@neetru/sdk 3.8.0 → 3.8.1

package/dist/mobile.d.cts

@@ -1,4 +1,4 @@
-import { Y as NeetruClientConfig, v as CompleteSignInResult, a6 as NeetruUser, m as AuthStateListener } from './types-D-9bjlM0.cjs';
+import { Y as NeetruClientConfig, v as CompleteSignInResult, a6 as NeetruUser, m as AuthStateListener } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/mobile.d.ts

@@ -1,4 +1,4 @@
-import { Y as NeetruClientConfig, v as CompleteSignInResult, a6 as NeetruUser, m as AuthStateListener } from './types-bVztFQTI.js';
+import { Y as NeetruClientConfig, v as CompleteSignInResult, a6 as NeetruUser, m as AuthStateListener } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/mocks.d.cts

@@ -1,4 +1,4 @@
-import { a6 as NeetruUser, g as AiNamespace, b as AiChatOptions, c as AiChatResult, i as AiStreamHandle, l as AuthNamespace, ak as SignInOptions, m as AuthStateListener, af as RedirectCallbackResult, v as CompleteSignInResult, Z as NeetruDb, E as DbCollectionRef, a5 as NeetruSqlClient, ar as SyncState, aw as Unsubscribe, w as ConflictRecord, P as EntitlementCheck, am as SupportNamespace, y as CreateTicketInput, ap as SupportTicket, ay as UsageNamespace, az as UsageQuota } from './types-D-9bjlM0.cjs';
+import { a6 as NeetruUser, g as AiNamespace, b as AiChatOptions, c as AiChatResult, i as AiStreamHandle, l as AuthNamespace, ak as SignInOptions, m as AuthStateListener, af as RedirectCallbackResult, v as CompleteSignInResult, Z as NeetruDb, E as DbCollectionRef, a5 as NeetruSqlClient, ar as SyncState, aw as Unsubscribe, w as ConflictRecord, P as EntitlementCheck, am as SupportNamespace, y as CreateTicketInput, ap as SupportTicket, ay as UsageNamespace, az as UsageQuota } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/mocks.d.ts

@@ -1,4 +1,4 @@
-import { a6 as NeetruUser, g as AiNamespace, b as AiChatOptions, c as AiChatResult, i as AiStreamHandle, l as AuthNamespace, ak as SignInOptions, m as AuthStateListener, af as RedirectCallbackResult, v as CompleteSignInResult, Z as NeetruDb, E as DbCollectionRef, a5 as NeetruSqlClient, ar as SyncState, aw as Unsubscribe, w as ConflictRecord, P as EntitlementCheck, am as SupportNamespace, y as CreateTicketInput, ap as SupportTicket, ay as UsageNamespace, az as UsageQuota } from './types-bVztFQTI.js';
+import { a6 as NeetruUser, g as AiNamespace, b as AiChatOptions, c as AiChatResult, i as AiStreamHandle, l as AuthNamespace, ak as SignInOptions, m as AuthStateListener, af as RedirectCallbackResult, v as CompleteSignInResult, Z as NeetruDb, E as DbCollectionRef, a5 as NeetruSqlClient, ar as SyncState, aw as Unsubscribe, w as ConflictRecord, P as EntitlementCheck, am as SupportNamespace, y as CreateTicketInput, ap as SupportTicket, ay as UsageNamespace, az as UsageQuota } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/notifications.cjs

@@ -108,7 +108,7 @@ function Y(t, e) {
 }
 function q() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/notifications.d.cts

