@slyxup/core 1.2.0 → 2.0.1

package/README.md

@@ -56,6 +56,18 @@ await client.accounts.unlink(accountId, 'google');
 const me = await client.users.me();       // full profile (includes username, twoFactorEnabled)
 await client.users.update({ firstName: 'Ada', username: 'ada' });
 await client.users.delete();              // GDPR delete
+
+// ── Billing ── (import { createBillingClient } from '@slyxup/core')
+import { createBillingClient } from '@slyxup/core';
+const billing = createBillingClient({ publishableKey: 'pk_live_xxx' });
+const plans = await billing.listPlans(projectId);
+const { transactionId, checkoutUrl } = await billing.checkout(planId, {
+  origin: 'https://your-app.com/billing/done', // return target after payment
+  openIn: '_blank',                              // or '_self' / manualOpen: true
+});
+// After payment, verify server-side before gating features:
+const { paid, status } = await billing.getTransaction(transactionId);
+const sub = await billing.getSubscription(projectId); // null when none
 ```
 
 The client keeps an internal cookie jar, so sign-in state persists across calls in **Node/SSR too** (browsers manage cookies natively).
@@ -109,11 +121,16 @@ try {
 | `users.me()` | GET | `/v1/user` |
 | `users.update(patch)` | PATCH | `/v1/user` |
 | `users.delete()` | DELETE | `/v1/user` |
+| `billing.listPlans(projectId)` | GET | `/v1/billing/plans` |
+| `billing.checkout(planId, { origin })` | POST | `/v1/billing/checkout` |
+| `billing.getTransaction(txnId)` | GET | `/v1/billing/transactions/:id` |
+| `billing.getSubscription(projectId?)` | GET | `/v1/billing/subscription` |
+| `billing.getEntitlements(projectId)` | GET | `/v1/billing/entitlements` |
+| `billing.cancelSubscription(projectId?)` | POST | `/v1/billing/subscription/cancel` |
+| `billing.listInvoices()` | GET | `/v1/billing/invoices` |
 
 ## Framework wrappers
 
-- React hooks/components: [`@slyxup/react`](../react)
-- Next.js server helpers + middleware: [`@slyxup/nextjs`](../nextjs)
 - Prebuilt UI cards: [`@slyxup/ui`](../ui)
 
 ## License

package/dist/billing.d.ts

@@ -0,0 +1,84 @@
+export interface Plan {
+    id: string;
+    name: string;
+    paddlePriceId: string;
+    amount: number;
+    currency: string;
+    interval: 'month' | 'year';
+    trialDays: number | null;
+    features: string[];
+    isPopular: boolean;
+}
+export interface Subscription {
+    id: string;
+    projectId: string;
+    userId: string;
+    planId: string;
+    status: 'active' | 'trialing' | 'past_due' | 'paused' | 'canceled';
+    currentPeriodStart: string | null;
+    currentPeriodEnd: string | null;
+    cancelAtPeriodEnd: boolean;
+}
+export interface Invoice {
+    id: string;
+    amount: number;
+    currency: string;
+    status: 'paid' | 'pending' | 'overdue' | 'refunded';
+    invoiceNumber: string | null;
+    billedAt: string | null;
+}
+export interface CheckoutResult {
+    transactionId: string;
+    checkoutUrl: string;
+}
+export interface CheckoutOptions {
+    /** Return target carried through payment → success page (e.g. your app URL).
