@intenque/network-sdk 0.0.0-stage → 2.2.0-beta.1

package/dist/server/index.d.ts

@@ -0,0 +1,345 @@
+export { a as SDK_VERSION } from '../constants-LVhc0PNb.js';
+
+type SignInput = {
+    secret: string;
+    siteKey: string;
+    keyId: string;
+    method: string;
+    /** Path only (`/v1/conversions`, `/v1/conversions/ping`, `/v1/referrals/<clickId>`, `/v1/landings`). */
+    path: string;
+    /** The exact bytes sent (`''` for an empty body). */
+    body: string | Uint8Array;
+    /** Unix seconds; defaults to now. */
+    timestamp?: number;
+    /** uuid v4; defaults to a fresh one. Every attempt re-signs with a fresh nonce (§6.5). */
+    nonce?: string;
+};
+type SignedHeaders = {
+    'Content-Type': 'application/json';
+    'X-INR-Site': string;
+    'X-INR-Key-Id': string;
+    'X-INR-Timestamp': string;
+    'X-INR-Nonce': string;
+    'X-INR-Signature': string;
+};
+declare function sha256Hex(data: string | Uint8Array): string;
+/** The v1 HMAC base string: the identifiers are bound, so a signature never verifies under another site or key. */
+declare function hmacBase(timestamp: number, nonce: string, siteKey: string, keyId: string, method: string, path: string, body: string | Uint8Array): string;
+declare function signRequest(input: SignInput): {
+    headers: SignedHeaders;
+    timestamp: number;
+    nonce: string;
+    signature: string;
+};
+/** Constant-time check of a `v1=<hex>` signature (what the hub does; here for tests and ports). */
+declare function verifySignature(secret: string, input: {
+    timestamp: number;
+    nonce: string;
+    siteKey: string;
+    keyId: string;
+    method: string;
+    path: string;
+    body: string | Uint8Array;
+}, signature: string): boolean;
+
+type ReferralRef = {
+    clickId: string;
+    firstClickId: string | null;
+    tokenScope: 'session' | 'persistent';
+};
+type ReqLike = {
+    body?: unknown;
+    headers?: Record<string, unknown> | undefined;
+    get?: (name: string) => string | undefined;
+};
+declare function referralFromRequest(req: ReqLike): ReferralRef | null;
+/**
+ * Express middleware alternative: sets `req.inrRef` (`ReferralRef | null`), then removes `inrRef` from a plain-object
+ * body (valid or not), so `new Model(req.body)` and strict validators never see it (2.2 changelog).
+ */
+declare function referralMiddleware(): (req: ReqLike & {
+    inrRef?: ReferralRef | null;
+}, _res: unknown, next: () => void) => void;
+
+/**
+ * Mongo outbox for conversion reports — spec §6.5: collection `inrConversionOutbox` (TTL 14 d, matching the hub's
+ * `occurredAt` lower bound), one row per `(eventType, eventId)`, storing the UNSIGNED body (every attempt re-signs
+ * with a fresh timestamp and nonce). `nextAttemptAt` is the lease (addendum "Claim and lease"); `unauthorizedSince`
+ * carries the 24 h 401 rule. The site passes its own `mongoose` (7 or 8; the model API used is identical on both); the
+ * SDK has no runtime dependency on it. The schema declares no index and has `autoIndex: false`: `ensureOutboxIndexes`
+ * creates the three helper indexes itself (addendum "Outbox row v2 and indexes"). The bounded in-memory spill holds
+ * reports whose enqueue failed or timed out (addendum "`report()`").
+ */
+declare const OUTBOX_DEFAULT_COLLECTION = "inrConversionOutbox";
+declare const OUTBOX_TTL_SECONDS: number;
+/** The last failed attempt: HTTP status (0 for transport failures and missing config) and the hub's error code. */
+type OutboxError = {
+    status: number;
+    code: string | null;
+};
+type OutboxEntry = {
+    eventType: string;
+    eventId: string;
+    body: Record<string, unknown>;
+    attempts: number;
+    nextAttemptAt: Date;
+    lastStatus: number | null;
+    lastError: OutboxError | null;
+    /** Set by the first 401 (or missing config), cleared by any other outcome. */
+    unauthorizedSince: Date | null;
+    createdAt: Date;
+};
+type OutboxKey = Pick<OutboxEntry, 'eventType' | 'eventId'>;
+/** What a retried attempt writes back; `attempts` is the number of attempts this sender made. */
+type ReschedulePatch = {
+    nextAttemptAt: Date;
+    lastStatus: number;
+    lastError: OutboxError;
+    attempts: number;
+    /** The 401 / missing-config clock: kept at its earliest value; `null` clears it. */
+    unauthorizedAt: Date | null;
+};
+/** The subset of mongoose the outbox touches (so tests can pass a stub and the SDK stays dependency-free). */
+type MongooseLike = {
+    Schema: new (definition: Record<string, unknown>, options?: Record<string, unknown>) => unknown;
+    models: Record<string, unknown>;
+    model: (name: string, schema?: unknown, collection?: string) => unknown;
+};
+type Thenable<T> = Promise<T> | {
+    exec: () => Promise<T>;
+};
+type Filter = Record<string, unknown>;
+/** The model methods used (addendum "Mongoose 7 and 8"). */
+type OutboxModelLike = {
+    updateOne: (filter: Filter, update: Filter, options?: Filter) => Thenable<unknown>;
+    findOneAndUpdate?: (filter: Filter, update: Filter, options?: Filter) => Thenable<unknown>;
+    deleteOne?: (filter: Filter) => Thenable<unknown>;
+    deleteMany?: (filter: Filter) => Thenable<unknown>;
+    countDocuments: (filter?: Filter) => Thenable<number>;
+    collection?: {
+        createIndex: (keys: Filter, options?: Filter) => Promise<unknown>;
+    };
+};
+declare function outboxSchemaDefinition(): Record<string, unknown>;
+/** The three helper indexes (default names), created by `ensureOutboxIndexes`, never by `autoIndex`. */
+declare const OUTBOX_INDEXES: readonly [Filter, Filter][];
+/** Builds (or reuses) the outbox model on the given mongoose instance. */
+declare function outboxModel(mongoose: MongooseLike, collection?: string): OutboxModelLike;
+/**
+ * Creates the helper indexes (`collection.createIndex`, so `autoIndex: false` sites get them too): each one on its
+ * own, so a conflict on one leaves the others created. Called at construction and at every drain tick until all three
+ * succeed (a reporter built before `mongoose.connect()` times out its first try). Failures are one warn
+ * `INR_OUTBOX_INDEX_FAILED` per process and model; reporting goes on without them.
