@neetru/sdk 3.8.0 → 3.9.0

package/dist/auth.cjs

@@ -3,16 +3,16 @@
 var jose = require('jose');
 var idb = require('idb');
 
-var Hn = Object.defineProperty;
+var Zn = Object.defineProperty;
 var $ = (n, e) => () => (n && (e = n(n = 0)), e);
-var ot = (n, e) => {
+var st = (n, e) => {
   for (var t in e)
-    Hn(n, t, { get: e[t], enumerable: true });
+    Zn(n, t, { get: e[t], enumerable: true });
 };
 
 // src/errors.ts
-var l, V, I = $(() => {
-  l = class n extends Error {
+var c, K, C = $(() => {
+  c = class n extends Error {
     code;
     status;
     requestId;
@@ -35,7 +35,7 @@ var l, V, I = $(() => {
     constructor(e, t, r, o, i, s) {
       super(t), this.name = "NeetruError", this.code = e, this.status = r, this.requestId = o, this.reason = i, this.correlationId = s, Object.setPrototypeOf(this, n.prototype);
     }
-  }, V = class n extends l {
+  }, K = class n extends c {
     constructor(e, t, r, o, i) {
       super("auth_required", e, r, o, t, i), this.name = "NeetruAuthRequiredError", Object.setPrototypeOf(this, n.prototype);
     }
@@ -43,24 +43,24 @@ var l, V, I = $(() => {
 });
 
 // src/idempotency.ts
-function ht() {
+function yt() {
   let n = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
   if (n && typeof n.randomUUID == "function")
     return n.randomUUID();
-  throw new l(
+  throw new c(
     "runtime_unsupported",
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
-var gt = $(() => {
-  I();
+var _t = $(() => {
+  C();
 });
 
 // src/correlation.ts
-function _t(n) {
-  return typeof n == "string" && n.length > 0 && n.length <= 128 && er.test(n);
+function vt(n) {
+  return typeof n == "string" && n.length > 0 && n.length <= 128 && sr.test(n);
 }
-function tr() {
+function ar() {
   let n = globalThis.crypto;
   try {
     if (n && typeof n.randomUUID == "function") return n.randomUUID();
@@ -78,24 +78,24 @@ function tr() {
   let r = Array.from(e, (o) => o.toString(16).padStart(2, "0")).join("");
   return `${r.slice(0, 8)}-${r.slice(8, 12)}-${r.slice(12, 16)}-${r.slice(16, 20)}-${r.slice(20)}`;
 }
-function ae(n, e) {
+function ce(n, e) {
   let t, r = {};
   for (let [i, s] of Object.entries(n)) {
-    if (i.toLowerCase() === yt) {
-      _t(s) && (t = s);
+    if (i.toLowerCase() === bt) {
+      vt(s) && (t = s);
       continue;
     }
     r[i] = s;
   }
-  let o = t ?? (_t(e) ? e : void 0) ?? tr();
-  return r[yt] = o, { headers: r, correlationId: o };
+  let o = t ?? (vt(e) ? e : void 0) ?? ar();
+  return r[bt] = o, { headers: r, correlationId: o };
 }
-var yt, er, Me = $(() => {
-  yt = "x-correlation-id", er = /^[A-Za-z0-9._:\-]+$/;
+var bt, sr, qe = $(() => {
+  bt = "x-correlation-id", sr = /^[A-Za-z0-9._:\-]+$/;
 });
 
 // src/server-only-key.ts
-function X() {
+function Y() {
   try {
     let n = globalThis.navigator;
     if (n && n.product === "ReactNative") return "react-native";
@@ -108,108 +108,108 @@ function X() {
   }
   return null;
 }
-function bt(n, e) {
-  let t = nr[n];
+function wt(n, e) {
+  let t = cr[n];
   return (`${e ? `[Neetru SDK] Recusado: a credencial nrt_ do produto foi passada ao SDK rodando ${t}.` : `[Neetru SDK] ATEN\xC7\xC3O: a credencial nrt_ do produto est\xE1 sendo usada ${t}.`} Essa chave \xE9 S\xD3 DE SERVIDOR \u2014 quem abrir o DevTools (ou descompactar o app) copia a chave e fala com o Core como se fosse o seu produto. Como corrigir: o site/app chama a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio (Authorization: Bearer <access_token>); o backend do produto valida com verifyAccessToken() e usa o SDK com a chave (NEETRU_API_KEY, sem prefixo NEXT_PUBLIC_/EXPO_PUBLIC_). ` + (e ? "" : "Nesta vers\xE3o \xE9 s\xF3 um aviso; use strictServerOnlyKey: true para bloquear j\xE1. Na pr\xF3xima vers\xE3o MAJOR do SDK isso passa a falhar sempre.")).trim();
 }
-function wt(n) {
+function St(n) {
   if (!n.hasApiKey) return;
-  let e = n.runtime === void 0 ? X() : n.runtime;
+  let e = n.runtime === void 0 ? Y() : n.runtime;
   if (e) {
     if (n.strict)
-      throw new l("server_only_key", bt(e, true), void 0, void 0, e);
-    if (!vt) {
-      vt = true;
+      throw new c("server_only_key", wt(e, true), void 0, void 0, e);
+    if (!kt) {
+      kt = true;
       try {
-        typeof console < "u" && typeof console.warn == "function" && console.warn(bt(e, !1));
+        typeof console < "u" && typeof console.warn == "function" && console.warn(wt(e, !1));
       } catch {
       }
     }
   }
 }
-var nr, vt, qe = $(() => {
-  I();
-  nr = {
+var cr, kt, Fe = $(() => {
+  C();
+  cr = {
     browser: "no navegador",
     "react-native": "num app React Native"
   };
-  vt = false;
+  kt = false;
 });
 
 // src/http.ts
-var Y = {};
-ot(Y, {
-  checkCoreVersionCompat: () => ce,
+var Z = {};
+st(Z, {
+  checkCoreVersionCompat: () => le,
   httpRequest: () => v,
-  statusToCode: () => le
+  statusToCode: () => de
 });
-function Fe(n) {
+function je(n) {
   return n.split("+")[0] ?? n;
 }
-function or(n, e) {
-  let t = Fe(n).split(".").map(Number), r = Fe(e).split(".").map(Number), o = Math.max(t.length, r.length);
+function dr(n, e) {
+  let t = je(n).split(".").map(Number), r = je(e).split(".").map(Number), o = Math.max(t.length, r.length);
   for (let i = 0; i < o; i++) {
     let s = t[i] ?? 0, a = r[i] ?? 0;
     if (s !== a) return s - a;
   }
   return 0;
 }
-function Ct() {
+function Et() {
   try {
-    return "3.8.0";
+    return "3.9.0";
   } catch {
     return;
   }
 }
-function ir() {
-  let n = Ct();
+function ur() {
+  let n = Et();
   return n ? parseInt(n.split(".")[0] ?? "3", 10) : 3;
 }
-function ce(n) {
+function le(n) {
   if (!n) return;
-  let e = ir(), t = rr[e];
+  let e = ur(), t = lr[e];
   if (!t) return;
-  let r = Fe(n);
-  if (or(r, t) < 0) {
+  let r = je(n);
+  if (dr(r, t) < 0) {
     let o = `${e}:${r}`;
-    kt.has(o) || (kt.add(o), console.warn(
+    Tt.has(o) || (Tt.add(o), console.warn(
       `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${n}" \xE9 anterior ao m\xEDnimo recomendado "${t}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
     ));
   }
 }
-function sr() {
+function pr() {
   let n = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
-  return X() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + n + ")" : n;
+  return Y() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + n + ")" : n;
 }
-function St(n) {
+function Rt(n) {
   let e = 200 * Math.pow(4, n), t = e * 0.2 * (Math.random() * 2 - 1);
   return Math.max(50, Math.round(e + t));
 }
-function ur(n) {
+function yr(n) {
   if (!n) return null;
   let e = Number(n);
-  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), Tt);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), It);
   let t = Date.parse(n);
   if (Number.isFinite(t)) {
     let r = t - Date.now();
-    if (r > 0) return Math.min(r, Tt);
+    if (r > 0) return Math.min(r, It);
   }
   return null;
 }
-function Rt(n) {
+function Ct(n) {
   return new Promise((e) => setTimeout(e, n));
 }
-function le(n) {
+function de(n) {
   return n === 401 ? "unauthorized" : n === 403 ? "forbidden" : n === 404 ? "not_found" : n === 409 ? "conflict" : n === 410 ? "gone" : n === 422 || n === 400 ? "validation_failed" : n === 429 ? "rate_limited" : n >= 500 ? "server_error" : "unknown";
 }
-function pr(n, e, t) {
+function _r(n, e, t) {
   let r = n.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, i = new URL(`${r}${o}`);
   if (t)
     for (let [s, a] of Object.entries(t))
       a !== void 0 && i.searchParams.set(s, String(a));
   return i.toString();
 }
-async function It(n) {
+async function At(n) {
   let e = await n.text();
   if (e)
     try {
@@ -219,17 +219,17 @@ async function It(n) {
     }
 }
 async function v(n, e) {
-  let t = e.method ?? "GET", r = pr(n.baseUrl, e.path, e.query), o = lr.has(t) ? ar : cr, i = e.retries ?? o, { headers: s, correlationId: a } = ae(
+  let t = e.method ?? "GET", r = _r(n.baseUrl, e.path, e.query), o = hr.has(t) ? fr : mr, i = e.retries ?? o, { headers: s, correlationId: a } = ce(
     { accept: "application/json", ...e.headers },
     e.correlationId
-  ), c = Ct();
-  if (c && (s["x-neetru-sdk-version"] = c), e.requireAuth) {
+  ), l = Et();
+  if (l && (s["x-neetru-sdk-version"] = l), e.requireAuth) {
     if (!n.apiKey)
-      throw new l("missing_api_key", sr());
+      throw new c("missing_api_key", pr());
     s.authorization = `Bearer ${n.apiKey}`;
   }
   if (e.idempotencyKey) {
-    let f = typeof e.idempotencyKey == "string" ? e.idempotencyKey : ht();
+    let f = typeof e.idempotencyKey == "string" ? e.idempotencyKey : yt();
     s["idempotency-key"] = f;
   }
   let d = e.body !== void 0 && t !== "GET" && t !== "DELETE" ? JSON.stringify(e.body) : void 0;
@@ -237,7 +237,7 @@ async function v(n, e) {
   let u = null, p = e.deadlineMs != null ? Date.now() + e.deadlineMs : null;
   for (let f = 0; f <= i; f++) {
     if (p != null && Date.now() >= p)
-      throw u ?? new l(
+      throw u ?? new c(
         "network_error",
         "Deadline excedido antes de completar a request",
         void 0,
@@ -245,77 +245,77 @@ async function v(n, e) {
         void 0,
         a
       );
-    let _ = { method: t, headers: s };
-    d !== void 0 && (_.body = d);
-    let b = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
-    _.signal = AbortSignal.timeout(b);
-    let S;
+    let h = { method: t, headers: s };
+    d !== void 0 && (h.body = d);
+    let y = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
+    h.signal = AbortSignal.timeout(y);
+    let T;
     try {
-      S = await n.fetch(r, _);
-    } catch (h) {
-      let C = h instanceof DOMException && h.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${h instanceof Error ? h.message : "fetch failed"}`;
-      if (u = new l("network_error", C, void 0, void 0, void 0, a), f < i) {
-        let D = St(f);
+      T = await n.fetch(r, h);
+    } catch (m) {
+      let S = m instanceof DOMException && m.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${m instanceof Error ? m.message : "fetch failed"}`;
+      if (u = new c("network_error", S, void 0, void 0, void 0, a), f < i) {
+        let D = Rt(f);
         if (p == null || Date.now() + D < p) {
-          await Rt(D);
+          await Ct(D);
           continue;
         }
       }
       throw u;
     }
-    let x = S.headers.get("x-request-id") ?? S.headers.get("x-correlation-id") ?? void 0;
-    if (S.ok) {
-      let h = S.headers.get("x-neetru-version");
-      return h && ce(h), await It(S);
+    let x = T.headers.get("x-request-id") ?? T.headers.get("x-correlation-id") ?? void 0;
+    if (T.ok) {
+      let m = T.headers.get("x-neetru-version");
+      return m && le(m), await At(T);
     }
-    let T = await It(S), P = le(S.status), q = `HTTP ${S.status}`, m;
-    if (T && typeof T == "object") {
-      let h = T.error;
-      typeof h == "string" ? q = h : h && typeof h == "object" ? (typeof h.code == "string" && (P = h.code), typeof h.message == "string" && (q = h.message), typeof h.reason == "string" && (m = h.reason)) : (typeof T.code == "string" && (P = T.code), typeof T.message == "string" && (q = T.message)), typeof T.reason == "string" && (m = T.reason);
+    let R = await At(T), E = de(T.status), j = `HTTP ${T.status}`, g;
+    if (R && typeof R == "object") {
+      let m = R.error;
+      typeof m == "string" ? j = m : m && typeof m == "object" ? (typeof m.code == "string" && (E = m.code), typeof m.message == "string" && (j = m.message), typeof m.reason == "string" && (g = m.reason)) : (typeof R.code == "string" && (E = R.code), typeof R.message == "string" && (j = R.message)), typeof R.reason == "string" && (g = R.reason);
     }
-    if (S.status === 410) {
-      let h = S.headers.get("x-neetru-replacement");
-      q === `HTTP ${S.status}` && (q = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), h && !q.includes(h) && (q += ` Substituto: ${h}.`);
+    if (T.status === 410) {
+      let m = T.headers.get("x-neetru-replacement");
+      j === `HTTP ${T.status}` && (j = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), m && !j.includes(m) && (j += ` Substituto: ${m}.`);
     }
-    let g = new l(P, q, S.status, x, m, a);
-    if (u = g, dr.has(P) && f < i) {
-      let C = ur(S.headers.get("retry-after")) ?? St(f);
-      if (p == null || Date.now() + C < p) {
-        await Rt(C);
+    let b = new c(E, j, T.status, x, g, a);
+    if (u = b, gr.has(E) && f < i) {
+      let S = yr(T.headers.get("retry-after")) ?? Rt(f);
+      if (p == null || Date.now() + S < p) {
+        await Ct(S);
         continue;
       }
     }
-    throw g;
+    throw b;
   }
-  throw u ?? new l("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, a);
+  throw u ?? new c("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, a);
 }
-var rr, kt, ar, cr, lr, dr, Tt, M = $(() => {
-  I();
-  gt();
-  Me();
+var lr, Tt, fr, mr, hr, gr, It, F = $(() => {
+  C();
+  _t();
   qe();
-  rr = {
+  Fe();
+  lr = {
     // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
     // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
     3: "2026.05.1"
   };
-  kt = /* @__PURE__ */ new Set();
-  ar = 2, cr = 0, lr = /* @__PURE__ */ new Set(["GET", "HEAD"]), dr = /* @__PURE__ */ new Set([
+  Tt = /* @__PURE__ */ new Set();
+  fr = 2, mr = 0, hr = /* @__PURE__ */ new Set(["GET", "HEAD"]), gr = /* @__PURE__ */ new Set([
     "rate_limited",
     "server_error",
     "network_error"
   ]);
-  Tt = 6e4;
+  It = 6e4;
 });
 
 // src/db-errors.ts
-var Rr, y, Z = $(() => {
-  I();
-  Rr = /* @__PURE__ */ new Set([
+var Dr, _, ee = $(() => {
+  C();
+  Dr = /* @__PURE__ */ new Set([
     "db_unavailable",
     "db_conflict",
     "db_timeout"
-  ]), y = class n extends l {
+  ]), _ = class n extends c {
     /** Código de erro fechado — específico de DB. */
     code;
     /**
@@ -329,16 +329,16 @@ var Rr, y, Z = $(() => {
      */
     dbId;
     constructor(e, t, r) {
-      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = Rr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
+      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = Dr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
     }
   };
 });
 
