@pafi-dev/issuer 0.7.9 → 0.9.0

package/dist/nestjs/index.cjs

@@ -0,0 +1,314 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : /* @__PURE__ */ Symbol.for("Symbol." + name);
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __decoratorStart = (base) => [, , , __create(base?.[__knownSymbol("metadata")] ?? null)];
+var __decoratorStrings = ["class", "method", "getter", "setter", "accessor", "field", "value", "get", "set"];
+var __expectFn = (fn) => fn !== void 0 && typeof fn !== "function" ? __typeError("Function expected") : fn;
+var __decoratorContext = (kind, name, done, metadata, fns) => ({ kind: __decoratorStrings[kind], name, metadata, addInitializer: (fn) => done._ ? __typeError("Already initialized") : fns.push(__expectFn(fn || null)) });
+var __decoratorMetadata = (array, target) => __defNormalProp(target, __knownSymbol("metadata"), array[3]);
+var __runInitializers = (array, flags, self, value) => {
+  for (var i = 0, fns = array[flags >> 1], n = fns && fns.length; i < n; i++) flags & 1 ? fns[i].call(self) : value = fns[i].call(self, value);
+  return value;
+};
+var __decorateElement = (array, flags, name, decorators, target, extra) => {
+  var fn, it, done, ctx, access, k = flags & 7, s = !!(flags & 8), p = !!(flags & 16);
+  var j = k > 3 ? array.length + 1 : k ? s ? 1 : 2 : 0, key = __decoratorStrings[k + 5];
+  var initializers = k > 3 && (array[j - 1] = []), extraInitializers = array[j] || (array[j] = []);
+  var desc = k && (!p && !s && (target = target.prototype), k < 5 && (k > 3 || !p) && __getOwnPropDesc(k < 4 ? target : { get [name]() {
+    return __privateGet(this, extra);
+  }, set [name](x) {
+    return __privateSet(this, extra, x);
+  } }, name));
+  k ? p && k < 4 && __name(extra, (k > 2 ? "set " : k > 1 ? "get " : "") + name) : __name(target, name);
+  for (var i = decorators.length - 1; i >= 0; i--) {
+    ctx = __decoratorContext(k, name, done = {}, array[3], extraInitializers);
+    if (k) {
+      ctx.static = s, ctx.private = p, access = ctx.access = { has: p ? (x) => __privateIn(target, x) : (x) => name in x };
+      if (k ^ 3) access.get = p ? (x) => (k ^ 1 ? __privateGet : __privateMethod)(x, target, k ^ 4 ? extra : desc.get) : (x) => x[name];
+      if (k > 2) access.set = p ? (x, y) => __privateSet(x, target, y, k ^ 4 ? extra : desc.set) : (x, y) => x[name] = y;
+    }
+    it = (0, decorators[i])(k ? k < 4 ? p ? extra : desc[key] : k > 4 ? void 0 : { get: desc.get, set: desc.set } : target, ctx), done._ = 1;
+    if (k ^ 4 || it === void 0) __expectFn(it) && (k > 4 ? initializers.unshift(it) : k ? p ? extra = it : desc[key] = it : target = it);
+    else if (typeof it !== "object" || it === null) __typeError("Object expected");
+    else __expectFn(fn = it.get) && (desc.get = fn), __expectFn(fn = it.set) && (desc.set = fn), __expectFn(fn = it.init) && initializers.unshift(fn);
+  }
+  return k || __decoratorMetadata(array, target), desc && __defProp(target, name, desc), p ? k ^ 4 ? extra : desc : target;
+};
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateIn = (member, obj) => Object(obj) !== obj ? __typeError('Cannot use the "in" operator on this value') : member.has(obj);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
+var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
+
+// src/nestjs/index.ts
+var nestjs_exports = {};
+__export(nestjs_exports, {
+  PafiHttpExceptionFilter: () => PafiHttpExceptionFilter
+});
+module.exports = __toCommonJS(nestjs_exports);
+
+// src/nestjs/httpExceptionFilter.ts
+var import_common = require("@nestjs/common");
+var import_node_crypto = require("crypto");
+
+// src/errors.ts
+var import_core = require("@pafi-dev/core");
+var import_core2 = require("@pafi-dev/core");
+var import_core3 = require("@pafi-dev/core");
+
+// src/api/errorMapper.ts
+function buildSdkErrorBody(err) {
+  const type = err.type ?? (0, import_core.defaultErrorTypeForStatus)(import_core.SDK_ERROR_HTTP_STATUS_CODE[err.httpStatus]);
+  const body = {
+    type,
+    code: err.code,
+    message: err.message,
+    safeToRetry: err.safeToRetry
+  };
+  if (err.param) body.param = err.param;
+  if (err.metadata) body.metadata = err.metadata;
+  if (err.details !== void 0) body.details = err.details;
+  return body;
+}
+
+// src/http/errorEnvelope.ts
+function isValidationPipeBody(body) {
+  return Array.isArray(body["message"]) && typeof body["error"] === "string" && body["error"] === "Bad Request";
+}
+function extractParamFromValidatorMessage(message) {
+  const idx = message.indexOf(" ");
+  if (idx <= 0) return void 0;
+  const candidate = message.slice(0, idx);
+  return /^[A-Za-z_][\w.]*$/.test(candidate) ? candidate : void 0;
+}
+function normalizeValidationPipeBody(body) {
+  const fields = {};
+  for (const msg of body.message) {
+    const param2 = extractParamFromValidatorMessage(msg);
+    const key = param2 ?? "_";
+    (fields[key] ??= []).push(msg);
+  }
+  const fieldKeys = Object.keys(fields).filter((k) => k !== "_");
+  const param = fieldKeys.length === 1 ? fieldKeys[0] : void 0;
+  const payload = {
+    type: "validation_error",
+    code: "VALIDATION_FAILED",
+    message: body.message.join("; "),
+    safeToRetry: false,
+    metadata: { fieldErrors: fields }
+  };
+  if (param) payload.param = param;
+  return payload;
+}
+function normalizeHttpExceptionBody(desc) {
+  const { statusCode, responseBody, exceptionName, fallbackMessage } = desc;
+  const defaultType = (0, import_core.defaultErrorTypeForStatus)(statusCode);
+  if (typeof responseBody === "string") {
+    return {
+      type: defaultType,
+      code: exceptionName,
+      message: responseBody,
+      safeToRetry: false
+    };
+  }
+  if (responseBody && typeof responseBody === "object") {
+    const body = responseBody;
+    if (isValidationPipeBody(body)) {
+      return normalizeValidationPipeBody(body);
+    }
+    const code = typeof body["code"] === "string" && body["code"] || typeof body["error"] === "string" && body["error"] || exceptionName;
+    const message = typeof body["message"] === "string" && body["message"] || (Array.isArray(body["message"]) ? body["message"].join("; ") : "") || fallbackMessage;
+    const type = typeof body["type"] === "string" && body["type"] || defaultType;
+    const safeToRetry = typeof body["safeToRetry"] === "boolean" ? body["safeToRetry"] : false;
+    const payload = {
+      type,
+      code,
+      message,
+      safeToRetry
+    };
+    if (typeof body["param"] === "string") payload.param = body["param"];
+    if (body["metadata"] && typeof body["metadata"] === "object") {
+      payload.metadata = body["metadata"];
+    }
+    if (body["details"] !== void 0) payload.details = body["details"];
+    return payload;
+  }
+  return {
+    type: defaultType,
+    code: exceptionName || "INTERNAL_SERVER_ERROR",
+    message: fallbackMessage || "An unexpected error occurred",
+    safeToRetry: false
+  };
+}
