better-ship 0.25.0 → 0.27.0

package/dist/stripe/payment-service.d.ts

@@ -1,51 +1,2 @@
-import Stripe from "stripe";
-//#region src/infrastructure/stripe/payment-service.d.ts
-/** Supply the same key and parameters when repeating one durable payment attempt. */
-export type PaymentRequestOptions = Stripe.RequestOptions & Required<Pick<Stripe.RequestOptions, 'idempotencyKey'>>;
-/** Native Checkout parameters; the service selects payment or setup mode. */
-export type CheckoutInput = Omit<Stripe.Checkout.SessionCreateParams, 'mode'>;
-/** A saved customer method; the service confirms the payment off-session. */
-export type SavedMethodCharge = Omit<Stripe.PaymentIntentCreateParams, 'confirm' | 'off_session'> & Required<Pick<Stripe.PaymentIntentCreateParams, 'customer' | 'payment_method'>>;
-/** Native customer response, including Stripe request metadata. */
-export type CustomerResult = Awaited<ReturnType<Stripe['customers']['create']>>;
-/** Native Checkout response. Its URL can be null; this does not confirm payment. */
-export type CheckoutResult = Awaited<ReturnType<Stripe['checkout']['sessions']['create']>>;
-/** Native PaymentIntent response. Applications decide what each status permits. */
-export type PaymentResult = Awaited<ReturnType<Stripe['paymentIntents']['create']>>;
-/**
- * Stripe payment operations, with native types and stable keys for mutations.
- * Rejects with PaymentServiceError for Stripe failures; non-Stripe failures propagate unchanged.
- */
-export interface IPaymentService {
-  /** Create a customer; the application owns persistence and reuse of the customer link. */
-  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
-  /** Create one-time payment checkout; application fulfillment requires verified payment confirmation. */
-  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
-  /** Create checkout in setup mode. The application records consent and verifies the saved method's owner. */
-  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
-  /** Confirm a saved method off-session. PaymentServiceError retains card errors in cause. */
-  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
-  /** Retrieve an existing payment without starting another payment attempt. */
-  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
-}
-/**
- * Ported from Typist's StripeClient request boundary; the native SDK now owns retries.
- * The injected client owns retry and timeout defaults. Native request options can override them.
- */
-export declare class StripePaymentService implements IPaymentService {
-  private readonly stripe;
-  /** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */
-  constructor(stripe: Stripe);
-  /** Create a customer with a stable application key and preserve the native response. */
-  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
-  /** Force payment mode after caller parameters; return the native Checkout Session. */
-  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
-  /** Force setup mode after caller parameters; this operation does not charge the customer. */
-  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
-  /** Force confirmation and off-session use; retain native card failures in PaymentServiceError.cause. */
-  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
-  /** Preserve every native status and response field when reconciling an existing payment. */
-  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
-}
-//#endregion
-//# sourceMappingURL=payment-service.d.ts.map
+import { a as PaymentRequestOptions, c as StripePaymentService, i as IPaymentService, n as CheckoutResult, o as PaymentResult, r as CustomerResult, s as SavedMethodCharge, t as CheckoutInput } from "../payment-service-DUYd3Itt.js";
+export { CheckoutInput, CheckoutResult, CustomerResult, IPaymentService, PaymentRequestOptions, PaymentResult, SavedMethodCharge, StripePaymentService };

package/dist/stripe/payment-service.error.js

@@ -1,30 +1,3 @@
-import { nt as AppError } from "../core-BiN6S_cm.js";
-import Stripe from "stripe";
+import { t as PaymentServiceError } from "../payment-service.error-CqF7GkNp.js";
 
