@viu/emporix-sdk 2.13.1 → 2.14.0

package/dist/index.cjs

@@ -48,6 +48,10 @@ var EmporixValidationError = class extends EmporixError {
 };
 var EmporixServerError = class extends EmporixError {
 };
+var EmporixTimeoutError = class extends EmporixError {
+};
+var EmporixNetworkError = class extends EmporixError {
+};
 var EmporixInsufficientScopeError = class extends EmporixForbiddenError {
   requiredScope;
   constructor(message, status, body, requiredScope) {
@@ -457,6 +461,26 @@ var DefaultTokenProvider = class {
     this.serviceLocks.set(set, p);
     return p;
   }
+  /**
+   * fetch with the configured read timeout. Token endpoints sit in front of
+   * single-flight locks — one hung call would otherwise block every request
+   * on this credential set forever.
+   */
+  async boundedFetch(url, init = {}) {
+    const ms = this.cfg.timeouts?.readMs ?? 6e4;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), ms);
+    try {
+      return await fetch(url, { ...init, signal: controller.signal });
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new EmporixTimeoutError(`token request timed out after ${ms}ms`);
+      }
+      throw new EmporixNetworkError(`token request network failure: ${err.message}`);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
   async requestServiceToken(set) {
     const c = this.creds(set);
     const body = new URLSearchParams({
@@ -465,7 +489,7 @@ var DefaultTokenProvider = class {
       client_secret: c.secret
     });
     if (c.scope) body.set("scope", c.scope);
-    const res = await fetch(`${this.cfg.host}/oauth/token`, {
+    const res = await this.boundedFetch(`${this.cfg.host}/oauth/token`, {
       method: "POST",
       headers: { "Content-Type": "application/x-www-form-urlencoded" },
       body
@@ -538,7 +562,7 @@ var DefaultTokenProvider = class {
       url.searchParams.set("refresh_token", this.anon.refreshToken);
     }
     try {
-      const res = await fetch(url, { method: "GET" });
+      const res = await this.boundedFetch(url, { method: "GET" });
       const json = await res.json().catch(() => ({}));
       if (!res.ok) {
         this.notifyRefresh("anonymous", false);
@@ -614,10 +638,18 @@ var HttpClient = class {
         attempt
       });
       const controller = new AbortController();
-      const timer = setTimeout(
-        () => controller.abort(),
-        o.timeoutMs ?? this.opts.timeouts.readMs
-      );
+      const overallMs = o.timeoutMs ?? this.opts.timeouts.readMs;
+      const connectMs = Math.min(this.opts.timeouts.connectMs, overallMs);
+      const timeoutMsg = `${o.method} ${o.path} timed out after ${overallMs}ms (connect budget ${connectMs}ms)`;
+      let connectTimer;
+      let overallTimer;
+      const overallBudget = new Promise((_, reject) => {
+        overallTimer = setTimeout(() => {
+          controller.abort();
+          reject(new EmporixTimeoutError(timeoutMsg));
+        }, overallMs);
+      });
+      connectTimer = setTimeout(() => controller.abort(), connectMs);
       const isFormData = typeof FormData !== "undefined" && o.body instanceof FormData;
       const init = {
         method: o.method,
@@ -628,12 +660,27 @@ var HttpClient = class {
         init.body = isFormData ? o.body : JSON.stringify(o.body);
       }
       let res;
+      let text;
       try {
-        res = await fetch(url, init);
+        res = await Promise.race([fetch(url, init), overallBudget]);
+        clearTimeout(connectTimer);
+        connectTimer = void 0;
+        const body = res.text();
+        body.catch(() => {
+        });
+        text = await Promise.race([body, overallBudget]);
+      } catch (err) {
+        if (err instanceof EmporixTimeoutError) throw err;
+        if (err.name === "AbortError") {
+          throw new EmporixTimeoutError(timeoutMsg);
+        }
+        throw new EmporixNetworkError(
+          `${o.method} ${o.path} network failure: ${err.message}`
+        );
       } finally {