+     *  Without it the buyer lands on the SlyxUp dashboard after paying. */
+    origin?: string;
+    /** Open the payment page in a new tab (default) or the same tab. */
+    openIn?: '_blank' | '_self';
+    /** Skip auto-opening the payment page (you open checkoutUrl yourself,
+     *  or use the transactionId with Paddle.js overlay). */
+    manualOpen?: boolean;
+}
+export interface TransactionStatus {
+    id: string;
+    status: string;
+    paid: boolean;
+    checkoutUrl: string | null;
+}
+export interface BillingClientOptions {
+    apiUrl?: string;
+    publishableKey?: string;
+}
+export declare class BillingClient {
+    readonly apiUrl: string;
+    readonly publishableKey?: string;
+    constructor(options?: BillingClientOptions);
+    private req;
+    listPlans(projectId: string): Promise<Plan[]>;
+    getSubscription(projectId?: string): Promise<Subscription | null>;
+    getEntitlements(projectId: string): Promise<{
+        planId: string | null;
+        status: string;
+        features: string[];
+    }>;
+    /**
+     * Create a checkout transaction and open the real Paddle payment page.
+     * Returns the transaction id + payment URL. The buyer pays on the opened
+     * page; the subscription activates via webhook — never trust a redirect
+     * URL alone, verify with getTransaction() before gating features.
+     */
+    checkout(planId: string, opts?: CheckoutOptions & {
+        successUrl?: string;
+    }): Promise<CheckoutResult>;
+    /**
+     * Verify a checkout transaction with Paddle (public, capability-token).
+     * `paid === true` only when Paddle reports the transaction `completed`.
+     */
+    getTransaction(transactionId: string): Promise<TransactionStatus>;
+    cancelSubscription(projectId?: string): Promise<void>;
+    listInvoices(): Promise<Invoice[]>;
+}
+export declare function createBillingClient(options?: Partial<BillingClientOptions>): BillingClient;
+//# sourceMappingURL=billing.d.ts.map

package/dist/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;IACnE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IACpD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B;2EACuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC5B;4DACwD;IACxD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAuCD,qBAAa,aAAa;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;gBAErB,OAAO,GAAE,oBAAyB;YAchC,GAAG;IA6BX,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAO7C,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAQjE,eAAe,CACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAUzE;;;;;OAKG;IACG,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC,cAAc,CAAC;IAqB1B;;;OAGG;IACG,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMjE,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAMzC;AAED,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACtC,aAAa,CAEf"}

package/dist/billing.js

@@ -0,0 +1,134 @@
+// Billing client — import from '@slyxup/core'.
+function getEnvApiUrl() {
+    try {
+        const billingUrl = typeof process !== 'undefined'
+            ? process?.env?.NEXT_PUBLIC_SLYXUP_BILLING_URL
+            : undefined;
+        if (billingUrl)
+            return billingUrl;
+    }
+    catch { }
+    try {
+        const viteEnv = import.meta?.env;
+        if (viteEnv?.VITE_SLYXUP_BILLING_URL)
+            return viteEnv.VITE_SLYXUP_BILLING_URL;
+    }
+    catch { }
+    try {
+        const authUrl = typeof process !== 'undefined'
+            ? process?.env?.NEXT_PUBLIC_SLYXUP_API_URL
+            : undefined;
+        if (authUrl)
+            return authUrl.replace('auth.slyxup.online', 'billing.slyxup.online');
+    }
+    catch { }
+    return undefined;
+}
+function getStoredToken() {
+    try {
+        if (typeof window !== 'undefined' && window.localStorage) {
+            return window.localStorage.getItem('slyxup_session_token') ?? undefined;
+        }
+    }
+    catch { }
+    return undefined;
+}
+export class BillingClient {
+    apiUrl;
+    publishableKey;
+    constructor(options = {}) {
+        const raw = (options.apiUrl ??
+            getEnvApiUrl() ??
