@neetru/sdk 1.0.0 → 1.1.1

package/dist/entitlements.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/entitlements.ts"],"names":[],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;AClBA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAMA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAsB;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,WAAW,QAAA,EAAU;AACtE,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EACtC;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,EACpC,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,OAAA,GAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,cAAA;AACrD,IAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,CAAA,eAAA,EAAkB,OAAO,CAAA,CAAE,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5F,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,IAAI,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AAEjC,EAAA,OAAO,MAAA;AACT;;;AC3GA,SAAS,mBAAmB,GAAA,EAAgC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,uCAAuC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,SAAA,EAAW;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO;AAAA,IACL,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,aAAa,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,GAAW,EAAE,WAAA,GAAc,EAAA;AAAA,IACjE,SAAS,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,GAAW,EAAE,OAAA,GAAU,EAAA;AAAA,IACrD,QAAQ,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS;AAAA,GACpD;AACF;AAEO,SAAS,4BAA4B,MAAA,EAAwB;AAClE,EAAA,eAAe,aAAA,CAAc,aAAqB,OAAA,EAA4C;AAC5F,IAAA,IAAI,CAAC,WAAA,EAAa,MAAM,IAAI,WAAA,CAAY,qBAAqB,yBAAyB,CAAA;AACtF,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,WAAA,CAAY,qBAAqB,qBAAqB,CAAA;AAE9E,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAiC,MAAA,EAAQ;AAAA,MACzD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,gCAAA;AAAA,MACN,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAE9B,CAAC,CAAA;AACD,IAAA,OAAO,mBAAmB,GAAG,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAM,KAAA,CAAM,WAAA,EAAqB,OAAA,EAAmC;AAClE,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,WAAA,EAAa,OAAO,CAAA;AACvD,MAAA,OAAO,MAAA,CAAO,OAAA;AAAA,IAChB,CAAA;AAAA,IACA;AAAA,GACF;AACF","file":"entitlements.cjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *\n * Não faz retry/backoff em v0.1 (carry-over Sprint 3+).\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status.\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  const init: RequestInit = { method, headers };\n  if (opts.body !== undefined && method !== 'GET' && method !== 'DELETE') {\n    headers['content-type'] = 'application/json';\n    init.body = JSON.stringify(opts.body);\n  }\n\n  let res: Response;\n  try {\n    res = await config.fetch(url, init);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'fetch failed';\n    throw new NeetruError('network_error', `Network error: ${message}`);\n  }\n\n  const requestId = res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n  if (!res.ok) {\n    const body = (await safeJson(res)) as { error?: { code?: string; message?: string } | string } | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    throw new NeetruError(code, message, res.status, requestId);\n  }\n\n  const parsed = await safeJson(res);\n  // Caller é responsável por validar shape; SDK assume backend correto.\n  return parsed as T;\n}\n","/**\n * Entitlements — verifica se o portador da apiKey pode usar feature X\n * do produto Y.\n *\n * Endpoint: `GET /api/v1/sdk/entitlements/check?slug=X&feature=Y`\n * Schema Firestore consultado pelo backend:\n *   `entitlements/{userId}/products/{slug}` → `{ features: string[], plan, expiresAt }`\n *\n * v0.1 sem cache local — cada `check()` é uma request. Cache LRU é Sprint 3\n * (vide `docs/PLAN_SDK_NEETRU.md` Sprint 3).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { EntitlementCheck, ResolvedConfig } from './types';\n\ninterface RawEntitlementCheck {\n  allowed?: boolean;\n  productSlug?: string;\n  feature?: string;\n  reason?: string;\n}\n\nfunction toEntitlementCheck(raw: unknown): EntitlementCheck {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Entitlement response is not an object');\n  }\n  const r = raw as RawEntitlementCheck;\n  if (typeof r.allowed !