signyu 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BN Habitat Pvt Ltd (SignYu)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,193 @@
+# SignYu Node.js SDK
+
+Official Node.js SDK for the [SignYu](https://signyu.com) Aadhaar eSign API. Upload a PDF, add signers, and send it for legally valid Aadhaar OTP based eSignature under the IT Act 2000, all from your backend.
+
+- Zero runtime dependencies (uses the built-in `fetch`, `FormData` and `Blob`)
+- ESM and CommonJS builds with full TypeScript types
+- Webhook signature verification with constant time comparison
+
+API docs: https://signyu.com/docs. API overview and pricing: https://signyu.com/api (signatures from ₹15 each on credit packs of 10 or more).
+
+## Install
+
+```bash
+npm install signyu
+```
+
+Requires Node.js 18 or newer.
+
+## Quickstart
+
+```ts
+import { readFileSync } from "node:fs";
+import { SignYu } from "signyu";
+
+const signyu = new SignYu({ apiKey: process.env.SIGNYU_API_KEY! });
+
+// 1. Upload the PDF
+const doc = await signyu.documents.create({
+  file: readFileSync("agreement.pdf"),
+  fileName: "agreement.pdf",
+  name: "Service Agreement",
+});
+
+// 2. Add signers (they sign in this order, up to 6 per document)
+await signyu.documents.addSigners(doc.documentId, [
+  { name: "Asha Rao", phone: "9876543210", email: "asha@example.com" },
+  { name: "Vikram Nair", phone: "9812345678", email: "vikram@example.com" },
+]);
+
+// 3. Send: deducts one credit per signer and emails each signer a link
+const sent = await signyu.documents.send(doc.documentId);
+console.log(sent.signers.map((s) => s.signUrl));
+
+// 4. Check progress (or use webhooks)
+const status = await signyu.documents.get(doc.documentId);
+console.log(status.status); // PENDING, SENT or COMPLETED
+```
+
+CommonJS works too: `const { SignYu } = require("signyu");`
+
+Get your API key from the dashboard under Developers (https://signyu.com/app/developers). Keep it on your server and never ship it to a browser.
+
+## Configuration
+
+```ts
+const signyu = new SignYu({
+  apiKey: "sk_live_...",          // required
+  baseUrl: "https://signyu.com",  // optional
+  timeoutMs: 60_000,              // optional, per request
+  fetch: customFetch,             // optional, defaults to globalThis.fetch
+});
+```
+
+## Methods
+
+### `documents.create({ file, fileName?, name? })`
+
+`POST /api/v1/documents`. Uploads a PDF (at most 10MB) and creates a document in `PENDING` state. `file` can be a `Buffer`, `Uint8Array`, `ArrayBuffer` or `Blob`. It is always sent as `application/pdf`. `fileName` defaults to `document.pdf`, and `name` defaults to the file name.
+
+Returns `{ documentId, name, status }`.
+
+### `documents.list({ limit?, offset? })`
+
+`GET /api/v1/documents`. Your documents, most recent first. `limit` is 1 to 100 (default 20), `offset` defaults to 0.
+
+Returns `{ documents: [{ documentId, name, status, createdAt, signers: { total, signed } }], limit, offset }`.
+
+### `documents.get(documentId)`
+
+`GET /api/v1/documents/{documentId}`. Status and per-signer progress. Once `COMPLETED`, `downloadUrl` is a temporary presigned link to the signed PDF and `certificateUrl` points at the certificate endpoint. Each signer's `signUrl` is `null` until the document is sent.
+
+### `documents.addSigners(documentId, signers)`
+
+`POST /api/v1/documents/{documentId}/signers`. Only while the document is `PENDING`. Each signer needs `name`, `phone` (digits only, at least 10) and `email`. At most 6 signers per document.
+
+Optional custom stamp placement (PDF points, origin at the bottom-left of the page, box at least 140 x 110, one box per page):
+
+```ts
+await signyu.documents.addSigners(documentId, [
+  {
+    name: "Asha Rao",
+    phone: "9876543210",
+    email: "asha@example.com",
+    advanced: {
+      signaturePlacement: {
+        positions: [{ page: 2, x: 31, y: 257, width: 253, height: 110 }],
+      },
+    },
+  },
+]);
+```
+
+Returns `{ signers: [{ signerId, name, email, signingOrder, advanced? }] }`.
+
+### `documents.send(documentId)`
+
+`POST /api/v1/documents/{documentId}/send`. Deducts one credit per signer, marks the document `SENT`, emails each signer a signing link and returns the links. Call it once per document.
+
+Returns `{ documentId, status: "SENT", creditsRemaining, signers: [{ signerId, name, email, signingOrder, signUrl }] }`.
