@neetru/sdk 3.1.10 → 3.1.12

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 export { createNeetruClient } from './auth.cjs';
 export { NeetruError, NeetruErrorCode } from './errors.cjs';
-export { A as AiChatChoice, a as AiChatMessage, b as AiChatOptions, c as AiChatResult, d as AiChatUsage, e as AiNamespace, f as AiStreamHandle, g as AiStreamMeta, h as AuthNamespace, i as AuthStateListener, C as CatalogListOptions, j as CatalogListResponse, l as CheckoutIntentInfo, m as CheckoutIntentStatus, n as CheckoutNamespace, o as CheckoutStartInput, p as CheckoutStartResult, q as CheckoutTenantType, t as CreateTicketInput, D as DEFAULT_BASE_URL, u as DbBatchOp, v as DbChangeType, w as DbCollectionRef, x as DbDoc, y as DbDocRef, z as DbGetResult, B as DbListResult, E as DbNamespace, F as DbQuery, G as DbSqlLease, H as DbWhereFilter, J as EntitlementCheck, K as FieldSentinel, L as IncrementSentinel, M as ListNotificationsOptions, N as MockCheckout, O as MockNotifications, P as MockWebhooks, Q as NEETRU_SENTINEL_KEY, R as NeetruClient, S as NeetruClientConfig, T as NeetruDb, V as NeetruDbEngine, W as NeetruDbError, X as NeetruDbErrorCode, Y as NeetruDbOptions, Z as NeetruDbTransport, _ as NeetruEnv, $ as NeetruSqlClient, a0 as NeetruUser, a1 as NotificationScopeOptions, a2 as NotificationsNamespace, a3 as Product, a4 as ProductNotification, a5 as ProductNotificationSeverity, a6 as ProductPlan, a7 as ProductStatus, a9 as RedirectCallbackResult, aa as RegisterWebhookInput, ab as ResolvedConfig, ac as SendNotificationInput, ad as ServerTimestampSentinel, ae as SignInOptions, ag as SupportNamespace, ah as SupportSeverity, ai as SupportStatus, aj as SupportTicket, al as TelemetryEventAck, am as TelemetryEventInput, aq as UsageEventInput, ar as UsageNamespace, as as UsageQuota, at as VerifyTokenOptions, au as VerifyWebhookRequestOptions, av as VerifyWebhookRequestResult, aw as WebhookEndpoint, ax as WebhookEvent, ay as WebhookScopeOptions, az as WebhookTestResult, aA as WebhooksNamespace, aB as WithFieldSentinels, aC as createAiNamespace, aD as createCheckoutNamespace, aE as createNeetruDb, aF as createNotificationsNamespace, aH as createWebhooksNamespace, aJ as increment, aK as isFieldSentinel, aL as isIncrementSentinel, aM as isServerTimestampSentinel, aN as serverTimestamp, aO as verifyWebhookRequest, aP as verifyWebhookSignature } from './types-Cog9S-tC.cjs';
+export { A as AiChatChoice, a as AiChatMessage, b as AiChatOptions, c as AiChatResult, d as AiChatUsage, e as AiNamespace, f as AiStreamHandle, g as AiStreamMeta, h as AuthNamespace, i as AuthStateListener, C as CatalogListOptions, j as CatalogListResponse, l as CheckoutIntentInfo, m as CheckoutIntentStatus, n as CheckoutNamespace, o as CheckoutStartInput, p as CheckoutStartResult, q as CheckoutTenantType, r as CompleteSignInResult, u as CreateTicketInput, D as DEFAULT_BASE_URL, v as DbBatchOp, w as DbChangeType, x as DbCollectionRef, y as DbDoc, z as DbDocRef, B as DbGetResult, E as DbListResult, F as DbNamespace, G as DbQuery, H as DbSqlLease, I as DbWhereFilter, K as EntitlementCheck, L as FieldSentinel, M as IncrementSentinel, N as ListNotificationsOptions, O as MockCheckout, P as MockNotifications, Q as MockWebhooks, R as NEETRU_SENTINEL_KEY, S as NeetruClient, T as NeetruClientConfig, U as NeetruDb, W as NeetruDbEngine, X as NeetruDbError, Y as NeetruDbErrorCode, Z as NeetruDbOptions, _ as NeetruDbTransport, $ as NeetruEnv, a0 as NeetruSqlClient, a1 as NeetruUser, a2 as NotificationScopeOptions, a3 as NotificationsNamespace, a4 as Product, a5 as ProductNotification, a6 as ProductNotificationSeverity, a7 as ProductPlan, a8 as ProductStatus, aa as RedirectCallbackResult, ab as RegisterWebhookInput, ac as ResolvedConfig, ad as SendNotificationInput, ae as ServerTimestampSentinel, af as SignInOptions, ah as SupportNamespace, ai as SupportSeverity, aj as SupportStatus, ak as SupportTicket, am as TelemetryEventAck, an as TelemetryEventInput, ar as UsageEventInput, as as UsageNamespace, at as UsageQuota, au as VerifyTokenOptions, av as VerifyWebhookRequestOptions, aw as VerifyWebhookRequestResult, ax as WebhookEndpoint, ay as WebhookEvent, az as WebhookScopeOptions, aA as WebhookTestResult, aB as WebhooksNamespace, aC as WithFieldSentinels, aD as createAiNamespace, aE as createCheckoutNamespace, aF as createNeetruDb, aG as createNotificationsNamespace, aI as createWebhooksNamespace, aK as increment, aL as isFieldSentinel, aM as isIncrementSentinel, aN as isServerTimestampSentinel, aO as serverTimestamp, aP as verifyWebhookRequest, aQ as verifyWebhookSignature } from './types-DJAGWjf0.cjs';
 export { DEV_FIXTURE_USER, MockAi, MockAuth, MockAuthOptions, MockDb, MockEntitlements, MockSupport, MockUsage } from './mocks.cjs';
 import 'drizzle-orm/node-postgres';
 