+            'https://billing.slyxup.online').replace(/\/$/, '');
+        if (/^https?:\/\/localhost:\d+$/.test(raw) && raw.includes(':8787')) {
+            this.apiUrl = raw.replace(/:8787$/, ':8788');
+        }
+        else {
+            this.apiUrl = raw;
+        }
+        this.publishableKey = options.publishableKey;
+    }
+    async req(path, init) {
+        const token = getStoredToken();
+        const authHeaders = {};
+        if (token)
+            authHeaders.Authorization = `Bearer ${token}`;
+        if (this.publishableKey && this.publishableKey !== 'pk_test_missing')
+            authHeaders['X-Publishable-Key'] = this.publishableKey;
+        const res = await fetch(`${this.apiUrl}${path}`, {
+            ...init,
+            headers: {
+                'Content-Type': 'application/json',
+                ...authHeaders,
+                ...init?.headers,
+            },
+            credentials: 'include',
+        });
+        if (!res.ok) {
+            const data = (await res.json().catch(() => ({})));
+            throw new Error(typeof data.error === 'string'
+                ? data.error
+                : `Request failed (${res.status})`);
+        }
+        return res.json();
+    }
+    async listPlans(projectId) {
+        const res = await this.req(`/v1/billing/plans?projectId=${projectId}`);
+        return res.plans;
+    }
+    async getSubscription(projectId) {
+        const qs = projectId ? `?projectId=${projectId}` : '';
+        const res = await this.req(`/v1/billing/subscription${qs}`);
+        return res.subscription;
+    }
+    async getEntitlements(projectId) {
+        const res = await this.req(`/v1/billing/entitlements?projectId=${projectId}`);
+        return { planId: res.planId, status: res.status, features: res.features };
+    }
+    /**
+     * Create a checkout transaction and open the real Paddle payment page.
+     * Returns the transaction id + payment URL. The buyer pays on the opened
+     * page; the subscription activates via webhook — never trust a redirect
+     * URL alone, verify with getTransaction() before gating features.
+     */
+    async checkout(planId, opts) {
+        const res = await this.req('/v1/billing/checkout', {
+            method: 'POST',
+            body: JSON.stringify({
+                planId,
+                ...(opts?.origin ? { origin: opts.origin } : {}),
+                // successUrl is legacy/ignored by the server for link building.
+                ...(opts?.successUrl ? { successUrl: opts.successUrl } : {}),
+            }),
+        });
+        if (!opts?.manualOpen && res.checkoutUrl && typeof window !== 'undefined') {
+            const target = opts?.openIn ?? '_blank';
+            if (target === '_blank') {
+                window.open(res.checkoutUrl, '_blank', 'noopener,noreferrer');
+            }
+            else {
+                window.location.assign(res.checkoutUrl);
+            }
+        }
+        return res;
+    }
+    /**
+     * Verify a checkout transaction with Paddle (public, capability-token).
+     * `paid === true` only when Paddle reports the transaction `completed`.
+     */
+    async getTransaction(transactionId) {
+        return this.req(`/v1/billing/transactions/${encodeURIComponent(transactionId)}`);
+    }
+    async cancelSubscription(projectId) {
+        const qs = projectId ? `?projectId=${projectId}` : '';
+        await this.req(`/v1/billing/subscription/cancel${qs}`, { method: 'POST' });
+    }
+    async listInvoices() {
+        const res = await this.req('/v1/billing/invoices');
+        return res.invoices;
+    }
+}
+export function createBillingClient(options) {
+    return new BillingClient(options);
+}
+//# sourceMappingURL=billing.js.map

package/dist/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAiE/C,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,UAAU,GACd,OAAO,OAAO,KAAK,WAAW;YAC5B,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,8BAA8B;YAC9C,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,IAAI,CAAC;QACH,MAAM,OAAO,GACX,MAAM,CAAC,IAGR,EAAE,GAAG,CAAC;QACP,IAAI,OAAO,EAAE,uBAAuB;YAClC,OAAO,OAAO,CAAC,uBAAuB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,IAAI,CAAC;QACH,MAAM,OAAO,GACX,OAAO,OAAO,KAAK,WAAW;YAC5B,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,0BAA0B;YAC1C,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,OAAO;YACT,OAAO,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,aAAa;IACf,MAAM,CAAS;IACf,cAAc,CAAU;IAEjC,YAAY,UAAgC,EAAE;QAC5C,MAAM,GAAG,GAAG,CACV,OAAO,CAAC,MAAM;YACd,YAAY,EAAE;YACd,+BAA+B,CAChC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,IAAkB;QACnD