@takeal/cusfront-sdk 0.1.0 → 0.2.8

package/dist/resources/deposits.d.cts

@@ -1,4 +1,4 @@
-import { H as HttpClient } from '../http-BkZZZI8K.cjs';
+import { H as HttpClient } from '../http-BkCfOCR0.cjs';
 import { C as CustomerInfo } from '../customer-CoxPwe5o.cjs';
 
 /**

package/dist/resources/deposits.d.ts

@@ -1,4 +1,4 @@
-import { H as HttpClient } from '../http-BkZZZI8K.js';
+import { H as HttpClient } from '../http-BkCfOCR0.js';
 import { C as CustomerInfo } from '../customer-CoxPwe5o.js';
 
 /**

package/dist/resources/push.cjs

@@ -0,0 +1,61 @@
+'use strict';
+
+// src/resources/push.ts
+var PushResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** Whether the user is subscribed, plus the VAPID key to subscribe with. */
+  async status() {
+    return this.http.get("/me/push-subscription");
+  }
+  /** Store a subscription you created yourself.
+   *  409 `push_disabled` when the deployment has no VAPID keys. */
+  async save(input) {
+    return this.http.put("/me/push-subscription", { body: input });
+  }
+  /** Delete the stored subscription. Safe when nothing is stored. */
+  async remove() {
+    await this.http.delete("/me/push-subscription");
+  }
+  /** Subscribe this browser and store the subscription. Ask for
+   *  notification permission before calling. Throws when push isn't set up
+   *  on the deployment. */
+  async enable(registration) {
+    const { vapid_public_key } = await this.status();
+    if (!vapid_public_key) {
+      throw new Error("@takeal/cusfront-sdk: push notifications are not enabled on this deployment");
+    }
+    const sub = await registration.pushManager.subscribe({
+      userVisibleOnly: true,
+      applicationServerKey: base64UrlToBytes(vapid_public_key)
+    });
+    const json = sub.toJSON();
+    if (!json.endpoint || !json.keys?.p256dh || !json.keys.auth) {
+      throw new Error("@takeal/cusfront-sdk: the browser returned an incomplete push subscription");
+    }
+    return this.save({
+      endpoint: json.endpoint,
+      keys: { p256dh: json.keys.p256dh, auth: json.keys.auth }
+    });
+  }
+  /** Unsubscribe this browser and delete the stored subscription. */
+  async disable(registration) {
+    const sub = await registration.pushManager.getSubscription();
+    if (sub) await sub.unsubscribe();
+    await this.remove();
+  }
+};
+function base64UrlToBytes(input) {
+  const b64 = input.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+  const bin = atob(padded);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+
+exports.PushResource = PushResource;
+exports.base64UrlToBytes = base64UrlToBytes;
+//# sourceMappingURL=push.cjs.map
+//# sourceMappingURL=push.cjs.map

