@neetru/sdk 3.8.0 → 3.8.1

package/dist/index.cjs

@@ -3,11 +3,11 @@
 var jose = require('jose');
 var idb = require('idb');
 
-var ir = Object.defineProperty;
+var sr = Object.defineProperty;
 var W = (n, e) => () => (n && (e = n(n = 0)), e);
 var ft = (n, e) => {
   for (var t in e)
-    ir(n, t, { get: e[t], enumerable: true });
+    sr(n, t, { get: e[t], enumerable: true });
 };
 
 // src/errors.ts
@@ -58,9 +58,9 @@ var St = W(() => {
 
 // src/correlation.ts
 function Rt(n) {
-  return typeof n == "string" && n.length > 0 && n.length <= 128 && pr.test(n);
+  return typeof n == "string" && n.length > 0 && n.length <= 128 && fr.test(n);
 }
-function fr() {
+function mr() {
   let n = globalThis.crypto;
   try {
     if (n && typeof n.randomUUID == "function") return n.randomUUID();
@@ -87,11 +87,11 @@ function _e(n, e) {
     }
     r[i] = s;
   }
-  let o = t ?? (Rt(e) ? e : void 0) ?? fr();
+  let o = t ?? (Rt(e) ? e : void 0) ?? mr();
   return r[Tt] = o, { headers: r, correlationId: o };
 }
-var Tt, pr, We = W(() => {
-  Tt = "x-correlation-id", pr = /^[A-Za-z0-9._:\-]+$/;
+var Tt, fr, We = W(() => {
+  Tt = "x-correlation-id", fr = /^[A-Za-z0-9._:\-]+$/;
 });
 
 // src/server-only-key.ts
@@ -109,7 +109,7 @@ function Q() {
   return null;
 }
 function It(n, e) {
-  let t = mr[n];
+  let t = hr[n];
   return (`${e ? `[Neetru SDK] Recusado: a credencial nrt_ do produto foi passada ao SDK rodando ${t}.` : `[Neetru SDK] ATEN\xC7\xC3O: a credencial nrt_ do produto est\xE1 sendo usada ${t}.`} Essa chave \xE9 S\xD3 DE SERVIDOR \u2014 quem abrir o DevTools (ou descompactar o app) copia a chave e fala com o Core como se fosse o seu produto. Como corrigir: o site/app chama a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio (Authorization: Bearer <access_token>); o backend do produto valida com verifyAccessToken() e usa o SDK com a chave (NEETRU_API_KEY, sem prefixo NEXT_PUBLIC_/EXPO_PUBLIC_). ` + (e ? "" : "Nesta vers\xE3o \xE9 s\xF3 um aviso; use strictServerOnlyKey: true para bloquear j\xE1. Na pr\xF3xima vers\xE3o MAJOR do SDK isso passa a falhar sempre.")).trim();
 }
 function At(n) {
@@ -127,9 +127,9 @@ function At(n) {
     }
   }
 }
-var mr, Ct, be = W(() => {
+var hr, Ct, be = W(() => {
   C();
-  mr = {
+  hr = {
     browser: "no navegador",
     "react-native": "num app React Native"
   };
@@ -146,7 +146,7 @@ ft(ne, {
 function $e(n) {
   return n.split("+")[0] ?? n;
 }
-function gr(n, e) {
+function yr(n, e) {
   let t = $e(n).split(".").map(Number), r = $e(e).split(".").map(Number), o = Math.max(t.length, r.length);
   for (let i = 0; i < o; i++) {
     let s = t[i] ?? 0, a = r[i] ?? 0;
@@ -156,28 +156,28 @@ function gr(n, e) {
 }
 function Ot() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }
 }
-function yr() {
+function _r() {
   let n = Ot();
   return n ? parseInt(n.split(".")[0] ?? "3", 10) : 3;
 }
 function te(n) {
   if (!n) return;
-  let e = yr(), t = hr[e];
+  let e = _r(), t = gr[e];
   if (!t) return;
   let r = $e(n);
-  if (gr(r, t) < 0) {
+  if (yr(r, t) < 0) {
     let o = `${e}:${r}`;
     Et.has(o) || (Et.add(o), console.warn(
       `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${n}" \xE9 anterior ao m\xEDnimo recomendado "${t}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
     ));
   }
 }
-function _r() {
+function br() {
   let n = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
   return Q() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + n + ")" : n;
 }
@@ -185,7 +185,7 @@ function Pt(n) {
   let e = 200 * Math.pow(4, n), t = e * 0.2 * (Math.random() * 2 - 1);
   return Math.max(50, Math.round(e + t));
 }
-function Sr(n) {
+function Tr(n) {
   if (!n) return null;
   let e = Number(n);
   if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), Dt);
@@ -202,7 +202,7 @@ function Nt(n) {
 function ve(n) {
   return n === 401 ? "unauthorized" : n === 403 ? "forbidden" : n === 404 ? "not_found" : n === 409 ? "conflict" : n === 410 ? "gone" : n === 422 || n === 400 ? "validation_failed" : n === 429 ? "rate_limited" : n >= 500 ? "server_error" : "unknown";
 }
-function Tr(n, e, t) {
+function Rr(n, e, t) {
   let r = n.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, i = new URL(`${r}${o}`);
   if (t)
     for (let [s, a] of Object.entries(t))
@@ -219,25 +219,25 @@ async function xt(n) {
     }
 }
 async function S(n, e) {
-  let t = e.method ?? "GET", r = Tr(n.baseUrl, e.path, e.query), o = wr.has(t) ? br : vr, i = e.retries ?? o, { headers: s, correlationId: a } = _e(
+  let t = e.method ?? "GET", r = Rr(n.baseUrl, e.path, e.query), o = kr.has(t) ? vr : wr, i = e.retries ?? o, { headers: s, correlationId: a } = _e(
     { accept: "application/json", ...e.headers },
     e.correlationId
-  ), c = Ot();
-  if (c && (s["x-neetru-sdk-version"] = c), e.requireAuth) {
+  ), d = Ot();
+  if (d && (s["x-neetru-sdk-version"] = d), e.requireAuth) {
     if (!n.apiKey)
-      throw new exports.NeetruError("missing_api_key", _r());
+      throw new exports.NeetruError("missing_api_key", br());
     s.authorization = `Bearer ${n.apiKey}`;
   }
   if (e.idempotencyKey) {
     let f = typeof e.idempotencyKey == "string" ? e.idempotencyKey : kt();
     s["idempotency-key"] = f;
   }
-  let u = e.body !== void 0 && t !== "GET" && t !== "DELETE" ? JSON.stringify(e.body) : void 0;
-  u !== void 0 && (s["content-type"] = "application/json");
-  let d = null, p = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
+  let p = e.body !== void 0 && t !== "GET" && t !== "DELETE" ? JSON.stringify(e.body) : void 0;
+  p !== void 0 && (s["content-type"] = "application/json");
+  let l = null, u = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
   for (let f = 0; f <= i; f++) {
-    if (p != null && Date.now() >= p)
-      throw d ?? new exports.NeetruError(
+    if (u != null && Date.now() >= u)
+      throw l ?? new exports.NeetruError(
         "network_error",
         "Deadline excedido antes de completar a request",
         void 0,
@@ -246,22 +246,22 @@ async function S(n, e) {
         a
       );
     let m = { method: t, headers: s };
-    u !== void 0 && (m.body = u);
-    let h = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
+    p !== void 0 && (m.body = p);
+    let h = u != null ? Math.max(1, Math.min(3e4, u - Date.now())) : 3e4;
     m.signal = AbortSignal.timeout(h);
     let y;
     try {
       y = await n.fetch(r, m);
     } catch (b) {
       let E = b instanceof DOMException && b.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${b instanceof Error ? b.message : "fetch failed"}`;
-      if (d = new exports.NeetruError("network_error", E, void 0, void 0, void 0, a), f < i) {
+      if (l = new exports.NeetruError("network_error", E, void 0, void 0, void 0, a), f < i) {
         let x = Pt(f);
-        if (p == null || Date.now() + x < p) {
+        if (u == null || Date.now() + x < u) {
           await Nt(x);
           continue;
         }
       }
-      throw d;
+      throw l;
     }
     let I = y.headers.get("x-request-id") ?? y.headers.get("x-correlation-id") ?? void 0;
     if (y.ok) {
@@ -278,29 +278,29 @@ async function S(n, e) {
       N === `HTTP ${y.status}` && (N = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), b && !N.includes(b) && (N += ` Substituto: ${b}.`);
     }
     let _ = new exports.NeetruError(k, N, y.status, I, g, a);
-    if (d = _, kr.has(k) && f < i) {
-      let E = Sr(y.headers.get("retry-after")) ?? Pt(f);
-      if (p == null || Date.now() + E < p) {
+    if (l = _, Sr.has(k) && f < i) {
+      let E = Tr(y.headers.get("retry-after")) ?? Pt(f);
+      if (u == null || Date.now() + E < u) {
         await Nt(E);
         continue;
       }
     }
     throw _;
   }
-  throw d ?? new exports.NeetruError("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, a);
+  throw l ?? new exports.NeetruError("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, a);
 }
-var hr, Et, br, vr, wr, kr, Dt, q = W(() => {
+var gr, Et, vr, wr, kr, Sr, Dt, q = W(() => {
   C();
   St();
   We();
   be();
-  hr = {
+  gr = {
     // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
     // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
     3: "2026.05.1"
   };
   Et = /* @__PURE__ */ new Set();
-  br = 2, vr = 0, wr = /* @__PURE__ */ new Set(["GET", "HEAD"]), kr = /* @__PURE__ */ new Set([
+  vr = 2, wr = 0, kr = /* @__PURE__ */ new Set(["GET", "HEAD"]), Sr = /* @__PURE__ */ new Set([
     "rate_limited",
     "server_error",
     "network_error"
@@ -309,9 +309,9 @@ var hr, Et, br, vr, wr, kr, Dt, q = W(() => {
 });
 
 // src/db-errors.ts
-var Mr; exports.NeetruDbError = void 0; var z = W(() => {
+var qr; exports.NeetruDbError = void 0; var z = W(() => {
   C();
-  Mr = /* @__PURE__ */ new Set([
+  qr = /* @__PURE__ */ new Set([
     "db_unavailable",
     "db_conflict",
     "db_timeout"
@@ -329,7 +329,7 @@ var Mr; exports.NeetruDbError = void 0; var z = W(() => {
      */
     dbId;
     constructor(e, t, r) {
-      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = Mr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
+      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = qr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
     }
   };
 });
@@ -338,7 +338,7 @@ var Mr; exports.NeetruDbError = void 0; var z = W(() => {
 function De(n) {
   return typeof n == "object" && n !== null && n[Xe] === true;
 }
-function io(n) {
+function so(n) {
   let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
   if (e === "ECONNREFUSED" || e === "ETIMEDOUT" || e === "ENOTFOUND" || e === "EHOSTUNREACH" || e === "EAI_AGAIN")
     return true;
@@ -350,56 +350,73 @@ function io(n) {
   let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
   return r.length === 0 ? false : !!(r.includes("certificate expired") || r.includes("certificate has expired") || r.includes("cert_has_expired") || r.includes("alert certificate expired") || r.includes("err_ssl") || r.includes("sslv3 alert") || r.includes("tlsv1 alert") || r.includes("econnrefused") || r.includes("etimedout") || r.includes("enotfound") || r.includes("ehostunreach") || r.includes("getaddrinfo"));
 }
+function rn(n) {
+  let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
+  if (typeof e == "string" && ao.has(e.toUpperCase()))
+    return true;
+  let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
+  return r.length === 0 ? false : r.includes("password authentication failed") || r.includes("sasl authentication failed");
+}
+function co(n) {
+  return so(n) || rn(n);
+}
 function Ye(n) {
   let e = { current: n }, t = null, r = {
-    __neetruSwapInner(c) {
+    __neetruSwapInner(l) {
       let u = e.current;
-      return e.current = c, u;
+      return e.current = l, u;
     },
     __neetruGetInner() {
       return e.current;
     },
-    __neetruSetReLease(c) {
-      t = c;
+    __neetruSetReLease(l) {
+      t = l;
     }
-  }, o = (c, u) => c.query(...u), i = (...c) => c.length > 0 && typeof c[c.length - 1] == "function" ? o(e.current, c) : (async () => {
+  }, o = (l, u, f) => u[l](
+    ...f
+  ), i = (l, u) => (...f) => f.length > 0 && typeof f[f.length - 1] == "function" ? o(l, e.current, f) : (async () => {
     try {
-      return await o(e.current, c);
-    } catch (u) {
-      let d = t;
-      if (d === null || !io(u))
-        throw u;
+      return await o(l, e.current, f);
+    } catch (m) {
+      let h = t;
+      if (h === null || !u(m))
+        throw m;
       try {
-        await d();
+        await h();
       } catch {
-        throw u;
+        throw m;
       }
-      return await o(e.current, c);
+      return await o(l, e.current, f);
     }
-  })(), s = Object.create(Object.getPrototypeOf(n));
-  return new Proxy(s, {
-    get(c, u) {
+  })(), s = i("query", co), a = i("connect", rn), d = Object.create(Object.getPrototypeOf(n));
+  return new Proxy(d, {
+    get(l, u) {
       if (u === Xe) return true;
       if (u === "__neetruSwapInner") return r.__neetruSwapInner;
       if (u === "__neetruGetInner") return r.__neetruGetInner;
       if (u === "__neetruSetReLease") return r.__neetruSetReLease;
-      if (u === "query") return i;
+      if (u === "query") return s;
+      if (u === "connect") {
+        let h = e.current;
+        return typeof h.connect == "function" ? a : h.connect;
+      }
       if (u === "constructor")
         return e.current.constructor;
-      let d = e.current, p = Reflect.get(d, u, d);
-      return typeof p == "function" ? p.bind(d) : p;
+      let f = e.current, m = Reflect.get(f, u, f);
+      return typeof m == "function" ? m.bind(f) : m;
     }
   });
 }
-var Xe, Ze = W(() => {
+var Xe, ao, Ze = W(() => {
   Xe = /* @__PURE__ */ Symbol.for("neetru.sdk.resilientPool");
+  ao = /* @__PURE__ */ new Set(["28P01", "28000"]);
 });
 
 // src/db/sql/lease.ts
-function ao(n, e) {
+function uo(n, e) {
   return n ? n.leaseId !== e.leaseId || n.credentialVersion !== e.credentialVersion || n.host !== e.host || n.port !== e.port || n.dbName !== e.dbName || n.user !== e.user || n.password !== e.password || n.sslca !== e.sslca || n.clientCert !== e.clientCert || n.clientKey !== e.clientKey : true;
 }
-function co(n) {
+function po(n) {
   if (n instanceof exports.NeetruDbError) return n;
   let e = n instanceof Error ? n.message : String(n), t = n instanceof Error ? n.code : void 0;
   return typeof t == "string" && (t === "ECONNREFUSED" || t === "ENOTFOUND" || t === "ETIMEDOUT") ? new exports.NeetruDbError(
@@ -407,10 +424,10 @@ function co(n) {
     `Pool connection failed (${t}): ${e}`
   ) : e.includes("statement timeout") || e.includes("lock timeout") ? new exports.NeetruDbError("db_timeout", `Query timeout: ${e}`) : e.includes("40001") || e.includes("40P01") || e.includes("deadlock") ? new exports.NeetruDbError("db_conflict", `Transaction conflict: ${e}`) : e.includes("42501") || e.toLowerCase().includes("permission denied") ? new exports.NeetruDbError("db_permission_denied", `Permission denied: ${e}`) : new exports.NeetruDbError("db_unavailable", `Database error: ${e}`);
 }
-var so, Z, se, rn = W(() => {
+var lo, Z, se, on = W(() => {
   z();
   Ze();
-  so = 0.8, Z = 3e4, se = class {
+  lo = 0.8, Z = 3e4, se = class {
     /**
      * Lease atual. `null` no modo LAZY antes da 1ª query (o 1º lease é adiado —
      * ver `_ensureInitialLease`). Após a 1ª aquisição, sempre não-nulo.
@@ -450,7 +467,7 @@ var so, Z, se, rn = W(() => {
           isolationLevel: t.isolationLevel
         }) : await this._orm.transaction(e);
       } catch (r) {
-        throw co(r);
+        throw po(r);
       }
     }
     async close() {
@@ -473,7 +490,7 @@ var so, Z, se, rn = W(() => {
       if (!Number.isFinite(e)) return Z;
       let t = this._deps.now(), r = e - t;
       if (r <= 0) return Z;
-      let o = r * (1 - so);
+      let o = r * (1 - lo);
       return Math.max(Z, Math.round(o));
     }
     _scheduleRenewal() {
@@ -502,7 +519,7 @@ var so, Z, se, rn = W(() => {
           this._renewalTimer = setTimeout(() => {
             this._doRenew();
           }, Z), console.warn(
-            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${Z}ms (cert TLS ef\xEAmero do servidor expira ~15min ap\xF3s o \xFAltimo swap):`,
+            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${Z}ms (o cert de cliente mTLS do lease expira ~15min ap\xF3s o \xFAltimo swap):`,
             t instanceof Error ? t.message : t
           );
           return;
@@ -514,10 +531,13 @@ var so, Z, se, rn = W(() => {
     /**
      * Recuperação REATIVA: chamado pelo wrapper resiliente (`resilient-pool.ts`)
      * quando uma query plana falha num erro de ESTABELECIMENTO de conexão (cert
-     * TLS efêmero do servidor expirado no meio de uma request, ou timer de
-     * renovação que não disparou). Emite um lease NOVO e faz o swap do pool interno
-     * do wrapper com
-     * o certificado fresco; o wrapper então re-tenta a query 1x no pool novo.
+     * TLS de cliente mTLS do lease expirado no meio de uma request, ou timer de
+     * renovação que não disparou) ou de AUTENTICAÇÃO (senha rotacionada por
+     * `rotate-credentials` antes do próximo renew — SQLSTATE 28P01/28000, ou o
+     * 08P01+SASL do PgBouncer; também no `connect()` de uma transação). Emite um
+     * lease NOVO e faz o swap do pool interno do wrapper com a credencial e o
+     * certificado frescos (o pool velho é drenado com `end()`); o wrapper então
+     * re-tenta a operação 1x no pool novo.
      *
      * Vai DIRETO ao lease novo (sem `leaseId`) — a conexão falhou porque o
      * certificado do lease atual está ruim, então `renew` (que depende do lease
@@ -609,7 +629,7 @@ var so, Z, se, rn = W(() => {
      * Exposto como método protegido para testes.
      */
     async _swapPool(e) {
-      if (!ao(this._lease, e)) {
+      if (!uo(this._lease, e)) {
         this._lease = e;
         return;
       }
@@ -636,29 +656,29 @@ var so, Z, se, rn = W(() => {
 });
 
