relay-surfih-sdk 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,148 @@
-# Temporary Holding Version
+# relay-sdk
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Signed client for Relay `/api/v1`, and a verifier for webhook deliveries. ESM, Node 20+. The only runtime dependency is `relay-types`.
+
+## Install
+
+Build `relay-types` first so this package can resolve its types:
+
+```sh
+cd ../relay-types && npm install && npm run build
+cd ../relay-sdk-nodejs && npm install && npm run build
+```
+
+## HMAC
+
+```ts
+import { createRelay } from "relay-sdk";
+
+const relay = createRelay({
+  apiKey: process.env.RELAY_API_KEY!,
+  secret: process.env.RELAY_API_SECRET!,
+});
+
+const created = await relay.queues.create(
+  { name: "orders", webhook_url: "https://app.example.com/hooks/relay" },
+  { idempotencyKey: "queue-orders" },
+);
+
+const accepted = await relay.events.submit(
+  created.queue.id,
+  { event_type: "order.created", event: { id: "ord_1" } },
+  { idempotencyKey: "order-ord_1" },
+);
+```
+
+The client signs `apiKey.timestamp.METHOD.pathAndQuery.rawBody` over the same UTF-8 bytes it sends. `GET` and `DELETE` sign an empty body (the string ends with `.`) and omit `Content-Type`.
+
+## API
+
+| Method | HTTP | Idempotency-Key |
+| --- | --- | --- |
+| `relay.queues.create(body, { idempotencyKey })` | `POST /api/v1/queues` | required |
+| `relay.events.submit(queueId, body, { idempotencyKey })` | `POST /api/v1/queues/{queueId}/events` | required |
+| `relay.events.get(eventId)` | `GET /api/v1/events/{eventId}` | — |
+| `relay.events.get(eventId, { attempts: true })` | `GET …?attempts=1` | — |
+| `relay.events.result(eventId, body, { idempotencyKey })` | `POST /api/v1/events/{eventId}/result` | required |
+| `relay.events.checkpoints(eventId, checkpoints)` | `POST /api/v1/events/{eventId}/checkpoints` | — |
+| `relay.schedules.list(queueId)` | `GET /api/v1/queues/{queueId}/schedules` | — |
+| `relay.schedules.create(queueId, body)` | `POST /api/v1/queues/{queueId}/schedules` | — |
+| `relay.schedules.delete(scheduleId)` | `DELETE /api/v1/schedules/{scheduleId}` | — |
+
+Request and response shapes come from `relay-types` and are re-exported from `relay-sdk`.
+
+### Events
+
+```ts
+// Delay delivery (at most one of deliver_at / delay_seconds; omit both for ASAP).
+await relay.events.submit(
+  queueId,
+  { event_type: "order.created", event: { id: "ord_1" }, delay_seconds: 60 },
+  { idempotencyKey: "order-ord_1" },
+);
+
+const event = await relay.events.get(accepted.event_id);
+const withAttempts = await relay.events.get(accepted.event_id, { attempts: true });
+// withAttempts.attempts, withAttempts.checkpoints
+
+await relay.events.result(
+  accepted.event_id,
+  { status: "completed", result: { provider_id: "msg_1" } },
+  { idempotencyKey: "result-ord_1" },
+);
+
+await relay.events.checkpoints(accepted.event_id, [
+  { tag: "received", at: new Date().toISOString() },
+  { tag: "done" },
+]);
+```
+
+`send_message` events must carry only `{ notification_id }` in `event`.
+
+### Schedules
+
+```ts
+const { schedules, limit } = await relay.schedules.list(queueId);
+
+const { schedule } = await relay.schedules.create(queueId, {
+  name: "daily-digest",
+  cron: "0 9 * * *",
+  timezone: "America/Sao_Paulo",
+  event_type: "digest.run",
+  event: { kind: "daily" },
+});
+
+await relay.schedules.delete(schedule.id);
+```
+
+`enabled` on create is accepted by the API but not stored; new schedules always start enabled.