 // src/db/sql/resilient-pool.ts
-function ve(n) {
-  return typeof n == "object" && n !== null && n[He] === true;
+function we(n) {
+  return typeof n == "object" && n !== null && n[Ge] === true;
 }
-function Hr(n) {
+function Zr(n) {
   let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
   if (e === "ECONNREFUSED" || e === "ETIMEDOUT" || e === "ENOTFOUND" || e === "EHOSTUNREACH" || e === "EAI_AGAIN")
     return true;
@@ -350,67 +350,84 @@ function Hr(n) {
   let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
   return r.length === 0 ? false : !!(r.includes("certificate expired") || r.includes("certificate has expired") || r.includes("cert_has_expired") || r.includes("alert certificate expired") || r.includes("err_ssl") || r.includes("sslv3 alert") || r.includes("tlsv1 alert") || r.includes("econnrefused") || r.includes("etimedout") || r.includes("enotfound") || r.includes("ehostunreach") || r.includes("getaddrinfo"));
 }
-function Qe(n) {
+function Xt(n) {
+  let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
+  if (typeof e == "string" && eo.has(e.toUpperCase()))
+    return true;
+  let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
+  return r.length === 0 ? false : r.includes("password authentication failed") || r.includes("sasl authentication failed");
+}
+function to(n) {
+  return Zr(n) || Xt(n);
+}
+function Je(n) {
   let e = { current: n }, t = null, r = {
-    __neetruSwapInner(c) {
-      let d = e.current;
-      return e.current = c, d;
+    __neetruSwapInner(u) {
+      let p = e.current;
+      return e.current = u, p;
     },
     __neetruGetInner() {
       return e.current;
     },
-    __neetruSetReLease(c) {
-      t = c;
+    __neetruSetReLease(u) {
+      t = u;
     }
-  }, o = (c, d) => c.query(...d), i = (...c) => c.length > 0 && typeof c[c.length - 1] == "function" ? o(e.current, c) : (async () => {
+  }, o = (u, p, f) => p[u](
+    ...f
+  ), i = (u, p) => (...f) => f.length > 0 && typeof f[f.length - 1] == "function" ? o(u, e.current, f) : (async () => {
     try {
-      return await o(e.current, c);
-    } catch (d) {
-      let u = t;
-      if (u === null || !Hr(d))
-        throw d;
+      return await o(u, e.current, f);
+    } catch (h) {
+      let y = t;
+      if (y === null || !p(h))
+        throw h;
       try {
-        await u();
+        await y();
       } catch {
-        throw d;
+        throw h;
       }
-      return await o(e.current, c);
+      return await o(u, e.current, f);
     }
-  })(), s = Object.create(Object.getPrototypeOf(n));
-  return new Proxy(s, {
-    get(c, d) {
-      if (d === He) return true;
-      if (d === "__neetruSwapInner") return r.__neetruSwapInner;
-      if (d === "__neetruGetInner") return r.__neetruGetInner;
-      if (d === "__neetruSetReLease") return r.__neetruSetReLease;
-      if (d === "query") return i;
-      if (d === "constructor")
+  })(), s = i("query", to), a = i("connect", Xt), l = Object.create(Object.getPrototypeOf(n));
+  return new Proxy(l, {
+    get(u, p) {
+      if (p === Ge) return true;
+      if (p === "__neetruSwapInner") return r.__neetruSwapInner;
+      if (p === "__neetruGetInner") return r.__neetruGetInner;
+      if (p === "__neetruSetReLease") return r.__neetruSetReLease;
+      if (p === "query") return s;
+      if (p === "connect") {
+        let y = e.current;
+        return typeof y.connect == "function" ? a : y.connect;
+      }
+      if (p === "constructor")
         return e.current.constructor;
-      let u = e.current, p = Reflect.get(u, d, u);
-      return typeof p == "function" ? p.bind(u) : p;
+      let f = e.current, h = Reflect.get(f, p, f);
+      return typeof h == "function" ? h.bind(f) : h;
     }
   });
 }
-var He, Ge = $(() => {
-  He = /* @__PURE__ */ Symbol.for("neetru.sdk.resilientPool");
+var Ge, eo, Xe = $(() => {
+  Ge = /* @__PURE__ */ Symbol.for("neetru.sdk.resilientPool");
+  eo = /* @__PURE__ */ new Set(["28P01", "28000"]);
 });
 
 // src/db/sql/lease.ts
-function Gr(n, e) {
+function ro(n, e) {
   return n ? n.leaseId !== e.leaseId || n.credentialVersion !== e.credentialVersion || n.host !== e.host || n.port !== e.port || n.dbName !== e.dbName || n.user !== e.user || n.password !== e.password || n.sslca !== e.sslca || n.clientCert !== e.clientCert || n.clientKey !== e.clientKey : true;
 }
-function Jr(n) {
-  if (n instanceof y) return n;
+function oo(n) {
+  if (n instanceof _) return n;
   let e = n instanceof Error ? n.message : String(n), t = n instanceof Error ? n.code : void 0;
-  return typeof t == "string" && (t === "ECONNREFUSED" || t === "ENOTFOUND" || t === "ETIMEDOUT") ? new y(
+  return typeof t == "string" && (t === "ECONNREFUSED" || t === "ENOTFOUND" || t === "ETIMEDOUT") ? new _(
     "db_unavailable",
     `Pool connection failed (${t}): ${e}`
-  ) : e.includes("statement timeout") || e.includes("lock timeout") ? new y("db_timeout", `Query timeout: ${e}`) : e.includes("40001") || e.includes("40P01") || e.includes("deadlock") ? new y("db_conflict", `Transaction conflict: ${e}`) : e.includes("42501") || e.toLowerCase().includes("permission denied") ? new y("db_permission_denied", `Permission denied: ${e}`) : new y("db_unavailable", `Database error: ${e}`);
+  ) : e.includes("statement timeout") || e.includes("lock timeout") ? new _("db_timeout", `Query timeout: ${e}`) : e.includes("40001") || e.includes("40P01") || e.includes("deadlock") ? new _("db_conflict", `Transaction conflict: ${e}`) : e.includes("42501") || e.toLowerCase().includes("permission denied") ? new _("db_permission_denied", `Permission denied: ${e}`) : new _("db_unavailable", `Database error: ${e}`);
 }
-var Qr, J, re, Gt = $(() => {
-  Z();
-  Ge();
-  Qr = 0.8, J = 3e4, re = class {
+var no, X, oe, Yt = $(() => {
+  ee();
+  Xe();
+  no = 0.8, X = 3e4, oe = class {
     /**
      * Lease atual. `null` no modo LAZY antes da 1ª query (o 1º lease é adiado —
      * ver `_ensureInitialLease`). Após a 1ª aquisição, sempre não-nulo.
@@ -450,7 +467,7 @@ var Qr, J, re, Gt = $(() => {
           isolationLevel: t.isolationLevel
         }) : await this._orm.transaction(e);
       } catch (r) {
-        throw Jr(r);
+        throw oo(r);
       }
     }
     async close() {
@@ -468,13 +485,13 @@ var Qr, J, re, Gt = $(() => {
      * usa `MIN_RENEWAL_DELAY_MS` como fallback seguro.
      */
     _calcRenewalDelayMs() {
-      if (!this._lease) return J;
+      if (!this._lease) return X;
       let e = Date.parse(this._lease.expiresAt);
-      if (!Number.isFinite(e)) return J;
+      if (!Number.isFinite(e)) return X;
       let t = this._deps.now(), r = e - t;
-      if (r <= 0) return J;
-      let o = r * (1 - Qr);
-      return Math.max(J, Math.round(o));
+      if (r <= 0) return X;
+      let o = r * (1 - no);
+      return Math.max(X, Math.round(o));
     }
     _scheduleRenewal() {
       if (this._closed) return;
@@ -501,8 +518,8 @@ var Qr, J, re, Gt = $(() => {
         } catch (t) {
           this._renewalTimer = setTimeout(() => {
             this._doRenew();
-          }, J), console.warn(
-            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${J}ms (cert TLS ef\xEAmero do servidor expira ~15min ap\xF3s o \xFAltimo swap):`,
+          }, X), console.warn(
+            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${X}ms (o cert de cliente mTLS do lease expira ~15min ap\xF3s o \xFAltimo swap):`,
             t instanceof Error ? t.message : t
           );
           return;
@@ -514,10 +531,13 @@ var Qr, J, re, Gt = $(() => {
     /**
      * Recuperação REATIVA: chamado pelo wrapper resiliente (`resilient-pool.ts`)
      * quando uma query plana falha num erro de ESTABELECIMENTO de conexão (cert
-     * TLS efêmero do servidor expirado no meio de uma request, ou timer de
-     * renovação que não disparou). Emite um lease NOVO e faz o swap do pool interno
-     * do wrapper com
-     * o certificado fresco; o wrapper então re-tenta a query 1x no pool novo.
+     * TLS de cliente mTLS do lease expirado no meio de uma request, ou timer de
+     * renovação que não disparou) ou de AUTENTICAÇÃO (senha rotacionada por
+     * `rotate-credentials` antes do próximo renew — SQLSTATE 28P01/28000, ou o
+     * 08P01+SASL do PgBouncer; também no `connect()` de uma transação). Emite um
+     * lease NOVO e faz o swap do pool interno do wrapper com a credencial e o
+     * certificado frescos (o pool velho é drenado com `end()`); o wrapper então
+     * re-tenta a operação 1x no pool novo.
      *
      * Vai DIRETO ao lease novo (sem `leaseId`) — a conexão falhou porque o
      * certificado do lease atual está ruim, então `renew` (que depende do lease
@@ -533,7 +553,7 @@ var Qr, J, re, Gt = $(() => {
      */
     async _reactiveReLease() {
       if (this._closed)
-        throw new y(
+        throw new _(
           "db_unavailable",
           "SqlLeaseManager foi fechado \u2014 re-lease reativo abortado."
         );
@@ -570,30 +590,30 @@ var Qr, J, re, Gt = $(() => {
      */
     async _ensureInitialLease() {
       if (this._closed)
-        throw new y(
+        throw new _(
           "db_unavailable",
           "SqlLeaseManager foi fechado \u2014 aquisi\xE7\xE3o de lease inicial abortada."
         );
       if (this._lease)
-        return ve(this._pool) ? this._pool.__neetruGetInner() : this._pool;
+        return we(this._pool) ? this._pool.__neetruGetInner() : this._pool;
       if (this._initInFlight !== null) return this._initInFlight;
       let e = (async () => {
         let t;
         try {
           t = this._deps.database !== void 0 ? await this._deps.fetchLease({ database: this._deps.database }) : await this._deps.fetchLease();
         } catch (o) {
-          if (o instanceof y) throw o;
+          if (o instanceof _) throw o;
           let i = o instanceof Error ? o.message : String(o);
-          throw new y("db_unavailable", `Falha ao obter lease inicial: ${i}`);
+          throw new _("db_unavailable", `Falha ao obter lease inicial: ${i}`);
         }
         let r;
         try {
           r = this._deps.createPool(t);
         } catch (o) {
           let i = o instanceof Error ? o.message : String(o);
-          throw new y("db_unavailable", `Falha ao abrir pool: ${i}`);
+          throw new _("db_unavailable", `Falha ao abrir pool: ${i}`);
         }
-        return ve(this._pool) ? this._pool.__neetruSwapInner(r).end().catch(() => {
+        return we(this._pool) ? this._pool.__neetruSwapInner(r).end().catch(() => {
         }) : this._pool = r, this._lease = t, this._scheduleRenewal(), r;
       })();
       this._initInFlight = e;
@@ -609,12 +629,12 @@ var Qr, J, re, Gt = $(() => {
      * Exposto como método protegido para testes.
      */
     async _swapPool(e) {
-      if (!Gr(this._lease, e)) {
+      if (!ro(this._lease, e)) {
         this._lease = e;
         return;
       }
       let t = this._deps.createPool(e);
-      if (ve(this._pool)) {
+      if (we(this._pool)) {
         let i = this._pool.__neetruSwapInner(t);
         this._lease = e, i.end().catch(() => {
         });
@@ -627,7 +647,7 @@ var Qr, J, re, Gt = $(() => {
     // ─── Helpers ───────────────────────────────────────────────────────────────
     _assertOpen() {
       if (this._closed)
-        throw new y(
+        throw new _(
           "db_unavailable",
           "SqlLeaseManager foi fechado \u2014 chame close() apenas no shutdown."
         );
@@ -636,29 +656,29 @@ var Qr, J, re, Gt = $(() => {
 });
 
