@simplr-ai/node 1.0.0 → 1.1.0

package/README.md

@@ -87,6 +87,44 @@ app.post("/hooks/simplify", express.raw({ type: "application/json" }), (req, res
 
 `verify(payload, header, secret, { toleranceSec })` returns a boolean; `constructEvent(...)` returns the parsed event or throws `WebhookVerificationError`.
 
+## Server-side feature flags
+
+Evaluate flags on the backend. Flag config is read with a **public** key (`pk_…`), so pass one alongside your secret key; evaluation is local and deterministic (same bucketing as the browser SDK).
+
+```ts
+const simplr = new Simplr({
+  apiKey: process.env.SIMPLR_API_KEY!,       // sk_… for checks/orders/etc.
+  publicKey: process.env.SIMPLR_PUBLIC_KEY!, // pk_… for flags
+});
+
+await simplr.flags.initialize();
+simplr.flags.setUser("user_123");
+
+if (simplr.flags.isEnabled("new-checkout")) {
+  // gate a backend code path
+}
+simplr.flags.isEnabled("beta", { userId: "u1", attributes: { plan: "growth" } });
+```
+
+You can also use `SimplrFlags` standalone.
+
+## Admin / measurement (`SimplrAdmin`)
+
+Dashboard operations — usage/measurement, feature-flag CRUD, and RUM analytics — require a **portal token** (JWT), not an API key:
+
+```ts
+import { SimplrAdmin } from "@simplr-ai/node";
+
+const admin = new SimplrAdmin({ token: process.env.SIMPLR_PORTAL_TOKEN! });
+
+await admin.usage.stats(orgId);     // usage counters
+await admin.usage.billing(orgId);   // per-service totals + estimated cost (API measurement)
+await admin.flags.create(orgId, { key: "new-checkout", environment: "test", rollout_percentage: 10 });
+await admin.flags.update(orgId, flagId, { rollout_percentage: 50 });
+await admin.rum.overview(orgId, { application_id: "my-app" });
+await admin.rum.sessions(orgId, { page: 1, limit: 50 });
+```
+
 ## Errors
 
 Non-2xx responses throw `SimplrError` with `.status` and `.body`.

package/dist/index.cjs

@@ -21,7 +21,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var src_exports = {};
 __export(src_exports, {
   Simplr: () => Simplr,
+  SimplrAdmin: () => SimplrAdmin,
   SimplrError: () => SimplrError,
+  SimplrFlags: () => SimplrFlags,
   WebhookVerificationError: () => WebhookVerificationError,
   constructWebhookEvent: () => constructEvent,
   default: () => src_default,
@@ -56,7 +58,7 @@ async function apiRequest(cfg, method, path, body) {
       method,
       headers: {
         "Content-Type": "application/json",
-        "X-API-Key": cfg.apiKey
+        ...cfg.authHeaders
       },
       body: body !== void 0 ? JSON.stringify(body) : void 0,
       signal: controller.signal
@@ -137,6 +139,113 @@ var EdgeResource = class {
   }
 };
 
+// src/flags.ts
+function murmurHash3(input, seed = 0) {
+  let h1 = seed;
+  const c1 = 3432918353;
+  const c2 = 461845907;
+  for (let i = 0; i < input.length; i++) {
+    let k1 = input.charCodeAt(i);
+    k1 = Math.imul(k1, c1);
+    k1 = k1 << 15 | k1 >>> 17;
+    k1 = Math.imul(k1, c2);
+    h1 ^= k1;
+    h1 = h1 << 13 | h1 >>> 19;
+    h1 = Math.imul(h1, 5) + 3864292196;
+  }
+  h1 ^= input.length;
+  h1 ^= h1 >>> 16;
+  h1 = Math.imul(h1, 2246822507);
+  h1 ^= h1 >>> 13;
+  h1 = Math.imul(h1, 3266489909);
+  h1 ^= h1 >>> 16;
+  return h1 >>> 0;
+}
+function matchRule(rule, attributes) {
+  const actual = attributes[rule.attribute];
+  switch (rule.op) {
+    case "eq":
+      return String(actual) === rule.value;
+    case "neq":
+      return String(actual) !== rule.value;
+    case "contains":
+      return String(actual ?? "").includes(rule.value);
+    default:
+      return false;
+  }
+}
+var SimplrFlags = class {
+  cfg;
+  environment;
+  refreshIntervalMs;
+  flags = {};
+  defaultUserId;
+  timer = null;
+  ready = false;
+  constructor(options) {
+    if (!options?.publicKey) throw new Error("SimplrFlags: `publicKey` is required");
+    this.cfg = {
+      authHeaders: { "X-API-Key": options.publicKey },
+      baseUrl: (options.baseUrl || "https://api.simplr.sh").replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    this.environment = options.environment;
+    this.refreshIntervalMs = options.refreshIntervalMs ?? 6e4;
+  }
+  /** Fetch the flag config once and start the background refresh. */
+  async initialize() {
+    await this.refresh();
+    this.ready = true;
+    if (this.refreshIntervalMs > 0) {
+      this.timer = setInterval(() => {
+        void this.refresh();
+      }, this.refreshIntervalMs);
+      this.timer?.unref?.();
+    }
+  }
+  /** Set the default identifier used for bucketing when none is passed to isEnabled. */
+  setUser(userId) {
+    this.defaultUserId = userId;
+  }
+  /** Re-fetch the flag config (counts as one billable request). */
+  async refresh() {
+    const path = this.environment ? `/v1/flags?environment=${this.environment}` : "/v1/flags";
+    try {
+      const content = await apiRequest(this.cfg, "GET", path);
+      const list = content?.flags || [];
+      const map = {};
+      for (const f of list) map[f.key] = f;
+      this.flags = map;
+    } catch {
+    }
+  }
+  /** Evaluate a flag locally. Deterministic per user; no network call. */
+  isEnabled(key, ctx = {}) {
+    const f = this.flags[key];
+    if (!f || !f.enabled) return false;
+    const uid = ctx.userId || this.defaultUserId || "anonymous";
+    if (f.target_user_ids?.includes(uid)) return true;
+    if (ctx.attributes && f.rules?.length && f.rules.some((r) => matchRule(r, ctx.attributes))) {
+      return true;
+    }
+    if (f.rollout_percentage >= 100) return true;
+    if (f.rollout_percentage <= 0) return false;
+    return murmurHash3(`${key}:${uid}`) % 100 < f.rollout_percentage;
+  }
+  getAll() {
+    return { ...this.flags };
+  }
+  isReady() {
+    return this.ready;
+  }
+  /** Stop the background refresh timer. */
+  dispose() {
+    if (this.timer) clearInterval(this.timer);
+    this.timer = null;
+  }
+};
+
 // src/webhooks.ts
 var webhooks_exports = {};
 __export(webhooks_exports, {
@@ -191,6 +300,91 @@ function constructEvent(payload, header, secret, options = {}) {
 }
 var webhooks = { verify, constructEvent };
 
+// src/admin.ts
+function qs(params) {
+  const entries = Object.entries(params).filter(([, v]) => v !== void 0 && v !== null);
+  if (!entries.length) return "";
+  return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+}
+var UsageApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Aggregate usage stats for an org. */
+  stats(orgId) {
+    return apiRequest(this.cfg, "GET", `/v1/usage/stats${qs({ org_id: orgId })}`);
+  }
+  /** Raw usage logs for an org. */
+  logs(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/usage/logs${qs({ org_id: orgId, ...params })}`);
+  }
+  /** Billing usage breakdown (per-service totals + estimated cost). */
+  billing(orgId) {
+    return apiRequest(this.cfg, "GET", `/v1/billing/usage${qs({ org_id: orgId })}`);
+  }
+};
+var FlagsAdminApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  list(orgId, environment) {
+    return apiRequest(this.cfg, "GET", `/v1/feature-flags${qs({ org_id: orgId, environment })}`);
+  }
+  get(orgId, id) {
+    return apiRequest(this.cfg, "GET", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);
+  }
+  create(orgId, data) {
+    return apiRequest(this.cfg, "POST", "/v1/feature-flags", { org_id: orgId, ...data });
+  }
+  update(orgId, id, data) {
+    return apiRequest(this.cfg, "PATCH", `/v1/feature-flags/${id}`, { org_id: orgId, ...data });
+  }
+  remove(orgId, id) {
+    return apiRequest(this.cfg, "DELETE", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);
+  }
+  history(orgId, id, params = {}) {
+    return apiRequest(
+      this.cfg,
+      "GET",
+      `/v1/feature-flags/${id}/history${qs({ org_id: orgId, ...params })}`
+    );
+  }
+};
+var RumApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  overview(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/rum/overview${qs({ org_id: orgId, ...params })}`);
+  }
+  sessions(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/rum/sessions${qs({ org_id: orgId, ...params })}`);
+  }
+};
+var SimplrAdmin = class {
+  usage;
+  flags;
+  rum;
+  constructor(options) {
+    if (!options?.token) throw new Error("SimplrAdmin: `token` is required");
+    const cfg = {
+      authHeaders: { Authorization: `Bearer ${options.token}` },
+      baseUrl: (options.baseUrl || "https://api.simplr.sh").replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    if (typeof cfg.fetchImpl !== "function") {
+      throw new Error("SimplrAdmin: no global fetch available \u2014 use Node 18+ or pass `fetch`");
+    }
+    this.usage = new UsageApi(cfg);
+    this.flags = new FlagsAdminApi(cfg);
+    this.rum = new RumApi(cfg);
+  }
+};
+
 // src/index.ts
 var DEFAULT_BASE_URL = "https://api.simplr.sh";
 var Simplr = class {
@@ -200,10 +394,11 @@ var Simplr = class {
   edge;
   /** Webhook signature helpers (no network). */
   webhooks = webhooks_exports;
+  _flags;
   constructor(options) {
     if (!options?.apiKey) throw new Error("Simplr: `apiKey` is required");
     this.cfg = {
-      apiKey: options.apiKey,
+      authHeaders: { "X-API-Key": options.apiKey },
       baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, ""),
       timeoutMs: options.timeoutMs ?? 15e3,
       fetchImpl: options.fetch ?? globalThis.fetch
@@ -214,6 +409,26 @@ var Simplr = class {
     this.orders = new OrdersResource(this.cfg);
     this.phone = new PhoneResource(this.cfg);
     this.edge = new EdgeResource(this.cfg);
+    if (options.publicKey) {
+      this._flags = new SimplrFlags({
+        publicKey: options.publicKey,
+        baseUrl: this.cfg.baseUrl,
+        timeoutMs: this.cfg.timeoutMs,
+        fetch: this.cfg.fetchImpl
+      });
+    }
+  }
+  /**
+   * Server-side feature flags. Requires a `publicKey` in the constructor options
+   * (flag config is read with the public key). Call `simplr.flags.initialize()` once.
+   */
+  get flags() {
+    if (!this._flags) {
+      throw new Error(
+        "Simplr.flags requires a `publicKey` \u2014 pass it to `new Simplr({ apiKey, publicKey })`."
+      );
+    }
+    return this._flags;
   }
   /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
   check(input) {
@@ -228,7 +443,9 @@ var src_default = Simplr;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Simplr,
+  SimplrAdmin,
   SimplrError,
+  SimplrFlags,
   WebhookVerificationError,
   constructWebhookEvent,
   verifyWebhook

