@yellesoftware/meridian-ads 0.0.0-stage → 0.1.0

package/dist/client.d.ts

@@ -0,0 +1,20 @@
+import type { Decision, MeridianAdsOptions, RequestOptions, TraitMap } from "./types.js";
+export declare class MeridianAds {
+    #private;
+    readonly appKey: string;
+    readonly baseUrl: string;
+    constructor(options: MeridianAdsOptions);
+    /**
+     * Request a fill for a placement. Returns null on HTTP 204 (no paid or house creative).
+     * Does not record an impression; call {@link render} or {@link recordImpression} when shown.
+     */
+    serve(placement: string, userKey: string, context?: TraitMap, options?: RequestOptions): Promise<Decision | null>;
+    /** Fire POST /v1/events with the signed impression token. Call this when the creative is shown. */
+    recordImpression(decision: Decision | string, options?: RequestOptions): Promise<void>;
+    /**
+     * Mount the creative into `target` and fire the impression once it is in the DOM.
+     * The click target is the decision click_url (adserver 302). Never puts user_key on the link.
+     */
+    render(target: HTMLElement, decision: Decision, options?: RequestOptions): Promise<HTMLElement>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACT,MAAM,YAAY,CAAA;AAQnB,qBAAa,WAAW;;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;gBAMZ,OAAO,EAAE,kBAAkB;IAgBvC;;;OAGG;IACG,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAuB3B,mGAAmG;IAC7F,gBAAgB,CACpB,QAAQ,EAAE,QAAQ,GAAG,MAAM,EAC3B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;IAgBhB;;;OAGG;IACG,MAAM,CACV,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,WAAW,CAAC;CA6BxB"}