 // src/db/sql/sql-client.ts
-var pn = {};
-ft(pn, {
-  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => dn,
-  DEFAULT_POOL_IDLE_MS: () => ln,
-  DEFAULT_POOL_MAX: () => cn,
-  LEASE_ENDPOINT: () => on,
-  LEASE_RENEW_ENDPOINT: () => sn,
-  createDrizzleHandle: () => fo,
-  createHttpLeaseFetcher: () => an,
-  createPgPool: () => po,
-  createSqlClientFromConfig: () => ho,
-  createSqlClientWithDeps: () => un,
+var fn = {};
+ft(fn, {
+  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => un,
+  DEFAULT_POOL_IDLE_MS: () => dn,
+  DEFAULT_POOL_MAX: () => ln,
+  LEASE_ENDPOINT: () => sn,
+  LEASE_RENEW_ENDPOINT: () => an,
+  createDrizzleHandle: () => go,
+  createHttpLeaseFetcher: () => cn,
+  createPgPool: () => ho,
+  createSqlClientFromConfig: () => _o,
+  createSqlClientWithDeps: () => pn,
   resolvePoolTuning: () => tt
 });
-function lo(n) {
+function fo(n) {
   return n === "workspace" ? "staging" : n === "prod" ? "production" : "dev-local";
 }
-function an(n) {
+function cn(n) {
   return async (e) => {
-    let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = !!e?.leaseId, o = r ? sn : on, i;
+    let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = !!e?.leaseId, o = r ? an : sn, i;
     r ? i = { leaseId: e.leaseId } : (i = {
       productId: n.productId ?? "",
-      environment: lo(n.env ?? "prod")
+      environment: fo(n.env ?? "prod")
     }, e?.database !== void 0 && (i.database = e.database));
     let s;
     try {
@@ -671,23 +691,23 @@ function an(n) {
         retries: 2
       });
     } catch (a) {
-      let c = r ? "renovar" : "obter", u = a instanceof Error ? a.message : String(a), d = a instanceof exports.NeetruError ? a.reason : void 0;
-      if (d === "suspended" || d === "archived" || d === "revoked") {
-        let p = d === "suspended" ? "ambiente suspenso \u2014 a m\xE1quina que o servia parou; ser\xE1 religado quando o ambiente voltar" : d === "archived" ? "ambiente arquivado \u2014 este banco foi arquivado e n\xE3o aceita mais conex\xF5es" : "lease revogado \u2014 as credenciais deste ambiente foram revogadas pelo Core";
+      let d = r ? "renovar" : "obter", p = a instanceof Error ? a.message : String(a), l = a instanceof exports.NeetruError ? a.reason : void 0;
+      if (l === "suspended" || l === "archived" || l === "revoked") {
+        let u = l === "suspended" ? "ambiente suspenso \u2014 a m\xE1quina que o servia parou; ser\xE1 religado quando o ambiente voltar" : l === "archived" ? "ambiente arquivado \u2014 este banco foi arquivado e n\xE3o aceita mais conex\xF5es" : "lease revogado \u2014 as credenciais deste ambiente foram revogadas pelo Core";
         throw new exports.NeetruDbError(
           "db_suspended",
-          `Falha ao ${c} lease SQL: ${p} (reason=${d}).`
+          `Falha ao ${d} lease SQL: ${u} (reason=${l}).`
         );
       }
       throw new exports.NeetruDbError(
         "db_unavailable",
-        `Falha ao ${c} lease SQL: ${u}`
+        `Falha ao ${d} lease SQL: ${p}`
       );
     }
-    return uo(s);
+    return mo(s);
   };
 }
-function uo(n) {
+function mo(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruDbError("db_unavailable", "Resposta de lease inv\xE1lida (n\xE3o \xE9 objeto).");
   let t = n.lease;
@@ -729,12 +749,12 @@ function tt() {
   return {
     // Teto 100: bem abaixo do `max_client_conn = 500` do PgBouncer, com folga
     // para múltiplas instâncias do app dividirem o mesmo front-door.
-    max: et("NEETRU_DB_POOL_MAX", cn, 1, 100),
+    max: et("NEETRU_DB_POOL_MAX", ln, 1, 100),
     // Teto 15min = janela do cert; piso 1s.
-    idleTimeoutMillis: et("NEETRU_DB_POOL_IDLE_MS", ln, 1e3, 9e5),
+    idleTimeoutMillis: et("NEETRU_DB_POOL_IDLE_MS", dn, 1e3, 9e5),
     connectionTimeoutMillis: et(
       "NEETRU_DB_POOL_CONNECT_TIMEOUT_MS",
-      dn,
+      un,
       1e3,
       12e4
     ),
@@ -742,7 +762,7 @@ function tt() {
     keepAliveInitialDelayMillis: 1e4
   };
 }
-async function po(n) {
+async function ho(n) {
   let { Pool: e } = await import(
     /* webpackIgnore: true */
     'pg'
@@ -762,14 +782,14 @@ async function po(n) {
     ...tt()
   });
 }
-async function fo(n, e) {
+async function go(n, e) {
   let { drizzle: t } = await import(
     /* webpackIgnore: true */
     'drizzle-orm/node-postgres'
   );
   return t(n, { schema: e });
 }
-function mo(n, e) {
+function yo(n, e) {
   let t = null, r = null, o = () => t ? Promise.resolve(t) : (r || (r = e().then((s) => (t = s, r = null, s)).catch((s) => {
     throw r = null, s;
   })), r), i = {
@@ -785,52 +805,52 @@ function mo(n, e) {
   };
   return n && Object.setPrototypeOf(i, n), i;
 }
-async function un(n, e) {
+async function pn(n, e) {
   let t = e?.database !== void 0 ? { ...n, database: e.database } : n;
   if (t.lazy) {
-    let c = null, u = mo(t.poolPrototype ?? null, () => {
-      if (!c)
+    let d = null, p = yo(t.poolPrototype ?? null, () => {
+      if (!d)
         throw new exports.NeetruDbError("db_unavailable", "SQL client n\xE3o inicializado (manager ausente).");
-      return c._ensureInitialLease();
-    }), d = Ye(u), p;
+      return d._ensureInitialLease();
+    }), l = Ye(p), u;
     try {
-      p = t.createDrizzle(d, t.schema);
+      u = t.createDrizzle(l, t.schema);
     } catch (m) {
       let h = m instanceof Error ? m.message : String(m);
       throw new exports.NeetruDbError("db_unavailable", `Falha ao criar handle Drizzle: ${h}`);
     }
-    let f = new se(null, d, p, t);
-    return c = f, d.__neetruSetReLease(() => f._reactiveReLease()), f;
+    let f = new se(null, l, u, t);
+    return d = f, l.__neetruSetReLease(() => f._reactiveReLease()), f;
   }
   let r;
   try {
     e?.database !== void 0 ? r = await t.fetchLease({ database: e.database }) : r = await t.fetchLease();
-  } catch (c) {
-    if (c instanceof exports.NeetruDbError) throw c;
-    let u = c instanceof Error ? c.message : String(c);
-    throw new exports.NeetruDbError("db_unavailable", `Falha ao obter lease inicial: ${u}`);
+  } catch (d) {
+    if (d instanceof exports.NeetruDbError) throw d;
+    let p = d instanceof Error ? d.message : String(d);
+    throw new exports.NeetruDbError("db_unavailable", `Falha ao obter lease inicial: ${p}`);
   }
   let o;
   try {
     o = t.createPool(r);
-  } catch (c) {
-    let u = c instanceof Error ? c.message : String(c);
-    throw new exports.NeetruDbError("db_unavailable", `Falha ao abrir pool: ${u}`);
+  } catch (d) {
+    let p = d instanceof Error ? d.message : String(d);
+    throw new exports.NeetruDbError("db_unavailable", `Falha ao abrir pool: ${p}`);
   }
   let i = Ye(o), s;
   try {
     s = t.createDrizzle(i, t.schema);
-  } catch (c) {
+  } catch (d) {
     await o.end().catch(() => {
     });
-    let u = c instanceof Error ? c.message : String(c);
-    throw new exports.NeetruDbError("db_unavailable", `Falha ao criar handle Drizzle: ${u}`);
+    let p = d instanceof Error ? d.message : String(d);
+    throw new exports.NeetruDbError("db_unavailable", `Falha ao criar handle Drizzle: ${p}`);
   }
   let a = new se(r, i, s, t);
   return i.__neetruSetReLease(() => a._reactiveReLease()), a;
 }
-async function ho(n, e, t) {
-  let r = an(n), o, i;
+async function _o(n, e, t) {
+  let r = cn(n), o, i;
   try {
     o = await import(
       /* webpackIgnore: true */
@@ -839,36 +859,36 @@ async function ho(n, e, t) {
       /* webpackIgnore: true */
       'drizzle-orm/node-postgres'
     );
-  } catch (u) {
+  } catch (p) {
     throw new exports.NeetruDbError(
       "db_unavailable",
-      `[client.db.sql] requer pg + drizzle-orm como peerDependencies do servidor. Instale: npm install pg drizzle-orm. (${u.message})`
+      `[client.db.sql] requer pg + drizzle-orm como peerDependencies do servidor. Instale: npm install pg drizzle-orm. (${p.message})`
     );
   }
   let s = o.Pool ?? o.default?.Pool;
-  return un(
+  return pn(
     {
       fetchLease: r,
-      createPool: (u) => {
-        let d = u.sslca ? {
-          ca: u.sslca,
-          cert: u.clientCert ?? void 0,
-          key: u.clientKey ?? void 0,
+      createPool: (p) => {
+        let l = p.sslca ? {
+          ca: p.sslca,
+          cert: p.clientCert ?? void 0,
+          key: p.clientKey ?? void 0,
           rejectUnauthorized: true
         } : false;
         return new s({
-          host: u.host,
-          port: u.port,
-          database: u.dbName,
-          user: u.user,
-          password: u.password,
-          ssl: d,
+          host: p.host,
+          port: p.port,
+          database: p.dbName,
+          user: p.user,
+          password: p.password,
+          ssl: l,
           // Tuning centralizado (env-tunável) — ver resolvePoolTuning + auditoria
           // docs/_review/AUDITORIA_DB_CONN_PERF_2026-09-06.md no Core.
           ...tt()
         });
       },
-      createDrizzle: (u, d) => i.drizzle(u, { schema: d }),
+      createDrizzle: (p, l) => i.drizzle(p, { schema: l }),
       schema: e,
       // Lease inicial LAZY (motor de ambientes suspenso): `client.db.sql()` não
       // pode explodir o `import` do módulo do produto quando o ambiente está
@@ -881,13 +901,13 @@ async function ho(n, e, t) {
     t
   );
 }
-var on, sn, cn, ln, dn, fn = W(() => {
+var sn, an, ln, dn, un, mn = W(() => {
   z();
   C();
-  rn();
+  on();
   Ze();
-  on = "/api/sdk/v1/db/lease", sn = "/api/sdk/v1/db/lease/renew";
-  cn = 10, ln = 6e4, dn = 1e4;
+  sn = "/api/sdk/v1/db/lease", an = "/api/sdk/v1/db/lease/renew";
+  ln = 10, dn = 6e4, un = 1e4;
 });
 var mt = /* @__PURE__ */ new Map(), ee = 3600 * 1e3;
 function ye(n, e = ee) {
@@ -926,11 +946,11 @@ function yt(n) {
 
 // src/base-url-allowlist.ts
 C();
-var _t = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), ar = ".neetru.com", cr = "neetru.com", lr = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
+var _t = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), cr = ".neetru.com", lr = "neetru.com", dr = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
 function bt(n) {
-  return lr.test(n);
+  return dr.test(n);
 }
-function dr(n) {
+function ur(n) {
   return n.toLowerCase().replace(/\.+$/, "");
 }
 function vt(n, e = []) {
@@ -942,8 +962,8 @@ function vt(n, e = []) {
   } catch {
     throw new exports.NeetruError("invalid_config", `baseUrl is not a valid URL: ${n}`);
   }
-  let r = t.protocol, o = dr(t.hostname);
-  if (ur())
+  let r = t.protocol, o = ur(t.hostname);
+  if (pr())
     return typeof console < "u" && console.warn(
       `[neetru-sdk] NEETRU_ALLOW_INSECURE_BASEURL=1 ativo. baseUrl=${n} aceito sem valida\xE7\xE3o.`
     ), n.replace(/\/+$/, "");
@@ -960,9 +980,9 @@ function vt(n, e = []) {
       );
     return n.replace(/\/+$/, "");
   }
-  let i = o === cr || o.endsWith(ar), s = e.some((c) => {
-    let u = c.toLowerCase();
-    return o === u || o.endsWith(`.${u}`);
+  let i = o === lr || o.endsWith(cr), s = e.some((d) => {
+    let p = d.toLowerCase();
+    return o === p || o.endsWith(`.${p}`);
   }), a = _t.has(o) || bt(o);
   if (!i && !s && !a)
     throw new exports.NeetruError(
@@ -971,7 +991,7 @@ function vt(n, e = []) {
     );
   return n.replace(/\/+$/, "");
 }
-function ur() {
+function pr() {
   try {
     let e = globalThis.process?.env?.NEETRU_ALLOW_INSECURE_BASEURL;
     if (e === "1" || e === "true") return !0;
@@ -1055,9 +1075,9 @@ function Ut(n) {
 