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/http.ts","../src/resources.ts","../src/webhooks.ts"],"sourcesContent":["import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      apiKey: options.apiKey,\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n","/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  apiKey: string;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-API-Key\": cfg.apiKey,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACNA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,aAAa,IAAI;AAAA,MACnB;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;AC9DA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA4C;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,aAAO,+BAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,eAAO,oCAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;AJzEjD,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEpB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/http.ts","../src/resources.ts","../src/flags.ts","../src/webhooks.ts","../src/admin.ts"],"sourcesContent":["import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport { SimplrFlags } from \"./flags.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\nexport { SimplrFlags } from \"./flags.js\";\nexport type { FlagDefinition, FlagRule, FlagsOptions, EvalContext } from \"./flags.js\";\nexport { SimplrAdmin } from \"./admin.js\";\nexport type { SimplrAdminOptions } from \"./admin.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  private readonly _flags?: SimplrFlags;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      authHeaders: { \"X-API-Key\": options.apiKey },\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n    if (options.publicKey) {\n      this._flags = new SimplrFlags({\n        publicKey: options.publicKey,\n        baseUrl: this.cfg.baseUrl,\n        timeoutMs: this.cfg.timeoutMs,\n        fetch: this.cfg.fetchImpl,\n      });\n    }\n  }\n\n  /**\n   * Server-side feature flags. Requires a `publicKey` in the constructor options\n   * (flag config is read with the public key). Call `simplr.flags.initialize()` once.\n   */\n  get flags(): SimplrFlags {\n    if (!this._flags) {\n      throw new Error(\n        \"Simplr.flags requires a `publicKey` — pass it to `new Simplr({ apiKey, publicKey })`.\",\n      );\n    }\n    return this._flags;\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n","/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  /** Auth headers to send (e.g. { \"X-API-Key\": \"sk_…\" } or { Authorization: \"Bearer …\" }). */\n  authHeaders: Record<string, string>;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...cfg.authHeaders,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\n\n/**\n * MurmurHash3 (x86, 32-bit) — identical to the browser SDK so a given user\n * buckets the same way on the client and the server.\n */\nfunction murmurHash3(input: string, seed = 0): number {\n  let h1 = seed;\n  const c1 = 0xcc9e2d51;\n  const c2 = 0x1b873593;\n  for (let i = 0; i < input.length; i++) {\n    let k1 = input.charCodeAt(i);\n    k1 = Math.imul(k1, c1);\n    k1 = (k1 << 15) | (k1 >>> 17);\n    k1 = Math.imul(k1, c2);\n    h1 ^= k1;\n    h1 = (h1 << 13) | (h1 >>> 19);\n    h1 = Math.imul(h1, 5) + 0xe6546b64;\n  }\n  h1 ^= input.length;\n  h1 ^= h1 >>> 16;\n  h1 = Math.imul(h1, 0x85ebca6b);\n  h1 ^= h1 >>> 13;\n  h1 = Math.imul(h1, 0xc2b2ae35);\n  h1 ^= h1 >>> 16;\n  return h1 >>> 0;\n}\n\nexport interface FlagRule {\n  attribute: string;\n  op: \"eq\" | \"neq\" | \"contains\";\n  value: string;\n}\n\nexport interface FlagDefinition {\n  key: string;\n  enabled: boolean;\n  rollout_percentage: number;\n  target_user_ids: string[];\n  rules: FlagRule[];\n}\n\nexport interface FlagsOptions {\n  /** Public API key (pk_live_… / pk_test_…). Required — flags read uses the public key. */\n  publicKey: string;\n  /** API base URL. Defaults to https://api.simplr.sh. */\n  baseUrl?: string;\n  /** Which environment's flags to load. Defaults to the key's own environment. */\n  environment?: \"live\" | \"test\";\n  /** Auto-refresh interval in ms (default 60000; 0 disables). */\n  refreshIntervalMs?: number;\n  timeoutMs?: number;\n  fetch?: typeof fetch;\n}\n\nexport interface EvalContext {\n  userId?: string;\n  attributes?: Record<string, unknown>;\n}\n\nfunction matchRule(rule: FlagRule, attributes: Record<string, unknown>): boolean {\n  const actual = attributes[rule.attribute];\n  switch (rule.op) {\n    case \"eq\":\n      return String(actual) === rule.value;\n    case \"neq\":\n      return String(actual) !== rule.value;\n    case \"contains\":\n      return String(actual ?? \"\").includes(rule.value);\n    default:\n      return false;\n  }\n}\n\n/**\n * Server-side feature flags with local, deterministic evaluation.\n *\n * ```ts\n * const flags = new SimplrFlags({ publicKey: process.env.SIMPLR_PUBLIC_KEY! });\n * await flags.initialize();\n * if (flags.isEnabled(\"new-checkout\", { userId: \"user_123\" })) { ... }\n * ```\n */\nexport class SimplrFlags {\n  private readonly cfg: HttpConfig;\n  private readonly environment?: \"live\" | \"test\";\n  private readonly refreshIntervalMs: number;\n  private flags: Record<string, FlagDefinition> = {};\n  private defaultUserId?: string;\n  private timer: ReturnType<typeof setInterval> | null = null;\n  private ready = false;\n\n  constructor(options: FlagsOptions) {\n    if (!options?.publicKey) throw new Error(\"SimplrFlags: `publicKey` is required\");\n    this.cfg = {\n      authHeaders: { \"X-API-Key\": options.publicKey },\n      baseUrl: (options.baseUrl || \"https://api.simplr.sh\").replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    this.environment = options.environment;\n    this.refreshIntervalMs = options.refreshIntervalMs ?? 60000;\n  }\n\n  /** Fetch the flag config once and start the background refresh. */\n  async initialize(): Promise<void> {\n    await this.refresh();\n    this.ready = true;\n    if (this.refreshIntervalMs > 0) {\n      this.timer = setInterval(() => {\n        void this.refresh();\n      }, this.refreshIntervalMs);\n      // Don't keep the process alive just for flag refreshes.\n      (this.timer as any)?.unref?.();\n    }\n  }\n\n  /** Set the default identifier used for bucketing when none is passed to isEnabled. */\n  setUser(userId: string): void {\n    this.defaultUserId = userId;\n  }\n\n  /** Re-fetch the flag config (counts as one billable request). */\n  async refresh(): Promise<void> {\n    const path = this.environment ? `/v1/flags?environment=${this.environment}` : \"/v1/flags\";\n    try {\n      const content = await apiRequest<{ flags: FlagDefinition[] }>(this.cfg, \"GET\", path);\n      const list = content?.flags || [];\n      const map: Record<string, FlagDefinition> = {};\n      for (const f of list) map[f.key] = f;\n      this.flags = map;\n    } catch {\n      // keep last-known flags on error\n    }\n  }\n\n  /** Evaluate a flag locally. Deterministic per user; no network call. */\n  isEnabled(key: string, ctx: EvalContext = {}): boolean {\n    const f = this.flags[key];\n    if (!f || !f.enabled) return false;\n\n    const uid = ctx.userId || this.defaultUserId || \"anonymous\";\n    if (f.target_user_ids?.includes(uid)) return true;\n    if (ctx.attributes && f.rules?.length && f.rules.some((r) => matchRule(r, ctx.attributes!))) {\n      return true;\n    }\n    if (f.rollout_percentage >= 100) return true;\n    if (f.rollout_percentage <= 0) return false;\n    return murmurHash3(`${key}:${uid}`) % 100 < f.rollout_percentage;\n  }\n\n  getAll(): Record<string, FlagDefinition> {\n    return { ...this.flags };\n  }\n\n  isReady(): boolean {\n    return this.ready;\n  }\n\n  /** Stop the background refresh timer. */\n  dispose(): void {\n    if (this.timer) clearInterval(this.timer);\n    this.timer = null;\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n","import { apiRequest, type HttpConfig } from \"./http.js\";\n\nexport interface SimplrAdminOptions {\n  /** Portal token (JWT) for dashboard/admin operations. */\n  token: string;\n  /** API base URL. Defaults to https://api.simplr.sh. */\n  baseUrl?: string;\n  timeoutMs?: number;\n  fetch?: typeof fetch;\n}\n\nfunction qs(params: Record<string, unknown>): string {\n  const entries = Object.entries(params).filter(([, v]) => v !== undefined && v !== null);\n  if (!entries.length) return \"\";\n  return \"?\" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join(\"&\");\n}\n\n/** Usage / measurement reads. */\nclass UsageApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  /** Aggregate usage stats for an org. */\n  stats(orgId: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/usage/stats${qs({ org_id: orgId })}`);\n  }\n  /** Raw usage logs for an org. */\n  logs(orgId: string, params: { page?: number; limit?: number } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/usage/logs${qs({ org_id: orgId, ...params })}`);\n  }\n  /** Billing usage breakdown (per-service totals + estimated cost). */\n  billing(orgId: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/billing/usage${qs({ org_id: orgId })}`);\n  }\n}\n\n/** Feature-flag administration (create/update/delete/history). */\nclass FlagsAdminApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  list(orgId: string, environment?: \"live\" | \"test\") {\n    return apiRequest(this.cfg, \"GET\", `/v1/feature-flags${qs({ org_id: orgId, environment })}`);\n  }\n  get(orgId: string, id: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);\n  }\n  create(orgId: string, data: Record<string, unknown>) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/feature-flags\", { org_id: orgId, ...data });\n  }\n  update(orgId: string, id: string, data: Record<string, unknown>) {\n    return apiRequest(this.cfg, \"PATCH\", `/v1/feature-flags/${id}`, { org_id: orgId, ...data });\n  }\n  remove(orgId: string, id: string) {\n    return apiRequest(this.cfg, \"DELETE\", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);\n  }\n  history(orgId: string, id: string, params: { limit?: number; offset?: number } = {}) {\n    return apiRequest(\n      this.cfg,\n      \"GET\",\n      `/v1/feature-flags/${id}/history${qs({ org_id: orgId, ...params })}`,\n    );\n  }\n}\n\n/** RUM analytics reads. */\nclass RumApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  overview(orgId: string, params: { application_id?: string; start_date?: string; end_date?: string } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/rum/overview${qs({ org_id: orgId, ...params })}`);\n  }\n  sessions(orgId: string, params: { page?: number; limit?: number; user_id?: string } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/rum/sessions${qs({ org_id: orgId, ...params })}`);\n  }\n}\n\n/**\n * Management client for dashboard/admin operations that require a portal token\n * (usage/measurement, feature-flag CRUD, RUM analytics).\n *\n * ```ts\n * const admin = new SimplrAdmin({ token: process.env.SIMPLR_PORTAL_TOKEN! });\n * const usage = await admin.usage.billing(orgId);\n * await admin.flags.create(orgId, { key: \"new-checkout\", environment: \"test\", rollout_percentage: 10 });\n * ```\n */\nexport class SimplrAdmin {\n  readonly usage: UsageApi;\n  readonly flags: FlagsAdminApi;\n  readonly rum: RumApi;\n\n  constructor(options: SimplrAdminOptions) {\n    if (!options?.token) throw new Error(\"SimplrAdmin: `token` is required\");\n    const cfg: HttpConfig = {\n      authHeaders: { Authorization: `Bearer ${options.token}` },\n      baseUrl: (options.baseUrl || \"https://api.simplr.sh\").replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof cfg.fetchImpl !== \"function\") {\n      throw new Error(\"SimplrAdmin: no global fetch available — use Node 18+ or pass `fetch`\");\n    }\n    this.usage = new UsageApi(cfg);\n    this.flags = new FlagsAdminApi(cfg);\n    this.rum = new RumApi(cfg);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACLA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,IAAI;AAAA,MACT;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;AClDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;ACxDA,SAAS,YAAY,OAAe,OAAO,GAAW;AACpD,MAAI,KAAK;AACT,QAAM,KAAK;AACX,QAAM,KAAK;AACX,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,QAAI,KAAK,MAAM,WAAW,CAAC;AAC3B,SAAK,KAAK,KAAK,IAAI,EAAE;AACrB,SAAM,MAAM,KAAO,OAAO;AAC1B,SAAK,KAAK,KAAK,IAAI,EAAE;AACrB,UAAM;AACN,SAAM,MAAM,KAAO,OAAO;AAC1B,SAAK,KAAK,KAAK,IAAI,CAAC,IAAI;AAAA,EAC1B;AACA,QAAM,MAAM;AACZ,QAAM,OAAO;AACb,OAAK,KAAK,KAAK,IAAI,UAAU;AAC7B,QAAM,OAAO;AACb,OAAK,KAAK,KAAK,IAAI,UAAU;AAC7B,QAAM,OAAO;AACb,SAAO,OAAO;AAChB;AAkCA,SAAS,UAAU,MAAgB,YAA8C;AAC/E,QAAM,SAAS,WAAW,KAAK,SAAS;AACxC,UAAQ,KAAK,IAAI;AAAA,IACf,KAAK;AACH,aAAO,OAAO,MAAM,MAAM,KAAK;AAAA,IACjC,KAAK;AACH,aAAO,OAAO,MAAM,MAAM,KAAK;AAAA,IACjC,KAAK;AACH,aAAO,OAAO,UAAU,EAAE,EAAE,SAAS,KAAK,KAAK;AAAA,IACjD;AACE,aAAO;AAAA,EACX;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACT,QAAwC,CAAC;AAAA,EACzC;AAAA,EACA,QAA+C;AAAA,EAC/C,QAAQ;AAAA,EAEhB,YAAY,SAAuB;AACjC,QAAI,CAAC,SAAS,UAAW,OAAM,IAAI,MAAM,sCAAsC;AAC/E,SAAK,MAAM;AAAA,MACT,aAAa,EAAE,aAAa,QAAQ,UAAU;AAAA,MAC9C,UAAU,QAAQ,WAAW,yBAAyB,QAAQ,QAAQ,EAAE;AAAA,MACxE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,SAAK,cAAc,QAAQ;AAC3B,SAAK,oBAAoB,QAAQ,qBAAqB;AAAA,EACxD;AAAA;AAAA,EAGA,MAAM,aAA4B;AAChC,UAAM,KAAK,QAAQ;AACnB,SAAK,QAAQ;AACb,QAAI,KAAK,oBAAoB,GAAG;AAC9B,WAAK,QAAQ,YAAY,MAAM;AAC7B,aAAK,KAAK,QAAQ;AAAA,MACpB,GAAG,KAAK,iBAAiB;AAEzB,MAAC,KAAK,OAAe,QAAQ;AAAA,IAC/B;AAAA,EACF;AAAA;AAAA,EAGA,QAAQ,QAAsB;AAC5B,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,OAAO,KAAK,cAAc,yBAAyB,KAAK,WAAW,KAAK;AAC9E,QAAI;AACF,YAAM,UAAU,MAAM,WAAwC,KAAK,KAAK,OAAO,IAAI;AACnF,YAAM,OAAO,SAAS,SAAS,CAAC;AAChC,YAAM,MAAsC,CAAC;AAC7C,iBAAW,KAAK,KAAM,KAAI,EAAE,GAAG,IAAI;AACnC,WAAK,QAAQ;AAAA,IACf,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA,EAGA,UAAU,KAAa,MAAmB,CAAC,GAAY;AACrD,UAAM,IAAI,KAAK,MAAM,GAAG;AACxB,QAAI,CAAC,KAAK,CAAC,EAAE,QAAS,QAAO;AAE7B,UAAM,MAAM,IAAI,UAAU,KAAK,iBAAiB;AAChD,QAAI,EAAE,iBAAiB,SAAS,GAAG,EAAG,QAAO;AAC7C,QAAI,IAAI,cAAc,EAAE,OAAO,UAAU,EAAE,MAAM,KAAK,CAAC,MAAM,UAAU,GAAG,IAAI,UAAW,CAAC,GAAG;AAC3F,aAAO;AAAA,IACT;AACA,QAAI,EAAE,sBAAsB,IAAK,QAAO;AACxC,QAAI,EAAE,sBAAsB,EAAG,QAAO;AACtC,WAAO,YAAY,GAAG,GAAG,IAAI,GAAG,EAAE,IAAI,MAAM,EAAE;AAAA,EAChD;AAAA,EAEA,SAAyC;AACvC,WAAO,EAAE,GAAG,KAAK,MAAM;AAAA,EACzB;AAAA,EAEA,UAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI,KAAK,MAAO,eAAc,KAAK,KAAK;AACxC,SAAK,QAAQ;AAAA,EACf;AACF;;;ACpKA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA4C;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,aAAO,+BAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,eAAO,oCAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;ACvEjD,SAAS,GAAG,QAAyC;AACnD,QAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,UAAa,MAAM,IAAI;AACtF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,MAAM,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG;AACxF;AAGA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAE7B,MAAM,OAAe;AACnB,WAAO,WAAW,KAAK,KAAK,OAAO,kBAAkB,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EAC9E;AAAA;AAAA,EAEA,KAAK,OAAe,SAA4C,CAAC,GAAG;AAClE,WAAO,WAAW,KAAK,KAAK,OAAO,iBAAiB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EACxF;AAAA;AAAA,EAEA,QAAQ,OAAe;AACrB,WAAO,WAAW,KAAK,KAAK,OAAO,oBAAoB,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EAChF;AACF;AAGA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA,EAC7B,KAAK,OAAe,aAA+B;AACjD,WAAO,WAAW,KAAK,KAAK,OAAO,oBAAoB,GAAG,EAAE,QAAQ,OAAO,YAAY,CAAC,CAAC,EAAE;AAAA,EAC7F;AAAA,EACA,IAAI,OAAe,IAAY;AAC7B,WAAO,WAAW,KAAK,KAAK,OAAO,qBAAqB,EAAE,GAAG,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EACtF;AAAA,EACA,OAAO,OAAe,MAA+B;AACnD,WAAO,WAAW,KAAK,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,OAAO,GAAG,KAAK,CAAC;AAAA,EACrF;AAAA,EACA,OAAO,OAAe,IAAY,MAA+B;AAC/D,WAAO,WAAW,KAAK,KAAK,SAAS,qBAAqB,EAAE,IAAI,EAAE,QAAQ,OAAO,GAAG,KAAK,CAAC;AAAA,EAC5F;AAAA,EACA,OAAO,OAAe,IAAY;AAChC,WAAO,WAAW,KAAK,KAAK,UAAU,qBAAqB,EAAE,GAAG,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EACzF;AAAA,EACA,QAAQ,OAAe,IAAY,SAA8C,CAAC,GAAG;AACnF,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,qBAAqB,EAAE,WAAW,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAGA,IAAM,SAAN,MAAa;AAAA,EACX,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA,EAC7B,SAAS,OAAe,SAA8E,CAAC,GAAG;AACxG,WAAO,WAAW,KAAK,KAAK,OAAO,mBAAmB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EAC1F;AAAA,EACA,SAAS,OAAe,SAA8D,CAAC,GAAG;AACxF,WAAO,WAAW,KAAK,KAAK,OAAO,mBAAmB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EAC1F;AACF;AAYO,IAAM,cAAN,MAAkB;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAA6B;AACvC,QAAI,CAAC,SAAS,MAAO,OAAM,IAAI,MAAM,kCAAkC;AACvE,UAAM,MAAkB;AAAA,MACtB,aAAa,EAAE,eAAe,UAAU,QAAQ,KAAK,GAAG;AAAA,MACxD,UAAU,QAAQ,WAAW,yBAAyB,QAAQ,QAAQ,EAAE;AAAA,MACxE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,IAAI,cAAc,YAAY;AACvC,YAAM,IAAI,MAAM,4EAAuE;AAAA,IACzF;AACA,SAAK,QAAQ,IAAI,SAAS,GAAG;AAC7B,SAAK,QAAQ,IAAI,cAAc,GAAG;AAClC,SAAK,MAAM,IAAI,OAAO,GAAG;AAAA,EAC3B;AACF;;;ANxFA,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEH;AAAA,EAEjB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,aAAa,EAAE,aAAa,QAAQ,OAAO;AAAA,MAC3C,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AACrC,QAAI,QAAQ,WAAW;AACrB,WAAK,SAAS,IAAI,YAAY;AAAA,QAC5B,WAAW,QAAQ;AAAA,QACnB,SAAS,KAAK,IAAI;AAAA,QAClB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO,KAAK,IAAI;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,QAAqB;AACvB,QAAI,CAAC,KAAK,QAAQ;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}

