tcgpriser 0.10.0 → 0.13.0

package/dist/index.cjs

@@ -9,8 +9,21 @@ var TcgPriserError = class extends Error {
   details;
   /** The raw response body, for debugging when `code`/`details` don't cover what you need. */
   body;
+  /**
+   * Seconds to wait before retrying, from the `Retry-After` header. Present on `rateLimited`, and
+   * on anything else a proxy in front of the API decides to send it with. Absent otherwise — an
+   * error without it is not one that says retrying will help.
+   */
+  retryAfter;
+  /**
+   * Credits left in this week's allowance, from `X-Credits-Remaining`. Present on errors from
+   * charged routes — notably `creditsExhausted`, where it is `0`. Absent on uncharged routes and on
+   * anything a proxy answered instead of the API.
+   */
+  creditsRemaining;
   constructor(params) {
-    super(`tcgpriser: ${params.statusCode} ${params.code} - ${params.message} (${params.url})`);
+    const status = params.statusCode === 0 ? "" : `${params.statusCode} `;
+    super(`tcgpriser: ${status}${params.code} - ${params.message} (${params.url})`);
     this.name = "TcgPriserError";
     this.statusCode = params.statusCode;
     this.statusText = params.statusText;
@@ -18,6 +31,8 @@ var TcgPriserError = class extends Error {
     this.code = params.code;
     this.details = params.details;
     this.body = params.body;
+    this.retryAfter = params.retryAfter;
+    this.creditsRemaining = params.creditsRemaining;
   }
 };
 
@@ -31,9 +46,9 @@ function toQueryString(params) {
   const query = search.toString();
   return query ? `?${query}` : "";
 }
-function splitAuthToken(params) {
-  const { authToken, ...rest } = params;
-  return [rest, authToken];
+function splitRequestOptions(params) {
+  const { authToken, signal, timeoutMs, ...rest } = params;
+  return [rest, { authToken, signal, timeoutMs }];
 }
 var KNOWN_ERROR_CODES = /* @__PURE__ */ new Set([
   "validationFailed",
@@ -48,6 +63,12 @@ var KNOWN_ERROR_CODES = /* @__PURE__ */ new Set([
   "creditsExhausted",
   "internalError"
 ]);
+function readIntHeader(res, name) {
+  const raw = res.headers.get(name);
+  if (raw === null) return void 0;
+  const parsed = Number(raw);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+}
 async function toApiError(res, url) {
   const body = await res.text();
   let code = "unknown";
@@ -62,18 +83,63 @@ async function toApiError(res, url) {
     details = parsed.error?.details;
   } catch {
   }
-  return new TcgPriserError({ statusCode: res.status, statusText: res.statusText, url, code, message, details, body });
+  return new TcgPriserError({
+    statusCode: res.status,
+    statusText: res.statusText,
+    url,
+    code,
+    message,
+    details,
+    body,
+    // Both are most useful on exactly the errors that carry them: `retryAfter` on `rateLimited`,
+    // `creditsRemaining` on `creditsExhausted` (where it is 0) and on any error from a charged
+    // route. Read unconditionally rather than branching on the code, since a proxy can return a
+    // 429 with `Retry-After` and no envelope at all.
+    retryAfter: readIntHeader(res, "Retry-After"),
+    creditsRemaining: readIntHeader(res, "X-Credits-Remaining")
+  });
+}
+var DEFAULT_TIMEOUT_MS = 6e4;
+function withTimeout(timeoutMs, callerSignal) {
+  if (timeoutMs <= 0) return { signal: callerSignal, clear: () => {
+  }, timedOut: () => false };
+  const controller = new AbortController();
+  let expired = false;
+  const timer = setTimeout(() => {
+    expired = true;
+    controller.abort();
+  }, timeoutMs);
+  const onCallerAbort = () => controller.abort();
+  if (callerSignal) {
+    if (callerSignal.aborted) controller.abort();
+    else callerSignal.addEventListener("abort", onCallerAbort, { once: true });
+  }
+  return {
+    signal: controller.signal,
+    clear: () => {
+      clearTimeout(timer);
+      callerSignal?.removeEventListener("abort", onCallerAbort);
+    },
+    timedOut: () => expired
+  };
 }
 var HttpClient = class {
   baseUrl;
   fetchImpl;
   defaultHeaders;
   defaultAuthToken;
+  defaultTimeoutMs;
+  /**
+   * The `X-Credits-Remaining` value from the most recent charged response, or `undefined` if no
+   * charged call has been made yet. See `TcgPriser.creditsRemaining`.
