@neetru/sdk 3.0.2 → 3.1.1

package/dist/index.d.cts

@@ -1,10 +1,15 @@
 export { createNeetruClient } from './auth.cjs';
 export { NeetruError, NeetruErrorCode } from './errors.cjs';
-export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, N as NeetruClient, o as NeetruClientConfig, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruDbTransport, v as NeetruEnv, w as NeetruSqlClient, x as NeetruUser, y as NotificationScopeOptions, z as NotificationsNamespace, P as Product, B as ProductNotification, F as ProductNotificationSeverity, G as ProductPlan, H as ProductStatus, R as RegisterWebhookInput, I as ResolvedConfig, S as SendNotificationInput, J as SignInOptions, O as SupportNamespace, Q as SupportSeverity, T as SupportStatus, U as SupportTicket, V as TelemetryEventAck, W as TelemetryEventInput, Z as UsageEventInput, _ as UsageNamespace, $ as UsageQuota, a0 as VerifyTokenOptions, a1 as WebhookEndpoint, a2 as WebhookEvent, a3 as WebhookScopeOptions, a4 as WebhookTestResult, a5 as WebhooksNamespace, a6 as createCheckoutNamespace, a7 as createNeetruDb, a8 as createNotificationsNamespace, aa as createWebhooksNamespace, ac as verifyWebhookSignature } from './types-Dc4bjrrt.cjs';
-export { D as DbBatchOp, b as DbChangeType, c as DbCollectionRef, d as DbDoc, e as DbDocRef, f as DbGetResult, g as DbListResult, h as DbQuery, F as FieldSentinel, I as IncrementSentinel, N as NEETRU_SENTINEL_KEY, S as ServerTimestampSentinel, W as WithFieldSentinels, l as increment, m as isFieldSentinel, n as isIncrementSentinel, o as isServerTimestampSentinel, s as serverTimestamp } from './collection-ref-BDdfD87k.cjs';
+export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, k as CreateTicketInput, D as DEFAULT_BASE_URL, l as DbBatchOp, m as DbChangeType, n as DbCollectionRef, o as DbDoc, p as DbDocRef, q as DbGetResult, r as DbListResult, s as DbNamespace, t as DbQuery, u as DbSqlLease, v as DbWhereFilter, E as EntitlementCheck, F as FieldSentinel, I as IncrementSentinel, L as ListNotificationsOptions, M as MockCheckout, x as MockNotifications, y as MockWebhooks, N as NEETRU_SENTINEL_KEY, z as NeetruClient, B as NeetruClientConfig, G as NeetruDb, J as NeetruDbEngine, K as NeetruDbError, O as NeetruDbErrorCode, P as NeetruDbOptions, Q as NeetruDbTransport, R as NeetruEnv, S as NeetruSqlClient, T as NeetruUser, U as NotificationScopeOptions, V as NotificationsNamespace, W as Product, X as ProductNotification, Y as ProductNotificationSeverity, Z as ProductPlan, _ as ProductStatus, a0 as RegisterWebhookInput, a1 as ResolvedConfig, a2 as SendNotificationInput, a3 as ServerTimestampSentinel, a4 as SignInOptions, a6 as SupportNamespace, a7 as SupportSeverity, a8 as SupportStatus, a9 as SupportTicket, ab as TelemetryEventAck, ac as TelemetryEventInput, ag as UsageEventInput, ah as UsageNamespace, ai as UsageQuota, aj as VerifyTokenOptions, ak as VerifyWebhookRequestOptions, al as VerifyWebhookRequestResult, am as WebhookEndpoint, an as WebhookEvent, ao as WebhookScopeOptions, ap as WebhookTestResult, aq as WebhooksNamespace, ar as WithFieldSentinels, as as createCheckoutNamespace, at as createNeetruDb, au as createNotificationsNamespace, aw as createWebhooksNamespace, ay as increment, az as isFieldSentinel, aA as isIncrementSentinel, aB as isServerTimestampSentinel, aC as serverTimestamp, aD as verifyWebhookRequest, aE as verifyWebhookSignature } from './types-DePdSU3P.cjs';
 export { DEV_FIXTURE_USER, MockAuth, MockDb, MockEntitlements, MockSupport, MockUsage } from './mocks.cjs';
 import 'drizzle-orm/node-postgres';
 
