@wefunder/sdk 0.1.0-beta.0

package/dist/index.cjs

@@ -0,0 +1,1264 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  DEFAULT_API_BASE_URL: () => DEFAULT_API_BASE_URL,
+  DEFAULT_API_VERSION: () => DEFAULT_API_VERSION,
+  DEFAULT_AUTHORIZE_BASE_URL: () => DEFAULT_AUTHORIZE_BASE_URL,
+  DEFAULT_OAUTH_BASE_URL: () => DEFAULT_OAUTH_BASE_URL,
+  DEFAULT_TOKEN_BASE_URL: () => DEFAULT_TOKEN_BASE_URL,
+  DELIVERY_ID_HEADER: () => DELIVERY_ID_HEADER,
+  EVENT_HEADER: () => EVENT_HEADER,
+  REQUEST_ID_HEADER: () => REQUEST_ID_HEADER,
+  SIGNATURE_HEADER: () => SIGNATURE_HEADER,
+  TIMESTAMP_HEADER: () => TIMESTAMP_HEADER,
+  Wefunder: () => Wefunder,
+  WefunderAuthError: () => WefunderAuthError,
+  WefunderError: () => WefunderError,
+  clientCredentialsGrant: () => clientCredentialsGrant,
+  collect: () => collect,
+  constructEvent: () => constructEvent,
+  createAuthorizationUrl: () => createAuthorizationUrl,
+  exchangeCode: () => exchangeCode,
+  generatePkce: () => generatePkce,
+  modeForToken: () => modeForToken,
+  paginate: () => paginate,
+  refreshToken: () => refreshToken,
+  verifyWebhook: () => verifyWebhook
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/client.ts
+var import_client_fetch2 = require("@hey-api/client-fetch");
+
+// src/http.ts
+var IDEMPOTENT = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
+function methodOf(input, init) {
+  if (init?.method) return init.method.toUpperCase();
+  if (input instanceof Request) return input.method.toUpperCase();
+  return "GET";
+}
+function rateLimitWaitMs(response, now, maxDelayMs) {
+  const raw = response.headers.get("x-ratelimit-reset");
+  if (!raw) return Math.min(1e3, maxDelayMs);
+  const n = Number(raw);
+  if (!Number.isFinite(n)) return Math.min(1e3, maxDelayMs);
+  const wait = n > 1e9 ? n * 1e3 - now : n * 1e3;
+  return Math.max(0, Math.min(wait, maxDelayMs));
+}
+function backoffMs(attempt, opts, random) {
+  const exp = opts.baseDelayMs * 2 ** attempt;
+  const jitter = exp * 0.5 * random();
+  return Math.min(exp + jitter, opts.maxDelayMs);
+}
+function withBearer(input, init, token) {
+  const headers = new Headers(
+    init?.headers ?? (input instanceof Request ? input.headers : void 0)
+  );
+  headers.set("Authorization", `Bearer ${token}`);
+  return { ...init, headers };
+}
+function createFetch(deps) {
+  const baseFetch = deps.fetch ?? fetch;
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const now = deps.now ?? Date.now;
+  const random = deps.random ?? Math.random;
+  const retry = {
+    maxRetries: deps.retry?.maxRetries ?? 2,
+    baseDelayMs: deps.retry?.baseDelayMs ?? 250,
+    maxDelayMs: deps.retry?.maxDelayMs ?? 6e4
+  };
+  return async function wrappedFetch(input, init) {
+    const method = methodOf(input, init);
+    const idempotent = IDEMPOTENT.has(method);
+    let refreshed = false;
+    let attempt = 0;
+    for (; ; ) {
+      let response;
+      let networkError;
+      try {
+        response = await baseFetch(input, init);
+      } catch (err) {
+        networkError = err;
+      }
+      const replayable = !(input instanceof Request && input.bodyUsed);
+      if (response?.status === 401 && !refreshed && replayable && deps.tokenManager?.canRefresh) {
+        refreshed = true;
+        const next = await deps.tokenManager.refresh();
+        init = withBearer(input, init, next.accessToken);
+        continue;
+      }
+      if (response?.status === 429 && attempt < retry.maxRetries) {
+        attempt++;
+        await sleep(rateLimitWaitMs(response, now(), retry.maxDelayMs));
+        continue;
+      }
+      const transient = networkError !== void 0 || response !== void 0 && response.status >= 500;
+      if (transient && idempotent && attempt < retry.maxRetries) {
+        attempt++;
+        await sleep(backoffMs(attempt, retry, random));
+        continue;
+      }
+      if (response) return response;
+      throw networkError;
+    }
+  };
+}
+
+// src/oauth.ts
+var import_node_crypto = require("crypto");
+var DEFAULT_AUTHORIZE_BASE_URL = "https://wefunder.com/oauth";
+var DEFAULT_TOKEN_BASE_URL = "https://wefunder.com/oauth";
