@neetru/sdk 3.7.0 → 3.8.0

package/dist/catalog.mjs

@@ -1,5 +1,5 @@
 // src/errors.ts
-var i = class t extends Error {
+var a = class t extends Error {
   code;
   status;
   requestId;
@@ -12,98 +12,161 @@ var i = class t extends Error {
    * para um `NeetruDbErrorCode` mais específico (recuperável vs não).
    */
   reason;
-  constructor(e, r, n, a, s) {
-    super(r), this.name = "NeetruError", this.code = e, this.status = n, this.requestId = a, this.reason = s, Object.setPrototypeOf(this, t.prototype);
+  /**
+   * 3.8.0: `x-correlation-id` da requisição que falhou. O SDK gera um UUID por
+   * chamada (ou usa o que o chamador passou) e manda no header; o Core grava o
+   * mesmo id nos logs/auditoria — cite-o ao abrir um ticket de suporte.
+   * `undefined` em erros que acontecem antes de qualquer requisição.
+   */
+  correlationId;
+  constructor(e, r, n, o, s, u) {
+    super(r), this.name = "NeetruError", this.code = e, this.status = n, this.requestId = o, this.reason = s, this.correlationId = u, Object.setPrototypeOf(this, t.prototype);
   }
 };
 
 // src/idempotency.ts
-function T() {
+function C() {
   let t = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
   if (t && typeof t.randomUUID == "function")
     return t.randomUUID();
-  throw new i(
+  throw new a(
     "runtime_unsupported",
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
 
+// src/correlation.ts
+var T = "x-correlation-id";
+var $ = /^[A-Za-z0-9._:\-]+$/;
+function I(t) {
+  return typeof t == "string" && t.length > 0 && t.length <= 128 && $.test(t);
+}
+function j() {
+  let t = globalThis.crypto;
+  try {
+    if (t && typeof t.randomUUID == "function") return t.randomUUID();
+  } catch {
+  }
+  let e = new Uint8Array(16), r = false;
+  try {
+    t && typeof t.getRandomValues == "function" && (t.getRandomValues(e), r = !0);
+  } catch {
+    r = false;
+  }
+  if (!r)
+    for (let o = 0; o < e.length; o++) e[o] = Math.floor(Math.random() * 256);
+  e[6] = e[6] & 15 | 64, e[8] = e[8] & 63 | 128;
+  let n = Array.from(e, (o) => o.toString(16).padStart(2, "0")).join("");
+  return `${n.slice(0, 8)}-${n.slice(8, 12)}-${n.slice(12, 16)}-${n.slice(16, 20)}-${n.slice(20)}`;
+}
+function N(t, e) {
+  let r, n = {};
+  for (let [s, u] of Object.entries(t)) {
+    if (s.toLowerCase() === T) {
+      I(u) && (r = u);
+      continue;
+    }
+    n[s] = u;
+  }
+  let o = r ?? (I(e) ? e : void 0) ?? j();
+  return n[T] = o, { headers: n, correlationId: o };
+}
+
+// src/server-only-key.ts
+function S() {
+  try {
+    let t = globalThis.navigator;
+    if (t && t.product === "ReactNative") return "react-native";
+  } catch {
+  }
+  try {
+    let t = globalThis;
+    if (typeof t.window < "u" && typeof t.document < "u") return "browser";
+  } catch {
+  }
+  return null;
+}
+
 // src/http.ts
-var q = {
+var H = {
   // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
   // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
   3: "2026.05.1"
 };
-function R(t) {
+function b(t) {
   return t.split("+")[0] ?? t;
 }
-function O(t, e) {
-  let r = R(t).split(".").map(Number), n = R(e).split(".").map(Number), a = Math.max(r.length, n.length);
-  for (let s = 0; s < a; s++) {
-    let d = r[s] ?? 0, f = n[s] ?? 0;
-    if (d !== f) return d - f;
+function G(t, e) {
+  let r = b(t).split(".").map(Number), n = b(e).split(".").map(Number), o = Math.max(r.length, n.length);
+  for (let s = 0; s < o; s++) {
+    let u = r[s] ?? 0, c = n[s] ?? 0;
+    if (u !== c) return u - c;
   }
   return 0;
 }
-function N() {
+function M() {
   try {
-    return "3.7.0";
+    return "3.8.0";
   } catch {
     return;
   }
 }
-function U() {
-  let t = N();
+function V() {
+  let t = M();
   return t ? parseInt(t.split(".")[0] ?? "3", 10) : 3;
