@strimz/sdk 0.1.0

package/dist/browser-client.js

@@ -0,0 +1,439 @@
+import { kindFromKey, modeFromKey } from '@strimz/shared-config';
+import { paymentSessionSchema, subscriptionPlanSchema, tokenMetadataSchema, tokenPermitNonceSchema } from '@strimz/shared-types';
+import { uuid } from '@strimz/shared-crypto';
+
+// src/browser-client.ts
+
+// src/errors.ts
+var StrimzError = class extends Error {
+  code;
+  httpStatus;
+  requestId;
+  param;
+  details;
+  constructor(body, httpStatus) {
+    super(body.message);
+    this.name = "StrimzError";
+    this.code = body.code;
+    this.httpStatus = httpStatus;
+    this.requestId = body.requestId;
+    this.param = body.param;
+    this.details = body.details;
+  }
+};
+var StrimzAuthenticationError = class extends StrimzError {
+  constructor(body, httpStatus) {
+    super(body, httpStatus);
+    this.name = "StrimzAuthenticationError";
+  }
+};
+var StrimzPermissionError = class extends StrimzError {
+  constructor(body, httpStatus) {
+    super(body, httpStatus);
+    this.name = "StrimzPermissionError";
+  }
+};
+var StrimzValidationError = class extends StrimzError {
+  constructor(body, httpStatus) {
+    super(body, httpStatus);
+    this.name = "StrimzValidationError";
+  }
+};
+var StrimzNotFoundError = class extends StrimzError {
+  constructor(body, httpStatus) {
+    super(body, httpStatus);
+    this.name = "StrimzNotFoundError";
+  }
+};
+var StrimzIdempotencyError = class extends StrimzError {
+  constructor(body, httpStatus) {
+    super(body, httpStatus);
+    this.name = "StrimzIdempotencyError";
+  }
+};
+var StrimzRateLimitError = class extends StrimzError {
+  retryAfterMs;
+  constructor(body, httpStatus, retryAfterMs) {
+    super(body, httpStatus);
+    this.name = "StrimzRateLimitError";
+    this.retryAfterMs = retryAfterMs;
+  }
+};
+var StrimzNetworkError = class extends StrimzError {
+  cause;
+  constructor(message, cause) {
+    super({ code: "network_error", message });
+    this.name = "StrimzNetworkError";
+    this.cause = cause;
+  }
+};
+var StrimzTimeoutError = class extends StrimzError {
+  constructor(message) {
+    super({ code: "timeout", message });
+    this.name = "StrimzTimeoutError";
+  }
+};
+function classifyError(httpStatus, body, retryAfterMs) {
+  if (httpStatus === 401) return new StrimzAuthenticationError(body, httpStatus);
+  if (httpStatus === 403) return new StrimzPermissionError(body, httpStatus);
+  if (httpStatus === 404) return new StrimzNotFoundError(body, httpStatus);
+  if (httpStatus === 409 && body.code === "idempotency_error") {
+    return new StrimzIdempotencyError(body, httpStatus);
+  }
+  if (httpStatus === 422) return new StrimzValidationError(body, httpStatus);
+  if (httpStatus === 429) return new StrimzRateLimitError(body, httpStatus, retryAfterMs);
+  return new StrimzError(body, httpStatus);
+}
+
+// src/http/headers.ts
+var HEADERS = {
+  authorization: "Authorization",
+  idempotencyKey: "X-Strimz-Idempotency-Key",
+  sdkName: "X-Strimz-Sdk",
+  sdkVersion: "X-Strimz-Sdk-Version",
+  sdkRuntime: "X-Strimz-Sdk-Runtime"
+};
+var SDK_NAME = "@strimz/sdk";
+var SDK_VERSION = "0.0.0";
+function buildBaseHeaders(apiKey, runtime) {
+  return {
+    [HEADERS.authorization]: `Bearer ${apiKey}`,
+    [HEADERS.sdkName]: SDK_NAME,
+    [HEADERS.sdkVersion]: SDK_VERSION,
+    [HEADERS.sdkRuntime]: runtime,
+    Accept: "application/json"
+  };
+}
+
+// src/http/fetcher.ts
+var DEFAULT_TIMEOUT_MS = 3e4;
+var DEFAULT_MAX_RETRIES = 3;
+var DEFAULT_INITIAL_BACKOFF_MS = 250;
+var Fetcher = class {
+  baseUrl;
+  baseHeaders;
+  timeoutMs;
+  maxRetries;
+  initialBackoffMs;
+  onRequest;
+  onResponse;
+  fetchImpl;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl.replace(/\/$/, "");
+    this.baseHeaders = opts.baseHeaders;
+    this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    this.maxRetries = opts.maxRetries ?? DEFAULT_MAX_RETRIES;
+    this.initialBackoffMs = opts.initialBackoffMs ?? DEFAULT_INITIAL_BACKOFF_MS;
+    this.onRequest = opts.onRequest;
+    this.onResponse = opts.onResponse;
+    this.fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis);
+  }
+  async request(spec) {
+    const url = this.buildUrl(spec.path, spec.query);
+    const idempotent = isIdempotent(spec);
+    const headers = { ...this.baseHeaders };
+    if (spec.body != null) headers["Content-Type"] = "application/json";
+    if (spec.idempotencyKey) headers[HEADERS.idempotencyKey] = spec.idempotencyKey;
+    let attempt = 0;
+    let lastErr;
+    while (attempt <= this.maxRetries) {
+      try {
+        this.onRequest?.({ method: spec.method, url, attempt });
+        const start = Date.now();
+        const res = await this.fetchWithTimeout(
+          url,
+          {
+            method: spec.method,
+            headers,
+            body: spec.body == null ? void 0 : JSON.stringify(spec.body)
+          },
+          spec.timeoutMs ?? this.timeoutMs
+        );
+        const ms = Date.now() - start;
+        this.onResponse?.({ method: spec.method, url, status: res.status, ms, attempt });
+        if (res.ok) {
+          if (res.status === 204) return void 0;
+          return await res.json();
+        }
+        const errorBody = await parseErrorBody(res);
+        const retryAfterMs = parseRetryAfter(res);
+        if (res.status === 429 && attempt < this.maxRetries) {
+          await delay(retryAfterMs ?? this.backoffFor(attempt));
+          attempt++;
+          continue;
+        }
+        if (res.status >= 500 && idempotent && attempt < this.maxRetries) {
+          await delay(this.backoffFor(attempt));
+          attempt++;
+          continue;
+        }
+        throw classifyError(res.status, errorBody, retryAfterMs);
+      } catch (err) {
+        if (err instanceof StrimzError) throw err;
+        lastErr = err;
+        if (!isNetworkLike(err) || attempt >= this.maxRetries) {
+          if (err instanceof StrimzTimeoutError) throw err;
+          throw new StrimzNetworkError(`Network error: ${describe(err)}`, err);
+        }
+        await delay(this.backoffFor(attempt));
+        attempt++;
+      }
+    }
+    throw new StrimzNetworkError(`Network error after ${this.maxRetries} retries`, lastErr);
+  }
+  async fetchWithTimeout(url, init, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+      return await this.fetchImpl(url, { ...init, signal: controller.signal });
+    } catch (err) {
+      if (isAbortError(err)) {
+        throw new StrimzTimeoutError(`Request timed out after ${timeoutMs}ms`);
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  buildUrl(path, query) {
+    const base = `${this.baseUrl}${path.startsWith("/") ? path : `/${path}`}`;
+    if (!query) return base;
+    const usp = new URLSearchParams();
+    for (const [k, v] of Object.entries(query)) {
+      if (v == null) continue;
+      usp.append(k, String(v));
+    }
+    const qs = usp.toString();
+    return qs ? `${base}?${qs}` : base;
+  }
+  backoffFor(attempt) {
+    const expo = this.initialBackoffMs * Math.pow(2, attempt);
+    const jitter = Math.random() * this.initialBackoffMs;
+    return Math.min(expo + jitter, 8e3);
+  }
+};
+function isIdempotent(spec) {
+  if (spec.method === "GET" || spec.method === "DELETE") return true;
+  return spec.idempotencyKey != null;
+}
+async function parseErrorBody(res) {
+  try {
+    const json = await res.json();
+    if (typeof json === "object" && json !== null && "error" in json && json.error) {
+      return json.error;
+    }
+    if (typeof json === "object" && json !== null && "code" in json && "message" in json) {
+      return json;
+    }
+  } catch {
+  }
+  return { code: "api_error", message: `HTTP ${res.status}` };