+var DEFAULT_OAUTH_BASE_URL = DEFAULT_AUTHORIZE_BASE_URL;
+function resolveAuthorizeBase(o) {
+  return o.authorizeBaseUrl ?? o.oauthBaseUrl ?? DEFAULT_AUTHORIZE_BASE_URL;
+}
+function resolveTokenBase(o) {
+  return o.tokenBaseUrl ?? o.oauthBaseUrl ?? DEFAULT_TOKEN_BASE_URL;
+}
+function toTokenSet(raw, now) {
+  return {
+    accessToken: raw.access_token,
+    refreshToken: raw.refresh_token,
+    expiresAt: raw.expires_in ? now + raw.expires_in * 1e3 : void 0,
+    scope: raw.scope,
+    tokenType: raw.token_type
+  };
+}
+async function postToken(oauthBaseUrl, params, fetchImpl, now) {
+  const res = await fetchImpl(`${oauthBaseUrl}/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: new URLSearchParams(params).toString()
+  });
+  if (!res.ok) {
+    let detail = "";
+    try {
+      detail = JSON.stringify(await res.json());
+    } catch {
+      detail = await res.text().catch(() => "");
+    }
+    throw new Error(`OAuth token request failed (${res.status}): ${detail}`);
+  }
+  return toTokenSet(await res.json(), now());
+}
+function base64Url(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function generatePkce() {
+  const codeVerifier = base64Url((0, import_node_crypto.randomBytes)(32));
+  const codeChallenge = base64Url((0, import_node_crypto.createHash)("sha256").update(codeVerifier).digest());
+  return { codeVerifier, codeChallenge, codeChallengeMethod: "S256" };
+}
+function createAuthorizationUrl(opts) {
+  const base = resolveAuthorizeBase(opts);
+  const q = new URLSearchParams({
+    response_type: "code",
+    client_id: opts.clientId,
+    redirect_uri: opts.redirectUri,
+    scope: opts.scopes.join(" "),
+    state: opts.state,
+    code_challenge: opts.pkce.codeChallenge,
+    code_challenge_method: opts.pkce.codeChallengeMethod
+  });
+  return `${base}/authorize?${q.toString()}`;
+}
+function exchangeCode(opts) {
+  const params = {
+    grant_type: "authorization_code",
+    client_id: opts.clientId,
+    code: opts.code,
+    redirect_uri: opts.redirectUri,
+    code_verifier: opts.codeVerifier
+  };
+  if (opts.clientSecret) params.client_secret = opts.clientSecret;
+  return postToken(resolveTokenBase(opts), params, opts.fetch ?? fetch, opts.now ?? Date.now);
+}
+function clientCredentialsGrant(opts) {
+  const params = {
+    grant_type: "client_credentials",
+    client_id: opts.clientId,
+    client_secret: opts.clientSecret
+  };
+  if (opts.scopes?.length) params.scope = opts.scopes.join(" ");
+  return postToken(resolveTokenBase(opts), params, opts.fetch ?? fetch, opts.now ?? Date.now);
+}
+function refreshToken(opts) {
+  const params = {
+    grant_type: "refresh_token",
+    client_id: opts.clientId,
+    refresh_token: opts.refreshToken
+  };
+  if (opts.clientSecret) params.client_secret = opts.clientSecret;
+  return postToken(resolveTokenBase(opts), params, opts.fetch ?? fetch, opts.now ?? Date.now);
+}
+
+// src/errors.ts
+var REQUEST_ID_HEADER = "x-wf-request-id";
+function requestIdFrom(response, bodyRequestId) {
+  return response?.headers.get(REQUEST_ID_HEADER) ?? bodyRequestId;
+}
+var WefunderError = class extends Error {
+  status;
+  type;
+  requestId;
+  details;
+  /** Server-provided hint on how to resolve the error, when present. */
+  remediation;
+  /** Documentation pointer surfaced to developers in stack traces / logs. */
+  documentationUrl = "https://docs.wefunder.com/api-reference";
+  constructor(args) {
+    super(args.message);
+    this.name = "WefunderError";
+    this.status = args.status;
+    this.type = args.type;
+    this.requestId = args.requestId;
+    this.details = args.details;
+    this.remediation = args.remediation;
+  }
+};
+var WefunderAuthError = class extends WefunderError {
+  constructor(message) {
+    super({ status: 401, type: "unauthorized", message });
+    this.name = "WefunderAuthError";
+  }
+};
+
+// src/token-manager.ts
+var TokenManager = class {
+  #tokens;
+  #clientId;
+  #clientSecret;
+  #reMint;
+  #tokenBaseUrl;
+  #onTokenRefresh;
+  #store;
+  #fetch;
+  #now;
+  #leeway;
+  #inflight;
+  constructor(opts) {
+    this.#tokens = opts.tokens;
+    this.#clientId = opts.clientId;
