@zoplio/sdk-js 0.2.0

package/README.md

@@ -0,0 +1,107 @@
+# @zoplio/sdk-js
+
+Official Zoplio Node.js/TypeScript SDK for the [Zoplio API v1](../../docs/quickstart.md). MIT licensed.
+
+Zoplio schedules meetings for you: you say who and roughly when, Zoplio negotiates with every participant over WhatsApp/email and confirms a slot.
+
+Requires Node.js >= 18 (uses the global `fetch`).
+
+## Install
+
+Not yet published to npm — consumed from this monorepo. Build with `npm run build` in this package.
+
+## Usage
+
+```ts
+import { ZoplioClient, ZoplioApiError } from '@zoplio/sdk-js';
+
+const zoplio = new ZoplioClient({
+  apiKey: process.env.ZOPLIO_API_KEY!, // zpl_...
+  // baseUrl: 'https://api.zoplio.com'  (default)
+});
+
+// Create a meeting — Zoplio reaches out to participants and negotiates.
+const created = await zoplio.scheduleMeeting(
+  {
+    title: 'Intro call',
+    durationMinutes: 30,
+    participants: [
+      { email: 'petr@example.com', name: 'Petr' },
+      { phone: '+420777123456', name: 'Jana' },
+    ],
+    preferredDate: '2026-06-15',
+    preferredTime: '14:00',
+    timezone: 'Europe/Prague',
+  },
+  { idempotencyKey: 'order-42-intro-call' }, // optional, safe retries
+);
+console.log(created.meetingId, created.status, created.proposedSlots);
+
+// Poll status (or use webhooks instead).
+const meeting = await zoplio.getMeeting(created.meetingId);
+
+// List / reschedule / cancel.
+await zoplio.listMeetings({ status: 'confirmed', limit: 10 });
+await zoplio.rescheduleMeeting(created.meetingId, {
+  preferredDate: '2026-06-16',
+  preferredTime: '10:00',
+  timezone: 'Europe/Prague',
+});
+await zoplio.cancelMeeting(created.meetingId);
+```
+
+## Errors
+
+Every non-2xx response throws `ZoplioApiError` with the contract envelope:
+
+```ts
+try {
+  await zoplio.getMeeting('nope');
+} catch (err) {
+  if (err instanceof ZoplioApiError) {
+    err.status;  // 404
+    err.code;    // 'not_found' | 'unauthorized' | 'rate_limited' | 'validation_failed' | 'conflict' | 'upstream_error'
+    err.message; // human-readable
+    err.details; // [{ field, message }] on validation_failed
+  }
+}
+```
+
+## Webhooks
+
+```ts
+// Subscribe — the secret is returned exactly once.
+const hook = await zoplio.createWebhook({
+  url: 'https://example.com/zoplio-hook',
+  events: ['meeting.confirmed', 'meeting.cancelled'],
+});
+saveSecret(hook.secret); // whsec_...
+
+await zoplio.listWebhooks();
+await zoplio.deleteWebhook(hook.id);
+```
+
+Verify deliveries with the static helper — pass the RAW request body:
+
+```ts
+import express from 'express';
+
+app.post('/zoplio-hook', express.raw({ type: 'application/json' }), (req, res) => {
+  const ok = ZoplioClient.verifyWebhookSignature(
+    req.body,                                  // raw Buffer
+    req.header('X-Zoplio-Signature') ?? '',
+    process.env.ZOPLIO_WEBHOOK_SECRET!,        // whsec_...
+  );
+  if (!ok) return res.status(401).end();
+  const { event, payload, timestamp } = JSON.parse(req.body.toString('utf8'));
+  // event also arrives in the X-Zoplio-Event header
+  res.status(200).end();
+});
+```
+
+## Development
+
+```bash
+npm run typecheck   # tsc --noEmit
+npm run build       # emit dist/
+```

package/dist/client.d.ts

@@ -0,0 +1,91 @@
+import { ApiErrorCode, CancelMeetingResult, CreateWebhookParams, DeleteWebhookResult, FieldDetail, ListMeetingsParams, ListMeetingsResult, ListWebhooksResult, MeetingDetail, RescheduleMeetingParams, RescheduleMeetingResult, ScheduleMeetingOptions, ScheduleMeetingParams, ScheduleMeetingResult, WebhookCreated, ZoplioConfig } from './types';
+/**
+ * Error thrown for every non-2xx API response. Carries the contract error
+ * envelope: `{ error: { code, message, details? } }`.