+/**
+ * Verifica se a versão do Core (`X-Neetru-Version`) é compatível com a SDK major.
+ * Emite `console.warn` quando incompatível (uma vez por processo por versão detectada).
+ */
+declare function checkCoreVersionCompat(coreVersion: string): void;
+
 /**
  * @neetru/sdk — biblioteca runtime para consumir o ecossistema Neetru.
  *
@@ -37,6 +42,6 @@ import 'drizzle-orm/node-postgres';
  */
 
 /** Versão do SDK — exportada explicitamente pra detecção em runtime. */
-declare const VERSION: "3.0.1";
+declare const VERSION: "3.1.1";
 
-export { VERSION };
+export { VERSION, checkCoreVersionCompat };

package/dist/index.d.ts

@@ -1,10 +1,15 @@
 export { createNeetruClient } from './auth.js';
 export { NeetruError, NeetruErrorCode } from './errors.js';
-export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, i as CreateTicketInput, D as DEFAULT_BASE_URL, j as DbNamespace, k as DbSqlLease, l as DbWhereFilter, E as EntitlementCheck, L as ListNotificationsOptions, M as MockCheckout, m as MockNotifications, n as MockWebhooks, N as NeetruClient, o as NeetruClientConfig, p as NeetruDb, q as NeetruDbEngine, r as NeetruDbError, s as NeetruDbErrorCode, t as NeetruDbOptions, u as NeetruDbTransport, v as NeetruEnv, w as NeetruSqlClient, x as NeetruUser, y as NotificationScopeOptions, z as NotificationsNamespace, P as Product, B as ProductNotification, F as ProductNotificationSeverity, G as ProductPlan, H as ProductStatus, R as RegisterWebhookInput, I as ResolvedConfig, S as SendNotificationInput, J as SignInOptions, O as SupportNamespace, Q as SupportSeverity, T as SupportStatus, U as SupportTicket, V as TelemetryEventAck, W as TelemetryEventInput, Z as UsageEventInput, _ as UsageNamespace, $ as UsageQuota, a0 as VerifyTokenOptions, a1 as WebhookEndpoint, a2 as WebhookEvent, a3 as WebhookScopeOptions, a4 as WebhookTestResult, a5 as WebhooksNamespace, a6 as createCheckoutNamespace, a7 as createNeetruDb, a8 as createNotificationsNamespace, aa as createWebhooksNamespace, ac as verifyWebhookSignature } from './types-D7zVkO3n.js';
-export { D as DbBatchOp, b as DbChangeType, c as DbCollectionRef, d as DbDoc, e as DbDocRef, f as DbGetResult, g as DbListResult, h as DbQuery, F as FieldSentinel, I as IncrementSentinel, N as NEETRU_SENTINEL_KEY, S as ServerTimestampSentinel, W as WithFieldSentinels, l as increment, m as isFieldSentinel, n as isIncrementSentinel, o as isServerTimestampSentinel, s as serverTimestamp } from './collection-ref-BDdfD87k.js';
+export { A as AuthNamespace, a as AuthStateListener, C as CatalogListOptions, b as CatalogListResponse, c as CheckoutIntentInfo, d as CheckoutIntentStatus, e as CheckoutNamespace, f as CheckoutStartInput, g as CheckoutStartResult, h as CheckoutTenantType, k as CreateTicketInput, D as DEFAULT_BASE_URL, l as DbBatchOp, m as DbChangeType, n as DbCollectionRef, o as DbDoc, p as DbDocRef, q as DbGetResult, r as DbListResult, s as DbNamespace, t as DbQuery, u as DbSqlLease, v as DbWhereFilter, E as EntitlementCheck, F as FieldSentinel, I as IncrementSentinel, L as ListNotificationsOptions, M as MockCheckout, x as MockNotifications, y as MockWebhooks, N as NEETRU_SENTINEL_KEY, z as NeetruClient, B as NeetruClientConfig, G as NeetruDb, J as NeetruDbEngine, K as NeetruDbError, O as NeetruDbErrorCode, P as NeetruDbOptions, Q as NeetruDbTransport, R as NeetruEnv, S as NeetruSqlClient, T as NeetruUser, U as NotificationScopeOptions, V as NotificationsNamespace, W as Product, X as ProductNotification, Y as ProductNotificationSeverity, Z as ProductPlan, _ as ProductStatus, a0 as RegisterWebhookInput, a1 as ResolvedConfig, a2 as SendNotificationInput, a3 as ServerTimestampSentinel, a4 as SignInOptions, a6 as SupportNamespace, a7 as SupportSeverity, a8 as SupportStatus, a9 as SupportTicket, ab as TelemetryEventAck, ac as TelemetryEventInput, ag as UsageEventInput, ah as UsageNamespace, ai as UsageQuota, aj as VerifyTokenOptions, ak as VerifyWebhookRequestOptions, al as VerifyWebhookRequestResult, am as WebhookEndpoint, an as WebhookEvent, ao as WebhookScopeOptions, ap as WebhookTestResult, aq as WebhooksNamespace, ar as WithFieldSentinels, as as createCheckoutNamespace, at as createNeetruDb, au as createNotificationsNamespace, aw as createWebhooksNamespace, ay as increment, az as isFieldSentinel, aA as isIncrementSentinel, aB as isServerTimestampSentinel, aC as serverTimestamp, aD as verifyWebhookRequest, aE as verifyWebhookSignature } from './types-B3XFHD4A.js';
 export { DEV_FIXTURE_USER, MockAuth, MockDb, MockEntitlements, MockSupport, MockUsage } from './mocks.js';
 import 'drizzle-orm/node-postgres';
 
