You set every price. We just operate the substrate.

// next.js · OC button alongside google + apple + magic-link
import { OcSignInButton } from '@orangecheck/me-client';
import { signIn } from 'next-auth/react';

export function SignInOptions() {
  return (
    <div className="auth-options">
      <button onClick={() => signIn('google')}>continue with google</button>
      <button onClick={() => signIn('apple')}>continue with apple</button>
      <button onClick={() => signIn('email')}>email magic link</button>

      {/* OC drop-in. zero crypto knowledge required. */}
      <OcSignInButton
        scope={['identity']}
        sessionPolicy={{ duration: '30d', refresh: 'sliding' }}
      >
        sign in with oc · earn sats
      </OcSignInButton>
    </div>
  );
}

// what happens when a first-time user picks OC:
//   1. redirect to me.ochk.io/signin
//   2. federation guardians provision a custodied bitcoin wallet (M-of-N
//      threshold, no seed phrase shown, no key handling for the user)
//   3. an oc_session cookie is set with Domain=.ochk.io
//   4. user is bounced back to your site, signed in
//   5. every event you bill (sessions, payments, etc.) credits sats to
//      their balance. they don't need to know any of this happened —
//      until they choose to graduate to self-custody.

// IntegratorPriceConfig — what every integrator declares.
// Posted to me.ochk.io once at integration time, mutable via the
// configurator UI or the SDK any time after.

import type { IntegratorPriceConfig } from '@orangecheck/me-client';

export const config: IntegratorPriceConfig = {
  project_key: 'pk_live_yourcompany',
  display_name: 'YourCompany',
  domain: 'yourcompany.example',
  updated_at: new Date().toISOString(),

  events: {
    // Class A — durable state transitions
    account_creation: {
      enabled: true,
      site_pays: { kind: 'fixed_sats', sats: 1300 },  // ~$1.24
      user_share_pct: 0.65,                           // 65% to user
    },

    // Class B — action-bound
    payment_authorization: {
      enabled: true,
      site_pays: { kind: 'percent_of_amount', pct: 0.0075 }, // 0.75%
      user_share_pct: 0.65,
    },

    // Class C — sessions
    session_creation: {
      enabled: true,
      site_pays: { kind: 'fixed_sats', sats: 55 },    // ~$0.05
      user_share_pct: 0.65,
    },

    // every other subtype defaults to enabled: false until you flip it on.
  },
};

// session lifecycle hooks — explicit, server-enforced
import { oc } from '@orangecheck/me-client';

// open a session (Class C billable event — once per real session)
const session = await oc.session.create({
  identity: 'bc1q...e3lr',
  scope: ['identity', 'payment'],
  policy: {
    duration_seconds: 60 * 15,    // 15 minutes — banking-shaped
    refresh: 'sliding',
    sensitive_actions: 're-auth',
  },
});

// refresh inside the session — FREE, telemetry only
await oc.session.refresh(session.id);

// invalidate when the user signs out — FREE
await oc.session.invalidate(session.id);