-        clearTimeout(timer);
+        if (connectTimer !== void 0) clearTimeout(connectTimer);
+        if (overallTimer !== void 0) clearTimeout(overallTimer);
       }
-      const text = await res.text();
       const parsed = text ? safeJson(text) : void 0;
       if (res.ok) {
         log.debug("http ok", { status: res.status });
@@ -663,10 +710,12 @@ var HttpClient = class {
         }
         throw errorFromResponse(res.status, `${o.method} ${o.path} \u2192 401`, parsed);
       }
-      const retryable = res.status >= 500 || res.status === 429;
+      const idempotent = o.method === "GET" || o.method === "PUT" || o.method === "DELETE" || o.idempotent === true;
+      const retryable = idempotent && (res.status >= 500 || res.status === 429);
       if (retryable && attempt < maxAttempts) {
-        const retryAfter = Number(res.headers.get("Retry-After"));
-        const backoff = Number.isFinite(retryAfter) && retryAfter >= 0 ? retryAfter * 1e3 : Math.min(1e3 * 2 ** (attempt - 1), 8e3) + Math.random() * 100;
+        const retryAfterHeader = res.headers.get("Retry-After");
+        const retryAfter = retryAfterHeader ? Number(retryAfterHeader) : Number.NaN;
+        const backoff = Number.isFinite(retryAfter) && retryAfter >= 0 ? Math.min(retryAfter * 1e3, 8e3) : Math.min(1e3 * 2 ** (attempt - 1), 8e3) + Math.random() * 100;
         log.warn("retryable failure", { status: res.status, attempt, backoffMs: backoff });
         await this.sleep(backoff);
         continue;
@@ -718,6 +767,15 @@ var HttpClient = class {
     }
     try {
       return await fetch(url, init);
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new EmporixTimeoutError(
+          `${o.method} ${o.path} timed out after ${o.timeoutMs ?? this.opts.timeouts.readMs}ms`
+        );
+      }
+      throw new EmporixNetworkError(
+        `${o.method} ${o.path} network failure: ${err.message}`
+      );
     } finally {
       clearTimeout(timer);
     }
@@ -731,6 +789,21 @@ function requireCustomer(auth2) {
 }
 
 // src/services/customer.ts
+function toSession(endpoint, wire, opts = {}) {
+  const customerToken = wire.access_token ?? wire.accessToken;
+  if (!customerToken) {
+    throw new EmporixAuthError(`${endpoint}: response missing access_token`, void 0, wire);
+  }
+  return {
+    customerToken,
+    saasToken: wire.saas_token ?? wire.saasToken ?? opts.carrySaasToken ?? "",
+    refreshToken: wire.refresh_token ?? wire.refreshToken ?? "",
+    sessionId: wire.session_id,
+    expiresIn: wire.expires_in != null ? Number(wire.expires_in) : void 0,
+    ...wire.social_access_token ? { socialAccessToken: wire.social_access_token } : {},
+    ...wire.social_id_token ? { socialIdToken: wire.social_id_token } : {}
+  };
+}
 var CustomerService = class {
   constructor(ctx) {
     this.ctx = ctx;
@@ -762,13 +835,7 @@ var CustomerService = class {
       auth: effective,
       body: creds
     });
-    return {
-      customerToken: wire.access_token ?? wire.accessToken ?? "",
-      saasToken: wire.saas_token ?? wire.saasToken ?? "",
-      refreshToken: wire.refresh_token ?? wire.refreshToken ?? "",
-      sessionId: wire.session_id,
-      expiresIn: wire.expires_in
-    };
+    return toSession("login", wire);
   }
   /**
    * Refreshes an authenticated customer session via its refresh token,
@@ -788,14 +855,11 @@ var CustomerService = class {
       query,
       auth: auth2
     });
-    return {
-      customerToken: wire.access_token ?? wire.accessToken ?? "",
-      // Refresh does not return a saas_token — carry the original forward.
-      saasToken: input.saasToken ?? "",
-      refreshToken: wire.refresh_token ?? wire.refreshToken ?? "",
-      sessionId: wire.session_id,
-      expiresIn: wire.expires_in
-    };
+    return toSession(
+      "refresh",
+      wire,
+      input.saasToken !== void 0 ? { carrySaasToken: input.saasToken } : {}
+    );
   }
   /**
    * Logs the customer out server-side: `GET /customer/{tenant}/logout?
