@neetru/sdk 3.5.0 → 3.7.0

package/dist/webhooks.mjs

@@ -1,5 +1,5 @@
 // src/errors.ts
-var NeetruError = class _NeetruError extends Error {
+var s = class t extends Error {
   code;
   status;
   requestId;
@@ -12,322 +12,247 @@ var NeetruError = class _NeetruError extends Error {
    * para um `NeetruDbErrorCode` mais específico (recuperável vs não).
    */
   reason;
-  constructor(code, message, status, requestId, reason) {
-    super(message);
-    this.name = "NeetruError";
-    this.code = code;
-    this.status = status;
-    this.requestId = requestId;
-    this.reason = reason;
-    Object.setPrototypeOf(this, _NeetruError.prototype);
+  constructor(e, r, n, i, o) {
+    super(r), this.name = "NeetruError", this.code = e, this.status = n, this.requestId = i, this.reason = o, Object.setPrototypeOf(this, t.prototype);
   }
 };
 
 // src/idempotency.ts
-function generateIdempotencyKey() {
-  const cryptoObj = typeof globalThis !== "undefined" && "crypto" in globalThis ? globalThis.crypto : void 0;
-  if (cryptoObj && typeof cryptoObj.randomUUID === "function") {
-    return cryptoObj.randomUUID();
-  }
-  throw new NeetruError(
+function S() {
+  let t = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
+  if (t && typeof t.randomUUID == "function")
+    return t.randomUUID();
+  throw new s(
     "runtime_unsupported",
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
 
 // src/http.ts
-var COMPAT_MATRIX = {
+var H = {
   // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
   // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
   3: "2026.05.1"
 };
-function stripRevision(v) {
-  return v.split("+")[0] ?? v;
+function A(t) {
+  return t.split("+")[0] ?? t;
 }
-function compareCalVer(a, b) {
-  const partsA = stripRevision(a).split(".").map(Number);
-  const partsB = stripRevision(b).split(".").map(Number);
-  const len = Math.max(partsA.length, partsB.length);
-  for (let i = 0; i < len; i++) {
-    const pa = partsA[i] ?? 0;
-    const pb = partsB[i] ?? 0;
-    if (pa !== pb) return pa - pb;
+function j(t, e) {
+  let r = A(t).split(".").map(Number), n = A(e).split(".").map(Number), i = Math.max(r.length, n.length);
+  for (let o = 0; o < i; o++) {
+    let d = r[o] ?? 0, c = n[o] ?? 0;
+    if (d !== c) return d - c;
   }
   return 0;
 }
-function readInjectedSdkVersion() {
+function q() {
   try {
-    return "3.5.0";
+    return "3.7.0";
   } catch {
-    return void 0;
+    return;
   }
 }
-function getSdkMajor() {
-  const ver = readInjectedSdkVersion();
-  if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
-  return 3;
+function V() {
+  let t = q();
+  return t ? parseInt(t.split(".")[0] ?? "3", 10) : 3;
 }
-var _warnedCoreTooOld = /* @__PURE__ */ new Set();
-function checkCoreVersionCompat(coreVersion) {
-  if (!coreVersion) return;
-  const sdkMajor = getSdkMajor();
-  const minCore = COMPAT_MATRIX[sdkMajor];
-  if (!minCore) return;
-  const stripped = stripRevision(coreVersion);
-  if (compareCalVer(stripped, minCore) < 0) {
-    const key = `${sdkMajor}:${stripped}`;
-    if (!_warnedCoreTooOld.has(key)) {
-      _warnedCoreTooOld.add(key);
-      console.warn(
-        `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${coreVersion}" \xE9 anterior ao m\xEDnimo recomendado "${minCore}" para SDK major ${sdkMajor}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
-      );
-    }
+var W = /* @__PURE__ */ new Set();
+function B(t) {
+  if (!t) return;
+  let e = V(), r = H[e];
+  if (!r) return;
+  let n = A(t);
+  if (j(n, r) < 0) {
+    let i = `${e}:${n}`;
+    W.has(i) || (W.add(i), console.warn(
+      `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${t}" \xE9 anterior ao m\xEDnimo recomendado "${r}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
+    ));
   }
 }
-var DEFAULT_RETRIES_READ = 2;
-var DEFAULT_RETRIES_WRITE = 0;
-var READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
-var RETRYABLE_CODES = /* @__PURE__ */ new Set([
