@neetru/sdk 3.6.0 → 3.8.0

package/dist/catalog.mjs

@@ -1,5 +1,5 @@
 // src/errors.ts
-var NeetruError = class _NeetruError extends Error {
+var a = class t extends Error {
   code;
   status;
   requestId;
@@ -12,281 +12,280 @@ var NeetruError = class _NeetruError extends Error {
    * para um `NeetruDbErrorCode` mais específico (recuperável vs não).
    */
   reason;
-  constructor(code, message, status, requestId, reason) {
-    super(message);
-    this.name = "NeetruError";
-    this.code = code;
-    this.status = status;
-    this.requestId = requestId;
-    this.reason = reason;
-    Object.setPrototypeOf(this, _NeetruError.prototype);
+  /**
+   * 3.8.0: `x-correlation-id` da requisição que falhou. O SDK gera um UUID por
+   * chamada (ou usa o que o chamador passou) e manda no header; o Core grava o
+   * mesmo id nos logs/auditoria — cite-o ao abrir um ticket de suporte.
+   * `undefined` em erros que acontecem antes de qualquer requisição.
+   */
+  correlationId;
+  constructor(e, r, n, o, s, u) {
+    super(r), this.name = "NeetruError", this.code = e, this.status = n, this.requestId = o, this.reason = s, this.correlationId = u, Object.setPrototypeOf(this, t.prototype);
   }
 };
 
 // src/idempotency.ts
-function generateIdempotencyKey() {
-  const cryptoObj = typeof globalThis !== "undefined" && "crypto" in globalThis ? globalThis.crypto : void 0;
-  if (cryptoObj && typeof cryptoObj.randomUUID === "function") {
-    return cryptoObj.randomUUID();
-  }
-  throw new NeetruError(
+function C() {
+  let t = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
+  if (t && typeof t.randomUUID == "function")
+    return t.randomUUID();
+  throw new a(
     "runtime_unsupported",
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
 
+// src/correlation.ts
+var T = "x-correlation-id";
+var $ = /^[A-Za-z0-9._:\-]+$/;
+function I(t) {
+  return typeof t == "string" && t.length > 0 && t.length <= 128 && $.test(t);
+}
+function j() {
+  let t = globalThis.crypto;
+  try {
+    if (t && typeof t.randomUUID == "function") return t.randomUUID();
+  } catch {
+  }
+  let e = new Uint8Array(16), r = false;
+  try {
+    t && typeof t.getRandomValues == "function" && (t.getRandomValues(e), r = !0);
+  } catch {
+    r = false;
+  }
+  if (!r)
+    for (let o = 0; o < e.length; o++) e[o] = Math.floor(Math.random() * 256);
+  e[6] = e[6] & 15 | 64, e[8] = e[8] & 63 | 128;
+  let n = Array.from(e, (o) => o.toString(16).padStart(2, "0")).join("");
+  return `${n.slice(0, 8)}-${n.slice(8, 12)}-${n.slice(12, 16)}-${n.slice(16, 20)}-${n.slice(20)}`;
+}
+function N(t, e) {
+  let r, n = {};
+  for (let [s, u] of Object.entries(t)) {
+    if (s.toLowerCase() === T) {
+      I(u) && (r = u);
+      continue;
+    }
+    n[s] = u;
+  }
+  let o = r ?? (I(e) ? e : void 0) ?? j();
+  return n[T] = o, { headers: n, correlationId: o };
+}
+
+// src/server-only-key.ts
+function S() {
+  try {
+    let t = globalThis.navigator;
+    if (t && t.product === "ReactNative") return "react-native";
+  } catch {
+  }
+  try {
+    let t = globalThis;
+    if (typeof t.window < "u" && typeof t.document < "u") return "browser";
+  } catch {
+  }
+  return null;
+}
+
 // src/http.ts
-var COMPAT_MATRIX = {
+var H = {
   // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
   // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
   3: "2026.05.1"
 };
-function stripRevision(v) {
-  return v.split("+")[0] ?? v;
+function b(t) {
+  return t.split("+")[0] ?? t;
 }
-function compareCalVer(a, b) {
-  const partsA = stripRevision(a).split(".").map(Number);
-  const partsB = stripRevision(b).split(".").map(Number);
-  const len = Math.max(partsA.length, partsB.length);
-  for (let i = 0; i < len; i++) {
-    const pa = partsA[i] ?? 0;
-    const pb = partsB[i] ?? 0;
-    if (pa !== pb) return pa - pb;
+function G(t, e) {
+  let r = b(t).split(".").map(Number), n = b(e).split(".").map(Number), o = Math.max(r.length, n.length);
+  for (let s = 0; s < o; s++) {
