@neetru/sdk 3.4.3 → 3.4.4

package/dist/auth.d.cts

@@ -1,4 +1,4 @@
-import { X as NeetruClientConfig, W as NeetruClient } from './types-D-QdG502.cjs';
+import { X as NeetruClientConfig, W as NeetruClient } from './types-Dw0fqhHm.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/auth.d.ts

@@ -1,4 +1,4 @@
-import { X as NeetruClientConfig, W as NeetruClient } from './types-BlOLDMR0.js';
+import { X as NeetruClientConfig, W as NeetruClient } from './types-Bzxb5rlF.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/auth.mjs

@@ -5574,14 +5574,15 @@ function createLazyCollectionRef(name, getDocsPromise) {
 // src/checkout.ts
 init_errors();
 init_http();
-function checkoutAuth(accessToken, method) {
-  if (!accessToken || typeof accessToken !== "string") {
+function checkoutAuth(auth, method) {
+  const token = auth?.accessToken || auth?.idToken;
+  if (!token || typeof token !== "string") {
     throw new NeetruError(
       "validation_failed",
-      `checkout.${method} requer o access_token OIDC do usu\xE1rio final (passe \`accessToken\`). A chave de API do SDK (nrt_*) N\xC3O \xE9 aceita pelo endpoint de checkout \u2014 ele autentica a identidade do cliente que est\xE1 assinando (Bearer access_token OIDC ou cookie de sess\xE3o).`
+      `checkout.${method} requer o access_token OU o id_token OIDC do usu\xE1rio final (passe \`accessToken\` ou \`idToken\`). A chave de API do SDK (nrt_*) N\xC3O \xE9 aceita pelo endpoint de checkout \u2014 ele autentica a identidade do cliente que est\xE1 assinando (Bearer access_token/id_token OIDC ou cookie de sess\xE3o). No padr\xE3o BFF/cookie, passe o \`idToken\` que seu servidor guardou no cookie httpOnly.`
     );
   }
-  return { requireAuth: false, headers: { authorization: `Bearer ${accessToken}` } };
+  return { requireAuth: false, headers: { authorization: `Bearer ${token}` } };
 }
 function parseStartResponse(raw) {
   if (!raw || typeof raw !== "object") {
@@ -5660,7 +5661,10 @@ function createHttpCheckoutNamespace(config) {
       };
       if (input.tenantType) body.targetTenantType = input.tenantType;
       if (input.tenantId) body.targetTenantId = input.tenantId;
-      const { requireAuth, headers } = checkoutAuth(input.accessToken, "start");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: input.accessToken, idToken: input.idToken },
+        "start"
+      );
       const raw = await httpRequest(config, {
         method: "POST",
         path: "/api/v1/checkout/intents",
@@ -5680,7 +5684,10 @@ function createHttpCheckoutNamespace(config) {
       if (!intentId || typeof intentId !== "string") {
         throw new NeetruError("validation_failed", "checkout.get: intentId is required");
       }
-      const { requireAuth, headers } = checkoutAuth(opts?.accessToken, "get");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: opts?.accessToken, idToken: opts?.idToken },
+        "get"
+      );
       const raw = await httpRequest(config, {
         method: "GET",
         path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,
@@ -5693,7 +5700,10 @@ function createHttpCheckoutNamespace(config) {
       if (!intentId || typeof intentId !== "string") {
         throw new NeetruError("validation_failed", "checkout.cancel: intentId is required");
       }
-      const { requireAuth, headers } = checkoutAuth(opts?.accessToken, "cancel");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: opts?.accessToken, idToken: opts?.idToken },
+        "cancel"
+      );
       const raw = await httpRequest(config, {
         method: "DELETE",
         path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,