@neetru/sdk 1.2.0 → 2.1.0

package/dist/catalog.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/catalog.ts"],"names":["err","message"],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;AC/KA,SAAS,UAAU,GAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE;AAAA,GACV;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,OAAA,CAAQ,cAAc,CAAA,CAAE,WAAA;AAC/D,EAAA,IAAI,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,EAAQ;AACrE,IAAA,OAAA,CAAQ,SAAS,CAAA,CAAE,MAAA;AAAA,EACrB;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAA,CAAQ,WAAW,CAAA,CAAE,QAAA;AAEzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,EAAG;AAC1B,IAAA,OAAA,CAAQ,KAAA,GAAQ,EAAE,KAAA,CAAM,MAAA;AAAA,MACtB,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,IACb,CAAA,KAAM,IAAA,IACN,OAAQ,CAAA,CAA8B,EAAA,KAAO,QAAA,IAC7C,OAAQ,EAA8B,IAAA,KAAS;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,uBAAuB,MAAA,EAAwB;AAC7D,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,MAAM,IAAA,CAAK,KAAA,GAA4B,EAAC,EAAiC;AAGvE,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACxC,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAAA,QACpC,SAAA,EAAW,OAAO,GAAA,CAAI,SAAA,KAAc,QAAA,GAChC,IAAI,SAAA,GAAA,iBACJ,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAC7B;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,IAAI,IAAA,EAAgC;AACxC,MAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACrC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,kBAAkB,CAAA;AAAA,MAC/D;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAmC,MAAA,EAAQ;AAAA,QAC3D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,oBAAA,EAAuB,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,OACtD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,GAAA,CAAI,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,SAAA,CAAU,IAAI,OAAO,CAAA;AAAA,IAC9B;AAAA,GACF;AACF","file":"catalog.cjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\n *     com `retries: 0`.\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n  /**\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\n   * desativar (útil em operações não-idempotentes específicas).\n   */\n  retries?: number;\n}\n\nconst DEFAULT_RETRIES = 2;\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\n  'rate_limited',\n  'server_error',\n  'network_error',\n]);\n\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\nfunction backoffMs(attempt: number): number {\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\n  return Math.max(50, Math.round(base + jitter));\n}\n\n/**\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\n * inválido. RFC 9110 §10.2.3.\n */\nfunction parseRetryAfter(value: string | null): number | null {\n  if (!value) return null;\n  const secs = Number(value);\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\n  const dateMs = Date.parse(value);\n  if (Number.isFinite(dateMs)) {\n    const delta = dateMs - Date.now();\n    if (delta > 0) return delta;\n  }\n  return null;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\n * automático em códigos transientes (rate_limited/server_error/network_error)\n * conforme `opts.retries` (default 2 = 3 tentativas).\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  // Body só é serializado uma vez — reusado entre tentativas.\n  const bodyString =\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\n      ? JSON.stringify(opts.body)\n      : undefined;\n  if (bodyString !== undefined) {\n    headers['content-type'] = 'application/json';\n  }\n\n  let lastError: NeetruError | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    const init: RequestInit = { method, headers };\n    if (bodyString !== undefined) init.body = bodyString;\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\n    // requer Node 18+ ou browsers recentes.\n    init.signal = AbortSignal.timeout(30_000);\n\n    let res: Response;\n    try {\n      res = await config.fetch(url, init);\n    } catch (err) {\n      const message =\n        err instanceof DOMException && err.name === 'TimeoutError'\n          ? 'Network error: timeout after 30s'\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\n      lastError = new NeetruError('network_error', message);\n      if (attempt < maxRetries) {\n        await sleep(backoffMs(attempt));\n        continue;\n      }\n      throw lastError;\n    }\n\n    const requestId =\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n    if (res.ok) {\n      const parsed = await safeJson(res);\n      return parsed as T;\n    }\n\n    const body = (await safeJson(res)) as\n      | { error?: { code?: string; message?: string } | string }\n      | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    const err = new NeetruError(code, message, res.status, requestId);\n    lastError = err;\n\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\n    if (isRetryable && attempt < maxRetries) {\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n      const delay = retryAfter ?? backoffMs(attempt);\n      await sleep(delay);\n      continue;\n    }\n    throw err;\n  }\n\n  // Unreachable — loop sempre retorna ou lança. Safety net.\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\n}\n","/**\n * Catálogo público de produtos SaaS Neetru.\n *\n * Endpoints consumidos (v1.2+):\n *   - `GET /api/sdk/v1/catalog` — listagem pública (sem auth)\n *   - `GET /api/sdk/v1/catalog/{slug}` — produto único (sem auth)\n *\n * v1.1 e anteriores usavam `/api/v1/cli/catalog` (staff CLI), o que forçava\n * SDK consumers a manter Bearer staff-only. v1.2 separa: SDK consome o\n * endpoint público (`published === true`), staff continua usando CLI quando\n * precisa de rascunho.\n *\n * Read-only. Publicação de produto continua via CLI `neetru publish`.\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type {\n  CatalogListOptions,\n  CatalogListResponse,\n  Product,\n  ResolvedConfig,\n} from './types';\n\ninterface RawCatalogListResponse {\n  ok?: boolean;\n  count?: number;\n  products?: unknown[];\n  fetchedAt?: string;\n}\n\ninterface RawCatalogGetResponse {\n  ok?: boolean;\n  product?: unknown;\n}\n\nfunction toProduct(raw: unknown): Product {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Catalog response item is not an object');\n  }\n  const r = raw as Record<string, unknown>;\n  if (typeof r.slug !== 'string' || !r.slug) {\n    throw new NeetruError('invalid_response', 'Catalog product missing slug');\n  }\n  if (typeof r.name !== 'string' || !r.name) {\n    throw new NeetruError('invalid_response', 'Catalog product missing name');\n  }\n  const product: Product = {\n    slug: r.slug,\n    name: r.name,\n  };\n  if (typeof r.tagline === 'string') product.tagline = r.tagline;\n  if (typeof r.description === 'string') product.description = r.description;\n  if (r.status === 'live' || r.status === 'soon' || r.status === 'beta') {\n    product.status = r.status;\n  }\n  if (typeof r.iconKey === 'string') product.iconKey = r.iconKey;\n  if (typeof r.ctaHref === 'string') product.ctaHref = r.ctaHref;\n  if (typeof r.ctaLabel === 'string') product.ctaLabel = r.ctaLabel;\n  // plans é placeholder v0.2 — preservar se backend mandar\n  if (Array.isArray(r.plans)) {\n    product.plans = r.plans.filter(\n      (p): p is { id: string; name: string } =>\n        typeof p === 'object' &&\n        p !== null &&\n        typeof (p as Record<string, unknown>).id === 'string' &&\n        typeof (p as Record<string, unknown>).name === 'string',\n    ) as Product['plans'];\n  }\n  return product;\n}\n\nexport function createCatalogNamespace(config: ResolvedConfig) {\n  return {\n    /**\n     * Lista produtos publicados. Por default só `published=true`; staff\n     * pode passar `includeDrafts: true` (requer Bearer com role admin/operator).\n     */\n    async list(_opts: CatalogListOptions = {}): Promise<CatalogListResponse> {\n      // SDK só lê produtos publicados. `includeDrafts` legado é ignorado:\n      // rascunhos só via CLI staff (`/api/v1/cli/catalog?drafts=true`).\n      const raw = await httpRequest<RawCatalogListResponse>(config, {\n        method: 'GET',\n        path: '/api/sdk/v1/catalog',\n      });\n\n      if (!raw || !Array.isArray(raw.products)) {\n        throw new NeetruError(\n          'invalid_response',\n          'Catalog list response missing products array',\n        );\n      }\n\n      return {\n        products: raw.products.map(toProduct),\n        fetchedAt: typeof raw.fetchedAt === 'string'\n          ? raw.fetchedAt\n          : new Date().toISOString(),\n      };\n    },\n\n    /**\n     * Busca produto único por slug.\n     *\n     * @throws {NeetruError} `not_found` se slug inexistente ou não publicado.\n     */\n    async get(slug: string): Promise<Product> {\n      if (!slug || typeof slug !== 'string') {\n        throw new NeetruError('validation_failed', 'slug is required');\n      }\n      const raw = await httpRequest<RawCatalogGetResponse>(config, {\n        method: 'GET',\n        path: `/api/sdk/v1/catalog/${encodeURIComponent(slug)}`,\n      });\n\n      if (!raw || !raw.product) {\n        throw new NeetruError(\n          'invalid_response',\n          'Catalog get response missing product',\n        );\n      }\n      return toProduct(raw.product);\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/catalog.ts"],"names":["err","message"],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;AC/KA,SAAS,UAAU,GAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE;AAAA,GACV;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,OAAA,CAAQ,cAAc,CAAA,CAAE,WAAA;AAC/D,EAAA,IAAI,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,EAAQ;AACrE,IAAA,OAAA,CAAQ,SAAS,CAAA,CAAE,MAAA;AAAA,EACrB;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAA,CAAQ,WAAW,CAAA,CAAE,QAAA;AAEzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,EAAG;AAC1B,IAAA,OAAA,CAAQ,KAAA,GAAQ,EAAE,KAAA,CAAM,MAAA;AAAA,MACtB,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,IACb,CAAA,KAAM,IAAA,IACN,OAAQ,CAAA,CAA8B,EAAA,KAAO,QAAA,IAC7C,OAAQ,EAA8B,IAAA,KAAS;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,uBAAuB,MAAA,EAAwB;AAC7D,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,MAAM,IAAA,CAAK,KAAA,GAA4B,EAAC,EAAiC;AAGvE,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACxC,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAAA,QACpC,SAAA,EAAW,OAAO,GAAA,CAAI,SAAA,KAAc,QAAA,GAChC,IAAI,SAAA,GAAA,iBACJ,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAC7B;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,IAAI,IAAA,EAAgC;AACxC,MAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACrC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,kBAAkB,CAAA;AAAA,MAC/D;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAmC,MAAA,EAAQ;AAAA,QAC3D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,oBAAA,EAAuB,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,OACtD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,GAAA,CAAI,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,SAAA,CAAU,IAAI,OAAO,CAAA;AAAA,IAC9B;AAAA,GACF;AACF","file":"catalog.cjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\r\n *     com `retries: 0`.\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\r\n   * desativar (útil em operações não-idempotentes específicas).\r\n   */\r\n  retries?: number;\r\n}\r\n\r\nconst DEFAULT_RETRIES = 2;\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n */\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return delta;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/** Mapeamento status → code estável do NeetruError. */\r\nfunction statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    const body = (await safeJson(res)) as\r\n      | { error?: { code?: string; message?: string } | string }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    if (body && typeof body === 'object' && 'error' in body) {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n      }\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Catálogo público de produtos SaaS Neetru.\r\n *\r\n * Endpoints consumidos (v1.2+):\r\n *   - `GET /api/sdk/v1/catalog` — listagem pública (sem auth)\r\n *   - `GET /api/sdk/v1/catalog/{slug}` — produto único (sem auth)\r\n *\r\n * v1.1 e anteriores usavam `/api/v1/cli/catalog` (staff CLI), o que forçava\r\n * SDK consumers a manter Bearer staff-only. v1.2 separa: SDK consome o\r\n * endpoint público (`published === true`), staff continua usando CLI quando\r\n * precisa de rascunho.\r\n *\r\n * Read-only. Publicação de produto continua via CLI `neetru publish`.\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type {\r\n  CatalogListOptions,\r\n  CatalogListResponse,\r\n  Product,\r\n  ResolvedConfig,\r\n} from './types';\r\n\r\ninterface RawCatalogListResponse {\r\n  ok?: boolean;\r\n  count?: number;\r\n  products?: unknown[];\r\n  fetchedAt?: string;\r\n}\r\n\r\ninterface RawCatalogGetResponse {\r\n  ok?: boolean;\r\n  product?: unknown;\r\n}\r\n\r\nfunction toProduct(raw: unknown): Product {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'Catalog response item is not an object');\r\n  }\r\n  const r = raw as Record<string, unknown>;\r\n  if (typeof r.slug !== 'string' || !r.slug) {\r\n    throw new NeetruError('invalid_response', 'Catalog product missing slug');\r\n  }\r\n  if (typeof r.name !== 'string' || !r.name) {\r\n    throw new NeetruError('invalid_response', 'Catalog product missing name');\r\n  }\r\n  const product: Product = {\r\n    slug: r.slug,\r\n    name: r.name,\r\n  };\r\n  if (typeof r.tagline === 'string') product.tagline = r.tagline;\r\n  if (typeof r.description === 'string') product.description = r.description;\r\n  if (r.status === 'live' || r.status === 'soon' || r.status === 'beta') {\r\n    product.status = r.status;\r\n  }\r\n  if (typeof r.iconKey === 'string') product.iconKey = r.iconKey;\r\n  if (typeof r.ctaHref === 'string') product.ctaHref = r.ctaHref;\r\n  if (typeof r.ctaLabel === 'string') product.ctaLabel = r.ctaLabel;\r\n  // plans é placeholder v0.2 — preservar se backend mandar\r\n  if (Array.isArray(r.plans)) {\r\n    product.plans = r.plans.filter(\r\n      (p): p is { id: string; name: string } =>\r\n        typeof p === 'object' &&\r\n        p !== null &&\r\n        typeof (p as Record<string, unknown>).id === 'string' &&\r\n        typeof (p as Record<string, unknown>).name === 'string',\r\n    ) as Product['plans'];\r\n  }\r\n  return product;\r\n}\r\n\r\nexport function createCatalogNamespace(config: ResolvedConfig) {\r\n  return {\r\n    /**\r\n     * Lista produtos publicados. Por default só `published=true`; staff\r\n     * pode passar `includeDrafts: true` (requer Bearer com role admin/operator).\r\n     */\r\n    async list(_opts: CatalogListOptions = {}): Promise<CatalogListResponse> {\r\n      // SDK só lê produtos publicados. `includeDrafts` legado é ignorado:\r\n      // rascunhos só via CLI staff (`/api/v1/cli/catalog?drafts=true`).\r\n      const raw = await httpRequest<RawCatalogListResponse>(config, {\r\n        method: 'GET',\r\n        path: '/api/sdk/v1/catalog',\r\n      });\r\n\r\n      if (!raw || !Array.isArray(raw.products)) {\r\n        throw new NeetruError(\r\n          'invalid_response',\r\n          'Catalog list response missing products array',\r\n        );\r\n      }\r\n\r\n      return {\r\n        products: raw.products.map(toProduct),\r\n        fetchedAt: typeof raw.fetchedAt === 'string'\r\n          ? raw.fetchedAt\r\n          : new Date().toISOString(),\r\n      };\r\n    },\r\n\r\n    /**\r\n     * Busca produto único por slug.\r\n     *\r\n     * @throws {NeetruError} `not_found` se slug inexistente ou não publicado.\r\n     */\r\n    async get(slug: string): Promise<Product> {\r\n      if (!slug || typeof slug !== 'string') {\r\n        throw new NeetruError('validation_failed', 'slug is required');\r\n      }\r\n      const raw = await httpRequest<RawCatalogGetResponse>(config, {\r\n        method: 'GET',\r\n        path: `/api/sdk/v1/catalog/${encodeURIComponent(slug)}`,\r\n      });\r\n\r\n      if (!raw || !raw.product) {\r\n        throw new NeetruError(\r\n          'invalid_response',\r\n          'Catalog get response missing product',\r\n        );\r\n      }\r\n      return toProduct(raw.product);\r\n    },\r\n  };\r\n}\r\n"]}

