meterflow 0.1.0 → 0.2.0

package/README.md

@@ -61,7 +61,7 @@ const client = new MeterFlow({
 ## Webhook verification
 
 ```typescript
-import { verifyWebhook } from "meterflow";
+import { verifyWebhook } from "meterflow/webhook";
 
 const isValid = verifyWebhook(rawBody, req.headers["x-meterflow-signature"], webhookSecret);
 ```

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,OAAO,CAAC,cAAc,CAAC,CAAwB;IAC/C,OAAO,CAAC,MAAM,CAAC,CAAgB;gBAEnB,OAAO,EAAE,gBAAgB;IAarC,IAAI,OAAO,IAAI,eAAe,CAE7B;IAED,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,IAAI,aAAa,IAAI,qBAAqB,CAEzC;IAED,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,4EAA4E;IAC5E,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;CAG5E"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,OAAO,CAAC,cAAc,CAAC,CAAwB;IAC/C,OAAO,CAAC,MAAM,CAAC,CAAgB;gBAEnB,OAAO,EAAE,gBAAgB;IAerC,IAAI,OAAO,IAAI,eAAe,CAE7B;IAED,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,IAAI,aAAa,IAAI,qBAAqB,CAEzC;IAED,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,4EAA4E;IAC5E,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;CAG5E"}

package/dist/index.cjs

@@ -28,8 +28,7 @@ __export(index_exports, {
   NotFoundError: () => NotFoundError,
   RateLimitError: () => RateLimitError,
   ServerError: () => ServerError,
-  ValidationError: () => ValidationError,
-  verifyWebhook: () => verifyWebhook
+  ValidationError: () => ValidationError
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -122,7 +121,7 @@ async function retryable(fn, opts, shouldRetry = () => true) {
 }
 
 // src/utils/http.ts
-var SDK_VERSION = "0.1.0";
+var SDK_VERSION = "0.2.0";
 function buildUrl(baseUrl, path, query) {
   const url = new URL(path, baseUrl.endsWith("/") ? baseUrl : baseUrl + "/");
   if (query) {
@@ -312,7 +311,9 @@ var MeterFlow = class {
       baseUrl: options.baseUrl ?? "https://api.meterflow.com/api/v1",
       timeout: options.timeout ?? 3e4,
       retries: options.retries ?? 3,
-      fetch: options.fetch ?? globalThis.fetch
+      // Bind to globalThis: browsers throw "Illegal invocation" if window.fetch is
+      // called detached from window (Node tolerates it, so this only bites in the browser).
+      fetch: options.fetch ?? globalThis.fetch.bind(globalThis)
     };
   }
   get credits() {
@@ -332,17 +333,6 @@ var MeterFlow = class {
     return httpRequest(this.options, method, path, opts);
   }
 };
-
-// src/utils/webhook-verify.ts
-var import_crypto = require("crypto");
-function verifyWebhook(rawBody, signature, secret) {
-  const body = typeof rawBody === "string" ? Buffer.from(rawBody, "utf8") : rawBody;
-  const expected = (0, import_crypto.createHmac)("sha256", secret).update(body).digest("hex");
-  const expectedBuf = Buffer.from(expected, "utf8");
-  const actualBuf = Buffer.from(signature, "utf8");
-  if (expectedBuf.length !== actualBuf.length) return false;
-  return (0, import_crypto.timingSafeEqual)(expectedBuf, actualBuf);
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthError,
@@ -353,6 +343,5 @@ function verifyWebhook(rawBody, signature, secret) {
   NotFoundError,
   RateLimitError,
   ServerError,
-  ValidationError,
-  verifyWebhook
+  ValidationError
 });

package/dist/index.d.ts

@@ -1,4 +1,3 @@
 export { MeterFlow } from "./client";
-export { verifyWebhook } from "./utils/webhook-verify";
 export { MeterFlowError, AuthError, NotFoundError, InsufficientCreditsError, ConflictError, ValidationError, RateLimitError, ServerError, } from "./errors";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,GACZ,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,GACZ,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -28,8 +28,7 @@ __export(index_exports, {
   NotFoundError: () => NotFoundError,
   RateLimitError: () => RateLimitError,
   ServerError: () => ServerError,
-  ValidationError: () => ValidationError,
-  verifyWebhook: () => verifyWebhook
+  ValidationError: () => ValidationError
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -122,7 +121,7 @@ async function retryable(fn, opts, shouldRetry = () => true) {
 }
 