+    this.#clientSecret = opts.clientSecret;
+    this.#reMint = opts.reMint;
+    this.#tokenBaseUrl = resolveTokenBase(opts);
+    this.#onTokenRefresh = opts.onTokenRefresh;
+    this.#store = opts.store;
+    this.#fetch = opts.fetch ?? fetch;
+    this.#now = opts.now ?? Date.now;
+    this.#leeway = opts.expiryLeewayMs ?? 3e4;
+  }
+  get current() {
+    return this.#tokens;
+  }
+  /** True if the manager can recover an expired token (rotate a refresh token or re-mint). */
+  get canRefresh() {
+    return Boolean(this.#tokens.refreshToken && this.#clientId || this.#reMint);
+  }
+  /** Returns a valid access token, refreshing proactively if it's expired/near-expiry. */
+  async getAccessToken() {
+    const { expiresAt } = this.#tokens;
+    if (expiresAt !== void 0 && this.#now() >= expiresAt - this.#leeway && this.canRefresh) {
+      await this.refresh();
+    }
+    return this.#tokens.accessToken;
+  }
+  /**
+   * Recover an expired/rejected token (e.g. after a 401): rotates the refresh token
+   * if there is one, otherwise re-mints (client_credentials). Coalesces concurrent
+   * calls into one network round-trip, then persists. Returns the new token set.
+   */
+  async refresh() {
+    if (this.#inflight) return this.#inflight;
+    const strategy = this.#recoveryStrategy();
+    if (!strategy) {
+      throw new WefunderAuthError(
+        "Access token expired and no refresh token / re-mint capability is configured."
+      );
+    }
+    this.#inflight = (async () => {
+      const next = await strategy();
+      this.#tokens = next;
+      await this.#store?.save(next);
+      await this.#onTokenRefresh?.(next);
+      return next;
+    })();
+    try {
+      return await this.#inflight;
+    } finally {
+      this.#inflight = void 0;
+    }
+  }
+  // Pick the recovery strategy: refresh_token rotation, else cc re-mint, else none.
+  #recoveryStrategy() {
+    const refreshTokenValue = this.#tokens.refreshToken;
+    if (refreshTokenValue && this.#clientId) {
+      const clientId = this.#clientId;
+      return async () => {
+        const next = await refreshToken({
+          clientId,
+          clientSecret: this.#clientSecret,
+          refreshToken: refreshTokenValue,
+          tokenBaseUrl: this.#tokenBaseUrl,
+          fetch: this.#fetch,
+          now: this.#now
+        });
+        if (!next.refreshToken) next.refreshToken = refreshTokenValue;
+        return next;
+      };
+    }
+    return this.#reMint;
+  }
+};
+
+// src/pagination.ts
+async function* paginate(fetchPage) {
+  let cursor;
+  const seen = /* @__PURE__ */ new Set();
+  for (; ; ) {
+    const page = await fetchPage(cursor);
+    for (const item of page.data ?? []) yield item;
+    const meta = page.meta ?? {};
+    const next = meta.next_cursor;
+    if (meta.has_more === false) return;
+    if (next === void 0 || next === null) return;
+    if (seen.has(next)) return;
+    seen.add(next);
+    cursor = next;
+  }
+}
+async function collect(fetchPage) {
+  const out = [];
+  for await (const item of paginate(fetchPage)) out.push(item);
+  return out;
+}
+
+// src/generated/sdk.gen.ts
+var sdk_gen_exports = {};
+__export(sdk_gen_exports, {
+  approveSyndicateMember: () => approveSyndicateMember,
+  closeSyndicateDeal: () => closeSyndicateDeal,
+  createIntent: () => createIntent,
+  createPartnerInvite: () => createPartnerInvite,
+  createWebhookSubscription: () => createWebhookSubscription,
+  deleteWebhookSubscription: () => deleteWebhookSubscription,
+  demoteSyndicateMember: () => demoteSyndicateMember,
+  exportSyndicateMembersCsv: () => exportSyndicateMembersCsv,
+  finalizeSyndicateDeal: () => finalizeSyndicateDeal,
+  getAttributionMe: () => getAttributionMe,
+  getAttributionStats: () => getAttributionStats,
+  getCurrentUser: () => getCurrentUser,
+  getIntent: () => getIntent,
+  getOffering: () => getOffering,
+  getSyndicate: () => getSyndicate,
+  getSyndicateDeal: () => getSyndicateDeal,
+  getSyndicateStatistics: () => getSyndicateStatistics,
+  getWebhookSubscription: () => getWebhookSubscription,
+  hideSyndicateMember: () => hideSyndicateMember,