+ */
+declare function ensureOutboxIndexes(model: OutboxModelLike, warn: (message: string) => void): Promise<void>;
+type Outbox = {
+    /**
+     * Idempotent on `(eventType, eventId)`: inserts the entry's whole state once; a repeat leaves the existing row
+     * alone. Resolves `true` when this call inserted the row.
+     */
+    enqueue: (entry: OutboxEntry) => Promise<boolean>;
+    /** Success or a drop. */
+    remove: (key: OutboxKey) => Promise<void>;
+    /** A retried attempt. Never creates a row. */
+    reschedule: (key: OutboxKey, patch: ReschedulePatch) => Promise<void>;
+    /** An in-process chain renews its row's lease before each retry. */
+    renew: (key: OutboxKey, until: Date) => Promise<void>;
+    /** The drain claim: the most overdue due row, its lease moved to `until` and `attempts + 1`; null when none. */
+    claim: (now: Date, until: Date) => Promise<OutboxEntry | null>;
+    /** `forget()`: deletes every row whose body names the click id (as `clickId` or `firstClickId`). */
+    purge: (clickId: string) => Promise<void>;
+    pending: () => Promise<number>;
+};
+declare function createOutbox(model: OutboxModelLike): Outbox;
+/** In-memory outbox for sites without Mongo (tests, `enabled: false`): lost on restart, by design. */
+declare function createMemoryOutbox(): Outbox & {
+    entries: OutboxEntry[];
+};
+/** Reports whose enqueue failed or timed out, oldest first, at most `max`. */
+type Spill = {
+    /** Adds the entry unless its key is already spilled; returns the oldest entry it evicted, if any. */
+    add: (entry: OutboxEntry) => OutboxEntry | null;
+    has: (key: OutboxKey) => boolean;
+    get: (key: OutboxKey) => OutboxEntry | undefined;
+    delete: (key: OutboxKey) => void;
+    entries: () => OutboxEntry[];
+    readonly size: number;
+};
+
+type Logger = {
+    warn: (message: string, meta?: Record<string, unknown>) => void;
+    info?: (message: string, meta?: Record<string, unknown>) => void;
+};
+type Classification = 'success' | 'terminal' | 'retryable' | 'skew' | 'unauthorized';
+/**
+ * The §6.5 matrix (status first, then code; a missing body is classified by status). Status 0 is a transport failure
+ * (network error, timeout).
+ */
+declare function classifyResponse(status: number, code: string | null): Classification;
+
+/**
+ * The conversion wire contract as the SDK mirrors it — Phase 3 addendum "ConversionBodySchema home and SDK mirror",
+ * "EventId", "Link tables", "Per-type body rules", "`fee_charged`", "Site secret format", "`keyId`". packages/shared
+ * is the source; the server entry never imports it (zero runtime deps), and test/conversions-contract.test.ts fails
+ * when either side changes alone.
+ */
+/** §5.5 canonical conversion types plus `fee_charged` (R2(c)): 12 entries, in the hub's order. */
+declare const CONVERSION_TYPES: readonly ["booking_created", "booking_paid", "contact_submitted", "quote_requested", "call_clicked", "signup", "purchase", "booking_cancelled", "booking_refunded", "booking_no_show", "chargeback", "fee_charged"];
+type ConversionType = (typeof CONVERSION_TYPES)[number];
+/** Every type that carries `reverses`; a fee names the no-show or cancel it belongs to (it is not a reversal). */
+declare const LINK_TARGETS: {
+    readonly fee_charged: readonly ["booking_no_show", "booking_cancelled"];
+    readonly booking_cancelled: readonly ["booking_created"];
+    readonly booking_no_show: readonly ["booking_created"];
+    readonly booking_refunded: readonly ["booking_paid"];
+    readonly chargeback: readonly ["booking_paid", "purchase"];
+};
+declare const REVERSAL_TYPES: readonly ("booking_cancelled" | "booking_refunded" | "booking_no_show" | "chargeback")[];
+
+/**
+ * The outbox drainer — Phase 3 addendum "Drainer", "Claim and lease", "Drop logging". Each tick moves the spill into
+ * the outbox, then claims (lease now + 150 s, `attempts + 1`) and sends up to 50 due rows, one at a time; a 429 or 503
+ * ends the tick. Every attempt goes through `Delivery.attempt`, so it re-reads the config (a rotated `INR_KEY_ID` /
+ * `INR_SITE_SECRET` in `process.env` applies at the next row) and re-signs with a fresh timestamp and nonce. Ticks
+ * never overlap: the first at 10 s + U(0, 10 s), then 60 s ± 10 s after the previous one ends, unref'd.