+/**
+ * Verifica se a versão do Core (`X-Neetru-Version`) é compatível com a SDK major.
+ * Emite `console.warn` quando incompatível (uma vez por processo por versão detectada).
+ */
+declare function checkCoreVersionCompat(coreVersion: string): void;
+
 /**
  * @neetru/sdk — biblioteca runtime para consumir o ecossistema Neetru.
  *
@@ -37,6 +42,6 @@ import 'drizzle-orm/node-postgres';
  */
 
 /** Versão do SDK — exportada explicitamente pra detecção em runtime. */
-declare const VERSION: "3.0.1";
+declare const VERSION: "3.1.1";
 
-export { VERSION };
+export { VERSION, checkCoreVersionCompat };

package/dist/index.mjs

@@ -51,8 +51,47 @@ var init_idempotency = __esm({
 // src/http.ts
 var http_exports = {};
 __export(http_exports, {
+  checkCoreVersionCompat: () => checkCoreVersionCompat,
   httpRequest: () => httpRequest
 });
+function stripRevision(v) {
+  return v.split("+")[0] ?? v;
+}
+function compareCalVer(a, b) {
+  const partsA = stripRevision(a).split(".").map(Number);
+  const partsB = stripRevision(b).split(".").map(Number);
+  const len = Math.max(partsA.length, partsB.length);
+  for (let i = 0; i < len; i++) {
+    const pa = partsA[i] ?? 0;
+    const pb = partsB[i] ?? 0;
+    if (pa !== pb) return pa - pb;
+  }
+  return 0;
+}
+function getSdkMajor() {
+  try {
+    const ver = globalThis.__NEETRU_SDK_VERSION__;
+    if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
+  } catch {
+  }
+  return 3;
+}
+function checkCoreVersionCompat(coreVersion) {
+  if (!coreVersion) return;
+  const sdkMajor = getSdkMajor();
+  const minCore = COMPAT_MATRIX[sdkMajor];
+  if (!minCore) return;
+  const stripped = stripRevision(coreVersion);
+  if (compareCalVer(stripped, minCore) < 0) {
+    const key = `${sdkMajor}:${stripped}`;
+    if (!_warnedCoreTooOld.has(key)) {
+      _warnedCoreTooOld.add(key);
+      console.warn(
+        `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${coreVersion}" \xE9 anterior ao m\xEDnimo recomendado "${minCore}" para SDK major ${sdkMajor}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
+      );
+    }
+  }
+}
 function backoffMs(attempt) {
   const base = 200 * Math.pow(4, attempt);
   const jitter = base * 0.2 * (Math.random() * 2 - 1);
@@ -61,11 +100,11 @@ function backoffMs(attempt) {
 function parseRetryAfter(value) {
   if (!value) return null;
   const secs = Number(value);
-  if (Number.isFinite(secs) && secs >= 0) return Math.round(secs * 1e3);
+  if (Number.isFinite(secs) && secs >= 0) return Math.min(Math.round(secs * 1e3), MAX_RETRY_AFTER_MS);
   const dateMs = Date.parse(value);
   if (Number.isFinite(dateMs)) {
     const delta = dateMs - Date.now();
-    if (delta > 0) return delta;
+    if (delta > 0) return Math.min(delta, MAX_RETRY_AFTER_MS);
   }
   return null;
 }
@@ -76,6 +115,7 @@ function statusToCode(status) {
   if (status === 401) return "unauthorized";
   if (status === 403) return "forbidden";
   if (status === 404) return "not_found";
+  if (status === 409) return "conflict";
   if (status === 422 || status === 400) return "validation_failed";
   if (status === 429) return "rate_limited";
   if (status >= 500) return "server_error";
@@ -147,6 +187,8 @@ async function httpRequest(config, opts) {
     }
     const requestId = res.headers.get("x-request-id") ?? res.headers.get("x-correlation-id") ?? void 0;
     if (res.ok) {
+      const coreVersion = res.headers.get("x-neetru-version");
+      if (coreVersion) checkCoreVersionCompat(coreVersion);
       const parsed = await safeJson(res);
       return parsed;
     }
@@ -175,11 +217,17 @@ async function httpRequest(config, opts) {
   }
   throw lastError ?? new NeetruError("unknown", "unexpected httpRequest exit");
 }
-var DEFAULT_RETRIES_READ, DEFAULT_RETRIES_WRITE, READ_METHODS, RETRYABLE_CODES;
+var COMPAT_MATRIX, _warnedCoreTooOld, DEFAULT_RETRIES_READ, DEFAULT_RETRIES_WRITE, READ_METHODS, RETRYABLE_CODES, MAX_RETRY_AFTER_MS;
 var init_http = __esm({
   "src/http.ts"() {
     init_errors();
     init_idempotency();
+    COMPAT_MATRIX = {
+      // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
+      // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
+      3: "2026.05.1"
+    };
+    _warnedCoreTooOld = /* @__PURE__ */ new Set();
     DEFAULT_RETRIES_READ = 2;
     DEFAULT_RETRIES_WRITE = 0;
     READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
@@ -188,6 +236,7 @@ var init_http = __esm({
       "server_error",
       "network_error"
     ]);
+    MAX_RETRY_AFTER_MS = 6e4;
   }
 });
 
