@neetru/sdk 3.4.7 → 3.6.0

package/dist/telemetry.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/idempotency.ts","../src/http.ts","../src/telemetry.ts"],"names":["err","message"],"mappings":";AAyDO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,WACA,MAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACrDO,SAAS,sBAAA,GAAiC;AAG/C,EAAA,MAAM,YACJ,OAAO,UAAA,KAAe,eAAe,QAAA,IAAY,UAAA,GAC5C,WAA0D,MAAA,GAC3D,MAAA;AACN,EAAA,IAAI,SAAA,IAAa,OAAO,SAAA,CAAU,UAAA,KAAe,UAAA,EAAY;AAC3D,IAAA,OAAO,UAAU,UAAA,EAAW;AAAA,EAC9B;AACA,EAAA,MAAM,IAAI,WAAA;AAAA,IACR,qBAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACJA,IAAM,aAAA,GAAwC;AAAA;AAAA;AAAA,EAG5C,CAAA,EAAG;AACL,CAAA;AAGA,SAAS,cAAc,CAAA,EAAmB;AACxC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA;AAC5B;AAMA,SAAS,aAAA,CAAc,GAAW,CAAA,EAAmB;AACnD,EAAA,MAAM,MAAA,GAAS,cAAc,CAAC,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,IAAI,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,GAAS,cAAc,CAAC,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,IAAI,MAAM,CAAA;AACrD,EAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,OAAO,MAAM,CAAA;AACjD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAK,CAAA,EAAA,EAAK;AAC5B,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,CAAC,CAAA,IAAK,CAAA;AACxB,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,CAAC,CAAA,IAAK,CAAA;AACxB,IAAA,IAAI,EAAA,KAAO,EAAA,EAAI,OAAO,EAAA,GAAK,EAAA;AAAA,EAC7B;AACA,EAAA,OAAO,CAAA;AACT;AAGA,SAAS,WAAA,GAAsB;AAC7B,EAAA,IAAI;AAIF,IAAA,MAAM,MAAO,UAAA,CAAmB,sBAAA;AAChC,IAAA,IAAI,GAAA,EAAK,OAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,GAAA,EAAK,EAAE,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,CAAA;AACT;AAGA,IAAM,iBAAA,uBAAwB,GAAA,EAAY;AAMnC,SAAS,uBAAuB,WAAA,EAA2B;AAChE,EAAA,IAAI,CAAC,WAAA,EAAa;AAClB,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,cAAc,QAAQ,CAAA;AACtC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,MAAM,QAAA,GAAW,cAAc,WAAW,CAAA;AAC1C,EAAA,IAAI,aAAA,CAAc,QAAA,EAAU,OAAO,CAAA,GAAI,CAAA,EAAG;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AACnC,IAAA,IAAI,CAAC,iBAAA,CAAkB,GAAA,CAAI,GAAG,CAAA,EAAG;AAC/B,MAAA,iBAAA,CAAkB,IAAI,GAAG,CAAA;AACzB,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,4CAAA,EAAsC,WAAW,CAAA,0CAAA,EAC1C,OAAO,oBAAoB,QAAQ,CAAA,qGAAA;AAAA,OAE5C;AAAA,IACF;AAAA,EACF;AACF;AAsCA,IAAM,oBAAA,GAAuB,CAAA;AAC7B,IAAM,qBAAA,GAAwB,CAAA;AAC9B,IAAM,+BAAe,IAAI,GAAA,CAAI,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAC5C,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAUA,IAAM,kBAAA,GAAqB,GAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,GAAG,kBAAkB,CAAA;AACnG,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,OAAO,kBAAkB,CAAA;AAAA,EAC1D;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAGA,SAAS,aAAa,MAAA,EAAiC;AACrD,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,UAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,cAAA,GAAiB,YAAA,CAAa,GAAA,CAAI,MAAM,IAC1C,oBAAA,GACA,qBAAA;AACJ,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,cAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,IAAA,MAAM,MACJ,OAAO,IAAA,CAAK,mBAAmB,QAAA,GAC3B,IAAA,CAAK,iBACL,sBAAA,EAAuB;AAC7B,IAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,GAAA;AAAA,EAC/B;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AAEV,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AACtD,MAAA,IAAI,WAAA,yBAAoC,WAAW,CAAA;AACnD,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AASA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAQhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAC7D,QAAA,IAAI,OAAO,QAAA,CAAS,MAAA,KAAW,QAAA,WAAmB,QAAA,CAAS,MAAA;AAAA,MAC7D,CAAA,MAAO;AAGL,QAAA,IAAI,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,SAAiB,IAAA,CAAK,IAAA;AAC/C,QAAA,IAAI,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,YAAoB,IAAA,CAAK,OAAA;AAAA,MACvD;AAGA,MAAA,IAAI,OAAO,IAAA,CAAK,MAAA,KAAW,QAAA,WAAmB,IAAA,CAAK,MAAA;AAAA,IACrD;AACA,IAAA,MAAM,GAAA,GAAM,IAAI,WAAA,CAAY,IAAA,EAAM,SAAS,GAAA,CAAI,MAAA,EAAQ,WAAW,MAAM,CAAA;AACxE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;ACpTA,IAAM,mBAAiD,CAAC,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,SAAS,OAAO,CAAA;AAGjG,SAAS,gBAAA,GAA4B;AACnC,EAAA,OAAO,OAAO,UAAA,KAAe,WAAA,IAAe,OAAQ,WAAoC,MAAA,KAAW,WAAA;AACrG;AAOA,SAAS,qBAAA,GAAgE;AACvE,EAAA,OAAO,gBAAA,EAAiB,GACpB,EAAE,IAAA,EAAM,oCAAA,EAAsC,WAAA,EAAa,KAAA,EAAM,GACjE,EAAE,IAAA,EAAM,6BAAA,EAA+B,WAAA,EAAa,IAAA,EAAK;AAC/D;AAEA,SAAS,WAAW,KAAA,EAA+E;AACjG,EAAA,QAAQ,KAAA;AAAO,IACb,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C,KAAK,MAAA;AAAQ,MAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA;AAAA,IAC7C,KAAK,MAAA;AAAQ,MAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA;AAAA,IAC7C,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C;AAAS,MAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AAAA;AAE5C;AAGA,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,eAAA,GAAkB,EAAA;AAEjB,SAAS,yBAAyB,MAAA,EAAwB;AAE/D,EAAA,MAAM,QAA+B,EAAC;AACtC,EAAA,IAAI,UAAA,GAAmD,IAAA;AAEvD,EAAA,IAAI,cAAA,GAAuC,IAAA;AAE3C,EAAA,eAAe,UAAA,GAA4B;AACzC,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AAGxB,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,CAAA,EAAG,MAAM,MAAM,CAAA;AAK1C,IAAA,MAAM,OAAO,OAAA,CAAQ,UAAA;AAAA,MACnB,KAAA,CAAM,GAAA,CAAI,OAAO,EAAA,KAAO;AACtB,QAAA,IAAI;AACF,UAAA,MAAM,IAAA,GAAgC,EAAE,IAAA,EAAM,EAAA,CAAG,IAAA,EAAK;AACtD,UAAA,MAAM,WAAA,GAAc,EAAA,CAAG,WAAA,IAAe,MAAA,CAAO,SAAA;AAC7C,UAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AACpC,UAAA,IAAI,EAAA,CAAG,UAAA,IAAc,OAAO,EAAA,CAAG,eAAe,QAAA,EAAU;AACtD,YAAA,IAAA,CAAK,aAAa,EAAA,CAAG,UAAA;AAAA,UACvB;AACA,UAAA,IAAI,EAAA,CAAG,SAAA,EAAW,IAAA,CAAK,SAAA,GAAY,EAAA,CAAG,SAAA;AACtC,UAAA,MAAM,YAAY,qBAAA,EAAsB;AACxC,UAAA,MAAM,YAA6B,MAAA,EAAQ;AAAA,YACzC,MAAA,EAAQ,MAAA;AAAA,YACR,MAAM,SAAA,CAAU,IAAA;AAAA,YAChB,IAAA;AAAA,YACA,aAAa,SAAA,CAAU,WAAA;AAAA,YACvB,OAAA,EAAS,CAAA;AAAA;AAAA;AAAA;AAAA,YAIT,cAAA,EAAgB;AAAA,WACjB,CAAA;AAAA,QACH,SAAS,GAAA,EAAK;AACZ,UAAA,IAAI,OAAO,YAAY,WAAA,EAAa;AAClC,YAAA,OAAA,CAAQ,IAAA,CAAK,qDAAA,EAAuD,EAAA,CAAG,IAAA,EAAM,GAAG,CAAA;AAAA,UAClF;AAAA,QACF;AAAA,MACF,CAAC;AAAA,KACH;AAEA,IAAA,cAAA,GAAiB,IAAA,CAAK,KAAK,MAAM;AAAE,MAAA,cAAA,GAAiB,IAAA;AAAA,IAAM,CAAC,CAAA;AAM3D,IAAA,MAAM,IAAA;AACN,IAAA,UAAA,GAAa,IAAA;AAEb,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,MAAA,aAAA,EAAc;AAAA,IAChB;AAAA,EACF;AAEA,EAAA,SAAS,aAAA,GAAsB;AAC7B,IAAA,IAAI,UAAA,EAAY;AAChB,IAAA,UAAA,GAAa,WAAW,MAAM;AAC5B,MAAA,KAAK,UAAA,EAAW;AAAA,IAClB,GAAG,cAAc,CAAA;AAAA,EACnB;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAaL,MAAM,MAAM,KAAA,EAAwD;AAClE,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yBAAyB,CAAA;AAAA,MACtE;AACA,MAAA,IAAI,OAAO,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,IAAA,CAAK,WAAW,CAAA,EAAG;AAC7D,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,wBAAwB,CAAA;AAAA,MACrE;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,GAAA,EAAK;AAC3B,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,0BAA0B,CAAA;AAAA,MACvE;AAEA,MAAA,MAAM,IAAA,GAAgC,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK;AACzD,MAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,MAAA,CAAO,SAAA;AAChD,MAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AACpC,MAAA,IAAI,KAAA,CAAM,UAAA,IAAc,OAAO,KAAA,CAAM,eAAe,QAAA,EAAU;AAC5D,QAAA,IAAA,CAAK,aAAa,KAAA,CAAM,UAAA;AAAA,MAC1B;AACA,MAAA,IAAI,KAAA,CAAM,SAAA,EAAW,IAAA,CAAK,SAAA,GAAY,KAAA,CAAM,SAAA;AAE5C,MAAA,MAAM,YAAY,qBAAA,EAAsB;AACxC,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA6B,MAAA,EAAQ;AAAA,QACrD,MAAA,EAAQ,MAAA;AAAA,QACR,MAAM,SAAA,CAAU,IAAA;AAAA,QAChB,IAAA;AAAA,QACA,aAAa,SAAA,CAAU;AAAA,OACxB,CAAA;AAED,MAAA,IAAI,CAAC,OAAO,GAAA,CAAI,EAAA,KAAO,QAAQ,OAAO,GAAA,CAAI,YAAY,QAAA,EAAU;AAC9D,QAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,oCAAoC,CAAA;AAAA,MAChF;AACA,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,OAAA,EAAS,IAAI,OAAA,EAAQ;AAAA,IAC1C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAYA,MAAM,KAAA,EAAkC;AACtC,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACzC,MAAA,IAAI,OAAO,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,IAAA,CAAK,WAAW,CAAA,EAAG;AAC/D,MAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,GAAA,EAAK;AAC7B,MAAA,KAAA,CAAM,KAAK,KAAK,CAAA;AAChB,MAAA,IAAI,KAAA,CAAM,UAAU,eAAA,EAAiB;AAEnC,QAAA,IAAI,UAAA,EAAY;AAAE,UAAA,YAAA,CAAa,UAAU,CAAA;AAAG,UAAA,UAAA,GAAa,IAAA;AAAA,QAAM;AAC/D,QAAA,KAAK,UAAA,EAAW;AAAA,MAClB,CAAA,MAAO;AACL,QAAA,aAAA,EAAc;AAAA,MAChB;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAM,KAAA,GAAuB;AAC3B,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,YAAA,CAAa,UAAU,CAAA;AACvB,QAAA,UAAA,GAAa,IAAA;AAAA,MACf;AAEA,MAAA,IAAI,gBAAgB,MAAM,cAAA;AAC1B,MAAA,MAAM,UAAA,EAAW;AAAA,IACnB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAiBA,MAAM,IAAI,KAAA,EAAoD;AAC5D,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uBAAuB,CAAA;AAAA,MACpE;AACA,MAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AAC3C,QAAA,MAAM,IAAI,YAAY,mBAAA,EAAqB,CAAA,qBAAA,EAAwB,iBAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,MAClG;AACA,MAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,YAAY,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AACnE,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,qBAAqB,CAAA;AAAA,MAClE;AACA,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,GAAS,GAAA,EAAO;AAChC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,wBAAwB,CAAA;AAAA,MACrE;AAGA,MAAA,IAAI,MAAA,CAAO,QAAQ,KAAA,EAAO;AACxB,QAAA,MAAM,EAAA,GAAK,UAAA,CAAW,KAAA,CAAM,KAAK,CAAA;AACjC,QAAA,EAAA,CAAG,CAAA,aAAA,EAAgB,KAAA,CAAM,KAAK,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,QAAA,IAAY,EAAE,CAAA;AACxE,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,MAAA,EAAO;AAAA,MAClC;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,SAAS,KAAA,CAAM;AAAA,OACjB;AACA,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,QAAA,GAAW,KAAA,CAAM,QAAA;AAI1C,MAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,MAAA,CAAO,SAAA;AAChD,MAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AAIpC,MAAA,IAAI,MAAM,KAAA,CAAM,aAAA;AAChB,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,IAAI;AAEF,UAAA,MAAM,IAAK,UAAA,CAAmB,qBAAA;AAC9B,UAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,MAAA,GAAS,GAAG,GAAA,GAAM,CAAA;AAAA,QACnD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAEA,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,GAAA,EAAK,OAAA,CAAQ,kBAAkB,CAAA,GAAI,GAAA;AAEvC,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAuB,MAAA,EAAQ;AAAA,QAC/C,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,2BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa,IAAA;AAAA,QACb;AAAA,OACD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,EAAA,KAAO,IAAA,EAAM;AAC3B,QAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,mCAAmC,CAAA;AAAA,MAC/E;AACA,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,OAAO,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,GAAW,IAAI,KAAA,GAAQ,MAAA;AAAA,QACnD,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AAAA,GACF;AACF","file":"telemetry.mjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'token_expired'\r\n  | 'token_invalid_signature'\r\n  | 'token_invalid_audience'\r\n  | 'token_invalid_issuer'\r\n  /** 3.0: runtime não expõe API necessária (ex: WebCrypto ausente). */\r\n  | 'runtime_unsupported'\r\n  /**\r\n   * 3.1.3 (bug_c1c96a00): o `state` retornado pelo IdP no callback OIDC não bate com o gerado em\r\n   * `signIn` (CSRF). Também usado quando não há transação OIDC pendente.\r\n   */\r\n  | 'oidc_state_mismatch'\r\n  /**\r\n   * 3.1.12 (incidente pdv-agiliza 2026-07-10): o `nonce` do `id_token` retornado\r\n   * pelo `/token` não bate com o gerado em `signIn` (possível replay). O token\r\n   * é descartado sem tocar o storage.\r\n   */\r\n  | 'oidc_nonce_mismatch'\r\n  /**\r\n   * 3.1.12: o POST `/api/v1/oauth/token` (troca do authorization_code por\r\n   * tokens em `completeSignIn`) falhou — HTTP não-2xx, corpo com `error`, ou\r\n   * resposta sem `id_token`.