@neetru/sdk 2.1.1 → 2.3.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { o as NeetruClientConfig, N as NeetruClient } from './types-Cfb-qeDg.cjs';
-export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruEnv, v as NeetruSqlClient, w as NeetruUser, x as NotificationsNamespace, P as Product, y as ProductNotification, z as ProductNotificationSeverity, B as ProductPlan, F as ProductStatus, R as RegisterWebhookInput, G as ResolvedConfig, S as SendNotificationInput, H as SignInOptions, J as SupportNamespace, K as SupportSeverity, O as SupportStatus, Q as SupportTicket, T as TelemetryEventAck, U as TelemetryEventInput, X as UsageEventInput, Y as UsageNamespace, Z as UsageQuota, _ as WebhookEndpoint, $ as WebhookEvent, a0 as WebhookTestResult, a1 as WebhooksNamespace, a2 as createCheckoutNamespace, a3 as createNeetruDb, a4 as createNotificationsNamespace, a6 as createWebhooksNamespace } from './types-Cfb-qeDg.cjs';
+import { o as NeetruClientConfig, N as NeetruClient } from './types-B6YJrynl.cjs';
+export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruDbTransport, v as NeetruEnv, w as NeetruSqlClient, x as NeetruUser, y as NotificationsNamespace, P as Product, z as ProductNotification, B as ProductNotificationSeverity, F as ProductPlan, G as ProductStatus, R as RegisterWebhookInput, H as ResolvedConfig, S as SendNotificationInput, I as SignInOptions, K as SupportNamespace, O as SupportSeverity, Q as SupportStatus, T as SupportTicket, U as TelemetryEventAck, V as TelemetryEventInput, Y as UsageEventInput, Z as UsageNamespace, _ as UsageQuota, $ as VerifyTokenOptions, a0 as WebhookEndpoint, a1 as WebhookEvent, a2 as WebhookTestResult, a3 as WebhooksNamespace, a4 as createCheckoutNamespace, a5 as createNeetruDb, a6 as createNotificationsNamespace, a8 as createWebhooksNamespace } from './types-B6YJrynl.cjs';
 export { createNeetruClient } from './auth.cjs';
 export { NeetruError, NeetruErrorCode } from './errors.cjs';
 export { D as DbBatchOp, b as DbChangeType, c as DbCollectionRef, d as DbDoc, e as DbDocRef, f as DbGetResult, g as DbListResult, h as DbQuery } from './collection-ref-DqAAhuhX.cjs';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { o as NeetruClientConfig, N as NeetruClient } from './types-V1EfjR1p.js';
-export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruEnv, v as NeetruSqlClient, w as NeetruUser, x as NotificationsNamespace, P as Product, y as ProductNotification, z as ProductNotificationSeverity, B as ProductPlan, F as ProductStatus, R as RegisterWebhookInput, G as ResolvedConfig, S as SendNotificationInput, H as SignInOptions, J as SupportNamespace, K as SupportSeverity, O as SupportStatus, Q as SupportTicket, T as TelemetryEventAck, U as TelemetryEventInput, X as UsageEventInput, Y as UsageNamespace, Z as UsageQuota, _ as WebhookEndpoint, $ as WebhookEvent, a0 as WebhookTestResult, a1 as WebhooksNamespace, a2 as createCheckoutNamespace, a3 as createNeetruDb, a4 as createNotificationsNamespace, a6 as createWebhooksNamespace } from './types-V1EfjR1p.js';
+import { o as NeetruClientConfig, N as NeetruClient } from './types-DvhtZ4bi.js';
+export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruDbTransport, v as NeetruEnv, w as NeetruSqlClient, x as NeetruUser, y as NotificationsNamespace, P as Product, z as ProductNotification, B as ProductNotificationSeverity, F as ProductPlan, G as ProductStatus, R as RegisterWebhookInput, H as ResolvedConfig, S as SendNotificationInput, I as SignInOptions, K as SupportNamespace, O as SupportSeverity, Q as SupportStatus, T as SupportTicket, U as TelemetryEventAck, V as TelemetryEventInput, Y as UsageEventInput, Z as UsageNamespace, _ as UsageQuota, $ as VerifyTokenOptions, a0 as WebhookEndpoint, a1 as WebhookEvent, a2 as WebhookTestResult, a3 as WebhooksNamespace, a4 as createCheckoutNamespace, a5 as createNeetruDb, a6 as createNotificationsNamespace, a8 as createWebhooksNamespace } from './types-DvhtZ4bi.js';