+
+## Ed25519 or KMS
+
+Pass a PKCS#8 Ed25519 `privateKeyPem`, or a `sign` hook. The hook receives those raw UTF-8 bytes and returns the full header value: `sha256=` plus 64 lowercase hex characters, or `ed25519=` plus standard base64 of the 64-byte signature.
+
+```ts
+const relay = createRelay({
+  apiKey,
+  sign: async (bytes) => {
+    const signature = await kmsSignEd25519(bytes); // 64 raw bytes
+    return "ed25519=" + Buffer.from(signature).toString("base64");
+  },
+});
+```
+
+Register the matching SPKI public key on the queue before the first `ed25519=` call. `request_public_key_pem` must be a public key; a private key PEM is rejected before the request is sent.
+
+## Webhooks
+
+```ts
+import { verifyWebhook } from "relay-sdk";
+
+const delivery = verifyWebhook({
+  apiKey,
+  secret,
+  rawBody, // exact bytes, before JSON.parse
+  headers: req.headers,
+  deliveryPublicKeyPem, // set when webhook_auth_mode is "ed25519"
+});
+
+delivery.eventId;
+delivery.attempt;
+delivery.idempotencyKey;
+```
+
+`Idempotency-Key` is unsigned. A request with that header swapped still verifies. Dedupe on the signed pair `(event_id, attempt)` as well as on the idempotency key. When `deliveryPublicKeyPem` is set, the Ed25519 signature covers `v1.{timestamp}.{eventId}.{sha256_hex(body)}` and the timestamp must be within ±300 seconds. HMAC-only deliveries have no timestamp.
+
+A header value that arrives as a `string[]` must contain exactly one entry.
+
+## Errors
+
+Failed `/api/v1` calls throw `RelayError` (`status`, `message`, optional `code`, `requestId`, `retryAfter`, `issues`, quota fields). Webhook verification failures throw `WebhookVerificationError`.
+
+## Fetch and base URL
+
+`baseUrl` defaults to `https://relay.surfih.com` (`DEFAULT_BASE_URL`). Pass it only to target another origin (local, staging).
+
+Every call sets `redirect: "error"`. A custom `fetch` must honor that and must not follow redirects.
+
+When set, `baseUrl` is parsed with `new URL`. It must be `https`, or `http` for `localhost`, `127.0.0.1`, or `::1`. Other `http` origins need `allowInsecureHttp: true`. Userinfo, query, hash, and a non-root path are rejected.

package/dist/client.d.ts

@@ -0,0 +1,77 @@
+import type { AcceptedEventResponse, CheckpointInput, CreateQueueRequest, CreateQueueResponse, CreateScheduleRequest, DeletedScheduleResponse, Event, EventResultResponse, EventWithAttempts, PostCheckpointsResponse, PostEventResultRequest, ScheduleListResponse, ScheduleResponse, SubmitEventRequest } from "relay-types";
+import { type RelayFetch } from "./request.js";
+import { type SignFn } from "./sign.js";
+export type { RelayFetch, SignFn };
+/** Production Relay origin used when `CreateRelayOptions.baseUrl` is omitted. */
+export declare const DEFAULT_BASE_URL = "https://relay.surfih.com";
+/** `now` returns milliseconds since the Unix epoch, the same as `Date.now`. */
+export interface CreateRelayOptions {
+    /**
+     * Relay origin. Defaults to {@link DEFAULT_BASE_URL}.
+     * Parsed with `new URL`; must be `https`, or `http` for loopback unless `allowInsecureHttp`.
+     */
+    baseUrl?: string;
+    apiKey: string;
+    /** HMAC key (`cs_live_…`). Mutually exclusive with `privateKeyPem` and `sign`. */
+    secret?: string;
+    /** PKCS#8 Ed25519 private key. Mutually exclusive with `secret` and `sign`. */
+    privateKeyPem?: string;
+    /**
+     * Signs the raw UTF-8 bytes of `apiKey.timestamp.METHOD.pathAndQuery.rawBody`.
+     * Return `sha256=<64 lowercase hex>` or `ed25519=<standard base64 of 64 bytes>`.
+     */
+    sign?: SignFn;
+    /** Milliseconds since the Unix epoch. Defaults to `Date.now`. */
+    now?: () => number;
+    /**
+     * Replacement for global `fetch`. Every call passes `redirect: "error"`.