@@ -1,3 +1,3 @@
-export { S as ListNotificationsOptions, U as MockNotifications, a7 as NotificationScopeOptions, a8 as NotificationsNamespace, aa as ProductNotification, ab as ProductNotificationSeverity, ai as SendNotificationInput, aN as createNotificationsNamespace } from './types-D-9bjlM0.cjs';
+export { S as ListNotificationsOptions, U as MockNotifications, a7 as NotificationScopeOptions, a8 as NotificationsNamespace, aa as ProductNotification, ab as ProductNotificationSeverity, ai as SendNotificationInput, aN as createNotificationsNamespace } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';

package/dist/notifications.d.ts

@@ -1,3 +1,3 @@
-export { S as ListNotificationsOptions, U as MockNotifications, a7 as NotificationScopeOptions, a8 as NotificationsNamespace, aa as ProductNotification, ab as ProductNotificationSeverity, ai as SendNotificationInput, aN as createNotificationsNamespace } from './types-bVztFQTI.js';
+export { S as ListNotificationsOptions, U as MockNotifications, a7 as NotificationScopeOptions, a8 as NotificationsNamespace, aa as ProductNotification, ab as ProductNotificationSeverity, ai as SendNotificationInput, aN as createNotificationsNamespace } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';

package/dist/notifications.mjs

@@ -106,7 +106,7 @@ function Y(t, e) {
 }
 function q() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/react.d.cts

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { X as NeetruClient, t as CheckoutStartResult, l as AuthNamespace, a6 as NeetruUser } from './types-D-9bjlM0.cjs';
+import { X as NeetruClient, t as CheckoutStartResult, l as AuthNamespace, a6 as NeetruUser } from './types-yv3EDKg2.cjs';
 import { CollectionReference, Query, DocumentReference } from './firestore-compat.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import { X as NeetruClient, t as CheckoutStartResult, l as AuthNamespace, a6 as NeetruUser } from './types-bVztFQTI.js';
+import { X as NeetruClient, t as CheckoutStartResult, l as AuthNamespace, a6 as NeetruUser } from './types-BYPk_3HR.js';
 import { CollectionReference, Query, DocumentReference } from './firestore-compat.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';

package/dist/support.cjs

@@ -112,7 +112,7 @@ function Q(e, t) {
 }
 function $() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/support.d.cts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, am as SupportNamespace } from './types-D-9bjlM0.cjs';
+import { ah as ResolvedConfig, am as SupportNamespace } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/support.d.ts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, am as SupportNamespace } from './types-bVztFQTI.js';
+import { ah as ResolvedConfig, am as SupportNamespace } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/support.mjs

@@ -110,7 +110,7 @@ function Q(e, t) {
 }
 function $() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/telemetry.cjs

@@ -108,7 +108,7 @@ function V(e, t) {
 }
 function L() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/telemetry.d.cts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, at as TelemetryEventInput, as as TelemetryEventAck, av as TelemetryLogInput, au as TelemetryLogAck } from './types-D-9bjlM0.cjs';
+import { ah as ResolvedConfig, at as TelemetryEventInput, as as TelemetryEventAck, av as TelemetryLogInput, au as TelemetryLogAck } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/telemetry.d.ts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, at as TelemetryEventInput, as as TelemetryEventAck, av as TelemetryLogInput, au as TelemetryLogAck } from './types-bVztFQTI.js';
+import { ah as ResolvedConfig, at as TelemetryEventInput, as as TelemetryEventAck, av as TelemetryLogInput, au as TelemetryLogAck } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/telemetry.mjs

@@ -106,7 +106,7 @@ function V(e, t) {
 }
 function L() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/{types-bVztFQTI.d.ts → types-BYPk_3HR.d.ts}