+
+### `documents.getCertificate(documentId)`
+
+`GET /api/v1/documents/{documentId}/certificate`. Returns the completion certificate and audit trail PDF as a `Uint8Array`. Only available once the document is `COMPLETED`, otherwise it throws a `SignYuError` with code `invalid_state` (409).
+
+```ts
+import { writeFileSync } from "node:fs";
+writeFileSync("certificate.pdf", await signyu.documents.getCertificate(documentId));
+```
+
+## Webhooks
+
+SignYu sends `signer.signed` and `document.completed` events as a JSON `POST`. Each request carries an `X-SignSetu-Signature: sha256=<hex>` header, an HMAC-SHA256 of the raw request body keyed with your endpoint's signing secret (`whsec_...`, shown in the dashboard). Always verify against the raw body bytes, not a re-serialized object.
+
+```ts
+import express from "express";
+import { SignYu, WebhookSignatureError } from "signyu";
+
+const signyu = new SignYu({ apiKey: process.env.SIGNYU_API_KEY! });
+const app = express();
+
+app.post("/webhooks/signyu", express.raw({ type: "application/json" }), (req, res) => {
+  try {
+    const event = signyu.webhooks.constructEvent(
+      req.body, // Buffer
+      req.header("X-SignSetu-Signature"),
+      process.env.SIGNYU_WEBHOOK_SECRET!
+    );
+    if (event.event === "document.completed") {
+      // event.certificateUrl, event.signers ...
+    }
+    res.sendStatus(200);
+  } catch (err) {
+    if (err instanceof WebhookSignatureError) return res.sendStatus(400);
+    throw err;
+  }
+});
+```
+
+The same helpers are exported directly: `verifySignature(rawBody, header, secret)` returns a boolean, and `constructEvent(rawBody, header, secret)` returns the typed event or throws `WebhookSignatureError`. Deliveries can repeat, so make your handler idempotent.
+
+## Errors
+
+Every non-2xx response throws a `SignYuError`:
+
+```ts
+import { SignYuError } from "signyu";
+
+try {
+  await signyu.documents.send(documentId);
+} catch (err) {
+  if (err instanceof SignYuError) {
+    console.log(err.status);  // 402
+    console.log(err.code);    // "insufficient_credits"
+    console.log(err.message); // "You need 2 credits to send this document."
+  }
+}
+```
+
+| Status | `code` | Meaning |
+| --- | --- | --- |
+| 400 | `invalid_content_type`, `invalid_request`, `invalid_file`, `no_signers`, `signer_limit_reached` | The request is invalid. |
+| 401 | `unauthorized` | Missing or invalid API key. |
+| 402 | `insufficient_credits` | Not enough credits to send. |
+| 403 | `api_access_not_enabled` | The account has no API access subscription. |
+| 404 | `not_found` | The document does not exist or is not yours. |
+| 409 | `invalid_state` | Not allowed in the document's current state. |
+| 413 | `file_too_large` | The PDF is over 10MB. |
+| 429 | `rate_limited` | Too many requests, retry with backoff. |
+| 500 | `internal_error` | Something went wrong on our side. |
+| 0 | `connection_error`, `timeout` | The request never got a response. |
+
+Retry `429` and `5xx` with backoff. Do not blindly retry `send`, since a successful send that timed out on your side would charge credits again.
+
+## Links
+
+- Docs: https://signyu.com/docs
+- API: https://signyu.com/api
+- OpenAPI spec: https://signyu.com/openapi.yaml
+- Support: contact@mail.signyu.com
+
+## License
+
+MIT

package/dist/index.cjs

@@ -0,0 +1,266 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
+  EVENT_HEADER: () => EVENT_HEADER,
+  SIGNATURE_HEADER: () => SIGNATURE_HEADER,
+  SignYu: () => SignYu,
+  SignYuError: () => SignYuError,
+  VERSION: () => VERSION,
+  WebhookSignatureError: () => WebhookSignatureError,
+  computeSignature: () => computeSignature,
+  constructEvent: () => constructEvent,
+  verifySignature: () => verifySignature,
+  webhooks: () => webhooks
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/errors.ts
+var SignYuError = class extends Error {
+  status;
+  code;
+  /** Parsed response body, when there was one. */
+  body;
+  constructor(opts) {
+    super(opts.message);
+    this.name = "SignYuError";
+    this.status = opts.status;
+    this.code = opts.code;
+    this.body = opts.body;
+    if (opts.cause !== void 0) {
+      this.cause = opts.cause;
+    }