package/dist/catalog.d.cts

@@ -1,4 +1,8 @@
-import { x as ResolvedConfig, C as CatalogListOptions, c as CatalogListResponse, P as Product } from './types-CQAfwqUS.cjs';
+import { G as ResolvedConfig, C as CatalogListOptions, b as CatalogListResponse, P as Product } from './types-Kmt4y1FQ.cjs';
+import './collection-ref-BBvTTXoG.cjs';
+import '@neetru/realtime-protocol';
+import 'drizzle-orm/node-postgres';
+import './errors.cjs';
 
 declare function createCatalogNamespace(config: ResolvedConfig): {
     /**

package/dist/catalog.d.ts

@@ -1,4 +1,8 @@
-import { x as ResolvedConfig, C as CatalogListOptions, c as CatalogListResponse, P as Product } from './types-CQAfwqUS.js';
+import { G as ResolvedConfig, C as CatalogListOptions, b as CatalogListResponse, P as Product } from './types-B1jylbMC.js';
+import './collection-ref-BBvTTXoG.js';
+import '@neetru/realtime-protocol';
+import 'drizzle-orm/node-postgres';
+import './errors.js';
 
 declare function createCatalogNamespace(config: ResolvedConfig): {
     /**

package/dist/catalog.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/catalog.ts"],"names":["err","message"],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;AC/KA,SAAS,UAAU,GAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE;AAAA,GACV;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,OAAA,CAAQ,cAAc,CAAA,CAAE,WAAA;AAC/D,EAAA,IAAI,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,EAAQ;AACrE,IAAA,OAAA,CAAQ,SAAS,CAAA,CAAE,MAAA;AAAA,EACrB;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAA,CAAQ,WAAW,CAAA,CAAE,QAAA;AAEzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,EAAG;AAC1B,IAAA,OAAA,CAAQ,KAAA,GAAQ,EAAE,KAAA,CAAM,MAAA;AAAA,MACtB,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,IACb,CAAA,KAAM,IAAA,IACN,OAAQ,CAAA,CAA8B,EAAA,KAAO,QAAA,IAC7C,OAAQ,EAA8B,IAAA,KAAS;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,uBAAuB,MAAA,EAAwB;AAC7D,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,MAAM,IAAA,CAAK,KAAA,GAA4B,EAAC,EAAiC;AAGvE,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACxC,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAAA,QACpC,SAAA,EAAW,OAAO,GAAA,CAAI,SAAA,KAAc,QAAA,GAChC,IAAI,SAAA,GAAA,iBACJ,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAC7B;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,IAAI,IAAA,EAAgC;AACxC,MAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACrC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,kBAAkB,CAAA;AAAA,MAC/D;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAmC,MAAA,EAAQ;AAAA,QAC3D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,oBAAA,EAAuB,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,OACtD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,GAAA,CAAI,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,SAAA,CAAU,IAAI,OAAO,CAAA;AAAA,IAC9B;AAAA,GACF;AACF","file":"catalog.mjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\n *     com `retries: 0`.\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n  /**\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\n   * desativar (útil em operações não-idempotentes específicas).\n   */\n  retries?: number;\n}\n\nconst DEFAULT_RETRIES = 2;\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\n  'rate_limited',\n  'server_error',\n  'network_error',\n]);\n\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\nfunction backoffMs(attempt: number): number {\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\n  return Math.max(50, Math.round(base + jitter));\n}\n\n/**\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\n * inválido. RFC 9110 §10.2.3.\n */\nfunction parseRetryAfter(value: string | null): number | null {\n  if (!value) return null;\n  const secs = Number(value);\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\n  const dateMs = Date.parse(value);\n  if (Number.isFinite(dateMs)) {\n    const delta = dateMs - Date.now();\n    if (delta > 0) return delta;\n  }\n  return null;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\n * automático em códigos transientes (rate_limited/server_error/network_error)\n * conforme `opts.retries` (default 2 = 3 tentativas).\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  // Body só é serializado uma vez — reusado entre tentativas.\n  const bodyString =\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\n      ? JSON.stringify(opts.body)\n      : undefined;\n  if (bodyString !== undefined) {\n    headers['content-type'] = 'application/json';\n  }\n\n  let lastError: NeetruError | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    const init: RequestInit = { method, headers };\n    if (bodyString !== undefined) init.body = bodyString;\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\n    // requer Node 18+ ou browsers recentes.\n    init.signal = AbortSignal.timeout(30_000);\n\n    let res: Response;\n    try {\n      res = await config.fetch(url, init);\n    } catch (err) {\n      const message =\n        err instanceof DOMException && err.name === 'TimeoutError'\n          ? 'Network error: timeout after 30s'\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\n      lastError = new NeetruError('network_error', message);\n      if (attempt < maxRetries) {\n        await sleep(backoffMs(attempt));\n        continue;\n      }\n      throw lastError;\n    }\n\n    const requestId =\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n    if (res.ok) {\n      const parsed = await safeJson(res);\n      return parsed as T;\n    }\n\n    const body = (await safeJson(res)) as\n      | { error?: { code?: string; message?: string } | string }\n      | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    const err = new NeetruError(code, message, res.status, requestId);\n    lastError = err;\n\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\n    if (isRetryable && attempt < maxRetries) {\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n      const delay = retryAfter ?? backoffMs(attempt);\n      await sleep(delay);\n      continue;\n    }\n    throw err;\n  }\n\n  // Unreachable — loop sempre retorna ou lança. Safety net.\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\n}\n","/**\n * Catálogo público de produtos SaaS Neetru.\n *\n * Endpoints consumidos (v1.2+):\n *   - `GET /api/sdk/v1/catalog` — listagem pública (sem auth)\n *   - `GET /api/sdk/v1/catalog/{slug}` — produto único (sem auth)\n *\n * v1.1 e anteriores usavam `/api/v1/cli/catalog` (staff CLI), o que forçava\n * SDK consumers a manter Bearer staff-only. v1.2 separa: SDK consome o\n * endpoint público (`published === true`), staff continua usando CLI quando\n * precisa de rascunho.\n *\n * Read-only. Publicação de produto continua via CLI `neetru publish`.\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type {\n  CatalogListOptions,\n  CatalogListResponse,\n  Product,\n  ResolvedConfig,\n} from './types';\n\ninterface RawCatalogListResponse {\n  ok?: boolean;\n  count?: number;\n  products?: unknown[];\n  fetchedAt?: string;\n}\n\ninterface RawCatalogGetResponse {\n  ok?: boolean;\n  product?: unknown;\n}\n\nfunction toProduct(raw: unknown): Product {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'Catalog response item is not an object');\n  }\n  const r = raw as Record<string, unknown>;\n  if (typeof r.slug !== 'string' || !r.slug) {\n    throw new NeetruError('invalid_response', 'Catalog product missing slug');\n  }\n  if (typeof r.name !== 'string' || !r.name) {\n    throw new NeetruError('invalid_response', 'Catalog product missing name');\n  }\n  const product: Product = {\n    slug: r.slug,\n    name: r.name,\n  };\n  if (typeof r.tagline === 'string') product.tagline = r.tagline;\n  if (typeof r.description === 'string') product.description = r.description;\n  if (r.status === 'live' || r.status === 'soon' || r.status === 'beta') {\n    product.status = r.status;\n  }\n  if (typeof r.iconKey === 'string') product.iconKey = r.iconKey;\n  if (typeof r.ctaHref === 'string') product.ctaHref = r.ctaHref;\n  if (typeof r.ctaLabel === 'string') product.ctaLabel = r.ctaLabel;\n  // plans é placeholder v0.2 — preservar se backend mandar\n  if (Array.isArray(r.plans)) {\n    product.plans = r.plans.filter(\n      (p): p is { id: string; name: string } =>\n        typeof p === 'object' &&\n        p !== null &&\n        typeof (p as Record<string, unknown>).id === 'string' &&\n        typeof (p as Record<string, unknown>).name === 'string',\n    ) as Product['plans'];\n  }\n  return product;\n}\n\nexport function createCatalogNamespace(config: ResolvedConfig) {\n  return {\n    /**\n     * Lista produtos publicados. Por default só `published=true`; staff\n     * pode passar `includeDrafts: true` (requer Bearer com role admin/operator).\n     */\n    async list(_opts: CatalogListOptions = {}): Promise<CatalogListResponse> {\n      // SDK só lê produtos publicados. `includeDrafts` legado é ignorado:\n      // rascunhos só via CLI staff (`/api/v1/cli/catalog?drafts=true`).\n      const raw = await httpRequest<RawCatalogListResponse>(config, {\n        method: 'GET',\n        path: '/api/sdk/v1/catalog',\n      });\n\n      if (!raw || !Array.isArray(raw.products)) {\n        throw new NeetruError(\n          'invalid_response',\n          'Catalog list response missing products array',\n        );\n      }\n\n      return {\n        products: raw.products.map(toProduct),\n        fetchedAt: typeof raw.fetchedAt === 'string'\n          ? raw.fetchedAt\n          : new Date().toISOString(),\n      };\n    },\n\n    /**\n     * Busca produto único por slug.\n     *\n     * @throws {NeetruError} `not_found` se slug inexistente ou não publicado.\n     */\n    async get(slug: string): Promise<Product> {\n      if (!slug || typeof slug !== 'string') {\n        throw new NeetruError('validation_failed', 'slug is required');\n      }\n      const raw = await httpRequest<RawCatalogGetResponse>(config, {\n        method: 'GET',\n        path: `/api/sdk/v1/catalog/${encodeURIComponent(slug)}`,\n      });\n\n      if (!raw || !raw.product) {\n        throw new NeetruError(\n          'invalid_response',\n          'Catalog get response missing product',\n        );\n      }\n      return toProduct(raw.product);\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/catalog.ts"],"names":["err","message"],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;AC/KA,SAAS,UAAU,GAAA,EAAuB;AACxC,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAC,EAAE,IAAA,EAAM;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,8BAA8B,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,MAAM,CAAA,CAAE;AAAA,GACV;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,OAAA,CAAQ,cAAc,CAAA,CAAE,WAAA;AAC/D,EAAA,IAAI,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,IAAU,CAAA,CAAE,WAAW,MAAA,EAAQ;AACrE,IAAA,OAAA,CAAQ,SAAS,CAAA,CAAE,MAAA;AAAA,EACrB;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,EAAU,OAAA,CAAQ,UAAU,CAAA,CAAE,OAAA;AACvD,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAA,CAAQ,WAAW,CAAA,CAAE,QAAA;AAEzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,KAAK,CAAA,EAAG;AAC1B,IAAA,OAAA,CAAQ,KAAA,GAAQ,EAAE,KAAA,CAAM,MAAA;AAAA,MACtB,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,IACb,CAAA,KAAM,IAAA,IACN,OAAQ,CAAA,CAA8B,EAAA,KAAO,QAAA,IAC7C,OAAQ,EAA8B,IAAA,KAAS;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,uBAAuB,MAAA,EAAwB;AAC7D,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKL,MAAM,IAAA,CAAK,KAAA,GAA4B,EAAC,EAAiC;AAGvE,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACxC,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAAA,QACpC,SAAA,EAAW,OAAO,GAAA,CAAI,SAAA,KAAc,QAAA,GAChC,IAAI,SAAA,GAAA,iBACJ,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OAC7B;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,IAAI,IAAA,EAAgC;AACxC,MAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACrC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,kBAAkB,CAAA;AAAA,MAC/D;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAmC,MAAA,EAAQ;AAAA,QAC3D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,oBAAA,EAAuB,kBAAA,CAAmB,IAAI,CAAC,CAAA;AAAA,OACtD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,CAAC,GAAA,CAAI,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,kBAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,SAAA,CAAU,IAAI,OAAO,CAAA;AAAA,IAC9B;AAAA,GACF;AACF","file":"catalog.mjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\r\n *     com `retries: 0`.