+ */
+
+type DrainResult = {
+    sent: number;
+    retried: number;
+    dropped: number;
+};
+
+type RelayRequest = {
+    body?: unknown;
+    ip?: string | undefined;
+    headers?: Record<string, unknown> | undefined;
+    app?: {
+        get: (name: string) => unknown;
+    } | undefined;
+    readable?: boolean;
+    on?: (event: string, listener: (chunk?: unknown) => void) => unknown;
+};
+type RelayResponse = {
+    status: (code: number) => {
+        end: () => void;
+    };
+};
+type RelayOptions = {
+    /** The visitor's address when `req.ip` is not it (another proxy setup); Express `trust proxy` is still required. */
+    visitorIp?: ((req: RelayRequest) => string | null | undefined) | undefined;
+};
+
+/** `report()` resolves after at most this, whatever the outbox does. */
+declare const ENQUEUE_TIMEOUT_MS = 2000;
+type ConversionEvent = {
+    eventType: ConversionType;
+    eventId: string;
+    clickId: string;
+    firstClickId?: string | null | undefined;
+    tokenScope: 'session' | 'persistent';
+    occurredAt: Date | string;
+    valueCents?: number | null | undefined;
+    feeCents?: number | null | undefined;
+    currency?: string | null | undefined;
+    reverses?: {
+        eventType: ConversionType;
+        eventId: string;
+    } | null | undefined;
+};
+/** §5.4 v1 body (unknown keys → 400 on the hub, so nothing else is ever added here). */
+type ConversionBody = {
+    v: 1;
+    eventType: ConversionType;
+    eventId: string;
+    clickId: string;
+    firstClickId: string | null;
+    tokenScope: 'session' | 'persistent';
+    occurredAt: string;
+    valueCents: number | null;
+    feeCents: number | null;
+    currency: string | null;
+    reverses: {
+        eventType: ConversionType;
+        eventId: string;
+    } | null;
+    sdk: string;
+};
+type ReporterOptions = {
+    hubUrl?: string | undefined;
+    siteKey?: string | undefined;
+    /** `INR_KEY_ID` / `INR_SITE_SECRET` in `process.env` win at every attempt, so a redeploy after rotation applies. */
+    keyId?: string | undefined;
+    secret?: string | undefined;
+    /** `INR_ENABLED !== 'false'`; when false `report()` validates and drops. */
+    enabled?: boolean | undefined;
+    /** Per attempt; default `INR_TIMEOUT_MS` or 3000, clamped to [500, 30 000]. */
+    timeoutMs?: number | undefined;
+    /** `collection` defaults to `INR_OUTBOX_COLLECTION`, else `inrConversionOutbox` (the name `doctor` checks). */
+    outbox?: {
+        mongoose?: MongooseLike;
+        collection?: string;
+    } | undefined;
+    logger?: Logger | undefined;
+};
+type ReportResult = 
+/** Durable in the outbox. */
+{
+    status: 'queued';
+    body: ConversionBody;
+}
+/** The outbox write failed or timed out: held in memory (≤ 1000) until the next drain; attempts still run. */
+ | {
+    status: 'spilled';
+    body: ConversionBody;
+} | {
+    status: 'disabled';
+    body: ConversionBody;
+} | {
+    status: 'invalid';
+    error: string;
+};
+type ConversionReporter = {
+    /** Validates, builds the body, queues it and starts the in-process attempts. Never throws, never rejects. */
+    report: (event: ConversionEvent) => Promise<ReportResult>;
+    /**
+     * §5.9 erasure: purges queued reports naming the id, then the signed `DELETE /v1/referrals/:clickId` (up to 4
+     * attempts). True once the hub answered 2xx; keep the local referral until then. Ignores `enabled`.
+     */
+    forget: (clickId: string) => Promise<boolean>;
+    /** §5.3 first-party landing relay: an Express handler that always answers 204 (relay.ts). */
+    landingRelay: (opts?: RelayOptions) => (req: RelayRequest, res: RelayResponse) => Promise<void>;
+    /** The unsigned body an event produces (exposed for tests and for ports). */
+    bodyFor: (event: ConversionEvent) => ConversionBody | {
+        error: string;
+    };
+    /** One drain tick now (joins a running one). */
+    drainNow: () => Promise<DrainResult>;
+    /** Stops the drainer and waits ≤ 5 s for a running tick and the send chains (graceful shutdown). */
+    close: () => Promise<void>;
+    outbox: Outbox;
+    spill: Spill;
+    /** Resolves once every in-process attempt chain started so far has settled (tests, graceful shutdown). */
+    idle: () => Promise<void>;
+};
+/**
+ * The C.4 body, or the first rule it breaks (mirrors `ConversionBodySchema`): eventId per EVENT_ID_RE, clickId and
+ * tokenScope non-null, the per-type amount rules, currency required with any amount, `reverses` required on the
+ * linked types with `eventType ∈ LINK_TARGETS[type]` and null otherwise. Currency is upper-cased; a valid `Date` or an
+ * ISO datetime string with `Z` or an offset is sent as ISO UTC with milliseconds.
+ */
+declare function buildConversionBody(event: ConversionEvent): ConversionBody | {
+    error: string;
+};
+/**
+ * §6.5 `verifyEnv()`: returns the missing or invalid names (`INR_KEY_ID (invalid)`); never prints a value. Throws
+ * when `NODE_ENV !== 'production'` or `INR_STRICT_ENV === 'true'` (JCM staging runs NODE_ENV=production), warns
+ * otherwise so a misconfigured reporter never takes a production backend down. `opts.production` overrides NODE_ENV.