+   */
+  creditsRemaining;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.fetchImpl = options.fetch;
     this.defaultHeaders = options.headers ?? {};
     this.defaultAuthToken = options.authToken;
+    this.defaultTimeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
   }
   get(path, requestOptions) {
     return this.request("GET", path, void 0, requestOptions);
@@ -84,17 +150,42 @@ var HttpClient = class {
   patch(path, body, requestOptions) {
     return this.request("PATCH", path, body, requestOptions);
   }
+  delete(path, requestOptions) {
+    return this.request("DELETE", path, void 0, requestOptions);
+  }
   async request(method, path, body, requestOptions) {
     const url = `${this.baseUrl}${path}`;
     const authToken = requestOptions && "authToken" in requestOptions ? requestOptions.authToken : this.defaultAuthToken;
     const headers = { Accept: "application/json", ...this.defaultHeaders };
     if (authToken) headers.Authorization = `Bearer ${authToken}`;
     if (body !== void 0) headers["Content-Type"] = "application/json";
-    const res = await this.fetchImpl(url, {
-      method,
-      headers,
-      body: body === void 0 ? void 0 : JSON.stringify(body)
-    });
+    const timeoutMs = requestOptions?.timeoutMs ?? this.defaultTimeoutMs;
+    const timeout = withTimeout(timeoutMs, requestOptions?.signal);
+    let res;
+    try {
+      res = await this.fetchImpl(url, {
+        method,
+        headers,
+        body: body === void 0 ? void 0 : JSON.stringify(body),
+        signal: timeout.signal
+      });
+    } catch (error) {
+      if (timeout.timedOut()) {
+        throw new TcgPriserError({
+          statusCode: 0,
+          statusText: "Timeout",
+          url,
+          code: "timeout",
+          message: `Request timed out after ${timeoutMs}ms`,
+          body: ""
+        });
+      }
+      throw error;
+    } finally {
+      timeout.clear();
+    }
+    const credits = readIntHeader(res, "X-Credits-Remaining");
+    if (credits !== void 0) this.creditsRemaining = credits;
     if (!res.ok) throw await toApiError(res, url);
     if (res.status === 204) return void 0;
     return nullsToUndefined(await res.json());
@@ -121,13 +212,14 @@ var BargainsResource = class {
    * count is fixed by the API (no `limit`/`skip` on the public tier); `pagination.hasMore` tells
    * you if more exist. */
   list(params = {}) {
-    return this.http.get(`/bargains${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/bargains${toQueryString(query)}`, requestOptions);
   }
   /** `GET /bargains/search`: like `list()`, but with real pagination and filters (shop, discount
    * threshold, card condition/grade, free-text search). Premium. */
   search(params = {}) {
-    const [query, authToken] = splitAuthToken(params);
-    return this.http.get(`/bargains/search${toQueryString(query)}`, { authToken });
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/bargains/search${toQueryString(query)}`, requestOptions);
   }
 };
 
@@ -137,34 +229,40 @@ var CardsResource = class {
     this.http = http;
   }
   http;
-  /** `GET /cards`: search or list cards. */
+  /** `GET /cards`: list cards, newest first. No free-text search — use `search()` for that. */
   list(params = {}) {
-    return this.http.get(`/cards${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/cards${toQueryString(query)}`, requestOptions);
+  }
+  /** `GET /cards/search`: like `list()`, but with free-text search on card and set names. Premium. */
+  search(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/cards/search${toQueryString(query)}`, requestOptions);
   }
   /** `GET /cards/{id}`: fetch one card by its id or technicalName. */
-  get(idOrTechnicalName) {
-    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}`);
+  get(idOrTechnicalName, options = {}) {
+    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}`, options);
   }
   /** `GET /cards/{id}/matches`: current shop listings matched to this card (latest per shop). */
   matches(idOrTechnicalName, params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
