@neetru/sdk 3.4.7 → 3.5.0

package/dist/entitlements.d.cts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, O as EntitlementCheck } from './types-DIVZl7nO.cjs';
+import { ag as ResolvedConfig, O as EntitlementCheck } from './types-Du_iioJ7.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/entitlements.d.ts

@@ -1,4 +1,4 @@
-import { ag as ResolvedConfig, O as EntitlementCheck } from './types-nnztVk7G.js';
+import { ag as ResolvedConfig, O as EntitlementCheck } from './types-BPATkXYu.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/firestore-compat.d.cts

@@ -1,4 +1,4 @@
-import { Y as NeetruDb, E as DbCollectionRef, P as FieldSentinel, K as DbQuery } from './types-DIVZl7nO.cjs';
+import { Y as NeetruDb, E as DbCollectionRef, P as FieldSentinel, K as DbQuery } from './types-Du_iioJ7.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/firestore-compat.d.ts

@@ -1,4 +1,4 @@
-import { Y as NeetruDb, E as DbCollectionRef, P as FieldSentinel, K as DbQuery } from './types-nnztVk7G.js';
+import { Y as NeetruDb, E as DbCollectionRef, P as FieldSentinel, K as DbQuery } from './types-BPATkXYu.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/index.cjs

@@ -64,7 +64,8 @@ var init_idempotency = __esm({
 var http_exports = {};
 __export(http_exports, {
   checkCoreVersionCompat: () => checkCoreVersionCompat,
-  httpRequest: () => httpRequest
+  httpRequest: () => httpRequest,
+  statusToCode: () => statusToCode
 });
 function stripRevision(v) {
   return v.split("+")[0] ?? v;
@@ -80,12 +81,16 @@ function compareCalVer(a, b) {
   }
   return 0;
 }
-function getSdkMajor() {
+function readInjectedSdkVersion() {
   try {
-    const ver = globalThis.__NEETRU_SDK_VERSION__;
-    if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
+    return "3.5.0";
   } catch {
+    return void 0;
   }
+}
+function getSdkMajor() {
+  const ver = readInjectedSdkVersion();
+  if (ver) return parseInt(ver.split(".")[0] ?? "3", 10);
   return 3;
 }
 function checkCoreVersionCompat(coreVersion) {
@@ -163,6 +168,10 @@ async function httpRequest(config, opts) {
     accept: "application/json",
     ...opts.headers
   };
+  const sdkVersion = readInjectedSdkVersion();
+  if (sdkVersion) {
+    headers["x-neetru-sdk-version"] = sdkVersion;
+  }
   if (opts.requireAuth) {
     if (!config.apiKey) {
       throw new exports.NeetruError(
@@ -527,7 +536,7 @@ var init_lease = __esm({
             void this._doRenew();
           }, MIN_RENEWAL_DELAY_MS);
           console.warn(
-            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${MIN_RENEWAL_DELAY_MS}ms (cert mTLS expira ~15min ap\xF3s o \xFAltimo swap):`,
+            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${MIN_RENEWAL_DELAY_MS}ms (cert TLS ef\xEAmero do servidor expira ~15min ap\xF3s o \xFAltimo swap):`,
             err instanceof Error ? err.message : err
           );
           return;
@@ -538,8 +547,9 @@ var init_lease = __esm({
       /**
        * Recuperação REATIVA: chamado pelo wrapper resiliente (`resilient-pool.ts`)
        * quando uma query plana falha num erro de ESTABELECIMENTO de conexão (cert
-       * mTLS expirado no meio de uma request, ou timer de renovação que não
-       * disparou). Emite um lease NOVO e faz o swap do pool interno do wrapper com
+       * TLS efêmero do servidor expirado no meio de uma request, ou timer de
+       * renovação que não disparou). Emite um lease NOVO e faz o swap do pool interno
+       * do wrapper com
        * o certificado fresco; o wrapper então re-tenta a query 1x no pool novo.
        *
        * Vai DIRETO ao lease novo (sem `leaseId`) — a conexão falhou porque o
@@ -1139,7 +1149,14 @@ function toProduct(raw) {
   if (Array.isArray(r.plans)) {
     product.plans = r.plans.filter(
       (p) => typeof p === "object" && p !== null && typeof p.id === "string" && typeof p.name === "string"
-    );
+    ).map((p) => {
+      const plan = { id: p.id, name: p.name };
+      if (typeof p.amountCents === "number") plan.amountCents = p.amountCents;
+      if (Array.isArray(p.features) && p.features.every((f) => typeof f === "string")) {
+        plan.features = p.features;
+      }
+      return plan;
+    });
   }
   return product;
 }
@@ -1719,7 +1736,10 @@ function createSupportNamespace(config) {
       await httpRequest(config, {
         method: "POST",
