@ar-agents/mercadopago 0.9.0 → 0.11.0

package/dist/otel.cjs

@@ -0,0 +1,102 @@
+'use strict';
+
+// src/otel.ts
+var cachedApi = void 0;
+async function loadOtelApi() {
+  if (cachedApi !== void 0) return cachedApi;
+  try {
+    const mod = await import(
+      /* @vite-ignore */
+      '@opentelemetry/api'
+    );
+    cachedApi = mod;
+    return mod;
+  } catch {
+    cachedApi = null;
+    return null;
+  }
+}
+function createOtelHooks(opts = {}) {
+  const serviceName = opts.serviceName ?? "ar-agents-mercadopago";
+  const version = opts.version ?? "0.10.0";
+  const baseAttrs = opts.attributes ?? {};
+  let initialized = false;
+  let api = null;
+  let durationHist = null;
+  let requestCounter = null;
+  let rateLimitGauge = null;
+  const ensureInit = async () => {
+    if (initialized) return;
+    initialized = true;
+    api = await loadOtelApi();
+    if (!api) return;
+    const meter = api.metrics.getMeter(serviceName, version);
+    durationHist = meter.createHistogram("mp.requests.duration", {
+      description: "MP API request duration",
+      unit: "ms"
+    });
+    requestCounter = meter.createCounter("mp.requests.count", {
+      description: "MP API requests count by outcome"
+    });
+    rateLimitGauge = meter.createGauge?.("mp.rate_limit.remaining", {
+      description: "MP-reported rate limit remaining at last response",
+      unit: "1"
+    }) ?? null;
+  };
+  return {
+    onCall: (event) => {
+      void (async () => {
+        await ensureInit();
+        if (!api) return;
+        const attrs = {
+          ...baseAttrs,
+          "mp.method": event.method,
+          "mp.path": event.path,
+          "mp.success": event.success,
+          "mp.retried": event.retried
+        };
+        if (event.httpStatus !== null) attrs["http.status_code"] = event.httpStatus;
+        if (event.requestId) attrs["mp.request_id"] = event.requestId;
+        if (event.circuitState) attrs["mp.circuit_state"] = event.circuitState;
+        durationHist?.record(event.durationMs, attrs);
+        requestCounter?.add(1, attrs);
+        if (event.rateLimit?.remaining !== null && event.rateLimit?.remaining !== void 0) {
+          rateLimitGauge?.record(event.rateLimit.remaining, {
+            "mp.path": event.path
+          });
+        }
+        const tracer = api.trace.getTracer(serviceName, version);
+        const span = tracer.startSpan(`mp.${event.method}.${event.path}`, {
+          attributes: attrs
+        });
+        if (event.success) {
+          span.setStatus({ code: api.SpanStatusCode.OK });
+        } else {
+          span.setStatus({
+            code: api.SpanStatusCode.ERROR,
+            message: `MP request failed (status=${event.httpStatus})`
+          });
+        }
+        span.end();
+      })();
+    },
+    traceContext: () => {
+      if (!api) {
+        if (cachedApi) api = cachedApi;
+      }
+      if (!api) return void 0;
+      const span = api.trace.getActiveSpan();
+      if (!span) return void 0;
+      const ctx = span.spanContext();
+      return {
+        traceId: ctx.traceId,
+        spanId: ctx.spanId,
+        traceFlags: ctx.traceFlags
+      };
+    }
+  };
+}
+
+exports.createOtelHooks = createOtelHooks;
+//# sourceMappingURL=otel.cjs.map
+//# sourceMappingURL=otel.cjs.map