+ */
+declare function verifyEnv(env?: Record<string, string | undefined>, opts?: {
+    production?: boolean;
+    logger?: Logger;
+}): string[];
+declare function createConversionReporter(opts?: ReporterOptions): ConversionReporter;
+
+export { CONVERSION_TYPES, type Classification, type ConversionBody, type ConversionEvent, type ConversionReporter, type ConversionType, type DrainResult, ENQUEUE_TIMEOUT_MS, LINK_TARGETS, type Logger, type MongooseLike, OUTBOX_DEFAULT_COLLECTION, OUTBOX_INDEXES, OUTBOX_TTL_SECONDS, type Outbox, type OutboxEntry, type OutboxError, REVERSAL_TYPES, type ReferralRef, type RelayOptions, type ReportResult, type ReporterOptions, type SignInput, type SignedHeaders, type Spill, buildConversionBody, classifyResponse, createConversionReporter, createMemoryOutbox, createOutbox, ensureOutboxIndexes, hmacBase, outboxModel, outboxSchemaDefinition, referralFromRequest, referralMiddleware, sha256Hex, signRequest, verifyEnv, verifySignature };

package/dist/server/index.js

@@ -0,0 +1,2 @@
+import {createHash,randomUUID,createHmac,timingSafeEqual}from'crypto';import {isIP}from'net';function ye(e){return createHash("sha256").update(e).digest("hex")}function $(e,t,n,r,o,s,u){return `${e}.${t}.${n}.${r}.${o.toUpperCase()}.${s}.${ye(u)}`}function z(e){if(!e.secret)throw new Error("signRequest: secret is required");let t=e.timestamp??Math.floor(Date.now()/1e3),n=e.nonce??randomUUID(),o=`v1=${createHmac("sha256",e.secret).update($(t,n,e.siteKey,e.keyId,e.method,e.path,e.body),"utf8").digest("hex")}`;return {headers:{"Content-Type":"application/json","X-INR-Site":e.siteKey,"X-INR-Key-Id":e.keyId,"X-INR-Timestamp":String(t),"X-INR-Nonce":n,"X-INR-Signature":o},timestamp:t,nonce:n,signature:o}}function ze(e,t,n){if(!/^v1=[0-9a-f]{64}$/.test(n))return  false;let{timestamp:r,nonce:o,siteKey:s,keyId:u,method:d,path:a,body:y}=t,g=createHmac("sha256",e).update($(r,o,s,u,d,a,y),"utf8").digest("hex");return timingSafeEqual(Buffer.from(g,"hex"),Buffer.from(n.slice(3),"hex"))}var k="2.2.0-beta.1";var w=/^[A-Za-z0-9_-]{32}$/;var U=e=>typeof e=="string"&&w.test(e)?e:null,me=e=>e==="session"||e==="persistent"?e:null;function Y(e,t){if(typeof e.get=="function")return e.get(t);let n=e.headers;if(!n)return;let r=n[t]??n[t.toLowerCase()];return Array.isArray(r)?r[0]:r}function ge(e){try{let t=e.body,n=t&&typeof t=="object"?t.inrRef:void 0;if(n&&typeof n=="object"){let s=n,u=U(s.clickId),d=me(s.tokenScope);if(u&&d){let a=s.firstClickId;return {clickId:u,firstClickId:a==null?null:U(a),tokenScope:d}}}let r=U(Y(e,"X-INR-Ref")),o=me(Y(e,"X-INR-Ref-Scope"));if(r&&o){let s=Y(e,"X-INR-Ref-First");return {clickId:r,firstClickId:s==null?null:U(s),tokenScope:o}}return null}catch{return null}}function Ye(){return (e,t,n)=>{e.inrRef=ge(e);let r=e.body;if(r&&typeof r=="object"){let o=Object.getPrototypeOf(r);(o===Object.prototype||o===null)&&Object.hasOwn(r,"inrRef")&&delete r.inrRef;}n();}}var K="inrConversionOutbox",qe=1209600;function Ee(){return {eventType:{type:String,required:true},eventId:{type:String,required:true},body:{type:Object,required:true},attempts:{type:Number,default:0},nextAttemptAt:{type:Date,default:Date.now},lastStatus:{type:Number,default:null},lastError:{type:Object,default:null},unauthorizedSince:{type:Date},createdAt:{type:Date,default:Date.now}}}var xe=[[{createdAt:1},{expireAfterSeconds:1209600}],[{nextAttemptAt:1},{}],[{eventType:1,eventId:1},{unique:true}]];function j(e,t=K){let n=`InrOutbox_${t}`,r=e.models[n];if(r)return r;let o=new e.Schema(Ee(),{versionKey:false,autoIndex:false});return e.model(n,o,t)}var _e=new WeakSet,be=new WeakSet,q=new WeakMap;function H(e,t){if(_e.has(e))return Promise.resolve();let n=q.get(e);return n||(n=(async()=>{let r=false;for(let[o,s]of xe)await Promise.resolve().then(()=>e.collection.createIndex(o,s)).catch(()=>r=true);r?be.has(e)||(be.add(e),t("INR_OUTBOX_INDEX_FAILED")):_e.add(e);})().finally(()=>q.delete(e)),q.set(e,n)),n}var M=e=>"exec"in e&&typeof e.exec=="function"?e.exec():e,V=e=>({eventType:e.eventType,eventId:e.eventId});function Ve(e){let t=e.lastError;return {...e,lastError:typeof t=="string"?{status:0,code:t}:t??null,unauthorizedSince:e.unauthorizedSince??null}}function G(e){return {async enqueue(t){let{eventType:n,eventId:r,unauthorizedSince:o,...s}=t,u=o?