-      `/cards/${encodeURIComponent(idOrTechnicalName)}/matches${toQueryString(params)}`
+      `/cards/${encodeURIComponent(idOrTechnicalName)}/matches${toQueryString(query)}`,
+      requestOptions
     );
   }
   /** `GET /cards/{id}/reference-prices`: Cardmarket/TCGplayer/eBay/Tradera price history. Premium. */
   referencePrices(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/cards/${encodeURIComponent(idOrTechnicalName)}/reference-prices${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /cards/{id}/prices`: individual marketplace sale records. Premium. */
   prices(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
-    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}/prices${toQueryString(query)}`, {
-      authToken
-    });
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}/prices${toQueryString(query)}`, requestOptions);
   }
   /** `GET /cards/{id}/pricing/live`: computed fresh for this request, not read from the last
    * stats job. Premium. */
@@ -175,16 +273,39 @@ var CardsResource = class {
    * `estimatedValue`, `lowestShopOffer`, `referencePriceSnapshotsByProvider` — refreshed once a day
    * by the nightly pricing/scraper jobs. `get()` returns content only; this is the separate,
    * shorter-cached call for the part of a card that actually changes day to day. */
-  pricing(idOrTechnicalName) {
-    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}/pricing`);
+  pricing(idOrTechnicalName, options = {}) {
+    return this.http.get(`/cards/${encodeURIComponent(idOrTechnicalName)}/pricing`, options);
   }
   /** `GET /cards/pricing`: pricing for up to 200 cards in one request, keyed by `id` — the batch
    * counterpart to `pricing()`, for a page of results (a search page, an expansion's contents) that
    * needs pricing for many items at once. Unlike `get()`/`pricing()`, this only accepts `id`s, not
    * technicalNames — pass the `id`s already on the cards you fetched. Ids with no match are
    * silently omitted from the result rather than causing an error. */
-  pricingBatch(ids) {
-    return this.http.get(`/cards/pricing?ids=${ids.map(encodeURIComponent).join(",")}`);
+  pricingBatch(ids, options = {}) {
+    return this.http.get(`/cards/pricing?ids=${ids.map(encodeURIComponent).join(",")}`, options);
+  }
+  /** `GET /cards/technical-names`: every card's `technicalName` and `updatedAt`, unpaginated and
+   * with no pricing joins. Built for enumerating the whole catalog cheaply — a sitemap, or working
+   * out which items changed since your last sync — where `list()` would make you page through full
+   * card documents to learn the same two fields. */
+  technicalNames(options = {}) {
+    return this.http.get("/cards/technical-names", options);
+  }
+  /** `GET /cards/price-stats/daily`: daily average price history, cards only. The same data as
+   * `client.priceStats.daily()`, scoped to the card catalog so a filter like `expansion` can't pull
+   * in that expansion's sealed products too. */
+  dailyStats(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/cards/price-stats/daily${toQueryString(query)}`, requestOptions);
+  }
+  /** `GET /cards/price-stats/estimated-values`: current estimated market value, cards only. The
+   * card-scoped counterpart to `client.priceStats.estimatedValues()`. */
+  estimatedValues(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(
+      `/cards/price-stats/estimated-values${toQueryString(query)}`,
+      requestOptions
+    );
   }
 };
 
@@ -195,30 +316,30 @@ var ExpansionsResource = class {
   }
   http;
   /** `GET /expansions`: every expansion. Unwrapped to a plain array, nothing to paginate here. */
-  async list() {
-    const res = await this.http.get("/expansions");
+  async list(options = {}) {
+    const res = await this.http.get("/expansions", options);
     return res.data;
   }
   /** `GET /expansions/{technicalName}`: metadata only — no cards or sealed products. Returns the
    * smaller `ExpansionRef`, not the full `Expansion`: this is a plain lookup by technicalName, not