== 'boolean') {\n    throw new NeetruError('invalid_response', 'Entitlement response missing `allowed` boolean');\n  }\n  return {\n    allowed: r.allowed,\n    productSlug: typeof r.productSlug === 'string' ? r.productSlug : '',\n    feature: typeof r.feature === 'string' ? r.feature : '',\n    reason: typeof r.reason === 'string' ? r.reason : undefined,\n  };\n}\n\nexport function createEntitlementsNamespace(config: ResolvedConfig) {\n  async function checkDetailed(productSlug: string, feature: string): Promise<EntitlementCheck> {\n    if (!productSlug) throw new NeetruError('validation_failed', 'productSlug is required');\n    if (!feature) throw new NeetruError('validation_failed', 'feature is required');\n\n    const raw = await httpRequest<RawEntitlementCheck>(config, {\n      method: 'GET',\n      path: '/api/v1/sdk/entitlements/check',\n      query: { slug: productSlug, feature },\n      requireAuth: true,\n    });\n    return toEntitlementCheck(raw);\n  }\n\n  return {\n    /**\n     * Verifica se o caller pode usar `feature` no produto `productSlug`.\n     * Retorno simples: `true` libera, `false` bloqueia.\n     *\n     * Use `checkDetailed` se precisar do `reason` pra mensagem de upgrade.\n     */\n    async check(productSlug: string, feature: string): Promise<boolean> {\n      const result = await checkDetailed(productSlug, feature);\n      return result.allowed;\n    },\n    checkDetailed,\n  };\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/entitlements.ts"],"names":[],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;AClBA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAMA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAsB;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,WAAW,QAAA,EAAU;AACtE,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EACtC;AAMA,EAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,EACpC,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,YAAA,IAAgB,GAAA,CAAI,IAAA,KAAS,cAAA,EAAgB;AAC9D,MAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,kCAAkC,CAAA;AAAA,IAC3E;AACA,IAAA,MAAM,OAAA,GAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,cAAA;AACrD,IAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,CAAA,eAAA,EAAkB,OAAO,CAAA,CAAE,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5F,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,IAAI,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AAEjC,EAAA,OAAO,MAAA;AACT;;;ACpHA,SAAS,mBAAmB,GAAA,EAAgC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,uCAAuC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,SAAA,EAAW;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO;AAAA,IACL,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,aAAa,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,GAAW,EAAE,WAAA,GAAc,EAAA;AAAA,IACjE,SAAS,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,GAAW,EAAE,OAAA,GAAU,EAAA;AAAA,IACrD,QAAQ,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS;AAAA,GACpD;AACF;AAEO,SAAS,4BAA4B,MAAA,EAAwB;AAClE,EAAA,eAAe,aAAA,CAAc,aAAqB,OAAA,EAA4C;AAC5F,IAAA,IAAI,CAAC,WAAA,EAAa,MAAM,IAAI,WAAA,CAAY,qBAAqB,yBAAyB,CAAA;AACtF,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,WAAA,CAAY,qBAAqB,qBAAqB,CAAA;AAE9E,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAiC,MAAA,EAAQ;AAAA,MACzD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,gCAAA;AAAA,MACN,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAE9B,CAAC,CAAA;AACD,IAAA,OAAO,mBAAmB,GAAG,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAM,KAAA,CAAM,WAAA,EAAqB,OAAA,EAAmC;AAClE,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,WAAA,EAAa,OAAO,CAAA;AACvD,MAAA,OAAO,MAAA,CAAO,OAAA;AAAA,IAChB,CAAA;AAAA,IACA;AAAA,GACF;AACF","file":"entitlements.cjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *\n * Não faz retry/backoff em v0.1 (carry-over Sprint 3+).\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status.\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  const init: RequestInit = { method, headers };\n  if (opts.body !== undefined && method !== 'GET' && method !== 'DELETE') {\n    headers['content-type'] = 'application/json';\n    init.body = JSON.stringify(opts.body);\n  }\n\n  // BUG-020 fix (2026-05-13): timeout default 30s. Sem isso, em SSR/ISR do\n  // Next.js o request pode travar a request inteira; em build estático\n  // bloqueia o pipeline. AbortSignal.timeout requer Node 18+ ou browsers\n  // recentes — alvo do SDK é Node 18+ e Chrome/Firefox/Safari modernos.