@msg91comm/m91 0.0.0-stage → 1.2.0

package/dist/src/client.d.ts

@@ -0,0 +1,165 @@
+/**
+ * The send-link client: raise an alert, read what was decided, close it.
+ *
+ * A send link is a credential in a URL. It goes in a Grafana webhook field, a
+ * cron, a CI job or an agent's environment, and it needs no header, no account
+ * and no library — which is why this client is a convenience over one URL
+ * rather than the only way in.
+ *
+ * Two things it does that a bare `fetch` does not, and both are why it exists:
+ *
+ * - **It checks that somebody was actually reached.** A 201 means the alert was
+ *   filed, not that a phone rang.
+ * - **It reads the decision, not the responses.** Only a SHARED response decides.
+ */
+import { type TransportOptions } from './http.js';
+import { type AlertDetail, type AlertResponse, type ChannelInfo, type Decision, type ResponseOption, type Severity } from './models.js';
+/**
+ * Below this, polling is a busy loop against a rate-limited endpoint and buys
+ * nothing: a human waking up and reaching for a phone is not a sub-second event.
+ */
+export declare const MIN_POLL_INTERVAL_MS = 2000;
+export interface SendOptions {
+    description?: string;
+    /**
+     * LOW and MEDIUM deliver at alarm volume through Do Not Disturb. **HIGH and
+     * CRITICAL also place a voice call** if nobody answers in 45 seconds, so they
+     * are never the default — "I didn't specify" must not mean "ring everyone".
+     */
+    severity?: Severity;
+    /**
+     * Your own stable id for *the condition*, not for this occurrence. The same
+     * disk filling up is the same `customId` every time. Built from a timestamp
+     * or a UUID it defeats deduplication — a check running every minute raises
+     * sixty alerts an hour — and leaves nothing stable to close by.
+     */
+    customId?: string;
+    /**
+     * Left false, the alert stays open until somebody closes it, even after a
+     * SHARED response claims it. Set true when the first person taking it on is
+     * genuinely the end of the matter.
+     */
+    isAutoClose?: boolean;
+    responseOptions?: Array<ResponseOption | string>;
+    /**
+     * Whether the free-text "Something else" reply is offered. Tri-state: leave
+     * it unset and the server's default (on) stands.
+     */
+    other?: boolean;
+    /** https links to files the alert is about. URLs, never bytes. */
+    attachments?: string[];
+    /** Where the outcome is POSTed when somebody answers. */
+    callbackUrl?: string;
+}
+export interface WaitOptions {
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+    throwOnTimeout?: boolean;
+}
+export interface ApprovalOptions {
+    customId: string;
+    description?: string;
+    severity?: Severity;
+    approveLabel?: string;
+    rejectLabel?: string;
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+    /** A timeout returns false. There is deliberately no option making it true. */
+    timeoutMeansReject?: boolean;
+}
+export interface ClientOptions extends TransportOptions {
+    /**
+     * Throw `M91DeliveryError` when a send reaches nobody. On by default, because
+     * the silent version of this failure is an alert nobody ever hears about.
+     */
+    throwOnZeroDelivery?: boolean;
+}
+/** Alerts one channel, through one send link. */
+export declare class M91Client {
+    readonly sendLink: string;
+    readonly throwOnZeroDelivery: boolean;
+    private readonly http;
+    private readonly sleep;
+    private readonly now;
+    constructor(sendLink: string, options?: ClientOptions);
+    /** Redacted, always: a token in a log, a trace or a crash report can wake a team. */
+    toString(): string;
+    private url;
+    /**
+     * Check the link works, and see which channel it points at.
+     *
+     * **Raises no alert.** Safe on startup, in a health check, or while somebody
+     * is pasting the URL into a settings page — which is the point: a mistyped
+     * link otherwise shows "connected" and only reveals itself days later, when
+     * an alert silently fails to fire.
+     */
+    verify(): Promise<ChannelInfo>;
+    /** Raise an alert on this channel. */
+    send(title: string, options?: SendOptions): Promise<AlertResponse>;
+    /**
+     * Read one alert back. `null` when there is no such alert on this channel.
+     *
+     * The id is **either** the `customId` you invented or the `_id` the send
+     * returned — a caller knows one of them and should not have to say which.
+     */
+    getAlert(customIdOrAlertId: string): Promise<AlertDetail | null>;
+    /**
+     * Wait until somebody takes the alert on, or the clock runs out.