 // src/db/sql/sql-client.ts
-var rn = {};
-ot(rn, {
-  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => tn,
-  DEFAULT_POOL_IDLE_MS: () => en,
-  DEFAULT_POOL_MAX: () => Zt,
-  LEASE_ENDPOINT: () => Jt,
-  LEASE_RENEW_ENDPOINT: () => Xt,
-  createDrizzleHandle: () => eo,
-  createHttpLeaseFetcher: () => Yt,
-  createPgPool: () => Zr,
-  createSqlClientFromConfig: () => no,
-  createSqlClientWithDeps: () => nn,
-  resolvePoolTuning: () => Xe
+var an = {};
+st(an, {
+  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => on,
+  DEFAULT_POOL_IDLE_MS: () => rn,
+  DEFAULT_POOL_MAX: () => nn,
+  LEASE_ENDPOINT: () => Zt,
+  LEASE_RENEW_ENDPOINT: () => en,
+  createDrizzleHandle: () => co,
+  createHttpLeaseFetcher: () => tn,
+  createPgPool: () => ao,
+  createSqlClientFromConfig: () => uo,
+  createSqlClientWithDeps: () => sn,
+  resolvePoolTuning: () => Ze
 });
-function Xr(n) {
+function io(n) {
   return n === "workspace" ? "staging" : n === "prod" ? "production" : "dev-local";
 }
-function Yt(n) {
+function tn(n) {
   return async (e) => {
-    let { httpRequest: t } = await Promise.resolve().then(() => (M(), Y)), r = !!e?.leaseId, o = r ? Xt : Jt, i;
+    let { httpRequest: t } = await Promise.resolve().then(() => (F(), Z)), r = !!e?.leaseId, o = r ? en : Zt, i;
     r ? i = { leaseId: e.leaseId } : (i = {
       productId: n.productId ?? "",
-      environment: Xr(n.env ?? "prod")
+      environment: io(n.env ?? "prod")
     }, e?.database !== void 0 && (i.database = e.database));
     let s;
     try {
@@ -671,35 +691,35 @@ function Yt(n) {
         retries: 2
       });
     } catch (a) {
-      let c = r ? "renovar" : "obter", d = a instanceof Error ? a.message : String(a), u = a instanceof l ? a.reason : void 0;
+      let l = r ? "renovar" : "obter", d = a instanceof Error ? a.message : String(a), u = a instanceof c ? a.reason : void 0;
       if (u === "suspended" || u === "archived" || u === "revoked") {
         let p = u === "suspended" ? "ambiente suspenso \u2014 a m\xE1quina que o servia parou; ser\xE1 religado quando o ambiente voltar" : u === "archived" ? "ambiente arquivado \u2014 este banco foi arquivado e n\xE3o aceita mais conex\xF5es" : "lease revogado \u2014 as credenciais deste ambiente foram revogadas pelo Core";
-        throw new y(
+        throw new _(
           "db_suspended",
-          `Falha ao ${c} lease SQL: ${p} (reason=${u}).`
+          `Falha ao ${l} lease SQL: ${p} (reason=${u}).`
         );
       }
-      throw new y(
+      throw new _(
         "db_unavailable",
-        `Falha ao ${c} lease SQL: ${d}`
+        `Falha ao ${l} lease SQL: ${d}`
       );
     }
-    return Yr(s);
+    return so(s);
   };
 }
-function Yr(n) {
+function so(n) {
   if (!n || typeof n != "object")
-    throw new y("db_unavailable", "Resposta de lease inv\xE1lida (n\xE3o \xE9 objeto).");
+    throw new _("db_unavailable", "Resposta de lease inv\xE1lida (n\xE3o \xE9 objeto).");
   let t = n.lease;
   if (!t || typeof t != "object")
-    throw new y(
+    throw new _(
       "db_unavailable",
       'Resposta de lease inv\xE1lida: campo "lease" ausente ou n\xE3o \xE9 objeto. O Core retorna { kind, lease: { leaseId, host, ... } }.'
     );
   let r = t;
   function o(i, s) {
     if (typeof r[i] !== s)
-      throw new y(
+      throw new _(
         "db_unavailable",
         `Campo obrigat\xF3rio "${i}" ausente ou tipo inv\xE1lido na resposta de lease.`
       );
@@ -719,22 +739,22 @@ function Yr(n) {
     expiresAt: o("expiresAt", "string")
   };
 }
-function Je(n, e, t, r) {
+function Ye(n, e, t, r) {
   let o = typeof process < "u" ? process.env?.[n] : void 0;
   if (o === void 0 || o.trim() === "") return e;
   let i = Number.parseInt(o.trim(), 10);
   return !Number.isFinite(i) || i < t || i > r ? e : i;
 }
-function Xe() {
+function Ze() {
   return {
     // Teto 100: bem abaixo do `max_client_conn = 500` do PgBouncer, com folga
     // para múltiplas instâncias do app dividirem o mesmo front-door.
-    max: Je("NEETRU_DB_POOL_MAX", Zt, 1, 100),
+    max: Ye("NEETRU_DB_POOL_MAX", nn, 1, 100),
     // Teto 15min = janela do cert; piso 1s.
-    idleTimeoutMillis: Je("NEETRU_DB_POOL_IDLE_MS", en, 1e3, 9e5),
-    connectionTimeoutMillis: Je(
+    idleTimeoutMillis: Ye("NEETRU_DB_POOL_IDLE_MS", rn, 1e3, 9e5),
+    connectionTimeoutMillis: Ye(
       "NEETRU_DB_POOL_CONNECT_TIMEOUT_MS",
-      tn,
+      on,
       1e3,
       12e4
     ),
@@ -742,7 +762,7 @@ function Xe() {
     keepAliveInitialDelayMillis: 1e4
   };
 }
-async function Zr(n) {
+async function ao(n) {
   let { Pool: e } = await import(
     /* webpackIgnore: true */
     'pg'
@@ -759,17 +779,17 @@ async function Zr(n) {
     user: n.user,
     password: n.password,
     ssl: t,
-    ...Xe()
+    ...Ze()
   });
 }
-async function eo(n, e) {
+async function co(n, e) {
   let { drizzle: t } = await import(
     /* webpackIgnore: true */
     'drizzle-orm/node-postgres'
   );
   return t(n, { schema: e });
 }
-function to(n, e) {
+function lo(n, e) {
   let t = null, r = null, o = () => t ? Promise.resolve(t) : (r || (r = e().then((s) => (t = s, r = null, s)).catch((s) => {
     throw r = null, s;
   })), r), i = {
@@ -785,52 +805,52 @@ function to(n, e) {
   };
   return n && Object.setPrototypeOf(i, n), i;
 }
-async function nn(n, e) {
+async function sn(n, e) {
   let t = e?.database !== void 0 ? { ...n, database: e.database } : n;
   if (t.lazy) {
-    let c = null, d = to(t.poolPrototype ?? null, () => {
-      if (!c)
-        throw new y("db_unavailable", "SQL client n\xE3o inicializado (manager ausente).");
-      return c._ensureInitialLease();
-    }), u = Qe(d), p;
+    let l = null, d = lo(t.poolPrototype ?? null, () => {
+      if (!l)
+        throw new _("db_unavailable", "SQL client n\xE3o inicializado (manager ausente).");
+      return l._ensureInitialLease();
+    }), u = Je(d), p;
     try {
       p = t.createDrizzle(u, t.schema);
-    } catch (_) {
-      let b = _ instanceof Error ? _.message : String(_);
-      throw new y("db_unavailable", `Falha ao criar handle Drizzle: ${b}`);
+    } catch (h) {
+      let y = h instanceof Error ? h.message : String(h);
+      throw new _("db_unavailable", `Falha ao criar handle Drizzle: ${y}`);
     }
-    let f = new re(null, u, p, t);
-    return c = f, u.__neetruSetReLease(() => f._reactiveReLease()), f;
+    let f = new oe(null, u, p, t);
+    return l = f, u.__neetruSetReLease(() => f._reactiveReLease()), f;
   }
   let r;
   try {
     e?.database !== void 0 ? r = await t.fetchLease({ database: e.database }) : r = await t.fetchLease();
-  } catch (c) {
-    if (c instanceof y) throw c;
-    let d = c instanceof Error ? c.message : String(c);
-    throw new y("db_unavailable", `Falha ao obter lease inicial: ${d}`);
+  } catch (l) {
+    if (l instanceof _) throw l;
+    let d = l instanceof Error ? l.message : String(l);
+    throw new _("db_unavailable", `Falha ao obter lease inicial: ${d}`);
   }
   let o;
   try {
     o = t.createPool(r);
-  } catch (c) {
-    let d = c instanceof Error ? c.message : String(c);
-    throw new y("db_unavailable", `Falha ao abrir pool: ${d}`);
+  } catch (l) {
+    let d = l instanceof Error ? l.message : String(l);
+    throw new _("db_unavailable", `Falha ao abrir pool: ${d}`);
   }
-  let i = Qe(o), s;
+  let i = Je(o), s;
   try {
     s = t.createDrizzle(i, t.schema);
-  } catch (c) {
+  } catch (l) {
     await o.end().catch(() => {
     });
-    let d = c instanceof Error ? c.message : String(c);
-    throw new y("db_unavailable", `Falha ao criar handle Drizzle: ${d}`);
+    let d = l instanceof Error ? l.message : String(l);
+    throw new _("db_unavailable", `Falha ao criar handle Drizzle: ${d}`);
   }
-  let a = new re(r, i, s, t);
+  let a = new oe(r, i, s, t);
   return i.__neetruSetReLease(() => a._reactiveReLease()), a;
 }
-async function no(n, e, t) {
-  let r = Yt(n), o, i;
+async function uo(n, e, t) {
+  let r = tn(n), o, i;
   try {
     o = await import(
       /* webpackIgnore: true */
@@ -840,13 +860,13 @@ async function no(n, e, t) {
       'drizzle-orm/node-postgres'
     );
   } catch (d) {
-    throw new y(
+    throw new _(
       "db_unavailable",
       `[client.db.sql] requer pg + drizzle-orm como peerDependencies do servidor. Instale: npm install pg drizzle-orm. (${d.message})`
     );
   }
   let s = o.Pool ?? o.default?.Pool;
-  return nn(
+  return sn(
     {
       fetchLease: r,
       createPool: (d) => {
@@ -865,7 +885,7 @@ async function no(n, e, t) {
           ssl: u,
           // Tuning centralizado (env-tunável) — ver resolvePoolTuning + auditoria
           // docs/_review/AUDITORIA_DB_CONN_PERF_2026-09-06.md no Core.
-          ...Xe()
+          ...Ze()
         });
       },
       createDrizzle: (d, u) => i.drizzle(d, { schema: u }),
@@ -881,100 +901,100 @@ async function no(n, e, t) {
     t
   );
 }
-var Jt, Xt, Zt, en, tn, on = $(() => {
-  Z();
-  I();
-  Gt();
-  Ge();
-  Jt = "/api/sdk/v1/db/lease", Xt = "/api/sdk/v1/db/lease/renew";
-  Zt = 10, en = 6e4, tn = 1e4;
+var Zt, en, nn, rn, on, cn = $(() => {
+  ee();
+  C();
+  Yt();
+  Xe();
+  Zt = "/api/sdk/v1/db/lease", en = "/api/sdk/v1/db/lease/renew";
+  nn = 10, rn = 6e4, on = 1e4;
 });
-var Le = /* @__PURE__ */ new Map(), Ue = 3600 * 1e3;
-function it(n, e = Ue) {
-  let t = Date.now(), r = Le.get(n);
+var Ue = /* @__PURE__ */ new Map(), Me = 3600 * 1e3;
+function at(n, e = Me) {
+  let t = Date.now(), r = Ue.get(n);
   if (r && t - r.createdAt < e)
     return r.jwks;
   let o = jose.createRemoteJWKSet(new URL(n));
-  return Le.set(n, { jwks: o, createdAt: t }), o;
+  return Ue.set(n, { jwks: o, createdAt: t }), o;
 }
-function st() {
-  Le.clear();
+function ct() {
+  Ue.clear();
 }
 
 // src/auth.ts
-I();
+C();
 
 // src/api-key.ts
-I();
-var at = /^nrt_([A-Za-z0-9]+)_([A-Za-z0-9]+)$/;
-function ct(n) {
+C();
+var lt = /^nrt_([A-Za-z0-9]+)_([A-Za-z0-9]+)$/;
+function dt(n) {
   if (typeof n != "string" || n.length === 0)
-    throw new l(
+    throw new c(
       "invalid_config",
       "apiKey is required (formato nrt_<keyId>_<secret>)"
     );
-  let e = at.exec(n);
+  let e = lt.exec(n);
   if (!e)
-    throw new l(
+    throw new c(
       "invalid_config",
       "apiKey malformado - esperado formato nrt_<keyId>_<secret>"
     );
   return { keyId: e[1], secret: e[2] };
 }
-function lt(n) {
+function ut(n) {
   if (typeof n != "string" || n.length === 0) return null;
-  let e = at.exec(n);
+  let e = lt.exec(n);
   return e ? { keyId: e[1], secret: e[2] } : null;
 }
 
 // src/base-url-allowlist.ts
-I();
-var dt = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), Gn = ".neetru.com", Jn = "neetru.com", Xn = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
-function ut(n) {
-  return Xn.test(n);
+C();
+var pt = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), tr = ".neetru.com", nr = "neetru.com", rr = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
+function ft(n) {
+  return rr.test(n);
 }
-function Yn(n) {
+function or(n) {
   return n.toLowerCase().replace(/\.+$/, "");
 }
-function pt(n, e = []) {
+function mt(n, e = []) {
   if (typeof n != "string" || n.length === 0)
-    throw new l("invalid_config", "baseUrl is required");
+    throw new c("invalid_config", "baseUrl is required");
   let t;
   try {
     t = new URL(n);
   } catch {
-    throw new l("invalid_config", `baseUrl is not a valid URL: ${n}`);
+    throw new c("invalid_config", `baseUrl is not a valid URL: ${n}`);
   }
-  let r = t.protocol, o = Yn(t.hostname);
-  if (Zn())
+  let r = t.protocol, o = or(t.hostname);
+  if (ir())
     return typeof console < "u" && console.warn(
       `[neetru-sdk] NEETRU_ALLOW_INSECURE_BASEURL=1 ativo. baseUrl=${n} aceito sem valida\xE7\xE3o.`
     ), n.replace(/\/+$/, "");
   if (r !== "https:" && r !== "http:")
-    throw new l(
+    throw new c(
       "invalid_config",
       `baseUrl protocol must be http: or https:, got ${r}`
     );
   if (r === "http:") {
-    if (!(dt.has(o) || ut(o)))
-      throw new l(
+    if (!(pt.has(o) || ft(o)))
+      throw new c(
         "invalid_config",
         `baseUrl with http: only allowed for localhost/127.0.0.1/*.test/*.localhost. Got: ${o}. Use https: or set NEETRU_ALLOW_INSECURE_BASEURL=1 to bypass.`
       );
     return n.replace(/\/+$/, "");
   }
-  let i = o === Jn || o.endsWith(Gn), s = e.some((c) => {
-    let d = c.toLowerCase();
+  let i = o === nr || o.endsWith(tr), s = e.some((l) => {
+    let d = l.toLowerCase();
     return o === d || o.endsWith(`.${d}`);
-  }), a = dt.has(o) || ut(o);
+  }), a = pt.has(o) || ft(o);
   if (!i && !s && !a)
-    throw new l(
+    throw new c(
       "invalid_config",
       `baseUrl ${o} is not in the allowlist. Allowed: *.neetru.com, localhost, or configure { allowedHosts: ['...'] }. Bypass: NEETRU_ALLOW_INSECURE_BASEURL=1.`
     );
   return n.replace(/\/+$/, "");
 }
-function Zn() {
+function ir() {
   try {
     let e = globalThis.process?.env?.NEETRU_ALLOW_INSECURE_BASEURL;
     if (e === "1" || e === "true") return !0;
@@ -989,19 +1009,19 @@ function Zn() {
 }
 
 // src/types.ts
-var ft = "https://api.neetru.com", mt = "http://localhost:9003";
+var ht = "https://api.neetru.com", gt = "http://localhost:9003";
 
 // src/catalog.ts
-I();
-M();
-function At(n) {
+C();
+F();
+function Pt(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "Catalog response item is not an object");
+    throw new c("invalid_response", "Catalog response item is not an object");
   let e = n;
   if (typeof e.slug != "string" || !e.slug)
-    throw new l("invalid_response", "Catalog product missing slug");
+    throw new c("invalid_response", "Catalog product missing slug");
   if (typeof e.name != "string" || !e.name)
-    throw new l("invalid_response", "Catalog product missing name");
+    throw new c("invalid_response", "Catalog product missing name");
   let t = {
     slug: e.slug,
     name: e.name
@@ -1013,7 +1033,7 @@ function At(n) {
     return typeof r.amountCents == "number" && (o.amountCents = r.amountCents), Array.isArray(r.features) && r.features.every((i) => typeof i == "string") && (o.features = r.features), o;
   })), t;
 }
-function Et(n) {
+function Dt(n) {
   return {
     /**
      * Lista produtos publicados. Por default só `published=true`; staff
@@ -1025,12 +1045,12 @@ function Et(n) {
         path: "/api/sdk/v1/catalog"
       });
       if (!t || !Array.isArray(t.products))
-        throw new l(
+        throw new c(
           "invalid_response",
           "Catalog list response missing products array"
         );
       return {
-        products: t.products.map(At),
+        products: t.products.map(Pt),
         fetchedAt: typeof t.fetchedAt == "string" ? t.fetchedAt : (/* @__PURE__ */ new Date()).toISOString()
       };
     },
@@ -1041,42 +1061,42 @@ function Et(n) {
      */
     async get(e) {
       if (!e || typeof e != "string")
-        throw new l("validation_failed", "slug is required");
+        throw new c("validation_failed", "slug is required");
       let t = await v(n, {
         method: "GET",
         path: `/api/sdk/v1/catalog/${encodeURIComponent(e)}`
       });
       if (!t || !t.product)
-        throw new l(
+        throw new c(
           "invalid_response",
           "Catalog get response missing product"
         );
-      return At(t.product);
+      return Pt(t.product);
     }
   };
 }
 
 // src/entitlements.ts
-I();
-var fr = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
-function Pt() {
-  throw new l("validation_failed", fr);
+C();
+var br = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
+function Nt() {
+  throw new c("validation_failed", br);
 }
-function Dt(n) {
+function xt(n) {
   return {
     /**
      * @deprecated Endpoint morto no Core — sempre retornava `not_subscribed`.
      * Lança `NeetruError`. Use `client.usage.check(resource, {productId, tenantId})`.
      */
     async check(e, t, r) {
-      Pt();
+      Nt();
     },
     /**
      * @deprecated Endpoint morto no Core — sempre retornava `not_subscribed`.
      * Lança `NeetruError`. Use `client.usage.check(resource, {productId, tenantId})`.
      */
     async checkDetailed(e, t, r) {
-      Pt();
+      Nt();
     },
     /** Test helper legado — no-op (não há mais cache). Mantido por compat. */
     __resetCache() {
@@ -1085,16 +1105,31 @@ function Dt(n) {
 }
 
 // src/telemetry.ts
-I();
-M();
-var Nt = ["debug", "info", "warn", "error", "fatal"];
-function mr() {
+C();
+F();
+
+// src/runtime-env.ts
+function $e() {
+  try {
+    if (typeof process < "u" && process.env)
+      return process.env.NODE_ENV === "production";
+  } catch {
+  }
+  return false;
+}
+function W(n) {
+  return n === "dev" && !$e();
+}
+
+// src/telemetry.ts
+var Ot = ["debug", "info", "warn", "error", "fatal"];
+function vr() {
   return typeof globalThis < "u" && typeof globalThis.window < "u";
 }
-function xt() {
-  return mr() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
+function Lt() {
+  return vr() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
 }
-function hr(n) {
+function wr(n) {
   switch (n) {
     case "debug":
       return console.debug.bind(console);
@@ -1110,17 +1145,17 @@ function hr(n) {
       return console.log.bind(console);
   }
 }
-var gr = 500, yr = 50;
-function Ot(n) {
+var kr = 500, Sr = 50;
+function Ut(n) {
   let e = [], t = null, r = null;
   async function o() {
     if (e.length === 0) return;
     let s = e.splice(0, e.length), a = Promise.allSettled(
-      s.map(async (c) => {
+      s.map(async (l) => {
         try {
-          let d = { name: c.name }, u = c.productSlug ?? n.productId;
-          u && (d.productSlug = u), c.properties && typeof c.properties == "object" && (d.properties = c.properties), c.timestamp && (d.timestamp = c.timestamp);
-          let p = xt();
+          let d = { name: l.name }, u = l.productSlug ?? n.productId;
+          u && (d.productSlug = u), l.properties && typeof l.properties == "object" && (d.properties = l.properties), l.timestamp && (d.timestamp = l.timestamp);
+          let p = Lt();
           await v(n, {
             method: "POST",
             path: p.path,
@@ -1133,7 +1168,7 @@ function Ot(n) {
             idempotencyKey: !0
           });
         } catch (d) {
-          typeof console < "u" && console.warn("[neetru-sdk] telemetry.track flush failed for event", c.name, d);
+          typeof console < "u" && console.warn("[neetru-sdk] telemetry.track flush failed for event", l.name, d);
         }
       })
     );
@@ -1144,7 +1179,7 @@ function Ot(n) {
   function i() {
     t || (t = setTimeout(() => {
       o();
-    }, gr));
+    }, kr));
   }
   return {
     /**
@@ -1161,21 +1196,21 @@ function Ot(n) {
      */
     async event(s) {
       if (!s || typeof s != "object")
-        throw new l("validation_failed", "event input is required");
+        throw new c("validation_failed", "event input is required");
       if (typeof s.name != "string" || s.name.length === 0)
-        throw new l("validation_failed", "event.name is required");
+        throw new c("validation_failed", "event.name is required");
       if (s.name.length > 128)
-        throw new l("validation_failed", "event.name max 128 chars");
-      let a = { name: s.name }, c = s.productSlug ?? n.productId;
-      c && (a.productSlug = c), s.properties && typeof s.properties == "object" && (a.properties = s.properties), s.timestamp && (a.timestamp = s.timestamp);
-      let d = xt(), u = await v(n, {
+        throw new c("validation_failed", "event.name max 128 chars");
+      let a = { name: s.name }, l = s.productSlug ?? n.productId;
+      l && (a.productSlug = l), s.properties && typeof s.properties == "object" && (a.properties = s.properties), s.timestamp && (a.timestamp = s.timestamp);
+      let d = Lt(), u = await v(n, {
         method: "POST",
         path: d.path,
         body: a,
         requireAuth: d.requireAuth
       });
       if (!u || u.ok !== true || typeof u.eventId != "string")
-        throw new l("invalid_response", "Telemetry response missing eventId");
+        throw new c("invalid_response", "Telemetry response missing eventId");
       return { ok: true, eventId: u.eventId };
     },
     /**
@@ -1189,7 +1224,7 @@ function Ot(n) {
      * ```
      */
     track(s) {
-      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= yr ? (t && (clearTimeout(t), t = null), o()) : i());
+      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= Sr ? (t && (clearTimeout(t), t = null), o()) : i());
     },
     /**
      * Força flush imediato da queue de `track()`. Resolva antes de
@@ -1215,22 +1250,22 @@ function Ot(n) {
      */
     async log(s) {
       if (!s || typeof s != "object")
-        throw new l("validation_failed", "log input is required");
-      if (!Nt.includes(s.level))
-        throw new l("validation_failed", `level must be one of ${Nt.join(", ")}`);
+        throw new c("validation_failed", "log input is required");
+      if (!Ot.includes(s.level))
+        throw new c("validation_failed", `level must be one of ${Ot.join(", ")}`);
       if (typeof s.message != "string" || s.message.length === 0)
-        throw new l("validation_failed", "message is required");
+        throw new c("validation_failed", "message is required");
       if (s.message.length > 4e3)
-        throw new l("validation_failed", "message max 4000 chars");
-      if (n.env === "dev")
-        return hr(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
+        throw new c("validation_failed", "message max 4000 chars");
+      if (W(n.env))
+        return wr(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
       let a = {
         level: s.level,
         message: s.message
       };
       s.metadata && (a.metadata = s.metadata);
-      let c = s.productSlug ?? n.productId;
-      c && (a.productSlug = c);
+      let l = s.productSlug ?? n.productId;
+      l && (a.productSlug = l);
       let d = s.correlationId;
       if (!d)
         try {
@@ -1248,7 +1283,7 @@ function Ot(n) {
         headers: u
       });
       if (!p || p.ok !== true)
-        throw new l("invalid_response", "Telemetry log response missing ok");
+        throw new c("invalid_response", "Telemetry log response missing ok");
       return {
         ok: true,
         logId: typeof p.logId == "string" ? p.logId : void 0,
@@ -1259,22 +1294,22 @@ function Ot(n) {
 }
 