+function payloadFromPafiSdkError(err) {
+  const body = buildSdkErrorBody(err);
+  const payload = {
+    type: body.type,
+    code: body.code,
+    message: body.message,
+    safeToRetry: body.safeToRetry
+  };
+  if (body.param) payload.param = body.param;
+  if (body.metadata) payload.metadata = body.metadata;
+  if (body.details !== void 0) payload.details = body.details;
+  return payload;
+}
+function sanitizeDbErrorMessage(message) {
+  if (/^[A-Z_]+: /.test(message) && message.length < 256) return message;
+  return "Internal database error";
+}
+function buildErrorEnvelope(input) {
+  const now = (input.ctx.now ?? (() => /* @__PURE__ */ new Date()))();
+  return {
+    success: false,
+    statusCode: input.status,
+    error: input.payload,
+    meta: {
+      timestamp: now.toISOString(),
+      requestId: input.ctx.requestId,
+      path: input.ctx.path
+    }
+  };
+}
+function payloadFromHttpException(desc) {
+  return normalizeHttpExceptionBody(desc);
+}
+function payloadFromGenericError(err) {
+  const name = err.name || "INTERNAL_SERVER_ERROR";
+  const isDbError = name === "QueryFailedError" || name === "EntityNotFoundError";
+  return {
+    type: "server_error",
+    code: name,
+    message: isDbError ? sanitizeDbErrorMessage(err.message) : err.message || "An unexpected error occurred",
+    safeToRetry: false
+  };
+}
+
+// src/nestjs/httpExceptionFilter.ts
+var _PafiHttpExceptionFilter_decorators, _init;
+_PafiHttpExceptionFilter_decorators = [(0, import_common.Catch)()];
+var PafiHttpExceptionFilter = class {
+  logger = new import_common.Logger("PafiHttpExceptionFilter");
+  opts;
+  constructor(options = {}) {
+    this.opts = {
+      requestIdHeader: options.requestIdHeader ?? "x-request-id",
+      ...options
+    };
+  }
+  catch(exception, host) {
+    const ctx = host.switchToHttp();
+    const response = ctx.getResponse();
+    const request = ctx.getRequest();
+    const headerValue = request?.headers?.[this.opts.requestIdHeader];
+    const requestId = (Array.isArray(headerValue) ? headerValue[0] : headerValue) ?? (0, import_node_crypto.randomUUID)();
+    const normCtx = {
+      path: request?.url ?? "",
+      requestId,
+      ...this.opts.now ? { now: this.opts.now } : {}
+    };
+    const { status, payload } = this.normalize(exception);
+    const envelope = buildErrorEnvelope({ status, payload, ctx: normCtx });
+    if (this.opts.onError) {
+      try {
+        this.opts.onError(envelope, exception);
+      } catch (hookErr) {
+        this.logger.warn(
+          { err: hookErr instanceof Error ? hookErr.message : String(hookErr) },
+          "onError hook threw; continuing"
+        );
+      }
+    }
+    if (status >= 500) {
+      this.logger.error(
+        {
+          err: exception instanceof Error ? exception.message : String(exception),
+          stack: exception instanceof Error ? exception.stack : void 0,
+          name: exception instanceof Error ? exception.name : void 0,
+          path: normCtx.path,
+          requestId
+        },
+        "Unhandled error in PafiHttpExceptionFilter"
+      );
+    }
+    response.status(status).json(envelope);
+  }
+  normalize(exception) {
+    if (exception instanceof import_core.PafiSdkError) {
+      return {
+        status: import_core.SDK_ERROR_HTTP_STATUS_CODE[exception.httpStatus],
+        payload: payloadFromPafiSdkError(exception)
+      };
+    }
+    if (exception instanceof import_common.HttpException) {
+      return {
+        status: exception.getStatus(),
+        payload: payloadFromHttpException({
+          statusCode: exception.getStatus(),
+          responseBody: exception.getResponse(),
+          exceptionName: exception.name,
+          fallbackMessage: exception.message
+        })
+      };
+    }
+    if (exception instanceof Error) {
+      const maybeStatus = exception.status;
+      const maybeGetResponse = exception.getResponse;
+      if (typeof maybeStatus === "number" && typeof maybeGetResponse === "function") {
+        return {
+          status: maybeStatus,
+          payload: payloadFromHttpException({
+            statusCode: maybeStatus,
+            responseBody: maybeGetResponse.call(exception),
+            exceptionName: exception.name,
+            fallbackMessage: exception.message
+          })
+        };
+      }
+      const maybeStatusOnly = typeof maybeStatus === "number" ? maybeStatus : import_common.HttpStatus.INTERNAL_SERVER_ERROR;
+      return {
+        status: maybeStatusOnly,
+        payload: payloadFromGenericError(exception)
+      };
+    }
+    return {
+      status: import_common.HttpStatus.INTERNAL_SERVER_ERROR,
+      payload: {
+        type: "server_error",
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An unexpected error occurred",
+        safeToRetry: false
+      }
+    };
+  }
+};
+_init = __decoratorStart(null);
+PafiHttpExceptionFilter = __decorateElement(_init, 0, "PafiHttpExceptionFilter", _PafiHttpExceptionFilter_decorators, PafiHttpExceptionFilter);
+__runInitializers(_init, 1, PafiHttpExceptionFilter);
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PafiHttpExceptionFilter
+});
+//# sourceMappingURL=index.cjs.map

package/dist/nestjs/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/nestjs/index.ts","../../src/nestjs/httpExceptionFilter.ts","../../src/errors.ts","../../src/api/errorMapper.ts","../../src/http/errorEnvelope.ts"],"sourcesContent":["export {\n  PafiHttpExceptionFilter,\n  type PafiHttpExceptionFilterOptions,\n} from \"./httpExceptionFilter\";\n","/**\n * NestJS global exception filter that emits the PAFI Stripe-style\n * envelope (see `@pafi-dev/issuer/http`).\n *\n * Wire it once in your bootstrap:\n *\n * ```ts\n * import { PafiHttpExceptionFilter } from \"@pafi-dev/issuer/nestjs\";\n *\n * app.useGlobalFilters(new PafiHttpExceptionFilter());\n * ```\n *\n * Catches every thrown value:\n *  - `PafiSdkError` (and subclasses) → typed envelope from `httpStatus`/\n *    `code`/`type`/`safeToRetry`/`param`/`metadata`.\n *  - `HttpException` (NestJS) → respected status; SDK-shaped body is\n *    passed through, plain bodies + ValidationPipe arrays normalized.\n *  - any other `Error` → `server_error` 500 with sanitized message.\n *\n * `@nestjs/common` is an optional peer dependency — only required when\n * importing this sub-export.\n */\nimport {\n  ArgumentsHost,\n  Catch,\n  ExceptionFilter,\n  HttpException,\n  HttpStatus,\n  Logger,\n} from \"@nestjs/common\";\nimport { randomUUID } from \"node:crypto\";\n\nimport { PafiSdkError, SDK_ERROR_HTTP_STATUS_CODE } from \"../errors\";\nimport {\n  buildErrorEnvelope,\n  payloadFromGenericError,\n  payloadFromHttpException,\n  payloadFromPafiSdkError,\n  type NormalizeContext,\n  type PafiErrorEnvelope,\n  type PafiErrorPayload,\n} from \"../http/errorEnvelope\";\n\ninterface MinimalHttpRequest {\n  url?: string;\n  headers?: Record<string, string | string[] | undefined>;\n}\ninterface MinimalHttpResponse {\n  status(code: number): MinimalHttpResponse;\n  json(body: unknown): unknown;\n}\n\n/** Customization knobs. None required — sensible defaults baked in. */\nexport interface PafiHttpExceptionFilterOptions {\n  /**\n   * Header to read for the request id, lowercase. Default `\"x-request-id\"`.