\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\r\n   * desativar (útil em operações não-idempotentes específicas).\r\n   */\r\n  retries?: number;\r\n}\r\n\r\nconst DEFAULT_RETRIES = 2;\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n */\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return delta;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/** Mapeamento status → code estável do NeetruError. */\r\nfunction statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    const body = (await safeJson(res)) as\r\n      | { error?: { code?: string; message?: string } | string }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    if (body && typeof body === 'object' && 'error' in body) {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n      }\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Catálogo público de produtos SaaS Neetru.\r\n *\r\n * Endpoints consumidos (v1.2+):\r\n *   - `GET /api/sdk/v1/catalog` — listagem pública (sem auth)\r\n *   - `GET /api/sdk/v1/catalog/{slug}` — produto único (sem auth)\r\n *\r\n * v1.1 e anteriores usavam `/api/v1/cli/catalog` (staff CLI), o que forçava\r\n * SDK consumers a manter Bearer staff-only. v1.2 separa: SDK consome o\r\n * endpoint público (`published === true`), staff continua usando CLI quando\r\n * precisa de rascunho.\r\n *\r\n * Read-only. Publicação de produto continua via CLI `neetru publish`.\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type {\r\n  CatalogListOptions,\r\n  CatalogListResponse,\r\n  Product,\r\n  ResolvedConfig,\r\n} from './types';\r\n\r\ninterface RawCatalogListResponse {\r\n  ok?: boolean;\r\n  count?: number;\r\n  products?: unknown[];\r\n  fetchedAt?: string;\r\n}\r\n\r\ninterface RawCatalogGetResponse {\r\n  ok?: boolean;\r\n  product?: unknown;\r\n}\r\n\r\nfunction toProduct(raw: unknown): Product {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'Catalog response item is not an object');\r\n  }\r\n  const r = raw as Record<string, unknown>;\r\n  if (typeof r.slug !== 'string' || !r.slug) {\r\n    throw new NeetruError('invalid_response', 'Catalog product missing slug');\r\n  }\r\n  if (typeof r.name !== 'string' || !r.name) {\r\n    throw new NeetruError('invalid_response', 'Catalog product missing name');\r\n  }\r\n  const product: Product = {\r\n    slug: r.slug,\r\n    name: r.name,\r\n  };\r\n  if (typeof r.tagline === 'string') product.tagline = r.tagline;\r\n  if (typeof r.description === 'string') product.description = r.description;\r\n  if (r.status === 'live' || r.status === 'soon' || r.status === 'beta') {\r\n    product.status = r.status;\r\n  }\r\n  if (typeof r.iconKey === 'string') product.iconKey = r.iconKey;\r\n  if (typeof r.ctaHref === 'string') product.ctaHref = r.ctaHref;\r\n  if (typeof r.ctaLabel === 'string') product.ctaLabel = r.ctaLabel;\r\n  // plans é placeholder v0.2 — preservar se backend mandar\r\n  if (Array.isArray(r.plans)) {\r\n    product.plans = r.plans.filter(\r\n      (p): p is { id: string; name: string } =>\r\n        typeof p === 'object' &&\r\n        p !== null &&\r\n        typeof (p as Record<string, unknown>).id === 'string' &&\r\n        typeof (p as Record<string, unknown>).name === 'string',\r\n    ) as Product['plans'];\r\n  }\r\n  return product;\r\n}\r\n\r\nexport function createCatalogNamespace(config: ResolvedConfig) {\r\n  return {\r\n    /**\r\n     * Lista produtos publicados. Por default só `published=true`; staff\r\n     * pode passar `includeDrafts: true` (requer Bearer com role admin/operator).\r\n     */\r\n    async list(_opts: CatalogListOptions = {}): Promise<CatalogListResponse> {\r\n      // SDK só lê produtos publicados. `includeDrafts` legado é ignorado:\r\n      // rascunhos só via CLI staff (`/api/v1/cli/catalog?drafts=true`).\r\n      const raw = await httpRequest<RawCatalogListResponse>(config, {\r\n        method: 'GET',\r\n        path: '/api/sdk/v1/catalog',\r\n      });\r\n\r\n      if (!raw || !Array.isArray(raw.products)) {\r\n        throw new NeetruError(\r\n          'invalid_response',\r\n          'Catalog list response missing products array',\r\n        );\r\n      }\r\n\r\n      return {\r\n        products: raw.products.map(toProduct),\r\n        fetchedAt: typeof raw.fetchedAt === 'string'\r\n          ? raw.fetchedAt\r\n          : new Date().toISOString(),\r\n      };\r\n    },\r\n\r\n    /**\r\n     * Busca produto único por slug.\r\n     *\r\n     * @throws {NeetruError} `not_found` se slug inexistente ou não publicado.\r\n     */\r\n    async get(slug: string): Promise<Product> {\r\n      if (!slug || typeof slug !== 'string') {\r\n        throw new NeetruError('validation_failed', 'slug is required');\r\n      }\r\n      const raw = await httpRequest<RawCatalogGetResponse>(config, {\r\n        method: 'GET',\r\n        path: `/api/sdk/v1/catalog/${encodeURIComponent(slug)}`,\r\n      });\r\n\r\n      if (!raw || !raw.product) {\r\n        throw new NeetruError(\r\n          'invalid_response',\r\n          'Catalog get response missing product',\r\n        );\r\n      }\r\n      return toProduct(raw.product);\r\n    },\r\n  };\r\n}\r\n"]}

package/dist/checkout.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/checkout.ts"],"names":["err","message"],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;ACzFA,SAAS,mBAAmB,GAAA,EAAmC;AAC7D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAC,EAAE,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,IAAY,CAAC,EAAE,WAAA,EAAa;AACvD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,6CAA6C,CAAA;AAAA,EACzF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,MAAA,EAAS,EAAE,MAAA,IAA+C,SAAA;AAAA,IAC1D,SAAA,EAAW,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,GAAW,EAAE,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClF,WAAA,EAAa,EAAE,WAAA,KAAgB;AAAA,GACjC;AACF;AAEA,SAAS,iBAAiB,GAAA,EAAkC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,sCAAsC,CAAA;AAAA,EAClF;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,GAAA,EAAK,OAAO,GAAA,IAAO,EAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,cAAA,IAAkB,EAAA;AAAA,IACzC,gBAAA,EAAmB,OAAO,gBAAA,IAAuD,IAAA;AAAA,IACjF,SAAA,EAAW,OAAO,SAAA,IAAa,EAAA;AAAA,IAC/B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,WAAA,EAAa,OAAO,WAAA,IAAe,EAAA;AAAA,IACnC,MAAA,EAAS,OAAO,MAAA,IAA+C,SAAA;AAAA,IAC/D,eAAA,EAAiB,OAAO,eAAA,IAAmB,IAAA;AAAA,IAC3C,WAAW,MAAA,CAAO,SAAA,IAAA,iBAAa,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,IACtD,OAAA,EAAS,EAAE,OAAA,KAAY;AAAA,GACzB;AACF;AAMA,SAAS,SAAA,GAAqB;AAC5B,EAAA,IAAI;AACF,IAAA,OACE,OAAO,UAAA,KAAe,WAAA,IACtB,OAAQ,WAA6D,MAAA,KAAW,WAAA,IAChF,OAAO,UAAA,CAAW,QAAA,KAAa,WAAA,IAC/B,OAAO,UAAA,CAAW,SAAS,MAAA,KAAW,UAAA;AAAA,EAE1C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI;AACF,IAAA,UAAA,CAAW,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAKA,SAAS,4BAA4B,MAAA,EAA2C;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,MAAM,KAAA,EAAyD;AACnE,MAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,MACtF;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,aAAa,KAAA,CAAM;AAAA,OACrB;AACA,MAAA,IAAI,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,gBAAA,GAAmB,KAAA,CAAM,UAAA;AACpD,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,cAAA,GAAiB,KAAA,CAAM,QAAA;AAEhD,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAsC,MAAA,EAAQ;AAAA,QAC9D,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,0BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,mBAAmB,GAAG,CAAA;AAErC,MAAA,MAAM,cAAA,GAAiB,MAAM,YAAA,KAAiB,KAAA;AAC9C,MAAA,IAAI,cAAA,IAAkB,WAAU,EAAG;AACjC,QAAA,eAAA,CAAgB,OAAO,WAAW,CAAA;AAAA,MACpC;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO,iBAAiB,GAAG,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA0D,MAAA,EAAQ;AAAA,QAClF,MAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,gBAAA,EAAmB,KAAwC,gBAAA,KAAqB;AAAA,OAClF;AAAA,IACF;AAAA,GACF;AACF;AAYO,IAAM,eAAN,MAAgD;AAAA,EACpC,OAAA,uBAAc,GAAA,EAAgC;AAAA,EAE/D,MAAM,MAAM,KAAA,EAAyD;AACnE,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,IACjF;AACA,IAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,IACtF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,SAAA,EAAY,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACpE,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA,CAAE,WAAA,EAAY;AACpE,IAAA,MAAM,WAAA,GAAc,0CAA0C,QAAQ,CAAA,CAAA;AAEtE,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU;AAAA,MACzB,QAAA;AAAA,MACA,GAAA,EAAK,iBAAA;AAAA,MACL,cAAA,EAAgB,MAAM,QAAA,IAAY,iBAAA;AAAA,MAClC,gBAAA,EAAkB,MAAM,UAAA,IAAc,IAAA;AAAA,MACtC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,eAAA,EAAiB,IAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,WAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA;AAAA,MACA,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,EAAE,GAAG,KAAA,EAAM;AAAA,EACpB;AAAA,EAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,KAAW,WAAA;AAC1C,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,aAAa,CAAA;AAC5D,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,gBAAA,EAAiB;AAAA,EACtC;AACF;AAIO,SAAS,wBAAwB,MAAA,EAA2C;AACjF,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,KAAA,EAAO,OAAO,IAAI,YAAA,EAAa;AAClD,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"checkout.cjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\n *     com `retries: 0`.\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n  /**\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\n   * desativar (útil em operações não-idempotentes específicas).\n   */\n  retries?: number;\n}\n\nconst DEFAULT_RETRIES = 2;\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\n  'rate_limited',\n  'server_error',\n  'network_error',\n]);\n\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\nfunction backoffMs(attempt: number): number {\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\n  return Math.max(50, Math.round(base + jitter));\n}\n\n/**\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\n * inválido. RFC 9110 §10.2.3.\n */\nfunction parseRetryAfter(value: string | null): number | null {\n  if (!value) return null;\n  const secs = Number(value);\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\n  const dateMs = Date.parse(value);\n  if (Number.isFinite(dateMs)) {\n    const delta = dateMs - Date.now();\n    if (delta > 0) return delta;\n  }\n  return null;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\n * automático em códigos transientes (rate_limited/server_error/network_error)\n * conforme `opts.retries` (default 2 = 3 tentativas).\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  // Body só é serializado uma vez — reusado entre tentativas.\n  const bodyString =\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\n      ? JSON.stringify(opts.body)\n      : undefined;\n  if (bodyString !== undefined) {\n    headers['content-type'] = 'application/json';\n  }\n\n  let lastError: NeetruError | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    const init: RequestInit = { method, headers };\n    if (bodyString !== undefined) init.body = bodyString;\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\n    // requer Node 18+ ou browsers recentes.\n    init.signal = AbortSignal.timeout(30_000);\n\n    let res: Response;\n    try {\n      res = await config.fetch(url, init);\n    } catch (err) {\n      const message =\n        err instanceof DOMException && err.name === 'TimeoutError'\n          ? 'Network error: timeout after 30s'\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\n      lastError = new NeetruError('network_error', message);\n      if (attempt < maxRetries) {\n        await sleep(backoffMs(attempt));\n        continue;\n      }\n      throw lastError;\n    }\n\n    const requestId =\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n    if (res.ok) {\n      const parsed = await safeJson(res);\n      return parsed as T;\n    }\n\n    const body = (await safeJson(res)) as\n      | { error?: { code?: string; message?: string } | string }\n      | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    const err = new NeetruError(code, message, res.status, requestId);\n    lastError = err;\n\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\n    if (isRetryable && attempt < maxRetries) {\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n      const delay = retryAfter ?? backoffMs(attempt);\n      await sleep(delay);\n      continue;\n    }\n    throw err;\n  }\n\n  // Unreachable — loop sempre retorna ou lança. Safety net.\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\n}\n","/**\n * Checkout namespace (v1.1) — `client.checkout.*`\n *\n * Fluxo canônico (vide `docs/FLUXO_SIGNUP_BILLING_CHECKOUT.md` §6):\n *   1. SaaS produto chama `client.checkout.start({productId, planId, callbackUrl})`.\n *   2. SDK posta em `POST /api/v1/checkout/intents` (Bearer access_token OIDC).\n *   3. Core cria `checkout_intents/{intentId}` (TTL 15min) + retorna `redirectUrl`.\n *   4. Em browser, SDK redireciona automaticamente pra `redirectUrl`. Em\n *      Node/SSR, retorna o objeto `{intentId, redirectUrl}` sem redirect.\n *   5. Portal (`minhaconta.neetru.com/portal/kyc/{intentId}`) coleta KYC + cartão.\n *   6. Usuário volta pra `callbackUrl?status=success&intentId=...` quando completo.\n *\n * **Dev mode** (`NEETRU_ENV=dev`): `start()` retorna URL fake sem network call.\n * Útil pra dev externo SaaS testar UI sem provisionar conta Neetru.\n *\n * **Estabilidade**: minor bump v1.0 → v1.1 (feature add, sem breaking).