 export { createNeetruClient } from './auth.js';
 export { NeetruError, NeetruErrorCode } from './errors.js';
 export { D as DbBatchOp, b as DbChangeType, c as DbCollectionRef, d as DbDoc, e as DbDocRef, f as DbGetResult, g as DbListResult, h as DbQuery } from './collection-ref-DqAAhuhX.js';

package/dist/index.mjs

@@ -1,3 +1,4 @@
+import { jwtVerify, createRemoteJWKSet } from 'jose';
 import { openDB } from 'idb';
 
 var __defProp = Object.defineProperty;
@@ -1160,6 +1161,125 @@ var LocalStore = class {
   }
 };
 
+// src/db/offline/memory-store.ts
+var MemoryStore = class {
+  // store `documents` — key: `${collection}\0${id}`
+  _docs = /* @__PURE__ */ new Map();
+  // store `mutations` — key: mutationId
+  _mutations = /* @__PURE__ */ new Map();
+  // store `sync_meta` — key: string
+  _meta = /* @__PURE__ */ new Map();
+  // store `conflict_log` — autoIncrement int key
+  _conflicts = [];
+  _conflictSeq = 0;
+  // store `query_cache` — key: queryHash
+  _queryCache = /* @__PURE__ */ new Map();
+  // ─── Ciclo de vida (no-ops) ─────────────────────────────────────────────────
+  async open() {
+  }
+  async close() {
+    this._docs.clear();
+    this._mutations.clear();
+    this._meta.clear();
+    this._conflicts.splice(0);
+    this._conflictSeq = 0;
+    this._queryCache.clear();
+  }
+  // ─── Documents ─────────────────────────────────────────────────────────────
+  async getDoc(collection, id) {
+    const key = `${collection}\0${id}`;
+    return this._docs.get(key) ?? null;
+  }
+  async putDoc(doc) {
+    const key = `${doc.collection}\0${doc.id}`;
+    this._docs.set(key, doc);
+  }
+  async deleteDoc(collection, id) {
+    const key = `${collection}\0${id}`;
+    const existing = this._docs.get(key);
+    if (!existing) return;
+    this._docs.set(key, {
+      ...existing,
+      meta: {
+        ...existing.meta,
+        deleted: true,
+        updatedAtLocal: Date.now()
+      }
+    });
+  }
+  async listDocs(collection, query) {
+    const rawDocs = Array.from(this._docs.values()).filter(
+      (d) => d.collection === collection
+    );
+    return QueryEngine.evaluate(rawDocs, query);
+  }
+  // ─── Sync meta ──────────────────────────────────────────────────────────────
+  async getMeta(key) {
+    return this._meta.get(key) ?? null;
+  }
+  async setMeta(key, value) {
+    this._meta.set(key, value);
+  }
+  // ─── Conflict log ────────────────────────────────────────────────────────────
+  async appendConflict(record) {
+    const id = ++this._conflictSeq;
+    const full = { ...record, id };
+    this._conflicts.push(full);
+    return full;
+  }
+  async listConflicts(options) {
+    if (options?.delivered !== void 0) {
+      return this._conflicts.filter((r) => r.delivered === options.delivered);
+    }
+    return [...this._conflicts];
+  }
+  async markConflictDelivered(id) {
+    const entry = this._conflicts.find((r) => r.id === id);
+    if (entry) entry.delivered = true;
+  }
+  // ─── Mutations ───────────────────────────────────────────────────────────────
+  async putMutation(mutation) {
+    this._mutations.set(mutation.mutationId, { ...mutation });
+  }
+  async getMutation(mutationId) {
+    return this._mutations.get(mutationId) ?? null;
+  }
+  async listMutations(options) {
+    let all = Array.from(this._mutations.values());
+    if (options?.status !== void 0) {