package/dist/index.d.cts

@@ -1,5 +1,6 @@
 interface HttpConfig {
-    apiKey: string;
+    /** Auth headers to send (e.g. { "X-API-Key": "sk_…" } or { Authorization: "Bearer …" }). */
+    authHeaders: Record<string, string>;
     baseUrl: string;
     timeoutMs: number;
     fetchImpl: typeof fetch;
@@ -9,6 +10,8 @@ type RiskLevel = "low" | "medium" | "high" | "critical";
 interface SimplrOptions {
     /** Secret API key (sk_live_… / sk_test_…). Keep this server-side only. */
     apiKey: string;
+    /** Public key (pk_…) — enables `simplr.flags` for server-side feature-flag evaluation. */
+    publicKey?: string;
     /** API base URL. Defaults to https://api.simplr.sh. */
     baseUrl?: string;
     /** Per-request timeout in ms (default 15000). */
@@ -109,6 +112,66 @@ declare class EdgeResource {
     ingestLogs(deviceId: string, logs: EdgeLogEntry[]): Promise<unknown>;
 }
 
+interface FlagRule {
+    attribute: string;
+    op: "eq" | "neq" | "contains";
+    value: string;
+}
+interface FlagDefinition {
+    key: string;
+    enabled: boolean;
+    rollout_percentage: number;
+    target_user_ids: string[];
+    rules: FlagRule[];
+}
+interface FlagsOptions {
+    /** Public API key (pk_live_… / pk_test_…). Required — flags read uses the public key. */
+    publicKey: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    /** Which environment's flags to load. Defaults to the key's own environment. */
+    environment?: "live" | "test";
+    /** Auto-refresh interval in ms (default 60000; 0 disables). */
+    refreshIntervalMs?: number;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+interface EvalContext {
+    userId?: string;
+    attributes?: Record<string, unknown>;
+}
+/**
+ * Server-side feature flags with local, deterministic evaluation.
+ *
+ * ```ts
+ * const flags = new SimplrFlags({ publicKey: process.env.SIMPLR_PUBLIC_KEY! });
+ * await flags.initialize();
+ * if (flags.isEnabled("new-checkout", { userId: "user_123" })) { ... }
+ * ```
+ */
+declare class SimplrFlags {
+    private readonly cfg;
+    private readonly environment?;
+    private readonly refreshIntervalMs;
+    private flags;
+    private defaultUserId?;
+    private timer;
+    private ready;
+    constructor(options: FlagsOptions);
+    /** Fetch the flag config once and start the background refresh. */
+    initialize(): Promise<void>;
+    /** Set the default identifier used for bucketing when none is passed to isEnabled. */
+    setUser(userId: string): void;
+    /** Re-fetch the flag config (counts as one billable request). */
+    refresh(): Promise<void>;
+    /** Evaluate a flag locally. Deterministic per user; no network call. */
+    isEnabled(key: string, ctx?: EvalContext): boolean;
+    getAll(): Record<string, FlagDefinition>;
+    isReady(): boolean;
+    /** Stop the background refresh timer. */
+    dispose(): void;
+}
+
 interface VerifyOptions {
     /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */
     toleranceSec?: number;
@@ -154,6 +217,74 @@ declare class WebhookVerificationError extends Error {
     constructor(message: string);
 }
 
+interface SimplrAdminOptions {
+    /** Portal token (JWT) for dashboard/admin operations. */
+    token: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+/** Usage / measurement reads. */
+declare class UsageApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Aggregate usage stats for an org. */
+    stats(orgId: string): Promise<unknown>;
+    /** Raw usage logs for an org. */
+    logs(orgId: string, params?: {
+        page?: number;
+        limit?: number;
+    }): Promise<unknown>;
+    /** Billing usage breakdown (per-service totals + estimated cost). */
+    billing(orgId: string): Promise<unknown>;
+}
+/** Feature-flag administration (create/update/delete/history). */
+declare class FlagsAdminApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    list(orgId: string, environment?: "live" | "test"): Promise<unknown>;
+    get(orgId: string, id: string): Promise<unknown>;
+    create(orgId: string, data: Record<string, unknown>): Promise<unknown>;
+    update(orgId: string, id: string, data: Record<string, unknown>): Promise<unknown>;
+    remove(orgId: string, id: string): Promise<unknown>;
+    history(orgId: string, id: string, params?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<unknown>;
+}
+/** RUM analytics reads. */
+declare class RumApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    overview(orgId: string, params?: {
+        application_id?: string;
+        start_date?: string;
+        end_date?: string;
+    }): Promise<unknown>;
+    sessions(orgId: string, params?: {
+        page?: number;
+        limit?: number;
+        user_id?: string;
+    }): Promise<unknown>;
+}
+/**
+ * Management client for dashboard/admin operations that require a portal token
+ * (usage/measurement, feature-flag CRUD, RUM analytics).
+ *
+ * ```ts
+ * const admin = new SimplrAdmin({ token: process.env.SIMPLR_PORTAL_TOKEN! });
+ * const usage = await admin.usage.billing(orgId);
+ * await admin.flags.create(orgId, { key: "new-checkout", environment: "test", rollout_percentage: 10 });
+ * ```
+ */
+declare class SimplrAdmin {
+    readonly usage: UsageApi;
+    readonly flags: FlagsAdminApi;
+    readonly rum: RumApi;
+    constructor(options: SimplrAdminOptions);
+}
+
 /**
  * Simplr server-side client.
  *
@@ -170,11 +301,17 @@ declare class Simplr {
     readonly edge: EdgeResource;
     /** Webhook signature helpers (no network). */
     readonly webhooks: typeof webhooks$1;
+    private readonly _flags?;
     constructor(options: SimplrOptions);
+    /**
+     * Server-side feature flags. Requires a `publicKey` in the constructor options
+     * (flag config is read with the public key). Call `simplr.flags.initialize()` once.
+     */
+    get flags(): SimplrFlags;
     /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
     check(input: CheckInput): Promise<CheckResult>;
     /** Run up to 100 checks at once. */
     checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>>;
 }
 
-export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrError, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };
+export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type EvalContext, type FlagDefinition, type FlagRule, type FlagsOptions, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrAdmin, type SimplrAdminOptions, SimplrError, SimplrFlags, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 interface HttpConfig {
-    apiKey: string;
+    /** Auth headers to send (e.g. { "X-API-Key": "sk_…" } or { Authorization: "Bearer …" }). */
+    authHeaders: Record<string, string>;
     baseUrl: string;
     timeoutMs: number;
     fetchImpl: typeof fetch;
@@ -9,6 +10,8 @@ type RiskLevel = "low" | "medium" | "high" | "critical";
 interface SimplrOptions {
     /** Secret API key (sk_live_… / sk_test_…). Keep this server-side only. */
     apiKey: string;
+    /** Public key (pk_…) — enables `simplr.flags` for server-side feature-flag evaluation. */
+    publicKey?: string;
     /** API base URL. Defaults to https://api.simplr.sh. */
     baseUrl?: string;
     /** Per-request timeout in ms (default 15000). */
@@ -109,6 +112,66 @@ declare class EdgeResource {
     ingestLogs(deviceId: string, logs: EdgeLogEntry[]): Promise<unknown>;
 }
 
+interface FlagRule {
+    attribute: string;
+    op: "eq" | "neq" | "contains";
+    value: string;
+}
+interface FlagDefinition {
+    key: string;
+    enabled: boolean;
+    rollout_percentage: number;
+    target_user_ids: string[];
+    rules: FlagRule[];
+}
+interface FlagsOptions {
+    /** Public API key (pk_live_… / pk_test_…). Required — flags read uses the public key. */
+    publicKey: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    /** Which environment's flags to load. Defaults to the key's own environment. */
+    environment?: "live" | "test";
+    /** Auto-refresh interval in ms (default 60000; 0 disables). */
+    refreshIntervalMs?: number;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+interface EvalContext {
+    userId?: string;
+    attributes?: Record<string, unknown>;
+}
+/**
+ * Server-side feature flags with local, deterministic evaluation.
+ *
+ * ```ts
+ * const flags = new SimplrFlags({ publicKey: process.env.SIMPLR_PUBLIC_KEY! });
+ * await flags.initialize();
+ * if (flags.isEnabled("new-checkout", { userId: "user_123" })) { ... }
+ * ```
+ */
+declare class SimplrFlags {
+    private readonly cfg;
+    private readonly environment?;
+    private readonly refreshIntervalMs;
+    private flags;
+    private defaultUserId?;
+    private timer;
+    private ready;
+    constructor(options: FlagsOptions);
+    /** Fetch the flag config once and start the background refresh. */
+    initialize(): Promise<void>;
+    /** Set the default identifier used for bucketing when none is passed to isEnabled. */
+    setUser(userId: string): void;
+    /** Re-fetch the flag config (counts as one billable request). */
+    refresh(): Promise<void>;
+    /** Evaluate a flag locally. Deterministic per user; no network call. */
+    isEnabled(key: string, ctx?: EvalContext): boolean;
+    getAll(): Record<string, FlagDefinition>;
+    isReady(): boolean;
+    /** Stop the background refresh timer. */
+    dispose(): void;
+}
+
 interface VerifyOptions {
     /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */
     toleranceSec?: number;
@@ -154,6 +217,74 @@ declare class WebhookVerificationError extends Error {
     constructor(message: string);
 }
 
+interface SimplrAdminOptions {
+    /** Portal token (JWT) for dashboard/admin operations. */
+    token: string;
+    /** API base URL. Defaults to https://api.simplr.sh. */
+    baseUrl?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+}
+/** Usage / measurement reads. */
+declare class UsageApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    /** Aggregate usage stats for an org. */
+    stats(orgId: string): Promise<unknown>;
+    /** Raw usage logs for an org. */
+    logs(orgId: string, params?: {
+        page?: number;
+        limit?: number;
+    }): Promise<unknown>;
+    /** Billing usage breakdown (per-service totals + estimated cost). */
+    billing(orgId: string): Promise<unknown>;
+}
+/** Feature-flag administration (create/update/delete/history). */
+declare class FlagsAdminApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    list(orgId: string, environment?: "live" | "test"): Promise<unknown>;
+    get(orgId: string, id: string): Promise<unknown>;
+    create(orgId: string, data: Record<string, unknown>): Promise<unknown>;
+    update(orgId: string, id: string, data: Record<string, unknown>): Promise<unknown>;
+    remove(orgId: string, id: string): Promise<unknown>;
+    history(orgId: string, id: string, params?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<unknown>;
+}
+/** RUM analytics reads. */
+declare class RumApi {
+    private readonly cfg;
+    constructor(cfg: HttpConfig);
+    overview(orgId: string, params?: {
+        application_id?: string;
+        start_date?: string;
+        end_date?: string;
+    }): Promise<unknown>;
+    sessions(orgId: string, params?: {
+        page?: number;
+        limit?: number;
+        user_id?: string;
+    }): Promise<unknown>;
+}
+/**
+ * Management client for dashboard/admin operations that require a portal token
+ * (usage/measurement, feature-flag CRUD, RUM analytics).
+ *
+ * ```ts
+ * const admin = new SimplrAdmin({ token: process.env.SIMPLR_PORTAL_TOKEN! });
+ * const usage = await admin.usage.billing(orgId);
+ * await admin.flags.create(orgId, { key: "new-checkout", environment: "test", rollout_percentage: 10 });
+ * ```
+ */
+declare class SimplrAdmin {
+    readonly usage: UsageApi;
+    readonly flags: FlagsAdminApi;
+    readonly rum: RumApi;
+    constructor(options: SimplrAdminOptions);
+}
+
 /**
  * Simplr server-side client.
  *
@@ -170,11 +301,17 @@ declare class Simplr {
     readonly edge: EdgeResource;
     /** Webhook signature helpers (no network). */
     readonly webhooks: typeof webhooks$1;
+    private readonly _flags?;
     constructor(options: SimplrOptions);
+    /**
+     * Server-side feature flags. Requires a `publicKey` in the constructor options
+     * (flag config is read with the public key). Call `simplr.flags.initialize()` once.
+     */
+    get flags(): SimplrFlags;
     /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
     check(input: CheckInput): Promise<CheckResult>;
     /** Run up to 100 checks at once. */
     checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>>;
 }
 
-export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrError, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };
+export { type BulkResult, type CheckInput, type CheckResult, type EdgeLogEntry, type EvalContext, type FlagDefinition, type FlagRule, type FlagsOptions, type OrderInput, type OrderResult, type PhoneOutcome, type PhoneReportInput, type RiskLevel, Simplr, SimplrAdmin, type SimplrAdminOptions, SimplrError, SimplrFlags, type SimplrOptions, WebhookVerificationError, constructEvent as constructWebhookEvent, Simplr as default, verify as verifyWebhook };

package/dist/index.js

@@ -31,7 +31,7 @@ async function apiRequest(cfg, method, path, body) {
       method,
       headers: {
         "Content-Type": "application/json",
-        "X-API-Key": cfg.apiKey
+        ...cfg.authHeaders
       },
       body: body !== void 0 ? JSON.stringify(body) : void 0,
       signal: controller.signal
@@ -112,6 +112,113 @@ var EdgeResource = class {
   }
 };
 