 // src/entitlements.ts
 C();
-var Rr = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
+var Ir = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
 function Mt() {
-  throw new exports.NeetruError("validation_failed", Rr);
+  throw new exports.NeetruError("validation_failed", Ir);
 }
 function qt(n) {
   return {
@@ -1085,13 +1105,13 @@ function qt(n) {
 C();
 q();
 var Ft = ["debug", "info", "warn", "error", "fatal"];
-function Ir() {
+function Cr() {
   return typeof globalThis < "u" && typeof globalThis.window < "u";
 }
 function jt() {
-  return Ir() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
+  return Cr() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
 }
-function Cr(n) {
+function Ar(n) {
   switch (n) {
     case "debug":
       return console.debug.bind(console);
@@ -1107,30 +1127,30 @@ function Cr(n) {
       return console.log.bind(console);
   }
 }
-var Ar = 500, Er = 50;
+var Er = 500, Pr = 50;
 function Wt(n) {
   let e = [], t = null, r = null;
   async function o() {
     if (e.length === 0) return;
     let s = e.splice(0, e.length), a = Promise.allSettled(
-      s.map(async (c) => {
+      s.map(async (d) => {
         try {
-          let u = { name: c.name }, d = c.productSlug ?? n.productId;
-          d && (u.productSlug = d), c.properties && typeof c.properties == "object" && (u.properties = c.properties), c.timestamp && (u.timestamp = c.timestamp);
-          let p = jt();
+          let p = { name: d.name }, l = d.productSlug ?? n.productId;
+          l && (p.productSlug = l), d.properties && typeof d.properties == "object" && (p.properties = d.properties), d.timestamp && (p.timestamp = d.timestamp);
+          let u = jt();
           await S(n, {
             method: "POST",
-            path: p.path,
-            body: u,
-            requireAuth: p.requireAuth,
+            path: u.path,
+            body: p,
+            requireAuth: u.requireAuth,
             retries: 1,
             // caça-bruxas: retry sem Idempotency-Key duplicava o evento se o
             // servidor já tinha persistido antes da falha transiente. Mesmo
             // padrão do usage.report (key estável por chamada, reusada no retry).
             idempotencyKey: !0
           });
-        } catch (u) {
-          typeof console < "u" && console.warn("[neetru-sdk] telemetry.track flush failed for event", c.name, u);
+        } catch (p) {
+          typeof console < "u" && console.warn("[neetru-sdk] telemetry.track flush failed for event", d.name, p);
         }
       })
     );
@@ -1141,7 +1161,7 @@ function Wt(n) {
   function i() {
     t || (t = setTimeout(() => {
       o();
-    }, Ar));
+    }, Er));
   }
   return {
     /**
@@ -1163,17 +1183,17 @@ function Wt(n) {
         throw new exports.NeetruError("validation_failed", "event.name is required");
       if (s.name.length > 128)
         throw new exports.NeetruError("validation_failed", "event.name max 128 chars");
-      let a = { name: s.name }, c = s.productSlug ?? n.productId;
-      c && (a.productSlug = c), s.properties && typeof s.properties == "object" && (a.properties = s.properties), s.timestamp && (a.timestamp = s.timestamp);
-      let u = jt(), d = await S(n, {
+      let a = { name: s.name }, d = s.productSlug ?? n.productId;
+      d && (a.productSlug = d), s.properties && typeof s.properties == "object" && (a.properties = s.properties), s.timestamp && (a.timestamp = s.timestamp);
+      let p = jt(), l = await S(n, {
         method: "POST",
-        path: u.path,
+        path: p.path,
         body: a,
-        requireAuth: u.requireAuth
+        requireAuth: p.requireAuth
       });
-      if (!d || d.ok !== true || typeof d.eventId != "string")
+      if (!l || l.ok !== true || typeof l.eventId != "string")
         throw new exports.NeetruError("invalid_response", "Telemetry response missing eventId");
-      return { ok: true, eventId: d.eventId };
+      return { ok: true, eventId: l.eventId };
     },
     /**
      * Fire-and-forget: enqueue + flush 500ms debounce. Não retorna `eventId`
@@ -1186,7 +1206,7 @@ function Wt(n) {
      * ```
      */
     track(s) {
-      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= Er ? (t && (clearTimeout(t), t = null), o()) : i());
+      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= Pr ? (t && (clearTimeout(t), t = null), o()) : i());
     },
     /**
      * Força flush imediato da queue de `track()`. Resolva antes de
@@ -1220,35 +1240,35 @@ function Wt(n) {
       if (s.message.length > 4e3)
         throw new exports.NeetruError("validation_failed", "message max 4000 chars");
       if (n.env === "dev")
-        return Cr(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
+        return Ar(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
       let a = {
         level: s.level,
         message: s.message
       };
       s.metadata && (a.metadata = s.metadata);
-      let c = s.productSlug ?? n.productId;
-      c && (a.productSlug = c);
-      let u = s.correlationId;
-      if (!u)
+      let d = s.productSlug ?? n.productId;
+      d && (a.productSlug = d);
+      let p = s.correlationId;
+      if (!p)
         try {
           let f = globalThis.NEETRU_CORRELATION_ID;
-          typeof f == "string" && f.length > 0 && (u = f);
+          typeof f == "string" && f.length > 0 && (p = f);
         } catch {
         }
-      let d = {};
-      u && (d["x-correlation-id"] = u);
-      let p = await S(n, {
+      let l = {};
+      p && (l["x-correlation-id"] = p);
+      let u = await S(n, {
         method: "POST",
         path: "/api/sdk/v1/telemetry/log",
         body: a,
         requireAuth: true,
-        headers: d
+        headers: l
       });
-      if (!p || p.ok !== true)
+      if (!u || u.ok !== true)
         throw new exports.NeetruError("invalid_response", "Telemetry log response missing ok");
       return {
         ok: true,
-        logId: typeof p.logId == "string" ? p.logId : void 0,
+        logId: typeof u.logId == "string" ? u.logId : void 0,
         mode: "http"
       };
     }
@@ -1361,7 +1381,7 @@ function Vt(n) {
 // src/support.ts
 C();
 q();
-var Ve = ["low", "normal", "high", "urgent"], Pr = ["open", "pending", "resolved", "closed"], Bt = 50;
+var Ve = ["low", "normal", "high", "urgent"], Dr = ["open", "pending", "resolved", "closed"], Bt = 50;
 function Kt(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruError("invalid_response", "Ticket response is not an object");
@@ -1374,7 +1394,7 @@ function Kt(n) {
     subject: typeof e.subject == "string" ? e.subject : "",
     message: typeof e.message == "string" ? e.message : "",
     severity: Ve.includes(e.severity) ? e.severity : "normal",
-    status: Pr.includes(e.status) ? e.status : "open",
+    status: Dr.includes(e.status) ? e.status : "open",
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
     updatedAt: typeof e.updatedAt == "string" ? e.updatedAt : void 0,
     productSlug: typeof e.productId == "string" ? e.productId : typeof e.productSlug == "string" ? e.productSlug : void 0,
@@ -1411,12 +1431,12 @@ function Ht(n, ...e) {
     "productId required (pass to input.productSlug or set on createNeetruClient)"
   );
 }
-var Dr = "X-Neetru-End-User-Token", Nr = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", xr = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", Or = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Lr = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
+var Nr = "X-Neetru-End-User-Token", xr = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", Or = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", Lr = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Ur = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
 function Gt(n) {
   if (n instanceof exports.NeetruError && !(n instanceof exports.NeetruAuthRequiredError)) {
     if (n.code === "end_user_token_required")
       throw new exports.NeetruAuthRequiredError(
-        xr,
+        Or,
         "end_user_token_required",
         n.status,
         n.requestId,
@@ -1424,7 +1444,7 @@ function Gt(n) {
       );
     if (n.code === "invalid_end_user_token")
       throw new exports.NeetruAuthRequiredError(
-        Or,
+        Lr,
         "invalid_end_user_token",
         n.status,
         n.requestId,
@@ -1433,7 +1453,7 @@ function Gt(n) {
     if (n.code === "end_user_token_product_mismatch")
       throw new exports.NeetruError(
         "forbidden",
-        Lr,
+        Ur,
         n.status,
         n.requestId,
         "end_user_token_product_mismatch",
@@ -1442,7 +1462,7 @@ function Gt(n) {
   }
   throw n;
 }
-function Ur(n) {
+function Mr(n) {
   return n instanceof exports.NeetruError && n.code === "invalid_end_user_token";
 }
 function Qt(n, e = {}) {
@@ -1463,36 +1483,36 @@ function Qt(n, e = {}) {
     }
   }
   function o(a) {
-    return a ? { [Dr]: a } : {};
+    return a ? { [Nr]: a } : {};
   }
-  async function i(a, c) {
-    let u = await t();
-    if (!u && a && await r() && (u = await t()), !u && a)
-      throw new exports.NeetruAuthRequiredError(Nr, "no_signed_in_user");
+  async function i(a, d) {
+    let p = await t();
+    if (!p && a && await r() && (p = await t()), !p && a)
+      throw new exports.NeetruAuthRequiredError(xr, "no_signed_in_user");
     try {
-      return await c(o(u));
-    } catch (d) {
-      if (u && Ur(d) && await r()) {
-        let p = await t();
-        if (p)
+      return await d(o(p));
+    } catch (l) {
+      if (p && Mr(l) && await r()) {
+        let u = await t();
+        if (u)
           try {
-            return await c(o(p));
+            return await d(o(u));
           } catch (f) {
             Gt(f);
           }
       }
-      Gt(d);
+      Gt(l);
     }
   }
-  async function s(a, c = {}) {
+  async function s(a, d = {}) {
     await i(
       true,
-      (u) => S(n, {
+      (p) => S(n, {
         method: "POST",
         path: a,
         requireAuth: !0,
-        headers: u,
-        ...c
+        headers: p,
+        ...d
       })
     );
   }
@@ -1519,25 +1539,25 @@ function Qt(n, e = {}) {
           "validation_failed",
           `severity must be one of ${Ve.join(", ")}`
         );
-      let u = {
+      let p = {
         productId: Ht(n, a.productSlug),
         subject: a.subject,
         message: a.message,
         severity: a.severity ?? "normal"
       };
-      a.metadata && typeof a.metadata == "object" && (u.metadata = a.metadata), typeof a.pageUrl == "string" && (u.pageUrl = a.pageUrl), typeof a.screenshotBase64 == "string" && (u.screenshotBase64 = a.screenshotBase64), typeof a.consoleLogs == "string" && (u.consoleLogs = a.consoleLogs);
-      let d = await i(
+      a.metadata && typeof a.metadata == "object" && (p.metadata = a.metadata), typeof a.pageUrl == "string" && (p.pageUrl = a.pageUrl), typeof a.screenshotBase64 == "string" && (p.screenshotBase64 = a.screenshotBase64), typeof a.consoleLogs == "string" && (p.consoleLogs = a.consoleLogs);
+      let l = await i(
         false,
         (f) => S(n, {
           method: "POST",
           path: "/api/sdk/v1/support/tickets",
-          body: u,
+          body: p,
           requireAuth: !0,
           idempotencyKey: !0,
           headers: f
         })
-      ), p = d && typeof d == "object" && "ticket" in d ? d.ticket : d;
-      return Kt(p);
+      ), u = l && typeof l == "object" && "ticket" in l ? l.ticket : l;
+      return Kt(u);
     },
     /**
      * Lista tickets do customer no produto atual. `productSlug` no contexto.
@@ -1545,23 +1565,23 @@ function Qt(n, e = {}) {
      * Endpoint canonical: `GET /api/sdk/v1/support/tickets?productId=...`.
      */
     async listMyTickets(a) {
-      let c = Ht(n, a?.productSlug), u = a?.limit;
-      if (u !== void 0 && (!Number.isInteger(u) || u < 1 || u > Bt))
+      let d = Ht(n, a?.productSlug), p = a?.limit;
+      if (p !== void 0 && (!Number.isInteger(p) || p < 1 || p > Bt))
         throw new exports.NeetruError(
           "validation_failed",
           `limit must be an integer 1-${Bt} (Core default 20)`
         );
-      let d = await i(
+      let l = await i(
         true,
         (f) => S(n, {
           method: "GET",
           path: "/api/sdk/v1/support/tickets",
-          query: { productId: c, limit: u },
+          query: { productId: d, limit: p },
           requireAuth: !0,
           headers: f
         })
       );
-      return (Array.isArray(d) ? d : d && typeof d == "object" && "tickets" in d ? d.tickets ?? [] : []).map(Kt);
+      return (Array.isArray(l) ? l : l && typeof l == "object" && "tickets" in l ? l.tickets ?? [] : []).map(Kt);
     },
     /**
      * 3.4: marca a notificação de resolução como vista (`resolvedNotifiedAt`,
@@ -1612,10 +1632,10 @@ function Qt(n, e = {}) {
      * satisfação/notificação. Endpoint canonical:
      * `POST /api/sdk/v1/support/tickets/{id}/contest`.
      */
-    async contestTicket(a, c) {
-      we(a), zt(c?.comment), await s(
+    async contestTicket(a, d) {
+      we(a), zt(d?.comment), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/contest`,
-        { body: { comment: c?.comment ?? void 0 } }
+        { body: { comment: d?.comment ?? void 0 } }
       );
     }
   };
@@ -1647,7 +1667,7 @@ function Be(n, e) {
   }
   return r;
 }
-function qr(n, e) {
+function Fr(n, e) {
   let t = Be(n, e.field);
   if (t === void 0) return false;
   let { op: r, value: o } = e;
@@ -1678,10 +1698,10 @@ function qr(n, e) {
       );
   }
 }
-function Fr(n, e) {
-  return e.every((t) => qr(n, t));
+function jr(n, e) {
+  return e.every((t) => Fr(n, t));
 }
-function jr(n) {
+function Wr(n) {
   return (e, t) => {
     if (n) {
       let r = Be(e.data, n.field), o = Be(t.data, n.field), i = re(r, o);
@@ -1691,7 +1711,7 @@ function jr(n) {
     return e.id < t.id ? -1 : e.id > t.id ? 1 : 0;
   };
 }
-function Wr(n, e) {
+function $r(n, e) {
   let t = n.findIndex((r) => r.id === e.docId);
   return t === -1 ? n : e.type === "startAfter" ? n.slice(t + 1) : n.slice(0, t);
 }
@@ -1707,13 +1727,13 @@ var J = class n {
    * 5. Corta em `limit`.
    */
   evaluate(e, t) {
-    let r = e.filter((d) => !d.meta.deleted), o = t.where ?? [];
+    let r = e.filter((l) => !l.meta.deleted), o = t.where ?? [];
     o.length > 0 && (r = r.filter(
-      (d) => Fr(d.data, o)
+      (l) => jr(l.data, o)
     ));
-    let i = jr(t.orderBy), s = [...r].sort(i), a = t.cursor ? Wr(s, t.cursor) : s, c = Math.min(t.limit ?? 20, 500);
+    let i = Wr(t.orderBy), s = [...r].sort(i), a = t.cursor ? $r(s, t.cursor) : s, d = Math.min(t.limit ?? 20, 500);
     return {
-      docs: a.slice(0, c).map((d) => ({ id: d.id, data: d.data })),
+      docs: a.slice(0, d).map((l) => ({ id: l.id, data: l.data })),
       // `incomplete` é sempre true aqui — o QueryEngine não sabe se o cache
       // tem todos os docs da coleção. É responsabilidade do chamador (LocalStore)
       // injetar o flag de completude baseado nos metadados do query_cache.
@@ -1731,7 +1751,7 @@ var J = class n {
 };
 
 // src/db/offline/local-store.ts
-var Vr = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_meta", X = "conflict_log", Se = class {
+var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_meta", X = "conflict_log", Se = class {
   db = null;
   dbName;
   constructor(e) {
@@ -1743,7 +1763,7 @@ var Vr = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Idempotente — chamadas subsequentes são no-ops se o banco já está aberto.
    */
   async open() {
-    this.db === null && (this.db = await idb.openDB(this.dbName, Vr, {
+    this.db === null && (this.db = await idb.openDB(this.dbName, Br, {
       upgrade(e) {
         if (!e.objectStoreNames.contains(V)) {
           let t = e.createObjectStore(V, {
@@ -2151,18 +2171,18 @@ var Re = class {
    * Atômico: a persistência final é uma única operação putMutation.
    */
   async enqueue(e) {
-    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, c = e.docId ?? (r === "add" ? Ke() : "");
+    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, d = e.docId ?? (r === "add" ? Ke() : "");
     await this.syncSeq();
-    let d = (await this.store.listMutations({ collection: t, docId: c })).filter((m) => m.status === "queued").sort((m, h) => h.seq - m.seq)[0];
-    if (d !== void 0) {
-      let m = this.tryCoalesce(d, r, o, s, a);
+    let l = (await this.store.listMutations({ collection: t, docId: d })).filter((m) => m.status === "queued").sort((m, h) => h.seq - m.seq)[0];
+    if (l !== void 0) {
+      let m = this.tryCoalesce(l, r, o, s, a);
       if (m !== null) {
         if ("removed" in m)
-          return await this.store.deleteMutation(d.mutationId), {
-            seq: d.seq,
+          return await this.store.deleteMutation(l.mutationId), {
+            seq: l.seq,
             mutationId: Ke(),
             collection: t,
-            docId: c,
+            docId: d,
             op: "remove",
             payload: null,
             baseVersion: i,
@@ -2180,7 +2200,7 @@ var Re = class {
       seq: this.nextSeq(),
       mutationId: Ke(),
       collection: t,
-      docId: c,
+      docId: d,
       op: r,
       payload: o,
       baseVersion: i,
@@ -2292,10 +2312,10 @@ var Re = class {
 
 // src/db/field-value.ts
 var ze = "__neetru__";
-function Br() {
+function Kr() {
   return { __neetru__: "serverTimestamp" };
 }
-function Kr(n) {
+function zr(n) {
   if (typeof n != "number" || !Number.isFinite(n))
     throw new TypeError(
       `increment(n): n deve ser um n\xFAmero finito (recebido: ${String(n)}).`
@@ -2311,13 +2331,13 @@ function Xt(n) {
 function Yt(n) {
   return H(n) && n.__neetru__ === "increment" && typeof n.operand == "number" && Number.isFinite(n.operand);
 }
-function zr(n, e) {
+function Hr(n, e) {
   return Xt(n) ? Date.now() : Yt(n) ? (typeof e == "number" && Number.isFinite(e) ? e : 0) + n.operand : n;
 }
 function G(n, e) {
   let t = false, r = {};
   for (let [o, i] of Object.entries(n))
-    H(i) ? (t = true, r[o] = zr(i, e?.[o])) : r[o] = i;
+    H(i) ? (t = true, r[o] = Hr(i, e?.[o])) : r[o] = i;
   return t ? r : n;
 }
 function He(n) {
@@ -2327,11 +2347,11 @@ function He(n) {
 }
 
