@strimz/sdk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Strimz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,111 @@
+# @strimz/sdk
+
+Server-side SDK for the Strimz API. Stripe-shaped: typed resources,
+automatic idempotency, retries, cursor pagination, and webhook
+signature verification.
+
+## Installation
+
+```sh
+pnpm add @strimz/sdk
+```
+
+## Quick start
+
+```ts
+import { StrimzClient } from '@strimz/sdk'
+
+const strimz = new StrimzClient({ apiKey: process.env.STRIMZ_SECRET_KEY! })
+
+const session = await strimz.paymentSessions.create({
+  amount: '1000000', // 1 USDC in smallest units
+  currency: 'USDC',
+  description: 'Premium plan, April',
+  successUrl: 'https://app.example.com/success',
+})
+
+console.log(session.checkoutUrl)
+```
+
+## Modules
+
+| Resource            | Path                                                                                                             |
+| ------------------- | ---------------------------------------------------------------------------------------------------------------- |
+| `merchants`         | `me`, `update`, `changeTier`                                                                                     |
+| `apiKeys`           | `list`, `retrieve`, `create`, `revoke`                                                                           |
+| `customers`         | `retrieve`, `list`, `upsert`                                                                                     |
+| `paymentSessions`   | `create`, `retrieve`, `list`, `cancel`, `expire`                                                                 |
+| `transactions`      | `retrieve`, `list`                                                                                               |
+| `subscriptionPlans` | `create`, `retrieve`, `list`, `archive`                                                                          |
+| `subscriptions`     | `create`, `retrieve`, `list`, `cancel`                                                                           |
+| `refunds`           | `create`, `retrieve`, `list`, `submitSignature`                                                                  |
+| `webhookEndpoints`  | `create`, `retrieve`, `list`, `enable`, `disable`, `rotateSecret`                                                |
+| `webhookDeliveries` | `retrieve`, `list`, `replay`                                                                                     |
+| `invoices`          | `create`, `retrieve`, `list`, `send`, `void`                                                                     |
+| `storefronts`       | `retrieve`, `upsert`, `publish`, `archive`, `listProducts`, `createProduct`, `retrieveProduct`, `archiveProduct` |
+| `agents`            | `retrieveConfig`, `updateConfig`, `listActivity`, `listJobs`, `retrieveJob`, `createJob`, `approveJob`           |
+
+## Behaviour
+
+- **Mode is auto-detected** from the API key prefix (`sk_test_` ↔ `sk_live_`). The client refuses publishable keys; use `StrimzBrowserClient` from `@strimz/sdk/browser` for those.
+- **Idempotency** is automatic. Every mutating call generates an idempotency key (`strimz_<uuid>`) so a network retry doesn't double-charge a merchant. Override with `{ idempotencyKey }` in the second arg.
+- **Retries**: network failures and 5xx (idempotent calls only) and 429 are retried up to 3 times with exponential backoff and jitter. `Retry-After` is respected on 429.
+- **Pagination**: `list(...)` returns a single page; `listAuto(...)` (where exposed) returns an `AutoPagingIterator` that you can `for await` over.
+- **Errors are typed**. The SDK throws on failure rather than resolving to `{ ok: false }`. Catch `StrimzAuthenticationError`, `StrimzNotFoundError`, `StrimzValidationError`, `StrimzRateLimitError`, etc., or the base `StrimzError`.
+
+## Webhook verification
+
+```ts
+import { verifyWebhookSignature, parseWebhookEvent } from '@strimz/sdk/webhooks'
+
+export async function POST(req: Request) {
+  const body = await req.text()
+  const result = await verifyWebhookSignature(
+    body,
+    req.headers.get('strimz-signature') ?? '',
+    process.env.STRIMZ_WEBHOOK_SECRET!,
+  )
+  if (!result.valid) return new Response('invalid signature', { status: 400 })
+
+  const event = parseWebhookEvent(body)
+  switch (event.type) {
+    case 'payment.completed':
+      // event.data is typed as { session, transaction }
+      break
+    case 'subscription.charge_failed':
+      // event.data is typed as { subscription, charge }
+      break
+  }
+  return new Response('ok')
+}
+```
+
+## Browser
+
+```ts
+import { StrimzBrowserClient } from '@strimz/sdk/browser'
+
+const strimz = new StrimzBrowserClient({
+  publishableKey: process.env.NEXT_PUBLIC_STRIMZ_PUBLISHABLE_KEY!,
+})
+
+const session = await strimz.paymentSessions.retrieve(sessionId)
+```
+
+The browser client exposes a strict subset of resource methods. It will refuse a secret key.