\r\n   */\r\n  | 'token_exchange_failed'\r\n  /** HTTP 409 — colisão de idempotência ou conflito de recurso. */\r\n  | 'conflict'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n  /**\r\n   * Motivo semântico opcional propagado pelo Core no corpo do erro (campo\r\n   * `reason` no TOPO do body, fora de `error`). Usado principalmente pelo 503\r\n   * de lease de DB, onde `reason` discrimina o estado do ambiente\r\n   * (`suspended` | `archived` | `revoked` | `provisioning` | `degraded` |\r\n   * `no_route` | `expired`). Camadas superiores (ex.: `db/sql`) mapeiam isso\r\n   * para um `NeetruDbErrorCode` mais específico (recuperável vs não).\r\n   */\r\n  public readonly reason?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n    reason?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    this.reason = reason;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * Idempotency-Key helper — gera UUID v4 cripto-seguro para identificar\r\n * mutations não-idempotentes (`usage.report`, `support.createTicket`,\r\n * `notifications.send`, `webhooks.test`).\r\n *\r\n * Estratégia 3.0:\r\n *   - SDK gera UUID v4 por chamada via `randomUUID()` (WebCrypto.subtle não\r\n *     necessário aqui — `crypto.randomUUID()` está em Node 14.17+ e em todos\r\n *     os browsers/Edge runtimes modernos).\r\n *   - Header `Idempotency-Key: <uuid>` é injetado pelo `httpRequest` quando\r\n *     `opts.idempotencyKey === true` OU caller passa explicit `opts.idempotencyKeyValue`.\r\n *   - Core dedup em coleção `usage_idempotency_keys/{key}` TTL 24h (vide\r\n *     `docs/CORE_CHANGES_REQUIRED.md` §2). Se Core ainda não dedupa, o header\r\n *     é benign (ignorado).\r\n *\r\n * Defesa em camadas: combinado com `retries: 0` em POSTs (vide http.ts), o\r\n * risco de double-write em transientes vai pra zero.\r\n */\r\nimport { NeetruError } from './errors';\r\n\r\n/**\r\n * Gera UUID v4 criptograficamente seguro. Universal: Node 14.17+, browsers\r\n * modernos, Edge runtimes (Workers/Vercel Edge/Cloudflare).\r\n *\r\n * Fallback puro-JS removido em 3.0 — `crypto.randomUUID()` é ubíquo desde\r\n * 2022. Se runtime não tem, lança `NeetruError('runtime_unsupported')`\r\n * (consumer deve polyfillar).\r\n *\r\n * **L-01 fix (Opus review 2026-05-27):** antes lançava `Error` cru, que\r\n * não era pego por `catch (err) { if (err instanceof NeetruError) ... }`\r\n * dos consumers. Agora throw canonical.\r\n *\r\n * @throws NeetruError('runtime_unsupported') se `crypto.randomUUID` não disponível.\r\n */\r\nexport function generateIdempotencyKey(): string {\r\n  // WebCrypto (browser/Edge) e Node 14.17+ expõem `crypto.randomUUID()`.\r\n  // Node anterior precisa de `node:crypto` mas SDK 3.0 exige Node ≥20 (vide engines).\r\n  const cryptoObj: { randomUUID?: () => string } | undefined =\r\n    typeof globalThis !== 'undefined' && 'crypto' in globalThis\r\n      ? (globalThis as { crypto?: { randomUUID?: () => string } }).crypto\r\n      : undefined;\r\n  if (cryptoObj && typeof cryptoObj.randomUUID === 'function') {\r\n    return cryptoObj.randomUUID();\r\n  }\r\n  throw new NeetruError(\r\n    'runtime_unsupported',\r\n    'crypto.randomUUID not available in this runtime. SDK 3.0 requires Node ≥20 or modern browser/Edge.',\r\n  );\r\n}\r\n\r\n/** Regex UUID v4 — validação para uso interno. */\r\nexport const UUID_V4_RE =\r\n  /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente.\r\n *   - **Captura `X-Neetru-Version`** das respostas e emite `console.warn` quando\r\n *     o Core está abaixo da versão mínima para a major do SDK.\r\n *\r\n * Política de retries (mudança breaking 3.0):\r\n *   - GET/HEAD: default 2 retries (3 tentativas total) — idempotente, seguro.\r\n *   - POST/PUT/PATCH/DELETE: default **0 retries** — mutations podem duplicar\r\n *     side effects (ex: `usage.report` incrementa contador). Caller pode\r\n *     reativar passando `retries: N` explicitamente ou usar `Idempotency-Key`\r\n *     header (gerado automaticamente se `opts.idempotencyKey=true`).\r\n *\r\n * Idempotency-Key (3.0):\r\n *   - `opts.idempotencyKey === true` → SDK gera UUID v4 e injeta header.\r\n *   - `opts.idempotencyKey === 'uuid-string'` → usa o valor passado.\r\n *   - Caller mantém retentos client-side se quiser; Core dedup serverside\r\n *     (vide `docs/CORE_CHANGES_REQUIRED.md` §2).\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport { generateIdempotencyKey } from './idempotency';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n// ─── Compat Matrix SDK↔Core ──────────────────────────────────────────────────\r\n\r\n/**\r\n * Matriz de compatibilidade SDK major → versão mínima do Core.\r\n *\r\n * Formato do Core: CalVer `YYYY.MM.patch+revision` (ex: `2026.05.1+neetru-core-00096-79t`).\r\n * A comparação é feita apenas nas partes `YYYY.MM.patch` (prefixo antes de `+`).\r\n *\r\n * Quando o Core reporta `X-Neetru-Version` abaixo do mínimo para a SDK major\r\n * corrente, o SDK emite `console.warn` uma única vez por sessão de processo.\r\n *\r\n * Atualize esta tabela a cada major de SDK.\r\n */\r\nconst COMPAT_MATRIX: Record<number, string> = {\r\n  // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,\r\n  // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)\r\n  3: '2026.05.1',\r\n};\r\n\r\n/** CalVer sem sufixo `+revision`. Ex: `2026.05.1+abc` → `2026.05.1`. */\r\nfunction stripRevision(v: string): string {\r\n  return v.split('+')[0] ?? v;\r\n}\r\n\r\n/**\r\n * Compara dois CalVer (`YYYY.MM.patch`). Retorna negativo se `a < b`,\r\n * positivo se `a > b`, 0 se iguais. Partes não numéricas tratadas como 0.\r\n */\r\nfunction compareCalVer(a: string, b: string): number {\r\n  const partsA = stripRevision(a).split('.').map(Number);\r\n  const partsB = stripRevision(b).split('.').map(Number);\r\n  const len = Math.max(partsA.length, partsB.length);\r\n  for (let i = 0; i < len; i++) {\r\n    const pa = partsA[i] ?? 0;\r\n    const pb = partsB[i] ?? 0;\r\n    if (pa !== pb) return pa - pb;\r\n  }\r\n  return 0;\r\n}\r\n\r\n/** Lê a SDK major a partir da string `VERSION` exportada de `./index`. Fallback 3. */\r\nfunction getSdkMajor(): number {\r\n  try {\r\n    // Importação estática não disponível aqui (evita ciclo). Usa variável injetada\r\n    // em tempo de build pela tsup via `define`. Fallback para 3 (current major).\r\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n    const ver = (globalThis as any).__NEETRU_SDK_VERSION__ as string | undefined;\r\n    if (ver) return parseInt(ver.split('.')[0] ?? '3', 10);\r\n  } catch {\r\n    // ignore\r\n  }\r\n  return 3;\r\n}\r\n\r\n/** Aviso emitido no máximo uma vez por major detectada pra não spammar logs. */\r\nconst _warnedCoreTooOld = new Set<string>();\r\n\r\n/**\r\n * Verifica se a versão do Core (`X-Neetru-Version`) é compatível com a SDK major.\r\n * Emite `console.warn` quando incompatível (uma vez por processo por versão detectada).\r\n */\r\nexport function checkCoreVersionCompat(coreVersion: string): void {\r\n  if (!coreVersion) return;\r\n  const sdkMajor = getSdkMajor();\r\n  const minCore = COMPAT_MATRIX[sdkMajor];\r\n  if (!minCore) return; // sem restrição para esta major\r\n  const stripped = stripRevision(coreVersion);\r\n  if (compareCalVer(stripped, minCore) < 0) {\r\n    const key = `${sdkMajor}:${stripped}`;\r\n    if (!_warnedCoreTooOld.has(key)) {\r\n      _warnedCoreTooOld.add(key);\r\n      console.warn(\r\n        `[Neetru SDK] Atenção: Core versão \"${coreVersion}\" é anterior ao mínimo recomendado` +\r\n          ` \"${minCore}\" para SDK major ${sdkMajor}. Alguns recursos podem não funcionar` +\r\n          ` corretamente. Atualize o Core para a versão mais recente.`,\r\n      );\r\n    }\r\n  }\r\n}\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`).\r\n   *\r\n   * Default (3.0):\r\n   *   - GET/HEAD: 2 (= 3 tentativas total) — idempotente, seguro.\r\n   *   - POST/PUT/PATCH/DELETE: 0 — mutations podem duplicar side effects.\r\n   *\r\n   * Caller pode reativar passando explicitamente: `retries: 2`.\r\n   */\r\n  retries?: number;\r\n  /**\r\n   * Injeta `Idempotency-Key` header pra dedup serverside (3.0):\r\n   *   - `true` → SDK gera UUID v4 cripto-seguro automaticamente.\r\n   *   - string → usa o valor passado (deve ser UUID v4).\r\n   *   - `undefined`/`false` → sem header.\r\n   */\r\n  idempotencyKey?: boolean | string;\r\n}\r\n\r\nconst DEFAULT_RETRIES_READ = 2;\r\nconst DEFAULT_RETRIES_WRITE = 0;\r\nconst READ_METHODS = new Set(['GET', 'HEAD']);\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n *\r\n * Bug fix: sem teto, um servidor hostil/mal-configurado poderia retornar\r\n * `Retry-After: 86400` (24h) ou uma HTTP-date anos no futuro, pendurando o\r\n * processo indefinidamente. Aplica teto de MAX_RETRY_AFTER_MS em ambos os caminhos.\r\n */\r\nconst MAX_RETRY_AFTER_MS = 60_000; // 60s — teto razoável para retry automático\r\n\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1000), MAX_RETRY_AFTER_MS);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/** Mapeamento status → code estável do NeetruError. */\r\nfunction statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 409) return 'conflict'; // Bug fix: 409 vira 'conflict' (não 'unknown')\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  // Default por método: reads tentam 2x, writes 0x. Caller override sempre vence.\r\n  const defaultRetries = READ_METHODS.has(method)\r\n    ? DEFAULT_RETRIES_READ\r\n    : DEFAULT_RETRIES_WRITE;\r\n  const maxRetries = opts.retries ?? defaultRetries;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Idempotency-Key: gerado por chamada se solicitado. UUID v4 cripto-seguro.\r\n  if (opts.idempotencyKey) {\r\n    const key =\r\n      typeof opts.idempotencyKey === 'string'\r\n        ? opts.idempotencyKey\r\n        : generateIdempotencyKey();\r\n    headers['idempotency-key'] = key;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      // Captura X-Neetru-Version e verifica compat com a SDK major.\r\n      const coreVersion = res.headers.get('x-neetru-version');\r\n      if (coreVersion) checkCoreVersionCompat(coreVersion);\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    // O contrato clássico de erro do Core é `{ error: { code, message } }`.\r\n    // O 503 de lease de DB (e alguns endpoints novos) coloca `code`/`reason`/\r\n    // `message` no TOPO do corpo, SEM envelope `error`. Lemos ambos: preferimos\r\n    // `body.error` quando presente; caímos nos campos do topo caso contrário.\r\n    // `reason` é sempre considerado no topo (o 503 de lease o coloca lá mesmo\r\n    // quando há `error`), pra que a camada de DB discrimine suspended/archived/\r\n    // revoked de provisioning/degraded.\r\n    const body = (await safeJson(res)) as\r\n      | {\r\n          error?: { code?: string; message?: string; reason?: string } | string;\r\n          code?: string;\r\n          reason?: string;\r\n          message?: string;\r\n        }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    let reason: string | undefined;\r\n    if (body && typeof body === 'object') {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n        if (typeof errField.reason === 'string') reason = errField.reason;\r\n      } else {\r\n        // Sem envelope `error` — lê os campos no TOPO do corpo (contrato do 503\r\n        // de lease: `{ code, reason }` no topo).\r\n        if (typeof body.code === 'string') code = body.code;\r\n        if (typeof body.message === 'string') message = body.message;\r\n      }\r\n      // `reason` no topo tem prioridade final (o 503 de lease o coloca no topo\r\n      // mesmo quando também há `error`).\r\n      if (typeof body.reason === 'string') reason = body.reason;\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId, reason);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Telemetria — emite eventos do produto cliente pro Core.