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { ResolvedConfig } from './types';\n\n// ─── Types públicos ─────────────────────────────────────────────────────────\n\n/** Tipo do tenant alvo da subscription (PF=uid, PJ=orgId). */\nexport type CheckoutTenantType = 'pf' | 'pj';\n\n/** Status do `checkout_intents/{intentId}` no Core. */\nexport type CheckoutIntentStatus =\n  | 'pending'\n  | 'kyc_in_progress'\n  | 'stripe_redirected'\n  | 'completed'\n  | 'expired'\n  | 'cancelled';\n\nexport interface CheckoutStartInput {\n  /** Slug do produto no catálogo (ex: `neetru-pulse`). */\n  productId: string;\n  /** Slug do plano no catálogo do produto (ex: `pro_monthly`). */\n  planId: string;\n  /** Pra onde o produto SaaS quer voltar pós-checkout. https obrigatório (ou http://localhost em dev). */\n  callbackUrl: string;\n  /** Override pra checkout em nome de uma org. Default: PF do uid logado. */\n  tenantType?: CheckoutTenantType;\n  /** Quando `tenantType='pj'`, id da org. Ignorado quando PF. */\n  tenantId?: string;\n  /**\n   * Em browsers, default `true` — SDK faz `window.location.href = redirectUrl`.\n   * Passe `false` se quiser controlar o redirect manualmente.\n   */\n  autoRedirect?: boolean;\n}\n\nexport interface CheckoutStartResult {\n  intentId: string;\n  redirectUrl: string;\n  status: CheckoutIntentStatus;\n  expiresAt: string;\n  /** True se KYC ainda precisa ser coletado no portal. UI pode mostrar hint. */\n  requiresKyc: boolean;\n}\n\nexport interface CheckoutIntentInfo {\n  intentId: string;\n  uid: string;\n  targetTenantId: string;\n  targetTenantType: CheckoutTenantType;\n  productId: string;\n  planId: string;\n  callbackUrl: string;\n  status: CheckoutIntentStatus;\n  /** Stripe Checkout Session id quando avançou pra `stripe_redirected`. */\n  stripeSessionId?: string | null;\n  expiresAt: string;\n  /** True se já passou `expiresAt` mas Core ainda não marcou expired. */\n  isStale?: boolean;\n}\n\nexport interface CheckoutNamespace {\n  /**\n   * Inicia checkout. Em browser, redireciona automaticamente pro portal.\n   * Em Node/SSR, retorna o resultado sem efeitos colaterais — caller decide\n   * o que fazer com `redirectUrl`.\n   *\n   * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.\n   */\n  start(input: CheckoutStartInput): Promise<CheckoutStartResult>;\n  /** Lê estado atual do intent (Core). */\n  get(intentId: string): Promise<CheckoutIntentInfo>;\n  /** Cancela um intent que ainda não virou `stripe_redirected`. */\n  cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }>;\n}\n\n// ─── Implementação real (HTTP) ─────────────────────────────────────────────\n\ninterface RawStartCheckoutResponse {\n  ok?: boolean;\n  intentId?: string;\n  redirectUrl?: string;\n  status?: string;\n  expiresAt?: string;\n  requiresKyc?: boolean;\n}\n\ninterface RawGetCheckoutResponse {\n  ok?: boolean;\n  intent?: {\n    intentId?: string;\n    uid?: string;\n    targetTenantId?: string;\n    targetTenantType?: string;\n    productId?: string;\n    planId?: string;\n    callbackUrl?: string;\n    status?: string;\n    stripeSessionId?: string | null;\n    expiresAt?: string;\n  };\n  isStale?: boolean;\n}\n\nfunction parseStartResponse(raw: unknown): CheckoutStartResult {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.start response is not an object');\n  }\n  const r = raw as RawStartCheckoutResponse;\n  if (typeof r.intentId !== 'string' || !r.intentId) {\n    throw new NeetruError('invalid_response', 'checkout.start response missing intentId');\n  }\n  if (typeof r.redirectUrl !== 'string' || !r.redirectUrl) {\n    throw new NeetruError('invalid_response', 'checkout.start response missing redirectUrl');\n  }\n  return {\n    intentId: r.intentId,\n    redirectUrl: r.redirectUrl,\n    status: (r.status as CheckoutIntentStatus | undefined) ?? 'pending',\n    expiresAt: typeof r.expiresAt === 'string' ? r.expiresAt : new Date().toISOString(),\n    requiresKyc: r.requiresKyc === true,\n  };\n}\n\nfunction parseGetResponse(raw: unknown): CheckoutIntentInfo {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.get response is not an object');\n  }\n  const r = raw as RawGetCheckoutResponse;\n  const intent = r.intent;\n  if (!intent || typeof intent !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.get response missing intent');\n  }\n  if (typeof intent.intentId !== 'string') {\n    throw new NeetruError('invalid_response', 'checkout.get response missing intentId');\n  }\n  return {\n    intentId: intent.intentId,\n    uid: intent.uid ?? '',\n    targetTenantId: intent.targetTenantId ?? '',\n    targetTenantType: (intent.targetTenantType as CheckoutTenantType | undefined) ?? 'pf',\n    productId: intent.productId ?? '',\n    planId: intent.planId ?? '',\n    callbackUrl: intent.callbackUrl ?? '',\n    status: (intent.status as CheckoutIntentStatus | undefined) ?? 'pending',\n    stripeSessionId: intent.stripeSessionId ?? null,\n    expiresAt: intent.expiresAt ?? new Date().toISOString(),\n    isStale: r.isStale === true,\n  };\n}\n\n/**\n * Detecta se estamos em browser context. Em SSR / Node / Edge, `window`\n * pode não existir — fazemos check defensivo.\n */\nfunction inBrowser(): boolean {\n  try {\n    return (\n      typeof globalThis !== 'undefined' &&\n      typeof (globalThis as { window?: { location?: { href?: string } } }).window !== 'undefined' &&\n      typeof globalThis.location !== 'undefined' &&\n      typeof globalThis.location.assign === 'function'\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction performRedirect(url: string): void {\n  try {\n    globalThis.location.assign(url);\n  } catch {\n    /* noop em runtimes sem location.assign — caller decide */\n  }\n}\n\n/**\n * Implementação HTTP real. Posta no Core, parse response, redireciona se browser.\n */\nfunction createHttpCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\n  return {\n    async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\n      if (!input?.productId) {\n        throw new NeetruError('validation_failed', 'checkout.start: productId is required');\n      }\n      if (!input?.planId) {\n        throw new NeetruError('validation_failed', 'checkout.start: planId is required');\n      }\n      if (!input?.callbackUrl) {\n        throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\n      }\n\n      const body: Record<string, unknown> = {\n        productId: input.productId,\n        planId: input.planId,\n        callbackUrl: input.callbackUrl,\n      };\n      if (input.tenantType) body.targetTenantType = input.tenantType;\n      if (input.tenantId) body.targetTenantId = input.tenantId;\n\n      const raw = await httpRequest<RawStartCheckoutResponse>(config, {\n        method: 'POST',\n        path: '/api/v1/checkout/intents',\n        body,\n        requireAuth: true,\n      });\n      const result = parseStartResponse(raw);\n\n      const shouldRedirect = input.autoRedirect !== false;\n      if (shouldRedirect && inBrowser()) {\n        performRedirect(result.redirectUrl);\n      }\n      return result;\n    },\n\n    async get(intentId: string): Promise<CheckoutIntentInfo> {\n      if (!intentId || typeof intentId !== 'string') {\n        throw new NeetruError('validation_failed', 'checkout.get: intentId is required');\n      }\n      const raw = await httpRequest<RawGetCheckoutResponse>(config, {\n        method: 'GET',\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\n        requireAuth: true,\n      });\n      return parseGetResponse(raw);\n    },\n\n    async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\n      if (!intentId || typeof intentId !== 'string') {\n        throw new NeetruError('validation_failed', 'checkout.cancel: intentId is required');\n      }\n      const raw = await httpRequest<{ ok?: boolean; alreadyCancelled?: boolean }>(config, {\n        method: 'DELETE',\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\n        requireAuth: true,\n      });\n      return {\n        ok: true,\n        alreadyCancelled: (raw as { alreadyCancelled?: boolean })?.alreadyCancelled === true,\n      };\n    },\n  };\n}\n\n// ─── Mock dev (sem network) ─────────────────────────────────────────────────\n\n/**\n * Mock dev — retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`\n * sem tocar no Core. Útil pra dev externo SaaS testar UI/redirect sem precisar\n * de Bearer token Neetru.\n *\n * Dev mode persiste intents em mapa in-memory pro `get`/`cancel` retornarem\n * resultado consistente.\n */\nexport class MockCheckout implements CheckoutNamespace {\n  private readonly intents = new Map<string, CheckoutIntentInfo>();\n\n  async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\n    if (!input?.productId) {\n      throw new NeetruError('validation_failed', 'checkout.start: productId is required');\n    }\n    if (!input?.planId) {\n      throw new NeetruError('validation_failed', 'checkout.start: planId is required');\n    }\n    if (!input?.callbackUrl) {\n      throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\n    }\n\n    const intentId = `chk_mock_${Math.random().toString(36).slice(2, 10)}`;\n    const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n    const redirectUrl = `https://localhost:9003/portal/checkout/${intentId}`;\n\n    this.intents.set(intentId, {\n      intentId,\n      uid: 'dev-fixture-uid',\n      targetTenantId: input.tenantId ?? 'dev-fixture-uid',\n      targetTenantType: input.tenantType ?? 'pf',\n      productId: input.productId,\n      planId: input.planId,\n      callbackUrl: input.callbackUrl,\n      status: 'pending',\n      stripeSessionId: null,\n      expiresAt,\n    });\n\n    return {\n      intentId,\n      redirectUrl,\n      status: 'pending',\n      expiresAt,\n      requiresKyc: false,\n    };\n  }\n\n  async get(intentId: string): Promise<CheckoutIntentInfo> {\n    const found = this.intents.get(intentId);\n    if (!found) {\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\n    }\n    return { ...found };\n  }\n\n  async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\n    const found = this.intents.get(intentId);\n    if (!found) {\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\n    }\n    const alreadyCancelled = found.status === 'cancelled';\n    this.intents.set(intentId, { ...found, status: 'cancelled' });\n    return { ok: true, alreadyCancelled };\n  }\n}\n\n// ─── Factory ────────────────────────────────────────────────────────────────\n\nexport function createCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\n  if (config.env === 'dev') return new MockCheckout();\n  return createHttpCheckoutNamespace(config);\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/checkout.ts"],"names":["err","message"],"mappings":";;;AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;ACzFA,SAAS,mBAAmB,GAAA,EAAmC;AAC7D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAC,EAAE,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,IAAY,CAAC,EAAE,WAAA,EAAa;AACvD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,6CAA6C,CAAA;AAAA,EACzF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,MAAA,EAAS,EAAE,MAAA,IAA+C,SAAA;AAAA,IAC1D,SAAA,EAAW,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,GAAW,EAAE,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClF,WAAA,EAAa,EAAE,WAAA,KAAgB;AAAA,GACjC;AACF;AAEA,SAAS,iBAAiB,GAAA,EAAkC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,sCAAsC,CAAA;AAAA,EAClF;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,GAAA,EAAK,OAAO,GAAA,IAAO,EAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,cAAA,IAAkB,EAAA;AAAA,IACzC,gBAAA,EAAmB,OAAO,gBAAA,IAAuD,IAAA;AAAA,IACjF,SAAA,EAAW,OAAO,SAAA,IAAa,EAAA;AAAA,IAC/B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,WAAA,EAAa,OAAO,WAAA,IAAe,EAAA;AAAA,IACnC,MAAA,EAAS,OAAO,MAAA,IAA+C,SAAA;AAAA,IAC/D,eAAA,EAAiB,OAAO,eAAA,IAAmB,IAAA;AAAA,IAC3C,WAAW,MAAA,CAAO,SAAA,IAAA,iBAAa,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,IACtD,OAAA,EAAS,EAAE,OAAA,KAAY;AAAA,GACzB;AACF;AAMA,SAAS,SAAA,GAAqB;AAC5B,EAAA,IAAI;AACF,IAAA,OACE,OAAO,UAAA,KAAe,WAAA,IACtB,OAAQ,WAA6D,MAAA,KAAW,WAAA,IAChF,OAAO,UAAA,CAAW,QAAA,KAAa,WAAA,IAC/B,OAAO,UAAA,CAAW,SAAS,MAAA,KAAW,UAAA;AAAA,EAE1C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI;AACF,IAAA,UAAA,CAAW,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAKA,SAAS,4BAA4B,MAAA,EAA2C;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,MAAM,KAAA,EAAyD;AACnE,MAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,MACtF;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,aAAa,KAAA,CAAM;AAAA,OACrB;AACA,MAAA,IAAI,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,gBAAA,GAAmB,KAAA,CAAM,UAAA;AACpD,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,cAAA,GAAiB,KAAA,CAAM,QAAA;AAEhD,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAsC,MAAA,EAAQ;AAAA,QAC9D,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,0BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,mBAAmB,GAAG,CAAA;AAErC,MAAA,MAAM,cAAA,GAAiB,MAAM,YAAA,KAAiB,KAAA;AAC9C,MAAA,IAAI,cAAA,IAAkB,WAAU,EAAG;AACjC,QAAA,eAAA,CAAgB,OAAO,WAAW,CAAA;AAAA,MACpC;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO,iBAAiB,GAAG,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA0D,MAAA,EAAQ;AAAA,QAClF,MAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,gBAAA,EAAmB,KAAwC,gBAAA,KAAqB;AAAA,OAClF;AAAA,IACF;AAAA,GACF;AACF;AAYO,IAAM,eAAN,MAAgD;AAAA,EACpC,OAAA,uBAAc,GAAA,EAAgC;AAAA,EAE/D,MAAM,MAAM,KAAA,EAAyD;AACnE,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,IACjF;AACA,IAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,IACtF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,SAAA,EAAY,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACpE,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA,CAAE,WAAA,EAAY;AACpE,IAAA,MAAM,WAAA,GAAc,0CAA0C,QAAQ,CAAA,CAAA;AAEtE,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU;AAAA,MACzB,QAAA;AAAA,MACA,GAAA,EAAK,iBAAA;AAAA,MACL,cAAA,EAAgB,MAAM,QAAA,IAAY,iBAAA;AAAA,MAClC,gBAAA,EAAkB,MAAM,UAAA,IAAc,IAAA;AAAA,MACtC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,eAAA,EAAiB,IAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,WAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA;AAAA,MACA,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,EAAE,GAAG,KAAA,EAAM;AAAA,EACpB;AAAA,EAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,KAAW,WAAA;AAC1C,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,aAAa,CAAA;AAC5D,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,gBAAA,EAAiB;AAAA,EACtC;AACF;AAIO,SAAS,wBAAwB,MAAA,EAA2C;AACjF,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,KAAA,EAAO,OAAO,IAAI,YAAA,EAAa;AAClD,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"checkout.cjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\r\n *     com `retries: 0`.