+     * The implementation must not follow redirects.
+     */
+    fetch?: RelayFetch;
+    /** Allow `http://` to a non-loopback host. Loopback http is always allowed. */
+    allowInsecureHttp?: boolean;
+}
+export interface RequestOptions {
+    signal?: AbortSignal;
+}
+export interface IdempotentOptions extends RequestOptions {
+    idempotencyKey: string;
+}
+export interface GetEventOptions extends RequestOptions {
+    /** `true` sends `?attempts=1` and returns attempts plus checkpoints. */
+    attempts?: boolean;
+}
+export interface RelayQueues {
+    create(body: CreateQueueRequest, options: IdempotentOptions): Promise<CreateQueueResponse>;
+}
+export interface RelayEvents {
+    submit(queueId: string, body: SubmitEventRequest, options: IdempotentOptions): Promise<AcceptedEventResponse>;
+    get(eventId: string, options: GetEventOptions & {
+        attempts: true;
+    }): Promise<EventWithAttempts>;
+    get(eventId: string, options?: GetEventOptions): Promise<Event>;
+    result(eventId: string, body: PostEventResultRequest, options: IdempotentOptions): Promise<EventResultResponse>;
+    checkpoints(eventId: string, checkpoints: readonly CheckpointInput[], options?: RequestOptions): Promise<PostCheckpointsResponse>;
+}
+export interface RelaySchedules {
+    list(queueId: string, options?: RequestOptions): Promise<ScheduleListResponse>;
+    create(queueId: string, body: CreateScheduleRequest, options?: RequestOptions): Promise<ScheduleResponse>;
+    delete(scheduleId: string, options?: RequestOptions): Promise<DeletedScheduleResponse>;
+}
+export interface Relay {
+    queues: RelayQueues;
+    events: RelayEvents;
+    schedules: RelaySchedules;
+}
+/**
+ * Client for `/api/v1`. Signing headers are applied internally.
+ * Pass exactly one of `secret`, `privateKeyPem`, or `sign`.
+ *
+ * `baseUrl` defaults to {@link DEFAULT_BASE_URL}. When set, it is parsed with `new URL`
+ * and must be `https`, or `http` for `localhost` / `127.0.0.1` / `::1`, unless
+ * `allowInsecureHttp` is set. Credentials, query, hash, and a non-root path are rejected.
+ * Each request is built with `new URL(pathAndQuery, origin)` and must not escape that origin.
+ * `redirect: "error"` is set on every fetch.
+ */
+export declare function createRelay(options: CreateRelayOptions): Relay;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAiB,KAAK,UAAU,EAAmB,MAAM,cAAc,CAAC;AAC/E,OAAO,EAOL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAEnB,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAEnC,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,6BAA6B,CAAC;AAE3D,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;OAGG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,wEAAwE;IACxE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC9G,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,SAAS,eAAe,EAAE,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1G,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;CAC3B;AAUD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,KAAK,CAyB9D"}

package/dist/client.js

@@ -0,0 +1,183 @@
+import { paths } from "relay-types";
+import { assertRelayOrigin } from "./origin.js";
+import { signedRequest } from "./request.js";
+import { assertApiKey, assertPublicRequestKey, assertSecret, customSigner, ed25519Signer, hmacSigner, } from "./sign.js";
+/** Production Relay origin used when `CreateRelayOptions.baseUrl` is omitted. */
+export const DEFAULT_BASE_URL = "https://relay.surfih.com";
+/**
+ * Client for `/api/v1`. Signing headers are applied internally.
+ * Pass exactly one of `secret`, `privateKeyPem`, or `sign`.
+ *
+ * `baseUrl` defaults to {@link DEFAULT_BASE_URL}. When set, it is parsed with `new URL`
+ * and must be `https`, or `http` for `localhost` / `127.0.0.1` / `::1`, unless
+ * `allowInsecureHttp` is set. Credentials, query, hash, and a non-root path are rejected.
+ * Each request is built with `new URL(pathAndQuery, origin)` and must not escape that origin.
+ * `redirect: "error"` is set on every fetch.