@@ -42,6 +42,6 @@ declare function checkCoreVersionCompat(coreVersion: string): void;
  */
 
 /** Versão do SDK — exportada explicitamente pra detecção em runtime. */
-declare const VERSION: "3.1.10";
+declare const VERSION: "3.1.12";
 
 export { VERSION, checkCoreVersionCompat };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { createNeetruClient } from './auth.js';
 export { NeetruError, NeetruErrorCode } from './errors.js';
-export { A as AiChatChoice, a as AiChatMessage, b as AiChatOptions, c as AiChatResult, d as AiChatUsage, e as AiNamespace, f as AiStreamHandle, g as AiStreamMeta, h as AuthNamespace, i as AuthStateListener, C as CatalogListOptions, j as CatalogListResponse, l as CheckoutIntentInfo, m as CheckoutIntentStatus, n as CheckoutNamespace, o as CheckoutStartInput, p as CheckoutStartResult, q as CheckoutTenantType, t as CreateTicketInput, D as DEFAULT_BASE_URL, u as DbBatchOp, v as DbChangeType, w as DbCollectionRef, x as DbDoc, y as DbDocRef, z as DbGetResult, B as DbListResult, E as DbNamespace, F as DbQuery, G as DbSqlLease, H as DbWhereFilter, J as EntitlementCheck, K as FieldSentinel, L as IncrementSentinel, M as ListNotificationsOptions, N as MockCheckout, O as MockNotifications, P as MockWebhooks, Q as NEETRU_SENTINEL_KEY, R as NeetruClient, S as NeetruClientConfig, T as NeetruDb, V as NeetruDbEngine, W as NeetruDbError, X as NeetruDbErrorCode, Y as NeetruDbOptions, Z as NeetruDbTransport, _ as NeetruEnv, $ as NeetruSqlClient, a0 as NeetruUser, a1 as NotificationScopeOptions, a2 as NotificationsNamespace, a3 as Product, a4 as ProductNotification, a5 as ProductNotificationSeverity, a6 as ProductPlan, a7 as ProductStatus, a9 as RedirectCallbackResult, aa as RegisterWebhookInput, ab as ResolvedConfig, ac as SendNotificationInput, ad as ServerTimestampSentinel, ae as SignInOptions, ag as SupportNamespace, ah as SupportSeverity, ai as SupportStatus, aj as SupportTicket, al as TelemetryEventAck, am as TelemetryEventInput, aq as UsageEventInput, ar as UsageNamespace, as as UsageQuota, at as VerifyTokenOptions, au as VerifyWebhookRequestOptions, av as VerifyWebhookRequestResult, aw as WebhookEndpoint, ax as WebhookEvent, ay as WebhookScopeOptions, az as WebhookTestResult, aA as WebhooksNamespace, aB as WithFieldSentinels, aC as createAiNamespace, aD as createCheckoutNamespace, aE as createNeetruDb, aF as createNotificationsNamespace, aH as createWebhooksNamespace, aJ as increment, aK as isFieldSentinel, aL as isIncrementSentinel, aM as isServerTimestampSentinel, aN as serverTimestamp, aO as verifyWebhookRequest, aP as verifyWebhookSignature } from './types-dagUxKYz.js';