+  inviteSyndicateMember: () => inviteSyndicateMember,
+  listActivity: () => listActivity,
+  listAttributedInvestments: () => listAttributedInvestments,
+  listAttributionCampaigns: () => listAttributionCampaigns,
+  listCampaigns: () => listCampaigns,
+  listConnectedApps: () => listConnectedApps,
+  listIntents: () => listIntents,
+  listInvestments: () => listInvestments,
+  listOfferings: () => listOfferings,
+  listPartnerInvites: () => listPartnerInvites,
+  listSyndicateDealInvestors: () => listSyndicateDealInvestors,
+  listSyndicateDeals: () => listSyndicateDeals,
+  listSyndicateMemberInvestments: () => listSyndicateMemberInvestments,
+  listSyndicateMembers: () => listSyndicateMembers,
+  listSyndicates: () => listSyndicates,
+  listWebhookSubscriptions: () => listWebhookSubscriptions,
+  promoteSyndicateMember: () => promoteSyndicateMember,
+  reactivateWebhookSubscription: () => reactivateWebhookSubscription,
+  regenerateWebhookSecret: () => regenerateWebhookSecret,
+  registerAsPartner: () => registerAsPartner,
+  removeSyndicateMember: () => removeSyndicateMember,
+  reorderSyndicateMembers: () => reorderSyndicateMembers,
+  resendSyndicateInvite: () => resendSyndicateInvite,
+  restoreSyndicateMember: () => restoreSyndicateMember,
+  revokeConnectedApp: () => revokeConnectedApp,
+  revokePartnerInvite: () => revokePartnerInvite,
+  testWebhookSubscription: () => testWebhookSubscription,
+  updateSyndicate: () => updateSyndicate,
+  updateSyndicateMember: () => updateSyndicateMember
+});
+
+// src/generated/client.gen.ts
+var import_client_fetch = require("@hey-api/client-fetch");
+var client = (0, import_client_fetch.createClient)((0, import_client_fetch.createConfig)());
+
+// src/generated/sdk.gen.ts
+var listOfferings = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/explore",
+    ...options
+  });
+};
+var getOffering = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/offerings/{external_id}",
+    ...options
+  });
+};
+var getCurrentUser = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/users/me",
+    ...options
+  });
+};
+var listInvestments = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/investments",
+    ...options
+  });
+};
+var listCampaigns = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns",
+    ...options
+  });
+};
+var listSyndicates = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates",
+    ...options
+  });
+};
+var getSyndicate = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}",
+    ...options
+  });
+};
+var updateSyndicate = (options) => {
+  return (options.client ?? client).patch({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var listSyndicateMembers = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members",
+    ...options
+  });
+};
+var inviteSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/invite",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var removeSyndicateMember = (options) => {
+  return (options.client ?? client).delete({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}",
+    ...options
+  });
+};
+var updateSyndicateMember = (options) => {
+  return (options.client ?? client).patch({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var approveSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/approve",
+    ...options
+  });
+};
+var hideSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/hide",
+    ...options
+  });
+};
+var promoteSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/promote",
+    ...options
+  });
+};
+var demoteSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/demote",
+    ...options
+  });
+};
+var restoreSyndicateMember = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/restore",
+    ...options
+  });
+};
+var resendSyndicateInvite = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/resend_invite",
+    ...options
+  });
+};
+var reorderSyndicateMembers = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/reorder",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var exportSyndicateMembersCsv = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/export_csv",
+    ...options
+  });
+};