 // src/db/offline/sync-engine.ts
-var Hr = 8, Gr = 1e3, Qr = 300 * 1e3, Ge = "truncatedCollections";
-function Jr(n) {
+var Gr = 8, Qr = 1e3, Jr = 300 * 1e3, Ge = "truncatedCollections";
+function Xr(n) {
   return n !== null && He(n);
 }
-function Xr(n) {
+function Yr(n) {
   if (n === null) return null;
   if (!He(n)) return n;
   let e = {};
@@ -2483,16 +2503,16 @@ var Ie = class {
     try {
       t = await this._transport.pushMutations(e);
     } catch (s) {
-      let a = s instanceof Error ? s.message : String(s), c = [], [u, ...d] = e;
-      await this._retryOrDeadLetter(u, a, c);
-      for (let p of d)
-        await this._queue.requeueInflight(p.mutationId);
-      return c.length > 0 && this._bus.emit(c), this._refreshPendingWrites().catch(() => {
+      let a = s instanceof Error ? s.message : String(s), d = [], [p, ...l] = e;
+      await this._retryOrDeadLetter(p, a, d);
+      for (let u of l)
+        await this._queue.requeueInflight(u.mutationId);
+      return d.length > 0 && this._bus.emit(d), this._refreshPendingWrites().catch(() => {
       }), false;
     }
     let r = [];
     for (let s of t.results) {
-      let a = e.find((c) => c.mutationId === s.mutationId);
+      let a = e.find((d) => d.mutationId === s.mutationId);
       a && (s.outcome === "confirmed" ? (await this._queue.markApplied(a.mutationId), await this._applySyncedDoc(
         a.collection,
         a.docId,
@@ -2510,8 +2530,8 @@ var Ie = class {
         "partial_push: muta\xE7\xE3o n\xE3o processada no lote",
         r
       );
-      for (let c of a)
-        await this._queue.requeueInflight(c.mutationId);
+      for (let d of a)
+        await this._queue.requeueInflight(d.mutationId);
     }
     return r.length > 0 && this._bus.emit(r), i.length === 0;
   }
@@ -2533,13 +2553,13 @@ var Ie = class {
       }), s.push({ type: "removed", collection: e, doc: { id: t, data: a.data } }));
       return;
     }
-    let u = Xr(i.payload) ?? a?.data ?? {}, d = {
+    let p = Yr(i.payload) ?? a?.data ?? {}, l = {
       collection: e,
       id: t,
-      data: i.op === "update" ? { ...a?.data ?? {}, ...u } : (
+      data: i.op === "update" ? { ...a?.data ?? {}, ...p } : (
         // add/set: se o payload tinha sentinels, o cache otimista (existing.data)
         // é a fonte de verdade até o pull; senão usa o payload literal.
-        Jr(i.payload) ? { ...a?.data ?? {}, ...u } : u
+        Xr(i.payload) ? { ...a?.data ?? {}, ...p } : p
       ),
       meta: {
         serverVersion: r,
@@ -2551,10 +2571,10 @@ var Ie = class {
         ownerId: a?.meta.ownerId ?? null
       }
     };
-    await this._store.putDoc(d), s.push({
+    await this._store.putDoc(l), s.push({
       type: a ? "modified" : "added",
       collection: e,
-      doc: { id: t, data: d.data }
+      doc: { id: t, data: l.data }
     });
   }
   /** Processa resultado 'superseded' (LWW: servidor venceu). */
@@ -2586,7 +2606,7 @@ var Ie = class {
         deleted: false,
         ownerId: null
       }
-    }, c = this._resolver.resolve(
+    }, d = this._resolver.resolve(
       s,
       i,
       e
@@ -2600,8 +2620,8 @@ var Ie = class {
       detectedAt: Date.now(),
       delivered: false
     };
-    await this._store.appendConflict(c);
-    let u = {
+    await this._store.appendConflict(d);
+    let p = {
       collection: e.collection,
       id: e.docId,
       data: t.serverData,
@@ -2615,7 +2635,7 @@ var Ie = class {
         ownerId: o?.meta.ownerId ?? null
       }
     };
-    await this._store.putDoc(u), r.push({
+    await this._store.putDoc(p), r.push({
       type: o ? "modified" : "added",
       collection: e.collection,
       doc: { id: e.docId, data: t.serverData }
@@ -2643,7 +2663,7 @@ var Ie = class {
         ...i.meta,
         serverVersion: t.serverVersion ?? i.meta.serverVersion
       }
-    } : null, c = this._resolver.resolveRejected(
+    } : null, d = this._resolver.resolveRejected(
       i,
       s,
       e,
@@ -2658,7 +2678,7 @@ var Ie = class {
       detectedAt: Date.now(),
       delivered: false
     };
-    await this._store.appendConflict(c), t.serverData ? (await this._store.putDoc({
+    await this._store.appendConflict(d), t.serverData ? (await this._store.putDoc({
       ...i,
       data: t.serverData,
       meta: {
@@ -2692,7 +2712,7 @@ var Ie = class {
    *   pending do doc no cache + registra `lastError`/dispara `onError`.
    */
   async _retryOrDeadLetter(e, t, r) {
-    if (e.attempts + 1 < Hr) {
+    if (e.attempts + 1 < Gr) {
       await this._queue.markRetry(e.mutationId, t);
       return;
     }
@@ -2733,7 +2753,7 @@ var Ie = class {
   }
   /** Backoff exponencial keyed em `attempts`, com teto `BACKOFF_CAP_MS`. */
   _backoffDelayMs(e) {
-    return Math.min(Gr * 2 ** (e - 1), Qr);
+    return Math.min(Qr * 2 ** (e - 1), Jr);
   }
   // ─── FASE 2 — pull (reconciliar o cache) ─────────────────────────────────────
   /**
@@ -2772,15 +2792,15 @@ var Ie = class {
     );
     for (let a of e) {
       if (i.has(a)) continue;
-      let c = await this._store.listDocs(a, {});
-      for (let { id: u } of c.docs) {
-        let d = `${a}::${u}`;
-        if (!s.has(d)) {
-          let p = await this._store.getDoc(a, u);
-          p && !p.meta.deleted && (await this._store.putDoc({
-            ...p,
+      let d = await this._store.listDocs(a, {});
+      for (let { id: p } of d.docs) {
+        let l = `${a}::${p}`;
+        if (!s.has(l)) {
+          let u = await this._store.getDoc(a, p);
+          u && !u.meta.deleted && (await this._store.putDoc({
+            ...u,
             meta: {
-              ...p.meta,
+              ...u.meta,
               deleted: true,
               updatedAtLocal: Date.now(),
               state: "synced"
@@ -2788,7 +2808,7 @@ var Ie = class {
           }), r.push({
             type: "removed",
             collection: a,
-            doc: { id: u, data: p.data }
+            doc: { id: p, data: u.data }
           }));
         }
       }
@@ -2823,7 +2843,7 @@ var Ie = class {
         continue;
       }
       if (i && i.meta.state === "pending") {
-        let c = {
+        let d = {
           collection: o.collection,
           id: o.id,
           data: o.data,
@@ -2836,12 +2856,12 @@ var Ie = class {
             deleted: false,
             ownerId: i.meta.ownerId
           }
-        }, d = (await this._queue.listAll()).find(
-          (p) => p.collection === o.collection && p.docId === o.id
+        }, l = (await this._queue.listAll()).find(
+          (u) => u.collection === o.collection && u.docId === o.id
         );
-        if (d) {
-          let p = this._resolver.resolve(i, c, d);
-          p.conflictRecord && await this._store.appendConflict(p.conflictRecord), await this._store.putDoc({
+        if (l) {
+          let u = this._resolver.resolve(i, d, l);
+          u.conflictRecord && await this._store.appendConflict(u.conflictRecord), await this._store.putDoc({
             ...i,
             meta: { ...i.meta, state: "conflict" }
           });
@@ -3075,9 +3095,9 @@ var Ce = class n {
     ))
       return { outcome: "local_wins", resolvedData: { ...i, ...r.payload ?? {} }, conflictRecord: null };
     let a = {};
-    for (let u of o)
-      a[u] = e.data[u];
-    let c = {
+    for (let p of o)
+      a[p] = e.data[p];
+    let d = {
       collection: r.collection,
       docId: r.docId,
       mutationId: r.mutationId,
@@ -3090,7 +3110,7 @@ var Ce = class n {
     return {
       outcome: "server_wins",
       resolvedData: i,
-      conflictRecord: c
+      conflictRecord: d
     };
   }
   /**
@@ -3147,7 +3167,7 @@ var Ce = class n {
 };
 
 // src/db/offline/change-bus.ts
-function Yr(n) {
+function Zr(n) {
   return `${n.collection}::${n.doc.id}`;
 }
 var Ae = class {
@@ -3195,15 +3215,15 @@ var Ae = class {
     if (e.length === 0) return;
     let t = /* @__PURE__ */ new Map();
     for (let i of e)
-      t.set(Yr(i), i);
+      t.set(Zr(i), i);
     let r = Array.from(t.values()), o = /* @__PURE__ */ new Map();
     for (let i of r)
       o.has(i.collection) || o.set(i.collection, []), o.get(i.collection).push(i);
     for (let [i, s] of o) {
       let a = this._collectionListeners.get(i);
       if (a)
-        for (let c of a)
-          this._safeCall(c, s);
+        for (let d of a)
+          this._safeCall(d, s);
     }
     for (let i of this._globalListeners)
       this._safeCall(i, r);
@@ -3514,11 +3534,11 @@ var ie = class {
 
 // src/db/collection-ref.ts
 z();
-function Zr() {
+function eo() {
   return typeof indexedDB > "u" || typeof window > "u";
 }
 var en = /^[a-z0-9][a-z0-9_-]{0,62}$/;
-function eo(n) {
+function to(n) {
   if (!en.test(n))
     throw new exports.NeetruDbError(
       "db_invalid_query",
@@ -3532,7 +3552,7 @@ function Y(n, e = "id") {
       `${e} \xE9 obrigat\xF3rio e deve ser uma string n\xE3o-vazia.`
     );
 }
-function to(n) {
+function no(n) {
   let e = {};
   if (n?.where && (e.where = n.where.map((t) => ({
     field: t.field,
@@ -3549,7 +3569,7 @@ function to(n) {
     }
   return e;
 }
-function no(n, e) {
+function ro(n, e) {
   if (n.length < e) return null;
   let t = n[n.length - 1];
   return t ? btoa(JSON.stringify({ type: "startAfter", docId: t.id })) : null;
@@ -3596,15 +3616,15 @@ var Qe = class {
   }
   /** Constrói um DbListResult para a coleção com query opcional. */
   async _buildListResult(e) {
-    let t = to(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), c = no(o.docs, r), u = await this._store.getMeta(Ge), d = Array.isArray(u) && u.includes(this._collection), p = !s || a.status === "offline" || d, f = i || a.lastSyncedAt === null || p;
+    let t = no(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), d = ro(o.docs, r), p = await this._store.getMeta(Ge), l = Array.isArray(p) && p.includes(this._collection), u = !s || a.status === "offline" || l, f = i || a.lastSyncedAt === null || u;
     return {
       docs: o.docs.map((m) => ({ id: m.id, data: m.data })),
-      nextCursor: c,
+      nextCursor: d,
       fromCache: f,
-      stale: p,
+      stale: u,
       hasPendingWrites: i,
       changes: [],
-      truncated: d
+      truncated: l
     };
   }
   // ── CRUD ────────────────────────────────────────────────────────────────────
@@ -3672,7 +3692,7 @@ var Qe = class {
   }
   async update(e, t, r) {
     Y(e);
-    let o = await this._store.getDoc(this._collection, e), i = t, s = o?.meta.deleted ? void 0 : o?.data, a = G(i, s), c = o?.meta.deleted ? { ...a } : { ...o?.data ?? {}, ...a }, u = await this._queue.enqueue({
+    let o = await this._store.getDoc(this._collection, e), i = t, s = o?.meta.deleted ? void 0 : o?.data, a = G(i, s), d = o?.meta.deleted ? { ...a } : { ...o?.data ?? {}, ...a }, p = await this._queue.enqueue({
       collection: this._collection,
       docId: e,
       op: "update",
@@ -3685,7 +3705,7 @@ var Qe = class {
     return await this._store.putDoc({
       collection: this._collection,
       id: e,
-      data: c,
+      data: d,
       meta: {
         serverVersion: o?.meta.serverVersion ?? null,
         updatedAtServer: o?.meta.updatedAtServer ?? null,
@@ -3693,7 +3713,7 @@ var Qe = class {
         state: "pending",
         pendingMutationIds: [
           ...o?.meta.pendingMutationIds ?? [],
-          u.mutationId
+          p.mutationId
         ],
         deleted: false,
         ownerId: o?.meta.ownerId ?? null
@@ -3701,7 +3721,7 @@ var Qe = class {
     }), this._bus.emit([{
       type: "modified",
       collection: this._collection,
-      doc: { id: e, data: c }
+      doc: { id: e, data: d }
     }]), { ok: true };
   }
   async remove(e) {
@@ -3725,61 +3745,61 @@ var Qe = class {
     for (let o of e) {
       let i = this._collection;
       if (o.kind === "add") {
-        let s = o.data, a = G(s, void 0), c = await this._queue.enqueue({
+        let s = o.data, a = G(s, void 0), d = await this._queue.enqueue({
           collection: i,
           op: "add",
           payload: s,
           baseVersion: null,
           batchId: t
-        }), u = c.docId;
+        }), p = d.docId;
         await this._store.putDoc({
           collection: i,
-          id: u,
+          id: p,
           data: a,
           meta: {
             serverVersion: null,
             updatedAtServer: null,
             updatedAtLocal: Date.now(),
             state: "pending",
-            pendingMutationIds: [c.mutationId],
+            pendingMutationIds: [d.mutationId],
             deleted: false,
             ownerId: null
           }
-        }), r.push({ type: "added", collection: i, doc: { id: u, data: a } });
+        }), r.push({ type: "added", collection: i, doc: { id: p, data: a } });
       } else if (o.kind === "set") {
-        let s = o.id, a = o.data, c = await this._store.getDoc(i, s), u = G(a, void 0), d = await this._queue.enqueue({
+        let s = o.id, a = o.data, d = await this._store.getDoc(i, s), p = G(a, void 0), l = await this._queue.enqueue({
           collection: i,
           docId: s,
           op: "set",
           payload: a,
-          baseVersion: c?.meta.serverVersion ?? null,
+          baseVersion: d?.meta.serverVersion ?? null,
           batchId: t
         });
         await this._store.putDoc({
           collection: i,
           id: s,
-          data: u,
+          data: p,
           meta: {
-            serverVersion: c?.meta.serverVersion ?? null,
-            updatedAtServer: c?.meta.updatedAtServer ?? null,
+            serverVersion: d?.meta.serverVersion ?? null,
+            updatedAtServer: d?.meta.updatedAtServer ?? null,
             updatedAtLocal: Date.now(),
             state: "pending",
-            pendingMutationIds: [d.mutationId],
+            pendingMutationIds: [l.mutationId],
             deleted: false,
             ownerId: null
           }
         }), r.push({
-          type: c && !c.meta.deleted ? "modified" : "added",
+          type: d && !d.meta.deleted ? "modified" : "added",
           collection: i,
-          doc: { id: s, data: u }
+          doc: { id: s, data: p }
         });
       } else if (o.kind === "update") {
-        let s = o.id, a = o.data, c = await this._store.getDoc(i, s), u = c?.meta.deleted ? void 0 : c?.data, d = G(a, u), p = { ...c?.data ?? {}, ...d }, f = await this._queue.enqueue({
+        let s = o.id, a = o.data, d = await this._store.getDoc(i, s), p = d?.meta.deleted ? void 0 : d?.data, l = G(a, p), u = { ...d?.data ?? {}, ...l }, f = await this._queue.enqueue({
           collection: i,
           docId: s,
           op: "update",
           payload: a,
-          baseVersion: c?.meta.serverVersion ?? null,
+          baseVersion: d?.meta.serverVersion ?? null,
           batchId: t,
           // bug_0273e4dd: propaga merge-upsert (writeBatch.set(merge) cria-se-ausente).
           upsert: o.upsert
@@ -3787,20 +3807,20 @@ var Qe = class {
         await this._store.putDoc({
           collection: i,
           id: s,
-          data: p,
+          data: u,
           meta: {
-            serverVersion: c?.meta.serverVersion ?? null,
-            updatedAtServer: c?.meta.updatedAtServer ?? null,
+            serverVersion: d?.meta.serverVersion ?? null,
+            updatedAtServer: d?.meta.updatedAtServer ?? null,
             updatedAtLocal: Date.now(),
             state: "pending",
             pendingMutationIds: [
-              ...c?.meta.pendingMutationIds ?? [],
+              ...d?.meta.pendingMutationIds ?? [],
               f.mutationId
             ],
             deleted: false,
-            ownerId: c?.meta.ownerId ?? null
+            ownerId: d?.meta.ownerId ?? null
           }
-        }), r.push({ type: "modified", collection: i, doc: { id: s, data: p } });
+        }), r.push({ type: "modified", collection: i, doc: { id: s, data: u } });
       } else if (o.kind === "remove") {
         let s = o.id, a = await this._store.getDoc(i, s);
         await this._queue.enqueue({
@@ -3829,11 +3849,11 @@ var Qe = class {
     });
     let r = this._bus.subscribe(this._collection, async (s) => {
       try {
-        let a = await this._buildListResult(e), c = s.map((u) => ({
-          type: u.type,
-          doc: { id: u.doc.id, data: u.doc.data }
+        let a = await this._buildListResult(e), d = s.map((p) => ({
+          type: p.type,
+          doc: { id: p.doc.id, data: p.doc.data }
         }));
-        t({ ...a, changes: c });
+        t({ ...a, changes: d });
       } catch {
       }
     }), o = this._engine.onSyncStateChange(async () => {
@@ -3847,15 +3867,15 @@ var Qe = class {
       this._collection,
       async (s, a) => {
         if (!a)
-          for (let c of s)
-            c.type === "removed" || c.data === null ? (await this._store.deleteDoc(this._collection, c.docId), this._bus.emit([{
+          for (let d of s)
+            d.type === "removed" || d.data === null ? (await this._store.deleteDoc(this._collection, d.docId), this._bus.emit([{
               type: "removed",
               collection: this._collection,
-              doc: { id: c.docId, data: {} }
+              doc: { id: d.docId, data: {} }
             }])) : (await this._store.putDoc({
               collection: this._collection,
-              id: c.docId,
-              data: c.data,
+              id: d.docId,
+              data: d.data,
               meta: {
                 serverVersion: `rt_${Date.now()}`,
                 updatedAtServer: Date.now(),
@@ -3866,9 +3886,9 @@ var Qe = class {
                 ownerId: null
               }
             }), this._bus.emit([{
-              type: c.type,
+              type: d.type,
               collection: this._collection,
-              doc: { id: c.docId, data: c.data }
+              doc: { id: d.docId, data: d.data }
             }]));
       }
     )), () => {
@@ -3903,14 +3923,14 @@ var Qe = class {
       onSnapshot(r) {
         t._buildGetResult(e).then((s) => r(s)).catch(() => r(null));
         let o = t._bus.subscribe(t._collection, async (s) => {
-          let a = s.find((c) => c.doc.id === e);
+          let a = s.find((d) => d.doc.id === e);
           if (a)
             try {
               if (a.type === "removed")
                 r(null);
               else {
-                let c = await t._buildGetResult(e);
-                r(c);
+                let d = await t._buildGetResult(e);
+                r(d);
               }
             } catch {
               r(null);
@@ -3939,7 +3959,7 @@ var Qe = class {
     this._store = e.store, this._queue = e.queue, this._bus = e.bus, this._engine = e.engine, this._connectivity = e.connectivity;
   }
   collection(e) {
-    return eo(e), new Qe(
+    return to(e), new Qe(
       e,
       this._store,
       this._queue,
@@ -3969,7 +3989,7 @@ var Qe = class {
   }
 };
 async function tn(n) {
-  let e = Zr() ? new Te() : new Se(n.dbName);
+  let e = eo() ? new Te() : new Se(n.dbName);
   await e.open();
   let t = new Re(e), r = new Ce(), o = new Ae(), i = new Ee({
     // Se startOnline=false, injeta um navigator falso
@@ -3978,7 +3998,7 @@ async function tn(n) {
     // Fake tab coordinator para single-tab mode (sempre líder)
     {
       isLeader: () => true,
-      onRoleChange: (c) => () => {
+      onRoleChange: (d) => () => {
       }
     }
   ) : new ie({
@@ -4004,9 +4024,9 @@ async function tn(n) {
 }
 
 // src/db/realtime/realtime-client.ts
-var ro = 0;
+var oo = 0;
 function nn() {
-  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++ro}-${Math.random().toString(36).slice(2)}`;
+  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++oo}-${Math.random().toString(36).slice(2)}`;
 }
 var Pe = class {
   // ── configuração ──────────────────────────────────────────────────────────
@@ -4046,7 +4066,7 @@ var Pe = class {
   _pendingFrames = [];
   // ── construtor ────────────────────────────────────────────────────────────
   constructor(e) {
-    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? oo, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
+    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? io, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
   }
   // ── API pública ───────────────────────────────────────────────────────────
   /**
@@ -4325,7 +4345,7 @@ var Pe = class {
   _detachHandlers(e) {
     e.onopen = null, e.onmessage = null, e.onclose = null, e.onerror = null;
   }
-}, oo = (n) => {
+}, io = (n) => {
   if (typeof WebSocket > "u")
     throw new Error(
       "[NeetruRealtimeClient] WebSocket n\xE3o dispon\xEDvel neste ambiente. Injete uma implementa\xE7\xE3o via `webSocketFactory` nas op\xE7\xF5es."
@@ -4334,11 +4354,11 @@ var Pe = class {
 };
 