+ */
+export declare class ZoplioApiError extends Error {
+    /** Contract error code, e.g. `validation_failed`, `rate_limited`. */
+    readonly code: ApiErrorCode;
+    /** HTTP status of the response. */
+    readonly status: number;
+    /** Per-field details on `validation_failed` errors. */
+    readonly details?: FieldDetail[];
+    constructor(status: number, code: ApiErrorCode, message: string, details?: FieldDetail[]);
+}
+/**
+ * Client for the Zoplio public API v1.
+ *
+ * ```ts
+ * const zoplio = new ZoplioClient({ apiKey: process.env.ZOPLIO_API_KEY! });
+ * const { meetingId } = await zoplio.scheduleMeeting({
+ *   title: 'Intro call',
+ *   participants: [{ email: 'petr@example.com' }],
+ * });
+ * ```
+ *
+ * Requires a `fetch` global (Node.js >= 18).
+ */
+export declare class ZoplioClient {
+    private readonly apiKey;
+    private readonly baseUrl;
+    constructor(config: ZoplioConfig);
+    private request;
+    /**
+     * Create a meeting and start negotiating with the participants.
+     * `POST /v1/meetings`
+     */
+    scheduleMeeting(params: ScheduleMeetingParams, options?: ScheduleMeetingOptions): Promise<ScheduleMeetingResult>;
+    /**
+     * Fetch one meeting you organize, with per-participant status.
+     * `GET /v1/meetings/:id`
+     */
+    getMeeting(meetingId: string): Promise<MeetingDetail>;
+    /**
+     * List meetings you organize, newest first.
+     * `GET /v1/meetings?status=&limit=`
+     */
+    listMeetings(params?: ListMeetingsParams): Promise<ListMeetingsResult>;
+    /**
+     * Cancel a meeting (idempotent — cancelling twice still returns `cancelled`).
+     * `POST /v1/meetings/:id/cancel`
+     */
+    cancelMeeting(meetingId: string): Promise<CancelMeetingResult>;
+    /**
+     * Propose a new exact date+time to all participants.
+     * `POST /v1/meetings/:id/reschedule`
+     *
+     * Throws `ZoplioApiError` with code `conflict` when the requested time
+     * collides with a participant's availability, when the negotiation state
+     * does not allow re-proposing, or when the negotiation ran out of rounds -
+     * in that last case the meeting has been cancelled and every participant
+     * told. Throws code `validation_failed` when the requested time is already
+     * in the past; nothing changed and nobody was contacted.
+     */
+    rescheduleMeeting(meetingId: string, params: RescheduleMeetingParams): Promise<RescheduleMeetingResult>;
+    /**
+     * Subscribe a URL to meeting lifecycle events. The returned `secret`
+     * (whsec_...) is shown exactly once — store it to verify deliveries.
+     * `POST /v1/webhooks`
+     */
+    createWebhook(params: CreateWebhookParams): Promise<WebhookCreated>;
+    /**
+     * List your webhook subscriptions (without secrets).
+     * `GET /v1/webhooks`
+     */
+    listWebhooks(): Promise<ListWebhooksResult>;
+    /**
+     * Delete one of your webhook subscriptions.
+     * `DELETE /v1/webhooks/:id`
+     */
+    deleteWebhook(webhookId: string): Promise<DeleteWebhookResult>;
+    /**
+     * Verify a webhook delivery: constant-time comparison of the
+     * `X-Zoplio-Signature` header against HMAC-SHA256(secret, rawBody),
+     * hex-encoded — exactly how Zoplio signs deliveries.
+     *
+     * Pass the RAW request body bytes/string (before any JSON parsing —
+     * re-serializing the parsed body may not be byte-identical).