+export { A as AiChatChoice, a as AiChatMessage, b as AiChatOptions, c as AiChatResult, d as AiChatUsage, e as AiNamespace, f as AiStreamHandle, g as AiStreamMeta, h as AuthNamespace, i as AuthStateListener, C as CatalogListOptions, j as CatalogListResponse, l as CheckoutIntentInfo, m as CheckoutIntentStatus, n as CheckoutNamespace, o as CheckoutStartInput, p as CheckoutStartResult, q as CheckoutTenantType, r as CompleteSignInResult, u as CreateTicketInput, D as DEFAULT_BASE_URL, v as DbBatchOp, w as DbChangeType, x as DbCollectionRef, y as DbDoc, z as DbDocRef, B as DbGetResult, E as DbListResult, F as DbNamespace, G as DbQuery, H as DbSqlLease, I as DbWhereFilter, K as EntitlementCheck, L as FieldSentinel, M as IncrementSentinel, N as ListNotificationsOptions, O as MockCheckout, P as MockNotifications, Q as MockWebhooks, R as NEETRU_SENTINEL_KEY, S as NeetruClient, T as NeetruClientConfig, U as NeetruDb, W as NeetruDbEngine, X as NeetruDbError, Y as NeetruDbErrorCode, Z as NeetruDbOptions, _ as NeetruDbTransport, $ as NeetruEnv, a0 as NeetruSqlClient, a1 as NeetruUser, a2 as NotificationScopeOptions, a3 as NotificationsNamespace, a4 as Product, a5 as ProductNotification, a6 as ProductNotificationSeverity, a7 as ProductPlan, a8 as ProductStatus, aa as RedirectCallbackResult, ab as RegisterWebhookInput, ac as ResolvedConfig, ad as SendNotificationInput, ae as ServerTimestampSentinel, af as SignInOptions, ah as SupportNamespace, ai as SupportSeverity, aj as SupportStatus, ak as SupportTicket, am as TelemetryEventAck, an as TelemetryEventInput, ar as UsageEventInput, as as UsageNamespace, at as UsageQuota, au as VerifyTokenOptions, av as VerifyWebhookRequestOptions, aw as VerifyWebhookRequestResult, ax as WebhookEndpoint, ay as WebhookEvent, az as WebhookScopeOptions, aA as WebhookTestResult, aB as WebhooksNamespace, aC as WithFieldSentinels, aD as createAiNamespace, aE as createCheckoutNamespace, aF as createNeetruDb, aG as createNotificationsNamespace, aI as createWebhooksNamespace, aK as increment, aL as isFieldSentinel, aM as isIncrementSentinel, aN as isServerTimestampSentinel, aO as serverTimestamp, aP as verifyWebhookRequest, aQ as verifyWebhookSignature } from './types-BtQv-s0m.js';
 export { DEV_FIXTURE_USER, MockAi, MockAuth, MockAuthOptions, MockDb, MockEntitlements, MockSupport, MockUsage } from './mocks.js';
 import 'drizzle-orm/node-postgres';
 
@@ -42,6 +42,6 @@ declare function checkCoreVersionCompat(coreVersion: string): void;
  */
 
 /** Versão do SDK — exportada explicitamente pra detecção em runtime. */
-declare const VERSION: "3.1.10";
+declare const VERSION: "3.1.12";
 
 export { VERSION, checkCoreVersionCompat };