+// src/flags.ts
+function murmurHash3(input, seed = 0) {
+  let h1 = seed;
+  const c1 = 3432918353;
+  const c2 = 461845907;
+  for (let i = 0; i < input.length; i++) {
+    let k1 = input.charCodeAt(i);
+    k1 = Math.imul(k1, c1);
+    k1 = k1 << 15 | k1 >>> 17;
+    k1 = Math.imul(k1, c2);
+    h1 ^= k1;
+    h1 = h1 << 13 | h1 >>> 19;
+    h1 = Math.imul(h1, 5) + 3864292196;
+  }
+  h1 ^= input.length;
+  h1 ^= h1 >>> 16;
+  h1 = Math.imul(h1, 2246822507);
+  h1 ^= h1 >>> 13;
+  h1 = Math.imul(h1, 3266489909);
+  h1 ^= h1 >>> 16;
+  return h1 >>> 0;
+}
+function matchRule(rule, attributes) {
+  const actual = attributes[rule.attribute];
+  switch (rule.op) {
+    case "eq":
+      return String(actual) === rule.value;
+    case "neq":
+      return String(actual) !== rule.value;
+    case "contains":
+      return String(actual ?? "").includes(rule.value);
+    default:
+      return false;
+  }
+}
+var SimplrFlags = class {
+  cfg;
+  environment;
+  refreshIntervalMs;
+  flags = {};
+  defaultUserId;
+  timer = null;
+  ready = false;
+  constructor(options) {
+    if (!options?.publicKey) throw new Error("SimplrFlags: `publicKey` is required");
+    this.cfg = {
+      authHeaders: { "X-API-Key": options.publicKey },
+      baseUrl: (options.baseUrl || "https://api.simplr.sh").replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    this.environment = options.environment;
+    this.refreshIntervalMs = options.refreshIntervalMs ?? 6e4;
+  }
+  /** Fetch the flag config once and start the background refresh. */
+  async initialize() {
+    await this.refresh();
+    this.ready = true;
+    if (this.refreshIntervalMs > 0) {
+      this.timer = setInterval(() => {
+        void this.refresh();
+      }, this.refreshIntervalMs);
+      this.timer?.unref?.();
+    }
+  }
+  /** Set the default identifier used for bucketing when none is passed to isEnabled. */
+  setUser(userId) {
+    this.defaultUserId = userId;
+  }
+  /** Re-fetch the flag config (counts as one billable request). */
+  async refresh() {
+    const path = this.environment ? `/v1/flags?environment=${this.environment}` : "/v1/flags";
+    try {
+      const content = await apiRequest(this.cfg, "GET", path);
+      const list = content?.flags || [];
+      const map = {};
+      for (const f of list) map[f.key] = f;
+      this.flags = map;
+    } catch {
+    }
+  }
+  /** Evaluate a flag locally. Deterministic per user; no network call. */
+  isEnabled(key, ctx = {}) {
+    const f = this.flags[key];
+    if (!f || !f.enabled) return false;
+    const uid = ctx.userId || this.defaultUserId || "anonymous";
+    if (f.target_user_ids?.includes(uid)) return true;
+    if (ctx.attributes && f.rules?.length && f.rules.some((r) => matchRule(r, ctx.attributes))) {
+      return true;
+    }
+    if (f.rollout_percentage >= 100) return true;
+    if (f.rollout_percentage <= 0) return false;
+    return murmurHash3(`${key}:${uid}`) % 100 < f.rollout_percentage;
+  }
+  getAll() {
+    return { ...this.flags };
+  }
+  isReady() {
+    return this.ready;
+  }
+  /** Stop the background refresh timer. */
+  dispose() {
+    if (this.timer) clearInterval(this.timer);
+    this.timer = null;
+  }
+};
+
 // src/webhooks.ts
 var webhooks_exports = {};
 __export(webhooks_exports, {
@@ -166,6 +273,91 @@ function constructEvent(payload, header, secret, options = {}) {
 }
 var webhooks = { verify, constructEvent };
 