 // src/usage.ts
-I();
-M();
+C();
+F();
 
 // src/validators.ts
-I();
-var Lt = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
+C();
+var Mt = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
 function N(n, e) {
-  if (typeof e != "string" || !Lt.test(e))
-    throw new l(
+  if (typeof e != "string" || !Mt.test(e))
+    throw new c(
       "validation_failed",
-      `${n} must match ${Lt.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
+      `${n} must match ${Mt.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
     );
 }
 
 // src/usage.ts
-function Ut(n) {
+function qt(n) {
   return {
     /**
      * Reporta consumo metered de um resource. Hit no endpoint canônico
@@ -1290,17 +1325,17 @@ function Ut(n) {
      */
     async report(e, t = 1, r) {
       if (!e || typeof e != "string")
-        throw new l("validation_failed", "resource is required");
+        throw new c("validation_failed", "resource is required");
       if (!Number.isFinite(t) || t <= 0 || !Number.isInteger(t))
-        throw new l("validation_failed", "qty must be a positive integer");
+        throw new c("validation_failed", "qty must be a positive integer");
       let o = r?.productId ?? n.productId, i = r?.tenantId ?? n.tenantId;
       if (!o)
-        throw new l(
+        throw new c(
           "validation_failed",
           "productId required (pass to options or set on createNeetruClient)"
         );
       if (!i)
-        throw new l(
+        throw new c(
           "validation_failed",
           "tenantId required (pass to options or set on createNeetruClient)"
         );
@@ -1313,7 +1348,7 @@ function Ut(n) {
         idempotencyKey: true
       });
       if (!s || s.ok !== true)
-        throw new l("invalid_response", "usage.report response missing ok");
+        throw new c("invalid_response", "usage.report response missing ok");
       return {
         ok: true,
         counterId: s.counterId,
@@ -1331,10 +1366,10 @@ function Ut(n) {
      */
     async check(e, t) {
       if (!e || typeof e != "string")
-        throw new l("validation_failed", "resource is required");
+        throw new c("validation_failed", "resource is required");
       let r = t?.productId ?? n.productId, o = t?.tenantId ?? n.tenantId;
       if (!r || !o)
-        throw new l(
+        throw new c(
           "validation_failed",
           "productId and tenantId required (pass to options or set on createNeetruClient)"
         );
@@ -1346,7 +1381,7 @@ function Ut(n) {
         requireAuth: true
       });
       if (!i || typeof i.allowed != "boolean")
-        throw new l("invalid_response", "usage.check response missing allowed");
+        throw new c("invalid_response", "usage.check response missing allowed");
       let s = i.behavior ?? (i.reason === "limit_exceeded" ? "readonly" : null);
       return {
         allowed: i.allowed,
@@ -1362,22 +1397,22 @@ function Ut(n) {
 }
 
 // src/support.ts
-I();
-M();
-var je = ["low", "normal", "high", "urgent"], _r = ["open", "pending", "resolved", "closed"], Mt = 50;
-function qt(n) {
+C();
+F();
+var We = ["low", "normal", "high", "urgent"], Tr = ["open", "pending", "resolved", "closed"], Ft = 50;
+function jt(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "Ticket response is not an object");
+    throw new c("invalid_response", "Ticket response is not an object");
   let e = n;
   if (typeof e.id != "string")
-    throw new l("invalid_response", "Ticket missing id");
+    throw new c("invalid_response", "Ticket missing id");
   let t = Array.isArray(e.attachments) && typeof e.attachments[0] == "string" ? e.attachments[0] : void 0, r = typeof e.screenshotUrl == "string" ? e.screenshotUrl : t ?? null;
   return {
     id: e.id,
     subject: typeof e.subject == "string" ? e.subject : "",
     message: typeof e.message == "string" ? e.message : "",
-    severity: je.includes(e.severity) ? e.severity : "normal",
-    status: _r.includes(e.status) ? e.status : "open",
+    severity: We.includes(e.severity) ? e.severity : "normal",
+    status: Tr.includes(e.status) ? e.status : "open",
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
     updatedAt: typeof e.updatedAt == "string" ? e.updatedAt : void 0,
     productSlug: typeof e.productId == "string" ? e.productId : typeof e.productSlug == "string" ? e.productSlug : void 0,
@@ -1395,48 +1430,48 @@ function qt(n) {
     satisfactionComment: typeof e.satisfactionComment == "string" ? e.satisfactionComment : null
   };
 }
-function de(n) {
+function ue(n) {
   if (!n || typeof n != "string")
-    throw new l("validation_failed", "ticketId is required");
+    throw new c("validation_failed", "ticketId is required");
 }
-function Ft(n) {
+function $t(n) {
   if (typeof n == "string" && n.length > 2e3)
-    throw new l("validation_failed", "comment max 2000 chars");
+    throw new c("validation_failed", "comment max 2000 chars");
 }
-function jt(n, ...e) {
+function Wt(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return N("productSlug", t), t;
   if (n.productId)
     return N("productId", n.productId), n.productId;
-  throw new l(
+  throw new c(
     "validation_failed",
     "productId required (pass to input.productSlug or set on createNeetruClient)"
   );
 }
-var br = "X-Neetru-End-User-Token", vr = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", wr = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", kr = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Sr = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
-function $t(n) {
-  if (n instanceof l && !(n instanceof V)) {
+var Rr = "X-Neetru-End-User-Token", Ir = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", Cr = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", Ar = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Er = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
+function Bt(n) {
+  if (n instanceof c && !(n instanceof K)) {
     if (n.code === "end_user_token_required")
-      throw new V(
-        wr,
+      throw new K(
+        Cr,
         "end_user_token_required",
         n.status,
         n.requestId,
         n.correlationId
       );
     if (n.code === "invalid_end_user_token")
-      throw new V(
-        kr,
+      throw new K(
+        Ar,
         "invalid_end_user_token",
         n.status,
         n.requestId,
         n.correlationId
       );
     if (n.code === "end_user_token_product_mismatch")
-      throw new l(
+      throw new c(
         "forbidden",
-        Sr,
+        Er,
         n.status,
         n.requestId,
         "end_user_token_product_mismatch",
@@ -1445,10 +1480,10 @@ function $t(n) {
   }
   throw n;
 }
-function Tr(n) {
-  return n instanceof l && n.code === "invalid_end_user_token";
+function Pr(n) {
+  return n instanceof c && n.code === "invalid_end_user_token";
 }
-function Wt(n, e = {}) {
+function Vt(n, e = {}) {
   async function t() {
     try {
       let a = await e.getEndUserToken?.();
@@ -1466,28 +1501,28 @@ function Wt(n, e = {}) {
     }
   }
   function o(a) {
-    return a ? { [br]: a } : {};
+    return a ? { [Rr]: a } : {};
   }
-  async function i(a, c) {
+  async function i(a, l) {
     let d = await t();
     if (!d && a && await r() && (d = await t()), !d && a)
-      throw new V(vr, "no_signed_in_user");
+      throw new K(Ir, "no_signed_in_user");
     try {
-      return await c(o(d));
+      return await l(o(d));
     } catch (u) {
-      if (d && Tr(u) && await r()) {
+      if (d && Pr(u) && await r()) {
         let p = await t();
         if (p)
           try {
-            return await c(o(p));
+            return await l(o(p));
           } catch (f) {
-            $t(f);
+            Bt(f);
           }
       }
-      $t(u);
+      Bt(u);
     }
   }
-  async function s(a, c = {}) {
+  async function s(a, l = {}) {
     await i(
       true,
       (d) => v(n, {
@@ -1495,7 +1530,7 @@ function Wt(n, e = {}) {
         path: a,
         requireAuth: !0,
         headers: d,
-        ...c
+        ...l
       })
     );
   }
@@ -1508,22 +1543,22 @@ function Wt(n, e = {}) {
      */
     async createTicket(a) {
       if (!a || typeof a != "object")
-        throw new l("validation_failed", "input is required");
+        throw new c("validation_failed", "input is required");
       if (!a.subject || typeof a.subject != "string")
-        throw new l("validation_failed", "subject is required");
+        throw new c("validation_failed", "subject is required");
       if (a.subject.length > 200)
-        throw new l("validation_failed", "subject max 200 chars");
+        throw new c("validation_failed", "subject max 200 chars");
       if (!a.message || typeof a.message != "string")
-        throw new l("validation_failed", "message is required");
+        throw new c("validation_failed", "message is required");
       if (a.message.length > 1e4)
-        throw new l("validation_failed", "message max 10000 chars");
-      if (a.severity && !je.includes(a.severity))
-        throw new l(
+        throw new c("validation_failed", "message max 10000 chars");
+      if (a.severity && !We.includes(a.severity))
+        throw new c(
           "validation_failed",
-          `severity must be one of ${je.join(", ")}`
+          `severity must be one of ${We.join(", ")}`
         );
       let d = {
-        productId: jt(n, a.productSlug),
+        productId: Wt(n, a.productSlug),
         subject: a.subject,
         message: a.message,
         severity: a.severity ?? "normal"
@@ -1540,7 +1575,7 @@ function Wt(n, e = {}) {
           headers: f
         })
       ), p = u && typeof u == "object" && "ticket" in u ? u.ticket : u;
-      return qt(p);
+      return jt(p);
     },
     /**
      * Lista tickets do customer no produto atual. `productSlug` no contexto.
@@ -1548,23 +1583,23 @@ function Wt(n, e = {}) {
      * Endpoint canonical: `GET /api/sdk/v1/support/tickets?productId=...`.
      */
     async listMyTickets(a) {
-      let c = jt(n, a?.productSlug), d = a?.limit;
-      if (d !== void 0 && (!Number.isInteger(d) || d < 1 || d > Mt))
-        throw new l(
+      let l = Wt(n, a?.productSlug), d = a?.limit;
+      if (d !== void 0 && (!Number.isInteger(d) || d < 1 || d > Ft))
+        throw new c(
           "validation_failed",
-          `limit must be an integer 1-${Mt} (Core default 20)`
+          `limit must be an integer 1-${Ft} (Core default 20)`
         );
       let u = await i(
         true,
         (f) => v(n, {
           method: "GET",
           path: "/api/sdk/v1/support/tickets",
-          query: { productId: c, limit: d },
+          query: { productId: l, limit: d },
           requireAuth: !0,
           headers: f
         })
       );
-      return (Array.isArray(u) ? u : u && typeof u == "object" && "tickets" in u ? u.tickets ?? [] : []).map(qt);
+      return (Array.isArray(u) ? u : u && typeof u == "object" && "tickets" in u ? u.tickets ?? [] : []).map(jt);
     },
     /**
      * 3.4: marca a notificação de resolução como vista (`resolvedNotifiedAt`,
@@ -1572,7 +1607,7 @@ function Wt(n, e = {}) {
      * `POST /api/sdk/v1/support/tickets/{id}/resolved-seen`.
      */
     async markResolvedSeen(a) {
-      de(a), await s(
+      ue(a), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/resolved-seen`
       );
     },
@@ -1583,7 +1618,7 @@ function Wt(n, e = {}) {
      * `POST /api/sdk/v1/support/tickets/{id}/satisfaction-attempt`.
      */
     async recordSatisfactionAttempt(a) {
-      de(a), await s(
+      ue(a), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/satisfaction-attempt`,
         // Incrementa satisfactionAttempts += 1 no Core — sem idempotencyKey,
         // um retry de rede infla o contador (mesmo padrão de createTicket acima).
@@ -1596,10 +1631,10 @@ function Wt(n, e = {}) {
      */
     async submitSatisfaction(a) {
       if (!a || typeof a != "object")
-        throw new l("validation_failed", "input is required");
-      if (de(a.ticketId), a.rating !== null && a.rating !== void 0 && (!Number.isInteger(a.rating) || a.rating < 1 || a.rating > 5))
-        throw new l("validation_failed", "rating must be an integer 1-5 or null");
-      Ft(a.comment), await s(
+        throw new c("validation_failed", "input is required");
+      if (ue(a.ticketId), a.rating !== null && a.rating !== void 0 && (!Number.isInteger(a.rating) || a.rating < 1 || a.rating > 5))
+        throw new c("validation_failed", "rating must be an integer 1-5 or null");
+      $t(a.comment), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a.ticketId)}/satisfaction`,
         {
           body: {
@@ -1615,24 +1650,24 @@ function Wt(n, e = {}) {
      * satisfação/notificação. Endpoint canonical:
      * `POST /api/sdk/v1/support/tickets/{id}/contest`.
      */
-    async contestTicket(a, c) {
-      de(a), Ft(c?.comment), await s(
+    async contestTicket(a, l) {
+      ue(a), $t(l?.comment), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/contest`,
-        { body: { comment: c?.comment ?? void 0 } }
+        { body: { comment: l?.comment ?? void 0 } }
       );
     }
   };
 }
 
 // src/db/client-db.ts
-Z();
+ee();
 