@@ -889,11 +938,11 @@ var TRACK_MAX_QUEUE = 50;
 function createTelemetryNamespace(config) {
   const queue = [];
   let flushTimer = null;
+  let _inflightDrain = null;
   async function drainQueue() {
     if (queue.length === 0) return;
     const batch = queue.splice(0, queue.length);
-    flushTimer = null;
-    await Promise.allSettled(
+    const work = Promise.allSettled(
       batch.map(async (ev) => {
         try {
           const body = { name: ev.name };
@@ -915,6 +964,14 @@ function createTelemetryNamespace(config) {
         }
       })
     );
+    _inflightDrain = work.then(() => {
+      _inflightDrain = null;
+    });
+    await work;
+    flushTimer = null;
+    if (queue.length > 0) {
+      scheduleFlush();
+    }
   }
   function scheduleFlush() {
     if (flushTimer) return;
@@ -977,6 +1034,10 @@ function createTelemetryNamespace(config) {
       if (input.name.length > 128) return;
       queue.push(input);
       if (queue.length >= TRACK_MAX_QUEUE) {
+        if (flushTimer) {
+          clearTimeout(flushTimer);
+          flushTimer = null;
+        }
         void drainQueue();
       } else {
         scheduleFlush();
@@ -991,6 +1052,7 @@ function createTelemetryNamespace(config) {
         clearTimeout(flushTimer);
         flushTimer = null;
       }
+      if (_inflightDrain) await _inflightDrain;
       await drainQueue();
     },
     /**
@@ -1479,6 +1541,31 @@ var LocalStore = class {
     this.db?.close();
     this.db = null;
   }
+  /**
+   * Apaga completamente o banco IndexedDB e o recria do zero.
+   *
+   * Ao contrário de `close()` + `open()` (que reabre o banco existente sem
+   * apagar dados), `clearAll()` chama `indexedDB.deleteDatabase(dbName)` e
+   * só então chama `open()` — garantindo que nenhum documento, mutação ou
+   * metadado sobrevive.
+   *
+   * BUG fix: `clearCache()` em `NeetruDbDocumentsImpl` chamava close+open,
+   * que reabre o mesmo banco. `clearAll()` é o método correto.
+   */
+  async clearAll() {
+    if (this.db !== null) {
+      this.db.close();
+      this.db = null;
+    }
+    await new Promise((resolve, reject) => {
+      const req = indexedDB.deleteDatabase(this.dbName);
+      req.onsuccess = () => resolve();
+      req.onerror = () => reject(req.error);
+      req.onblocked = () => {
+      };
+    });
+    await this.open();
+  }
   assertOpen() {
     if (this.db === null) {
       throw new Error("LocalStore: banco n\xE3o est\xE1 aberto. Chame open() primeiro.");
@@ -1686,6 +1773,12 @@ var MemoryStore = class {
   async open() {
   }
   async close() {
+  }
+  /**
+   * Apaga todos os dados em memória — equivalente ao `indexedDB.deleteDatabase`
+   * que `LocalStore.clearAll()` executa em ambientes com IndexedDB.
+   */
+  async clearAll() {
     this._docs.clear();
     this._mutations.clear();
     this._meta.clear();
@@ -2041,7 +2134,71 @@ var MutationQueue = class {
   }
 };
 