\r\n *\r\n * APIs disponíveis:\r\n *   - `event(input)` — chamada single-shot, await retorna { ok, eventId }.\r\n *   - `track(input)` — fire-and-forget (v1.2). Enqueue + flush 500ms debounce.\r\n *     Não bloqueia o caller — ideal pra alta frequência (cliques, page-views).\r\n *     Falhas viram warning no console.\r\n *   - `flush()` — força flush imediato da queue (chamar antes de unload).\r\n *   - `log(input)` — log estruturado `POST /api/sdk/v1/telemetry/log` com\r\n *     Bearer + correlationId. Em `NEETRU_ENV=dev` cai pra console.{level}.\r\n *\r\n * ## Roteamento browser vs server (fix 2026-09-09, achado telemetria 401)\r\n *\r\n * `event()`/`track()` são documentados pra uso client-side de alta frequência\r\n * (cliques, page-views) — mas `/api/sdk/v1/telemetry/event` exige `Bearer`\r\n * com `cli_api_keys`, uma credencial de operador que NUNCA deveria estar no\r\n * browser. Resultado real observado em produção: 401 silencioso, telemetria\r\n * de UI nunca chegando ao Core (mesma classe de bug do `checkout.start()`\r\n * exigindo `access_token` no browser, bug_72ccf42).\r\n *\r\n * Fix: em contexto browser (`typeof window !== 'undefined'`), `event()`/\r\n * `track()` chamam `/api/sdk/v1/telemetry/event/public` (sem Bearer — o Core\r\n * valida a origem via header `Origin` contra `product_subdomains`, não\r\n * credencial) em vez do endpoint autenticado. Server-side (Node.js, SSR,\r\n * jobs) continua no endpoint autenticado original, sem mudança de\r\n * comportamento.\r\n *\r\n * Corrigido junto: `productSlug` nunca era enviado no body de `event()`/\r\n * `track()` (só `log()` já mandava, desde o achado C4). O Core exige\r\n * `productSlug` fail-closed (400 sem ele) — todo evento de `event()`/\r\n * `track()` estava, na prática, sempre rejeitado pelo endpoint autenticado\r\n * mesmo quando a auth passava. Mesmo default de `log()`/`usage.track()`:\r\n * `input.productSlug ?? config.productId`.\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type {\r\n  ResolvedConfig,\r\n  TelemetryEventAck,\r\n  TelemetryEventInput,\r\n  TelemetryLogAck,\r\n  TelemetryLogInput,\r\n  TelemetryLogLevel,\r\n} from './types';\r\n\r\ninterface RawTelemetryAck {\r\n  ok?: boolean;\r\n  eventId?: string;\r\n}\r\n\r\ninterface RawLogAck {\r\n  ok?: boolean;\r\n  logId?: string;\r\n}\r\n\r\nconst VALID_LOG_LEVELS: readonly TelemetryLogLevel[] = ['debug', 'info', 'warn', 'error', 'fatal'];\r\n\r\n/** Browser detection — sem `window`/DOM lib no tsconfig, checagem duck-typed. */\r\nfunction isBrowserContext(): boolean {\r\n  return typeof globalThis !== 'undefined' && typeof (globalThis as { window?: unknown }).window !== 'undefined';\r\n}\r\n\r\n/**\r\n * Path + `requireAuth` do endpoint de evento conforme o contexto de execução.\r\n * Browser → endpoint público (sem Bearer, Origin-gated no Core). Server →\r\n * endpoint autenticado original, sem mudança de comportamento.\r\n */\r\nfunction resolveEventTransport(): { path: string; requireAuth: boolean } {\r\n  return isBrowserContext()\r\n    ? { path: '/api/sdk/v1/telemetry/event/public', requireAuth: false }\r\n    : { path: '/api/sdk/v1/telemetry/event', requireAuth: true };\r\n}\r\n\r\nfunction consoleFor(level: TelemetryLogLevel): (message?: unknown, ...optional: unknown[]) => void {\r\n  switch (level) {\r\n    case 'debug': return console.debug.bind(console);\r\n    case 'info': return console.info.bind(console);\r\n    case 'warn': return console.warn.bind(console);\r\n    case 'error': return console.error.bind(console);\r\n    case 'fatal': return console.error.bind(console);\r\n    default: return console.log.bind(console);\r\n  }\r\n}\r\n\r\n/** Janela de debounce do `track()` antes de drenar a queue. */\r\nconst TRACK_FLUSH_MS = 500;\r\n/** Limite de eventos na queue antes de flush forçado (defensivo). */\r\nconst TRACK_MAX_QUEUE = 50;\r\n\r\nexport function createTelemetryNamespace(config: ResolvedConfig) {\r\n  // Queue local pra track() — fire-and-forget batchado.\r\n  const queue: TelemetryEventInput[] = [];\r\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\r\n  // bug: flush() precisava aguardar drain já em voo p/ não resolver antes do envio\r\n  let _inflightDrain: Promise<void> | null = null;\r\n\r\n  async function drainQueue(): Promise<void> {\r\n    if (queue.length === 0) return;\r\n    // (a) Capture the current batch BEFORE the async boundary so that any\r\n    //     track() call arriving during the await works on a clean queue.\r\n    const batch = queue.splice(0, queue.length);\r\n    // NOTE: flushTimer is intentionally NOT cleared here.  Clearing it before\r\n    // the await would let a concurrent track() schedule a second timer, fire\r\n    // it while this flush is still in-flight, and produce duplicate concurrent\r\n    // drainQueue calls.  We clear it only after the await (see below).\r\n    const work = Promise.allSettled(\r\n      batch.map(async (ev) => {\r\n        try {\r\n          const body: Record<string, unknown> = { name: ev.name };\r\n          const productSlug = ev.productSlug ?? config.productId;\r\n          if (productSlug) body.productSlug = productSlug;\r\n          if (ev.properties && typeof ev.properties === 'object') {\r\n            body.properties = ev.properties;\r\n          }\r\n          if (ev.timestamp) body.timestamp = ev.timestamp;\r\n          const transport = resolveEventTransport();\r\n          await httpRequest<RawTelemetryAck>(config, {\r\n            method: 'POST',\r\n            path: transport.path,\r\n            body,\r\n            requireAuth: transport.requireAuth,\r\n            retries: 1,\r\n            // caça-bruxas: retry sem Idempotency-Key duplicava o evento se o\r\n            // servidor já tinha persistido antes da falha transiente. Mesmo\r\n            // padrão do usage.report (key estável por chamada, reusada no retry).\r\n            idempotencyKey: true,\r\n          });\r\n        } catch (err) {\r\n          if (typeof console !== 'undefined') {\r\n            console.warn('[neetru-sdk] telemetry.track flush failed for event', ev.name, err);\r\n          }\r\n        }\r\n      }),\r\n    );\r\n    // Registra promise em voo para que flush() possa aguardar (bug finding 4)\r\n    _inflightDrain = work.then(() => { _inflightDrain = null; });\r\n    // (b) Release the timer slot AFTER the await so that any track() calls\r\n    //     that arrived during the flush and called scheduleFlush() were\r\n    //     correctly suppressed (flushTimer was still set).  Now that the\r\n    //     in-flight requests are done we reset it and, if new events were\r\n    //     enqueued while we were awaiting, schedule the next flush.\r\n    await work;\r\n    flushTimer = null;\r\n    // (c) If events arrived during the flush window, schedule the next drain.\r\n    if (queue.length > 0) {\r\n      scheduleFlush();\r\n    }\r\n  }\r\n\r\n  function scheduleFlush(): void {\r\n    if (flushTimer) return;\r\n    flushTimer = setTimeout(() => {\r\n      void drainQueue();\r\n    }, TRACK_FLUSH_MS);\r\n  }\r\n\r\n  return {\r\n    /**\r\n     * Persiste um evento de uso. Lança `NeetruError` em qualquer falha\r\n     * (incluindo rate-limit).\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * await client.telemetry.event({\r\n     *   name: 'dashboard_opened',\r\n     *   properties: { plan: 'pro', tab: 'overview' },\r\n     * });\r\n     * ```\r\n     */\r\n    async event(input: TelemetryEventInput): Promise<TelemetryEventAck> {\r\n      if (!input || typeof input !== 'object') {\r\n        throw new NeetruError('validation_failed', 'event input is required');\r\n      }\r\n      if (typeof input.name !== 'string' || input.name.length === 0) {\r\n        throw new NeetruError('validation_failed', 'event.name is required');\r\n      }\r\n      if (input.name.length > 128) {\r\n        throw new NeetruError('validation_failed', 'event.name max 128 chars');\r\n      }\r\n\r\n      const body: Record<string, unknown> = { name: input.name };\r\n      const productSlug = input.productSlug ?? config.productId;\r\n      if (productSlug) body.productSlug = productSlug;\r\n      if (input.properties && typeof input.properties === 'object') {\r\n        body.properties = input.properties;\r\n      }\r\n      if (input.timestamp) body.timestamp = input.timestamp;\r\n\r\n      const transport = resolveEventTransport();\r\n      const raw = await httpRequest<RawTelemetryAck>(config, {\r\n        method: 'POST',\r\n        path: transport.path,\r\n        body,\r\n        requireAuth: transport.requireAuth,\r\n      });\r\n\r\n      if (!raw || raw.ok !== true || typeof raw.eventId !== 'string') {\r\n        throw new NeetruError('invalid_response', 'Telemetry response missing eventId');\r\n      }\r\n      return { ok: true, eventId: raw.eventId };\r\n    },\r\n\r\n    /**\r\n     * Fire-and-forget: enqueue + flush 500ms debounce. Não retorna `eventId`\r\n     * — falhas são logadas como warning. Ideal pra alta frequência.\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * client.telemetry.track({ name: 'page_view', properties: { path: '/' } });\r\n     * // segue execução; flush async em background\r\n     * ```\r\n     */\r\n    track(input: TelemetryEventInput): void {\r\n      if (!input || typeof input !== 'object') return;\r\n      if (typeof input.name !== 'string' || input.name.length === 0) return;\r\n      if (input.name.length > 128) return;\r\n      queue.push(input);\r\n      if (queue.length >= TRACK_MAX_QUEUE) {\r\n        // bug: timer pendente não era cancelado → dois drainQueue() concorrentes\r\n        if (flushTimer) { clearTimeout(flushTimer); flushTimer = null; }\r\n        void drainQueue();\r\n      } else {\r\n        scheduleFlush();\r\n      }\r\n    },\r\n\r\n    /**\r\n     * Força flush imediato da queue de `track()`. Resolva antes de\r\n     * page unload / SSR boundary pra não perder eventos.\r\n     */\r\n    async flush(): Promise<void> {\r\n      if (flushTimer) {\r\n        clearTimeout(flushTimer);\r\n        flushTimer = null;\r\n      }\r\n      // bug: flush() resolvia antes do drain já em voo terminar (finding 4)\r\n      if (_inflightDrain) await _inflightDrain;\r\n      await drainQueue();\r\n    },\r\n\r\n    /**\r\n     * Registra um log estruturado per-product (Sprint 6).\r\n     *\r\n     * - `NEETRU_ENV=dev`: console.{level}, retorna ack mock.\r\n     * - workspace/prod: HTTP POST com Bearer auth + correlationId no header.\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * await client.telemetry.log({\r\n     *   level: 'error',\r\n     *   message: 'Falha ao calcular total',\r\n     *   metadata: { orderId: 'o-123' },\r\n     * });\r\n     * ```\r\n     */\r\n    async log(input: TelemetryLogInput): Promise<TelemetryLogAck> {\r\n      if (!input || typeof input !== 'object') {\r\n        throw new NeetruError('validation_failed', 'log input is required');\r\n      }\r\n      if (!VALID_LOG_LEVELS.includes(input.level)) {\r\n        throw new NeetruError('validation_failed', `level must be one of ${VALID_LOG_LEVELS.join(', ')}`);\r\n      }\r\n      if (typeof input.message !== 'string' || input.message.length === 0) {\r\n        throw new NeetruError('validation_failed', 'message is required');\r\n      }\r\n      if (input.message.length > 4_000) {\r\n        throw new NeetruError('validation_failed', 'message max 4000 chars');\r\n      }\r\n\r\n      // Dev mode: console only, no network.\r\n      if (config.env === 'dev') {\r\n        const fn = consoleFor(input.level);\r\n        fn(`[neetru-sdk] ${input.level}: ${input.message}`, input.metadata ?? {});\r\n        return { ok: true, mode: 'mock' };\r\n      }\r\n\r\n      const body: Record<string, unknown> = {\r\n        level: input.level,\r\n        message: input.message,\r\n      };\r\n      if (input.metadata) body.metadata = input.metadata;\r\n      // C4 (auditoria 2026-06-10): o Core exige productSlug fail-closed (400 sem\r\n      // ele). Quando o consumer não passa explicito, default pro config.productId\r\n      // (mesmo contrato de usage.report/support). O backend NÃO infere o slug.\r\n      const productSlug = input.productSlug ?? config.productId;\r\n      if (productSlug) body.productSlug = productSlug;\r\n\r\n      // CorrelationId: explicit input wins; senão tenta lê de globalThis (set\r\n      // por instrumentação do consumer).\r\n      let cid = input.correlationId;\r\n      if (!cid) {\r\n        try {\r\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n          const g = (globalThis as any).NEETRU_CORRELATION_ID;\r\n          if (typeof g === 'string' && g.length > 0) cid = g;\r\n        } catch {\r\n          /* ignore */\r\n        }\r\n      }\r\n\r\n      const headers: Record<string, string> = {};\r\n      if (cid) headers['x-correlation-id'] = cid;\r\n\r\n      const raw = await httpRequest<RawLogAck>(config, {\r\n        method: 'POST',\r\n        path: '/api/sdk/v1/telemetry/log',\r\n        body,\r\n        requireAuth: true,\r\n        headers,\r\n      });\r\n\r\n      if (!raw || raw.ok !== true) {\r\n        throw new NeetruError('invalid_response', 'Telemetry log response missing ok');\r\n      }\r\n      return {\r\n        ok: true,\r\n        logId: typeof raw.logId === 'string' ? raw.logId : undefined,\r\n        mode: 'http',\r\n      };\r\n    },\r\n  };\r\n}\r\n"]}