+  }
+};
+var WebhookSignatureError = class extends Error {
+  constructor(message = "Webhook signature verification failed.") {
+    super(message);
+    this.name = "WebhookSignatureError";
+  }
+};
+
+// src/webhooks.ts
+var import_node_crypto = require("crypto");
+var SIGNATURE_HEADER = "X-SignSetu-Signature";
+var EVENT_HEADER = "X-SignSetu-Event";
+function toBuffer(payload) {
+  if (typeof payload === "string") return Buffer.from(payload, "utf8");
+  if (payload instanceof ArrayBuffer) return Buffer.from(new Uint8Array(payload));
+  return Buffer.from(payload.buffer, payload.byteOffset, payload.byteLength);
+}
+function computeSignature(payload, secret) {
+  const hex = (0, import_node_crypto.createHmac)("sha256", secret).update(toBuffer(payload)).digest("hex");
+  return `sha256=${hex}`;
+}
+function verifySignature(payload, signatureHeader, secret) {
+  if (!signatureHeader || !secret) return false;
+  const expected = Buffer.from(computeSignature(payload, secret), "utf8");
+  const received = Buffer.from(signatureHeader.trim(), "utf8");
+  if (expected.length !== received.length) return false;
+  return (0, import_node_crypto.timingSafeEqual)(expected, received);
+}
+function constructEvent(payload, signatureHeader, secret) {
+  if (!verifySignature(payload, signatureHeader, secret)) {
+    throw new WebhookSignatureError();
+  }
+  return JSON.parse(toBuffer(payload).toString("utf8"));
+}
+var webhooks = {
+  SIGNATURE_HEADER,
+  EVENT_HEADER,
+  computeSignature,
+  verifySignature,
+  constructEvent
+};
+
+// src/version.ts
+var VERSION = "0.1.0";
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://signyu.com";
+function toPdfBlob(file) {
+  if (typeof Blob !== "undefined" && file instanceof Blob) {
+    return file.type === "application/pdf" ? file : new Blob([file], { type: "application/pdf" });
+  }
+  if (file instanceof ArrayBuffer) {
+    return new Blob([file], { type: "application/pdf" });
+  }
+  if (file instanceof Uint8Array) {
+    const copy = new Uint8Array(file.byteLength);
+    copy.set(file);
+    return new Blob([copy], { type: "application/pdf" });
+  }
+  throw new TypeError("file must be a Buffer, Uint8Array, ArrayBuffer or Blob.");
+}
+var Documents = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  /** `POST /api/v1/documents`: upload a PDF and create a `PENDING` document. */
+  create(params) {
+    if (!params || params.file === void 0 || params.file === null) {
+      throw new TypeError("documents.create requires a `file`.");
+    }
+    const form = new FormData();
+    form.append("file", toPdfBlob(params.file), params.fileName ?? "document.pdf");
+    if (params.name !== void 0) form.append("name", params.name);
+    return this.client._request({
+      method: "POST",
+      path: "/api/v1/documents",
+      body: form
+    });
+  }
+  /** `GET /api/v1/documents`: your documents, most recent first. */
+  list(params = {}) {
+    return this.client._request({
+      method: "GET",
+      path: "/api/v1/documents",
+      query: { limit: params.limit, offset: params.offset }
+    });
+  }
+  /** `GET /api/v1/documents/{documentId}`: status and per-signer progress. */
+  get(documentId) {
+    return this.client._request({
+      method: "GET",
+      path: `/api/v1/documents/${encodeURIComponent(documentId)}`
+    });
+  }
+  /** `POST /api/v1/documents/{documentId}/signers`: add signers while `PENDING` (max 6 per document). */
+  addSigners(documentId, signers) {
+    return this.client._request({
+      method: "POST",
+      path: `/api/v1/documents/${encodeURIComponent(documentId)}/signers`,
+      json: { signers }
+    });
+  }
+  /**
+   * `POST /api/v1/documents/{documentId}/send`: deducts one credit per signer,
+   * emails signing links and returns them. Not idempotent: call it once.
+   */
+  send(documentId) {
+    return this.client._request({
+      method: "POST",
+      path: `/api/v1/documents/${encodeURIComponent(documentId)}/send`
+    });
+  }
+  /**
+   * `GET /api/v1/documents/{documentId}/certificate`: the completion
+   * certificate and audit trail PDF as raw bytes. Only available once the
+   * document is `COMPLETED` (otherwise `409 invalid_state`).