+var L = 2, F = 0, z = /* @__PURE__ */ new Set(["GET", "HEAD"]), G = /* @__PURE__ */ new Set([
   "rate_limited",
   "server_error",
   "network_error"
 ]);
-function backoffMs(attempt) {
-  const base = 200 * Math.pow(4, attempt);
-  const jitter = base * 0.2 * (Math.random() * 2 - 1);
-  return Math.max(50, Math.round(base + jitter));
+function N(t) {
+  let e = 200 * Math.pow(4, t), r = e * 0.2 * (Math.random() * 2 - 1);
+  return Math.max(50, Math.round(e + r));
 }
-var MAX_RETRY_AFTER_MS = 6e4;
-function parseRetryAfter(value) {
-  if (!value) return null;
-  const secs = Number(value);
-  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1e3), MAX_RETRY_AFTER_MS);
-  const dateMs = Date.parse(value);
-  if (Number.isFinite(dateMs)) {
-    const delta = dateMs - Date.now();
-    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);
+var C = 6e4;
+function J(t) {
+  if (!t) return null;
+  let e = Number(t);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), C);
+  let r = Date.parse(t);
+  if (Number.isFinite(r)) {
+    let n = r - Date.now();
+    if (n > 0) return Math.min(n, C);
   }
   return null;
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function D(t) {
+  return new Promise((e) => setTimeout(e, t));
 }
-function statusToCode(status) {
-  if (status === 401) return "unauthorized";
-  if (status === 403) return "forbidden";
-  if (status === 404) return "not_found";
-  if (status === 409) return "conflict";
-  if (status === 422 || status === 400) return "validation_failed";
-  if (status === 429) return "rate_limited";
-  if (status >= 500) return "server_error";
-  return "unknown";
+function Y(t) {
+  return t === 401 ? "unauthorized" : t === 403 ? "forbidden" : t === 404 ? "not_found" : t === 409 ? "conflict" : t === 410 ? "gone" : t === 422 || t === 400 ? "validation_failed" : t === 429 ? "rate_limited" : t >= 500 ? "server_error" : "unknown";
 }
-function buildUrl(baseUrl, path, query) {
-  const base = baseUrl.replace(/\/+$/, "");
-  const p = path.startsWith("/") ? path : `/${path}`;
-  const url = new URL(`${base}${p}`);
-  if (query) {
-    for (const [k, v] of Object.entries(query)) {
-      if (v === void 0) continue;
-      url.searchParams.set(k, String(v));
-    }
-  }
-  return url.toString();
+function X(t, e, r) {
+  let n = t.replace(/\/+$/, ""), i = e.startsWith("/") ? e : `/${e}`, o = new URL(`${n}${i}`);
+  if (r)
+    for (let [d, c] of Object.entries(r))
+      c !== void 0 && o.searchParams.set(d, String(c));
+  return o.toString();
 }
-async function safeJson(res) {
-  const text = await res.text();
-  if (!text) return void 0;
-  try {
-    return JSON.parse(text);
-  } catch {
-    return void 0;
-  }
+async function M(t) {
+  let e = await t.text();
+  if (e)
+    try {
+      return JSON.parse(e);
+    } catch {
+      return;
+    }
 }
-async function httpRequest(config, opts) {
-  const method = opts.method ?? "GET";
-  const url = buildUrl(config.baseUrl, opts.path, opts.query);
-  const defaultRetries = READ_METHODS.has(method) ? DEFAULT_RETRIES_READ : DEFAULT_RETRIES_WRITE;
-  const maxRetries = opts.retries ?? defaultRetries;
-  const headers = {
+async function _(t, e) {
+  let r = e.method ?? "GET", n = X(t.baseUrl, e.path, e.query), i = z.has(r) ? L : F, o = e.retries ?? i, d = {
     accept: "application/json",
-    ...opts.headers
-  };
-  const sdkVersion = readInjectedSdkVersion();
-  if (sdkVersion) {
-    headers["x-neetru-sdk-version"] = sdkVersion;
-  }
-  if (opts.requireAuth) {
-    if (!config.apiKey) {
-      throw new NeetruError(
+    ...e.headers
+  }, c = q();
+  if (c && (d["x-neetru-sdk-version"] = c), e.requireAuth) {
+    if (!t.apiKey)
+      throw new s(
         "missing_api_key",
         "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
       );
-    }
-    headers.authorization = `Bearer ${config.apiKey}`;
-  }
-  if (opts.idempotencyKey) {
-    const key = typeof opts.idempotencyKey === "string" ? opts.idempotencyKey : generateIdempotencyKey();