 // src/db/client-db.ts
-var go = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, Ne = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, mn = 200;
-function yo(n, e, t) {
-  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? _o(e.realtimeGatewayUrl, t, e) : gn(t);
+var bo = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, Ne = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, hn = 200;
+function vo(n, e, t) {
+  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? wo(e.realtimeGatewayUrl, t, e) : yn(t);
 }
-function gn(n) {
+function yn(n) {
   return {
     async pushMutations(e) {
       if (!n)
@@ -4378,17 +4398,17 @@ function gn(n) {
             retries: 2,
             headers: i
           });
-          let c = a;
+          let d = a;
           r.push({
             mutationId: s.mutationId,
             outcome: "confirmed",
-            serverVersion: c?.serverVersion ?? c?.id ?? `rest_${Date.now()}`,
+            serverVersion: d?.serverVersion ?? d?.id ?? `rest_${Date.now()}`,
             serverTimestamp: Date.now()
           });
         } catch (a) {
-          let c = a instanceof Error ? a.message : String(a), u = a?.code, d = a?.status;
-          if (u === "forbidden" || u === "unauthorized" || u === "not_found" || u === "conflict" || u === "validation_failed" || typeof d == "number" && d >= 400 && d < 500 && d !== 408 && d !== 429) {
-            let f = u === "forbidden" || u === "unauthorized" ? "rejected_permission" : "rejected_validation";
+          let d = a instanceof Error ? a.message : String(a), p = a?.code, l = a?.status;
+          if (p === "forbidden" || p === "unauthorized" || p === "not_found" || p === "conflict" || p === "validation_failed" || typeof l == "number" && l >= 400 && l < 500 && l !== 408 && l !== 429) {
+            let f = p === "forbidden" || p === "unauthorized" ? "rejected_permission" : "rejected_validation";
             r.push({
               mutationId: s.mutationId,
               outcome: "rejected",
@@ -4399,7 +4419,7 @@ function gn(n) {
             continue;
           }
           if (r.length === 0)
-            throw new exports.NeetruDbError("db_unavailable", `pushMutations falhou: ${c}`);
+            throw new exports.NeetruDbError("db_unavailable", `pushMutations falhou: ${d}`);
           break;
         }
       return { results: r };
@@ -4411,12 +4431,12 @@ function gn(n) {
       if (!n)
         return { docs: [], newWatermark: Date.now() };
       let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = n.tenantId ?? n.productId, o = r ? { "x-neetru-tenant": r } : void 0, i = Date.now(), s = [], a = [];
-      for (let c of e) {
-        let u;
+      for (let d of e) {
+        let p;
         try {
-          u = await t(n, {
+          p = await t(n, {
             method: "GET",
-            path: go(c),
+            path: bo(d),
             requireAuth: !0,
             retries: 2,
             headers: o,
@@ -4424,18 +4444,18 @@ function gn(n) {
             // TRUNCADAS — reportadas em `truncatedCollections` p/ o SyncEngine
             // (a) NÃO rodar deleção-por-ausência e (b) sinalizar
             // `DbListResult.truncated`. Paginação por cursor é tarefa Core (gated).
-            query: { limit: mn }
+            query: { limit: hn }
           });
         } catch (f) {
           let m = f instanceof Error ? f.message : String(f);
           throw new exports.NeetruDbError(
             "db_unavailable",
-            `[RestSyncTransport] fullResync falhou na cole\xE7\xE3o "${c}": ${m}`
+            `[RestSyncTransport] fullResync falhou na cole\xE7\xE3o "${d}": ${m}`
           );
         }
-        let d = u, p = Array.isArray(d?.items) ? d.items : [];
-        p.length >= mn && a.push(c);
-        for (let f of p) {
+        let l = p, u = Array.isArray(l?.items) ? l.items : [];
+        u.length >= hn && a.push(d);
+        for (let f of u) {
           if (!f || typeof f != "object") continue;
           let m = f, h = typeof m.id == "string" ? m.id : null;
           if (!h) continue;
@@ -4450,7 +4470,7 @@ function gn(n) {
           }
           let N = `rest_${h}_${w}`;
           s.push({
-            collection: c,
+            collection: d,
             id: h,
             data: I,
             serverVersion: N,
@@ -4463,10 +4483,10 @@ function gn(n) {
     }
   };
 }
-function _o(n, e, t) {
-  let r = gn(e), o = new Pe({
+function wo(n, e, t) {
+  let r = yn(e), o = new Pe({
     gatewayUrl: n,
-    ticketProvider: bo(e, t),
+    ticketProvider: ko(e, t),
     dbId: t.dbId,
     webSocketFactory: t._wsFactory
   });
@@ -4478,22 +4498,22 @@ function _o(n, e, t) {
     // quando o engine é nosql-vm. Registra a subscription no NeetruRealtimeClient
     // e traduz os frames inbound para o contrato de `onChange`.
     subscribeCollection(i, s) {
-      let a = o.subscribe(i, {}, (c) => {
-        if (c.op === "resync") {
+      let a = o.subscribe(i, {}, (d) => {
+        if (d.op === "resync") {
           s([], true);
           return;
         }
-        if (c.op === "stale") {
+        if (d.op === "stale") {
           s([], true);
           return;
         }
-        if (c.op === "delta" && c.changes) {
-          let u = c.changes.map((d) => ({
-            type: d.type === "insert" ? "added" : d.type === "delete" ? "removed" : "modified",
-            docId: d.documentId,
-            data: d.data ?? null
+        if (d.op === "delta" && d.changes) {
+          let p = d.changes.map((l) => ({
+            type: l.type === "insert" ? "added" : l.type === "delete" ? "removed" : "modified",
+            docId: l.documentId,
+            data: l.data ?? null
           }));
-          u.length > 0 && s(u, false);
+          p.length > 0 && s(p, false);
         }
       });
       return () => {
@@ -4502,7 +4522,7 @@ function _o(n, e, t) {
     }
   };
 }
-function bo(n, e) {
+function ko(n, e) {
   return async () => {
     let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne));
     return await t(n, {
@@ -4517,37 +4537,37 @@ function bo(n, e) {
     });
   };
 }
-var hn = false;
-function vo(n, e) {
-  hn || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (hn = true, console.warn(
+var gn = false;
+function So(n, e) {
+  gn || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (gn = true, console.warn(
     '[neetru/sdk] client.db recebeu `dbId` ("' + e.dbId + '") mas ele N\xC3O roteia nem escopa nada no servidor: as escritas do mundo Documentos (add/set/update/remove/list) SEMPRE caem no datastore gen\xE9rico do Core, escopado s\xF3 por tenant/produto (header x-neetru-tenant). `dbId` apenas nomeia o cache offline LOCAL (IndexedDB). ATEN\xC7\xC3O: usar dbIds distintos no MESMO tenant/produto N\xC3O isola os dados no servidor \u2014 eles se misturam (co-mingling). Veja o JSDoc de NeetruDbOptions.dbId.'
   )));
 }
 function nt(n, e = {}) {
-  vo(n, e);
+  So(n, e);
   let t;
   e.transport !== void 0 ? t = e.transport : e.engine !== void 0 ? (console.warn(
     '[neetru/sdk] NeetruDbOptions.engine est\xE1 depreciado e ser\xE1 removido em v3.0. Use NeetruDbOptions.transport em vez de engine. Valores v\xE1lidos: "rest" | "firestore" | "nosql-vm". Nota: "engine" no SDK configura o TRANSPORTE (REST/Firestore/WebSocket), n\xE3o o storage engine do admin database (firestore-instance, cloud-sql-postgres, \u2026).'
   ), t = e.engine) : t = "rest";
-  let r = yo(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
-  function c() {
+  let r = vo(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
+  function d() {
     return s || (s = tn({
       dbName: i,
       transport: r,
       singleTab: e.singleTab ?? n.env !== "prod"
-    }).then((u) => (a = u, u))), s;
+    }).then((p) => (a = p, p))), s;
   }
   return {
-    collection(u) {
-      return a ? a.collection(u) : wo(u, c);
+    collection(p) {
+      return a ? a.collection(p) : To(p, d);
     },
-    async sql(u, d) {
+    async sql(p, l) {
       if (n.env === "dev")
         throw new exports.NeetruDbError(
           "db_unavailable",
           "[SDK] db.sql() n\xE3o dispon\xEDvel em NEETRU_ENV=dev. Use `neetru dev` para subir o container Postgres local."
         );
-      return (await Promise.resolve().then(() => (fn(), pn))).createSqlClientFromConfig(n, u, d);
+      return (await Promise.resolve().then(() => (mn(), fn))).createSqlClientFromConfig(n, p, l);
     },
     get syncState() {
       return a?.syncState ?? {
@@ -4557,36 +4577,36 @@ function nt(n, e = {}) {
         isLeaderTab: false
       };
     },
-    onSyncStateChanged(u) {
-      if (a) return a.onSyncStateChanged(u);
-      let d = null, p = false;
-      return c().then((f) => {
-        p || (d = f.onSyncStateChanged(u));
+    onSyncStateChanged(p) {
+      if (a) return a.onSyncStateChanged(p);
+      let l = null, u = false;
+      return d().then((f) => {
+        u || (l = f.onSyncStateChanged(p));
       }), () => {
-        p = true, d?.();
+        u = true, l?.();
       };
     },
     async flush() {
-      return (await c()).flush();
+      return (await d()).flush();
     },
     async clearCache() {
-      return (await c()).clearCache();
+      return (await d()).clearCache();
     },
     async getConflicts() {
-      return (await c()).getConflicts();
+      return (await d()).getConflicts();
     },
-    onError(u) {
-      if (a) return a.onError(u);
-      let d = null, p = false;
-      return c().then((f) => {
-        p || (d = f.onError(u));
+    onError(p) {
+      if (a) return a.onError(p);
+      let l = null, u = false;
+      return d().then((f) => {
+        u || (l = f.onError(p));
       }), () => {
-        p = true, d?.();
+        u = true, l?.();
       };
     }
   };
 }
-function wo(n, e) {
+function To(n, e) {
   async function t() {
     return (await e()).collection(n);
   }
@@ -4676,7 +4696,7 @@ function rt(n, e) {
     );
   return { requireAuth: false, headers: { authorization: `Bearer ${t}` } };
 }
-function ko(n) {
+function Ro(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruError("invalid_response", "checkout.start response is not an object");
   let e = n;
@@ -4692,7 +4712,7 @@ function ko(n) {
     requiresKyc: e.requiresKyc === true
   };
 }
-function So(n) {
+function Io(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruError("invalid_response", "checkout.get response is not an object");
   let e = n, t = e.intent;
@@ -4714,20 +4734,20 @@ function So(n) {
     isStale: e.isStale === true
   };
 }
-function To() {
+function Co() {
   try {
     return typeof globalThis < "u" && typeof globalThis.window < "u" && typeof globalThis.location < "u" && typeof globalThis.location.assign == "function";
   } catch {
     return false;
   }
 }
-function Ro(n) {
+function Ao(n) {
   try {
     globalThis.location.assign(n);
   } catch {
   }
 }
-function Io(n) {
+function Eo(n) {
   return {
     async start(e) {
       if (!e?.productId)
@@ -4752,8 +4772,8 @@ function Io(n) {
         requireAuth: r,
         headers: o,
         idempotencyKey: true
-      }), s = ko(i);
-      return e.autoRedirect !== false && To() && Ro(s.redirectUrl), s;
+      }), s = Ro(i);
+      return e.autoRedirect !== false && Co() && Ao(s.redirectUrl), s;
     },
     async get(e, t) {
       if (!e || typeof e != "string")
@@ -4767,7 +4787,7 @@ function Io(n) {
         requireAuth: r,
         headers: o
       });
-      return So(i);
+      return Io(i);
     },
     async cancel(e, t) {
       if (!e || typeof e != "string")
@@ -4832,13 +4852,13 @@ var xe = class {
   }
 };
 function ot(n) {
-  return n.env === "dev" ? new xe() : Io(n);
+  return n.env === "dev" ? new xe() : Eo(n);
 }
 