+   */
+  getCertificate(documentId) {
+    return this.client._request({
+      method: "GET",
+      path: `/api/v1/documents/${encodeURIComponent(documentId)}/certificate`,
+      expect: "binary"
+    });
+  }
+};
+var SignYu = class {
+  documents;
+  webhooks = webhooks;
+  baseUrl;
+  apiKey;
+  timeoutMs;
+  fetchImpl;
+  constructor(options) {
+    if (!options || !options.apiKey) {
+      throw new TypeError("SignYu requires an `apiKey`.");
+    }
+    this.apiKey = options.apiKey;
+    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.timeoutMs = options.timeoutMs ?? 6e4;
+    const f = options.fetch ?? globalThis.fetch;
+    if (typeof f !== "function") {
+      throw new TypeError("No global fetch found. SignYu requires Node.js 18 or newer.");
+    }
+    this.fetchImpl = f;
+    this.documents = new Documents(this);
+  }
+  /** @internal */
+  async _request(opts) {
+    const url = new URL(this.baseUrl + opts.path);
+    for (const [k, v] of Object.entries(opts.query ?? {})) {
+      if (v !== void 0) url.searchParams.set(k, String(v));
+    }
+    const headers = {
+      Authorization: `Bearer ${this.apiKey}`,
+      Accept: opts.expect === "binary" ? "application/pdf" : "application/json",
+      "User-Agent": `signyu-node/${VERSION}`
+    };
+    let body = opts.body;
+    if (opts.json !== void 0) {
+      headers["Content-Type"] = "application/json";
+      body = JSON.stringify(opts.json);
+    }
+    let res;
+    try {
+      res = await this.fetchImpl(url.toString(), {
+        method: opts.method,
+        headers,
+        body,
+        signal: AbortSignal.timeout(this.timeoutMs)
+      });
+    } catch (err) {
+      const isTimeout = err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
+      throw new SignYuError({
+        status: 0,
+        code: isTimeout ? "timeout" : "connection_error",
+        message: isTimeout ? `Request timed out after ${this.timeoutMs}ms.` : `Could not reach the SignYu API: ${err instanceof Error ? err.message : String(err)}`,
+        cause: err
+      });
+    }
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      let parsed = void 0;
+      try {
+        parsed = text ? JSON.parse(text) : void 0;
+      } catch {
+        parsed = text;
+      }
+      const errBody = parsed && typeof parsed === "object" ? parsed : {};
+      const code = typeof errBody.error === "string" ? errBody.error : res.status === 429 ? "rate_limited" : "http_error";
+      const message = typeof errBody.message === "string" ? errBody.message : `SignYu API request failed with status ${res.status}.`;
+      throw new SignYuError({ status: res.status, code, message, body: parsed });
+    }
+    if (opts.expect === "binary") {
+      return new Uint8Array(await res.arrayBuffer());
+    }
+    return await res.json();
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_BASE_URL,
+  EVENT_HEADER,
+  SIGNATURE_HEADER,
+  SignYu,
+  SignYuError,
+  VERSION,
+  WebhookSignatureError,
+  computeSignature,
+  constructEvent,
+  verifySignature,
+  webhooks
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/webhooks.ts","../src/version.ts","../src/client.ts"],"sourcesContent":["export { SignYu, DEFAULT_BASE_URL } from \"./client\";\nexport type {\n  SignYuOptions,\n  CreateDocumentParams,\n  ListDocumentsParams,\n  FileInput,\n  Documents,\n} from \"./client\";\nexport { SignYuError, WebhookSignatureError } from \"./errors\";\nexport {\n  webhooks,\n  verifySignature,\n  constructEvent,\n  computeSignature,\n  SIGNATURE_HEADER,\n  EVENT_HEADER,\n} from \"./webhooks\";\nexport type { Webhooks, WebhookPayload } from \"./webhooks\";\nexport { VERSION } from \"./version\";\nexport * from \"./types\";\n","/**\n * Thrown for any non-2xx API response, network failure or timeout.\n *\n * `code` is the API's machine readable `error` field (for example\n * `insufficient_credits`). For responses without a JSON error body it is\n * `rate_limited` (429) or `http_error`; for network failures it is\n * `connection_error` and for timeouts `timeout`, both with `status` 0.