@uengage.io/platform-sdk 0.1.0

package/README.md

@@ -0,0 +1,118 @@
+# @uengage.io/platform-sdk
+
+Client SDK for uEngage platform services. Exposes namespaced singletons for each
+service domain, configured by environment variables out of the box.
+
+CDK constructs live in a separate package: `@uengage/platform-constructs`.
+
+## Quick start
+
+```ts
+import { audit, business } from '@uengage.io/platform-sdk';
+
+// Reads PLATFORM_BASE_URL, PLATFORM_SIGNING_SECRET, PLATFORM_SERVICE_ID
+// (or PLATFORM_AUTH_TOKEN) from the environment.
+
+const acme = await business.get(123, { groups: ['business_details', 'gst'] });
+
+audit.record({
+  event_type: 'business.updated',
+  tenant: { id: 'biz_123', parent_id: null },
+  actor: { type: 'user', id: 'usr_42' },
+  resource: { type: 'business', id: 'biz_123' },
+  changes: { name: { before: 'Old', after: 'New' } },
+});
+```
+
+## Configuration
+
+Both clients read defaults from `process.env`:
+
+| Variable                  | Purpose                                      | Default                       |
+| ------------------------- | -------------------------------------------- | ----------------------------- |
+| `PLATFORM_BASE_URL`       | Platform API base URL                        | `https://platform.uengage.io` |
+| `PLATFORM_SIGNING_SECRET` | Hex HMAC secret for service-to-service calls | none                          |
+| `PLATFORM_SERVICE_ID`     | Caller service id for HMAC                   | none                          |
+| `PLATFORM_AUTH_TOKEN`     | Bearer token (overrides HMAC if set)         | none                          |
+
+Override at runtime per client:
+
+```ts
+business
+  .config({ baseUrl: 'https://staging.platform.uengage.io' })
+  .auth({ secret: process.env.MY_SECRET!, serviceId: 'my-service' })
+  .get(123);
+
+// Or Bearer token:
+business.auth({ token: 'tok-...' }).get(123);
+```
+
+For isolated configuration (tests, multi-tenant code paths), construct your own:
+
+```ts
+import { createBusinessClient, createAuditClient } from '@uengage.io/platform-sdk';
+
+const customBusiness = createBusinessClient({
+  baseUrl: 'https://staging.platform.uengage.io',
+  auth: { secret: '...', serviceId: 'my-service' },
+});
+```
+
+## Audit client
+
+```ts
+audit.record({
+  event_type: 'business.updated',
+  tenant: { id: 'biz_123', parent_id: null },
+  actor: { type: 'user', id: 'usr_42' },
+  resource: { type: 'business', id: 'biz_123' },
+  changes: { name: { before: 'Old', after: 'New' } },
+});
+
+await audit.flush(); // optional: drain on shutdown
+```
+
+- `record()` is fire-and-forget. It generates `event_id` (ULID) and
+  `occurred_at`, fills `actor.via` with the configured `serviceId`,
+  validates the event, and enqueues it. It never throws.
+- Events batch and flush every 5 s (configurable via `flushIntervalMs`)
+  or when the batch reaches 50 (`maxBatchSize`).
+- Requests are HMAC-SHA256 signed.
+- Failed batches retry up to 3 times with exponential backoff
+  (500 ms / 2 s / 8 s); on final failure the full batch is logged.
+- Queue overflow (default 1000) drops new events with a warning log.
+- `flush()` resolves when the queue is empty or retries are exhausted.
+
+## Business client
+
+```ts
+const biz = await business.get(123);
+// { id: 123, parent_id: 42, business_details: { name: 'Acme' } }
+
+const detailed = await business.get(123, {
+  groups: ['business_details', 'gst', 'payment_gateway'],
+});
+
+const many = await business.bulk([123, 124], { groups: ['business_details'] });
+```
+
+- `get()` returns the record or throws `BusinessApiError` (with `.status` and `.body`).
+- `bulk()` returns matched records in input order; missing ids are dropped silently.
+- The `business_details` group (just `name`) is public; other groups need
+  matching `business:read.<group>` capability for the calling service id.
+
+## Build / test
+
+```bash
+pnpm --filter @uengage.io/platform-sdk build
+pnpm --filter @uengage.io/platform-sdk test
+```
+
+## Publish
+
+The package publishes on a `platform-sdk-vX.Y.Z` tag push. To cut a release:
+
+1. Bump `version` in `package.json`.
+2. Open a PR; merge.
+3. Tag `platform-sdk-vX.Y.Z` on `main` and push - the publish workflow runs
+   `pnpm publish --filter @uengage.io/platform-sdk --access public`.