package/dist/resources/push.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/push.ts"],"names":[],"mappings":";;;AAuDO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,MAAA,GAA8B;AAClC,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAgB,uBAAuB,CAAA;AAAA,EAC1D;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,KAAA,EAAmD;AAC5D,IAAA,OAAO,KAAK,IAAA,CAAK,GAAA,CAAgB,yBAAyB,EAAE,IAAA,EAAM,OAAO,CAAA;AAAA,EAC3E;AAAA;AAAA,EAGA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAa,uBAAuB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,YAAA,EAA4D;AACvE,IAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,KAAK,MAAA,EAAO;AAC/C,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,MAAA,MAAM,IAAI,MAAM,6EAA6E,CAAA;AAAA,IAC/F;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,WAAA,CAAY,SAAA,CAAU;AAAA,MACnD,eAAA,EAAiB,IAAA;AAAA,MACjB,oBAAA,EAAsB,iBAAiB,gBAAgB;AAAA,KACxD,CAAA;AACD,IAAA,MAAM,IAAA,GAAO,IAAI,MAAA,EAAO;AACxB,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,IAAY,CAAC,IAAA,CAAK,MAAM,MAAA,IAAU,CAAC,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM;AAC3D,MAAA,MAAM,IAAI,MAAM,4EAA4E,CAAA;AAAA,IAC9F;AACA,IAAA,OAAO,KAAK,IAAA,CAAK;AAAA,MACf,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,IAAA,EAAM,EAAE,MAAA,EAAQ,IAAA,CAAK,KAAK,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,IAAA;AAAK,KACxD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,QAAQ,YAAA,EAAsD;AAClE,IAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,WAAA,CAAY,eAAA,EAAgB;AAC3D,IAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,WAAA,EAAY;AAC/B,IAAA,MAAM,KAAK,MAAA,EAAO;AAAA,EACpB;AACF;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AACtD,EAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,GAAA,CAAI,MAAA,GAAS,KAAM,CAAC,CAAA;AAC1D,EAAA,MAAM,GAAA,GAAM,KAAK,MAAM,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT","file":"push.cjs","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Push resource — `client.push.*`.\n *\n * Web Push for the signed-in user. The API keeps one subscription per user\n * (the newest wins) and sends a notification for the user's own events:\n * a confirmed deposit, a card transaction and so on.\n *\n * The usual browser flow is one call:\n *\n * ```ts\n * const reg = await navigator.serviceWorker.ready;\n * if ((await Notification.requestPermission()) === \"granted\") {\n *   await client.push.enable(reg);\n * }\n * ```\n *\n * Your service worker shows the notification: the payload is JSON with\n * `title`, `body` and `url` (where a click should lead).\n */\n\nexport interface PushStatus {\n  /** `true` when a subscription is stored for this user. */\n  subscribed: boolean;\n  /** Host of the stored endpoint, e.g. `fcm.googleapis.com`. */\n  endpoint_host?: string | null;\n  /** VAPID public key (URL-safe base64) for `pushManager.subscribe`.\n   *  `null` when push is not set up on this deployment. */\n  vapid_public_key?: string | null;\n}\n\nexport interface PushSubscriptionInput {\n  /** `PushSubscription.endpoint`; must be https. */\n  endpoint: string;\n  keys: {\n    /** URL-safe base64. */\n    p256dh: string;\n    /** URL-safe base64. */\n    auth: string;\n  };\n}\n\n/** The part of `ServiceWorkerRegistration` the SDK needs. Typed\n *  structurally so the core stays free of DOM lib types. */\nexport interface PushCapableRegistration {\n  pushManager: {\n    getSubscription(): Promise<{ unsubscribe(): Promise<boolean> } | null>;\n    subscribe(options: {\n      userVisibleOnly: boolean;\n      applicationServerKey: Uint8Array;\n    }): Promise<{ toJSON(): { endpoint?: string; keys?: Record<string, string> } }>;\n  };\n}\n\nexport class PushResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** Whether the user is subscribed, plus the VAPID key to subscribe with. */\n  async status(): Promise<PushStatus> {\n    return this.http.get<PushStatus>(\"/me/push-subscription\");\n  }\n\n  /** Store a subscription you created yourself.\n   *  409 `push_disabled` when the deployment has no VAPID keys. */\n  async save(input: PushSubscriptionInput): Promise<PushStatus> {\n    return this.http.put<PushStatus>(\"/me/push-subscription\", { body: input });\n  }\n\n  /** Delete the stored subscription. Safe when nothing is stored. */\n  async remove(): Promise<void> {\n    await this.http.delete<void>(\"/me/push-subscription\");\n  }\n\n  /** Subscribe this browser and store the subscription. Ask for\n   *  notification permission before calling. Throws when push isn't set up\n   *  on the deployment. */\n  async enable(registration: PushCapableRegistration): Promise<PushStatus> {\n    const { vapid_public_key } = await this.status();\n    if (!vapid_public_key) {\n      throw new Error(\"@takeal/cusfront-sdk: push notifications are not enabled on this deployment\");\n    }\n    const sub = await registration.pushManager.subscribe({\n      userVisibleOnly: true,\n      applicationServerKey: base64UrlToBytes(vapid_public_key),\n    });\n    const json = sub.toJSON();\n    if (!json.endpoint || !json.keys?.p256dh || !json.keys.auth) {\n      throw new Error(\"@takeal/cusfront-sdk: the browser returned an incomplete push subscription\");\n    }\n    return this.save({\n      endpoint: json.endpoint,\n      keys: { p256dh: json.keys.p256dh, auth: json.keys.auth },\n    });\n  }\n\n  /** Unsubscribe this browser and delete the stored subscription. */\n  async disable(registration: PushCapableRegistration): Promise<void> {\n    const sub = await registration.pushManager.getSubscription();\n    if (sub) await sub.unsubscribe();\n    await this.remove();\n  }\n}\n\n/** URL-safe base64 (padding optional) → bytes. */\nexport function base64UrlToBytes(input: string): Uint8Array {\n  const b64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const padded = b64 + \"=\".repeat((4 - (b64.length % 4)) % 4);\n  const bin = atob(padded);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  return out;\n}\n"]}