-//#region src/infrastructure/stripe/payment-service.error.ts
-/** A final Stripe request failure. The caller logs once; native details remain in cause. */
-var PaymentServiceError = class extends AppError {
-	operation;
-	_tag = "PaymentServiceError";
-	classification;
-	/** Classify the final SDK error without scheduling another payment attempt. */
-	constructor(operation, cause) {
-		super(`Stripe request failed: ${operation}`, { cause });
-		this.operation = operation;
-		this.classification = classifyStripeError(cause);
-	}
-};
-function classifyStripeError(error) {
-	if (error.headers?.["stripe-should-retry"] === "false") return "terminal";
-	const status = error.statusCode;
-	if (status !== void 0 && status >= 400 && status < 500 && status !== 409 && status !== 429) return "terminal";
-	if (error instanceof Stripe.errors.StripeAuthenticationError || error instanceof Stripe.errors.StripePermissionError || error instanceof Stripe.errors.StripeInvalidRequestError || error instanceof Stripe.errors.StripeIdempotencyError || error instanceof Stripe.errors.StripeCardError) return "terminal";
-	if (error.headers?.["stripe-should-retry"] === "true") return "transient";
-	if (status === 409 || status === 429 || status !== void 0 && status >= 500) return "transient";
-	if (error instanceof Stripe.errors.StripeConnectionError || error instanceof Stripe.errors.StripeAPIError || error instanceof Stripe.errors.StripeRateLimitError) return "transient";
-	return "unknown";
-}
-
-//#endregion
-export { PaymentServiceError };
-//# sourceMappingURL=payment-service.error.js.map
+export { PaymentServiceError };

package/dist/stripe/payment-service.js

@@ -1,4 +1,4 @@
-import { stripeRequest } from "./request.js";
+import { t as stripeRequest } from "../request-4vJEWxyZ.js";
 
 //#region src/infrastructure/stripe/payment-service.ts
 /**

package/dist/stripe/request.js

@@ -1,21 +1,3 @@
-import { PaymentServiceError } from "./payment-service.error.js";
-import Stripe from "stripe";
+import { t as stripeRequest } from "../request-4vJEWxyZ.js";
 
-//#region src/infrastructure/stripe/request.ts
-/**
-* Invoke one SDK operation; the SDK owns retries configured on its client or request.
-* Convert every Stripe error to PaymentServiceError without logging; preserve the original error in cause.
-* Non-Stripe failures propagate unchanged.
-*/
-async function stripeRequest(operation, work) {
-	try {
-		return await work();
-	} catch (cause) {
-		if (!(cause instanceof Stripe.errors.StripeError)) throw cause;
-		throw new PaymentServiceError(operation, cause);
-	}
-}
-
-//#endregion
-export { stripeRequest };
-//# sourceMappingURL=request.js.map
+export { stripeRequest };

package/dist/stripe-fixture-yFUknTJO.js

@@ -0,0 +1,33 @@
+import { n as createStripeClient } from "./client-Dv1Ch7yY.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/testing/stripe-fixture.ts
+/**
+* Construct the real SDK with a fake fetch transport and an ordered record of HTTP attempts.
+* The responder receives an unread request. The shared client factory supplies retry defaults.
+*/
+function stripeFixture(respond) {
+	const requests = [];
+	return {
+		stripe: createStripeClient("sk_test_fixture", { httpClient: Stripe.createFetchHttpClient(async (input, init) => {
+			const request = new Request(input, init);
+			const url = new URL(request.url);
+			const call = {
+				method: request.method,
+				path: url.pathname,
+				query: url.searchParams,
+				body: new URLSearchParams(),
+				headers: new Headers(request.headers)
+			};
+			requests.push(call);
+			const body = new TextDecoder().decode(await request.clone().arrayBuffer());
+			for (const [key, value] of new URLSearchParams(body)) call.body.append(key, value);
+			return respond(request);
+		}) }),
+		requests
+	};
+}
+
+//#endregion
+export { stripeFixture as t };
+//# sourceMappingURL=stripe-fixture-yFUknTJO.js.map