package/dist/audit/client.d.ts

@@ -0,0 +1,29 @@
+import { type PlatformAuth, type PlatformAuthInput, type PlatformConfigInput } from '../config';
+import { type AuditEvent } from './schema';
+/**
+ * Caller-facing event shape. The SDK fills:
+ *   - `event_id`   (ULID, generated per call)
+ *   - `occurred_at` (UTC ISO 8601 at the time of `record()`)
+ *   - `actor.via`  (always set to the configured serviceId, so callers
+ *                   can't drift from the service identity used for auth)
+ */
+export type AuditEventInput = Omit<AuditEvent, 'event_id' | 'occurred_at' | 'actor'> & {
+    actor: Omit<AuditEvent['actor'], 'via'>;
+};
+export interface AuditClientInput extends PlatformConfigInput {
+    /** Default 5000. */
+    flushIntervalMs?: number;
+    /** Default 50. */
+    maxBatchSize?: number;
+    /** Default 1000. New events past this are dropped with a warning. */
+    maxQueueSize?: number;
+    /** Default true. Set false to disable the auto-flush timer (test only). */
+    enableTimer?: boolean;
+}
+export interface AuditClient {
+    config(input: PlatformConfigInput): AuditClient;
+    auth(input: PlatformAuthInput | PlatformAuth): AuditClient;
+    record(event: AuditEventInput): void;
+    flush(): Promise<void>;
+}
+export declare function createAuditClient(input?: AuditClientInput): AuditClient;

package/dist/audit/client.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuditClient = createAuditClient;
+const ulid_1 = require("ulid");
+const config_1 = require("../config");
+const http_1 = require("../http");
+const schema_1 = require("./schema");
+const PATH = '/v1/audit/events';
+const RETRY_DELAYS_MS = [500, 2000, 8000];
+const NOOP_LOGGER = {
+    error: () => { },
+    warn: () => { },
+    info: () => { },
+    debug: () => { },
+    child() {
+        return this;
+    },
+};
+function createAuditClient(input = {}) {
+    const state = new config_1.ConfigState();
+    const flushIntervalMs = input.flushIntervalMs ?? 5000;
+    const maxBatchSize = input.maxBatchSize ?? 50;
+    const maxQueueSize = input.maxQueueSize ?? 1000;
+    const enableTimer = input.enableTimer ?? true;
+    const { flushIntervalMs: _f, maxBatchSize: _b, maxQueueSize: _q, enableTimer: _t, ...rest } = input;
+    void _f;
+    void _b;
+    void _q;
+    void _t;
+    state.apply(rest);
+    const queue = [];
+    const inflight = [];
+    function getLogger() {
+        return state.resolve().logger ?? NOOP_LOGGER;
+    }
+    function getServiceId() {
+        const config = state.resolve();
+        if (!config.auth || config.auth.type !== 'hmac') {
+            throw new Error('audit client requires HMAC auth (set PLATFORM_SIGNING_SECRET + PLATFORM_SERVICE_ID, or call .auth({secret, serviceId}))');
+        }
+        return config.auth.serviceId;
+    }
+    const client = {
+        config(opts) {
+            state.apply(opts);
+            return client;
+        },
+        auth(opts) {
+            state.setAuth(opts);
+            return client;
+        },
+        record(input) {
+            const logger = getLogger();
+            let serviceId;
+            try {
+                serviceId = getServiceId();
+            }
+            catch (err) {
+                logger.error('audit_sdk.no_auth', {
+                    error: { code: 'AUDIT_NO_AUTH', category: 'engineering' },
+                    context: { message: err.message },
+                });
+                return;
+            }
+            const candidate = {
+                ...input,
+                event_id: (0, ulid_1.ulid)(),
+                occurred_at: new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'),
+                actor: { ...input.actor, via: serviceId },
+            };
+            const result = schema_1.auditEventSchema.safeParse(candidate);
+            if (!result.success) {
+                logger.error('audit_sdk.invalid_event', {
+                    error: { code: 'AUDIT_INVALID_EVENT', category: 'engineering' },
+                    context: { issues: result.error.issues, event: candidate },
+                });
+                return;
+            }
+            if (queue.length >= maxQueueSize) {
+                logger.warn('audit_sdk.queue_full', {
+                    context: { dropped_event_id: candidate.event_id, max_queue_size: maxQueueSize },
+                });
+                return;
+            }
+            queue.push(result.data);
+            if (queue.length >= maxBatchSize) {
+                void scheduleSend();
+            }
+        },
+        async flush() {
+            await scheduleSend();
+            while (inflight.length > 0) {
+                await Promise.allSettled([...inflight]);
+            }
+        },
+    };
+    async function scheduleSend() {
+        while (queue.length > 0) {
+            const batch = queue.splice(0, maxBatchSize);
+            const send = sendWithRetries(batch);
+            inflight.push(send);
+            try {
+                await send;
+            }
+            finally {
+                const idx = inflight.indexOf(send);
+                if (idx !== -1)
+                    inflight.splice(idx, 1);
+            }
+        }
+    }
+    async function sendWithRetries(events) {
+        const logger = getLogger();
+        const body = JSON.stringify({ events });
+        for (let attempt = 0; attempt <= RETRY_DELAYS_MS.length; attempt++) {
+            try {
+                const ok = await sendOnce(body);
+                if (ok)
+                    return;
+            }
+            catch (err) {
+                const e = err;
+                logger.warn('audit_sdk.send_error', {
+                    context: { attempt, message: e.message, batch_size: events.length },
+                });
+            }
+            if (attempt < RETRY_DELAYS_MS.length) {
+                await sleep(RETRY_DELAYS_MS[attempt]);
+            }
+        }
+        logger.error('audit_sdk.send_failed', {
+            error: { code: 'AUDIT_SEND_FAILED', category: 'engineering' },
+            context: { batch_size: events.length, events },
+        });
+    }
+    async function sendOnce(body) {
+        const config = state.resolve();
+        const logger = getLogger();
+        const headers = (0, http_1.buildHeaders)(config, { method: 'POST', path: PATH, body });
+        const res = await config.fetchFn(`${config.baseUrl}${PATH}`, {
+            method: 'POST',
+            headers,
+            body,
+        });
+        if (res.status >= 500)
+            return false;
+        if (!res.ok && res.status !== 202) {
+            logger.error('audit_sdk.rejected', {
+                error: { code: 'AUDIT_REJECTED', category: 'engineering' },
+                context: { status: res.status },
+            });
+            return true;
+        }
+        return true;
+    }
+    let timer;
+    if (enableTimer) {
+        timer = setInterval(() => {
+            void scheduleSend();
+        }, flushIntervalMs);
+        if (typeof timer.unref === 'function')
+            timer.unref();
+    }
+    return client;
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/audit/index.d.ts

