+    category: "transaction" | "health" | "security" | "audit" | "network" | string;
+    level?: "debug" | "info" | "warn" | "error" | string;
+    message: string;
+    [key: string]: unknown;
+}
+
+/** Order fraud scoring. */
+declare class OrdersResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Submit a single order for fraud scoring. */
+    submit(order: OrderInput): Promise<OrderResult>;
+    /** Submit up to 100 orders at once. */
+    submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>>;
+}
+/** Phone intelligence + outcome reporting. */
+declare class PhoneResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Report the real-world outcome for a phone number to improve scoring. */
+    report(input: PhoneReportInput): Promise<{
+        success: boolean;
+    }>;
+    /** Fetch stored risk intelligence for a phone number. */
+    intelligence(phone: string): Promise<Record<string, unknown>>;
+}
+/** Edge device registration + log ingestion. */
+declare class EdgeResource {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Register an edge device. */
+    registerDevice(input: {
+        device_id: string;
+        name?: string;
+        firmware?: string;
+        [k: string]: unknown;
+    }): Promise<unknown>;
+    /** Report a device heartbeat with health metrics. */
+    heartbeat(deviceId: string, metrics: Record<string, unknown>): Promise<unknown>;
+    /** Batch-ingest structured logs for a device. */
+    ingestLogs(deviceId: string, logs: EdgeLogEntry[]): Promise<unknown>;
+}
+
+interface VerifyOptions {
+    /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */
+    toleranceSec?: number;
+}
+/**
+ * Verify a Simplr webhook signature.
+ *
+ * @param payload The RAW request body string (do not re-serialize parsed JSON).
+ * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).
+ * @param secret  The webhook's signing secret.
+ * @returns true if the signature is valid and within the tolerance window.
+ */
+declare function verify(payload: string | Buffer, header: string, secret: string, options?: VerifyOptions): boolean;
+/**
+ * Verify the signature and return the parsed event object.
+ * Throws {@link WebhookVerificationError} if verification fails.
+ */
+declare function constructEvent<T = {
+    event: string;
+    data: unknown;
+}>(payload: string | Buffer, header: string, secret: string, options?: VerifyOptions): T;
+declare const webhooks: {
+    verify: typeof verify;
+    constructEvent: typeof constructEvent;
+};
+
+type webhooks$1_VerifyOptions = VerifyOptions;
+declare const webhooks$1_constructEvent: typeof constructEvent;
+declare const webhooks$1_verify: typeof verify;
+declare const webhooks$1_webhooks: typeof webhooks;
+declare namespace webhooks$1 {
+  export { type webhooks$1_VerifyOptions as VerifyOptions, webhooks$1_constructEvent as constructEvent, webhooks$1_verify as verify, webhooks$1_webhooks as webhooks };
+}
+
+/** Thrown when the Simplr API returns a non-2xx response. */
+declare class SimplrError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+/** Thrown when a webhook signature fails verification. */
+declare class WebhookVerificationError extends Error {
+    constructor(message: string);
+}
+
+/**
+ * Simplr server-side client.
+ *
+ * ```ts
+ * import { Simplr } from "@simplr-ai/node";
+ * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });
+ * const result = await simplr.check({ email: "user@example.com", event_type: "signup" });
+ * ```
+ */
+declare class Simplr {
+    private readonly cfg;
+    readonly orders: OrdersResource;
+    readonly phone: PhoneResource;
+    readonly edge: EdgeResource;
+    /** Webhook signature helpers (no network). */
+    readonly webhooks: typeof webhooks$1;
+    constructor(options: SimplrOptions);
+    /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
+    check(input: CheckInput): Promise<CheckResult>;
+    /** Run up to 100 checks at once. */
+    checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>>;
+}
+
+export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrError, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };

package/dist/index.js

@@ -0,0 +1,211 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/errors.ts
+var SimplrError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "SimplrError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var WebhookVerificationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookVerificationError";
+  }
+};
+
+// src/http.ts
+async function apiRequest(cfg, method, path, body) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);
+  try {
+    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {
+      method,
+      headers: {
+        "Content-Type": "application/json",
+        "X-API-Key": cfg.apiKey
+      },
+      body: body !== void 0 ? JSON.stringify(body) : void 0,
+      signal: controller.signal
+    });
+    const text = await res.text();
+    let parsed;
+    try {
+      parsed = text ? JSON.parse(text) : void 0;
+    } catch {
+      parsed = text;
+    }
+    if (!res.ok) {
+      const message = parsed && (parsed.message || parsed.error) || `Simplr API error ${res.status}`;
+      throw new SimplrError(message, res.status, parsed);
+    }
+    return parsed && typeof parsed === "object" && "content" in parsed ? parsed.content : parsed;
+  } catch (err) {
+    if (err instanceof SimplrError) throw err;
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);
+    }
+    throw new SimplrError(err instanceof Error ? err.message : "Network error", 0, null);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/resources.ts
+var OrdersResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Submit a single order for fraud scoring. */
+  submit(order) {