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,IAAI,KAAK;YAAE,WAAW,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,iBAAiB;YAClE,WAAW,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;YAC/C,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,WAAW;gBACd,GAAG,IAAI,EAAE,OAAO;aACjB;YACD,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAG/C,CAAC;YACF,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC5B,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,CACrC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,+BAA+B,SAAS,EAAE,CAC3C,CAAC;QACF,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAkB;QACtC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,2BAA2B,EAAE,EAAE,CAChC,CAAC;QACF,OAAO,GAAG,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAKvB,sCAAsC,SAAS,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,IAAgD;QAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAiB,sBAAsB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM;gBACN,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,gEAAgE;gBAChE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC;YACxC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,OAAO,IAAI,CAAC,GAAG,CACb,4BAA4B,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAkB;QACzC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,sBAAsB,CACvB,CAAC;QACF,OAAO,GAAG,CAAC,QAAQ,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAuC;IAEvC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,7 @@
 export { SlyxupClient } from './client.js';
 export * from './types.js';
 export * from './errors.js';
+export * from './billing.js';
+export * from './manage.js';
+export * from './next.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/index.js

@@ -1,4 +1,7 @@
 export { SlyxupClient } from './client.js';
 export * from './types.js';
 export * from './errors.js';
+export * from './billing.js';
+export * from './manage.js';
+export * from './next.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/manage.d.ts

@@ -0,0 +1,70 @@
+export interface ManagedProject {
+    id: string;
+    name: string;
+    slug: string;
+    description: string | null;
+}
+export interface ManagedKey {
+    id: string;
+    name: string;
+    prefix: string;
+    environment: 'test' | 'live';
+    type: 'publishable' | 'secret';
+}
+export declare function manageApi(apiUrl: string, token: string): {
+    listProjects: () => Promise<{
+        ok: true;
+        projects: ManagedProject[];
+    }>;
+    createProject: (input: {
+        name: string;
+        slug: string;
+        description?: string;
+    }) => Promise<{
+        ok: true;
+        project: ManagedProject;
+    }>;
+    deleteProject: (id: string) => Promise<{
+        ok: true;
+    }>;
+    listKeys: (projectId: string) => Promise<{
+        ok: true;
+        keys: ManagedKey[];
+    }>;
+    createKey: (input: {
+        projectId: string;
+        name: string;
+        type: "publishable" | "secret";
+        environment: "test" | "live";
+    }) => Promise<{
+        ok: true;
+        id: string;
+        key: string;
+        prefix: string;
+    }>;
+    revokeKey: (id: string) => Promise<{
+        ok: true;
+    }>;
+    listDomains: (projectId: string) => Promise<{
+        ok: true;
+        environment: string;
+        domains: string[];
+    }>;
+    addDomain: (projectId: string, domain: string) => Promise<{
+        ok: true;
+        domains: string[];
+    }>;
+    removeDomain: (projectId: string, domain: string) => Promise<{
+        ok: true;
+        domains: string[];
+    }>;
+    goLive: (projectId: string) => Promise<{
+        ok: true;
+        environment: string;
+    }>;
+    doctor: () => Promise<{
+        ok: boolean;
+        apiUrl: string;
+    }>;
+};
+//# sourceMappingURL=manage.d.ts.map

package/dist/manage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../src/manage.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;CAChC;AA2BD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;YAIvC,IAAI;kBAAY,cAAc,EAAE;;2BAMrB;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB;YACW,IAAI;iBAAW,cAAc;;wBAOrB,MAAM;YACd,IAAI;;0BACM,MAAM;YAChB,IAAI;cAAQ,UAAU,EAAE;;uBAMjB;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;QAC/B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;KAC9B;YACW,IAAI;YAAM,MAAM;aAAO,MAAM;gBAAU,MAAM;;oBAOzC,MAAM;YACV,IAAI;;6BACS,MAAM;YACnB,IAAI;qBAAe,MAAM;iBAAW,MAAM,EAAE;;2BAMjC,MAAM,UAAU,MAAM;YACjC,IAAI;iBAAW,MAAM,EAAE;;8BAOT,MAAM,UAAU,MAAM;YACpC,IAAI;iBAAW,MAAM,EAAE;;wBAOf,MAAM;YACd,IAAI;qBAAe,MAAM;;;;;;EAexC"}

package/dist/manage.js

@@ -0,0 +1,42 @@
+// Project/keys/domains management API — callable from web UI or any client.