-    headers["idempotency-key"] = key;
-  }
-  const bodyString = opts.body !== void 0 && method !== "GET" && method !== "DELETE" ? JSON.stringify(opts.body) : void 0;
-  if (bodyString !== void 0) {
-    headers["content-type"] = "application/json";
-  }
-  let lastError = null;
-  for (let attempt = 0; attempt <= maxRetries; attempt++) {
-    const init = { method, headers };
-    if (bodyString !== void 0) init.body = bodyString;
-    init.signal = AbortSignal.timeout(3e4);
-    let res;
+    d.authorization = `Bearer ${t.apiKey}`;
+  }
+  if (e.idempotencyKey) {
+    let l = typeof e.idempotencyKey == "string" ? e.idempotencyKey : S();
+    d["idempotency-key"] = l;
+  }
+  let y = e.body !== void 0 && r !== "GET" && r !== "DELETE" ? JSON.stringify(e.body) : void 0;
+  y !== void 0 && (d["content-type"] = "application/json");
+  let h = null, f = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
+  for (let l = 0; l <= o; l++) {
+    if (f != null && Date.now() >= f)
+      throw h ?? new s("network_error", "Deadline excedido antes de completar a request");
+    let m = { method: r, headers: d };
+    y !== void 0 && (m.body = y);
+    let k = f != null ? Math.max(1, Math.min(3e4, f - Date.now())) : 3e4;
+    m.signal = AbortSignal.timeout(k);
+    let u;
     try {
-      res = await config.fetch(url, init);
-    } catch (err2) {
-      const message2 = err2 instanceof DOMException && err2.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${err2 instanceof Error ? err2.message : "fetch failed"}`;
-      lastError = new NeetruError("network_error", message2);
-      if (attempt < maxRetries) {
-        await sleep(backoffMs(attempt));
-        continue;
+      u = await t.fetch(n, m);
+    } catch (a) {
+      let w = a instanceof DOMException && a.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${a instanceof Error ? a.message : "fetch failed"}`;
+      if (h = new s("network_error", w), l < o) {
+        let x = N(l);
+        if (f == null || Date.now() + x < f) {
+          await D(x);
+          continue;
+        }
       }
-      throw lastError;
+      throw h;
     }
-    const requestId = res.headers.get("x-request-id") ?? res.headers.get("x-correlation-id") ?? void 0;
-    if (res.ok) {
-      const coreVersion = res.headers.get("x-neetru-version");
-      if (coreVersion) checkCoreVersionCompat(coreVersion);
-      const parsed = await safeJson(res);
-      return parsed;
+    let g = u.headers.get("x-request-id") ?? u.headers.get("x-correlation-id") ?? void 0;
+    if (u.ok) {
+      let a = u.headers.get("x-neetru-version");
+      return a && B(a), await M(u);
     }
-    const body = await safeJson(res);
-    let code = statusToCode(res.status);
-    let message = `HTTP ${res.status}`;
-    let reason;
-    if (body && typeof body === "object") {
-      const errField = body.error;
-      if (typeof errField === "string") {
-        message = errField;
-      } else if (errField && typeof errField === "object") {
-        if (typeof errField.code === "string") code = errField.code;
-        if (typeof errField.message === "string") message = errField.message;
-        if (typeof errField.reason === "string") reason = errField.reason;
-      } else {
-        if (typeof body.code === "string") code = body.code;
-        if (typeof body.message === "string") message = body.message;
-      }
-      if (typeof body.reason === "string") reason = body.reason;
+    let p = await M(u), v = Y(u.status), b = `HTTP ${u.status}`, R;
+    if (p && typeof p == "object") {
+      let a = p.error;
+      typeof a == "string" ? b = a : a && typeof a == "object" ? (typeof a.code == "string" && (v = a.code), typeof a.message == "string" && (b = a.message), typeof a.reason == "string" && (R = a.reason)) : (typeof p.code == "string" && (v = p.code), typeof p.message == "string" && (b = p.message)), typeof p.reason == "string" && (R = p.reason);
+    }
+    if (u.status === 410) {