package/dist/otel.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/otel.ts"],"names":[],"mappings":";;;AA2EA,IAAI,SAAA,GAAwC,MAAA;AAE5C,eAAe,WAAA,GAAuC;AACpD,EAAA,IAAI,SAAA,KAAc,QAAW,OAAO,SAAA;AACpC,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,MAAM;AAAA;AAAA,MACE;AAAA,KACrB;AACA,IAAA,SAAA,GAAY,GAAA;AACZ,IAAA,OAAO,GAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,SAAA,GAAY,IAAA;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAqBO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAcxD;AACA,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,uBAAA;AACxC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,QAAA;AAChC,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,IAAc,EAAC;AAGtC,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,GAAA,GAAsB,IAAA;AAC1B,EAAA,IAAI,YAAA,GAAiC,IAAA;AACrC,EAAA,IAAI,cAAA,GAAiC,IAAA;AACrC,EAAA,IAAI,cAAA,GAA+B,IAAA;AAEnC,EAAA,MAAM,aAAa,YAAY;AAC7B,IAAA,IAAI,WAAA,EAAa;AACjB,IAAA,WAAA,GAAc,IAAA;AACd,IAAA,GAAA,GAAM,MAAM,WAAA,EAAY;AACxB,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,OAAA,CAAQ,QAAA,CAAS,aAAa,OAAO,CAAA;AACvD,IAAA,YAAA,GAAe,KAAA,CAAM,gBAAgB,sBAAA,EAAwB;AAAA,MAC3D,WAAA,EAAa,yBAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,cAAA,GAAiB,KAAA,CAAM,cAAc,mBAAA,EAAqB;AAAA,MACxD,WAAA,EAAa;AAAA,KACd,CAAA;AACD,IAAA,cAAA,GAAiB,KAAA,CAAM,cAAc,yBAAA,EAA2B;AAAA,MAC9D,WAAA,EAAa,mDAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA,IAAK,IAAA;AAAA,EACR,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,CAAC,KAAA,KAAU;AAEjB,MAAA,KAAA,CAAM,YAAY;AAChB,QAAA,MAAM,UAAA,EAAW;AACjB,QAAA,IAAI,CAAC,GAAA,EAAK;AACV,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,GAAG,SAAA;AAAA,UACH,aAAa,KAAA,CAAM,MAAA;AAAA,UACnB,WAAW,KAAA,CAAM,IAAA;AAAA,UACjB,cAAc,KAAA,CAAM,OAAA;AAAA,UACpB,cAAc,KAAA,CAAM;AAAA,SACtB;AACA,QAAA,IAAI,MAAM,UAAA,KAAe,IAAA,EAAM,KAAA,CAAM,kBAAkB,IAAI,KAAA,CAAM,UAAA;AACjE,QAAA,IAAI,KAAA,CAAM,SAAA,EAAW,KAAA,CAAM,eAAe,IAAI,KAAA,CAAM,SAAA;AACpD,QAAA,IAAI,KAAA,CAAM,YAAA,EAAc,KAAA,CAAM,kBAAkB,IAAI,KAAA,CAAM,YAAA;AAE1D,QAAA,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,UAAA,EAAY,KAAK,CAAA;AAC5C,QAAA,cAAA,EAAgB,GAAA,CAAI,GAAG,KAAK,CAAA;AAC5B,QAAA,IAAI,MAAM,SAAA,EAAW,SAAA,KAAc,QAAQ,KAAA,CAAM,SAAA,EAAW,cAAc,MAAA,EAAW;AACnF,UAAA,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAA,CAAU,SAAA,EAAW;AAAA,YAChD,WAAW,KAAA,CAAM;AAAA,WAClB,CAAA;AAAA,QACH;AAGA,QAAA,MAAM,MAAA,GAAS,GAAA,CAAI,KAAA,CAAM,SAAA,CAAU,aAAa,OAAO,CAAA;AACvD,QAAA,MAAM,IAAA,GAAO,OAAO,SAAA,CAAU,CAAA,GAAA,EAAM,MAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI;AAAA,UAChE,UAAA,EAAY;AAAA,SACb,CAAA;AACD,QAAA,IAAI,MAAM,OAAA,EAAS;AACjB,UAAA,IAAA,CAAK,UAAU,EAAE,IAAA,EAAM,GAAA,CAAI,cAAA,CAAe,IAAI,CAAA;AAAA,QAChD,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,SAAA,CAAU;AAAA,YACb,IAAA,EAAM,IAAI,cAAA,CAAe,KAAA;AAAA,YACzB,OAAA,EAAS,CAAA,0BAAA,EAA6B,KAAA,CAAM,UAAU,CAAA,CAAA;AAAA,WACvD,CAAA;AAAA,QACH;AACA,QAAA,IAAA,CAAK,GAAA,EAAI;AAAA,MACX,CAAA,GAAG;AAAA,IACL,CAAA;AAAA,IAEA,cAAc,MAAM;AAGlB,MAAA,IAAI,CAAC,GAAA,EAAK;AAER,QAAA,IAAI,WAAW,GAAA,GAAM,SAAA;AAAA,MACvB;AACA,MAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,aAAA,EAAc;AACrC,MAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,MAAA,MAAM,GAAA,GAAM,KAAK,WAAA,EAAY;AAC7B,MAAA,OAAO;AAAA,QACL,SAAS,GAAA,CAAI,OAAA;AAAA,QACb,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF","file":"otel.cjs","sourcesContent":["/**\n * OpenTelemetry instrumentation — drop-in tracing + metrics for the MP toolkit.\n *\n * # Why a subpath?\n *\n * `@opentelemetry/api` is an OPTIONAL peer dep. Consumers who don't use\n * OpenTelemetry don't pay the bundle cost. Consumers who DO use it import\n * from `@ar-agents/mercadopago/otel` and get instant instrumentation:\n * spans for every MP request, metrics for latency/errors/rate-limit\n * remaining, and proper context propagation to your downstream traces.\n *\n * # Setup\n *\n * 1. Install: `pnpm add @opentelemetry/api`\n * 2. Wire your tracer + meter at app boot (per OpenTelemetry standard).\n * 3. Pass the instrumented hooks to MercadoPagoClient:\n *\n *    ```ts\n *    import { MercadoPagoClient } from \"@ar-agents/mercadopago\";\n *    import { createOtelHooks } from \"@ar-agents/mercadopago/otel\";\n *\n *    const otel = createOtelHooks({ serviceName: \"billing-bot\" });\n *    const client = new MercadoPagoClient({\n *      accessToken: process.env.MP_ACCESS_TOKEN!,\n *      onCall: otel.onCall,\n *      traceContext: otel.traceContext,\n *    });\n *    ```\n *\n * # What gets instrumented\n *\n * - **Spans**: one span per MP request, named `mp.{method}.{path}` (e.g.,\n *   `mp.GET./v1/payments/123`). Includes attributes: status code,\n *   request_id, retried count, success bool, MP rate-limit remaining,\n *   circuit breaker state.\n * - **Metrics**: `mp.requests.duration` histogram (ms), `mp.requests.count`\n *   counter (labeled by success/method/path/status), `mp.rate_limit.remaining`\n *   gauge.\n *\n * # No-op fallback\n *\n * If `@opentelemetry/api` isn't installed at runtime, the hooks degrade to\n * no-ops gracefully (without throwing) so the toolkit remains importable\n * even without OTEL configured.\n */\n\n// Types-only imports — `@opentelemetry/api` is an OPTIONAL peer dep.\n// We resolve at runtime via dynamic import; if absent, we run as no-ops.\ntype Tracer = {\n  startSpan(name: string, options?: unknown): {\n    setAttribute(k: string, v: unknown): void;\n    setStatus(s: { code: number; message?: string }): void;\n    end(): void;\n    spanContext(): { traceId: string; spanId: string; traceFlags: number };\n  };\n};\ntype Histogram = { record(v: number, attributes?: Record<string, unknown>): void };\ntype Counter = { add(v: number, attributes?: Record<string, unknown>): void };\ntype Gauge = { record(v: number, attributes?: Record<string, unknown>): void };\n\ninterface OtelApi {\n  trace: {\n    getTracer(name: string, version?: string): Tracer;\n    getActiveSpan(): { spanContext(): { traceId: string; spanId: string; traceFlags: number } } | undefined;\n  };\n  metrics: {\n    getMeter(name: string, version?: string): {\n      createHistogram(name: string, opts?: { description?: string; unit?: string }): Histogram;\n      createCounter(name: string, opts?: { description?: string }): Counter;\n      createGauge?(name: string, opts?: { description?: string; unit?: string }): Gauge;\n    };\n  };\n  SpanStatusCode: { OK: number; ERROR: number; UNSET: number };\n}\n\nlet cachedApi: OtelApi | null | undefined = undefined;\n\nasync function loadOtelApi(): Promise<OtelApi | null> {\n  if (cachedApi !== undefined) return cachedApi;\n  try {\n    const mod = (await import(\n      /* @vite-ignore */ \"@opentelemetry/api\"\n    )) as unknown as OtelApi;\n    cachedApi = mod;\n    return mod;\n  } catch {\n    cachedApi = null;\n    return null;\n  }\n}\n\nexport interface OtelHooksOptions {\n  /** Service name shown in trace UIs. Default \"ar-agents-mercadopago\". */\n  serviceName?: string;\n  /** Toolkit version (defaults to a static \"0.10.x\"). */\n  version?: string;\n  /**\n   * Attributes added to every span/metric (e.g., environment, deployment_id).\n   */\n  attributes?: Record<string, string | number | boolean>;\n}\n\n/**\n * Build OpenTelemetry-aware hooks for `MercadoPagoClient`. Returns:\n *\n * - `onCall`: wires every request into traces + metrics\n * - `traceContext`: extracts active span context for traceparent propagation\n *\n * Both degrade to no-ops if `@opentelemetry/api` isn't installed.\n */\nexport function createOtelHooks(opts: OtelHooksOptions = {}): {\n  onCall: (event: {\n    method: string;\n    path: string;\n    durationMs: number;\n    httpStatus: number | null;\n    retried: number;\n    success: boolean;\n    requestId?: string | null;\n    rateLimit?: { remaining: number | null; resetSeconds: number | null };\n    circuitState?: \"CLOSED\" | \"OPEN\" | \"HALF_OPEN\";\n    traceContext?: { traceId?: string; spanId?: string };\n  }) => void;\n  traceContext: () => { traceId?: string; spanId?: string; traceFlags?: number } | undefined;\n} {\n  const serviceName = opts.serviceName ?? \"ar-agents-mercadopago\";\n  const version = opts.version ?? \"0.10.0\";\n  const baseAttrs = opts.attributes ?? {};\n\n  // Lazy state — resolved on first invocation (so module load is sync + safe).\n  let initialized = false;\n  let api: OtelApi | null = null;\n  let durationHist: Histogram | null = null;\n  let requestCounter: Counter | null = null;\n  let rateLimitGauge: Gauge | null = null;\n\n  const ensureInit = async () => {\n    if (initialized) return;\n    initialized = true;\n    api = await loadOtelApi();\n    if (!api) return;\n    const meter = api.metrics.getMeter(serviceName, version);\n    durationHist = meter.createHistogram(\"mp.requests.duration\", {\n      description: \"MP API request duration\",\n      unit: \"ms\",\n    });\n    requestCounter = meter.createCounter(\"mp.requests.count\", {\n      description: \"MP API requests count by outcome\",\n    });\n    rateLimitGauge = meter.createGauge?.(\"mp.rate_limit.remaining\", {\n      description: \"MP-reported rate limit remaining at last response\",\n      unit: \"1\",\n    }) ?? null;\n  };\n\n  return {\n    onCall: (event) => {\n      // Don't await — fire-and-forget. Best-effort observability.\n      void (async () => {\n        await ensureInit();\n        if (!api) return;\n        const attrs: Record<string, unknown> = {\n          ...baseAttrs,\n          \"mp.method\": event.method,\n          \"mp.path\": event.path,\n          \"mp.success\": event.success,\n          \"mp.retried\": event.retried,\n        };\n        if (event.httpStatus !== null) attrs[\"http.status_code\"] = event.httpStatus;\n        if (event.requestId) attrs[\"mp.request_id\"] = event.requestId;\n        if (event.circuitState) attrs[\"mp.circuit_state\"] = event.circuitState;\n\n        durationHist?.record(event.durationMs, attrs);\n        requestCounter?.add(1, attrs);\n        if (event.rateLimit?.remaining !== null && event.rateLimit?.remaining !== undefined) {\n          rateLimitGauge?.record(event.rateLimit.remaining, {\n            \"mp.path\": event.path,\n          });\n        }\n\n        // Span: emit a synthetic child span scoped to this request's duration.\n        const tracer = api.trace.getTracer(serviceName, version);\n        const span = tracer.startSpan(`mp.${event.method}.${event.path}`, {\n          attributes: attrs,\n        });\n        if (event.success) {\n          span.setStatus({ code: api.SpanStatusCode.OK });\n        } else {\n          span.setStatus({\n            code: api.SpanStatusCode.ERROR,\n            message: `MP request failed (status=${event.httpStatus})`,\n          });\n        }\n        span.end();\n      })();\n    },\n\n    traceContext: () => {\n      // Synchronous getter — must be cheap. Resolves the OTEL active span\n      // context if available; returns undefined if OTEL isn't installed.\n      if (!api) {\n        // Try to use the cached api if loadOtelApi already ran\n        if (cachedApi) api = cachedApi;\n      }\n      if (!api) return undefined;\n      const span = api.trace.getActiveSpan();\n      if (!span) return undefined;\n      const ctx = span.spanContext();\n      return {\n        traceId: ctx.traceId,\n        spanId: ctx.spanId,\n        traceFlags: ctx.traceFlags,\n      };\n    },\n  };\n}\n"]}

package/dist/otel.d.cts

@@ -0,0 +1,90 @@
+/**
+ * OpenTelemetry instrumentation — drop-in tracing + metrics for the MP toolkit.
+ *
+ * # Why a subpath?
+ *
+ * `@opentelemetry/api` is an OPTIONAL peer dep. Consumers who don't use
+ * OpenTelemetry don't pay the bundle cost. Consumers who DO use it import
+ * from `@ar-agents/mercadopago/otel` and get instant instrumentation:
+ * spans for every MP request, metrics for latency/errors/rate-limit
+ * remaining, and proper context propagation to your downstream traces.
+ *
+ * # Setup
+ *
+ * 1. Install: `pnpm add @opentelemetry/api`
+ * 2. Wire your tracer + meter at app boot (per OpenTelemetry standard).
+ * 3. Pass the instrumented hooks to MercadoPagoClient:
+ *
+ *    ```ts
+ *    import { MercadoPagoClient } from "@ar-agents/mercadopago";
+ *    import { createOtelHooks } from "@ar-agents/mercadopago/otel";
+ *
+ *    const otel = createOtelHooks({ serviceName: "billing-bot" });
+ *    const client = new MercadoPagoClient({
+ *      accessToken: process.env.MP_ACCESS_TOKEN!,
+ *      onCall: otel.onCall,
+ *      traceContext: otel.traceContext,
+ *    });
+ *    ```
+ *
+ * # What gets instrumented
+ *
+ * - **Spans**: one span per MP request, named `mp.{method}.{path}` (e.g.,
+ *   `mp.GET./v1/payments/123`). Includes attributes: status code,
+ *   request_id, retried count, success bool, MP rate-limit remaining,
+ *   circuit breaker state.
+ * - **Metrics**: `mp.requests.duration` histogram (ms), `mp.requests.count`
+ *   counter (labeled by success/method/path/status), `mp.rate_limit.remaining`
+ *   gauge.
+ *
+ * # No-op fallback
+ *
+ * If `@opentelemetry/api` isn't installed at runtime, the hooks degrade to
+ * no-ops gracefully (without throwing) so the toolkit remains importable
+ * even without OTEL configured.
+ */
+interface OtelHooksOptions {
+    /** Service name shown in trace UIs. Default "ar-agents-mercadopago". */
+    serviceName?: string;
+    /** Toolkit version (defaults to a static "0.10.x"). */
+    version?: string;
+    /**
+     * Attributes added to every span/metric (e.g., environment, deployment_id).
+     */
+    attributes?: Record<string, string | number | boolean>;
+}
+/**
+ * Build OpenTelemetry-aware hooks for `MercadoPagoClient`. Returns:
+ *
+ * - `onCall`: wires every request into traces + metrics
+ * - `traceContext`: extracts active span context for traceparent propagation
+ *
+ * Both degrade to no-ops if `@opentelemetry/api` isn't installed.
+ */
+declare function createOtelHooks(opts?: OtelHooksOptions): {
+    onCall: (event: {
+        method: string;
+        path: string;
+        durationMs: number;
+        httpStatus: number | null;
+        retried: number;
+        success: boolean;
+        requestId?: string | null;
+        rateLimit?: {
+            remaining: number | null;
+            resetSeconds: number | null;
+        };
+        circuitState?: "CLOSED" | "OPEN" | "HALF_OPEN";
+        traceContext?: {
+            traceId?: string;
+            spanId?: string;
+        };
+    }) => void;
+    traceContext: () => {
+        traceId?: string;
+        spanId?: string;
+        traceFlags?: number;
+    } | undefined;
+};
+
+export { type OtelHooksOptions, createOtelHooks };

