optropic 2.0.0 → 2.1.0

package/dist/index.cjs

@@ -31,9 +31,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   AssetsResource: () => AssetsResource,
+  AuditResource: () => AuditResource,
   AuthenticationError: () => AuthenticationError,
   BatchNotFoundError: () => BatchNotFoundError,
   CodeNotFoundError: () => CodeNotFoundError,
+  ComplianceResource: () => ComplianceResource,
   InvalidCodeError: () => InvalidCodeError,
   InvalidGTINError: () => InvalidGTINError,
   InvalidSerialError: () => InvalidSerialError,
@@ -46,6 +48,7 @@ __export(index_exports, {
   RateLimitedError: () => RateLimitedError,
   RevokedCodeError: () => RevokedCodeError,
   SDK_VERSION: () => SDK_VERSION2,
+  SchemasResource: () => SchemasResource,
   ServiceUnavailableError: () => ServiceUnavailableError,
   TimeoutError: () => TimeoutError,
   createClient: () => createClient,
@@ -482,6 +485,117 @@ var AssetsResource = class {
   }
 };
 
+// src/resources/audit.ts
+var AuditResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * List audit events with optional filtering and pagination.
+   */
+  async list(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({ method: "GET", path: `/v1/audit${query}` });
+  }
+  /**
+   * Retrieve a single audit event by ID.
+   */
+  async get(eventId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/audit/${encodeURIComponent(eventId)}`
+    });
+  }
+  /**
+   * Record a custom audit event.
+   */
+  async create(params) {
+    return this.request({
+      method: "POST",
+      path: "/v1/audit",
+      body: {
+        event_type: params.eventType,
+        ...params.resourceId !== void 0 && { resource_id: params.resourceId },
+        ...params.resourceType !== void 0 && { resource_type: params.resourceType },
+        ...params.details !== void 0 && { details: params.details }
+      }
+    });
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+};
+
+// src/resources/compliance.ts
+var ComplianceResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * Verify the integrity of the full audit chain.
+   */
+  async verifyChain() {
+    return this.request({
+      method: "POST",
+      path: "/v1/compliance/verify-chain"
+    });
+  }
+  /**
+   * Return all Merkle roots.
+   */
+  async listMerkleRoots() {
+    return this.request({
+      method: "GET",
+      path: "/v1/compliance/merkle-roots"
+    });
+  }
+  /**
+   * Return a Merkle inclusion proof for a specific audit event.
+   */
+  async getMerkleProof(eventId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/compliance/merkle-proof/${encodeURIComponent(eventId)}`
+    });
+  }
+  /**
+   * Export audit data as a signed CSV.
+   */
+  async exportAudit(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({
+      method: "GET",
+      path: `/v1/compliance/export${query}`
+    });
+  }
+  /**
+   * Retrieve the current compliance configuration.
+   */
+  async getConfig() {
+    return this.request({
+      method: "GET",
+      path: "/v1/compliance/config"
+    });
+  }
+  /**
+   * Update the compliance mode.
+   */
+  async updateConfig(mode) {
+    return this.request({
+      method: "POST",
+      path: "/v1/compliance/config",
+      body: { compliance_mode: mode }
+    });
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+};
+
 // src/resources/keys.ts
 var KeysResource = class {
   constructor(request) {
@@ -518,6 +632,130 @@ var KeysetsResource = class {
   }
 };
 