package/dist/resources/push.d.cts

@@ -0,0 +1,79 @@
+import { H as HttpClient } from '../http-BkCfOCR0.cjs';
+
+/**
+ * Push resource — `client.push.*`.
+ *
+ * Web Push for the signed-in user. The API keeps one subscription per user
+ * (the newest wins) and sends a notification for the user's own events:
+ * a confirmed deposit, a card transaction and so on.
+ *
+ * The usual browser flow is one call:
+ *
+ * ```ts
+ * const reg = await navigator.serviceWorker.ready;
+ * if ((await Notification.requestPermission()) === "granted") {
+ *   await client.push.enable(reg);
+ * }
+ * ```
+ *
+ * Your service worker shows the notification: the payload is JSON with
+ * `title`, `body` and `url` (where a click should lead).
+ */
+interface PushStatus {
+    /** `true` when a subscription is stored for this user. */
+    subscribed: boolean;
+    /** Host of the stored endpoint, e.g. `fcm.googleapis.com`. */
+    endpoint_host?: string | null;
+    /** VAPID public key (URL-safe base64) for `pushManager.subscribe`.
+     *  `null` when push is not set up on this deployment. */
+    vapid_public_key?: string | null;
+}
+interface PushSubscriptionInput {
+    /** `PushSubscription.endpoint`; must be https. */
+    endpoint: string;
+    keys: {
+        /** URL-safe base64. */
+        p256dh: string;
+        /** URL-safe base64. */
+        auth: string;
+    };
+}
+/** The part of `ServiceWorkerRegistration` the SDK needs. Typed
+ *  structurally so the core stays free of DOM lib types. */
+interface PushCapableRegistration {
+    pushManager: {
+        getSubscription(): Promise<{
+            unsubscribe(): Promise<boolean>;
+        } | null>;
+        subscribe(options: {
+            userVisibleOnly: boolean;
+            applicationServerKey: Uint8Array;
+        }): Promise<{
+            toJSON(): {
+                endpoint?: string;
+                keys?: Record<string, string>;
+            };
+        }>;
+    };
+}
+declare class PushResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Whether the user is subscribed, plus the VAPID key to subscribe with. */
+    status(): Promise<PushStatus>;
+    /** Store a subscription you created yourself.
+     *  409 `push_disabled` when the deployment has no VAPID keys. */
+    save(input: PushSubscriptionInput): Promise<PushStatus>;
+    /** Delete the stored subscription. Safe when nothing is stored. */
+    remove(): Promise<void>;
+    /** Subscribe this browser and store the subscription. Ask for
+     *  notification permission before calling. Throws when push isn't set up
+     *  on the deployment. */
+    enable(registration: PushCapableRegistration): Promise<PushStatus>;
+    /** Unsubscribe this browser and delete the stored subscription. */
+    disable(registration: PushCapableRegistration): Promise<void>;
+}
+/** URL-safe base64 (padding optional) → bytes. */
+declare function base64UrlToBytes(input: string): Uint8Array;
+
+export { type PushCapableRegistration, PushResource, type PushStatus, type PushSubscriptionInput, base64UrlToBytes };

package/dist/resources/push.d.ts

@@ -0,0 +1,79 @@
+import { H as HttpClient } from '../http-BkCfOCR0.js';
+
+/**
+ * Push resource — `client.push.*`.
+ *
+ * Web Push for the signed-in user. The API keeps one subscription per user
+ * (the newest wins) and sends a notification for the user's own events:
+ * a confirmed deposit, a card transaction and so on.
+ *
+ * The usual browser flow is one call:
+ *
+ * ```ts
+ * const reg = await navigator.serviceWorker.ready;
+ * if ((await Notification.requestPermission()) === "granted") {
+ *   await client.push.enable(reg);
+ * }
+ * ```
+ *
+ * Your service worker shows the notification: the payload is JSON with
+ * `title`, `body` and `url` (where a click should lead).
+ */
+interface PushStatus {
+    /** `true` when a subscription is stored for this user. */
+    subscribed: boolean;
+    /** Host of the stored endpoint, e.g. `fcm.googleapis.com`. */
+    endpoint_host?: string | null;
+    /** VAPID public key (URL-safe base64) for `pushManager.subscribe`.
+     *  `null` when push is not set up on this deployment. */
+    vapid_public_key?: string | null;
+}
+interface PushSubscriptionInput {
+    /** `PushSubscription.endpoint`; must be https. */
+    endpoint: string;
+    keys: {
+        /** URL-safe base64. */
+        p256dh: string;
+        /** URL-safe base64. */
+        auth: string;
+    };
+}
+/** The part of `ServiceWorkerRegistration` the SDK needs. Typed
+ *  structurally so the core stays free of DOM lib types. */
+interface PushCapableRegistration {
+    pushManager: {
+        getSubscription(): Promise<{
+            unsubscribe(): Promise<boolean>;
+        } | null>;
+        subscribe(options: {
+            userVisibleOnly: boolean;
+            applicationServerKey: Uint8Array;
+        }): Promise<{
+            toJSON(): {
+                endpoint?: string;
+                keys?: Record<string, string>;
+            };
+        }>;
+    };
+}
+declare class PushResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Whether the user is subscribed, plus the VAPID key to subscribe with. */
+    status(): Promise<PushStatus>;
+    /** Store a subscription you created yourself.
+     *  409 `push_disabled` when the deployment has no VAPID keys. */
+    save(input: PushSubscriptionInput): Promise<PushStatus>;
+    /** Delete the stored subscription. Safe when nothing is stored. */
+    remove(): Promise<void>;
+    /** Subscribe this browser and store the subscription. Ask for
+     *  notification permission before calling. Throws when push isn't set up
+     *  on the deployment. */
+    enable(registration: PushCapableRegistration): Promise<PushStatus>;
+    /** Unsubscribe this browser and delete the stored subscription. */
+    disable(registration: PushCapableRegistration): Promise<void>;
+}
+/** URL-safe base64 (padding optional) → bytes. */
+declare function base64UrlToBytes(input: string): Uint8Array;
+
+export { type PushCapableRegistration, PushResource, type PushStatus, type PushSubscriptionInput, base64UrlToBytes };

