@neetru/sdk 3.4.2 → 3.4.4

package/dist/support.d.cts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, al as SupportNamespace } from './types-D-QdG502.cjs';
+import { ag as ResolvedConfig, al as SupportNamespace } from './types-Dw0fqhHm.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/support.d.ts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, al as SupportNamespace } from './types-BlOLDMR0.js';
+import { ag as ResolvedConfig, al as SupportNamespace } from './types-Bzxb5rlF.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/telemetry.d.cts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, as as TelemetryEventInput, ar as TelemetryEventAck, au as TelemetryLogInput, at as TelemetryLogAck } from './types-D-QdG502.cjs';
+import { ag as ResolvedConfig, as as TelemetryEventInput, ar as TelemetryEventAck, au as TelemetryLogInput, at as TelemetryLogAck } from './types-Dw0fqhHm.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/telemetry.d.ts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, as as TelemetryEventInput, ar as TelemetryEventAck, au as TelemetryLogInput, at as TelemetryLogAck } from './types-BlOLDMR0.js';
+import { ag as ResolvedConfig, as as TelemetryEventInput, ar as TelemetryEventAck, au as TelemetryLogInput, at as TelemetryLogAck } from './types-Bzxb5rlF.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/{types-BlOLDMR0.d.ts → types-Bzxb5rlF.d.ts}

@@ -23,18 +23,36 @@ interface CheckoutStartInput {
     autoRedirect?: boolean;
     /**
      * **C2 (auditoria 2026-06-10):** access_token OIDC do **usuário final** que
-     * está assinando. OBRIGATÓRIO no modo HTTP real — o endpoint de checkout do
+     * está assinando. Usado no modo HTTP real — o endpoint de checkout do
      * Core (`/api/v1/checkout/intents`) autentica a identidade do cliente (Bearer
-     * access_token OIDC ou cookie de sessão), NÃO a chave de API do SDK (`nrt_*`).
-     * Enviar a chave `nrt_*` resultava em 401 sempre. O SDK é BFF-pattern: o app
-     * consumidor gerencia o ciclo OIDC e passa o access_token aqui.
+     * access_token/id_token OIDC ou cookie de sessão), NÃO a chave de API do SDK
+     * (`nrt_*`). Enviar a chave `nrt_*` resultava em 401 sempre.
+     *
+     * Passe `accessToken` **ou** `idToken` (pelo menos um é obrigatório no HTTP
+     * real). Veja `idToken` para o padrão BFF/cookie recomendado.
      */
     accessToken?: string;
+    /**
+     * **BFF/cookie (padrão recomendado):** id_token OIDC do **usuário final**.
+     *
+     * No padrão BFF, o app troca `code`→tokens **no servidor**, guarda só o
+     * `id_token` num cookie **httpOnly** e **descarta o access_token** — logo o
+     * browser NUNCA tem o access_token. O endpoint de checkout do Core aceita o
+     * id_token no header Bearer (via `verifyIdToken`, mesma validação forte de
+     * assinatura/kid/iss/exp do access_token), então o **BFF do app** passa aqui
+     * o id_token que ele TEM (lido do cookie httpOnly, server-side).
+     *
+     * Quando ambos são passados, `accessToken` tem prioridade (é revogável no
+     * servidor via o espelho `jti`; o id_token não é revogável, só expira ~15min).
+     */
+    idToken?: string;
 }
-/** Auth por chamada do checkout — access_token OIDC do usuário final. */
+/** Auth por chamada do checkout — access_token OU id_token OIDC do usuário final. */
 interface CheckoutAuthOpts {
-    /** access_token OIDC do usuário final (vide CheckoutStartInput.accessToken). */
+    /** access_token OIDC do usuário final (vide `CheckoutStartInput.accessToken`). */
     accessToken?: string;
+    /** id_token OIDC do usuário final — padrão BFF/cookie (vide `CheckoutStartInput.idToken`). */
+    idToken?: string;
 }
 interface CheckoutStartResult {
     intentId: string;
@@ -68,9 +86,9 @@ interface CheckoutNamespace {
      * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.
      */
     start(input: CheckoutStartInput): Promise<CheckoutStartResult>;
-    /** Lê estado atual do intent (Core). Requer `opts.accessToken` no HTTP real. */
+    /** Lê estado atual do intent (Core). Requer `opts.accessToken` **ou** `opts.idToken` no HTTP real. */
     get(intentId: string, opts?: CheckoutAuthOpts): Promise<CheckoutIntentInfo>;
-    /** Cancela um intent que ainda não virou `stripe_redirected`. Requer `opts.accessToken` no HTTP real. */
+    /** Cancela um intent que ainda não virou `stripe_redirected`. Requer `opts.accessToken` **ou** `opts.idToken` no HTTP real. */
     cancel(intentId: string, opts?: CheckoutAuthOpts): Promise<{
         ok: true;
         alreadyCancelled: boolean;