@@ -0,0 +1,3 @@
+export { auditEventSchema, auditBatchSchema, type AuditEvent, type AuditBatch } from './schema';
+export { signRequest, type SignRequestParams } from './sign';
+export { createAuditClient, type AuditClient, type AuditClientInput, type AuditEventInput, } from './client';

package/dist/audit/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuditClient = exports.signRequest = exports.auditBatchSchema = exports.auditEventSchema = void 0;
+var schema_1 = require("./schema");
+Object.defineProperty(exports, "auditEventSchema", { enumerable: true, get: function () { return schema_1.auditEventSchema; } });
+Object.defineProperty(exports, "auditBatchSchema", { enumerable: true, get: function () { return schema_1.auditBatchSchema; } });
+var sign_1 = require("./sign");
+Object.defineProperty(exports, "signRequest", { enumerable: true, get: function () { return sign_1.signRequest; } });
+var client_1 = require("./client");
+Object.defineProperty(exports, "createAuditClient", { enumerable: true, get: function () { return client_1.createAuditClient; } });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/audit/schema.d.ts

@@ -0,0 +1,239 @@
+import { z } from 'zod';
+export declare const auditEventSchema: z.ZodObject<{
+    event_id: z.ZodString;
+    event_type: z.ZodString;
+    occurred_at: z.ZodString;
+    tenant: z.ZodObject<{
+        id: z.ZodString;
+        parent_id: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        parent_id: string | null;
+    }, {
+        id: string;
+        parent_id: string | null;
+    }>;
+    actor: z.ZodObject<{
+        type: z.ZodEnum<["user", "service", "system"]>;
+        id: z.ZodString;
+        via: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "user" | "service" | "system";
+        id: string;
+        via: string;
+    }, {
+        type: "user" | "service" | "system";
+        id: string;
+        via: string;
+    }>;
+    resource: z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: string;
+        id: string;
+    }, {
+        type: string;
+        id: string;
+    }>;
+    changes: z.ZodRecord<z.ZodString, z.ZodObject<{
+        before: z.ZodUnknown;
+        after: z.ZodUnknown;
+    }, "strip", z.ZodTypeAny, {
+        before?: unknown;
+        after?: unknown;
+    }, {
+        before?: unknown;
+        after?: unknown;
+    }>>;
+    request_id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    event_id: string;
+    event_type: string;
+    occurred_at: string;
+    tenant: {
+        id: string;
+        parent_id: string | null;
+    };
+    actor: {
+        type: "user" | "service" | "system";
+        id: string;
+        via: string;
+    };
+    resource: {
+        type: string;
+        id: string;
+    };
+    changes: Record<string, {
+        before?: unknown;
+        after?: unknown;
+    }>;
+    request_id?: string | undefined;
+}, {
+    event_id: string;
+    event_type: string;
+    occurred_at: string;
+    tenant: {
+        id: string;
+        parent_id: string | null;
+    };
+    actor: {
+        type: "user" | "service" | "system";
+        id: string;
+        via: string;
+    };
+    resource: {
+        type: string;
+        id: string;
+    };
+    changes: Record<string, {
+        before?: unknown;
+        after?: unknown;
+    }>;
+    request_id?: string | undefined;
+}>;
+export type AuditEvent = z.infer<typeof auditEventSchema>;
+export declare const auditBatchSchema: z.ZodObject<{
+    events: z.ZodArray<z.ZodObject<{
+        event_id: z.ZodString;
+        event_type: z.ZodString;
+        occurred_at: z.ZodString;
+        tenant: z.ZodObject<{
+            id: z.ZodString;
+            parent_id: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            parent_id: string | null;
+        }, {
+            id: string;
+            parent_id: string | null;
+        }>;
+        actor: z.ZodObject<{
+            type: z.ZodEnum<["user", "service", "system"]>;
+            id: z.ZodString;
+            via: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        }, {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        }>;