package/dist/resources/push.js

@@ -0,0 +1,58 @@
+// src/resources/push.ts
+var PushResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** Whether the user is subscribed, plus the VAPID key to subscribe with. */
+  async status() {
+    return this.http.get("/me/push-subscription");
+  }
+  /** Store a subscription you created yourself.
+   *  409 `push_disabled` when the deployment has no VAPID keys. */
+  async save(input) {
+    return this.http.put("/me/push-subscription", { body: input });
+  }
+  /** Delete the stored subscription. Safe when nothing is stored. */
+  async remove() {
+    await this.http.delete("/me/push-subscription");
+  }
+  /** Subscribe this browser and store the subscription. Ask for
+   *  notification permission before calling. Throws when push isn't set up
+   *  on the deployment. */
+  async enable(registration) {
+    const { vapid_public_key } = await this.status();
+    if (!vapid_public_key) {
+      throw new Error("@takeal/cusfront-sdk: push notifications are not enabled on this deployment");
+    }
+    const sub = await registration.pushManager.subscribe({
+      userVisibleOnly: true,
+      applicationServerKey: base64UrlToBytes(vapid_public_key)
+    });
+    const json = sub.toJSON();
+    if (!json.endpoint || !json.keys?.p256dh || !json.keys.auth) {
+      throw new Error("@takeal/cusfront-sdk: the browser returned an incomplete push subscription");
+    }
+    return this.save({
+      endpoint: json.endpoint,
+      keys: { p256dh: json.keys.p256dh, auth: json.keys.auth }
+    });
+  }
+  /** Unsubscribe this browser and delete the stored subscription. */
+  async disable(registration) {
+    const sub = await registration.pushManager.getSubscription();
+    if (sub) await sub.unsubscribe();
+    await this.remove();
+  }
+};
+function base64UrlToBytes(input) {
+  const b64 = input.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+  const bin = atob(padded);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+
+export { PushResource, base64UrlToBytes };
+//# sourceMappingURL=push.js.map
+//# sourceMappingURL=push.js.map

package/dist/resources/push.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/push.ts"],"names":[],"mappings":";AAuDO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,MAAA,GAA8B;AAClC,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAgB,uBAAuB,CAAA;AAAA,EAC1D;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,KAAA,EAAmD;AAC5D,IAAA,OAAO,KAAK,IAAA,CAAK,GAAA,CAAgB,yBAAyB,EAAE,IAAA,EAAM,OAAO,CAAA;AAAA,EAC3E;AAAA;AAAA,EAGA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,IAAA,CAAK,IAAA,CAAK,MAAA,CAAa,uBAAuB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,YAAA,EAA4D;AACvE,IAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,KAAK,MAAA,EAAO;AAC/C,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,MAAA,MAAM,IAAI,MAAM,6EAA6E,CAAA;AAAA,IAC/F;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,WAAA,CAAY,SAAA,CAAU;AAAA,MACnD,eAAA,EAAiB,IAAA;AAAA,MACjB,oBAAA,EAAsB,iBAAiB,gBAAgB;AAAA,KACxD,CAAA;AACD,IAAA,MAAM,IAAA,GAAO,IAAI,MAAA,EAAO;AACxB,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,IAAY,CAAC,IAAA,CAAK,MAAM,MAAA,IAAU,CAAC,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM;AAC3D,MAAA,MAAM,IAAI,MAAM,4EAA4E,CAAA;AAAA,IAC9F;AACA,IAAA,OAAO,KAAK,IAAA,CAAK;AAAA,MACf,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,IAAA,EAAM,EAAE,MAAA,EAAQ,IAAA,CAAK,KAAK,MAAA,EAAQ,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,IAAA;AAAK,KACxD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,QAAQ,YAAA,EAAsD;AAClE,IAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,WAAA,CAAY,eAAA,EAAgB;AAC3D,IAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,WAAA,EAAY;AAC/B,IAAA,MAAM,KAAK,MAAA,EAAO;AAAA,EACpB;AACF;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AACtD,EAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,GAAA,CAAI,MAAA,GAAS,KAAM,CAAC,CAAA;AAC1D,EAAA,MAAM,GAAA,GAAM,KAAK,MAAM,CAAA;AACvB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT","file":"push.js","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Push resource — `client.push.*`.\n *\n * Web Push for the signed-in user. The API keeps one subscription per user\n * (the newest wins) and sends a notification for the user's own events:\n * a confirmed deposit, a card transaction and so on.\n *\n * The usual browser flow is one call:\n *\n * ```ts\n * const reg = await navigator.serviceWorker.ready;\n * if ((await Notification.requestPermission()) === \"granted\") {\n *   await client.push.enable(reg);\n * }\n * ```\n *\n * Your service worker shows the notification: the payload is JSON with\n * `title`, `body` and `url` (where a click should lead).\n */\n\nexport interface PushStatus {\n  /** `true` when a subscription is stored for this user. */\n  subscribed: boolean;\n  /** Host of the stored endpoint, e.g. `fcm.googleapis.com`. */\n  endpoint_host?: string | null;\n  /** VAPID public key (URL-safe base64) for `pushManager.subscribe`.\n   *  `null` when push is not set up on this deployment. */\n  vapid_public_key?: string | null;\n}\n\nexport interface PushSubscriptionInput {\n  /** `PushSubscription.endpoint`; must be https. */\n  endpoint: string;\n  keys: {\n    /** URL-safe base64. */\n    p256dh: string;\n    /** URL-safe base64. */\n    auth: string;\n  };\n}\n\n/** The part of `ServiceWorkerRegistration` the SDK needs. Typed\n *  structurally so the core stays free of DOM lib types. */\nexport interface PushCapableRegistration {\n  pushManager: {\n    getSubscription(): Promise<{ unsubscribe(): Promise<boolean> } | null>;\n    subscribe(options: {\n      userVisibleOnly: boolean;\n      applicationServerKey: Uint8Array;\n    }): Promise<{ toJSON(): { endpoint?: string; keys?: Record<string, string> } }>;\n  };\n}\n\nexport class PushResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** Whether the user is subscribed, plus the VAPID key to subscribe with. */\n  async status(): Promise<PushStatus> {\n    return this.http.get<PushStatus>(\"/me/push-subscription\");\n  }\n\n  /** Store a subscription you created yourself.\n   *  409 `push_disabled` when the deployment has no VAPID keys. */\n  async save(input: PushSubscriptionInput): Promise<PushStatus> {\n    return this.http.put<PushStatus>(\"/me/push-subscription\", { body: input });\n  }\n\n  /** Delete the stored subscription. Safe when nothing is stored. */\n  async remove(): Promise<void> {\n    await this.http.delete<void>(\"/me/push-subscription\");\n  }\n\n  /** Subscribe this browser and store the subscription. Ask for\n   *  notification permission before calling. Throws when push isn't set up\n   *  on the deployment. */\n  async enable(registration: PushCapableRegistration): Promise<PushStatus> {\n    const { vapid_public_key } = await this.status();\n    if (!vapid_public_key) {\n      throw new Error(\"@takeal/cusfront-sdk: push notifications are not enabled on this deployment\");\n    }\n    const sub = await registration.pushManager.subscribe({\n      userVisibleOnly: true,\n      applicationServerKey: base64UrlToBytes(vapid_public_key),\n    });\n    const json = sub.toJSON();\n    if (!json.endpoint || !json.keys?.p256dh || !json.keys.auth) {\n      throw new Error(\"@takeal/cusfront-sdk: the browser returned an incomplete push subscription\");\n    }\n    return this.save({\n      endpoint: json.endpoint,\n      keys: { p256dh: json.keys.p256dh, auth: json.keys.auth },\n    });\n  }\n\n  /** Unsubscribe this browser and delete the stored subscription. */\n  async disable(registration: PushCapableRegistration): Promise<void> {\n    const sub = await registration.pushManager.getSubscription();\n    if (sub) await sub.unsubscribe();\n    await this.remove();\n  }\n}\n\n/** URL-safe base64 (padding optional) → bytes. */\nexport function base64UrlToBytes(input: string): Uint8Array {\n  const b64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const padded = b64 + \"=\".repeat((4 - (b64.length % 4)) % 4);\n  const bin = atob(padded);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  return out;\n}\n"]}