+ */
+export function createRelay(options) {
+    const apiKey = assertApiKey(options.apiKey);
+    const origin = assertRelayOrigin(options.baseUrl ?? DEFAULT_BASE_URL, options.allowInsecureHttp === true);
+    const sign = resolveSigner(options);
+    if (options.now !== undefined && typeof options.now !== "function") {
+        throw new TypeError("now must be a function");
+    }
+    if (options.fetch !== undefined && typeof options.fetch !== "function") {
+        throw new TypeError("fetch must be a function");
+    }
+    const now = options.now ?? Date.now;
+    const fetchImpl = options.fetch ??
+        ((input, init) => {
+            if (typeof globalThis.fetch !== "function") {
+                throw new TypeError("fetch is not available");
+            }
+            return globalThis.fetch(input, init);
+        });
+    const transport = { origin, apiKey, sign, now, fetch: fetchImpl };
+    return {
+        queues: new QueuesApi(transport),
+        events: new EventsApi(transport),
+        schedules: new SchedulesApi(transport),
+    };
+}
+function resolveSigner(options) {
+    const selected = [options.secret !== undefined, options.privateKeyPem !== undefined, options.sign !== undefined];
+    const count = selected.filter(Boolean).length;
+    if (count !== 1) {
+        throw new TypeError("createRelay requires exactly one of secret, privateKeyPem, or sign");
+    }
+    if (options.secret !== undefined)
+        return hmacSigner(assertSecret(options.secret));
+    if (options.privateKeyPem !== undefined)
+        return ed25519Signer(options.privateKeyPem);
+    return customSigner(options.sign);
+}
+function call(input) {
+    const next = {
+        method: input.method,
+        pathAndQuery: input.pathAndQuery,
+        successStatuses: input.successStatuses,
+    };
+    if (input.jsonBody !== undefined)
+        next.jsonBody = input.jsonBody;
+    if (input.idempotencyKey !== undefined)
+        next.idempotencyKey = input.idempotencyKey;
+    if (input.signal !== undefined)
+        next.signal = input.signal;
+    return next;
+}
+function assertId(value, label) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError(`${label} must be a non-empty string`);
+    }
+}
+class QueuesApi {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    async create(body, options) {
+        assertPublicRequestKey(body.request_public_key_pem);
+        return signedRequest(this.transport, call({
+            method: "POST",
+            pathAndQuery: paths.createQueue,
+            jsonBody: body,
+            idempotencyKey: options.idempotencyKey,
+            successStatuses: [200, 201],
+            ...(options.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+}
+class EventsApi {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    async submit(queueId, body, options) {
+        assertId(queueId, "queueId");
+        return signedRequest(this.transport, call({
+            method: "POST",
+            pathAndQuery: paths.submitEvent(queueId),
+            jsonBody: body,
+            idempotencyKey: options.idempotencyKey,
+            successStatuses: [202],
+            ...(options.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+    async get(eventId, options) {
+        assertId(eventId, "eventId");
+        const path = paths.getEvent(eventId);
+        const attempts = options?.attempts === true;
+        const pathAndQuery = attempts ? `${path}?attempts=1` : path;
+        const signal = options?.signal;
+        if (attempts) {
+            return signedRequest(this.transport, call({
+                method: "GET",
+                pathAndQuery,
+                successStatuses: [200],
+                ...(signal !== undefined ? { signal } : {}),
+            }));
+        }
+        return signedRequest(this.transport, call({
+            method: "GET",
+            pathAndQuery,
+            successStatuses: [200],
+            ...(signal !== undefined ? { signal } : {}),
+        }));
+    }
+    async result(eventId, body, options) {
+        assertId(eventId, "eventId");
+        return signedRequest(this.transport, call({
+            method: "POST",
+            pathAndQuery: paths.postEventResult(eventId),
+            jsonBody: body,
+            idempotencyKey: options.idempotencyKey,
+            successStatuses: [200],
+            ...(options.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+    async checkpoints(eventId, checkpoints, options) {
+        assertId(eventId, "eventId");
+        return signedRequest(this.transport, call({
+            method: "POST",
+            pathAndQuery: paths.postCheckpoints(eventId),
+            jsonBody: { checkpoints },
+            successStatuses: [200],
+            ...(options?.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+}
+class SchedulesApi {
+    transport;