package/dist/client.js

@@ -0,0 +1,152 @@
+import { mountCreative } from "./render.js";
+import { AuthError, InvalidRequestError, RateLimitError, ServeError, } from "./errors.js";
+import { secretBytes, signRequest, unixSeconds } from "./hmac.js";
+import { DEFAULT_SERVE_URL, DECISION_PATH, EVENTS_PATH, MAX_CONTEXT_BYTES, } from "./types.js";
+export class MeridianAds {
+    appKey;
+    baseUrl;
+    #secret;
+    #fetch;
+    #now;
+    constructor(options) {
+        const appKey = options.appKey.trim();
+        const secret = options.secret.trim();
+        if (!appKey) {
+            throw new InvalidRequestError("appKey is required");
+        }
+        if (!secret) {
+            throw new InvalidRequestError("secret is required");
+        }
+        this.appKey = appKey;
+        this.baseUrl = trimSlash(options.baseUrl ?? DEFAULT_SERVE_URL);
+        this.#secret = secretBytes(secret);
+        this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
+        this.#now = options.now ?? Date.now;
+    }
+    /**
+     * Request a fill for a placement. Returns null on HTTP 204 (no paid or house creative).
+     * Does not record an impression; call {@link render} or {@link recordImpression} when shown.
+     */
+    async serve(placement, userKey, context, options) {
+        const place = placement.trim();
+        const user = userKey.trim();
+        if (!place || !user) {
+            throw new InvalidRequestError("placement and userKey are required");
+        }
+        const payload = {
+            placement: place,
+            user_key: user,
+        };
+        if (context !== undefined) {
+            assertContextSize(context);
+            payload.context = context;
+        }
+        const body = JSON.stringify(payload);
+        const res = await this.#signedPost(DECISION_PATH, body, options);
+        if (res.status === 204) {
+            return null;
+        }
+        await throwIfNotOk(res);
+        return (await res.json());
+    }
+    /** Fire POST /v1/events with the signed impression token. Call this when the creative is shown. */
+    async recordImpression(decision, options) {
+        const token = typeof decision === "string"
+            ? decision.trim()
+            : decision.creative.impression_token.trim();
+        if (!token) {
+            throw new InvalidRequestError("impression token is required");
+        }
+        const body = JSON.stringify({ token, event: "impression" });
+        const res = await this.#signedPost(EVENTS_PATH, body, options);
+        if (res.status === 204) {
+            return;
+        }
+        await throwIfNotOk(res);
+    }
+    /**
+     * Mount the creative into `target` and fire the impression once it is in the DOM.
+     * The click target is the decision click_url (adserver 302). Never puts user_key on the link.
+     */
+    async render(target, decision, options) {
+        const root = mountCreative(target, decision);
+        await this.recordImpression(decision, options);
+        return root;
+    }
+    async #signedPost(path, body, options) {
+        const ts = unixSeconds(this.#now());
+        const signature = await signRequest(this.#secret, ts, "POST", path, body);
+        const headers = {
+            "Content-Type": "application/json",
+            "X-App-Key": this.appKey,
+            "X-Timestamp": ts,
+            "X-Signature": signature,
+        };
+        const init = {
+            method: "POST",
+            headers,
+            body,
+        };
+        if (options?.signal) {
+            init.signal = options.signal;
+        }
+        return this.#fetch(`${this.baseUrl}${path}`, init);
+    }
+}
+function trimSlash(url) {
+    return url.replace(/\/+$/, "");
+}
+function assertContextSize(context) {
+    let encoded;
+    try {
+        encoded = JSON.stringify(context);
+    }
+    catch (err) {
+        throw new InvalidRequestError(`context is not JSON-serializable: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (new TextEncoder().encode(encoded).length > MAX_CONTEXT_BYTES) {
+        throw new InvalidRequestError(`context exceeds ${MAX_CONTEXT_BYTES} bytes`);
+    }
+}
+async function throwIfNotOk(res) {
+    if (res.ok) {
+        return;
+    }
+    const body = await res.text();
+    const message = errorMessage(body) || res.statusText || `HTTP ${res.status}`;
+    if (res.status === 401) {
+        throw new AuthError(message, 401, body);
+    }
+    if (res.status === 429) {
+        const retry = retryAfterSeconds(res);
+        throw new RateLimitError(message, retry, body);
+    }
+    if (res.status === 400) {
+        throw new InvalidRequestError(message, 400, body);
+    }
+    throw new ServeError(message, res.status, body);
+}
+function errorMessage(body) {
+    if (!body) {
+        return "";
+    }
+    try {
+        const parsed = JSON.parse(body);
+        if (typeof parsed.error === "string") {
+            return parsed.error;
+        }
+    }
+    catch {
+        // not JSON
+    }
+    return body;
+}
+function retryAfterSeconds(res) {
+    const raw = res.headers.get("Retry-After");
+    if (!raw) {
+        return undefined;
+    }
+    const n = Number.parseInt(raw, 10);
+    return Number.isFinite(n) ? n : undefined;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAOjE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,MAAM,OAAO,WAAW;IACb,MAAM,CAAQ;IACd,OAAO,CAAQ;IAEf,OAAO,CAAY;IACnB,MAAM,CAAc;IACpB,IAAI,CAAc;IAE3B,YAAY,OAA2B;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,SAAiB,EACjB,OAAe,EACf,OAAkB,EAClB,OAAwB;QAExB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,CAAC,CAAA;QACrE,CAAC;QACD,MAAM,OAAO,GAA4B;YACvC,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;SACf,CAAA;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,iBAAiB,CAAC,OAAO,CAAC,CAAA;YAC1B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAA;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAChE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAa,CAAA;IACvC,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,gBAAgB,CACpB,QAA2B,EAC3B,OAAwB;QAExB,MAAM,KAAK,GACT,OAAO,QAAQ,KAAK,QAAQ;YAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,mBAAmB,CAAC,8BAA8B,CAAC,CAAA;QAC/D,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAM;QACR,CAAC;QACD,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,MAAmB,EACnB,QAAkB,EAClB,OAAwB;QAExB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAY,EACZ,IAAY,EACZ,OAAwB;QAExB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACnC,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACzE,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,aAAa,EAAE,EAAE;YACjB,aAAa,EAAE,SAAS;SACzB,CAAA;QACD,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;SACL,CAAA;QACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;IACpD,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiB;IAC1C,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxF,CAAA;IACH,CAAC;IACD,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,iBAAiB,QAAQ,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAa;IACvC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAA;QACtD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAa;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3C,CAAC"}

package/dist/creative.d.ts

@@ -0,0 +1,25 @@
+import type { Decision, DecisionCreative } from "./types.js";
+/** Click-through URL from a decision. Always the adserver 302 path, never the landing URL. */
+export declare function clickUrl(decision: Decision): string;
+export declare function impressionToken(decision: Decision): string;
+export interface RenderedCreative {
+    href: string;
+    format: DecisionCreative["format"];
+    house: boolean;
+    campaignId: string;
+    image?: {
+        src: string;
+        alt: string;
+        width?: number;
+        height?: number;
+    };
+    native?: {
+        headline: string;
+        body?: string;
+        sponsor?: string;
+        cta?: string;
+    };
+}
+/** Pure description used by the browser renderer. Clicks stay on click_url. */
+export declare function describeCreative(decision: Decision): RenderedCreative;
+//# sourceMappingURL=creative.d.ts.map