+// src/resources/schemas.ts
+function checkType(value, expected) {
+  switch (expected) {
+    case "string":
+      return typeof value === "string";
+    case "number":
+      return typeof value === "number" && !Number.isNaN(value);
+    case "boolean":
+      return typeof value === "boolean";
+    case "date":
+      return typeof value === "string";
+    // ISO 8601 string
+    case "array":
+      return Array.isArray(value);
+    default:
+      return true;
+  }
+}
+var SchemasResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * Register or update a vertical config schema.
+   * If a schema already exists for the verticalId, it will be updated.
+   */
+  async create(params) {
+    const body = this.stripUndefined({
+      vertical_id: params.verticalId,
+      metadata_schema: params.metadataSchema,
+      version: params.version,
+      export_formats: params.exportFormats,
+      description: params.description
+    });
+    return this.request({ method: "POST", path: "/v1/schemas", body });
+  }
+  /**
+   * List registered vertical schemas with pagination.
+   */
+  async list(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({ method: "GET", path: `/v1/schemas${query}` });
+  }
+  /**
+   * Get the active schema for a specific vertical.
+   */
+  async get(verticalId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`
+    });
+  }
+  /**
+   * Update an existing vertical schema.
+   */
+  async update(verticalId, params) {
+    const body = this.stripUndefined({
+      version: params.version,
+      metadata_schema: params.metadataSchema,
+      export_formats: params.exportFormats,
+      description: params.description,
+      is_active: params.isActive
+    });
+    return this.request({
+      method: "PUT",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`,
+      body
+    });
+  }
+  /**
+   * Deactivate a vertical schema (soft delete).
+   */
+  async delete(verticalId) {
+    await this.request({
+      method: "DELETE",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`
+    });
+  }
+  /**
+   * Pre-flight validation: check if assetConfig matches the registered schema.
+   *
+   * This is a client-side convenience that fetches the schema and validates locally.
+   * The server also validates on asset creation.
+   */
+  async validate(verticalId, assetConfig) {
+    let schema;
+    try {
+      schema = await this.get(verticalId);
+    } catch {
+      return { valid: true, errors: [] };
+    }
+    const errors = [];
+    const metadataSchema = schema.metadataSchema ?? {};
+    for (const [fieldName, fieldDef] of Object.entries(metadataSchema)) {
+      if (typeof fieldDef !== "object" || fieldDef === null) continue;
+      const def = fieldDef;
+      const value = assetConfig[fieldName];
+      if (def.required && (value === void 0 || value === null || value === "")) {
+        const label = def.label ?? fieldName;
+        errors.push({ field: fieldName, message: `Required field "${label}" is missing` });
+        continue;
+      }
+      if (value === void 0 || value === null) continue;
+      const expectedType = def.type ?? "string";
+      if (!checkType(value, expectedType)) {
+        errors.push({
+          field: fieldName,
+          message: `"${def.label ?? fieldName}" must be a ${expectedType}`,
+          received: typeof value
+        });
+      }
+    }
+    return { valid: errors.length === 0, errors };
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+  stripUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== void 0));
+  }
+};
+
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.optropic.com";
 var DEFAULT_TIMEOUT = 3e4;
@@ -534,8 +772,11 @@ var OptropicClient = class {
   retryConfig;
   _sandbox;
   assets;
+  audit;
+  compliance;
   keys;
   keysets;
+  schemas;
   constructor(config) {
     if (!config.apiKey || !this.isValidApiKey(config.apiKey)) {
       throw new AuthenticationError(
@@ -562,8 +803,11 @@ var OptropicClient = class {
     };
     const boundRequest = this.request.bind(this);
     this.assets = new AssetsResource(boundRequest, this);
+    this.audit = new AuditResource(boundRequest);
+    this.compliance = new ComplianceResource(boundRequest);
     this.keys = new KeysResource(boundRequest);
     this.keysets = new KeysetsResource(boundRequest);
+    this.schemas = new SchemasResource(boundRequest);
   }
   // ─────────────────────────────────────────────────────────────────────────
   // ENVIRONMENT DETECTION
@@ -759,9 +1003,11 @@ var SDK_VERSION2 = "2.0.0";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AssetsResource,
+  AuditResource,
   AuthenticationError,
   BatchNotFoundError,
   CodeNotFoundError,
+  ComplianceResource,
   InvalidCodeError,
   InvalidGTINError,
   InvalidSerialError,
@@ -774,6 +1020,7 @@ var SDK_VERSION2 = "2.0.0";
   RateLimitedError,
   RevokedCodeError,
   SDK_VERSION,
+  SchemasResource,
   ServiceUnavailableError,
   TimeoutError,
   createClient,