+     *
+     * Resolves with the SHARED response that claimed it. **PERSONAL responses
+     * never end this wait** — a "Seen" is an acknowledgement, not an answer, and
+     * treating it as one is the mistake `decision` exists to prevent.
+     *
+     * Stops early and resolves `null` if the alert is closed without ever being
+     * claimed: there is nothing left to wait for.
+     */
+    waitForDecision(customId: string, options?: WaitOptions): Promise<Decision | null>;
+    /**
+     * Close an alert this link raised. Always `true` when there is nothing open.
+     *
+     * A monitor that sees the problem heal closes it itself rather than waiting
+     * for a person to wake up and notice.
+     *
+     * **404 and 403 are success.** "No such alert" and "not yours to close" both
+     * mean the alert is not open on this channel, which is the state the caller
+     * asked for. Anything else would make every close a branch, and every retry
+     * after a dropped response a false failure.
+     */
+    close(options: {
+        customId?: string;
+        alertId?: string;
+    }): Promise<boolean>;
+    /**
+     * Ask a human, on their phone, and wait for the answer. `true` = approved.
+     *
+     * The shape of every human-in-the-loop gate: raise the question, block, act
+     * on the answer, close the alert either way. Severity defaults to HIGH here —
+     * unlike `send` — because something is *waiting* on the answer, so a phone
+     * call after 45 seconds of silence is the point rather than an escalation.
+     *
+     * Both labels are SHARED: approving and rejecting are each a final answer
+     * that settles the question for everybody, and neither is an "I saw it".
+     *
+     * On timeout with `timeoutMeansReject` (the default) it resolves false —
+     * nobody answered, so nothing consequential happens. Set it false to get
+     * `M91TimeoutError` instead. There is deliberately no way to make a timeout
+     * mean approved.
+     */
+    requestApproval(title: string, options: ApprovalOptions): Promise<boolean>;
+}
+/**
+ * A 2xx that woke nobody is a failure, and only the caller can decide what to do.
+ *
+ * `delivered` counts phones actually sent to, so this fires when a channel's
+ * devices are all stale or its members have not installed the app — a case that
+ * answers 201 and looks exactly like success.
+ */
+export declare function checkDelivery(alert: AlertResponse, enabled: boolean): void;
+/**
+ * Whether one poll ends the wait. Pure, so the rule lives in one place.
+ */
+export declare function waitVerdict(detail: AlertDetail | null): {
+    stop: boolean;
+    decision: Decision | null;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/src/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,OAAO,EAAa,KAAK,gBAAgB,EAAU,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EAMd,MAAM,aAAa,CAAC;AAGrB;;;GAGG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC;IACjD;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,iDAAiD;AACjD,qBAAa,SAAS;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB;IAQzD,qFAAqF;IACrF,QAAQ,IAAI,MAAM;IAIlB,OAAO,CAAC,GAAG;IAIX;;;;;;;OAOG;IACG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC;IAIpC,sCAAsC;IAChC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAS5E;;;;;OAKG;IACG,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAatE;;;;;;;;;OASG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA0B5F;;;;;;;;;;OAUG;IACG,KAAK,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/E;;;;;;;;;;;;;;;OAeG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;CAqCjF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAW1E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,CASpG"}

package/dist/src/client.js

@@ -0,0 +1,221 @@
+/**
+ * The send-link client: raise an alert, read what was decided, close it.
+ *
+ * A send link is a credential in a URL. It goes in a Grafana webhook field, a
+ * cron, a CI job or an agent's environment, and it needs no header, no account
+ * and no library — which is why this client is a convenience over one URL
+ * rather than the only way in.
+ *
+ * Two things it does that a bare `fetch` does not, and both are why it exists:
+ *
+ * - **It checks that somebody was actually reached.** A 201 means the alert was
+ *   filed, not that a phone rang.
+ * - **It reads the decision, not the responses.** Only a SHARED response decides.
+ */
+import { M91DeliveryError, M91ForbiddenError, M91NotFoundError, M91TimeoutError, M91ValidationError, } from './exceptions.js';
+import { Transport, redact } from './http.js';
+import { buildAlertPayload, isApproved, parseAlertDetail, parseAlertResponse, parseChannelInfo, } from './models.js';
+import { normalizeSendLink } from './url-builder.js';
+/**
+ * Below this, polling is a busy loop against a rate-limited endpoint and buys
+ * nothing: a human waking up and reaching for a phone is not a sub-second event.