+// src/admin.ts
+function qs(params) {
+  const entries = Object.entries(params).filter(([, v]) => v !== void 0 && v !== null);
+  if (!entries.length) return "";
+  return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+}
+var UsageApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  /** Aggregate usage stats for an org. */
+  stats(orgId) {
+    return apiRequest(this.cfg, "GET", `/v1/usage/stats${qs({ org_id: orgId })}`);
+  }
+  /** Raw usage logs for an org. */
+  logs(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/usage/logs${qs({ org_id: orgId, ...params })}`);
+  }
+  /** Billing usage breakdown (per-service totals + estimated cost). */
+  billing(orgId) {
+    return apiRequest(this.cfg, "GET", `/v1/billing/usage${qs({ org_id: orgId })}`);
+  }
+};
+var FlagsAdminApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  list(orgId, environment) {
+    return apiRequest(this.cfg, "GET", `/v1/feature-flags${qs({ org_id: orgId, environment })}`);
+  }
+  get(orgId, id) {
+    return apiRequest(this.cfg, "GET", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);
+  }
+  create(orgId, data) {
+    return apiRequest(this.cfg, "POST", "/v1/feature-flags", { org_id: orgId, ...data });
+  }
+  update(orgId, id, data) {
+    return apiRequest(this.cfg, "PATCH", `/v1/feature-flags/${id}`, { org_id: orgId, ...data });
+  }
+  remove(orgId, id) {
+    return apiRequest(this.cfg, "DELETE", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);
+  }
+  history(orgId, id, params = {}) {
+    return apiRequest(
+      this.cfg,
+      "GET",
+      `/v1/feature-flags/${id}/history${qs({ org_id: orgId, ...params })}`
+    );
+  }
+};
+var RumApi = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  cfg;
+  overview(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/rum/overview${qs({ org_id: orgId, ...params })}`);
+  }
+  sessions(orgId, params = {}) {
+    return apiRequest(this.cfg, "GET", `/v1/rum/sessions${qs({ org_id: orgId, ...params })}`);
+  }
+};
+var SimplrAdmin = class {
+  usage;
+  flags;
+  rum;
+  constructor(options) {
+    if (!options?.token) throw new Error("SimplrAdmin: `token` is required");
+    const cfg = {
+      authHeaders: { Authorization: `Bearer ${options.token}` },
+      baseUrl: (options.baseUrl || "https://api.simplr.sh").replace(/\/+$/, ""),
+      timeoutMs: options.timeoutMs ?? 15e3,
+      fetchImpl: options.fetch ?? globalThis.fetch
+    };
+    if (typeof cfg.fetchImpl !== "function") {
+      throw new Error("SimplrAdmin: no global fetch available \u2014 use Node 18+ or pass `fetch`");
+    }
+    this.usage = new UsageApi(cfg);
+    this.flags = new FlagsAdminApi(cfg);
+    this.rum = new RumApi(cfg);
+  }
+};
+
 // src/index.ts
 var DEFAULT_BASE_URL = "https://api.simplr.sh";
 var Simplr = class {
@@ -175,10 +367,11 @@ var Simplr = class {
   edge;
   /** Webhook signature helpers (no network). */
   webhooks = webhooks_exports;
+  _flags;
   constructor(options) {
     if (!options?.apiKey) throw new Error("Simplr: `apiKey` is required");
     this.cfg = {
-      apiKey: options.apiKey,
+      authHeaders: { "X-API-Key": options.apiKey },
       baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, ""),
       timeoutMs: options.timeoutMs ?? 15e3,
       fetchImpl: options.fetch ?? globalThis.fetch
@@ -189,6 +382,26 @@ var Simplr = class {
     this.orders = new OrdersResource(this.cfg);
     this.phone = new PhoneResource(this.cfg);
     this.edge = new EdgeResource(this.cfg);
+    if (options.publicKey) {
+      this._flags = new SimplrFlags({
+        publicKey: options.publicKey,
+        baseUrl: this.cfg.baseUrl,
+        timeoutMs: this.cfg.timeoutMs,
+        fetch: this.cfg.fetchImpl
+      });
+    }
+  }
+  /**
+   * Server-side feature flags. Requires a `publicKey` in the constructor options
+   * (flag config is read with the public key). Call `simplr.flags.initialize()` once.
+   */
+  get flags() {
+    if (!this._flags) {
+      throw new Error(
+        "Simplr.flags requires a `publicKey` \u2014 pass it to `new Simplr({ apiKey, publicKey })`."
+      );
+    }
+    return this._flags;
   }
   /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */
   check(input) {
@@ -202,7 +415,9 @@ var Simplr = class {
 var src_default = Simplr;
 export {
   Simplr,
+  SimplrAdmin,
   SimplrError,
+  SimplrFlags,
   WebhookVerificationError,
   constructEvent as constructWebhookEvent,
   src_default as default,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/resources.ts","../src/webhooks.ts","../src/index.ts"],"sourcesContent":["/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  apiKey: string;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-API-Key\": cfg.apiKey,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      apiKey: options.apiKey,\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n"],"mappings":";;;;;;;AACO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACNA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,aAAa,IAAI;AAAA,MACnB;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;ACjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;AC9DA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,YAAY,uBAAuB;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,SAAO,WAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,WAAO,gBAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;ACzEjD,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEpB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AAAA,EACvC;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/resources.ts","../src/flags.ts","../src/webhooks.ts","../src/admin.ts","../src/index.ts"],"sourcesContent":["/** Thrown when the Simplr API returns a non-2xx response. */\nexport class SimplrError extends Error {\n  readonly status: number;\n  readonly body: unknown;\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message);\n    this.name = \"SimplrError\";\n    this.status = status;\n    this.body = body;\n  }\n}\n\n/** Thrown when a webhook signature fails verification. */\nexport class WebhookVerificationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"WebhookVerificationError\";\n  }\n}\n","import { SimplrError } from \"./errors.js\";\n\nexport interface HttpConfig {\n  /** Auth headers to send (e.g. { \"X-API-Key\": \"sk_…\" } or { Authorization: \"Bearer …\" }). */\n  authHeaders: Record<string, string>;\n  baseUrl: string;\n  timeoutMs: number;\n  fetchImpl: typeof fetch;\n}\n\n/**\n * Internal request helper. Sends X-API-Key, applies a timeout, and unwraps the\n * API's `{ success, message, content }` envelope (returning `content`).\n */\nexport async function apiRequest<T>(\n  cfg: HttpConfig,\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"DELETE\",\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);\n  try {\n    const res = await cfg.fetchImpl(`${cfg.baseUrl}${path}`, {\n      method,\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...cfg.authHeaders,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n\n    const text = await res.text();\n    let parsed: any;\n    try {\n      parsed = text ? JSON.parse(text) : undefined;\n    } catch {\n      parsed = text;\n    }\n\n    if (!res.ok) {\n      const message =\n        (parsed && (parsed.message || parsed.error)) || `Simplr API error ${res.status}`;\n      throw new SimplrError(message, res.status, parsed);\n    }\n\n    // Unwrap the standard envelope when present.\n    return (parsed && typeof parsed === \"object\" && \"content\" in parsed\n      ? parsed.content\n      : parsed) as T;\n  } catch (err) {\n    if (err instanceof SimplrError) throw err;\n    if (err instanceof Error && err.name === \"AbortError\") {\n      throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);\n    }\n    throw new SimplrError(err instanceof Error ? err.message : \"Network error\", 0, null);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport type {\n  BulkResult,\n  EdgeLogEntry,\n  OrderInput,\n  OrderResult,\n  PhoneReportInput,\n} from \"./types.js\";\n\n/** Order fraud scoring. */\nexport class OrdersResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Submit a single order for fraud scoring. */\n  submit(order: OrderInput): Promise<OrderResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders\", order);\n  }\n\n  /** Submit up to 100 orders at once. */\n  submitBulk(orders: OrderInput[]): Promise<BulkResult<OrderResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/orders/bulk\", { orders });\n  }\n}\n\n/** Phone intelligence + outcome reporting. */\nexport class PhoneResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Report the real-world outcome for a phone number to improve scoring. */\n  report(input: PhoneReportInput): Promise<{ success: boolean }> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/phone/report\", input);\n  }\n\n  /** Fetch stored risk intelligence for a phone number. */\n  intelligence(phone: string): Promise<Record<string, unknown>> {\n    return apiRequest(this.cfg, \"GET\", `/v1/check/phone/intelligence/${encodeURIComponent(phone)}`);\n  }\n}\n\n/** Edge device registration + log ingestion. */\nexport class EdgeResource {\n  constructor(private readonly cfg: HttpConfig) {}\n\n  /** Register an edge device. */\n  registerDevice(input: { device_id: string; name?: string; firmware?: string; [k: string]: unknown }) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/devices/register\", input);\n  }\n\n  /** Report a device heartbeat with health metrics. */\n  heartbeat(deviceId: string, metrics: Record<string, unknown>) {\n    return apiRequest(\n      this.cfg,\n      \"POST\",\n      `/v1/edge/devices/${encodeURIComponent(deviceId)}/heartbeat`,\n      metrics,\n    );\n  }\n\n  /** Batch-ingest structured logs for a device. */\n  ingestLogs(deviceId: string, logs: EdgeLogEntry[]) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/edge/logs\", { device_id: deviceId, logs });\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\n\n/**\n * MurmurHash3 (x86, 32-bit) — identical to the browser SDK so a given user\n * buckets the same way on the client and the server.\n */\nfunction murmurHash3(input: string, seed = 0): number {\n  let h1 = seed;\n  const c1 = 0xcc9e2d51;\n  const c2 = 0x1b873593;\n  for (let i = 0; i < input.length; i++) {\n    let k1 = input.charCodeAt(i);\n    k1 = Math.imul(k1, c1);\n    k1 = (k1 << 15) | (k1 >>> 17);\n    k1 = Math.imul(k1, c2);\n    h1 ^= k1;\n    h1 = (h1 << 13) | (h1 >>> 19);\n    h1 = Math.imul(h1, 5) + 0xe6546b64;\n  }\n  h1 ^= input.length;\n  h1 ^= h1 >>> 16;\n  h1 = Math.imul(h1, 0x85ebca6b);\n  h1 ^= h1 >>> 13;\n  h1 = Math.imul(h1, 0xc2b2ae35);\n  h1 ^= h1 >>> 16;\n  return h1 >>> 0;\n}\n\nexport interface FlagRule {\n  attribute: string;\n  op: \"eq\" | \"neq\" | \"contains\";\n  value: string;\n}\n\nexport interface FlagDefinition {\n  key: string;\n  enabled: boolean;\n  rollout_percentage: number;\n  target_user_ids: string[];\n  rules: FlagRule[];\n}\n\nexport interface FlagsOptions {\n  /** Public API key (pk_live_… / pk_test_…). Required — flags read uses the public key. */\n  publicKey: string;\n  /** API base URL. Defaults to https://api.simplr.sh. */\n  baseUrl?: string;\n  /** Which environment's flags to load. Defaults to the key's own environment. */\n  environment?: \"live\" | \"test\";\n  /** Auto-refresh interval in ms (default 60000; 0 disables). */\n  refreshIntervalMs?: number;\n  timeoutMs?: number;\n  fetch?: typeof fetch;\n}\n\nexport interface EvalContext {\n  userId?: string;\n  attributes?: Record<string, unknown>;\n}\n\nfunction matchRule(rule: FlagRule, attributes: Record<string, unknown>): boolean {\n  const actual = attributes[rule.attribute];\n  switch (rule.op) {\n    case \"eq\":\n      return String(actual) === rule.value;\n    case \"neq\":\n      return String(actual) !