package/dist/otel.d.ts

@@ -0,0 +1,90 @@
+/**
+ * OpenTelemetry instrumentation — drop-in tracing + metrics for the MP toolkit.
+ *
+ * # Why a subpath?
+ *
+ * `@opentelemetry/api` is an OPTIONAL peer dep. Consumers who don't use
+ * OpenTelemetry don't pay the bundle cost. Consumers who DO use it import
+ * from `@ar-agents/mercadopago/otel` and get instant instrumentation:
+ * spans for every MP request, metrics for latency/errors/rate-limit
+ * remaining, and proper context propagation to your downstream traces.
+ *
+ * # Setup
+ *
+ * 1. Install: `pnpm add @opentelemetry/api`
+ * 2. Wire your tracer + meter at app boot (per OpenTelemetry standard).
+ * 3. Pass the instrumented hooks to MercadoPagoClient:
+ *
+ *    ```ts
+ *    import { MercadoPagoClient } from "@ar-agents/mercadopago";
+ *    import { createOtelHooks } from "@ar-agents/mercadopago/otel";
+ *
+ *    const otel = createOtelHooks({ serviceName: "billing-bot" });
+ *    const client = new MercadoPagoClient({
+ *      accessToken: process.env.MP_ACCESS_TOKEN!,
+ *      onCall: otel.onCall,
+ *      traceContext: otel.traceContext,
+ *    });
+ *    ```
+ *
+ * # What gets instrumented
+ *
+ * - **Spans**: one span per MP request, named `mp.{method}.{path}` (e.g.,
+ *   `mp.GET./v1/payments/123`). Includes attributes: status code,
+ *   request_id, retried count, success bool, MP rate-limit remaining,
+ *   circuit breaker state.
+ * - **Metrics**: `mp.requests.duration` histogram (ms), `mp.requests.count`
+ *   counter (labeled by success/method/path/status), `mp.rate_limit.remaining`
+ *   gauge.
+ *
+ * # No-op fallback
+ *
+ * If `@opentelemetry/api` isn't installed at runtime, the hooks degrade to
+ * no-ops gracefully (without throwing) so the toolkit remains importable
+ * even without OTEL configured.
+ */
+interface OtelHooksOptions {
+    /** Service name shown in trace UIs. Default "ar-agents-mercadopago". */
+    serviceName?: string;
+    /** Toolkit version (defaults to a static "0.10.x"). */
+    version?: string;
+    /**
+     * Attributes added to every span/metric (e.g., environment, deployment_id).
+     */
+    attributes?: Record<string, string | number | boolean>;
+}
+/**
+ * Build OpenTelemetry-aware hooks for `MercadoPagoClient`. Returns:
+ *
+ * - `onCall`: wires every request into traces + metrics
+ * - `traceContext`: extracts active span context for traceparent propagation
+ *
+ * Both degrade to no-ops if `@opentelemetry/api` isn't installed.
+ */
+declare function createOtelHooks(opts?: OtelHooksOptions): {
+    onCall: (event: {
+        method: string;
+        path: string;
+        durationMs: number;
+        httpStatus: number | null;
+        retried: number;
+        success: boolean;
+        requestId?: string | null;
+        rateLimit?: {
+            remaining: number | null;
+            resetSeconds: number | null;
+        };
+        circuitState?: "CLOSED" | "OPEN" | "HALF_OPEN";
+        traceContext?: {
+            traceId?: string;
+            spanId?: string;
+        };
+    }) => void;
+    traceContext: () => {
+        traceId?: string;
+        spanId?: string;
+        traceFlags?: number;
+    } | undefined;
+};
+
+export { type OtelHooksOptions, createOtelHooks };

package/dist/otel.js

@@ -0,0 +1,100 @@
+// src/otel.ts
+var cachedApi = void 0;
+async function loadOtelApi() {
+  if (cachedApi !== void 0) return cachedApi;
+  try {
+    const mod = await import(
+      /* @vite-ignore */
+      '@opentelemetry/api'
+    );
+    cachedApi = mod;
+    return mod;
+  } catch {
+    cachedApi = null;
+    return null;
+  }
+}
+function createOtelHooks(opts = {}) {
+  const serviceName = opts.serviceName ?? "ar-agents-mercadopago";
+  const version = opts.version ?? "0.10.0";
+  const baseAttrs = opts.attributes ?? {};
+  let initialized = false;
+  let api = null;
+  let durationHist = null;
+  let requestCounter = null;
+  let rateLimitGauge = null;
+  const ensureInit = async () => {
+    if (initialized) return;
+    initialized = true;
+    api = await loadOtelApi();
+    if (!api) return;
+    const meter = api.metrics.getMeter(serviceName, version);
+    durationHist = meter.createHistogram("mp.requests.duration", {
+      description: "MP API request duration",
+      unit: "ms"
+    });
+    requestCounter = meter.createCounter("mp.requests.count", {
+      description: "MP API requests count by outcome"
+    });
+    rateLimitGauge = meter.createGauge?.("mp.rate_limit.remaining", {
+      description: "MP-reported rate limit remaining at last response",
+      unit: "1"
+    }) ?? null;
+  };
+  return {
+    onCall: (event) => {
+      void (async () => {
+        await ensureInit();
+        if (!api) return;
+        const attrs = {
+          ...baseAttrs,
+          "mp.method": event.method,
+          "mp.path": event.path,
+          "mp.success": event.success,
+          "mp.retried": event.retried
+        };
+        if (event.httpStatus !== null) attrs["http.status_code"] = event.httpStatus;
+        if (event.requestId) attrs["mp.request_id"] = event.requestId;
+        if (event.circuitState) attrs["mp.circuit_state"] = event.circuitState;
+        durationHist?.record(event.durationMs, attrs);
+        requestCounter?.add(1, attrs);
+        if (event.rateLimit?.remaining !== null && event.rateLimit?.remaining !== void 0) {
+          rateLimitGauge?.record(event.rateLimit.remaining, {
+            "mp.path": event.path
+          });
+        }
+        const tracer = api.trace.getTracer(serviceName, version);
+        const span = tracer.startSpan(`mp.${event.method}.${event.path}`, {
+          attributes: attrs
+        });
+        if (event.success) {
+          span.setStatus({ code: api.SpanStatusCode.OK });
+        } else {
+          span.setStatus({
+            code: api.SpanStatusCode.ERROR,
+            message: `MP request failed (status=${event.httpStatus})`
+          });
+        }
+        span.end();
+      })();
+    },
+    traceContext: () => {
+      if (!api) {
+        if (cachedApi) api = cachedApi;
+      }
+      if (!api) return void 0;
+      const span = api.trace.getActiveSpan();
+      if (!span) return void 0;
+      const ctx = span.spanContext();
+      return {
+        traceId: ctx.traceId,
+        spanId: ctx.spanId,
+        traceFlags: ctx.traceFlags
+      };
+    }
+  };
+}
+
+export { createOtelHooks };
+//# sourceMappingURL=otel.js.map
+//# sourceMappingURL=otel.js.map