+     */
+    static verifyWebhookSignature(rawBody: string | Uint8Array, signatureHeader: string, secret: string): boolean;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;gBAErB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE;CAOzF;AAMD;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,YAAY;YAQlB,OAAO;IAqCrB;;;OAGG;IACG,eAAe,CACnB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAOjC;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3D;;;OAGG;IACG,YAAY,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQhF;;;OAGG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIpE;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,CAAC;IAMnC;;;;OAIG;IACG,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAIzE;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAIjD;;;OAGG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIpE;;;;;;;OAOG;IACH,MAAM,CAAC,sBAAsB,CAC3B,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,OAAO;CASX"}

package/dist/client.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZoplioClient = exports.ZoplioApiError = void 0;
+const crypto_1 = require("crypto");
+/**
+ * Error thrown for every non-2xx API response. Carries the contract error
+ * envelope: `{ error: { code, message, details? } }`.
+ */
+class ZoplioApiError extends Error {
+    /** Contract error code, e.g. `validation_failed`, `rate_limited`. */
+    code;
+    /** HTTP status of the response. */
+    status;
+    /** Per-field details on `validation_failed` errors. */
+    details;
+    constructor(status, code, message, details) {
+        super(message);
+        this.name = 'ZoplioApiError';
+        this.status = status;
+        this.code = code;
+        this.details = details;
+    }
+}
+exports.ZoplioApiError = ZoplioApiError;
+/**
+ * Client for the Zoplio public API v1.
+ *
+ * ```ts
+ * const zoplio = new ZoplioClient({ apiKey: process.env.ZOPLIO_API_KEY! });
+ * const { meetingId } = await zoplio.scheduleMeeting({
+ *   title: 'Intro call',
+ *   participants: [{ email: 'petr@example.com' }],
+ * });
+ * ```
+ *
+ * Requires a `fetch` global (Node.js >= 18).
+ */
+class ZoplioClient {
+    apiKey;
+    baseUrl;
+    constructor(config) {
+        if (!config || typeof config.apiKey !== 'string' || config.apiKey.length === 0) {
+            throw new Error('ZoplioClient requires an apiKey (zpl_...)');
+        }
+        this.apiKey = config.apiKey;
+        this.baseUrl = (config.baseUrl || 'https://api.zoplio.com').replace(/\/+$/, '');
+    }
+    async request(method, path, body, extraHeaders) {
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method,
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${this.apiKey}`,
+                ...extraHeaders,
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        let data;
+        try {
+            data = await res.json();
+        }
+        catch {
+            data = undefined;
+        }
+        if (!res.ok) {
+            const err = data?.error;
+            throw new ZoplioApiError(res.status, err?.code ?? 'upstream_error', err?.message ?? `Zoplio API error: HTTP ${res.status}`, err?.details);
+        }
+        return data;
+    }
+    // ── Meetings ───────────────────────────────────────────────────────
+    /**
+     * Create a meeting and start negotiating with the participants.
+     * `POST /v1/meetings`
+     */
+    async scheduleMeeting(params, options) {
+        const headers = options?.idempotencyKey
+            ? { 'X-Idempotency-Key': options.idempotencyKey }
+            : undefined;
+        return this.request('POST', '/v1/meetings', params, headers);
+    }
+    /**
+     * Fetch one meeting you organize, with per-participant status.
+     * `GET /v1/meetings/:id`
+     */
+    async getMeeting(meetingId) {
+        return this.request('GET', `/v1/meetings/${encodeURIComponent(meetingId)}`);
+    }
+    /**
+     * List meetings you organize, newest first.
+     * `GET /v1/meetings?status=&limit=`
+     */
+    async listMeetings(params = {}) {
+        const query = new URLSearchParams();
+        if (params.status)
+            query.set('status', params.status);
+        if (params.limit !== undefined)
+            query.set('limit', String(params.limit));
+        const qs = query.toString();
+        return this.request('GET', `/v1/meetings${qs ? `?${qs}` : ''}`);
+    }
+    /**
+     * Cancel a meeting (idempotent — cancelling twice still returns `cancelled`).
+     * `POST /v1/meetings/:id/cancel`
+     */
+    async cancelMeeting(meetingId) {
+        return this.request('POST', `/v1/meetings/${encodeURIComponent(meetingId)}/cancel`);
+    }
+    /**
+     * Propose a new exact date+time to all participants.