+// src/db/field-value.ts
+var NEETRU_SENTINEL_KEY = "__neetru__";
+function serverTimestamp() {
+  return { __neetru__: "serverTimestamp" };
+}
+function increment(n) {
+  if (typeof n !== "number" || !Number.isFinite(n)) {
+    throw new TypeError(
+      `increment(n): n deve ser um n\xFAmero finito (recebido: ${String(n)}).`
+    );
+  }
+  return { __neetru__: "increment", operand: n };
+}
+function isFieldSentinel(v) {
+  return typeof v === "object" && v !== null && NEETRU_SENTINEL_KEY in v && typeof v[NEETRU_SENTINEL_KEY] === "string";
+}
+function isServerTimestampSentinel(v) {
+  return isFieldSentinel(v) && v.__neetru__ === "serverTimestamp";
+}
+function isIncrementSentinel(v) {
+  return isFieldSentinel(v) && v.__neetru__ === "increment" && typeof v.operand === "number" && Number.isFinite(v.operand);
+}
+function resolveSentinelLocally(value, baseValue) {
+  if (isServerTimestampSentinel(value)) {
+    return Date.now();
+  }
+  if (isIncrementSentinel(value)) {
+    const base = typeof baseValue === "number" && Number.isFinite(baseValue) ? baseValue : 0;
+    return base + value.operand;
+  }
+  return value;
+}
+function resolveSentinelsLocally(data, existing) {
+  let touched = false;
+  const out = {};
+  for (const [k, v] of Object.entries(data)) {
+    if (isFieldSentinel(v)) {
+      touched = true;
+      out[k] = resolveSentinelLocally(v, existing?.[k]);
+    } else {
+      out[k] = v;
+    }
+  }
+  return touched ? out : data;
+}
+function hasFieldSentinel(data) {
+  for (const v of Object.values(data)) {
+    if (isFieldSentinel(v)) return true;
+  }
+  return false;
+}
+
 // src/db/offline/sync-engine.ts
+function hasSentinels(payload) {
+  return payload !== null && hasFieldSentinel(payload);
+}
+function sanitizeSentinelPayload(payload) {
+  if (payload === null) return null;
+  if (!hasFieldSentinel(payload)) return payload;
+  const out = {};
+  for (const [k, v] of Object.entries(payload)) {
+    if (!isFieldSentinel(v)) out[k] = v;
+  }
+  return out;
+}
 var SyncEngine = class {
   _store;
   _queue;
@@ -2147,6 +2304,8 @@ var SyncEngine = class {
       const phase1Ok = await this._phase1Push();
       if (!phase1Ok) {
         this._updateState({ status: "idle" });
+        this._refreshPendingWrites().catch(() => {
+        });
         this._syncing = false;
         return;
       }
@@ -2249,11 +2408,16 @@ var SyncEngine = class {
       }
       return;
     }
-    const newData = mut.payload ?? (existing?.data ?? {});
+    const literalPayload = sanitizeSentinelPayload(mut.payload);
+    const newData = literalPayload ?? (existing?.data ?? {});
     const updatedDoc = {
       collection,
       id: docId,
-      data: mut.op === "update" ? { ...existing?.data ?? {}, ...newData } : newData,
+      data: mut.op === "update" ? { ...existing?.data ?? {}, ...newData } : (
+        // add/set: se o payload tinha sentinels, o cache otimista (existing.data)
+        // é a fonte de verdade até o pull; senão usa o payload literal.
+        hasSentinels(mut.payload) ? { ...existing?.data ?? {}, ...newData } : newData
+      ),
       meta: {
         serverVersion,
         updatedAtServer: serverTimestamp2,
@@ -2528,7 +2692,7 @@ var SyncEngine = class {
             ownerId: localDoc.meta.ownerId
           }
         };
-        const pendingMuts = await this._queue.drain();
+        const pendingMuts = await this._queue.listAll();
         const docMut = pendingMuts.find(
           (m) => m.collection === serverDoc.collection && m.docId === serverDoc.id
         );
@@ -3335,54 +3499,6 @@ var TabCoordinator = class {
 