package/dist/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/otel.ts"],"names":[],"mappings":";AA2EA,IAAI,SAAA,GAAwC,MAAA;AAE5C,eAAe,WAAA,GAAuC;AACpD,EAAA,IAAI,SAAA,KAAc,QAAW,OAAO,SAAA;AACpC,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,MAAM;AAAA;AAAA,MACE;AAAA,KACrB;AACA,IAAA,SAAA,GAAY,GAAA;AACZ,IAAA,OAAO,GAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,SAAA,GAAY,IAAA;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAqBO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAcxD;AACA,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,uBAAA;AACxC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,QAAA;AAChC,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,IAAc,EAAC;AAGtC,EAAA,IAAI,WAAA,GAAc,KAAA;AAClB,EAAA,IAAI,GAAA,GAAsB,IAAA;AAC1B,EAAA,IAAI,YAAA,GAAiC,IAAA;AACrC,EAAA,IAAI,cAAA,GAAiC,IAAA;AACrC,EAAA,IAAI,cAAA,GAA+B,IAAA;AAEnC,EAAA,MAAM,aAAa,YAAY;AAC7B,IAAA,IAAI,WAAA,EAAa;AACjB,IAAA,WAAA,GAAc,IAAA;AACd,IAAA,GAAA,GAAM,MAAM,WAAA,EAAY;AACxB,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,OAAA,CAAQ,QAAA,CAAS,aAAa,OAAO,CAAA;AACvD,IAAA,YAAA,GAAe,KAAA,CAAM,gBAAgB,sBAAA,EAAwB;AAAA,MAC3D,WAAA,EAAa,yBAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA;AACD,IAAA,cAAA,GAAiB,KAAA,CAAM,cAAc,mBAAA,EAAqB;AAAA,MACxD,WAAA,EAAa;AAAA,KACd,CAAA;AACD,IAAA,cAAA,GAAiB,KAAA,CAAM,cAAc,yBAAA,EAA2B;AAAA,MAC9D,WAAA,EAAa,mDAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACP,CAAA,IAAK,IAAA;AAAA,EACR,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,CAAC,KAAA,KAAU;AAEjB,MAAA,KAAA,CAAM,YAAY;AAChB,QAAA,MAAM,UAAA,EAAW;AACjB,QAAA,IAAI,CAAC,GAAA,EAAK;AACV,QAAA,MAAM,KAAA,GAAiC;AAAA,UACrC,GAAG,SAAA;AAAA,UACH,aAAa,KAAA,CAAM,MAAA;AAAA,UACnB,WAAW,KAAA,CAAM,IAAA;AAAA,UACjB,cAAc,KAAA,CAAM,OAAA;AAAA,UACpB,cAAc,KAAA,CAAM;AAAA,SACtB;AACA,QAAA,IAAI,MAAM,UAAA,KAAe,IAAA,EAAM,KAAA,CAAM,kBAAkB,IAAI,KAAA,CAAM,UAAA;AACjE,QAAA,IAAI,KAAA,CAAM,SAAA,EAAW,KAAA,CAAM,eAAe,IAAI,KAAA,CAAM,SAAA;AACpD,QAAA,IAAI,KAAA,CAAM,YAAA,EAAc,KAAA,CAAM,kBAAkB,IAAI,KAAA,CAAM,YAAA;AAE1D,QAAA,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,UAAA,EAAY,KAAK,CAAA;AAC5C,QAAA,cAAA,EAAgB,GAAA,CAAI,GAAG,KAAK,CAAA;AAC5B,QAAA,IAAI,MAAM,SAAA,EAAW,SAAA,KAAc,QAAQ,KAAA,CAAM,SAAA,EAAW,cAAc,MAAA,EAAW;AACnF,UAAA,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAA,CAAU,SAAA,EAAW;AAAA,YAChD,WAAW,KAAA,CAAM;AAAA,WAClB,CAAA;AAAA,QACH;AAGA,QAAA,MAAM,MAAA,GAAS,GAAA,CAAI,KAAA,CAAM,SAAA,CAAU,aAAa,OAAO,CAAA;AACvD,QAAA,MAAM,IAAA,GAAO,OAAO,SAAA,CAAU,CAAA,GAAA,EAAM,MAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI;AAAA,UAChE,UAAA,EAAY;AAAA,SACb,CAAA;AACD,QAAA,IAAI,MAAM,OAAA,EAAS;AACjB,UAAA,IAAA,CAAK,UAAU,EAAE,IAAA,EAAM,GAAA,CAAI,cAAA,CAAe,IAAI,CAAA;AAAA,QAChD,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,SAAA,CAAU;AAAA,YACb,IAAA,EAAM,IAAI,cAAA,CAAe,KAAA;AAAA,YACzB,OAAA,EAAS,CAAA,0BAAA,EAA6B,KAAA,CAAM,UAAU,CAAA,CAAA;AAAA,WACvD,CAAA;AAAA,QACH;AACA,QAAA,IAAA,CAAK,GAAA,EAAI;AAAA,MACX,CAAA,GAAG;AAAA,IACL,CAAA;AAAA,IAEA,cAAc,MAAM;AAGlB,MAAA,IAAI,CAAC,GAAA,EAAK;AAER,QAAA,IAAI,WAAW,GAAA,GAAM,SAAA;AAAA,MACvB;AACA,MAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,aAAA,EAAc;AACrC,MAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,MAAA,MAAM,GAAA,GAAM,KAAK,WAAA,EAAY;AAC7B,MAAA,OAAO;AAAA,QACL,SAAS,GAAA,CAAI,OAAA;AAAA,QACb,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF","file":"otel.js","sourcesContent":["/**\n * OpenTelemetry instrumentation — drop-in tracing + metrics for the MP toolkit.\n *\n * # Why a subpath?\n *\n * `@opentelemetry/api` is an OPTIONAL peer dep. Consumers who don't use\n * OpenTelemetry don't pay the bundle cost. Consumers who DO use it import\n * from `@ar-agents/mercadopago/otel` and get instant instrumentation:\n * spans for every MP request, metrics for latency/errors/rate-limit\n * remaining, and proper context propagation to your downstream traces.\n *\n * # Setup\n *\n * 1. Install: `pnpm add @opentelemetry/api`\n * 2. Wire your tracer + meter at app boot (per OpenTelemetry standard).\n * 3. Pass the instrumented hooks to MercadoPagoClient:\n *\n *    ```ts\n *    import { MercadoPagoClient } from \"@ar-agents/mercadopago\";\n *    import { createOtelHooks } from \"@ar-agents/mercadopago/otel\";\n *\n *    const otel = createOtelHooks({ serviceName: \"billing-bot\" });\n *    const client = new MercadoPagoClient({\n *      accessToken: process.env.MP_ACCESS_TOKEN!,\n *      onCall: otel.onCall,\n *      traceContext: otel.traceContext,\n *    });\n *    ```\n *\n * # What gets instrumented\n *\n * - **Spans**: one span per MP request, named `mp.{method}.{path}` (e.g.,\n *   `mp.GET./v1/payments/123`). Includes attributes: status code,\n *   request_id, retried count, success bool, MP rate-limit remaining,\n *   circuit breaker state.\n * - **Metrics**: `mp.requests.duration` histogram (ms), `mp.requests.count`\n *   counter (labeled by success/method/path/status), `mp.rate_limit.remaining`\n *   gauge.\n *\n * # No-op fallback\n *\n * If `@opentelemetry/api` isn't installed at runtime, the hooks degrade to\n * no-ops gracefully (without throwing) so the toolkit remains importable\n * even without OTEL configured.\n */\n\n// Types-only imports — `@opentelemetry/api` is an OPTIONAL peer dep.\n// We resolve at runtime via dynamic import; if absent, we run as no-ops.\ntype Tracer = {\n  startSpan(name: string, options?: unknown): {\n    setAttribute(k: string, v: unknown): void;\n    setStatus(s: { code: number; message?: string }): void;\n    end(): void;\n    spanContext(): { traceId: string; spanId: string; traceFlags: number };\n  };\n};\ntype Histogram = { record(v: number, attributes?: Record<string, unknown>): void };\ntype Counter = { add(v: number, attributes?: Record<string, unknown>): void };\ntype Gauge = { record(v: number, attributes?: Record<string, unknown>): void };\n\ninterface OtelApi {\n  trace: {\n    getTracer(name: string, version?: string): Tracer;\n    getActiveSpan(): { spanContext(): { traceId: string; spanId: string; traceFlags: number } } | undefined;\n  };\n  metrics: {\n    getMeter(name: string, version?: string): {\n      createHistogram(name: string, opts?: { description?: string; unit?: string }): Histogram;\n      createCounter(name: string, opts?: { description?: string }): Counter;\n      createGauge?(name: string, opts?: { description?: string; unit?: string }): Gauge;\n    };\n  };\n  SpanStatusCode: { OK: number; ERROR: number; UNSET: number };\n}\n\nlet cachedApi: OtelApi | null | undefined = undefined;\n\nasync function loadOtelApi(): Promise<OtelApi | null> {\n  if (cachedApi !== undefined) return cachedApi;\n  try {\n    const mod = (await import(\n      /* @vite-ignore */ \"@opentelemetry/api\"\n    )) as unknown as OtelApi;\n    cachedApi = mod;\n    return mod;\n  } catch {\n    cachedApi = null;\n    return null;\n  }\n}\n\nexport interface OtelHooksOptions {\n  /** Service name shown in trace UIs. Default \"ar-agents-mercadopago\". */\n  serviceName?: string;\n  /** Toolkit version (defaults to a static \"0.10.x\"). */\n  version?: string;\n  /**\n   * Attributes added to every span/metric (e.g., environment, deployment_id).\n   */\n  attributes?: Record<string, string | number | boolean>;\n}\n\n/**\n * Build OpenTelemetry-aware hooks for `MercadoPagoClient`. Returns:\n *\n * - `onCall`: wires every request into traces + metrics\n * - `traceContext`: extracts active span context for traceparent propagation\n *\n * Both degrade to no-ops if `@opentelemetry/api` isn't installed.\n */\nexport function createOtelHooks(opts: OtelHooksOptions = {}): {\n  onCall: (event: {\n    method: string;\n    path: string;\n    durationMs: number;\n    httpStatus: number | null;\n    retried: number;\n    success: boolean;\n    requestId?: string | null;\n    rateLimit?: { remaining: number | null; resetSeconds: number | null };\n    circuitState?: \"CLOSED\" | \"OPEN\" | \"HALF_OPEN\";\n    traceContext?: { traceId?: string; spanId?: string };\n  }) => void;\n  traceContext: () => { traceId?: string; spanId?: string; traceFlags?: number } | undefined;\n} {\n  const serviceName = opts.serviceName ?? \"ar-agents-mercadopago\";\n  const version = opts.version ?? \"0.10.0\";\n  const baseAttrs = opts.attributes ?? {};\n\n  // Lazy state — resolved on first invocation (so module load is sync + safe).\n  let initialized = false;\n  let api: OtelApi | null = null;\n  let durationHist: Histogram | null = null;\n  let requestCounter: Counter | null = null;\n  let rateLimitGauge: Gauge | null = null;\n\n  const ensureInit = async () => {\n    if (initialized) return;\n    initialized = true;\n    api = await loadOtelApi();\n    if (!api) return;\n    const meter = api.metrics.getMeter(serviceName, version);\n    durationHist = meter.createHistogram(\"mp.requests.duration\", {\n      description: \"MP API request duration\",\n      unit: \"ms\",\n    });\n    requestCounter = meter.createCounter(\"mp.requests.count\", {\n      description: \"MP API requests count by outcome\",\n    });\n    rateLimitGauge = meter.createGauge?.(\"mp.rate_limit.remaining\", {\n      description: \"MP-reported rate limit remaining at last response\",\n      unit: \"1\",\n    }) ?? null;\n  };\n\n  return {\n    onCall: (event) => {\n      // Don't await — fire-and-forget. Best-effort observability.\n      void (async () => {\n        await ensureInit();\n        if (!api) return;\n        const attrs: Record<string, unknown> = {\n          ...baseAttrs,\n          \"mp.method\": event.method,\n          \"mp.path\": event.path,\n          \"mp.success\": event.success,\n          \"mp.retried\": event.retried,\n        };\n        if (event.httpStatus !== null) attrs[\"http.status_code\"] = event.httpStatus;\n        if (event.requestId) attrs[\"mp.request_id\"] = event.requestId;\n        if (event.circuitState) attrs[\"mp.circuit_state\"] = event.circuitState;\n\n        durationHist?.record(event.durationMs, attrs);\n        requestCounter?.add(1, attrs);\n        if (event.rateLimit?.remaining !== null && event.rateLimit?.remaining !== undefined) {\n          rateLimitGauge?.record(event.rateLimit.remaining, {\n            \"mp.path\": event.path,\n          });\n        }\n\n        // Span: emit a synthetic child span scoped to this request's duration.\n        const tracer = api.trace.getTracer(serviceName, version);\n        const span = tracer.startSpan(`mp.${event.method}.${event.path}`, {\n          attributes: attrs,\n        });\n        if (event.success) {\n          span.setStatus({ code: api.SpanStatusCode.OK });\n        } else {\n          span.setStatus({\n            code: api.SpanStatusCode.ERROR,\n            message: `MP request failed (status=${event.httpStatus})`,\n          });\n        }\n        span.end();\n      })();\n    },\n\n    traceContext: () => {\n      // Synchronous getter — must be cheap. Resolves the OTEL active span\n      // context if available; returns undefined if OTEL isn't installed.\n      if (!api) {\n        // Try to use the cached api if loadOtelApi already ran\n        if (cachedApi) api = cachedApi;\n      }\n      if (!api) return undefined;\n      const span = api.trace.getActiveSpan();\n      if (!span) return undefined;\n      const ctx = span.spanContext();\n      return {\n        traceId: ctx.traceId,\n        spanId: ctx.spanId,\n        traceFlags: ctx.traceFlags,\n      };\n    },\n  };\n}\n"]}