+async function req(apiUrl, token, method, path, body) {
+    const res = await fetch(`${apiUrl}${path}`, {
+        method,
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    const data = (await res.json().catch(() => ({})));
+    if (!res.ok)
+        throw new Error(typeof data.error === 'string'
+            ? data.error
+            : `Request failed (${res.status})`);
+    return data;
+}
+export function manageApi(apiUrl, token) {
+    const base = apiUrl.replace(/\/$/, '');
+    return {
+        listProjects: () => req(base, token, 'GET', '/v1/projects'),
+        createProject: (input) => req(base, token, 'POST', '/v1/projects', input),
+        deleteProject: (id) => req(base, token, 'DELETE', `/v1/projects/${id}`),
+        listKeys: (projectId) => req(base, token, 'GET', `/v1/keys?projectId=${projectId}`),
+        createKey: (input) => req(base, token, 'POST', '/v1/keys', input),
+        revokeKey: (id) => req(base, token, 'DELETE', `/v1/keys/${id}`),
+        listDomains: (projectId) => req(base, token, 'GET', `/v1/projects/${projectId}/domains`),
+        addDomain: (projectId, domain) => req(base, token, 'PATCH', `/v1/projects/${projectId}/domains`, { action: 'add', domain }),
+        removeDomain: (projectId, domain) => req(base, token, 'PATCH', `/v1/projects/${projectId}/domains`, { action: 'remove', domain }),
+        goLive: (projectId) => req(base, token, 'POST', `/v1/projects/${projectId}/go-live`),
+        doctor: async () => {
+            try {
+                const r = await fetch(`${base}/v1/health`);
+                return { ok: r.ok, apiUrl: base };
+            }
+            catch {
+                return { ok: false, apiUrl: base };
+            }
+        },
+    };
+}
+//# sourceMappingURL=manage.js.map

package/dist/manage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage.js","sourceRoot":"","sources":["../src/manage.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAiB5E,KAAK,UAAU,GAAG,CAChB,MAAc,EACd,KAAa,EACb,MAAc,EACd,IAAY,EACZ,IAAc;IAEd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE;QAC1C,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,EAAE;QACT,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC5B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,CACrC,CAAC;IACJ,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO;QACL,YAAY,EAAE,GAAG,EAAE,CACjB,GAAG,CACD,IAAI,EACJ,KAAK,EACL,KAAK,EACL,cAAc,CACf;QACH,aAAa,EAAE,CAAC,KAIf,EAAE,EAAE,CACH,GAAG,CACD,IAAI,EACJ,KAAK,EACL,MAAM,EACN,cAAc,EACd,KAAK,CACN;QACH,aAAa,EAAE,CAAC,EAAU,EAAE,EAAE,CAC5B,GAAG,CAAe,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAChE,QAAQ,EAAE,CAAC,SAAiB,EAAE,EAAE,CAC9B,GAAG,CACD,IAAI,EACJ,KAAK,EACL,KAAK,EACL,sBAAsB,SAAS,EAAE,CAClC;QACH,SAAS,EAAE,CAAC,KAKX,EAAE,EAAE,CACH,GAAG,CACD,IAAI,EACJ,KAAK,EACL,MAAM,EACN,UAAU,EACV,KAAK,CACN;QACH,SAAS,EAAE,CAAC,EAAU,EAAE,EAAE,CACxB,GAAG,CAAe,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC;QAC5D,WAAW,EAAE,CAAC,SAAiB,EAAE,EAAE,CACjC,GAAG,CACD,IAAI,EACJ,KAAK,EACL,KAAK,EACL,gBAAgB,SAAS,UAAU,CACpC;QACH,SAAS,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAC/C,GAAG,CACD,IAAI,EACJ,KAAK,EACL,OAAO,EACP,gBAAgB,SAAS,UAAU,EACnC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B;QACH,YAAY,EAAE,CAAC,SAAiB,EAAE,MAAc,EAAE,EAAE,CAClD,GAAG,CACD,IAAI,EACJ,KAAK,EACL,OAAO,EACP,gBAAgB,SAAS,UAAU,EACnC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAC7B;QACH,MAAM,EAAE,CAAC,SAAiB,EAAE,EAAE,CAC5B,GAAG,CACD,IAAI,EACJ,KAAK,EACL,MAAM,EACN,gBAAgB,SAAS,UAAU,CACpC;QACH,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/next.d.ts