package/dist/index.mjs

@@ -5931,6 +5931,15 @@ var MockAuth = class {
   async handleRedirectCallback(_currentUrl) {
     return this._pendingCallback;
   }
+  /**
+   * Mock de `completeSignIn` (3.1.12) — em dev não há redirect real pro IdP,
+   * então não existe callback a completar: retorna `null` sempre (mesmo
+   * contrato "no-op seguro em todo page load" da implementação real). O login
+   * mock acontece direto via `signIn()`.
+   */
+  async completeSignIn(_currentUrl) {
+    return null;
+  }
   /**
    * Mock de `getIdToken` (Bug 2 / 3.1.3). Retorna `null` por default; use
    * `__setIdToken(token)` pra injetar um token cru em testes.
@@ -6670,22 +6679,155 @@ function createOidcAuthNamespace(config) {
       loadCachedUser();
     }, msUntilExpiry + 1);
   }
+  function resolveClientId() {
+    let clientId = config.oidcClientId;
+    if (!clientId && config.apiKey) {
+      clientId = parseApiKey(config.apiKey).keyId;
+    }
+    if (!clientId) {
+      throw new NeetruError(
+        "invalid_config",
+        "auth OIDC requer `oidcClientId` (ou `apiKey`) configurado para montar o client_id."
+      );
+    }
+    return clientId;
+  }
+  async function handleRedirectCallback(currentUrl) {
+    const href = currentUrl ?? (typeof globalThis.location !== "undefined" ? globalThis.location.href : void 0);
+    if (!href) return null;
+    let parsed;
+    try {
+      parsed = new URL(href);
+    } catch {
+      return null;
+    }
+    const params = parsed.searchParams;
+    const idpError = params.get("error");
+    if (idpError) {
+      const desc = params.get("error_description") ?? idpError;
+      getSessionStorage()?.removeItem(OIDC_TX_KEY);
+      cleanCallbackUrl(parsed);
+      throw new NeetruError(idpError, `OIDC authorize falhou: ${desc}`);
+    }
+    const code = params.get("code");
+    if (!code) return null;
+    const returnedState = params.get("state");
+    const session = getSessionStorage();
+    const txRaw = session?.getItem(OIDC_TX_KEY) ?? null;
+    let tx = null;
+    if (txRaw) {
+      try {
+        tx = JSON.parse(txRaw);
+      } catch {
+        tx = null;
+      }
+    }
+    if (!tx) {
+      throw new NeetruError(
+        "oidc_state_mismatch",
+        "Callback OIDC sem transa\xE7\xE3o pendente \u2014 `signIn` n\xE3o foi iniciado nesta sess\xE3o (ou j\xE1 consumido)."
+      );
+    }
+    if (!returnedState || returnedState !== tx.state) {
+      session?.removeItem(OIDC_TX_KEY);
+      cleanCallbackUrl(parsed);
+      throw new NeetruError(
+        "oidc_state_mismatch",
+        "state do callback OIDC n\xE3o confere com o da transa\xE7\xE3o (poss\xEDvel CSRF)."
+      );
+    }
+    session?.removeItem(OIDC_TX_KEY);
+    cleanCallbackUrl(parsed);
+    return {
+      code,
+      codeVerifier: tx.codeVerifier,
+      redirectUri: tx.redirectUri,
+      nonce: tx.nonce,
+      state: tx.state,
+      postLoginRedirect: tx.postLoginRedirect
+    };
+  }
+  async function completeSignIn(currentUrl) {
+    const tx = await handleRedirectCallback(currentUrl);
+    if (!tx) return null;
+    const clientId = resolveClientId();
+    const idpOrigin = resolveIdpOrigin(config.baseUrl);
+    const tokenUrl = `${idpOrigin}/api/v1/oauth/token`;
+    const form = new URLSearchParams({
+      grant_type: "authorization_code",
+      code: tx.code,
+      redirect_uri: tx.redirectUri,
+      client_id: clientId,
+      code_verifier: tx.codeVerifier
+    });
+    let res;
+    try {
+      res = await config.fetch(tokenUrl, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: form.toString()
+      });
+    } catch (err) {
+      throw new NeetruError(
+        "network_error",
+        `POST ${tokenUrl} falhou (network): ${err?.message ?? String(err)}`
+      );
+    }
+    let payload = null;
+    try {
+      payload = await res.json();
+    } catch {
+      payload = null;
+    }
+    if (!res.ok || typeof payload?.error === "string") {
+      const desc = typeof payload?.error_description === "string" && payload.error_description || typeof payload?.error === "string" && payload.error || `HTTP ${res.status}`;
+      throw new NeetruError(
+        "token_exchange_failed",
+        `Troca do authorization_code por tokens falhou no /token: ${desc}`,
+        res.status
+      );
+    }
+    const idToken = payload?.id_token;
+    if (typeof idToken !== "string" || idToken.length === 0) {
+      throw new NeetruError(
+        "token_exchange_failed",
+        "Resposta do /token sem `id_token` \u2014 o login n\xE3o pode ser completado.",
+        res.status
+      );
+    }
+    const claims = decodeJwtPayload(idToken);
+    if (!claims) {