\n   * If absent, a UUIDv4 is generated per request.\n   */\n  requestIdHeader?: string;\n  /**\n   * Override `Date` for deterministic tests.\n   */\n  now?: () => Date;\n  /**\n   * Hook to record/audit normalized errors before sending. Useful for\n   * Sentry / Datadog / Pino. Throws are swallowed so a logging bug\n   * never masks the real error response.\n   */\n  onError?: (envelope: PafiErrorEnvelope, raw: unknown) => void;\n}\n\n@Catch()\nexport class PafiHttpExceptionFilter implements ExceptionFilter {\n  private readonly logger = new Logger(\"PafiHttpExceptionFilter\");\n  private readonly opts: Required<\n    Pick<PafiHttpExceptionFilterOptions, \"requestIdHeader\">\n  > &\n    PafiHttpExceptionFilterOptions;\n\n  constructor(options: PafiHttpExceptionFilterOptions = {}) {\n    this.opts = {\n      requestIdHeader: options.requestIdHeader ?? \"x-request-id\",\n      ...options,\n    };\n  }\n\n  catch(exception: unknown, host: ArgumentsHost): void {\n    const ctx = host.switchToHttp();\n    const response = ctx.getResponse<MinimalHttpResponse>();\n    const request = ctx.getRequest<MinimalHttpRequest>();\n\n    const headerValue = request?.headers?.[this.opts.requestIdHeader];\n    const requestId =\n      (Array.isArray(headerValue) ? headerValue[0] : headerValue) ??\n      randomUUID();\n\n    const normCtx: NormalizeContext = {\n      path: request?.url ?? \"\",\n      requestId,\n      ...(this.opts.now ? { now: this.opts.now } : {}),\n    };\n\n    const { status, payload } = this.normalize(exception);\n    const envelope = buildErrorEnvelope({ status, payload, ctx: normCtx });\n\n    if (this.opts.onError) {\n      try {\n        this.opts.onError(envelope, exception);\n      } catch (hookErr) {\n        this.logger.warn(\n          { err: hookErr instanceof Error ? hookErr.message : String(hookErr) },\n          \"onError hook threw; continuing\",\n        );\n      }\n    }\n\n    if (status >= 500) {\n      this.logger.error(\n        {\n          err:\n            exception instanceof Error\n              ? exception.message\n              : String(exception),\n          stack: exception instanceof Error ? exception.stack : undefined,\n          name: exception instanceof Error ? exception.name : undefined,\n          path: normCtx.path,\n          requestId,\n        },\n        \"Unhandled error in PafiHttpExceptionFilter\",\n      );\n    }\n\n    response.status(status).json(envelope);\n  }\n\n  private normalize(exception: unknown): {\n    status: number;\n    payload: PafiErrorPayload;\n  } {\n    if (exception instanceof PafiSdkError) {\n      return {\n        status: SDK_ERROR_HTTP_STATUS_CODE[exception.httpStatus],\n        payload: payloadFromPafiSdkError(exception),\n      };\n    }\n\n    if (exception instanceof HttpException) {\n      return {\n        status: exception.getStatus(),\n        payload: payloadFromHttpException({\n          statusCode: exception.getStatus(),\n          responseBody: exception.getResponse(),\n          exceptionName: exception.name,\n          fallbackMessage: exception.message,\n        }),\n      };\n    }\n\n    if (exception instanceof Error) {\n      // Duck-typing for HttpException instances that fail `instanceof`\n      // when multiple `@nestjs/common` copies exist in the dep tree.\n      const maybeStatus = (exception as { status?: unknown }).status;\n      const maybeGetResponse = (\n        exception as { getResponse?: () => unknown }\n      ).getResponse;\n      if (\n        typeof maybeStatus === \"number\" &&\n        typeof maybeGetResponse === \"function\"\n      ) {\n        return {\n          status: maybeStatus,\n          payload: payloadFromHttpException({\n            statusCode: maybeStatus,\n            responseBody: maybeGetResponse.call(exception),\n            exceptionName: exception.name,\n            fallbackMessage: exception.message,\n          }),\n        };\n      }\n      const maybeStatusOnly =\n        typeof maybeStatus === \"number\"\n          ? maybeStatus\n          : HttpStatus.INTERNAL_SERVER_ERROR;\n      return {\n        status: maybeStatusOnly,\n        payload: payloadFromGenericError(exception),\n      };\n    }\n\n    return {\n      status: HttpStatus.INTERNAL_SERVER_ERROR,\n      payload: {\n        type: \"server_error\",\n        code: \"INTERNAL_SERVER_ERROR\",\n        message: \"An unexpected error occurred\",\n        safeToRetry: false,\n      },\n    };\n  }\n}\n","/**\n * `PafiSdkError` + `SdkErrorHttpStatus` are exported from\n * `@pafi-dev/core/errors` so core-level errors (e.g. `OracleStaleError`)\n * can extend the same base. Issuer re-exports the canonical types here\n * for back-compat — `instanceof PafiSdkError` from EITHER package\n * catches errors thrown from EITHER package.\n */\nexport {\n  PafiSdkError,\n  SDK_ERROR_HTTP_STATUS_CODE,\n  defaultErrorTypeForStatus,\n  type SdkErrorHttpStatus,\n  type PafiErrorType,\n} from \"@pafi-dev/core\";\nimport { PafiSdkError } from \"@pafi-dev/core\";\n\n/**\n * `ValidationError` lives in `@pafi-dev/core` so core/trading helpers\n * throw the same typed class. Re-exported here for back-compat.\n */\nexport { ValidationError } from \"@pafi-dev/core\";\n\n/**\n * Issuer wired the SDK without a dependency the requested endpoint\n * needs (e.g. `/gas-fee` called but `feeManager` not configured;\n * `/pools` called but `poolsProvider` not configured). 503 because\n * the endpoint genuinely can't serve the request — caller's payload\n * is fine, the issuer's deployment is incomplete.\n */\nexport class ConfigurationError extends PafiSdkError {\n  readonly httpStatus = \"service_unavailable\" as const;\n  readonly code: string;\n  readonly details?: Record<string, unknown>;\n\n  constructor(\n    code: string,\n    message: string,\n    details?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.code = code;\n    this.details = details;\n  }\n}\n","import {\n  PafiSdkError,\n  SDK_ERROR_HTTP_STATUS_CODE,\n  defaultErrorTypeForStatus,\n  type PafiErrorType,\n  type SdkErrorHttpStatus,\n} from \"../errors\";\n\n/**\n * Normalized HTTP status the issuer controller should surface for a\n * given SDK error. Mirrors `SdkErrorHttpStatus` on `PafiSdkError`.\n */\nexport type SdkErrorStatus = SdkErrorHttpStatus;\n\n/**\n * Structured body the issuer controller passes to its\n * framework-specific exception class. Stripe-style envelope:\n *\n * ```json\n * {\n *   \"type\": \"business_logic_error\",\n *   \"code\": \"REDEMPTION_POLICY_DENIED\",\n *   \"message\": \"...