 // src/utils/http.ts
-var SDK_VERSION = "0.1.0";
+var SDK_VERSION = "0.2.0";
 function buildUrl(baseUrl, path, query) {
   const url = new URL(path, baseUrl.endsWith("/") ? baseUrl : baseUrl + "/");
   if (query) {
@@ -312,7 +311,9 @@ var MeterFlow = class {
       baseUrl: options.baseUrl ?? "https://api.meterflow.com/api/v1",
       timeout: options.timeout ?? 3e4,
       retries: options.retries ?? 3,
-      fetch: options.fetch ?? globalThis.fetch
+      // Bind to globalThis: browsers throw "Illegal invocation" if window.fetch is
+      // called detached from window (Node tolerates it, so this only bites in the browser).
+      fetch: options.fetch ?? globalThis.fetch.bind(globalThis)
     };
   }
   get credits() {
@@ -332,17 +333,6 @@ var MeterFlow = class {
     return httpRequest(this.options, method, path, opts);
   }
 };
-
-// src/utils/webhook-verify.ts
-var import_crypto = require("crypto");
-function verifyWebhook(rawBody, signature, secret) {
-  const body = typeof rawBody === "string" ? Buffer.from(rawBody, "utf8") : rawBody;
-  const expected = (0, import_crypto.createHmac)("sha256", secret).update(body).digest("hex");
-  const expectedBuf = Buffer.from(expected, "utf8");
-  const actualBuf = Buffer.from(signature, "utf8");
-  if (expectedBuf.length !== actualBuf.length) return false;
-  return (0, import_crypto.timingSafeEqual)(expectedBuf, actualBuf);
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthError,
@@ -353,6 +343,5 @@ function verifyWebhook(rawBody, signature, secret) {
   NotFoundError,
   RateLimitError,
   ServerError,
-  ValidationError,
-  verifyWebhook
+  ValidationError
 });

package/dist/index.mjs

@@ -87,7 +87,7 @@ async function retryable(fn, opts, shouldRetry = () => true) {
 }
 
 // src/utils/http.ts
-var SDK_VERSION = "0.1.0";
+var SDK_VERSION = "0.2.0";
 function buildUrl(baseUrl, path, query) {
   const url = new URL(path, baseUrl.endsWith("/") ? baseUrl : baseUrl + "/");
   if (query) {
@@ -277,7 +277,9 @@ var MeterFlow = class {
       baseUrl: options.baseUrl ?? "https://api.meterflow.com/api/v1",
       timeout: options.timeout ?? 3e4,
       retries: options.retries ?? 3,
-      fetch: options.fetch ?? globalThis.fetch
+      // Bind to globalThis: browsers throw "Illegal invocation" if window.fetch is
+      // called detached from window (Node tolerates it, so this only bites in the browser).
+      fetch: options.fetch ?? globalThis.fetch.bind(globalThis)
     };
   }
   get credits() {
@@ -297,17 +299,6 @@ var MeterFlow = class {
     return httpRequest(this.options, method, path, opts);
   }
 };
-
-// src/utils/webhook-verify.ts
-import { createHmac, timingSafeEqual } from "crypto";
-function verifyWebhook(rawBody, signature, secret) {
-  const body = typeof rawBody === "string" ? Buffer.from(rawBody, "utf8") : rawBody;
-  const expected = createHmac("sha256", secret).update(body).digest("hex");
-  const expectedBuf = Buffer.from(expected, "utf8");
-  const actualBuf = Buffer.from(signature, "utf8");
-  if (expectedBuf.length !== actualBuf.length) return false;
-  return timingSafeEqual(expectedBuf, actualBuf);
-}
 export {
   AuthError,
   ConflictError,
@@ -317,6 +308,5 @@ export {
   NotFoundError,
   RateLimitError,
   ServerError,
-  ValidationError,
-  verifyWebhook
+  ValidationError
 };