+}
+function parseRetryAfter(res) {
+  const v = res.headers.get("Retry-After");
+  if (!v) return void 0;
+  const n = Number(v);
+  if (Number.isFinite(n)) return Math.max(0, n) * 1e3;
+  const date = Date.parse(v);
+  if (Number.isFinite(date)) return Math.max(0, date - Date.now());
+  return void 0;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isAbortError(err) {
+  return err instanceof Error && err.name === "AbortError";
+}
+function isNetworkLike(err) {
+  if (err instanceof TypeError) return true;
+  if (err instanceof Error && /fetch|network|econn/i.test(err.message)) return true;
+  return false;
+}
+function describe(err) {
+  if (err instanceof Error) return err.message;
+  return String(err);
+}
+function generateIdempotencyKey() {
+  return `strimz_${uuid()}`;
+}
+
+// src/pagination.ts
+var AutoPagingIterator = class {
+  constructor(fetchPage) {
+    this.fetchPage = fetchPage;
+  }
+  fetchPage;
+  async *[Symbol.asyncIterator]() {
+    let cursor = null;
+    let first = true;
+    while (first || cursor !== null) {
+      first = false;
+      const page = await this.fetchPage(cursor);
+      for (const item of page.data) {
+        yield item;
+      }
+      cursor = page.hasMore ? page.nextCursor : null;
+    }
+  }
+  async forEach(handler) {
+    for await (const item of this) {
+      await handler(item);
+    }
+  }
+  async toArray() {
+    const out = [];
+    for await (const item of this) out.push(item);
+    return out;
+  }
+};
+
+// src/resources/base-resource.ts
+var BaseResource = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  ctx;
+  async get(path, schema, query) {
+    const data = await this.ctx.fetcher.request({ method: "GET", path, query });
+    return parse(data, schema);
+  }
+  async post(path, body, schema, options) {
+    const data = await this.ctx.fetcher.request({
+      method: "POST",
+      path,
+      body,
+      idempotencyKey: options?.idempotencyKey ?? generateIdempotencyKey(),
+      timeoutMs: options?.timeoutMs
+    });
+    return parse(data, schema);
+  }
+  async patch(path, body, schema, options) {
+    const data = await this.ctx.fetcher.request({
+      method: "PATCH",
+      path,
+      body,
+      idempotencyKey: options?.idempotencyKey ?? generateIdempotencyKey(),
+      timeoutMs: options?.timeoutMs
+    });
+    return parse(data, schema);
+  }
+  async delete(path, schema) {
+    const data = await this.ctx.fetcher.request({ method: "DELETE", path });
+    return parse(data, schema);
+  }
+  listPage(path, itemSchema, params) {
+    return this.ctx.fetcher.request({ method: "GET", path, query: toQuery(params) }).then((raw) => parsePage(raw, itemSchema));
+  }
+  listAuto(path, itemSchema, params) {
+    return new AutoPagingIterator(
+      (cursor) => this.listPage(path, itemSchema, { ...params, cursor })
+    );
+  }
+};
+function toQuery(params) {
+  if (!params) return {};
+  return params;
+}
+function parse(data, schema) {
+  return schema ? schema.parse(data) : data;
+}
+function parsePage(raw, itemSchema) {
+  const obj = raw;
+  const items = (obj?.data ?? []).map((d) => itemSchema.parse(d));
+  return {
+    data: items,
+    nextCursor: obj?.nextCursor ?? null,
+    hasMore: obj?.hasMore === true
+  };
+}
+
+// src/resources/checkout.ts
+var CheckoutResource = class extends BaseResource {
+  /** Load a payment session by id (public — no merchant scoping). */
+  session(id) {
+    return this.get(`/v1/checkout/sessions/${encodeURIComponent(id)}`, paymentSessionSchema);
+  }
+  /** Load a subscription plan by id (public — no merchant scoping). */
+  plan(id) {
+    return this.get(`/v1/checkout/plans/${encodeURIComponent(id)}`, subscriptionPlanSchema);
+  }
+};
+var TokensResource = class extends BaseResource {
+  /**
+   * Fetch full metadata for a token. Throws via the underlying fetcher
+   * (404 → `StrimzNotFoundError`) if the token isn't whitelisted.
+   */
+  retrieve(address) {
+    return this.get(`/v1/tokens/${encodeURIComponent(address.toLowerCase())}`, tokenMetadataSchema);
+  }
+  /**
+   * Read an owner's current EIP-2612 permit nonce. Call this
+   * immediately before signing a Permit — the token contract rejects
+   * stale nonces, and the value advances on every successful permit.
+   */
+  permitNonce(address, owner) {
+    return this.get(
+      `/v1/tokens/${encodeURIComponent(address.toLowerCase())}/permit-nonce`,
+      tokenPermitNonceSchema,
+      { owner: owner.toLowerCase() }
+    );
+  }
+};
+function selectPaymentPath(meta) {
+  return meta.capabilities.transferAuth3009 ? "pay_with_authorization" : "approve_then_pay";
+}
+function selectSubscriptionPath(meta) {
+  return meta.capabilities.permit2612 ? "permit_and_create_subscription" : "approve_then_create_subscription";
+}
+
+// src/browser-client.ts
+var DEFAULT_BASE_URL = "https://api.strimz.io";
+var StrimzBrowserClient = class {
+  mode;
+  /**
+   * Public hosted-checkout reads — payment sessions and subscription
+   * plans by id. Backed by the `/v1/checkout/*` namespace on the API,
+   * which is intentionally unauthenticated.
+   */
+  checkout;
+  /** Token metadata + EIP-2612 permit nonce lookup. */
+  tokens;
+  constructor(options) {
+    const key = options.publishableKey;
+    if (!key || typeof key !== "string") {
+      throw new StrimzAuthenticationError(
+        { code: "authentication_error", message: "publishableKey is required" },
+        401
+      );
+    }
+    if (kindFromKey(key) !== "publishable") {
+      throw new StrimzAuthenticationError(
+        {
+          code: "authentication_error",
+          message: "StrimzBrowserClient must be initialised with a publishable key (pk_test_... / pk_live_...). Never expose secret keys to a browser."
+        },
+        401
+      );
+    }
+    const mode = modeFromKey(key);
+    if (mode == null) {
+      throw new StrimzAuthenticationError(
+        { code: "authentication_error", message: "Unrecognised API key prefix" },
+        401
+      );
+    }
+    this.mode = mode;
+    const fetcher = new Fetcher({
+      baseUrl: options.baseUrl ?? DEFAULT_BASE_URL,
+      baseHeaders: buildBaseHeaders(key, "browser"),
+      timeoutMs: options.timeoutMs,
+      maxRetries: 2
+    });
+    this.checkout = new CheckoutResource({ fetcher });
+    this.tokens = new TokensResource({ fetcher });
+  }
+};
+
+export { StrimzBrowserClient, selectPaymentPath, selectSubscriptionPath };
+//# sourceMappingURL=browser-client.js.map
+//# sourceMappingURL=browser-client.js.map

package/dist/browser-client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/http/headers.ts","../src/http/fetcher.ts","../src/idempotency.ts","../src/pagination.ts","../src/resources/base-resource.ts","../src/resources/checkout.ts","../src/resources/tokens.ts","../src/browser-client.ts"],"names":[],"mappings":";;;;;;;AAqCO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,KAAK,OAAO,CAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA;AAClB,IAAA,IAAA,CAAK,UAAU,IAAA,CAAK,OAAA;AAAA,EACtB;AACF,CAAA;AAEO,IAAM,yBAAA,GAAN,cAAwC,WAAA,CAAY;AAAA,EACzD,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,qBAAA,GAAN,cAAoC,WAAA,CAAY;AAAA,EACrD,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,qBAAA,GAAN,cAAoC,WAAA,CAAY;AAAA,EACrD,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,mBAAA,GAAN,cAAkC,WAAA,CAAY;AAAA,EACnD,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,sBAAA,GAAN,cAAqC,WAAA,CAAY;AAAA,EACtD,WAAA,CAAY,MAAuB,UAAA,EAAqB;AACtD,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmC,WAAA,CAAY;AAAA,EACpC,YAAA;AAAA,EAChB,WAAA,CAAY,IAAA,EAAuB,UAAA,EAAqB,YAAA,EAAuB;AAC7E,IAAA,KAAA,CAAM,MAAM,UAAU,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AACZ,IAAA,IAAA,CAAK,YAAA,GAAe,YAAA;AAAA,EACtB;AACF,CAAA;AAEO,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EACzB,KAAA;AAAA,EACzB,WAAA,CAAY,SAAiB,KAAA,EAAgB;AAC3C,IAAA,KAAA,CAAM,EAAE,IAAA,EAAM,eAAA,EAAiB,OAAA,EAAS,CAAA;AACxC,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF,CAAA;AAEO,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EAClD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,CAAA;AAClC,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AAAA,EACd;AACF,CAAA;AAUO,SAAS,aAAA,CACd,UAAA,EACA,IAAA,EACA,YAAA,EACa;AACb,EAAA,IAAI,eAAe,GAAA,EAAK,OAAO,IAAI,yBAAA,CAA0B,MAAM,UAAU,CAAA;AAC7E,EAAA,IAAI,eAAe,GAAA,EAAK,OAAO,IAAI,qBAAA,CAAsB,MAAM,UAAU,CAAA;AACzE,EAAA,IAAI,eAAe,GAAA,EAAK,OAAO,IAAI,mBAAA,CAAoB,MAAM,UAAU,CAAA;AACvE,EAAA,IAAI,UAAA,KAAe,GAAA,IAAO,IAAA,CAAK,IAAA,KAAS,mBAAA,EAAqB;AAC3D,IAAA,OAAO,IAAI,sBAAA,CAAuB,IAAA,EAAM,UAAU,CAAA;AAAA,EACpD;AACA,EAAA,IAAI,eAAe,GAAA,EAAK,OAAO,IAAI,qBAAA,CAAsB,MAAM,UAAU,CAAA;AACzE,EAAA,IAAI,eAAe,GAAA,EAAK,OAAO,IAAI,oBAAA,CAAqB,IAAA,EAAM,YAAY,YAAY,CAAA;AACtF,EAAA,OAAO,IAAI,WAAA,CAAY,IAAA,EAAM,UAAU,CAAA;AACzC;;;AChIO,IAAM,OAAA,GAAU;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,0BAAA;AAAA,EAEhB,OAAA,EAAS,cAAA;AAAA,EACT,UAAA,EAAY,sBAAA;AAAA,EACZ,UAAA,EAAY;AACd,CAAA;AAEO,IAAM,QAAA,GAAW,aAAA;AAGjB,IAAM,WAAA,GAAc,OAAA;AAEpB,SAAS,gBAAA,CAAiB,QAAgB,OAAA,EAAyC;AACxF,EAAA,OAAO;AAAA,IACL,CAAC,OAAA,CAAQ,aAAa,GAAG,UAAU,MAAM,CAAA,CAAA;AAAA,IACzC,CAAC,OAAA,CAAQ,OAAO,GAAG,QAAA;AAAA,IACnB,CAAC,OAAA,CAAQ,UAAU,GAAG,WAAA;AAAA,IACtB,CAAC,OAAA,CAAQ,UAAU,GAAG,OAAA;AAAA,IACtB,MAAA,EAAQ;AAAA,GACV;AACF;;;ACuBA,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,mBAAA,GAAsB,CAAA;AAC5B,IAAM,0BAAA,GAA6B,GAAA;AAE5B,IAAM,UAAN,MAAc;AAAA,EACF,OAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EAEjB,YAAY,IAAA,EAAsB;AAChC,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC7C,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AACxB,IAAA,IAAA,CAAK,SAAA,GAAY,KAAK,SAAA,IAAa,kBAAA;AACnC,IAAA,IAAA,CAAK,UAAA,GAAa,KAAK,UAAA,IAAc,mBAAA;AACrC,IAAA,IAAA,CAAK,gBAAA,GAAmB,KAAK,gBAAA,IAAoB,0BAAA;AACjD,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,aAAa,IAAA,CAAK,UAAA;AACvB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,QAAW,IAAA,EAA+B;AAC9C,IAAA,MAAM,MAAM,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC/C,IAAA,MAAM,UAAA,GAAa,aAAa,IAAI,CAAA;AACpC,IAAA,MAAM,OAAA,GAAkC,EAAE,GAAG,IAAA,CAAK,WAAA,EAAY;AAC9D,IAAA,IAAI,IAAA,CAAK,IAAA,IAAQ,IAAA,EAAM,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AACjD,IAAA,IAAI,KAAK,cAAA,EAAgB,OAAA,CAAQ,OAAA,CAAQ,cAAc,IAAI,IAAA,CAAK,cAAA;AAEhE,IAAA,IAAI,OAAA,GAAU,CAAA;AACd,IAAA,IAAI,OAAA;AACJ,IAAA,OAAO,OAAA,IAAW,KAAK,UAAA,EAAY;AACjC,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,YAAY,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,GAAA,EAAK,SAAS,CAAA;AACtD,QAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,EAAI;AACvB,QAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,gBAAA;AAAA,UACrB,GAAA;AAAA,UACA;AAAA,YACE,QAAQ,IAAA,CAAK,MAAA;AAAA,YACb,OAAA;AAAA,YACA,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA,GAAO,SAAY,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI;AAAA,WAChE;AAAA,UACA,IAAA,CAAK,aAAa,IAAA,CAAK;AAAA,SACzB;AACA,QAAA,MAAM,EAAA,GAAK,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AACxB,QAAA,IAAA,CAAK,UAAA,GAAa,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,EAAA,EAAI,OAAA,EAAS,CAAA;AAE/E,QAAA,IAAI,IAAI,EAAA,EAAI;AACV,UAAA,IAAI,GAAA,CAAI,MAAA,KAAW,GAAA,EAAK,OAAO,KAAA,CAAA;AAC/B,UAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,QACzB;AAEA,QAAA,MAAM,SAAA,GAAY,MAAM,cAAA,CAAe,GAAG,CAAA;AAC1C,QAAA,MAAM,YAAA,GAAe,gBAAgB,GAAG,CAAA;AAGxC,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,GAAA,IAAO,OAAA,GAAU,KAAK,UAAA,EAAY;AACnD,UAAA,MAAM,KAAA,CAAM,YAAA,IAAgB,IAAA,CAAK,UAAA,CAAW,OAAO,CAAC,CAAA;AACpD,UAAA,OAAA,EAAA;AACA,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,IAAI,MAAA,IAAU,GAAA,IAAO,UAAA,IAAc,OAAA,GAAU,KAAK,UAAA,EAAY;AAChE,UAAA,MAAM,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,OAAO,CAAC,CAAA;AACpC,UAAA,OAAA,EAAA;AACA,UAAA;AAAA,QACF;AAEA,QAAA,MAAM,aAAA,CAAc,GAAA,CAAI,MAAA,EAAQ,SAAA,EAAW,YAAY,CAAA;AAAA,MACzD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,GAAA,YAAe,aAAa,MAAM,GAAA;AACtC,QAAA,OAAA,GAAU,GAAA;AACV,QAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,IAAK,OAAA,IAAW,KAAK,UAAA,EAAY;AACrD,UAAA,IAAI,GAAA,YAAe,oBAAoB,MAAM,GAAA;AAC7C,UAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,eAAA,EAAkB,SAAS,GAAG,CAAC,IAAI,GAAG,CAAA;AAAA,QACrE;AACA,QAAA,MAAM,KAAA,CAAM,IAAA,CAAK,UAAA,CAAW,OAAO,CAAC,CAAA;AACpC,QAAA,OAAA,EAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,oBAAA,EAAuB,IAAA,CAAK,UAAU,YAAY,OAAO,CAAA;AAAA,EACxF;AAAA,EAEA,MAAc,gBAAA,CACZ,GAAA,EACA,IAAA,EACA,SAAA,EACmB;AACnB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAC5D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,IACzE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,YAAA,CAAa,GAAG,CAAA,EAAG;AACrB,QAAA,MAAM,IAAI,kBAAA,CAAmB,CAAA,wBAAA,EAA2B,SAAS,CAAA,EAAA,CAAI,CAAA;AAAA,MACvE;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEQ,QAAA,CAAS,MAAc,KAAA,EAAsC;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA,CAAA;AACvE,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,IAAA,MAAM,GAAA,GAAM,IAAI,eAAA,EAAgB;AAChC,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,KAAK,IAAA,EAAM;AACf,MAAA,GAAA,CAAI,MAAA,CAAO,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACzB;AACA,IAAA,MAAM,EAAA,GAAK,IAAI,QAAA,EAAS;AACxB,IAAA,OAAO,EAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA,GAAK,IAAA;AAAA,EAChC;AAAA,EAEQ,WAAW,OAAA,EAAyB;AAC1C,IAAA,MAAM,OAAO,IAAA,CAAK,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACxD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,EAAO,GAAI,IAAA,CAAK,gBAAA;AACpC,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,GAAO,MAAA,EAAQ,GAAK,CAAA;AAAA,EACtC;AACF,CAAA;AAEA,SAAS,aAAa,IAAA,EAA4B;AAChD,EAAA,IAAI,KAAK,MAAA,KAAW,KAAA,IAAS,IAAA,CAAK,MAAA,KAAW,UAAU,OAAO,IAAA;AAC9D,EAAA,OAAO,KAAK,cAAA,IAAkB,IAAA;AAChC;AAEA,eAAe,eAAe,GAAA,EAAyC;AACrE,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,IAAI,OAAO,SAAS,QAAA,IAAY,IAAA,KAAS,QAAQ,OAAA,IAAW,IAAA,IAAQ,KAAK,KAAA,EAAO;AAC9E,MAAA,OAAO,IAAA,CAAK,KAAA;AAAA,IACd;AACA,IAAA,IAAI,OAAO,SAAS,QAAA,IAAY,IAAA,KAAS,QAAQ,MAAA,IAAU,IAAA,IAAQ,aAAa,IAAA,EAAM;AACpF,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,SAAS,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA,EAAG;AAC5D;AAEA,SAAS,gBAAgB,GAAA,EAAmC;AAC1D,EAAA,MAAM,CAAA,GAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACvC,EAAA,IAAI,CAAC,GAAG,OAAO,MAAA;AACf,EAAA,MAAM,CAAA,GAAI,OAAO,CAAC,CAAA;AAClB,EAAA,IAAI,MAAA,CAAO,SAAS,CAAC,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,CAAC,CAAA,GAAI,GAAA;AAChD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,GAAA,EAAK,CAAA;AAC/D,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAEA,SAAS,aAAa,GAAA,EAAuB;AAC3C,EAAA,OAAO,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,YAAA;AAC9C;AAEA,SAAS,cAAc,GAAA,EAAuB;AAC5C,EAAA,IAAI,GAAA,YAAe,WAAW,OAAO,IAAA;AACrC,EAAA,IAAI,eAAe,KAAA,IAAS,sBAAA,CAAuB,KAAK,GAAA,CAAI,OAAO,GAAG,OAAO,IAAA;AAC7E,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,SAAS,GAAA,EAAsB;AACtC,EAAA,IAAI,GAAA,YAAe,KAAA,EAAO,OAAO,GAAA,CAAI,OAAA;AACrC,EAAA,OAAO,OAAO,GAAG,CAAA;AACnB;AC1NO,SAAS,sBAAA,GAAiC;AAC/C,EAAA,OAAO,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA;AACzB;;;ACWO,IAAM,qBAAN,MAAwD;AAAA,EAC7D,YAA6B,SAAA,EAAwD;AAAxD,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAAyD;AAAA,EAAzD,SAAA;AAAA,EAE7B,QAAQ,MAAA,CAAO,aAAa,CAAA,GAAsB;AAChD,IAAA,IAAI,MAAA,GAAwB,IAAA;AAC5B,IAAA,IAAI,KAAA,GAAQ,IAAA;AACZ,IAAA,OAAO,KAAA,IAAS,WAAW,IAAA,EAAM;AAC/B,MAAA,KAAA,GAAQ,KAAA;AACR,MAAA,MAAM,IAAA,GAAgB,MAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AACjD,MAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,IAAA,EAAM;AAC5B,QAAA,MAAM,IAAA;AAAA,MACR;AACA,MAAA,MAAA,GAAS,IAAA,CAAK,OAAA,GAAU,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,IAC5C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,OAAA,EAA2D;AACvE,IAAA,WAAA,MAAiB,QAAQ,IAAA,EAAM;AAC7B,MAAA,MAAM,QAAQ,IAAI,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAwB;AAC5B,IAAA,MAAM,MAAW,EAAC;AAClB,IAAA,WAAA,MAAiB,IAAA,IAAQ,IAAA,EAAM,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA;AAC5C,IAAA,OAAO,GAAA;AAAA,EACT;AACF,CAAA;;;ACvBO,IAAe,eAAf,MAA4B;AAAA,EACjC,YAA+B,GAAA,EAAsB;AAAtB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAuB;AAAA,EAAvB,GAAA;AAAA,EAE/B,MAAgB,GAAA,CACd,IAAA,EACA,MAAA,EACA,KAAA,EACsB;AACtB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAiB,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,KAAA,EAAO,CAAA;AACnF,IAAA,OAAO,KAAA,CAAM,MAAM,MAAM,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAgB,IAAA,CACd,IAAA,EACA,IAAA,EACA,QACA,OAAA,EACsB;AACtB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,QAAQ,OAAA,CAAiB;AAAA,MACnD,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA;AAAA,MACA,IAAA;AAAA,MACA,cAAA,EAAgB,OAAA,EAAS,cAAA,IAAkB,sBAAA,EAAuB;AAAA,MAClE,WAAW,OAAA,EAAS;AAAA,KACrB,CAAA;AACD,IAAA,OAAO,KAAA,CAAM,MAAM,MAAM,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAgB,KAAA,CACd,IAAA,EACA,IAAA,EACA,QACA,OAAA,EACsB;AACtB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,QAAQ,OAAA,CAAiB;AAAA,MACnD,MAAA,EAAQ,OAAA;AAAA,MACR,IAAA;AAAA,MACA,IAAA;AAAA,MACA,cAAA,EAAgB,OAAA,EAAS,cAAA,IAAkB,sBAAA,EAAuB;AAAA,MAClE,WAAW,OAAA,EAAS;AAAA,KACrB,CAAA;AACD,IAAA,OAAO,KAAA,CAAM,MAAM,MAAM,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAgB,MAAA,CAA4B,IAAA,EAAc,MAAA,EAAkC;AAC1F,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,QAAiB,EAAE,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,CAAA;AAC/E,IAAA,OAAO,KAAA,CAAM,MAAM,MAAM,CAAA;AAAA,EAC3B;AAAA,EAEU,QAAA,CACR,IAAA,EACA,UAAA,EACA,MAAA,EAC4B;AAC5B,IAAA,OAAO,IAAA,CAAK,IAAI,OAAA,CACb,OAAA,CAAiB,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAM,KAAA,EAAO,OAAA,CAAQ,MAAM,CAAA,EAAG,EAChE,IAAA,CAAK,CAAC,QAAQ,SAAA,CAAU,GAAA,EAAK,UAAU,CAAC,CAAA;AAAA,EAC7C;AAAA,EAEU,QAAA,CACR,IAAA,EACA,UAAA,EACA,MAAA,EACiC;AACjC,IAAA,OAAO,IAAI,kBAAA;AAAA,MAAmB,CAAC,MAAA,KAC7B,IAAA,CAAK,QAAA,CAAS,IAAA,EAAM,YAAY,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KACvD;AAAA,EACF;AACF,CAAA;AAIA,SAAS,QACP,MAAA,EAC6B;AAC7B,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,KAAA,CAA2B,MAAe,MAAA,EAAyB;AAC1E,EAAA,OAAQ,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,GAAI,IAAA;AACxC;AAEA,SAAS,SAAA,CAA+B,KAAc,UAAA,EAAkC;AACtF,EAAA,MAAM,GAAA,GAAM,GAAA;AACZ,EAAA,MAAM,KAAA,GAAA,CAAS,GAAA,EAAK,IAAA,IAAQ,EAAC,EAAG,GAAA,CAAI,CAAC,CAAA,KAAM,UAAA,CAAW,KAAA,CAAM,CAAC,CAAgB,CAAA;AAC7E,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,IAC/B,OAAA,EAAS,KAAK,OAAA,KAAY;AAAA,GAC5B;AACF;;;AC9FO,IAAM,gBAAA,GAAN,cAA+B,YAAA,CAAa;AAAA;AAAA,EAEjD,QAAQ,EAAA,EAAqC;AAC3C,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,sBAAA,EAAyB,mBAAmB,EAAE,CAAC,IAAI,oBAAoB,CAAA;AAAA,EACzF;AAAA;AAAA,EAGA,KAAK,EAAA,EAAuC;AAC1C,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,mBAAA,EAAsB,mBAAmB,EAAE,CAAC,IAAI,sBAAsB,CAAA;AAAA,EACxF;AACF,CAAA;ACdO,IAAM,cAAA,GAAN,cAA6B,YAAA,CAAa;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,SAAS,OAAA,EAAyC;AAChD,IAAA,OAAO,IAAA,CAAK,IAAI,CAAA,WAAA,EAAc,kBAAA,CAAmB,QAAQ,WAAA,EAAa,CAAC,CAAA,CAAA,EAAI,mBAAmB,CAAA;AAAA,EAChG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAA,CAAY,SAAiB,KAAA,EAA0C;AACrE,IAAA,OAAO,IAAA,CAAK,GAAA;AAAA,MACV,CAAA,WAAA,EAAc,kBAAA,CAAmB,OAAA,CAAQ,WAAA,EAAa,CAAC,CAAA,aAAA,CAAA;AAAA,MACvD,sBAAA;AAAA,MACA,EAAE,KAAA,EAAO,KAAA,CAAM,WAAA,EAAY;AAAE,KAC/B;AAAA,EACF;AACF,CAAA;AAuBO,SAAS,kBAAkB,IAAA,EAAgC;AAChE,EAAA,OAAO,IAAA,CAAK,YAAA,CAAa,gBAAA,GAAmB,wBAAA,GAA2B,kBAAA;AACzE;AAEO,SAAS,uBAAuB,IAAA,EAAgC;AACrE,EAAA,OAAO,IAAA,CAAK,YAAA,CAAa,UAAA,GACrB,gCAAA,GACA,kCAAA;AACN;;;ACvCA,IAAM,gBAAA,GAAmB,uBAAA;AAclB,IAAM,sBAAN,MAA0B;AAAA,EACf,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAA;AAAA;AAAA,EAEA,MAAA;AAAA,EAEhB,YAAY,OAAA,EAAqC;AAC/C,IAAA,MAAM,MAAM,OAAA,CAAQ,cAAA;AACpB,IAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,EAAE,IAAA,EAAM,sBAAA,EAAwB,OAAA,EAAS,4BAAA,EAA6B;AAAA,QACtE;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,WAAA,CAAY,GAAG,CAAA,KAAM,aAAA,EAAe;AACtC,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR;AAAA,UACE,IAAA,EAAM,sBAAA;AAAA,UACN,OAAA,EACE;AAAA,SACJ;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,YAAY,GAAG,CAAA;AAC5B,IAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,EAAE,IAAA,EAAM,sBAAA,EAAwB,OAAA,EAAS,6BAAA,EAA8B;AAAA,QACvE;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAEZ,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ;AAAA,MAC1B,OAAA,EAAS,QAAQ,OAAA,IAAW,gBAAA;AAAA,MAC5B,WAAA,EAAa,gBAAA,CAAiB,GAAA,EAAK,SAAS,CAAA;AAAA,MAC5C,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,UAAA,EAAY;AAAA,KACb,CAAA;AACD,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,gBAAA,CAAiB,EAAE,SAAS,CAAA;AAChD,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,cAAA,CAAe,EAAE,SAAS,CAAA;AAAA,EAC9C;AACF","file":"browser-client.js","sourcesContent":["/**\n * Error hierarchy for the Strimz SDK.\n *\n * Every error thrown by the SDK extends `StrimzError`. The SDK never\n * resolves to `{ ok: false }` — it throws. This matches the Stripe / GitHub\n * SDK convention and keeps call sites linear.\n */\n\nexport type StrimzErrorCode =\n  | 'authentication_error'\n  | 'permission_denied'\n  | 'invalid_request'\n  | 'not_found'\n  | 'idempotency_error'\n  | 'rate_limited'\n  | 'mode_mismatch'\n  | 'merchant_not_found'\n  | 'merchant_inactive'\n  | 'token_not_whitelisted'\n  | 'compliance_blocked'\n  | 'session_expired'\n  | 'session_invalid_state'\n  | 'webhook_signature_invalid'\n  | 'api_error'\n  | 'network_error'\n  | 'timeout'\n  | 'parse_error'\n  | 'unknown'\n\nexport interface StrimzErrorBody {\n  code: StrimzErrorCode\n  message: string\n  param?: string\n  requestId?: string\n  details?: Record<string, unknown>\n}\n\nexport class StrimzError extends Error {\n  public readonly code: StrimzErrorCode\n  public readonly httpStatus: number | undefined\n  public readonly requestId: string | undefined\n  public readonly param: string | undefined\n  public readonly details: Record<string, unknown> | undefined\n\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body.message)\n    this.name = 'StrimzError'\n    this.code = body.code\n    this.httpStatus = httpStatus\n    this.requestId = body.requestId\n    this.param = body.param\n    this.details = body.details\n  }\n}\n\nexport class StrimzAuthenticationError extends StrimzError {\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzAuthenticationError'\n  }\n}\n\nexport class StrimzPermissionError extends StrimzError {\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzPermissionError'\n  }\n}\n\nexport class StrimzValidationError extends StrimzError {\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzValidationError'\n  }\n}\n\nexport class StrimzNotFoundError extends StrimzError {\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzNotFoundError'\n  }\n}\n\nexport class StrimzIdempotencyError extends StrimzError {\n  constructor(body: StrimzErrorBody, httpStatus?