{...s,unauthorizedSince:o}:s,d=await M(e.updateOne({eventType:n,eventId:r},{$setOnInsert:u},{upsert:true}));return !(Number(d?.matchedCount)>0)},async remove(t){await M(e.deleteOne(V(t)));},async reschedule(t,n){let r={$set:{nextAttemptAt:n.nextAttemptAt,lastStatus:n.lastStatus,lastError:n.lastError},...n.attempts>0?{$inc:{attempts:n.attempts}}:{},...n.unauthorizedAt?{$min:{unauthorizedSince:n.unauthorizedAt}}:{$unset:{unauthorizedSince:1}}};await M(e.updateOne(V(t),r));},async renew(t,n){await M(e.updateOne(V(t),{$set:{nextAttemptAt:n}}));},async claim(t,n){let r=await M(e.findOneAndUpdate({nextAttemptAt:{$lte:t}},{$set:{nextAttemptAt:n},$inc:{attempts:1}},{sort:{nextAttemptAt:1},new:true,lean:true}));return r?Ve(r):null},async purge(t){await M(e.deleteMany({$or:[{"body.clickId":t},{"body.firstClickId":t}]}));},pending:()=>M(e.countDocuments({}))}}var W=(e,t)=>e.body.clickId===t||e.body.firstClickId===t,Re=(e,t)=>e.eventType===t.eventType&&e.eventId===t.eventId;function Z(e,t){e.nextAttemptAt=t.nextAttemptAt,e.lastStatus=t.lastStatus,e.lastError=t.lastError,e.attempts+=t.attempts,e.unauthorizedSince=t.unauthorizedAt?new Date(Math.min(e.unauthorizedSince?.getTime()??1/0,t.unauthorizedAt.getTime())):null;}function J(){let e=[],t=n=>e.find(r=>Re(r,n));return {entries:e,async enqueue(n){return t(n)?false:(e.push({...n}),true)},async remove(n){let r=e.findIndex(o=>Re(o,n));r>=0&&e.splice(r,1);},async reschedule(n,r){let o=t(n);o&&Z(o,r);},async renew(n,r){let o=t(n);o&&(o.nextAttemptAt=r);},async claim(n,r){let o;for(let s of e)s.nextAttemptAt<=n&&(!o||s.nextAttemptAt<o.nextAttemptAt)&&(o=s);return o?(o.nextAttemptAt=r,o.attempts+=1,{...o}):null},async purge(n){for(let r=e.length-1;r>=0;r--)W(e[r],n)&&e.splice(r,1);},pending:async()=>e.length}}function Se(e=1e3){let t=new Map,n=r=>`${r.eventType}\0${r.eventId}`;return {add(r){if(t.has(n(r))||(t.set(n(r),r),t.size<=e))return null;let[o,s]=t.entries().next().value;return t.delete(o),s},has:r=>t.has(n(r)),get:r=>t.get(n(r)),delete:r=>{t.delete(n(r));},entries:()=>[...t.values()],get size(){return t.size}}}async function Ie(e,t){let n=0;for(let r of e.entries())await t.enqueue(r),e.delete(r),n++;return n}var Oe=["booking_created","booking_paid","contact_submitted","quote_requested","call_clicked","signup","purchase","booking_cancelled","booking_refunded","booking_no_show","chargeback","fee_charged"],Te={booking_cancelled:["booking_created"],booking_no_show:["booking_created"],booking_refunded:["booking_paid"],chargeback:["booking_paid","purchase"]},B={...Te,fee_charged:["booking_no_show","booking_cancelled"]},je=Object.freeze(Object.keys(Te)),Q={booking_created:{value:"optional",fee:"null"},booking_paid:{value:"required",fee:"null"},contact_submitted:{value:"null",fee:"null"},quote_requested:{value:"optional",fee:"null"},call_clicked:{value:"null",fee:"null"},signup:{value:"optional",fee:"null"},purchase:{value:"optional",fee:"null"},booking_cancelled:{value:"null",fee:"optional"},booking_refunded:{value:"positive",fee:"null"},booking_no_show:{value:"null",fee:"optional"},chargeback:{value:"positive",fee:"null"},fee_charged:{value:"null",fee:"positive"}},He=1e9,ee=/^(?=.{1,64}$)(?!erased:)[a-z][a-z0-9_]{0,31}:[A-Za-z0-9_-]{1,62}$/,ve=/^[A-Z]{3}$/,te=/^inrs1_[A-Za-z0-9_-]{43}$/,ne=/^[0-9a-f]{8}$/,re=/^(?=.{1,48}$)[a-z0-9]+(-[a-z0-9]+)*$/;var N={conversion:"/v1/conversions",landing:"/v1/landings",forget:"/v1/referrals/"},he=e=>Object.hasOwn(B,e);function oe(e,t){return t===null?e==="null"||e==="optional":Number.isInteger(t)&&t>=(e==="positive"?1:0)&&t<=He?e!=="null":false}var E=1e3,F=[2*E,8*E,30*E],ie=30*E,ue=3600*E,Ae=60*E,Ge=600*E,We=24*3600*E,P=150*E,Ze=3e3,Je=500,Qe=3e4,et=8192,tt=2e3,nt=24*3600*E;function ae(e){if(!e)return null;let t=e.endsWith("/")?e.slice(0,-1):e;if(!/^[a-z][a-z0-9+.-]*:\/\/[^/?#]+$/i.test(t))return null;let n;try{n=new URL(t);}catch{return null}return n.pathname!=="/"||n.username||n.password?null:n.protocol==="https:"||n.protocol==="http:"&&["localhost","127.0.0.1","[::1]"].includes(n.hostname)?n.origin:null}function ke(e,t){let n=t?.trim(),r=e??