 // src/db/offline/query-engine.ts
-function Bt(n) {
+function Kt(n) {
   return n == null ? 0 : typeof n == "number" ? 1 : typeof n == "string" ? 2 : typeof n == "boolean" ? 3 : 4;
 }
-function ee(n, e) {
-  let t = Bt(n), r = Bt(e);
+function te(n, e) {
+  let t = Kt(n), r = Kt(e);
   if (t !== r) return t - r;
   if (n == null) return 0;
   if (typeof n == "number" && typeof e == "number") return n - e;
@@ -1641,7 +1676,7 @@ function ee(n, e) {
   let o = String(n), i = String(e);
   return o < i ? -1 : o > i ? 1 : 0;
 }
-function $e(n, e) {
+function Be(n, e) {
   let t = e.split("."), r = n;
   for (let o of t) {
     if (r == null || typeof r != "object")
@@ -1650,8 +1685,8 @@ function $e(n, e) {
   }
   return r;
 }
-function Ir(n, e) {
-  let t = $e(n, e.field);
+function Nr(n, e) {
+  let t = Be(n, e.field);
   if (t === void 0) return false;
   let { op: r, value: o } = e;
   switch (r) {
@@ -1660,13 +1695,13 @@ function Ir(n, e) {
     case "!=":
       return t !== o;
     case "<":
-      return ee(t, o) < 0;
+      return te(t, o) < 0;
     case "<=":
-      return ee(t, o) <= 0;
+      return te(t, o) <= 0;
     case ">":
-      return ee(t, o) > 0;
+      return te(t, o) > 0;
     case ">=":
-      return ee(t, o) >= 0;
+      return te(t, o) >= 0;
     case "array-contains":
       return Array.isArray(t) && t.includes(o);
     case "in":
@@ -1681,24 +1716,24 @@ function Ir(n, e) {
       );
   }
 }
-function Cr(n, e) {
-  return e.every((t) => Ir(n, t));
+function xr(n, e) {
+  return e.every((t) => Nr(n, t));
 }
-function Ar(n) {
+function Or(n) {
   return (e, t) => {
     if (n) {
-      let r = $e(e.data, n.field), o = $e(t.data, n.field), i = ee(r, o);
+      let r = Be(e.data, n.field), o = Be(t.data, n.field), i = te(r, o);
       if (i !== 0)
         return n.direction === "desc" ? -i : i;
     }
     return e.id < t.id ? -1 : e.id > t.id ? 1 : 0;
   };
 }
-function Er(n, e) {
+function Lr(n, e) {
   let t = n.findIndex((r) => r.id === e.docId);
   return t === -1 ? n : e.type === "startAfter" ? n.slice(t + 1) : n.slice(0, t);
 }
-var z = class n {
+var H = class n {
   /**
    * Avalia um `QueryDescriptor` contra um array de `OfflineDoc`.
    *
@@ -1712,11 +1747,11 @@ var z = class n {
   evaluate(e, t) {
     let r = e.filter((u) => !u.meta.deleted), o = t.where ?? [];
     o.length > 0 && (r = r.filter(
-      (u) => Cr(u.data, o)
+      (u) => xr(u.data, o)
     ));
-    let i = Ar(t.orderBy), s = [...r].sort(i), a = t.cursor ? Er(s, t.cursor) : s, c = Math.min(t.limit ?? 20, 500);
+    let i = Or(t.orderBy), s = [...r].sort(i), a = t.cursor ? Lr(s, t.cursor) : s, l = Math.min(t.limit ?? 20, 500);
     return {
-      docs: a.slice(0, c).map((u) => ({ id: u.id, data: u.data })),
+      docs: a.slice(0, l).map((u) => ({ id: u.id, data: u.data })),
       // `incomplete` é sempre true aqui — o QueryEngine não sabe se o cache
       // tem todos os docs da coleção. É responsabilidade do chamador (LocalStore)
       // injetar o flag de completude baseado nos metadados do query_cache.
@@ -1734,7 +1769,7 @@ var z = class n {
 };
 
 // src/db/offline/local-store.ts
-var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_meta", H = "conflict_log", pe = class {
+var Mr = 1, B = "documents", V = "mutations", ne = "query_cache", pe = "sync_meta", Q = "conflict_log", fe = class {
   db = null;
   dbName;
   constructor(e) {
@@ -1746,22 +1781,22 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * Idempotente — chamadas subsequentes são no-ops se o banco já está aberto.
    */
   async open() {
-    this.db === null && (this.db = await idb.openDB(this.dbName, Dr, {
+    this.db === null && (this.db = await idb.openDB(this.dbName, Mr, {
       upgrade(e) {
-        if (!e.objectStoreNames.contains(W)) {
-          let t = e.createObjectStore(W, {
+        if (!e.objectStoreNames.contains(B)) {
+          let t = e.createObjectStore(B, {
             keyPath: ["collection", "id"]
           });
           t.createIndex("by_collection", "collection"), t.createIndex("by_collection_state", ["collection", "meta.state"]), t.createIndex("by_updatedAtServer", "meta.updatedAtServer");
         }
-        if (!e.objectStoreNames.contains(B)) {
-          let t = e.createObjectStore(B, {
+        if (!e.objectStoreNames.contains(V)) {
+          let t = e.createObjectStore(V, {
             keyPath: "mutationId"
           });
           t.createIndex("by_seq", "seq"), t.createIndex("by_status", "status"), t.createIndex("by_doc", ["collection", "docId"]), t.createIndex("by_batch", "batchId");
         }
-        if (e.objectStoreNames.contains(te) || e.createObjectStore(te, { keyPath: "queryHash" }), e.objectStoreNames.contains(ue) || e.createObjectStore(ue, { keyPath: "key" }), !e.objectStoreNames.contains(H)) {
-          let t = e.createObjectStore(H, {
+        if (e.objectStoreNames.contains(ne) || e.createObjectStore(ne, { keyPath: "queryHash" }), e.objectStoreNames.contains(pe) || e.createObjectStore(pe, { keyPath: "key" }), !e.objectStoreNames.contains(Q)) {
+          let t = e.createObjectStore(Q, {
             keyPath: "id",
             autoIncrement: true
           });
@@ -1803,14 +1838,14 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * Retorna tombstones (deleted: true) — o chamador decide se deve mostrá-los.
    */
   async getDoc(e, t) {
-    return await this.assertOpen().get(W, [e, t]) ?? null;
+    return await this.assertOpen().get(B, [e, t]) ?? null;
   }
   /**
    * Insere ou atualiza um documento na store `documents`.
    * O documento é identificado pelo keyPath composto `[collection, id]`.
    */
   async putDoc(e) {
-    await this.assertOpen().put(W, e);
+    await this.assertOpen().put(B, e);
   }
   /**
    * Marca um documento como tombstone (`deleted: true`).
@@ -1818,8 +1853,8 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * No-op se o documento não existir.
    */
   async deleteDoc(e, t) {
-    let r = this.assertOpen(), o = await r.get(W, [e, t]);
-    o && await r.put(W, {
+    let r = this.assertOpen(), o = await r.get(B, [e, t]);
+    o && await r.put(B, {
       ...o,
       meta: {
         ...o.meta,
@@ -1835,8 +1870,8 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * e delega a filtragem/ordenação/paginação ao QueryEngine (que opera em memória).
    */
   async listDocs(e, t) {
-    let o = await this.assertOpen().getAllFromIndex(W, "by_collection", e);
-    return z.evaluate(o, t);
+    let o = await this.assertOpen().getAllFromIndex(B, "by_collection", e);
+    return H.evaluate(o, t);
   }
   // ─── Sync meta (key-value) ──────────────────────────────────────────────────
   /**
@@ -1847,14 +1882,14 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    *   'lastFullResyncAt', 'leaderTabId'.
    */
   async getMeta(e) {
-    let r = await this.assertOpen().get(ue, e);
+    let r = await this.assertOpen().get(pe, e);
     return r ? r.value : null;
   }
   /**
    * Armazena ou atualiza um valor na store `sync_meta`.
    */
   async setMeta(e, t) {
-    await this.assertOpen().put(ue, { key: e, value: t });
+    await this.assertOpen().put(pe, { key: e, value: t });
   }
   // ─── Conflict log ───────────────────────────────────────────────────────────
   /**
@@ -1862,7 +1897,7 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * O `id` é autoIncrement — não deve ser fornecido pelo chamador.
    */
   async appendConflict(e) {
-    let r = await this.assertOpen().add(H, e);
+    let r = await this.assertOpen().add(Q, e);
     return { ...e, id: r };
   }
   /**
@@ -1870,15 +1905,15 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * Filtra por `delivered` se a opção for fornecida.
    */
   async listConflicts(e) {
-    let r = await this.assertOpen().getAll(H);
+    let r = await this.assertOpen().getAll(Q);
     return e?.delivered !== void 0 ? r.filter((o) => o.delivered === e.delivered) : r;
   }
   /**
    * Marca um registro do `conflict_log` como entregue ao produto.
    */
   async markConflictDelivered(e) {
-    let t = this.assertOpen(), r = await t.get(H, e);
-    r && await t.put(H, { ...r, delivered: true });
+    let t = this.assertOpen(), r = await t.get(Q, e);
+    r && await t.put(Q, { ...r, delivered: true });
   }
   // ─── Mutations (acessores usados pelo MutationQueue) ────────────────────────
   /**
@@ -1886,13 +1921,13 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * Key: `mutationId`.
    */
   async putMutation(e) {
-    await this.assertOpen().put(B, e);
+    await this.assertOpen().put(V, e);
   }
   /**
    * Retorna uma mutação pelo `mutationId`, ou `null` se não existir.
    */
   async getMutation(e) {
-    return await this.assertOpen().get(B, e) ?? null;
+    return await this.assertOpen().get(V, e) ?? null;
   }
   /**
    * Lista mutações com filtros opcionais.
@@ -1900,14 +1935,14 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    */
   async listMutations(e) {
     let t = this.assertOpen(), r;
-    return e?.status !== void 0 ? r = await t.getAllFromIndex(B, "by_status", e.status) : e?.collection !== void 0 && e.docId !== void 0 ? r = await t.getAllFromIndex(B, "by_doc", [e.collection, e.docId]) : r = await t.getAllFromIndex(B, "by_seq"), r.sort((o, i) => o.seq - i.seq);
+    return e?.status !== void 0 ? r = await t.getAllFromIndex(V, "by_status", e.status) : e?.collection !== void 0 && e.docId !== void 0 ? r = await t.getAllFromIndex(V, "by_doc", [e.collection, e.docId]) : r = await t.getAllFromIndex(V, "by_seq"), r.sort((o, i) => o.seq - i.seq);
   }
   /**
    * Remove uma mutação pelo `mutationId`.
    * No-op se não existir.
    */
   async deleteMutation(e) {
-    await this.assertOpen().delete(B, e);
+    await this.assertOpen().delete(V, e);
   }
   // ─── Collection discovery ────────────────────────────────────────────────────
   /**
@@ -1920,7 +1955,7 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * coletar os valores únicos de forma eficiente (sem carregar os docs completos).
    */
   async listCollections() {
-    let t = await this.assertOpen().getAllFromIndex(W, "by_collection"), r = /* @__PURE__ */ new Set();
+    let t = await this.assertOpen().getAllFromIndex(B, "by_collection"), r = /* @__PURE__ */ new Set();
     for (let o of t)
       r.add(o.collection);
     return Array.from(r);
@@ -1930,24 +1965,24 @@ var Dr = 1, W = "documents", B = "mutations", te = "query_cache", ue = "sync_met
    * Retorna a entrada de `query_cache` para um hash de query, ou `null`.
    */
   async getQueryCache(e) {
-    return await this.assertOpen().get(te, e) ?? null;
+    return await this.assertOpen().get(ne, e) ?? null;
   }
   /**
    * Insere ou atualiza uma entrada de `query_cache`.
    */
   async putQueryCache(e) {
-    await this.assertOpen().put(te, e);
+    await this.assertOpen().put(ne, e);
   }
   /**
    * Remove uma entrada de `query_cache` pelo queryHash.
    */
   async deleteQueryCache(e) {
-    await this.assertOpen().delete(te, e);
+    await this.assertOpen().delete(ne, e);
   }
 };
 
 // src/db/offline/memory-store.ts
-var fe = class {
+var me = class {
   // store `documents` — key: `${collection}\0${id}`
   _docs = /* @__PURE__ */ new Map();
   // store `mutations` — key: mutationId
@@ -1995,7 +2030,7 @@ var fe = class {
     let r = Array.from(this._docs.values()).filter(
       (o) => o.collection === e
     );
-    return z.evaluate(r, t);
+    return H.evaluate(r, t);
   }
   // ─── Sync meta ──────────────────────────────────────────────────────────────
   async getMeta(e) {
@@ -2052,13 +2087,13 @@ var fe = class {
 };
 
 // src/db/offline/mutation-queue.ts
-function We() {
+function Ve() {
   return typeof crypto < "u" && typeof crypto.randomUUID == "function" ? crypto.randomUUID() : "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (n) => {
     let e = Math.random() * 16 | 0;
     return (n === "x" ? e : e & 3 | 8).toString(16);
   });
 }
-var me = class {
+var he = class {
   store;
   /**
    * Ponteiro de sequência local.
@@ -2154,18 +2189,18 @@ var me = class {
    * Atômico: a persistência final é uma única operação putMutation.
    */
   async enqueue(e) {
-    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, c = e.docId ?? (r === "add" ? We() : "");
+    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, l = e.docId ?? (r === "add" ? Ve() : "");
     await this.syncSeq();
-    let u = (await this.store.listMutations({ collection: t, docId: c })).filter((_) => _.status === "queued").sort((_, b) => b.seq - _.seq)[0];
+    let u = (await this.store.listMutations({ collection: t, docId: l })).filter((h) => h.status === "queued").sort((h, y) => y.seq - h.seq)[0];
     if (u !== void 0) {
-      let _ = this.tryCoalesce(u, r, o, s, a);
-      if (_ !== null) {
-        if ("removed" in _)
+      let h = this.tryCoalesce(u, r, o, s, a);
+      if (h !== null) {
+        if ("removed" in h)
           return await this.store.deleteMutation(u.mutationId), {
             seq: u.seq,
-            mutationId: We(),
+            mutationId: Ve(),
             collection: t,
-            docId: c,
+            docId: l,
             op: "remove",
             payload: null,
             baseVersion: i,
@@ -2175,15 +2210,15 @@ var me = class {
             status: "queued",
             batchId: s
           };
-        let { coalesced: b } = _;
-        return await this.store.putMutation(b), b;
+        let { coalesced: y } = h;
+        return await this.store.putMutation(y), y;
       }
     }
     let f = {
       seq: this.nextSeq(),
-      mutationId: We(),
+      mutationId: Ve(),
       collection: t,
-      docId: c,
+      docId: l,
       op: r,
       payload: o,
       baseVersion: i,
@@ -2294,45 +2329,45 @@ var me = class {
 };
 
 // src/db/field-value.ts
-var Vt = "__neetru__";
-function Q(n) {
-  return typeof n == "object" && n !== null && Vt in n && typeof n[Vt] == "string";
+var zt = "__neetru__";
+function G(n) {
+  return typeof n == "object" && n !== null && zt in n && typeof n[zt] == "string";
 }
-function Nr(n) {
-  return Q(n) && n.__neetru__ === "serverTimestamp";
+function qr(n) {
+  return G(n) && n.__neetru__ === "serverTimestamp";
 }
-function xr(n) {
-  return Q(n) && n.__neetru__ === "increment" && typeof n.operand == "number" && Number.isFinite(n.operand);
+function Fr(n) {
+  return G(n) && n.__neetru__ === "increment" && typeof n.operand == "number" && Number.isFinite(n.operand);
 }
-function Or(n, e) {
-  return Nr(n) ? Date.now() : xr(n) ? (typeof e == "number" && Number.isFinite(e) ? e : 0) + n.operand : n;
+function jr(n, e) {
+  return qr(n) ? Date.now() : Fr(n) ? (typeof e == "number" && Number.isFinite(e) ? e : 0) + n.operand : n;
 }
-function K(n, e) {
+function z(n, e) {
   let t = false, r = {};
   for (let [o, i] of Object.entries(n))
-    Q(i) ? (t = true, r[o] = Or(i, e?.[o])) : r[o] = i;
+    G(i) ? (t = true, r[o] = jr(i, e?.[o])) : r[o] = i;
   return t ? r : n;
 }
-function Be(n) {
+function Ke(n) {
   for (let e of Object.values(n))
-    if (Q(e)) return true;
+    if (G(e)) return true;
   return false;
 }
 