\n  init.signal = AbortSignal.timeout(30_000);\n\n  let res: Response;\n  try {\n    res = await config.fetch(url, init);\n  } catch (err) {\n    if (err instanceof DOMException && err.name === 'TimeoutError') {\n      throw new NeetruError('network_error', 'Network error: timeout after 30s');\n    }\n    const message = err instanceof Error ? err.message : 'fetch failed';\n    throw new NeetruError('network_error', `Network error: ${message}`);\n  }\n\n  const requestId = res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n  if (!res.ok) {\n    const body = (await safeJson(res)) as { error?: { code?: string; message?: string } | string } | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    throw new NeetruError(code, message, res.status, requestId);\n  }\n\n  const parsed = await safeJson(res);\n  // Caller é responsável por validar shape; SDK assume backend correto.\n  return parsed as T;\n}\n","/**\n * Entitlements — verifica se o portador da apiKey pode usar feature X\n * do produto Y.\n *\n * Endpoint: `GET /api/v1/sdk/entitlements/check?slug=X&feature=Y`\n * Schema Firestore consultado pelo backend:\n *   `entitlements/{userId}/products/{slug}` → `{ features: string[], plan, expiresAt }`\n *\n * v0.1 sem cache local — cada `check()` é uma request. Cache LRU é Sprint 3\n * (vide `docs/PLAN_SDK_NEETRU.md` Sprint 3).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { EntitlementCheck, ResolvedConfig } from './types';\n\ninterface RawEntitlementCheck {\n  allowed?: boolean;\n  productSlug?: string;\n  feature?: string;\n  reason?: string;\n}\n\nfunction toEntitlementCheck(raw: unknown): EntitlementCheck {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Entitlement response is not an object');\n  }\n  const r = raw as RawEntitlementCheck;\n  if (typeof r.allowed !== 'boolean') {\n    throw new NeetruError('invalid_response', 'Entitlement response missing `allowed` boolean');\n  }\n  return {\n    allowed: r.allowed,\n    productSlug: typeof r.productSlug === 'string' ? r.productSlug : '',\n    feature: typeof r.feature === 'string' ? r.feature : '',\n    reason: typeof r.reason === 'string' ? r.reason : undefined,\n  };\n}\n\nexport function createEntitlementsNamespace(config: ResolvedConfig) {\n  async function checkDetailed(productSlug: string, feature: string): Promise<EntitlementCheck> {\n    if (!productSlug) throw new NeetruError('validation_failed', 'productSlug is required');\n    if (!feature) throw new NeetruError('validation_failed', 'feature is required');\n\n    const raw = await httpRequest<RawEntitlementCheck>(config, {\n      method: 'GET',\n      path: '/api/v1/sdk/entitlements/check',\n      query: { slug: productSlug, feature },\n      requireAuth: true,\n    });\n    return toEntitlementCheck(raw);\n  }\n\n  return {\n    /**\n     * Verifica se o caller pode usar `feature` no produto `productSlug`.\n     * Retorno simples: `true` libera, `false` bloqueia.\n     *\n     * Use `checkDetailed` se precisar do `reason` pra mensagem de upgrade.\n     */\n    async check(productSlug: string, feature: string): Promise<boolean> {\n      const result = await checkDetailed(productSlug, feature);\n      return result.allowed;\n    },\n    checkDetailed,\n  };\n}\n"]}

package/dist/entitlements.d.cts

@@ -1,4 +1,4 @@
-import { R as ResolvedConfig, E as EntitlementCheck } from './types-PKUaFtBY.cjs';
+import { R as ResolvedConfig, E as EntitlementCheck } from './types-BA53dd8S.cjs';
 
 declare function createEntitlementsNamespace(config: ResolvedConfig): {
     /**

package/dist/entitlements.d.ts

@@ -1,4 +1,4 @@
-import { R as ResolvedConfig, E as EntitlementCheck } from './types-PKUaFtBY.js';
+import { R as ResolvedConfig, E as EntitlementCheck } from './types-BA53dd8S.js';
 
 declare function createEntitlementsNamespace(config: ResolvedConfig): {
     /**

package/dist/entitlements.mjs

@@ -65,10 +65,14 @@ async function httpRequest(config, opts) {
     headers["content-type"] = "application/json";
     init.body = JSON.stringify(opts.body);
   }
+  init.signal = AbortSignal.timeout(3e4);