\",\n *   \"param\": null,\n *   \"metadata\": { \"policyDenialCode\": \"PER_TX_MIN\" },\n *   \"safeToRetry\": false\n * }\n * ```\n *\n * Carries enough fields for the global HTTP filter to emit the final\n * envelope without losing any SDK-side context.\n */\nexport interface SdkErrorBody {\n  /** Stripe-style taxonomy slot — drives UI branching. */\n  type: PafiErrorType;\n  /** Machine-readable code, e.g. `\"REDEMPTION_POLICY_DENIED\"`. */\n  code: string;\n  /** Human-readable message. */\n  message: string;\n  /** Field name that triggered the error, when applicable. */\n  param?: string;\n  /** UI-facing structured context. */\n  metadata?: Record<string, unknown>;\n  /** Raw debug context. */\n  details?: unknown;\n  /** True when retry is safe (no side effects yet). */\n  safeToRetry: boolean;\n}\n\n/**\n * Per-status exception factories. The issuer's controller wires one\n * factory per status to its preferred framework's exception class\n * (NestJS `UnprocessableEntityException`, Fastify `httpErrors.badData`,\n * etc). The factory must return an Error — `createSdkErrorMapper`\n * uses `throw factory(body)`.\n */\nexport interface SdkErrorMapperFactories {\n  notFound: (body: SdkErrorBody) => Error;\n  forbidden: (body: SdkErrorBody) => Error;\n  unprocessable: (body: SdkErrorBody) => Error;\n  serviceUnavailable: (body: SdkErrorBody) => Error;\n}\n\n/**\n * Build the Stripe-style body from any `PafiSdkError`. Exposed for\n * frameworks that don't fit the four-factory shape (e.g. a Hono error\n * handler that builds its own response object).\n */\nexport function buildSdkErrorBody(err: PafiSdkError): SdkErrorBody {\n  const type =\n    err.type ??\n    defaultErrorTypeForStatus(SDK_ERROR_HTTP_STATUS_CODE[err.httpStatus]);\n  const body: SdkErrorBody = {\n    type,\n    code: err.code,\n    message: err.message,\n    safeToRetry: err.safeToRetry,\n  };\n  if (err.param) body.param = err.param;\n  if (err.metadata) body.metadata = err.metadata;\n  if (err.details !== undefined) body.details = err.details;\n  return body;\n}\n\n/**\n * Build a single error-mapping function that converts any `PafiSdkError`\n * into the issuer's framework-specific HTTP exception. Status, code,\n * `safeToRetry`, and `details` come straight off the error class —\n * the mapper is a dumb funnel, no per-error business logic.\n *\n * Any non-`PafiSdkError` is re-thrown unchanged so unexpected runtime\n * errors propagate to the framework's default 500 handler.\n *\n * Usage (NestJS):\n *\n * ```ts\n * const mapSdkError = createSdkErrorMapper({\n *   notFound: (body) => new NotFoundException(body),\n *   forbidden: (body) => new ForbiddenException(body),\n *   unprocessable: (body) => new UnprocessableEntityException(body),\n *   serviceUnavailable: (body) => new ServiceUnavailableException(body),\n * });\n *\n * try { ... } catch (err) { mapSdkError(err); }\n * ```\n *\n * Returns `never` so call sites in `try/catch` propagate the throw\n * without a redundant `throw` keyword.\n */\nexport function createSdkErrorMapper(\n  factories: SdkErrorMapperFactories,\n): (err: unknown) => never {\n  return (err: unknown): never => {\n    if (!(err instanceof PafiSdkError)) {\n      throw err;\n    }\n    const body = buildSdkErrorBody(err);\n    switch (err.httpStatus) {\n      case \"not_found\":\n        throw factories.notFound(body);\n      case \"forbidden\":\n        throw factories.forbidden(body);\n      case \"unprocessable\":\n        throw factories.unprocessable(body);\n      case \"service_unavailable\":\n        throw factories.serviceUnavailable(body);\n    }\n  };\n}\n","/**\n * Stripe-style HTTP error envelope shared by every PAFI service and\n * issuer backend. The framework-agnostic `normalizeErrorToEnvelope`\n * helper produces this from any thrown value; framework-specific\n * filters (`@pafi-dev/issuer/nestjs`) call into it and write the\n * result to their response object.\n *\n * Wire format:\n *\n * ```json\n * {\n *   \"success\": false,\n *   \"statusCode\": 422,\n *   \"error\": {\n *     \"type\": \"business_logic_error\",\n *     \"code\": \"REDEMPTION_POLICY_DENIED\",\n *     \"message\": \"redemption denied: amount 1 below per-tx minimum\",\n *     \"param\": null,\n *     \"metadata\": { \"policyDenialCode\": \"PER_TX_MIN\" },\n *     \"safeToRetry\": false,\n *     \"details\": null\n *   },\n *   \"meta\": {\n *     \"timestamp\": \"2026-05-07T...\",\n *     \"requestId\": \"...\",\n *     \"path\": \"/pt/redeem\"\n *   }\n * }\n * ```\n */\n\nimport {\n  PafiSdkError,\n  SDK_ERROR_HTTP_STATUS_CODE,\n  defaultErrorTypeForStatus,\n  type PafiErrorType,\n} from \"../errors\";\nimport { buildSdkErrorBody, type SdkErrorBody } from \"../api/errorMapper\";\n\n/** Inner `error` block of the envelope. */\nexport interface PafiErrorPayload {\n  type: PafiErrorType;\n  code: string;\n  message: string;\n  param?: string;\n  metadata?: Record<string, unknown>;\n  details?: unknown;\n  safeToRetry: boolean;\n}\n\n/** Outer envelope returned for any non-2xx response. */\nexport interface PafiErrorEnvelope {\n  success: false;\n  statusCode: number;\n  error: PafiErrorPayload;\n  meta: {\n    timestamp: string;\n    requestId: string;\n    path: string;\n  };\n}\n\n/** Per-call request context the filter must collect from the host framework. */\nexport interface NormalizeContext {\n  /** `req.url` or equivalent. */\n  path: string;\n  /** Resolved request id (header or generated). */\n  requestId: string;\n  /** Optional `now()` injection for deterministic tests. */\n  now?: () => Date;\n}\n\n/**\n * Generic error duck-type. The filter passes a small descriptor for\n * any framework exception so the normalizer doesn't depend on\n * `@nestjs/common` or any specific HTTP library.\n */\nexport interface GenericHttpExceptionDescriptor {\n  /** HTTP status code carried by the exception. */\n  statusCode: number;\n  /**\n   * The body the framework would have serialized. For NestJS this is\n   * `exception.getResponse()`. May be a string or a record with\n   * `code`/`error`/`message`/`details`/`safeToRetry`/`type`/etc.\n   */\n  responseBody: unknown;\n  /** Exception class name, used as a last-resort `code` fallback. */\n  exceptionName: string;\n  /** Original `error.message`, used as a last-resort `message` fallback. */\n  fallbackMessage: string;\n}\n\n/** True when `value` looks like a NestJS `BadRequestException` from `ValidationPipe`. */\nfunction isValidationPipeBody(\n  body: Record<string, unknown>,\n): body is { message: string[]; error?: string; statusCode?: number } {\n  return (\n    Array.isArray(body[\"message\"]) &&\n    typeof body[\"error\"] === \"string\" &&\n    body[\"error\"] === \"Bad Request\"\n  );\n}\n\n/** Pull `param` out of a `class-validator` message like `\"amount must be a number string\"`. */\nfunction extractParamFromValidatorMessage(message: string): string | undefined {\n  const idx = message.indexOf(\" \");\n  if (idx <= 0) return undefined;\n  const candidate = message.slice(0, idx);\n  return /^[A-Za-z_][\\w.]