+      let a = u.headers.get("x-neetru-replacement");
+      b === `HTTP ${u.status}` && (b = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), a && !b.includes(a) && (b += ` Substituto: ${a}.`);
     }
-    const err = new NeetruError(code, message, res.status, requestId, reason);
-    lastError = err;
-    const isRetryable = RETRYABLE_CODES.has(code);
-    if (isRetryable && attempt < maxRetries) {
-      const retryAfter = parseRetryAfter(res.headers.get("retry-after"));
-      const delay = retryAfter ?? backoffMs(attempt);
-      await sleep(delay);
-      continue;
+    let T = new s(v, b, u.status, g, R);
+    if (h = T, G.has(v) && l < o) {
+      let w = J(u.headers.get("retry-after")) ?? N(l);
+      if (f == null || Date.now() + w < f) {
+        await D(w);
+        continue;
+      }
     }
-    throw err;
+    throw T;
   }
-  throw lastError ?? new NeetruError("unknown", "unexpected httpRequest exit");
+  throw h ?? new s("unknown", "unexpected httpRequest exit");
 }
 
 // src/validators.ts
-var SDK_ID_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
-function assertValidSdkId(field, value) {
-  if (typeof value !== "string" || !SDK_ID_RE.test(value)) {
-    throw new NeetruError(
+var O = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
+function I(t, e) {
+  if (typeof e != "string" || !O.test(e))
+    throw new s(
       "validation_failed",
-      `${field} must match ${SDK_ID_RE.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
+      `${t} must match ${O.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
     );
-  }
 }
 
 // src/webhooks.ts
-async function verifyWebhookSignature(payload, signature, secret, timestamp) {
-  if (!signature || !secret) return false;
-  const sigHex = signature.startsWith("sha256=") ? signature.slice(7) : signature;
-  if (!/^[0-9a-f]+$/i.test(sigHex)) return false;
-  const subtle = typeof globalThis !== "undefined" && "crypto" in globalThis ? globalThis.crypto?.subtle : void 0;
-  if (!subtle) {
-    throw new NeetruError(
+async function Q(t, e, r, n) {
+  if (!e || !r) return false;
+  let i = e.startsWith("sha256=") ? e.slice(7) : e;
+  if (!/^[0-9a-f]+$/i.test(i)) return false;
+  let o = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto?.subtle : void 0;
+  if (!o)
+    throw new s(
       "runtime_unsupported",
       "verifyWebhookSignature requires globalThis.crypto.subtle (Node \u226520, modern browser, or Edge runtime)."
     );
+  let d = new TextEncoder(), c = d.encode(r), y = typeof t == "string" ? d.encode(t) : t, h = y;
+  if (n !== void 0) {
+    let g = d.encode(`${n}.`), p = new Uint8Array(g.length + y.length);
+    p.set(g, 0), p.set(y, g.length), h = p;
   }
-  const encoder = new TextEncoder();
-  const keyBytes = encoder.encode(secret);
-  const rawBytes = typeof payload === "string" ? encoder.encode(payload) : payload;
-  let payloadBytes = rawBytes;
-  if (timestamp !== void 0) {
-    const prefix = encoder.encode(`${timestamp}.`);
-    const merged = new Uint8Array(prefix.length + rawBytes.length);
-    merged.set(prefix, 0);
-    merged.set(rawBytes, prefix.length);
-    payloadBytes = merged;
-  }
-  const key = await subtle.importKey(
+  let f = await o.importKey(
     "raw",
-    keyBytes,
+    c,
     { name: "HMAC", hash: "SHA-256" },
     false,
     ["sign"]
-  );
-  const macBuffer = await subtle.sign(
+  ), l = await o.sign(
     "HMAC",
-    key,
-    payloadBytes
-  );
-  const macBytes = new Uint8Array(macBuffer);
-  const sigBytes = hexToBytes(sigHex.toLowerCase());
-  if (!sigBytes || sigBytes.length !== macBytes.length) return false;
-  let diff = 0;
-  for (let i = 0; i < macBytes.length; i++) {
-    diff |= macBytes[i] ^ sigBytes[i];
-  }
-  return diff === 0;
+    f,
+    h
+  ), m = new Uint8Array(l), k = Z(i.toLowerCase());
+  if (!k || k.length !== m.length) return false;
+  let u = 0;
+  for (let g = 0; g < m.length; g++)
+    u |= m[g] ^ k[g];
+  return u === 0;
 }