+{"version":3,"sources":["../src/errors.ts","../src/idempotency.ts","../src/http.ts","../src/telemetry.ts"],"names":["err","message"],"mappings":";AAyDO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EACrB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,MAAA,EACA,WACA,MAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;;;ACrDO,SAAS,sBAAA,GAAiC;AAG/C,EAAA,MAAM,YACJ,OAAO,UAAA,KAAe,eAAe,QAAA,IAAY,UAAA,GAC5C,WAA0D,MAAA,GAC3D,MAAA;AACN,EAAA,IAAI,SAAA,IAAa,OAAO,SAAA,CAAU,UAAA,KAAe,UAAA,EAAY;AAC3D,IAAA,OAAO,UAAU,UAAA,EAAW;AAAA,EAC9B;AACA,EAAA,MAAM,IAAI,WAAA;AAAA,IACR,qBAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACJA,IAAM,aAAA,GAAwC;AAAA;AAAA;AAAA,EAG5C,CAAA,EAAG;AACL,CAAA;AAGA,SAAS,cAAc,CAAA,EAAmB;AACxC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA;AAC5B;AAMA,SAAS,aAAA,CAAc,GAAW,CAAA,EAAmB;AACnD,EAAA,MAAM,MAAA,GAAS,cAAc,CAAC,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,IAAI,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,GAAS,cAAc,CAAC,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,IAAI,MAAM,CAAA;AACrD,EAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,OAAO,MAAM,CAAA;AACjD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,EAAK,CAAA,EAAA,EAAK;AAC5B,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,CAAC,CAAA,IAAK,CAAA;AACxB,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,CAAC,CAAA,IAAK,CAAA;AACxB,IAAA,IAAI,EAAA,KAAO,EAAA,EAAI,OAAO,EAAA,GAAK,EAAA;AAAA,EAC7B;AACA,EAAA,OAAO,CAAA;AACT;AAOA,SAAS,sBAAA,GAA6C;AACpD,EAAA,IAAI;AAEF,IAAA,OAAQ,OAAA;AAAA,EACV,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAGA,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,MAAM,sBAAA,EAAuB;AACnC,EAAA,IAAI,GAAA,EAAK,OAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,GAAA,EAAK,EAAE,CAAA;AACrD,EAAA,OAAO,CAAA;AACT;AAGA,IAAM,iBAAA,uBAAwB,GAAA,EAAY;AAMnC,SAAS,uBAAuB,WAAA,EAA2B;AAChE,EAAA,IAAI,CAAC,WAAA,EAAa;AAClB,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,MAAM,OAAA,GAAU,cAAc,QAAQ,CAAA;AACtC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,MAAM,QAAA,GAAW,cAAc,WAAW,CAAA;AAC1C,EAAA,IAAI,aAAA,CAAc,QAAA,EAAU,OAAO,CAAA,GAAI,CAAA,EAAG;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AACnC,IAAA,IAAI,CAAC,iBAAA,CAAkB,GAAA,CAAI,GAAG,CAAA,EAAG;AAC/B,MAAA,iBAAA,CAAkB,IAAI,GAAG,CAAA;AACzB,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,4CAAA,EAAsC,WAAW,CAAA,0CAAA,EAC1C,OAAO,oBAAoB,QAAQ,CAAA,qGAAA;AAAA,OAE5C;AAAA,IACF;AAAA,EACF;AACF;AAsCA,IAAM,oBAAA,GAAuB,CAAA;AAC7B,IAAM,qBAAA,GAAwB,CAAA;AAC9B,IAAM,+BAAe,IAAI,GAAA,CAAI,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAC5C,IAAM,eAAA,uBAAsB,GAAA,CAAqB;AAAA,EAC/C,cAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,SAAS,UAAU,OAAA,EAAyB;AAC1C,EAAA,MAAM,IAAA,GAAO,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,OAAO,CAAA;AACtC,EAAA,MAAM,SAAS,IAAA,GAAO,GAAA,IAAO,IAAA,CAAK,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA;AACjD,EAAA,OAAO,KAAK,GAAA,CAAI,EAAA,EAAI,KAAK,KAAA,CAAM,IAAA,GAAO,MAAM,CAAC,CAAA;AAC/C;AAUA,IAAM,kBAAA,GAAqB,GAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAqC;AAC5D,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,OAAO,KAAK,CAAA;AACzB,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,GAAG,kBAAkB,CAAA;AACnG,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI;AAChC,IAAA,IAAI,QAAQ,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,OAAO,kBAAkB,CAAA;AAAA,EAC1D;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAOO,SAAS,aAAa,MAAA,EAAiC;AAC5D,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,WAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,UAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK,OAAO,mBAAA;AAC7C,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,cAAA;AAC3B,EAAA,IAAI,MAAA,IAAU,KAAK,OAAO,cAAA;AAC1B,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,QAAA,CAAS,OAAA,EAAiB,IAAA,EAAc,KAAA,EAA6C;AAE5F,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAChD,EAAA,MAAM,MAAM,IAAI,GAAA,CAAI,GAAG,IAAI,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACjC,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,MAAA,IAAI,MAAM,MAAA,EAAW;AACrB,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,IACnC;AAAA,EACF;AACA,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAe,SAAS,GAAA,EAAiC;AACvD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAQA,eAAsB,WAAA,CACpB,QACA,IAAA,EACY;AACZ,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,IAAU,KAAA;AAC9B,EAAA,MAAM,MAAM,QAAA,CAAS,MAAA,CAAO,SAAS,IAAA,CAAK,IAAA,EAAM,KAAK,KAAK,CAAA;AAE1D,EAAA,MAAM,cAAA,GAAiB,YAAA,CAAa,GAAA,CAAI,MAAM,IAC1C,oBAAA,GACA,qBAAA;AACJ,EAAA,MAAM,UAAA,GAAa,KAAK,OAAA,IAAW,cAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAG,IAAA,CAAK;AAAA,GACV;AAUA,EAAA,MAAM,aAAa,sBAAA,EAAuB;AAC1C,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,OAAA,CAAQ,sBAAsB,CAAA,GAAI,UAAA;AAAA,EACpC;AAEA,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,MAAM,CAAA,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,IAAA,MAAM,MACJ,OAAO,IAAA,CAAK,mBAAmB,QAAA,GAC3B,IAAA,CAAK,iBACL,sBAAA,EAAuB;AAC7B,IAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,GAAA;AAAA,EAC/B;AAGA,EAAA,MAAM,UAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,IAAa,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,QAAA,GACtD,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GACxB,MAAA;AACN,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,SAAA,GAAgC,IAAA;AAEpC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,MAAM,IAAA,GAAoB,EAAE,MAAA,EAAQ,OAAA,EAAQ;AAC5C,IAAA,IAAI,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,IAAA,GAAO,UAAA;AAG1C,IAAA,IAAA,CAAK,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAExC,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI;AACF,MAAA,GAAA,GAAM,MAAM,MAAA,CAAO,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAAA,IACpC,SAASA,IAAAA,EAAK;AACZ,MAAA,MAAMC,QAAAA,GACJD,IAAAA,YAAe,YAAA,IAAgBA,IAAAA,CAAI,IAAA,KAAS,cAAA,GACxC,kCAAA,GACA,CAAA,eAAA,EAAkBA,IAAAA,YAAe,KAAA,GAAQA,IAAAA,CAAI,OAAA,GAAU,cAAc,CAAA,CAAA;AAC3E,MAAA,SAAA,GAAY,IAAI,WAAA,CAAY,eAAA,EAAiBC,QAAO,CAAA;AACpD,MAAA,IAAI,UAAU,UAAA,EAAY;AACxB,QAAA,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,SAAA,GACJ,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,KAAK,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,IAAK,MAAA;AAE5E,IAAA,IAAI,IAAI,EAAA,EAAI;AAEV,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AACtD,MAAA,IAAI,WAAA,yBAAoC,WAAW,CAAA;AACnD,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,GAAG,CAAA;AACjC,MAAA,OAAO,MAAA;AAAA,IACT;AASA,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,GAAG,CAAA;AAQhC,IAAA,IAAI,IAAA,GAAe,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,GAAU,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAA;AAChC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACpC,MAAA,MAAM,WAAW,IAAA,CAAK,KAAA;AACtB,MAAA,IAAI,OAAO,aAAa,QAAA,EAAU;AAChC,QAAA,OAAA,GAAU,QAAA;AAAA,MACZ,CAAA,MAAA,IAAW,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AACnD,QAAA,IAAI,OAAO,QAAA,CAAS,IAAA,KAAS,QAAA,SAAiB,QAAA,CAAS,IAAA;AACvD,QAAA,IAAI,OAAO,QAAA,CAAS,OAAA,KAAY,QAAA,YAAoB,QAAA,CAAS,OAAA;AAC7D,QAAA,IAAI,OAAO,QAAA,CAAS,MAAA,KAAW,QAAA,WAAmB,QAAA,CAAS,MAAA;AAAA,MAC7D,CAAA,MAAO;AAGL,QAAA,IAAI,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,SAAiB,IAAA,CAAK,IAAA;AAC/C,QAAA,IAAI,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,YAAoB,IAAA,CAAK,OAAA;AAAA,MACvD;AAGA,MAAA,IAAI,OAAO,IAAA,CAAK,MAAA,KAAW,QAAA,WAAmB,IAAA,CAAK,MAAA;AAAA,IACrD;AACA,IAAA,MAAM,GAAA,GAAM,IAAI,WAAA,CAAY,IAAA,EAAM,SAAS,GAAA,CAAI,MAAA,EAAQ,WAAW,MAAM,CAAA;AACxE,IAAA,SAAA,GAAY,GAAA;AAEZ,IAAA,MAAM,WAAA,GAAc,eAAA,CAAgB,GAAA,CAAI,IAAuB,CAAA;AAC/D,IAAA,IAAI,WAAA,IAAe,UAAU,UAAA,EAAY;AACvC,MAAA,MAAM,aAAa,eAAA,CAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACjE,MAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,SAAA,CAAU,OAAO,CAAA;AAC7C,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,WAAA,CAAY,SAAA,EAAW,6BAA6B,CAAA;AAC7E;;;AC5UA,IAAM,mBAAiD,CAAC,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,SAAS,OAAO,CAAA;AAGjG,SAAS,gBAAA,GAA4B;AACnC,EAAA,OAAO,OAAO,UAAA,KAAe,WAAA,IAAe,OAAQ,WAAoC,MAAA,KAAW,WAAA;AACrG;AAOA,SAAS,qBAAA,GAAgE;AACvE,EAAA,OAAO,gBAAA,EAAiB,GACpB,EAAE,IAAA,EAAM,oCAAA,EAAsC,WAAA,EAAa,KAAA,EAAM,GACjE,EAAE,IAAA,EAAM,6BAAA,EAA+B,WAAA,EAAa,IAAA,EAAK;AAC/D;AAEA,SAAS,WAAW,KAAA,EAA+E;AACjG,EAAA,QAAQ,KAAA;AAAO,IACb,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C,KAAK,MAAA;AAAQ,MAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA;AAAA,IAC7C,KAAK,MAAA;AAAQ,MAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA;AAAA,IAC7C,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C,KAAK,OAAA;AAAS,MAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,IAAA,CAAK,OAAO,CAAA;AAAA,IAC/C;AAAS,MAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,OAAO,CAAA;AAAA;AAE5C;AAGA,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,eAAA,GAAkB,EAAA;AAEjB,SAAS,yBAAyB,MAAA,EAAwB;AAE/D,EAAA,MAAM,QAA+B,EAAC;AACtC,EAAA,IAAI,UAAA,GAAmD,IAAA;AAEvD,EAAA,IAAI,cAAA,GAAuC,IAAA;AAE3C,EAAA,eAAe,UAAA,GAA4B;AACzC,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AAGxB,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,CAAA,EAAG,MAAM,MAAM,CAAA;AAK1C,IAAA,MAAM,OAAO,OAAA,CAAQ,UAAA;AAAA,MACnB,KAAA,CAAM,GAAA,CAAI,OAAO,EAAA,KAAO;AACtB,QAAA,IAAI;AACF,UAAA,MAAM,IAAA,GAAgC,EAAE,IAAA,EAAM,EAAA,CAAG,IAAA,EAAK;AACtD,UAAA,MAAM,WAAA,GAAc,EAAA,CAAG,WAAA,IAAe,MAAA,CAAO,SAAA;AAC7C,UAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AACpC,UAAA,IAAI,EAAA,CAAG,UAAA,IAAc,OAAO,EAAA,CAAG,eAAe,QAAA,EAAU;AACtD,YAAA,IAAA,CAAK,aAAa,EAAA,CAAG,UAAA;AAAA,UACvB;AACA,UAAA,IAAI,EAAA,CAAG,SAAA,EAAW,IAAA,CAAK,SAAA,GAAY,EAAA,CAAG,SAAA;AACtC,UAAA,MAAM,YAAY,qBAAA,EAAsB;AACxC,UAAA,MAAM,YAA6B,MAAA,EAAQ;AAAA,YACzC,MAAA,EAAQ,MAAA;AAAA,YACR,MAAM,SAAA,CAAU,IAAA;AAAA,YAChB,IAAA;AAAA,YACA,aAAa,SAAA,CAAU,WAAA;AAAA,YACvB,OAAA,EAAS,CAAA;AAAA;AAAA;AAAA;AAAA,YAIT,cAAA,EAAgB;AAAA,WACjB,CAAA;AAAA,QACH,SAAS,GAAA,EAAK;AACZ,UAAA,IAAI,OAAO,YAAY,WAAA,EAAa;AAClC,YAAA,OAAA,CAAQ,IAAA,CAAK,qDAAA,EAAuD,EAAA,CAAG,IAAA,EAAM,GAAG,CAAA;AAAA,UAClF;AAAA,QACF;AAAA,MACF,CAAC;AAAA,KACH;AAEA,IAAA,cAAA,GAAiB,IAAA,CAAK,KAAK,MAAM;AAAE,MAAA,cAAA,GAAiB,IAAA;AAAA,IAAM,CAAC,CAAA;AAM3D,IAAA,MAAM,IAAA;AACN,IAAA,UAAA,GAAa,IAAA;AAEb,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