 // src/db/offline/sync-engine.ts
-var Lr = 8, Ur = 1e3, Mr = 300 * 1e3, Ve = "truncatedCollections";
-function qr(n) {
-  return n !== null && Be(n);
+var $r = 8, Wr = 1e3, Br = 300 * 1e3, ze = "truncatedCollections";
+function Vr(n) {
+  return n !== null && Ke(n);
 }
-function Fr(n) {
+function Kr(n) {
   if (n === null) return null;
-  if (!Be(n)) return n;
+  if (!Ke(n)) return n;
   let e = {};
   for (let [t, r] of Object.entries(n))
-    Q(r) || (e[t] = r);
+    G(r) || (e[t] = r);
   return e;
 }
-var he = class {
+var ge = class {
   _store;
   _queue;
   _resolver;
@@ -2476,16 +2511,16 @@ var he = class {
     try {
       t = await this._transport.pushMutations(e);
     } catch (s) {
-      let a = s instanceof Error ? s.message : String(s), c = [], [d, ...u] = e;
-      await this._retryOrDeadLetter(d, a, c);
+      let a = s instanceof Error ? s.message : String(s), l = [], [d, ...u] = e;
+      await this._retryOrDeadLetter(d, a, l);
       for (let p of u)
         await this._queue.requeueInflight(p.mutationId);
-      return c.length > 0 && this._bus.emit(c), this._refreshPendingWrites().catch(() => {
+      return l.length > 0 && this._bus.emit(l), this._refreshPendingWrites().catch(() => {
       }), false;
     }
     let r = [];
     for (let s of t.results) {
-      let a = e.find((c) => c.mutationId === s.mutationId);
+      let a = e.find((l) => l.mutationId === s.mutationId);
       a && (s.outcome === "confirmed" ? (await this._queue.markApplied(a.mutationId), await this._applySyncedDoc(
         a.collection,
         a.docId,
@@ -2503,8 +2538,8 @@ var he = class {
         "partial_push: muta\xE7\xE3o n\xE3o processada no lote",
         r
       );
-      for (let c of a)
-        await this._queue.requeueInflight(c.mutationId);
+      for (let l of a)
+        await this._queue.requeueInflight(l.mutationId);
     }
     return r.length > 0 && this._bus.emit(r), i.length === 0;
   }
@@ -2526,13 +2561,13 @@ var he = class {
       }), s.push({ type: "removed", collection: e, doc: { id: t, data: a.data } }));
       return;
     }
-    let d = Fr(i.payload) ?? a?.data ?? {}, u = {
+    let d = Kr(i.payload) ?? a?.data ?? {}, u = {
       collection: e,
       id: t,
       data: i.op === "update" ? { ...a?.data ?? {}, ...d } : (
         // add/set: se o payload tinha sentinels, o cache otimista (existing.data)
         // é a fonte de verdade até o pull; senão usa o payload literal.
-        qr(i.payload) ? { ...a?.data ?? {}, ...d } : d
+        Vr(i.payload) ? { ...a?.data ?? {}, ...d } : d
       ),
       meta: {
         serverVersion: r,
@@ -2579,7 +2614,7 @@ var he = class {
         deleted: false,
         ownerId: null
       }
-    }, c = this._resolver.resolve(
+    }, l = this._resolver.resolve(
       s,
       i,
       e
@@ -2593,7 +2628,7 @@ var he = class {
       detectedAt: Date.now(),
       delivered: false
     };
-    await this._store.appendConflict(c);
+    await this._store.appendConflict(l);
     let d = {
       collection: e.collection,
       id: e.docId,
@@ -2636,7 +2671,7 @@ var he = class {
         ...i.meta,
         serverVersion: t.serverVersion ?? i.meta.serverVersion
       }
-    } : null, c = this._resolver.resolveRejected(
+    } : null, l = this._resolver.resolveRejected(
       i,
       s,
       e,
@@ -2651,7 +2686,7 @@ var he = class {
       detectedAt: Date.now(),
       delivered: false
     };
-    await this._store.appendConflict(c), t.serverData ? (await this._store.putDoc({
+    await this._store.appendConflict(l), t.serverData ? (await this._store.putDoc({
       ...i,
       data: t.serverData,
       meta: {
@@ -2685,7 +2720,7 @@ var he = class {
    *   pending do doc no cache + registra `lastError`/dispara `onError`.
    */
   async _retryOrDeadLetter(e, t, r) {
-    if (e.attempts + 1 < Lr) {
+    if (e.attempts + 1 < $r) {
       await this._queue.markRetry(e.mutationId, t);
       return;
     }
@@ -2726,7 +2761,7 @@ var he = class {
   }
   /** Backoff exponencial keyed em `attempts`, com teto `BACKOFF_CAP_MS`. */
   _backoffDelayMs(e) {
-    return Math.min(Ur * 2 ** (e - 1), Mr);
+    return Math.min(Wr * 2 ** (e - 1), Br);
   }
   // ─── FASE 2 — pull (reconciliar o cache) ─────────────────────────────────────
   /**
@@ -2759,14 +2794,14 @@ var he = class {
     let r = [];
     await this._applyServerDocs(t.docs, r, true);
     let o = t.truncatedCollections ?? [], i = new Set(o);
-    await this._store.setMeta(Ve, o);
+    await this._store.setMeta(ze, o);
     let s = new Set(
       t.docs.map((a) => `${a.collection}::${a.id}`)
     );
     for (let a of e) {
       if (i.has(a)) continue;
-      let c = await this._store.listDocs(a, {});
-      for (let { id: d } of c.docs) {
+      let l = await this._store.listDocs(a, {});
+      for (let { id: d } of l.docs) {
         let u = `${a}::${d}`;
         if (!s.has(u)) {
           let p = await this._store.getDoc(a, d);
@@ -2816,7 +2851,7 @@ var he = class {
         continue;
       }
       if (i && i.meta.state === "pending") {
-        let c = {
+        let l = {
           collection: o.collection,
           id: o.id,
           data: o.data,
@@ -2833,7 +2868,7 @@ var he = class {
           (p) => p.collection === o.collection && p.docId === o.id
         );
         if (u) {
-          let p = this._resolver.resolve(i, c, u);
+          let p = this._resolver.resolve(i, l, u);
           p.conflictRecord && await this._store.appendConflict(p.conflictRecord), await this._store.putDoc({
             ...i,
             meta: { ...i.meta, state: "conflict" }
@@ -2978,10 +3013,10 @@ var he = class {
 };
 
 // src/db/offline/conflict-resolver.ts
-function Kt(n, e) {
+function Ht(n, e) {
   return e === null ? false : n === null ? true : e > n;
 }
-var ge = class n {
+var ye = class n {
   /**
    * Resolve um conflito com base na operação da mutação (auto-dispatch).
    *
@@ -3015,7 +3050,7 @@ var ge = class n {
         resolvedData: t.data,
         conflictRecord: null
       };
-    if (!Kt(
+    if (!Ht(
       e.meta.updatedAtServer,
       t.meta.updatedAtServer
     ))
@@ -3062,7 +3097,7 @@ var ge = class n {
     let i = t.data;
     if (e === null)
       return { outcome: "no_conflict", resolvedData: { ...i, ...r.payload ?? {} }, conflictRecord: null };
-    if (!Kt(
+    if (!Ht(
       e.meta.updatedAtServer,
       t.meta.updatedAtServer
     ))
@@ -3070,7 +3105,7 @@ var ge = class n {
     let a = {};
     for (let d of o)
       a[d] = e.data[d];
-    let c = {
+    let l = {
       collection: r.collection,
       docId: r.docId,
       mutationId: r.mutationId,
@@ -3083,7 +3118,7 @@ var ge = class n {
     return {
       outcome: "server_wins",
       resolvedData: i,
-      conflictRecord: c
+      conflictRecord: l
     };
   }
   /**
@@ -3140,10 +3175,10 @@ var ge = class n {
 };
 
 // src/db/offline/change-bus.ts
-function jr(n) {
+function zr(n) {
   return `${n.collection}::${n.doc.id}`;
 }
-var ye = class {
+var _e = class {
   /** Listeners filtrados por coleção. */
   _collectionListeners = /* @__PURE__ */ new Map();
   /** Listeners globais (todas as coleções). */
@@ -3188,15 +3223,15 @@ var ye = class {
     if (e.length === 0) return;
     let t = /* @__PURE__ */ new Map();
     for (let i of e)
-      t.set(jr(i), i);
+      t.set(zr(i), i);
     let r = Array.from(t.values()), o = /* @__PURE__ */ new Map();
     for (let i of r)
       o.has(i.collection) || o.set(i.collection, []), o.get(i.collection).push(i);
     for (let [i, s] of o) {
       let a = this._collectionListeners.get(i);
       if (a)
-        for (let c of a)
-          this._safeCall(c, s);
+        for (let l of a)
+          this._safeCall(l, s);
     }
     for (let i of this._globalListeners)
       this._safeCall(i, r);
@@ -3227,7 +3262,7 @@ var ye = class {
 };
 
 // src/db/offline/connectivity-monitor.ts
-var _e = class {
+var be = class {
   _state;
   _listeners = /* @__PURE__ */ new Set();
   _nav;
@@ -3329,7 +3364,7 @@ var _e = class {
 };
 
 // src/db/offline/tab-coordinator.ts
-var ne = class {
+var re = class {
   _lockName;
   _channelName;
   _lockManager;
@@ -3506,26 +3541,26 @@ var ne = class {
 };
 
 // src/db/collection-ref.ts
-Z();
-function $r() {
+ee();
+function Hr() {
   return typeof indexedDB > "u" || typeof window > "u";
 }
-var zt = /^[a-z0-9][a-z0-9_-]{0,62}$/;
-function Wr(n) {
-  if (!zt.test(n))
-    throw new y(
+var Qt = /^[a-z0-9][a-z0-9_-]{0,62}$/;
+function Qr(n) {
+  if (!Qt.test(n))
+    throw new _(
       "db_invalid_query",
-      `Nome de cole\xE7\xE3o inv\xE1lido: "${n}". Deve seguir o padr\xE3o ${zt}.`
+      `Nome de cole\xE7\xE3o inv\xE1lido: "${n}". Deve seguir o padr\xE3o ${Qt}.`
     );
 }
-function G(n, e = "id") {
+function J(n, e = "id") {
   if (!n || typeof n != "string" || n.trim() === "")
-    throw new y(
+    throw new _(
       "db_invalid_query",
       `${e} \xE9 obrigat\xF3rio e deve ser uma string n\xE3o-vazia.`
     );
 }
-function Br(n) {
+function Gr(n) {
   let e = {};
   if (n?.where && (e.where = n.where.map((t) => ({
     field: t.field,
@@ -3542,12 +3577,12 @@ function Br(n) {
     }
   return e;
 }
-function Vr(n, e) {
+function Jr(n, e) {
   if (n.length < e) return null;
   let t = n[n.length - 1];
   return t ? btoa(JSON.stringify({ type: "startAfter", docId: t.id })) : null;
 }
-var Ke = class {
+var He = class {
   constructor(e, t, r, o, i, s) {
     this._collection = e;
     this._store = t;
@@ -3589,10 +3624,10 @@ var Ke = class {
   }
   /** Constrói um DbListResult para a coleção com query opcional. */
   async _buildListResult(e) {
-    let t = Br(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), c = Vr(o.docs, r), d = await this._store.getMeta(Ve), u = Array.isArray(d) && d.includes(this._collection), p = !s || a.status === "offline" || u, f = i || a.lastSyncedAt === null || p;
+    let t = Gr(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), l = Jr(o.docs, r), d = await this._store.getMeta(ze), u = Array.isArray(d) && d.includes(this._collection), p = !s || a.status === "offline" || u, f = i || a.lastSyncedAt === null || p;
     return {
-      docs: o.docs.map((_) => ({ id: _.id, data: _.data })),
-      nextCursor: c,
+      docs: o.docs.map((h) => ({ id: h.id, data: h.data })),
+      nextCursor: l,
       fromCache: f,
       stale: p,
       hasPendingWrites: i,
@@ -3602,13 +3637,13 @@ var Ke = class {
   }
   // ── CRUD ────────────────────────────────────────────────────────────────────
   async get(e) {
-    return G(e), this._buildGetResult(e);
+    return J(e), this._buildGetResult(e);
   }
   async list(e) {
     return this._buildListResult(e);
   }
   async add(e) {
-    let t = e, r = K(t, void 0), o = await this._queue.enqueue({
+    let t = e, r = z(t, void 0), o = await this._queue.enqueue({
       collection: this._collection,
       op: "add",
       payload: t,
@@ -3635,8 +3670,8 @@ var Ke = class {
     }]), { ok: true, id: i };
   }
   async set(e, t) {
-    G(e);
-    let r = await this._store.getDoc(this._collection, e), o = t, i = K(o, void 0), s = await this._queue.enqueue({
+    J(e);
+    let r = await this._store.getDoc(this._collection, e), o = t, i = z(o, void 0), s = await this._queue.enqueue({
       collection: this._collection,
       docId: e,
       op: "set",
@@ -3664,8 +3699,8 @@ var Ke = class {
     }]), { ok: true };
   }
   async update(e, t, r) {
-    G(e);
-    let o = await this._store.getDoc(this._collection, e), i = t, s = o?.meta.deleted ? void 0 : o?.data, a = K(i, s), c = o?.meta.deleted ? { ...a } : { ...o?.data ?? {}, ...a }, d = await this._queue.enqueue({
+    J(e);
+    let o = await this._store.getDoc(this._collection, e), i = t, s = o?.meta.deleted ? void 0 : o?.data, a = z(i, s), l = o?.meta.deleted ? { ...a } : { ...o?.data ?? {}, ...a }, d = await this._queue.enqueue({
       collection: this._collection,
       docId: e,
       op: "update",
@@ -3678,7 +3713,7 @@ var Ke = class {
     return await this._store.putDoc({
       collection: this._collection,
       id: e,
-      data: c,
+      data: l,
       meta: {
         serverVersion: o?.meta.serverVersion ?? null,
         updatedAtServer: o?.meta.updatedAtServer ?? null,
@@ -3694,11 +3729,11 @@ var Ke = class {
     }), this._bus.emit([{
       type: "modified",
       collection: this._collection,
-      doc: { id: e, data: c }
+      doc: { id: e, data: l }
     }]), { ok: true };
   }
   async remove(e) {
-    G(e);
+    J(e);
     let t = await this._store.getDoc(this._collection, e);
     return !t || t.meta.deleted, await this._queue.enqueue({
       collection: this._collection,
@@ -3718,13 +3753,13 @@ var Ke = class {
     for (let o of e) {
       let i = this._collection;
       if (o.kind === "add") {
-        let s = o.data, a = K(s, void 0), c = await this._queue.enqueue({
+        let s = o.data, a = z(s, void 0), l = await this._queue.enqueue({
           collection: i,
           op: "add",
           payload: s,
           baseVersion: null,
           batchId: t
-        }), d = c.docId;
+        }), d = l.docId;
         await this._store.putDoc({
           collection: i,
           id: d,
@@ -3734,18 +3769,18 @@ var Ke = class {
             updatedAtServer: null,
             updatedAtLocal: Date.now(),
             state: "pending",
-            pendingMutationIds: [c.mutationId],
+            pendingMutationIds: [l.mutationId],
             deleted: false,
             ownerId: null
           }
         }), r.push({ type: "added", collection: i, doc: { id: d, data: a } });
       } else if (o.kind === "set") {
-        let s = o.id, a = o.data, c = await this._store.getDoc(i, s), d = K(a, void 0), u = await this._queue.enqueue({
+        let s = o.id, a = o.data, l = await this._store.getDoc(i, s), d = z(a, void 0), u = await this._queue.enqueue({
           collection: i,
           docId: s,
           op: "set",
           payload: a,
-          baseVersion: c?.meta.serverVersion ?? null,
+          baseVersion: l?.meta.serverVersion ?? null,
           batchId: t
         });
         await this._store.putDoc({
@@ -3753,8 +3788,8 @@ var Ke = class {
           id: s,
           data: d,
           meta: {
-            serverVersion: c?.meta.serverVersion ?? null,
-            updatedAtServer: c?.meta.updatedAtServer ?? null,
+            serverVersion: l?.meta.serverVersion ?? null,
+            updatedAtServer: l?.meta.updatedAtServer ?? null,
             updatedAtLocal: Date.now(),
             state: "pending",
             pendingMutationIds: [u.mutationId],
@@ -3762,17 +3797,17 @@ var Ke = class {
             ownerId: null
           }
         }), r.push({
-          type: c && !c.meta.deleted ? "modified" : "added",
+          type: l && !l.meta.deleted ? "modified" : "added",
           collection: i,
           doc: { id: s, data: d }
         });
       } else if (o.kind === "update") {
-        let s = o.id, a = o.data, c = await this._store.getDoc(i, s), d = c?.meta.deleted ? void 0 : c?.data, u = K(a, d), p = { ...c?.data ?? {}, ...u }, f = await this._queue.enqueue({
+        let s = o.id, a = o.data, l = await this._store.getDoc(i, s), d = l?.meta.deleted ? void 0 : l?.data, u = z(a, d), p = { ...l?.data ?? {}, ...u }, f = await this._queue.enqueue({
           collection: i,
           docId: s,
           op: "update",
           payload: a,
-          baseVersion: c?.meta.serverVersion ?? null,
+          baseVersion: l?.meta.serverVersion ?? null,
           batchId: t,
           // bug_0273e4dd: propaga merge-upsert (writeBatch.set(merge) cria-se-ausente).
           upsert: o.upsert
@@ -3782,16 +3817,16 @@ var Ke = class {
           id: s,
           data: p,
           meta: {
-            serverVersion: c?.meta.serverVersion ?? null,
-            updatedAtServer: c?.meta.updatedAtServer ?? null,
+            serverVersion: l?.meta.serverVersion ?? null,
+            updatedAtServer: l?.meta.updatedAtServer ?? null,
             updatedAtLocal: Date.now(),
             state: "pending",
             pendingMutationIds: [
-              ...c?.meta.pendingMutationIds ?? [],
+              ...l?.meta.pendingMutationIds ?? [],
               f.mutationId
             ],
             deleted: false,
-            ownerId: c?.meta.ownerId ?? null
+            ownerId: l?.meta.ownerId ?? null
           }
         }), r.push({ type: "modified", collection: i, doc: { id: s, data: p } });
       } else if (o.kind === "remove") {
@@ -3810,7 +3845,7 @@ var Ke = class {
   }
   // ── Realtime ─────────────────────────────────────────────────────────────────
   onDoc(e, t) {
-    return G(e), this._buildGetResult(e).then((r) => {
+    return J(e), this._buildGetResult(e).then((r) => {
       t(r ? r.docs[0]?.data ?? null : null);
     }).catch(() => t(null)), this._bus.subscribe(this._collection, (r) => {
       let o = r.find((i) => i.doc.id === e);
@@ -3822,11 +3857,11 @@ var Ke = class {
     });
     let r = this._bus.subscribe(this._collection, async (s) => {
       try {
-        let a = await this._buildListResult(e), c = s.map((d) => ({
+        let a = await this._buildListResult(e), l = s.map((d) => ({
           type: d.type,
           doc: { id: d.doc.id, data: d.doc.data }
         }));
-        t({ ...a, changes: c });
+        t({ ...a, changes: l });
       } catch {
       }
     }), o = this._engine.onSyncStateChange(async () => {
@@ -3840,15 +3875,15 @@ var Ke = class {
       this._collection,
       async (s, a) => {
         if (!a)
-          for (let c of s)
-            c.type === "removed" || c.data === null ? (await this._store.deleteDoc(this._collection, c.docId), this._bus.emit([{
+          for (let l of s)
+            l.type === "removed" || l.data === null ? (await this._store.deleteDoc(this._collection, l.docId), this._bus.emit([{
               type: "removed",
               collection: this._collection,
-              doc: { id: c.docId, data: {} }
+              doc: { id: l.docId, data: {} }
             }])) : (await this._store.putDoc({
               collection: this._collection,
-              id: c.docId,
-              data: c.data,
+              id: l.docId,
+              data: l.data,
               meta: {
                 serverVersion: `rt_${Date.now()}`,
                 updatedAtServer: Date.now(),
@@ -3859,9 +3894,9 @@ var Ke = class {
                 ownerId: null
               }
             }), this._bus.emit([{
-              type: c.type,
+              type: l.type,
               collection: this._collection,
-              doc: { id: c.docId, data: c.data }
+              doc: { id: l.docId, data: l.data }
             }]));
       }
     )), () => {
@@ -3869,7 +3904,7 @@ var Ke = class {
     };
   }
   doc(e) {
-    G(e);
+    J(e);
     let t = this;
     return {
       get id() {
@@ -3896,14 +3931,14 @@ var Ke = class {
       onSnapshot(r) {
         t._buildGetResult(e).then((s) => r(s)).catch(() => r(null));
         let o = t._bus.subscribe(t._collection, async (s) => {
-          let a = s.find((c) => c.doc.id === e);
+          let a = s.find((l) => l.doc.id === e);
           if (a)
             try {
               if (a.type === "removed")
                 r(null);
               else {
-                let c = await t._buildGetResult(e);
-                r(c);
+                let l = await t._buildGetResult(e);
+                r(l);
               }
             } catch {
               r(null);
@@ -3922,7 +3957,7 @@ var Ke = class {
       }
     };
   }
-}, ze = class {
+}, Qe = class {
   _store;
   _queue;
   _bus;
@@ -3932,7 +3967,7 @@ var Ke = class {
     this._store = e.store, this._queue = e.queue, this._bus = e.bus, this._engine = e.engine, this._connectivity = e.connectivity;
   }
   collection(e) {
-    return Wr(e), new Ke(
+    return Qr(e), new He(
       e,
       this._store,
       this._queue,
@@ -3961,23 +3996,23 @@ var Ke = class {
     return this._engine.onError(e);
   }
 };
-async function Ht(n) {
-  let e = $r() ? new fe() : new pe(n.dbName);
+async function Gt(n) {
+  let e = Hr() ? new me() : new fe(n.dbName);
   await e.open();
-  let t = new me(e), r = new ge(), o = new ye(), i = new _e({
+  let t = new he(e), r = new ye(), o = new _e(), i = new be({
     // Se startOnline=false, injeta um navigator falso
     navigator: n.startOnline === false ? { onLine: false } : typeof navigator < "u" ? navigator : void 0
   }), s = n.singleTab ? (
     // Fake tab coordinator para single-tab mode (sempre líder)
     {
       isLeader: () => true,
-      onRoleChange: (c) => () => {
+      onRoleChange: (l) => () => {
       }
     }
-  ) : new ne({
+  ) : new re({
     lockName: `neetru-offline:${n.dbName}`,
     channelName: `neetru-offline:${n.dbName}`
-  }), a = new he({
+  }), a = new ge({
     store: e,
     queue: t,
     resolver: r,
@@ -3987,7 +4022,7 @@ async function Ht(n) {
     connectivity: i,
     periodicSyncIntervalMs: n.periodicSyncIntervalMs ?? 300 * 1e3
   });
-  return i.start(), !n.singleTab && s instanceof ne && s.start(), new ze({
+  return i.start(), !n.singleTab && s instanceof re && s.start(), new Qe({
     store: e,
     queue: t,
     bus: o,
@@ -3997,11 +4032,11 @@ async function Ht(n) {
 }
 