+      throw new NeetruError(
+        "token_exchange_failed",
+        "id_token retornado pelo /token \xE9 malformado (payload indecodific\xE1vel)."
+      );
+    }
+    if (claims.nonce !== tx.nonce) {
+      throw new NeetruError(
+        "oidc_nonce_mismatch",
+        "nonce do id_token n\xE3o confere com o da transa\xE7\xE3o OIDC (poss\xEDvel replay). Token descartado."
+      );
+    }
+    const user = tokenToUser(idToken);
+    if (!user) {
+      throw new NeetruError(
+        "token_exchange_failed",
+        "id_token retornado pelo /token n\xE3o tem `sub` ou j\xE1 est\xE1 expirado."
+      );
+    }
+    getStorage()?.setItem(STORAGE_KEY, idToken);
+    cachedUser = user;
+    scheduleExpiryTimer(user);
+    notify();
+    return { user, postLoginRedirect: tx.postLoginRedirect };
+  }
   return {
     async signIn(options) {
       if (typeof globalThis.location !== "undefined" && typeof globalThis.location.assign === "function") {
         const crypto2 = getWebCrypto();
         const redirectUri = options?.redirectUri ?? globalThis.location.origin;
         const scope = options?.scope ?? "openid profile email";
-        let clientId = config.oidcClientId;
-        if (!clientId && config.apiKey) {
-          clientId = parseApiKey(config.apiKey).keyId;
-        }
-        if (!clientId) {
-          throw new NeetruError(
-            "invalid_config",
-            "auth.signIn requer `oidcClientId` (ou `apiKey`) configurado para montar o client_id."
-          );
-        }
+        const clientId = resolveClientId();
         const state = randomUrlSafe(crypto2, 16);
         const nonce = randomUrlSafe(crypto2, 16);
         const codeVerifier = randomUrlSafe(crypto2, 32);
@@ -6723,61 +6865,8 @@ function createOidcAuthNamespace(config) {
         "auth.signIn requires a browser context or mocks. Use NEETRU_ENV=dev or pass mocks.auth."
       );
     },
-    async handleRedirectCallback(currentUrl) {
-      const href = currentUrl ?? (typeof globalThis.location !== "undefined" ? globalThis.location.href : void 0);
-      if (!href) return null;
-      let parsed;
-      try {
-        parsed = new URL(href);
-      } catch {
-        return null;
-      }
-      const params = parsed.searchParams;
-      const idpError = params.get("error");
-      if (idpError) {
-        const desc = params.get("error_description") ?? idpError;
-        getSessionStorage()?.removeItem(OIDC_TX_KEY);
-        cleanCallbackUrl(parsed);
-        throw new NeetruError(idpError, `OIDC authorize falhou: ${desc}`);
-      }
-      const code = params.get("code");
-      if (!code) return null;
-      const returnedState = params.get("state");
-      const session = getSessionStorage();
-      const txRaw = session?.getItem(OIDC_TX_KEY) ?? null;
-      let tx = null;
-      if (txRaw) {
-        try {
-          tx = JSON.parse(txRaw);
-        } catch {
-          tx = null;
-        }
-      }
-      if (!tx) {
-        throw new NeetruError(
-          "oidc_state_mismatch",
-          "Callback OIDC sem transa\xE7\xE3o pendente \u2014 `signIn` n\xE3o foi iniciado nesta sess\xE3o (ou j\xE1 consumido)."
-        );
-      }
-      if (!returnedState || returnedState !== tx.state) {
-        session?.removeItem(OIDC_TX_KEY);
-        cleanCallbackUrl(parsed);
-        throw new NeetruError(
-          "oidc_state_mismatch",
-          "state do callback OIDC n\xE3o confere com o da transa\xE7\xE3o (poss\xEDvel CSRF)."
-        );
-      }
-      session?.removeItem(OIDC_TX_KEY);
-      cleanCallbackUrl(parsed);
-      return {
-        code,
-        codeVerifier: tx.codeVerifier,
-        redirectUri: tx.redirectUri,
-        nonce: tx.nonce,
-        state: tx.state,
-        postLoginRedirect: tx.postLoginRedirect
-      };
-    },
+    handleRedirectCallback,
+    completeSignIn,
     getIdToken() {
       const storage = getStorage();
       const token = storage?.getItem(STORAGE_KEY) ?? null;
@@ -6934,7 +7023,7 @@ function createNeetruClient(config = {}) {
 init_errors();
 init_db_errors();
 init_http();
-var VERSION = "3.1.10";
+var VERSION = "3.1.12";
 
 export { DEFAULT_BASE_URL, DEV_FIXTURE_USER, MockAi, MockAuth, MockCheckout, MockDb, MockEntitlements, MockNotifications, MockSupport, MockUsage, MockWebhooks, NEETRU_SENTINEL_KEY, NeetruDbError, NeetruError, VERSION, checkCoreVersionCompat, createAiNamespace, createCheckoutNamespace, createNeetruClient, createNeetruDb, createNotificationsNamespace, createWebhooksNamespace, increment, isFieldSentinel, isIncrementSentinel, isServerTimestampSentinel, serverTimestamp, verifyWebhookRequest, verifyWebhookSignature };
 //# sourceMappingURL=index.mjs.map