+
+## Runtime support
+
+| Runtime            | Supported                                            |
+| ------------------ | ---------------------------------------------------- |
+| Node 22+           | ✓ (primary)                                          |
+| Vercel Edge        | ✓ (uses Web Crypto + fetch)                          |
+| Cloudflare Workers | ✓                                                    |
+| Deno / Bun         | should work; not regularly tested                    |
+| Browsers           | use `StrimzBrowserClient` from `@strimz/sdk/browser` |
+
+## Boundaries
+
+- **No business logic.** The SDK validates inputs against `@strimz/shared-types` and forwards to the API.
+- **No persistent state.** The client is safe to instantiate per-request or reuse across requests.
+- **No secrets logged.** Diagnostics never include the API key. Webhook signatures are verified with constant-time compare via `@strimz/shared-crypto`.

package/dist/browser-client-DlZg0Aae.d.cts

@@ -0,0 +1,223 @@
+import { ApiKeyMode } from '@strimz/shared-config';
+import { PaymentSession, SubscriptionPlan, TokenMetadata, TokenPermitNonce } from '@strimz/shared-types';
+import { z } from 'zod';
+
+/**
+ * Fetch wrapper with retry, idempotency, and Strimz error parsing.
+ *
+ * Retries on:
+ *   - Network failures (TypeError on fetch).
+ *   - 5xx responses for idempotent methods (GET, POST with idempotency key).
+ *   - 429 with Retry-After.
+ *
+ * Does NOT retry on:
+ *   - 4xx other than 429 (caller's bug).
+ *   - 5xx for non-idempotent calls without an idempotency key.
+ */
+interface FetcherOptions {
+    baseUrl: string;
+    baseHeaders: Record<string, string>;
+    /** Default timeout per attempt, milliseconds. */
+    timeoutMs?: number;
+    /** How many retries before giving up. */
+    maxRetries?: number;
+    /** Initial backoff in ms; doubled with jitter on each retry. */
+    initialBackoffMs?: number;
+    /** Optional logger. */
+    onRequest?: (info: {
+        method: string;
+        url: string;
+        attempt: number;
+    }) => void;
+    onResponse?: (info: {
+        method: string;
+        url: string;
+        status: number;
+        ms: number;
+        attempt: number;
+    }) => void;
+    /** Override the global fetch (for tests / Edge polyfills). */
+    fetch?: typeof globalThis.fetch;
+}
+interface RequestSpec {
+    method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    query?: Record<string, string | number | boolean | null | undefined>;
+    body?: unknown;
+    idempotencyKey?: string;
+    /** Per-call timeout override. */
+    timeoutMs?: number;
+}
+declare class Fetcher {
+    private readonly baseUrl;
+    private readonly baseHeaders;
+    private readonly timeoutMs;
+    private readonly maxRetries;
+    private readonly initialBackoffMs;
+    private readonly onRequest;
+    private readonly onResponse;
+    private readonly fetchImpl;
+    constructor(opts: FetcherOptions);
+    request<T>(spec: RequestSpec): Promise<T>;
+    private fetchWithTimeout;
+    private buildUrl;
+    private backoffFor;
+}
+
+/**
+ * Cursor-based pagination, identical shape to the API's list responses.
+ */
+interface Page<T> {
+    data: T[];
+    nextCursor: string | null;
+    hasMore: boolean;
+}
+interface PaginationParams {
+    limit?: number;
+    cursor?: string | null;
+}
+/**
+ * Async-iterable wrapper that auto-paginates through every page of a list.