    * the aggregation `list()` runs, so `sealedCount`/`cardCount`/`productCount` aren't available
    * here. See `cards()` and `sealedProducts()` for this expansion's contents. */
-  get(technicalName) {
-    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}`);
+  get(technicalName, options = {}) {
+    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}`, options);
   }
   /** `GET /expansions/{technicalName}/cards`: every card in this expansion. Content only, no
    * pricing fields — pass the `id`s from the result to `client.cards.pricingBatch()` if you need
    * pricing too. Sealed products are a separate call — see `sealedProducts()` — never merged into
    * this one. */
-  cards(technicalName) {
-    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}/cards`);
+  cards(technicalName, options = {}) {
+    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}/cards`, options);
   }
   /** `GET /expansions/{technicalName}/products`: every sealed product in this expansion. Content
    * only, no pricing fields — pass the `id`s from the result to `client.products.pricingBatch()`
    * if you need pricing too. Cards are a separate call — see `cards()` — never merged into this
    * one. */
-  sealedProducts(technicalName) {
-    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}/products`);
+  sealedProducts(technicalName, options = {}) {
+    return this.http.get(`/expansions/${encodeURIComponent(technicalName)}/products`, options);
   }
   /** `GET /expansions/{technicalName}/cards/live-pricing`: computed fresh for every card in this
    * expansion, not read from the last stats job. Premium. */
@@ -246,13 +367,13 @@ var PackRatesResource = class {
   http;
   /** `GET /pack-rates`: pull-rate odds for every expansion that has them. Unwrapped to a plain
    * array, nothing to paginate here. */
-  async list() {
-    const res = await this.http.get("/pack-rates");
+  async list(options = {}) {
+    const res = await this.http.get("/pack-rates", options);
     return res.data;
   }
   /** `GET /pack-rates/{expansionId}`: pull-rate odds for one expansion. */
-  get(expansionId) {
-    return this.http.get(`/pack-rates/${encodeURIComponent(expansionId)}`);
+  get(expansionId, options = {}) {
+    return this.http.get(`/pack-rates/${encodeURIComponent(expansionId)}`, options);
   }
 };
 
@@ -264,17 +385,20 @@ var PriceStatsResource = class {
   http;
   /** `GET /price-stats/daily`: daily average price history, filtered to matching product(s). */
   daily(params = {}) {
-    return this.http.get(`/price-stats/daily${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/price-stats/daily${toQueryString(query)}`, requestOptions);
   }
   /** `GET /price-stats/estimated-values`: current estimated market value, filtered to matching
    * product(s). */
   estimatedValues(params = {}) {
-    return this.http.get(`/price-stats/estimated-values${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/price-stats/estimated-values${toQueryString(query)}`, requestOptions);
   }
   /** `GET /price-stats/top-products`: items ranked by shop availability (how many shops carry
    * them), not by price. */
   topProducts(params = {}) {
-    return this.http.get(`/price-stats/top-products${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/price-stats/top-products${toQueryString(query)}`, requestOptions);
   }
   /** `GET /price-stats/product/{id}`: daily price history, current estimate, and a variant-count
    * summary for one product. Premium. */
@@ -289,10 +413,10 @@ var PriceStatsResource = class {
   /** `GET /price-stats/product/{id}/daily`: daily price history for one product, with a
    * caller-chosen window. Premium. */
   productDaily(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/price-stats/product/${encodeURIComponent(idOrTechnicalName)}/daily${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /price-stats/product/{id}/daily-last-30`: daily price history for the last 30 days
@@ -313,20 +437,20 @@ var PriceStatsResource = class {
   /** `GET /price-stats/product/{id}/by-variant`: price stats broken out per card condition/grade.