package/dist/index.d.cts

@@ -166,6 +166,144 @@ declare class AssetsResource {
     private buildQuery;
 }
 
+/**
+ * Audit Resource
+ *
+ * Immutable audit log operations — list, get, and create custom audit events.
+ * Mirrors the Python SDK's `optropic.resources.audit` module.
+ */
+
+interface AuditEvent {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly eventType: string;
+    readonly actor: string;
+    readonly createdAt: string;
+    readonly resourceId?: string;
+    readonly resourceType?: string;
+    readonly details?: Record<string, unknown>;
+    readonly eventHash?: string;
+    readonly chainSequence?: number;
+}
+interface ListAuditParams {
+    readonly page?: number;
+    readonly limit?: number;
+    readonly event_type?: string;
+    readonly resource_id?: string;
+    readonly from_date?: string;
+    readonly to_date?: string;
+}
+interface ListAuditResponse {
+    readonly data: AuditEvent[];
+    readonly pagination: {
+        readonly total: number;
+        readonly page: number;
+        readonly perPage: number;
+        readonly totalPages: number;
+    };
+}
+interface CreateAuditEventParams {
+    readonly eventType: string;
+    readonly resourceId?: string;
+    readonly resourceType?: string;
+    readonly details?: Record<string, unknown>;
+}
+declare class AuditResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * List audit events with optional filtering and pagination.
+     */
+    list(params?: ListAuditParams): Promise<ListAuditResponse>;
+    /**
+     * Retrieve a single audit event by ID.
+     */
+    get(eventId: string): Promise<AuditEvent>;
+    /**
+     * Record a custom audit event.
+     */
+    create(params: CreateAuditEventParams): Promise<AuditEvent>;
+    private buildQuery;
+}
+
+/**
+ * Compliance Resource
+ *
+ * Chain verification, Merkle proofs, audit export, and compliance configuration.
+ * Mirrors the Python SDK's `optropic.resources.compliance` module.
+ */
+
+interface ChainVerifyResult {
+    readonly tenantId: string;
+    readonly chainValid: boolean;
+    readonly eventsChecked: number;
+    readonly verifiedAt: string;
+    readonly brokenAtSequence?: number;
+}
+interface MerkleRoot {
+    readonly id: string;
+    readonly rootHash: string;
+    readonly eventCount: number;
+    readonly periodStart: string;
+    readonly periodEnd: string;
+    readonly createdAt: string;
+}
+interface MerkleProof {
+    readonly eventId: string;
+    readonly eventHash: string;
+    readonly merkleRoot: string;
+    readonly proof: string[];
+    readonly verified: boolean;
+    readonly period: string;
+}
+interface ExportParams {
+    readonly from_date?: string;
+    readonly to_date?: string;
+    readonly limit?: number;
+}
+interface ExportResult {
+    readonly filename: string;
+    readonly eventCount: number;
+    readonly csv: string;
+    readonly signature?: string;
+    readonly publicKeyHex?: string;
+    readonly keyId?: string;
+    readonly algorithm?: string;
+}
+interface ComplianceConfig {
+    readonly complianceMode: string;
+    readonly retentionPolicy: Record<string, unknown>;
+}
+declare class ComplianceResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * Verify the integrity of the full audit chain.
+     */
+    verifyChain(): Promise<ChainVerifyResult>;
+    /**
+     * Return all Merkle roots.
+     */
+    listMerkleRoots(): Promise<MerkleRoot[]>;
+    /**
+     * Return a Merkle inclusion proof for a specific audit event.
+     */
+    getMerkleProof(eventId: string): Promise<MerkleProof>;
+    /**
+     * Export audit data as a signed CSV.
+     */
+    exportAudit(params?: ExportParams): Promise<ExportResult>;
+    /**
+     * Retrieve the current compliance configuration.
+     */
+    getConfig(): Promise<ComplianceConfig>;
+    /**
+     * Update the compliance mode.
+     */
+    updateConfig(mode: string): Promise<ComplianceConfig>;
+    private buildQuery;
+}
+
 /**
  * Keys Resource
  *
@@ -238,6 +376,96 @@ declare class KeysetsResource {
     private buildQuery;
 }
 