package/dist/vercel-kv.cjs

@@ -6,6 +6,7 @@ var kv = require('@vercel/kv');
 var DEFAULT_SUBSCRIPTION_PREFIX = "mp:sub:";
 var DEFAULT_OAUTH_PREFIX = "mp:oauth:";
 var DEFAULT_IDEMPOTENCY_PREFIX = "mp:idem:";
+var DEFAULT_AUDIT_PREFIX = "mp:audit:";
 var VercelKVSubscriptionStateAdapter = class {
   kv;
   prefix;
@@ -84,7 +85,87 @@ var VercelKVIdempotencyCache = class {
     await this.kv.del(this.key(key));
   }
 };
+var VercelKVAuditLog = class {
+  kv;
+  prefix;
+  constructor(options = {}) {
+    this.kv = options.kv ?? kv.kv;
+    this.prefix = options.prefix ?? DEFAULT_AUDIT_PREFIX;
+  }
+  async append(entry) {
+    const ts = new Date(entry.timestamp).getTime();
+    const day = entry.timestamp.slice(0, 10);
+    await Promise.all([
+      this.kv.set(`${this.prefix}entry:${entry.id}`, entry),
+      this.kv.zadd(`${this.prefix}day:${day}`, { score: ts, member: entry.id }),
+      this.kv.zadd(`${this.prefix}actor:${entry.actor}`, { score: ts, member: entry.id }),
+      ...entry.tenantId ? [
+        this.kv.zadd(`${this.prefix}tenant:${entry.tenantId}`, {
+          score: ts,
+          member: entry.id
+        })
+      ] : []
+    ]);
+  }
+  async query(filter) {
+    const limit = filter.limit ?? 100;
+    let ids;
+    if (filter.actor) {
+      ids = await this.zrangeByScore(
+        `${this.prefix}actor:${filter.actor}`,
+        filter.from,
+        filter.to,
+        limit
+      );
+    } else if (filter.tenantId) {
+      ids = await this.zrangeByScore(
+        `${this.prefix}tenant:${filter.tenantId}`,
+        filter.from,
+        filter.to,
+        limit
+      );
+    } else if (filter.from || filter.to) {
+      const fromDate = filter.from?.slice(0, 10) ?? "0000-00-00";
+      const toDate = filter.to?.slice(0, 10) ?? "9999-99-99";
+      ids = [];
+      const fromTs = new Date(fromDate).getTime();
+      const toTs = new Date(toDate).getTime();
+      for (let d = fromTs; d <= toTs && ids.length < limit; d += 864e5) {
+        const day = new Date(d).toISOString().slice(0, 10);
+        const dayIds = await this.zrangeByScore(
+          `${this.prefix}day:${day}`,
+          filter.from,
+          filter.to,
+          limit - ids.length
+        );
+        ids.push(...dayIds);
+      }
+    } else {
+      return [];
+    }
+    const entries = [];
+    for (const id of ids) {
+      const entry = await this.kv.get(`${this.prefix}entry:${id}`);
+      if (!entry) continue;
+      if (filter.operation && entry.operation !== filter.operation) continue;
+      entries.push(entry);
+    }
+    return entries;
+  }
+  async zrangeByScore(key, from, to, limit) {
+    const min = from ? new Date(from).getTime() : 0;
+    const max = to ? new Date(to).getTime() : Number.MAX_SAFE_INTEGER;
+    const opts = {
+      byScore: true,
+      offset: 0,
+      ...limit !== void 0 ? { count: limit } : { count: 100 }
+    };
+    const ids = await this.kv.zrange(key, min, max, opts);
+    return ids.map(String);
+  }
+};
 
+exports.VercelKVAuditLog = VercelKVAuditLog;
 exports.VercelKVIdempotencyCache = VercelKVIdempotencyCache;
 exports.VercelKVOAuthTokenStore = VercelKVOAuthTokenStore;
 exports.VercelKVSubscriptionStateAdapter = VercelKVSubscriptionStateAdapter;