+    let u = r[s] ?? 0, c = n[s] ?? 0;
+    if (u !== c) return u - c;
   }
   return 0;
 }
-function readInjectedSdkVersion() {
+function M() {
   try {
-    return "3.6.0";
+    return "3.8.0";
   } catch {
-    return void 0;
+    return;
   }
 }
-function getSdkMajor() {
-  const ver = readInjectedSdkVersion();
-  if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
-  return 3;
+function V() {
+  let t = M();
+  return t ? parseInt(t.split(".")[0] ?? "3", 10) : 3;
 }
-var _warnedCoreTooOld = /* @__PURE__ */ new Set();
-function checkCoreVersionCompat(coreVersion) {
-  if (!coreVersion) return;
-  const sdkMajor = getSdkMajor();
-  const minCore = COMPAT_MATRIX[sdkMajor];
-  if (!minCore) return;
-  const stripped = stripRevision(coreVersion);
-  if (compareCalVer(stripped, minCore) < 0) {
-    const key = `${sdkMajor}:${stripped}`;
-    if (!_warnedCoreTooOld.has(key)) {
-      _warnedCoreTooOld.add(key);
-      console.warn(
-        `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${coreVersion}" \xE9 anterior ao m\xEDnimo recomendado "${minCore}" para SDK major ${sdkMajor}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
-      );
-    }
+var D = /* @__PURE__ */ new Set();
+function F(t) {
+  if (!t) return;
+  let e = V(), r = H[e];
+  if (!r) return;
+  let n = b(t);
+  if (G(n, r) < 0) {
+    let o = `${e}:${n}`;
+    D.has(o) || (D.add(o), console.warn(
+      `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${t}" \xE9 anterior ao m\xEDnimo recomendado "${r}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
+    ));
   }
 }
-var DEFAULT_RETRIES_READ = 2;
-var DEFAULT_RETRIES_WRITE = 0;
-var READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
-var RETRYABLE_CODES = /* @__PURE__ */ new Set([
+function z() {
+  let t = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
+  return S() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + t + ")" : t;
+}
+var B = 2, X = 0, Y = /* @__PURE__ */ new Set(["GET", "HEAD"]), J = /* @__PURE__ */ new Set([
   "rate_limited",
   "server_error",
   "network_error"
 ]);
-function backoffMs(attempt) {
-  const base = 200 * Math.pow(4, attempt);
-  const jitter = base * 0.2 * (Math.random() * 2 - 1);
-  return Math.max(50, Math.round(base + jitter));
+function x(t) {
+  let e = 200 * Math.pow(4, t), r = e * 0.2 * (Math.random() * 2 - 1);
+  return Math.max(50, Math.round(e + r));
 }
-var MAX_RETRY_AFTER_MS = 6e4;
-function parseRetryAfter(value) {
-  if (!value) return null;
-  const secs = Number(value);
-  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1e3), MAX_RETRY_AFTER_MS);
-  const dateMs = Date.parse(value);
-  if (Number.isFinite(dateMs)) {
-    const delta = dateMs - Date.now();
-    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);
+var O = 6e4;
+function W(t) {
+  if (!t) return null;
+  let e = Number(t);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), O);
+  let r = Date.parse(t);
+  if (Number.isFinite(r)) {
+    let n = r - Date.now();
+    if (n > 0) return Math.min(n, O);
   }
   return null;
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function P(t) {
+  return new Promise((e) => setTimeout(e, t));
+}
+function Z(t) {
+  return t === 401 ? "unauthorized" : t === 403 ? "forbidden" : t === 404 ? "not_found" : t === 409 ? "conflict" : t === 410 ? "gone" : t === 422 || t === 400 ? "validation_failed" : t === 429 ? "rate_limited" : t >= 500 ? "server_error" : "unknown";
 }
-function statusToCode(status) {
-  if (status === 401) return "unauthorized";
-  if (status === 403) return "forbidden";
-  if (status === 404) return "not_found";
-  if (status === 409) return "conflict";
-  if (status === 422 || status === 400) return "validation_failed";
-  if (status === 429) return "rate_limited";
-  if (status >= 500) return "server_error";
-  return "unknown";
+function Q(t, e, r) {
+  let n = t.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, s = new URL(`${n}${o}`);
+  if (r)
+    for (let [u, c] of Object.entries(r))