+/**
+ * Schemas Resource
+ *
+ * Schema Registry operations — register and manage vertical config schemas.
+ * Mirrors the Python SDK's `optropic.resources.schemas` module.
+ */
+
+interface VerticalSchema {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly verticalId: string;
+    readonly version: string;
+    readonly metadataSchema: Record<string, unknown>;
+    readonly exportFormats: string[];
+    readonly isActive: boolean;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly description?: string;
+}
+interface CreateSchemaParams {
+    readonly verticalId: string;
+    readonly metadataSchema: Record<string, unknown>;
+    readonly version?: string;
+    readonly exportFormats?: string[];
+    readonly description?: string;
+}
+interface UpdateSchemaParams {
+    readonly version?: string;
+    readonly metadataSchema?: Record<string, unknown>;
+    readonly exportFormats?: string[];
+    readonly description?: string;
+    readonly isActive?: boolean;
+}
+interface ListSchemasParams {
+    readonly page?: number;
+    readonly per_page?: number;
+    readonly include_inactive?: boolean;
+}
+interface ListSchemasResponse {
+    readonly data: VerticalSchema[];
+    readonly pagination: {
+        readonly total: number;
+        readonly page: number;
+        readonly perPage: number;
+        readonly totalPages: number;
+    };
+}
+interface SchemaValidationResult {
+    readonly valid: boolean;
+    readonly errors: Array<{
+        field: string;
+        message: string;
+        received?: string;
+    }>;
+}
+declare class SchemasResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * Register or update a vertical config schema.
+     * If a schema already exists for the verticalId, it will be updated.
+     */
+    create(params: CreateSchemaParams): Promise<VerticalSchema>;
+    /**
+     * List registered vertical schemas with pagination.
+     */
+    list(params?: ListSchemasParams): Promise<ListSchemasResponse>;
+    /**
+     * Get the active schema for a specific vertical.
+     */
+    get(verticalId: string): Promise<VerticalSchema>;
+    /**
+     * Update an existing vertical schema.
+     */
+    update(verticalId: string, params: UpdateSchemaParams): Promise<VerticalSchema>;
+    /**
+     * Deactivate a vertical schema (soft delete).
+     */
+    delete(verticalId: string): Promise<void>;
+    /**
+     * Pre-flight validation: check if assetConfig matches the registered schema.
+     *
+     * This is a client-side convenience that fetches the schema and validates locally.
+     * The server also validates on asset creation.
+     */
+    validate(verticalId: string, assetConfig: Record<string, unknown>): Promise<SchemaValidationResult>;
+    private buildQuery;
+    private stripUndefined;
+}
+
 /**
  * optropic - OptropicClient
  *
@@ -281,8 +509,11 @@ declare class OptropicClient {
     private readonly retryConfig;
     private readonly _sandbox;
     readonly assets: AssetsResource;
+    readonly audit: AuditResource;
+    readonly compliance: ComplianceResource;
     readonly keys: KeysResource;
     readonly keysets: KeysetsResource;
+    readonly schemas: SchemasResource;
     constructor(config: OptropicConfig);
     /** True when the client is in sandbox mode (test API key or explicit override). */
     get isSandbox(): boolean;
@@ -614,4 +845,4 @@ declare class ServiceUnavailableError extends OptropicError {
 
 declare const SDK_VERSION = "2.0.0";
 
-export { type ApiKey, type Asset, AssetsResource, AuthenticationError, type BatchCreateParams, type BatchCreateResult, BatchNotFoundError, CodeNotFoundError, type CreateAssetParams, type CreateKeyParams, type CreateKeyResult, type CreateKeysetParams, type ErrorCode, InvalidCodeError, InvalidGTINError, InvalidSerialError, KeysResource, type Keyset, KeysetsResource, type ListAssetsParams, type ListAssetsResponse, type ListKeysetsParams, type ListKeysetsResponse, NetworkError, OptropicClient, type OptropicConfig, OptropicError, QuotaExceededError, RateLimitedError, type RequestFn, type RetryConfig, RevokedCodeError, SDK_VERSION, ServiceUnavailableError, TimeoutError, type VerifyResult, type WebhookVerifyOptions, type WebhookVerifyResult, createClient, verifyWebhookSignature };
+export { type ApiKey, type Asset, AssetsResource, type AuditEvent, AuditResource, AuthenticationError, type BatchCreateParams, type BatchCreateResult, BatchNotFoundError, type ChainVerifyResult, CodeNotFoundError, type ComplianceConfig, ComplianceResource, type CreateAssetParams, type CreateAuditEventParams, type CreateKeyParams, type CreateKeyResult, type CreateKeysetParams, type CreateSchemaParams, type ErrorCode, type ExportParams, type ExportResult, InvalidCodeError, InvalidGTINError, InvalidSerialError, KeysResource, type Keyset, KeysetsResource, type ListAssetsParams, type ListAssetsResponse, type ListAuditParams, type ListAuditResponse, type ListKeysetsParams, type ListKeysetsResponse, type ListSchemasParams, type ListSchemasResponse, type MerkleProof, type MerkleRoot, NetworkError, OptropicClient, type OptropicConfig, OptropicError, QuotaExceededError, RateLimitedError, type RequestFn, type RetryConfig, RevokedCodeError, SDK_VERSION, type SchemaValidationResult, SchemasResource, ServiceUnavailableError, TimeoutError, type UpdateSchemaParams, type VerifyResult, type VerticalSchema, type WebhookVerifyOptions, type WebhookVerifyResult, createClient, verifyWebhookSignature };