@@ -834,15 +898,7 @@ var CustomerService = class {
       auth: auth2,
       ...input.sessionId ? { headers: { "session-id": input.sessionId } } : {}
     });
-    return {
-      customerToken: wire.access_token ?? wire.accessToken ?? "",
-      saasToken: wire.saas_token ?? wire.saasToken ?? "",
-      refreshToken: wire.refresh_token ?? wire.refreshToken ?? "",
-      sessionId: wire.session_id,
-      expiresIn: wire.expires_in != null ? Number(wire.expires_in) : void 0,
-      ...wire.social_access_token ? { socialAccessToken: wire.social_access_token } : {},
-      ...wire.social_id_token ? { socialIdToken: wire.social_id_token } : {}
-    };
+    return toSession("socialLogin", wire);
   }
   /**
    * RFC 8693 token exchange: exchanges an external IdP JWT for an Emporix
@@ -861,13 +917,7 @@ var CustomerService = class {
       query,
       auth: auth2
     });
-    return {
-      customerToken: wire.access_token ?? wire.accessToken ?? "",
-      saasToken: wire.saas_token ?? wire.saasToken ?? "",
-      refreshToken: wire.refresh_token ?? wire.refreshToken ?? "",
-      sessionId: wire.session_id,
-      expiresIn: wire.expires_in != null ? Number(wire.expires_in) : void 0
-    };
+    return toSession("exchangeToken", wire);
   }
   /** Returns the authenticated customer. Requires customer/raw auth. */
   async me(auth2) {
@@ -1037,7 +1087,9 @@ var ProductService = class {
           path: `/product/${this.ctx.tenant}/products/search`,
           query: { pageSize: chunk.length },
           auth: auth2,
-          body: { q: `id:(${chunk.join(",")})` }
+          body: { q: `id:(${chunk.join(",")})` },
+          idempotent: true
+          // pure read over POST — safe to replay on 5xx/429
         })
       )
     );
@@ -1077,7 +1129,9 @@ var ProductService = class {
           path: `/product/${this.ctx.tenant}/products/search`,
           query: { pageSize: chunk.length },
           auth: auth2,
-          body: { q: `code:(${chunk.join(",")})` }
+          body: { q: `code:(${chunk.join(",")})` },
+          idempotent: true
+          // pure read over POST — safe to replay on 5xx/429
         })
       )
     );
@@ -1198,7 +1252,9 @@ var CategoryService = class {
       path: `/product/${this.ctx.tenant}/products/search`,
       query: { pageSize: productIds.length },
       auth: auth2,
-      body: { q: `id:(${productIds.join(",")})` }
+      body: { q: `id:(${productIds.join(",")})` },
+      idempotent: true
+      // pure read over POST — safe to replay on 5xx/429
     });
     return { items, pageNumber, pageSize, hasNextPage };
   }
@@ -1514,7 +1570,9 @@ var PriceService = class {
       method: "POST",
       path: `/price/${this.ctx.tenant}/match-prices-by-context`,
       auth: requireContextAuth(auth2),
-      body: input
+      body: input,
+      idempotent: true
+      // pure read over POST — safe to replay on 5xx/429
     });
     return rows.map(normalizeMatch);
   }
@@ -1527,7 +1585,9 @@ var PriceService = class {
       method: "POST",
       path: `/price/${this.ctx.tenant}/match-prices`,
       auth: auth2,
-      body: input
+      body: input,
+      idempotent: true
+      // pure read over POST — safe to replay on 5xx/429
     });
     return rows.map(normalizeMatch);
   }
@@ -2394,7 +2454,9 @@ var AvailabilityService = class {
       path: `/availability/${this.ctx.tenant}/availability/search`,
       auth: auth2,
       query: { site: siteCode, pageSize: productIds.length },
-      body: productIds
+      body: productIds,
+      idempotent: true
+      // pure read over POST — safe to replay on 5xx/429
     });
     const byId = /* @__PURE__ */ new Map();
     for (const a of found) if (a.productId) byId.set(a.productId, a);
@@ -5112,7 +5174,7 @@ var ApprovalService = class {
 };
 
 // package.json
-var version = "2.13.1";
+var version = "2.14.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -5341,8 +5403,10 @@ exports.EmporixClient = EmporixClient;
 exports.EmporixError = EmporixError;
 exports.EmporixForbiddenError = EmporixForbiddenError;
 exports.EmporixInsufficientScopeError = EmporixInsufficientScopeError;
+exports.EmporixNetworkError = EmporixNetworkError;
 exports.EmporixNotFoundError = EmporixNotFoundError;
 exports.EmporixServerError = EmporixServerError;
+exports.EmporixTimeoutError = EmporixTimeoutError;
 exports.EmporixValidationError = EmporixValidationError;
 exports.FeeService = FeeService;
 exports.HttpClient = HttpClient;