@neetru/sdk 3.6.0 → 3.8.0

package/dist/webhooks.mjs

@@ -1,5 +1,5 @@
 // src/errors.ts
-var NeetruError = class _NeetruError extends Error {
+var s = class t extends Error {
   code;
   status;
   requestId;
@@ -12,322 +12,314 @@ var NeetruError = class _NeetruError extends Error {
    * para um `NeetruDbErrorCode` mais específico (recuperável vs não).
    */
   reason;
-  constructor(code, message, status, requestId, reason) {
-    super(message);
-    this.name = "NeetruError";
-    this.code = code;
-    this.status = status;
-    this.requestId = requestId;
-    this.reason = reason;
-    Object.setPrototypeOf(this, _NeetruError.prototype);
+  /**
+   * 3.8.0: `x-correlation-id` da requisição que falhou. O SDK gera um UUID por
+   * chamada (ou usa o que o chamador passou) e manda no header; o Core grava o
+   * mesmo id nos logs/auditoria — cite-o ao abrir um ticket de suporte.
+   * `undefined` em erros que acontecem antes de qualquer requisição.
+   */
+  correlationId;
+  constructor(e, r, n, o, i, a) {
+    super(r), this.name = "NeetruError", this.code = e, this.status = n, this.requestId = o, this.reason = i, this.correlationId = a, Object.setPrototypeOf(this, t.prototype);
   }
 };
 
 // src/idempotency.ts
-function generateIdempotencyKey() {
-  const cryptoObj = typeof globalThis !== "undefined" && "crypto" in globalThis ? globalThis.crypto : void 0;
-  if (cryptoObj && typeof cryptoObj.randomUUID === "function") {
-    return cryptoObj.randomUUID();
-  }
-  throw new NeetruError(
+function N() {
+  let t = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
+  if (t && typeof t.randomUUID == "function")
+    return t.randomUUID();
+  throw new s(
     "runtime_unsupported",
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
 
+// src/correlation.ts
+var D = "x-correlation-id";
+var F = /^[A-Za-z0-9._:\-]+$/;
+function C(t) {
+  return typeof t == "string" && t.length > 0 && t.length <= 128 && F.test(t);
+}
+function z() {
+  let t = globalThis.crypto;
+  try {
+    if (t && typeof t.randomUUID == "function") return t.randomUUID();
+  } catch {
+  }
+  let e = new Uint8Array(16), r = false;
+  try {
+    t && typeof t.getRandomValues == "function" && (t.getRandomValues(e), r = !0);
+  } catch {
+    r = false;
+  }
+  if (!r)
+    for (let o = 0; o < e.length; o++) e[o] = Math.floor(Math.random() * 256);
+  e[6] = e[6] & 15 | 64, e[8] = e[8] & 63 | 128;
+  let n = Array.from(e, (o) => o.toString(16).padStart(2, "0")).join("");
+  return `${n.slice(0, 8)}-${n.slice(8, 12)}-${n.slice(12, 16)}-${n.slice(16, 20)}-${n.slice(20)}`;
+}
+function O(t, e) {
+  let r, n = {};
+  for (let [i, a] of Object.entries(t)) {
+    if (i.toLowerCase() === D) {
+      C(a) && (r = a);
+      continue;
+    }
+    n[i] = a;
+  }
+  let o = r ?? (C(e) ? e : void 0) ?? z();
+  return n[D] = o, { headers: n, correlationId: o };
+}
+
+// src/server-only-key.ts
+function M() {
+  try {
+    let t = globalThis.navigator;
+    if (t && t.product === "ReactNative") return "react-native";
+  } catch {
+  }
+  try {
+    let t = globalThis;
+    if (typeof t.window < "u" && typeof t.document < "u") return "browser";
+  } catch {
+  }
+  return null;
+}
+
 // src/http.ts
-var COMPAT_MATRIX = {
+var G = {
   // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
   // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
   3: "2026.05.1"
 };
-function stripRevision(v) {
-  return v.split("+")[0] ?? v;
+function A(t) {
+  return t.split("+")[0] ?? t;
 }
-function compareCalVer(a, b) {
-  const partsA = stripRevision(a).split(".").map(Number);
-  const partsB = stripRevision(b).split(".").map(Number);
-  const len = Math.max(partsA.length, partsB.length);
-  for (let i = 0; i < len; i++) {