== rule.value;\n    case \"contains\":\n      return String(actual ?? \"\").includes(rule.value);\n    default:\n      return false;\n  }\n}\n\n/**\n * Server-side feature flags with local, deterministic evaluation.\n *\n * ```ts\n * const flags = new SimplrFlags({ publicKey: process.env.SIMPLR_PUBLIC_KEY! });\n * await flags.initialize();\n * if (flags.isEnabled(\"new-checkout\", { userId: \"user_123\" })) { ... }\n * ```\n */\nexport class SimplrFlags {\n  private readonly cfg: HttpConfig;\n  private readonly environment?: \"live\" | \"test\";\n  private readonly refreshIntervalMs: number;\n  private flags: Record<string, FlagDefinition> = {};\n  private defaultUserId?: string;\n  private timer: ReturnType<typeof setInterval> | null = null;\n  private ready = false;\n\n  constructor(options: FlagsOptions) {\n    if (!options?.publicKey) throw new Error(\"SimplrFlags: `publicKey` is required\");\n    this.cfg = {\n      authHeaders: { \"X-API-Key\": options.publicKey },\n      baseUrl: (options.baseUrl || \"https://api.simplr.sh\").replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    this.environment = options.environment;\n    this.refreshIntervalMs = options.refreshIntervalMs ?? 60000;\n  }\n\n  /** Fetch the flag config once and start the background refresh. */\n  async initialize(): Promise<void> {\n    await this.refresh();\n    this.ready = true;\n    if (this.refreshIntervalMs > 0) {\n      this.timer = setInterval(() => {\n        void this.refresh();\n      }, this.refreshIntervalMs);\n      // Don't keep the process alive just for flag refreshes.\n      (this.timer as any)?.unref?.();\n    }\n  }\n\n  /** Set the default identifier used for bucketing when none is passed to isEnabled. */\n  setUser(userId: string): void {\n    this.defaultUserId = userId;\n  }\n\n  /** Re-fetch the flag config (counts as one billable request). */\n  async refresh(): Promise<void> {\n    const path = this.environment ? `/v1/flags?environment=${this.environment}` : \"/v1/flags\";\n    try {\n      const content = await apiRequest<{ flags: FlagDefinition[] }>(this.cfg, \"GET\", path);\n      const list = content?.flags || [];\n      const map: Record<string, FlagDefinition> = {};\n      for (const f of list) map[f.key] = f;\n      this.flags = map;\n    } catch {\n      // keep last-known flags on error\n    }\n  }\n\n  /** Evaluate a flag locally. Deterministic per user; no network call. */\n  isEnabled(key: string, ctx: EvalContext = {}): boolean {\n    const f = this.flags[key];\n    if (!f || !f.enabled) return false;\n\n    const uid = ctx.userId || this.defaultUserId || \"anonymous\";\n    if (f.target_user_ids?.includes(uid)) return true;\n    if (ctx.attributes && f.rules?.length && f.rules.some((r) => matchRule(r, ctx.attributes!))) {\n      return true;\n    }\n    if (f.rollout_percentage >= 100) return true;\n    if (f.rollout_percentage <= 0) return false;\n    return murmurHash3(`${key}:${uid}`) % 100 < f.rollout_percentage;\n  }\n\n  getAll(): Record<string, FlagDefinition> {\n    return { ...this.flags };\n  }\n\n  isReady(): boolean {\n    return this.ready;\n  }\n\n  /** Stop the background refresh timer. */\n  dispose(): void {\n    if (this.timer) clearInterval(this.timer);\n    this.timer = null;\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookVerificationError } from \"./errors.js\";\n\nexport interface VerifyOptions {\n  /** Reject signatures whose timestamp is older than this many seconds (default 300). 0 disables. */\n  toleranceSec?: number;\n}\n\nfunction parseHeader(header: string): { t: string; v1: string } | null {\n  // Format: \"t=<unix-seconds>,v1=<hex-hmac>\"\n  const parts = header.split(\",\").map((p) => p.trim());\n  let t = \"\";\n  let v1 = \"\";\n  for (const part of parts) {\n    const [k, v] = part.split(\"=\");\n    if (k === \"t\") t = v;\n    if (k === \"v1\") v1 = v;\n  }\n  return t && v1 ? { t, v1 } : null;\n}\n\nfunction expectedSignature(timestamp: string, payload: string, secret: string): string {\n  return createHmac(\"sha256\", secret).update(`${timestamp}.${payload}`).digest(\"hex\");\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify a Simplr webhook signature.\n *\n * @param payload The RAW request body string (do not re-serialize parsed JSON).\n * @param header  The `X-Simplr-Signature` header value (`t=…,v1=…`).\n * @param secret  The webhook's signing secret.\n * @returns true if the signature is valid and within the tolerance window.\n */\nexport function verify(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): boolean {\n  const tolerance = options.toleranceSec ?? 300;\n  const parsed = parseHeader(header || \"\");\n  if (!parsed) return false;\n\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  const expected = expectedSignature(parsed.t, body, secret);\n  if (!safeEqualHex(parsed.v1, expected)) return false;\n\n  if (tolerance > 0) {\n    const ts = Number(parsed.t);\n    if (!Number.isFinite(ts)) return false;\n    const ageSec = Math.abs(Date.now() / 1000 - ts);\n    if (ageSec > tolerance) return false;\n  }\n  return true;\n}\n\n/**\n * Verify the signature and return the parsed event object.\n * Throws {@link WebhookVerificationError} if verification fails.\n */\nexport function constructEvent<T = { event: string; data: unknown }>(\n  payload: string | Buffer,\n  header: string,\n  secret: string,\n  options: VerifyOptions = {},\n): T {\n  if (!verify(payload, header, secret, options)) {\n    throw new WebhookVerificationError(\"Webhook signature verification failed\");\n  }\n  const body = typeof payload === \"string\" ? payload : payload.toString(\"utf8\");\n  return JSON.parse(body) as T;\n}\n\nexport const webhooks = { verify, constructEvent };\n","import { apiRequest, type HttpConfig } from \"./http.js\";\n\nexport interface SimplrAdminOptions {\n  /** Portal token (JWT) for dashboard/admin operations. */\n  token: string;\n  /** API base URL. Defaults to https://api.simplr.sh. */\n  baseUrl?: string;\n  timeoutMs?: number;\n  fetch?: typeof fetch;\n}\n\nfunction qs(params: Record<string, unknown>): string {\n  const entries = Object.entries(params).filter(([, v]) => v !== undefined && v !== null);\n  if (!entries.length) return \"\";\n  return \"?\" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join(\"&\");\n}\n\n/** Usage / measurement reads. */\nclass UsageApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  /** Aggregate usage stats for an org. */\n  stats(orgId: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/usage/stats${qs({ org_id: orgId })}`);\n  }\n  /** Raw usage logs for an org. */\n  logs(orgId: string, params: { page?: number; limit?: number } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/usage/logs${qs({ org_id: orgId, ...params })}`);\n  }\n  /** Billing usage breakdown (per-service totals + estimated cost). */\n  billing(orgId: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/billing/usage${qs({ org_id: orgId })}`);\n  }\n}\n\n/** Feature-flag administration (create/update/delete/history). */\nclass FlagsAdminApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  list(orgId: string, environment?: \"live\" | \"test\") {\n    return apiRequest(this.cfg, \"GET\", `/v1/feature-flags${qs({ org_id: orgId, environment })}`);\n  }\n  get(orgId: string, id: string) {\n    return apiRequest(this.cfg, \"GET\", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);\n  }\n  create(orgId: string, data: Record<string, unknown>) {\n    return apiRequest(this.cfg, \"POST\", \"/v1/feature-flags\", { org_id: orgId, ...data });\n  }\n  update(orgId: string, id: string, data: Record<string, unknown>) {\n    return apiRequest(this.cfg, \"PATCH\", `/v1/feature-flags/${id}`, { org_id: orgId, ...data });\n  }\n  remove(orgId: string, id: string) {\n    return apiRequest(this.cfg, \"DELETE\", `/v1/feature-flags/${id}${qs({ org_id: orgId })}`);\n  }\n  history(orgId: string, id: string, params: { limit?: number; offset?: number } = {}) {\n    return apiRequest(\n      this.cfg,\n      \"GET\",\n      `/v1/feature-flags/${id}/history${qs({ org_id: orgId, ...params })}`,\n    );\n  }\n}\n\n/** RUM analytics reads. */\nclass RumApi {\n  constructor(private readonly cfg: HttpConfig) {}\n  overview(orgId: string, params: { application_id?: string; start_date?: string; end_date?: string } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/rum/overview${qs({ org_id: orgId, ...params })}`);\n  }\n  sessions(orgId: string, params: { page?: number; limit?: number; user_id?: string } = {}) {\n    return apiRequest(this.cfg, \"GET\", `/v1/rum/sessions${qs({ org_id: orgId, ...params })}`);\n  }\n}\n\n/**\n * Management client for dashboard/admin operations that require a portal token\n * (usage/measurement, feature-flag CRUD, RUM analytics).\n *\n * ```ts\n * const admin = new SimplrAdmin({ token: process.env.SIMPLR_PORTAL_TOKEN! });\n * const usage = await admin.usage.billing(orgId);\n * await admin.flags.create(orgId, { key: \"new-checkout\", environment: \"test\", rollout_percentage: 10 });\n * ```\n */\nexport class SimplrAdmin {\n  readonly usage: UsageApi;\n  readonly flags: FlagsAdminApi;\n  readonly rum: RumApi;\n\n  constructor(options: SimplrAdminOptions) {\n    if (!options?.token) throw new Error(\"SimplrAdmin: `token` is required\");\n    const cfg: HttpConfig = {\n      authHeaders: { Authorization: `Bearer ${options.token}` },\n      baseUrl: (options.baseUrl || \"https://api.simplr.sh\").replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof cfg.fetchImpl !== \"function\") {\n      throw new Error(\"SimplrAdmin: no global fetch available — use Node 18+ or pass `fetch`\");\n    }\n    this.usage = new UsageApi(cfg);\n    this.flags = new FlagsAdminApi(cfg);\n    this.rum = new RumApi(cfg);\n  }\n}\n","import { apiRequest, type HttpConfig } from \"./http.js\";\nimport { EdgeResource, OrdersResource, PhoneResource } from \"./resources.js\";\nimport { SimplrFlags } from \"./flags.js\";\nimport * as webhooks from \"./webhooks.js\";\nimport type { BulkResult, CheckInput, CheckResult, SimplrOptions } from \"./types.js\";\n\nexport { SimplrError, WebhookVerificationError } from \"./errors.js\";\nexport * from \"./types.js\";\nexport { verify as verifyWebhook, constructEvent as constructWebhookEvent } from \"./webhooks.js\";\nexport { SimplrFlags } from \"./flags.js\";\nexport type { FlagDefinition, FlagRule, FlagsOptions, EvalContext } from \"./flags.js\";\nexport { SimplrAdmin } from \"./admin.js\";\nexport type { SimplrAdminOptions } from \"./admin.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.simplr.sh\";\n\n/**\n * Simplr server-side client.\n *\n * ```ts\n * import { Simplr } from \"@simplr-ai/node\";\n * const simplr = new Simplr({ apiKey: process.env.SIMPLR_API_KEY! });\n * const result = await simplr.check({ email: \"user@example.com\", event_type: \"signup\" });\n * ```\n */\nexport class Simplr {\n  private readonly cfg: HttpConfig;\n\n  readonly orders: OrdersResource;\n  readonly phone: PhoneResource;\n  readonly edge: EdgeResource;\n  /** Webhook signature helpers (no network). */\n  readonly webhooks = webhooks;\n\n  private readonly _flags?: SimplrFlags;\n\n  constructor(options: SimplrOptions) {\n    if (!options?.apiKey) throw new Error(\"Simplr: `apiKey` is required\");\n    this.cfg = {\n      authHeaders: { \"X-API-Key\": options.apiKey },\n      baseUrl: (options.baseUrl || DEFAULT_BASE_URL).replace(/\\/+$/, \"\"),\n      timeoutMs: options.timeoutMs ?? 