         path: `/api/sdk/v1/support/tickets/${encodeURIComponent(ticketId)}/satisfaction-attempt`,
-        requireAuth: true
+        requireAuth: true,
+        // Incrementa satisfactionAttempts += 1 no Core — sem idempotencyKey,
+        // um retry de rede infla o contador (mesmo padrão de createTicket acima).
+        idempotencyKey: true
       });
     },
     /**
@@ -5921,7 +5941,12 @@ function createWebhooksNamespace(config) {
           events: input.events,
           ...input.secret ? { secret: input.secret } : {}
         },
-        requireAuth: true
+        requireAuth: true,
+        // Sem isso, um retry de rede (app-level; SDK default é 0 retries em
+        // POST) podia registrar o MESMO webhook duas vezes → entrega
+        // duplicada de todo evento futuro pro endpoint do cliente. Core
+        // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
+        idempotencyKey: true
       });
       return toEndpoint(raw);
     },
@@ -6474,16 +6499,6 @@ async function safeJson2(res) {
     return void 0;
   }
 }
-function statusToCode2(status) {
-  if (status === 401) return "unauthorized";
-  if (status === 403) return "forbidden";
-  if (status === 404) return "not_found";
-  if (status === 409) return "conflict";
-  if (status === 422 || status === 400) return "validation_failed";
-  if (status === 429) return "rate_limited";
-  if (status >= 500) return "server_error";
-  return "unknown";
-}
 function joinUrl(baseUrl, path) {
   const base = baseUrl.replace(/\/+$/, "");
   const p = path.startsWith("/") ? path : `/${path}`;
@@ -6518,7 +6533,7 @@ async function aiFetch(config, body, signal, stream) {
   const requestId = res.headers.get("x-request-id") ?? res.headers.get("x-correlation-id") ?? void 0;
   if (!res.ok) {
     const parsed = await safeJson2(res);
-    let code = statusToCode2(res.status);
+    let code = statusToCode(res.status);
     let message = `HTTP ${res.status}`;
     if (parsed && typeof parsed === "object" && "error" in parsed) {
       const errField = parsed.error;
@@ -6637,6 +6652,19 @@ function createAiNamespace(config) {
 // src/mocks.ts
 init_db_errors();
 init_errors();
+
+// src/runtime-env.ts
+function isProductionRuntime() {
+  try {
+    if (typeof process !== "undefined" && process.env) {
+      return process.env.NODE_ENV === "production";
+    }
+  } catch {
+  }
+  return false;
+}
+
+// src/mocks.ts
 var DEV_FIXTURE_USER = Object.freeze({
   uid: "dev-fixture-uid-0001",
   email: "dev@neetru.local",
@@ -6653,6 +6681,12 @@ var MockAuth = class {
     this._user = initialUser;
     this._listeners = /* @__PURE__ */ new Set();
     this._allowUnsignedDecode = options?.allowUnsignedDecode ?? false;
+    if (this._allowUnsignedDecode && isProductionRuntime()) {
+      throw new exports.NeetruError(
+        "invalid_config",
+        "MockAuth com allowUnsignedDecode=true \xE9 PROIBIDO em produ\xE7\xE3o (NODE_ENV=production): decodificar JWT sem verificar assinatura \xE9 bypass de autentica\xE7\xE3o. Este modo existe exclusivamente para testes."
+      );
+    }
     if (this._allowUnsignedDecode) {
       const isTestEnv = typeof process !== "undefined" && (process.env?.NODE_ENV === "test" || process.env?.VITEST === "true" || process.env?.VITEST != null);
       if (!isTestEnv && typeof console !== "undefined") {
@@ -7388,7 +7422,7 @@ function resolveEnv(configEnv) {
   }
   try {
     const g = globalThis.NEETRU_ENV;
-    if (g === "dev" || g === "workspace" || g === "prod") return g;
+    if (g === "workspace" || g === "prod") return g;
   } catch {
   }
   return "prod";
@@ -7973,7 +8007,7 @@ function createNeetruClient(config = {}) {
     productId: config.productId,
     tenantId: config.tenantId
   });
-  const isDev = env === "dev";
+  const isDev = env === "dev" && !isProductionRuntime();
   const auth = config.mocks?.auth ?? (isDev ? new MockAuth({ ...DEV_FIXTURE_USER }) : createOidcAuthNamespace(resolved));
   const usage = config.mocks?.usage ?? (isDev ? new MockUsage() : createUsageNamespace(resolved));
   const support = config.mocks?.support ?? (isDev ? new MockSupport() : createSupportNamespace(resolved));
@@ -8011,7 +8045,7 @@ function getServerNeetruClient(config = {}) {
 init_errors();
 init_db_errors();
 init_http();
-var VERSION = "3.4.6";
+var VERSION = "3.5.0";
 
 exports.DEFAULT_BASE_URL = DEFAULT_BASE_URL;
 exports.DEV_FIXTURE_USER = DEV_FIXTURE_USER;