-    const pa = partsA[i] ?? 0;
-    const pb = partsB[i] ?? 0;
-    if (pa !== pb) return pa - pb;
+function X(t, e) {
+  let r = A(t).split(".").map(Number), n = A(e).split(".").map(Number), o = Math.max(r.length, n.length);
+  for (let i = 0; i < o; i++) {
+    let a = r[i] ?? 0, c = n[i] ?? 0;
+    if (a !== c) return a - c;
   }
   return 0;
 }
-function readInjectedSdkVersion() {
+function $() {
   try {
-    return "3.6.0";
+    return "3.8.0";
   } catch {
-    return void 0;
+    return;
   }
 }
-function getSdkMajor() {
-  const ver = readInjectedSdkVersion();
-  if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
-  return 3;
+function Y() {
+  let t = $();
+  return t ? parseInt(t.split(".")[0] ?? "3", 10) : 3;
 }
-var _warnedCoreTooOld = /* @__PURE__ */ new Set();
-function checkCoreVersionCompat(coreVersion) {
-  if (!coreVersion) return;
-  const sdkMajor = getSdkMajor();
-  const minCore = COMPAT_MATRIX[sdkMajor];
-  if (!minCore) return;
-  const stripped = stripRevision(coreVersion);
-  if (compareCalVer(stripped, minCore) < 0) {
-    const key = `${sdkMajor}:${stripped}`;
-    if (!_warnedCoreTooOld.has(key)) {
-      _warnedCoreTooOld.add(key);
-      console.warn(
-        `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${coreVersion}" \xE9 anterior ao m\xEDnimo recomendado "${minCore}" para SDK major ${sdkMajor}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
-      );
-    }
+var W = /* @__PURE__ */ new Set();
+function J(t) {
+  if (!t) return;
+  let e = Y(), r = G[e];
+  if (!r) return;
+  let n = A(t);
+  if (X(n, r) < 0) {
+    let o = `${e}:${n}`;
+    W.has(o) || (W.add(o), console.warn(
+      `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${t}" \xE9 anterior ao m\xEDnimo recomendado "${r}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
+    ));
   }
 }
-var DEFAULT_RETRIES_READ = 2;
-var DEFAULT_RETRIES_WRITE = 0;
-var READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
-var RETRYABLE_CODES = /* @__PURE__ */ new Set([
+function Z() {
+  let t = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
+  return M() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + t + ")" : t;
+}
+var Q = 2, ee = 0, te = /* @__PURE__ */ new Set(["GET", "HEAD"]), re = /* @__PURE__ */ new Set([
   "rate_limited",
   "server_error",
   "network_error"
 ]);
-function backoffMs(attempt) {
-  const base = 200 * Math.pow(4, attempt);
-  const jitter = base * 0.2 * (Math.random() * 2 - 1);
-  return Math.max(50, Math.round(base + jitter));
+function U(t) {
+  let e = 200 * Math.pow(4, t), r = e * 0.2 * (Math.random() * 2 - 1);
+  return Math.max(50, Math.round(e + r));
 }
-var MAX_RETRY_AFTER_MS = 6e4;
-function parseRetryAfter(value) {
-  if (!value) return null;
-  const secs = Number(value);
-  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1e3), MAX_RETRY_AFTER_MS);
-  const dateMs = Date.parse(value);
-  if (Number.isFinite(dateMs)) {
-    const delta = dateMs - Date.now();
-    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);
+var q = 6e4;
+function ne(t) {
+  if (!t) return null;
+  let e = Number(t);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), q);
+  let r = Date.parse(t);
+  if (Number.isFinite(r)) {
+    let n = r - Date.now();
+    if (n > 0) return Math.min(n, q);
   }
   return null;
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+function P(t) {
+  return new Promise((e) => setTimeout(e, t));
 }
-function statusToCode(status) {
-  if (status === 401) return "unauthorized";
-  if (status === 403) return "forbidden";
-  if (status === 404) return "not_found";
-  if (status === 409) return "conflict";
-  if (status === 422 || status === 400) return "validation_failed";
-  if (status === 429) return "rate_limited";