+      all = all.filter((m) => m.status === options.status);
+    } else if (options?.collection !== void 0 && options.docId !== void 0) {
+      all = all.filter(
+        (m) => m.collection === options.collection && m.docId === options.docId
+      );
+    } else if (options?.collection !== void 0) {
+      all = all.filter((m) => m.collection === options.collection);
+    }
+    return all.sort((a, b) => a.seq - b.seq);
+  }
+  async deleteMutation(mutationId) {
+    this._mutations.delete(mutationId);
+  }
+  // ─── Collection discovery ────────────────────────────────────────────────────
+  async listCollections() {
+    const collections = /* @__PURE__ */ new Set();
+    for (const doc of this._docs.values()) {
+      collections.add(doc.collection);
+    }
+    return Array.from(collections);
+  }
+  // ─── Query cache ─────────────────────────────────────────────────────────────
+  async getQueryCache(queryHash) {
+    return this._queryCache.get(queryHash) ?? null;
+  }
+  async putQueryCache(entry) {
+    this._queryCache.set(entry.queryHash, { ...entry });
+  }
+  async deleteQueryCache(queryHash) {
+    this._queryCache.delete(queryHash);
+  }
+};
+
 // src/db/offline/mutation-queue.ts
 function generateUUIDv4() {
   if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -2706,6 +2826,9 @@ var TabCoordinator = class {
 };
 
 // src/db/collection-ref.ts
+function isIndexedDBUnavailable() {
+  return typeof indexedDB === "undefined" || typeof window === "undefined";
+}
 var COLL_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/;
 function assertValidCollection(name) {
   if (!COLL_RE.test(name)) {
@@ -3247,7 +3370,7 @@ var NeetruDbDocumentsImpl = class {
   }
 };
 async function createOfflineDocumentsNamespace(opts) {
-  const store = new LocalStore(opts.dbName);
+  const store = isIndexedDBUnavailable() ? new MemoryStore() : new LocalStore(opts.dbName);
   await store.open();
   const queue = new MutationQueue(store);
   const resolver = new ConflictResolver();
@@ -4017,16 +4140,16 @@ var defaultWebSocketFactory = (url) => {
 // src/db/client-db.ts
 var DATASTORE_COLLECTION_ENDPOINT = (collection) => `/api/sdk/v1/datastore/${encodeURIComponent(collection)}`;
 var DATASTORE_DOC_ENDPOINT = (collection, docId) => `/api/sdk/v1/datastore/${encodeURIComponent(collection)}/${encodeURIComponent(docId)}`;
-function resolveTransport(engine, opts, config) {
+function resolveTransport(transport, opts, config) {
   if (opts._transport) {
     return opts._transport;
   }
-  if (engine === "firestore") {
+  if (transport === "firestore") {
     if (opts.firestoreTransport) {
       return opts.firestoreTransport;
     }
   }
-  if (engine === "nosql-vm" && opts.realtimeGatewayUrl) {
+  if (transport === "nosql-vm" && opts.realtimeGatewayUrl) {
     return createWebSocketSyncTransport(opts.realtimeGatewayUrl, config, opts);
   }
   return createRestSyncTransport(config);
@@ -4170,8 +4293,18 @@ function buildTicketProvider(config, opts) {
   };
 }
 function createNeetruDb(config, dbOpts = {}) {
-  const engine = dbOpts.engine ?? "rest";
-  const transport = resolveTransport(engine, dbOpts, config);
+  let resolvedTransport;
+  if (dbOpts.transport !== void 0) {
+    resolvedTransport = dbOpts.transport;
+  } else if (dbOpts.engine !== void 0) {
+    console.warn(
+      '[neetru/sdk] NeetruDbOptions.engine est\xE1 depreciado e ser\xE1 removido em v3.0. Use NeetruDbOptions.transport em vez de engine. Valores v\xE1lidos: "rest" | "firestore" | "nosql-vm". Nota: "engine" no SDK configura o TRANSPORTE (REST/Firestore/WebSocket), n\xE3o o storage engine do admin database (firestore-instance, cloud-sql-postgres, \u2026).'