,MAAA,aAAA,EAAc;AAAA,IAChB;AAAA,EACF;AAEA,EAAA,SAAS,aAAA,GAAsB;AAC7B,IAAA,IAAI,UAAA,EAAY;AAChB,IAAA,UAAA,GAAa,WAAW,MAAM;AAC5B,MAAA,KAAK,UAAA,EAAW;AAAA,IAClB,GAAG,cAAc,CAAA;AAAA,EACnB;AAEA,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAaL,MAAM,MAAM,KAAA,EAAwD;AAClE,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,yBAAyB,CAAA;AAAA,MACtE;AACA,MAAA,IAAI,OAAO,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,IAAA,CAAK,WAAW,CAAA,EAAG;AAC7D,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,wBAAwB,CAAA;AAAA,MACrE;AACA,MAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,GAAA,EAAK;AAC3B,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,0BAA0B,CAAA;AAAA,MACvE;AAEA,MAAA,MAAM,IAAA,GAAgC,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK;AACzD,MAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,MAAA,CAAO,SAAA;AAChD,MAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AACpC,MAAA,IAAI,KAAA,CAAM,UAAA,IAAc,OAAO,KAAA,CAAM,eAAe,QAAA,EAAU;AAC5D,QAAA,IAAA,CAAK,aAAa,KAAA,CAAM,UAAA;AAAA,MAC1B;AACA,MAAA,IAAI,KAAA,CAAM,SAAA,EAAW,IAAA,CAAK,SAAA,GAAY,KAAA,CAAM,SAAA;AAE5C,MAAA,MAAM,YAAY,qBAAA,EAAsB;AACxC,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAA6B,MAAA,EAAQ;AAAA,QACrD,MAAA,EAAQ,MAAA;AAAA,QACR,MAAM,SAAA,CAAU,IAAA;AAAA,QAChB,IAAA;AAAA,QACA,aAAa,SAAA,CAAU;AAAA,OACxB,CAAA;AAED,MAAA,IAAI,CAAC,OAAO,GAAA,CAAI,EAAA,KAAO,QAAQ,OAAO,GAAA,CAAI,YAAY,QAAA,EAAU;AAC9D,QAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,oCAAoC,CAAA;AAAA,MAChF;AACA,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,OAAA,EAAS,IAAI,OAAA,EAAQ;AAAA,IAC1C,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAYA,MAAM,KAAA,EAAkC;AACtC,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACzC,MAAA,IAAI,OAAO,KAAA,CAAM,IAAA,KAAS,YAAY,KAAA,CAAM,IAAA,CAAK,WAAW,CAAA,EAAG;AAC/D,MAAA,IAAI,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,GAAA,EAAK;AAC7B,MAAA,KAAA,CAAM,KAAK,KAAK,CAAA;AAChB,MAAA,IAAI,KAAA,CAAM,UAAU,eAAA,EAAiB;AAEnC,QAAA,IAAI,UAAA,EAAY;AAAE,UAAA,YAAA,CAAa,UAAU,CAAA;AAAG,UAAA,UAAA,GAAa,IAAA;AAAA,QAAM;AAC/D,QAAA,KAAK,UAAA,EAAW;AAAA,MAClB,CAAA,MAAO;AACL,QAAA,aAAA,EAAc;AAAA,MAChB;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAM,KAAA,GAAuB;AAC3B,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,YAAA,CAAa,UAAU,CAAA;AACvB,QAAA,UAAA,GAAa,IAAA;AAAA,MACf;AAEA,MAAA,IAAI,gBAAgB,MAAM,cAAA;AAC1B,MAAA,MAAM,UAAA,EAAW;AAAA,IACnB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAiBA,MAAM,IAAI,KAAA,EAAoD;AAC5D,MAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,uBAAuB,CAAA;AAAA,MACpE;AACA,MAAA,IAAI,CAAC,gBAAA,CAAiB,QAAA,CAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AAC3C,QAAA,MAAM,IAAI,YAAY,mBAAA,EAAqB,CAAA,qBAAA,EAAwB,iBAAiB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,MAClG;AACA,MAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,YAAY,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AACnE,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,qBAAqB,CAAA;AAAA,MAClE;AACA,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,GAAS,GAAA,EAAO;AAChC,QAAA,MAAM,IAAI,WAAA,CAAY,mBAAA,EAAqB,wBAAwB,CAAA;AAAA,MACrE;AAGA,MAAA,IAAI,MAAA,CAAO,QAAQ,KAAA,EAAO;AACxB,QAAA,MAAM,EAAA,GAAK,UAAA,CAAW,KAAA,CAAM,KAAK,CAAA;AACjC,QAAA,EAAA,CAAG,CAAA,aAAA,EAAgB,KAAA,CAAM,KAAK,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,QAAA,IAAY,EAAE,CAAA;AACxE,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,MAAA,EAAO;AAAA,MAClC;AAEA,MAAA,MAAM,IAAA,GAAgC;AAAA,QACpC,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,SAAS,KAAA,CAAM;AAAA,OACjB;AACA,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,IAAA,CAAK,QAAA,GAAW,KAAA,CAAM,QAAA;AAI1C,MAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,MAAA,CAAO,SAAA;AAChD,MAAA,IAAI,WAAA,OAAkB,WAAA,GAAc,WAAA;AAIpC,MAAA,IAAI,MAAM,KAAA,CAAM,aAAA;AAChB,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,IAAI;AAEF,UAAA,MAAM,IAAK,UAAA,CAAmB,qBAAA;AAC9B,UAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,MAAA,GAAS,GAAG,GAAA,GAAM,CAAA;AAAA,QACnD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAEA,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,GAAA,EAAK,OAAA,CAAQ,kBAAkB,CAAA,GAAI,GAAA;AAEvC,MAAA,MAAM,GAAA,GAAM,MAAM,WAAA,CAAuB,MAAA,EAAQ;AAAA,QAC/C,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,2BAAA;AAAA,QACN,IAAA;AAAA,QACA,WAAA,EAAa,IAAA;AAAA,QACb;AAAA,OACD,CAAA;AAED,MAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,EAAA,KAAO,IAAA,EAAM;AAC3B,QAAA,MAAM,IAAI,WAAA,CAAY,kBAAA,EAAoB,mCAAmC,CAAA;AAAA,MAC/E;AACA,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,IAAA;AAAA,QACJ,OAAO,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,GAAW,IAAI,KAAA,GAAQ,MAAA;AAAA,QACnD,IAAA,EAAM;AAAA,OACR;AAAA,IACF;AAAA,GACF;AACF","file":"telemetry.mjs","sourcesContent":["/**\r\n * Erros tipados do SDK.\r\n *\r\n * Todo erro lançado pelo SDK estende `NeetruError` — caller pode discriminar\r\n * por `.code` (string estável) sem parsing de message.\r\n */\r\n\r\n/** Códigos de erro estáveis do SDK. Adicionar aqui requer minor bump. */\r\nexport type NeetruErrorCode =\r\n  | 'invalid_config'\r\n  | 'missing_api_key'\r\n  | 'unauthorized'\r\n  | 'forbidden'\r\n  | 'not_found'\r\n  | 'rate_limited'\r\n  | 'validation_failed'\r\n  | 'network_error'\r\n  | 'invalid_response'\r\n  | 'server_error'\r\n  | 'token_expired'\r\n  | 'token_invalid_signature'\r\n  | 'token_invalid_audience'\r\n  | 'token_invalid_issuer'\r\n  /** 3.0: runtime não expõe API necessária (ex: WebCrypto ausente). */\r\n  | 'runtime_unsupported'\r\n  /**\r\n   * 3.1.3 (bug_c1c96a00): o `state` retornado pelo IdP no callback OIDC não bate com o gerado em\r\n   * `signIn` (CSRF). Também usado quando não há transação OIDC pendente.\r\n   */\r\n  | 'oidc_state_mismatch'\r\n  /**\r\n   * 3.1.12 (incidente pdv-agiliza 2026-07-10): o `nonce` do `id_token` retornado\r\n   * pelo `/token` não bate com o gerado em `signIn` (possível replay). O token\r\n   * é descartado sem tocar o storage.\r\n   */\r\n  | 'oidc_nonce_mismatch'\r\n  /**\r\n   * 3.1.12: o POST `/api/v1/oauth/token` (troca do authorization_code por\r\n   * tokens em `completeSignIn`) falhou — HTTP não-2xx, corpo com `error`, ou\r\n   * resposta sem `id_token`.\r\n   */\r\n  | 'token_exchange_failed'\r\n  /** HTTP 409 — colisão de idempotência ou conflito de recurso. */\r\n  | 'conflict'\r\n  | 'unknown';\r\n\r\n/**\r\n * Erro tipado padrão do SDK. Sempre lançado em vez de Error genérico.\r\n *\r\n * @example\r\n * ```ts\r\n * try { await client.catalog.list(); }\r\n * catch (e) {\r\n *   if (e instanceof NeetruError && e.code === 'rate_limited') retry();\r\n * }\r\n * ```\r\n */\r\nexport class NeetruError extends Error {\r\n  public readonly code: NeetruErrorCode | string;\r\n  public readonly status?: number;\r\n  public readonly requestId?: string;\r\n  /**\r\n   * Motivo semântico opcional propagado pelo Core no corpo do erro (campo\r\n   * `reason` no TOPO do body, fora de `error`). Usado principalmente pelo 503\r\n   * de lease de DB, onde `reason` discrimina o estado do ambiente\r\n   * (`suspended` | `archived` | `revoked` | `provisioning` | `degraded` |\r\n   * `no_route` | `expired`). Camadas superiores (ex.: `db/sql`) mapeiam isso\r\n   * para um `NeetruDbErrorCode` mais específico (recuperável vs não).\r\n   */\r\n  public readonly reason?: string;\r\n\r\n  constructor(\r\n    code: NeetruErrorCode | string,\r\n    message: string,\r\n    status?: number,\r\n    requestId?: string,\r\n    reason?: string,\r\n  ) {\r\n    super(message);\r\n    this.name = 'NeetruError';\r\n    this.code = code;\r\n    this.status = status;\r\n    this.requestId = requestId;\r\n    this.reason = reason;\r\n    // Preserva o prototype chain ao herdar de Error (downlevel quirk de TS).\r\n    Object.setPrototypeOf(this, NeetruError.prototype);\r\n  }\r\n}\r\n","/**\r\n * Idempotency-Key helper — gera UUID v4 cripto-seguro para identificar\r\n * mutations não-idempotentes (`usage.report`, `support.createTicket`,\r\n * `notifications.send`, `webhooks.test`).\r\n *\r\n * Estratégia 3.0:\r\n *   - SDK gera UUID v4 por chamada via `randomUUID()` (WebCrypto.subtle não\r\n *     necessário aqui — `crypto.randomUUID()` está em Node 14.17+ e em todos\r\n *     os browsers/Edge runtimes modernos).\r\n *   - Header `Idempotency-Key: <uuid>` é injetado pelo `httpRequest` quando\r\n *     `opts.idempotencyKey === true` OU caller passa explicit `opts.idempotencyKeyValue`.\r\n *   - Core dedup em coleção `usage_idempotency_keys/{key}` TTL 24h (vide\r\n *     `docs/CORE_CHANGES_REQUIRED.md` §2). Se Core ainda não dedupa, o header\r\n *     é benign (ignorado).\r\n *\r\n * Defesa em camadas: combinado com `retries: 0` em POSTs (vide http.ts), o\r\n * risco de double-write em transientes vai pra zero.\r\n */\r\nimport { NeetruError } from './errors';\r\n\r\n/**\r\n * Gera UUID v4 criptograficamente seguro. Universal: Node 14.17+, browsers\r\n * modernos, Edge runtimes (Workers/Vercel Edge/Cloudflare).\r\n *\r\n * Fallback puro-JS removido em 3.0 — `crypto.randomUUID()` é ubíquo desde\r\n * 2022. Se runtime não tem, lança `NeetruError('runtime_unsupported')`\r\n * (consumer deve polyfillar).\r\n *\r\n * **L-01 fix (Opus review 2026-05-27):** antes lançava `Error` cru, que\r\n * não era pego por `catch (err) { if (err instanceof NeetruError) ... }`\r\n * dos consumers. Agora throw canonical.\r\n *\r\n * @throws NeetruError('runtime_unsupported') se `crypto.randomUUID` não disponível.\r\n */\r\nexport function generateIdempotencyKey(): string {\r\n  // WebCrypto (browser/Edge) e Node 14.17+ expõem `crypto.randomUUID()`.\r\n  // Node anterior precisa de `node:crypto` mas SDK 3.0 exige Node ≥20 (vide engines).\r\n  const cryptoObj: { randomUUID?: () => string } | undefined =\r\n    typeof globalThis !== 'undefined' && 'crypto' in globalThis\r\n      ? (globalThis as { crypto?: { randomUUID?: () => string } }).crypto\r\n      : undefined;\r\n  if (cryptoObj && typeof cryptoObj.randomUUID === 'function') {\r\n    return cryptoObj.randomUUID();\r\n  }\r\n  throw new NeetruError(\r\n    'runtime_unsupported',\r\n    'crypto.randomUUID not available in this runtime. SDK 3.0 requires Node ≥20 or modern browser/Edge.',\r\n  );\r\n}\r\n\r\n/** Regex UUID v4 — validação para uso interno. */\r\nexport const UUID_V4_RE =\r\n  /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\r\n","/**\r\n * HTTP transport interno do SDK.\r\n *\r\n * Responsabilidades:\r\n *   - Construir URL absoluta a partir de `baseUrl` + path\r\n *   - Injetar Bearer token quando `requireAuth=true`\r\n *   - Mapear status HTTP → `NeetruError` com `code` estável\r\n *   - Parse defensivo de JSON (não lança em body vazio em 204)\r\n *   - Retry/backoff exponencial em `rate_limited` (429), `server_error` (5xx)\r\n *     e `network_error` (timeout/falha de rede). Honra `Retry-After` quando\r\n *     presente.\r\n *   - **Captura `X-Neetru-Version`** das respostas e emite `console.warn` quando\r\n *     o Core está abaixo da versão mínima para a major do SDK.\r\n *\r\n * Política de retries (mudança breaking 3.0):\r\n *   - GET/HEAD: default 2 retries (3 tentativas total) — idempotente, seguro.\r\n *   - POST/PUT/PATCH/DELETE: default **0 retries** — mutations podem duplicar\r\n *     side effects (ex: `usage.report` incrementa contador). Caller pode\r\n *     reativar passando `retries: N` explicitamente ou usar `Idempotency-Key`\r\n *     header (gerado automaticamente se `opts.idempotencyKey=true`).\r\n *\r\n * Idempotency-Key (3.0):\r\n *   - `opts.idempotencyKey === true` → SDK gera UUID v4 e injeta header.\r\n *   - `opts.idempotencyKey === 'uuid-string'` → usa o valor passado.\r\n *   - Caller mantém retentos client-side se quiser; Core dedup serverside\r\n *     (vide `docs/CORE_CHANGES_REQUIRED.md` §2).