-  if (status >= 500) return "server_error";
-  return "unknown";
+function oe(t) {
+  return t === 401 ? "unauthorized" : t === 403 ? "forbidden" : t === 404 ? "not_found" : t === 409 ? "conflict" : t === 410 ? "gone" : t === 422 || t === 400 ? "validation_failed" : t === 429 ? "rate_limited" : t >= 500 ? "server_error" : "unknown";
 }
-function buildUrl(baseUrl, path, query) {
-  const base = baseUrl.replace(/\/+$/, "");
-  const p = path.startsWith("/") ? path : `/${path}`;
-  const url = new URL(`${base}${p}`);
-  if (query) {
-    for (const [k, v] of Object.entries(query)) {
-      if (v === void 0) continue;
-      url.searchParams.set(k, String(v));
-    }
-  }
-  return url.toString();
+function ie(t, e, r) {
+  let n = t.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, i = new URL(`${n}${o}`);
+  if (r)
+    for (let [a, c] of Object.entries(r))
+      c !== void 0 && i.searchParams.set(a, String(c));
+  return i.toString();
 }
-async function safeJson(res) {
-  const text = await res.text();
-  if (!text) return void 0;
-  try {
-    return JSON.parse(text);
-  } catch {
-    return void 0;
-  }
+async function K(t) {
+  let e = await t.text();
+  if (e)
+    try {
+      return JSON.parse(e);
+    } catch {
+      return;
+    }
 }
-async function httpRequest(config, opts) {
-  const method = opts.method ?? "GET";
-  const url = buildUrl(config.baseUrl, opts.path, opts.query);
-  const defaultRetries = READ_METHODS.has(method) ? DEFAULT_RETRIES_READ : DEFAULT_RETRIES_WRITE;
-  const maxRetries = opts.retries ?? defaultRetries;
-  const headers = {
-    accept: "application/json",
-    ...opts.headers
-  };
-  const sdkVersion = readInjectedSdkVersion();
-  if (sdkVersion) {
-    headers["x-neetru-sdk-version"] = sdkVersion;
-  }
-  if (opts.requireAuth) {
-    if (!config.apiKey) {
-      throw new NeetruError(
-        "missing_api_key",
-        "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
+async function k(t, e) {
+  let r = e.method ?? "GET", n = ie(t.baseUrl, e.path, e.query), o = te.has(r) ? Q : ee, i = e.retries ?? o, { headers: a, correlationId: c } = O(
+    { accept: "application/json", ...e.headers },
+    e.correlationId
+  ), b = $();
+  if (b && (a["x-neetru-sdk-version"] = b), e.requireAuth) {
+    if (!t.apiKey)
+      throw new s("missing_api_key", Z());
+    a.authorization = `Bearer ${t.apiKey}`;
+  }
+  if (e.idempotencyKey) {
+    let l = typeof e.idempotencyKey == "string" ? e.idempotencyKey : N();
+    a["idempotency-key"] = l;
+  }
+  let h = e.body !== void 0 && r !== "GET" && r !== "DELETE" ? JSON.stringify(e.body) : void 0;
+  h !== void 0 && (a["content-type"] = "application/json");
+  let g = null, p = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
+  for (let l = 0; l <= i; l++) {
+    if (p != null && Date.now() >= p)
+      throw g ?? new s(
+        "network_error",
+        "Deadline excedido antes de completar a request",
+        void 0,
+        void 0,
+        void 0,
+        c
       );
-    }
-    headers.authorization = `Bearer ${config.apiKey}`;
-  }
-  if (opts.idempotencyKey) {
-    const key = typeof opts.idempotencyKey === "string" ? opts.idempotencyKey : generateIdempotencyKey();
-    headers["idempotency-key"] = key;
-  }
-  const bodyString = opts.body !== void 0 && method !== "GET" && method !== "DELETE" ? JSON.stringify(opts.body) : void 0;
-  if (bodyString !== void 0) {
-    headers["content-type"] = "application/json";
-  }
-  let lastError = null;
-  for (let attempt = 0; attempt <= maxRetries; attempt++) {
-    const init = { method, headers };
-    if (bodyString !== void 0) init.body = bodyString;
-    init.signal = AbortSignal.timeout(3e4);
-    let res;
+    let f = { method: r, headers: a };