 }
-var A = /* @__PURE__ */ new Set();
-function K(t) {
+var D = /* @__PURE__ */ new Set();
+function F(t) {
   if (!t) return;
-  let e = U(), r = q[e];
+  let e = V(), r = H[e];
   if (!r) return;
-  let n = R(t);
-  if (O(n, r) < 0) {
-    let a = `${e}:${n}`;
-    A.has(a) || (A.add(a), console.warn(
+  let n = b(t);
+  if (G(n, r) < 0) {
+    let o = `${e}:${n}`;
+    D.has(o) || (D.add(o), console.warn(
       `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${t}" \xE9 anterior ao m\xEDnimo recomendado "${r}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
     ));
   }
 }
-var $ = 2, j = 0, L = /* @__PURE__ */ new Set(["GET", "HEAD"]), H = /* @__PURE__ */ new Set([
+function z() {
+  let t = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
+  return S() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + t + ")" : t;
+}
+var B = 2, X = 0, Y = /* @__PURE__ */ new Set(["GET", "HEAD"]), J = /* @__PURE__ */ new Set([
   "rate_limited",
   "server_error",
   "network_error"
 ]);
-function v(t) {
+function x(t) {
   let e = 200 * Math.pow(4, t), r = e * 0.2 * (Math.random() * 2 - 1);
   return Math.max(50, Math.round(e + r));
 }
-var P = 6e4;
-function G(t) {
+var O = 6e4;
+function W(t) {
   if (!t) return null;
   let e = Number(t);
-  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), P);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), O);
   let r = Date.parse(t);
   if (Number.isFinite(r)) {
     let n = r - Date.now();
-    if (n > 0) return Math.min(n, P);
+    if (n > 0) return Math.min(n, O);
   }
   return null;
 }
-function x(t) {
+function P(t) {
   return new Promise((e) => setTimeout(e, t));
 }
-function F(t) {
+function Z(t) {
   return t === 401 ? "unauthorized" : t === 403 ? "forbidden" : t === 404 ? "not_found" : t === 409 ? "conflict" : t === 410 ? "gone" : t === 422 || t === 400 ? "validation_failed" : t === 429 ? "rate_limited" : t >= 500 ? "server_error" : "unknown";
 }
-function z(t, e, r) {
-  let n = t.replace(/\/+$/, ""), a = e.startsWith("/") ? e : `/${e}`, s = new URL(`${n}${a}`);
+function Q(t, e, r) {
+  let n = t.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, s = new URL(`${n}${o}`);
   if (r)
-    for (let [d, f] of Object.entries(r))
-      f !== void 0 && s.searchParams.set(d, String(f));
+    for (let [u, c] of Object.entries(r))
+      c !== void 0 && s.searchParams.set(u, String(c));
   return s.toString();
 }
-async function D(t) {
+async function K(t) {
   let e = await t.text();
   if (e)
     try {
@@ -113,82 +176,86 @@ async function D(t) {
     }
 }
 async function E(t, e) {
-  let r = e.method ?? "GET", n = z(t.baseUrl, e.path, e.query), a = L.has(r) ? $ : j, s = e.retries ?? a, d = {
-    accept: "application/json",
-    ...e.headers
-  }, f = N();
-  if (f && (d["x-neetru-sdk-version"] = f), e.requireAuth) {
+  let r = e.method ?? "GET", n = Q(t.baseUrl, e.path, e.query), o = Y.has(r) ? B : X, s = e.retries ?? o, { headers: u, correlationId: c } = N(
+    { accept: "application/json", ...e.headers },
+    e.correlationId
+  ), v = M();
+  if (v && (u["x-neetru-sdk-version"] = v), e.requireAuth) {
     if (!t.apiKey)
-      throw new i(
-        "missing_api_key",
-        "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
-      );
-    d.authorization = `Bearer ${t.apiKey}`;
+      throw new a("missing_api_key", z());
+    u.authorization = `Bearer ${t.apiKey}`;
   }
   if (e.idempotencyKey) {
-    let l = typeof e.idempotencyKey == "string" ? e.idempotencyKey : T();
-    d["idempotency-key"] = l;
+    let p = typeof e.idempotencyKey == "string" ? e.idempotencyKey : C();
+    u["idempotency-key"] = p;
   }
-  let w = e.body !== void 0 && r !== "GET" && r !== "DELETE" ? JSON.stringify(e.body) : void 0;