package/dist/stripe-fixture-yFUknTJO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-fixture-yFUknTJO.js","names":[],"sources":["../src/infrastructure/testing/stripe-fixture.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { createStripeClient } from '../stripe/client.ts'\n\n/** One SDK HTTP attempt; query and body expose Stripe's URL-encoded parameters. */\nexport type StripeCall = {\n  readonly method: string\n  readonly path: string\n  readonly query: URLSearchParams\n  readonly body: URLSearchParams\n  readonly headers: Headers\n}\n\ntype StripeFixture = { stripe: Stripe; requests: readonly StripeCall[] }\n\n/**\n * Construct the real SDK with a fake fetch transport and an ordered record of HTTP attempts.\n * The responder receives an unread request. The shared client factory supplies retry defaults.\n */\nexport function stripeFixture(\n  respond: (request: Request) => Response | Promise<Response>,\n): StripeFixture {\n  const requests: StripeCall[] = []\n  const stripe = createStripeClient('sk_test_fixture', {\n    httpClient: Stripe.createFetchHttpClient(async (input, init) => {\n      const request = new Request(input, init)\n      const url = new URL(request.url)\n      const call: StripeCall = {\n        method: request.method,\n        path: url.pathname,\n        query: url.searchParams,\n        body: new URLSearchParams(),\n        headers: new Headers(request.headers),\n      }\n      requests.push(call)\n      const body = new TextDecoder().decode(await request.clone().arrayBuffer())\n      for (const [key, value] of new URLSearchParams(body)) call.body.append(key, value)\n      return respond(request)\n    }),\n  })\n  return { stripe, requests }\n}\n"],"mappings":";;;;;;;;AAmBA,SAAgB,cACd,SACe;CACf,MAAM,WAAyB,CAAC;CAkBhC,OAAO;EAAE,QAjBM,mBAAmB,mBAAmB,EACnD,YAAY,OAAO,sBAAsB,OAAO,OAAO,SAAS;GAC9D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;GACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;GAC/B,MAAM,OAAmB;IACvB,QAAQ,QAAQ;IAChB,MAAM,IAAI;IACV,OAAO,IAAI;IACX,MAAM,IAAI,gBAAgB;IAC1B,SAAS,IAAI,QAAQ,QAAQ,OAAO;GACtC;GACA,SAAS,KAAK,IAAI;GAClB,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,YAAY,CAAC;GACzE,KAAK,MAAM,CAAC,KAAK,UAAU,IAAI,gBAAgB,IAAI,GAAG,KAAK,KAAK,OAAO,KAAK,KAAK;GACjF,OAAO,QAAQ,OAAO;EACxB,CAAC,EACH,CACc;EAAG;CAAS;AAC5B"}

package/dist/testing/payment-service.d.ts

@@ -1,4 +1,4 @@
-import { IPaymentService } from "../stripe/payment-service.js";
+import { i as IPaymentService } from "../payment-service-DUYd3Itt.js";
 import Stripe from "stripe";
 //#region src/infrastructure/testing/payment-service-contract.d.ts
 /**

package/dist/testing/payment-service.js

@@ -1,5 +1,5 @@
-import { PaymentServiceError } from "../stripe/payment-service.error.js";
-import { stripeFixture } from "./stripe.js";
+import { t as PaymentServiceError } from "../payment-service.error-CqF7GkNp.js";
+import { t as stripeFixture } from "../stripe-fixture-yFUknTJO.js";
 import Stripe from "stripe";
 import { deepStrictEqual, equal, ok, rejects } from "node:assert/strict";
 

package/dist/testing/stripe.js

@@ -1,33 +1,3 @@
-import { createStripeClient } from "../stripe/client.js";
-import Stripe from "stripe";
+import { t as stripeFixture } from "../stripe-fixture-yFUknTJO.js";
 
-//#region src/infrastructure/testing/stripe-fixture.ts
-/**
-* Construct the real SDK with a fake fetch transport and an ordered record of HTTP attempts.
-* The responder receives an unread request. The shared client factory supplies retry defaults.
-*/
-function stripeFixture(respond) {
-	const requests = [];
-	return {
-		stripe: createStripeClient("sk_test_fixture", { httpClient: Stripe.createFetchHttpClient(async (input, init) => {
-			const request = new Request(input, init);
-			const url = new URL(request.url);
-			const call = {
-				method: request.method,
-				path: url.pathname,
-				query: url.searchParams,
-				body: new URLSearchParams(),
-				headers: new Headers(request.headers)
-			};
-			requests.push(call);
-			const body = new TextDecoder().decode(await request.clone().arrayBuffer());
-			for (const [key, value] of new URLSearchParams(body)) call.body.append(key, value);
-			return respond(request);
-		}) }),
-		requests
-	};
-}
-
-//#endregion
-export { stripeFixture };
-//# sourceMappingURL=stripe.js.map
+export { stripeFixture };

