@ar-agents/mercadopago 0.11.0 → 0.12.0

package/dist/index.js

@@ -226,6 +226,23 @@ var DEFAULT_BASE_URL = "https://api.mercadopago.com";
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function randomUuid() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) {
+    return c.randomUUID();
+  }
+  if (c?.getRandomValues) {
+    const bytes = new Uint8Array(16);
+    c.getRandomValues(bytes);
+    bytes[6] = bytes[6] & 15 | 64;
+    bytes[8] = bytes[8] & 63 | 128;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+  }
+  throw new Error(
+    "MercadoPagoClient: no Web Crypto available for idempotency key generation. This shouldn't happen on Node 19+, Edge Runtime, or modern browsers."
+  );
+}
 var MercadoPagoClient = class {
   accessToken;
   baseUrl;
@@ -269,8 +286,10 @@ var MercadoPagoClient = class {
       Authorization: `Bearer ${this.accessToken}`,
       "Content-Type": "application/json"
     };
-    if (options?.idempotencyKey) {
-      headers["X-Idempotency-Key"] = options.idempotencyKey;
+    const isMutatingPost = method === "POST";
+    const idempotencyKey = options?.idempotencyKey ?? (isMutatingPost ? randomUuid() : void 0);
+    if (idempotencyKey) {
+      headers["X-Idempotency-Key"] = idempotencyKey;
     }
     const trace = this.traceContext?.();
     if (trace?.traceId && trace?.spanId) {