+ *
+ *   for await (const tx of strimz.transactions.listAll()) { ... }
+ */
+declare class AutoPagingIterator<T> implements AsyncIterable<T> {
+    private readonly fetchPage;
+    constructor(fetchPage: (cursor: string | null) => Promise<Page<T>>);
+    [Symbol.asyncIterator](): AsyncIterator<T>;
+    forEach(handler: (item: T) => void | Promise<void>): Promise<void>;
+    toArray(): Promise<T[]>;
+}
+
+/**
+ * Base class every resource extends. Centralises endpoint plumbing so
+ * resource classes are tiny declarative wrappers.
+ */
+
+type AnySchema = z.ZodTypeAny;
+type Inferred<S extends AnySchema> = z.output<S>;
+interface ResourceContext {
+    fetcher: Fetcher;
+}
+interface RequestOptions {
+    /** Override or supply the idempotency key for a mutating call. */
+    idempotencyKey?: string;
+    /** Per-request timeout in ms. */
+    timeoutMs?: number;
+}
+declare abstract class BaseResource {
+    protected readonly ctx: ResourceContext;
+    constructor(ctx: ResourceContext);
+    protected get<S extends AnySchema>(path: string, schema?: S, query?: RequestSpec['query']): Promise<Inferred<S>>;
+    protected post<S extends AnySchema>(path: string, body: unknown, schema?: S, options?: RequestOptions): Promise<Inferred<S>>;
+    protected patch<S extends AnySchema>(path: string, body: unknown, schema?: S, options?: RequestOptions): Promise<Inferred<S>>;
+    protected delete<S extends AnySchema>(path: string, schema?: S): Promise<Inferred<S>>;
+    protected listPage<S extends AnySchema>(path: string, itemSchema: S, params?: PaginationParams | Record<string, ScalarParam>): Promise<Page<Inferred<S>>>;
+    protected listAuto<S extends AnySchema>(path: string, itemSchema: S, params?: Record<string, ScalarParam>): AutoPagingIterator<Inferred<S>>;
+}
+type ScalarParam = string | number | boolean | null | undefined;
+
+/**
+ * Public hosted-checkout reads.
+ *
+ * Backed by the `/v1/checkout/*` namespace on the Strimz API, which
+ * is intentionally unauthenticated — session and plan records are
+ * what a merchant offers to payers, so a payer landing on a checkout
+ * URL must be able to load the terms without holding any API key.
+ *
+ * Use this resource (via `StrimzBrowserClient.checkout`) from the
+ * browser. The merchant-scoped `paymentSessions` / `subscriptionPlans`
+ * resources on `StrimzClient` remain the right call from server-side
+ * code with a secret key.
+ */
+declare class CheckoutResource extends BaseResource {
+    /** Load a payment session by id (public — no merchant scoping). */
+    session(id: string): Promise<PaymentSession>;
+    /** Load a subscription plan by id (public — no merchant scoping). */
+    plan(id: string): Promise<SubscriptionPlan>;
+}
+
+/**
+ * Token metadata + capability lookup.
+ *
+ * The two endpoints are public on the API (no key required) — token
+ * metadata is purely chain-derived, has no PII, and is what the
+ * browser SDK consults to pick which meta-tx path to take for a
+ * given token. Bundled here so consumers don't have to write the HTTP
+ * fetch themselves.
+ */
+declare class TokensResource extends BaseResource {
+    /**
+     * Fetch full metadata for a token. Throws via the underlying fetcher
+     * (404 → `StrimzNotFoundError`) if the token isn't whitelisted.
+     */
+    retrieve(address: string): Promise<TokenMetadata>;
+    /**
+     * Read an owner's current EIP-2612 permit nonce. Call this
+     * immediately before signing a Permit — the token contract rejects
+     * stale nonces, and the value advances on every successful permit.
+     */
+    permitNonce(address: string, owner: string): Promise<TokenPermitNonce>;
+}
+/**
+ * Path selector — decides which meta-tx flow to take given a token's
+ * capabilities and the action a merchant wants to perform.
+ *
+ * The choice is unambiguous in 99% of cases:
+ *  - One-shot pay        → EIP-3009 (preferred). Falls back to
+ *                          approve+pay if the token has neither.