package/dist/resources/sessions.cjs

@@ -0,0 +1,26 @@
+'use strict';
+
+// src/resources/sessions.ts
+var SessionsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** All live sessions of the account, this one included. */
+  async list() {
+    return this.http.get("/me/sessions");
+  }
+  /** Sign out one session. Works on the current one too; the stored JWT
+   *  stops working, so follow with `client.auth.signOut()`.
+   *  404 when the session is unknown or already signed out. */
+  async revoke(jti) {
+    await this.http.delete(`/me/sessions/${encodeURIComponent(jti)}`);
+  }
+  /** Sign out every session except this one. */
+  async revokeOthers() {
+    return this.http.post("/me/sessions/terminate-others");
+  }
+};
+
+exports.SessionsResource = SessionsResource;
+//# sourceMappingURL=sessions.cjs.map
+//# sourceMappingURL=sessions.cjs.map

package/dist/resources/sessions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/sessions.ts"],"names":[],"mappings":";;;AA6BO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,IAAA,GAA+B;AACnC,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAmB,cAAc,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,GAAA,EAA4B;AACvC,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,CAAa,gBAAgB,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EACxE;AAAA;AAAA,EAGA,MAAM,YAAA,GAAsD;AAC1D,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAmC,+BAA+B,CAAA;AAAA,EACrF;AACF","file":"sessions.cjs","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Sessions resource — `client.sessions.*`.\n *\n * Every device or browser the user is signed in on. Lets a settings screen\n * show \"where you're signed in\" and sign one or all of them out.\n *\n * ```ts\n * const sessions = await client.sessions.list();\n * const others = sessions.filter((s) => !s.current);\n * await client.sessions.revokeOthers();\n * ```\n */\n\nexport interface UserSession {\n  /** Session id; pass it to `revoke`. */\n  jti: string;\n  issued_at: string;\n  expires_at: string;\n  last_seen_at: string;\n  /** Client IP recorded for the session, if known. */\n  remote_ip?: string | null;\n  /** Browser or app that opened the session, if known. */\n  user_agent?: string | null;\n  /** `true` for the session this client is using. */\n  current: boolean;\n}\n\nexport class SessionsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** All live sessions of the account, this one included. */\n  async list(): Promise<UserSession[]> {\n    return this.http.get<UserSession[]>(\"/me/sessions\");\n  }\n\n  /** Sign out one session. Works on the current one too; the stored JWT\n   *  stops working, so follow with `client.auth.signOut()`.\n   *  404 when the session is unknown or already signed out. */\n  async revoke(jti: string): Promise<void> {\n    await this.http.delete<void>(`/me/sessions/${encodeURIComponent(jti)}`);\n  }\n\n  /** Sign out every session except this one. */\n  async revokeOthers(): Promise<{ revoked_sessions: number }> {\n    return this.http.post<{ revoked_sessions: number }>(\"/me/sessions/terminate-others\");\n  }\n}\n"]}