+    h !== void 0 && (f.body = h);
+    let v = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
+    f.signal = AbortSignal.timeout(v);
+    let d;
     try {
-      res = await config.fetch(url, init);
-    } catch (err2) {
-      const message2 = err2 instanceof DOMException && err2.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${err2 instanceof Error ? err2.message : "fetch failed"}`;
-      lastError = new NeetruError("network_error", message2);
-      if (attempt < maxRetries) {
-        await sleep(backoffMs(attempt));
-        continue;
+      d = await t.fetch(n, f);
+    } catch (u) {
+      let _ = u instanceof DOMException && u.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${u instanceof Error ? u.message : "fetch failed"}`;
+      if (g = new s("network_error", _, void 0, void 0, void 0, c), l < i) {
+        let T = U(l);
+        if (p == null || Date.now() + T < p) {
+          await P(T);
+          continue;
+        }
       }
-      throw lastError;
+      throw g;
     }
-    const requestId = res.headers.get("x-request-id") ?? res.headers.get("x-correlation-id") ?? void 0;
-    if (res.ok) {
-      const coreVersion = res.headers.get("x-neetru-version");
-      if (coreVersion) checkCoreVersionCompat(coreVersion);
-      const parsed = await safeJson(res);
-      return parsed;
+    let w = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
+    if (d.ok) {
+      let u = d.headers.get("x-neetru-version");
+      return u && J(u), await K(d);
     }
-    const body = await safeJson(res);
-    let code = statusToCode(res.status);
-    let message = `HTTP ${res.status}`;
-    let reason;
-    if (body && typeof body === "object") {
-      const errField = body.error;
-      if (typeof errField === "string") {
-        message = errField;
-      } else if (errField && typeof errField === "object") {
-        if (typeof errField.code === "string") code = errField.code;
-        if (typeof errField.message === "string") message = errField.message;
-        if (typeof errField.reason === "string") reason = errField.reason;
-      } else {
-        if (typeof body.code === "string") code = body.code;
-        if (typeof body.message === "string") message = body.message;
-      }
-      if (typeof body.reason === "string") reason = body.reason;
+    let m = await K(d), E = oe(d.status), y = `HTTP ${d.status}`, I;
+    if (m && typeof m == "object") {
+      let u = m.error;
+      typeof u == "string" ? y = u : u && typeof u == "object" ? (typeof u.code == "string" && (E = u.code), typeof u.message == "string" && (y = u.message), typeof u.reason == "string" && (I = u.reason)) : (typeof m.code == "string" && (E = m.code), typeof m.message == "string" && (y = m.message)), typeof m.reason == "string" && (I = m.reason);
     }
-    const err = new NeetruError(code, message, res.status, requestId, reason);
-    lastError = err;
-    const isRetryable = RETRYABLE_CODES.has(code);
-    if (isRetryable && attempt < maxRetries) {
-      const retryAfter = parseRetryAfter(res.headers.get("retry-after"));
-      const delay = retryAfter ?? backoffMs(attempt);
-      await sleep(delay);
-      continue;
+    if (d.status === 410) {
+      let u = d.headers.get("x-neetru-replacement");
+      y === `HTTP ${d.status}` && (y = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), u && !y.includes(u) && (y += ` Substituto: ${u}.`);
     }
-    throw err;
+    let x = new s(E, y, d.status, w, I, c);
+    if (g = x, re.has(E) && l < i) {
+      let _ = ne(d.headers.get("retry-after")) ?? U(l);
+      if (p == null || Date.now() + _ < p) {
+        await P(_);
+        continue;
+      }
+    }
+    throw x;
   }
-  throw lastError ?? new NeetruError("unknown", "unexpected httpRequest exit");