package/dist/vercel-kv.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/vercel-kv.ts"],"names":["defaultKv"],"mappings":";;;;;AAsEA,IAAM,2BAAA,GAA8B,SAAA;AACpC,IAAM,oBAAA,GAAuB,WAAA;AAC7B,IAAM,0BAAA,GAA6B,UAAA;AAiB5B,IAAM,mCAAN,MAEP;AAAA,EACmB,EAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,2BAAA;AAChC,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,OAAA,CAAA;AAAA,EAChC;AAAA,EAEQ,IAAI,EAAA,EAAoB;AAC9B,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,EAAE,CAAA,CAAA;AAAA,EAC5B;AAAA,EAEA,MAAM,GAAA,CACJ,EAAA,EACA,KAAA,EACe;AACf,IAAA,MAAM,QAAA,GAAY,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAA6B,KAAK,GAAA,CAAI,EAAE,CAAC,CAAA,IAAM,EAAC;AAChF,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA,EAAG,EAAE,GAAG,QAAA,EAAU,GAAG,KAAA,EAAO,CAAA;AACzD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,EAAE,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,IAAI,EAAA,EAAqD;AAC7D,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAA6B,KAAK,GAAA,CAAI,EAAE,CAAC,CAAA,IAAM,IAAA;AAAA,EACvE;AAAA,EAEA,MAAM,IAAA,GAA0B;AAC9B,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS,KAAK,QAAQ,CAAA;AAChD,IAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,OAAO,EAAA,EAA2B;AACtC,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAC,CAAA;AAC9B,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,EAAE,CAAA;AAAA,EACtC;AACF;AAMO,IAAM,0BAAN,MAAyD;AAAA,EAC7C,EAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,oBAAA;AAChC,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,OAAA,CAAA;AAAA,EAChC;AAAA,EAEQ,IAAI,MAAA,EAAwB;AAClC,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,MAAM,CAAA,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,GAAA,CAAI,MAAA,EAAgB,KAAA,EAAwC;AAChE,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,KAAK,GAAA,CAAI,MAAM,GAAG,KAAK,CAAA;AACzC,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,MAAM,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAM,IAAI,MAAA,EAAkD;AAC1D,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAAsB,KAAK,GAAA,CAAI,MAAM,CAAC,CAAA,IAAM,IAAA;AAAA,EACpE;AAAA,EAEA,MAAM,OAAO,MAAA,EAA+B;AAC1C,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAM,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,MAAM,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAM,IAAA,GAA0B;AAC9B,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS,KAAK,QAAQ,CAAA;AAChD,IAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AAAA,EACvB;AACF;AAMO,IAAM,2BAAN,MAA2D;AAAA,EAC/C,EAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,0BAAA;AAAA,EAClC;AAAA,EAEQ,IAAI,CAAA,EAAmB;AAC7B,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAM,IAAO,GAAA,EAAgC;AAC3C,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAAO,KAAK,GAAA,CAAI,GAAG,CAAC,CAAA,IAAM,IAAA;AAAA,EAClD;AAAA,EAEA,MAAM,GAAA,CAAO,GAAA,EAAa,KAAA,EAAU,aAAa,KAAA,EAAuB;AAEtE,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG,KAAA,EAAO,EAAE,EAAA,EAAI,UAAA,EAAY,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,OAAO,GAAA,EAA4B;AACvC,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACjC;AACF","file":"vercel-kv.cjs","sourcesContent":["/**\n * Vercel KV adapters — drop-in `SubscriptionStateAdapter`,\n * `OAuthTokenStore`, and `IdempotencyCache` implementations backed by\n * [Vercel KV](https://vercel.com/docs/storage/vercel-kv) (Upstash Redis).\n *\n * # Why a separate subpath?\n *\n * `@vercel/kv` is a peer dependency — only consumers who actually use Vercel\n * KV install it. Importing from `@ar-agents/mercadopago/vercel-kv` is\n * lazy: the main `@ar-agents/mercadopago` bundle stays tiny for callers who\n * use the in-memory adapters or a different store.\n *\n * # Setup\n *\n * 1. Create a KV store at https://vercel.com/dashboard/stores\n * 2. Connect it to your project — Vercel auto-injects `KV_*` env vars\n * 3. `pnpm add @vercel/kv`\n * 4. Wire the adapters:\n *\n *    ```ts\n *    import { mercadoPagoTools, MercadoPagoClient } from \"@ar-agents/mercadopago\";\n *    import {\n *      VercelKVSubscriptionStateAdapter,\n *      VercelKVOAuthTokenStore,\n *    } from \"@ar-agents/mercadopago/vercel-kv\";\n *\n *    const tools = mercadoPagoTools(client, {\n *      state: new VercelKVSubscriptionStateAdapter(),\n *      backUrl: \"https://mysite.com/done\",\n *      // ... oauth, webhookSecret, etc.\n *    });\n *\n *    // For marketplace flows, also wire the OAuth token store:\n *    const oauthStore = new VercelKVOAuthTokenStore();\n *    await oauthStore.set(token.user_id, {\n *      user_id: token.user_id,\n *      access_token: token.access_token,\n *      refresh_token: token.refresh_token!,\n *      expires_at: Date.now() + (token.expires_in ?? 21600) * 1000,\n *    });\n *    ```\n *\n * # Edge Runtime\n *\n * `@vercel/kv` works in Vercel Edge Runtime, Node.js, and any environment\n * with `fetch` (it's a thin REST client over Upstash). All adapters here\n * are async and Edge-safe.\n *\n * # Key namespacing\n *\n * Each adapter uses its own prefix so multiple adapters can share the same\n * KV store without collisions:\n * - Subscriptions: `mp:sub:{id}`\n * - OAuth tokens:  `mp:oauth:{userId}`\n * - Idempotency:   `mp:idem:{key}`\n *\n * Pass a custom prefix via the constructor if you need to share the store\n * with other apps.\n */\n\nimport { kv as defaultKv } from \"@vercel/kv\";\nimport type { VercelKV } from \"@vercel/kv\";\nimport type {\n  IdempotencyCache,\n  OAuthTokenRecord,\n  OAuthTokenStore,\n  SubscriptionStateAdapter,\n  SubscriptionStateRecord,\n} from \"./state\";\n\nconst DEFAULT_SUBSCRIPTION_PREFIX = \"mp:sub:\";\nconst DEFAULT_OAUTH_PREFIX = \"mp:oauth:\";\nconst DEFAULT_IDEMPOTENCY_PREFIX = \"mp:idem:\";\n\ninterface VercelKVAdapterOptions {\n  /**\n   * Custom KV client. If omitted, uses the default `kv` export from\n   * `@vercel/kv` (which reads `KV_REST_API_URL` + `KV_REST_API_TOKEN` from\n   * env — auto-injected when you connect a KV store to your Vercel project).\n   */\n  kv?: VercelKV;\n  /** Override the key prefix. */\n  prefix?: string;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SubscriptionStateAdapter\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVSubscriptionStateAdapter\n  implements SubscriptionStateAdapter\n{\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n  private readonly indexKey: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_SUBSCRIPTION_PREFIX;\n    this.indexKey = `${this.prefix}__index`;\n  }\n\n  private key(id: string): string {\n    return `${this.prefix}${id}`;\n  }\n\n  async set(\n    id: string,\n    state: Partial<SubscriptionStateRecord>,\n  ): Promise<void> {\n    const existing = (await this.kv.get<SubscriptionStateRecord>(this.key(id))) ?? {};\n    await this.kv.set(this.key(id), { ...existing, ...state });\n    await this.kv.sadd(this.indexKey, id);\n  }\n\n  async get(id: string): Promise<SubscriptionStateRecord | null> {\n    return (await this.kv.get<SubscriptionStateRecord>(this.key(id))) ?? null;\n  }\n\n  async list(): Promise<string[]> {\n    const ids = await this.kv.smembers(this.indexKey);\n    return ids.map(String);\n  }\n\n  /** Forget a subscription record. NOT part of the adapter interface. */\n  async delete(id: string): Promise<void> {\n    await this.kv.del(this.key(id));\n    await this.kv.srem(this.indexKey, id);\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// OAuthTokenStore (per-seller marketplace token persistence)\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVOAuthTokenStore implements OAuthTokenStore {\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n  private readonly indexKey: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_OAUTH_PREFIX;\n    this.indexKey = `${this.prefix}__index`;\n  }\n\n  private key(userId: string): string {\n    return `${this.prefix}${userId}`;\n  }\n\n  async set(userId: string, token: OAuthTokenRecord): Promise<void> {\n    await this.kv.set(this.key(userId), token);\n    await this.kv.sadd(this.indexKey, userId);\n  }\n\n  async get(userId: string): Promise<OAuthTokenRecord | null> {\n    return (await this.kv.get<OAuthTokenRecord>(this.key(userId))) ?? null;\n  }\n\n  async delete(userId: string): Promise<void> {\n    await this.kv.del(this.key(userId));\n    await this.kv.srem(this.indexKey, userId);\n  }\n\n  async list(): Promise<string[]> {\n    const ids = await this.kv.smembers(this.indexKey);\n    return ids.map(String);\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// IdempotencyCache (KV-backed dedup of agent retries)\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVIdempotencyCache implements IdempotencyCache {\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_IDEMPOTENCY_PREFIX;\n  }\n\n  private key(k: string): string {\n    return `${this.prefix}${k}`;\n  }\n\n  async get<T>(key: string): Promise<T | null> {\n    return (await this.kv.get<T>(this.key(key))) ?? null;\n  }\n\n  async set<T>(key: string, value: T, ttlSeconds = 86_400): Promise<void> {\n    // Vercel KV's `set` supports a TTL in seconds via the `ex` option.\n    await this.kv.set(this.key(key), value, { ex: ttlSeconds });\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.kv.del(this.key(key));\n  }\n}\n"]}
+{"version":3,"sources":["../src/vercel-kv.ts"],"names":["defaultKv"],"mappings":";;;;;AAuEA,IAAM,2BAAA,GAA8B,SAAA;AACpC,IAAM,oBAAA,GAAuB,WAAA;AAC7B,IAAM,0BAAA,GAA6B,UAAA;AACnC,IAAM,oBAAA,GAAuB,WAAA;AAiBtB,IAAM,mCAAN,MAEP;AAAA,EACmB,EAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,2BAAA;AAChC,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,OAAA,CAAA;AAAA,EAChC;AAAA,EAEQ,IAAI,EAAA,EAAoB;AAC9B,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,EAAE,CAAA,CAAA;AAAA,EAC5B;AAAA,EAEA,MAAM,GAAA,CACJ,EAAA,EACA,KAAA,EACe;AACf,IAAA,MAAM,QAAA,GAAY,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAA6B,KAAK,GAAA,CAAI,EAAE,CAAC,CAAA,IAAM,EAAC;AAChF,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA,EAAG,EAAE,GAAG,QAAA,EAAU,GAAG,KAAA,EAAO,CAAA;AACzD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,EAAE,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,IAAI,EAAA,EAAqD;AAC7D,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAA6B,KAAK,GAAA,CAAI,EAAE,CAAC,CAAA,IAAM,IAAA;AAAA,EACvE;AAAA,EAEA,MAAM,IAAA,GAA0B;AAC9B,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS,KAAK,QAAQ,CAAA;AAChD,IAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,MAAM,OAAO,EAAA,EAA2B;AACtC,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,EAAE,CAAC,CAAA;AAC9B,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,EAAE,CAAA;AAAA,EACtC;AACF;AAMO,IAAM,0BAAN,MAAyD;AAAA,EAC7C,EAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,oBAAA;AAChC,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,OAAA,CAAA;AAAA,EAChC;AAAA,EAEQ,IAAI,MAAA,EAAwB;AAClC,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,MAAM,CAAA,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,GAAA,CAAI,MAAA,EAAgB,KAAA,EAAwC;AAChE,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,KAAK,GAAA,CAAI,MAAM,GAAG,KAAK,CAAA;AACzC,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,MAAM,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAM,IAAI,MAAA,EAAkD;AAC1D,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAAsB,KAAK,GAAA,CAAI,MAAM,CAAC,CAAA,IAAM,IAAA;AAAA,EACpE;AAAA,EAEA,MAAM,OAAO,MAAA,EAA+B;AAC1C,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAM,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,UAAU,MAAM,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAM,IAAA,GAA0B;AAC9B,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS,KAAK,QAAQ,CAAA;AAChD,IAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AAAA,EACvB;AACF;AAMO,IAAM,2BAAN,MAA2D;AAAA,EAC/C,EAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,0BAAA;AAAA,EAClC;AAAA,EAEQ,IAAI,CAAA,EAAmB;AAC7B,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,CAAA,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAM,IAAO,GAAA,EAAgC;AAC3C,IAAA,OAAQ,MAAM,KAAK,EAAA,CAAG,GAAA,CAAO,KAAK,GAAA,CAAI,GAAG,CAAC,CAAA,IAAM,IAAA;AAAA,EAClD;AAAA,EAEA,MAAM,GAAA,CAAO,GAAA,EAAa,KAAA,EAAU,aAAa,KAAA,EAAuB;AAEtE,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG,KAAA,EAAO,EAAE,EAAA,EAAI,UAAA,EAAY,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,OAAO,GAAA,EAA4B;AACvC,IAAA,MAAM,KAAK,EAAA,CAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAC,CAAA;AAAA,EACjC;AACF;AA2BO,IAAM,mBAAN,MAAkD;AAAA,EACtC,EAAA;AAAA,EACA,MAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAkC,EAAC,EAAG;AAChD,IAAA,IAAA,CAAK,EAAA,GAAK,QAAQ,EAAA,IAAMA,KAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,oBAAA;AAAA,EAClC;AAAA,EAEA,MAAM,OAAO,KAAA,EAAkC;AAC7C,IAAA,MAAM,KAAK,IAAI,IAAA,CAAK,KAAA,CAAM,SAAS,EAAE,OAAA,EAAQ;AAC7C,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,SAAA,CAAU,KAAA,CAAM,GAAG,EAAE,CAAA;AACvC,IAAA,MAAM,QAAQ,GAAA,CAAI;AAAA,MAChB,IAAA,CAAK,EAAA,CAAG,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,MAAA,EAAS,KAAA,CAAM,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,MACpD,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,CAAA,EAAG,KAAK,MAAM,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AAAA,MACxE,KAAK,EAAA,CAAG,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AAAA,MAClF,GAAI,MAAM,QAAA,GACN;AAAA,QACE,IAAA,CAAK,GAAG,IAAA,CAAK,CAAA,EAAG,KAAK,MAAM,CAAA,OAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