\n */\nexport class SignYuError extends Error {\n  readonly status: number;\n  readonly code: string;\n  /** Parsed response body, when there was one. */\n  readonly body: unknown;\n\n  constructor(opts: {\n    status: number;\n    code: string;\n    message: string;\n    body?: unknown;\n    cause?: unknown;\n  }) {\n    super(opts.message);\n    this.name = \"SignYuError\";\n    this.status = opts.status;\n    this.code = opts.code;\n    this.body = opts.body;\n    if (opts.cause !== undefined) {\n      (this as { cause?: unknown }).cause = opts.cause;\n    }\n  }\n}\n\n/** Thrown by `webhooks.constructEvent` when the signature does not match. */\nexport class WebhookSignatureError extends Error {\n  constructor(message = \"Webhook signature verification failed.\") {\n    super(message);\n    this.name = \"WebhookSignatureError\";\n  }\n}\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { WebhookSignatureError } from \"./errors\";\nimport type { WebhookEvent } from \"./types\";\n\n/** Header carrying the signature, `sha256=<hex>`. */\nexport const SIGNATURE_HEADER = \"X-SignSetu-Signature\";\n/** Header carrying the event type, for example `signer.signed`. */\nexport const EVENT_HEADER = \"X-SignSetu-Event\";\n\nexport type WebhookPayload = string | Uint8Array | ArrayBuffer;\n\nfunction toBuffer(payload: WebhookPayload): Buffer {\n  if (typeof payload === \"string\") return Buffer.from(payload, \"utf8\");\n  if (payload instanceof ArrayBuffer) return Buffer.from(new Uint8Array(payload));\n  return Buffer.from(payload.buffer, payload.byteOffset, payload.byteLength);\n}\n\n/** Computes the `sha256=<hex>` header value SignYu sends for a raw body. */\nexport function computeSignature(payload: WebhookPayload, secret: string): string {\n  const hex = createHmac(\"sha256\", secret).update(toBuffer(payload)).digest(\"hex\");\n  return `sha256=${hex}`;\n}\n\n/**\n * Returns true when `signatureHeader` (the `X-SignSetu-Signature` value) is a\n * valid HMAC-SHA256 of the raw request body under `secret`. Pass the raw body\n * bytes exactly as received; a re-serialized object will not match.\n * Comparison is constant time.\n */\nexport function verifySignature(\n  payload: WebhookPayload,\n  signatureHeader: string | null | undefined,\n  secret: string\n): boolean {\n  if (!signatureHeader || !secret) return false;\n  const expected = Buffer.from(computeSignature(payload, secret), \"utf8\");\n  const received = Buffer.from(signatureHeader.trim(), \"utf8\");\n  if (expected.length !== received.length) return false;\n  return timingSafeEqual(expected, received);\n}\n\n/**\n * Verifies the signature and returns the parsed event. Throws\n * `WebhookSignatureError` if the signature is missing or invalid.\n */\nexport function constructEvent(\n  payload: WebhookPayload,\n  signatureHeader: string | null | undefined,\n  secret: string\n): WebhookEvent {\n  if (!verifySignature(payload, signatureHeader, secret)) {\n    throw new WebhookSignatureError();\n  }\n  return JSON.parse(toBuffer(payload).toString(\"utf8\")) as WebhookEvent;\n}\n\nexport const webhooks = {\n  SIGNATURE_HEADER,\n  EVENT_HEADER,\n  computeSignature,\n  verifySignature,\n  constructEvent,\n};\n\nexport type Webhooks = typeof webhooks;\n","// Keep in sync with package.json \"version\".\nexport const VERSION = \"0.1.0\";\n","import { SignYuError } from \"./errors\";\nimport { webhooks, type Webhooks } from \"./webhooks\";\nimport type {\n  AddSignersResponse,\n  CreatedDocument,\n  Document,\n  DocumentList,\n  SendDocumentResponse,\n  SignerInput,\n} from \"./types\";\nimport { VERSION } from \"./version\";\n\nexport const DEFAULT_BASE_URL = \"https://signyu.com\";\n\nexport interface SignYuOptions {\n  /** Your secret API key, `sk_live_...