+    constructor(transport) {
+        this.transport = transport;
+    }
+    async list(queueId, options) {
+        assertId(queueId, "queueId");
+        return signedRequest(this.transport, call({
+            method: "GET",
+            pathAndQuery: paths.listSchedules(queueId),
+            successStatuses: [200],
+            ...(options?.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+    async create(queueId, body, options) {
+        assertId(queueId, "queueId");
+        return signedRequest(this.transport, call({
+            method: "POST",
+            pathAndQuery: paths.createSchedule(queueId),
+            jsonBody: body,
+            successStatuses: [201],
+            ...(options?.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+    async delete(scheduleId, options) {
+        assertId(scheduleId, "scheduleId");
+        return signedRequest(this.transport, call({
+            method: "DELETE",
+            pathAndQuery: paths.deleteSchedule(scheduleId),
+            successStatuses: [200],
+            ...(options?.signal !== undefined ? { signal: options.signal } : {}),
+        }));
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAiBpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAoC,MAAM,cAAc,CAAC;AAC/E,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,UAAU,GAGX,MAAM,WAAW,CAAC;AAInB,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AA+E3D;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,OAA2B;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GACb,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACf,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,MAAM,SAAS,GAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7E,OAAO;QACL,MAAM,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC;QAChC,MAAM,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC;QAChC,SAAS,EAAE,IAAI,YAAY,CAAC,SAAS,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAA2B;IAChD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC,OAAO,CAAC,IAAc,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,IAAI,CAAC,KAAiB;IAC7B,MAAM,IAAI,GAAe;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,KAA2C;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,SAAS;IACgB;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,MAAM,CAAC,IAAwB,EAAE,OAA0B;QAC/D,sBAAsB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACpD,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,SAAS;IACgB;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAwB,EAAE,OAA0B;QAChF,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC;YACxC,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CACH,CAAC;IACJ,CAAC;IAID,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAyB;QAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK;gBACb,YAAY;gBACZ,eAAe,EAAE,CAAC,GAAG,CAAC;gBACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,KAAK;YACb,YAAY;YACZ,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAA4B,EAAE,OAA0B;QACpF,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC;YAC5C,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAAe,EACf,WAAuC,EACvC,OAAwB;QAExB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC;YAC5C,QAAQ,EAAE,EAAE,WAAW,EAAE;YACzB,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,YAAY;IACa;IAA7B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErD,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAwB;QAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,KAAK;YACb,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;YAC1C,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAA2B,EAAE,OAAwB;QACjF,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC;YAC3C,QAAQ,EAAE,IAAI;YACd,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,OAAwB;QACvD,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnC,OAAO,aAAa,CAClB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC;YAC9C,eAAe,EAAE,CAAC,GAAG,CAAC;YACtB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/dist/errors.d.ts

@@ -0,0 +1,58 @@
+import type { ValidationIssue } from "relay-types";
+/** Server `error.message` is kept up to this many Unicode code points. */
+export declare const MAX_ERROR_MESSAGE_CODE_POINTS = 500;
+export declare function capCodePoints(value: string, max: number): string;
+export interface RelayErrorInit {
+    status: number;
+    message: string;
+    code?: string;
+    requestId?: string;
+    retryAfter?: number;
+    existingEventId?: string;
+    issues?: readonly ValidationIssue[];
+    eventAllowance?: number;
+    eventsUsed?: number;
+    scheduleLimit?: number;
+    expiresAt?: string | null;
+}
+/**
+ * Failure from `/api/v1`. `message` is the server `error.message`, capped, and never includes
+ * request credentials. `existingEventId` is set from a 409 `existing_event_id`. `retryAfter`
+ * is the `Retry-After` delta-seconds, when the header is a non-negative integer.