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://www.schemastore.org/package.json",
   "name": "better-ship",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Foundation for applications on Cloudflare Workers: logger, errors, message bus, infrastructure adapters, and UI primitives",
   "license": "Apache-2.0",
   "repository": {
@@ -9,6 +9,9 @@
     "url": "git+https://github.com/alexander-zuev/better-ship.git",
     "directory": "packages/better-ship"
   },
+  "bin": {
+    "better-ship-notify-ci": "./dist/bin/notify-ci.js"
+  },
   "files": [
     "dist",
     "src"
@@ -23,6 +26,7 @@
     "./better-auth/secondary-storage": "./dist/better-auth/secondary-storage.js",
     "./better-auth/stripe": "./dist/better-auth/stripe.js",
     "./billing/client": "./dist/billing/client.js",
+    "./bin/notify-ci": "./dist/bin/notify-ci.js",
     "./cloudflare": "./dist/cloudflare.js",
     "./cloudflare/auth-secondary-storage": "./dist/cloudflare/auth-secondary-storage.js",
     "./cloudflare/durable-object-client": "./dist/cloudflare/durable-object-client.js",
@@ -34,6 +38,7 @@
     "./cloudflare/r2-errors": "./dist/cloudflare/r2-errors.js",
     "./cloudflare/scheduled": "./dist/cloudflare/scheduled.js",
     "./cloudflare/tracing": "./dist/cloudflare/tracing.js",
+    "./cloudflare/turnstile": "./dist/cloudflare/turnstile.js",
     "./core": "./dist/core.js",
     "./http": "./dist/http.js",
     "./postgres": "./dist/postgres.js",
@@ -46,6 +51,7 @@
     "./sentry/server": "./dist/sentry/server.js",
     "./sentry/tanstack": "./dist/sentry/tanstack.js",
     "./sentry/vite": "./dist/sentry/vite.js",
+    "./slack": "./dist/slack.js",
     "./stripe/client": "./dist/stripe/client.js",
     "./stripe/event-map": "./dist/stripe/event-map.js",
     "./stripe/payment-service": "./dist/stripe/payment-service.js",

package/src/infrastructure/cloudflare/turnstile/index.ts

@@ -0,0 +1,7 @@
+export { TurnstileVerificationError } from './turnstile.error.ts'
+export {
+  verifyTurnstile,
+  type TurnstileCheck,
+  type TurnstileVerdict,
+  type TurnstileVerifyOptions,
+} from './turnstile.ts'

package/src/infrastructure/cloudflare/turnstile/turnstile.error.ts

@@ -0,0 +1,21 @@
+import { AppError, type FailureClassification } from '@/core'
+
+/**
+ * Siteverify did not produce a verdict.
+ * A rejected token is not this error. The caller logs it once.
+ */
+export class TurnstileVerificationError extends AppError {
+  readonly _tag = 'TurnstileVerificationError'
+  readonly classification: FailureClassification
+  readonly errorCodes: readonly string[]
+
+  constructor(args: {
+    readonly classification: FailureClassification
+    readonly errorCodes: readonly string[]
+    readonly cause: unknown
+  }) {
+    super('Turnstile siteverify could not produce a verdict', { cause: args.cause })
+    this.classification = args.classification
+    this.errorCodes = args.errorCodes
+  }
+}