*$/.test(candidate) ? candidate : undefined;\n}\n\nfunction normalizeValidationPipeBody(\n  body: { message: string[]; statusCode?: number },\n): PafiErrorPayload {\n  const fields: Record<string, string[]> = {};\n  for (const msg of body.message) {\n    const param = extractParamFromValidatorMessage(msg);\n    const key = param ?? \"_\";\n    (fields[key] ??= []).push(msg);\n  }\n  const fieldKeys = Object.keys(fields).filter((k) => k !== \"_\");\n  const param = fieldKeys.length === 1 ? fieldKeys[0] : undefined;\n\n  const payload: PafiErrorPayload = {\n    type: \"validation_error\",\n    code: \"VALIDATION_FAILED\",\n    message: body.message.join(\"; \"),\n    safeToRetry: false,\n    metadata: { fieldErrors: fields },\n  };\n  if (param) payload.param = param;\n  return payload;\n}\n\n/**\n * Pull a Stripe-style payload out of a structured exception body. The\n * filter has already determined this is an `HttpException` (or\n * duck-typed equivalent). Order:\n *\n * 1. SDK-shaped body (has `type` + `code`) — pass through verbatim.\n * 2. `ValidationPipe` body (`message: string[]`, `error: \"Bad Request\"`)\n *    — collapse into `validation_error` with `metadata.fieldErrors`.\n * 3. Plain object with `code` or `error` — best-effort extract.\n * 4. String body — just a message.\n */\nfunction normalizeHttpExceptionBody(\n  desc: GenericHttpExceptionDescriptor,\n): PafiErrorPayload {\n  const { statusCode, responseBody, exceptionName, fallbackMessage } = desc;\n  const defaultType = defaultErrorTypeForStatus(statusCode);\n\n  if (typeof responseBody === \"string\") {\n    return {\n      type: defaultType,\n      code: exceptionName,\n      message: responseBody,\n      safeToRetry: false,\n    };\n  }\n\n  if (responseBody && typeof responseBody === \"object\") {\n    const body = responseBody as Record<string, unknown>;\n\n    if (isValidationPipeBody(body)) {\n      return normalizeValidationPipeBody(body);\n    }\n\n    const code =\n      (typeof body[\"code\"] === \"string\" && body[\"code\"]) ||\n      (typeof body[\"error\"] === \"string\" && body[\"error\"]) ||\n      exceptionName;\n    const message =\n      (typeof body[\"message\"] === \"string\" && body[\"message\"]) ||\n      (Array.isArray(body[\"message\"])\n        ? (body[\"message\"] as string[]).join(\"; \")\n        : \"\") ||\n      fallbackMessage;\n    const type =\n      (typeof body[\"type\"] === \"string\" && (body[\"type\"] as PafiErrorType)) ||\n      defaultType;\n    const safeToRetry =\n      typeof body[\"safeToRetry\"] === \"boolean\" ? body[\"safeToRetry\"] : false;\n\n    const payload: PafiErrorPayload = {\n      type,\n      code,\n      message,\n      safeToRetry,\n    };\n    if (typeof body[\"param\"] === \"string\") payload.param = body[\"param\"];\n    if (body[\"metadata\"] && typeof body[\"metadata\"] === \"object\") {\n      payload.metadata = body[\"metadata\"] as Record<string, unknown>;\n    }\n    if (body[\"details\"] !== undefined) payload.details = body[\"details\"];\n    return payload;\n  }\n\n  return {\n    type: defaultType,\n    code: exceptionName || \"INTERNAL_SERVER_ERROR\",\n    message: fallbackMessage || \"An unexpected error occurred\",\n    safeToRetry: false,\n  };\n}\n\n/**\n * Convert a `PafiSdkError` directly to the inner `error` payload —\n * skipping any framework exception wrapper. Used by frameworks that\n * surface SDK errors without going through `createSdkErrorMapper`.\n */\nexport function payloadFromPafiSdkError(err: PafiSdkError): PafiErrorPayload {\n  const body: SdkErrorBody = buildSdkErrorBody(err);\n  const payload: PafiErrorPayload = {\n    type: body.type,\n    code: body.code,\n    message: body.message,\n    safeToRetry: body.safeToRetry,\n  };\n  if (body.param) payload.param = body.param;\n  if (body.metadata) payload.metadata = body.metadata;\n  if (body.details !== undefined) payload.details = body.details;\n  return payload;\n}\n\n/** Strip SQL fragments from raw DB driver errors before exposing them. */\nfunction sanitizeDbErrorMessage(message: string): string {\n  if (/^[A-Z_]+: /.test(message) && message.length < 256) return message;\n  return \"Internal database error\";\n}\n\n/**\n * Build the full envelope for any thrown value. The caller resolves\n * `HttpException`-shaped exceptions and passes a descriptor; plain\n * `Error` instances and unknown throws are handled directly.\n */\nexport function buildErrorEnvelope(input: {\n  status: number;\n  payload: PafiErrorPayload;\n  ctx: NormalizeContext;\n}): PafiErrorEnvelope {\n  const now = (input.ctx.now ?? (() => new Date()))();\n  return {\n    success: false,\n    statusCode: input.status,\n    error: input.payload,\n    meta: {\n      timestamp: now.toISOString(),\n      requestId: input.ctx.requestId,\n      path: input.ctx.path,\n    },\n  };\n}\n\n/**\n * Normalize a known `HttpException`-shaped exception into a payload.\n * Framework filters supply the descriptor; the rest is shape-agnostic.\n */\nexport function payloadFromHttpException(\n  desc: GenericHttpExceptionDescriptor,\n): PafiErrorPayload {\n  return normalizeHttpExceptionBody(desc);\n}\n\n/**\n * Normalize a generic `Error` (not an HttpException) — TypeORM\n * `QueryFailedError`, viem revert errors, etc. Returns a redacted\n * 500-class payload with no message bleed-through unless the error\n * is recognizably benign.\n */\nexport function payloadFromGenericError(err: Error): PafiErrorPayload {\n  const name = err.name || \"INTERNAL_SERVER_ERROR\";\n  const isDbError = name === \"QueryFailedError\" || name === \"EntityNotFoundError\";\n  return {\n    type: \"server_error\",\n    code: name,\n    message: isDbError\n      ? sanitizeDbErrorMessage(err.message)\n      : err.message || \"An unexpected error occurred\",\n    safeToRetry: false,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACsBA,oBAOO;AACP,yBAA2B;;;ACvB3B,kBAMO;AACP,IAAAA,eAA6B;AAM7B,IAAAA,eAAgC;;;ACgDzB,SAAS,kBAAkB,KAAiC;AACjE,QAAM,OACJ,IAAI,YACJ,uCAA0B,uCAA2B,IAAI,UAAU,CAAC;AACtE,QAAM,OAAqB;AAAA,IACzB;AAAA,IACA,MAAM,IAAI;AAAA,IACV,SAAS,IAAI;AAAA,IACb,aAAa,IAAI;AAAA,EACnB;AACA,MAAI,IAAI,MAAO,MAAK,QAAQ,IAAI;AAChC,MAAI,IAAI,SAAU,MAAK,WAAW,IAAI;AACtC,MAAI,IAAI,YAAY,OAAW,MAAK,UAAU,IAAI;AAClD,SAAO;AACT;;;ACWA,SAAS,qBACP,MACoE;AACpE,SACE,MAAM,QAAQ,KAAK,SAAS,CAAC,KAC7B,OAAO,KAAK,OAAO,MAAM,YACzB,KAAK,OAAO,MAAM;AAEtB;AAGA,SAAS,iCAAiC,SAAqC;AAC7E,QAAM,MAAM,QAAQ,QAAQ,GAAG;AAC/B,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,YAAY,QAAQ,MAAM,GAAG,GAAG;AACtC,SAAO,oBAAoB,KAAK,SAAS,IAAI,YAAY;AAC3D;AAEA,SAAS,4BACP,MACkB;AAClB,QAAM,SAAmC,CAAC;AAC1C,aAAW,OAAO,KAAK,SAAS;AAC9B,UAAMC,SAAQ,iCAAiC,GAAG;AAClD,UAAM,MAAMA,UAAS;AACrB,KAAC,OAAO,GAAG,MAAM,CAAC,GAAG,KAAK,GAAG;AAAA,EAC/B;AACA,QAAM,YAAY,OAAO,KAAK,MAAM,EAAE,OAAO,CAAC,MAAM,MAAM,GAAG;AAC7D,QAAM,QAAQ,UAAU,WAAW,IAAI,UAAU,CAAC,IAAI;AAEtD,QAAM,UAA4B;AAAA,IAChC