 // src/db/realtime/realtime-client.ts
-var Kr = 0;
-function Qt() {
-  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++Kr}-${Math.random().toString(36).slice(2)}`;
+var Xr = 0;
+function Jt() {
+  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++Xr}-${Math.random().toString(36).slice(2)}`;
 }
-var be = class {
+var ve = class {
   // ── configuração ──────────────────────────────────────────────────────────
   _gatewayUrl;
   _wsFactory;
@@ -4039,7 +4074,7 @@ var be = class {
   _pendingFrames = [];
   // ── construtor ────────────────────────────────────────────────────────────
   constructor(e) {
-    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? zr, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
+    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? Yr, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
   }
   // ── API pública ───────────────────────────────────────────────────────────
   /**
@@ -4053,8 +4088,8 @@ var be = class {
    */
   subscribe(e, t, r) {
     if (this._closed)
-      return Qt();
-    let o = Qt();
+      return Jt();
+    let o = Jt();
     this._subscriptions.set(o, {
       subscriptionId: o,
       collection: e,
@@ -4318,7 +4353,7 @@ var be = class {
   _detachHandlers(e) {
     e.onopen = null, e.onmessage = null, e.onclose = null, e.onerror = null;
   }
-}, zr = (n) => {
+}, Yr = (n) => {
   if (typeof WebSocket > "u")
     throw new Error(
       "[NeetruRealtimeClient] WebSocket n\xE3o dispon\xEDvel neste ambiente. Injete uma implementa\xE7\xE3o via `webSocketFactory` nas op\xE7\xF5es."
@@ -4327,59 +4362,59 @@ var be = class {
 };
 
 // src/db/client-db.ts
-var ro = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, we = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, sn = 200;
-function oo(n, e, t) {
-  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? io(e.realtimeGatewayUrl, t, e) : cn(t);
+var po = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, ke = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, ln = 200;
+function fo(n, e, t) {
+  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? mo(e.realtimeGatewayUrl, t, e) : un(t);
 }
-function cn(n) {
+function un(n) {
   return {
     async pushMutations(e) {
       if (!n)
-        throw new y(
+        throw new _(
           "db_unavailable",
           "[RestSyncTransport] config n\xE3o dispon\xEDvel \u2014 n\xE3o \xE9 poss\xEDvel enviar ao Core. Inicialize o transporte via createNeetruDb."
         );
-      let { httpRequest: t } = await Promise.resolve().then(() => (M(), Y)), r = [], o = n.tenantId ?? n.productId, i = o ? { "x-neetru-tenant": o } : void 0;
+      let { httpRequest: t } = await Promise.resolve().then(() => (F(), Z)), r = [], o = n.tenantId ?? n.productId, i = o ? { "x-neetru-tenant": o } : void 0;
       for (let s of e)
         try {
           let a;
           s.op === "add" ? a = await t(n, {
             method: "PUT",
-            path: we(s.collection, s.docId),
+            path: ke(s.collection, s.docId),
             body: { data: s.payload ?? {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : s.op === "set" ? a = await t(n, {
             method: "PUT",
-            path: we(s.collection, s.docId),
+            path: ke(s.collection, s.docId),
             body: { data: s.payload ?? {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : s.op === "update" ? a = await t(n, {
             method: "PATCH",
-            path: we(s.collection, s.docId),
+            path: ke(s.collection, s.docId),
             body: { data: s.payload ?? {}, ...s.upsert ? { upsert: !0 } : {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : a = await t(n, {
             method: "DELETE",
-            path: we(s.collection, s.docId),
+            path: ke(s.collection, s.docId),
             requireAuth: !0,
             retries: 2,
             headers: i
           });
-          let c = a;
+          let l = a;
           r.push({
             mutationId: s.mutationId,
             outcome: "confirmed",
-            serverVersion: c?.serverVersion ?? c?.id ?? `rest_${Date.now()}`,
+            serverVersion: l?.serverVersion ?? l?.id ?? `rest_${Date.now()}`,
             serverTimestamp: Date.now()
           });
         } catch (a) {
-          let c = a instanceof Error ? a.message : String(a), d = a?.code, u = a?.status;
+          let l = a instanceof Error ? a.message : String(a), d = a?.code, u = a?.status;
           if (d === "forbidden" || d === "unauthorized" || d === "not_found" || d === "conflict" || d === "validation_failed" || typeof u == "number" && u >= 400 && u < 500 && u !== 408 && u !== 429) {
             let f = d === "forbidden" || d === "unauthorized" ? "rejected_permission" : "rejected_validation";
             r.push({
@@ -4392,7 +4427,7 @@ function cn(n) {
             continue;
           }
           if (r.length === 0)
-            throw new y("db_unavailable", `pushMutations falhou: ${c}`);
+            throw new _("db_unavailable", `pushMutations falhou: ${l}`);
           break;
         }
       return { results: r };
@@ -4403,13 +4438,13 @@ function cn(n) {
     async fullResync(e) {
       if (!n)
         return { docs: [], newWatermark: Date.now() };
-      let { httpRequest: t } = await Promise.resolve().then(() => (M(), Y)), r = n.tenantId ?? n.productId, o = r ? { "x-neetru-tenant": r } : void 0, i = Date.now(), s = [], a = [];
-      for (let c of e) {
+      let { httpRequest: t } = await Promise.resolve().then(() => (F(), Z)), r = n.tenantId ?? n.productId, o = r ? { "x-neetru-tenant": r } : void 0, i = Date.now(), s = [], a = [];
+      for (let l of e) {
         let d;
         try {
           d = await t(n, {
             method: "GET",
-            path: ro(c),
+            path: po(l),
             requireAuth: !0,
             retries: 2,
             headers: o,
@@ -4417,37 +4452,37 @@ function cn(n) {
             // TRUNCADAS — reportadas em `truncatedCollections` p/ o SyncEngine
             // (a) NÃO rodar deleção-por-ausência e (b) sinalizar
             // `DbListResult.truncated`. Paginação por cursor é tarefa Core (gated).
-            query: { limit: sn }
+            query: { limit: ln }
           });
         } catch (f) {
-          let _ = f instanceof Error ? f.message : String(f);
-          throw new y(
+          let h = f instanceof Error ? f.message : String(f);
+          throw new _(
             "db_unavailable",
-            `[RestSyncTransport] fullResync falhou na cole\xE7\xE3o "${c}": ${_}`
+            `[RestSyncTransport] fullResync falhou na cole\xE7\xE3o "${l}": ${h}`
           );
         }
         let u = d, p = Array.isArray(u?.items) ? u.items : [];
-        p.length >= sn && a.push(c);
+        p.length >= ln && a.push(l);
         for (let f of p) {
           if (!f || typeof f != "object") continue;
-          let _ = f, b = typeof _.id == "string" ? _.id : null;
-          if (!b) continue;
-          let { id: S, ...x } = _, T = i, P = x._updatedAt;
-          if (typeof P == "number")
-            T = P;
-          else if (P !== null && typeof P == "object" && typeof P._seconds == "number")
-            T = P._seconds * 1e3;
-          else if (typeof P == "string") {
-            let m = Date.parse(P);
-            Number.isNaN(m) || (T = m);
+          let h = f, y = typeof h.id == "string" ? h.id : null;
+          if (!y) continue;
+          let { id: T, ...x } = h, R = i, E = x._updatedAt;
+          if (typeof E == "number")
+            R = E;
+          else if (E !== null && typeof E == "object" && typeof E._seconds == "number")
+            R = E._seconds * 1e3;
+          else if (typeof E == "string") {
+            let g = Date.parse(E);
+            Number.isNaN(g) || (R = g);
           }
-          let q = `rest_${b}_${T}`;
+          let j = `rest_${y}_${R}`;
           s.push({
-            collection: c,
-            id: b,
+            collection: l,
+            id: y,
             data: x,
-            serverVersion: q,
-            serverTimestamp: T,
+            serverVersion: j,
+            serverTimestamp: R,
             deleted: false
           });
         }
@@ -4456,10 +4491,10 @@ function cn(n) {
     }
   };
 }
-function io(n, e, t) {
-  let r = cn(e), o = new be({
+function mo(n, e, t) {
+  let r = un(e), o = new ve({
     gatewayUrl: n,
-    ticketProvider: so(e, t),
+    ticketProvider: ho(e, t),
     dbId: t.dbId,
     webSocketFactory: t._wsFactory
   });
@@ -4471,17 +4506,17 @@ function io(n, e, t) {
     // quando o engine é nosql-vm. Registra a subscription no NeetruRealtimeClient
     // e traduz os frames inbound para o contrato de `onChange`.
     subscribeCollection(i, s) {
-      let a = o.subscribe(i, {}, (c) => {
-        if (c.op === "resync") {
+      let a = o.subscribe(i, {}, (l) => {
+        if (l.op === "resync") {
           s([], true);
           return;
         }
-        if (c.op === "stale") {
+        if (l.op === "stale") {
           s([], true);
           return;
         }
-        if (c.op === "delta" && c.changes) {
-          let d = c.changes.map((u) => ({
+        if (l.op === "delta" && l.changes) {
+          let d = l.changes.map((u) => ({
             type: u.type === "insert" ? "added" : u.type === "delete" ? "removed" : "modified",
             docId: u.documentId,
             data: u.data ?? null
@@ -4495,9 +4530,9 @@ function io(n, e, t) {
     }
   };
 }
-function so(n, e) {
+function ho(n, e) {
   return async () => {
-    let { httpRequest: t } = await Promise.resolve().then(() => (M(), Y));
+    let { httpRequest: t } = await Promise.resolve().then(() => (F(), Z));
     return await t(n, {
       method: "POST",
       path: "/api/sdk/v1/db/realtime/ticket",
@@ -4510,21 +4545,21 @@ function so(n, e) {
     });
   };
 }
-var an = false;
-function ao(n, e) {
-  an || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (an = true, console.warn(
+var dn = false;
+function go(n, e) {
+  dn || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (dn = true, console.warn(
     '[neetru/sdk] client.db recebeu `dbId` ("' + e.dbId + '") mas ele N\xC3O roteia nem escopa nada no servidor: as escritas do mundo Documentos (add/set/update/remove/list) SEMPRE caem no datastore gen\xE9rico do Core, escopado s\xF3 por tenant/produto (header x-neetru-tenant). `dbId` apenas nomeia o cache offline LOCAL (IndexedDB). ATEN\xC7\xC3O: usar dbIds distintos no MESMO tenant/produto N\xC3O isola os dados no servidor \u2014 eles se misturam (co-mingling). Veja o JSDoc de NeetruDbOptions.dbId.'
   )));
 }
-function ln(n, e = {}) {
-  ao(n, e);
+function pn(n, e = {}) {
+  go(n, e);
   let t;
   e.transport !== void 0 ? t = e.transport : e.engine !== void 0 ? (console.warn(
     '[neetru/sdk] NeetruDbOptions.engine est\xE1 depreciado e ser\xE1 removido em v3.0. Use NeetruDbOptions.transport em vez de engine. Valores v\xE1lidos: "rest" | "firestore" | "nosql-vm". Nota: "engine" no SDK configura o TRANSPORTE (REST/Firestore/WebSocket), n\xE3o o storage engine do admin database (firestore-instance, cloud-sql-postgres, \u2026).'
   ), t = e.engine) : t = "rest";
-  let r = oo(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
-  function c() {
-    return s || (s = Ht({
+  let r = fo(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
+  function l() {
+    return s || (s = Gt({
       dbName: i,
       transport: r,
       singleTab: e.singleTab ?? n.env !== "prod"
@@ -4532,15 +4567,15 @@ function ln(n, e = {}) {
   }
   return {
     collection(d) {
-      return a ? a.collection(d) : co(d, c);
+      return a ? a.collection(d) : yo(d, l);
     },
     async sql(d, u) {
-      if (n.env === "dev")
-        throw new y(
+      if (W(n.env))
+        throw new _(
           "db_unavailable",
           "[SDK] db.sql() n\xE3o dispon\xEDvel em NEETRU_ENV=dev. Use `neetru dev` para subir o container Postgres local."
         );
-      return (await Promise.resolve().then(() => (on(), rn))).createSqlClientFromConfig(n, d, u);
+      return (await Promise.resolve().then(() => (cn(), an))).createSqlClientFromConfig(n, d, u);
     },
     get syncState() {
       return a?.syncState ?? {
@@ -4553,25 +4588,25 @@ function ln(n, e = {}) {
     onSyncStateChanged(d) {
       if (a) return a.onSyncStateChanged(d);
       let u = null, p = false;
-      return c().then((f) => {
+      return l().then((f) => {
         p || (u = f.onSyncStateChanged(d));
       }), () => {
         p = true, u?.();
       };
     },
     async flush() {
-      return (await c()).flush();
+      return (await l()).flush();
     },
     async clearCache() {
-      return (await c()).clearCache();
+      return (await l()).clearCache();
     },
     async getConflicts() {
-      return (await c()).getConflicts();
+      return (await l()).getConflicts();
     },
     onError(d) {
       if (a) return a.onError(d);
       let u = null, p = false;
-      return c().then((f) => {
+      return l().then((f) => {
         p || (u = f.onError(d));
       }), () => {
         p = true, u?.();
@@ -4579,7 +4614,7 @@ function ln(n, e = {}) {
     }
   };
 }
-function co(n, e) {
+function yo(n, e) {
   async function t() {
     return (await e()).collection(n);
   }
@@ -4658,25 +4693,25 @@ function co(n, e) {
 }
 