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzIdempotencyError'\n  }\n}\n\nexport class StrimzRateLimitError extends StrimzError {\n  public readonly retryAfterMs: number | undefined\n  constructor(body: StrimzErrorBody, httpStatus?: number, retryAfterMs?: number) {\n    super(body, httpStatus)\n    this.name = 'StrimzRateLimitError'\n    this.retryAfterMs = retryAfterMs\n  }\n}\n\nexport class StrimzNetworkError extends StrimzError {\n  public override readonly cause: unknown\n  constructor(message: string, cause: unknown) {\n    super({ code: 'network_error', message })\n    this.name = 'StrimzNetworkError'\n    this.cause = cause\n  }\n}\n\nexport class StrimzTimeoutError extends StrimzError {\n  constructor(message: string) {\n    super({ code: 'timeout', message })\n    this.name = 'StrimzTimeoutError'\n  }\n}\n\nexport class StrimzModeMismatchError extends StrimzError {\n  constructor(message: string) {\n    super({ code: 'mode_mismatch', message })\n    this.name = 'StrimzModeMismatchError'\n  }\n}\n\n/** Map an HTTP status + body to the right StrimzError subclass. */\nexport function classifyError(\n  httpStatus: number,\n  body: StrimzErrorBody,\n  retryAfterMs?: number,\n): StrimzError {\n  if (httpStatus === 401) return new StrimzAuthenticationError(body, httpStatus)\n  if (httpStatus === 403) return new StrimzPermissionError(body, httpStatus)\n  if (httpStatus === 404) return new StrimzNotFoundError(body, httpStatus)\n  if (httpStatus === 409 && body.code === 'idempotency_error') {\n    return new StrimzIdempotencyError(body, httpStatus)\n  }\n  if (httpStatus === 422) return new StrimzValidationError(body, httpStatus)\n  if (httpStatus === 429) return new StrimzRateLimitError(body, httpStatus, retryAfterMs)\n  return new StrimzError(body, httpStatus)\n}\n","/**\n * Strimz HTTP header conventions.\n *\n * `Authorization: Bearer <secret_key>` — primary auth.\n * `X-Strimz-Idempotency-Key` — mutating calls.\n * `X-Strimz-Sdk` — telemetry.\n * `X-Strimz-Sdk-Version` — telemetry.\n */\n\nexport const HEADERS = {\n  authorization: 'Authorization',\n  idempotencyKey: 'X-Strimz-Idempotency-Key',\n  requestId: 'X-Strimz-Request-Id',\n  sdkName: 'X-Strimz-Sdk',\n  sdkVersion: 'X-Strimz-Sdk-Version',\n  sdkRuntime: 'X-Strimz-Sdk-Runtime',\n} as const\n\nexport const SDK_NAME = '@strimz/sdk'\n\n/** The SDK version. Updated by the build pipeline if a version is published. */\nexport const SDK_VERSION = '0.0.0'\n\nexport function buildBaseHeaders(apiKey: string, runtime: string): Record<string, string> {\n  return {\n    [HEADERS.authorization]: `Bearer ${apiKey}`,\n    [HEADERS.sdkName]: SDK_NAME,\n    [HEADERS.sdkVersion]: SDK_VERSION,\n    [HEADERS.sdkRuntime]: runtime,\n    Accept: 'application/json',\n  }\n}\n","/**\n * Fetch wrapper with retry, idempotency, and Strimz error parsing.\n *\n * Retries on:\n *   - Network failures (TypeError on fetch).\n *   - 5xx responses for idempotent methods (GET, POST with idempotency key).\n *   - 429 with Retry-After.\n *\n * Does NOT retry on:\n *   - 4xx other than 429 (caller's bug).\n *   - 5xx for non-idempotent calls without an idempotency key.\n */\n\nimport {\n  classifyError,\n  StrimzError,\n  StrimzNetworkError,\n  StrimzTimeoutError,\n  type StrimzErrorBody,\n} from '../errors.js'\nimport { HEADERS } from './headers.js'\n\nexport interface FetcherOptions {\n  baseUrl: string\n  baseHeaders: Record<string, string>\n  /** Default timeout per attempt, milliseconds. */\n  timeoutMs?: number\n  /** How many retries before giving up. */\n  maxRetries?: number\n  /** Initial backoff in ms; doubled with jitter on each retry. */\n  initialBackoffMs?: number\n  /** Optional logger. */\n  onRequest?: (info: { method: string; url: string; attempt: number }) => void\n  onResponse?: (info: {\n    method: string\n    url: string\n    status: number\n    ms: number\n    attempt: number\n  }) => void\n  /** Override the global fetch (for tests / Edge polyfills). */\n  fetch?: typeof globalThis.fetch\n}\n\nexport interface RequestSpec {\n  method: 'GET' | 'POST' | 'PATCH' | 'DELETE'\n  path: string\n  query?: Record<string, string | number | boolean | null | undefined>\n  body?: unknown\n  idempotencyKey?: string\n  /** Per-call timeout override. */\n  timeoutMs?: number\n}\n\nconst DEFAULT_TIMEOUT_MS = 30_000\nconst DEFAULT_MAX_RETRIES = 3\nconst DEFAULT_INITIAL_BACKOFF_MS = 250\n\nexport class Fetcher {\n  private readonly baseUrl: string\n  private readonly baseHeaders: Record<string, string>\n  private readonly timeoutMs: number\n  private readonly maxRetries: number\n  private readonly initialBackoffMs: number\n  private readonly onRequest: FetcherOptions['onRequest']\n  private readonly onResponse: FetcherOptions['onResponse']\n  private readonly fetchImpl: typeof globalThis.fetch\n\n  constructor(opts: FetcherOptions) {\n    this.baseUrl = opts.baseUrl.replace(/\\/$/, '')\n    this.baseHeaders = opts.baseHeaders\n    this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS\n    this.maxRetries = opts.maxRetries ?? DEFAULT_MAX_RETRIES\n    this.initialBackoffMs = opts.initialBackoffMs ?? DEFAULT_INITIAL_BACKOFF_MS\n    this.onRequest = opts.onRequest\n    this.onResponse = opts.onResponse\n    this.fetchImpl = opts.fetch ?? globalThis.fetch.bind(globalThis)\n  }\n\n  async request<T>(spec: RequestSpec): Promise<T> {\n    const url = this.buildUrl(spec.path, spec.query)\n    const idempotent = isIdempotent(spec)\n    const headers: Record<string, string> = { ...this.baseHeaders }\n    if (spec.body != null) headers['Content-Type'] = 'application/json'\n    if (spec.idempotencyKey) headers[HEADERS.idempotencyKey] = spec.idempotencyKey\n\n    let attempt = 0\n    let lastErr: unknown\n    while (attempt <= this.maxRetries) {\n      try {\n        this.onRequest?.({ method: spec.method, url, attempt })\n        const start = Date.now()\n        const res = await this.fetchWithTimeout(\n          url,\n          {\n            method: spec.method,\n            headers,\n            body: spec.body == null ? undefined : JSON.stringify(spec.body),\n          },\n          spec.timeoutMs ?? this.timeoutMs,\n        )\n        const ms = Date.now() - start\n        this.onResponse?.({ method: spec.method, url, status: res.status, ms, attempt })\n\n        if (res.ok) {\n          if (res.status === 204) return undefined as T\n          return (await res.json()) as T\n        }\n\n        const errorBody = await parseErrorBody(res)\n        const retryAfterMs = parseRetryAfter(res)\n\n        // 429 — back off and retry up to maxRetries.\n        if (res.status === 429 && attempt < this.maxRetries) {\n          await delay(retryAfterMs ?? this.backoffFor(attempt))\n          attempt++\n          continue\n        }\n        // 5xx — retry only if idempotent.\n        if (res.status >= 500 && idempotent && attempt < this.maxRetries) {\n          await delay(this.backoffFor(attempt))\n          attempt++\n          continue\n        }\n\n        throw classifyError(res.status, errorBody, retryAfterMs)\n      } catch (err) {\n        if (err instanceof StrimzError) throw err\n        lastErr = err\n        if (!isNetworkLike(err) || attempt >= this.maxRetries) {\n          if (err instanceof StrimzTimeoutError) throw err\n          throw new StrimzNetworkError(`Network error: ${describe(err)}`, err)\n        }\n        await delay(this.backoffFor(attempt))\n        attempt++\n      }\n    }\n    throw new StrimzNetworkError(`Network error after ${this.maxRetries} retries`, lastErr)\n  }\n\n  private async fetchWithTimeout(\n    url: string,\n    init: RequestInit,\n    timeoutMs: number,\n  ): Promise<Response> {\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), timeoutMs)\n    try {\n      return await this.fetchImpl(url, { ...init, signal: controller.signal })\n    } catch (err) {\n      if (isAbortError(err)) {\n        throw new StrimzTimeoutError(`Request timed out after ${timeoutMs}ms`)\n      }\n      throw err\n    } finally {\n      clearTimeout(timer)\n    }\n  }\n\n  private buildUrl(path: string, query?: RequestSpec['query']): string {\n    const base = `${this.baseUrl}${path.startsWith('/') ? path : `/${path}`}`\n    if (!query) return base\n    const usp = new URLSearchParams()\n    for (const [k, v] of Object.entries(query)) {\n      if (v == null) continue\n      usp.append(k, String(v))\n    }\n    const qs = usp.toString()\n    return qs ? `${base}?