+        resource: z.ZodObject<{
+            type: z.ZodString;
+            id: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: string;
+            id: string;
+        }, {
+            type: string;
+            id: string;
+        }>;
+        changes: z.ZodRecord<z.ZodString, z.ZodObject<{
+            before: z.ZodUnknown;
+            after: z.ZodUnknown;
+        }, "strip", z.ZodTypeAny, {
+            before?: unknown;
+            after?: unknown;
+        }, {
+            before?: unknown;
+            after?: unknown;
+        }>>;
+        request_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        event_id: string;
+        event_type: string;
+        occurred_at: string;
+        tenant: {
+            id: string;
+            parent_id: string | null;
+        };
+        actor: {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        };
+        resource: {
+            type: string;
+            id: string;
+        };
+        changes: Record<string, {
+            before?: unknown;
+            after?: unknown;
+        }>;
+        request_id?: string | undefined;
+    }, {
+        event_id: string;
+        event_type: string;
+        occurred_at: string;
+        tenant: {
+            id: string;
+            parent_id: string | null;
+        };
+        actor: {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        };
+        resource: {
+            type: string;
+            id: string;
+        };
+        changes: Record<string, {
+            before?: unknown;
+            after?: unknown;
+        }>;
+        request_id?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    events: {
+        event_id: string;
+        event_type: string;
+        occurred_at: string;
+        tenant: {
+            id: string;
+            parent_id: string | null;
+        };
+        actor: {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        };
+        resource: {
+            type: string;
+            id: string;
+        };
+        changes: Record<string, {
+            before?: unknown;
+            after?: unknown;
+        }>;
+        request_id?: string | undefined;
+    }[];
+}, {
+    events: {
+        event_id: string;
+        event_type: string;
+        occurred_at: string;
+        tenant: {
+            id: string;
+            parent_id: string | null;
+        };
+        actor: {
+            type: "user" | "service" | "system";
+            id: string;
+            via: string;
+        };
+        resource: {
+            type: string;
+            id: string;
+        };
+        changes: Record<string, {
+            before?: unknown;
+            after?: unknown;
+        }>;
+        request_id?: string | undefined;
+    }[];
+}>;
+export type AuditBatch = z.infer<typeof auditBatchSchema>;

package/dist/audit/schema.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditBatchSchema = exports.auditEventSchema = void 0;
+const zod_1 = require("zod");
+exports.auditEventSchema = zod_1.z.object({
+    event_id: zod_1.z.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, 'must be a ULID'),
+    event_type: zod_1.z
+        .string()
+        .regex(/^[a-z][a-z0-9_]*\.[a-z][a-z0-9_]*$/, 'must be "<resource>.<operation>"'),
+    occurred_at: zod_1.z.string().datetime({ offset: false }),
+    tenant: zod_1.z.object({
+        id: zod_1.z.string().min(1),
+        parent_id: zod_1.z.string().nullable(),
+    }),
+    actor: zod_1.z.object({
+        type: zod_1.z.enum(['user', 'service', 'system']),
+        id: zod_1.z.string().min(1),
+        via: zod_1.z.string().min(1),
+    }),
+    resource: zod_1.z.object({
+        type: zod_1.z.string().min(1),
+        id: zod_1.z.string().min(1),
+    }),
+    changes: zod_1.z.record(zod_1.z.string(), zod_1.z.object({
+        before: zod_1.z.unknown(),
+        after: zod_1.z.unknown(),
+    })),
+    request_id: zod_1.z.string().optional(),
+});
+exports.auditBatchSchema = zod_1.z.object({
+    events: zod_1.z.array(exports.auditEventSchema).min(1).max(100),
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/audit/sign.d.ts