+  throw g ?? new s("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, c);
 }
 
 // src/validators.ts
-var SDK_ID_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
-function assertValidSdkId(field, value) {
-  if (typeof value !== "string" || !SDK_ID_RE.test(value)) {
-    throw new NeetruError(
+var L = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
+function S(t, e) {
+  if (typeof e != "string" || !L.test(e))
+    throw new s(
       "validation_failed",
-      `${field} must match ${SDK_ID_RE.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
+      `${t} must match ${L.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
     );
-  }
 }
 
 // src/webhooks.ts
-async function verifyWebhookSignature(payload, signature, secret, timestamp) {
-  if (!signature || !secret) return false;
-  const sigHex = signature.startsWith("sha256=") ? signature.slice(7) : signature;
-  if (!/^[0-9a-f]+$/i.test(sigHex)) return false;
-  const subtle = typeof globalThis !== "undefined" && "crypto" in globalThis ? globalThis.crypto?.subtle : void 0;
-  if (!subtle) {
-    throw new NeetruError(
+async function se(t, e, r, n) {
+  if (!e || !r) return false;
+  let o = e.startsWith("sha256=") ? e.slice(7) : e;
+  if (!/^[0-9a-f]+$/i.test(o)) return false;
+  let i = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto?.subtle : void 0;
+  if (!i)
+    throw new s(
       "runtime_unsupported",
       "verifyWebhookSignature requires globalThis.crypto.subtle (Node \u226520, modern browser, or Edge runtime)."
     );
+  let a = new TextEncoder(), c = a.encode(r), b = typeof t == "string" ? a.encode(t) : t, h = b;
+  if (n !== void 0) {
+    let d = a.encode(`${n}.`), w = new Uint8Array(d.length + b.length);
+    w.set(d, 0), w.set(b, d.length), h = w;
   }
-  const encoder = new TextEncoder();
-  const keyBytes = encoder.encode(secret);
-  const rawBytes = typeof payload === "string" ? encoder.encode(payload) : payload;
-  let payloadBytes = rawBytes;
-  if (timestamp !== void 0) {
-    const prefix = encoder.encode(`${timestamp}.`);
-    const merged = new Uint8Array(prefix.length + rawBytes.length);
-    merged.set(prefix, 0);
-    merged.set(rawBytes, prefix.length);
-    payloadBytes = merged;
-  }
-  const key = await subtle.importKey(
+  let g = await i.importKey(
     "raw",
-    keyBytes,
+    c,
     { name: "HMAC", hash: "SHA-256" },
     false,
     ["sign"]
-  );
-  const macBuffer = await subtle.sign(
+  ), p = await i.sign(
     "HMAC",
-    key,
-    payloadBytes
-  );
-  const macBytes = new Uint8Array(macBuffer);
-  const sigBytes = hexToBytes(sigHex.toLowerCase());
-  if (!sigBytes || sigBytes.length !== macBytes.length) return false;
-  let diff = 0;
-  for (let i = 0; i < macBytes.length; i++) {
-    diff |= macBytes[i] ^ sigBytes[i];
-  }
-  return diff === 0;
+    g,
+    h
+  ), l = new Uint8Array(p), f = ae(o.toLowerCase());
+  if (!f || f.length !== l.length) return false;
+  let v = 0;
+  for (let d = 0; d < l.length; d++)
+    v |= l[d] ^ f[d];
+  return v === 0;
 }
-async function verifyWebhookRequest(payload, headers, secret, options = {}) {
-  const toleranceMs = options.toleranceMs ?? 3e5;
-  const getHeader = (name) => {
-    if (typeof headers.get === "function") {
-      return headers.get(name);
-    }
-    const rec = headers;
-    const lower = name.toLowerCase();
-    for (const key of Object.keys(rec)) {
-      if (key.toLowerCase() === lower) return rec[key] ?? null;
-    }
+async function Re(t, e, r, n = {}) {
+  let o = n.toleranceMs ?? 3e5, i = (p) => {
+    if (typeof e.get == "function")
+      return e.get(p);
+    let l = e, f = p.toLowerCase();
+    for (let v of Object.keys(l))
+      if (v.toLowerCase() === f) return l[v] ?? null;