 // src/webhooks.ts
 C();
 q();
-async function _n(n, e, t, r) {
+async function bn(n, e, t, r) {
   if (!e || !t) return false;
   let o = e.startsWith("sha256=") ? e.slice(7) : e;
   if (!/^[0-9a-f]+$/i.test(o)) return false;
@@ -4848,33 +4868,33 @@ async function _n(n, e, t, r) {
       "runtime_unsupported",
       "verifyWebhookSignature requires globalThis.crypto.subtle (Node \u226520, modern browser, or Edge runtime)."
     );
-  let s = new TextEncoder(), a = s.encode(t), c = typeof n == "string" ? s.encode(n) : n, u = c;
+  let s = new TextEncoder(), a = s.encode(t), d = typeof n == "string" ? s.encode(n) : n, p = d;
   if (r !== void 0) {
-    let y = s.encode(`${r}.`), I = new Uint8Array(y.length + c.length);
-    I.set(y, 0), I.set(c, y.length), u = I;
+    let y = s.encode(`${r}.`), I = new Uint8Array(y.length + d.length);
+    I.set(y, 0), I.set(d, y.length), p = I;
   }
-  let d = await i.importKey(
+  let l = await i.importKey(
     "raw",
     a,
     { name: "HMAC", hash: "SHA-256" },
     false,
     ["sign"]
-  ), p = await i.sign(
+  ), u = await i.sign(
     "HMAC",
-    d,
-    u
-  ), f = new Uint8Array(p), m = Ao(o.toLowerCase());
+    l,
+    p
+  ), f = new Uint8Array(u), m = Do(o.toLowerCase());
   if (!m || m.length !== f.length) return false;
   let h = 0;
   for (let y = 0; y < f.length; y++)
     h |= f[y] ^ m[y];
   return h === 0;
 }
-async function Co(n, e, t, r = {}) {
-  let o = r.toleranceMs ?? 3e5, i = (p) => {
+async function Po(n, e, t, r = {}) {
+  let o = r.toleranceMs ?? 3e5, i = (u) => {
     if (typeof e.get == "function")
-      return e.get(p);
-    let f = e, m = p.toLowerCase();
+      return e.get(u);
+    let f = e, m = u.toLowerCase();
     for (let h of Object.keys(f))
       if (h.toLowerCase() === m) return f[h] ?? null;
     return null;
@@ -4886,10 +4906,10 @@ async function Co(n, e, t, r = {}) {
     return { ok: false, reason: "timestamp_missing" };
   if (Math.abs(Date.now() - a) > o)
     return { ok: false, reason: "timestamp_expired" };
-  let u = i("x-neetru-signature");
-  return await _n(n, u, t, s) ? { ok: true } : { ok: false, reason: "invalid_signature" };
+  let p = i("x-neetru-signature");
+  return await bn(n, p, t, s) ? { ok: true } : { ok: false, reason: "invalid_signature" };
 }
-function Ao(n) {
+function Do(n) {
   if (n.length % 2 !== 0) return null;
   let e = new Uint8Array(n.length / 2);
   for (let t = 0; t < e.length; t++) {
@@ -4899,7 +4919,7 @@ function Ao(n) {
   }
   return e;
 }
-var bn = [
+var vn = [
   "subscription.activated",
   "subscription.cancelled",
   "subscription.payment_failed",
@@ -4909,7 +4929,7 @@ var bn = [
   "account.reactivated",
   "support.ticket_replied"
 ];
-function yn(n) {
+function _n(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruError("invalid_response", "Webhook response is not an object");
   let e = n;
@@ -4919,7 +4939,7 @@ function yn(n) {
     id: e.id,
     url: typeof e.url == "string" ? e.url : "",
     events: Array.isArray(e.events) ? e.events.filter(
-      (t) => bn.includes(t)
+      (t) => vn.includes(t)
     ) : [],
     hasSecret: e.hasSecret === true,
     status: e.status === "active" || e.status === "degraded" || e.status === "disabled" ? e.status : "active",
@@ -4928,7 +4948,7 @@ function yn(n) {
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function vn(n) {
+function wn(n) {
   if (!n.url || typeof n.url != "string")
     throw new exports.NeetruError("validation_failed", "url \xE9 obrigat\xF3ria");
   try {
@@ -4941,7 +4961,7 @@ function vn(n) {
   if (!Array.isArray(n.events) || n.events.length === 0)
     throw new exports.NeetruError("validation_failed", "events deve ter pelo menos 1 evento");
   for (let e of n.events)
-    if (!bn.includes(e))
+    if (!vn.includes(e))
       throw new exports.NeetruError("validation_failed", `evento desconhecido: ${e}`);
   if (n.secret !== void 0 && n.secret.length < 16)
     throw new exports.NeetruError("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
@@ -4960,7 +4980,7 @@ function Oe(n, ...e) {
 function it(n) {
   return {
     async register(e) {
-      vn(e);
+      wn(e);
       let t = Oe(n, e.productId), r = await S(n, {
         method: "POST",
         path: "/api/sdk/v1/webhooks",
@@ -4977,7 +4997,7 @@ function it(n) {
         // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
         idempotencyKey: true
       });
-      return yn(r);
+      return _n(r);
     },
     async list(e) {
       let t = Oe(n, e?.productId), r = await S(n, {
@@ -4986,7 +5006,7 @@ function it(n) {
         query: { productId: t },
         requireAuth: true
       });
-      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(yn);
+      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(_n);
     },
     async unregister(e, t) {
       if (!e) throw new exports.NeetruError("validation_failed", "id obrigat\xF3rio");
@@ -5023,7 +5043,7 @@ var ae = class {
   endpoints = /* @__PURE__ */ new Map();
   nextId = 1;
   async register(e) {
-    vn(e);
+    wn(e);
     let t = `mock_wh_${this.nextId++}`, r = {
       id: t,
       url: e.url,
@@ -5058,7 +5078,7 @@ var st = [
   "warning",
   "error"
 ];
-function wn(n) {
+function kn(n) {
   if (!n || typeof n != "object")
     throw new exports.NeetruError("invalid_response", "Notification response is not an object");
   let e = n;
@@ -5079,7 +5099,7 @@ function wn(n) {
     dismissedAt: typeof e.dismissedAt == "string" ? e.dismissedAt : void 0
   };
 }
-function kn(n) {
+function Sn(n) {
   if (!n.userId) throw new exports.NeetruError("validation_failed", "userId obrigat\xF3rio");
   if (!n.kind) throw new exports.NeetruError("validation_failed", "kind obrigat\xF3rio");
   if (!n.title) throw new exports.NeetruError("validation_failed", "title obrigat\xF3rio");
@@ -5107,7 +5127,7 @@ function Le(n, ...e) {
 function at(n) {
   return {
     async send(e) {
-      kn(e);
+      Sn(e);
       let r = {
         productId: Le(n, e.productId),
         userId: e.userId,
@@ -5123,7 +5143,7 @@ function at(n) {
         requireAuth: true,
         idempotencyKey: true
       });
-      return wn(o);
+      return kn(o);
     },
     async list(e, t) {
       if (!e) throw new exports.NeetruError("validation_failed", "userId obrigat\xF3rio");
@@ -5137,7 +5157,7 @@ function at(n) {
         query: o,
         requireAuth: true
       });
-      return (Array.isArray(i?.notifications) ? i.notifications : []).map(wn);
+      return (Array.isArray(i?.notifications) ? i.notifications : []).map(kn);
     },
     async markRead(e, t) {
       if (!e) throw new exports.NeetruError("validation_failed", "id obrigat\xF3rio");
@@ -5165,7 +5185,7 @@ var ce = class {
   notifications = /* @__PURE__ */ new Map();
   nextId = 1;
   async send(e) {
-    if (kn(e), e.fingerprint) {
+    if (Sn(e), e.fingerprint) {
       let o = Date.now() - 864e5;
       for (let i of this.notifications.values())
         if ((i.metadata ?? {}).fingerprint === e.fingerprint && i.userId === e.userId && new Date(i.createdAt).getTime() > o)
@@ -5205,41 +5225,41 @@ var ce = class {
 C();
 q();
 We();
-var Eo = "/api/sdk/v1/ai/chat", Sn = 12e4, Ue = 32768, Tn = 32, Rn = 4194304, In = 2048, Po = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, Do = /^https:\/\/[^\s]+$/, No = /* @__PURE__ */ new Set(["low", "high", "auto"]), xo = /* @__PURE__ */ new Set(["system", "user", "assistant"]), Cn = 100, An = 128, En = 32768, Pn = 0, Dn = 2, Nn = 200, xn = 20, On = 12 * 1024 * 1024, Ln = 5e4, Un = 16, Mn = 500, Oo = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), Lo = /^[a-zA-Z0-9_-]+$/;
+var No = "/api/sdk/v1/ai/chat", Tn = 12e4, Ue = 32768, Rn = 32, In = 4194304, Cn = 2048, xo = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, Oo = /^https:\/\/[^\s]+$/, Lo = /* @__PURE__ */ new Set(["low", "high", "auto"]), Uo = /* @__PURE__ */ new Set(["system", "user", "assistant"]), An = 100, En = 128, Pn = 32768, Dn = 0, Nn = 2, xn = 200, On = 20, Ln = 12 * 1024 * 1024, Un = 5e4, Mn = 16, qn = 500, Mo = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), qo = /^[a-zA-Z0-9_-]+$/;
 function R(n) {
   throw new exports.NeetruError("validation_failed", n);
 }
-function Uo(n) {
+function Fo(n) {
   if (n.length === 0 || n.length % 4 !== 0) return false;
   let e = n.endsWith("==") ? 2 : n.endsWith("=") ? 1 : 0;
   return !(e > 0 ? n.slice(0, n.length - e) : n).includes("=");
 }
-function Mo(n) {
+function jo(n) {
   let e = n.indexOf(",");
   if (e === -1) return 0;
   let t = n.slice(e + 1), r = t.endsWith("==") ? 2 : t.endsWith("=") ? 1 : 0;
   return Math.max(0, Math.floor(t.length * 3 / 4) - r);
 }
-function qo(n) {
+function Wo(n) {
   let e = 0, t = 0, r = 0;
   for (let o of n) {
     let i = o?.content;
     if (Array.isArray(i))
       for (let s of i) {
-        if (e++, e > Nn)
-          return `ai: total content parts exceeds ${Nn} per request`;
+        if (e++, e > xn)
+          return `ai: total content parts exceeds ${xn} per request`;
         if (s && typeof s == "object" && s.type === "image_url") {
-          if (t++, t > xn)
-            return `ai: total images exceeds ${xn} per request`;
+          if (t++, t > On)
+            return `ai: total images exceeds ${On} per request`;
           let a = s.image_url?.url;
-          if (typeof a == "string" && a.startsWith("data:") && (r += Mo(a), r > On))
-            return `ai: aggregate image bytes exceeds ${On} per request`;
+          if (typeof a == "string" && a.startsWith("data:") && (r += jo(a), r > Ln))
+            return `ai: aggregate image bytes exceeds ${Ln} per request`;
         }
       }
   }
   return null;
 }
-function Fo(n) {
+function $o(n) {
   if (n === void 0) return null;
   if (n === null || typeof n != "object")
     return "ai: responseFormat json_schema.schema must be an object";
@@ -5250,11 +5270,11 @@ function Fo(n) {
     return "ai: responseFormat json_schema.schema is not serializable";
   }
   if (e === void 0) return "ai: responseFormat json_schema.schema is invalid";
-  if (e.length > Ln)
-    return `ai: responseFormat json_schema.schema exceeds ${Ln} serialized chars`;
+  if (e.length > Un)
+    return `ai: responseFormat json_schema.schema exceeds ${Un} serialized chars`;
   let t = 0, r = (o, i) => {
-    if (i > Un)
-      return `ai: responseFormat json_schema.schema exceeds max depth ${Un}`;
+    if (i > Mn)
+      return `ai: responseFormat json_schema.schema exceeds max depth ${Mn}`;
     if (Array.isArray(o)) {
       for (let s of o) {
         let a = r(s, i + 1);
@@ -5264,10 +5284,10 @@ function Fo(n) {
     }
     if (o && typeof o == "object")
       for (let s of Object.getOwnPropertyNames(o)) {
-        if (Oo.has(s))
+        if (Mo.has(s))
           return `ai: responseFormat json_schema.schema has forbidden key: ${s}`;
-        if (t++, t > Mn)
-          return `ai: responseFormat json_schema.schema exceeds ${Mn} keys`;
+        if (t++, t > qn)
+          return `ai: responseFormat json_schema.schema exceeds ${qn} keys`;
         let a = r(o[s], i + 1);
         if (a) return a;
       }
@@ -5275,27 +5295,27 @@ function Fo(n) {
   };
   return r(n, 0);
 }
-function jo(n) {
+function Vo(n) {
   (typeof n != "string" || n.length === 0) && R("ai: image_url.url must be a non-empty string");
   let e = n;
   if (e.startsWith("data:")) {
-    e.length > Rn && R(`ai: image_url.url (data:) exceeds ${Rn} chars`), Po.test(e) || R("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
+    e.length > In && R(`ai: image_url.url (data:) exceeds ${In} chars`), xo.test(e) || R("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
     let t = e.slice(e.indexOf(",") + 1);
-    Uo(t) || R("ai: image_url.url data: has invalid base64 (length/padding)");
+    Fo(t) || R("ai: image_url.url data: has invalid base64 (length/padding)");
     return;
   }
   if (e.startsWith("https://")) {
-    e.length > In && R(`ai: image_url.url (https:) exceeds ${In} chars`), Do.test(e) || R("ai: image_url.url https: is invalid");
+    e.length > Cn && R(`ai: image_url.url (https:) exceeds ${Cn} chars`), Oo.test(e) || R("ai: image_url.url https: is invalid");
     return;
   }
   R("ai: image_url.url must be a data:image/...;base64 or https:// URL (other schemes are rejected)");
 }
-function Wo(n, e) {
+function Bo(n, e) {
   if (typeof n == "string") {
     n.length === 0 && R("ai: message content string must be non-empty"), n.length > Ue && R(`ai: message content exceeds ${Ue} chars`);
     return;
   }
-  (!Array.isArray(n) || n.length === 0) && R("ai: message content must be a non-empty string or array of parts"), n.length > Tn && R(`ai: message content has more than ${Tn} parts`);
+  (!Array.isArray(n) || n.length === 0) && R("ai: message content must be a non-empty string or array of parts"), n.length > Rn && R(`ai: message content has more than ${Rn} parts`);
   for (let t of n) {
     (!t || typeof t != "object") && R("ai: each content part must be an object");
     let r = t.type;
@@ -5305,14 +5325,14 @@ function Wo(n, e) {
     } else if (r === "image_url") {
       e !== "user" && R(`ai: image_url is only allowed in role 'user' messages (got '${e}')`);
       let o = t.image_url;
-      (!o || typeof o != "object") && R("ai: image_url part must have { image_url: { url } }"), jo(o.url);
+      (!o || typeof o != "object") && R("ai: image_url part must have { image_url: { url } }"), Vo(o.url);
       let i = o.detail;
-      i !== void 0 && (typeof i != "string" || !No.has(i)) && R("ai: image_url.detail must be 'low' | 'high' | 'auto'");
+      i !== void 0 && (typeof i != "string" || !Lo.has(i)) && R("ai: image_url.detail must be 'low' | 'high' | 'auto'");
     } else
       R("ai: content part type must be 'text' or 'image_url'");
   }
 }
-function $o(n) {
+function Ko(n) {
   (!n || typeof n != "object") && R("ai: responseFormat must be an object");
   let e = n.type;
   if (!(e === "text" || e === "json_object")) {
@@ -5320,8 +5340,8 @@ function $o(n) {
       let t = n.json_schema;
       (!t || typeof t != "object") && R("ai: responseFormat json_schema requires { json_schema: { name } }");
       let r = t, o = r.name;
-      if ((typeof o != "string" || o.length === 0) && R("ai: responseFormat json_schema.name is required"), o.length > 64 && R("ai: responseFormat json_schema.name exceeds 64 chars"), Lo.test(o) || R("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && R("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && R("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && R("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
-        let i = Fo(r.schema);
+      if ((typeof o != "string" || o.length === 0) && R("ai: responseFormat json_schema.name is required"), o.length > 64 && R("ai: responseFormat json_schema.name exceeds 64 chars"), qo.test(o) || R("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && R("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && R("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && R("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
+        let i = $o(r.schema);
         i && R(i);
       }
       return;
@@ -5329,26 +5349,26 @@ function $o(n) {
     R("ai: responseFormat.type must be 'text' | 'json_object' | 'json_schema'");
   }
 }
-function qn(n, e, t) {
+function Fn(n, e, t) {
   if (!e || typeof e != "object")
     throw new exports.NeetruError("validation_failed", "ai: options object is required");
   if (typeof e.model != "string" || e.model.length === 0)
     throw new exports.NeetruError("validation_failed", "ai: model is required");
-  if (e.model.length > An)
-    throw new exports.NeetruError("validation_failed", `ai: model exceeds ${An} chars`);
+  if (e.model.length > En)
+    throw new exports.NeetruError("validation_failed", `ai: model exceeds ${En} chars`);
   if (!Array.isArray(e.messages) || e.messages.length === 0)
     throw new exports.NeetruError("validation_failed", "ai: messages must be a non-empty array");
-  if (e.messages.length > Cn)
-    throw new exports.NeetruError("validation_failed", `ai: messages exceeds ${Cn} per request`);
+  if (e.messages.length > An)
+    throw new exports.NeetruError("validation_failed", `ai: messages exceeds ${An} per request`);
   for (let a of e.messages) {
-    if (!a || typeof a != "object" || typeof a.role != "string" || !xo.has(a.role))
+    if (!a || typeof a != "object" || typeof a.role != "string" || !Uo.has(a.role))
       throw new exports.NeetruError(
         "validation_failed",
         "ai: each message role must be 'system' | 'user' | 'assistant'"
       );
-    Wo(a.content, a.role);
+    Bo(a.content, a.role);
   }
-  let r = qo(e.messages);
+  let r = Wo(e.messages);
   if (r) throw new exports.NeetruError("validation_failed", r);
   let o = e.productId ?? n.productId, i = e.tenantId ?? n.tenantId;
   if (!o)
@@ -5370,24 +5390,24 @@ function qn(n, e, t) {
     stream: t
   };
   if (e.maxTokens !== void 0) {
-    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > En)
+    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > Pn)
       throw new exports.NeetruError(
         "validation_failed",
-        `ai: maxTokens must be a positive integer <= ${En}`
+        `ai: maxTokens must be a positive integer <= ${Pn}`
       );
     s.maxTokens = e.maxTokens;
   }
   if (e.temperature !== void 0) {
-    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < Pn || e.temperature > Dn)
+    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < Dn || e.temperature > Nn)
       throw new exports.NeetruError(
         "validation_failed",
-        `ai: temperature must be a finite number between ${Pn} and ${Dn}`
+        `ai: temperature must be a finite number between ${Dn} and ${Nn}`
       );
     s.temperature = e.temperature;
   }
-  return e.responseFormat !== void 0 && ($o(e.responseFormat), s.responseFormat = e.responseFormat), s;
+  return e.responseFormat !== void 0 && (Ko(e.responseFormat), s.responseFormat = e.responseFormat), s;
 }
-async function $n(n) {
+async function Vn(n) {
   try {
     let e = await n.text();
     return e ? JSON.parse(e) : void 0;
@@ -5395,48 +5415,48 @@ async function $n(n) {
     return;
   }
 }
-function Vo(n, e) {
+function zo(n, e) {
   let t = n.replace(/\/+$/, ""), r = e.startsWith("/") ? e : `/${e}`;
   return `${t}${r}`;
 }
-async function Fn(n, e, t, r) {
+async function jn(n, e, t, r) {
   if (!n.apiKey)
     throw new exports.NeetruError(
       "missing_api_key",
       "ai requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
     );
-  let o = Vo(n.baseUrl, Eo), { headers: i, correlationId: s } = _e({
+  let o = zo(n.baseUrl, No), { headers: i, correlationId: s } = _e({
     "content-type": "application/json",
     accept: r ? "text/event-stream" : "application/json",
     authorization: `Bearer ${n.apiKey}`
   }), a = { method: "POST", headers: i, body: JSON.stringify(e) };
-  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(Sn);
-  let c;
+  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(Tn);
+  let d;
   try {
-    c = await n.fetch(o, a);
-  } catch (p) {
-    let f = p instanceof DOMException && p.name === "TimeoutError" ? `Network error: timeout after ${Sn / 1e3}s` : p instanceof DOMException && p.name === "AbortError" ? "Network error: request aborted" : `Network error: ${p instanceof Error ? p.message : "fetch failed"}`;
+    d = await n.fetch(o, a);
+  } catch (u) {
+    let f = u instanceof DOMException && u.name === "TimeoutError" ? `Network error: timeout after ${Tn / 1e3}s` : u instanceof DOMException && u.name === "AbortError" ? "Network error: request aborted" : `Network error: ${u instanceof Error ? u.message : "fetch failed"}`;
     throw new exports.NeetruError("network_error", f, void 0, void 0, void 0, s);
   }
-  let u = c.headers.get("x-request-id") ?? c.headers.get("x-correlation-id") ?? void 0;
-  if (!c.ok) {
-    let p = await $n(c), f = ve(c.status), m = `HTTP ${c.status}`;
-    if (p && typeof p == "object" && "error" in p) {
-      let h = p.error;
+  let p = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
+  if (!d.ok) {
+    let u = await Vn(d), f = ve(d.status), m = `HTTP ${d.status}`;
+    if (u && typeof u == "object" && "error" in u) {
+      let h = u.error;
       typeof h == "string" ? m = h : h && typeof h == "object" && (typeof h.code == "string" && (f = h.code), typeof h.message == "string" && (m = h.message));
     }
-    throw new exports.NeetruError(f, m, c.status, u, void 0, s);
+    throw new exports.NeetruError(f, m, d.status, p, void 0, s);
   }
-  let d = c.headers.get("x-neetru-version");
-  return d && te(d), c;
+  let l = d.headers.get("x-neetru-version");
+  return l && te(l), d;
 }
-function jn(n) {
+function Wn(n) {
   return {
     provider: n.headers.get("x-neetru-provider") ?? "",
     usageWarning: n.headers.get("x-neetru-ai-usage-warning") === "1"
   };
 }
-function Wn(n) {
+function $n(n) {
   let e = [];
   for (let r of n.split(`
 `)) {
@@ -5460,7 +5480,7 @@ function Wn(n) {
 function ct(n) {
   return {
     async chat(e) {
-      let t = qn(n, e, false), r = await Fn(n, t, e.signal, false), { provider: o, usageWarning: i } = jn(r), s = await $n(r);
+      let t = Fn(n, e, false), r = await jn(n, t, e.signal, false), { provider: o, usageWarning: i } = Wn(r), s = await Vn(r);
       if (!s || s.ok !== true || !Array.isArray(s.choices))
         throw new exports.NeetruError("invalid_response", "ai.chat response missing ok/choices");
       return {
@@ -5472,38 +5492,38 @@ function ct(n) {
       };
     },
     stream(e) {
-      let t = qn(n, e, true), r = Fn(n, t, e.signal, true), o = r.then(jn);
+      let t = Fn(n, e, true), r = jn(n, t, e.signal, true), o = r.then(Wn);
       o.catch(() => {
       });
       async function* i() {
         let a = (await r).body;
         if (!a)
           throw new exports.NeetruError("invalid_response", "ai.stream: response has no body");
-        let c = a.getReader(), u = new TextDecoder(), d = "";
+        let d = a.getReader(), p = new TextDecoder(), l = "";
         try {
           for (; ; ) {
-            let { done: f, value: m } = await c.read();
+            let { done: f, value: m } = await d.read();
             if (f) break;
-            d += u.decode(m, { stream: !0 });
+            l += p.decode(m, { stream: !0 });
             let h;
-            for (; (h = d.indexOf(`
+            for (; (h = l.indexOf(`
 