+ */
+export const MIN_POLL_INTERVAL_MS = 2000;
+/** Alerts one channel, through one send link. */
+export class M91Client {
+    sendLink;
+    throwOnZeroDelivery;
+    http;
+    sleep;
+    now;
+    constructor(sendLink, options = {}) {
+        this.sendLink = normalizeSendLink(sendLink);
+        this.throwOnZeroDelivery = options.throwOnZeroDelivery !== false;
+        this.http = new Transport(options);
+        this.sleep = options.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        this.now = () => Date.now();
+    }
+    /** Redacted, always: a token in a log, a trace or a crash report can wake a team. */
+    toString() {
+        return `M91Client(${redact(this.sendLink)})`;
+    }
+    url(suffix = '') {
+        return this.sendLink + suffix;
+    }
+    /**
+     * Check the link works, and see which channel it points at.
+     *
+     * **Raises no alert.** Safe on startup, in a health check, or while somebody
+     * is pasting the URL into a settings page — which is the point: a mistyped
+     * link otherwise shows "connected" and only reveals itself days later, when
+     * an alert silently fails to fire.
+     */
+    async verify() {
+        return parseChannelInfo(await this.http.request({ method: 'GET', url: this.url() }));
+    }
+    /** Raise an alert on this channel. */
+    async send(title, options = {}) {
+        const payload = buildAlertPayload(title, options);
+        const alert = parseAlertResponse(await this.http.request({ method: 'POST', url: this.url(), body: payload }));
+        checkDelivery(alert, this.throwOnZeroDelivery);
+        return alert;
+    }
+    /**
+     * Read one alert back. `null` when there is no such alert on this channel.
+     *
+     * The id is **either** the `customId` you invented or the `_id` the send
+     * returned — a caller knows one of them and should not have to say which.
+     */
+    async getAlert(customIdOrAlertId) {
+        try {
+            const raw = await this.http.request({
+                method: 'GET',
+                url: this.url(`/alerts/${encodeURIComponent(String(customIdOrAlertId))}`),
+            });
+            return parseAlertDetail(raw);
+        }
+        catch (error) {
+            if (error instanceof M91NotFoundError)
+                return null;
+            throw error;
+        }
+    }
+    /**
+     * Wait until somebody takes the alert on, or the clock runs out.
+     *
+     * Resolves with the SHARED response that claimed it. **PERSONAL responses
+     * never end this wait** — a "Seen" is an acknowledgement, not an answer, and
+     * treating it as one is the mistake `decision` exists to prevent.
+     *
+     * Stops early and resolves `null` if the alert is closed without ever being
+     * claimed: there is nothing left to wait for.
+     */
+    async waitForDecision(customId, options = {}) {
+        const timeoutMs = options.timeoutMs ?? 300_000;
+        const requested = options.pollIntervalMs ?? 5000;
+        if (requested < MIN_POLL_INTERVAL_MS) {
+            console.warn(`[m91] pollIntervalMs=${requested} is below ${MIN_POLL_INTERVAL_MS}. The send link is ` +
+                `rate limited to 60 requests a minute and a person cannot answer that fast; ` +
+                `using ${MIN_POLL_INTERVAL_MS}ms instead.`);
+        }
+        const interval = Math.max(requested, MIN_POLL_INTERVAL_MS);
+        const deadline = this.now() + timeoutMs;
+        for (;;) {
+            const verdict = waitVerdict(await this.getAlert(customId));
+            if (verdict.stop)
+                return verdict.decision;
+            const remaining = deadline - this.now();
+            if (remaining <= 0) {
+                if (options.throwOnTimeout)
+                    throw new M91TimeoutError(customId, timeoutMs);
+                return null;
+            }
+            await this.sleep(Math.min(interval, remaining));
+        }
+    }
+    /**
+     * Close an alert this link raised. Always `true` when there is nothing open.
+     *
+     * A monitor that sees the problem heal closes it itself rather than waiting
+     * for a person to wake up and notice.
+     *
+     * **404 and 403 are success.** "No such alert" and "not yours to close" both
+     * mean the alert is not open on this channel, which is the state the caller
+     * asked for. Anything else would make every close a branch, and every retry
+     * after a dropped response a false failure.