 // src/db/collection-ref.ts
 init_db_errors();
-
-// src/db/field-value.ts
-var NEETRU_SENTINEL_KEY = "__neetru__";
-function serverTimestamp() {
-  return { __neetru__: "serverTimestamp" };
-}
-function increment(n) {
-  if (typeof n !== "number" || !Number.isFinite(n)) {
-    throw new TypeError(
-      `increment(n): n deve ser um n\xFAmero finito (recebido: ${String(n)}).`
-    );
-  }
-  return { __neetru__: "increment", operand: n };
-}
-function isFieldSentinel(v) {
-  return typeof v === "object" && v !== null && NEETRU_SENTINEL_KEY in v && typeof v[NEETRU_SENTINEL_KEY] === "string";
-}
-function isServerTimestampSentinel(v) {
-  return isFieldSentinel(v) && v.__neetru__ === "serverTimestamp";
-}
-function isIncrementSentinel(v) {
-  return isFieldSentinel(v) && v.__neetru__ === "increment" && typeof v.operand === "number" && Number.isFinite(v.operand);
-}
-function resolveSentinelLocally(value, baseValue) {
-  if (isServerTimestampSentinel(value)) {
-    return Date.now();
-  }
-  if (isIncrementSentinel(value)) {
-    const base = typeof baseValue === "number" && Number.isFinite(baseValue) ? baseValue : 0;
-    return base + value.operand;
-  }
-  return value;
-}
-function resolveSentinelsLocally(data, existing) {
-  let touched = false;
-  const out = {};
-  for (const [k, v] of Object.entries(data)) {
-    if (isFieldSentinel(v)) {
-      touched = true;
-      out[k] = resolveSentinelLocally(v, existing?.[k]);
-    } else {
-      out[k] = v;
-    }
-  }
-  return touched ? out : data;
-}
-
-// src/db/collection-ref.ts
 function isIndexedDBUnavailable() {
   return typeof indexedDB === "undefined" || typeof window === "undefined";
 }
@@ -3930,8 +4046,13 @@ var NeetruDbDocumentsImpl = class {
     return this._engine.flush();
   }
   async clearCache() {
-    await this._store.close();
-    await this._store.open();
+    const storeWithClear = this._store;
+    if (typeof storeWithClear.clearAll === "function") {
+      await storeWithClear.clearAll();
+    } else {
+      await this._store.close();
+      await this._store.open();
+    }
   }
   async getConflicts() {
     return this._store.listConflicts();
@@ -4818,7 +4939,8 @@ function createHttpCheckoutNamespace(config) {
         method: "POST",
         path: "/api/v1/checkout/intents",
         body,
-        requireAuth: true
+        requireAuth: true,
+        idempotencyKey: true
       });
       const result = parseStartResponse(raw);
       const shouldRedirect = input.autoRedirect !== false;
@@ -4949,6 +5071,38 @@ async function verifyWebhookSignature(payload, signature, secret) {
   }
   return diff === 0;
 }
+async function verifyWebhookRequest(payload, headers, secret, options = {}) {
+  const toleranceMs = options.toleranceMs ?? 3e5;
+  const getHeader = (name) => {
+    if (typeof headers.get === "function") {
+      return headers.get(name);