     return null;
-  };
-  const tsHeader = getHeader("x-neetru-timestamp");
-  if (!tsHeader) {
+  }, a = i("x-neetru-timestamp");
+  if (!a)
     return { ok: false, reason: "timestamp_missing" };
-  }
-  const tsMs = Number(tsHeader);
-  if (!Number.isFinite(tsMs)) {
+  let c = Number(a);
+  if (!Number.isFinite(c))
     return { ok: false, reason: "timestamp_missing" };
-  }
-  const skewMs = Math.abs(Date.now() - tsMs);
-  if (skewMs > toleranceMs) {
+  if (Math.abs(Date.now() - c) > o)
     return { ok: false, reason: "timestamp_expired" };
-  }
-  const sig = getHeader("x-neetru-signature");
-  const valid = await verifyWebhookSignature(payload, sig, secret, tsHeader);
-  if (!valid) {
-    return { ok: false, reason: "invalid_signature" };
-  }
-  return { ok: true };
+  let h = i("x-neetru-signature");
+  return await se(t, h, r, a) ? { ok: true } : { ok: false, reason: "invalid_signature" };
 }
-function hexToBytes(hex) {
-  if (hex.length % 2 !== 0) return null;
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < bytes.length; i++) {
-    const high = parseInt(hex[i * 2], 16);
-    const low = parseInt(hex[i * 2 + 1], 16);
-    if (Number.isNaN(high) || Number.isNaN(low)) return null;
-    bytes[i] = high << 4 | low;
-  }
-  return bytes;
+function ae(t) {
+  if (t.length % 2 !== 0) return null;
+  let e = new Uint8Array(t.length / 2);
+  for (let r = 0; r < e.length; r++) {
+    let n = parseInt(t[r * 2], 16), o = parseInt(t[r * 2 + 1], 16);
+    if (Number.isNaN(n) || Number.isNaN(o)) return null;
+    e[r] = n << 4 | o;
+  }
+  return e;
 }
-var VALID_EVENTS = [
+var V = [
   "subscription.activated",
   "subscription.cancelled",
   "subscription.payment_failed",
@@ -337,80 +329,66 @@ var VALID_EVENTS = [
   "account.reactivated",
   "support.ticket_replied"
 ];
-function toEndpoint(raw) {
-  if (!raw || typeof raw !== "object") {
-    throw new NeetruError("invalid_response", "Webhook response is not an object");
-  }
-  const r = raw;
-  if (typeof r.id !== "string") {
-    throw new NeetruError("invalid_response", "Webhook missing id");
-  }
+function H(t) {
+  if (!t || typeof t != "object")
+    throw new s("invalid_response", "Webhook response is not an object");
+  let e = t;
+  if (typeof e.id != "string")
+    throw new s("invalid_response", "Webhook missing id");
   return {
-    id: r.id,
-    url: typeof r.url === "string" ? r.url : "",
-    events: Array.isArray(r.events) ? r.events.filter(
-      (e) => VALID_EVENTS.includes(e)
+    id: e.id,
+    url: typeof e.url == "string" ? e.url : "",
+    events: Array.isArray(e.events) ? e.events.filter(
+      (r) => V.includes(r)
     ) : [],
-    hasSecret: r.hasSecret === true,
-    status: r.status === "active" || r.status === "degraded" || r.status === "disabled" ? r.status : "active",
-    lastDeliveryAt: typeof r.lastDeliveryAt === "string" ? r.lastDeliveryAt : void 0,
-    consecutiveFailures: typeof r.consecutiveFailures === "number" ? r.consecutiveFailures : void 0,
-    createdAt: typeof r.createdAt === "string" ? r.createdAt : (/* @__PURE__ */ new Date()).toISOString()
+    hasSecret: e.hasSecret === true,
+    status: e.status === "active" || e.status === "degraded" || e.status === "disabled" ? e.status : "active",
+    lastDeliveryAt: typeof e.lastDeliveryAt == "string" ? e.lastDeliveryAt : void 0,
+    consecutiveFailures: typeof e.consecutiveFailures == "number" ? e.consecutiveFailures : void 0,
+    createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function validateInput(input) {
-  if (!input.url || typeof input.url !== "string") {
-    throw new NeetruError("validation_failed", "url \xE9 obrigat\xF3ria");
-  }
+function B(t) {
+  if (!t.url || typeof t.url != "string")