package/dist/creative.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"creative.d.ts","sourceRoot":"","sources":["../src/creative.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAE5D,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAEnD;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAClC,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,MAAM,CAAC,EAAE;QACP,QAAQ,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,CA2BrE"}

package/dist/creative.js

@@ -0,0 +1,42 @@
+/** Click-through URL from a decision. Always the adserver 302 path, never the landing URL. */
+export function clickUrl(decision) {
+    return decision.creative.click_url;
+}
+export function impressionToken(decision) {
+    return decision.creative.impression_token;
+}
+/** Pure description used by the browser renderer. Clicks stay on click_url. */
+export function describeCreative(decision) {
+    const creative = decision.creative;
+    const out = {
+        href: creative.click_url,
+        format: creative.format,
+        house: decision.house,
+        campaignId: decision.campaign_id,
+    };
+    if (creative.format === "image" && creative.image) {
+        const image = {
+            src: creative.image.cdn_url ?? "",
+            alt: creative.image.alt,
+        };
+        if (creative.image.width !== undefined)
+            image.width = creative.image.width;
+        if (creative.image.height !== undefined)
+            image.height = creative.image.height;
+        out.image = image;
+    }
+    if (creative.format === "native_text" && creative.native) {
+        const native = {
+            headline: creative.native.headline,
+        };
+        if (creative.native.body !== undefined)
+            native.body = creative.native.body;
+        if (creative.native.sponsor !== undefined)
+            native.sponsor = creative.native.sponsor;
+        if (creative.native.cta !== undefined)
+            native.cta = creative.native.cta;
+        out.native = native;
+    }
+    return out;
+}
+//# sourceMappingURL=creative.js.map

package/dist/creative.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"creative.js","sourceRoot":"","sources":["../src/creative.ts"],"names":[],"mappings":"AAEA,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,QAAkB;IACzC,OAAO,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAkB;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAA;AAC3C,CAAC;AAgBD,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAClC,MAAM,GAAG,GAAqB;QAC5B,IAAI,EAAE,QAAQ,CAAC,SAAS;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,WAAW;KACjC,CAAA;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,KAAK,GAA2C;YACpD,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE;YACjC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG;SACxB,CAAA;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAA;QAC1E,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;QAC7E,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,MAAM,GAA4C;YACtD,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;SACnC,CAAA;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;QAC1E,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAA;QACnF,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAA;QACvE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAA;IACrB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,16 @@
+export declare class ServeError extends Error {
+    readonly status: number;
+    readonly body: string;
+    constructor(message: string, status: number, body?: string);
+}
+export declare class AuthError extends ServeError {
+    constructor(message?: string, status?: number, body?: string);
+}
+export declare class RateLimitError extends ServeError {
+    readonly retryAfterSeconds: number | undefined;
+    constructor(message?: string, retryAfterSeconds?: number, body?: string);
+}
+export declare class InvalidRequestError extends ServeError {
+    constructor(message: string, status?: number, body?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;gBAET,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAK;CAMvD;AAED,qBAAa,SAAU,SAAQ,UAAU;gBAC3B,OAAO,SAAiB,EAAE,MAAM,SAAM,EAAE,IAAI,SAAK;CAI9D;AAED,qBAAa,cAAe,SAAQ,UAAU;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAA;gBAElC,OAAO,SAAiB,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,SAAK;CAK5E;AAED,qBAAa,mBAAoB,SAAQ,UAAU;gBACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAM,EAAE,IAAI,SAAK;CAIrD"}