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS,KAAK,QAAQ,KAAK,IAAI;AAAA,IAC/B,aAAa;AAAA,IACb,UAAU,EAAE,aAAa,OAAO;AAAA,EAClC;AACA,MAAI,MAAO,SAAQ,QAAQ;AAC3B,SAAO;AACT;AAaA,SAAS,2BACP,MACkB;AAClB,QAAM,EAAE,YAAY,cAAc,eAAe,gBAAgB,IAAI;AACrE,QAAM,kBAAc,uCAA0B,UAAU;AAExD,MAAI,OAAO,iBAAiB,UAAU;AACpC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,IACf;AAAA,EACF;AAEA,MAAI,gBAAgB,OAAO,iBAAiB,UAAU;AACpD,UAAM,OAAO;AAEb,QAAI,qBAAqB,IAAI,GAAG;AAC9B,aAAO,4BAA4B,IAAI;AAAA,IACzC;AAEA,UAAM,OACH,OAAO,KAAK,MAAM,MAAM,YAAY,KAAK,MAAM,KAC/C,OAAO,KAAK,OAAO,MAAM,YAAY,KAAK,OAAO,KAClD;AACF,UAAM,UACH,OAAO,KAAK,SAAS,MAAM,YAAY,KAAK,SAAS,MACrD,MAAM,QAAQ,KAAK,SAAS,CAAC,IACzB,KAAK,SAAS,EAAe,KAAK,IAAI,IACvC,OACJ;AACF,UAAM,OACH,OAAO,KAAK,MAAM,MAAM,YAAa,KAAK,MAAM,KACjD;AACF,UAAM,cACJ,OAAO,KAAK,aAAa,MAAM,YAAY,KAAK,aAAa,IAAI;AAEnE,UAAM,UAA4B;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,OAAO,KAAK,OAAO,MAAM,SAAU,SAAQ,QAAQ,KAAK,OAAO;AACnE,QAAI,KAAK,UAAU,KAAK,OAAO,KAAK,UAAU,MAAM,UAAU;AAC5D,cAAQ,WAAW,KAAK,UAAU;AAAA,IACpC;AACA,QAAI,KAAK,SAAS,MAAM,OAAW,SAAQ,UAAU,KAAK,SAAS;AACnE,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,iBAAiB;AAAA,IACvB,SAAS,mBAAmB;AAAA,IAC5B,aAAa;AAAA,EACf;AACF;AAOO,SAAS,wBAAwB,KAAqC;AAC3E,QAAM,OAAqB,kBAAkB,GAAG;AAChD,QAAM,UAA4B;AAAA,IAChC,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,IACd,aAAa,KAAK;AAAA,EACpB;AACA,MAAI,KAAK,MAAO,SAAQ,QAAQ,KAAK;AACrC,MAAI,KAAK,SAAU,SAAQ,WAAW,KAAK;AAC3C,MAAI,KAAK,YAAY,OAAW,SAAQ,UAAU,KAAK;AACvD,SAAO;AACT;AAGA,SAAS,uBAAuB,SAAyB;AACvD,MAAI,aAAa,KAAK,OAAO,KAAK,QAAQ,SAAS,IAAK,QAAO;AAC/D,SAAO;AACT;AAOO,SAAS,mBAAmB,OAIb;AACpB,QAAM,OAAO,MAAM,IAAI,QAAQ,MAAM,oBAAI,KAAK,IAAI;AAClD,SAAO;AAAA,IACL,SAAS;AAAA,IACT,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,MAAM;AAAA,MACJ,WAAW,IAAI,YAAY;AAAA,MAC3B,WAAW,MAAM,IAAI;AAAA,MACrB,MAAM,MAAM,IAAI;AAAA,IAClB;AAAA,EACF;AACF;AAMO,SAAS,yBACd,MACkB;AAClB,SAAO,2BAA2B,IAAI;AACxC;AAQO,SAAS,wBAAwB,KAA8B;AACpE,QAAM,OAAO,IAAI,QAAQ;AACzB,QAAM,YAAY,SAAS,sBAAsB,SAAS;AAC1D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS,YACL,uBAAuB,IAAI,OAAO,IAClC,IAAI,WAAW;AAAA,IACnB,aAAa;AAAA,EACf;AACF;;;AHxRA;AAuEA,2CAAC,qBAAM;AACA,IAAM,0BAAN,MAAyD;AAAA,EAC7C,SAAS,IAAI,qBAAO,yBAAyB;AAAA,EAC7C;AAAA,EAKjB,YAAY,UAA0C,CAAC,GAAG;AACxD,SAAK,OAAO;AAAA,MACV,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,WAAoB,MAA2B;AACnD,UAAM,MAAM,KAAK,aAAa;AAC9B,UAAM,WAAW,IAAI,YAAiC;AACtD,UAAM,UAAU,IAAI,WAA+B;AAEnD,UAAM,cAAc,SAAS,UAAU,KAAK,KAAK,eAAe;AAChE,UAAM,aACH,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI,oBAC/C,+BAAW;AAEb,UAAM,UAA4B;AAAA,MAChC,MAAM,SAAS,OAAO;AAAA,MACtB;AAAA,MACA,GAAI,KAAK,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IAChD;AAEA,UAAM,EAAE,QAAQ,QAAQ,IAAI,KAAK,UAAU,SAAS;AACpD,UAAM,WAAW,mBAAmB,EAAE,QAAQ,SAAS,KAAK,QAAQ,CAAC;AAErE,QAAI,KAAK,KAAK,SAAS;AACrB,UAAI;AACF,aAAK,KAAK,QAAQ,UAAU,SAAS;AAAA,MACvC,SAAS,SAAS;AAChB,aAAK,OAAO;AAAA,UACV,EAAE,KAAK,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO,EAAE;AAAA,UACpE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU,KAAK;AACjB,WAAK,OAAO;AAAA,QACV;AAAA,UACE,KACE,qBAAqB,QACjB,UAAU,UACV,OAAO,SAAS;AAAA,UACtB,OAAO,qBAAqB,QAAQ,UAAU,QAAQ;AAAA,UACtD,MAAM,qBAAqB,QAAQ,UAAU,OAAO;AAAA,UACpD,MAAM,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,aAAS,OAAO,MAAM,EAAE,KAAK,QAAQ;AAAA,EACvC;AAAA,EAEQ,UAAU,WAGhB;AACA,QAAI,qBAAqB,0BAAc;AACrC,aAAO;AAAA,QACL,QAAQ,uCAA2B,UAAU,UAAU;AAAA,QACvD,SAAS,wBAAwB,SAAS;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI,qBAAqB,6BAAe;AACtC,aAAO;AAAA,QACL,QAAQ,UAAU,UAAU;AAAA,QAC5B,SAAS,yBAAyB;AAAA,UAChC,YAAY,UAAU,UAAU;AAAA,UAChC,cAAc,UAAU,YAAY;AAAA,UACpC,eAAe,UAAU;AAAA,UACzB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,qBAAqB,OAAO;AAG9B,YAAM,cAAe,UAAmC;AACxD,YAAM,mBACJ,UACA;AACF,UACE,OAAO,gBAAgB,YACvB,OAAO,qBAAqB,YAC5B;AACA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,yBAAyB;AAAA,YAChC,YAAY;AAAA,YACZ,cAAc,iBAAiB,KAAK,SAAS;AAAA,YAC7C,eAAe,UAAU;AAAA,YACzB,iBAAiB,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,kBACJ,OAAO,gBAAgB,WACnB,cACA,yBAAW;AACjB,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,wBAAwB,SAAS;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,QAAQ,yBAAW;AAAA,MACnB,SAAS;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AA/HO;AAAM,0BAAN,uDADP,qCACa;AAAN,4BAAM;","names":["import_core","param"]}

package/dist/nestjs/index.d.cts

@@ -0,0 +1,54 @@
+import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
+import { PafiErrorEnvelope } from '../http/index.cjs';
+import '@pafi-dev/core';
+
+/**
+ * NestJS global exception filter that emits the PAFI Stripe-style
+ * envelope (see `@pafi-dev/issuer/http`).
+ *
+ * Wire it once in your bootstrap:
+ *
+ * ```ts
+ * import { PafiHttpExceptionFilter } from "@pafi-dev/issuer/nestjs";
+ *
+ * app.useGlobalFilters(new PafiHttpExceptionFilter());
+ * ```
+ *
+ * Catches every thrown value:
+ *  - `PafiSdkError` (and subclasses) → typed envelope from `httpStatus`/
+ *    `code`/`type`/`safeToRetry`/`param`/`metadata`.
+ *  - `HttpException` (NestJS) → respected status; SDK-shaped body is
+ *    passed through, plain bodies + ValidationPipe arrays normalized.
+ *  - any other `Error` → `server_error` 500 with sanitized message.
+ *
+ * `@nestjs/common` is an optional peer dependency — only required when
+ * importing this sub-export.
+ */
+
+/** Customization knobs. None required — sensible defaults baked in. */
+interface PafiHttpExceptionFilterOptions {
+    /**
+     * Header to read for the request id, lowercase. Default `"x-request-id"`.
+     * If absent, a UUIDv4 is generated per request.
+     */
+    requestIdHeader?: string;
+    /**
+     * Override `Date` for deterministic tests.
+     */
+    now?: () => Date;
+    /**
+     * Hook to record/audit normalized errors before sending. Useful for
+     * Sentry / Datadog / Pino. Throws are swallowed so a logging bug
+     * never masks the real error response.
+     */
+    onError?: (envelope: PafiErrorEnvelope, raw: unknown) => void;
+}
+declare class PafiHttpExceptionFilter implements ExceptionFilter {
+    private readonly logger;
+    private readonly opts;
+    constructor(options?: PafiHttpExceptionFilterOptions);
+    catch(exception: unknown, host: ArgumentsHost): void;
+    private normalize;
+}
+
+export { PafiHttpExceptionFilter, type PafiHttpExceptionFilterOptions };

package/dist/nestjs/index.d.ts

@@ -0,0 +1,54 @@
+import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
+import { PafiErrorEnvelope } from '../http/index.js';
+import '@pafi-dev/core';
+
+/**
+ * NestJS global exception filter that emits the PAFI Stripe-style
+ * envelope (see `@pafi-dev/issuer/http`).
+ *
+ * Wire it once in your bootstrap:
+ *
+ * ```ts
+ * import { PafiHttpExceptionFilter } from "@pafi-dev/issuer/nestjs";
+ *
+ * app.useGlobalFilters(new PafiHttpExceptionFilter());
+ * ```
+ *
+ * Catches every thrown value:
+ *  - `PafiSdkError` (and subclasses) → typed envelope from `httpStatus`/
+ *    `code`/`type`/`safeToRetry`/`param`/`metadata`.