-async function verifyWebhookRequest(payload, headers, secret, options = {}) {
-  const toleranceMs = options.toleranceMs ?? 3e5;
-  const getHeader = (name) => {
-    if (typeof headers.get === "function") {
-      return headers.get(name);
-    }
-    const rec = headers;
-    const lower = name.toLowerCase();
-    for (const key of Object.keys(rec)) {
-      if (key.toLowerCase() === lower) return rec[key] ?? null;
-    }
+async function pe(t, e, r, n = {}) {
+  let i = n.toleranceMs ?? 3e5, o = (l) => {
+    if (typeof e.get == "function")
+      return e.get(l);
+    let m = e, k = l.toLowerCase();
+    for (let u of Object.keys(m))
+      if (u.toLowerCase() === k) return m[u] ?? null;
     return null;
-  };
-  const tsHeader = getHeader("x-neetru-timestamp");
-  if (!tsHeader) {
+  }, d = o("x-neetru-timestamp");
+  if (!d)
     return { ok: false, reason: "timestamp_missing" };
-  }
-  const tsMs = Number(tsHeader);
-  if (!Number.isFinite(tsMs)) {
+  let c = Number(d);
+  if (!Number.isFinite(c))
     return { ok: false, reason: "timestamp_missing" };
-  }
-  const skewMs = Math.abs(Date.now() - tsMs);
-  if (skewMs > toleranceMs) {
+  if (Math.abs(Date.now() - c) > i)
     return { ok: false, reason: "timestamp_expired" };
-  }
-  const sig = getHeader("x-neetru-signature");
-  const valid = await verifyWebhookSignature(payload, sig, secret, tsHeader);
-  if (!valid) {
-    return { ok: false, reason: "invalid_signature" };
-  }
-  return { ok: true };
+  let h = o("x-neetru-signature");
+  return await Q(t, h, r, d) ? { ok: true } : { ok: false, reason: "invalid_signature" };
 }
-function hexToBytes(hex) {
-  if (hex.length % 2 !== 0) return null;
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < bytes.length; i++) {
-    const high = parseInt(hex[i * 2], 16);
-    const low = parseInt(hex[i * 2 + 1], 16);
-    if (Number.isNaN(high) || Number.isNaN(low)) return null;
-    bytes[i] = high << 4 | low;
-  }
-  return bytes;
+function Z(t) {
+  if (t.length % 2 !== 0) return null;
+  let e = new Uint8Array(t.length / 2);
+  for (let r = 0; r < e.length; r++) {
+    let n = parseInt(t[r * 2], 16), i = parseInt(t[r * 2 + 1], 16);
+    if (Number.isNaN(n) || Number.isNaN(i)) return null;
+    e[r] = n << 4 | i;
+  }
+  return e;
 }
-var VALID_EVENTS = [
+var $ = [
   "subscription.activated",
   "subscription.cancelled",
   "subscription.payment_failed",
@@ -337,80 +262,66 @@ var VALID_EVENTS = [
   "account.reactivated",
   "support.ticket_replied"
 ];
-function toEndpoint(raw) {
-  if (!raw || typeof raw !== "object") {
-    throw new NeetruError("invalid_response", "Webhook response is not an object");
-  }
-  const r = raw;
-  if (typeof r.id !== "string") {
-    throw new NeetruError("invalid_response", "Webhook missing id");
-  }
+function U(t) {
+  if (!t || typeof t != "object")
+    throw new s("invalid_response", "Webhook response is not an object");
+  let e = t;
+  if (typeof e.id != "string")
+    throw new s("invalid_response", "Webhook missing id");
   return {
-    id: r.id,
-    url: typeof r.url === "string" ? r.url : "",
-    events: Array.isArray(r.events) ? r.events.filter(
-      (e) => VALID_EVENTS.includes(e)
+    id: e.id,
+    url: typeof e.url == "string" ? e.url : "",
+    events: Array.isArray(e.events) ? e.events.filter(
+      (r) => $.includes(r)
     ) : [],
-    hasSecret: r.hasSecret === true,
-    status: r.status === "active" || r.status === "degraded" || r.status === "disabled" ? r.status : "active",
-    lastDeliveryAt: typeof r.lastDeliveryAt === "string" ? r.lastDeliveryAt : void 0,
-    consecutiveFailures: typeof r.consecutiveFailures === "number" ? r.consecutiveFailures : void 0,
-    createdAt: typeof r.createdAt === "string" ? r.createdAt : (/* @__PURE__ */ new Date()).toISOString()
+    hasSecret: e.hasSecret === true,
+    status: e.status === "active" || e.status === "degraded" || e.status === "disabled" ? e.status : "active",