package/dist/errors.js

@@ -0,0 +1,31 @@
+export class ServeError extends Error {
+    status;
+    body;
+    constructor(message, status, body = "") {
+        super(message);
+        this.name = "ServeError";
+        this.status = status;
+        this.body = body;
+    }
+}
+export class AuthError extends ServeError {
+    constructor(message = "unauthorized", status = 401, body = "") {
+        super(message, status, body);
+        this.name = "AuthError";
+    }
+}
+export class RateLimitError extends ServeError {
+    retryAfterSeconds;
+    constructor(message = "rate limited", retryAfterSeconds, body = "") {
+        super(message, 429, body);
+        this.name = "RateLimitError";
+        this.retryAfterSeconds = retryAfterSeconds;
+    }
+}
+export class InvalidRequestError extends ServeError {
+    constructor(message, status = 400, body = "") {
+        super(message, status, body);
+        this.name = "InvalidRequestError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,MAAM,CAAQ;IACd,IAAI,CAAQ;IAErB,YAAY,OAAe,EAAE,MAAc,EAAE,IAAI,GAAG,EAAE;QACpD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAED,MAAM,OAAO,SAAU,SAAQ,UAAU;IACvC,YAAY,OAAO,GAAG,cAAc,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE;QAC3D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;IACzB,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,UAAU;IACnC,iBAAiB,CAAoB;IAE9C,YAAY,OAAO,GAAG,cAAc,EAAE,iBAA0B,EAAE,IAAI,GAAG,EAAE;QACzE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;QAC5B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACjD,YAAY,OAAe,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE;QAClD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF"}

package/dist/hmac.d.ts

@@ -0,0 +1,8 @@
+/** Decode a console hex secret, or UTF-8 bytes for test / raw secrets. */
+export declare function secretBytes(secret: string): Uint8Array;
+/** OpenAPI canonical string: `{unix_timestamp}.{METHOD}.{path}.{raw_body}` */
+export declare function canonicalHMACString(unixTS: string, method: string, path: string, body: string): string;
+/** HMAC-SHA256 hex digest of the canonical serve string. */
+export declare function signRequest(secret: Uint8Array | string, unixTS: string, method: string, path: string, body: string): Promise<string>;
+export declare function unixSeconds(nowMs: number): string;
+//# sourceMappingURL=hmac.d.ts.map

package/dist/hmac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.d.ts","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AAEA,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAUtD;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,MAAM,CAER;AAkBD,4DAA4D;AAC5D,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,GAAG,MAAM,EAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/hmac.js

@@ -0,0 +1,43 @@
+const HEX = /^[0-9a-fA-F]+$/;
+/** Decode a console hex secret, or UTF-8 bytes for test / raw secrets. */
+export function secretBytes(secret) {
+    const trimmed = secret.trim();
+    if (trimmed.length >= 2 && trimmed.length % 2 === 0 && HEX.test(trimmed)) {
+        const out = new Uint8Array(trimmed.length / 2);
+        for (let i = 0; i < out.length; i++) {
+            out[i] = Number.parseInt(trimmed.slice(i * 2, i * 2 + 2), 16);
+        }
+        return out;
+    }
+    return new TextEncoder().encode(trimmed);
+}
+/** OpenAPI canonical string: `{unix_timestamp}.{METHOD}.{path}.{raw_body}` */
+export function canonicalHMACString(unixTS, method, path, body) {
+    return `${unixTS}.${method}.${path}.${body}`;
+}
+function bytesToHex(bytes) {
+    let hex = "";
+    for (const b of bytes) {
+        hex += b.toString(16).padStart(2, "0");
+    }
+    return hex;
+}
+function requireSubtle() {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle) {
+        throw new Error("Web Crypto is required (Node.js 18+ or a modern browser)");
+    }
+    return subtle;
+}
+/** HMAC-SHA256 hex digest of the canonical serve string. */
+export async function signRequest(secret, unixTS, method, path, body) {
+    const keyBytes = typeof secret === "string" ? secretBytes(secret) : secret;
+    const subtle = requireSubtle();
+    const key = await subtle.importKey("raw", keyBytes, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const sig = await subtle.sign("HMAC", key, new TextEncoder().encode(canonicalHMACString(unixTS, method, path, body)));
+    return bytesToHex(new Uint8Array(sig));
+}
+export function unixSeconds(nowMs) {
+    return String(Math.floor(nowMs / 1000));
+}
+//# sourceMappingURL=hmac.js.map