${qs}` : base\n  }\n\n  private backoffFor(attempt: number): number {\n    const expo = this.initialBackoffMs * Math.pow(2, attempt)\n    const jitter = Math.random() * this.initialBackoffMs\n    return Math.min(expo + jitter, 8_000)\n  }\n}\n\nfunction isIdempotent(spec: RequestSpec): boolean {\n  if (spec.method === 'GET' || spec.method === 'DELETE') return true\n  return spec.idempotencyKey != null\n}\n\nasync function parseErrorBody(res: Response): Promise<StrimzErrorBody> {\n  try {\n    const json = (await res.json()) as { error?: StrimzErrorBody } | StrimzErrorBody\n    if (typeof json === 'object' && json !== null && 'error' in json && json.error) {\n      return json.error\n    }\n    if (typeof json === 'object' && json !== null && 'code' in json && 'message' in json) {\n      return json as StrimzErrorBody\n    }\n  } catch {\n    // fall through\n  }\n  return { code: 'api_error', message: `HTTP ${res.status}` }\n}\n\nfunction parseRetryAfter(res: Response): number | undefined {\n  const v = res.headers.get('Retry-After')\n  if (!v) return undefined\n  const n = Number(v)\n  if (Number.isFinite(n)) return Math.max(0, n) * 1_000\n  const date = Date.parse(v)\n  if (Number.isFinite(date)) return Math.max(0, date - Date.now())\n  return undefined\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\nfunction isAbortError(err: unknown): boolean {\n  return err instanceof Error && err.name === 'AbortError'\n}\n\nfunction isNetworkLike(err: unknown): boolean {\n  if (err instanceof TypeError) return true // fetch network failures\n  if (err instanceof Error && /fetch|network|econn/i.test(err.message)) return true\n  return false\n}\n\nfunction describe(err: unknown): string {\n  if (err instanceof Error) return err.message\n  return String(err)\n}\n","import { uuid } from '@strimz/shared-crypto'\n\n/**\n * Generate an idempotency key for a mutating SDK call.\n * Stripe convention: a UUID-like value with a stable prefix the merchant\n * can grep for in logs.\n */\nexport function generateIdempotencyKey(): string {\n  return `strimz_${uuid()}`\n}\n\n/** RFC 4122 UUID-shaped, optionally with the strimz_ prefix. */\nconst IDEMPOTENCY_KEY_PATTERN =\n  /^(strimz_)?[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/\n\nexport function isValidIdempotencyKey(key: string): boolean {\n  if (typeof key !== 'string') return false\n  if (key.length > 255) return false\n  return IDEMPOTENCY_KEY_PATTERN.test(key)\n}\n","/**\n * Cursor-based pagination, identical shape to the API's list responses.\n */\n\nexport interface Page<T> {\n  data: T[]\n  nextCursor: string | null\n  hasMore: boolean\n}\n\nexport interface PaginationParams {\n  limit?: number\n  cursor?: string | null\n}\n\n/**\n * Async-iterable wrapper that auto-paginates through every page of a list.\n *\n *   for await (const tx of strimz.transactions.listAll()) { ... }\n */\nexport class AutoPagingIterator<T> implements AsyncIterable<T> {\n  constructor(private readonly fetchPage: (cursor: string | null) => Promise<Page<T>>) {}\n\n  async *[Symbol.asyncIterator](): AsyncIterator<T> {\n    let cursor: string | null = null\n    let first = true\n    while (first || cursor !== null) {\n      first = false\n      const page: Page<T> = await this.fetchPage(cursor)\n      for (const item of page.data) {\n        yield item\n      }\n      cursor = page.hasMore ? page.nextCursor : null\n    }\n  }\n\n  async forEach(handler: (item: T) => void | Promise<void>): Promise<void> {\n    for await (const item of this) {\n      await handler(item)\n    }\n  }\n\n  async toArray(): Promise<T[]> {\n    const out: T[] = []\n    for await (const item of this) out.push(item)\n    return out\n  }\n}\n","/**\n * Base class every resource extends. Centralises endpoint plumbing so\n * resource classes are tiny declarative wrappers.\n */\n\nimport type { z } from 'zod'\nimport type { Fetcher, RequestSpec } from '../http/fetcher.js'\nimport { generateIdempotencyKey } from '../idempotency.js'\nimport { AutoPagingIterator, type Page, type PaginationParams } from '../pagination.js'\n\ntype AnySchema = z.ZodTypeAny\ntype Inferred<S extends AnySchema> = z.output<S>\n\nexport interface ResourceContext {\n  fetcher: Fetcher\n}\n\nexport interface RequestOptions {\n  /** Override or supply the idempotency key for a mutating call. */\n  idempotencyKey?: string\n  /** Per-request timeout in ms. */\n  timeoutMs?: number\n}\n\nexport abstract class BaseResource {\n  constructor(protected readonly ctx: ResourceContext) {}\n\n  protected async get<S extends AnySchema>(\n    path: string,\n    schema?: S,\n    query?: RequestSpec['query'],\n  ): Promise<Inferred<S>> {\n    const data = await this.ctx.fetcher.request<unknown>({ method: 'GET', path, query })\n    return parse(data, schema)\n  }\n\n  protected async post<S extends AnySchema>(\n    path: string,\n    body: unknown,\n    schema?: S,\n    options?: RequestOptions,\n  ): Promise<Inferred<S>> {\n    const data = await this.ctx.fetcher.request<unknown>({\n      method: 'POST',\n      path,\n      body,\n      idempotencyKey: options?.idempotencyKey ?? generateIdempotencyKey(),\n      timeoutMs: options?.timeoutMs,\n    })\n    return parse(data, schema)\n  }\n\n  protected async patch<S extends AnySchema>(\n    path: string,\n    body: unknown,\n    schema?: S,\n    options?: RequestOptions,\n  ): Promise<Inferred<S>> {\n    const data = await this.ctx.fetcher.request<unknown>({\n      method: 'PATCH',\n      path,\n      body,\n      idempotencyKey: options?.idempotencyKey ?? generateIdempotencyKey(),\n      timeoutMs: options?.timeoutMs,\n    })\n    return parse(data, schema)\n  }\n\n  protected async delete<S extends AnySchema>(path: string, schema?: S): Promise<Inferred<S>> {\n    const data = await this.ctx.fetcher.request<unknown>({ method: 'DELETE', path })\n    return parse(data, schema)\n  }\n\n  protected listPage<S extends AnySchema>(\n    path: string,\n    itemSchema: S,\n    params?: PaginationParams | Record<string, ScalarParam>,\n  ): Promise<Page<Inferred<S>>> {\n    return this.ctx.fetcher\n      .request<unknown>({ method: 'GET', path, query: toQuery(params) })\n      .then((raw) => parsePage(raw, itemSchema))\n  }\n\n  protected listAuto<S extends AnySchema>(\n    path: string,\n    itemSchema: S,\n    params?: Record<string, ScalarParam>,\n  ): AutoPagingIterator<Inferred<S>> {\n    return new AutoPagingIterator((cursor) =>\n      this.listPage(path, itemSchema, { ...params, cursor }),\n    )\n  }\n}\n\ntype ScalarParam = string | number | boolean | null | undefined\n\nfunction toQuery(\n  params: PaginationParams | Record<string, ScalarParam> | undefined,\n): Record<string, ScalarParam> {\n  if (!params) return {}\n  return params as Record<string, ScalarParam>\n}\n\nfunction parse<S extends AnySchema>(data: unknown, schema?: S): Inferred<S> {\n  return (schema ? schema.parse(data) : data) as Inferred<S>\n}\n\nfunction parsePage<S extends AnySchema>(raw: unknown, itemSchema: S): Page<Inferred<S>> {\n  const obj = raw as { data?: unknown[]; nextCursor?: string | null; hasMore?: boolean }\n  const items = (obj?.data ?? []).map((d) => itemSchema.parse(d) as Inferred<S>)\n  return {\n    data: items,\n    nextCursor: obj?.nextCursor ?? null,\n    hasMore: obj?.hasMore === true,\n  }\n}\n","import {\n  paymentSessionSchema,\n  subscriptionPlanSchema,\n  type PaymentSession,\n  type SubscriptionPlan,\n} from '@strimz/shared-types'\nimport { BaseResource } from './base-resource.js'\n\n/**\n * Public hosted-checkout reads.