\r\n */\r\nimport { NeetruError, type NeetruErrorCode } from './errors';\r\nimport { generateIdempotencyKey } from './idempotency';\r\nimport type { ResolvedConfig } from './types';\r\n\r\n// ─── Compat Matrix SDK↔Core ──────────────────────────────────────────────────\r\n\r\n/**\r\n * Matriz de compatibilidade SDK major → versão mínima do Core.\r\n *\r\n * Formato do Core: CalVer `YYYY.MM.patch+revision` (ex: `2026.05.1+neetru-core-00096-79t`).\r\n * A comparação é feita apenas nas partes `YYYY.MM.patch` (prefixo antes de `+`).\r\n *\r\n * Quando o Core reporta `X-Neetru-Version` abaixo do mínimo para a SDK major\r\n * corrente, o SDK emite `console.warn` uma única vez por sessão de processo.\r\n *\r\n * Atualize esta tabela a cada major de SDK.\r\n */\r\nconst COMPAT_MATRIX: Record<number, string> = {\r\n  // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,\r\n  // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)\r\n  3: '2026.05.1',\r\n};\r\n\r\n/** CalVer sem sufixo `+revision`. Ex: `2026.05.1+abc` → `2026.05.1`. */\r\nfunction stripRevision(v: string): string {\r\n  return v.split('+')[0] ?? v;\r\n}\r\n\r\n/**\r\n * Compara dois CalVer (`YYYY.MM.patch`). Retorna negativo se `a < b`,\r\n * positivo se `a > b`, 0 se iguais. Partes não numéricas tratadas como 0.\r\n */\r\nfunction compareCalVer(a: string, b: string): number {\r\n  const partsA = stripRevision(a).split('.').map(Number);\r\n  const partsB = stripRevision(b).split('.').map(Number);\r\n  const len = Math.max(partsA.length, partsB.length);\r\n  for (let i = 0; i < len; i++) {\r\n    const pa = partsA[i] ?? 0;\r\n    const pb = partsB[i] ?? 0;\r\n    if (pa !== pb) return pa - pb;\r\n  }\r\n  return 0;\r\n}\r\n\r\n/**\r\n * Versão do SDK injetada em tempo de build (tsup `define`, vide tsup.config.ts).\r\n * `undefined` fora de um build real (ex: rodando `.ts` direto em teste) --\r\n * consumers tratam a ausência como \"SDK pré-versionamento\" (caller antigo).\r\n */\r\nfunction readInjectedSdkVersion(): string | undefined {\r\n  try {\r\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n    return (globalThis as any).__NEETRU_SDK_VERSION__ as string | undefined;\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/** Lê a SDK major a partir da versão injetada em build. Fallback 3. */\r\nfunction getSdkMajor(): number {\r\n  const ver = readInjectedSdkVersion();\r\n  if (ver) return parseInt(ver.split('.')[0] ?? '3', 10);\r\n  return 3;\r\n}\r\n\r\n/** Aviso emitido no máximo uma vez por major detectada pra não spammar logs. */\r\nconst _warnedCoreTooOld = new Set<string>();\r\n\r\n/**\r\n * Verifica se a versão do Core (`X-Neetru-Version`) é compatível com a SDK major.\r\n * Emite `console.warn` quando incompatível (uma vez por processo por versão detectada).\r\n */\r\nexport function checkCoreVersionCompat(coreVersion: string): void {\r\n  if (!coreVersion) return;\r\n  const sdkMajor = getSdkMajor();\r\n  const minCore = COMPAT_MATRIX[sdkMajor];\r\n  if (!minCore) return; // sem restrição para esta major\r\n  const stripped = stripRevision(coreVersion);\r\n  if (compareCalVer(stripped, minCore) < 0) {\r\n    const key = `${sdkMajor}:${stripped}`;\r\n    if (!_warnedCoreTooOld.has(key)) {\r\n      _warnedCoreTooOld.add(key);\r\n      console.warn(\r\n        `[Neetru SDK] Atenção: Core versão \"${coreVersion}\" é anterior ao mínimo recomendado` +\r\n          ` \"${minCore}\" para SDK major ${sdkMajor}. Alguns recursos podem não funcionar` +\r\n          ` corretamente. Atualize o Core para a versão mais recente.`,\r\n      );\r\n    }\r\n  }\r\n}\r\n\r\n/** Opções da request HTTP. */\r\nexport interface HttpRequestOptions {\r\n  method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\r\n  /** Path relativo (ex: `/api/v1/cli/catalog`). Concatenado a `baseUrl`. */\r\n  path: string;\r\n  /** Query string params (chave → valor primitivo). Valores `undefined` ignorados. */\r\n  query?: Record<string, string | number | boolean | undefined>;\r\n  /** Body JSON-serializável. Ignorado em GET/DELETE. */\r\n  body?: unknown;\r\n  /**\r\n   * Se true, injeta `Authorization: Bearer <apiKey>`. Lança `missing_api_key`\r\n   * se config.apiKey ausente. Default false.\r\n   */\r\n  requireAuth?: boolean;\r\n  /** Cabeçalhos extras. */\r\n  headers?: Record<string, string>;\r\n  /**\r\n   * Número de retries em códigos transientes (`rate_limited`, `server_error`,\r\n   * `network_error`).\r\n   *\r\n   * Default (3.0):\r\n   *   - GET/HEAD: 2 (= 3 tentativas total) — idempotente, seguro.\r\n   *   - POST/PUT/PATCH/DELETE: 0 — mutations podem duplicar side effects.\r\n   *\r\n   * Caller pode reativar passando explicitamente: `retries: 2`.\r\n   */\r\n  retries?: number;\r\n  /**\r\n   * Injeta `Idempotency-Key` header pra dedup serverside (3.0):\r\n   *   - `true` → SDK gera UUID v4 cripto-seguro automaticamente.\r\n   *   - string → usa o valor passado (deve ser UUID v4).\r\n   *   - `undefined`/`false` → sem header.\r\n   */\r\n  idempotencyKey?: boolean | string;\r\n}\r\n\r\nconst DEFAULT_RETRIES_READ = 2;\r\nconst DEFAULT_RETRIES_WRITE = 0;\r\nconst READ_METHODS = new Set(['GET', 'HEAD']);\r\nconst RETRYABLE_CODES = new Set<NeetruErrorCode>([\r\n  'rate_limited',\r\n  'server_error',\r\n  'network_error',\r\n]);\r\n\r\n/** Backoff exponencial com jitter ±20%. attempt: 0=primeira, 1=primeiro retry, ... */\r\nfunction backoffMs(attempt: number): number {\r\n  const base = 200 * Math.pow(4, attempt); // 200ms, 800ms, 3.2s, ...\r\n  const jitter = base * 0.2 * (Math.random() * 2 - 1);\r\n  return Math.max(50, Math.round(base + jitter));\r\n}\r\n\r\n/**\r\n * Honra `Retry-After` header (segundos ou HTTP-date). Retorna ms ou null se\r\n * inválido. RFC 9110 §10.2.3.\r\n *\r\n * Bug fix: sem teto, um servidor hostil/mal-configurado poderia retornar\r\n * `Retry-After: 86400` (24h) ou uma HTTP-date anos no futuro, pendurando o\r\n * processo indefinidamente. Aplica teto de MAX_RETRY_AFTER_MS em ambos os caminhos.\r\n */\r\nconst MAX_RETRY_AFTER_MS = 60_000; // 60s — teto razoável para retry automático\r\n\r\nfunction parseRetryAfter(value: string | null): number | null {\r\n  if (!value) return null;\r\n  const secs = Number(value);\r\n  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1000), MAX_RETRY_AFTER_MS);\r\n  const dateMs = Date.parse(value);\r\n  if (Number.isFinite(dateMs)) {\r\n    const delta = dateMs - Date.now();\r\n    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);\r\n  }\r\n  return null;\r\n}\r\n\r\nfunction sleep(ms: number): Promise<void> {\r\n  return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n/**\r\n * Mapeamento status → code estável do NeetruError. Exportado para reuso\r\n * (ex: `ai.ts` espelhava esta função duplicada — DRY, achado da auditoria\r\n * 2026-09-15).\r\n */\r\nexport function statusToCode(status: number): NeetruErrorCode {\r\n  if (status === 401) return 'unauthorized';\r\n  if (status === 403) return 'forbidden';\r\n  if (status === 404) return 'not_found';\r\n  if (status === 409) return 'conflict'; // Bug fix: 409 vira 'conflict' (não 'unknown')\r\n  if (status === 422 || status === 400) return 'validation_failed';\r\n  if (status === 429) return 'rate_limited';\r\n  if (status >= 500) return 'server_error';\r\n  return 'unknown';\r\n}\r\n\r\nfunction buildUrl(baseUrl: string, path: string, query?: HttpRequestOptions['query']): string {\r\n  // Trim trailing slash em base e leading em path pra evitar `//`.\r\n  const base = baseUrl.replace(/\\/+$/, '');\r\n  const p = path.startsWith('/') ? path : `/${path}`;\r\n  const url = new URL(`${base}${p}`);\r\n  if (query) {\r\n    for (const [k, v] of Object.entries(query)) {\r\n      if (v === undefined) continue;\r\n      url.searchParams.set(k, String(v));\r\n    }\r\n  }\r\n  return url.toString();\r\n}\r\n\r\n/** Parse JSON defensivo — retorna `undefined` em body vazio. */\r\nasync function safeJson(res: Response): Promise<unknown> {\r\n  const text = await res.text();\r\n  if (!text) return undefined;\r\n  try {\r\n    return JSON.parse(text);\r\n  } catch {\r\n    return undefined;\r\n  }\r\n}\r\n\r\n/**\r\n * Executa request HTTP. Em sucesso retorna body parseado; em erro lança\r\n * `NeetruError` com `code` derivado do status. Aplica retry/backoff\r\n * automático em códigos transientes (rate_limited/server_error/network_error)\r\n * conforme `opts.retries` (default 2 = 3 tentativas).\r\n */\r\nexport async function httpRequest<T>(\r\n  config: ResolvedConfig,\r\n  opts: HttpRequestOptions,\r\n): Promise<T> {\r\n  const method = opts.method ?? 'GET';\r\n  const url = buildUrl(config.baseUrl, opts.path, opts.query);\r\n  // Default por método: reads tentam 2x, writes 0x. Caller override sempre vence.\r\n  const defaultRetries = READ_METHODS.has(method)\r\n    ? DEFAULT_RETRIES_READ\r\n    : DEFAULT_RETRIES_WRITE;\r\n  const maxRetries = opts.retries ?? defaultRetries;\r\n\r\n  const headers: Record<string, string> = {\r\n    accept: 'application/json',\r\n    ...opts.headers,\r\n  };\r\n\r\n  // Melhoria 2026-09-19: o Core não tinha NENHUMA visibilidade da versão do\r\n  // SDK que fazia cada request -- quando uma rota mudava de contrato (ex:\r\n  // telemetry/event exigindo Bearer incompatível com apiKey publicável), um\r\n  // caller desatualizado só via 401 genérico, indistinguível de qualquer\r\n  // outra falha de auth, e o Core não tinha como saber/alertar. Este header\r\n  // é a base pra isso nunca mais falhar calado (ver sdk-compat no Core).\r\n  // Ausência do header (build antigo, sem o `define` do tsup) já é sinal\r\n  // suficiente de \"SDK pré-versionamento\" pro lado do Core.\r\n  const sdkVersion = readInjectedSdkVersion();\r\n  if (sdkVersion) {\r\n    headers['x-neetru-sdk-version'] = sdkVersion;\r\n  }\r\n\r\n  if (opts.requireAuth) {\r\n    if (!config.apiKey) {\r\n      throw new NeetruError(\r\n        'missing_api_key',\r\n        'This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.',\r\n      );\r\n    }\r\n    headers.authorization = `Bearer ${config.apiKey}`;\r\n  }\r\n\r\n  // Idempotency-Key: gerado por chamada se solicitado. UUID v4 cripto-seguro.\r\n  if (opts.idempotencyKey) {\r\n    const key =\r\n      typeof opts.idempotencyKey === 'string'\r\n        ? opts.idempotencyKey\r\n        : generateIdempotencyKey();\r\n    headers['idempotency-key'] = key;\r\n  }\r\n\r\n  // Body só é serializado uma vez — reusado entre tentativas.\r\n  const bodyString =\r\n    opts.body !== undefined && method !== 'GET' && method !== 'DELETE'\r\n      ? JSON.stringify(opts.body)\r\n      : undefined;\r\n  if (bodyString !== undefined) {\r\n    headers['content-type'] = 'application/json';\r\n  }\r\n\r\n  let lastError: NeetruError | null = null;\r\n\r\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\r\n    const init: RequestInit = { method, headers };\r\n    if (bodyString !== undefined) init.body = bodyString;\r\n    // BUG-020 fix (2026-05-13): timeout default 30s. AbortSignal.timeout\r\n    // requer Node 18+ ou browsers recentes.\r\n    init.signal = AbortSignal.timeout(30_000);\r\n\r\n    let res: Response;\r\n    try {\r\n      res = await config.fetch(url, init);\r\n    } catch (err) {\r\n      const message =\r\n        err instanceof DOMException && err.name === 'TimeoutError'\r\n          ? 'Network error: timeout after 30s'\r\n          : `Network error: ${err instanceof Error ? err.message : 'fetch failed'}`;\r\n      lastError = new NeetruError('network_error', message);\r\n      if (attempt < maxRetries) {\r\n        await sleep(backoffMs(attempt));\r\n        continue;\r\n      }\r\n      throw lastError;\r\n    }\r\n\r\n    const requestId =\r\n      res.headers.get('x-request-id') ?? res.headers.get('x-correlation-id') ?? undefined;\r\n\r\n    if (res.ok) {\r\n      // Captura X-Neetru-Version e verifica compat com a SDK major.