@@ -0,0 +1,24 @@
+export interface SignRequestParams {
+    method: string;
+    path: string;
+    serviceId: string;
+    timestamp: string;
+    nonce: string;
+    /** Raw JSON body string, or empty string for no body. */
+    body: string;
+    secret: string;
+}
+/**
+ * HMAC-SHA256 signature over a canonical request representation. Producer
+ * (this SDK) and verifier (`serviceAuthMiddleware` in `@uengage/common`) must
+ * compute the same canonical string, so any change here MUST be mirrored
+ * there. The canonical form is newline-separated, with no trailing newline:
+ *
+ *   <METHOD>
+ *   <PATH>
+ *   <X-Service-Id>
+ *   <X-Timestamp>
+ *   <X-Nonce>
+ *   <sha256-hex of body, or empty string for no body>
+ */
+export declare function signRequest(params: SignRequestParams): string;

package/dist/audit/sign.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signRequest = signRequest;
+const node_crypto_1 = require("node:crypto");
+/**
+ * HMAC-SHA256 signature over a canonical request representation. Producer
+ * (this SDK) and verifier (`serviceAuthMiddleware` in `@uengage/common`) must
+ * compute the same canonical string, so any change here MUST be mirrored
+ * there. The canonical form is newline-separated, with no trailing newline:
+ *
+ *   <METHOD>
+ *   <PATH>
+ *   <X-Service-Id>
+ *   <X-Timestamp>
+ *   <X-Nonce>
+ *   <sha256-hex of body, or empty string for no body>
+ */
+function signRequest(params) {
+    const bodyHash = params.body ? (0, node_crypto_1.createHash)('sha256').update(params.body).digest('hex') : '';
+    const canonical = [
+        params.method.toUpperCase(),
+        params.path,
+        params.serviceId,
+        params.timestamp,
+        params.nonce,
+        bodyHash,
+    ].join('\n');
+    return (0, node_crypto_1.createHmac)('sha256', params.secret).update(canonical).digest('hex');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/business/client.d.ts

@@ -0,0 +1,19 @@
+import { type PlatformAuth, type PlatformAuthInput, type PlatformConfigInput } from '../config';
+import type { BusinessGroupName, BusinessRecord } from './schema';
+export interface BusinessGetOptions {
+    groups?: readonly BusinessGroupName[];
+}
+export interface BusinessClient {
+    config(input: PlatformConfigInput): BusinessClient;
+    auth(input: PlatformAuthInput | PlatformAuth): BusinessClient;
+    /** GET /v1/business/:id - returns the record or throws BusinessApiError. */
+    get(id: number, opts?: BusinessGetOptions): Promise<BusinessRecord>;
+    /** GET /v1/business/bulk - returns matched records (missing ids dropped). */
+    bulk(ids: readonly number[], opts?: BusinessGetOptions): Promise<BusinessRecord[]>;
+}
+export declare class BusinessApiError extends Error {
+    readonly status: number;
+    readonly body: string;
+    constructor(status: number, body: string);
+}
+export declare function createBusinessClient(input?: PlatformConfigInput): BusinessClient;

package/dist/business/client.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BusinessApiError = void 0;
+exports.createBusinessClient = createBusinessClient;
+const config_1 = require("../config");
+const http_1 = require("../http");
+class BusinessApiError extends Error {
+    status;
+    body;
+    constructor(status, body) {
+        super(`business API ${status}: ${body}`);
+        this.name = 'BusinessApiError';
+        this.status = status;
+        this.body = body;
+    }
+}
+exports.BusinessApiError = BusinessApiError;
+function createBusinessClient(input = {}) {
+    const state = new config_1.ConfigState();
+    state.apply(input);
+    const client = {
+        config(opts) {
+            state.apply(opts);
+            return client;
+        },
+        auth(opts) {
+            state.setAuth(opts);
+            return client;
+        },
+        async get(id, opts = {}) {
+            if (!Number.isInteger(id) || id <= 0) {
+                throw new Error(`business.get: id must be a positive integer (got ${id})`);
+            }
+            const path = `/v1/business/${id}`;
+            const query = opts.groups?.length ? `?groups=${opts.groups.join(',')}` : '';
+            const config = state.resolve();
+            const headers = (0, http_1.buildHeaders)(config, { method: 'GET', path });
+            const res = await config.fetchFn(`${config.baseUrl}${path}${query}`, {
+                method: 'GET',
+                headers,
+            });
+            if (!res.ok) {
+                throw new BusinessApiError(res.status, await res.text());
+            }
+            return (await res.json());
+        },
+        async bulk(ids, opts = {}) {
+            if (ids.length === 0) {
+                throw new Error('business.bulk: ids must not be empty');
+            }
+            for (const n of ids) {
+                if (!Number.isInteger(n) || n <= 0) {
+                    throw new Error(`business.bulk: every id must be a positive integer (got ${n})`);
+                }
+            }
+            const path = '/v1/business/bulk';
+            const params = new URLSearchParams({ ids: ids.join(',') });
+            if (opts.groups?.length)
+                params.set('groups', opts.groups.join(','));
+            const config = state.resolve();
+            const headers = (0, http_1.buildHeaders)(config, { method: 'GET', path });
+            const res = await config.fetchFn(`${config.baseUrl}${path}?${params.toString()}`, {
+                method: 'GET',
+                headers,
+            });
+            if (!res.ok) {
+                throw new BusinessApiError(res.status, await res.text());
+            }
+            return (await res.json());
+        },
+    };
+    return client;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/business/index.d.ts