+ */
+export declare class RelayError extends Error {
+    readonly name = "RelayError";
+    readonly status: number;
+    readonly code?: string;
+    readonly requestId?: string;
+    readonly retryAfter?: number;
+    readonly existingEventId?: string;
+    readonly issues?: readonly ValidationIssue[];
+    readonly eventAllowance?: number;
+    readonly eventsUsed?: number;
+    readonly scheduleLimit?: number;
+    readonly expiresAt?: string | null;
+    constructor(init: RelayErrorInit);
+}
+export declare const WEBHOOK_REASONS: readonly ["headers", "signature", "timestamp", "delivery", "body", "mismatch"];
+export type WebhookVerificationReason = (typeof WEBHOOK_REASONS)[number];
+/** Verification failure. `message` is fixed for `reason` and does not include key material. */
+export declare class WebhookVerificationError extends Error {
+    readonly name = "WebhookVerificationError";
+    readonly reason: WebhookVerificationReason;
+    constructor(reason: WebhookVerificationReason);
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function invalidJsonMessage(): string;
+export declare function fallbackErrorMessage(): string;
+export declare function serverMessage(value: unknown): string;
+export declare function toRelayError(input: {
+    status: number;
+    parsed: unknown;
+    requestId: string | undefined;
+    retryAfter: number | undefined;
+}): RelayError;
+export declare function readRequestId(header: string | null): string | undefined;
+/** `Retry-After` delta-seconds. HTTP-date values are ignored. */
+export declare function readRetryAfter(header: string | null): number | undefined;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAKjD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIhE;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,SAAkB,IAAI,gBAAgB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEvB,IAAI,EAAE,cAAc;CAcjC;AAED,eAAO,MAAM,eAAe,gFAAiF,CAAC;AAE9G,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAWzE,+FAA+F;AAC/F,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,SAAkB,IAAI,8BAA8B;IACpD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;gBAE/B,MAAM,EAAE,yBAAyB;CAK9C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGpD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,UAAU,CAwCb;AA4BD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAKvE;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAOxE"}

package/dist/errors.js

@@ -0,0 +1,175 @@
+import { isPrintableAscii } from "./sign.js";
+/** Server `error.message` is kept up to this many Unicode code points. */
+export const MAX_ERROR_MESSAGE_CODE_POINTS = 500;
+const FALLBACK_MESSAGE = "Relay request failed";
+const INVALID_JSON_MESSAGE = "Relay response was not valid JSON";
+export function capCodePoints(value, max) {
+    const points = [...value];
+    if (points.length <= max)
+        return value;
+    return points.slice(0, max).join("");
+}
+/**
+ * Failure from `/api/v1`. `message` is the server `error.message`, capped, and never includes
+ * request credentials. `existingEventId` is set from a 409 `existing_event_id`. `retryAfter`
+ * is the `Retry-After` delta-seconds, when the header is a non-negative integer.
+ */
+export class RelayError extends Error {
+    name = "RelayError";
+    status;
+    code;
+    requestId;
+    retryAfter;
+    existingEventId;
+    issues;
+    eventAllowance;
+    eventsUsed;
+    scheduleLimit;
+    expiresAt;
+    constructor(init) {
+        super(init.message);
+        Object.setPrototypeOf(this, new.target.prototype);
+        this.status = init.status;
+        if (init.code !== undefined)
+            this.code = init.code;
+        if (init.requestId !== undefined)
+            this.requestId = init.requestId;
+        if (init.retryAfter !== undefined)
+            this.retryAfter = init.retryAfter;
+        if (init.existingEventId !== undefined)
+            this.existingEventId = init.existingEventId;
+        if (init.issues !== undefined)
+            this.issues = init.issues;
+        if (init.eventAllowance !== undefined)
+            this.eventAllowance = init.eventAllowance;
+        if (init.eventsUsed !== undefined)
+            this.eventsUsed = init.eventsUsed;
+        if (init.scheduleLimit !== undefined)
+            this.scheduleLimit = init.scheduleLimit;
+        if (init.expiresAt !== undefined)
+            this.expiresAt = init.expiresAt;
+    }
+}