+var listSyndicateDeals = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/deals",
+    ...options
+  });
+};
+var getSyndicateDeal = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/deals/{fundraise_id}",
+    ...options
+  });
+};
+var listSyndicateDealInvestors = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/deals/{fundraise_id}/investors",
+    ...options
+  });
+};
+var listSyndicateMemberInvestments = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/members/{member_id}/investments",
+    ...options
+  });
+};
+var getSyndicateStatistics = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/statistics",
+    ...options
+  });
+};
+var closeSyndicateDeal = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/deals/{fundraise_id}/close",
+    ...options
+  });
+};
+var finalizeSyndicateDeal = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/syndicates/{syndicate_id}/deals/{fundraise_id}/finalize",
+    ...options
+  });
+};
+var listIntents = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/intents",
+    ...options
+  });
+};
+var createIntent = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/intents",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var getIntent = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/intents/{intent_id}",
+    ...options
+  });
+};
+var listActivity = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/activity",
+    ...options
+  });
+};
+var listConnectedApps = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/connected-apps",
+    ...options
+  });
+};
+var revokeConnectedApp = (options) => {
+  return (options.client ?? client).delete({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/connected-apps/{app_id}",
+    ...options
+  });
+};
+var getAttributionStats = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/stats",
+    ...options
+  });
+};
+var listAttributedInvestments = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/investments",
+    ...options
+  });
+};
+var listWebhookSubscriptions = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks",
+    ...options
+  });
+};
+var createWebhookSubscription = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var deleteWebhookSubscription = (options) => {
+  return (options.client ?? client).delete({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks/{webhook_id}",
+    ...options
+  });
+};
+var getWebhookSubscription = (options) => {
+  return (options.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks/{webhook_id}",
+    ...options
+  });
+};
+var testWebhookSubscription = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks/{webhook_id}/test",
+    ...options
+  });
+};
+var regenerateWebhookSecret = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks/{webhook_id}/regenerate_secret",
+    ...options
+  });
+};
+var reactivateWebhookSubscription = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/campaigns/{campaign_id}/attribution/webhooks/{webhook_id}/reactivate",
+    ...options
+  });
+};
+var getAttributionMe = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/me",
+    ...options
+  });
+};
+var listAttributionCampaigns = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/campaigns",
+    ...options
+  });
+};
+var registerAsPartner = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/partners/register",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var listPartnerInvites = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/invites",
+    ...options
+  });
+};
+var createPartnerInvite = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/invites",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers
+    }
+  });
+};
+var revokePartnerInvite = (options) => {
+  return (options.client ?? client).delete({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/attribution/invites/{token}",
+    ...options
+  });
+};
+
+// src/client.ts
+var DEFAULT_API_BASE_URL = "https://api.wefunder.com/api/v2";
+var DEFAULT_API_VERSION = "2025-01-15";
+function modeForToken(token) {
+  if (token.startsWith("at_live_")) return "live";
+  if (token.startsWith("at_test_")) return "test";
+  return "unknown";
+}
+var Wefunder = class _Wefunder {
+  mode;