+     */
+    async close(options) {
+        const { customId, alertId } = options ?? {};
+        if (Boolean(customId) === Boolean(alertId)) {
+            throw new M91ValidationError(`close() needs exactly one of customId or alertId — got ${customId ? 'both' : 'neither'}`);
+        }
+        try {
+            await this.http.request({
+                method: 'POST',
+                url: this.url('/close'),
+                body: customId ? { customId } : { alertId },
+            });
+        }
+        catch (error) {
+            if (error instanceof M91NotFoundError || error instanceof M91ForbiddenError)
+                return true;
+            throw error;
+        }
+        return true;
+    }
+    /**
+     * Ask a human, on their phone, and wait for the answer. `true` = approved.
+     *
+     * The shape of every human-in-the-loop gate: raise the question, block, act
+     * on the answer, close the alert either way. Severity defaults to HIGH here —
+     * unlike `send` — because something is *waiting* on the answer, so a phone
+     * call after 45 seconds of silence is the point rather than an escalation.
+     *
+     * Both labels are SHARED: approving and rejecting are each a final answer
+     * that settles the question for everybody, and neither is an "I saw it".
+     *
+     * On timeout with `timeoutMeansReject` (the default) it resolves false —
+     * nobody answered, so nothing consequential happens. Set it false to get
+     * `M91TimeoutError` instead. There is deliberately no way to make a timeout
+     * mean approved.
+     */
+    async requestApproval(title, options) {
+        const { customId, description, severity = 'HIGH', approveLabel = 'Approve', rejectLabel = 'Reject', timeoutMs = 300_000, pollIntervalMs = 5000, timeoutMeansReject = true, } = options;
+        await this.send(title, {
+            description,
+            severity,
+            customId,
+            isAutoClose: false,
+            responseOptions: [
+                { label: approveLabel, effect: 'SHARED' },
+                { label: rejectLabel, effect: 'SHARED' },
+            ],
+        });
+        try {
+            const decision = await this.waitForDecision(customId, { timeoutMs, pollIntervalMs });
+            if (decision === null) {
+                if (!timeoutMeansReject)
+                    throw new M91TimeoutError(customId, timeoutMs);
+                return false;
+            }
+            return isApproved(decision, approveLabel);
+        }
+        finally {
+            // Answered or not, the question is no longer live. Left open, a rejected
+            // deploy keeps somebody's phone in the "needs attention" list for an
+            // action that already resolved.
+            await this.close({ customId });
+        }
+    }
+}
+/**
+ * A 2xx that woke nobody is a failure, and only the caller can decide what to do.
+ *
+ * `delivered` counts phones actually sent to, so this fires when a channel's
+ * devices are all stale or its members have not installed the app — a case that
+ * answers 201 and looks exactly like success.
+ */
+export function checkDelivery(alert, enabled) {
+    if (!enabled || alert.actuallyReachedSomeone)
+        return;
+    throw new M91DeliveryError(`The alert was filed but reached nobody: delivered=0, ` +
+        `unregistered=${alert.unregistered.length}, noDevice=${alert.noDevice}, ` +
+        `pending=${alert.pending}. Nobody's phone rang.`, alert.delivered, alert.unregistered, alert.noDevice, alert.pending);
+}
+/**
+ * Whether one poll ends the wait. Pure, so the rule lives in one place.
+ */
+export function waitVerdict(detail) {
+    // Not visible yet. A send answers before the fan-out finishes, so an
+    // immediate read can outrun it; keep waiting rather than calling it gone.
+    if (detail === null)
+        return { stop: false, decision: null };
+    if (detail.decision !== null)
+        return { stop: true, decision: detail.decision };
+    // Closed with nobody having claimed it — by a monitor that saw the problem
+    // heal, or by hand. There is no answer coming.