package/dist/index.d.ts

@@ -166,6 +166,144 @@ declare class AssetsResource {
     private buildQuery;
 }
 
+/**
+ * Audit Resource
+ *
+ * Immutable audit log operations — list, get, and create custom audit events.
+ * Mirrors the Python SDK's `optropic.resources.audit` module.
+ */
+
+interface AuditEvent {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly eventType: string;
+    readonly actor: string;
+    readonly createdAt: string;
+    readonly resourceId?: string;
+    readonly resourceType?: string;
+    readonly details?: Record<string, unknown>;
+    readonly eventHash?: string;
+    readonly chainSequence?: number;
+}
+interface ListAuditParams {
+    readonly page?: number;
+    readonly limit?: number;
+    readonly event_type?: string;
+    readonly resource_id?: string;
+    readonly from_date?: string;
+    readonly to_date?: string;
+}
+interface ListAuditResponse {
+    readonly data: AuditEvent[];
+    readonly pagination: {
+        readonly total: number;
+        readonly page: number;
+        readonly perPage: number;
+        readonly totalPages: number;
+    };
+}
+interface CreateAuditEventParams {
+    readonly eventType: string;
+    readonly resourceId?: string;
+    readonly resourceType?: string;
+    readonly details?: Record<string, unknown>;
+}
+declare class AuditResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * List audit events with optional filtering and pagination.
+     */
+    list(params?: ListAuditParams): Promise<ListAuditResponse>;
+    /**
+     * Retrieve a single audit event by ID.
+     */
+    get(eventId: string): Promise<AuditEvent>;
+    /**
+     * Record a custom audit event.
+     */
+    create(params: CreateAuditEventParams): Promise<AuditEvent>;
+    private buildQuery;
+}
+
+/**
+ * Compliance Resource
+ *
+ * Chain verification, Merkle proofs, audit export, and compliance configuration.
+ * Mirrors the Python SDK's `optropic.resources.compliance` module.
+ */
+
+interface ChainVerifyResult {
+    readonly tenantId: string;
+    readonly chainValid: boolean;
+    readonly eventsChecked: number;
+    readonly verifiedAt: string;
+    readonly brokenAtSequence?: number;
+}
+interface MerkleRoot {
+    readonly id: string;
+    readonly rootHash: string;
+    readonly eventCount: number;
+    readonly periodStart: string;
+    readonly periodEnd: string;
+    readonly createdAt: string;
+}
+interface MerkleProof {
+    readonly eventId: string;
+    readonly eventHash: string;
+    readonly merkleRoot: string;
+    readonly proof: string[];
+    readonly verified: boolean;
+    readonly period: string;
+}
+interface ExportParams {
+    readonly from_date?: string;
+    readonly to_date?: string;
+    readonly limit?: number;
+}
+interface ExportResult {
+    readonly filename: string;
+    readonly eventCount: number;
+    readonly csv: string;
+    readonly signature?: string;
+    readonly publicKeyHex?: string;
+    readonly keyId?: string;
+    readonly algorithm?: string;
+}
+interface ComplianceConfig {
+    readonly complianceMode: string;
+    readonly retentionPolicy: Record<string, unknown>;
+}
+declare class ComplianceResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * Verify the integrity of the full audit chain.
+     */
+    verifyChain(): Promise<ChainVerifyResult>;
+    /**
+     * Return all Merkle roots.
+     */
+    listMerkleRoots(): Promise<MerkleRoot[]>;
+    /**
+     * Return a Merkle inclusion proof for a specific audit event.
+     */
+    getMerkleProof(eventId: string): Promise<MerkleProof>;
+    /**
+     * Export audit data as a signed CSV.
+     */
+    exportAudit(params?: ExportParams): Promise<ExportResult>;
+    /**
+     * Retrieve the current compliance configuration.
+     */
+    getConfig(): Promise<ComplianceConfig>;
+    /**
+     * Update the compliance mode.
+     */
+    updateConfig(mode: string): Promise<ComplianceConfig>;
+    private buildQuery;
+}
+
 /**
  * Keys Resource
  *
@@ -238,6 +376,96 @@ declare class KeysetsResource {
     private buildQuery;
 }
 