   let res;
   try {
     res = await config.fetch(url, init);
   } catch (err) {
+    if (err instanceof DOMException && err.name === "TimeoutError") {
+      throw new NeetruError("network_error", "Network error: timeout after 30s");
+    }
     const message = err instanceof Error ? err.message : "fetch failed";
     throw new NeetruError("network_error", `Network error: ${message}`);
   }

package/dist/entitlements.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/entitlements.ts"],"names":[],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;AClBA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAMA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAsB;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,WAAW,QAAA,EAAU;AACtE,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EACtC;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,EACpC,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,OAAA,GAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,cAAA;AACrD,IAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,CAAA,eAAA,EAAkB,OAAO,CAAA,CAAE,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5F,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,IAAI,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AAEjC,EAAA,OAAO,MAAA;AACT;;;AC3GA,SAAS,mBAAmB,GAAA,EAAgC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,uCAAuC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,SAAA,EAAW;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO;AAAA,IACL,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,aAAa,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,GAAW,EAAE,WAAA,GAAc,EAAA;AAAA,IACjE,SAAS,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,GAAW,EAAE,OAAA,GAAU,EAAA;AAAA,IACrD,QAAQ,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS;AAAA,GACpD;AACF;AAEO,SAAS,4BAA4B,MAAA,EAAwB;AAClE,EAAA,eAAe,aAAA,CAAc,aAAqB,OAAA,EAA4C;AAC5F,IAAA,IAAI,CAAC,WAAA,EAAa,MAAM,IAAI,WAAA,CAAY,qBAAqB,yBAAyB,CAAA;AACtF,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,WAAA,CAAY,qBAAqB,qBAAqB,CAAA;AAE9E,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAiC,MAAA,EAAQ;AAAA,MACzD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,gCAAA;AAAA,MACN,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAE9B,CAAC,CAAA;AACD,IAAA,OAAO,mBAAmB,GAAG,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAM,KAAA,CAAM,WAAA,EAAqB,OAAA,EAAmC;AAClE,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,WAAA,EAAa,OAAO,CAAA;AACvD,MAAA,OAAO,MAAA,CAAO,OAAA;AAAA,IAChB,CAAA;AAAA,IACA;AAAA,GACF;AACF","file":"entitlements.mjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *\n * Não faz retry/backoff em v0.1 (carry-over Sprint 3+).\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status.\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  const init: RequestInit = { method, headers };\n  if (opts.body !== undefined && method !== 'GET' && method !== 'DELETE') {\n    headers['content-type'] = 'application/json';\n    init.body = JSON.stringify(opts.body);\n  }\n\n  let res: Response;\n  try {\n    res = await config.fetch(url, init);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'fetch failed';\n    throw new NeetruError('network_error', `Network error: ${message}`);\n  }\n\n  const requestId = res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n  if (!res.ok) {\n    const body = (await safeJson(res)) as { error?: { code?: string; message?: string } | string } | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    throw new NeetruError(code, message, res.status, requestId);\n  }\n\n  const parsed = await safeJson(res);\n  // Caller é responsável por validar shape; SDK assume backend correto.\n  return parsed as T;\n}\n","/**\n * Entitlements — verifica se o portador da apiKey pode usar feature X\n * do produto Y.\n *\n * Endpoint: `GET /api/v1/sdk/entitlements/check?slug=X&feature=Y`\n * Schema Firestore consultado pelo backend:\n *   `entitlements/{userId}/products/{slug}` → `{ features: string[], plan, expiresAt }`\n *\n * v0.1 sem cache local — cada `check()` é uma request. Cache LRU é Sprint 3\n * (vide `docs/PLAN_SDK_NEETRU.md` Sprint 3).