\n *\n * Backed by the `/v1/checkout/*` namespace on the Strimz API, which\n * is intentionally unauthenticated — session and plan records are\n * what a merchant offers to payers, so a payer landing on a checkout\n * URL must be able to load the terms without holding any API key.\n *\n * Use this resource (via `StrimzBrowserClient.checkout`) from the\n * browser. The merchant-scoped `paymentSessions` / `subscriptionPlans`\n * resources on `StrimzClient` remain the right call from server-side\n * code with a secret key.\n */\nexport class CheckoutResource extends BaseResource {\n  /** Load a payment session by id (public — no merchant scoping). */\n  session(id: string): Promise<PaymentSession> {\n    return this.get(`/v1/checkout/sessions/${encodeURIComponent(id)}`, paymentSessionSchema)\n  }\n\n  /** Load a subscription plan by id (public — no merchant scoping). */\n  plan(id: string): Promise<SubscriptionPlan> {\n    return this.get(`/v1/checkout/plans/${encodeURIComponent(id)}`, subscriptionPlanSchema)\n  }\n}\n","import {\n  tokenMetadataSchema,\n  tokenPermitNonceSchema,\n  type TokenMetadata,\n  type TokenPermitNonce,\n} from '@strimz/shared-types'\nimport { BaseResource } from './base-resource.js'\n\n/**\n * Token metadata + capability lookup.\n *\n * The two endpoints are public on the API (no key required) — token\n * metadata is purely chain-derived, has no PII, and is what the\n * browser SDK consults to pick which meta-tx path to take for a\n * given token. Bundled here so consumers don't have to write the HTTP\n * fetch themselves.\n */\nexport class TokensResource extends BaseResource {\n  /**\n   * Fetch full metadata for a token. Throws via the underlying fetcher\n   * (404 → `StrimzNotFoundError`) if the token isn't whitelisted.\n   */\n  retrieve(address: string): Promise<TokenMetadata> {\n    return this.get(`/v1/tokens/${encodeURIComponent(address.toLowerCase())}`, tokenMetadataSchema)\n  }\n\n  /**\n   * Read an owner's current EIP-2612 permit nonce. Call this\n   * immediately before signing a Permit — the token contract rejects\n   * stale nonces, and the value advances on every successful permit.\n   */\n  permitNonce(address: string, owner: string): Promise<TokenPermitNonce> {\n    return this.get(\n      `/v1/tokens/${encodeURIComponent(address.toLowerCase())}/permit-nonce`,\n      tokenPermitNonceSchema,\n      { owner: owner.toLowerCase() },\n    )\n  }\n}\n\n/**\n * Path selector — decides which meta-tx flow to take given a token's\n * capabilities and the action a merchant wants to perform.\n *\n * The choice is unambiguous in 99% of cases:\n *  - One-shot pay        → EIP-3009 (preferred). Falls back to\n *                          approve+pay if the token has neither.\n *  - Subscription enrol  → EIP-2612 (the only meta-tx path that\n *                          grants the recurring allowance subscribers\n *                          need). If unavailable, the merchant must\n *                          use the classic approve+create flow.\n *\n * Returned `path` values are strings (not enums) so future schemes\n * can extend the union without breaking existing call sites.\n */\nexport type RelayPath =\n  | 'pay_with_authorization'\n  | 'permit_and_create_subscription'\n  | 'approve_then_pay'\n  | 'approve_then_create_subscription'\n\nexport function selectPaymentPath(meta: TokenMetadata): RelayPath {\n  return meta.capabilities.transferAuth3009 ? 'pay_with_authorization' : 'approve_then_pay'\n}\n\nexport function selectSubscriptionPath(meta: TokenMetadata): RelayPath {\n  return meta.capabilities.permit2612\n    ? 'permit_and_create_subscription'\n    : 'approve_then_create_subscription'\n}\n","/**\n * StrimzBrowserClient — the publishable-key, browser-safe SDK entry point.\n *\n * Used by `@strimz/sdk-react` and any other browser code that should\n * never see a secret key. Surfaces a strict subset of resource methods —\n * only those safe to call from a browser with a `pk_test_...` or\n * `pk_live_...` key.\n */\n\nimport { kindFromKey, modeFromKey, type ApiKeyMode } from '@strimz/shared-config'\nimport { Fetcher } from './http/fetcher.js'\nimport { buildBaseHeaders } from './http/headers.js'\nimport { StrimzAuthenticationError } from './errors.js'\nimport { CheckoutResource } from './resources/checkout.js'\nimport {\n  TokensResource,\n  selectPaymentPath,\n  selectSubscriptionPath,\n  type RelayPath,\n} from './resources/tokens.js'\n\nexport interface StrimzBrowserClientOptions {\n  /** Publishable key — `pk_test_...` or `pk_live_...`. */\n  publishableKey: string\n  /** Override the API base URL. */\n  baseUrl?: string\n  /** Per-request timeout in milliseconds. Default 30s. */\n  timeoutMs?: number\n}\n\nconst DEFAULT_BASE_URL = 'https://api.strimz.io'\n\n/**\n * Browser-safe Strimz client.\n *\n * Designed for hosted-checkout state polling and the React component\n * family. Read-only on most resources. Refuses a secret key.\n *\n * The `tokens` resource + `selectPaymentPath` / `selectSubscriptionPath`\n * selectors are the core of the capability-detection layer: given a\n * token, the SDK asks the backend which meta-tx flows the token\n * supports, and the selectors map that to a `RelayPath` the checkout\n * UI uses to decide which typed-data to build.\n */\nexport class StrimzBrowserClient {\n  public readonly mode: ApiKeyMode\n  /**\n   * Public hosted-checkout reads — payment sessions and subscription\n   * plans by id. Backed by the `/v1/checkout/*` namespace on the API,\n   * which is intentionally unauthenticated.\n   */\n  public readonly checkout: CheckoutResource\n  /** Token metadata + EIP-2612 permit nonce lookup. */\n  public readonly tokens: TokensResource\n\n  constructor(options: StrimzBrowserClientOptions) {\n    const key = options.publishableKey\n    if (!key || typeof key !== 'string') {\n      throw new StrimzAuthenticationError(\n        { code: 'authentication_error', message: 'publishableKey is required' },\n        401,\n      )\n    }\n    if (kindFromKey(key) !== 'publishable') {\n      throw new StrimzAuthenticationError(\n        {\n          code: 'authentication_error',\n          message:\n            'StrimzBrowserClient must be initialised with a publishable key (pk_test_... / pk_live_...). Never expose secret keys to a browser.',\n        },\n        401,\n      )\n    }\n    const mode = modeFromKey(key)\n    if (mode == null) {\n      throw new StrimzAuthenticationError(\n        { code: 'authentication_error', message: 'Unrecognised API key prefix' },\n        401,\n      )\n    }\n    this.mode = mode\n\n    const fetcher = new Fetcher({\n      baseUrl: options.baseUrl ?? DEFAULT_BASE_URL,\n      baseHeaders: buildBaseHeaders(key, 'browser'),\n      timeoutMs: options.timeoutMs,\n      maxRetries: 2,\n    })\n    this.checkout = new CheckoutResource({ fetcher })\n    this.tokens = new TokensResource({ fetcher })\n  }\n}\n\n// Re-export the selectors + path type so consumers don't need a\n// second import: `import { StrimzBrowserClient, selectPaymentPath }\n// from '@strimz/sdk/browser'`.\nexport { selectPaymentPath, selectSubscriptionPath, type RelayPath }\n"]}

package/dist/eip712.cjs

@@ -0,0 +1,70 @@
+'use strict';
+
+// src/eip712/receive-with-authorization.ts
+var RECEIVE_WITH_AUTHORIZATION_TYPES = {
+  ReceiveWithAuthorization: [
+    { name: "from", type: "address" },
+    { name: "to", type: "address" },
+    { name: "value", type: "uint256" },
+    { name: "validAfter", type: "uint256" },
+    { name: "validBefore", type: "uint256" },
+    { name: "nonce", type: "bytes32" }
+  ]
+};
+function buildReceiveWithAuthorizationTypedData(params) {