package/src/infrastructure/cloudflare/turnstile/turnstile.ts

@@ -0,0 +1,261 @@
+import { Result } from 'better-result'
+import { z } from 'zod'
+
+import {
+  classifyBoundaryError,
+  exponentialEqualJitterMs,
+  shouldRetryFailure,
+  type FailureClassification,
+} from '@/core'
+
+import { TurnstileVerificationError } from './turnstile.error.ts'
+
+/**
+ * Turnstile siteverify. Ported from Suparelay `verify-turnstile.ts` and Typist `turnstile.ts`.
+ * A rejection is a verdict. This module does not log, and one call retries with one idempotency key.
+ */
+
+const SITEVERIFY_URL = 'https://challenges.cloudflare.com/turnstile/v0/siteverify'
+
+// Cloudflare documents 2048 characters. The testing secret still accepts a longer token.
+const MAX_TOKEN_LENGTH = 2048
+
+// Cloudflare's validation example stops at 10 seconds.
+const DEFAULT_TIMEOUT_MS = 10_000
+
+// `times` counts retries after the first attempt, so a call stops at three attempts.
+const RETRY_TIMES = 2
+
+const CONFIGURATION_CODES: ReadonlySet<string> = new Set([
+  'missing-input-secret',
+  'invalid-input-secret',
+  'bad-request',
+])
+
+const SuccessBody = z.object({
+  success: z.literal(true),
+  hostname: z.string(),
+  challenge_ts: z.string(),
+  action: z.string().optional(),
+  metadata: z.object({ result_with_testing_key: z.boolean().optional() }).optional(),
+})
+
+const FailureBody = z.object({
+  success: z.literal(false),
+  'error-codes': z.array(z.string()).default([]),
+})
+
+type SuccessBody = z.infer<typeof SuccessBody>
+
+/** The values siteverify needs. The secret stays in the caller. */
+export type TurnstileCheck = {
+  readonly secretKey: string
+  readonly token: string
+  /** Visitor address from `CF-Connecting-IP`. Omit it when the request has none. */
+  readonly remoteIp?: string
+  /** Widget action. A present, different action rejects. A missing action does not. */
+  readonly expectedAction?: string
+  /** Allowed widget hostnames. A testing-key success skips this list. */
+  readonly expectedHostnames?: readonly string[]
+  /** UUID reused for this call's retries. Omit it and the call mints one. */
+  readonly idempotencyKey?: string
+}
+
+/** A solved challenge, or a refusal siteverify already decided. */
+export type TurnstileVerdict =
+  | {
+      readonly _tag: 'Accepted'
+      readonly hostname: string
+      readonly challengeTs: string
+      readonly action?: string
+    }
+  | {
+      readonly _tag: 'Rejected'
+      readonly errorCodes: readonly string[]
+    }
+
+/** Deadline and fetch overrides. Production calls omit this argument. */
+export type TurnstileVerifyOptions = {
+  /** Replaces global `fetch`. A test uses it for a response the testing secret cannot return. */
+  readonly fetch?: typeof fetch
+  /** Siteverify deadline in milliseconds. The default is 10 seconds. */
+  readonly timeoutMs?: number
+}
+
+class SiteverifyRetry extends Error {
+  readonly _tag = 'SiteverifyRetry'
+
+  constructor(
+    readonly errorCodes: readonly string[],
+    cause: unknown,
+  ) {
+    super('Turnstile siteverify did not answer', { cause })
+  }
+}
+
+/**
+ * Ask siteverify whether this token is a solved challenge.
+ * A rejection is a verdict. No verdict throws `TurnstileVerificationError`.
+ * A transient failure retries twice with the same idempotency key.
+ */
+export async function verifyTurnstile(
+  check: TurnstileCheck,
+  options: TurnstileVerifyOptions = {},
+): Promise<TurnstileVerdict> {
+  if (check.token.length > MAX_TOKEN_LENGTH) {
+    return { _tag: 'Rejected', errorCodes: ['invalid-input-response'] }
+  }
+  const idempotencyKey = resolveIdempotencyKey(check.idempotencyKey)
+  const result = await Result.tryPromise(
+    {
+      try: () => requestVerdict(check, idempotencyKey, options),
+      catch: (cause) => cause,
+    },
+    {
+      retry: {
+        times: RETRY_TIMES,
+        delayMs: (_cause, context) => exponentialEqualJitterMs(25, 200, context.attempt),
+        shouldRetry: (cause) =>
+          cause instanceof SiteverifyRetry &&
+          shouldRetryFailure({
+            classification: 'transient',
+            repeatSafe: true,
+            owner: 'immediate',
+          }),
+      },
+    },
+  )