-  w !== void 0 && (d["content-type"] = "application/json");
-  let m = null, p = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
-  for (let l = 0; l <= s; l++) {
-    if (p != null && Date.now() >= p)
-      throw m ?? new i("network_error", "Deadline excedido antes de completar a request");
-    let b = { method: r, headers: d };
-    w !== void 0 && (b.body = w);
-    let M = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
-    b.signal = AbortSignal.timeout(M);
-    let u;
+  let _ = e.body !== void 0 && r !== "GET" && r !== "DELETE" ? JSON.stringify(e.body) : void 0;
+  _ !== void 0 && (u["content-type"] = "application/json");
+  let g = null, l = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
+  for (let p = 0; p <= s; p++) {
+    if (l != null && Date.now() >= l)
+      throw g ?? new a(
+        "network_error",
+        "Deadline excedido antes de completar a request",
+        void 0,
+        void 0,
+        void 0,
+        c
+      );
+    let w = { method: r, headers: u };
+    _ !== void 0 && (w.body = _);
+    let L = l != null ? Math.max(1, Math.min(3e4, l - Date.now())) : 3e4;
+    w.signal = AbortSignal.timeout(L);
+    let d;
     try {
-      u = await t.fetch(n, b);
-    } catch (o) {
-      let y = o instanceof DOMException && o.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${o instanceof Error ? o.message : "fetch failed"}`;
-      if (m = new i("network_error", y), l < s) {
-        let C = v(l);
-        if (p == null || Date.now() + C < p) {
-          await x(C);
+      d = await t.fetch(n, w);
+    } catch (i) {
+      let y = i instanceof DOMException && i.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${i instanceof Error ? i.message : "fetch failed"}`;
+      if (g = new a("network_error", y, void 0, void 0, void 0, c), p < s) {
+        let A = x(p);
+        if (l == null || Date.now() + A < l) {
+          await P(A);
           continue;
         }
       }
-      throw m;
+      throw g;
     }
-    let I = u.headers.get("x-request-id") ?? u.headers.get("x-correlation-id") ?? void 0;
-    if (u.ok) {
-      let o = u.headers.get("x-neetru-version");
-      return o && K(o), await D(u);
+    let q = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
+    if (d.ok) {
+      let i = d.headers.get("x-neetru-version");
+      return i && F(i), await K(d);
     }
-    let c = await D(u), h = F(u.status), g = `HTTP ${u.status}`, _;
-    if (c && typeof c == "object") {
-      let o = c.error;
-      typeof o == "string" ? g = o : o && typeof o == "object" ? (typeof o.code == "string" && (h = o.code), typeof o.message == "string" && (g = o.message), typeof o.reason == "string" && (_ = o.reason)) : (typeof c.code == "string" && (h = c.code), typeof c.message == "string" && (g = c.message)), typeof c.reason == "string" && (_ = c.reason);
+    let f = await K(d), h = Z(d.status), m = `HTTP ${d.status}`, R;
+    if (f && typeof f == "object") {
+      let i = f.error;
+      typeof i == "string" ? m = i : i && typeof i == "object" ? (typeof i.code == "string" && (h = i.code), typeof i.message == "string" && (m = i.message), typeof i.reason == "string" && (R = i.reason)) : (typeof f.code == "string" && (h = f.code), typeof f.message == "string" && (m = f.message)), typeof f.reason == "string" && (R = f.reason);
     }
-    if (u.status === 410) {
-      let o = u.headers.get("x-neetru-replacement");
-      g === `HTTP ${u.status}` && (g = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), o && !g.includes(o) && (g += ` Substituto: ${o}.`);
+    if (d.status === 410) {
+      let i = d.headers.get("x-neetru-replacement");
+      m === `HTTP ${d.status}` && (m = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), i && !m.includes(i) && (m += ` Substituto: ${i}.`);