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { EntitlementCheck, ResolvedConfig } from './types';\n\ninterface RawEntitlementCheck {\n  allowed?: boolean;\n  productSlug?: string;\n  feature?: string;\n  reason?: string;\n}\n\nfunction toEntitlementCheck(raw: unknown): EntitlementCheck {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Entitlement response is not an object');\n  }\n  const r = raw as RawEntitlementCheck;\n  if (typeof r.allowed !== 'boolean') {\n    throw new NeetruError('invalid_response', 'Entitlement response missing `allowed` boolean');\n  }\n  return {\n    allowed: r.allowed,\n    productSlug: typeof r.productSlug === 'string' ? r.productSlug : '',\n    feature: typeof r.feature === 'string' ? r.feature : '',\n    reason: typeof r.reason === 'string' ? r.reason : undefined,\n  };\n}\n\nexport function createEntitlementsNamespace(config: ResolvedConfig) {\n  async function checkDetailed(productSlug: string, feature: string): Promise<EntitlementCheck> {\n    if (!productSlug) throw new NeetruError('validation_failed', 'productSlug is required');\n    if (!feature) throw new NeetruError('validation_failed', 'feature is required');\n\n    const raw = await httpRequest<RawEntitlementCheck>(config, {\n      method: 'GET',\n      path: '/api/v1/sdk/entitlements/check',\n      query: { slug: productSlug, feature },\n      requireAuth: true,\n    });\n    return toEntitlementCheck(raw);\n  }\n\n  return {\n    /**\n     * Verifica se o caller pode usar `feature` no produto `productSlug`.\n     * Retorno simples: `true` libera, `false` bloqueia.\n     *\n     * Use `checkDetailed` se precisar do `reason` pra mensagem de upgrade.\n     */\n    async check(productSlug: string, feature: string): Promise<boolean> {\n      const result = await checkDetailed(productSlug, feature);\n      return result.allowed;\n    },\n    checkDetailed,\n  };\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/entitlements.ts"],"names":[],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;AClBA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAMA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAsB;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAEA,EAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,WAAW,QAAA,EAAU;AACtE,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAC1B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EACtC;AAMA,EAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,EACpC,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,YAAA,IAAgB,GAAA,CAAI,IAAA,KAAS,cAAA,EAAgB;AAC9D,MAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,kCAAkC,CAAA;AAAA,IAC3E;AACA,IAAA,MAAM,OAAA,GAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,cAAA;AACrD,IAAA,MAAM,IAAI,WAAA,CAAY,eAAA,EAAiB,CAAA,eAAA,EAAkB,OAAO,CAAA,CAAE,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5F,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,IAAI,WAAA,CAAY,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AAEjC,EAAA,OAAO,MAAA;AACT;;;ACpHA,SAAS,mBAAmB,GAAA,EAAgC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,uCAAuC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,SAAA,EAAW;AAClC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO;AAAA,IACL,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,aAAa,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,GAAW,EAAE,WAAA,GAAc,EAAA;AAAA,IACjE,SAAS,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,GAAW,EAAE,OAAA,GAAU,EAAA;AAAA,IACrD,QAAQ,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS;AAAA,GACpD;AACF;AAEO,SAAS,4BAA4B,MAAA,EAAwB;AAClE,EAAA,eAAe,aAAA,CAAc,aAAqB,OAAA,EAA4C;AAC5F,IAAA,IAAI,CAAC,WAAA,EAAa,MAAM,IAAI,WAAA,CAAY,qBAAqB,yBAAyB,CAAA;AACtF,IAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,WAAA,CAAY,qBAAqB,qBAAqB,CAAA;AAE9E,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAiC,MAAA,EAAQ;AAAA,MACzD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,gCAAA;AAAA,MACN,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,OAAA,EAE9B,CAAC,CAAA;AACD,IAAA,OAAO,mBAAmB,GAAG,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAM,KAAA,CAAM,WAAA,EAAqB,OAAA,EAAmC;AAClE,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,WAAA,EAAa,OAAO,CAAA;AACvD,MAAA,OAAO,MAAA,CAAO,OAAA;AAAA,IAChB,CAAA;AAAA,IACA;AAAA,GACF;AACF","file":"entitlements.mjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *\n * Não faz retry/backoff em v0.1 (carry-over Sprint 3+).