package/dist/resources/sessions.d.cts

@@ -0,0 +1,43 @@
+import { H as HttpClient } from '../http-BkCfOCR0.cjs';
+
+/**
+ * Sessions resource — `client.sessions.*`.
+ *
+ * Every device or browser the user is signed in on. Lets a settings screen
+ * show "where you're signed in" and sign one or all of them out.
+ *
+ * ```ts
+ * const sessions = await client.sessions.list();
+ * const others = sessions.filter((s) => !s.current);
+ * await client.sessions.revokeOthers();
+ * ```
+ */
+interface UserSession {
+    /** Session id; pass it to `revoke`. */
+    jti: string;
+    issued_at: string;
+    expires_at: string;
+    last_seen_at: string;
+    /** Client IP recorded for the session, if known. */
+    remote_ip?: string | null;
+    /** Browser or app that opened the session, if known. */
+    user_agent?: string | null;
+    /** `true` for the session this client is using. */
+    current: boolean;
+}
+declare class SessionsResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** All live sessions of the account, this one included. */
+    list(): Promise<UserSession[]>;
+    /** Sign out one session. Works on the current one too; the stored JWT
+     *  stops working, so follow with `client.auth.signOut()`.
+     *  404 when the session is unknown or already signed out. */
+    revoke(jti: string): Promise<void>;
+    /** Sign out every session except this one. */
+    revokeOthers(): Promise<{
+        revoked_sessions: number;
+    }>;
+}
+
+export { SessionsResource, type UserSession };

package/dist/resources/sessions.d.ts

@@ -0,0 +1,43 @@
+import { H as HttpClient } from '../http-BkCfOCR0.js';
+
+/**
+ * Sessions resource — `client.sessions.*`.
+ *
+ * Every device or browser the user is signed in on. Lets a settings screen
+ * show "where you're signed in" and sign one or all of them out.
+ *
+ * ```ts
+ * const sessions = await client.sessions.list();
+ * const others = sessions.filter((s) => !s.current);
+ * await client.sessions.revokeOthers();
+ * ```
+ */
+interface UserSession {
+    /** Session id; pass it to `revoke`. */
+    jti: string;
+    issued_at: string;
+    expires_at: string;
+    last_seen_at: string;
+    /** Client IP recorded for the session, if known. */
+    remote_ip?: string | null;
+    /** Browser or app that opened the session, if known. */
+    user_agent?: string | null;
+    /** `true` for the session this client is using. */
+    current: boolean;
+}
+declare class SessionsResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** All live sessions of the account, this one included. */
+    list(): Promise<UserSession[]>;
+    /** Sign out one session. Works on the current one too; the stored JWT
+     *  stops working, so follow with `client.auth.signOut()`.
+     *  404 when the session is unknown or already signed out. */
+    revoke(jti: string): Promise<void>;
+    /** Sign out every session except this one. */
+    revokeOthers(): Promise<{
+        revoked_sessions: number;
+    }>;
+}
+
+export { SessionsResource, type UserSession };

package/dist/resources/sessions.js

@@ -0,0 +1,24 @@
+// src/resources/sessions.ts
+var SessionsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** All live sessions of the account, this one included. */
+  async list() {
+    return this.http.get("/me/sessions");
+  }
+  /** Sign out one session. Works on the current one too; the stored JWT
+   *  stops working, so follow with `client.auth.signOut()`.
+   *  404 when the session is unknown or already signed out. */
+  async revoke(jti) {
+    await this.http.delete(`/me/sessions/${encodeURIComponent(jti)}`);
+  }
+  /** Sign out every session except this one. */
+  async revokeOthers() {
+    return this.http.post("/me/sessions/terminate-others");
+  }
+};
+
+export { SessionsResource };
+//# sourceMappingURL=sessions.js.map
+//# sourceMappingURL=sessions.js.map