+      c !== void 0 && s.searchParams.set(u, String(c));
+  return s.toString();
 }
-function buildUrl(baseUrl, path, query) {
-  const base = baseUrl.replace(/\/+$/, "");
-  const p = path.startsWith("/") ? path : `/${path}`;
-  const url = new URL(`${base}${p}`);
-  if (query) {
-    for (const [k, v] of Object.entries(query)) {
-      if (v === void 0) continue;
-      url.searchParams.set(k, String(v));
+async function K(t) {
+  let e = await t.text();
+  if (e)
+    try {
+      return JSON.parse(e);
+    } catch {
+      return;
     }
-  }
-  return url.toString();
 }
-async function safeJson(res) {
-  const text = await res.text();
-  if (!text) return void 0;
-  try {
-    return JSON.parse(text);
-  } catch {
-    return void 0;
+async function E(t, e) {
+  let r = e.method ?? "GET", n = Q(t.baseUrl, e.path, e.query), o = Y.has(r) ? B : X, s = e.retries ?? o, { headers: u, correlationId: c } = N(
+    { accept: "application/json", ...e.headers },
+    e.correlationId
+  ), v = M();
+  if (v && (u["x-neetru-sdk-version"] = v), e.requireAuth) {
+    if (!t.apiKey)
+      throw new a("missing_api_key", z());
+    u.authorization = `Bearer ${t.apiKey}`;
   }
-}
-async function httpRequest(config, opts) {
-  const method = opts.method ?? "GET";
-  const url = buildUrl(config.baseUrl, opts.path, opts.query);
-  const defaultRetries = READ_METHODS.has(method) ? DEFAULT_RETRIES_READ : DEFAULT_RETRIES_WRITE;
-  const maxRetries = opts.retries ?? defaultRetries;
-  const headers = {
-    accept: "application/json",
-    ...opts.headers
-  };
-  const sdkVersion = readInjectedSdkVersion();
-  if (sdkVersion) {
-    headers["x-neetru-sdk-version"] = sdkVersion;
+  if (e.idempotencyKey) {
+    let p = typeof e.idempotencyKey == "string" ? e.idempotencyKey : C();
+    u["idempotency-key"] = p;
   }
-  if (opts.requireAuth) {
-    if (!config.apiKey) {
-      throw new NeetruError(
-        "missing_api_key",
-        "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
+  let _ = e.body !== void 0 && r !== "GET" && r !== "DELETE" ? JSON.stringify(e.body) : void 0;
+  _ !== void 0 && (u["content-type"] = "application/json");
+  let g = null, l = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
+  for (let p = 0; p <= s; p++) {
+    if (l != null && Date.now() >= l)
+      throw g ?? new a(
+        "network_error",
+        "Deadline excedido antes de completar a request",
+        void 0,
+        void 0,
+        void 0,
+        c
       );
-    }
-    headers.authorization = `Bearer ${config.apiKey}`;
-  }
-  if (opts.idempotencyKey) {
-    const key = typeof opts.idempotencyKey === "string" ? opts.idempotencyKey : generateIdempotencyKey();
-    headers["idempotency-key"] = key;
-  }
-  const bodyString = opts.body !== void 0 && method !== "GET" && method !== "DELETE" ? JSON.stringify(opts.body) : void 0;
-  if (bodyString !== void 0) {
-    headers["content-type"] = "application/json";
-  }
-  let lastError = null;
-  for (let attempt = 0; attempt <= maxRetries; attempt++) {
-    const init = { method, headers };
-    if (bodyString !== void 0) init.body = bodyString;
-    init.signal = AbortSignal.timeout(3e4);
-    let res;
+    let w = { method: r, headers: u };
+    _ !== void 0 && (w.body = _);
+    let L = l != null ? Math.max(1, Math.min(3e4, l - Date.now())) : 3e4;
+    w.signal = AbortSignal.timeout(L);
+    let d;
     try {
-      res = await config.fetch(url, init);
-    } catch (err2) {
-      const message2 = err2 instanceof DOMException && err2.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${err2 instanceof Error ? err2.message : "fetch failed"}`;
-      lastError = new NeetruError("network_error", message2);
-      if (attempt < maxRetries) {
-        await sleep(backoffMs(attempt));
-        continue;
+      d = await t.fetch(n, w);
+    } catch (i) {
+      let y = i instanceof DOMException && i.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${i instanceof Error ? i.message : "fetch failed"}`;