+ *  - Subscription enrol  → EIP-2612 (the only meta-tx path that
+ *                          grants the recurring allowance subscribers
+ *                          need). If unavailable, the merchant must
+ *                          use the classic approve+create flow.
+ *
+ * Returned `path` values are strings (not enums) so future schemes
+ * can extend the union without breaking existing call sites.
+ */
+type RelayPath = 'pay_with_authorization' | 'permit_and_create_subscription' | 'approve_then_pay' | 'approve_then_create_subscription';
+declare function selectPaymentPath(meta: TokenMetadata): RelayPath;
+declare function selectSubscriptionPath(meta: TokenMetadata): RelayPath;
+
+/**
+ * StrimzBrowserClient — the publishable-key, browser-safe SDK entry point.
+ *
+ * Used by `@strimz/sdk-react` and any other browser code that should
+ * never see a secret key. Surfaces a strict subset of resource methods —
+ * only those safe to call from a browser with a `pk_test_...` or
+ * `pk_live_...` key.
+ */
+
+interface StrimzBrowserClientOptions {
+    /** Publishable key — `pk_test_...` or `pk_live_...`. */
+    publishableKey: string;
+    /** Override the API base URL. */
+    baseUrl?: string;
+    /** Per-request timeout in milliseconds. Default 30s. */
+    timeoutMs?: number;
+}
+/**
+ * Browser-safe Strimz client.
+ *
+ * Designed for hosted-checkout state polling and the React component
+ * family. Read-only on most resources. Refuses a secret key.
+ *
+ * The `tokens` resource + `selectPaymentPath` / `selectSubscriptionPath`
+ * selectors are the core of the capability-detection layer: given a
+ * token, the SDK asks the backend which meta-tx flows the token
+ * supports, and the selectors map that to a `RelayPath` the checkout
+ * UI uses to decide which typed-data to build.
+ */
+declare class StrimzBrowserClient {
+    readonly mode: ApiKeyMode;
+    /**
+     * Public hosted-checkout reads — payment sessions and subscription
+     * plans by id. Backed by the `/v1/checkout/*` namespace on the API,
+     * which is intentionally unauthenticated.
+     */
+    readonly checkout: CheckoutResource;
+    /** Token metadata + EIP-2612 permit nonce lookup. */
+    readonly tokens: TokensResource;
+    constructor(options: StrimzBrowserClientOptions);
+}
+
+export { AutoPagingIterator as A, BaseResource as B, Fetcher as F, type PaginationParams as P, type RequestOptions as R, StrimzBrowserClient as S, type Page as a, type StrimzBrowserClientOptions as b, type RelayPath as c, selectSubscriptionPath as d, selectPaymentPath as s };

package/dist/browser-client-DlZg0Aae.d.ts

@@ -0,0 +1,223 @@
+import { ApiKeyMode } from '@strimz/shared-config';
+import { PaymentSession, SubscriptionPlan, TokenMetadata, TokenPermitNonce } from '@strimz/shared-types';
+import { z } from 'zod';
+
+/**
+ * Fetch wrapper with retry, idempotency, and Strimz error parsing.
+ *
+ * Retries on:
+ *   - Network failures (TypeError on fetch).
+ *   - 5xx responses for idempotent methods (GET, POST with idempotency key).
+ *   - 429 with Retry-After.
+ *
+ * Does NOT retry on:
+ *   - 4xx other than 429 (caller's bug).
+ *   - 5xx for non-idempotent calls without an idempotency key.