@@ -1412,9 +1412,42 @@ interface RealtimeClientOptions {
  * Alinhado com `DbSqlLease` do Core (`src/lib/db/lease/types.ts`).
  *
  * - `port` sempre 5433 — o lease aponta pro PgBouncer, nunca à porta crua.
- * - `credentialVersion` — bump indica rotação; o `SqlLeaseManager` reabre
- *   o pool ao detectar versão diferente.
+ * - `credentialVersion` — hoje é um placeholder fixo do Core (ver o campo).
  * - `expiresAt` — ISO string; o SDK renova aos ~80% do TTL (12 min em TTL=15 min).
+ *
+ * ── TLS / mTLS (estado real) ───────────────────────────────────────────────
+ *
+ * **O mTLS de cliente ESTÁ ativo.** O Core emite os três materiais em TODO
+ * lease SQL (emissão e renovação — `buildLease`, ramo `sql`, em
+ * `src/lib/db/lease/issuer-core.ts` do Core):
+ *   - `sslca` — a CA interna do Core (secret `coredb_ca_cert`). A MESMA CA
+ *     assina o cert do servidor PgBouncer (365 dias) e os certs de cliente.
+ *   - `clientCert` — X.509 de cliente emitido por lease: CN = `leaseId`, EKU
+ *     `clientAuth`, validade = TTL do lease (15 min).
+ *   - `clientKey` — chave EC P-256 efêmera, nova a cada emissão/renovação.
+ * Não há flag que desligue isso: sem a CA no Secret Manager a emissão FALHA
+ * (HTTP 500), em vez de devolver esses campos `null`.
+ *
+ * O SDK usa os três ao abrir o `pg.Pool` (`createPgPool` e o `createPool` de
+ * `createSqlClientFromConfig`): com `sslca` presente, `ssl = { ca: sslca,
+ * cert: clientCert, key: clientKey, rejectUnauthorized: true }` — verifica o
+ * servidor (CA + hostname) E apresenta o cert de cliente.
+ *
+ * Do lado da VM, o PgBouncer roda com `client_tls_sslmode = verify-full` e
+ * `client_tls_ca_file` = CA do Core (agente, `src/handlers/db-pgbouncer.ts`):
+ * EXIGE cert de cliente válido. E `auth_type = scram-sha-256` — a conexão
+ * precisa do cert E da senha do lease (o CN não é comparado ao usuário).
+ *
+ * Consequências práticas:
+ *   - o cert de cliente expira junto com o lease (~15 min). Pool que não troca
+ *     de lease passa a levar `certificate expired` (alerta TLS 45 enviado pelo
+ *     PgBouncer) — é o que a renovação proativa (`lease.ts`) e o re-lease
+ *     reativo (`resilient-pool.ts`) curam;
+ *   - se o install da VM não obteve a CA/assinatura, o Core configura o
+ *     PgBouncer SEM TLS (fail-open, com aviso no log). Como o SDK sempre liga
+ *     TLS quando o lease traz `sslca`, a conexão falha com "The server does
+ *     not support SSL connections" — o conserto é reconfigurar o PgBouncer com
+ *     TLS, não desligar TLS no SDK.
  */
 interface DbSqlLease {
     leaseId: string;
@@ -1425,31 +1458,38 @@ interface DbSqlLease {
     /** Plaintext — trafega só sobre HTTPS, NUNCA logado/persistido. */
     password: string;
     /**
-     * CA do servidor PgBouncer, para **TLS de servidor** (verify-full). Quando
-     * presente, o pool valida o certificado do servidor contra esta CA
-     * (`rejectUnauthorized: true`). `null` quando o lease não traz TLS.
+     * CA interna do Core (PEM) — a mesma que assina o cert do servidor PgBouncer
+     * e o `clientCert`. O pool valida o servidor contra ela
+     * (`rejectUnauthorized: true`). O Core sempre manda em lease SQL; `null` só
+     * se o campo vier ausente, e aí o SDK conecta SEM TLS (`ssl: false`), mesmo
+     * que `clientCert` exista.
      */
     sslca: string | null;
     /**
-     * Certificado de **cliente** para mTLS (o SDK apresentar identidade ao
-     * servidor). **mTLS-cliente NÃO está implementado no Core (TODO P0-3):** hoje
-     * este campo é SEMPRE `null`, portanto **não há mTLS ativo** — a conexão usa,
-     * no máximo, TLS de servidor (verify-full via `sslca`). O SDK já envia este
-     * cert ao pool quando/se o lease passar a trazê-lo.
+     * Certificado X.509 de **cliente** (PEM) para mTLS, emitido por lease
+     * (CN = `leaseId`, EKU `clientAuth`, expira com o lease — 15 min). O SDK o
+     * apresenta ao PgBouncer em `ssl.cert`; o PgBouncer o exige
+     * (`client_tls_sslmode = verify-full`). O Core sempre manda em lease SQL —
+     * o `| null` é só tolerância a resposta sem o campo (o pool fica com TLS
+     * só de servidor).
      */
     clientCert: string | null;
     /**
-     * Chave privada de **cliente** para mTLS — par de `clientCert`. Mesma
-     * condição: `null` até o Core emitir material de cliente (mTLS-cliente
-     * pendente, P0-3).
+     * Chave privada de **cliente** (PEM, EC P-256 efêmera, nova a cada
+     * emissão/renovação) — par de `clientCert`, vai em `ssl.key`. Trafega só
+     * sobre HTTPS, NUNCA logada/persistida. Mesma regra de `null` do
+     * `clientCert`.
      */
     clientKey: string | null;
     /**
-     * Versão da credencial no Secret Manager. Bump = rotação de senha.
-     * O manager fecha o pool antigo e abre um novo quando esta versão muda.
+     * Versão da credencial. HOJE o Core manda sempre o placeholder `1` (TODO de
+     * versionamento no `issuer-core.ts` do Core), então ela NÃO sinaliza
+     * rotação. A troca de pool numa rotação é disparada pela mudança de
+     * `password` (ou de qualquer campo de conexão) — ver `hasConnectionChanged`
+     * em `lease.ts`.
      */
     credentialVersion: number;
-    /** Expiração ISO — SDK renova ~2 min antes. */
+    /** Expiração ISO — o SDK renova aos ~80% do TTL (~3 min antes, em 15 min). */
     expiresAt: string;
 }
 /**