@@ -0,0 +1,2 @@
+export { BUSINESS_GROUPS, type BusinessGroupName, type BusinessRecord, type BusinessDetails, type BusinessGst, type BusinessPaymentGateway, } from './schema';
+export { createBusinessClient, BusinessApiError, type BusinessClient, type BusinessGetOptions, } from './client';

package/dist/business/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BusinessApiError = exports.createBusinessClient = exports.BUSINESS_GROUPS = void 0;
+var schema_1 = require("./schema");
+Object.defineProperty(exports, "BUSINESS_GROUPS", { enumerable: true, get: function () { return schema_1.BUSINESS_GROUPS; } });
+var client_1 = require("./client");
+Object.defineProperty(exports, "createBusinessClient", { enumerable: true, get: function () { return client_1.createBusinessClient; } });
+Object.defineProperty(exports, "BusinessApiError", { enumerable: true, get: function () { return client_1.BusinessApiError; } });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/business/schema.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Group names recognised by the business read API. Mirrors the GROUPS
+ * registry in services/business; if the server adds a group, add it here.
+ */
+export declare const BUSINESS_GROUPS: readonly ["business_details", "gst", "payment_gateway"];
+export type BusinessGroupName = (typeof BUSINESS_GROUPS)[number];
+export interface BusinessDetails {
+    name: string | null;
+}
+export interface BusinessGst {
+    state: string | null;
+    gst_no: string | null;
+}
+export interface BusinessPaymentGateway {
+    razorpay: {
+        key: string | null;
+        secret: string | null;
+    };
+}
+/**
+ * Response shape from GET /v1/business/:id and the entries returned by
+ * GET /v1/business/bulk. Group keys are optional - the server includes
+ * only the groups that were both requested and authorized for the caller.
+ */
+export interface BusinessRecord {
+    id: number;
+    parent_id: number | null;
+    business_details?: BusinessDetails;
+    gst?: BusinessGst;
+    payment_gateway?: BusinessPaymentGateway;
+}

package/dist/business/schema.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUSINESS_GROUPS = void 0;
+/**
+ * Group names recognised by the business read API. Mirrors the GROUPS
+ * registry in services/business; if the server adds a group, add it here.
+ */
+exports.BUSINESS_GROUPS = ['business_details', 'gst', 'payment_gateway'];
+//# sourceMappingURL=data:application/json;base64,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