+/**
+ * Schemas Resource
+ *
+ * Schema Registry operations — register and manage vertical config schemas.
+ * Mirrors the Python SDK's `optropic.resources.schemas` module.
+ */
+
+interface VerticalSchema {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly verticalId: string;
+    readonly version: string;
+    readonly metadataSchema: Record<string, unknown>;
+    readonly exportFormats: string[];
+    readonly isActive: boolean;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly description?: string;
+}
+interface CreateSchemaParams {
+    readonly verticalId: string;
+    readonly metadataSchema: Record<string, unknown>;
+    readonly version?: string;
+    readonly exportFormats?: string[];
+    readonly description?: string;
+}
+interface UpdateSchemaParams {
+    readonly version?: string;
+    readonly metadataSchema?: Record<string, unknown>;
+    readonly exportFormats?: string[];
+    readonly description?: string;
+    readonly isActive?: boolean;
+}
+interface ListSchemasParams {
+    readonly page?: number;
+    readonly per_page?: number;
+    readonly include_inactive?: boolean;
+}
+interface ListSchemasResponse {
+    readonly data: VerticalSchema[];
+    readonly pagination: {
+        readonly total: number;
+        readonly page: number;
+        readonly perPage: number;
+        readonly totalPages: number;
+    };
+}
+interface SchemaValidationResult {
+    readonly valid: boolean;
+    readonly errors: Array<{
+        field: string;
+        message: string;
+        received?: string;
+    }>;
+}
+declare class SchemasResource {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * Register or update a vertical config schema.
+     * If a schema already exists for the verticalId, it will be updated.
+     */
+    create(params: CreateSchemaParams): Promise<VerticalSchema>;
+    /**
+     * List registered vertical schemas with pagination.
+     */
+    list(params?: ListSchemasParams): Promise<ListSchemasResponse>;
+    /**
+     * Get the active schema for a specific vertical.
+     */
+    get(verticalId: string): Promise<VerticalSchema>;
+    /**
+     * Update an existing vertical schema.
+     */
+    update(verticalId: string, params: UpdateSchemaParams): Promise<VerticalSchema>;
+    /**
+     * Deactivate a vertical schema (soft delete).
+     */
+    delete(verticalId: string): Promise<void>;
+    /**
+     * Pre-flight validation: check if assetConfig matches the registered schema.
+     *
+     * This is a client-side convenience that fetches the schema and validates locally.
+     * The server also validates on asset creation.
+     */
+    validate(verticalId: string, assetConfig: Record<string, unknown>): Promise<SchemaValidationResult>;
+    private buildQuery;
+    private stripUndefined;
+}
+
 /**
  * optropic - OptropicClient
  *
@@ -281,8 +509,11 @@ declare class OptropicClient {
     private readonly retryConfig;
     private readonly _sandbox;
     readonly assets: AssetsResource;
+    readonly audit: AuditResource;
+    readonly compliance: ComplianceResource;
     readonly keys: KeysResource;
     readonly keysets: KeysetsResource;
+    readonly schemas: SchemasResource;
     constructor(config: OptropicConfig);
     /** True when the client is in sandbox mode (test API key or explicit override). */
     get isSandbox(): boolean;
@@ -614,4 +845,4 @@ declare class ServiceUnavailableError extends OptropicError {
 
 declare const SDK_VERSION = "2.0.0";
 
-export { type ApiKey, type Asset, AssetsResource, AuthenticationError, type BatchCreateParams, type BatchCreateResult, BatchNotFoundError, CodeNotFoundError, type CreateAssetParams, type CreateKeyParams, type CreateKeyResult, type CreateKeysetParams, type ErrorCode, InvalidCodeError, InvalidGTINError, InvalidSerialError, KeysResource, type Keyset, KeysetsResource, type ListAssetsParams, type ListAssetsResponse, type ListKeysetsParams, type ListKeysetsResponse, NetworkError, OptropicClient, type OptropicConfig, OptropicError, QuotaExceededError, RateLimitedError, type RequestFn, type RetryConfig, RevokedCodeError, SDK_VERSION, ServiceUnavailableError, TimeoutError, type VerifyResult, type WebhookVerifyOptions, type WebhookVerifyResult, createClient, verifyWebhookSignature };
+export { type ApiKey, type Asset, AssetsResource, type AuditEvent, AuditResource, AuthenticationError, type BatchCreateParams, type BatchCreateResult, BatchNotFoundError, type ChainVerifyResult, CodeNotFoundError, type ComplianceConfig, ComplianceResource, type CreateAssetParams, type CreateAuditEventParams, type CreateKeyParams, type CreateKeyResult, type CreateKeysetParams, type CreateSchemaParams, type ErrorCode, type ExportParams, type ExportResult, InvalidCodeError, InvalidGTINError, InvalidSerialError, KeysResource, type Keyset, KeysetsResource, type ListAssetsParams, type ListAssetsResponse, type ListAuditParams, type ListAuditResponse, type ListKeysetsParams, type ListKeysetsResponse, type ListSchemasParams, type ListSchemasResponse, type MerkleProof, type MerkleRoot, NetworkError, OptropicClient, type OptropicConfig, OptropicError, QuotaExceededError, RateLimitedError, type RequestFn, type RetryConfig, RevokedCodeError, SDK_VERSION, type SchemaValidationResult, SchemasResource, ServiceUnavailableError, TimeoutError, type UpdateSchemaParams, type VerifyResult, type VerticalSchema, type WebhookVerifyOptions, type WebhookVerifyResult, createClient, verifyWebhookSignature };