+    throw new s("validation_failed", "url \xE9 obrigat\xF3ria");
   try {
-    const parsed = new URL(input.url);
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    let e = new URL(t.url);
+    if (e.protocol !== "https:" && e.protocol !== "http:")
       throw new Error("invalid protocol");
-    }
   } catch {
-    throw new NeetruError("validation_failed", `url inv\xE1lida: ${input.url}`);
-  }
-  if (!Array.isArray(input.events) || input.events.length === 0) {
-    throw new NeetruError("validation_failed", "events deve ter pelo menos 1 evento");
-  }
-  for (const ev of input.events) {
-    if (!VALID_EVENTS.includes(ev)) {
-      throw new NeetruError("validation_failed", `evento desconhecido: ${ev}`);
-    }
-  }
-  if (input.secret !== void 0 && input.secret.length < 16) {
-    throw new NeetruError("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
-  }
+    throw new s("validation_failed", `url inv\xE1lida: ${t.url}`);
+  }
+  if (!Array.isArray(t.events) || t.events.length === 0)
+    throw new s("validation_failed", "events deve ter pelo menos 1 evento");
+  for (let e of t.events)
+    if (!V.includes(e))
+      throw new s("validation_failed", `evento desconhecido: ${e}`);
+  if (t.secret !== void 0 && t.secret.length < 16)
+    throw new s("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
 }
-function resolveProductId(config, ...candidates) {
-  for (const c of candidates) {
-    if (typeof c === "string" && c.length > 0) {
-      assertValidSdkId("productId", c);
-      return c;
-    }
-  }
-  if (config.productId) {
-    assertValidSdkId("productId", config.productId);
-    return config.productId;
-  }
-  throw new NeetruError(
+function R(t, ...e) {
+  for (let r of e)
+    if (typeof r == "string" && r.length > 0)
+      return S("productId", r), r;
+  if (t.productId)
+    return S("productId", t.productId), t.productId;
+  throw new s(
     "validation_failed",
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function createWebhooksNamespace(config) {
+function Ie(t) {
   return {
-    async register(input) {
-      validateInput(input);
-      const productId = resolveProductId(config, input.productId);
-      const raw = await httpRequest(config, {
+    async register(e) {
+      B(e);
+      let r = R(t, e.productId), n = await k(t, {
         method: "POST",
         path: "/api/sdk/v1/webhooks",
         body: {
-          productId,
-          url: input.url,
-          events: input.events,
-          ...input.secret ? { secret: input.secret } : {}
+          productId: r,
+          url: e.url,
+          events: e.events,
+          ...e.secret ? { secret: e.secret } : {}
         },
         requireAuth: true,
         // Sem isso, um retry de rede (app-level; SDK default é 0 retries em
@@ -419,88 +397,76 @@ function createWebhooksNamespace(config) {
         // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
         idempotencyKey: true
       });
-      return toEndpoint(raw);
+      return H(n);
     },
-    async list(options) {
-      const productId = resolveProductId(config, options?.productId);
-      const raw = await httpRequest(config, {
+    async list(e) {
+      let r = R(t, e?.productId), n = await k(t, {
         method: "GET",
         path: "/api/sdk/v1/webhooks",
-        query: { productId },
+        query: { productId: r },
         requireAuth: true
       });
-      const list = Array.isArray(raw?.endpoints) ? raw.endpoints : [];
-      return list.map(toEndpoint);
+      return (Array.isArray(n?.endpoints) ? n.endpoints : []).map(H);
     },
-    async unregister(id, options) {
-      if (!id) throw new NeetruError("validation_failed", "id obrigat\xF3rio");
-      const productId = resolveProductId(config, options?.productId);