+    if (detail.isClosed)
+        return { stop: true, decision: null };
+    return { stop: false, decision: null };
+}
+//# sourceMappingURL=client.js.map

package/dist/src/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAyB,MAAM,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAOL,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AA6DzC,iDAAiD;AACjD,MAAM,OAAO,SAAS;IACX,QAAQ,CAAS;IACjB,mBAAmB,CAAU;IACrB,IAAI,CAAY;IAChB,KAAK,CAAgC;IACrC,GAAG,CAAe;IAEnC,YAAY,QAAgB,EAAE,UAAyB,EAAE;QACvD,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,KAAK,KAAK,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,qFAAqF;IACrF,QAAQ;QACN,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC/C,CAAC;IAEO,GAAG,CAAC,MAAM,GAAG,EAAE;QACrB,OAAO,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM;QACV,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,UAAuB,EAAE;QACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,kBAAkB,CAC9B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAC5E,CAAC;QACF,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,iBAAyB;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC,CAAC;YACH,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,UAAuB,EAAE;QAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACjD,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CACV,wBAAwB,SAAS,aAAa,oBAAoB,qBAAqB;gBACrF,6EAA6E;gBAC7E,SAAS,oBAAoB,aAAa,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,OAAO,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;YAE1C,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,IAAI,OAAO,CAAC,cAAc;oBAAE,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAC,OAAgD;QAC1D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,kBAAkB,CAC1B,0DAA0D,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACvB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,YAAY,iBAAiB;gBAAE,OAAO,IAAI,CAAC;YACzF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,OAAwB;QAC3D,MAAM,EACJ,QAAQ,EACR,WAAW,EACX,QAAQ,GAAG,MAAM,EACjB,YAAY,GAAG,SAAS,EACxB,WAAW,GAAG,QAAQ,EACtB,SAAS,GAAG,OAAO,EACnB,cAAc,GAAG,IAAI,EACrB,kBAAkB,GAAG,IAAI,GAC1B,GAAG,OAAO,CAAC;QAEZ,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACrB,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE;gBACf,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACzC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE;aACzC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;YACrF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,CAAC,kBAAkB;oBAAE,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACxE,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,qEAAqE;YACrE,gCAAgC;YAChC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,OAAgB;IAClE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,sBAAsB;QAAE,OAAO;IACrD,MAAM,IAAI,gBAAgB,CACxB,uDAAuD;QACrD,gBAAgB,KAAK,CAAC,YAAY,CAAC,MAAM,cAAc,KAAK,CAAC,QAAQ,IAAI;QACzE,WAAW,KAAK,CAAC,OAAO,wBAAwB,EAClD,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,CACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,qEAAqE;IACrE,0EAA0E;IAC1E,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/E,2EAA2E;IAC3E,+CAA+C;IAC/C,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC"}

package/dist/src/exceptions.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Every failure the SDK can throw, and the one place an HTTP response becomes one.
+ *
+ * Branch on `.code` — a stable string the API contract pins down — never on
+ * `.message`, which is written for a person reading a terminal and is expected
+ * to change.
+ */
+export declare class M91Error extends Error {
+    readonly code: string;
+    readonly statusCode?: number;
+    readonly details?: unknown;
+    constructor(message: string, code?: string, statusCode?: number, details?: unknown);
+}
+/**
+ * 400/413. The request was wrong, and it is never retried.
+ *
+ * Also thrown locally, before any HTTP call, when a field breaks a documented
+ * limit. Every schema server-side is `.strict()`, so a mistyped field name is a
+ * 400 rather than a silent drop — and a round trip to learn that is a round
+ * trip wasted.
+ */
+export declare class M91ValidationError extends M91Error {
+    constructor(message: string, details?: unknown, statusCode?: number, code?: string);
+}
+/** 401. Credential invalid, expired or revoked — nothing is cached server-side. */
+export declare class M91AuthError extends M91Error {
+    constructor(message?: string, details?: unknown);
+}
+/** 403. Authenticated, but not allowed. On `close()` this means success. */
+export declare class M91ForbiddenError extends M91Error {
+    constructor(message?: string, details?: unknown);
+}
+/**
+ * 404. Absent — **or present and not yours**. The API answers the same way to
+ * both on purpose, so an id cannot become an oracle for what exists.
+ */
+export declare class M91NotFoundError extends M91Error {
+    constructor(message?: string, details?: unknown);
+}
+/**
+ * 409. The channel has nobody who can actually be woken.
+ *
+ * `unregistered` is the invited numbers with no M91 account — invited, never
+ * installed the app, and unreachable. An ordinary SMS would not pierce Do Not
+ * Disturb, would not repeat, and would not escalate.
+ */
+export declare class M91ChannelEmptyError extends M91Error {
+    readonly unregistered: string[];
+    constructor(message: string, unregistered?: string[], details?: unknown);
+}
+/**
+ * 429. 60 sends a minute per send link.