(n?Number(n):void 0),o=r===void 0||!Number.isFinite(r)?Ze:r;return Math.min(Qe,Math.max(Je,o))}function Me(e,t){return e>=200&&e<300?"success":e===409?t==="NONCE_REUSED"?"success":"terminal":e===400?t==="TIMESTAMP_SKEW"?"skew":"terminal":e===401?"unauthorized":e===0||e===408||e===425||e===429||e>=500&&e<600?"retryable":"terminal"}function rt(e,t){if(!e)return null;let n=e.trim();if(/^\d+$/.test(n))return Number(n)*E;let r=Date.parse(n);return Number.isNaN(r)?null:Math.max(0,r-t)}var se=0;function ot(e,t,n){let r=e?Date.parse(e):NaN;if(Number.isNaN(r))return null;let o=Math.round(r+500-(t+n)/2);return Math.abs(o)<=nt?o:null}async function st(e,t){let n=e.body?.getReader();if(!n)return "";let r=new TextDecoder,o="";for(let s=0;s<t;){let{done:u,value:d}=await n.read();if(u)break;o+=r.decode(d.subarray(0,t-s),{stream:true}),s+=d.byteLength;}return n.cancel().catch(()=>{}),o}function it(e){try{let t=JSON.parse(e),n=t?.error?.code??t?.code??null;return typeof n=="string"?n:null}catch{return null}}async function we(e,t,n){let r=Math.floor((Date.now()+se)/1e3),{headers:o}=z({...e,...t,timestamp:r}),s=new AbortController,u=setTimeout(()=>s.abort(),n);u.unref?.();let d=Date.now();try{let a=await fetch(e.hubUrl+t.path,{method:t.method,headers:{...o,"User-Agent":`intenque-network-sdk/${k}`},body:t.body,redirect:"error",signal:s.signal}),y=Date.now(),g=await st(a,et).catch(()=>"");return {status:a.status,code:it(g),retryAfterMs:rt(a.headers.get("retry-after"),y),date:a.headers.get("date"),tSend:d,tRecv:y}}catch{let a=Date.now();return {status:0,code:s.signal.aborted?"TIMEOUT":"NETWORK",retryAfterMs:null,date:null,tSend:d,tRecv:a}}finally{clearTimeout(u);}}function le(e){let t=Math.min(60*E*2**Math.max(0,e-4),1800*E);return Math.round(t*(.8+Math.random()*.4))}var L=e=>new Promise(t=>{setTimeout(t,e).unref?.();});function Ne(e){let{outbox:t,spill:n,logger:r}=e,o=new Set,s=i=>{o.has(i)||(o.add(i),r.warn(i));},u=i=>{let l=Me(i.status,i.code);return l==="skew"?{kind:l,status:400,code:"TIMESTAMP_SKEW",offsetMs:ot(i.date,i.tSend,i.tRecv)}:{kind:l,status:i.status,code:i.code,retryAfterMs:i.retryAfterMs}};async function d(i){let l=e.config();if(!l)return {kind:"unauthorized",status:0,code:"INR_ENV_MISSING",retryAfterMs:null};if(typeof globalThis.fetch!="function")return s("INR_NO_FETCH"),{kind:"nofetch"};let f=u(await we(l,i,e.timeoutMs));return f.kind==="skew"&&f.offsetMs!==null&&(se=f.offsetMs,f=u(await we(l,i,e.timeoutMs)),f.kind==="skew"&&f.offsetMs!==null&&(se=f.offsetMs)),f}let a=i=>d({method:"POST",path:N.conversion,body:JSON.stringify(i.body)}),y=i=>{let l;return Promise.race([Promise.resolve().then(i),new Promise(f=>{l=setTimeout(f,tt);})]).then(()=>clearTimeout(l),()=>clearTimeout(l))},g=async i=>{n.delete(i),await y(()=>t.remove(i));},I=async(i,l,f)=>(await g(i),r.warn("inr_outbox_dropped_total",{eventType:i.eventType,eventId:i.eventId,status:l.status,code:l.code,reason:f}),"dropped"),T=async(i,l)=>{let f=n.get(i);f&&Z(f,l),await y(()=>t.reschedule(i,l));};async function b(i,l,f,x=Ae){if(l.kind==="nofetch")return null;let S=Date.now(),O={status:l.status,code:l.code},A=async c=>(await T(i,c),"retried");switch(l.kind){case "success":return await g(i),"sent";case "terminal":return I(i,O,"terminal");case "unauthorized":{let c=i.unauthorizedSince?.getTime();return c!==void 0&&S-c>=We?(r.warn("INR_UNAUTHORIZED",{eventType:i.eventType,eventId:i.eventId,...O}),I(i,O,"unauthorized_24h")):A({nextAttemptAt:new Date(S+Ge),lastStatus:l.status,lastError:O,attempts:f,unauthorizedAt:new Date(S)})}case "skew":return r.warn("INR_CLOCK_SKEW",{offsetMs:l.offsetMs}),A({nextAttemptAt:new Date(S+le(i.attempts+f)),lastStatus:400,lastError:O,attempts:f,unauthorizedAt:null});case "retryable":return A({nextAttemptAt:new Date(S+x),lastStatus:l.status,lastError:O,attempts:f,unauthorizedAt:null})}}async function v(i){let l=F;for(let f=0;;f++){let x=await a(i);if(x.kind!=="retryable")return b(i,x,f+1);let S=x.retryAfterMs===null?null:Math.min(x.retryAfterMs,ue);if(f===l.length)return b(i,x,f+1,Math.max(Ae,S??0));let O=Math.max(l[f],S??0);if(O>ie)return b(i,x,f+1,S);await L(O);let A=new Date(Date.now()+P),c=n.get(i);c&&(c.nextAttemptAt=A),await y(()=>t.renew(i,A));}}return {request:d,attempt:a,settle:b,drop:I,chain:v}}var D=1e3,ut=10*D,at=60*D,De=10*D,lt=50,ct=14*86400*D-3600*D,dt=5*D;function Ce(e){let{delivery:t,outbox:n,spill:r}=e,o,s=null,u=false;async function d(){let g={sent:0,retried:0,dropped:0};try{e.onTick?.