    * Premium. */
   productByVariant(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/price-stats/product/${encodeURIComponent(idOrTechnicalName)}/by-variant${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /price-stats/product/{id}/daily-by-variant`: daily price history for one specific
    * condition/grade. `condition` is required for `cardType: 'loose'`; `gradingCompany` and `grade`
    * are required for `cardType: 'graded'`. Premium. */
   productDailyByVariant(idOrTechnicalName, params) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/price-stats/product/${encodeURIComponent(idOrTechnicalName)}/daily-by-variant${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
 };
@@ -337,34 +461,43 @@ var ProductsResource = class {
     this.http = http;
   }
   http;
-  /** `GET /product`: search or list sealed products. */
+  /** `GET /product`: list sealed products, newest first. No free-text search — use `search()` for
+   * that. */
   list(params = {}) {
-    return this.http.get(`/product${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/product${toQueryString(query)}`, requestOptions);
+  }
+  /** `GET /product/search`: like `list()`, but with free-text search on the product name. Premium. */
+  search(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/product/search${toQueryString(query)}`, requestOptions);
   }
   /** `GET /product/{id}`: fetch one sealed product by its id or technicalName. */
-  get(idOrTechnicalName) {
-    return this.http.get(`/product/${encodeURIComponent(idOrTechnicalName)}`);
+  get(idOrTechnicalName, options = {}) {
+    return this.http.get(`/product/${encodeURIComponent(idOrTechnicalName)}`, options);
   }
   /** `GET /product/{id}/matches`: current shop listings matched to this product (latest per shop). */
   matches(idOrTechnicalName, params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
-      `/product/${encodeURIComponent(idOrTechnicalName)}/matches${toQueryString(params)}`
+      `/product/${encodeURIComponent(idOrTechnicalName)}/matches${toQueryString(query)}`,
+      requestOptions
     );
   }
   /** `GET /product/{id}/reference-prices`: Cardmarket/TCGplayer/Tradera price history. Premium. */
   referencePrices(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/product/${encodeURIComponent(idOrTechnicalName)}/reference-prices${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /product/{id}/prices`: individual marketplace sale records. Premium. */
   prices(idOrTechnicalName, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/product/${encodeURIComponent(idOrTechnicalName)}/prices${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /product/{id}/pricing/live`: computed fresh for this request, not read from the last
@@ -376,16 +509,38 @@ var ProductsResource = class {
    * `estimatedValue`, `lowestShopOffer`, `referencePriceSnapshotsByProvider` — refreshed once a day
    * by the nightly pricing/scraper jobs. `get()` returns content only; this is the separate,
    * shorter-cached call for the part of a product that actually changes day to day. */
-  pricing(idOrTechnicalName) {
-    return this.http.get(`/product/${encodeURIComponent(idOrTechnicalName)}/pricing`);
+  pricing(idOrTechnicalName, options = {}) {
+    return this.http.get(`/product/${encodeURIComponent(idOrTechnicalName)}/pricing`, options);
   }
   /** `GET /product/pricing`: pricing for up to 200 sealed products in one request, keyed by `id` —
    * the batch counterpart to `pricing()`, for a page of results (a search page, an expansion's
    * contents) that needs pricing for many items at once. Unlike `get()`/`pricing()`, this only
    * accepts `id`s, not technicalNames — pass the `id`s already on the products you fetched. Ids with
    * no match are silently omitted from the result rather than causing an error. */
-  pricingBatch(ids) {
-    return this.http.get(`/product/pricing?ids=${ids.map(encodeURIComponent).join(",")}`);
+  pricingBatch(ids, options = {}) {
+    return this.http.get(`/product/pricing?ids=${ids.map(encodeURIComponent).join(",")}`, options);
+  }
+  /** `GET /product/technical-names`: every sealed product's `technicalName` and `updatedAt`,
+   * unpaginated and with no pricing joins. The sealed counterpart to
+   * `client.cards.technicalNames()` — for sitemaps and incremental syncs. */
+  technicalNames(options = {}) {
+    return this.http.get("/product/technical-names", options);
+  }
+  /** `GET /product/price-stats/daily`: daily average price history, sealed products only. The same
+   * data as `client.priceStats.daily()`, scoped to the sealed catalog so a filter like `expansion`
+   * can't pull in that expansion's single cards too. */
+  dailyStats(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/product/price-stats/daily${toQueryString(query)}`, requestOptions);
+  }