`. Keep it server side. */\n  apiKey: string;\n  /** Defaults to `https://signyu.com`. */\n  baseUrl?: string;\n  /** Per-request timeout in milliseconds. Defaults to 60000. */\n  timeoutMs?: number;\n  /** Custom fetch implementation (defaults to the global `fetch`). */\n  fetch?: typeof fetch;\n}\n\nexport type FileInput = Blob | Uint8Array | ArrayBuffer;\n\nexport interface CreateDocumentParams {\n  /** The PDF to sign, at most 10MB. A Node.js `Buffer` works here. */\n  file: FileInput;\n  /** File name sent with the upload. Defaults to `document.pdf`. */\n  fileName?: string;\n  /** Label for the document. Defaults to the file name. */\n  name?: string;\n}\n\nexport interface ListDocumentsParams {\n  /** 1 to 100, default 20. */\n  limit?: number;\n  /** Default 0. */\n  offset?: number;\n}\n\ninterface RequestOptions {\n  method: \"GET\" | \"POST\";\n  path: string;\n  query?: Record<string, string | number | undefined>;\n  body?: BodyInit;\n  json?: unknown;\n  expect?: \"json\" | \"binary\";\n}\n\nfunction toPdfBlob(file: FileInput): Blob {\n  if (typeof Blob !== \"undefined\" && file instanceof Blob) {\n    // The API rejects anything whose part type is not application/pdf.\n    return file.type === \"application/pdf\"\n      ? file\n      : new Blob([file], { type: \"application/pdf\" });\n  }\n  if (file instanceof ArrayBuffer) {\n    return new Blob([file], { type: \"application/pdf\" });\n  }\n  if (file instanceof Uint8Array) {\n    // Copy into a plain ArrayBuffer-backed view so Blob accepts it everywhere.\n    const copy = new Uint8Array(file.byteLength);\n    copy.set(file);\n    return new Blob([copy], { type: \"application/pdf\" });\n  }\n  throw new TypeError(\"file must be a Buffer, Uint8Array, ArrayBuffer or Blob.\");\n}\n\nclass Documents {\n  constructor(private readonly client: SignYu) {}\n\n  /** `POST /api/v1/documents`: upload a PDF and create a `PENDING` document. */\n  create(params: CreateDocumentParams): Promise<CreatedDocument> {\n    if (!params || params.file === undefined || params.file === null) {\n      throw new TypeError(\"documents.create requires a `file`.\");\n    }\n    const form = new FormData();\n    form.append(\"file\", toPdfBlob(params.file), params.fileName ?? \"document.pdf\");\n    if (params.name !== undefined) form.append(\"name\", params.name);\n    return this.client._request<CreatedDocument>({\n      method: \"POST\",\n      path: \"/api/v1/documents\",\n      body: form,\n    });\n  }\n\n  /** `GET /api/v1/documents`: your documents, most recent first. */\n  list(params: ListDocumentsParams = {}): Promise<DocumentList> {\n    return this.client._request<DocumentList>({\n      method: \"GET\",\n      path: \"/api/v1/documents\",\n      query: { limit: params.limit, offset: params.offset },\n    });\n  }\n\n  /** `GET /api/v1/documents/{documentId}`: status and per-signer progress. */\n  get(documentId: string): Promise<Document> {\n    return this.client._request<Document>({\n      method: \"GET\",\n      path: `/api/v1/documents/${encodeURIComponent(documentId)}`,\n    });\n  }\n\n  /** `POST /api/v1/documents/{documentId}/signers`: add signers while `PENDING` (max 6 per document). */\n  addSigners(documentId: string, signers: SignerInput[]): Promise<AddSignersResponse> {\n    return this.client._request<AddSignersResponse>({\n      method: \"POST\",\n      path: `/api/v1/documents/${encodeURIComponent(documentId)}/signers`,\n      json: { signers },\n    });\n  }\n\n  /**\n   * `POST /api/v1/documents/{documentId}/send`: deducts one credit per signer,\n   * emails signing links and returns them. Not idempotent: call it once.\n   */\n  send(documentId: string): Promise<SendDocumentResponse> {\n    return this.client._request<SendDocumentResponse>({\n      method: \"POST\",\n      path: `/api/v1/documents/${encodeURIComponent(documentId)}/send`,\n    });\n  }\n\n  /**\n   * `GET /api/v1/documents/{documentId}/certificate`: the completion\n   * certificate and audit trail PDF as raw bytes. Only available once the\n   * document is `COMPLETED` (otherwise `409 invalid_state`).