+     * `POST /v1/meetings/:id/reschedule`
+     *
+     * Throws `ZoplioApiError` with code `conflict` when the requested time
+     * collides with a participant's availability, when the negotiation state
+     * does not allow re-proposing, or when the negotiation ran out of rounds -
+     * in that last case the meeting has been cancelled and every participant
+     * told. Throws code `validation_failed` when the requested time is already
+     * in the past; nothing changed and nobody was contacted.
+     */
+    async rescheduleMeeting(meetingId, params) {
+        return this.request('POST', `/v1/meetings/${encodeURIComponent(meetingId)}/reschedule`, params);
+    }
+    // ── Webhooks ───────────────────────────────────────────────────────
+    /**
+     * Subscribe a URL to meeting lifecycle events. The returned `secret`
+     * (whsec_...) is shown exactly once — store it to verify deliveries.
+     * `POST /v1/webhooks`
+     */
+    async createWebhook(params) {
+        return this.request('POST', '/v1/webhooks', params);
+    }
+    /**
+     * List your webhook subscriptions (without secrets).
+     * `GET /v1/webhooks`
+     */
+    async listWebhooks() {
+        return this.request('GET', '/v1/webhooks');
+    }
+    /**
+     * Delete one of your webhook subscriptions.
+     * `DELETE /v1/webhooks/:id`
+     */
+    async deleteWebhook(webhookId) {
+        return this.request('DELETE', `/v1/webhooks/${encodeURIComponent(webhookId)}`);
+    }
+    /**
+     * Verify a webhook delivery: constant-time comparison of the
+     * `X-Zoplio-Signature` header against HMAC-SHA256(secret, rawBody),
+     * hex-encoded — exactly how Zoplio signs deliveries.
+     *
+     * Pass the RAW request body bytes/string (before any JSON parsing —
+     * re-serializing the parsed body may not be byte-identical).
+     */
+    static verifyWebhookSignature(rawBody, signatureHeader, secret) {
+        if (!signatureHeader || !secret)
+            return false;
+        const expected = (0, crypto_1.createHmac)('sha256', secret).update(rawBody).digest('hex');
+        const provided = signatureHeader.trim().toLowerCase();
+        const a = Buffer.from(expected, 'utf8');
+        const b = Buffer.from(provided, 'utf8');
+        if (a.length !== b.length)
+            return false;
+        return (0, crypto_1.timingSafeEqual)(a, b);
+    }
+}
+exports.ZoplioClient = ZoplioClient;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,mCAAqD;AAoBrD;;;GAGG;AACH,MAAa,cAAe,SAAQ,KAAK;IACvC,qEAAqE;IAC5D,IAAI,CAAe;IAC5B,mCAAmC;IAC1B,MAAM,CAAS;IACxB,uDAAuD;IAC9C,OAAO,CAAiB;IAEjC,YAAY,MAAc,EAAE,IAAkB,EAAE,OAAe,EAAE,OAAuB;QACtF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAfD,wCAeC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAa,YAAY;IACN,MAAM,CAAS;IACf,OAAO,CAAS;IAEjC,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAa,EACb,YAAqC;QAErC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,GAAG,YAAY;aAChB;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAI,IAAkC,EAAE,KAAK,CAAC;YACvD,MAAM,IAAI,cAAc,CACtB,GAAG,CAAC,MAAM,EACV,GAAG,EAAE,IAAI,IAAI,gBAAgB,EAC7B,GAAG,EAAE,OAAO,IAAI,0BAA0B,GAAG,CAAC,MAAM,EAAE,EACtD,GAAG,EAAE,OAAO,CACb,CAAC;QACJ,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,sEAAsE;IAEtE;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,MAA6B,EAC7B,OAAgC;QAEhC,MAAM,OAAO,GAAG,OAAO,EAAE,cAAc;YACrC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,cAAc,EAAE;YACjD,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,SAA6B,EAAE;QAChD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,MAA+B;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClG,CAAC;IAED,sEAAsE;IAEtE;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,sBAAsB,CAC3B,OAA4B,EAC5B,eAAuB,EACvB,MAAc;QAEd,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAA,wBAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;CACF;AA7JD,oCA6JC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { ZoplioClient, ZoplioApiError } from './client';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACxD,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZoplioApiError = exports.ZoplioClient = void 0;
+var client_1 = require("./client");
+Object.defineProperty(exports, "ZoplioClient", { enumerable: true, get: function () { return client_1.ZoplioClient; } });
+Object.defineProperty(exports, "ZoplioApiError", { enumerable: true, get: function () { return client_1.ZoplioApiError; } });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,mCAAwD;AAA/C,sGAAA,YAAY,OAAA;AAAE,wGAAA,cAAc,OAAA;AACrC,0CAAwB"}

package/dist/types.d.ts

@@ -0,0 +1,166 @@
+/**
+ * Wire types for the Zoplio public API v1 (served by api-gateway under /v1).