(),await Ie(r,n);for(let I=0;I<lt;I++){let T=Date.now(),b=await n.claim(new Date(T),new Date(T+P));if(!b)break;if(T-new Date(b.createdAt).getTime()>=ct){await t.drop(b,b.lastError??{status:0,code:null},"expired"),g.dropped++;continue}let v=await t.attempt(b),i="retryAfterMs"in v?v.retryAfterMs??0:0,l=await t.settle(b,v,0,Math.max(le(b.attempts),Math.min(i,ue)));if(l&&g[l]++,!l||"status"in v&&(v.status===429||v.status===503))break}}catch{e.unavailable();}return g}function a(){return s??=d().finally(()=>{s=null;}),s}function y(g){u||(o=setTimeout(()=>{a().then(()=>y(at+(Math.random()*2-1)*De));},g),o.unref?.());}return {start:()=>y(ut+Math.random()*De),drainNow:a,async close(g){u=true,clearTimeout(o),await Promise.race([Promise.allSettled([s,g()]),L(dt)]);}}}var ft=6e4,X=1024,yt=10,mt=300,gt=30*864e5,_t=512,bt=/^https?:\/\/[^/\s]{1,253}$/;function Rt(e){let t=e.body;if(typeof t=="string"||t instanceof Uint8Array){let n=Buffer.from(t);return Promise.resolve(n.length>X?null:n.toString("utf8"))}return !e.readable||typeof e.on!="function"?Promise.resolve(null):new Promise(n=>{let r=[],o=0;e.on("data",s=>{o+=s.length,o<=X&&r.push(s);}),e.on("end",()=>n(o>X?null:Buffer.concat(r).toString("utf8"))),e.on("error",()=>n(null));})}async function Et(e){let t=e.body;if(t&&typeof t=="object"&&!(t instanceof Uint8Array)&&Object.keys(t).length>0)return JSON.stringify(t).length>X?null:t;let n=await Rt(e);try{let r=n===null?null:JSON.parse(n);return r&&typeof r=="object"?r:null}catch{return null}}var Pe=(e,t)=>{let n=e.headers?.[t];return typeof n=="string"?n:null};function xt(e,t,n){let{c:r,scope:o,ph:s,d:u}=e;if(typeof r!="string"||!w.test(r)||o!=="session"&&o!=="persistent"||s!==void 0&&!(typeof s=="string"&&/^[0-9a-f]{16}$/.test(s))||u!==void 0&&!(Number.isInteger(u)&&u>=0&&u<=gt))return null;let d=Pe(n,"origin");return {v:1,clickId:r,scope:o,pathHash:s,d:u,visitorIp:t,visitorUa:(Pe(n,"user-agent")??"").slice(0,_t),visitorOrigin:d!==null&&bt.test(d)?d:null,sdk:`server/${k}`}}var Le=-1,ce=0,de=new Map;function St(e){let t=Math.floor(Date.now()/ft);t!==Le&&(Le=t,ce=0,de.clear());let n=de.get(e)??0;return ce>=mt||n>=yt?false:(de.set(e,n+1),ce++,true)}function Ue(e){let t=false;return (n={})=>async(r,o)=>{let s=null;try{let u=await Et(r),d=!!r.app?.get("trust proxy");!d&&!t&&(t=!0,e.warn("INR_RELAY_TRUST_PROXY"));let a=d?n.visitorIp?.(r)??r.ip:void 0;e.enabled&&u&&typeof a=="string"&&isIP(a)&&(s=xt(u,a,r),s&&!St(a)&&(s=null));}catch{s=null;}try{o.status(204).end();}catch{}s&&e.forward({method:"POST",path:N.landing,body:JSON.stringify(s)});}}var It=/^\d{4}-\d\d-\d\dT\d\d:\d\d(:\d\d(\.\d+)?)?(Z|[+-]\d\d:\d\d)$/,Be=2e3,Ot=6e4;function pe(e){if(!e||typeof e!="object")return {error:"event"};let t=e.eventType;if(typeof t!="string"||!Object.hasOwn(Q,t))return {error:"eventType"};if(typeof e.eventId!="string"||!ee.test(e.eventId))return {error:"eventId"};if(typeof e.clickId!="string"||!w.test(e.clickId))return {error:"clickId"};let n=e.firstClickId??null;if(n!==null&&!(typeof n=="string"&&w.test(n)))return {error:"firstClickId"};if(e.tokenScope!=="session"&&e.tokenScope!=="persistent")return {error:"tokenScope"};let r=e.occurredAt instanceof Date?e.occurredAt:typeof e.occurredAt=="string"&&It.test(e.occurredAt)?new Date(e.occurredAt):new Date(NaN),o=Number.isNaN(r.getTime())?"":r.toISOString();if(!/^\d{4}-/.test(o))return {error:"occurredAt"};let s=e.valueCents??null,u=e.feeCents??null,d=Q[t];if(!oe(d.value,s))return {error:"valueCents"};if(!oe(d.fee,u))return {error:"feeCents"};let a=null;if(e.currency!=null&&(a=typeof e.currency=="string"?e.currency.toUpperCase():"",!ve.test(a)))return {error:"currency"};if(a===null&&(s!==null||u!==null))return {error:"currency"};let y=e.reverses??null;if(he(t)){let g=B[t];if(y===null||typeof y!="object"||!g.includes(y.eventType)||typeof y.eventId!="string"||!ee.test(y.eventId))return {error:"reverses"}}else if(y!==null)return {error:"reverses"};return {v:1,eventType:t,eventId:e.eventId,clickId:e.clickId,firstClickId:n===e.clickId?null:n,tokenScope:e.tokenScope,occurredAt:o,valueCents:s,feeCents:u,currency:a,reverses:y?