package/dist/resources/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/sessions.ts"],"names":[],"mappings":";AA6BO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,IAAA,GAA+B;AACnC,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAmB,cAAc,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAO,GAAA,EAA4B;AACvC,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,CAAa,gBAAgB,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EACxE;AAAA;AAAA,EAGA,MAAM,YAAA,GAAsD;AAC1D,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAmC,+BAA+B,CAAA;AAAA,EACrF;AACF","file":"sessions.js","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Sessions resource — `client.sessions.*`.\n *\n * Every device or browser the user is signed in on. Lets a settings screen\n * show \"where you're signed in\" and sign one or all of them out.\n *\n * ```ts\n * const sessions = await client.sessions.list();\n * const others = sessions.filter((s) => !s.current);\n * await client.sessions.revokeOthers();\n * ```\n */\n\nexport interface UserSession {\n  /** Session id; pass it to `revoke`. */\n  jti: string;\n  issued_at: string;\n  expires_at: string;\n  last_seen_at: string;\n  /** Client IP recorded for the session, if known. */\n  remote_ip?: string | null;\n  /** Browser or app that opened the session, if known. */\n  user_agent?: string | null;\n  /** `true` for the session this client is using. */\n  current: boolean;\n}\n\nexport class SessionsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** All live sessions of the account, this one included. */\n  async list(): Promise<UserSession[]> {\n    return this.http.get<UserSession[]>(\"/me/sessions\");\n  }\n\n  /** Sign out one session. Works on the current one too; the stored JWT\n   *  stops working, so follow with `client.auth.signOut()`.\n   *  404 when the session is unknown or already signed out. */\n  async revoke(jti: string): Promise<void> {\n    await this.http.delete<void>(`/me/sessions/${encodeURIComponent(jti)}`);\n  }\n\n  /** Sign out every session except this one. */\n  async revokeOthers(): Promise<{ revoked_sessions: number }> {\n    return this.http.post<{ revoked_sessions: number }>(\"/me/sessions/terminate-others\");\n  }\n}\n"]}

package/dist/resources/subscriptions.d.cts

@@ -1,4 +1,4 @@
-import { H as HttpClient } from '../http-BkZZZI8K.cjs';
+import { H as HttpClient } from '../http-BkCfOCR0.cjs';
 
 /**
  * Subscriptions resource — `client.subscriptions.*`.

package/dist/resources/subscriptions.d.ts

@@ -1,4 +1,4 @@
-import { H as HttpClient } from '../http-BkZZZI8K.js';
+import { H as HttpClient } from '../http-BkCfOCR0.js';
 
 /**
  * Subscriptions resource — `client.subscriptions.*`.

package/dist/resources/wallet.cjs

@@ -0,0 +1,24 @@
+'use strict';
+
+// src/resources/wallet.ts
+var WalletResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** Current wallet currency + the currencies the user may switch to. */
+  async get(opts = {}) {
+    return this.http.get("/me/wallet", { signal: opts.signal });
+  }
+  /**
+   * Switch the wallet currency. Fails with `409 wallet_not_empty` while any
+   * balance is non-zero, and `400 currency_not_allowed` for a currency the
+   * deployment does not offer.
+   */
+  async set(currency, opts = {}) {
+    return this.http.put("/me/wallet", { body: { currency }, signal: opts.signal });
+  }
+};
+
+exports.WalletResource = WalletResource;
+//# sourceMappingURL=wallet.cjs.map
+//# sourceMappingURL=wallet.cjs.map

package/dist/resources/wallet.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/wallet.ts"],"names":[],"mappings":";;;AAuBO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,GAAA,CAAI,IAAA,GAAiC,EAAC,EAAoB;AAC9D,IAAA,OAAO,IAAA,CAAK,KAAK,GAAA,CAAY,YAAA,EAAc,EAAE,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,GAAA,CAAI,QAAA,EAAkB,IAAA,GAAiC,EAAC,EAAoB;AAChF,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAY,YAAA,EAAc,EAAE,IAAA,EAAM,EAAE,QAAA,EAAS,EAAG,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AAAA,EACxF;AACF","file":"wallet.cjs","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Wallet resource — `client.wallet.*`.\n *\n * Which currency the user's wallet is held in. Deposits in any other\n * currency are converted on funding (quote first, see `client.deposits`);\n * cards issued in another currency are paid from the wallet with an FX leg\n * at issuance. A user may switch currency only while every balance is zero\n * and only to a currency the deployment offers (`allowed`).\n */\n\n/** The user's wallet currency and what they may switch to. */\nexport interface Wallet {\n  /** ISO 4217 code the wallet is held in. */\n  currency: string;\n  /** `true` when chosen by the user (or set by an operator), `false` when it\n   *  is the deployment default. */\n  explicit: boolean;\n  /** Currencies accepted by `set()`. */\n  allowed: string[];\n}\n\nexport class WalletResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** Current wallet currency + the currencies the user may switch to. */\n  async get(opts: { signal?: AbortSignal } = {}): Promise<Wallet> {\n    return this.http.get<Wallet>(\"/me/wallet\", { signal: opts.signal });\n  }\n\n  /**\n   * Switch the wallet currency. Fails with `409 wallet_not_empty` while any\n   * balance is non-zero, and `400 currency_not_allowed` for a currency the\n   * deployment does not offer.\n   */\n  async set(currency: string, opts: { signal?: AbortSignal } = {}): Promise<Wallet> {\n    return this.http.put<Wallet>(\"/me/wallet\", { body: { currency }, signal: opts.signal });\n  }\n}\n"]}