+  return {
+    domain: {
+      name: params.tokenName,
+      version: params.tokenVersion,
+      chainId: params.chainId,
+      verifyingContract: params.token
+    },
+    types: RECEIVE_WITH_AUTHORIZATION_TYPES,
+    primaryType: "ReceiveWithAuthorization",
+    message: {
+      from: params.from,
+      to: params.to,
+      value: params.value,
+      validAfter: params.validAfter,
+      validBefore: params.validBefore,
+      nonce: params.nonce
+    }
+  };
+}
+
+// src/eip712/permit.ts
+var PERMIT_TYPES = {
+  Permit: [
+    { name: "owner", type: "address" },
+    { name: "spender", type: "address" },
+    { name: "value", type: "uint256" },
+    { name: "nonce", type: "uint256" },
+    { name: "deadline", type: "uint256" }
+  ]
+};
+function buildPermitTypedData(params) {
+  return {
+    domain: {
+      name: params.tokenName,
+      version: params.tokenVersion,
+      chainId: params.chainId,
+      verifyingContract: params.token
+    },
+    types: PERMIT_TYPES,
+    primaryType: "Permit",
+    message: {
+      owner: params.owner,
+      spender: params.spender,
+      value: params.value,
+      nonce: params.nonce,
+      deadline: params.deadline
+    }
+  };
+}
+
+exports.PERMIT_TYPES = PERMIT_TYPES;
+exports.RECEIVE_WITH_AUTHORIZATION_TYPES = RECEIVE_WITH_AUTHORIZATION_TYPES;
+exports.buildPermitTypedData = buildPermitTypedData;
+exports.buildReceiveWithAuthorizationTypedData = buildReceiveWithAuthorizationTypedData;
+//# sourceMappingURL=eip712.cjs.map
+//# sourceMappingURL=eip712.cjs.map

package/dist/eip712.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/eip712/receive-with-authorization.ts","../src/eip712/permit.ts"],"names":[],"mappings":";;;AA8CO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,wBAAA,EAA0B;AAAA,IACxB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC;AAWO,SAAS,uCACd,MAAA,EAC6C;AAC7C,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAChB,GACF;AACF;;;AC/CO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA;AAAU;AAExC;AAOO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN,MAAM,MAAA,CAAO,SAAA;AAAA,MACb,SAAS,MAAA,CAAO,YAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,mBAAmB,MAAA,CAAO;AAAA,KAC5B;AAAA,IACA,KAAA,EAAO,YAAA;AAAA,IACP,WAAA,EAAa,QAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAU,MAAA,CAAO;AAAA;AACnB,GACF;AACF","file":"eip712.cjs","sourcesContent":["import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-3009 ReceiveWithAuthorization typed-data.\n *\n *  - `chainId` is the EVM chain id (Arc Testnet = 5042002).\n *  - `token` is the ERC-20 contract whose `receiveWithAuthorization` is\n *    being invoked — usually USDC at `0x36...` on Arc.\n *  - `tokenName` and `tokenVersion` form the EIP-712 domain. Real USDC\n *    on most chains uses `name=\"USD Coin\"` and `version=\"2\"`; tests\n *    use whatever the mock token reports. Always read these from the\n *    token contract at runtime to avoid drift.\n *  - `from` is the payer; the wallet that produces the signature must\n *    match this address.\n *  - `to` is the recipient of the funds — for Strimz this is the\n *    StrimzPayments contract address (the contract pulls funds into\n *    itself, then forwards the fee + net split).\n *  - `value` is the gross amount in token base units.\n *  - `validAfter` / `validBefore` are unix-second timestamps bounding\n *    the signature's validity. Strimz's default checkout window is\n *    5 minutes; integrators may widen this for usage-based billing.\n *  - `nonce` is a single-use 32-byte value. Generate with crypto.randomBytes\n *    (server) or crypto.getRandomValues (browser). The token contract\n *    tracks `(authorizer, nonce) -> used` and rejects replays.\n */\nexport interface ReceiveWithAuthorizationParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  from: `0x${string}`\n  to: `0x${string}`\n  value: bigint\n  validAfter: bigint\n  validBefore: bigint\n  nonce: `0x${string}`\n}\n\n/**\n * EIP-712 type definition for `ReceiveWithAuthorization`. Stable —\n * shared by every EIP-3009 implementation (USDC, EURC, etc.).\n *\n * Exported so consumers can introspect or extend with sibling\n * primitive types (e.g. for x402 batched signing schemes that wrap\n * multiple authorizations in one signature).\n */\nexport const RECEIVE_WITH_AUTHORIZATION_TYPES = {\n  ReceiveWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-3009\n * `ReceiveWithAuthorization` signature. Returns the canonical shape\n * compatible with viem, ethers, Privy, and Reown.\n *\n * Pass the result to `walletClient.signTypedData(typedData)` (viem)\n * or `signer._signTypedData(domain, types, message)` (ethers) — the\n * SDK does not bind to a specific signer.\n */\nexport function buildReceiveWithAuthorizationTypedData(\n  params: ReceiveWithAuthorizationParams,\n): Eip712TypedData<'ReceiveWithAuthorization'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: RECEIVE_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'ReceiveWithAuthorization',\n    message: {\n      from: params.from,\n      to: params.to,\n      value: params.value,\n      validAfter: params.validAfter,\n      validBefore: params.validBefore,\n      nonce: params.nonce,\n    },\n  }\n}\n","import type { Eip712TypedData } from './types.js'\n\n/**\n * Inputs for the EIP-2612 Permit typed-data.\n *\n *  - `chainId`, `token`, `tokenName`, `tokenVersion` form the EIP-712\n *    domain (same shape as the EIP-3009 builder).\n *  - `owner` is the token holder authorising the allowance — must match\n *    the signing wallet.\n *  - `spender` is the contract that will pull funds — for Strimz\n *    subscriptions this is the StrimzSubscriptions contract.\n *  - `value` is the allowance to grant in token base units.\n *    `type(uint256).max` produces an unlimited allowance and is the\n *    common case for subscription enrolment.\n *  - `nonce` is the owner's *current* `nonces(owner)` reading from the\n *    token contract. The SDK does not fetch this — the caller is\n *    expected to have just queried it. Race-free: the token rejects\n *    stale nonces, so a concurrent permit on the same owner just\n *    causes one to fail predictably.\n *  - `deadline` is the unix-second timestamp after which the permit\n *    expires. Strimz default for subscription enrolment is 24h —\n *    enough headroom for a slow merchant submit pipeline without\n *    leaving an indefinite signature window.\n */\nexport interface PermitParams {\n  chainId: number\n  token: `0x${string}`\n  tokenName: string\n  tokenVersion: string\n  owner: `0x${string}`\n  spender: `0x${string}`\n  value: bigint\n  nonce: bigint\n  deadline: bigint\n}\n\n/**\n * EIP-712 type definition for `Permit`. Stable across every EIP-2612\n * implementation (USDC, EURC, DAI v2, etc.).\n */\nexport const PERMIT_TYPES = {\n  Permit: [\n    { name: 'owner', type: 'address' },\n    { name: 'spender', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'nonce', type: 'uint256' },\n    { name: 'deadline', type: 'uint256' },\n  ],\n} as const\n\n/**\n * Build the typed-data structure for an EIP-2612 `Permit` signature.\n * Returns the canonical shape compatible with viem, ethers, Privy,\n * and Reown.\n */\nexport function buildPermitTypedData(params: PermitParams): Eip712TypedData<'Permit'> {\n  return {\n    domain: {\n      name: params.tokenName,\n      version: params.tokenVersion,\n      chainId: params.chainId,\n      verifyingContract: params.token,\n    },\n    types: PERMIT_TYPES,\n    primaryType: 'Permit',\n    message: {\n      owner: params.owner,\n      spender: params.spender,\n      value: params.value,\n      nonce: params.nonce,\n      deadline: params.deadline,\n    },\n  }\n}\n"]}