package/dist/{types-D-QdG502.d.cts → types-Dw0fqhHm.d.cts}

@@ -23,18 +23,36 @@ interface CheckoutStartInput {
     autoRedirect?: boolean;
     /**
      * **C2 (auditoria 2026-06-10):** access_token OIDC do **usuário final** que
-     * está assinando. OBRIGATÓRIO no modo HTTP real — o endpoint de checkout do
+     * está assinando. Usado no modo HTTP real — o endpoint de checkout do
      * Core (`/api/v1/checkout/intents`) autentica a identidade do cliente (Bearer
-     * access_token OIDC ou cookie de sessão), NÃO a chave de API do SDK (`nrt_*`).
-     * Enviar a chave `nrt_*` resultava em 401 sempre. O SDK é BFF-pattern: o app
-     * consumidor gerencia o ciclo OIDC e passa o access_token aqui.
+     * access_token/id_token OIDC ou cookie de sessão), NÃO a chave de API do SDK
+     * (`nrt_*`). Enviar a chave `nrt_*` resultava em 401 sempre.
+     *
+     * Passe `accessToken` **ou** `idToken` (pelo menos um é obrigatório no HTTP
+     * real). Veja `idToken` para o padrão BFF/cookie recomendado.
      */
     accessToken?: string;
+    /**
+     * **BFF/cookie (padrão recomendado):** id_token OIDC do **usuário final**.
+     *
+     * No padrão BFF, o app troca `code`→tokens **no servidor**, guarda só o
+     * `id_token` num cookie **httpOnly** e **descarta o access_token** — logo o
+     * browser NUNCA tem o access_token. O endpoint de checkout do Core aceita o
+     * id_token no header Bearer (via `verifyIdToken`, mesma validação forte de
+     * assinatura/kid/iss/exp do access_token), então o **BFF do app** passa aqui
+     * o id_token que ele TEM (lido do cookie httpOnly, server-side).
+     *
+     * Quando ambos são passados, `accessToken` tem prioridade (é revogável no
+     * servidor via o espelho `jti`; o id_token não é revogável, só expira ~15min).
+     */
+    idToken?: string;
 }
-/** Auth por chamada do checkout — access_token OIDC do usuário final. */
+/** Auth por chamada do checkout — access_token OU id_token OIDC do usuário final. */
 interface CheckoutAuthOpts {
-    /** access_token OIDC do usuário final (vide CheckoutStartInput.accessToken). */
+    /** access_token OIDC do usuário final (vide `CheckoutStartInput.accessToken`). */
     accessToken?: string;
+    /** id_token OIDC do usuário final — padrão BFF/cookie (vide `CheckoutStartInput.idToken`). */
+    idToken?: string;
 }
 interface CheckoutStartResult {
     intentId: string;
@@ -68,9 +86,9 @@ interface CheckoutNamespace {
      * Dev mode (`NEETRU_ENV=dev`): retorna URL fake `https://localhost:9003/portal/checkout/mock-XXXX`.
      */
     start(input: CheckoutStartInput): Promise<CheckoutStartResult>;
-    /** Lê estado atual do intent (Core). Requer `opts.accessToken` no HTTP real. */
+    /** Lê estado atual do intent (Core). Requer `opts.accessToken` **ou** `opts.idToken` no HTTP real. */
     get(intentId: string, opts?: CheckoutAuthOpts): Promise<CheckoutIntentInfo>;
-    /** Cancela um intent que ainda não virou `stripe_redirected`. Requer `opts.accessToken` no HTTP real. */
+    /** Cancela um intent que ainda não virou `stripe_redirected`. Requer `opts.accessToken` **ou** `opts.idToken` no HTTP real. */
     cancel(intentId: string, opts?: CheckoutAuthOpts): Promise<{
         ok: true;
         alreadyCancelled: boolean;

package/dist/usage.d.cts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, ax as UsageNamespace } from './types-D-QdG502.cjs';
+import { ag as ResolvedConfig, ax as UsageNamespace } from './types-Dw0fqhHm.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/usage.d.ts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, ax as UsageNamespace } from './types-BlOLDMR0.js';
+import { ag as ResolvedConfig, ax as UsageNamespace } from './types-Bzxb5rlF.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/webhooks.d.cts

@@ -1,3 +1,3 @@
-export { U as MockWebhooks, af as RegisterWebhookInput, aA as VerifyWebhookRequestOptions, aB as VerifyWebhookRequestResult, aC as WebhookEndpoint, aD as WebhookEvent, aE as WebhookScopeOptions, aF as WebhookTestResult, aG as WebhooksNamespace, aO as createWebhooksNamespace, aV as verifyWebhookRequest, aW as verifyWebhookSignature } from './types-D-QdG502.cjs';
+export { U as MockWebhooks, af as RegisterWebhookInput, aA as VerifyWebhookRequestOptions, aB as VerifyWebhookRequestResult, aC as WebhookEndpoint, aD as WebhookEvent, aE as WebhookScopeOptions, aF as WebhookTestResult, aG as WebhooksNamespace, aO as createWebhooksNamespace, aV as verifyWebhookRequest, aW as verifyWebhookSignature } from './types-Dw0fqhHm.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';

package/dist/webhooks.d.ts

@@ -1,3 +1,3 @@
-export { U as MockWebhooks, af as RegisterWebhookInput, aA as VerifyWebhookRequestOptions, aB as VerifyWebhookRequestResult, aC as WebhookEndpoint, aD as WebhookEvent, aE as WebhookScopeOptions, aF as WebhookTestResult, aG as WebhooksNamespace, aO as createWebhooksNamespace, aV as verifyWebhookRequest, aW as verifyWebhookSignature } from './types-BlOLDMR0.js';
+export { U as MockWebhooks, af as RegisterWebhookInput, aA as VerifyWebhookRequestOptions, aB as VerifyWebhookRequestResult, aC as WebhookEndpoint, aD as WebhookEvent, aE as WebhookScopeOptions, aF as WebhookTestResult, aG as WebhooksNamespace, aO as createWebhooksNamespace, aV as verifyWebhookRequest, aW as verifyWebhookSignature } from './types-Bzxb5rlF.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neetru/sdk",
-  "version": "3.4.2",
+  "version": "3.4.4",
   "description": "Neetru SDK 3.0 — biblioteca runtime universal (browser/Node/Edge) para consumir o ecossistema Neetru. Paths canonical /api/sdk/v1/*, productId obrigatório, Idempotency-Key em mutations, WebCrypto signatures, baseUrl allowlist fail-closed.",
   "type": "module",
   "main": "./dist/index.cjs",