15000,\n      fetchImpl: options.fetch ?? globalThis.fetch,\n    };\n    if (typeof this.cfg.fetchImpl !== \"function\") {\n      throw new Error(\"Simplr: no global fetch available — use Node 18+ or pass `fetch` in options\");\n    }\n    this.orders = new OrdersResource(this.cfg);\n    this.phone = new PhoneResource(this.cfg);\n    this.edge = new EdgeResource(this.cfg);\n    if (options.publicKey) {\n      this._flags = new SimplrFlags({\n        publicKey: options.publicKey,\n        baseUrl: this.cfg.baseUrl,\n        timeoutMs: this.cfg.timeoutMs,\n        fetch: this.cfg.fetchImpl,\n      });\n    }\n  }\n\n  /**\n   * Server-side feature flags. Requires a `publicKey` in the constructor options\n   * (flag config is read with the public key). Call `simplr.flags.initialize()` once.\n   */\n  get flags(): SimplrFlags {\n    if (!this._flags) {\n      throw new Error(\n        \"Simplr.flags requires a `publicKey` — pass it to `new Simplr({ apiKey, publicKey })`.\",\n      );\n    }\n    return this._flags;\n  }\n\n  /** Run an identity/fraud check. Provide any of email, phone, device, behavior. */\n  check(input: CheckInput): Promise<CheckResult> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check\", input);\n  }\n\n  /** Run up to 100 checks at once. */\n  checkBulk(items: CheckInput[]): Promise<BulkResult<CheckResult>> {\n    return apiRequest(this.cfg, \"POST\", \"/v1/check/bulk\", { items });\n  }\n}\n\nexport default Simplr;\n"],"mappings":";;;;;;;AACO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACLA,eAAsB,WACpB,KACA,QACA,MACA,MACY;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,IAAI,SAAS;AAChE,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,UAAU,GAAG,IAAI,OAAO,GAAG,IAAI,IAAI;AAAA,MACvD;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,IAAI;AAAA,MACT;AAAA,MACA,MAAM,SAAS,SAAY,KAAK,UAAU,IAAI,IAAI;AAAA,MAClD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI;AACJ,QAAI;AACF,eAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,IACrC,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UACH,WAAW,OAAO,WAAW,OAAO,UAAW,oBAAoB,IAAI,MAAM;AAChF,YAAM,IAAI,YAAY,SAAS,IAAI,QAAQ,MAAM;AAAA,IACnD;AAGA,WAAQ,UAAU,OAAO,WAAW,YAAY,aAAa,SACzD,OAAO,UACP;AAAA,EACN,SAAS,KAAK;AACZ,QAAI,eAAe,YAAa,OAAM;AACtC,QAAI,eAAe,SAAS,IAAI,SAAS,cAAc;AACrD,YAAM,IAAI,YAAY,cAAc,IAAI,oBAAoB,IAAI,SAAS,MAAM,GAAG,IAAI;AAAA,IACxF;AACA,UAAM,IAAI,YAAY,eAAe,QAAQ,IAAI,UAAU,iBAAiB,GAAG,IAAI;AAAA,EACrF,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;;;AClDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAyC;AAC9C,WAAO,WAAW,KAAK,KAAK,QAAQ,cAAc,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,WAAW,QAAwD;AACjE,WAAO,WAAW,KAAK,KAAK,QAAQ,mBAAmB,EAAE,OAAO,CAAC;AAAA,EACnE;AACF;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACzB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,OAAO,OAAwD;AAC7D,WAAO,WAAW,KAAK,KAAK,QAAQ,0BAA0B,KAAK;AAAA,EACrE;AAAA;AAAA,EAGA,aAAa,OAAiD;AAC5D,WAAO,WAAW,KAAK,KAAK,OAAO,gCAAgC,mBAAmB,KAAK,CAAC,EAAE;AAAA,EAChG;AACF;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAG7B,eAAe,OAAsF;AACnG,WAAO,WAAW,KAAK,KAAK,QAAQ,6BAA6B,KAAK;AAAA,EACxE;AAAA;AAAA,EAGA,UAAU,UAAkB,SAAkC;AAC5D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,oBAAoB,mBAAmB,QAAQ,CAAC;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,WAAW,UAAkB,MAAsB;AACjD,WAAO,WAAW,KAAK,KAAK,QAAQ,iBAAiB,EAAE,WAAW,UAAU,KAAK,CAAC;AAAA,EACpF;AACF;;;ACxDA,SAAS,YAAY,OAAe,OAAO,GAAW;AACpD,MAAI,KAAK;AACT,QAAM,KAAK;AACX,QAAM,KAAK;AACX,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,QAAI,KAAK,MAAM,WAAW,CAAC;AAC3B,SAAK,KAAK,KAAK,IAAI,EAAE;AACrB,SAAM,MAAM,KAAO,OAAO;AAC1B,SAAK,KAAK,KAAK,IAAI,EAAE;AACrB,UAAM;AACN,SAAM,MAAM,KAAO,OAAO;AAC1B,SAAK,KAAK,KAAK,IAAI,CAAC,IAAI;AAAA,EAC1B;AACA,QAAM,MAAM;AACZ,QAAM,OAAO;AACb,OAAK,KAAK,KAAK,IAAI,UAAU;AAC7B,QAAM,OAAO;AACb,OAAK,KAAK,KAAK,IAAI,UAAU;AAC7B,QAAM,OAAO;AACb,SAAO,OAAO;AAChB;AAkCA,SAAS,UAAU,MAAgB,YAA8C;AAC/E,QAAM,SAAS,WAAW,KAAK,SAAS;AACxC,UAAQ,KAAK,IAAI;AAAA,IACf,KAAK;AACH,aAAO,OAAO,MAAM,MAAM,KAAK;AAAA,IACjC,KAAK;AACH,aAAO,OAAO,MAAM,MAAM,KAAK;AAAA,IACjC,KAAK;AACH,aAAO,OAAO,UAAU,EAAE,EAAE,SAAS,KAAK,KAAK;AAAA,IACjD;AACE,aAAO;AAAA,EACX;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA,EACN;AAAA,EACA;AAAA,EACA;AAAA,EACT,QAAwC,CAAC;AAAA,EACzC;AAAA,EACA,QAA+C;AAAA,EAC/C,QAAQ;AAAA,EAEhB,YAAY,SAAuB;AACjC,QAAI,CAAC,SAAS,UAAW,OAAM,IAAI,MAAM,sCAAsC;AAC/E,SAAK,MAAM;AAAA,MACT,aAAa,EAAE,aAAa,QAAQ,UAAU;AAAA,MAC9C,UAAU,QAAQ,WAAW,yBAAyB,QAAQ,QAAQ,EAAE;AAAA,MACxE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,SAAK,cAAc,QAAQ;AAC3B,SAAK,oBAAoB,QAAQ,qBAAqB;AAAA,EACxD;AAAA;AAAA,EAGA,MAAM,aAA4B;AAChC,UAAM,KAAK,QAAQ;AACnB,SAAK,QAAQ;AACb,QAAI,KAAK,oBAAoB,GAAG;AAC9B,WAAK,QAAQ,YAAY,MAAM;AAC7B,aAAK,KAAK,QAAQ;AAAA,MACpB,GAAG,KAAK,iBAAiB;AAEzB,MAAC,KAAK,OAAe,QAAQ;AAAA,IAC/B;AAAA,EACF;AAAA;AAAA,EAGA,QAAQ,QAAsB;AAC5B,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,UAAyB;AAC7B,UAAM,OAAO,KAAK,cAAc,yBAAyB,KAAK,WAAW,KAAK;AAC9E,QAAI;AACF,YAAM,UAAU,MAAM,WAAwC,KAAK,KAAK,OAAO,IAAI;AACnF,YAAM,OAAO,SAAS,SAAS,CAAC;AAChC,YAAM,MAAsC,CAAC;AAC7C,iBAAW,KAAK,KAAM,KAAI,EAAE,GAAG,IAAI;AACnC,WAAK,QAAQ;AAAA,IACf,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA,EAGA,UAAU,KAAa,MAAmB,CAAC,GAAY;AACrD,UAAM,IAAI,KAAK,MAAM,GAAG;AACxB,QAAI,CAAC,KAAK,CAAC,EAAE,QAAS,QAAO;AAE7B,UAAM,MAAM,IAAI,UAAU,KAAK,iBAAiB;AAChD,QAAI,EAAE,iBAAiB,SAAS,GAAG,EAAG,QAAO;AAC7C,QAAI,IAAI,cAAc,EAAE,OAAO,UAAU,EAAE,MAAM,KAAK,CAAC,MAAM,UAAU,GAAG,IAAI,UAAW,CAAC,GAAG;AAC3F,aAAO;AAAA,IACT;AACA,QAAI,EAAE,sBAAsB,IAAK,QAAO;AACxC,QAAI,EAAE,sBAAsB,EAAG,QAAO;AACtC,WAAO,YAAY,GAAG,GAAG,IAAI,GAAG,EAAE,IAAI,MAAM,EAAE;AAAA,EAChD;AAAA,EAEA,SAAyC;AACvC,WAAO,EAAE,GAAG,KAAK,MAAM;AAAA,EACzB;AAAA,EAEA,UAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,UAAgB;AACd,QAAI,KAAK,MAAO,eAAc,KAAK,KAAK;AACxC,SAAK,QAAQ;AAAA,EACf;AACF;;;ACpKA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,YAAY,uBAAuB;AAQ5C,SAAS,YAAY,QAAkD;AAErE,QAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACnD,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,UAAM,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,IAAK,KAAI;AACnB,QAAI,MAAM,KAAM,MAAK;AAAA,EACvB;AACA,SAAO,KAAK,KAAK,EAAE,GAAG,GAAG,IAAI;AAC/B;AAEA,SAAS,kBAAkB,WAAmB,SAAiB,QAAwB;AACrF,SAAO,WAAW,UAAU,MAAM,EAAE,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,KAAK;AACpF;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI;AACF,WAAO,gBAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,OACd,SACA,QACA,QACA,UAAyB,CAAC,GACjB;AACT,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,QAAM,SAAS,YAAY,UAAU,EAAE;AACvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,QAAM,WAAW,kBAAkB,OAAO,GAAG,MAAM,MAAM;AACzD,MAAI,CAAC,aAAa,OAAO,IAAI,QAAQ,EAAG,QAAO;AAE/C,MAAI,YAAY,GAAG;AACjB,UAAM,KAAK,OAAO,OAAO,CAAC;AAC1B,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,UAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,EAAE;AAC9C,QAAI,SAAS,UAAW,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAMO,SAAS,eACd,SACA,QACA,QACA,UAAyB,CAAC,GACvB;AACH,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,OAAO,GAAG;AAC7C,UAAM,IAAI,yBAAyB,uCAAuC;AAAA,EAC5E;AACA,QAAM,OAAO,OAAO,YAAY,WAAW,UAAU,QAAQ,SAAS,MAAM;AAC5E,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,IAAM,WAAW,EAAE,QAAQ,eAAe;;;ACvEjD,SAAS,GAAG,QAAyC;AACnD,QAAM,UAAU,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,UAAa,MAAM,IAAI;AACtF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,MAAM,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG;AACxF;AAGA,IAAM,WAAN,MAAe;AAAA,EACb,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA;AAAA,EAE7B,MAAM,OAAe;AACnB,WAAO,WAAW,KAAK,KAAK,OAAO,kBAAkB,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EAC9E;AAAA;AAAA,EAEA,KAAK,OAAe,SAA4C,CAAC,GAAG;AAClE,WAAO,WAAW,KAAK,KAAK,OAAO,iBAAiB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EACxF;AAAA;AAAA,EAEA,QAAQ,OAAe;AACrB,WAAO,WAAW,KAAK,KAAK,OAAO,oBAAoB,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EAChF;AACF;AAGA,IAAM,gBAAN,MAAoB;AAAA,EAClB,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA,EAC7B,KAAK,OAAe,aAA+B;AACjD,WAAO,WAAW,KAAK,KAAK,OAAO,oBAAoB,GAAG,EAAE,QAAQ,OAAO,YAAY,CAAC,CAAC,EAAE;AAAA,EAC7F;AAAA,EACA,IAAI,OAAe,IAAY;AAC7B,WAAO,WAAW,KAAK,KAAK,OAAO,qBAAqB,EAAE,GAAG,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EACtF;AAAA,EACA,OAAO,OAAe,MAA+B;AACnD,WAAO,WAAW,KAAK,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,OAAO,GAAG,KAAK,CAAC;AAAA,EACrF;AAAA,EACA,OAAO,OAAe,IAAY,MAA+B;AAC/D,WAAO,WAAW,KAAK,KAAK,SAAS,qBAAqB,EAAE,IAAI,EAAE,QAAQ,OAAO,GAAG,KAAK,CAAC;AAAA,EAC5F;AAAA,EACA,OAAO,OAAe,IAAY;AAChC,WAAO,WAAW,KAAK,KAAK,UAAU,qBAAqB,EAAE,GAAG,GAAG,EAAE,QAAQ,MAAM,CAAC,CAAC,EAAE;AAAA,EACzF;AAAA,EACA,QAAQ,OAAe,IAAY,SAA8C,CAAC,GAAG;AACnF,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,qBAAqB,EAAE,WAAW,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAGA,IAAM,SAAN,MAAa;AAAA,EACX,YAA6B,KAAiB;AAAjB;AAAA,EAAkB;AAAA,EAAlB;AAAA,EAC7B,SAAS,OAAe,SAA8E,CAAC,GAAG;AACxG,WAAO,WAAW,KAAK,KAAK,OAAO,mBAAmB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EAC1F;AAAA,EACA,SAAS,OAAe,SAA8D,CAAC,GAAG;AACxF,WAAO,WAAW,KAAK,KAAK,OAAO,mBAAmB,GAAG,EAAE,QAAQ,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE;AAAA,EAC1F;AACF;AAYO,IAAM,cAAN,MAAkB;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAA6B;AACvC,QAAI,CAAC,SAAS,MAAO,OAAM,IAAI,MAAM,kCAAkC;AACvE,UAAM,MAAkB;AAAA,MACtB,aAAa,EAAE,eAAe,UAAU,QAAQ,KAAK,GAAG;AAAA,MACxD,UAAU,QAAQ,WAAW,yBAAyB,QAAQ,QAAQ,EAAE;AAAA,MACxE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,IAAI,cAAc,YAAY;AACvC,YAAM,IAAI,MAAM,4EAAuE;AAAA,IACzF;AACA,SAAK,QAAQ,IAAI,SAAS,GAAG;AAC7B,SAAK,QAAQ,IAAI,cAAc,GAAG;AAClC,SAAK,MAAM,IAAI,OAAO,GAAG;AAAA,EAC3B;AACF;;;ACxFA,IAAM,mBAAmB;AAWlB,IAAM,SAAN,MAAa;AAAA,EACD;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,WAAW;AAAA,EAEH;AAAA,EAEjB,YAAY,SAAwB;AAClC,QAAI,CAAC,SAAS,OAAQ,OAAM,IAAI,MAAM,8BAA8B;AACpE,SAAK,MAAM;AAAA,MACT,aAAa,EAAE,aAAa,QAAQ,OAAO;AAAA,MAC3C,UAAU,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MACjE,WAAW,QAAQ,aAAa;AAAA,MAChC,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzC;AACA,QAAI,OAAO,KAAK,IAAI,cAAc,YAAY;AAC5C,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,SAAK,SAAS,IAAI,eAAe,KAAK,GAAG;AACzC,SAAK,QAAQ,IAAI,cAAc,KAAK,GAAG;AACvC,SAAK,OAAO,IAAI,aAAa,KAAK,GAAG;AACrC,QAAI,QAAQ,WAAW;AACrB,WAAK,SAAS,IAAI,YAAY;AAAA,QAC5B,WAAW,QAAQ;AAAA,QACnB,SAAS,KAAK,IAAI;AAAA,QAClB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO,KAAK,IAAI;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,QAAqB;AACvB,QAAI,CAAC,KAAK,QAAQ;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,MAAM,OAAyC;AAC7C,WAAO,WAAW,KAAK,KAAK,QAAQ,aAAa,KAAK;AAAA,EACxD;AAAA;AAAA,EAGA,UAAU,OAAuD;AAC/D,WAAO,WAAW,KAAK,KAAK,QAAQ,kBAAkB,EAAE,MAAM,CAAC;AAAA,EACjE;AACF;AAEA,IAAO,cAAQ;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simplr-ai/node",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Simplr server-side SDK for Node.js — fraud/identity checks, order scoring, edge ingestion, and webhook signature verification.",
   "license": "MIT",
   "type": "module",
@@ -19,7 +19,9 @@
       }
     }
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "engines": {
     "node": ">=18"
   },
@@ -34,5 +36,14 @@
     "tsup": "^8.0.0",
     "typescript": "^5.3.0"
   },
-  "keywords": ["simplr", "simplify", "fraud", "identity", "feature-flags", "webhooks", "server", "node"]
+  "keywords": [
+    "simplr",
+    "simplify",
+    "fraud",
+    "identity",
+    "feature-flags",
+    "webhooks",
+    "server",
+    "node"
+  ]
 }