package/dist/index.js

@@ -427,6 +427,117 @@ var AssetsResource = class {
   }
 };
 
+// src/resources/audit.ts
+var AuditResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * List audit events with optional filtering and pagination.
+   */
+  async list(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({ method: "GET", path: `/v1/audit${query}` });
+  }
+  /**
+   * Retrieve a single audit event by ID.
+   */
+  async get(eventId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/audit/${encodeURIComponent(eventId)}`
+    });
+  }
+  /**
+   * Record a custom audit event.
+   */
+  async create(params) {
+    return this.request({
+      method: "POST",
+      path: "/v1/audit",
+      body: {
+        event_type: params.eventType,
+        ...params.resourceId !== void 0 && { resource_id: params.resourceId },
+        ...params.resourceType !== void 0 && { resource_type: params.resourceType },
+        ...params.details !== void 0 && { details: params.details }
+      }
+    });
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+};
+
+// src/resources/compliance.ts
+var ComplianceResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * Verify the integrity of the full audit chain.
+   */
+  async verifyChain() {
+    return this.request({
+      method: "POST",
+      path: "/v1/compliance/verify-chain"
+    });
+  }
+  /**
+   * Return all Merkle roots.
+   */
+  async listMerkleRoots() {
+    return this.request({
+      method: "GET",
+      path: "/v1/compliance/merkle-roots"
+    });
+  }
+  /**
+   * Return a Merkle inclusion proof for a specific audit event.
+   */
+  async getMerkleProof(eventId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/compliance/merkle-proof/${encodeURIComponent(eventId)}`
+    });
+  }
+  /**
+   * Export audit data as a signed CSV.
+   */
+  async exportAudit(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({
+      method: "GET",
+      path: `/v1/compliance/export${query}`
+    });
+  }
+  /**
+   * Retrieve the current compliance configuration.
+   */
+  async getConfig() {
+    return this.request({
+      method: "GET",
+      path: "/v1/compliance/config"
+    });
+  }
+  /**
+   * Update the compliance mode.
+   */
+  async updateConfig(mode) {
+    return this.request({
+      method: "POST",
+      path: "/v1/compliance/config",
+      body: { compliance_mode: mode }
+    });
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+};
+
 // src/resources/keys.ts
 var KeysResource = class {
   constructor(request) {
@@ -463,6 +574,130 @@ var KeysetsResource = class {
   }
 };
 