\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status.\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  const init: RequestInit = { method, headers };\n  if (opts.body !== undefined && method !== 'GET' && method !== 'DELETE') {\n    headers['content-type'] = 'application/json';\n    init.body = JSON.stringify(opts.body);\n  }\n\n  // BUG-020 fix (2026-05-13): timeout default 30s. Sem isso, em SSR/ISR do\n  // Next.js o request pode travar a request inteira; em build estático\n  // bloqueia o pipeline. AbortSignal.timeout requer Node 18+ ou browsers\n  // recentes — alvo do SDK é Node 18+ e Chrome/Firefox/Safari modernos.\n  init.signal = AbortSignal.timeout(30_000);\n\n  let res: Response;\n  try {\n    res = await config.fetch(url, init);\n  } catch (err) {\n    if (err instanceof DOMException && err.name === 'TimeoutError') {\n      throw new NeetruError('network_error', 'Network error: timeout after 30s');\n    }\n    const message = err instanceof Error ? err.message : 'fetch failed';\n    throw new NeetruError('network_error', `Network error: ${message}`);\n  }\n\n  const requestId = res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n  if (!res.ok) {\n    const body = (await safeJson(res)) as { error?: { code?: string; message?: string } | string } | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    throw new NeetruError(code, message, res.status, requestId);\n  }\n\n  const parsed = await safeJson(res);\n  // Caller é responsável por validar shape; SDK assume backend correto.\n  return parsed as T;\n}\n","/**\n * Entitlements — verifica se o portador da apiKey pode usar feature X\n * do produto Y.\n *\n * Endpoint: `GET /api/v1/sdk/entitlements/check?slug=X&feature=Y`\n * Schema Firestore consultado pelo backend:\n *   `entitlements/{userId}/products/{slug}` → `{ features: string[], plan, expiresAt }`\n *\n * v0.1 sem cache local — cada `check()` é uma request. Cache LRU é Sprint 3\n * (vide `docs/PLAN_SDK_NEETRU.md` Sprint 3).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { EntitlementCheck, ResolvedConfig } from './types';\n\ninterface RawEntitlementCheck {\n  allowed?: boolean;\n  productSlug?: string;\n  feature?: string;\n  reason?: string;\n}\n\nfunction toEntitlementCheck(raw: unknown): EntitlementCheck {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Entitlement response is not an object');\n  }\n  const r = raw as RawEntitlementCheck;\n  if (typeof r.allowed !== 'boolean') {\n    throw new NeetruError('invalid_response', 'Entitlement response missing `allowed` boolean');\n  }\n  return {\n    allowed: r.allowed,\n    productSlug: typeof r.productSlug === 'string' ? r.productSlug : '',\n    feature: typeof r.feature === 'string' ? r.feature : '',\n    reason: typeof r.reason === 'string' ? r.reason : undefined,\n  };\n}\n\nexport function createEntitlementsNamespace(config: ResolvedConfig) {\n  async function checkDetailed(productSlug: string, feature: string): Promise<EntitlementCheck> {\n    if (!productSlug) throw new NeetruError('validation_failed', 'productSlug is required');\n    if (!feature) throw new NeetruError('validation_failed', 'feature is required');\n\n    const raw = await httpRequest<RawEntitlementCheck>(config, {\n      method: 'GET',\n      path: '/api/v1/sdk/entitlements/check',\n      query: { slug: productSlug, feature },\n      requireAuth: true,\n    });\n    return toEntitlementCheck(raw);\n  }\n\n  return {\n    /**\n     * Verifica se o caller pode usar `feature` no produto `productSlug`.\n     * Retorno simples: `true` libera, `false` bloqueia.\n     *\n     * Use `checkDetailed` se precisar do `reason` pra mensagem de upgrade.\n     */\n    async check(productSlug: string, feature: string): Promise<boolean> {\n      const result = await checkDetailed(productSlug, feature);\n      return result.allowed;\n    },\n    checkDetailed,\n  };\n}\n"]}

package/dist/index.cjs

@@ -70,10 +70,14 @@ async function httpRequest(config, opts) {
     headers["content-type"] = "application/json";
     init.body = JSON.stringify(opts.body);
   }
+  init.signal = AbortSignal.timeout(3e4);
   let res;
   try {
     res = await config.fetch(url, init);
   } catch (err) {