package/dist/config.d.ts

@@ -0,0 +1,64 @@
+import type { Logger } from '@uengage.io/js-logger';
+export declare const DEFAULT_BASE_URL = "https://platform.uengage.io";
+/**
+ * Resolved auth state. Discriminated by `type` so consumers can narrow.
+ */
+export type PlatformAuth = {
+    type: 'hmac';
+    secret: string;
+    serviceId: string;
+} | {
+    type: 'bearer';
+    token: string;
+};
+export interface PlatformConfig {
+    baseUrl: string;
+    auth?: PlatformAuth;
+    fetchFn: typeof fetch;
+    logger?: Logger;
+}
+/**
+ * Caller-facing input shape. `auth` accepts either a discriminated
+ * PlatformAuth or the looser PlatformAuthInput - the looser form is
+ * also what `.auth()` accepts.
+ */
+export interface PlatformConfigInput {
+    baseUrl?: string;
+    auth?: PlatformAuthInput | PlatformAuth;
+    fetchFn?: typeof fetch;
+    logger?: Logger;
+}
+/**
+ * `.auth()` shape. Pass either `{token}` (Bearer) or `{secret, serviceId}`
+ * (HMAC). Mixing both throws.
+ */
+export interface PlatformAuthInput {
+    token?: string;
+    secret?: string;
+    serviceId?: string;
+}
+/**
+ * Resolve env-defaulted config. Re-read on every call so that callers can
+ * set env vars after the SDK has been imported and still pick them up on
+ * the next request.
+ */
+export declare function envDefaults(): PlatformConfig;
+/**
+ * Coerce `.auth()` input or `config({auth})` input into a typed PlatformAuth.
+ * Throws if the input has no usable credentials or mixes HMAC + Bearer.
+ */
+export declare function normalizeAuth(input: PlatformAuthInput | PlatformAuth): PlatformAuth;
+/**
+ * Mutable config shared by clients. `apply()` and `setAuth()` are how the
+ * chainable `.config()` / `.auth()` methods write back. `resolve()` produces
+ * the effective config for one request, falling back to current env state
+ * for fields the caller hasn't pinned.
+ */
+export declare class ConfigState {
+    private overrides;
+    private explicitAuth;
+    private hasExplicitAuth;
+    apply(input: PlatformConfigInput): void;
+    setAuth(input: PlatformAuthInput | PlatformAuth): void;
+    resolve(): PlatformConfig;
+}

package/dist/config.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigState = exports.DEFAULT_BASE_URL = void 0;
+exports.envDefaults = envDefaults;
+exports.normalizeAuth = normalizeAuth;
+exports.DEFAULT_BASE_URL = 'https://platform.uengage.io';
+/**
+ * Resolve env-defaulted config. Re-read on every call so that callers can
+ * set env vars after the SDK has been imported and still pick them up on
+ * the next request.
+ */
+function envDefaults() {
+    return {
+        baseUrl: process.env.PLATFORM_BASE_URL ?? exports.DEFAULT_BASE_URL,
+        auth: envAuth(),
+        fetchFn: globalThis.fetch,
+    };
+}
+function envAuth() {
+    const secret = process.env.PLATFORM_SIGNING_SECRET;
+    const serviceId = process.env.PLATFORM_SERVICE_ID;
+    const token = process.env.PLATFORM_AUTH_TOKEN;
+    if (token)
+        return { type: 'bearer', token };
+    if (secret && serviceId)
+        return { type: 'hmac', secret, serviceId };
+    return undefined;
+}
+/**
+ * Coerce `.auth()` input or `config({auth})` input into a typed PlatformAuth.
+ * Throws if the input has no usable credentials or mixes HMAC + Bearer.
+ */
+function normalizeAuth(input) {
+    if ('type' in input)
+        return input;
+    if (input.token) {
+        if (input.secret || input.serviceId) {
+            throw new Error('auth(): pass either {token} or {secret, serviceId}, not both');
+        }
+        return { type: 'bearer', token: input.token };
+    }
+    if (input.secret && input.serviceId) {
+        return { type: 'hmac', secret: input.secret, serviceId: input.serviceId };
+    }
+    throw new Error('auth(): must provide either {token} or {secret, serviceId}');
+}
+/**
+ * Mutable config shared by clients. `apply()` and `setAuth()` are how the
+ * chainable `.config()` / `.auth()` methods write back. `resolve()` produces
+ * the effective config for one request, falling back to current env state
+ * for fields the caller hasn't pinned.
+ */
+class ConfigState {
+    overrides = {};
+    explicitAuth;
+    hasExplicitAuth = false;
+    apply(input) {
+        if (input.baseUrl !== undefined)
+            this.overrides.baseUrl = input.baseUrl;
+        if (input.fetchFn !== undefined)
+            this.overrides.fetchFn = input.fetchFn;
+        if (input.logger !== undefined)
+            this.overrides.logger = input.logger;
+        if (input.auth !== undefined) {
+            this.explicitAuth = normalizeAuth(input.auth);
+            this.hasExplicitAuth = true;
+        }
+    }
+    setAuth(input) {
+        this.explicitAuth = normalizeAuth(input);
+        this.hasExplicitAuth = true;
+    }
+    resolve() {
+        const env = envDefaults();
+        return {
+            baseUrl: this.overrides.baseUrl ?? env.baseUrl,
+            auth: this.hasExplicitAuth ? this.explicitAuth : env.auth,
+            fetchFn: (this.overrides.fetchFn ?? env.fetchFn),
+            logger: this.overrides.logger,
+        };
+    }
+}
+exports.ConfigState = ConfigState;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/http.d.ts