+// src/resources/schemas.ts
+function checkType(value, expected) {
+  switch (expected) {
+    case "string":
+      return typeof value === "string";
+    case "number":
+      return typeof value === "number" && !Number.isNaN(value);
+    case "boolean":
+      return typeof value === "boolean";
+    case "date":
+      return typeof value === "string";
+    // ISO 8601 string
+    case "array":
+      return Array.isArray(value);
+    default:
+      return true;
+  }
+}
+var SchemasResource = class {
+  constructor(request) {
+    this.request = request;
+  }
+  /**
+   * Register or update a vertical config schema.
+   * If a schema already exists for the verticalId, it will be updated.
+   */
+  async create(params) {
+    const body = this.stripUndefined({
+      vertical_id: params.verticalId,
+      metadata_schema: params.metadataSchema,
+      version: params.version,
+      export_formats: params.exportFormats,
+      description: params.description
+    });
+    return this.request({ method: "POST", path: "/v1/schemas", body });
+  }
+  /**
+   * List registered vertical schemas with pagination.
+   */
+  async list(params) {
+    const query = params ? this.buildQuery(params) : "";
+    return this.request({ method: "GET", path: `/v1/schemas${query}` });
+  }
+  /**
+   * Get the active schema for a specific vertical.
+   */
+  async get(verticalId) {
+    return this.request({
+      method: "GET",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`
+    });
+  }
+  /**
+   * Update an existing vertical schema.
+   */
+  async update(verticalId, params) {
+    const body = this.stripUndefined({
+      version: params.version,
+      metadata_schema: params.metadataSchema,
+      export_formats: params.exportFormats,
+      description: params.description,
+      is_active: params.isActive
+    });
+    return this.request({
+      method: "PUT",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`,
+      body
+    });
+  }
+  /**
+   * Deactivate a vertical schema (soft delete).
+   */
+  async delete(verticalId) {
+    await this.request({
+      method: "DELETE",
+      path: `/v1/schemas/${encodeURIComponent(verticalId)}`
+    });
+  }
+  /**
+   * Pre-flight validation: check if assetConfig matches the registered schema.
+   *
+   * This is a client-side convenience that fetches the schema and validates locally.
+   * The server also validates on asset creation.
+   */
+  async validate(verticalId, assetConfig) {
+    let schema;
+    try {
+      schema = await this.get(verticalId);
+    } catch {
+      return { valid: true, errors: [] };
+    }
+    const errors = [];
+    const metadataSchema = schema.metadataSchema ?? {};
+    for (const [fieldName, fieldDef] of Object.entries(metadataSchema)) {
+      if (typeof fieldDef !== "object" || fieldDef === null) continue;
+      const def = fieldDef;
+      const value = assetConfig[fieldName];
+      if (def.required && (value === void 0 || value === null || value === "")) {
+        const label = def.label ?? fieldName;
+        errors.push({ field: fieldName, message: `Required field "${label}" is missing` });
+        continue;
+      }
+      if (value === void 0 || value === null) continue;
+      const expectedType = def.type ?? "string";
+      if (!checkType(value, expectedType)) {
+        errors.push({
+          field: fieldName,
+          message: `"${def.label ?? fieldName}" must be a ${expectedType}`,
+          received: typeof value
+        });
+      }
+    }
+    return { valid: errors.length === 0, errors };
+  }
+  buildQuery(params) {
+    const entries = Object.entries(params).filter(([, v]) => v !== void 0);
+    if (entries.length === 0) return "";
+    return "?" + entries.map(([k, v]) => `${k}=${encodeURIComponent(String(v))}`).join("&");
+  }
+  stripUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== void 0));
+  }
+};
+
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.optropic.com";
 var DEFAULT_TIMEOUT = 3e4;
@@ -479,8 +714,11 @@ var OptropicClient = class {
   retryConfig;
   _sandbox;
   assets;
+  audit;
+  compliance;
   keys;
   keysets;
+  schemas;
   constructor(config) {
     if (!config.apiKey || !this.isValidApiKey(config.apiKey)) {
       throw new AuthenticationError(
@@ -507,8 +745,11 @@ var OptropicClient = class {
     };
     const boundRequest = this.request.bind(this);
     this.assets = new AssetsResource(boundRequest, this);
+    this.audit = new AuditResource(boundRequest);
+    this.compliance = new ComplianceResource(boundRequest);
     this.keys = new KeysResource(boundRequest);
     this.keysets = new KeysetsResource(boundRequest);
+    this.schemas = new SchemasResource(boundRequest);
   }
   // ─────────────────────────────────────────────────────────────────────────
   // ENVIRONMENT DETECTION
@@ -703,9 +944,11 @@ async function verifyWebhookSignature(options) {
 var SDK_VERSION2 = "2.0.0";
 export {
   AssetsResource,
+  AuditResource,
   AuthenticationError,
   BatchNotFoundError,
   CodeNotFoundError,
+  ComplianceResource,
   InvalidCodeError,
   InvalidGTINError,
   InvalidSerialError,
@@ -718,6 +961,7 @@ export {
   RateLimitedError,
   RevokedCodeError,
   SDK_VERSION2 as SDK_VERSION,
+  SchemasResource,
   ServiceUnavailableError,
   TimeoutError,
   createClient,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "optropic",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Official Optropic SDK for TypeScript and JavaScript",
   "type": "module",
   "main": "./dist/index.js",
@@ -32,7 +32,10 @@
     "gtin",
     "serialization"
   ],
-  "author": "Optropic GmbH",
+  "author": {
+    "name": "Virtrex GmbH",
+    "url": "https://optropic.com"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",