+  raw;
+  #client;
+  #tokens;
+  constructor(opts) {
+    const tokenSet = opts.tokens ?? (opts.accessToken ? { accessToken: opts.accessToken } : void 0);
+    if (!tokenSet) {
+      throw new Error("Wefunder: provide `accessToken` or `tokens`.");
+    }
+    this.mode = modeForToken(tokenSet.accessToken);
+    const reMint = opts.clientCredentials && opts.clientId && opts.clientSecret ? () => clientCredentialsGrant({
+      clientId: opts.clientId,
+      clientSecret: opts.clientSecret,
+      scopes: opts.clientCredentials.scopes,
+      oauthBaseUrl: opts.oauthBaseUrl,
+      tokenBaseUrl: opts.tokenBaseUrl,
+      fetch: opts.fetch,
+      now: opts.now
+    }) : void 0;
+    this.#tokens = new TokenManager({
+      tokens: tokenSet,
+      clientId: opts.clientId,
+      clientSecret: opts.clientSecret,
+      reMint,
+      oauthBaseUrl: opts.oauthBaseUrl,
+      tokenBaseUrl: opts.tokenBaseUrl,
+      onTokenRefresh: opts.onTokenRefresh,
+      store: opts.store,
+      fetch: opts.fetch,
+      now: opts.now
+    });
+    const wrappedFetch = createFetch({
+      tokenManager: this.#tokens,
+      fetch: opts.fetch,
+      now: opts.now,
+      sleep: opts.sleep,
+      random: opts.random,
+      retry: opts.retry
+    });
+    this.#client = (0, import_client_fetch2.createClient)({
+      baseUrl: opts.baseUrl ?? DEFAULT_API_BASE_URL,
+      headers: { "Wefunder-Version": opts.apiVersion ?? DEFAULT_API_VERSION },
+      auth: () => this.#tokens.getAccessToken(),
+      fetch: wrappedFetch
+    });
+    this.raw = this.#buildRaw();
+  }
+  /** Server-to-server: exchange client credentials for a token, then build a client. */
+  static async fromClientCredentials(opts) {
+    const tokens = await clientCredentialsGrant({
+      clientId: opts.clientId,
+      clientSecret: opts.clientSecret,
+      scopes: opts.scopes,
+      oauthBaseUrl: opts.oauthBaseUrl,
+      tokenBaseUrl: opts.tokenBaseUrl,
+      fetch: opts.fetch,
+      now: opts.now
+    });
+    return new _Wefunder({
+      tokens,
+      clientId: opts.clientId,
+      clientSecret: opts.clientSecret,
+      clientCredentials: { scopes: opts.scopes },
+      // enables auto-re-mint on expiry/401
+      oauthBaseUrl: opts.oauthBaseUrl,
+      tokenBaseUrl: opts.tokenBaseUrl,
+      apiVersion: opts.apiVersion,
+      baseUrl: opts.baseUrl,
+      fetch: opts.fetch,
+      now: opts.now
+    });
+  }
+  /** The live token set (e.g. to persist after construction). */
+  get tokens() {
+    return this.#tokens.current;
+  }
+  // ---- unwrap: turn the {data,error,response} result into data-or-throw ----
+  async #unwrap(p) {
+    const { data, error, response } = await p;
+    if (response && response.ok && error === void 0) return data;
+    const status = response?.status ?? 0;
+    const env = error ?? {};
+    throw new WefunderError({
+      status,
+      type: env.error?.type ?? "api_error",
+      message: env.error?.message ?? response?.statusText ?? "Request failed",
+      // X-Wf-Request-Id header is primary (present even on non-JSON edge errors).
+      requestId: requestIdFrom(response, env.error?.request_id ?? env.request_id),
+      details: env.error?.details,
+      remediation: env.error?.remediation
+    });
+  }
+  // Single-resource ops return a `{ data: Entity }` envelope; strip it for ergonomics.
+  async #unwrapData(p) {
+    const env = await this.#unwrap(p);
+    return env.data;
+  }
+  #buildRaw() {
+    const raw = {};
+    for (const [name, fn] of Object.entries(sdk_gen_exports)) {
+      raw[name] = (options) => fn({ ...options, client: this.#client });
+    }
+    return raw;
+  }
+  /**
+   * Unwrap any generated op result (incl. `wf.raw.*`) the way the ergonomic
+   * namespaces do: returns the response body on success, throws a typed
+   * `WefunderError` (with `request_id`) on failure. Lets `raw` callers keep the
+   * SDK's error handling. (Stress-test finding C.)
+   */
+  unwrap(p) {
+    return this.#unwrap(p);
+  }
+  // Generic page helper: forwards the endpoint's full query (cursor + documented
+  // params like `sort`), not just the cursor. (Stress-test finding B.)