+    lastDeliveryAt: typeof e.lastDeliveryAt == "string" ? e.lastDeliveryAt : void 0,
+    consecutiveFailures: typeof e.consecutiveFailures == "number" ? e.consecutiveFailures : void 0,
+    createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function validateInput(input) {
-  if (!input.url || typeof input.url !== "string") {
-    throw new NeetruError("validation_failed", "url \xE9 obrigat\xF3ria");
-  }
+function K(t) {
+  if (!t.url || typeof t.url != "string")
+    throw new s("validation_failed", "url \xE9 obrigat\xF3ria");
   try {
-    const parsed = new URL(input.url);
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    let e = new URL(t.url);
+    if (e.protocol !== "https:" && e.protocol !== "http:")
       throw new Error("invalid protocol");
-    }
   } catch {
-    throw new NeetruError("validation_failed", `url inv\xE1lida: ${input.url}`);
-  }
-  if (!Array.isArray(input.events) || input.events.length === 0) {
-    throw new NeetruError("validation_failed", "events deve ter pelo menos 1 evento");
-  }
-  for (const ev of input.events) {
-    if (!VALID_EVENTS.includes(ev)) {
-      throw new NeetruError("validation_failed", `evento desconhecido: ${ev}`);
-    }
-  }
-  if (input.secret !== void 0 && input.secret.length < 16) {
-    throw new NeetruError("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
-  }
+    throw new s("validation_failed", `url inv\xE1lida: ${t.url}`);
+  }
+  if (!Array.isArray(t.events) || t.events.length === 0)
+    throw new s("validation_failed", "events deve ter pelo menos 1 evento");
+  for (let e of t.events)
+    if (!$.includes(e))
+      throw new s("validation_failed", `evento desconhecido: ${e}`);
+  if (t.secret !== void 0 && t.secret.length < 16)
+    throw new s("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
 }
-function resolveProductId(config, ...candidates) {
-  for (const c of candidates) {
-    if (typeof c === "string" && c.length > 0) {
-      assertValidSdkId("productId", c);
-      return c;
-    }
-  }
-  if (config.productId) {
-    assertValidSdkId("productId", config.productId);
-    return config.productId;
-  }
-  throw new NeetruError(
+function E(t, ...e) {
+  for (let r of e)
+    if (typeof r == "string" && r.length > 0)
+      return I("productId", r), r;
+  if (t.productId)
+    return I("productId", t.productId), t.productId;
+  throw new s(
     "validation_failed",
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function createWebhooksNamespace(config) {
+function fe(t) {
   return {
-    async register(input) {
-      validateInput(input);
-      const productId = resolveProductId(config, input.productId);
-      const raw = await httpRequest(config, {
+    async register(e) {
+      K(e);
+      let r = E(t, e.productId), n = await _(t, {
         method: "POST",
         path: "/api/sdk/v1/webhooks",
         body: {
-          productId,
-          url: input.url,
-          events: input.events,
-          ...input.secret ? { secret: input.secret } : {}
+          productId: r,
+          url: e.url,
+          events: e.events,
+          ...e.secret ? { secret: e.secret } : {}
         },
         requireAuth: true,
         // Sem isso, um retry de rede (app-level; SDK default é 0 retries em
@@ -419,88 +330,76 @@ function createWebhooksNamespace(config) {
         // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
         idempotencyKey: true
       });
-      return toEndpoint(raw);
+      return U(n);
     },
-    async list(options) {
-      const productId = resolveProductId(config, options?.productId);
-      const raw = await httpRequest(config, {
+    async list(e) {
+      let r = E(t, e?.productId), n = await _(t, {
         method: "GET",
         path: "/api/sdk/v1/webhooks",
-        query: { productId },
+        query: { productId: r },
         requireAuth: true
       });
-      const list = Array.isArray(raw?.endpoints) ? raw.endpoints : [];
-      return list.map(toEndpoint);