+    );
+    resolvedTransport = dbOpts.engine;
+  } else {
+    resolvedTransport = "rest";
+  }
+  const transport = resolveTransport(resolvedTransport, dbOpts, config);
   const dbId = dbOpts.dbId ?? "default";
   const dbName = dbOpts.dbName ?? `neetru-db__${config.productId ?? "sdk"}__${dbId}__${config.env}`;
   let _docsPromise = null;
@@ -4843,6 +4976,61 @@ var MockAuth = class {
       this._listeners.delete(listener);
     };
   }
+  /**
+   * Mock de `verifyToken` — decodifica o JWT sem verificar assinatura (pra testes).
+   * Em dev, retorna o user atual do mock se já estiver logado. Aceita qualquer token
+   * não-vazio sem chamar rede.
+   *
+   * Para simular falhas em testes, use `MockAuth.__mockVerifyToken(fn)`.
+   */
+  async verifyToken(token) {
+    if (this._verifyTokenOverride) {
+      return this._verifyTokenOverride(token);
+    }
+    if (!token) {
+      throw Object.assign(new Error("Token inv\xE1lido"), { code: "token_invalid_signature" });
+    }
+    try {
+      const parts = token.split(".");
+      if (parts.length === 3) {
+        const b64 = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+        const pad = "=".repeat((4 - b64.length % 4) % 4);
+        const decoded = JSON.parse(
+          typeof atob === "function" ? atob(b64 + pad) : Buffer.from(b64 + pad, "base64").toString("utf-8")
+        );
+        if (typeof decoded.sub === "string") {
+          return {
+            uid: decoded.sub,
+            email: typeof decoded.email === "string" ? decoded.email : "",
+            emailVerified: typeof decoded.email_verified === "boolean" ? decoded.email_verified : void 0,
+            displayName: typeof decoded.name === "string" ? decoded.name : void 0,
+            photoURL: typeof decoded.picture === "string" ? decoded.picture : void 0,
+            isStaff: decoded.is_staff === true,
+            isCustomer: decoded.is_customer === true,
+            tenantId: typeof decoded.tenant_id === "string" ? decoded.tenant_id : void 0,
+            ...decoded
+          };
+        }
+      }
+    } catch {
+    }
+    if (this._user) return this._user;
+    throw Object.assign(new Error("Nenhum user mock dispon\xEDvel"), { code: "token_invalid_signature" });
+  }
+  _verifyTokenOverride = null;
+  /**
+   * Injeta override pra `verifyToken` em testes — permite simular expiração,
+   * assinatura inválida etc sem precisar de JWT real.