+  /** `GET /product/price-stats/estimated-values`: current estimated market value, sealed products
+   * only. The sealed-scoped counterpart to `client.priceStats.estimatedValues()`. */
+  estimatedValues(params = {}) {
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(
+      `/product/price-stats/estimated-values${toQueryString(query)}`,
+      requestOptions
+    );
   }
 };
 
@@ -397,24 +552,22 @@ var ShopMatchStatsResource = class {
   http;
   /** `GET /shop-match-stats/product/{productId}`: one product's price history, broken out per shop. */
   forProduct(productId, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
+    const [query, requestOptions] = splitRequestOptions(params);
     return this.http.get(
       `/shop-match-stats/product/${encodeURIComponent(productId)}${toQueryString(query)}`,
-      { authToken }
+      requestOptions
     );
   }
   /** `GET /shop-match-stats/shop/{shop}`: one shop's price history, broken out per product. */
   forShop(shop, params = {}) {
-    const [query, authToken] = splitAuthToken(params);
-    return this.http.get(`/shop-match-stats/shop/${encodeURIComponent(shop)}${toQueryString(query)}`, {
-      authToken
-    });
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/shop-match-stats/shop/${encodeURIComponent(shop)}${toQueryString(query)}`, requestOptions);
   }
   /** `GET /shop-match-stats/compare`: one product's price at every shop that carries it, as of
    * one date (defaults to the latest). */
   compare(params) {
-    const [query, authToken] = splitAuthToken(params);
-    return this.http.get(`/shop-match-stats/compare${toQueryString(query)}`, { authToken });
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/shop-match-stats/compare${toQueryString(query)}`, requestOptions);
   }
 };
 
@@ -426,15 +579,21 @@ var ShopMatchesResource = class {
   http;
   /** `GET /shop-matches`: every current match across every shop (latest record per url+shop). */
   list(params = {}) {
-    return this.http.get(`/shop-matches${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/shop-matches${toQueryString(query)}`, requestOptions);
   }
   /** `GET /shop-matches/{shop}`: every current match at one shop (latest record per url). */
   forShop(technicalName, params = {}) {
-    return this.http.get(`/shop-matches/${encodeURIComponent(technicalName)}${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(
+      `/shop-matches/${encodeURIComponent(technicalName)}${toQueryString(query)}`,
+      requestOptions
+    );
   }
   /** `GET /shop-matches/shops`: match counts per shop (based on latest records only). */
   shopStats(params = {}) {
-    return this.http.get(`/shop-matches/shops${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    return this.http.get(`/shop-matches/shops${toQueryString(query)}`, requestOptions);
   }
 };
 
@@ -446,16 +605,16 @@ var ShopUrlsResource = class {
   http;
   /** `POST /shop-urls/submit`: submit a shop URL for scraping. */
   submit(params) {
-    const { authToken, url, shop } = params;
-    return this.http.post("/shop-urls/submit", { url, shop }, { authToken });
+    const { url, shop, ...requestOptions } = params;
+    return this.http.post("/shop-urls/submit", { url, shop }, requestOptions);
   }
   /** `PATCH /shop-urls/{id}/product`: manually assign (or clear) the product a shop URL resolves to. */
   assignProduct(shopUrlId, params) {
-    const { authToken, productId } = params;
+    const { productId, ...requestOptions } = params;
     return this.http.patch(
       `/shop-urls/${encodeURIComponent(shopUrlId)}/product`,
       { productId },
-      { authToken }
+      requestOptions
     );
   }
 };
@@ -468,12 +627,13 @@ var ShopsResource = class {
   http;
   /** `GET /shops`: every tracked shop. Unwrapped to a plain array, nothing to paginate here. */
   async list(params = {}) {
-    const res = await this.http.get(`/shops${toQueryString(params)}`);
+    const [query, requestOptions] = splitRequestOptions(params);
+    const res = await this.http.get(`/shops${toQueryString(query)}`, requestOptions);
     return res.data;
   }
   /** `GET /shops/{id}`: fetch one shop by its id or technicalName. */
-  get(idOrTechnicalName) {
-    return this.http.get(`/shops/${encodeURIComponent(idOrTechnicalName)}`);
+  get(idOrTechnicalName, options = {}) {
+    return this.http.get(`/shops/${encodeURIComponent(idOrTechnicalName)}`, options);
   }
 };
 
@@ -484,8 +644,40 @@ var StatsResource = class {
   }
   http;
   /** `GET /stats`: platform-wide overview counts (shops, expansions, products, prices tracked). */
-  platform() {
-    return this.http.get("/stats");
+  platform(options = {}) {
+    return this.http.get("/stats", options);
+  }
+};
+
+// src/resources/webhooks.ts
+var WebhooksResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /**
+   * `POST /webhooks`: register a new webhook.