+    }
+    const rec = headers;
+    const lower = name.toLowerCase();
+    for (const key of Object.keys(rec)) {
+      if (key.toLowerCase() === lower) return rec[key] ?? null;
+    }
+    return null;
+  };
+  const tsHeader = getHeader("x-neetru-timestamp");
+  if (!tsHeader) {
+    return { ok: false, reason: "timestamp_missing" };
+  }
+  const tsMs = Number(tsHeader);
+  if (!Number.isFinite(tsMs)) {
+    return { ok: false, reason: "timestamp_missing" };
+  }
+  const skewMs = Math.abs(Date.now() - tsMs);
+  if (skewMs > toleranceMs) {
+    return { ok: false, reason: "timestamp_expired" };
+  }
+  const sig = getHeader("x-neetru-signature");
+  const valid = await verifyWebhookSignature(payload, sig, secret);
+  if (!valid) {
+    return { ok: false, reason: "invalid_signature" };
+  }
+  return { ok: true };
+}
 function hexToBytes(hex) {
   if (hex.length % 2 !== 0) return null;
   const bytes = new Uint8Array(hex.length / 2);
@@ -5931,6 +6085,7 @@ function createOidcAuthNamespace(config) {
   const STORAGE_KEY = "neetru_id_token";
   const listeners = /* @__PURE__ */ new Set();
   let cachedUser = null;
+  let _expiryTimerId = null;
   function getStorage() {
     try {
       return typeof globalThis.localStorage !== "undefined" ? globalThis.localStorage : null;
@@ -5953,6 +6108,9 @@ function createOidcAuthNamespace(config) {
   function tokenToUser(token) {
     const payload = decodeJwtPayload(token);
     if (!payload || typeof payload.sub !== "string") return null;
+    if (typeof payload.exp === "number" && payload.exp * 1e3 < Date.now()) {
+      return null;
+    }
     return {
       uid: payload.sub,
       email: typeof payload.email === "string" ? payload.email : "",
@@ -5966,12 +6124,28 @@ function createOidcAuthNamespace(config) {
     };
   }
   function loadCachedUser() {
-    if (cachedUser) return cachedUser;
+    if (cachedUser) {
+      const exp = cachedUser.exp;
+      if (typeof exp === "number" && exp * 1e3 < Date.now()) {
+        cachedUser = null;
+        const storage2 = getStorage();
+        storage2?.removeItem(STORAGE_KEY);
+        notify();
+        return null;
+      }
+      return cachedUser;
+    }
     const storage = getStorage();
     if (!storage) return null;
     const token = storage.getItem(STORAGE_KEY);
     if (!token) return null;
-    cachedUser = tokenToUser(token);
+    const user = tokenToUser(token);
+    if (!user) {
+      storage.removeItem(STORAGE_KEY);
+      return null;
+    }
+    cachedUser = user;
+    scheduleExpiryTimer(user);
     return cachedUser;
   }
   function notify() {
@@ -5982,6 +6156,23 @@ function createOidcAuthNamespace(config) {
       }
     }
   }
+  function cancelExpiryTimer() {
+    if (_expiryTimerId !== null) {
+      clearTimeout(_expiryTimerId);
+      _expiryTimerId = null;
+    }
+  }
+  function scheduleExpiryTimer(user) {