 `)) !== -1; ) {
-              let y = d.slice(0, h);
-              d = d.slice(h + 2);
-              let I = Wn(y);
+              let y = l.slice(0, h);
+              l = l.slice(h + 2);
+              let I = $n(y);
               if (I && "done" in I) return;
               I && "content" in I && (yield I.content);
             }
           }
-          let p = d.trim();
-          if (p) {
-            let f = Wn(p);
+          let u = l.trim();
+          if (u) {
+            let f = $n(u);
             f && "content" in f && (yield f.content);
           }
         } finally {
           try {
-            c.releaseLock();
+            d.releaseLock();
           } catch {
           }
           try {
@@ -5695,14 +5715,14 @@ var qe = Object.freeze({
       tenantId: r?.tenantId,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     });
-    let c = this._quotas.get(e)?.limit ?? -1;
+    let d = this._quotas.get(e)?.limit ?? -1;
     return {
       ok: true,
       counterId: `mock_${e}`,
       value: s,
-      limit: c,
-      remaining: c < 0 ? -1 : Math.max(0, c - s),
-      status: c > 0 && s >= c ? "read_only_overlimit" : "ok"
+      limit: d,
+      remaining: d < 0 ? -1 : Math.max(0, d - s),
+      status: d > 0 && s >= d ? "read_only_overlimit" : "ok"
     };
   }
   async check(e, t) {
@@ -5848,40 +5868,40 @@ var qe = Object.freeze({
   collection(e) {
     let t = this._store, r = this._fixtures;
     if (!t.has(e)) {
-      let d = r.get(e);
+      let l = r.get(e);
       t.set(
         e,
-        d ? new Map(Object.entries(d)) : /* @__PURE__ */ new Map()
+        l ? new Map(Object.entries(l)) : /* @__PURE__ */ new Map()
       );
     }
-    let o = t.get(e), i = (d, p) => {
-      let f = d[p.field];
-      switch (p.op) {
+    let o = t.get(e), i = (l, u) => {
+      let f = l[u.field];
+      switch (u.op) {
         case "==":
-          return f === p.value;
+          return f === u.value;
         case "!=":
-          return f !== p.value;
+          return f !== u.value;
         case "<":
-          return typeof f == "number" && typeof p.value == "number" && f < p.value;
+          return typeof f == "number" && typeof u.value == "number" && f < u.value;
         case "<=":
-          return typeof f == "number" && typeof p.value == "number" && f <= p.value;
+          return typeof f == "number" && typeof u.value == "number" && f <= u.value;
         case ">":
-          return typeof f == "number" && typeof p.value == "number" && f > p.value;
+          return typeof f == "number" && typeof u.value == "number" && f > u.value;
         case ">=":
-          return typeof f == "number" && typeof p.value == "number" && f >= p.value;
+          return typeof f == "number" && typeof u.value == "number" && f >= u.value;
         case "in":
-          return Array.isArray(p.value) && p.value.includes(f);
+          return Array.isArray(u.value) && u.value.includes(f);
         case "array-contains":
-          return Array.isArray(f) && f.includes(p.value);
+          return Array.isArray(f) && f.includes(u.value);
         case "not-in":
-          return Array.isArray(p.value) && !p.value.includes(f);
+          return Array.isArray(u.value) && !u.value.includes(f);
         default:
           return true;
       }
     }, s = 0;
-    function a(d) {
+    function a(l) {
       return {
-        docs: d.map((p, f) => ({ id: p.id ?? String(f), data: p })),
+        docs: l.map((u, f) => ({ id: u.id ?? String(f), data: u })),
         nextCursor: null,
         fromCache: false,
         stale: false,
@@ -5889,111 +5909,111 @@ var qe = Object.freeze({
         changes: []
       };
     }
-    function c(d, p) {
+    function d(l, u) {
       return {
-        docs: [{ id: p, data: d }],
+        docs: [{ id: u, data: l }],
         fromCache: false,
         stale: false,
         hasPendingWrites: false,
         changes: []
       };
     }
-    let u = {
-      async list(d) {
-        let p = Array.from(o.values());
-        if (d?.where && d.where.length > 0 && (p = p.filter(
-          (m) => d.where.every((h) => i(m, h))
-        )), d?.orderBy) {
-          let { field: m, direction: h } = d.orderBy;
-          p = p.slice().sort((y, I) => {
+    let p = {
+      async list(l) {
+        let u = Array.from(o.values());
+        if (l?.where && l.where.length > 0 && (u = u.filter(
+          (m) => l.where.every((h) => i(m, h))
+        )), l?.orderBy) {
+          let { field: m, direction: h } = l.orderBy;
+          u = u.slice().sort((y, I) => {
             let w = y[m], k = I[m], N = w ?? "", g = k ?? "", _ = N < g ? -1 : N > g ? 1 : 0;
             return h === "desc" ? -_ : _;
           });
         }
-        let f = d?.limit ?? 20;
-        return p = p.slice(0, f), a(p);
+        let f = l?.limit ?? 20;
+        return u = u.slice(0, f), a(u);
       },
-      async get(d) {
-        let p = o.get(d);
-        return p ? c(p, d) : null;
+      async get(l) {
+        let u = o.get(l);
+        return u ? d(u, l) : null;
       },
-      async add(d) {
-        let p = `mock-${++s}-${Math.random().toString(36).slice(2, 8)}`;
-        return o.set(p, { ...d, id: p }), { ok: true, id: p };
+      async add(l) {
+        let u = `mock-${++s}-${Math.random().toString(36).slice(2, 8)}`;
+        return o.set(u, { ...l, id: u }), { ok: true, id: u };
       },
-      async set(d, p) {
-        return o.set(d, { ...p, id: d }), { ok: true };
+      async set(l, u) {
+        return o.set(l, { ...u, id: l }), { ok: true };
       },
-      async update(d, p) {
-        let f = o.get(d);
-        return f ? o.set(d, { ...f, ...p }) : o.set(d, { ...p, id: d }), { ok: true };
+      async update(l, u) {
+        let f = o.get(l);
+        return f ? o.set(l, { ...f, ...u }) : o.set(l, { ...u, id: l }), { ok: true };
       },
-      async remove(d) {
-        return o.delete(d), { ok: true };
+      async remove(l) {
+        return o.delete(l), { ok: true };
       },
-      async batch(d) {
-        for (let p of d) {
+      async batch(l) {
+        for (let u of l) {
           let f = o;
-          if (p.kind === "add") {
+          if (u.kind === "add") {
             let m = `mock-batch-${++s}`;
-            f.set(m, { ...p.data, id: m });
-          } else if (p.kind === "set")
-            f.set(p.id, { ...p.data, id: p.id });
-          else if (p.kind === "update") {
-            let m = f.get(p.id);
-            f.set(p.id, { ...m ?? {}, ...p.data, id: p.id });
-          } else p.kind === "remove" && f.delete(p.id);
+            f.set(m, { ...u.data, id: m });
+          } else if (u.kind === "set")
+            f.set(u.id, { ...u.data, id: u.id });
+          else if (u.kind === "update") {
+            let m = f.get(u.id);
+            f.set(u.id, { ...m ?? {}, ...u.data, id: u.id });
+          } else u.kind === "remove" && f.delete(u.id);
         }
         return { ok: true };
       },
-      onDoc(d, p) {
-        let f = o.get(d);
-        return Promise.resolve().then(() => p(f || null)), () => {
+      onDoc(l, u) {
+        let f = o.get(l);
+        return Promise.resolve().then(() => u(f || null)), () => {
         };
       },
-      onSnapshot(d, p) {
+      onSnapshot(l, u) {
         return Promise.resolve().then(async () => {
-          let f = await u.list(d);
-          p(f);
+          let f = await p.list(l);
+          u(f);
         }), () => {
         };
       },
-      doc(d) {
+      doc(l) {
         return {
           get id() {
-            return d;
+            return l;
           },
           get path() {
-            return `${e}/${d}`;
+            return `${e}/${l}`;
           },
           get collection() {
             return e;
           },
           async get() {
-            let p = o.get(d);
-            return p ? c(p, d) : null;
+            let u = o.get(l);
+            return u ? d(u, l) : null;
           },
-          async set(p) {
-            return o.set(d, { ...p, id: d }), { ok: true };
+          async set(u) {
+            return o.set(l, { ...u, id: l }), { ok: true };
           },
-          async update(p) {
-            let f = o.get(d);
-            return f ? o.set(d, { ...f, ...p }) : o.set(d, { ...p, id: d }), { ok: true };
+          async update(u) {
+            let f = o.get(l);
+            return f ? o.set(l, { ...f, ...u }) : o.set(l, { ...u, id: l }), { ok: true };
           },
           async remove() {
-            return o.delete(d), { ok: true };
+            return o.delete(l), { ok: true };
           },
-          onSnapshot(p) {
-            let f = o.get(d);
+          onSnapshot(u) {
+            let f = o.get(l);
             return Promise.resolve().then(
-              () => p(f ? c(f, d) : null)
+              () => u(f ? d(f, l) : null)
             ), () => {
             };
           }
         };
       }
     };
-    return u;
+    return p;
   }
   /**
    * Implementa SQL in-memory para testes — preferência: `@electric-sql/pglite`
@@ -6057,22 +6077,22 @@ var qe = Object.freeze({
     if (r.length > 0)
       for (let f of r)
         s.public.none(f);
-    let c = s.adapters.createPg().Pool, u = new c(), d = u.query.bind(u);
-    u.query = (f, ...m) => {
+    let d = s.adapters.createPg().Pool, p = new d(), l = p.query.bind(p);
+    p.query = (f, ...m) => {
       if (f !== null && typeof f == "object") {
         let y = f.types;
         y !== null && typeof y == "object" && "getTypeParser" in y && delete y.getTypeParser;
       }
-      return d(f, ...m);
+      return l(f, ...m);
     };
-    let p = i.drizzle(u, { schema: e });
+    let u = i.drizzle(p, { schema: e });
     return {
-      orm: p,
+      orm: u,
       async transaction(f, m) {
-        return await p.transaction(f);
+        return await u.transaction(f);
       },
       async close() {
-        let f = u;
+        let f = p;
         f.end && await f.end();
       }
     };
@@ -6154,7 +6174,7 @@ var qe = Object.freeze({
 
 // src/auth-pkce-shared.ts
 C();
-function Vn() {
+function Bn() {
   let n = globalThis.crypto;
   if (!n || typeof n.getRandomValues != "function" || !n.subtle)
     throw new exports.NeetruError(
@@ -6163,23 +6183,23 @@ function Vn() {
     );
   return n;
 }
-function Bn(n) {
+function Kn(n) {
   let e = "";
   for (let r of n) e += String.fromCharCode(r);
   return (typeof btoa == "function" ? btoa(e) : Buffer.from(e, "binary").toString("base64")).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function Fe(n, e) {
   let t = new Uint8Array(e);
-  return n.getRandomValues(t), Bn(t);
+  return n.getRandomValues(t), Kn(t);
 }
-async function Kn(n, e) {
+async function zn(n, e) {
   let t = new TextEncoder().encode(e), r = await n.subtle.digest("SHA-256", t);
-  return Bn(new Uint8Array(r));
+  return Kn(new Uint8Array(r));
 }
 function me(n) {
   return (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.replace(/^https?:\/\/api\./, "https://auth.");
 }
-function zn(n) {
+function Hn(n) {
   let e = n.oidcClientId;
   if (!e && n.apiKey && (e = gt(n.apiKey).keyId), !e)
     throw new exports.NeetruError(
@@ -6188,7 +6208,7 @@ function zn(n) {
     );
   return e;
 }
-function Hn(n) {
+function Gn(n) {
   let e = new URL("/api/v1/oauth/authorize", n.idpOrigin);
   return e.searchParams.set("response_type", "code"), e.searchParams.set("client_id", n.clientId), e.searchParams.set("redirect_uri", n.redirectUri), e.searchParams.set("scope", n.scope), e.searchParams.set("state", n.state), e.searchParams.set("nonce", n.nonce), e.searchParams.set("code_challenge", n.codeChallenge), e.searchParams.set("code_challenge_method", "S256"), e;
 }
@@ -6216,27 +6236,27 @@ function he(n) {
     ...e
   };
 }
-var Bo = "/api/v1/oauth/revoke";
-async function Gn(n, e, t, r) {
-  let o = `${e}${Bo}`, i = true;
+var Ho = "/api/v1/oauth/revoke";
+async function Qn(n, e, t, r) {
+  let o = `${e}${Ho}`, i = true;
   for (let s of r) {
     if (!s.token) continue;
     let a = new URLSearchParams({
       token: s.token,
       token_type_hint: s.hint,
       client_id: t
-    }).toString(), c = false;
-    for (let u = 0; u < 2 && !c; u++)
+    }).toString(), d = false;
+    for (let p = 0; p < 2 && !d; p++)
       try {
-        if (c = (await n(o, {
+        if (d = (await n(o, {
           method: "POST",
           headers: { "content-type": "application/x-www-form-urlencoded" },
           body: a
-        })).ok, !c) break;
+        })).ok, !d) break;
       } catch {
-        u === 0 && await new Promise((d) => setTimeout(d, 500));
+        p === 0 && await new Promise((l) => setTimeout(l, 500));
       }
-    c || (i = false);
+    d || (i = false);
   }
   return i;
 }
@@ -6245,14 +6265,14 @@ async function Gn(n, e, t, r) {
 be();
 
 // src/end-user-token.ts
-var Ko = /* @__PURE__ */ new WeakMap();
-function Qn(n, e) {
-  Ko.set(n, e);
+var Go = /* @__PURE__ */ new WeakMap();
+function Jn(n, e) {
+  Go.set(n, e);
 }
 
 // src/unsupported-db.ts
 C();
-var zo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", Ho = /* @__PURE__ */ new Set([
+var Qo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", Jo = /* @__PURE__ */ new Set([
   "then",
   "toJSON",
   "valueOf",
@@ -6261,13 +6281,13 @@ var zo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O
   "asymmetricMatch",
   "nodeType"
 ]);
-function Jn() {
+function Xn() {
   let n = () => {
-    throw new exports.NeetruError("runtime_unsupported", zo, void 0, void 0, "react-native");
+    throw new exports.NeetruError("runtime_unsupported", Qo, void 0, void 0, "react-native");
   }, e = {};
   return new Proxy(e, {
     get(t, r) {
-      if (!(typeof r == "symbol" || Ho.has(r)))
+      if (!(typeof r == "symbol" || Jo.has(r)))
         return r === "toString" ? () => "[NeetruDb indispon\xEDvel em React Native]" : n;
     },
     set() {
@@ -6277,7 +6297,7 @@ function Jn() {
 }
 