package/dist/{types-D-9bjlM0.d.cts → types-yv3EDKg2.d.cts}

@@ -1412,9 +1412,42 @@ interface RealtimeClientOptions {
  * Alinhado com `DbSqlLease` do Core (`src/lib/db/lease/types.ts`).
  *
  * - `port` sempre 5433 — o lease aponta pro PgBouncer, nunca à porta crua.
- * - `credentialVersion` — bump indica rotação; o `SqlLeaseManager` reabre
- *   o pool ao detectar versão diferente.
+ * - `credentialVersion` — hoje é um placeholder fixo do Core (ver o campo).
  * - `expiresAt` — ISO string; o SDK renova aos ~80% do TTL (12 min em TTL=15 min).
+ *
+ * ── TLS / mTLS (estado real) ───────────────────────────────────────────────
+ *
+ * **O mTLS de cliente ESTÁ ativo.** O Core emite os três materiais em TODO
+ * lease SQL (emissão e renovação — `buildLease`, ramo `sql`, em
+ * `src/lib/db/lease/issuer-core.ts` do Core):
+ *   - `sslca` — a CA interna do Core (secret `coredb_ca_cert`). A MESMA CA
+ *     assina o cert do servidor PgBouncer (365 dias) e os certs de cliente.
+ *   - `clientCert` — X.509 de cliente emitido por lease: CN = `leaseId`, EKU
+ *     `clientAuth`, validade = TTL do lease (15 min).
+ *   - `clientKey` — chave EC P-256 efêmera, nova a cada emissão/renovação.
+ * Não há flag que desligue isso: sem a CA no Secret Manager a emissão FALHA
+ * (HTTP 500), em vez de devolver esses campos `null`.
+ *
+ * O SDK usa os três ao abrir o `pg.Pool` (`createPgPool` e o `createPool` de
+ * `createSqlClientFromConfig`): com `sslca` presente, `ssl = { ca: sslca,
+ * cert: clientCert, key: clientKey, rejectUnauthorized: true }` — verifica o
+ * servidor (CA + hostname) E apresenta o cert de cliente.
+ *
+ * Do lado da VM, o PgBouncer roda com `client_tls_sslmode = verify-full` e
+ * `client_tls_ca_file` = CA do Core (agente, `src/handlers/db-pgbouncer.ts`):
+ * EXIGE cert de cliente válido. E `auth_type = scram-sha-256` — a conexão
+ * precisa do cert E da senha do lease (o CN não é comparado ao usuário).
+ *
+ * Consequências práticas:
+ *   - o cert de cliente expira junto com o lease (~15 min). Pool que não troca
+ *     de lease passa a levar `certificate expired` (alerta TLS 45 enviado pelo
+ *     PgBouncer) — é o que a renovação proativa (`lease.ts`) e o re-lease
+ *     reativo (`resilient-pool.ts`) curam;
+ *   - se o install da VM não obteve a CA/assinatura, o Core configura o
+ *     PgBouncer SEM TLS (fail-open, com aviso no log). Como o SDK sempre liga
+ *     TLS quando o lease traz `sslca`, a conexão falha com "The server does
+ *     not support SSL connections" — o conserto é reconfigurar o PgBouncer com
+ *     TLS, não desligar TLS no SDK.
  */
 interface DbSqlLease {
     leaseId: string;
@@ -1425,31 +1458,38 @@ interface DbSqlLease {