+ * Shapes mirror apps/api-gateway/src — these are the exact JSON bodies on the
+ * wire, not internal models.
+ */
+export interface ZoplioConfig {
+    /** API key, format `zpl_<hex>`. Sent as `Authorization: Bearer zpl_...`. */
+    apiKey: string;
+    /** API origin. Defaults to `https://api.zoplio.com`. */
+    baseUrl?: string;
+}
+/** Error codes used by every non-2xx response. */
+export type ApiErrorCode = 'unauthorized' | 'rate_limited' | 'validation_failed' | 'not_found' | 'conflict' | 'quota_exceeded' | 'upstream_error';
+/** Per-field validation detail attached to `validation_failed` errors. */
+export interface FieldDetail {
+    field: string;
+    message: string;
+}
+export type MeetingStatus = 'draft' | 'negotiating' | 'confirmed' | 'cancelled' | 'rescheduling';
+/** Public webhook event names — the only events delivered to subscribers. */
+export type WebhookEvent = 'meeting.created' | 'meeting.confirmed' | 'meeting.cancelled' | 'negotiation.failed';
+/** A concrete time slot. ISO 8601 datetimes (UTC). */
+export interface Slot {
+    start: string;
+    end: string;
+}
+/** Meeting participant input — each entry needs `phone` (E.164) or `email`. */
+export interface ParticipantInput {
+    /** E.164 phone number, e.g. `+420777123456`. */
+    phone?: string;
+    email?: string;
+    /** Display name, max 200 chars. */
+    name?: string;
+}
+export interface ScheduleMeetingParams {
+    /** Max 300 chars. Defaults to "Meeting" server-side. */
+    title?: string;
+    /** Integer 5..1440. Defaults to 30 server-side. */
+    durationMinutes?: number;
+    /** 1..8 participants, each with a phone or an email. */
+    participants: ParticipantInput[];
+    /** YYYY-MM-DD. Required when `preferredTime` is set. */
+    preferredDate?: string;
+    /** HH:MM (24h). */
+    preferredTime?: string;
+    /** IANA timezone the preferredDate/preferredTime are expressed in. */
+    timezone?: string;
+    /** YYYY-MM-DD. */
+    earliestDate?: string;
+    /** YYYY-MM-DD. */
+    latestDate?: string;
+    /** Ask participants for their availability instead of proposing slots. */
+    openAsk?: boolean;
+    /** Max 500 chars. Omitting it makes the meeting virtual. */
+    location?: string;
+    /** Set `false` for meetings the organizer does not attend. */
+    organizerAttending?: boolean;
+}
+export interface ScheduleMeetingOptions {
+    /**
+     * Sent as `X-Idempotency-Key` (1-128 chars). Replaying the same key
+     * returns the originally created meeting instead of creating a duplicate.