+   *
+   * The returned `secret` is the only copy you will ever get — sign-verification depends on it and
+   * no endpoint reads it back. Persist it here, at creation, or delete the webhook and make a new
+   * one.
+   */
+  create(params) {
+    const { url, events, ...requestOptions } = params;
+    return this.http.post("/webhooks", { url, events }, requestOptions);
+  }
+  /** `GET /webhooks`: every webhook registered on this account. Secrets are never included. */
+  list(options = {}) {
+    return this.http.get("/webhooks", options);
+  }
+  /** `DELETE /webhooks/{id}`: revoke a webhook. Deliveries stop immediately; its secret is void. */
+  delete(webhookId, options = {}) {
+    return this.http.delete(`/webhooks/${encodeURIComponent(webhookId)}`, options);
+  }
+  /** `POST /webhooks/{id}/test`: send a sample delivery to the registered URL, so you can verify
+   * your endpoint and your signature check before waiting on a real event. */
+  test(webhookId, options = {}) {
+    return this.http.post(`/webhooks/${encodeURIComponent(webhookId)}/test`, void 0, options);
   }
 };
 
@@ -503,6 +695,9 @@ var TcgPriser = class {
   bargains;
   packRates;
   stats;
+  webhooks;
+  /** Holds the `HttpClient` so `creditsRemaining` can read the running value off it. */
+  http;
   /**
    * @param optionsOrAuthToken A subscriber's API token (`new TcgPriser(myApiToken)`), a full
    * `TcgPriserOptions` object, or omit it entirely for an anonymous, public-only client.
@@ -516,6 +711,7 @@ var TcgPriser = class {
       );
     }
     const http = new HttpClient({
+      timeoutMs: advanced.timeoutMs,
       baseUrl: advanced.baseUrl ?? DEFAULT_BASE_URL,
       // Bound to globalThis: both browsers and Node's undici implement fetch as a method that
       // checks its receiver, so an unbound reference throws "Illegal invocation" the moment it's
@@ -536,10 +732,31 @@ var TcgPriser = class {
     this.bargains = new BargainsResource(http);
     this.packRates = new PackRatesResource(http);
     this.stats = new StatsResource(http);
+    this.webhooks = new WebhooksResource(http);
+    this.http = http;
+  }
+  /**
+   * Credits left in this week's allowance, as of the last charged call this client made.
+   *
+   * The API returns `X-Credits-Remaining` on every response it charges for, so this needs no extra
+   * request — but it is only as current as your last premium call, and it is `undefined` until you
+   * make one. Uncharged calls (every public method, and any call authenticated with something other
+   * than an API token) don't update it, because the API doesn't meter them.
+   *
+   * ```ts
+   * await tcgpriser.cards.livePricing('fezandipiti-ex');
+   * if ((tcgpriser.creditsRemaining ?? Infinity) < 100) scheduleFewerRefreshes();
+   * ```
+   *
+   * Reading it in a browser additionally needs the API to expose the header via CORS, which it does.
+   */
+  get creditsRemaining() {
+    return this.http.creditsRemaining;
   }
 };
 
 exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
+exports.DEFAULT_TIMEOUT_MS = DEFAULT_TIMEOUT_MS;
 exports.TcgPriser = TcgPriser;
 exports.TcgPriserError = TcgPriserError;
 //# sourceMappingURL=index.cjs.map