 // src/auth.ts
-function Qo() {
+function Yo() {
   try {
     let e = globalThis.process?.env?.NEETRU_API_KEY;
     return typeof e == "string" && e.length > 0 ? e : void 0;
@@ -6285,7 +6305,7 @@ function Qo() {
     return;
   }
 }
-function Jo(n) {
+function Zo(n) {
   if (n) return n;
   try {
     let t = globalThis.process?.env?.NEETRU_ENV;
@@ -6299,8 +6319,8 @@ function Jo(n) {
   }
   return "prod";
 }
-var Xo = ye;
-function Yo(n) {
+var ei = ye;
+function ti(n) {
   let e = n.sub ?? "", t = typeof n.email == "string" ? n.email : "";
   return {
     uid: e,
@@ -6327,7 +6347,7 @@ function ut(n) {
   } catch {
   }
 }
-function Zo(n) {
+function ni(n) {
   let e = "neetru_id_token", t = "neetru_refresh_token", r = /* @__PURE__ */ new Set(), o = null, i = null, s = null;
   function a() {
     try {
@@ -6336,17 +6356,17 @@ function Zo(n) {
       return null;
     }
   }
-  function c() {
+  function d() {
     try {
       return typeof globalThis.sessionStorage < "u" ? globalThis.sessionStorage : null;
     } catch {
       return null;
     }
   }
-  function u() {
+  function p() {
     if (o) {
       let b = o.exp;
-      return typeof b == "number" && b * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), d(), y(), null) : o;
+      return typeof b == "number" && b * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), l(), y(), null) : o;
     }
     let g = a();
     if (!g) return null;
@@ -6356,14 +6376,14 @@ function Zo(n) {
     let T = he(_);
     return T ? (o = T, I(T), o) : (g.removeItem(e), y(), null);
   }
-  function d() {
+  function l() {
     for (let g of r)
       try {
         g(o);
       } catch {
       }
   }
-  function p() {
+  function u() {
     i !== null && (clearTimeout(i), i = null);
   }
   function f() {
@@ -6372,7 +6392,7 @@ function Zo(n) {
   function m() {
     o = null;
     let g = a();
-    g?.removeItem(e), g?.removeItem(t), d();
+    g?.removeItem(e), g?.removeItem(t), l();
   }
   function h() {
     return s || (s = (async () => {
@@ -6412,7 +6432,7 @@ function Zo(n) {
       let P = a();
       P?.setItem(e, A);
       let M = D?.refresh_token;
-      return typeof M == "string" && M.length > 0 && P?.setItem(t, M), o = L, I(L), d(), true;
+      return typeof M == "string" && M.length > 0 && P?.setItem(t, M), o = L, I(L), l(), true;
     })().finally(() => {
       s = null;
     }), s);
@@ -6423,7 +6443,7 @@ function Zo(n) {
     });
   }
   function I(g) {
-    p();
+    u();
     let _ = g.exp;
     if (typeof _ != "number") return;
     let T = _ * 1e3 - Date.now();
@@ -6438,12 +6458,12 @@ function Zo(n) {
         return;
       }
       i = setTimeout(() => {
-        i = null, u();
+        i = null, p();
       }, T + 1);
     }
   }
   function w() {
-    return zn(n);
+    return Hn(n);
   }
   async function k(g) {
     let _ = g ?? (typeof globalThis.location < "u" ? globalThis.location.href : void 0);
@@ -6457,11 +6477,11 @@ function Zo(n) {
     let b = T.searchParams, E = b.get("error");
     if (E) {
       let M = b.get("error_description") ?? E;
-      throw c()?.removeItem(ge), ut(T), new exports.NeetruError(E, `OIDC authorize falhou: ${M}`);
+      throw d()?.removeItem(ge), ut(T), new exports.NeetruError(E, `OIDC authorize falhou: ${M}`);
     }
     let x = b.get("code");
     if (!x) return null;
-    let D = b.get("state"), A = c(), L = A?.getItem(ge) ?? null, P = null;
+    let D = b.get("state"), A = d(), L = A?.getItem(ge) ?? null, P = null;
     if (L)
       try {
         P = JSON.parse(L);
@@ -6550,12 +6570,12 @@ function Zo(n) {
     let F = a();
     F?.setItem(e, L);
     let j = A?.refresh_token;
-    return typeof j == "string" && j.length > 0 && F?.setItem(t, j), o = M, I(M), d(), { user: M, postLoginRedirect: _.postLoginRedirect };
+    return typeof j == "string" && j.length > 0 && F?.setItem(t, j), o = M, I(M), l(), { user: M, postLoginRedirect: _.postLoginRedirect };
   }
   return {
     async signIn(g) {
       if (typeof globalThis.location < "u" && typeof globalThis.location.assign == "function") {
-        let _ = Vn(), T = g?.redirectUri ?? globalThis.location.origin, b = g?.scope ?? "openid profile email", E = w(), x = Fe(_, 16), D = Fe(_, 16), A = Fe(_, 32), L = await Kn(_, A), P = c();
+        let _ = Bn(), T = g?.redirectUri ?? globalThis.location.origin, b = g?.scope ?? "openid profile email", E = w(), x = Fe(_, 16), D = Fe(_, 16), A = Fe(_, 32), L = await zn(_, A), P = d();
         if (!P)
           throw new exports.NeetruError(
             "runtime_unsupported",
@@ -6569,7 +6589,7 @@ function Zo(n) {
           postLoginRedirect: g?.postLoginRedirect
         };
         P.setItem(ge, JSON.stringify(M));
-        let F = me(n.baseUrl), j = Hn({
+        let F = me(n.baseUrl), j = Gn({
           idpOrigin: F,
           clientId: E,
           redirectUri: T,
@@ -6597,28 +6617,28 @@ function Zo(n) {
     },
     async signOut() {
       let g = a(), _ = g?.getItem(t) ?? null;
-      if (g && (g.removeItem(e), g.removeItem(t)), p(), o = null, _) {
+      if (g && (g.removeItem(e), g.removeItem(t)), u(), o = null, _) {
         let T = null;
         try {
           T = w();
         } catch {
           T = null;
         }
-        !(T && await Gn(n.fetch, me(n.baseUrl), T, [
+        !(T && await Qn(n.fetch, me(n.baseUrl), T, [
           { token: _, hint: "refresh_token" }
         ])) && typeof console < "u" && console.warn(
           "[neetru-sdk] signOut: a revoga\xE7\xE3o do refresh_token no servidor n\xE3o foi confirmada. A sess\xE3o local foi encerrada, mas o refresh_token pode seguir v\xE1lido at\xE9 expirar."
         );
       }
-      d();
+      l();
     },
     getUser() {
-      return u();
+      return p();
     },
     onAuthStateChanged(g) {
       r.add(g);
       try {
-        g(u());
+        g(p());
       } catch {
       }
       return () => {
@@ -6634,14 +6654,14 @@ function Zo(n) {
           "invalid_config",
           "verifyToken requires an audience: provide oidcClientId/apiKey on the client or pass options.audience. Calling jwtVerify without an audience allows tokens issued for other OIDC clients to pass."
         );
-      let M = Xo(x, D);
+      let M = ei(x, D);
       try {
         let { payload: F } = await jose.jwtVerify(g, M, {
           issuer: E,
           audience: P,
           algorithms: ["RS256"]
         });
-        return Yo(F);
+        return ti(F);
       } catch (F) {
         let j = F?.code ?? F?.name ?? "", U = F?.message ?? String(F);
         throw j === "ERR_JWT_EXPIRED" ? new exports.NeetruError("token_expired", `Token expired: ${U}`) : j === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" ? new exports.NeetruError("token_invalid_signature", `Token signature invalid: ${U}`) : j === "ERR_JWT_CLAIM_VALIDATION_FAILED" ? U.includes('"aud"') || U.includes("audience") ? new exports.NeetruError("token_invalid_audience", `Token audience mismatch: ${U}`) : U.includes('"iss"') || U.includes("issuer") ? new exports.NeetruError("token_invalid_issuer", `Token issuer mismatch: ${U}`) : new exports.NeetruError("token_invalid_signature", `Token claim validation failed: ${U}`) : new exports.NeetruError("token_invalid_signature", `Token verification failed: ${U}`);
@@ -6649,16 +6669,16 @@ function Zo(n) {
     }
   };
 }
-function Xn(n = {}) {
+function Yn(n = {}) {
   let e = n.fetch ?? globalThis.fetch;
   if (typeof e != "function")
     throw new exports.NeetruError(
       "invalid_config",
       "fetch is not available in this runtime. Pass `fetch` explicitly to createNeetruClient."
     );
-  let t = n.apiKey ?? Qo();
+  let t = n.apiKey ?? Yo();
   At({ hasApiKey: !!t, strict: n.strictServerOnlyKey === true });
-  let r = Jo(n.env), o = n.baseUrl ?? (r === "dev-local" ? wt : je), i = vt(o, n.allowedHosts ?? []), s = Object.freeze({
+  let r = Zo(n.env), o = n.baseUrl ?? (r === "dev-local" ? wt : je), i = vt(o, n.allowedHosts ?? []), s = Object.freeze({
     apiKey: t,
     oidcClientId: n.oidcClientId,
     baseUrl: i,
@@ -6666,33 +6686,33 @@ function Xn(n = {}) {
     env: r,
     productId: n.productId,
     tenantId: n.tenantId
-  }), a = r === "dev" && !Me(), c = n.mocks?.auth ?? (a ? new le({ ...qe }) : Zo(s)), u = n.mocks?.usage ?? (a ? new de() : Vt(s)), d = n.endUserAuth ?? c, p = n.mocks?.support ?? (a ? new ue() : Qt(s, {
-    getEndUserToken: () => d.getIdToken(),
+  }), a = r === "dev" && !Me(), d = n.mocks?.auth ?? (a ? new le({ ...qe }) : ni(s)), p = n.mocks?.usage ?? (a ? new de() : Vt(s)), l = n.endUserAuth ?? d, u = n.mocks?.support ?? (a ? new ue() : Qt(s, {
+    getEndUserToken: () => l.getIdToken(),
     // `refreshTokens` é opcional (MockAuth/mocks próprios omitem).
     refreshEndUserToken: (() => {
-      let k = d.refreshTokens;
-      return typeof k == "function" ? () => k.call(d) : void 0;
+      let k = l.refreshTokens;
+      return typeof k == "function" ? () => k.call(l) : void 0;
     })()
-  })), f = n.mocks?.entitlements ?? (a ? new pe() : qt()), m = n.mocks?.db ?? (Q() === "react-native" ? Jn() : nt(s, n.db)), h = n.mocks?.webhooks ?? (a ? new ae() : it(s)), y = n.mocks?.notifications ?? (a ? new ce() : at(s)), I = n.mocks?.ai ?? (a ? new fe() : ct(s)), w = Object.freeze({
+  })), f = n.mocks?.entitlements ?? (a ? new pe() : qt()), m = n.mocks?.db ?? (Q() === "react-native" ? Xn() : nt(s, n.db)), h = n.mocks?.webhooks ?? (a ? new ae() : it(s)), y = n.mocks?.notifications ?? (a ? new ce() : at(s)), I = n.mocks?.ai ?? (a ? new fe() : ct(s)), w = Object.freeze({
     config: s,
-    auth: c,
+    auth: d,
     catalog: Ut(s),
     entitlements: f,
     telemetry: Wt(s),
-    usage: u,
-    support: p,
+    usage: p,
+    support: u,
     db: m,
     checkout: ot(s),
     webhooks: h,
     notifications: y,
     ai: I
   });
-  return n.endUserAuth && Qn(w, n.endUserAuth), w;
+  return n.endUserAuth && Jn(w, n.endUserAuth), w;
 }
 var pt = /* @__PURE__ */ Symbol.for("@neetru/sdk:serverClient");
-function ei(n = {}) {
+function ri(n = {}) {
   let e = globalThis;
-  return e[pt] || (e[pt] = Xn(n)), e[pt];
+  return e[pt] || (e[pt] = Yn(n)), e[pt];
 }
 
 // src/index.ts
@@ -6702,8 +6722,8 @@ q();
 
 // src/access-token.ts
 C();
-var Zn = "https://auth.neetru.com", ni = "/api/v1/oauth/.well-known/jwks";
-function er(n) {
+var er = "https://auth.neetru.com", ii = "/api/v1/oauth/.well-known/jwks";
+function tr(n) {
   let e = (Array.isArray(n) ? n : [n]).filter(
     (t) => typeof t == "string" && t.trim().length > 0
   );
@@ -6714,17 +6734,17 @@ function er(n) {
     );
   return e;
 }
-var Yn = "O token apresentado n\xE3o \xE9 um access_token (parece um id_token). Mande o access_token no Authorization.";
+var Zn = "O token apresentado n\xE3o \xE9 um access_token (parece um id_token). Mande o access_token no Authorization.";
 function K(n, e) {
   return new exports.NeetruError("token_invalid", n, 401, void 0, e);
 }
-async function tr(n, e) {
-  let t = er(e?.audience);
+async function nr(n, e) {
+  let t = tr(e?.audience);
   if (typeof n != "string" || n.length === 0)
     throw K("access_token ausente.", "missing_token");
   if (n.split(".").length !== 3)
     throw K("O token n\xE3o \xE9 um JWT (access_token OIDC esperado).", "not_a_jwt");
-  let r = (e.issuer ?? Zn).replace(/\/+$/, ""), o = e.jwksUrl ?? `${r}${ni}`, i = Math.min(Math.max(e.clockToleranceSec ?? 5, 0), 60), s = ye(o, e.jwksCacheTtlMs ?? ee), a;
+  let r = (e.issuer ?? er).replace(/\/+$/, ""), o = e.jwksUrl ?? `${r}${ii}`, i = Math.min(Math.max(e.clockToleranceSec ?? 5, 0), 60), s = ye(o, e.jwksCacheTtlMs ?? ee), a;
   try {
     ({ payload: a } = await jose.jwtVerify(n, s, {
       issuer: r,
@@ -6745,7 +6765,7 @@ async function tr(n, e) {
         401,
         void 0,
         "audience"
-      ) : _ === "iss" ? new exports.NeetruError("token_invalid_issuer", "access_token de outro emissor.", 401, void 0, "issuer") : _ === "jti" ? K(Yn, "not_access_token") : K(`Claim obrigat\xF3rio ausente ou inv\xE1lido no access_token (${_ ?? "desconhecido"}).`, "claims");
+      ) : _ === "iss" ? new exports.NeetruError("token_invalid_issuer", "access_token de outro emissor.", 401, void 0, "issuer") : _ === "jti" ? K(Zn, "not_access_token") : K(`Claim obrigat\xF3rio ausente ou inv\xE1lido no access_token (${_ ?? "desconhecido"}).`, "claims");
     }
     throw k === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" || k === "ERR_JWKS_NO_MATCHING_KEY" || k === "ERR_JOSE_ALG_NOT_ALLOWED" || k === "ERR_JWKS_MULTIPLE_MATCHING_KEYS" ? new exports.NeetruError(
       "token_invalid_signature",
@@ -6755,11 +6775,11 @@ async function tr(n, e) {
       "signature"
     ) : k === "ERR_JWKS_TIMEOUT" || k === "ERR_JOSE_GENERIC" && /JSON Web Key Set/i.test(N) || k === "" && w instanceof TypeError ? new exports.NeetruError("network_error", `Falha ao obter o JWKS do Core: ${N}`, void 0, void 0, "jwks") : K(`access_token inv\xE1lido: ${N}`, "malformed");
   }
-  let c = a.jti, u = a.scope, d = a.client_id;
-  if (typeof c != "string" || c.length === 0 || typeof u != "string" || typeof d != "string")
-    throw K(Yn, "not_access_token");
-  let p = a.aud, f = typeof p == "string" ? p : Array.isArray(p) && p.length === 1 ? p[0] : void 0;
-  if (typeof f != "string" || f !== d)
+  let d = a.jti, p = a.scope, l = a.client_id;
+  if (typeof d != "string" || d.length === 0 || typeof p != "string" || typeof l != "string")
+    throw K(Zn, "not_access_token");
+  let u = a.aud, f = typeof u == "string" ? u : Array.isArray(u) && u.length === 1 ? u[0] : void 0;
+  if (typeof f != "string" || f !== l)
     throw K("access_token inconsistente: client_id difere do aud.", "client_id_mismatch");
   let m = typeof a.sub == "string" ? a.sub : "", h = m.startsWith("client:");
   if (!m || h && e.allowClientCredentials !== true)
@@ -6767,7 +6787,7 @@ async function tr(n, e) {
       "access_token de m\xE1quina (client_credentials) n\xE3o representa um usu\xE1rio final.",
       "client_credentials"
     );
-  let y = u.split(" ").filter(Boolean), I = (e.requiredScopes ?? []).filter((w) => !y.includes(w));
+  let y = p.split(" ").filter(Boolean), I = (e.requiredScopes ?? []).filter((w) => !y.includes(w));
   if (I.length > 0)
     throw new exports.NeetruError(
       "insufficient_scope",
@@ -6778,17 +6798,17 @@ async function tr(n, e) {
     );
   return {
     sub: m,
-    clientId: d,
+    clientId: l,
     audience: f,
     scopes: y,
-    jti: c,
+    jti: d,
     issuedAt: a.iat,
     expiresAt: a.exp,
     isClientCredentials: h,
     claims: a
   };
 }
-function nr(n, e) {
+function rr(n, e) {
   let t = e.toLowerCase(), r = n && typeof n == "object" && "headers" in n && n.headers ? n.headers : n;
   if (!r || typeof r != "object") return null;
   if (typeof r.get == "function")
@@ -6798,14 +6818,14 @@ function nr(n, e) {
       return Array.isArray(i) ? typeof i[0] == "string" ? i[0] : null : typeof i == "string" ? i : null;
   return null;
 }
-function rr(n) {
-  let e = nr(n, "authorization");
+function or(n) {
+  let e = rr(n, "authorization");
   if (!e) return null;
   let t = /^\s*Bearer\s+(\S+)\s*$/i.exec(e);
   return t ? t[1] : null;
 }
-function or(n, e) {
-  let t = nr(n, "cookie");
+function ir(n, e) {
+  let t = rr(n, "cookie");
   if (!t) return null;
   for (let r of t.split(";")) {
     let o = r.indexOf("=");
@@ -6819,13 +6839,13 @@ function or(n, e) {
   }
   return null;
 }
-async function ri(n, e) {
-  er(e?.audience);
-  let t = rr(n);
+async function si(n, e) {
+  tr(e?.audience);
+  let t = or(n);
   if (t)
-    return { kind: "access_token", token: await tr(t, e) };
+    return { kind: "access_token", token: await nr(t, e) };
   if (e.cookie) {
-    let r = or(n, e.cookie.name);
+    let r = ir(n, e.cookie.name);
     if (r) {
       let o = await e.cookie.verify(r);
       if (o != null) return { kind: "cookie", session: o };
@@ -6833,7 +6853,7 @@ async function ri(n, e) {
   }
   return null;
 }
-function oi(n) {
+function ai(n) {
   if (n instanceof exports.NeetruError) {
     if (n.code === "insufficient_scope")
       return {
@@ -6866,7 +6886,7 @@ function oi(n) {
 
 // src/index.ts
 be();
-var Aa = "3.8.0";
+var Da = "3.8.1";
 
 exports.DEFAULT_BASE_URL = je;
 exports.DEV_FIXTURE_USER = qe;
@@ -6879,27 +6899,27 @@ exports.MockNotifications = ce;
 exports.MockSupport = ue;
 exports.MockUsage = de;
 exports.MockWebhooks = ae;
-exports.NEETRU_OIDC_ISSUER = Zn;
+exports.NEETRU_OIDC_ISSUER = er;
 exports.NEETRU_SENTINEL_KEY = ze;
-exports.VERSION = Aa;
-exports.accessTokenErrorToHttp = oi;
-exports.authenticateProductRequest = ri;
+exports.VERSION = Da;
+exports.accessTokenErrorToHttp = ai;
+exports.authenticateProductRequest = si;
 exports.checkCoreVersionCompat = te;
 exports.createAiNamespace = ct;
 exports.createCheckoutNamespace = ot;
-exports.createNeetruClient = Xn;
+exports.createNeetruClient = Yn;
 exports.createNeetruDb = nt;
 exports.createNotificationsNamespace = at;
 exports.createWebhooksNamespace = it;
 exports.detectNonServerRuntime = Q;
-exports.getServerNeetruClient = ei;
-exports.increment = Kr;
+exports.getServerNeetruClient = ri;
+exports.increment = zr;
 exports.isFieldSentinel = H;
 exports.isIncrementSentinel = Yt;
 exports.isServerTimestampSentinel = Xt;
-exports.readBearerToken = rr;
-exports.readCookie = or;
-exports.serverTimestamp = Br;
-exports.verifyAccessToken = tr;
-exports.verifyWebhookRequest = Co;
-exports.verifyWebhookSignature = _n;
+exports.readBearerToken = or;
+exports.readCookie = ir;
+exports.serverTimestamp = Kr;
+exports.verifyAccessToken = nr;
+exports.verifyWebhookRequest = Po;
+exports.verifyWebhookSignature = bn;