\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\r\n   * desativar (útil em operações não-idempotentes específicas).\r\n   */\r\n  retries?: number;\r\n}\r\n\r\nconst DEFAULT_RETRIES = 2;\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n */\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return delta;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/** Mapeamento status → code estável do NeetruError. */\r\nfunction statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    const body = (await safeJson(res)) as\r\n      | { error?: { code?: string; message?: string } | string }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    if (body && typeof body === 'object' && 'error' in body) {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n      }\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Checkout namespace (v1.1) — `client.checkout.*`\r\n *\r\n * Fluxo canônico (vide `docs/FLUXO_SIGNUP_BILLING_CHECKOUT.md` §6):\r\n *   1. SaaS produto chama `client.checkout.start({productId, planId, callbackUrl})`.\r\n *   2. SDK posta em `POST /api/v1/checkout/intents` (Bearer access_token OIDC).\r\n *   3. Core cria `checkout_intents/{intentId}` (TTL 15min) + retorna `redirectUrl`.\r\n *   4. Em browser, SDK redireciona automaticamente pra `redirectUrl`. Em\r\n *      Node/SSR, retorna o objeto `{intentId, redirectUrl}` sem redirect.\r\n *   5. Portal (`minhaconta.neetru.com/portal/kyc/{intentId}`) coleta KYC + cartão.\r\n *   6. Usuário volta pra `callbackUrl?status=success&intentId=...` quando completo.\r\n *\r\n * **Dev mode** (`NEETRU_ENV=dev`): `start()` retorna URL fake sem network call.\r\n * Útil pra dev externo SaaS testar UI sem provisionar conta Neetru.\r\n *\r\n * **Estabilidade**: minor bump v1.0 → v1.1 (feature add, sem breaking).\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n// ─── Types públicos ─────────────────────────────────────────────────────────\r\n\r\n/** Tipo do tenant alvo da subscription (PF=uid, PJ=orgId). */\r\nexport type CheckoutTenantType = 'pf' | 'pj';\r\n\r\n/** Status do `checkout_intents/{intentId}` no Core. */\r\nexport type CheckoutIntentStatus =\r\n  | 'pending'\r\n  | 'kyc_in_progress'\r\n  | 'stripe_redirected'\r\n  | 'completed'\r\n  | 'expired'\r\n  | 'cancelled';\r\n\r\nexport interface CheckoutStartInput {\r\n  /** Slug do produto no catálogo (ex: `neetru-pulse`). */\r\n  productId: string;\r\n  /** Slug do plano no catálogo do produto (ex: `pro_monthly`). */\r\n  planId: string;\r\n  /** Pra onde o produto SaaS quer voltar pós-checkout. https obrigatório (ou http://localhost em dev). */\r\n  callbackUrl: string;\r\n  /** Override pra checkout em nome de uma org. Default: PF do uid logado. */\r\n  tenantType?: CheckoutTenantType;\r\n  /** Quando `tenantType='pj'`, id da org. Ignorado quando PF. */\r\n  tenantId?: string;\r\n  /**\r\n   * Em browsers, default `true` — SDK faz `window.location.href = redirectUrl`.\r\n   * Passe `false` se quiser controlar o redirect manualmente.\r\n   */\r\n  autoRedirect?: boolean;\r\n}\r\n\r\nexport interface CheckoutStartResult {\r\n  intentId: string;\r\n  redirectUrl: string;\r\n  status: CheckoutIntentStatus;\r\n  expiresAt: string;\r\n  /** True se KYC ainda precisa ser coletado no portal. UI pode mostrar hint. */\r\n  requiresKyc: boolean;\r\n}\r\n\r\nexport interface CheckoutIntentInfo {\r\n  intentId: string;\r\n  uid: string;\r\n  targetTenantId: string;\r\n  targetTenantType: CheckoutTenantType;\r\n  productId: string;\r\n  planId: string;\r\n  callbackUrl: string;\r\n  status: CheckoutIntentStatus;\r\n  /** Stripe Checkout Session id quando avançou pra `stripe_redirected`. */\r\n  stripeSessionId?: string | null;\r\n  expiresAt: string;\r\n  /** True se já passou `expiresAt` mas Core ainda não marcou expired. */\r\n  isStale?: boolean;\r\n}\r\n\r\nexport interface CheckoutNamespace {\r\n  /**\r\n   * Inicia checkout. Em browser, redireciona automaticamente pro portal.\r\n   * Em Node/SSR, retorna o resultado sem efeitos colaterais — caller decide\r\n   * o que fazer com `redirectUrl`.\r\n   *\r\n   * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.\r\n   */\r\n  start(input: CheckoutStartInput): Promise<CheckoutStartResult>;\r\n  /** Lê estado atual do intent (Core). */\r\n  get(intentId: string): Promise<CheckoutIntentInfo>;\r\n  /** Cancela um intent que ainda não virou `stripe_redirected`. */\r\n  cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }>;\r\n}\r\n\r\n// ─── Implementação real (HTTP) ─────────────────────────────────────────────\r\n\r\ninterface RawStartCheckoutResponse {\r\n  ok?: boolean;\r\n  intentId?: string;\r\n  redirectUrl?: string;\r\n  status?: string;\r\n  expiresAt?: string;\r\n  requiresKyc?: boolean;\r\n}\r\n\r\ninterface RawGetCheckoutResponse {\r\n  ok?: boolean;\r\n  intent?: {\r\n    intentId?: string;\r\n    uid?: string;\r\n    targetTenantId?: string;\r\n    targetTenantType?: string;\r\n    productId?: string;\r\n    planId?: string;\r\n    callbackUrl?: string;\r\n    status?: string;\r\n    stripeSessionId?: string | null;\r\n    expiresAt?: string;\r\n  };\r\n  isStale?: boolean;\r\n}\r\n\r\nfunction parseStartResponse(raw: unknown): CheckoutStartResult {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.start response is not an object');\r\n  }\r\n  const r = raw as RawStartCheckoutResponse;\r\n  if (typeof r.intentId !== 'string' || !r.intentId) {\r\n    throw new NeetruError('invalid_response', 'checkout.start response missing intentId');\r\n  }\r\n  if (typeof r.redirectUrl !== 'string' || !r.redirectUrl) {\r\n    throw new NeetruError('invalid_response', 'checkout.start response missing redirectUrl');\r\n  }\r\n  return {\r\n    intentId: r.intentId,\r\n    redirectUrl: r.redirectUrl,\r\n    status: (r.status as CheckoutIntentStatus | undefined) ?? 'pending',\r\n    expiresAt: typeof r.expiresAt === 'string' ? r.expiresAt : new Date().toISOString(),\r\n    requiresKyc: r.requiresKyc === true,\r\n  };\r\n}\r\n\r\nfunction parseGetResponse(raw: unknown): CheckoutIntentInfo {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response is not an object');\r\n  }\r\n  const r = raw as RawGetCheckoutResponse;\r\n  const intent = r.intent;\r\n  if (!intent || typeof intent !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response missing intent');\r\n  }\r\n  if (typeof intent.intentId !== 'string') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response missing intentId');\r\n  }\r\n  return {\r\n    intentId: intent.intentId,\r\n    uid: intent.uid ?? '',\r\n    targetTenantId: intent.targetTenantId ?? '',\r\n    targetTenantType: (intent.targetTenantType as CheckoutTenantType | undefined) ?? 'pf',\r\n    productId: intent.productId ?? '',\r\n    planId: intent.planId ?? '',\r\n    callbackUrl: intent.callbackUrl ?? '',\r\n    status: (intent.status as CheckoutIntentStatus | undefined) ?? 'pending',\r\n    stripeSessionId: intent.stripeSessionId ?? null,\r\n    expiresAt: intent.expiresAt ?? new Date().toISOString(),\r\n    isStale: r.isStale === true,\r\n  };\r\n}\r\n\r\n/**\r\n * Detecta se estamos em browser context. Em SSR / Node / Edge, `window`\r\n * pode não existir — fazemos check defensivo.\r\n */\r\nfunction inBrowser(): boolean {\r\n  try {\r\n    return (\r\n      typeof globalThis !== 'undefined' &&\r\n      typeof (globalThis as { window?: { location?: { href?: string } } }).window !== 'undefined' &&\r\n      typeof globalThis.location !== 'undefined' &&\r\n      typeof globalThis.location.assign === 'function'\r\n    );\r\n  } catch {\r\n    return false;\r\n  }\r\n}\r\n\r\nfunction performRedirect(url: string): void {\r\n  try {\r\n    globalThis.location.assign(url);\r\n  } catch {\r\n    /* noop em runtimes sem location.assign — caller decide */\r\n  }\r\n}\r\n\r\n/**\r\n * Implementação HTTP real. Posta no Core, parse response, redireciona se browser.\r\n */\r\nfunction createHttpCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\r\n  return {\r\n    async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\r\n      if (!input?.productId) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: productId is required');\r\n      }\r\n      if (!input?.planId) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: planId is required');\r\n      }\r\n      if (!input?.callbackUrl) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\r\n      }\r\n\r\n      const body: Record<string, unknown> = {\r\n        productId: input.productId,\r\n        planId: input.planId,\r\n        callbackUrl: input.callbackUrl,\r\n      };\r\n      if (input.tenantType) body.targetTenantType = input.tenantType;\r\n      if (input.tenantId) body.targetTenantId = input.tenantId;\r\n\r\n      const raw = await httpRequest<RawStartCheckoutResponse>(config, {\r\n        method: 'POST',\r\n        path: '/api/v1/checkout/intents',\r\n        body,\r\n        requireAuth: true,\r\n      });\r\n      const result = parseStartResponse(raw);\r\n\r\n      const shouldRedirect = input.autoRedirect !== false;\r\n      if (shouldRedirect && inBrowser()) {\r\n        performRedirect(result.redirectUrl);\r\n      }\r\n      return result;\r\n    },\r\n\r\n    async get(intentId: string): Promise<CheckoutIntentInfo> {\r\n      if (!intentId || typeof intentId !== 'string') {\r\n        throw new NeetruError('validation_failed', 'checkout.get: intentId is required');\r\n      }\r\n      const raw = await httpRequest<RawGetCheckoutResponse>(config, {\r\n        method: 'GET',\r\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\r\n        requireAuth: true,\r\n      });\r\n      return parseGetResponse(raw);\r\n    },\r\n\r\n    async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\r\n      if (!intentId || typeof intentId !== 'string') {\r\n        throw new NeetruError('validation_failed', 'checkout.cancel: intentId is required');\r\n      }\r\n      const raw = await httpRequest<{ ok?: boolean; alreadyCancelled?: boolean }>(config, {\r\n        method: 'DELETE',\r\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\r\n        requireAuth: true,\r\n      });\r\n      return {\r\n        ok: true,\r\n        alreadyCancelled: (raw as { alreadyCancelled?: boolean })?.alreadyCancelled === true,\r\n      };\r\n    },\r\n  };\r\n}\r\n\r\n// ─── Mock dev (sem network) ─────────────────────────────────────────────────\r\n\r\n/**\r\n * Mock dev — retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`\r\n * sem tocar no Core. Útil pra dev externo SaaS testar UI/redirect sem precisar\r\n * de Bearer token Neetru.\r\n *\r\n * Dev mode persiste intents em mapa in-memory pro `get`/`cancel` retornarem\r\n * resultado consistente.\r\n */\r\nexport class MockCheckout implements CheckoutNamespace {\r\n  private readonly intents = new Map<string, CheckoutIntentInfo>();\r\n\r\n  async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\r\n    if (!input?.productId) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: productId is required');\r\n    }\r\n    if (!input?.planId) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: planId is required');\r\n    }\r\n    if (!input?.callbackUrl) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\r\n    }\r\n\r\n    const intentId = `chk_mock_${Math.random().toString(36).slice(2, 10)}`;\r\n    const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\r\n    const redirectUrl = `https://localhost:9003/portal/checkout/${intentId}`;\r\n\r\n    this.intents.set(intentId, {\r\n      intentId,\r\n      uid: 'dev-fixture-uid',\r\n      targetTenantId: input.tenantId ?? 'dev-fixture-uid',\r\n      targetTenantType: input.tenantType ?? 'pf',\r\n      productId: input.productId,\r\n      planId: input.planId,\r\n      callbackUrl: input.callbackUrl,\r\n      status: 'pending',\r\n      stripeSessionId: null,\r\n      expiresAt,\r\n    });\r\n\r\n    return {\r\n      intentId,\r\n      redirectUrl,\r\n      status: 'pending',\r\n      expiresAt,\r\n      requiresKyc: false,\r\n    };\r\n  }\r\n\r\n  async get(intentId: string): Promise<CheckoutIntentInfo> {\r\n    const found = this.intents.get(intentId);\r\n    if (!found) {\r\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\r\n    }\r\n    return { ...found };\r\n  }\r\n\r\n  async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\r\n    const found = this.intents.get(intentId);\r\n    if (!found) {\r\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\r\n    }\r\n    const alreadyCancelled = found.status === 'cancelled';\r\n    this.intents.set(intentId, { ...found, status: 'cancelled' });\r\n    return { ok: true, alreadyCancelled };\r\n  }\r\n}\r\n\r\n// ─── Factory ────────────────────────────────────────────────────────────────\r\n\r\nexport function createCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\r\n  if (config.env === 'dev') return new MockCheckout();\r\n  return createHttpCheckoutNamespace(config);\r\n}\r\n"]}

package/dist/checkout.d.cts

@@ -1 +1,5 @@
-export { d as CheckoutIntentInfo, e as CheckoutIntentStatus, f as CheckoutNamespace, g as CheckoutStartInput, h as CheckoutStartResult, i as CheckoutTenantType, M as MockCheckout, V as createCheckoutNamespace } from './types-CQAfwqUS.cjs';
+export { c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, M as MockCheckout, a2 as createCheckoutNamespace } from './types-Kmt4y1FQ.cjs';
+import './collection-ref-BBvTTXoG.cjs';
+import '@neetru/realtime-protocol';
+import 'drizzle-orm/node-postgres';
+import './errors.cjs';

package/dist/checkout.d.ts

@@ -1 +1,5 @@
-export { d as CheckoutIntentInfo, e as CheckoutIntentStatus, f as CheckoutNamespace, g as CheckoutStartInput, h as CheckoutStartResult, i as CheckoutTenantType, M as MockCheckout, V as createCheckoutNamespace } from './types-CQAfwqUS.js';
+export { c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, M as MockCheckout, a2 as createCheckoutNamespace } from './types-B1jylbMC.js';
+import './collection-ref-BBvTTXoG.js';
+import '@neetru/realtime-protocol';
+import 'drizzle-orm/node-postgres';
+import './errors.js';