+      return (Array.isArray(n?.endpoints) ? n.endpoints : []).map(U);
     },
-    async unregister(id, options) {
-      if (!id) throw new NeetruError("validation_failed", "id obrigat\xF3rio");
-      const productId = resolveProductId(config, options?.productId);
-      await httpRequest(config, {
+    async unregister(e, r) {
+      if (!e) throw new s("validation_failed", "id obrigat\xF3rio");
+      let n = E(t, r?.productId);
+      return await _(t, {
         method: "DELETE",
-        path: `/api/sdk/v1/webhooks/${encodeURIComponent(id)}`,
-        query: { productId },
+        path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}`,
+        query: { productId: n },
         requireAuth: true
-      });
-      return { ok: true };
+      }), { ok: true };
     },
-    async test(id, options) {
-      if (!id) throw new NeetruError("validation_failed", "id obrigat\xF3rio");
-      const productId = resolveProductId(config, options?.productId);
-      const raw = await httpRequest(config, {
+    async test(e, r) {
+      if (!e) throw new s("validation_failed", "id obrigat\xF3rio");
+      let n = E(t, r?.productId), i = await _(t, {
         method: "POST",
-        path: `/api/sdk/v1/webhooks/${encodeURIComponent(id)}/test`,
-        query: { productId },
+        path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}/test`,
+        query: { productId: n },
         requireAuth: true,
         idempotencyKey: true
       });
-      if (!raw || typeof raw !== "object") {
+      if (!i || typeof i != "object")
         return { ok: false, error: "invalid response" };
-      }
-      const r = raw;
+      let o = i;
       return {
-        ok: r.ok === true,
-        statusCode: typeof r.statusCode === "number" ? r.statusCode : void 0,
-        durationMs: typeof r.durationMs === "number" ? r.durationMs : void 0,
-        error: typeof r.error === "string" ? r.error : void 0
+        ok: o.ok === true,
+        statusCode: typeof o.statusCode == "number" ? o.statusCode : void 0,
+        durationMs: typeof o.durationMs == "number" ? o.durationMs : void 0,
+        error: typeof o.error == "string" ? o.error : void 0
       };
     }
   };
 }
-var MockWebhooks = class {
+var P = class {
   endpoints = /* @__PURE__ */ new Map();
   nextId = 1;
-  async register(input) {
-    validateInput(input);
-    const id = `mock_wh_${this.nextId++}`;
-    const endpoint = {
-      id,
-      url: input.url,
-      events: input.events,
-      hasSecret: !!input.secret,
+  async register(e) {
+    K(e);
+    let r = `mock_wh_${this.nextId++}`, n = {
+      id: r,
+      url: e.url,
+      events: e.events,
+      hasSecret: !!e.secret,
       status: "active",
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    this.endpoints.set(id, endpoint);
-    return endpoint;
+    return this.endpoints.set(r, n), n;
   }
-  async list(_options) {
+  async list(e) {
     return [...this.endpoints.values()];
   }
-  async unregister(id, _options) {
-    if (!this.endpoints.has(id)) {
-      throw new NeetruError("not_found", `Webhook ${id} n\xE3o encontrado`);
-    }
-    this.endpoints.delete(id);
-    return { ok: true };
+  async unregister(e, r) {
+    if (!this.endpoints.has(e))
+      throw new s("not_found", `Webhook ${e} n\xE3o encontrado`);
+    return this.endpoints.delete(e), { ok: true };
   }
-  async test(id, _options) {
-    if (!this.endpoints.has(id)) {
-      throw new NeetruError("not_found", `Webhook ${id} n\xE3o encontrado`);
-    }
+  async test(e, r) {
+    if (!this.endpoints.has(e))
+      throw new s("not_found", `Webhook ${e} n\xE3o encontrado`);
     return { ok: true, statusCode: 200, durationMs: 42 };
   }
 };
 
-export { MockWebhooks, createWebhooksNamespace, verifyWebhookRequest, verifyWebhookSignature };
-//# sourceMappingURL=webhooks.mjs.map
-//# sourceMappingURL=webhooks.mjs.map
+export { P as MockWebhooks, fe as createWebhooksNamespace, pe as verifyWebhookRequest, Q as verifyWebhookSignature };