+ *  - `HttpException` (NestJS) → respected status; SDK-shaped body is
+ *    passed through, plain bodies + ValidationPipe arrays normalized.
+ *  - any other `Error` → `server_error` 500 with sanitized message.
+ *
+ * `@nestjs/common` is an optional peer dependency — only required when
+ * importing this sub-export.
+ */
+
+/** Customization knobs. None required — sensible defaults baked in. */
+interface PafiHttpExceptionFilterOptions {
+    /**
+     * Header to read for the request id, lowercase. Default `"x-request-id"`.
+     * If absent, a UUIDv4 is generated per request.
+     */
+    requestIdHeader?: string;
+    /**
+     * Override `Date` for deterministic tests.
+     */
+    now?: () => Date;
+    /**
+     * Hook to record/audit normalized errors before sending. Useful for
+     * Sentry / Datadog / Pino. Throws are swallowed so a logging bug
+     * never masks the real error response.
+     */
+    onError?: (envelope: PafiErrorEnvelope, raw: unknown) => void;
+}
+declare class PafiHttpExceptionFilter implements ExceptionFilter {
+    private readonly logger;
+    private readonly opts;
+    constructor(options?: PafiHttpExceptionFilterOptions);
+    catch(exception: unknown, host: ArgumentsHost): void;
+    private normalize;
+}
+
+export { PafiHttpExceptionFilter, type PafiHttpExceptionFilterOptions };

package/dist/nestjs/index.js

@@ -0,0 +1,124 @@
+import {
+  PafiSdkError,
+  SDK_ERROR_HTTP_STATUS_CODE,
+  __decorateElement,
+  __decoratorStart,
+  __runInitializers,
+  buildErrorEnvelope,
+  payloadFromGenericError,
+  payloadFromHttpException,
+  payloadFromPafiSdkError
+} from "../chunk-U3WMORJG.js";
+
+// src/nestjs/httpExceptionFilter.ts
+import {
+  Catch,
+  HttpException,
+  HttpStatus,
+  Logger
+} from "@nestjs/common";
+import { randomUUID } from "crypto";
+var _PafiHttpExceptionFilter_decorators, _init;
+_PafiHttpExceptionFilter_decorators = [Catch()];
+var PafiHttpExceptionFilter = class {
+  logger = new Logger("PafiHttpExceptionFilter");
+  opts;
+  constructor(options = {}) {
+    this.opts = {
+      requestIdHeader: options.requestIdHeader ?? "x-request-id",
+      ...options
+    };
+  }
+  catch(exception, host) {
+    const ctx = host.switchToHttp();
+    const response = ctx.getResponse();
+    const request = ctx.getRequest();
+    const headerValue = request?.headers?.[this.opts.requestIdHeader];
+    const requestId = (Array.isArray(headerValue) ? headerValue[0] : headerValue) ?? randomUUID();
+    const normCtx = {
+      path: request?.url ?? "",
+      requestId,
+      ...this.opts.now ? { now: this.opts.now } : {}
+    };
+    const { status, payload } = this.normalize(exception);
+    const envelope = buildErrorEnvelope({ status, payload, ctx: normCtx });
+    if (this.opts.onError) {
+      try {
+        this.opts.onError(envelope, exception);
+      } catch (hookErr) {
+        this.logger.warn(
+          { err: hookErr instanceof Error ? hookErr.message : String(hookErr) },
+          "onError hook threw; continuing"
+        );
+      }
+    }
+    if (status >= 500) {
+      this.logger.error(
+        {
+          err: exception instanceof Error ? exception.message : String(exception),
+          stack: exception instanceof Error ? exception.stack : void 0,
+          name: exception instanceof Error ? exception.name : void 0,
+          path: normCtx.path,
+          requestId
+        },
+        "Unhandled error in PafiHttpExceptionFilter"
+      );
+    }
+    response.status(status).json(envelope);
+  }
+  normalize(exception) {
+    if (exception instanceof PafiSdkError) {
+      return {
+        status: SDK_ERROR_HTTP_STATUS_CODE[exception.httpStatus],
+        payload: payloadFromPafiSdkError(exception)
+      };
+    }
+    if (exception instanceof HttpException) {
+      return {
+        status: exception.getStatus(),
+        payload: payloadFromHttpException({
+          statusCode: exception.getStatus(),
+          responseBody: exception.getResponse(),
+          exceptionName: exception.name,
+          fallbackMessage: exception.message
+        })
+      };
+    }
+    if (exception instanceof Error) {
+      const maybeStatus = exception.status;
+      const maybeGetResponse = exception.getResponse;
+      if (typeof maybeStatus === "number" && typeof maybeGetResponse === "function") {
+        return {
+          status: maybeStatus,
+          payload: payloadFromHttpException({
+            statusCode: maybeStatus,
+            responseBody: maybeGetResponse.call(exception),
+            exceptionName: exception.name,
+            fallbackMessage: exception.message
+          })
+        };
+      }
+      const maybeStatusOnly = typeof maybeStatus === "number" ? maybeStatus : HttpStatus.INTERNAL_SERVER_ERROR;
+      return {
+        status: maybeStatusOnly,
+        payload: payloadFromGenericError(exception)
+      };
+    }
+    return {
+      status: HttpStatus.INTERNAL_SERVER_ERROR,
+      payload: {
+        type: "server_error",
+        code: "INTERNAL_SERVER_ERROR",
+        message: "An unexpected error occurred",
+        safeToRetry: false
+      }
+    };
+  }
+};
+_init = __decoratorStart(null);
+PafiHttpExceptionFilter = __decorateElement(_init, 0, "PafiHttpExceptionFilter", _PafiHttpExceptionFilter_decorators, PafiHttpExceptionFilter);
+__runInitializers(_init, 1, PafiHttpExceptionFilter);
+export {
+  PafiHttpExceptionFilter
+};
+//# sourceMappingURL=index.js.map

package/dist/nestjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/nestjs/httpExceptionFilter.ts"],"sourcesContent":["/**\n * NestJS global exception filter that emits the PAFI Stripe-style\n * envelope (see `@pafi-dev/issuer/http`).\n *\n * Wire it once in your bootstrap:\n *\n * ```ts\n * import { PafiHttpExceptionFilter } from \"@pafi-dev/issuer/nestjs\";\n *\n * app.useGlobalFilters(new PafiHttpExceptionFilter());\n * ```\n *\n * Catches every thrown value:\n *  - `PafiSdkError` (and subclasses) → typed envelope from `httpStatus`/\n *    `code`/`type`/`safeToRetry`/`param`/`metadata`.\n *  - `HttpException` (NestJS) → respected status; SDK-shaped body is\n *    passed through, plain bodies + ValidationPipe arrays normalized.\n *  - any other `Error` → `server_error` 500 with sanitized message.\n *\n * `@nestjs/common` is an optional peer dependency — only required when\n * importing this sub-export.\n */\nimport {\n  ArgumentsHost,\n  Catch,\n  ExceptionFilter,\n  HttpException,\n  HttpStatus,\n  Logger,\n} from \"@nestjs/common\";\nimport { randomUUID } from \"node:crypto\";\n\nimport { PafiSdkError, SDK_ERROR_HTTP_STATUS_CODE } from \"../errors\";\nimport {\n  buildErrorEnvelope,\n  payloadFromGenericError,\n  payloadFromHttpException,\n  payloadFromPafiSdkError,\n  type NormalizeContext,\n  type PafiErrorEnvelope,\n  type PafiErrorPayload,\n} from \"../http/errorEnvelope\";\n\ninterface MinimalHttpRequest {\n  url?: string;\n  headers?: Record<string, string | string[] | undefined>;\n}\ninterface MinimalHttpResponse {\n  status(code: number): MinimalHttpResponse;\n  json(body: unknown): unknown;\n}\n\n/** Customization knobs. None required — sensible defaults baked in. */\nexport interface PafiHttpExceptionFilterOptions {\n  /**\n   * Header to read for the request id, lowercase. Default `\"x-request-id\"`.