+  if (result.isOk()) return result.value
+  if (result.error instanceof TurnstileVerificationError) throw result.error
+  if (result.error instanceof SiteverifyRetry) {
+    throw new TurnstileVerificationError({
+      classification: 'transient',
+      errorCodes: result.error.errorCodes,
+      cause: result.error.cause,
+    })
+  }
+  throw new TurnstileVerificationError({
+    classification: 'unknown',
+    errorCodes: [],
+    cause: result.error,
+  })
+}
+
+function resolveIdempotencyKey(key: string | undefined): string {
+  if (key === undefined) return crypto.randomUUID()
+  if (z.uuid().safeParse(key).success) return key
+  throw new TurnstileVerificationError({
+    classification: 'terminal',
+    errorCodes: [],
+    cause: { idempotencyKey: 'invalid' },
+  })
+}
+
+async function requestVerdict(
+  check: TurnstileCheck,
+  idempotencyKey: string,
+  options: TurnstileVerifyOptions,
+): Promise<TurnstileVerdict> {
+  const fetchImpl = options.fetch ?? fetch
+  const fields = {
+    secret: check.secretKey,
+    response: check.token,
+    idempotency_key: idempotencyKey,
+  }
+  const payload =
+    check.remoteIp !== undefined && check.remoteIp !== ''
+      ? { ...fields, remoteip: check.remoteIp }
+      : fields
+
+  let response: Response
+  try {
+    response = await fetchImpl(SITEVERIFY_URL, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS),
+    })
+  } catch (cause) {
+    throw transportFailure(cause)
+  }
+
+  const text = await response.text()
+  let parsed: unknown
+  try {
+    parsed = JSON.parse(text)
+  } catch (cause) {
+    throw unparsedFailure(response.status, cause)
+  }
+
+  const success = SuccessBody.safeParse(parsed)
+  if (success.success) return decideSuccess(success.data, check)
+  const failure = FailureBody.safeParse(parsed)
+  if (failure.success) return decideFailure(failure.data['error-codes'], response.status)
+  throw unparsedFailure(response.status, { status: response.status })
+}
+
+function decideSuccess(body: SuccessBody, check: TurnstileCheck): TurnstileVerdict {
+  // A testing secret omits action. Compare only an action the response names.
+  if (
+    check.expectedAction !== undefined &&
+    body.action !== undefined &&
+    body.action !== check.expectedAction
+  ) {
+    return { _tag: 'Rejected', errorCodes: ['action-mismatch'] }
+  }
+  // A testing secret reports example.com, so the allowlist does not apply to it.
+  const testingKey = body.metadata?.result_with_testing_key === true
+  if (
+    !testingKey &&
+    check.expectedHostnames !== undefined &&
+    !check.expectedHostnames.includes(body.hostname)
+  ) {
+    return { _tag: 'Rejected', errorCodes: ['hostname-mismatch'] }
+  }
+  if (body.action === undefined) {
+    return { _tag: 'Accepted', hostname: body.hostname, challengeTs: body.challenge_ts }
+  }
+  return {
+    _tag: 'Accepted',
+    hostname: body.hostname,
+    challengeTs: body.challenge_ts,
+    action: body.action,
+  }
+}
+
+function decideFailure(errorCodes: readonly string[], status: number): TurnstileVerdict {
+  if (errorCodes.some((code) => CONFIGURATION_CODES.has(code))) {
+    throw verificationFailure('terminal', errorCodes, status)
+  }
+  if (errorCodes.includes('internal-error') || status === 429 || status >= 500) {
+    throw new SiteverifyRetry(errorCodes, { status })
+  }
+  return { _tag: 'Rejected', errorCodes }
+}
+
+function transportFailure(cause: unknown): Error {
+  const classification = classifyBoundaryError({
+    cause,
+    classifyBoundary: () => undefined,
+    includeCloudflare: false,
+  })
+  if (classification === 'transient') return new SiteverifyRetry([], cause)
+  return new TurnstileVerificationError({ classification, errorCodes: [], cause })
+}
+
+function unparsedFailure(status: number, cause: unknown): Error {
+  if (status === 429 || status >= 500) return new SiteverifyRetry([], cause)
+  return verificationFailure('terminal', [], status)
+}
+
+function verificationFailure(
+  classification: FailureClassification,
+  errorCodes: readonly string[],
+  status: number,
+): TurnstileVerificationError {
+  return new TurnstileVerificationError({
+    classification,
+    errorCodes,
+    cause: { status },
+  })
+}