,CAAA,EAAI;AAAA,UACrD,KAAA,EAAO,EAAA;AAAA,UACP,QAAQ,KAAA,CAAM;AAAA,SACf;AAAA,UAEH;AAAC,KACN,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,MAAA,EAOc;AACxB,IAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,IAAS,GAAA;AAC9B,IAAA,IAAI,GAAA;AAGJ,IAAA,IAAI,OAAO,KAAA,EAAO;AAChB,MAAA,GAAA,GAAM,MAAM,IAAA,CAAK,aAAA;AAAA,QACf,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,MAAA,EAAS,OAAO,KAAK,CAAA,CAAA;AAAA,QACnC,MAAA,CAAO,IAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP;AAAA,OACF;AAAA,IACF,CAAA,MAAA,IAAW,OAAO,QAAA,EAAU;AAC1B,MAAA,GAAA,GAAM,MAAM,IAAA,CAAK,aAAA;AAAA,QACf,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,OAAA,EAAU,OAAO,QAAQ,CAAA,CAAA;AAAA,QACvC,MAAA,CAAO,IAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP;AAAA,OACF;AAAA,IACF,CAAA,MAAA,IAAW,MAAA,CAAO,IAAA,IAAQ,MAAA,CAAO,EAAA,EAAI;AAEnC,MAAA,MAAM,WAAW,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,IAAK,YAAA;AAC9C,MAAA,MAAM,SAAS,MAAA,CAAO,EAAA,EAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,IAAK,YAAA;AAC1C,MAAA,GAAA,GAAM,EAAC;AAEP,MAAA,MAAM,MAAA,GAAS,IAAI,IAAA,CAAK,QAAQ,EAAE,OAAA,EAAQ;AAC1C,MAAA,MAAM,IAAA,GAAO,IAAI,IAAA,CAAK,MAAM,EAAE,OAAA,EAAQ;AACtC,MAAA,KAAA,IAAS,CAAA,GAAI,QAAQ,CAAA,IAAK,IAAA,IAAQ,IAAI,MAAA,GAAS,KAAA,EAAO,KAAK,KAAA,EAAY;AACrE,QAAA,MAAM,GAAA,GAAM,IAAI,IAAA,CAAK,CAAC,EAAE,WAAA,EAAY,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACjD,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,aAAA;AAAA,UACxB,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA;AAAA,UACxB,MAAA,CAAO,IAAA;AAAA,UACP,MAAA,CAAO,EAAA;AAAA,UACP,QAAQ,GAAA,CAAI;AAAA,SACd;AACA,QAAA,GAAA,CAAI,IAAA,CAAK,GAAG,MAAM,CAAA;AAAA,MACpB;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,OAAO,EAAC;AAAA,IACV;AAGA,IAAA,MAAM,UAAwB,EAAC;AAC/B,IAAA,KAAA,MAAW,MAAM,GAAA,EAAK;AACpB,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,EAAA,CAAG,GAAA,CAAgB,GAAG,IAAA,CAAK,MAAM,CAAA,MAAA,EAAS,EAAE,CAAA,CAAE,CAAA;AACvE,MAAA,IAAI,CAAC,KAAA,EAAO;AACZ,MAAA,IAAI,MAAA,CAAO,SAAA,IAAa,KAAA,CAAM,SAAA,KAAc,OAAO,SAAA,EAAW;AAC9D,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAc,aAAA,CACZ,GAAA,EACA,IAAA,EACA,IACA,KAAA,EACmB;AACnB,IAAA,MAAM,MAAM,IAAA,GAAO,IAAI,KAAK,IAAI,CAAA,CAAE,SAAQ,GAAI,CAAA;AAC9C,IAAA,MAAM,GAAA,GAAM,KAAK,IAAI,IAAA,CAAK,EAAE,CAAA,CAAE,OAAA,KAAY,MAAA,CAAO,gBAAA;AACjD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ,CAAA;AAAA,MACR,GAAI,UAAU,MAAA,GAAY,EAAE,OAAO,KAAA,EAAM,GAAI,EAAE,KAAA,EAAO,GAAA;AAAI,KAC5D;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,EAAA,CAAG,OAAO,GAAA,EAAK,GAAA,EAAK,KAAK,IAAI,CAAA;AACpD,IAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AAAA,EACvB;AACF","file":"vercel-kv.cjs","sourcesContent":["/**\n * Vercel KV adapters — drop-in `SubscriptionStateAdapter`,\n * `OAuthTokenStore`, and `IdempotencyCache` implementations backed by\n * [Vercel KV](https://vercel.com/docs/storage/vercel-kv) (Upstash Redis).\n *\n * # Why a separate subpath?\n *\n * `@vercel/kv` is a peer dependency — only consumers who actually use Vercel\n * KV install it. Importing from `@ar-agents/mercadopago/vercel-kv` is\n * lazy: the main `@ar-agents/mercadopago` bundle stays tiny for callers who\n * use the in-memory adapters or a different store.\n *\n * # Setup\n *\n * 1. Create a KV store at https://vercel.com/dashboard/stores\n * 2. Connect it to your project — Vercel auto-injects `KV_*` env vars\n * 3. `pnpm add @vercel/kv`\n * 4. Wire the adapters:\n *\n *    ```ts\n *    import { mercadoPagoTools, MercadoPagoClient } from \"@ar-agents/mercadopago\";\n *    import {\n *      VercelKVSubscriptionStateAdapter,\n *      VercelKVOAuthTokenStore,\n *    } from \"@ar-agents/mercadopago/vercel-kv\";\n *\n *    const tools = mercadoPagoTools(client, {\n *      state: new VercelKVSubscriptionStateAdapter(),\n *      backUrl: \"https://mysite.com/done\",\n *      // ... oauth, webhookSecret, etc.\n *    });\n *\n *    // For marketplace flows, also wire the OAuth token store:\n *    const oauthStore = new VercelKVOAuthTokenStore();\n *    await oauthStore.set(token.user_id, {\n *      user_id: token.user_id,\n *      access_token: token.access_token,\n *      refresh_token: token.refresh_token!,\n *      expires_at: Date.now() + (token.expires_in ?? 21600) * 1000,\n *    });\n *    ```\n *\n * # Edge Runtime\n *\n * `@vercel/kv` works in Vercel Edge Runtime, Node.js, and any environment\n * with `fetch` (it's a thin REST client over Upstash). All adapters here\n * are async and Edge-safe.\n *\n * # Key namespacing\n *\n * Each adapter uses its own prefix so multiple adapters can share the same\n * KV store without collisions:\n * - Subscriptions: `mp:sub:{id}`\n * - OAuth tokens:  `mp:oauth:{userId}`\n * - Idempotency:   `mp:idem:{key}`\n *\n * Pass a custom prefix via the constructor if you need to share the store\n * with other apps.\n */\n\nimport { kv as defaultKv } from \"@vercel/kv\";\nimport type { VercelKV } from \"@vercel/kv\";\nimport type { AuditEntry, AuditLogAdapter, AuditOperation } from \"./audit\";\nimport type {\n  IdempotencyCache,\n  OAuthTokenRecord,\n  OAuthTokenStore,\n  SubscriptionStateAdapter,\n  SubscriptionStateRecord,\n} from \"./state\";\n\nconst DEFAULT_SUBSCRIPTION_PREFIX = \"mp:sub:\";\nconst DEFAULT_OAUTH_PREFIX = \"mp:oauth:\";\nconst DEFAULT_IDEMPOTENCY_PREFIX = \"mp:idem:\";\nconst DEFAULT_AUDIT_PREFIX = \"mp:audit:\";\n\ninterface VercelKVAdapterOptions {\n  /**\n   * Custom KV client. If omitted, uses the default `kv` export from\n   * `@vercel/kv` (which reads `KV_REST_API_URL` + `KV_REST_API_TOKEN` from\n   * env — auto-injected when you connect a KV store to your Vercel project).\n   */\n  kv?: VercelKV;\n  /** Override the key prefix. */\n  prefix?: string;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SubscriptionStateAdapter\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVSubscriptionStateAdapter\n  implements SubscriptionStateAdapter\n{\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n  private readonly indexKey: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_SUBSCRIPTION_PREFIX;\n    this.indexKey = `${this.prefix}__index`;\n  }\n\n  private key(id: string): string {\n    return `${this.prefix}${id}`;\n  }\n\n  async set(\n    id: string,\n    state: Partial<SubscriptionStateRecord>,\n  ): Promise<void> {\n    const existing = (await this.kv.get<SubscriptionStateRecord>(this.key(id))) ?? {};\n    await this.kv.set(this.key(id), { ...existing, ...state });\n    await this.kv.sadd(this.indexKey, id);\n  }\n\n  async get(id: string): Promise<SubscriptionStateRecord | null> {\n    return (await this.kv.get<SubscriptionStateRecord>(this.key(id))) ?? null;\n  }\n\n  async list(): Promise<string[]> {\n    const ids = await this.kv.smembers(this.indexKey);\n    return ids.map(String);\n  }\n\n  /** Forget a subscription record. NOT part of the adapter interface. */\n  async delete(id: string): Promise<void> {\n    await this.kv.del(this.key(id));\n    await this.kv.srem(this.indexKey, id);\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// OAuthTokenStore (per-seller marketplace token persistence)\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVOAuthTokenStore implements OAuthTokenStore {\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n  private readonly indexKey: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_OAUTH_PREFIX;\n    this.indexKey = `${this.prefix}__index`;\n  }\n\n  private key(userId: string): string {\n    return `${this.prefix}${userId}`;\n  }\n\n  async set(userId: string, token: OAuthTokenRecord): Promise<void> {\n    await this.kv.set(this.key(userId), token);\n    await this.kv.sadd(this.indexKey, userId);\n  }\n\n  async get(userId: string): Promise<OAuthTokenRecord | null> {\n    return (await this.kv.get<OAuthTokenRecord>(this.key(userId))) ?? null;\n  }\n\n  async delete(userId: string): Promise<void> {\n    await this.kv.del(this.key(userId));\n    await this.kv.srem(this.indexKey, userId);\n  }\n\n  async list(): Promise<string[]> {\n    const ids = await this.kv.smembers(this.indexKey);\n    return ids.map(String);\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// IdempotencyCache (KV-backed dedup of agent retries)\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class VercelKVIdempotencyCache implements IdempotencyCache {\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_IDEMPOTENCY_PREFIX;\n  }\n\n  private key(k: string): string {\n    return `${this.prefix}${k}`;\n  }\n\n  async get<T>(key: string): Promise<T | null> {\n    return (await this.kv.get<T>(this.key(key))) ?? null;\n  }\n\n  async set<T>(key: string, value: T, ttlSeconds = 86_400): Promise<void> {\n    // Vercel KV's `set` supports a TTL in seconds via the `ex` option.\n    await this.kv.set(this.key(key), value, { ex: ttlSeconds });\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.kv.del(this.key(key));\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// AuditLogAdapter — production audit trail with daily-bucket indexing\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Vercel KV–backed audit log adapter. Stores each entry under\n * `mp:audit:entry:{id}` AND adds the id to a daily index sorted set\n * `mp:audit:day:{YYYY-MM-DD}` (score = timestamp ms). This gives O(log N)\n * time-range queries (\"all entries from May 1 to May 5\") without scanning\n * the entire log.\n *\n * # Storage layout\n *\n * - `mp:audit:entry:{id}` → the full entry JSON\n * - `mp:audit:day:{YYYY-MM-DD}` → ZSET of entry ids by timestamp (ms)\n * - `mp:audit:actor:{actor}` → ZSET of entry ids by timestamp (for \"all\n *   entries by actor X\")\n * - `mp:audit:tenant:{tenantId}` → same, by tenant\n *\n * # Cost considerations\n *\n * Each `append()` does 1-3 KV writes (entry + 1-2 indexes). For high-traffic\n * deployments (>10/s sustained), batch via your own queue (e.g., Vercel\n * Queues with daily flush) and provide a custom adapter that batches.\n */\nexport class VercelKVAuditLog implements AuditLogAdapter {\n  private readonly kv: VercelKV;\n  private readonly prefix: string;\n\n  constructor(options: VercelKVAdapterOptions = {}) {\n    this.kv = options.kv ?? defaultKv;\n    this.prefix = options.prefix ?? DEFAULT_AUDIT_PREFIX;\n  }\n\n  async append(entry: AuditEntry): Promise<void> {\n    const ts = new Date(entry.timestamp).getTime();\n    const day = entry.timestamp.slice(0, 10); // YYYY-MM-DD\n    await Promise.all([\n      this.kv.set(`${this.prefix}entry:${entry.id}`, entry),\n      this.kv.zadd(`${this.prefix}day:${day}`, { score: ts, member: entry.id }),\n      this.kv.zadd(`${this.prefix}actor:${entry.actor}`, { score: ts, member: entry.id }),\n      ...(entry.tenantId\n        ? [\n            this.kv.zadd(`${this.prefix}tenant:${entry.tenantId}`, {\n              score: ts,\n              member: entry.id,\n            }),\n          ]\n        : []),\n    ]);\n  }\n\n  async query(filter: {\n    actor?: string;\n    operation?: AuditOperation;\n    tenantId?: string;\n    from?: string;\n    to?: string;\n    limit?: number;\n  }): Promise<AuditEntry[]> {\n    const limit = filter.limit ?? 100;\n    let ids: string[];\n\n    // Pick the most selective index available\n    if (filter.actor) {\n      ids = await this.zrangeByScore(\n        `${this.prefix}actor:${filter.actor}`,\n        filter.from,\n        filter.to,\n        limit,\n      );\n    } else if (filter.tenantId) {\n      ids = await this.zrangeByScore(\n        `${this.prefix}tenant:${filter.tenantId}`,\n        filter.from,\n        filter.to,\n        limit,\n      );\n    } else if (filter.from || filter.to) {\n      // Walk daily buckets for the date range\n      const fromDate = filter.from?.slice(0, 10) ?? \"0000-00-00\";\n      const toDate = filter.to?.slice(0, 10) ?? \"9999-99-99\";\n      ids = [];\n      // Cap walk to ~1 year max to avoid runaway\n      const fromTs = new Date(fromDate).getTime();\n      const toTs = new Date(toDate).getTime();\n      for (let d = fromTs; d <= toTs && ids.length < limit; d += 86_400_000) {\n        const day = new Date(d).toISOString().slice(0, 10);\n        const dayIds = await this.zrangeByScore(\n          `${this.prefix}day:${day}`,\n          filter.from,\n          filter.to,\n          limit - ids.length,\n        );\n        ids.push(...dayIds);\n      }\n    } else {\n      // No filter — bail (full scan would be unbounded)\n      return [];\n    }\n\n    // Load entries\n    const entries: AuditEntry[] = [];\n    for (const id of ids) {\n      const entry = await this.kv.get<AuditEntry>(`${this.prefix}entry:${id}`);\n      if (!entry) continue;\n      if (filter.operation && entry.operation !== filter.operation) continue;\n      entries.push(entry);\n    }\n    return entries;\n  }\n\n  private async zrangeByScore(\n    key: string,\n    from?: string,\n    to?: string,\n    limit?: number,\n  ): Promise<string[]> {\n    const min = from ? new Date(from).getTime() : 0;\n    const max = to ? new Date(to).getTime() : Number.MAX_SAFE_INTEGER;\n    const opts = {\n      byScore: true as const,\n      offset: 0,\n      ...(limit !== undefined ? { count: limit } : { count: 100 }),\n    };\n    const ids = await this.kv.zrange(key, min, max, opts);\n    return ids.map(String);\n  }\n}\n"]}