@@ -0,0 +1,15 @@
+import type { PlatformConfig } from './config';
+export interface SignedHeaderParams {
+    method: string;
+    /** URL pathname only, without query string. Must match `c.req.path` server-side. */
+    path: string;
+    /** Raw JSON body string, or empty for none. */
+    body?: string;
+}
+/**
+ * Build the headers required for a request to the platform API, given the
+ * effective auth on `config`. With no auth configured we still return any
+ * non-auth headers (e.g. content-type) - some endpoints accept anonymous
+ * callers and the server decides whether to allow.
+ */
+export declare function buildHeaders(config: PlatformConfig, params: SignedHeaderParams): Record<string, string>;

package/dist/http.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildHeaders = buildHeaders;
+const node_crypto_1 = require("node:crypto");
+const sign_1 = require("./audit/sign");
+/**
+ * Build the headers required for a request to the platform API, given the
+ * effective auth on `config`. With no auth configured we still return any
+ * non-auth headers (e.g. content-type) - some endpoints accept anonymous
+ * callers and the server decides whether to allow.
+ */
+function buildHeaders(config, params) {
+    const headers = {};
+    if (params.body !== undefined)
+        headers['content-type'] = 'application/json';
+    if (!config.auth)
+        return headers;
+    if (config.auth.type === 'bearer') {
+        headers['authorization'] = `Bearer ${config.auth.token}`;
+        return headers;
+    }
+    // HMAC
+    const timestamp = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
+    const nonce = (0, node_crypto_1.randomUUID)();
+    const signature = (0, sign_1.signRequest)({
+        method: params.method,
+        path: params.path,
+        serviceId: config.auth.serviceId,
+        timestamp,
+        nonce,
+        body: params.body ?? '',
+        secret: config.auth.secret,
+    });
+    headers['x-service-id'] = config.auth.serviceId;
+    headers['x-timestamp'] = timestamp;
+    headers['x-nonce'] = nonce;
+    headers['x-signature'] = signature;
+    return headers;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export * from './audit';
+export * from './business';
+export { type PlatformAuth, type PlatformAuthInput, type PlatformConfig, type PlatformConfigInput, DEFAULT_BASE_URL, } from './config';
+/**
+ * Default singleton clients. Both read defaults from the environment on
+ * every call:
+ *   - PLATFORM_BASE_URL          (defaults to https://platform.uengage.io)
+ *   - PLATFORM_SIGNING_SECRET    HMAC secret hex
+ *   - PLATFORM_SERVICE_ID        HMAC service id
+ *   - PLATFORM_AUTH_TOKEN        Bearer token (overrides HMAC if set)
+ *
+ * Override per-instance with `.config({...})` and/or `.auth({...})`. For
+ * isolated configuration (tests, multi-tenant code paths), construct your
+ * own via `createAuditClient(...)` or `createBusinessClient(...)` instead.
+ */
+export declare const audit: import("./audit").AuditClient;
+export declare const business: import("./business").BusinessClient;

package/dist/index.js

@@ -0,0 +1,38 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.business = exports.audit = exports.DEFAULT_BASE_URL = void 0;
+__exportStar(require("./audit"), exports);
+__exportStar(require("./business"), exports);
+var config_1 = require("./config");
+Object.defineProperty(exports, "DEFAULT_BASE_URL", { enumerable: true, get: function () { return config_1.DEFAULT_BASE_URL; } });
+const audit_1 = require("./audit");
+const business_1 = require("./business");
+/**
+ * Default singleton clients. Both read defaults from the environment on
+ * every call:
+ *   - PLATFORM_BASE_URL          (defaults to https://platform.uengage.io)
+ *   - PLATFORM_SIGNING_SECRET    HMAC secret hex
+ *   - PLATFORM_SERVICE_ID        HMAC service id
+ *   - PLATFORM_AUTH_TOKEN        Bearer token (overrides HMAC if set)
+ *
+ * Override per-instance with `.config({...})` and/or `.auth({...})`. For
+ * isolated configuration (tests, multi-tenant code paths), construct your
+ * own via `createAuditClient(...)` or `createBusinessClient(...)` instead.
+ */
+exports.audit = (0, audit_1.createAuditClient)();
+exports.business = (0, business_1.createBusinessClient)();
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@uengage.io/platform-sdk",
+  "version": "0.1.0",
+  "description": "Client SDK for the uEngage platform API (audit, business, ...). Namespaced singletons with HMAC or Bearer auth.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "license": "MIT",
+  "keywords": [
+    "uengage",
+    "platform",
+    "sdk",
+    "audit",
+    "business",
+    "hmac"
+  ],
+  "dependencies": {
+    "ulid": "^2.3.0",
+    "zod": "^3.23.8",
+    "@uengage.io/js-logger": "0.9.3"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.14.10",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "^5.5.4"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "jest"
+  }
+}