+ */
+interface FetcherOptions {
+    baseUrl: string;
+    baseHeaders: Record<string, string>;
+    /** Default timeout per attempt, milliseconds. */
+    timeoutMs?: number;
+    /** How many retries before giving up. */
+    maxRetries?: number;
+    /** Initial backoff in ms; doubled with jitter on each retry. */
+    initialBackoffMs?: number;
+    /** Optional logger. */
+    onRequest?: (info: {
+        method: string;
+        url: string;
+        attempt: number;
+    }) => void;
+    onResponse?: (info: {
+        method: string;
+        url: string;
+        status: number;
+        ms: number;
+        attempt: number;
+    }) => void;
+    /** Override the global fetch (for tests / Edge polyfills). */
+    fetch?: typeof globalThis.fetch;
+}
+interface RequestSpec {
+    method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    query?: Record<string, string | number | boolean | null | undefined>;
+    body?: unknown;
+    idempotencyKey?: string;
+    /** Per-call timeout override. */
+    timeoutMs?: number;
+}
+declare class Fetcher {
+    private readonly baseUrl;
+    private readonly baseHeaders;
+    private readonly timeoutMs;
+    private readonly maxRetries;
+    private readonly initialBackoffMs;
+    private readonly onRequest;
+    private readonly onResponse;
+    private readonly fetchImpl;
+    constructor(opts: FetcherOptions);
+    request<T>(spec: RequestSpec): Promise<T>;
+    private fetchWithTimeout;
+    private buildUrl;
+    private backoffFor;
+}
+
+/**
+ * Cursor-based pagination, identical shape to the API's list responses.
+ */
+interface Page<T> {
+    data: T[];
+    nextCursor: string | null;
+    hasMore: boolean;
+}
+interface PaginationParams {
+    limit?: number;
+    cursor?: string | null;
+}
+/**
+ * Async-iterable wrapper that auto-paginates through every page of a list.
+ *
+ *   for await (const tx of strimz.transactions.listAll()) { ... }
+ */
+declare class AutoPagingIterator<T> implements AsyncIterable<T> {
+    private readonly fetchPage;
+    constructor(fetchPage: (cursor: string | null) => Promise<Page<T>>);
+    [Symbol.asyncIterator](): AsyncIterator<T>;
+    forEach(handler: (item: T) => void | Promise<void>): Promise<void>;
+    toArray(): Promise<T[]>;
+}
+
+/**
+ * Base class every resource extends. Centralises endpoint plumbing so
+ * resource classes are tiny declarative wrappers.
+ */
+
+type AnySchema = z.ZodTypeAny;
+type Inferred<S extends AnySchema> = z.output<S>;
+interface ResourceContext {
+    fetcher: Fetcher;
+}
+interface RequestOptions {
+    /** Override or supply the idempotency key for a mutating call. */
+    idempotencyKey?: string;
+    /** Per-request timeout in ms. */
+    timeoutMs?: number;
+}
+declare abstract class BaseResource {
+    protected readonly ctx: ResourceContext;
+    constructor(ctx: ResourceContext);
+    protected get<S extends AnySchema>(path: string, schema?: S, query?: RequestSpec['query']): Promise<Inferred<S>>;
+    protected post<S extends AnySchema>(path: string, body: unknown, schema?: S, options?: RequestOptions): Promise<Inferred<S>>;
+    protected patch<S extends AnySchema>(path: string, body: unknown, schema?: S, options?: RequestOptions): Promise<Inferred<S>>;
+    protected delete<S extends AnySchema>(path: string, schema?: S): Promise<Inferred<S>>;
+    protected listPage<S extends AnySchema>(path: string, itemSchema: S, params?: PaginationParams | Record<string, ScalarParam>): Promise<Page<Inferred<S>>>;
+    protected listAuto<S extends AnySchema>(path: string, itemSchema: S, params?: Record<string, ScalarParam>): AutoPagingIterator<Inferred<S>>;
+}
+type ScalarParam = string | number | boolean | null | undefined;
+
+/**
+ * Public hosted-checkout reads.
+ *
+ * Backed by the `/v1/checkout/*` namespace on the Strimz API, which
+ * is intentionally unauthenticated — session and plan records are
+ * what a merchant offers to payers, so a payer landing on a checkout
+ * URL must be able to load the terms without holding any API key.
+ *
+ * Use this resource (via `StrimzBrowserClient.checkout`) from the
+ * browser. The merchant-scoped `paymentSessions` / `subscriptionPlans`
+ * resources on `StrimzClient` remain the right call from server-side
+ * code with a secret key.