     /** Plaintext — trafega só sobre HTTPS, NUNCA logado/persistido. */
     password: string;
     /**
-     * CA do servidor PgBouncer, para **TLS de servidor** (verify-full). Quando
-     * presente, o pool valida o certificado do servidor contra esta CA
-     * (`rejectUnauthorized: true`). `null` quando o lease não traz TLS.
+     * CA interna do Core (PEM) — a mesma que assina o cert do servidor PgBouncer
+     * e o `clientCert`. O pool valida o servidor contra ela
+     * (`rejectUnauthorized: true`). O Core sempre manda em lease SQL; `null` só
+     * se o campo vier ausente, e aí o SDK conecta SEM TLS (`ssl: false`), mesmo
+     * que `clientCert` exista.
      */
     sslca: string | null;
     /**
-     * Certificado de **cliente** para mTLS (o SDK apresentar identidade ao
-     * servidor). **mTLS-cliente NÃO está implementado no Core (TODO P0-3):** hoje
-     * este campo é SEMPRE `null`, portanto **não há mTLS ativo** — a conexão usa,
-     * no máximo, TLS de servidor (verify-full via `sslca`). O SDK já envia este
-     * cert ao pool quando/se o lease passar a trazê-lo.
+     * Certificado X.509 de **cliente** (PEM) para mTLS, emitido por lease
+     * (CN = `leaseId`, EKU `clientAuth`, expira com o lease — 15 min). O SDK o
+     * apresenta ao PgBouncer em `ssl.cert`; o PgBouncer o exige
+     * (`client_tls_sslmode = verify-full`). O Core sempre manda em lease SQL —
+     * o `| null` é só tolerância a resposta sem o campo (o pool fica com TLS
+     * só de servidor).
      */
     clientCert: string | null;
     /**
-     * Chave privada de **cliente** para mTLS — par de `clientCert`. Mesma
-     * condição: `null` até o Core emitir material de cliente (mTLS-cliente
-     * pendente, P0-3).
+     * Chave privada de **cliente** (PEM, EC P-256 efêmera, nova a cada
+     * emissão/renovação) — par de `clientCert`, vai em `ssl.key`. Trafega só
+     * sobre HTTPS, NUNCA logada/persistida. Mesma regra de `null` do
+     * `clientCert`.
      */
     clientKey: string | null;
     /**
-     * Versão da credencial no Secret Manager. Bump = rotação de senha.
-     * O manager fecha o pool antigo e abre um novo quando esta versão muda.
+     * Versão da credencial. HOJE o Core manda sempre o placeholder `1` (TODO de
+     * versionamento no `issuer-core.ts` do Core), então ela NÃO sinaliza
+     * rotação. A troca de pool numa rotação é disparada pela mudança de
+     * `password` (ou de qualquer campo de conexão) — ver `hasConnectionChanged`
+     * em `lease.ts`.
      */
     credentialVersion: number;
-    /** Expiração ISO — SDK renova ~2 min antes. */
+    /** Expiração ISO — o SDK renova aos ~80% do TTL (~3 min antes, em 15 min). */
     expiresAt: string;
 }
 /**