package/dist/resources/wallet.d.cts

@@ -0,0 +1,39 @@
+import { H as HttpClient } from '../http-BkCfOCR0.cjs';
+
+/**
+ * Wallet resource — `client.wallet.*`.
+ *
+ * Which currency the user's wallet is held in. Deposits in any other
+ * currency are converted on funding (quote first, see `client.deposits`);
+ * cards issued in another currency are paid from the wallet with an FX leg
+ * at issuance. A user may switch currency only while every balance is zero
+ * and only to a currency the deployment offers (`allowed`).
+ */
+/** The user's wallet currency and what they may switch to. */
+interface Wallet {
+    /** ISO 4217 code the wallet is held in. */
+    currency: string;
+    /** `true` when chosen by the user (or set by an operator), `false` when it
+     *  is the deployment default. */
+    explicit: boolean;
+    /** Currencies accepted by `set()`. */
+    allowed: string[];
+}
+declare class WalletResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Current wallet currency + the currencies the user may switch to. */
+    get(opts?: {
+        signal?: AbortSignal;
+    }): Promise<Wallet>;
+    /**
+     * Switch the wallet currency. Fails with `409 wallet_not_empty` while any
+     * balance is non-zero, and `400 currency_not_allowed` for a currency the
+     * deployment does not offer.
+     */
+    set(currency: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<Wallet>;
+}
+
+export { type Wallet, WalletResource };

package/dist/resources/wallet.d.ts

@@ -0,0 +1,39 @@
+import { H as HttpClient } from '../http-BkCfOCR0.js';
+
+/**
+ * Wallet resource — `client.wallet.*`.
+ *
+ * Which currency the user's wallet is held in. Deposits in any other
+ * currency are converted on funding (quote first, see `client.deposits`);
+ * cards issued in another currency are paid from the wallet with an FX leg
+ * at issuance. A user may switch currency only while every balance is zero
+ * and only to a currency the deployment offers (`allowed`).
+ */
+/** The user's wallet currency and what they may switch to. */
+interface Wallet {
+    /** ISO 4217 code the wallet is held in. */
+    currency: string;
+    /** `true` when chosen by the user (or set by an operator), `false` when it
+     *  is the deployment default. */
+    explicit: boolean;
+    /** Currencies accepted by `set()`. */
+    allowed: string[];
+}
+declare class WalletResource {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** Current wallet currency + the currencies the user may switch to. */
+    get(opts?: {
+        signal?: AbortSignal;
+    }): Promise<Wallet>;
+    /**
+     * Switch the wallet currency. Fails with `409 wallet_not_empty` while any
+     * balance is non-zero, and `400 currency_not_allowed` for a currency the
+     * deployment does not offer.
+     */
+    set(currency: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<Wallet>;
+}
+
+export { type Wallet, WalletResource };

package/dist/resources/wallet.js

@@ -0,0 +1,22 @@
+// src/resources/wallet.ts
+var WalletResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  /** Current wallet currency + the currencies the user may switch to. */
+  async get(opts = {}) {
+    return this.http.get("/me/wallet", { signal: opts.signal });
+  }
+  /**
+   * Switch the wallet currency. Fails with `409 wallet_not_empty` while any
+   * balance is non-zero, and `400 currency_not_allowed` for a currency the
+   * deployment does not offer.
+   */
+  async set(currency, opts = {}) {
+    return this.http.put("/me/wallet", { body: { currency }, signal: opts.signal });
+  }
+};
+
+export { WalletResource };
+//# sourceMappingURL=wallet.js.map
+//# sourceMappingURL=wallet.js.map

package/dist/resources/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/resources/wallet.ts"],"names":[],"mappings":";AAuBO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,IAAA,EAAkB;AAAlB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAmB;AAAA;AAAA,EAGhD,MAAM,GAAA,CAAI,IAAA,GAAiC,EAAC,EAAoB;AAC9D,IAAA,OAAO,IAAA,CAAK,KAAK,GAAA,CAAY,YAAA,EAAc,EAAE,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,GAAA,CAAI,QAAA,EAAkB,IAAA,GAAiC,EAAC,EAAoB;AAChF,IAAA,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAY,YAAA,EAAc,EAAE,IAAA,EAAM,EAAE,QAAA,EAAS,EAAG,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AAAA,EACxF;AACF","file":"wallet.js","sourcesContent":["import type { HttpClient } from \"../http.js\";\n\n/**\n * Wallet resource — `client.wallet.*`.\n *\n * Which currency the user's wallet is held in. Deposits in any other\n * currency are converted on funding (quote first, see `client.deposits`);\n * cards issued in another currency are paid from the wallet with an FX leg\n * at issuance. A user may switch currency only while every balance is zero\n * and only to a currency the deployment offers (`allowed`).\n */\n\n/** The user's wallet currency and what they may switch to. */\nexport interface Wallet {\n  /** ISO 4217 code the wallet is held in. */\n  currency: string;\n  /** `true` when chosen by the user (or set by an operator), `false` when it\n   *  is the deployment default. */\n  explicit: boolean;\n  /** Currencies accepted by `set()`. */\n  allowed: string[];\n}\n\nexport class WalletResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /** Current wallet currency + the currencies the user may switch to. */\n  async get(opts: { signal?: AbortSignal } = {}): Promise<Wallet> {\n    return this.http.get<Wallet>(\"/me/wallet\", { signal: opts.signal });\n  }\n\n  /**\n   * Switch the wallet currency. Fails with `409 wallet_not_empty` while any\n   * balance is non-zero, and `400 currency_not_allowed` for a currency the\n   * deployment does not offer.\n   */\n  async set(currency: string, opts: { signal?: AbortSignal } = {}): Promise<Wallet> {\n    return this.http.put<Wallet>(\"/me/wallet\", { body: { currency }, signal: opts.signal });\n  }\n}\n"]}