package/dist/hmac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac.js","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AAAA,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAE5B,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAC1C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,MAAc,EACd,IAAY,EACZ,IAAY;IAEZ,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAA2B,EAC3B,MAAc,EACd,MAAc,EACd,IAAY,EACZ,IAAY;IAEZ,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC1E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,QAAwB,EACxB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,MAAM,EACN,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAC1E,CAAA;IACD,OAAO,UAAU,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAA;AACzC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { MeridianAds } from "./client.js";
+export { clickUrl, describeCreative, impressionToken, } from "./creative.js";
+export { AuthError, InvalidRequestError, RateLimitError, ServeError, } from "./errors.js";
+export { canonicalHMACString, secretBytes, signRequest } from "./hmac.js";
+export { mountCreative } from "./render.js";
+export type { CreativeFormat, Decision, DecisionCreative, ImageAsset, MeridianAdsOptions, NativeCopy, RequestOptions, TraitMap, } from "./types.js";
+export type { RenderedCreative } from "./creative.js";
+export { DEFAULT_SERVE_URL, DECISION_PATH, EVENTS_PATH, MAX_CONTEXT_BYTES, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,YAAY,EACV,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { MeridianAds } from "./client.js";
+export { clickUrl, describeCreative, impressionToken, } from "./creative.js";
+export { AuthError, InvalidRequestError, RateLimitError, ServeError, } from "./errors.js";
+export { canonicalHMACString, secretBytes, signRequest } from "./hmac.js";
+export { mountCreative } from "./render.js";
+export { DEFAULT_SERVE_URL, DECISION_PATH, EVENTS_PATH, MAX_CONTEXT_BYTES, } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,eAAe,GAChB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAY3C,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAA"}

package/dist/render.d.ts

@@ -0,0 +1,7 @@
+import type { Decision } from "./types.js";
+/**
+ * Insert a banner or native unit into `target`.
+ * Clicks use the decision click_url so the adserver can 302 to the landing page.
+ */
+export declare function mountCreative(target: HTMLElement, decision: Decision): HTMLElement;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAI1C;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,WAAW,CAwDlF"}