\n   * If absent, a UUIDv4 is generated per request.\n   */\n  requestIdHeader?: string;\n  /**\n   * Override `Date` for deterministic tests.\n   */\n  now?: () => Date;\n  /**\n   * Hook to record/audit normalized errors before sending. Useful for\n   * Sentry / Datadog / Pino. Throws are swallowed so a logging bug\n   * never masks the real error response.\n   */\n  onError?: (envelope: PafiErrorEnvelope, raw: unknown) => void;\n}\n\n@Catch()\nexport class PafiHttpExceptionFilter implements ExceptionFilter {\n  private readonly logger = new Logger(\"PafiHttpExceptionFilter\");\n  private readonly opts: Required<\n    Pick<PafiHttpExceptionFilterOptions, \"requestIdHeader\">\n  > &\n    PafiHttpExceptionFilterOptions;\n\n  constructor(options: PafiHttpExceptionFilterOptions = {}) {\n    this.opts = {\n      requestIdHeader: options.requestIdHeader ?? \"x-request-id\",\n      ...options,\n    };\n  }\n\n  catch(exception: unknown, host: ArgumentsHost): void {\n    const ctx = host.switchToHttp();\n    const response = ctx.getResponse<MinimalHttpResponse>();\n    const request = ctx.getRequest<MinimalHttpRequest>();\n\n    const headerValue = request?.headers?.[this.opts.requestIdHeader];\n    const requestId =\n      (Array.isArray(headerValue) ? headerValue[0] : headerValue) ??\n      randomUUID();\n\n    const normCtx: NormalizeContext = {\n      path: request?.url ?? \"\",\n      requestId,\n      ...(this.opts.now ? { now: this.opts.now } : {}),\n    };\n\n    const { status, payload } = this.normalize(exception);\n    const envelope = buildErrorEnvelope({ status, payload, ctx: normCtx });\n\n    if (this.opts.onError) {\n      try {\n        this.opts.onError(envelope, exception);\n      } catch (hookErr) {\n        this.logger.warn(\n          { err: hookErr instanceof Error ? hookErr.message : String(hookErr) },\n          \"onError hook threw; continuing\",\n        );\n      }\n    }\n\n    if (status >= 500) {\n      this.logger.error(\n        {\n          err:\n            exception instanceof Error\n              ? exception.message\n              : String(exception),\n          stack: exception instanceof Error ? exception.stack : undefined,\n          name: exception instanceof Error ? exception.name : undefined,\n          path: normCtx.path,\n          requestId,\n        },\n        \"Unhandled error in PafiHttpExceptionFilter\",\n      );\n    }\n\n    response.status(status).json(envelope);\n  }\n\n  private normalize(exception: unknown): {\n    status: number;\n    payload: PafiErrorPayload;\n  } {\n    if (exception instanceof PafiSdkError) {\n      return {\n        status: SDK_ERROR_HTTP_STATUS_CODE[exception.httpStatus],\n        payload: payloadFromPafiSdkError(exception),\n      };\n    }\n\n    if (exception instanceof HttpException) {\n      return {\n        status: exception.getStatus(),\n        payload: payloadFromHttpException({\n          statusCode: exception.getStatus(),\n          responseBody: exception.getResponse(),\n          exceptionName: exception.name,\n          fallbackMessage: exception.message,\n        }),\n      };\n    }\n\n    if (exception instanceof Error) {\n      // Duck-typing for HttpException instances that fail `instanceof`\n      // when multiple `@nestjs/common` copies exist in the dep tree.\n      const maybeStatus = (exception as { status?: unknown }).status;\n      const maybeGetResponse = (\n        exception as { getResponse?: () => unknown }\n      ).getResponse;\n      if (\n        typeof maybeStatus === \"number\" &&\n        typeof maybeGetResponse === \"function\"\n      ) {\n        return {\n          status: maybeStatus,\n          payload: payloadFromHttpException({\n            statusCode: maybeStatus,\n            responseBody: maybeGetResponse.call(exception),\n            exceptionName: exception.name,\n            fallbackMessage: exception.message,\n          }),\n        };\n      }\n      const maybeStatusOnly =\n        typeof maybeStatus === \"number\"\n          ? maybeStatus\n          : HttpStatus.INTERNAL_SERVER_ERROR;\n      return {\n        status: maybeStatusOnly,\n        payload: payloadFromGenericError(exception),\n      };\n    }\n\n    return {\n      status: HttpStatus.INTERNAL_SERVER_ERROR,\n      payload: {\n        type: \"server_error\",\n        code: \"INTERNAL_SERVER_ERROR\",\n        message: \"An unexpected error occurred\",\n        safeToRetry: false,\n      },\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAsBA;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AA9B3B;AAuEA,uCAAC,MAAM;AACA,IAAM,0BAAN,MAAyD;AAAA,EAC7C,SAAS,IAAI,OAAO,yBAAyB;AAAA,EAC7C;AAAA,EAKjB,YAAY,UAA0C,CAAC,GAAG;AACxD,SAAK,OAAO;AAAA,MACV,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,GAAG;AAAA,IACL;AAAA,EACF;AAAA,EAEA,MAAM,WAAoB,MAA2B;AACnD,UAAM,MAAM,KAAK,aAAa;AAC9B,UAAM,WAAW,IAAI,YAAiC;AACtD,UAAM,UAAU,IAAI,WAA+B;AAEnD,UAAM,cAAc,SAAS,UAAU,KAAK,KAAK,eAAe;AAChE,UAAM,aACH,MAAM,QAAQ,WAAW,IAAI,YAAY,CAAC,IAAI,gBAC/C,WAAW;AAEb,UAAM,UAA4B;AAAA,MAChC,MAAM,SAAS,OAAO;AAAA,MACtB;AAAA,MACA,GAAI,KAAK,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IAChD;AAEA,UAAM,EAAE,QAAQ,QAAQ,IAAI,KAAK,UAAU,SAAS;AACpD,UAAM,WAAW,mBAAmB,EAAE,QAAQ,SAAS,KAAK,QAAQ,CAAC;AAErE,QAAI,KAAK,KAAK,SAAS;AACrB,UAAI;AACF,aAAK,KAAK,QAAQ,UAAU,SAAS;AAAA,MACvC,SAAS,SAAS;AAChB,aAAK,OAAO;AAAA,UACV,EAAE,KAAK,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO,EAAE;AAAA,UACpE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,UAAU,KAAK;AACjB,WAAK,OAAO;AAAA,QACV;AAAA,UACE,KACE,qBAAqB,QACjB,UAAU,UACV,OAAO,SAAS;AAAA,UACtB,OAAO,qBAAqB,QAAQ,UAAU,QAAQ;AAAA,UACtD,MAAM,qBAAqB,QAAQ,UAAU,OAAO;AAAA,UACpD,MAAM,QAAQ;AAAA,UACd;AAAA,QACF;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,aAAS,OAAO,MAAM,EAAE,KAAK,QAAQ;AAAA,EACvC;AAAA,EAEQ,UAAU,WAGhB;AACA,QAAI,qBAAqB,cAAc;AACrC,aAAO;AAAA,QACL,QAAQ,2BAA2B,UAAU,UAAU;AAAA,QACvD,SAAS,wBAAwB,SAAS;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI,qBAAqB,eAAe;AACtC,aAAO;AAAA,QACL,QAAQ,UAAU,UAAU;AAAA,QAC5B,SAAS,yBAAyB;AAAA,UAChC,YAAY,UAAU,UAAU;AAAA,UAChC,cAAc,UAAU,YAAY;AAAA,UACpC,eAAe,UAAU;AAAA,UACzB,iBAAiB,UAAU;AAAA,QAC7B,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,qBAAqB,OAAO;AAG9B,YAAM,cAAe,UAAmC;AACxD,YAAM,mBACJ,UACA;AACF,UACE,OAAO,gBAAgB,YACvB,OAAO,qBAAqB,YAC5B;AACA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,yBAAyB;AAAA,YAChC,YAAY;AAAA,YACZ,cAAc,iBAAiB,KAAK,SAAS;AAAA,YAC7C,eAAe,UAAU;AAAA,YACzB,iBAAiB,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,kBACJ,OAAO,gBAAgB,WACnB,cACA,WAAW;AACjB,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,wBAAwB,SAAS;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,QAAQ,WAAW;AAAA,MACnB,SAAS;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AA/HO;AAAM,0BAAN,uDADP,qCACa;AAAN,4BAAM;","names":[]}