     }
-    let k = new i(h, g, u.status, I, _);
-    if (m = k, H.has(h) && l < s) {
-      let y = G(u.headers.get("retry-after")) ?? v(l);
-      if (p == null || Date.now() + y < p) {
-        await x(y);
+    let k = new a(h, m, d.status, q, R, c);
+    if (g = k, J.has(h) && p < s) {
+      let y = W(d.headers.get("retry-after")) ?? x(p);
+      if (l == null || Date.now() + y < l) {
+        await P(y);
         continue;
       }
     }
     throw k;
   }
-  throw m ?? new i("unknown", "unexpected httpRequest exit");
+  throw g ?? new a("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, c);
 }
 
 // src/catalog.ts
-function S(t) {
+function U(t) {
   if (!t || typeof t != "object")
-    throw new i("invalid_response", "Catalog response item is not an object");
+    throw new a("invalid_response", "Catalog response item is not an object");
   let e = t;
   if (typeof e.slug != "string" || !e.slug)
-    throw new i("invalid_response", "Catalog product missing slug");
+    throw new a("invalid_response", "Catalog product missing slug");
   if (typeof e.name != "string" || !e.name)
-    throw new i("invalid_response", "Catalog product missing name");
+    throw new a("invalid_response", "Catalog product missing name");
   let r = {
     slug: e.slug,
     name: e.name
@@ -196,11 +263,11 @@ function S(t) {
   return typeof e.tagline == "string" && (r.tagline = e.tagline), typeof e.description == "string" && (r.description = e.description), (e.status === "live" || e.status === "soon" || e.status === "beta") && (r.status = e.status), typeof e.iconKey == "string" && (r.iconKey = e.iconKey), typeof e.ctaHref == "string" && (r.ctaHref = e.ctaHref), typeof e.ctaLabel == "string" && (r.ctaLabel = e.ctaLabel), Array.isArray(e.plans) && (r.plans = e.plans.filter(
     (n) => typeof n == "object" && n !== null && typeof n.id == "string" && typeof n.name == "string"
   ).map((n) => {
-    let a = { id: n.id, name: n.name };
-    return typeof n.amountCents == "number" && (a.amountCents = n.amountCents), Array.isArray(n.features) && n.features.every((s) => typeof s == "string") && (a.features = n.features), a;
+    let o = { id: n.id, name: n.name };
+    return typeof n.amountCents == "number" && (o.amountCents = n.amountCents), Array.isArray(n.features) && n.features.every((s) => typeof s == "string") && (o.features = n.features), o;
   })), r;
 }
-function te(t) {
+function pe(t) {
   return {
     /**
      * Lista produtos publicados. Por default só `published=true`; staff
@@ -212,12 +279,12 @@ function te(t) {
         path: "/api/sdk/v1/catalog"
       });
       if (!r || !Array.isArray(r.products))
-        throw new i(
+        throw new a(
           "invalid_response",
           "Catalog list response missing products array"
         );
       return {
-        products: r.products.map(S),
+        products: r.products.map(U),
         fetchedAt: typeof r.fetchedAt == "string" ? r.fetchedAt : (/* @__PURE__ */ new Date()).toISOString()
       };
     },
@@ -228,19 +295,19 @@ function te(t) {
      */
     async get(e) {
       if (!e || typeof e != "string")
-        throw new i("validation_failed", "slug is required");
+        throw new a("validation_failed", "slug is required");
       let r = await E(t, {
         method: "GET",
         path: `/api/sdk/v1/catalog/${encodeURIComponent(e)}`
       });
       if (!r || !r.product)
-        throw new i(
+        throw new a(
           "invalid_response",
           "Catalog get response missing product"
         );
-      return S(r.product);
+      return U(r.product);
     }
   };
 }
 
-export { te as createCatalogNamespace };
+export { pe as createCatalogNamespace };