-      await httpRequest(config, {
+    async unregister(e, r) {
+      if (!e) throw new s("validation_failed", "id obrigat\xF3rio");
+      let n = R(t, r?.productId);
+      return await k(t, {
         method: "DELETE",
-        path: `/api/sdk/v1/webhooks/${encodeURIComponent(id)}`,
-        query: { productId },
+        path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}`,
+        query: { productId: n },
         requireAuth: true
-      });
-      return { ok: true };
+      }), { ok: true };
     },
-    async test(id, options) {
-      if (!id) throw new NeetruError("validation_failed", "id obrigat\xF3rio");
-      const productId = resolveProductId(config, options?.productId);
-      const raw = await httpRequest(config, {
+    async test(e, r) {
+      if (!e) throw new s("validation_failed", "id obrigat\xF3rio");
+      let n = R(t, r?.productId), o = await k(t, {
         method: "POST",
-        path: `/api/sdk/v1/webhooks/${encodeURIComponent(id)}/test`,
-        query: { productId },
+        path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}/test`,
+        query: { productId: n },
         requireAuth: true,
         idempotencyKey: true
       });
-      if (!raw || typeof raw !== "object") {
+      if (!o || typeof o != "object")
         return { ok: false, error: "invalid response" };
-      }
-      const r = raw;
+      let i = o;
       return {
-        ok: r.ok === true,
-        statusCode: typeof r.statusCode === "number" ? r.statusCode : void 0,
-        durationMs: typeof r.durationMs === "number" ? r.durationMs : void 0,
-        error: typeof r.error === "string" ? r.error : void 0
+        ok: i.ok === true,
+        statusCode: typeof i.statusCode == "number" ? i.statusCode : void 0,
+        durationMs: typeof i.durationMs == "number" ? i.durationMs : void 0,
+        error: typeof i.error == "string" ? i.error : void 0
       };
     }
   };
 }
-var MockWebhooks = class {
+var j = class {
   endpoints = /* @__PURE__ */ new Map();
   nextId = 1;
-  async register(input) {
-    validateInput(input);
-    const id = `mock_wh_${this.nextId++}`;
-    const endpoint = {
-      id,
-      url: input.url,
-      events: input.events,
-      hasSecret: !!input.secret,
+  async register(e) {
+    B(e);
+    let r = `mock_wh_${this.nextId++}`, n = {
+      id: r,
+      url: e.url,
+      events: e.events,
+      hasSecret: !!e.secret,
       status: "active",
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    this.endpoints.set(id, endpoint);
-    return endpoint;
+    return this.endpoints.set(r, n), n;
   }
-  async list(_options) {
+  async list(e) {
     return [...this.endpoints.values()];
   }
-  async unregister(id, _options) {
-    if (!this.endpoints.has(id)) {
-      throw new NeetruError("not_found", `Webhook ${id} n\xE3o encontrado`);
-    }
-    this.endpoints.delete(id);
-    return { ok: true };
+  async unregister(e, r) {
+    if (!this.endpoints.has(e))
+      throw new s("not_found", `Webhook ${e} n\xE3o encontrado`);
+    return this.endpoints.delete(e), { ok: true };
   }
-  async test(id, _options) {
-    if (!this.endpoints.has(id)) {
-      throw new NeetruError("not_found", `Webhook ${id} n\xE3o encontrado`);
-    }
+  async test(e, r) {
+    if (!this.endpoints.has(e))
+      throw new s("not_found", `Webhook ${e} n\xE3o encontrado`);
     return { ok: true, statusCode: 200, durationMs: 42 };
   }
 };
 
-export { MockWebhooks, createWebhooksNamespace, verifyWebhookRequest, verifyWebhookSignature };
-//# sourceMappingURL=webhooks.mjs.map
-//# sourceMappingURL=webhooks.mjs.map
+export { j as MockWebhooks, Ie as createWebhooksNamespace, Re as verifyWebhookRequest, se as verifyWebhookSignature };