\r\n      const coreVersion = res.headers.get('x-neetru-version');\r\n      if (coreVersion) checkCoreVersionCompat(coreVersion);\r\n      const parsed = await safeJson(res);\r\n      return parsed as T;\r\n    }\r\n\r\n    // O contrato clássico de erro do Core é `{ error: { code, message } }`.\r\n    // O 503 de lease de DB (e alguns endpoints novos) coloca `code`/`reason`/\r\n    // `message` no TOPO do corpo, SEM envelope `error`. Lemos ambos: preferimos\r\n    // `body.error` quando presente; caímos nos campos do topo caso contrário.\r\n    // `reason` é sempre considerado no topo (o 503 de lease o coloca lá mesmo\r\n    // quando há `error`), pra que a camada de DB discrimine suspended/archived/\r\n    // revoked de provisioning/degraded.\r\n    const body = (await safeJson(res)) as\r\n      | {\r\n          error?: { code?: string; message?: string; reason?: string } | string;\r\n          code?: string;\r\n          reason?: string;\r\n          message?: string;\r\n        }\r\n      | undefined;\r\n    let code: string = statusToCode(res.status);\r\n    let message = `HTTP ${res.status}`;\r\n    let reason: string | undefined;\r\n    if (body && typeof body === 'object') {\r\n      const errField = body.error;\r\n      if (typeof errField === 'string') {\r\n        message = errField;\r\n      } else if (errField && typeof errField === 'object') {\r\n        if (typeof errField.code === 'string') code = errField.code;\r\n        if (typeof errField.message === 'string') message = errField.message;\r\n        if (typeof errField.reason === 'string') reason = errField.reason;\r\n      } else {\r\n        // Sem envelope `error` — lê os campos no TOPO do corpo (contrato do 503\r\n        // de lease: `{ code, reason }` no topo).\r\n        if (typeof body.code === 'string') code = body.code;\r\n        if (typeof body.message === 'string') message = body.message;\r\n      }\r\n      // `reason` no topo tem prioridade final (o 503 de lease o coloca no topo\r\n      // mesmo quando também há `error`).\r\n      if (typeof body.reason === 'string') reason = body.reason;\r\n    }\r\n    const err = new NeetruError(code, message, res.status, requestId, reason);\r\n    lastError = err;\r\n\r\n    const isRetryable = RETRYABLE_CODES.has(code as NeetruErrorCode);\r\n    if (isRetryable && attempt < maxRetries) {\r\n      const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\r\n      const delay = retryAfter ?? backoffMs(attempt);\r\n      await sleep(delay);\r\n      continue;\r\n    }\r\n    throw err;\r\n  }\r\n\r\n  // Unreachable — loop sempre retorna ou lança. Safety net.\r\n  throw lastError ?? new NeetruError('unknown', 'unexpected httpRequest exit');\r\n}\r\n","/**\r\n * Telemetria — emite eventos do produto cliente pro Core.\r\n *\r\n * APIs disponíveis:\r\n *   - `event(input)` — chamada single-shot, await retorna { ok, eventId }.\r\n *   - `track(input)` — fire-and-forget (v1.2). Enqueue + flush 500ms debounce.\r\n *     Não bloqueia o caller — ideal pra alta frequência (cliques, page-views).\r\n *     Falhas viram warning no console.\r\n *   - `flush()` — força flush imediato da queue (chamar antes de unload).\r\n *   - `log(input)` — log estruturado `POST /api/sdk/v1/telemetry/log` com\r\n *     Bearer + correlationId. Em `NEETRU_ENV=dev` cai pra console.{level}.\r\n *\r\n * ## Roteamento browser vs server (fix 2026-09-09, achado telemetria 401)\r\n *\r\n * `event()`/`track()` são documentados pra uso client-side de alta frequência\r\n * (cliques, page-views) — mas `/api/sdk/v1/telemetry/event` exige `Bearer`\r\n * com `cli_api_keys`, uma credencial de operador que NUNCA deveria estar no\r\n * browser. Resultado real observado em produção: 401 silencioso, telemetria\r\n * de UI nunca chegando ao Core (mesma classe de bug do `checkout.start()`\r\n * exigindo `access_token` no browser, bug_72ccf42).\r\n *\r\n * Fix: em contexto browser (`typeof window !== 'undefined'`), `event()`/\r\n * `track()` chamam `/api/sdk/v1/telemetry/event/public` (sem Bearer — o Core\r\n * valida a origem via header `Origin` contra `product_subdomains`, não\r\n * credencial) em vez do endpoint autenticado. Server-side (Node.js, SSR,\r\n * jobs) continua no endpoint autenticado original, sem mudança de\r\n * comportamento.\r\n *\r\n * Corrigido junto: `productSlug` nunca era enviado no body de `event()`/\r\n * `track()` (só `log()` já mandava, desde o achado C4). O Core exige\r\n * `productSlug` fail-closed (400 sem ele) — todo evento de `event()`/\r\n * `track()` estava, na prática, sempre rejeitado pelo endpoint autenticado\r\n * mesmo quando a auth passava. Mesmo default de `log()`/`usage.track()`:\r\n * `input.productSlug ?? config.productId`.\r\n */\r\nimport { NeetruError } from './errors';\r\nimport { httpRequest } from './http';\r\nimport type {\r\n  ResolvedConfig,\r\n  TelemetryEventAck,\r\n  TelemetryEventInput,\r\n  TelemetryLogAck,\r\n  TelemetryLogInput,\r\n  TelemetryLogLevel,\r\n} from './types';\r\n\r\ninterface RawTelemetryAck {\r\n  ok?: boolean;\r\n  eventId?: string;\r\n}\r\n\r\ninterface RawLogAck {\r\n  ok?: boolean;\r\n  logId?: string;\r\n}\r\n\r\nconst VALID_LOG_LEVELS: readonly TelemetryLogLevel[] = ['debug', 'info', 'warn', 'error', 'fatal'];\r\n\r\n/** Browser detection — sem `window`/DOM lib no tsconfig, checagem duck-typed. */\r\nfunction isBrowserContext(): boolean {\r\n  return typeof globalThis !== 'undefined' && typeof (globalThis as { window?: unknown }).window !== 'undefined';\r\n}\r\n\r\n/**\r\n * Path + `requireAuth` do endpoint de evento conforme o contexto de execução.\r\n * Browser → endpoint público (sem Bearer, Origin-gated no Core). Server →\r\n * endpoint autenticado original, sem mudança de comportamento.\r\n */\r\nfunction resolveEventTransport(): { path: string; requireAuth: boolean } {\r\n  return isBrowserContext()\r\n    ? { path: '/api/sdk/v1/telemetry/event/public', requireAuth: false }\r\n    : { path: '/api/sdk/v1/telemetry/event', requireAuth: true };\r\n}\r\n\r\nfunction consoleFor(level: TelemetryLogLevel): (message?: unknown, ...optional: unknown[]) => void {\r\n  switch (level) {\r\n    case 'debug': return console.debug.bind(console);\r\n    case 'info': return console.info.bind(console);\r\n    case 'warn': return console.warn.bind(console);\r\n    case 'error': return console.error.bind(console);\r\n    case 'fatal': return console.error.bind(console);\r\n    default: return console.log.bind(console);\r\n  }\r\n}\r\n\r\n/** Janela de debounce do `track()` antes de drenar a queue. */\r\nconst TRACK_FLUSH_MS = 500;\r\n/** Limite de eventos na queue antes de flush forçado (defensivo). */\r\nconst TRACK_MAX_QUEUE = 50;\r\n\r\nexport function createTelemetryNamespace(config: ResolvedConfig) {\r\n  // Queue local pra track() — fire-and-forget batchado.\r\n  const queue: TelemetryEventInput[] = [];\r\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\r\n  // bug: flush() precisava aguardar drain já em voo p/ não resolver antes do envio\r\n  let _inflightDrain: Promise<void> | null = null;\r\n\r\n  async function drainQueue(): Promise<void> {\r\n    if (queue.length === 0) return;\r\n    // (a) Capture the current batch BEFORE the async boundary so that any\r\n    //     track() call arriving during the await works on a clean queue.\r\n    const batch = queue.splice(0, queue.length);\r\n    // NOTE: flushTimer is intentionally NOT cleared here.  Clearing it before\r\n    // the await would let a concurrent track() schedule a second timer, fire\r\n    // it while this flush is still in-flight, and produce duplicate concurrent\r\n    // drainQueue calls.  We clear it only after the await (see below).\r\n    const work = Promise.allSettled(\r\n      batch.map(async (ev) => {\r\n        try {\r\n          const body: Record<string, unknown> = { name: ev.name };\r\n          const productSlug = ev.productSlug ?? config.productId;\r\n          if (productSlug) body.productSlug = productSlug;\r\n          if (ev.properties && typeof ev.properties === 'object') {\r\n            body.properties = ev.properties;\r\n          }\r\n          if (ev.timestamp) body.timestamp = ev.timestamp;\r\n          const transport = resolveEventTransport();\r\n          await httpRequest<RawTelemetryAck>(config, {\r\n            method: 'POST',\r\n            path: transport.path,\r\n            body,\r\n            requireAuth: transport.requireAuth,\r\n            retries: 1,\r\n            // caça-bruxas: retry sem Idempotency-Key duplicava o evento se o\r\n            // servidor já tinha persistido antes da falha transiente. Mesmo\r\n            // padrão do usage.report (key estável por chamada, reusada no retry).\r\n            idempotencyKey: true,\r\n          });\r\n        } catch (err) {\r\n          if (typeof console !== 'undefined') {\r\n            console.warn('[neetru-sdk] telemetry.track flush failed for event', ev.name, err);\r\n          }\r\n        }\r\n      }),\r\n    );\r\n    // Registra promise em voo para que flush() possa aguardar (bug finding 4)\r\n    _inflightDrain = work.then(() => { _inflightDrain = null; });\r\n    // (b) Release the timer slot AFTER the await so that any track() calls\r\n    //     that arrived during the flush and called scheduleFlush() were\r\n    //     correctly suppressed (flushTimer was still set).  Now that the\r\n    //     in-flight requests are done we reset it and, if new events were\r\n    //     enqueued while we were awaiting, schedule the next flush.\r\n    await work;\r\n    flushTimer = null;\r\n    // (c) If events arrived during the flush window, schedule the next drain.\r\n    if (queue.length > 0) {\r\n      scheduleFlush();\r\n    }\r\n  }\r\n\r\n  function scheduleFlush(): void {\r\n    if (flushTimer) return;\r\n    flushTimer = setTimeout(() => {\r\n      void drainQueue();\r\n    }, TRACK_FLUSH_MS);\r\n  }\r\n\r\n  return {\r\n    /**\r\n     * Persiste um evento de uso. Lança `NeetruError` em qualquer falha\r\n     * (incluindo rate-limit).\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * await client.telemetry.event({\r\n     *   name: 'dashboard_opened',\r\n     *   properties: { plan: 'pro', tab: 'overview' },\r\n     * });\r\n     * ```\r\n     */\r\n    async event(input: TelemetryEventInput): Promise<TelemetryEventAck> {\r\n      if (!input || typeof input !== 'object') {\r\n        throw new NeetruError('validation_failed', 'event input is required');\r\n      }\r\n      if (typeof input.name !== 'string' || input.name.length === 0) {\r\n        throw new NeetruError('validation_failed', 'event.name is required');\r\n      }\r\n      if (input.name.length > 128) {\r\n        throw new NeetruError('validation_failed', 'event.name max 128 chars');\r\n      }\r\n\r\n      const body: Record<string, unknown> = { name: input.name };\r\n      const productSlug = input.productSlug ?? config.productId;\r\n      if (productSlug) body.productSlug = productSlug;\r\n      if (input.properties && typeof input.properties === 'object') {\r\n        body.properties = input.properties;\r\n      }\r\n      if (input.timestamp) body.timestamp = input.timestamp;\r\n\r\n      const transport = resolveEventTransport();\r\n      const raw = await httpRequest<RawTelemetryAck>(config, {\r\n        method: 'POST',\r\n        path: transport.path,\r\n        body,\r\n        requireAuth: transport.requireAuth,\r\n      });\r\n\r\n      if (!raw || raw.ok !== true || typeof raw.eventId !== 'string') {\r\n        throw new NeetruError('invalid_response', 'Telemetry response missing eventId');\r\n      }\r\n      return { ok: true, eventId: raw.eventId };\r\n    },\r\n\r\n    /**\r\n     * Fire-and-forget: enqueue + flush 500ms debounce. Não retorna `eventId`\r\n     * — falhas são logadas como warning. Ideal pra alta frequência.