+      if (g = new a("network_error", y, void 0, void 0, void 0, c), p < s) {
+        let A = x(p);
+        if (l == null || Date.now() + A < l) {
+          await P(A);
+          continue;
+        }
       }
-      throw lastError;
+      throw g;
     }
-    const requestId = res.headers.get("x-request-id") ?? res.headers.get("x-correlation-id") ?? void 0;
-    if (res.ok) {
-      const coreVersion = res.headers.get("x-neetru-version");
-      if (coreVersion) checkCoreVersionCompat(coreVersion);
-      const parsed = await safeJson(res);
-      return parsed;
+    let q = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
+    if (d.ok) {
+      let i = d.headers.get("x-neetru-version");
+      return i && F(i), await K(d);
     }
-    const body = await safeJson(res);
-    let code = statusToCode(res.status);
-    let message = `HTTP ${res.status}`;
-    let reason;
-    if (body && typeof body === "object") {
-      const errField = body.error;
-      if (typeof errField === "string") {
-        message = errField;
-      } else if (errField && typeof errField === "object") {
-        if (typeof errField.code === "string") code = errField.code;
-        if (typeof errField.message === "string") message = errField.message;
-        if (typeof errField.reason === "string") reason = errField.reason;
-      } else {
-        if (typeof body.code === "string") code = body.code;
-        if (typeof body.message === "string") message = body.message;
-      }
-      if (typeof body.reason === "string") reason = body.reason;
+    let f = await K(d), h = Z(d.status), m = `HTTP ${d.status}`, R;
+    if (f && typeof f == "object") {
+      let i = f.error;
+      typeof i == "string" ? m = i : i && typeof i == "object" ? (typeof i.code == "string" && (h = i.code), typeof i.message == "string" && (m = i.message), typeof i.reason == "string" && (R = i.reason)) : (typeof f.code == "string" && (h = f.code), typeof f.message == "string" && (m = f.message)), typeof f.reason == "string" && (R = f.reason);
     }
-    const err = new NeetruError(code, message, res.status, requestId, reason);
-    lastError = err;
-    const isRetryable = RETRYABLE_CODES.has(code);
-    if (isRetryable && attempt < maxRetries) {
-      const retryAfter = parseRetryAfter(res.headers.get("retry-after"));
-      const delay = retryAfter ?? backoffMs(attempt);
-      await sleep(delay);
-      continue;
+    if (d.status === 410) {
+      let i = d.headers.get("x-neetru-replacement");
+      m === `HTTP ${d.status}` && (m = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), i && !m.includes(i) && (m += ` Substituto: ${i}.`);
+    }
+    let k = new a(h, m, d.status, q, R, c);
+    if (g = k, J.has(h) && p < s) {
+      let y = W(d.headers.get("retry-after")) ?? x(p);
+      if (l == null || Date.now() + y < l) {
+        await P(y);
+        continue;
+      }
     }
-    throw err;
+    throw k;
   }
-  throw lastError ?? new NeetruError("unknown", "unexpected httpRequest exit");
+  throw g ?? new a("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, c);
 }
 
 // src/catalog.ts
-function toProduct(raw) {
-  if (!raw || typeof raw !== "object") {
-    throw new NeetruError("invalid_response", "Catalog response item is not an object");
-  }
-  const r = raw;
-  if (typeof r.slug !== "string" || !r.slug) {
-    throw new NeetruError("invalid_response", "Catalog product missing slug");
-  }
-  if (typeof r.name !== "string" || !r.name) {
-    throw new NeetruError("invalid_response", "Catalog product missing name");
-  }
-  const product = {
-    slug: r.slug,
-    name: r.name
+function U(t) {
+  if (!t || typeof t != "object")
+    throw new a("invalid_response", "Catalog response item is not an object");
+  let e = t;
+  if (typeof e.slug != "string" || !e.slug)
+    throw new a("invalid_response", "Catalog product missing slug");
+  if (typeof e.name != "string" || !e.name)
+    throw new a("invalid_response", "Catalog product missing name");
+  let r = {
+    slug: e.slug,