+    if (err instanceof DOMException && err.name === "TimeoutError") {
+      throw new NeetruError("network_error", "Network error: timeout after 30s");
+    }
     const message = err instanceof Error ? err.message : "fetch failed";
     throw new NeetruError("network_error", `Network error: ${message}`);
   }
@@ -692,6 +696,181 @@ function createDbNamespace(config) {
   };
 }
 
+// src/checkout.ts
+function parseStartResponse(raw) {
+  if (!raw || typeof raw !== "object") {
+    throw new NeetruError("invalid_response", "checkout.start response is not an object");
+  }
+  const r = raw;
+  if (typeof r.intentId !== "string" || !r.intentId) {
+    throw new NeetruError("invalid_response", "checkout.start response missing intentId");
+  }
+  if (typeof r.redirectUrl !== "string" || !r.redirectUrl) {
+    throw new NeetruError("invalid_response", "checkout.start response missing redirectUrl");
+  }
+  return {
+    intentId: r.intentId,
+    redirectUrl: r.redirectUrl,
+    status: r.status ?? "pending",
+    expiresAt: typeof r.expiresAt === "string" ? r.expiresAt : (/* @__PURE__ */ new Date()).toISOString(),
+    requiresKyc: r.requiresKyc === true
+  };
+}
+function parseGetResponse(raw) {
+  if (!raw || typeof raw !== "object") {
+    throw new NeetruError("invalid_response", "checkout.get response is not an object");
+  }
+  const r = raw;
+  const intent = r.intent;
+  if (!intent || typeof intent !== "object") {
+    throw new NeetruError("invalid_response", "checkout.get response missing intent");
+  }
+  if (typeof intent.intentId !== "string") {
+    throw new NeetruError("invalid_response", "checkout.get response missing intentId");
+  }
+  return {
+    intentId: intent.intentId,
+    uid: intent.uid ?? "",
+    targetTenantId: intent.targetTenantId ?? "",
+    targetTenantType: intent.targetTenantType ?? "pf",
+    productId: intent.productId ?? "",
+    planId: intent.planId ?? "",
+    callbackUrl: intent.callbackUrl ?? "",
+    status: intent.status ?? "pending",
+    stripeSessionId: intent.stripeSessionId ?? null,
+    expiresAt: intent.expiresAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+    isStale: r.isStale === true
+  };
+}
+function inBrowser() {
+  try {
+    return typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined" && typeof globalThis.location !== "undefined" && typeof globalThis.location.assign === "function";
+  } catch {
+    return false;
+  }
+}
+function performRedirect(url) {
+  try {
+    globalThis.location.assign(url);
+  } catch {
+  }
+}
+function createHttpCheckoutNamespace(config) {
+  return {
+    async start(input) {
+      if (!input?.productId) {
+        throw new NeetruError("validation_failed", "checkout.start: productId is required");
+      }
+      if (!input?.planId) {
+        throw new NeetruError("validation_failed", "checkout.start: planId is required");
+      }
+      if (!input?.callbackUrl) {
+        throw new NeetruError("validation_failed", "checkout.start: callbackUrl is required");
+      }
+      const body = {
+        productId: input.productId,
+        planId: input.planId,
+        callbackUrl: input.callbackUrl
+      };
+      if (input.tenantType) body.targetTenantType = input.tenantType;
+      if (input.tenantId) body.targetTenantId = input.tenantId;
+      const raw = await httpRequest(config, {
+        method: "POST",
+        path: "/api/v1/checkout/intents",
+        body,
+        requireAuth: true
+      });
+      const result = parseStartResponse(raw);
+      const shouldRedirect = input.autoRedirect !== false;
+      if (shouldRedirect && inBrowser()) {
+        performRedirect(result.redirectUrl);
+      }
+      return result;
+    },
+    async get(intentId) {
+      if (!intentId || typeof intentId !== "string") {
+        throw new NeetruError("validation_failed", "checkout.get: intentId is required");
+      }
+      const raw = await httpRequest(config, {
+        method: "GET",
+        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,
+        requireAuth: true
+      });
+      return parseGetResponse(raw);
+    },
+    async cancel(intentId) {
+      if (!intentId || typeof intentId !== "string") {
+        throw new NeetruError("validation_failed", "checkout.cancel: intentId is required");