+export const WEBHOOK_REASONS = ["headers", "signature", "timestamp", "delivery", "body", "mismatch"];
+const WEBHOOK_MESSAGES = {
+    headers: "webhook headers are missing or invalid",
+    signature: "webhook signature verification failed",
+    timestamp: "webhook timestamp is invalid",
+    delivery: "webhook delivery signature verification failed",
+    body: "webhook body is invalid",
+    mismatch: "webhook payload does not match signed headers",
+};
+/** Verification failure. `message` is fixed for `reason` and does not include key material. */
+export class WebhookVerificationError extends Error {
+    name = "WebhookVerificationError";
+    reason;
+    constructor(reason) {
+        super(WEBHOOK_MESSAGES[reason]);
+        Object.setPrototypeOf(this, new.target.prototype);
+        this.reason = reason;
+    }
+}
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function invalidJsonMessage() {
+    return INVALID_JSON_MESSAGE;
+}
+export function fallbackErrorMessage() {
+    return FALLBACK_MESSAGE;
+}
+export function serverMessage(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return FALLBACK_MESSAGE;
+    return capCodePoints(value, MAX_ERROR_MESSAGE_CODE_POINTS);
+}
+export function toRelayError(input) {
+    const init = {
+        status: input.status,
+        message: FALLBACK_MESSAGE,
+    };
+    if (input.requestId !== undefined)
+        init.requestId = input.requestId;
+    if (input.retryAfter !== undefined)
+        init.retryAfter = input.retryAfter;
+    if (!isRecord(input.parsed) || !isRecord(input.parsed.error)) {
+        return new RelayError(init);
+    }
+    const error = input.parsed.error;
+    init.message = serverMessage(error.message);
+    if (typeof error.code === "string" && isPrintableAscii(error.code) && error.code.length > 0 && error.code.length <= 64) {
+        init.code = error.code;
+    }
+    if (typeof error.existing_event_id === "string" && error.existing_event_id.length > 0) {
+        init.existingEventId = capCodePoints(error.existing_event_id, 200);
+    }
+    const issues = readIssues(error.issues);
+    if (issues !== undefined)
+        init.issues = issues;
+    const eventAllowance = readCount(error.event_allowance);
+    if (eventAllowance !== undefined)
+        init.eventAllowance = eventAllowance;
+    const eventsUsed = readCount(error.events_used);
+    if (eventsUsed !== undefined)
+        init.eventsUsed = eventsUsed;
+    const scheduleLimit = readCount(error.schedule_limit);
+    if (scheduleLimit !== undefined)
+        init.scheduleLimit = scheduleLimit;
+    if (error.expires_at === null) {
+        init.expiresAt = null;
+    }
+    else if (typeof error.expires_at === "string" && isPrintableAscii(error.expires_at) && error.expires_at.length <= 64) {
+        init.expiresAt = error.expires_at;
+    }
+    return new RelayError(init);
+}
+function readCount(value) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value))
+        return undefined;
+    return value;
+}
+function readIssues(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const issues = [];
+    for (const item of value) {
+        if (!isRecord(item) || typeof item.message !== "string" || !Array.isArray(item.path))
+            continue;
+        const path = [];
+        let valid = true;
+        for (const part of item.path) {
+            if (typeof part !== "string") {
+                valid = false;
+                break;
+            }
+            path.push(capCodePoints(part, 200));
+        }
+        if (!valid)
+            continue;
+        issues.push({ path, message: capCodePoints(item.message, MAX_ERROR_MESSAGE_CODE_POINTS) });
+        if (issues.length === 20)
+            break;
+    }
+    return issues.length > 0 ? issues : undefined;
+}
+export function readRequestId(header) {
+    if (header === null)
+        return undefined;
+    const trimmed = header.trim();
+    if (trimmed.length === 0 || !isPrintableAscii(trimmed))
+        return undefined;
+    return capCodePoints(trimmed, 200);
+}
+/** `Retry-After` delta-seconds. HTTP-date values are ignored. */
+export function readRetryAfter(header) {
+    if (header === null)
+        return undefined;
+    const trimmed = header.trim();
+    if (!/^[0-9]+$/.test(trimmed))
+        return undefined;
+    const value = Number(trimmed);
+    if (!Number.isSafeInteger(value))
+        return undefined;
+    return value;
+}
+//# sourceMappingURL=errors.js.map