@@ -0,0 +1,21 @@
+export declare const SESSION_COOKIE_NAME = "slyxup_session";
+export interface SlyxupNextOptions {
+    apiUrl?: string;
+    publishableKey?: string;
+}
+export declare function createSessionCookie(token: string, maxAge?: number): string;
+export declare function clearSessionCookie(): string;
+export interface SlyxupMiddlewareOptions extends SlyxupNextOptions {
+    publicRoutes?: string[];
+}
+export declare function slyxupMiddleware(options?: SlyxupMiddlewareOptions): (req: {
+    cookies?: Record<string, string>;
+    url: string;
+}) => {
+    redirect: "/sign-in";
+    next?: undefined;
+} | {
+    next: true;
+    redirect?: undefined;
+};
+//# sourceMappingURL=next.d.ts.map

package/dist/next.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.d.ts","sourceRoot":"","sources":["../src/next.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,SAAmB,GACxB,MAAM,CAER;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,uBAAuB,IACrC,KAAK;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;CACb;;;;;;EAQF"}

package/dist/next.js

@@ -0,0 +1,21 @@
+// Server helpers + middleware + cookies — import from '@slyxup/core/next'.
+export const SESSION_COOKIE_NAME = 'slyxup_session';
+function baseApiUrl(_options) {
+    return 'https://auth.slyxup.online';
+}
+export function createSessionCookie(token, maxAge = 7 * 24 * 60 * 60) {
+    return `${SESSION_COOKIE_NAME}=${token}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${maxAge}`;
+}
+export function clearSessionCookie() {
+    return `${SESSION_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=0`;
+}
+export function slyxupMiddleware(options) {
+    return function middleware(req) {
+        const token = req.cookies?.[SESSION_COOKIE_NAME];
+        const isPublic = (options?.publicRoutes ?? ['/sign-in', '/']).some((r) => req.url.includes(r));
+        if (!token && !isPublic)
+            return { redirect: '/sign-in' };
+        return { next: true };
+    };
+}
+//# sourceMappingURL=next.js.map

package/dist/next.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"next.js","sourceRoot":"","sources":["../src/next.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAOpD,SAAS,UAAU,CAAC,QAA4B;IAC9C,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IAEzB,OAAO,GAAG,mBAAmB,IAAI,KAAK,qDAAqD,MAAM,EAAE,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,GAAG,mBAAmB,sDAAsD,CAAC;AACtF,CAAC;AAMD,MAAM,UAAU,gBAAgB,CAAC,OAAiC;IAChE,OAAO,SAAS,UAAU,CAAC,GAG1B;QACC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CACpB,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,UAAmB,EAAE,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@slyxup/core",
-  "version": "1.2.0",
+  "version": "2.0.1",
   "description": "@slyxup/core — SlyxUp SDK",
   "type": "module",
   "main": "dist/index.js",