+      }
+      const raw = await httpRequest(config, {
+        method: "DELETE",
+        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,
+        requireAuth: true
+      });
+      return {
+        ok: true,
+        alreadyCancelled: raw?.alreadyCancelled === true
+      };
+    }
+  };
+}
+var MockCheckout = class {
+  intents = /* @__PURE__ */ new Map();
+  async start(input) {
+    if (!input?.productId) {
+      throw new NeetruError("validation_failed", "checkout.start: productId is required");
+    }
+    if (!input?.planId) {
+      throw new NeetruError("validation_failed", "checkout.start: planId is required");
+    }
+    if (!input?.callbackUrl) {
+      throw new NeetruError("validation_failed", "checkout.start: callbackUrl is required");
+    }
+    const intentId = `chk_mock_${Math.random().toString(36).slice(2, 10)}`;
+    const expiresAt = new Date(Date.now() + 15 * 60 * 1e3).toISOString();
+    const redirectUrl = `https://localhost:9003/portal/checkout/${intentId}`;
+    this.intents.set(intentId, {
+      intentId,
+      uid: "dev-fixture-uid",
+      targetTenantId: input.tenantId ?? "dev-fixture-uid",
+      targetTenantType: input.tenantType ?? "pf",
+      productId: input.productId,
+      planId: input.planId,
+      callbackUrl: input.callbackUrl,
+      status: "pending",
+      stripeSessionId: null,
+      expiresAt
+    });
+    return {
+      intentId,
+      redirectUrl,
+      status: "pending",
+      expiresAt,
+      requiresKyc: false
+    };
+  }
+  async get(intentId) {
+    const found = this.intents.get(intentId);
+    if (!found) {
+      throw new NeetruError("not_found", `Mock intent ${intentId} not found`);
+    }
+    return { ...found };
+  }
+  async cancel(intentId) {
+    const found = this.intents.get(intentId);
+    if (!found) {
+      throw new NeetruError("not_found", `Mock intent ${intentId} not found`);
+    }
+    const alreadyCancelled = found.status === "cancelled";
+    this.intents.set(intentId, { ...found, status: "cancelled" });
+    return { ok: true, alreadyCancelled };
+  }
+};
+function createCheckoutNamespace(config) {
+  if (config.env === "dev") return new MockCheckout();
+  return createHttpCheckoutNamespace(config);
+}
+
 // src/mocks.ts
 var DEV_FIXTURE_USER = Object.freeze({
   uid: "dev-fixture-uid-0001",
@@ -1049,7 +1228,9 @@ function createOidcAuthNamespace(config) {
         const redirectUri = options?.redirectUri ?? globalThis.location.origin;
         const scope = options?.scope ?? "openid profile email";
         const state = options?.postLoginRedirect ?? globalThis.location.href;
-        const url = new URL("/oauth/authorize", config.baseUrl.replace(/\/api$/, ""));
+        const overrideAuthUrl = typeof globalThis.NEETRU_AUTH_URL === "string" ? globalThis.NEETRU_AUTH_URL : null;
+        const idpOrigin = overrideAuthUrl ?? config.baseUrl.replace(/^https?:\/\/api\./, "https://auth.");
+        const url = new URL("/api/v1/oauth/authorize", idpOrigin);
         url.searchParams.set("response_type", "code");
         url.searchParams.set("redirect_uri", redirectUri);
         url.searchParams.set("scope", scope);
@@ -1127,13 +1308,14 @@ function createNeetruClient(config = {}) {
     telemetry: createTelemetryNamespace(resolved),
     usage,
     support,
-    db
+    db,
+    checkout: createCheckoutNamespace(resolved)
   });
   return client;
 }
 
 // src/index.ts
-var VERSION = "1.0.0";
+var VERSION = "1.1.0";
 function initNeetru(config) {
   const { apiUrl, baseUrl, ...rest } = config;
   return createNeetruClient({ ...rest, baseUrl: baseUrl ?? apiUrl });
@@ -1142,12 +1324,14 @@ function initNeetru(config) {
 exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
 exports.DEV_FIXTURE_USER = DEV_FIXTURE_USER;
 exports.MockAuth = MockAuth;
+exports.MockCheckout = MockCheckout;
 exports.MockDb = MockDb;
 exports.MockEntitlements = MockEntitlements;
 exports.MockSupport = MockSupport;
 exports.MockUsage = MockUsage;
 exports.NeetruError = NeetruError;
 exports.VERSION = VERSION;
+exports.createCheckoutNamespace = createCheckoutNamespace;
 exports.createNeetruClient = createNeetruClient;
 exports.initNeetru = initNeetru;
 //# sourceMappingURL=index.cjs.map