package/dist/checkout.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/checkout.ts"],"names":["err","message"],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;ACzFA,SAAS,mBAAmB,GAAA,EAAmC;AAC7D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAC,EAAE,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,IAAY,CAAC,EAAE,WAAA,EAAa;AACvD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,6CAA6C,CAAA;AAAA,EACzF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,MAAA,EAAS,EAAE,MAAA,IAA+C,SAAA;AAAA,IAC1D,SAAA,EAAW,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,GAAW,EAAE,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClF,WAAA,EAAa,EAAE,WAAA,KAAgB;AAAA,GACjC;AACF;AAEA,SAAS,iBAAiB,GAAA,EAAkC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,sCAAsC,CAAA;AAAA,EAClF;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,GAAA,EAAK,OAAO,GAAA,IAAO,EAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,cAAA,IAAkB,EAAA;AAAA,IACzC,gBAAA,EAAmB,OAAO,gBAAA,IAAuD,IAAA;AAAA,IACjF,SAAA,EAAW,OAAO,SAAA,IAAa,EAAA;AAAA,IAC/B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,WAAA,EAAa,OAAO,WAAA,IAAe,EAAA;AAAA,IACnC,MAAA,EAAS,OAAO,MAAA,IAA+C,SAAA;AAAA,IAC/D,eAAA,EAAiB,OAAO,eAAA,IAAmB,IAAA;AAAA,IAC3C,WAAW,MAAA,CAAO,SAAA,IAAA,iBAAa,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,IACtD,OAAA,EAAS,EAAE,OAAA,KAAY;AAAA,GACzB;AACF;AAMA,SAAS,SAAA,GAAqB;AAC5B,EAAA,IAAI;AACF,IAAA,OACE,OAAO,UAAA,KAAe,WAAA,IACtB,OAAQ,WAA6D,MAAA,KAAW,WAAA,IAChF,OAAO,UAAA,CAAW,QAAA,KAAa,WAAA,IAC/B,OAAO,UAAA,CAAW,SAAS,MAAA,KAAW,UAAA;AAAA,EAE1C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI;AACF,IAAA,UAAA,CAAW,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAKA,SAAS,4BAA4B,MAAA,EAA2C;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,MAAM,KAAA,EAAyD;AACnE,MAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,MACtF;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,aAAa,KAAA,CAAM;AAAA,OACrB;AACA,MAAA,IAAI,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,gBAAA,GAAmB,KAAA,CAAM,UAAA;AACpD,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,cAAA,GAAiB,KAAA,CAAM,QAAA;AAEhD,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAsC,MAAA,EAAQ;AAAA,QAC9D,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,0BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,mBAAmB,GAAG,CAAA;AAErC,MAAA,MAAM,cAAA,GAAiB,MAAM,YAAA,KAAiB,KAAA;AAC9C,MAAA,IAAI,cAAA,IAAkB,WAAU,EAAG;AACjC,QAAA,eAAA,CAAgB,OAAO,WAAW,CAAA;AAAA,MACpC;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO,iBAAiB,GAAG,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA0D,MAAA,EAAQ;AAAA,QAClF,MAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,gBAAA,EAAmB,KAAwC,gBAAA,KAAqB;AAAA,OAClF;AAAA,IACF;AAAA,GACF;AACF;AAYO,IAAM,eAAN,MAAgD;AAAA,EACpC,OAAA,uBAAc,GAAA,EAAgC;AAAA,EAE/D,MAAM,MAAM,KAAA,EAAyD;AACnE,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,IACjF;AACA,IAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,IACtF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,SAAA,EAAY,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACpE,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA,CAAE,WAAA,EAAY;AACpE,IAAA,MAAM,WAAA,GAAc,0CAA0C,QAAQ,CAAA,CAAA;AAEtE,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU;AAAA,MACzB,QAAA;AAAA,MACA,GAAA,EAAK,iBAAA;AAAA,MACL,cAAA,EAAgB,MAAM,QAAA,IAAY,iBAAA;AAAA,MAClC,gBAAA,EAAkB,MAAM,UAAA,IAAc,IAAA;AAAA,MACtC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,eAAA,EAAiB,IAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,WAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA;AAAA,MACA,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,EAAE,GAAG,KAAA,EAAM;AAAA,EACpB;AAAA,EAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,KAAW,WAAA;AAC1C,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,aAAa,CAAA;AAC5D,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,gBAAA,EAAiB;AAAA,EACtC;AACF;AAIO,SAAS,wBAAwB,MAAA,EAA2C;AACjF,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,KAAA,EAAO,OAAO,IAAI,YAAA,EAAa;AAClD,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"checkout.mjs","sourcesContent":["/**\n * Erros tipados do SDK.\n *\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\n * por `.code` (string estável) sem parsing de message.\n */\n\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\nexport type NeetruErrorCode =\n  | 'invalid_config'\n  | 'missing_api_key'\n  | 'unauthorized'\n  | 'forbidden'\n  | 'not_found'\n  | 'rate_limited'\n  | 'validation_failed'\n  | 'network_error'\n  | 'invalid_response'\n  | 'server_error'\n  | 'unknown';\n\n/**\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\n *\n * @example\n * ```ts\n * try { await client.catalog.list(); }\n * catch (e) {\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\n * }\n * ```\n */\nexport class NeetruError extends Error {\n  public readonly code: NeetruErrorCode | string;\n  public readonly status?: number;\n  public readonly requestId?: string;\n\n  constructor(\n    code: NeetruErrorCode | string,\n    message: string,\n    status?: number,\n    requestId?: string,\n  ) {\n    super(message);\n    this.name = 'NeetruError';\n    this.code = code;\n    this.status = status;\n    this.requestId = requestId;\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\n    Object.setPrototypeOf(this, NeetruError.prototype);\n  }\n}\n","/**\n * HTTP transport interno do SDK.\n *\n * Responsabilidades:\n *   - Construir URL absoluta a partir de `baseUrl` + path\n *   - Injetar Bearer token quando `requireAuth=true`\n *   - Mapear status HTTP → `NeetruError` com `code` estável\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\n *     com `retries: 0`.\n */\nimport { NeetruError, type NeetruErrorCode } from './errors';\nimport type { ResolvedConfig } from './types';\n\n/** Opções da request HTTP. */\nexport interface HttpRequestOptions {\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\n  path: string;\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\n  query?: Record<string, string | number | boolean | undefined>;\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\n  body?: unknown;\n  /**\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\n   * se config.apiKey ausente. Default false.\n   */\n  requireAuth?: boolean;\n  /** Cabeçalhos extras. */\n  headers?: Record<string, string>;\n  /**\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\n   * desativar (útil em operações não-idempotentes específicas).\n   */\n  retries?: number;\n}\n\nconst DEFAULT_RETRIES = 2;\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\n  'rate_limited',\n  'server_error',\n  'network_error',\n]);\n\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\nfunction backoffMs(attempt: number): number {\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\n  return Math.max(50, Math.round(base + jitter));\n}\n\n/**\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\n * inválido. RFC 9110 §10.2.3.\n */\nfunction parseRetryAfter(value: string | null): number | null {\n  if (!value) return null;\n  const secs = Number(value);\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\n  const dateMs = Date.parse(value);\n  if (Number.isFinite(dateMs)) {\n    const delta = dateMs - Date.now();\n    if (delta > 0) return delta;\n  }\n  return null;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Mapeamento status → code estável do NeetruError. */\nfunction statusToCode(status: number): NeetruErrorCode {\n  if (status === 401) return 'unauthorized';\n  if (status === 403) return 'forbidden';\n  if (status === 404) return 'not_found';\n  if (status === 422 || status === 400) return 'validation_failed';\n  if (status === 429) return 'rate_limited';\n  if (status >= 500) return 'server_error';\n  return 'unknown';\n}\n\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\n  // Trim trailing slash em base e leading em path pra evitar `//`.\n  const base = baseUrl.replace(/\\/+$/, '');\n  const p = path.startsWith('/') ? path : `/${path}`;\n  const url = new URL(`${base}${p}`);\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined) continue;\n      url.searchParams.set(k, String(v));\n    }\n  }\n  return url.toString();\n}\n\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\nasync function safeJson(res: Response): Promise<unknown> {\n  const text = await res.text();\n  if (!text) return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\n * automático em códigos transientes (rate_limited/server_error/network_error)\n * conforme `opts.retries` (default 2 = 3 tentativas).\n */\nexport async function httpRequest<T>(\n  config: ResolvedConfig,\n  opts: HttpRequestOptions,\n): Promise<T> {\n  const method = opts.method ?? 'GET';\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\n\n  const headers: Record<string, string> = {\n    accept: 'application/json',\n    ...opts.headers,\n  };\n\n  if (opts.requireAuth) {\n    if (!config.apiKey) {\n      throw new NeetruError(\n        'missing_api_key',\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\n      );\n    }\n    headers.authorization = `Bearer ${config.apiKey}`;\n  }\n\n  // Body só é serializado uma vez — reusado entre tentativas.\n  const bodyString =\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\n      ? JSON.stringify(opts.body)\n      : undefined;\n  if (bodyString !== undefined) {\n    headers['content-type'] = 'application/json';\n  }\n\n  let lastError: NeetruError | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    const init: RequestInit = { method, headers };\n    if (bodyString !== undefined) init.body = bodyString;\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\n    // requer Node 18+ ou browsers recentes.\n    init.signal = AbortSignal.timeout(30_000);\n\n    let res: Response;\n    try {\n      res = await config.fetch(url, init);\n    } catch (err) {\n      const message =\n        err instanceof DOMException && err.name === 'TimeoutError'\n          ? 'Network error: timeout after 30s'\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\n      lastError = new NeetruError('network_error', message);\n      if (attempt < maxRetries) {\n        await sleep(backoffMs(attempt));\n        continue;\n      }\n      throw lastError;\n    }\n\n    const requestId =\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\n\n    if (res.ok) {\n      const parsed = await safeJson(res);\n      return parsed as T;\n    }\n\n    const body = (await safeJson(res)) as\n      | { error?: { code?: string; message?: string } | string }\n      | undefined;\n    let code: string = statusToCode(res.status);\n    let message = `HTTP ${res.status}`;\n    if (body && typeof body === 'object' && 'error' in body) {\n      const errField = body.error;\n      if (typeof errField === 'string') {\n        message = errField;\n      } else if (errField && typeof errField === 'object') {\n        if (typeof errField.code === 'string') code = errField.code;\n        if (typeof errField.message === 'string') message = errField.message;\n      }\n    }\n    const err = new NeetruError(code, message, res.status, requestId);\n    lastError = err;\n\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\n    if (isRetryable && attempt < maxRetries) {\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n      const delay = retryAfter ?? backoffMs(attempt);\n      await sleep(delay);\n      continue;\n    }\n    throw err;\n  }\n\n  // Unreachable — loop sempre retorna ou lança. Safety net.\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\n}\n","/**\n * Checkout namespace (v1.1) — `client.checkout.*`\n *\n * Fluxo canônico (vide `docs/FLUXO_SIGNUP_BILLING_CHECKOUT.md` §6):\n *   1. SaaS produto chama `client.checkout.start({productId, planId, callbackUrl})`.\n *   2. SDK posta em `POST /api/v1/checkout/intents` (Bearer access_token OIDC).\n *   3. Core cria `checkout_intents/{intentId}` (TTL 15min) + retorna `redirectUrl`.\n *   4. Em browser, SDK redireciona automaticamente pra `redirectUrl`. Em\n *      Node/SSR, retorna o objeto `{intentId, redirectUrl}` sem redirect.\n *   5. Portal (`minhaconta.neetru.com/portal/kyc/{intentId}`) coleta KYC + cartão.\n *   6. Usuário volta pra `callbackUrl?status=success&intentId=...` quando completo.\n *\n * **Dev mode** (`NEETRU_ENV=dev`): `start()` retorna URL fake sem network call.\n * Útil pra dev externo SaaS testar UI sem provisionar conta Neetru.\n *\n * **Estabilidade**: minor bump v1.0 → v1.1 (feature add, sem breaking).\n */\nimport { NeetruError } from './errors';\nimport { httpRequest } from './http';\nimport type { ResolvedConfig } from './types';\n\n// ─── Types públicos ─────────────────────────────────────────────────────────\n\n/** Tipo do tenant alvo da subscription (PF=uid, PJ=orgId). */\nexport type CheckoutTenantType = 'pf' | 'pj';\n\n/** Status do `checkout_intents/{intentId}` no Core. */\nexport type CheckoutIntentStatus =\n  | 'pending'\n  | 'kyc_in_progress'\n  | 'stripe_redirected'\n  | 'completed'\n  | 'expired'\n  | 'cancelled';\n\nexport interface CheckoutStartInput {\n  /** Slug do produto no catálogo (ex: `neetru-pulse`). */\n  productId: string;\n  /** Slug do plano no catálogo do produto (ex: `pro_monthly`). */\n  planId: string;\n  /** Pra onde o produto SaaS quer voltar pós-checkout. https obrigatório (ou http://localhost em dev). */\n  callbackUrl: string;\n  /** Override pra checkout em nome de uma org. Default: PF do uid logado. */\n  tenantType?: CheckoutTenantType;\n  /** Quando `tenantType='pj'`, id da org. Ignorado quando PF. */\n  tenantId?: string;\n  /**\n   * Em browsers, default `true` — SDK faz `window.location.href = redirectUrl`.\n   * Passe `false` se quiser controlar o redirect manualmente.\n   */\n  autoRedirect?: boolean;\n}\n\nexport interface CheckoutStartResult {\n  intentId: string;\n  redirectUrl: string;\n  status: CheckoutIntentStatus;\n  expiresAt: string;\n  /** True se KYC ainda precisa ser coletado no portal. UI pode mostrar hint. */\n  requiresKyc: boolean;\n}\n\nexport interface CheckoutIntentInfo {\n  intentId: string;\n  uid: string;\n  targetTenantId: string;\n  targetTenantType: CheckoutTenantType;\n  productId: string;\n  planId: string;\n  callbackUrl: string;\n  status: CheckoutIntentStatus;\n  /** Stripe Checkout Session id quando avançou pra `stripe_redirected`. */\n  stripeSessionId?: string | null;\n  expiresAt: string;\n  /** True se já passou `expiresAt` mas Core ainda não marcou expired. */\n  isStale?: boolean;\n}\n\nexport interface CheckoutNamespace {\n  /**\n   * Inicia checkout. Em browser, redireciona automaticamente pro portal.