+  #page(fn) {
+    return (query) => this.#unwrap(fn({ client: this.#client, query }));
+  }
+  // ---- resource namespaces (common GA paths) ----
+  users = {
+    me: () => this.#unwrapData(getCurrentUser({ client: this.#client }))
+  };
+  offerings = {
+    list: this.#page(listOfferings),
+    all: (query) => paginate((cursor) => this.offerings.list({ ...query, cursor })),
+    collect: (query) => collect((cursor) => this.offerings.list({ ...query, cursor })),
+    get: (externalId) => this.#unwrapData(
+      getOffering({ client: this.#client, path: { external_id: externalId } })
+    )
+  };
+  investments = {
+    list: this.#page(listInvestments),
+    all: () => paginate((cursor) => this.investments.list({ cursor })),
+    collect: () => collect((cursor) => this.investments.list({ cursor }))
+  };
+  campaigns = {
+    list: this.#page(listCampaigns),
+    all: () => paginate((cursor) => this.campaigns.list({ cursor })),
+    collect: () => collect((cursor) => this.campaigns.list({ cursor }))
+  };
+  syndicates = {
+    list: this.#page(listSyndicates),
+    all: () => paginate((cursor) => this.syndicates.list({ cursor })),
+    get: (id) => this.#unwrapData(getSyndicate({ client: this.#client, path: { id } }))
+  };
+  intents = {
+    list: this.#page(listIntents),
+    all: () => paginate((cursor) => this.intents.list({ cursor })),
+    get: (id) => this.#unwrapData(getIntent({ client: this.#client, path: { id } }))
+  };
+  attribution = {
+    me: () => this.#unwrapData(getAttributionMe({ client: this.#client }))
+  };
+};
+
+// src/webhooks.ts
+var import_node_crypto2 = require("crypto");
+var SIGNATURE_HEADER = "x-wefunder-signature";
+var TIMESTAMP_HEADER = "x-wefunder-timestamp";
+var EVENT_HEADER = "x-wefunder-event";
+var DELIVERY_ID_HEADER = "x-wefunder-delivery-id";
+function computeSignature(secret, timestamp, payload) {
+  const mac = (0, import_node_crypto2.createHmac)("sha256", secret).update(`${timestamp}.${payload}`).digest("hex");
+  return `sha256=${mac}`;
+}
+function constantTimeEqual(a, b) {
+  const ab = Buffer.from(a);
+  const bb = Buffer.from(b);
+  if (ab.length !== bb.length) return false;
+  return (0, import_node_crypto2.timingSafeEqual)(ab, bb);
+}
+function verifyWebhook(opts) {
+  const tolerance = opts.toleranceSeconds ?? 300;
+  const now = (opts.now ?? Date.now)();
+  const ts = Number(opts.timestamp);
+  if (!Number.isFinite(ts)) return false;
+  if (tolerance > 0 && Math.abs(now / 1e3 - ts) > tolerance) return false;
+  const expected = computeSignature(opts.secret, opts.timestamp, opts.payload);
+  return constantTimeEqual(opts.signature, expected);
+}
+function constructEvent(payload, headers, secret, opts) {
+  const get = (name) => {
+    if (headers instanceof Headers) return headers.get(name) ?? void 0;
+    const v = headers[name] ?? headers[name.toLowerCase()];
+    return Array.isArray(v) ? v[0] : v;
+  };
+  const signature = get(SIGNATURE_HEADER);
+  const timestamp = get(TIMESTAMP_HEADER);
+  if (!signature || !timestamp) {
+    throw new Error("Missing X-Wefunder-Signature or X-Wefunder-Timestamp header");
+  }
+  const ok = verifyWebhook({
+    payload,
+    signature,
+    timestamp,
+    secret,
+    toleranceSeconds: opts?.toleranceSeconds,
+    now: opts?.now
+  });
+  if (!ok) throw new Error("Webhook signature verification failed");
+  return {
+    event: get(EVENT_HEADER) ?? "",
+    deliveryId: get(DELIVERY_ID_HEADER) ?? "",
+    timestamp: Number(timestamp),
+    data: JSON.parse(payload)
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_API_BASE_URL,
+  DEFAULT_API_VERSION,
+  DEFAULT_AUTHORIZE_BASE_URL,
+  DEFAULT_OAUTH_BASE_URL,
+  DEFAULT_TOKEN_BASE_URL,
+  DELIVERY_ID_HEADER,
+  EVENT_HEADER,
+  REQUEST_ID_HEADER,
+  SIGNATURE_HEADER,
+  TIMESTAMP_HEADER,
+  Wefunder,
+  WefunderAuthError,
+  WefunderError,
+  clientCredentialsGrant,
+  collect,
+  constructEvent,
+  createAuthorizationUrl,
+  exchangeCode,
+  generatePkce,
+  modeForToken,
+  paginate,
+  refreshToken,
+  verifyWebhook
+});
+//# sourceMappingURL=index.cjs.map