+   *
+   * @example
+   * ```ts
+   * const mock = new MockAuth(null);
+   * mock.__mockVerifyToken(async () => { throw new NeetruError('token_expired', '...'); });
+   * ```
+   */
+  __mockVerifyToken(fn) {
+    this._verifyTokenOverride = fn;
+  }
   /** Helper de tests — força um user state arbitrário. */
   __setUser(user) {
     this._user = user;
@@ -5240,6 +5428,34 @@ function resolveEnv(configEnv) {
   }
   return "prod";
 }
+var _jwksCache = /* @__PURE__ */ new Map();
+var DEFAULT_JWKS_TTL_MS = 60 * 60 * 1e3;
+function _getJwks(jwksUrl, cacheTtlMs) {
+  const now = Date.now();
+  const cached = _jwksCache.get(jwksUrl);
+  if (cached && now - cached.createdAt < cacheTtlMs) {
+    return cached.jwks;
+  }
+  const jwks = createRemoteJWKSet(new URL(jwksUrl));
+  _jwksCache.set(jwksUrl, { jwks, createdAt: now });
+  return jwks;
+}
+function _jwtPayloadToUser(payload) {
+  const sub = payload.sub ?? "";
+  const email = typeof payload.email === "string" ? payload.email : "";
+  return {
+    uid: sub,
+    email,
+    emailVerified: typeof payload.email_verified === "boolean" ? payload.email_verified : void 0,
+    displayName: typeof payload.name === "string" ? payload.name : void 0,
+    photoURL: typeof payload.picture === "string" ? payload.picture : void 0,
+    isStaff: payload.is_staff === true,
+    isCustomer: payload.is_customer === true,
+    tenantId: typeof payload.tenant_id === "string" ? payload.tenant_id : void 0,
+    // Spreads todos os claims originais (aud, iss, iat, exp, etc).
+    ...payload
+  };
+}
 function createOidcAuthNamespace(config) {
   const STORAGE_KEY = "neetru_id_token";
   const listeners = /* @__PURE__ */ new Set();
@@ -5347,6 +5563,45 @@ function createOidcAuthNamespace(config) {
       return () => {
         listeners.delete(listener);
       };
+    },
+    async verifyToken(token, options) {
+      if (!token || typeof token !== "string") {
+        throw new NeetruError("token_invalid_signature", "token must be a non-empty string");
+      }
+      const overrideAuthUrl = typeof globalThis.NEETRU_AUTH_URL === "string" ? globalThis.NEETRU_AUTH_URL : null;
+      const idpOrigin = overrideAuthUrl ?? config.baseUrl.replace(/^https?:\/\/api\./, "https://auth.");
+      const issuer = idpOrigin;
+      const jwksUrl = `${idpOrigin}/api/v1/oauth/.well-known/jwks.json`;
+      const cacheTtlMs = options?.jwksCacheTtlMs ?? DEFAULT_JWKS_TTL_MS;
+      const audience = config.apiKey ? config.apiKey.split("_")[1] ?? void 0 : void 0;
+      const jwks = _getJwks(jwksUrl, cacheTtlMs);
+      try {
+        const { payload } = await jwtVerify(token, jwks, {
+          issuer,
+          ...audience ? { audience } : {},
+          algorithms: ["RS256"]
+        });
+        return _jwtPayloadToUser(payload);
+      } catch (err) {
+        const errName = err?.code ?? err?.name ?? "";
+        const errMsg = err?.message ?? String(err);
+        if (errName === "ERR_JWT_EXPIRED") {
+          throw new NeetruError("token_expired", `Token expired: ${errMsg}`);
+        }
+        if (errName === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED") {
+          throw new NeetruError("token_invalid_signature", `Token signature invalid: ${errMsg}`);
+        }
+        if (errName === "ERR_JWT_CLAIM_VALIDATION_FAILED") {
+          if (errMsg.includes('"aud"') || errMsg.includes("audience")) {
+            throw new NeetruError("token_invalid_audience", `Token audience mismatch: ${errMsg}`);
+          }
+          if (errMsg.includes('"iss"') || errMsg.includes("issuer")) {
+            throw new NeetruError("token_invalid_issuer", `Token issuer mismatch: ${errMsg}`);
+          }
+          throw new NeetruError("token_invalid_signature", `Token claim validation failed: ${errMsg}`);
+        }
+        throw new NeetruError("token_invalid_signature", `Token verification failed: ${errMsg}`);
+      }
     }
   };
 }