+ */
+declare class CheckoutResource extends BaseResource {
+    /** Load a payment session by id (public — no merchant scoping). */
+    session(id: string): Promise<PaymentSession>;
+    /** Load a subscription plan by id (public — no merchant scoping). */
+    plan(id: string): Promise<SubscriptionPlan>;
+}
+
+/**
+ * Token metadata + capability lookup.
+ *
+ * The two endpoints are public on the API (no key required) — token
+ * metadata is purely chain-derived, has no PII, and is what the
+ * browser SDK consults to pick which meta-tx path to take for a
+ * given token. Bundled here so consumers don't have to write the HTTP
+ * fetch themselves.
+ */
+declare class TokensResource extends BaseResource {
+    /**
+     * Fetch full metadata for a token. Throws via the underlying fetcher
+     * (404 → `StrimzNotFoundError`) if the token isn't whitelisted.
+     */
+    retrieve(address: string): Promise<TokenMetadata>;
+    /**
+     * Read an owner's current EIP-2612 permit nonce. Call this
+     * immediately before signing a Permit — the token contract rejects
+     * stale nonces, and the value advances on every successful permit.
+     */
+    permitNonce(address: string, owner: string): Promise<TokenPermitNonce>;
+}
+/**
+ * Path selector — decides which meta-tx flow to take given a token's
+ * capabilities and the action a merchant wants to perform.
+ *
+ * The choice is unambiguous in 99% of cases:
+ *  - One-shot pay        → EIP-3009 (preferred). Falls back to
+ *                          approve+pay if the token has neither.
+ *  - Subscription enrol  → EIP-2612 (the only meta-tx path that
+ *                          grants the recurring allowance subscribers
+ *                          need). If unavailable, the merchant must
+ *                          use the classic approve+create flow.
+ *
+ * Returned `path` values are strings (not enums) so future schemes
+ * can extend the union without breaking existing call sites.
+ */
+type RelayPath = 'pay_with_authorization' | 'permit_and_create_subscription' | 'approve_then_pay' | 'approve_then_create_subscription';
+declare function selectPaymentPath(meta: TokenMetadata): RelayPath;
+declare function selectSubscriptionPath(meta: TokenMetadata): RelayPath;
+
+/**
+ * StrimzBrowserClient — the publishable-key, browser-safe SDK entry point.
+ *
+ * Used by `@strimz/sdk-react` and any other browser code that should
+ * never see a secret key. Surfaces a strict subset of resource methods —
+ * only those safe to call from a browser with a `pk_test_...` or
+ * `pk_live_...` key.
+ */
+
+interface StrimzBrowserClientOptions {
+    /** Publishable key — `pk_test_...` or `pk_live_...`. */
+    publishableKey: string;
+    /** Override the API base URL. */
+    baseUrl?: string;
+    /** Per-request timeout in milliseconds. Default 30s. */
+    timeoutMs?: number;
+}
+/**
+ * Browser-safe Strimz client.
+ *
+ * Designed for hosted-checkout state polling and the React component
+ * family. Read-only on most resources. Refuses a secret key.
+ *
+ * The `tokens` resource + `selectPaymentPath` / `selectSubscriptionPath`
+ * selectors are the core of the capability-detection layer: given a
+ * token, the SDK asks the backend which meta-tx flows the token
+ * supports, and the selectors map that to a `RelayPath` the checkout
+ * UI uses to decide which typed-data to build.
+ */
+declare class StrimzBrowserClient {
+    readonly mode: ApiKeyMode;
+    /**
+     * Public hosted-checkout reads — payment sessions and subscription
+     * plans by id. Backed by the `/v1/checkout/*` namespace on the API,
+     * which is intentionally unauthenticated.
+     */
+    readonly checkout: CheckoutResource;
+    /** Token metadata + EIP-2612 permit nonce lookup. */
+    readonly tokens: TokensResource;
+    constructor(options: StrimzBrowserClientOptions);
+}
+
+export { AutoPagingIterator as A, BaseResource as B, Fetcher as F, type PaginationParams as P, type RequestOptions as R, StrimzBrowserClient as S, type Page as a, type StrimzBrowserClientOptions as b, type RelayPath as c, selectSubscriptionPath as d, selectPaymentPath as s };