{eventType:y.eventType,eventId:y.eventId}:null,sdk:`server/${k}`}}var Tt=["INR_HUB_URL","INR_SITE_KEY","INR_KEY_ID","INR_SITE_SECRET"],Ke={INR_HUB_URL:e=>ae(e)!==null,INR_SITE_KEY:e=>re.test(e),INR_KEY_ID:e=>ne.test(e),INR_SITE_SECRET:e=>te.test(e)};function vt(e=process.env,t={}){let n=Tt.flatMap(s=>{let u=e[s];return u?Ke[s]&&!Ke[s](u)?[`${s} (invalid)`]:[]:[s]});if(n.length===0)return [];let r=t.production??e.NODE_ENV==="production",o=`@intenque/network-sdk/server: missing or invalid env ${n.join(", ")}`;if(!r||e.INR_STRICT_ENV==="true")throw new Error(o);return (t.logger??console).warn(o),n}function ht(e={}){let t=e.logger??{warn:(c,p)=>console.warn(c,p??"")},n={warn:(c,p)=>{try{t.warn(c,p);}catch{}}},r=e.enabled!==false,o=()=>typeof process>"u"?{}:process.env,s=e.outbox?.mongoose?j(e.outbox.mongoose,e.outbox.collection??(o().INR_OUTBOX_COLLECTION||K)):null,u=()=>{s&&r&&H(s,n.warn);};u();let d=s?G(s):J(),a=Se(),y=false,I=Ne({config:()=>{let c=o(),p=e.hubUrl??c.INR_HUB_URL,R=ae(p);p&&!R&&!y&&(y=true,n.warn("INR_HUB_URL_INVALID"));let m=e.siteKey??c.INR_SITE_KEY??"",_=c.INR_KEY_ID||e.keyId||"",h=c.INR_SITE_SECRET||e.secret||"";return !R||!re.test(m)||!ne.test(_)||!te.test(h)?null:{hubUrl:R,siteKey:m,keyId:_,secret:h}},timeoutMs:ke(e.timeoutMs,o().INR_TIMEOUT_MS),outbox:d,spill:a,logger:n}),T=new Set,b=c=>{let p=c.catch(R=>{n.warn("inr.report attempt failed",{error:R instanceof Error?R.message:String(R)});}).finally(()=>T.delete(p));T.add(p);},v=c=>b(I.chain(c)),i=async()=>{for(;T.size>0;)await Promise.allSettled([...T]);},l=-1/0,f=()=>{Date.now()-l<Ot||(l=Date.now(),n.warn("INR_OUTBOX_UNAVAILABLE"));},x=Ce({delivery:I,outbox:d,spill:a,unavailable:f,onTick:u});r&&x.start();let S=async c=>{let p,R=new Promise(m=>{p=setTimeout(()=>m(void 0),Be);});try{return await Promise.race([Promise.resolve().then(c).catch(()=>{}),R])}finally{clearTimeout(p);}};async function O(c){if(typeof c!="string"||!w.test(c))return  false;let p=(_,h)=>(n.warn("INR_FORGET_FAILED",{status:_,code:h}),false);for(let _ of a.entries())W(_,c)&&a.delete(_);if(!await S(()=>d.purge(c).then(()=>true)))return p(0,"INR_OUTBOX_UNAVAILABLE");let R={method:"DELETE",path:N.forget+c,body:""},m;for(let _=0;;_++){if(m=await I.request(R),"status"in m&&m.status>=200&&m.status<300)return  true;if(m.kind!=="retryable"||_===F.length)break;let h=m.retryAfterMs??0;if(h>ie)break;await L(Math.max(F[_],h));}return m.kind==="nofetch"?p(0,"INR_NO_FETCH"):p(m.status,m.code)}let A=async c=>{let p=await S(()=>d.enqueue(c));return p===void 0?"failed":p?"inserted":"exists"};return {outbox:d,spill:a,bodyFor:pe,async report(c){try{let p=pe(c);if("error"in p)return n.warn("inr.report dropped: invalid event",{error:p.error}),{status:"invalid",error:p.error};if(!r)return {status:"disabled",body:p};let R=Date.now(),m={eventType:p.eventType,eventId:p.eventId,body:p,attempts:0,nextAttemptAt:new Date(R+P),lastStatus:null,lastError:null,unauthorizedSince:null,createdAt:new Date(R)},_=await A(m),h=_==="failed"?"spilled":"queued";if(_==="failed"&&f(),_==="exists"||a.has(m))return {status:h,body:p};if(_==="failed"){let C=a.add(m);C&&n.warn("inr_outbox_dropped_total",{eventType:C.eventType,eventId:C.eventId,status:C.lastError?.status??null,code:C.lastError?.code??null,reason:"memory_full"});}return v(m),{status:h,body:p}}catch(p){return n.warn("inr.report failed",{error:p instanceof Error?p.message:String(p)}),{status:"invalid",error:"internal"}}},idle:i,forget:O,drainNow:x.drainNow,close:()=>x.close(i),landingRelay:Ue({enabled:r,forward:c=>b(I.request(c)),warn:n.warn})}}export{Oe as CONVERSION_TYPES,Be as ENQUEUE_TIMEOUT_MS,B as LINK_TARGETS,K as OUTBOX_DEFAULT_COLLECTION,xe as OUTBOX_INDEXES,qe as OUTBOX_TTL_SECONDS,je as REVERSAL_TYPES,k as SDK_VERSION,pe as buildConversionBody,Me as classifyResponse,ht as createConversionReporter,J as createMemoryOutbox,G as createOutbox,H as ensureOutboxIndexes,$ as hmacBase,j as outboxModel,Ee as outboxSchemaDefinition,ge as referralFromRequest,Ye as referralMiddleware,ye as sha256Hex,z as signRequest,vt as verifyEnv,ze as verifySignature};//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map