+    return apiRequest(this.cfg, "POST", "/v1/orders", order);
+  }
+  /** Submit up to 100 orders at once. */
+  submitBulk(orders) {
+    return apiRequest(this.cfg, "POST", "/v1/orders/bulk", { orders });
+  }
+};
+var PhoneResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Report the real-world outcome for a phone number to improve scoring. */
+  report(input) {
+    return apiRequest(this.cfg, "POST", "/v1/check/phone/report", input);
+  }
+  /** Fetch stored risk intelligence for a phone number. */
+  intelligence(phone) {
+    return apiRequest(this.cfg, "GET", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);
+  }
+};
+var EdgeResource = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Register an edge device. */
+  registerDevice(input) {
+    return apiRequest(this.cfg, "POST", "/v1/edge/devices/register", input);
+  }
+  /** Report a device heartbeat with health metrics. */
+  heartbeat(deviceId, metrics) {
+    return apiRequest(
+      this.cfg,
+      "POST",
+      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,
+      metrics
+    );
+  }
+  /** Batch-ingest structured logs for a device. */
+  ingestLogs(deviceId, logs) {
+    return apiRequest(this.cfg, "POST", "/v1/edge/logs", { device_id: deviceId, logs });
+  }
+};
+
+// src/webhooks.ts
+var webhooks_exports = {};
+__export(webhooks_exports, {
+  constructEvent: () => constructEvent,
+  verify: () => verify,
+  webhooks: () => webhooks
+});
+import { createHmac, timingSafeEqual } from "crypto";
+function parseHeader(header) {
+  const parts = header.split(",").map((p) => p.trim());
+  let t = "";
+  let v1 = "";
+  for (const part of parts) {
+    const [k, v] = part.split("=");
+    if (k === "t") t = v;
+    if (k === "v1") v1 = v;
+  }
+  return t && v1 ? { t, v1 } : null;
+}
+function expectedSignature(timestamp, payload, secret) {
+  return createHmac("sha256", secret).update(`${timestamp}.${payload}`).digest("hex");
+}
+function safeEqualHex(a, b) {
+  if (a.length !== b.length) return false;
+  try {
+    return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+  } catch {
+    return false;
+  }
+}
+function verify(payload, header, secret, options = {}) {
+  const tolerance = options.toleranceSec ?? 300;
+  const parsed = parseHeader(header || "");
+  if (!parsed) return false;
+  const body = typeof payload === "string" ? payload : payload.toString("utf8");
+  const expected = expectedSignature(parsed.t, body, secret);
+  if (!safeEqualHex(parsed.v1, expected)) return false;
+  if (tolerance > 0) {
+    const ts = Number(parsed.t);
+    if (!Number.isFinite(ts)) return false;
+    const ageSec = Math.abs(Date.now() / 1e3 - ts);
+    if (ageSec > tolerance) return false;
+  }
+  return true;
+}
+function constructEvent(payload, header, secret, options = {}) {
+  if (!verify(payload, header, secret, options)) {
+    throw new WebhookVerificationError("Webhook signature verification failed");
+  }
+  const body = typeof payload === "string" ? payload : payload.toString("utf8");
+  return JSON.parse(body);
+}
+var webhooks = { verify, constructEvent };
+
+// src/index.ts
+var DEFAULT_BASE_URL = "https://api.simplr.sh";
+var Simplr = class {
+  cfg;
+  orders;
+  phone;
+  edge;
+  /** Webhook signature helpers (no network). */
+  webhooks = webhooks_exports;
+  constructor(options) {
+    if (!options?.apiKey) throw new Error("Simplr: `apiKey` is required");
+    this.cfg = {
+      apiKey: options.apiKey,
+      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    if (typeof this.cfg.fetchImpl !== "function") {
+      throw new Error("Simplr: no global fetch available \u2014 use Node 18+ or pass `fetch` in options");
+    }
+    this.orders = new OrdersResource(this.cfg);
+    this.phone = new PhoneResource(this.cfg);
+    this.edge = new EdgeResource(this.cfg);
+  }
+  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
+  check(input) {
+    return apiRequest(this.cfg, "POST", "/v1/check", input);
+  }
+  /** Run up to 100 checks at once. */
+  checkBulk(items) {
+    return apiRequest(this.cfg, "POST", "/v1/check/bulk", { items });
+  }
+};
+var src_default = Simplr;
+export {
+  Simplr,
+  SimplrError,
+  WebhookVerificationError,
+  constructEvent as constructWebhookEvent,
+  src_default as default,
+  verify as verifyWebhook
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/resources.ts","../src/webhooks.ts","../src/index.ts"],"sourcesContent":["/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  apiKey: string;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-API-Key\": cfg.apiKey,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      apiKey: options.apiKey,\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n"],"mappings":";;;;;;;AACO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACNA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,aAAa,IAAI;AAAA,MACnB;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;AC9DA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,YAAY,uBAAuB;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,SAAO,WAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,WAAO,gBAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;ACzEjD,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEpB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@simplr-ai/node",
+  "version": "1.0.0",
+  "description": "Simplr server-side SDK for Node.js — fraud/identity checks, order scoring, edge ingestion, and webhook signature verification.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": ["dist"],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "node --test"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.3.0"
+  },
+  "keywords": ["simplr", "simplify", "fraud", "identity", "feature-flags", "webhooks", "server", "node"]
+}