+ *
+ * `retryAfter` always has a value: the server sets `Retry-After` on every 429
+ * precisely so a caller does not have to guess, and the usual guess is to retry
+ * immediately and forever.
+ */
+export declare class M91RateLimitError extends M91Error {
+    readonly retryAfter: number;
+    constructor(message?: string, retryAfter?: number, details?: unknown);
+}
+/** 5xx. Not the caller's fault. Retried with backoff before it reaches you. */
+export declare class M91ServerError extends M91Error {
+    constructor(message?: string, statusCode?: number, details?: unknown);
+}
+/**
+ * The request never got an answer — DNS, TLS, connect or read timeout.
+ *
+ * Not retried. A send that timed out may or may not have raised an alert, and
+ * retrying it blindly is how one condition wakes a team four times.
+ */
+export declare class M91NetworkError extends M91Error {
+    constructor(message?: string, details?: unknown);
+}
+/**
+ * The API said 2xx and **nobody's phone rang**.
+ *
+ * The failure mode integrations actually hit, and it is invisible if you only
+ * check the status code. `delivered` counts phones sent to, not the size of the
+ * roster: a channel of four whose device tokens are all stale answers 201 with
+ * `delivered: 0`.
+ *
+ * A *deduplicated* send is not this error — `delivered` is 0 because the same
+ * alert is already open and already ringing, which is success.
+ */
+export declare class M91DeliveryError extends M91Error {
+    readonly delivered: number;
+    readonly unregistered: string[];
+    readonly noDevice: number;
+    readonly pending: number;
+    constructor(message: string, delivered?: number, unregistered?: string[], noDevice?: number, pending?: number);
+}
+/** `waitForDecision` ran out of time with no SHARED response. Nobody answered. */
+export declare class M91TimeoutError extends M91Error {
+    readonly customId: string;
+    readonly timeoutMs: number;
+    constructor(customId: string, timeoutMs: number);
+}
+/**
+ * Turn one HTTP response into either the payload or a thrown error.
+ *
+ * **Every M91 route answers in an envelope** — `{ success: true, data }` or
+ * `{ success: false, error: { code, message, details } }` — and this is the only
+ * place the SDK knows that. Everything above this line sees the inner `data`.
+ *
+ * The error class is chosen by HTTP status rather than by `error.code`, because
+ * the status is what the server derives the code from in the first place;
+ * keeping them in step in two places is how they drift apart. The body's `code`
+ * is still carried onto the error.
+ */
+export declare function unwrap(status: number, body: unknown, headers?: Headers | Record<string, string>): unknown;
+/** Seconds from `Retry-After`, or undefined. Header lookups are case-insensitive. */
+export declare function retryAfter(headers?: Headers | Record<string, string>): number | undefined;
+//# sourceMappingURL=exceptions.d.ts.map

package/dist/src/exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exceptions.d.ts","sourceRoot":"","sources":["../../src/exceptions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,IAAI,SAAc,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAUxF;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,SAAM,EAAE,IAAI,SAAqB;CAG5F;AAED,mFAAmF;AACnF,qBAAa,YAAa,SAAQ,QAAQ;gBAC5B,OAAO,SAAiB,EAAE,OAAO,CAAC,EAAE,OAAO;CAGxD;AAED,4EAA4E;AAC5E,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO;CAGrD;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;gBAChC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO;CAGrD;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,YAAY,GAAE,MAAM,EAAO,EAAE,OAAO,CAAC,EAAE,OAAO;CAI5E;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,OAAO,SAAiB,EAAE,UAAU,SAAK,EAAE,OAAO,CAAC,EAAE,OAAO;CAIzE;AAED,+EAA+E;AAC/E,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,OAAO,SAA0B,EAAE,UAAU,SAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAGnF;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,SAAkB,EAAE,OAAO,CAAC,EAAE,OAAO;CAGzD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAGvB,OAAO,EAAE,MAAM,EACf,SAAS,SAAI,EACb,YAAY,GAAE,MAAM,EAAO,EAC3B,QAAQ,SAAI,EACZ,OAAO,SAAI;CAQd;AAED,kFAAkF;AAClF,qBAAa,eAAgB,SAAQ,QAAQ;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAQhD;AAQD;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CA8BzG;AAOD,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAWzF"}