package/dist/usage.cjs

@@ -108,7 +108,7 @@ function V(e, t) {
 }
 function q() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/usage.d.cts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, ay as UsageNamespace } from './types-D-9bjlM0.cjs';
+import { ah as ResolvedConfig, ay as UsageNamespace } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/usage.d.ts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, ay as UsageNamespace } from './types-bVztFQTI.js';
+import { ah as ResolvedConfig, ay as UsageNamespace } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/usage.mjs

@@ -106,7 +106,7 @@ function V(e, t) {
 }
 function q() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/webhooks.cjs

@@ -108,7 +108,7 @@ function X(t, e) {
 }
 function $() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/dist/webhooks.d.cts

@@ -1,3 +1,3 @@
-export { V as MockWebhooks, ag as RegisterWebhookInput, aB as VerifyWebhookRequestOptions, aC as VerifyWebhookRequestResult, aD as WebhookEndpoint, aE as WebhookEvent, aF as WebhookScopeOptions, aG as WebhookTestResult, aH as WebhooksNamespace, aP as createWebhooksNamespace, aW as verifyWebhookRequest, aX as verifyWebhookSignature } from './types-D-9bjlM0.cjs';
+export { V as MockWebhooks, ag as RegisterWebhookInput, aB as VerifyWebhookRequestOptions, aC as VerifyWebhookRequestResult, aD as WebhookEndpoint, aE as WebhookEvent, aF as WebhookScopeOptions, aG as WebhookTestResult, aH as WebhooksNamespace, aP as createWebhooksNamespace, aW as verifyWebhookRequest, aX as verifyWebhookSignature } from './types-yv3EDKg2.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';

package/dist/webhooks.d.ts

@@ -1,3 +1,3 @@
-export { V as MockWebhooks, ag as RegisterWebhookInput, aB as VerifyWebhookRequestOptions, aC as VerifyWebhookRequestResult, aD as WebhookEndpoint, aE as WebhookEvent, aF as WebhookScopeOptions, aG as WebhookTestResult, aH as WebhooksNamespace, aP as createWebhooksNamespace, aW as verifyWebhookRequest, aX as verifyWebhookSignature } from './types-bVztFQTI.js';
+export { V as MockWebhooks, ag as RegisterWebhookInput, aB as VerifyWebhookRequestOptions, aC as VerifyWebhookRequestResult, aD as WebhookEndpoint, aE as WebhookEvent, aF as WebhookScopeOptions, aG as WebhookTestResult, aH as WebhooksNamespace, aP as createWebhooksNamespace, aW as verifyWebhookRequest, aX as verifyWebhookSignature } from './types-BYPk_3HR.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';

package/dist/webhooks.mjs

@@ -106,7 +106,7 @@ function X(t, e) {
 }
 function $() {
   try {
-    return "3.8.0";
+    return "3.8.1";
   } catch {
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neetru/sdk",
-  "version": "3.8.0",
+  "version": "3.8.1",
   "description": "Neetru SDK 3.0 — biblioteca runtime universal (browser/Node/Edge) para consumir o ecossistema Neetru. Paths canonical /api/sdk/v1/*, productId obrigatório, Idempotency-Key em mutations, WebCrypto signatures, baseUrl allowlist fail-closed.",
   "type": "module",
   "main": "./dist/index.cjs",