@neetru/sdk 3.4.3 → 3.4.5

package/dist/auth.d.cts

@@ -1,4 +1,4 @@
-import { X as NeetruClientConfig, W as NeetruClient } from './types-D-QdG502.cjs';
+import { X as NeetruClientConfig, W as NeetruClient } from './types-DIVZl7nO.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/auth.d.ts

@@ -1,4 +1,4 @@
-import { X as NeetruClientConfig, W as NeetruClient } from './types-BlOLDMR0.js';
+import { X as NeetruClientConfig, W as NeetruClient } from './types-nnztVk7G.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/auth.mjs

@@ -1271,6 +1271,12 @@ function createEntitlementsNamespace(config) {
 init_errors();
 init_http();
 var VALID_LOG_LEVELS = ["debug", "info", "warn", "error", "fatal"];
+function isBrowserContext() {
+  return typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined";
+}
+function resolveEventTransport() {
+  return isBrowserContext() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
+}
 function consoleFor(level) {
   switch (level) {
     case "debug":
@@ -1300,15 +1306,18 @@ function createTelemetryNamespace(config) {
       batch.map(async (ev) => {
         try {
           const body = { name: ev.name };
+          const productSlug = ev.productSlug ?? config.productId;
+          if (productSlug) body.productSlug = productSlug;
           if (ev.properties && typeof ev.properties === "object") {
             body.properties = ev.properties;
           }
           if (ev.timestamp) body.timestamp = ev.timestamp;
+          const transport = resolveEventTransport();
           await httpRequest(config, {
             method: "POST",
-            path: "/api/sdk/v1/telemetry/event",
+            path: transport.path,
             body,
-            requireAuth: true,
+            requireAuth: transport.requireAuth,
             retries: 1,
             // caça-bruxas: retry sem Idempotency-Key duplicava o evento se o
             // servidor já tinha persistido antes da falha transiente. Mesmo
@@ -1361,15 +1370,18 @@ function createTelemetryNamespace(config) {
         throw new NeetruError("validation_failed", "event.name max 128 chars");
       }
       const body = { name: input.name };
+      const productSlug = input.productSlug ?? config.productId;
+      if (productSlug) body.productSlug = productSlug;
       if (input.properties && typeof input.properties === "object") {
         body.properties = input.properties;
       }
       if (input.timestamp) body.timestamp = input.timestamp;
+      const transport = resolveEventTransport();
       const raw = await httpRequest(config, {
         method: "POST",
-        path: "/api/sdk/v1/telemetry/event",
+        path: transport.path,
         body,
-        requireAuth: true
+        requireAuth: transport.requireAuth
       });
       if (!raw || raw.ok !== true || typeof raw.eventId !== "string") {
         throw new NeetruError("invalid_response", "Telemetry response missing eventId");
@@ -5574,14 +5586,15 @@ function createLazyCollectionRef(name, getDocsPromise) {
 // src/checkout.ts
 init_errors();
 init_http();
-function checkoutAuth(accessToken, method) {
-  if (!accessToken || typeof accessToken !== "string") {
+function checkoutAuth(auth, method) {
+  const token = auth?.accessToken || auth?.idToken;
+  if (!token || typeof token !== "string") {
     throw new NeetruError(
       "validation_failed",
-      `checkout.${method} requer o access_token OIDC do usu\xE1rio final (passe \`accessToken\`). A chave de API do SDK (nrt_*) N\xC3O \xE9 aceita pelo endpoint de checkout \u2014 ele autentica a identidade do cliente que est\xE1 assinando (Bearer access_token OIDC ou cookie de sess\xE3o).`
+      `checkout.${method} requer o access_token OU o id_token OIDC do usu\xE1rio final (passe \`accessToken\` ou \`idToken\`). A chave de API do SDK (nrt_*) N\xC3O \xE9 aceita pelo endpoint de checkout \u2014 ele autentica a identidade do cliente que est\xE1 assinando (Bearer access_token/id_token OIDC ou cookie de sess\xE3o). No padr\xE3o BFF/cookie, passe o \`idToken\` que seu servidor guardou no cookie httpOnly.`
     );
   }
-  return { requireAuth: false, headers: { authorization: `Bearer ${accessToken}` } };
+  return { requireAuth: false, headers: { authorization: `Bearer ${token}` } };
 }
 function parseStartResponse(raw) {
   if (!raw || typeof raw !== "object") {
@@ -5660,7 +5673,10 @@ function createHttpCheckoutNamespace(config) {
       };
       if (input.tenantType) body.targetTenantType = input.tenantType;
       if (input.tenantId) body.targetTenantId = input.tenantId;
-      const { requireAuth, headers } = checkoutAuth(input.accessToken, "start");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: input.accessToken, idToken: input.idToken },
+        "start"
+      );
       const raw = await httpRequest(config, {
         method: "POST",
         path: "/api/v1/checkout/intents",
@@ -5680,7 +5696,10 @@ function createHttpCheckoutNamespace(config) {
       if (!intentId || typeof intentId !== "string") {
         throw new NeetruError("validation_failed", "checkout.get: intentId is required");
       }
-      const { requireAuth, headers } = checkoutAuth(opts?.accessToken, "get");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: opts?.accessToken, idToken: opts?.idToken },
+        "get"
+      );
       const raw = await httpRequest(config, {
         method: "GET",
         path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,
@@ -5693,7 +5712,10 @@ function createHttpCheckoutNamespace(config) {
       if (!intentId || typeof intentId !== "string") {
         throw new NeetruError("validation_failed", "checkout.cancel: intentId is required");
       }
-      const { requireAuth, headers } = checkoutAuth(opts?.accessToken, "cancel");
+      const { requireAuth, headers } = checkoutAuth(
+        { accessToken: opts?.accessToken, idToken: opts?.idToken },
+        "cancel"
+      );
       const raw = await httpRequest(config, {
         method: "DELETE",
         path: `/api/v1/checkout/intents/${encodeURIComponent(intentId)}`,