\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * client.telemetry.track({ name: 'page_view', properties: { path: '/' } });\r\n     * // segue execução; flush async em background\r\n     * ```\r\n     */\r\n    track(input: TelemetryEventInput): void {\r\n      if (!input || typeof input !== 'object') return;\r\n      if (typeof input.name !== 'string' || input.name.length === 0) return;\r\n      if (input.name.length > 128) return;\r\n      queue.push(input);\r\n      if (queue.length >= TRACK_MAX_QUEUE) {\r\n        // bug: timer pendente não era cancelado → dois drainQueue() concorrentes\r\n        if (flushTimer) { clearTimeout(flushTimer); flushTimer = null; }\r\n        void drainQueue();\r\n      } else {\r\n        scheduleFlush();\r\n      }\r\n    },\r\n\r\n    /**\r\n     * Força flush imediato da queue de `track()`. Resolva antes de\r\n     * page unload / SSR boundary pra não perder eventos.\r\n     */\r\n    async flush(): Promise<void> {\r\n      if (flushTimer) {\r\n        clearTimeout(flushTimer);\r\n        flushTimer = null;\r\n      }\r\n      // bug: flush() resolvia antes do drain já em voo terminar (finding 4)\r\n      if (_inflightDrain) await _inflightDrain;\r\n      await drainQueue();\r\n    },\r\n\r\n    /**\r\n     * Registra um log estruturado per-product (Sprint 6).\r\n     *\r\n     * - `NEETRU_ENV=dev`: console.{level}, retorna ack mock.\r\n     * - workspace/prod: HTTP POST com Bearer auth + correlationId no header.\r\n     *\r\n     * @example\r\n     * ```ts\r\n     * await client.telemetry.log({\r\n     *   level: 'error',\r\n     *   message: 'Falha ao calcular total',\r\n     *   metadata: { orderId: 'o-123' },\r\n     * });\r\n     * ```\r\n     */\r\n    async log(input: TelemetryLogInput): Promise<TelemetryLogAck> {\r\n      if (!input || typeof input !== 'object') {\r\n        throw new NeetruError('validation_failed', 'log input is required');\r\n      }\r\n      if (!VALID_LOG_LEVELS.includes(input.level)) {\r\n        throw new NeetruError('validation_failed', `level must be one of ${VALID_LOG_LEVELS.join(', ')}`);\r\n      }\r\n      if (typeof input.message !== 'string' || input.message.length === 0) {\r\n        throw new NeetruError('validation_failed', 'message is required');\r\n      }\r\n      if (input.message.length > 4_000) {\r\n        throw new NeetruError('validation_failed', 'message max 4000 chars');\r\n      }\r\n\r\n      // Dev mode: console only, no network.\r\n      if (config.env === 'dev') {\r\n        const fn = consoleFor(input.level);\r\n        fn(`[neetru-sdk] ${input.level}: ${input.message}`, input.metadata ?? {});\r\n        return { ok: true, mode: 'mock' };\r\n      }\r\n\r\n      const body: Record<string, unknown> = {\r\n        level: input.level,\r\n        message: input.message,\r\n      };\r\n      if (input.metadata) body.metadata = input.metadata;\r\n      // C4 (auditoria 2026-06-10): o Core exige productSlug fail-closed (400 sem\r\n      // ele). Quando o consumer não passa explicito, default pro config.productId\r\n      // (mesmo contrato de usage.report/support). O backend NÃO infere o slug.\r\n      const productSlug = input.productSlug ?? config.productId;\r\n      if (productSlug) body.productSlug = productSlug;\r\n\r\n      // CorrelationId: explicit input wins; senão tenta lê de globalThis (set\r\n      // por instrumentação do consumer).\r\n      let cid = input.correlationId;\r\n      if (!cid) {\r\n        try {\r\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n          const g = (globalThis as any).NEETRU_CORRELATION_ID;\r\n          if (typeof g === 'string' && g.length > 0) cid = g;\r\n        } catch {\r\n          /* ignore */\r\n        }\r\n      }\r\n\r\n      const headers: Record<string, string> = {};\r\n      if (cid) headers['x-correlation-id'] = cid;\r\n\r\n      const raw = await httpRequest<RawLogAck>(config, {\r\n        method: 'POST',\r\n        path: '/api/sdk/v1/telemetry/log',\r\n        body,\r\n        requireAuth: true,\r\n        headers,\r\n      });\r\n\r\n      if (!raw || raw.ok !== true) {\r\n        throw new NeetruError('invalid_response', 'Telemetry log response missing ok');\r\n      }\r\n      return {\r\n        ok: true,\r\n        logId: typeof raw.logId === 'string' ? raw.logId : undefined,\r\n        mode: 'http',\r\n      };\r\n    },\r\n  };\r\n}\r\n"]}

package/dist/{types-nnztVk7G.d.ts → types-BPATkXYu.d.ts}

@@ -1402,11 +1402,25 @@ interface DbSqlLease {
     user: string;
     /** Plaintext — trafega só sobre HTTPS, NUNCA logado/persistido. */
     password: string;
-    /** CA do servidor para TLS — null até mTLS do Core (TODO P0-3). */
+    /**
+     * CA do servidor PgBouncer, para **TLS de servidor** (verify-full). Quando
+     * presente, o pool valida o certificado do servidor contra esta CA
+     * (`rejectUnauthorized: true`). `null` quando o lease não traz TLS.
+     */
     sslca: string | null;
-    /** Cert de cliente — null até mTLS do Core. */
+    /**
+     * Certificado de **cliente** para mTLS (o SDK apresentar identidade ao
+     * servidor). **mTLS-cliente NÃO está implementado no Core (TODO P0-3):** hoje
+     * este campo é SEMPRE `null`, portanto **não há mTLS ativo** — a conexão usa,
+     * no máximo, TLS de servidor (verify-full via `sslca`). O SDK já envia este
+     * cert ao pool quando/se o lease passar a trazê-lo.
+     */
     clientCert: string | null;
-    /** Chave de cliente — null até mTLS do Core. */
+    /**
+     * Chave privada de **cliente** para mTLS — par de `clientCert`. Mesma
+     * condição: `null` até o Core emitir material de cliente (mTLS-cliente
+     * pendente, P0-3).
+     */
     clientKey: string | null;
     /**
      * Versão da credencial no Secret Manager. Bump = rotação de senha.
@@ -1990,8 +2004,12 @@ interface NeetruClientConfig {
      * `dev-local` chama HTTP real contra o Core local do emulador da Dev Suite
      * (`neetru dev up`): sem `baseUrl` explícito, aponta pra `http://localhost:9003`.
      *
-     * Default: lê `process.env.NEETRU_ENV` (Node) ou `globalThis.NEETRU_ENV`
-     * (browser); fallback `prod`.
+     * Default: lê `process.env.NEETRU_ENV` (Node / server-side) — ÚNICA fonte de
+     * env que pode ativar `dev`/`dev-local`. `globalThis.NEETRU_ENV` (browser) só é
+     * honrado para `workspace`/`prod` (HTTP real), NUNCA para `dev` — é um canal
+     * client-side não-confiável (SECURITY audit 2026-06-18). Fallback `prod`.
+     * Além disso, mocks-por-env são IMPOSSÍVEIS em produção (`NODE_ENV=production`):
+     * lá, só `mocks` injetado explicitamente ativa comportamento mock.
      */
     env?: 'dev' | 'workspace' | 'prod' | 'dev-local';
     /**
@@ -2063,10 +2081,20 @@ interface Product {
     ctaHref?: string;
     /** Label override do CTA. */
     ctaLabel?: string;
-    /** Lista opcional de planos cobrados. Pode ser preenchida v0.2+. */
+    /**
+     * Planos cobrados do produto. **EXPERIMENTAL / reservado (2026-09-19):** os
+     * endpoints do catálogo serializam este campo condicionalmente, mas o Core
+     * ainda NÃO o popula por nenhum caminho de escrita (upsert / CLI / reorder) —
+     * na prática vem SEMPRE ausente/vazio. NÃO construa UX assumindo que existe;
+     * trate como opcional e possivelmente inexistente até o Core passar a emitir
+     * planos publicamente.
+     */
     plans?: ProductPlan[];
 }
-/** Plano cobrado de um produto (placeholder v0.1 — schema final v0.2). */
+/**
+ * Plano cobrado de um produto. **EXPERIMENTAL:** o Core ainda não emite este
+ * shape (ver `Product.plans`). Mantido para parse forward-compatible.
+ */
 interface ProductPlan {
     id: string;
     name: string;

package/dist/{types-DIVZl7nO.d.cts → types-Du_iioJ7.d.cts}

@@ -1402,11 +1402,25 @@ interface DbSqlLease {
     user: string;
     /** Plaintext — trafega só sobre HTTPS, NUNCA logado/persistido. */
     password: string;
-    /** CA do servidor para TLS — null até mTLS do Core (TODO P0-3). */
+    /**
+     * CA do servidor PgBouncer, para **TLS de servidor** (verify-full). Quando
+     * presente, o pool valida o certificado do servidor contra esta CA
+     * (`rejectUnauthorized: true`). `null` quando o lease não traz TLS.
+     */
     sslca: string | null;
-    /** Cert de cliente — null até mTLS do Core. */
+    /**
+     * Certificado de **cliente** para mTLS (o SDK apresentar identidade ao
+     * servidor). **mTLS-cliente NÃO está implementado no Core (TODO P0-3):** hoje
+     * este campo é SEMPRE `null`, portanto **não há mTLS ativo** — a conexão usa,
+     * no máximo, TLS de servidor (verify-full via `sslca`). O SDK já envia este
+     * cert ao pool quando/se o lease passar a trazê-lo.
+     */
     clientCert: string | null;
-    /** Chave de cliente — null até mTLS do Core. */
+    /**
+     * Chave privada de **cliente** para mTLS — par de `clientCert`. Mesma
+     * condição: `null` até o Core emitir material de cliente (mTLS-cliente
+     * pendente, P0-3).
+     */
     clientKey: string | null;
     /**
      * Versão da credencial no Secret Manager. Bump = rotação de senha.
@@ -1990,8 +2004,12 @@ interface NeetruClientConfig {
      * `dev-local` chama HTTP real contra o Core local do emulador da Dev Suite
      * (`neetru dev up`): sem `baseUrl` explícito, aponta pra `http://localhost:9003`.
      *
-     * Default: lê `process.env.NEETRU_ENV` (Node) ou `globalThis.NEETRU_ENV`
-     * (browser); fallback `prod`.
+     * Default: lê `process.env.NEETRU_ENV` (Node / server-side) — ÚNICA fonte de
+     * env que pode ativar `dev`/`dev-local`. `globalThis.NEETRU_ENV` (browser) só é
+     * honrado para `workspace`/`prod` (HTTP real), NUNCA para `dev` — é um canal
+     * client-side não-confiável (SECURITY audit 2026-06-18). Fallback `prod`.
+     * Além disso, mocks-por-env são IMPOSSÍVEIS em produção (`NODE_ENV=production`):
+     * lá, só `mocks` injetado explicitamente ativa comportamento mock.
      */
     env?: 'dev' | 'workspace' | 'prod' | 'dev-local';
     /**
@@ -2063,10 +2081,20 @@ interface Product {
     ctaHref?: string;
     /** Label override do CTA. */
     ctaLabel?: string;
-    /** Lista opcional de planos cobrados. Pode ser preenchida v0.2+. */
+    /**
+     * Planos cobrados do produto. **EXPERIMENTAL / reservado (2026-09-19):** os
+     * endpoints do catálogo serializam este campo condicionalmente, mas o Core
+     * ainda NÃO o popula por nenhum caminho de escrita (upsert / CLI / reorder) —
+     * na prática vem SEMPRE ausente/vazio. NÃO construa UX assumindo que existe;
+     * trate como opcional e possivelmente inexistente até o Core passar a emitir
+     * planos publicamente.
+     */
     plans?: ProductPlan[];
 }
-/** Plano cobrado de um produto (placeholder v0.1 — schema final v0.2). */
+/**
+ * Plano cobrado de um produto. **EXPERIMENTAL:** o Core ainda não emite este
+ * shape (ver `Product.plans`). Mantido para parse forward-compatible.
+ */
 interface ProductPlan {
     id: string;
     name: string;

package/dist/usage.cjs

@@ -57,12 +57,16 @@ function compareCalVer(a, b) {
   }
   return 0;
 }
-function getSdkMajor() {
+function readInjectedSdkVersion() {
   try {
-    const ver = globalThis.__NEETRU_SDK_VERSION__;
-    if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
+    return "3.6.0";
   } catch {
+    return void 0;
   }
+}
+function getSdkMajor() {
+  const ver = readInjectedSdkVersion();
+  if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
   return 3;
 }
 var _warnedCoreTooOld = /* @__PURE__ */ new Set();
@@ -150,6 +154,10 @@ async function httpRequest(config, opts) {
     accept: "application/json",
     ...opts.headers
   };
+  const sdkVersion = readInjectedSdkVersion();
+  if (sdkVersion) {
+    headers["x-neetru-sdk-version"] = sdkVersion;
+  }
   if (opts.requireAuth) {
     if (!config.apiKey) {
       throw new NeetruError(