\n   * Em Node/SSR, retorna o resultado sem efeitos colaterais — caller decide\n   * o que fazer com `redirectUrl`.\n   *\n   * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.\n   */\n  start(input: CheckoutStartInput): Promise<CheckoutStartResult>;\n  /** Lê estado atual do intent (Core). */\n  get(intentId: string): Promise<CheckoutIntentInfo>;\n  /** Cancela um intent que ainda não virou `stripe_redirected`. */\n  cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }>;\n}\n\n// ─── Implementação real (HTTP) ─────────────────────────────────────────────\n\ninterface RawStartCheckoutResponse {\n  ok?: boolean;\n  intentId?: string;\n  redirectUrl?: string;\n  status?: string;\n  expiresAt?: string;\n  requiresKyc?: boolean;\n}\n\ninterface RawGetCheckoutResponse {\n  ok?: boolean;\n  intent?: {\n    intentId?: string;\n    uid?: string;\n    targetTenantId?: string;\n    targetTenantType?: string;\n    productId?: string;\n    planId?: string;\n    callbackUrl?: string;\n    status?: string;\n    stripeSessionId?: string | null;\n    expiresAt?: string;\n  };\n  isStale?: boolean;\n}\n\nfunction parseStartResponse(raw: unknown): CheckoutStartResult {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.start response is not an object');\n  }\n  const r = raw as RawStartCheckoutResponse;\n  if (typeof r.intentId !== 'string' || !r.intentId) {\n    throw new NeetruError('invalid_response', 'checkout.start response missing intentId');\n  }\n  if (typeof r.redirectUrl !== 'string' || !r.redirectUrl) {\n    throw new NeetruError('invalid_response', 'checkout.start response missing redirectUrl');\n  }\n  return {\n    intentId: r.intentId,\n    redirectUrl: r.redirectUrl,\n    status: (r.status as CheckoutIntentStatus | undefined) ?? 'pending',\n    expiresAt: typeof r.expiresAt === 'string' ? r.expiresAt : new Date().toISOString(),\n    requiresKyc: r.requiresKyc === true,\n  };\n}\n\nfunction parseGetResponse(raw: unknown): CheckoutIntentInfo {\n  if (!raw || typeof raw !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.get response is not an object');\n  }\n  const r = raw as RawGetCheckoutResponse;\n  const intent = r.intent;\n  if (!intent || typeof intent !== 'object') {\n    throw new NeetruError('invalid_response', 'checkout.get response missing intent');\n  }\n  if (typeof intent.intentId !== 'string') {\n    throw new NeetruError('invalid_response', 'checkout.get response missing intentId');\n  }\n  return {\n    intentId: intent.intentId,\n    uid: intent.uid ?? '',\n    targetTenantId: intent.targetTenantId ?? '',\n    targetTenantType: (intent.targetTenantType as CheckoutTenantType | undefined) ?? 'pf',\n    productId: intent.productId ?? '',\n    planId: intent.planId ?? '',\n    callbackUrl: intent.callbackUrl ?? '',\n    status: (intent.status as CheckoutIntentStatus | undefined) ?? 'pending',\n    stripeSessionId: intent.stripeSessionId ?? null,\n    expiresAt: intent.expiresAt ?? new Date().toISOString(),\n    isStale: r.isStale === true,\n  };\n}\n\n/**\n * Detecta se estamos em browser context. Em SSR / Node / Edge, `window`\n * pode não existir — fazemos check defensivo.\n */\nfunction inBrowser(): boolean {\n  try {\n    return (\n      typeof globalThis !== 'undefined' &&\n      typeof (globalThis as { window?: { location?: { href?: string } } }).window !== 'undefined' &&\n      typeof globalThis.location !== 'undefined' &&\n      typeof globalThis.location.assign === 'function'\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction performRedirect(url: string): void {\n  try {\n    globalThis.location.assign(url);\n  } catch {\n    /* noop em runtimes sem location.assign — caller decide */\n  }\n}\n\n/**\n * Implementação HTTP real. Posta no Core, parse response, redireciona se browser.\n */\nfunction createHttpCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\n  return {\n    async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\n      if (!input?.productId) {\n        throw new NeetruError('validation_failed', 'checkout.start: productId is required');\n      }\n      if (!input?.planId) {\n        throw new NeetruError('validation_failed', 'checkout.start: planId is required');\n      }\n      if (!input?.callbackUrl) {\n        throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\n      }\n\n      const body: Record<string, unknown> = {\n        productId: input.productId,\n        planId: input.planId,\n        callbackUrl: input.callbackUrl,\n      };\n      if (input.tenantType) body.targetTenantType = input.tenantType;\n      if (input.tenantId) body.targetTenantId = input.tenantId;\n\n      const raw = await httpRequest<RawStartCheckoutResponse>(config, {\n        method: 'POST',\n        path: '/api/v1/checkout/intents',\n        body,\n        requireAuth: true,\n      });\n      const result = parseStartResponse(raw);\n\n      const shouldRedirect = input.autoRedirect !== false;\n      if (shouldRedirect && inBrowser()) {\n        performRedirect(result.redirectUrl);\n      }\n      return result;\n    },\n\n    async get(intentId: string): Promise<CheckoutIntentInfo> {\n      if (!intentId || typeof intentId !== 'string') {\n        throw new NeetruError('validation_failed', 'checkout.get: intentId is required');\n      }\n      const raw = await httpRequest<RawGetCheckoutResponse>(config, {\n        method: 'GET',\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\n        requireAuth: true,\n      });\n      return parseGetResponse(raw);\n    },\n\n    async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\n      if (!intentId || typeof intentId !== 'string') {\n        throw new NeetruError('validation_failed', 'checkout.cancel: intentId is required');\n      }\n      const raw = await httpRequest<{ ok?: boolean; alreadyCancelled?: boolean }>(config, {\n        method: 'DELETE',\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\n        requireAuth: true,\n      });\n      return {\n        ok: true,\n        alreadyCancelled: (raw as { alreadyCancelled?: boolean })?.alreadyCancelled === true,\n      };\n    },\n  };\n}\n\n// ─── Mock dev (sem network) ─────────────────────────────────────────────────\n\n/**\n * Mock dev — retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`\n * sem tocar no Core. Útil pra dev externo SaaS testar UI/redirect sem precisar\n * de Bearer token Neetru.\n *\n * Dev mode persiste intents em mapa in-memory pro `get`/`cancel` retornarem\n * resultado consistente.\n */\nexport class MockCheckout implements CheckoutNamespace {\n  private readonly intents = new Map<string, CheckoutIntentInfo>();\n\n  async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\n    if (!input?.productId) {\n      throw new NeetruError('validation_failed', 'checkout.start: productId is required');\n    }\n    if (!input?.planId) {\n      throw new NeetruError('validation_failed', 'checkout.start: planId is required');\n    }\n    if (!input?.callbackUrl) {\n      throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\n    }\n\n    const intentId = `chk_mock_${Math.random().toString(36).slice(2, 10)}`;\n    const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\n    const redirectUrl = `https://localhost:9003/portal/checkout/${intentId}`;\n\n    this.intents.set(intentId, {\n      intentId,\n      uid: 'dev-fixture-uid',\n      targetTenantId: input.tenantId ?? 'dev-fixture-uid',\n      targetTenantType: input.tenantType ?? 'pf',\n      productId: input.productId,\n      planId: input.planId,\n      callbackUrl: input.callbackUrl,\n      status: 'pending',\n      stripeSessionId: null,\n      expiresAt,\n    });\n\n    return {\n      intentId,\n      redirectUrl,\n      status: 'pending',\n      expiresAt,\n      requiresKyc: false,\n    };\n  }\n\n  async get(intentId: string): Promise<CheckoutIntentInfo> {\n    const found = this.intents.get(intentId);\n    if (!found) {\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\n    }\n    return { ...found };\n  }\n\n  async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\n    const found = this.intents.get(intentId);\n    if (!found) {\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\n    }\n    const alreadyCancelled = found.status === 'cancelled';\n    this.intents.set(intentId, { ...found, status: 'cancelled' });\n    return { ok: true, alreadyCancelled };\n  }\n}\n\n// ─── Factory ────────────────────────────────────────────────────────────────\n\nexport function createCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\n  if (config.env === 'dev') return new MockCheckout();\n  return createHttpCheckoutNamespace(config);\n}\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/http.ts","../src/checkout.ts"],"names":["err","message"],"mappings":";AAgCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAEjB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACXA,IAAM,eAAA,GAAkB,CAAA;AACxB,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAMA,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,IAAA,IAAQ,GAAG,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACrE,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,KAAA,GAAQ,GAAG,OAAO,KAAA;AAAA,EACxB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,eAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAGhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,WAAW,IAAA,EAAM;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAAA,MAC/D;AAAA,IACF;AACA,IAAA,MAAM,MAAM,IAAI,WAAA,CAAY,MAAM,OAAA,EAAS,GAAA,CAAI,QAAQ,SAAS,CAAA;AAChE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;ACzFA,SAAS,mBAAmB,GAAA,EAAmC;AAC7D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAC,EAAE,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,0CAA0C,CAAA;AAAA,EACtF;AACA,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,IAAY,CAAC,EAAE,WAAA,EAAa;AACvD,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,6CAA6C,CAAA;AAAA,EACzF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,MAAA,EAAS,EAAE,MAAA,IAA+C,SAAA;AAAA,IAC1D,SAAA,EAAW,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,GAAW,EAAE,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClF,WAAA,EAAa,EAAE,WAAA,KAAgB;AAAA,GACjC;AACF;AAEA,SAAS,iBAAiB,GAAA,EAAkC;AAC1D,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACzC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,sCAAsC,CAAA;AAAA,EAClF;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,EAAU;AACvC,IAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,wCAAwC,CAAA;AAAA,EACpF;AACA,EAAA,OAAO;AAAA,IACL,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,GAAA,EAAK,OAAO,GAAA,IAAO,EAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,cAAA,IAAkB,EAAA;AAAA,IACzC,gBAAA,EAAmB,OAAO,gBAAA,IAAuD,IAAA;AAAA,IACjF,SAAA,EAAW,OAAO,SAAA,IAAa,EAAA;AAAA,IAC/B,MAAA,EAAQ,OAAO,MAAA,IAAU,EAAA;AAAA,IACzB,WAAA,EAAa,OAAO,WAAA,IAAe,EAAA;AAAA,IACnC,MAAA,EAAS,OAAO,MAAA,IAA+C,SAAA;AAAA,IAC/D,eAAA,EAAiB,OAAO,eAAA,IAAmB,IAAA;AAAA,IAC3C,WAAW,MAAA,CAAO,SAAA,IAAA,iBAAa,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,IACtD,OAAA,EAAS,EAAE,OAAA,KAAY;AAAA,GACzB;AACF;AAMA,SAAS,SAAA,GAAqB;AAC5B,EAAA,IAAI;AACF,IAAA,OACE,OAAO,UAAA,KAAe,WAAA,IACtB,OAAQ,WAA6D,MAAA,KAAW,WAAA,IAChF,OAAO,UAAA,CAAW,QAAA,KAAa,WAAA,IAC/B,OAAO,UAAA,CAAW,SAAS,MAAA,KAAW,UAAA;AAAA,EAE1C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,GAAA,EAAmB;AAC1C,EAAA,IAAI;AACF,IAAA,UAAA,CAAW,QAAA,CAAS,OAAO,GAAG,CAAA;AAAA,EAChC,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAKA,SAAS,4BAA4B,MAAA,EAA2C;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,MAAM,KAAA,EAAyD;AACnE,MAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,MACtF;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,aAAa,KAAA,CAAM;AAAA,OACrB;AACA,MAAA,IAAI,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,gBAAA,GAAmB,KAAA,CAAM,UAAA;AACpD,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,cAAA,GAAiB,KAAA,CAAM,QAAA;AAEhD,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAsC,MAAA,EAAQ;AAAA,QAC9D,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,0BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,mBAAmB,GAAG,CAAA;AAErC,MAAA,MAAM,cAAA,GAAiB,MAAM,YAAA,KAAiB,KAAA;AAC9C,MAAA,IAAI,cAAA,IAAkB,WAAU,EAAG;AACjC,QAAA,eAAA,CAAgB,OAAO,WAAW,CAAA;AAAA,MACpC;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,MACjF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAoC,MAAA,EAAQ;AAAA,QAC5D,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO,iBAAiB,GAAG,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,MAAA,IAAI,CAAC,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC7C,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,MACpF;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA0D,MAAA,EAAQ;AAAA,QAClF,MAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,CAAA,yBAAA,EAA4B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,QAC9D,WAAA,EAAa;AAAA,OACd,CAAA;AACD,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,gBAAA,EAAmB,KAAwC,gBAAA,KAAqB;AAAA,OAClF;AAAA,IACF;AAAA,GACF;AACF;AAYO,IAAM,eAAN,MAAgD;AAAA,EACpC,OAAA,uBAAc,GAAA,EAAgC;AAAA,EAE/D,MAAM,MAAM,KAAA,EAAyD;AACnE,IAAA,IAAI,CAAC,OAAO,SAAA,EAAW;AACrB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uCAAuC,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,IACjF;AACA,IAAA,IAAI,CAAC,OAAO,WAAA,EAAa;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yCAAyC,CAAA;AAAA,IACtF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,SAAA,EAAY,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AACpE,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA,CAAE,WAAA,EAAY;AACpE,IAAA,MAAM,WAAA,GAAc,0CAA0C,QAAQ,CAAA,CAAA;AAEtE,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU;AAAA,MACzB,QAAA;AAAA,MACA,GAAA,EAAK,iBAAA;AAAA,MACL,cAAA,EAAgB,MAAM,QAAA,IAAY,iBAAA;AAAA,MAClC,gBAAA,EAAkB,MAAM,UAAA,IAAc,IAAA;AAAA,MACtC,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,eAAA,EAAiB,IAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,WAAA;AAAA,MACA,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA;AAAA,MACA,WAAA,EAAa;AAAA,KACf;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,QAAA,EAA+C;AACvD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,EAAE,GAAG,KAAA,EAAM;AAAA,EACpB;AAAA,EAEA,MAAM,OAAO,QAAA,EAAoE;AAC/E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACvC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,IAAI,WAAA,CAAY,WAAA,EAAa,CAAA,YAAA,EAAe,QAAQ,CAAA,UAAA,CAAY,CAAA;AAAA,IACxE;AACA,IAAA,MAAM,gBAAA,GAAmB,MAAM,MAAA,KAAW,WAAA;AAC1C,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,QAAA,EAAU,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,aAAa,CAAA;AAC5D,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,gBAAA,EAAiB;AAAA,EACtC;AACF;AAIO,SAAS,wBAAwB,MAAA,EAA2C;AACjF,EAAA,IAAI,MAAA,CAAO,GAAA,KAAQ,KAAA,EAAO,OAAO,IAAI,YAAA,EAAa;AAClD,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"checkout.mjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente. Default 2 retries (3 tentativas no total). Caller opta-out\r\n *     com `retries: 0`.