+    name: e.name
   };
-  if (typeof r.tagline === "string") product.tagline = r.tagline;
-  if (typeof r.description === "string") product.description = r.description;
-  if (r.status === "live" || r.status === "soon" || r.status === "beta") {
-    product.status = r.status;
-  }
-  if (typeof r.iconKey === "string") product.iconKey = r.iconKey;
-  if (typeof r.ctaHref === "string") product.ctaHref = r.ctaHref;
-  if (typeof r.ctaLabel === "string") product.ctaLabel = r.ctaLabel;
-  if (Array.isArray(r.plans)) {
-    product.plans = r.plans.filter(
-      (p) => typeof p === "object" && p !== null && typeof p.id === "string" && typeof p.name === "string"
-    ).map((p) => {
-      const plan = { id: p.id, name: p.name };
-      if (typeof p.amountCents === "number") plan.amountCents = p.amountCents;
-      if (Array.isArray(p.features) && p.features.every((f) => typeof f === "string")) {
-        plan.features = p.features;
-      }
-      return plan;
-    });
-  }
-  return product;
+  return typeof e.tagline == "string" && (r.tagline = e.tagline), typeof e.description == "string" && (r.description = e.description), (e.status === "live" || e.status === "soon" || e.status === "beta") && (r.status = e.status), typeof e.iconKey == "string" && (r.iconKey = e.iconKey), typeof e.ctaHref == "string" && (r.ctaHref = e.ctaHref), typeof e.ctaLabel == "string" && (r.ctaLabel = e.ctaLabel), Array.isArray(e.plans) && (r.plans = e.plans.filter(
+    (n) => typeof n == "object" && n !== null && typeof n.id == "string" && typeof n.name == "string"
+  ).map((n) => {
+    let o = { id: n.id, name: n.name };
+    return typeof n.amountCents == "number" && (o.amountCents = n.amountCents), Array.isArray(n.features) && n.features.every((s) => typeof s == "string") && (o.features = n.features), o;
+  })), r;
 }
-function createCatalogNamespace(config) {
+function pe(t) {
   return {
     /**
      * Lista produtos publicados. Por default só `published=true`; staff
      * pode passar `includeDrafts: true` (requer Bearer com role admin/operator).
      */
-    async list(_opts = {}) {
-      const raw = await httpRequest(config, {
+    async list(e = {}) {
+      let r = await E(t, {
         method: "GET",
         path: "/api/sdk/v1/catalog"
       });
-      if (!raw || !Array.isArray(raw.products)) {
-        throw new NeetruError(
+      if (!r || !Array.isArray(r.products))
+        throw new a(
           "invalid_response",
           "Catalog list response missing products array"
         );
-      }
       return {
-        products: raw.products.map(toProduct),
-        fetchedAt: typeof raw.fetchedAt === "string" ? raw.fetchedAt : (/* @__PURE__ */ new Date()).toISOString()
+        products: r.products.map(U),
+        fetchedAt: typeof r.fetchedAt == "string" ? r.fetchedAt : (/* @__PURE__ */ new Date()).toISOString()
       };
     },
     /**
@@ -294,25 +293,21 @@ function createCatalogNamespace(config) {
      *
      * @throws {NeetruError} `not_found` se slug inexistente ou não publicado.
      */
-    async get(slug) {
-      if (!slug || typeof slug !== "string") {
-        throw new NeetruError("validation_failed", "slug is required");
-      }
-      const raw = await httpRequest(config, {
+    async get(e) {
+      if (!e || typeof e != "string")
+        throw new a("validation_failed", "slug is required");
+      let r = await E(t, {
         method: "GET",
-        path: `/api/sdk/v1/catalog/${encodeURIComponent(slug)}`
+        path: `/api/sdk/v1/catalog/${encodeURIComponent(e)}`
       });
-      if (!raw || !raw.product) {
-        throw new NeetruError(
+      if (!r || !r.product)
+        throw new a(
           "invalid_response",
           "Catalog get response missing product"
         );
-      }
-      return toProduct(raw.product);
+      return U(r.product);
     }
   };
 }
 
-export { createCatalogNamespace };
-//# sourceMappingURL=catalog.mjs.map
-//# sourceMappingURL=catalog.mjs.map
+export { pe as createCatalogNamespace };