package/dist/render.js

@@ -0,0 +1,63 @@
+import { describeCreative } from "./creative.js";
+const ROOT_CLASS = "meridian-ads";
+/**
+ * Insert a banner or native unit into `target`.
+ * Clicks use the decision click_url so the adserver can 302 to the landing page.
+ */
+export function mountCreative(target, decision) {
+    if (typeof document === "undefined") {
+        throw new Error("render() requires a browser document");
+    }
+    const spec = describeCreative(decision);
+    const anchor = document.createElement("a");
+    anchor.className = ROOT_CLASS;
+    anchor.href = spec.href;
+    anchor.rel = "noopener noreferrer";
+    anchor.target = "_blank";
+    anchor.dataset.format = spec.format;
+    anchor.dataset.house = spec.house ? "true" : "false";
+    anchor.dataset.campaignId = spec.campaignId;
+    if (spec.image) {
+        const img = document.createElement("img");
+        img.className = `${ROOT_CLASS}__image`;
+        img.src = spec.image.src;
+        img.alt = spec.image.alt;
+        if (spec.image.width) {
+            img.width = spec.image.width;
+        }
+        if (spec.image.height) {
+            img.height = spec.image.height;
+        }
+        anchor.append(img);
+    }
+    else if (spec.native) {
+        const unit = document.createElement("span");
+        unit.className = `${ROOT_CLASS}__native`;
+        if (spec.native.sponsor) {
+            const sponsor = document.createElement("span");
+            sponsor.className = `${ROOT_CLASS}__sponsor`;
+            sponsor.textContent = spec.native.sponsor;
+            unit.append(sponsor);
+        }
+        const headline = document.createElement("span");
+        headline.className = `${ROOT_CLASS}__headline`;
+        headline.textContent = spec.native.headline;
+        unit.append(headline);
+        if (spec.native.body) {
+            const body = document.createElement("span");
+            body.className = `${ROOT_CLASS}__body`;
+            body.textContent = spec.native.body;
+            unit.append(body);
+        }
+        if (spec.native.cta) {
+            const cta = document.createElement("span");
+            cta.className = `${ROOT_CLASS}__cta`;
+            cta.textContent = spec.native.cta;
+            unit.append(cta);
+        }
+        anchor.append(unit);
+    }
+    target.replaceChildren(anchor);
+    return anchor;
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAGhD,MAAM,UAAU,GAAG,cAAc,CAAA;AAEjC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,QAAkB;IACnE,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,CAAC,SAAS,GAAG,UAAU,CAAA;IAC7B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACvB,MAAM,CAAC,GAAG,GAAG,qBAAqB,CAAA;IAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAA;IACxB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACnC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IACpD,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IAE3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QACzC,GAAG,CAAC,SAAS,GAAG,GAAG,UAAU,SAAS,CAAA;QACtC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAA;QACxB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAA;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACrB,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAA;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAA;QAChC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,SAAS,GAAG,GAAG,UAAU,UAAU,CAAA;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,UAAU,WAAW,CAAA;YAC5C,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;YACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC/C,QAAQ,CAAC,SAAS,GAAG,GAAG,UAAU,YAAY,CAAA;QAC9C,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACrB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,CAAC,SAAS,GAAG,GAAG,UAAU,QAAQ,CAAA;YACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC1C,GAAG,CAAC,SAAS,GAAG,GAAG,UAAU,OAAO,CAAA;YACpC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,55 @@
+/** Trait map merged into the user profile (last-write-wins per key). Max 8KB JSON. */
+export type TraitMap = Record<string, unknown>;
+export type CreativeFormat = "image" | "native_text";
+export interface ImageAsset {
+    object_key: string;
+    cdn_url?: string;
+    alt: string;
+    width?: number;
+    height?: number;
+    mime: "image/jpeg" | "image/png" | "image/webp" | string;
+    bytes?: number;
+}
+export interface NativeCopy {
+    headline: string;
+    body?: string;
+    sponsor?: string;
+    cta?: string;
+}
+export interface DecisionCreative {
+    id: string;
+    format: CreativeFormat;
+    image?: ImageAsset;
+    native?: NativeCopy;
+    /** GET this URL; the adserver records the click and 302s to the landing page. */
+    click_url: string;
+    impression_token: string;
+}
+/** Filled serve result. HTTP 204 maps to null in the SDK. */
+export interface Decision {
+    campaign_id: string;
+    creative: DecisionCreative;
+    house: boolean;
+}
+export interface RequestOptions {
+    signal?: AbortSignal;
+}
+export interface MeridianAdsOptions {
+    /** Public app key prefix sent as X-App-Key (for example mk_live_...). */
+    appKey: string;
+    /**
+     * HMAC secret shown once when the key is created.
+     * Console values are hex; other strings are signed as UTF-8 bytes.
+     */
+    secret: string;
+    /** Serve origin. Defaults to https://serve.meridianads.tech. */
+    baseUrl?: string;
+    fetch?: typeof fetch;
+    /** Unix-ms clock. Injected in tests. */
+    now?: () => number;
+}
+export declare const DEFAULT_SERVE_URL = "https://serve.meridianads.tech";
+export declare const MAX_CONTEXT_BYTES: number;
+export declare const DECISION_PATH = "/v1/decision";
+export declare const EVENTS_PATH = "/v1/events";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAE9C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,aAAa,CAAA;AAEpD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,CAAA;IACxD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,6DAA6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,wCAAwC;IACxC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,eAAO,MAAM,iBAAiB,mCAAmC,CAAA;AACjE,eAAO,MAAM,iBAAiB,QAAW,CAAA;AACzC,eAAO,MAAM,aAAa,iBAAiB,CAAA;AAC3C,eAAO,MAAM,WAAW,eAAe,CAAA"}

package/dist/types.js

@@ -0,0 +1,5 @@
+export const DEFAULT_SERVE_URL = "https://serve.meridianads.tech";
+export const MAX_CONTEXT_BYTES = 8 * 1024;
+export const DECISION_PATH = "/v1/decision";
+export const EVENTS_PATH = "/v1/events";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA0DA,MAAM,CAAC,MAAM,iBAAiB,GAAG,gCAAgC,CAAA;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAA;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAA;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAA"}

package/package.json

@@ -1,6 +1,53 @@
 {
   "name": "@yellesoftware/meridian-ads",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Meridian Ads serving SDK for Node.js and browsers. ESM and CommonJS. Product of Yelle Software.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/cjs/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/cjs/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && node ./scripts/emit-cjs.mjs",
+    "test:entries": "node --test test/package-entry.test.mjs",
+    "test": "tsx --test test/hmac.test.ts test/client.test.ts test/creative.test.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "keywords": [
+    "meridian-ads",
+    "ads",
+    "sdk",
+    "yelle-software"
+  ],
+  "author": "Yelle Software",
+  "homepage": "https://meridianads.tech",
+  "repository": {
+    "type": "git",
+    "url": "https://git.yelle.software/yelle/saas/meridian-ads.git",
+    "directory": "sdks/typescript"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "@types/node": "^24.3.0",
+    "tsx": "^4.20.5",
+    "typescript": "^5.9.3"
+  }
+}