\n   */\n  getCertificate(documentId: string): Promise<Uint8Array> {\n    return this.client._request<Uint8Array>({\n      method: \"GET\",\n      path: `/api/v1/documents/${encodeURIComponent(documentId)}/certificate`,\n      expect: \"binary\",\n    });\n  }\n}\n\nexport class SignYu {\n  readonly documents: Documents;\n  readonly webhooks: Webhooks = webhooks;\n  readonly baseUrl: string;\n\n  private readonly apiKey: string;\n  private readonly timeoutMs: number;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(options: SignYuOptions) {\n    if (!options || !options.apiKey) {\n      throw new TypeError(\"SignYu requires an `apiKey`.\");\n    }\n    this.apiKey = options.apiKey;\n    this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this.timeoutMs = options.timeoutMs ?? 60_000;\n    const f = options.fetch ?? globalThis.fetch;\n    if (typeof f !== \"function\") {\n      throw new TypeError(\"No global fetch found. SignYu requires Node.js 18 or newer.\");\n    }\n    this.fetchImpl = f;\n    this.documents = new Documents(this);\n  }\n\n  /** @internal */\n  async _request<T>(opts: RequestOptions): Promise<T> {\n    const url = new URL(this.baseUrl + opts.path);\n    for (const [k, v] of Object.entries(opts.query ?? {})) {\n      if (v !== undefined) url.searchParams.set(k, String(v));\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${this.apiKey}`,\n      Accept: opts.expect === \"binary\" ? \"application/pdf\" : \"application/json\",\n      \"User-Agent\": `signyu-node/${VERSION}`,\n    };\n    let body = opts.body;\n    if (opts.json !== undefined) {\n      headers[\"Content-Type\"] = \"application/json\";\n      body = JSON.stringify(opts.json);\n    }\n\n    let res: Response;\n    try {\n      res = await this.fetchImpl(url.toString(), {\n        method: opts.method,\n        headers,\n        body,\n        signal: AbortSignal.timeout(this.timeoutMs),\n      });\n    } catch (err) {\n      const isTimeout =\n        err instanceof Error && (err.name === \"TimeoutError\" || err.name === \"AbortError\");\n      throw new SignYuError({\n        status: 0,\n        code: isTimeout ? \"timeout\" : \"connection_error\",\n        message: isTimeout\n          ? `Request timed out after ${this.timeoutMs}ms.`\n          : `Could not reach the SignYu API: ${err instanceof Error ? err.message : String(err)}`,\n        cause: err,\n      });\n    }\n\n    if (!res.ok) {\n      const text = await res.text().catch(() => \"\");\n      let parsed: unknown = undefined;\n      try {\n        parsed = text ? JSON.parse(text) : undefined;\n      } catch {\n        parsed = text;\n      }\n      const errBody =\n        parsed && typeof parsed === \"object\" ? (parsed as Record<string, unknown>) : {};\n      const code =\n        typeof errBody.error === \"string\"\n          ? errBody.error\n          : res.status === 429\n            ? \"rate_limited\"\n            : \"http_error\";\n      const message =\n        typeof errBody.message === \"string\"\n          ? errBody.message\n          : `SignYu API request failed with status ${res.status}.`;\n      throw new SignYuError({ status: res.status, code, message, body: parsed });\n    }\n\n    if (opts.expect === \"binary\") {\n      return new Uint8Array(await res.arrayBuffer()) as T;\n    }\n    return (await res.json()) as T;\n  }\n}\n\nexport type { Documents };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQO,IAAM,cAAN,cAA0B,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EAET,YAAY,MAMT;AACD,UAAM,KAAK,OAAO;AAClB,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,OAAO,KAAK;AACjB,SAAK,OAAO,KAAK;AACjB,QAAI,KAAK,UAAU,QAAW;AAC5B,MAAC,KAA6B,QAAQ,KAAK;AAAA,IAC7C;AAAA,EACF;AACF;AAGO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,YAAY,UAAU,0CAA0C;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACtCA,yBAA4C;AAKrC,IAAM,mBAAmB;AAEzB,IAAM,eAAe;AAI5B,SAAS,SAAS,SAAiC;AACjD,MAAI,OAAO,YAAY,SAAU,QAAO,OAAO,KAAK,SAAS,MAAM;AACnE,MAAI,mBAAmB,YAAa,QAAO,OAAO,KAAK,IAAI,WAAW,OAAO,CAAC;AAC9E,SAAO,OAAO,KAAK,QAAQ,QAAQ,QAAQ,YAAY,QAAQ,UAAU;AAC3E;AAGO,SAAS,iBAAiB,SAAyB,QAAwB;AAChF,QAAM,UAAM,+BAAW,UAAU,MAAM,EAAE,OAAO,SAAS,OAAO,CAAC,EAAE,OAAO,KAAK;AAC/E,SAAO,UAAU,GAAG;AACtB;AAQO,SAAS,gBACd,SACA,iBACA,QACS;AACT,MAAI,CAAC,mBAAmB,CAAC,OAAQ,QAAO;AACxC,QAAM,WAAW,OAAO,KAAK,iBAAiB,SAAS,MAAM,GAAG,MAAM;AACtE,QAAM,WAAW,OAAO,KAAK,gBAAgB,KAAK,GAAG,MAAM;AAC3D,MAAI,SAAS,WAAW,SAAS,OAAQ,QAAO;AAChD,aAAO,oCAAgB,UAAU,QAAQ;AAC3C;AAMO,SAAS,eACd,SACA,iBACA,QACc;AACd,MAAI,CAAC,gBAAgB,SAAS,iBAAiB,MAAM,GAAG;AACtD,UAAM,IAAI,sBAAsB;AAAA,EAClC;AACA,SAAO,KAAK,MAAM,SAAS,OAAO,EAAE,SAAS,MAAM,CAAC;AACtD;AAEO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;AC7DO,IAAM,UAAU;;;ACWhB,IAAM,mBAAmB;AAwChC,SAAS,UAAU,MAAuB;AACxC,MAAI,OAAO,SAAS,eAAe,gBAAgB,MAAM;AAEvD,WAAO,KAAK,SAAS,oBACjB,OACA,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAAA,EAClD;AACA,MAAI,gBAAgB,aAAa;AAC/B,WAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAAA,EACrD;AACA,MAAI,gBAAgB,YAAY;AAE9B,UAAM,OAAO,IAAI,WAAW,KAAK,UAAU;AAC3C,SAAK,IAAI,IAAI;AACb,WAAO,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAAA,EACrD;AACA,QAAM,IAAI,UAAU,yDAAyD;AAC/E;AAEA,IAAM,YAAN,MAAgB;AAAA,EACd,YAA6B,QAAgB;AAAhB;AAAA,EAAiB;AAAA,EAAjB;AAAA;AAAA,EAG7B,OAAO,QAAwD;AAC7D,QAAI,CAAC,UAAU,OAAO,SAAS,UAAa,OAAO,SAAS,MAAM;AAChE,YAAM,IAAI,UAAU,qCAAqC;AAAA,IAC3D;AACA,UAAM,OAAO,IAAI,SAAS;AAC1B,SAAK,OAAO,QAAQ,UAAU,OAAO,IAAI,GAAG,OAAO,YAAY,cAAc;AAC7E,QAAI,OAAO,SAAS,OAAW,MAAK,OAAO,QAAQ,OAAO,IAAI;AAC9D,WAAO,KAAK,OAAO,SAA0B;AAAA,MAC3C,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,KAAK,SAA8B,CAAC,GAA0B;AAC5D,WAAO,KAAK,OAAO,SAAuB;AAAA,MACxC,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,OAAO,EAAE,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AAAA,IACtD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,IAAI,YAAuC;AACzC,WAAO,KAAK,OAAO,SAAmB;AAAA,MACpC,QAAQ;AAAA,MACR,MAAM,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,IAC3D,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,WAAW,YAAoB,SAAqD;AAClF,WAAO,KAAK,OAAO,SAA6B;AAAA,MAC9C,QAAQ;AAAA,MACR,MAAM,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,MACzD,MAAM,EAAE,QAAQ;AAAA,IAClB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,KAAK,YAAmD;AACtD,WAAO,KAAK,OAAO,SAA+B;AAAA,MAChD,QAAQ;AAAA,MACR,MAAM,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,IAC3D,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,eAAe,YAAyC;AACtD,WAAO,KAAK,OAAO,SAAqB;AAAA,MACtC,QAAQ;AAAA,MACR,MAAM,qBAAqB,mBAAmB,UAAU,CAAC;AAAA,MACzD,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF;AAEO,IAAM,SAAN,MAAa;AAAA,EACT;AAAA,EACA,WAAqB;AAAA,EACrB;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAwB;AAClC,QAAI,CAAC,WAAW,CAAC,QAAQ,QAAQ;AAC/B,YAAM,IAAI,UAAU,8BAA8B;AAAA,IACpD;AACA,SAAK,SAAS,QAAQ;AACtB,SAAK,WAAW,QAAQ,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACvE,SAAK,YAAY,QAAQ,aAAa;AACtC,UAAM,IAAI,QAAQ,SAAS,WAAW;AACtC,QAAI,OAAO,MAAM,YAAY;AAC3B,YAAM,IAAI,UAAU,6DAA6D;AAAA,IACnF;AACA,SAAK,YAAY;AACjB,SAAK,YAAY,IAAI,UAAU,IAAI;AAAA,EACrC;AAAA;AAAA,EAGA,MAAM,SAAY,MAAkC;AAClD,UAAM,MAAM,IAAI,IAAI,KAAK,UAAU,KAAK,IAAI;AAC5C,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,GAAG;AACrD,UAAI,MAAM,OAAW,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,IACxD;AAEA,UAAM,UAAkC;AAAA,MACtC,eAAe,UAAU,KAAK,MAAM;AAAA,MACpC,QAAQ,KAAK,WAAW,WAAW,oBAAoB;AAAA,MACvD,cAAc,eAAe,OAAO;AAAA,IACtC;AACA,QAAI,OAAO,KAAK;AAChB,QAAI,KAAK,SAAS,QAAW;AAC3B,cAAQ,cAAc,IAAI;AAC1B,aAAO,KAAK,UAAU,KAAK,IAAI;AAAA,IACjC;AAEA,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,QACzC,QAAQ,KAAK;AAAA,QACb;AAAA,QACA;AAAA,QACA,QAAQ,YAAY,QAAQ,KAAK,SAAS;AAAA,MAC5C,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,YACJ,eAAe,UAAU,IAAI,SAAS,kBAAkB,IAAI,SAAS;AACvE,YAAM,IAAI,YAAY;AAAA,QACpB,QAAQ;AAAA,QACR,MAAM,YAAY,YAAY;AAAA,QAC9B,SAAS,YACL,2BAA2B,KAAK,SAAS,QACzC,mCAAmC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACvF,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,UAAI,SAAkB;AACtB,UAAI;AACF,iBAAS,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,MACrC,QAAQ;AACN,iBAAS;AAAA,MACX;AACA,YAAM,UACJ,UAAU,OAAO,WAAW,WAAY,SAAqC,CAAC;AAChF,YAAM,OACJ,OAAO,QAAQ,UAAU,WACrB,QAAQ,QACR,IAAI,WAAW,MACb,iBACA;AACR,YAAM,UACJ,OAAO,QAAQ,YAAY,WACvB,QAAQ,UACR,yCAAyC,IAAI,MAAM;AACzD,YAAM,IAAI,YAAY,EAAE,QAAQ,IAAI,QAAQ,MAAM,SAAS,MAAM,OAAO,CAAC;AAAA,IAC3E;AAEA,QAAI,KAAK,WAAW,UAAU;AAC5B,aAAO,IAAI,WAAW,MAAM,IAAI,YAAY,CAAC;AAAA,IAC/C;AACA,WAAQ,MAAM,IAAI,KAAK;AAAA,EACzB;AACF;","names":[]}