\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`). Default 2 (= 3 tentativas total). Caller passa `0` pra\r\n   * desativar (útil em operações não-idempotentes específicas).\r\n   */\r\n  retries?: number;\r\n}\r\n\r\nconst DEFAULT_RETRIES = 2;\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n */\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1000);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return delta;\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/** Mapeamento status → code estável do NeetruError. */\r\nfunction statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  const maxRetries = opts.retries ?? DEFAULT_RETRIES;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    const body = (await safeJson(res)) as\r\n      | { error?: { code?: string; message?: string } | string }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    if (body && typeof body === 'object' && 'error' in body) {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n      }\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Checkout namespace (v1.1) — `client.checkout.*`\r\n *\r\n * Fluxo canônico (vide `docs/FLUXO_SIGNUP_BILLING_CHECKOUT.md` §6):\r\n *   1. SaaS produto chama `client.checkout.start({productId, planId, callbackUrl})`.\r\n *   2. SDK posta em `POST /api/v1/checkout/intents` (Bearer access_token OIDC).\r\n *   3. Core cria `checkout_intents/{intentId}` (TTL 15min) + retorna `redirectUrl`.\r\n *   4. Em browser, SDK redireciona automaticamente pra `redirectUrl`. Em\r\n *      Node/SSR, retorna o objeto `{intentId, redirectUrl}` sem redirect.\r\n *   5. Portal (`minhaconta.neetru.com/portal/kyc/{intentId}`) coleta KYC + cartão.\r\n *   6. Usuário volta pra `callbackUrl?status=success&intentId=...` quando completo.\r\n *\r\n * **Dev mode** (`NEETRU_ENV=dev`): `start()` retorna URL fake sem network call.\r\n * Útil pra dev externo SaaS testar UI sem provisionar conta Neetru.\r\n *\r\n * **Estabilidade**: minor bump v1.0 → v1.1 (feature add, sem breaking).\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n// ─── Types públicos ─────────────────────────────────────────────────────────\r\n\r\n/** Tipo do tenant alvo da subscription (PF=uid, PJ=orgId). */\r\nexport type CheckoutTenantType = 'pf' | 'pj';\r\n\r\n/** Status do `checkout_intents/{intentId}` no Core. */\r\nexport type CheckoutIntentStatus =\r\n  | 'pending'\r\n  | 'kyc_in_progress'\r\n  | 'stripe_redirected'\r\n  | 'completed'\r\n  | 'expired'\r\n  | 'cancelled';\r\n\r\nexport interface CheckoutStartInput {\r\n  /** Slug do produto no catálogo (ex: `neetru-pulse`). */\r\n  productId: string;\r\n  /** Slug do plano no catálogo do produto (ex: `pro_monthly`). */\r\n  planId: string;\r\n  /** Pra onde o produto SaaS quer voltar pós-checkout. https obrigatório (ou http://localhost em dev). */\r\n  callbackUrl: string;\r\n  /** Override pra checkout em nome de uma org. Default: PF do uid logado. */\r\n  tenantType?: CheckoutTenantType;\r\n  /** Quando `tenantType='pj'`, id da org. Ignorado quando PF. */\r\n  tenantId?: string;\r\n  /**\r\n   * Em browsers, default `true` — SDK faz `window.location.href = redirectUrl`.\r\n   * Passe `false` se quiser controlar o redirect manualmente.\r\n   */\r\n  autoRedirect?: boolean;\r\n}\r\n\r\nexport interface CheckoutStartResult {\r\n  intentId: string;\r\n  redirectUrl: string;\r\n  status: CheckoutIntentStatus;\r\n  expiresAt: string;\r\n  /** True se KYC ainda precisa ser coletado no portal. UI pode mostrar hint. */\r\n  requiresKyc: boolean;\r\n}\r\n\r\nexport interface CheckoutIntentInfo {\r\n  intentId: string;\r\n  uid: string;\r\n  targetTenantId: string;\r\n  targetTenantType: CheckoutTenantType;\r\n  productId: string;\r\n  planId: string;\r\n  callbackUrl: string;\r\n  status: CheckoutIntentStatus;\r\n  /** Stripe Checkout Session id quando avançou pra `stripe_redirected`. */\r\n  stripeSessionId?: string | null;\r\n  expiresAt: string;\r\n  /** True se já passou `expiresAt` mas Core ainda não marcou expired. */\r\n  isStale?: boolean;\r\n}\r\n\r\nexport interface CheckoutNamespace {\r\n  /**\r\n   * Inicia checkout. Em browser, redireciona automaticamente pro portal.\r\n   * Em Node/SSR, retorna o resultado sem efeitos colaterais — caller decide\r\n   * o que fazer com `redirectUrl`.\r\n   *\r\n   * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.\r\n   */\r\n  start(input: CheckoutStartInput): Promise<CheckoutStartResult>;\r\n  /** Lê estado atual do intent (Core). */\r\n  get(intentId: string): Promise<CheckoutIntentInfo>;\r\n  /** Cancela um intent que ainda não virou `stripe_redirected`. */\r\n  cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }>;\r\n}\r\n\r\n// ─── Implementação real (HTTP) ─────────────────────────────────────────────\r\n\r\ninterface RawStartCheckoutResponse {\r\n  ok?: boolean;\r\n  intentId?: string;\r\n  redirectUrl?: string;\r\n  status?: string;\r\n  expiresAt?: string;\r\n  requiresKyc?: boolean;\r\n}\r\n\r\ninterface RawGetCheckoutResponse {\r\n  ok?: boolean;\r\n  intent?: {\r\n    intentId?: string;\r\n    uid?: string;\r\n    targetTenantId?: string;\r\n    targetTenantType?: string;\r\n    productId?: string;\r\n    planId?: string;\r\n    callbackUrl?: string;\r\n    status?: string;\r\n    stripeSessionId?: string | null;\r\n    expiresAt?: string;\r\n  };\r\n  isStale?: boolean;\r\n}\r\n\r\nfunction parseStartResponse(raw: unknown): CheckoutStartResult {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.start response is not an object');\r\n  }\r\n  const r = raw as RawStartCheckoutResponse;\r\n  if (typeof r.intentId !== 'string' || !r.intentId) {\r\n    throw new NeetruError('invalid_response', 'checkout.start response missing intentId');\r\n  }\r\n  if (typeof r.redirectUrl !== 'string' || !r.redirectUrl) {\r\n    throw new NeetruError('invalid_response', 'checkout.start response missing redirectUrl');\r\n  }\r\n  return {\r\n    intentId: r.intentId,\r\n    redirectUrl: r.redirectUrl,\r\n    status: (r.status as CheckoutIntentStatus | undefined) ?? 'pending',\r\n    expiresAt: typeof r.expiresAt === 'string' ? r.expiresAt : new Date().toISOString(),\r\n    requiresKyc: r.requiresKyc === true,\r\n  };\r\n}\r\n\r\nfunction parseGetResponse(raw: unknown): CheckoutIntentInfo {\r\n  if (!raw || typeof raw !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response is not an object');\r\n  }\r\n  const r = raw as RawGetCheckoutResponse;\r\n  const intent = r.intent;\r\n  if (!intent || typeof intent !== 'object') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response missing intent');\r\n  }\r\n  if (typeof intent.intentId !== 'string') {\r\n    throw new NeetruError('invalid_response', 'checkout.get response missing intentId');\r\n  }\r\n  return {\r\n    intentId: intent.intentId,\r\n    uid: intent.uid ?? '',\r\n    targetTenantId: intent.targetTenantId ?? '',\r\n    targetTenantType: (intent.targetTenantType as CheckoutTenantType | undefined) ?? 'pf',\r\n    productId: intent.productId ?? '',\r\n    planId: intent.planId ?? '',\r\n    callbackUrl: intent.callbackUrl ?? '',\r\n    status: (intent.status as CheckoutIntentStatus | undefined) ?? 'pending',\r\n    stripeSessionId: intent.stripeSessionId ?? null,\r\n    expiresAt: intent.expiresAt ?? new Date().toISOString(),\r\n    isStale: r.isStale === true,\r\n  };\r\n}\r\n\r\n/**\r\n * Detecta se estamos em browser context. Em SSR / Node / Edge, `window`\r\n * pode não existir — fazemos check defensivo.\r\n */\r\nfunction inBrowser(): boolean {\r\n  try {\r\n    return (\r\n      typeof globalThis !== 'undefined' &&\r\n      typeof (globalThis as { window?: { location?: { href?: string } } }).window !== 'undefined' &&\r\n      typeof globalThis.location !== 'undefined' &&\r\n      typeof globalThis.location.assign === 'function'\r\n    );\r\n  } catch {\r\n    return false;\r\n  }\r\n}\r\n\r\nfunction performRedirect(url: string): void {\r\n  try {\r\n    globalThis.location.assign(url);\r\n  } catch {\r\n    /* noop em runtimes sem location.assign — caller decide */\r\n  }\r\n}\r\n\r\n/**\r\n * Implementação HTTP real. Posta no Core, parse response, redireciona se browser.\r\n */\r\nfunction createHttpCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\r\n  return {\r\n    async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\r\n      if (!input?.productId) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: productId is required');\r\n      }\r\n      if (!input?.planId) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: planId is required');\r\n      }\r\n      if (!input?.callbackUrl) {\r\n        throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\r\n      }\r\n\r\n      const body: Record<string, unknown> = {\r\n        productId: input.productId,\r\n        planId: input.planId,\r\n        callbackUrl: input.callbackUrl,\r\n      };\r\n      if (input.tenantType) body.targetTenantType = input.tenantType;\r\n      if (input.tenantId) body.targetTenantId = input.tenantId;\r\n\r\n      const raw = await httpRequest<RawStartCheckoutResponse>(config, {\r\n        method: 'POST',\r\n        path: '/api/v1/checkout/intents',\r\n        body,\r\n        requireAuth: true,\r\n      });\r\n      const result = parseStartResponse(raw);\r\n\r\n      const shouldRedirect = input.autoRedirect !== false;\r\n      if (shouldRedirect && inBrowser()) {\r\n        performRedirect(result.redirectUrl);\r\n      }\r\n      return result;\r\n    },\r\n\r\n    async get(intentId: string): Promise<CheckoutIntentInfo> {\r\n      if (!intentId || typeof intentId !== 'string') {\r\n        throw new NeetruError('validation_failed', 'checkout.get: intentId is required');\r\n      }\r\n      const raw = await httpRequest<RawGetCheckoutResponse>(config, {\r\n        method: 'GET',\r\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\r\n        requireAuth: true,\r\n      });\r\n      return parseGetResponse(raw);\r\n    },\r\n\r\n    async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\r\n      if (!intentId || typeof intentId !== 'string') {\r\n        throw new NeetruError('validation_failed', 'checkout.cancel: intentId is required');\r\n      }\r\n      const raw = await httpRequest<{ ok?: boolean; alreadyCancelled?: boolean }>(config, {\r\n        method: 'DELETE',\r\n        path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,\r\n        requireAuth: true,\r\n      });\r\n      return {\r\n        ok: true,\r\n        alreadyCancelled: (raw as { alreadyCancelled?: boolean })?.alreadyCancelled === true,\r\n      };\r\n    },\r\n  };\r\n}\r\n\r\n// ─── Mock dev (sem network) ─────────────────────────────────────────────────\r\n\r\n/**\r\n * Mock dev — retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`\r\n * sem tocar no Core. Útil pra dev externo SaaS testar UI/redirect sem precisar\r\n * de Bearer token Neetru.\r\n *\r\n * Dev mode persiste intents em mapa in-memory pro `get`/`cancel` retornarem\r\n * resultado consistente.\r\n */\r\nexport class MockCheckout implements CheckoutNamespace {\r\n  private readonly intents = new Map<string, CheckoutIntentInfo>();\r\n\r\n  async start(input: CheckoutStartInput): Promise<CheckoutStartResult> {\r\n    if (!input?.productId) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: productId is required');\r\n    }\r\n    if (!input?.planId) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: planId is required');\r\n    }\r\n    if (!input?.callbackUrl) {\r\n      throw new NeetruError('validation_failed', 'checkout.start: callbackUrl is required');\r\n    }\r\n\r\n    const intentId = `chk_mock_${Math.random().toString(36).slice(2, 10)}`;\r\n    const expiresAt = new Date(Date.now() + 15 * 60 * 1000).toISOString();\r\n    const redirectUrl = `https://localhost:9003/portal/checkout/${intentId}`;\r\n\r\n    this.intents.set(intentId, {\r\n      intentId,\r\n      uid: 'dev-fixture-uid',\r\n      targetTenantId: input.tenantId ?? 'dev-fixture-uid',\r\n      targetTenantType: input.tenantType ?? 'pf',\r\n      productId: input.productId,\r\n      planId: input.planId,\r\n      callbackUrl: input.callbackUrl,\r\n      status: 'pending',\r\n      stripeSessionId: null,\r\n      expiresAt,\r\n    });\r\n\r\n    return {\r\n      intentId,\r\n      redirectUrl,\r\n      status: 'pending',\r\n      expiresAt,\r\n      requiresKyc: false,\r\n    };\r\n  }\r\n\r\n  async get(intentId: string): Promise<CheckoutIntentInfo> {\r\n    const found = this.intents.get(intentId);\r\n    if (!found) {\r\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\r\n    }\r\n    return { ...found };\r\n  }\r\n\r\n  async cancel(intentId: string): Promise<{ ok: true; alreadyCancelled: boolean }> {\r\n    const found = this.intents.get(intentId);\r\n    if (!found) {\r\n      throw new NeetruError('not_found', `Mock intent ${intentId} not found`);\r\n    }\r\n    const alreadyCancelled = found.status === 'cancelled';\r\n    this.intents.set(intentId, { ...found, status: 'cancelled' });\r\n    return { ok: true, alreadyCancelled };\r\n  }\r\n}\r\n\r\n// ─── Factory ────────────────────────────────────────────────────────────────\r\n\r\nexport function createCheckoutNamespace(config: ResolvedConfig): CheckoutNamespace {\r\n  if (config.env === 'dev') return new MockCheckout();\r\n  return createHttpCheckoutNamespace(config);\r\n}\r\n"]}