package/dist/webhook.cjs

@@ -0,0 +1,40 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/webhook.ts
+var webhook_exports = {};
+__export(webhook_exports, {
+  verifyWebhook: () => verifyWebhook
+});
+module.exports = __toCommonJS(webhook_exports);
+
+// src/utils/webhook-verify.ts
+var import_crypto = require("crypto");
+function verifyWebhook(rawBody, signature, secret) {
+  const body = typeof rawBody === "string" ? Buffer.from(rawBody, "utf8") : rawBody;
+  const expected = (0, import_crypto.createHmac)("sha256", secret).update(body).digest("hex");
+  const expectedBuf = Buffer.from(expected, "utf8");
+  const actualBuf = Buffer.from(signature, "utf8");
+  if (expectedBuf.length !== actualBuf.length) return false;
+  return (0, import_crypto.timingSafeEqual)(expectedBuf, actualBuf);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  verifyWebhook
+});

package/dist/webhook.d.ts

@@ -0,0 +1,2 @@
+export { verifyWebhook } from "./utils/webhook-verify";
+//# sourceMappingURL=webhook.d.ts.map

package/dist/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/webhook.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/webhook.mjs

@@ -0,0 +1,13 @@
+// src/utils/webhook-verify.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function verifyWebhook(rawBody, signature, secret) {
+  const body = typeof rawBody === "string" ? Buffer.from(rawBody, "utf8") : rawBody;
+  const expected = createHmac("sha256", secret).update(body).digest("hex");
+  const expectedBuf = Buffer.from(expected, "utf8");
+  const actualBuf = Buffer.from(signature, "utf8");
+  if (expectedBuf.length !== actualBuf.length) return false;
+  return timingSafeEqual(expectedBuf, actualBuf);
+}
+export {
+  verifyWebhook
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "meterflow",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Official Node.js SDK for MeterFlow — usage-based billing, credit management, and metering.",
   "license": "MIT",
   "author": "MeterFlow",
@@ -17,16 +17,22 @@
   "types": "dist/index.d.ts",
   "exports": {
     ".": {
+      "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs",
-      "require": "./dist/index.cjs",
-      "types": "./dist/index.d.ts"
+      "require": "./dist/index.cjs"
+    },
+    "./webhook": {
+      "types": "./dist/webhook.d.ts",
+      "import": "./dist/webhook.mjs",
+      "require": "./dist/webhook.cjs"
     }
   },
   "files": [
     "dist"
   ],
   "scripts": {
-    "build": "tsc --project tsconfig.json --emitDeclarationOnly && node scripts/build-fix.mjs && esbuild src/index.ts --bundle --platform=node --format=esm --outfile=dist/index.mjs && esbuild src/index.ts --bundle --platform=node --format=cjs --outfile=dist/index.cjs && node -e \"require('fs').copyFileSync('dist/index.cjs','dist/index.js')\"",
+    "prepublishOnly": "npm run build",
+    "build": "tsc --project tsconfig.json --emitDeclarationOnly && node scripts/build-fix.mjs && esbuild src/index.ts --bundle --platform=node --format=esm --outfile=dist/index.mjs && esbuild src/index.ts --bundle --platform=node --format=cjs --outfile=dist/index.cjs && esbuild src/webhook.ts --bundle --platform=node --format=esm --outfile=dist/webhook.mjs && esbuild src/webhook.ts --bundle --platform=node --format=cjs --outfile=dist/webhook.cjs && node -e \"require('fs').copyFileSync('dist/index.cjs','dist/index.js')\"",
     "dev": "tsc --project tsconfig.json --watch",
     "quickstart": "npm run build && npx tsx examples/quickstart.ts",
     "typecheck": "tsc --noEmit",