+    cancelExpiryTimer();
+    const exp = user.exp;
+    if (typeof exp !== "number") return;
+    const msUntilExpiry = exp * 1e3 - Date.now();
+    if (msUntilExpiry <= 0) return;
+    _expiryTimerId = setTimeout(() => {
+      _expiryTimerId = null;
+      loadCachedUser();
+    }, msUntilExpiry + 1);
+  }
   return {
     async signIn(options) {
       if (typeof globalThis.location !== "undefined" && typeof globalThis.location.assign === "function") {
@@ -6009,18 +6200,24 @@ function createOidcAuthNamespace(config) {
     },
     async signOut() {
       const storage = getStorage();
+      const storedToken = storage?.getItem(STORAGE_KEY) ?? null;
       if (storage) storage.removeItem(STORAGE_KEY);
+      cancelExpiryTimer();
       cachedUser = null;
       const overrideAuthUrl = typeof globalThis.NEETRU_AUTH_URL === "string" ? globalThis.NEETRU_AUTH_URL : null;
       const idpOrigin = overrideAuthUrl ?? config.baseUrl.replace(/^https?:\/\/api\./, "https://auth.");
       const revokeUrl = `${idpOrigin}/api/v1/oauth/revoke`;
+      const revokeBody = storedToken ? JSON.stringify({ token: storedToken }) : null;
       let revokeError = null;
       for (let attempt = 0; attempt < 2; attempt++) {
         try {
-          await config.fetch(revokeUrl, {
-            method: "POST",
-            headers: { "content-type": "application/json" }
-          });
+          if (revokeBody) {
+            await config.fetch(revokeUrl, {
+              method: "POST",
+              headers: { "content-type": "application/json" },
+              body: revokeBody
+            });
+          }
           revokeError = null;
           break;
         } catch (err) {
@@ -6140,8 +6337,9 @@ function createNeetruClient(config = {}) {
 // src/index.ts
 init_errors();
 init_db_errors();
-var VERSION = "3.0.1";
+init_http();
+var VERSION = "3.1.1";
 
-export { DEFAULT_BASE_URL, DEV_FIXTURE_USER, MockAuth, MockCheckout, MockDb, MockEntitlements, MockNotifications, MockSupport, MockUsage, MockWebhooks, NEETRU_SENTINEL_KEY, NeetruDbError, NeetruError, VERSION, createCheckoutNamespace, createNeetruClient, createNeetruDb, createNotificationsNamespace, createWebhooksNamespace, increment, isFieldSentinel, isIncrementSentinel, isServerTimestampSentinel, serverTimestamp, verifyWebhookSignature };
+export { DEFAULT_BASE_URL, DEV_FIXTURE_USER, MockAuth, MockCheckout, MockDb, MockEntitlements, MockNotifications, MockSupport, MockUsage, MockWebhooks, NEETRU_SENTINEL_KEY, NeetruDbError, NeetruError, VERSION, checkCoreVersionCompat, createCheckoutNamespace, createNeetruClient, createNeetruDb, createNotificationsNamespace, createWebhooksNamespace, increment, isFieldSentinel, isIncrementSentinel, isServerTimestampSentinel, serverTimestamp, verifyWebhookRequest, verifyWebhookSignature };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map