+     */
+    idempotencyKey?: string;
+}
+export interface ScheduleMeetingResult {
+    meetingId: string;
+    negotiationId: string;
+    /** `negotiating` on fresh creates; an idempotent replay returns the real status. */
+    status: MeetingStatus;
+    proposedSlots: Slot[];
+}
+export interface MeetingParticipant {
+    name?: string;
+    email?: string;
+    phone?: string;
+    /** e.g. `pending`, `accepted`, `declined`, `counter-proposed`. */
+    status: string;
+    attending: boolean;
+}
+export interface MeetingDetail {
+    id: string;
+    title: string;
+    status: MeetingStatus;
+    confirmedSlot?: Slot;
+    participants: MeetingParticipant[];
+}
+export interface MeetingSummary {
+    id: string;
+    title: string;
+    status: MeetingStatus;
+    confirmedSlot?: Slot;
+    createdAt?: string;
+}
+export interface ListMeetingsParams {
+    status?: MeetingStatus;
+    /** 1..50, default 20. */
+    limit?: number;
+}
+export interface ListMeetingsResult {
+    meetings: MeetingSummary[];
+}
+export interface CancelMeetingResult {
+    status: 'cancelled';
+}
+export interface RescheduleMeetingParams {
+    /** YYYY-MM-DD. Required. */
+    preferredDate: string;
+    /** HH:MM (24h). Required. */
+    preferredTime: string;
+    /** IANA timezone the date/time are expressed in. */
+    timezone?: string;
+}
+export interface RescheduleMeetingResult {
+    meetingId: string;
+    status: 'negotiating';
+    proposedSlots: Slot[];
+}
+export interface CreateWebhookParams {
+    /** Public http(s) endpoint. Private/internal hosts are rejected. */
+    url: string;
+    /** Defaults to all four events when omitted. */
+    events?: WebhookEvent[];
+}
+export interface WebhookCreated {
+    id: string;
+    url: string;
+    events: WebhookEvent[];
+    /** `whsec_` signing secret — returned exactly once, at creation. */
+    secret: string;
+}
+export interface WebhookSummary {
+    id: string;
+    url: string;
+    events: string[];
+    active: boolean;
+    createdAt?: string;
+}
+export interface ListWebhooksResult {
+    webhooks: WebhookSummary[];
+}
+export interface DeleteWebhookResult {
+    deleted: true;
+}
+/**
+ * Body of every webhook delivery POSTed to a subscribed URL. Verify the
+ * `X-Zoplio-Signature` header over the RAW request body with
+ * `ZoplioClient.verifyWebhookSignature` before trusting it.
+ */
+export interface WebhookDeliveryBody {
+    event: WebhookEvent;
+    payload: {
+        meetingId?: string;
+        organizerUserId?: string;
+        title?: string;
+        /** Present on confirmed/cancelled/failed events. */
+        negotiationId?: string;
+        participantEmails?: string[];
+        /** Present on meeting.confirmed. */
+        confirmedSlot?: Slot;
+        [key: string]: unknown;
+    };
+    /** ISO 8601 delivery timestamp. */
+    timestamp: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kDAAkD;AAClD,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,cAAc,GACd,mBAAmB,GACnB,WAAW,GACX,UAAU,GACV,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,aAAa,GACb,WAAW,GACX,WAAW,GACX,cAAc,CAAC;AAEnB,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB,sDAAsD;AACtD,MAAM,WAAW,IAAI;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,IAAI,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,4BAA4B;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,IAAI,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,IAAI,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,oDAAoD;QACpD,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,oCAAoC;QACpC,aAAa,CAAC,EAAE,IAAI,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Wire types for the Zoplio public API v1 (served by api-gateway under /v1).
+ * Shapes mirror apps/api-gateway/src — these are the exact JSON bodies on the
+ * wire, not internal models.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@zoplio/sdk-js",
+  "version": "0.2.0",
+  "description": "Official Zoplio Node.js/TypeScript SDK for the Zoplio API v1 (MIT)",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "npx --yes tsx@4.19.2 --test \"src/**/__tests__/*.test.ts\"",
+    "prepublishOnly": "npm run build"
+  },
+  "license": "MIT",
+  "type": "commonjs",
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.0",
+    "typescript": "^6.0.2"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Zoplio/zoplio-sdk.git",
+    "directory": "packages/sdk-js"
+  },
+  "homepage": "https://github.com/Zoplio/zoplio-sdk#readme",
+  "bugs": "https://github.com/Zoplio/zoplio-sdk/issues",
+  "keywords": [
+    "zoplio",
+    "scheduling",
+    "ai-agent",
+    "meetings",
+    "mcp"
+  ]
+}