package/dist/vercel-kv.d.cts

@@ -1,5 +1,5 @@
 import { VercelKV } from '@vercel/kv';
-import { I as IdempotencyCache, d as OAuthTokenStore, O as OAuthTokenRecord, S as SubscriptionStateAdapter, e as SubscriptionStateRecord } from './state-C6Wzb_XX.cjs';
+import { c as AuditLogAdapter, b as AuditEntry, a as AuditOperation, I as IdempotencyCache, h as OAuthTokenStore, O as OAuthTokenRecord, S as SubscriptionStateAdapter, i as SubscriptionStateRecord } from './audit-B9Nhj3PH.cjs';
 
 /**
  * Vercel KV adapters — drop-in `SubscriptionStateAdapter`,
@@ -103,5 +103,41 @@ declare class VercelKVIdempotencyCache implements IdempotencyCache {
     set<T>(key: string, value: T, ttlSeconds?: number): Promise<void>;
     delete(key: string): Promise<void>;
 }
+/**
+ * Vercel KV–backed audit log adapter. Stores each entry under
+ * `mp:audit:entry:{id}` AND adds the id to a daily index sorted set
+ * `mp:audit:day:{YYYY-MM-DD}` (score = timestamp ms). This gives O(log N)
+ * time-range queries ("all entries from May 1 to May 5") without scanning
+ * the entire log.
+ *
+ * # Storage layout
+ *
+ * - `mp:audit:entry:{id}` → the full entry JSON
+ * - `mp:audit:day:{YYYY-MM-DD}` → ZSET of entry ids by timestamp (ms)
+ * - `mp:audit:actor:{actor}` → ZSET of entry ids by timestamp (for "all
+ *   entries by actor X")
+ * - `mp:audit:tenant:{tenantId}` → same, by tenant
+ *
+ * # Cost considerations
+ *
+ * Each `append()` does 1-3 KV writes (entry + 1-2 indexes). For high-traffic
+ * deployments (>10/s sustained), batch via your own queue (e.g., Vercel
+ * Queues with daily flush) and provide a custom adapter that batches.
+ */
+declare class VercelKVAuditLog implements AuditLogAdapter {
+    private readonly kv;
+    private readonly prefix;
+    constructor(options?: VercelKVAdapterOptions);
+    append(entry: AuditEntry): Promise<void>;
+    query(filter: {
+        actor?: string;
+        operation?: AuditOperation;
+        tenantId?: string;
+        from?: string;
+        to?: string;
+        limit?: number;
+    }): Promise<AuditEntry[]>;
+    private zrangeByScore;
+}
 
-export { VercelKVIdempotencyCache, VercelKVOAuthTokenStore, VercelKVSubscriptionStateAdapter };
+export { VercelKVAuditLog, VercelKVIdempotencyCache, VercelKVOAuthTokenStore, VercelKVSubscriptionStateAdapter };