 // src/checkout.ts
-I();
-M();
-function Ye(n, e) {
+C();
+F();
+function et(n, e) {
   let t = n?.accessToken || n?.idToken;
   if (!t || typeof t != "string")
-    throw new l(
+    throw new c(
       "validation_failed",
       `checkout.${e} requer o access_token OU o id_token OIDC do usu\xE1rio final (passe \`accessToken\` ou \`idToken\`). A chave de API do SDK (nrt_*) N\xC3O \xE9 aceita pelo endpoint de checkout \u2014 ele autentica a identidade do cliente que est\xE1 assinando (Bearer access_token/id_token OIDC ou cookie de sess\xE3o). No padr\xE3o BFF/cookie, passe o \`idToken\` que seu servidor guardou no cookie httpOnly.`
     );
   return { requireAuth: false, headers: { authorization: `Bearer ${t}` } };
 }
-function lo(n) {
+function _o(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "checkout.start response is not an object");
+    throw new c("invalid_response", "checkout.start response is not an object");
   let e = n;
   if (typeof e.intentId != "string" || !e.intentId)
-    throw new l("invalid_response", "checkout.start response missing intentId");
+    throw new c("invalid_response", "checkout.start response missing intentId");
   if (typeof e.redirectUrl != "string" || !e.redirectUrl)
-    throw new l("invalid_response", "checkout.start response missing redirectUrl");
+    throw new c("invalid_response", "checkout.start response missing redirectUrl");
   return {
     intentId: e.intentId,
     redirectUrl: e.redirectUrl,
@@ -4685,14 +4720,14 @@ function lo(n) {
     requiresKyc: e.requiresKyc === true
   };
 }
-function uo(n) {
+function bo(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "checkout.get response is not an object");
+    throw new c("invalid_response", "checkout.get response is not an object");
   let e = n, t = e.intent;
   if (!t || typeof t != "object")
-    throw new l("invalid_response", "checkout.get response missing intent");
+    throw new c("invalid_response", "checkout.get response missing intent");
   if (typeof t.intentId != "string")
-    throw new l("invalid_response", "checkout.get response missing intentId");
+    throw new c("invalid_response", "checkout.get response missing intentId");
   return {
     intentId: t.intentId,
     uid: t.uid ?? "",
@@ -4707,35 +4742,35 @@ function uo(n) {
     isStale: e.isStale === true
   };
 }
-function po() {
+function vo() {
   try {
     return typeof globalThis < "u" && typeof globalThis.window < "u" && typeof globalThis.location < "u" && typeof globalThis.location.assign == "function";
   } catch {
     return false;
   }
 }
-function fo(n) {
+function wo(n) {
   try {
     globalThis.location.assign(n);
   } catch {
   }
 }
-function mo(n) {
+function ko(n) {
   return {
     async start(e) {
       if (!e?.productId)
-        throw new l("validation_failed", "checkout.start: productId is required");
+        throw new c("validation_failed", "checkout.start: productId is required");
       if (!e?.planId)
-        throw new l("validation_failed", "checkout.start: planId is required");
+        throw new c("validation_failed", "checkout.start: planId is required");
       if (!e?.callbackUrl)
-        throw new l("validation_failed", "checkout.start: callbackUrl is required");
+        throw new c("validation_failed", "checkout.start: callbackUrl is required");
       let t = {
         productId: e.productId,
         planId: e.planId,
         callbackUrl: e.callbackUrl
       };
       e.tenantType && (t.targetTenantType = e.tenantType), e.tenantId && (t.targetTenantId = e.tenantId);
-      let { requireAuth: r, headers: o } = Ye(
+      let { requireAuth: r, headers: o } = et(
         { accessToken: e.accessToken, idToken: e.idToken },
         "start"
       ), i = await v(n, {
@@ -4745,13 +4780,13 @@ function mo(n) {
         requireAuth: r,
         headers: o,
         idempotencyKey: true
-      }), s = lo(i);
-      return e.autoRedirect !== false && po() && fo(s.redirectUrl), s;
+      }), s = _o(i);
+      return e.autoRedirect !== false && vo() && wo(s.redirectUrl), s;
     },
     async get(e, t) {
       if (!e || typeof e != "string")
-        throw new l("validation_failed", "checkout.get: intentId is required");
-      let { requireAuth: r, headers: o } = Ye(
+        throw new c("validation_failed", "checkout.get: intentId is required");
+      let { requireAuth: r, headers: o } = et(
         { accessToken: t?.accessToken, idToken: t?.idToken },
         "get"
       ), i = await v(n, {
@@ -4760,12 +4795,12 @@ function mo(n) {
         requireAuth: r,
         headers: o
       });
-      return uo(i);
+      return bo(i);
     },
     async cancel(e, t) {
       if (!e || typeof e != "string")
-        throw new l("validation_failed", "checkout.cancel: intentId is required");
-      let { requireAuth: r, headers: o } = Ye(
+        throw new c("validation_failed", "checkout.cancel: intentId is required");
+      let { requireAuth: r, headers: o } = et(
         { accessToken: t?.accessToken, idToken: t?.idToken },
         "cancel"
       );
@@ -4781,15 +4816,15 @@ function mo(n) {
     }
   };
 }
-var Ze = class {
+var tt = class {
   intents = /* @__PURE__ */ new Map();
   async start(e) {
     if (!e?.productId)
-      throw new l("validation_failed", "checkout.start: productId is required");
+      throw new c("validation_failed", "checkout.start: productId is required");
     if (!e?.planId)
-      throw new l("validation_failed", "checkout.start: planId is required");
+      throw new c("validation_failed", "checkout.start: planId is required");
     if (!e?.callbackUrl)
-      throw new l("validation_failed", "checkout.start: callbackUrl is required");
+      throw new c("validation_failed", "checkout.start: callbackUrl is required");
     let t = `chk_mock_${Math.random().toString(36).slice(2, 10)}`, r = new Date(Date.now() + 900 * 1e3).toISOString(), o = `https://localhost:9003/portal/checkout/${t}`;
     return this.intents.set(t, {
       intentId: t,
@@ -4813,25 +4848,25 @@ var Ze = class {
   async get(e, t) {
     let r = this.intents.get(e);
     if (!r)
-      throw new l("not_found", `Mock intent ${e} not found`);
+      throw new c("not_found", `Mock intent ${e} not found`);
     return { ...r };
   }
   async cancel(e, t) {
     let r = this.intents.get(e);
     if (!r)
-      throw new l("not_found", `Mock intent ${e} not found`);
+      throw new c("not_found", `Mock intent ${e} not found`);
     let o = r.status === "cancelled";
     return this.intents.set(e, { ...r, status: "cancelled" }), { ok: true, alreadyCancelled: o };
   }
 };
-function dn(n) {
-  return n.env === "dev" ? new Ze() : mo(n);
+function fn(n) {
+  return W(n.env) ? new tt() : ko(n);
 }
 
 // src/webhooks.ts
-I();
-M();
-var pn = [
+C();
+F();
+var hn = [
   "subscription.activated",
   "subscription.cancelled",
   "subscription.payment_failed",
@@ -4841,17 +4876,17 @@ var pn = [
   "account.reactivated",
   "support.ticket_replied"
 ];
-function un(n) {
+function mn(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "Webhook response is not an object");
+    throw new c("invalid_response", "Webhook response is not an object");
   let e = n;
   if (typeof e.id != "string")
-    throw new l("invalid_response", "Webhook missing id");
+    throw new c("invalid_response", "Webhook missing id");
   return {
     id: e.id,
     url: typeof e.url == "string" ? e.url : "",
     events: Array.isArray(e.events) ? e.events.filter(
-      (t) => pn.includes(t)
+      (t) => hn.includes(t)
     ) : [],
     hasSecret: e.hasSecret === true,
     status: e.status === "active" || e.status === "degraded" || e.status === "disabled" ? e.status : "active",
@@ -4860,40 +4895,40 @@ function un(n) {
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function fn(n) {
+function gn(n) {
   if (!n.url || typeof n.url != "string")
-    throw new l("validation_failed", "url \xE9 obrigat\xF3ria");
+    throw new c("validation_failed", "url \xE9 obrigat\xF3ria");
   try {
     let e = new URL(n.url);
     if (e.protocol !== "https:" && e.protocol !== "http:")
       throw new Error("invalid protocol");
   } catch {
-    throw new l("validation_failed", `url inv\xE1lida: ${n.url}`);
+    throw new c("validation_failed", `url inv\xE1lida: ${n.url}`);
   }
   if (!Array.isArray(n.events) || n.events.length === 0)
-    throw new l("validation_failed", "events deve ter pelo menos 1 evento");
+    throw new c("validation_failed", "events deve ter pelo menos 1 evento");
   for (let e of n.events)
-    if (!pn.includes(e))
-      throw new l("validation_failed", `evento desconhecido: ${e}`);
+    if (!hn.includes(e))
+      throw new c("validation_failed", `evento desconhecido: ${e}`);
   if (n.secret !== void 0 && n.secret.length < 16)
-    throw new l("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
+    throw new c("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
 }
-function ke(n, ...e) {
+function Se(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return N("productId", t), t;
   if (n.productId)
     return N("productId", n.productId), n.productId;
-  throw new l(
+  throw new c(
     "validation_failed",
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function mn(n) {
+function yn(n) {
   return {
     async register(e) {
-      fn(e);
-      let t = ke(n, e.productId), r = await v(n, {
+      gn(e);
+      let t = Se(n, e.productId), r = await v(n, {
         method: "POST",
         path: "/api/sdk/v1/webhooks",
         body: {
@@ -4909,20 +4944,20 @@ function mn(n) {
         // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
         idempotencyKey: true
       });
-      return un(r);
+      return mn(r);
     },
     async list(e) {
-      let t = ke(n, e?.productId), r = await v(n, {
+      let t = Se(n, e?.productId), r = await v(n, {
         method: "GET",
         path: "/api/sdk/v1/webhooks",
         query: { productId: t },
         requireAuth: true
       });
-      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(un);
+      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(mn);
     },
     async unregister(e, t) {
-      if (!e) throw new l("validation_failed", "id obrigat\xF3rio");
-      let r = ke(n, t?.productId);
+      if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
+      let r = Se(n, t?.productId);
       return await v(n, {
         method: "DELETE",
         path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}`,
@@ -4931,8 +4966,8 @@ function mn(n) {
       }), { ok: true };
     },
     async test(e, t) {
-      if (!e) throw new l("validation_failed", "id obrigat\xF3rio");
-      let r = ke(n, t?.productId), o = await v(n, {
+      if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
+      let r = Se(n, t?.productId), o = await v(n, {
         method: "POST",
         path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}/test`,
         query: { productId: r },
@@ -4951,11 +4986,11 @@ function mn(n) {
     }
   };
 }
-var Se = class {
+var Te = class {
   endpoints = /* @__PURE__ */ new Map();
   nextId = 1;
   async register(e) {
-    fn(e);
+    gn(e);
     let t = `mock_wh_${this.nextId++}`, r = {
       id: t,
       url: e.url,
@@ -4971,32 +5006,32 @@ var Se = class {
   }
   async unregister(e, t) {
     if (!this.endpoints.has(e))
-      throw new l("not_found", `Webhook ${e} n\xE3o encontrado`);
+      throw new c("not_found", `Webhook ${e} n\xE3o encontrado`);
     return this.endpoints.delete(e), { ok: true };
   }
   async test(e, t) {
     if (!this.endpoints.has(e))
-      throw new l("not_found", `Webhook ${e} n\xE3o encontrado`);
+      throw new c("not_found", `Webhook ${e} n\xE3o encontrado`);
     return { ok: true, statusCode: 200, durationMs: 42 };
   }
 };
 
 // src/notifications.ts
-I();
-M();
-var et = [
+C();
+F();
+var nt = [
   "info",
   "success",
   "warning",
   "error"
 ];
-function hn(n) {
+function _n(n) {
   if (!n || typeof n != "object")
-    throw new l("invalid_response", "Notification response is not an object");
+    throw new c("invalid_response", "Notification response is not an object");
   let e = n;
   if (typeof e.id != "string")
-    throw new l("invalid_response", "Notification missing id");
-  let t = et.includes(e.severity) ? e.severity : "info";
+    throw new c("invalid_response", "Notification missing id");
+  let t = nt.includes(e.severity) ? e.severity : "info";
   return {
     id: e.id,
     userId: typeof e.userId == "string" ? e.userId : "",
@@ -5011,37 +5046,37 @@ function hn(n) {
     dismissedAt: typeof e.dismissedAt == "string" ? e.dismissedAt : void 0
   };
 }
-function gn(n) {
-  if (!n.userId) throw new l("validation_failed", "userId obrigat\xF3rio");
-  if (!n.kind) throw new l("validation_failed", "kind obrigat\xF3rio");
-  if (!n.title) throw new l("validation_failed", "title obrigat\xF3rio");
-  if (n.severity && !et.includes(n.severity))
-    throw new l(
+function bn(n) {
+  if (!n.userId) throw new c("validation_failed", "userId obrigat\xF3rio");
+  if (!n.kind) throw new c("validation_failed", "kind obrigat\xF3rio");
+  if (!n.title) throw new c("validation_failed", "title obrigat\xF3rio");
+  if (n.severity && !nt.includes(n.severity))
+    throw new c(
       "validation_failed",
-      `severity inv\xE1lida: ${n.severity} (use ${et.join("|")})`
+      `severity inv\xE1lida: ${n.severity} (use ${nt.join("|")})`
     );
   if (n.title.length > 200)
-    throw new l("validation_failed", "title m\xE1x 200 chars");
+    throw new c("validation_failed", "title m\xE1x 200 chars");
   if (n.body && n.body.length > 2e3)
-    throw new l("validation_failed", "body m\xE1x 2000 chars");
+    throw new c("validation_failed", "body m\xE1x 2000 chars");
 }
-function Te(n, ...e) {
+function Re(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return N("productId", t), t;
   if (n.productId)
     return N("productId", n.productId), n.productId;
-  throw new l(
+  throw new c(
     "validation_failed",
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function yn(n) {
+function vn(n) {
   return {
     async send(e) {
-      gn(e);
+      bn(e);
       let r = {
-        productId: Te(n, e.productId),
+        productId: Re(n, e.productId),
         userId: e.userId,
         kind: e.kind,
         title: e.title,
@@ -5055,12 +5090,12 @@ function yn(n) {
         requireAuth: true,
         idempotencyKey: true
       });
-      return hn(o);
+      return _n(o);
     },
     async list(e, t) {
-      if (!e) throw new l("validation_failed", "userId obrigat\xF3rio");
+      if (!e) throw new c("validation_failed", "userId obrigat\xF3rio");
       let o = {
-        productId: Te(n, t?.productId)
+        productId: Re(n, t?.productId)
       };
       t?.includeDismissed && (o.includeDismissed = true), t?.onlyUnread && (o.onlyUnread = true), t?.limit && (o.limit = Math.min(Math.max(1, t.limit), 200));
       let i = await v(n, {
@@ -5069,11 +5104,11 @@ function yn(n) {
         query: o,
         requireAuth: true
       });
-      return (Array.isArray(i?.notifications) ? i.notifications : []).map(hn);
+      return (Array.isArray(i?.notifications) ? i.notifications : []).map(_n);
     },
     async markRead(e, t) {
-      if (!e) throw new l("validation_failed", "id obrigat\xF3rio");
-      let r = Te(n, t?.productId);
+      if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
+      let r = Re(n, t?.productId);
       return await v(n, {
         method: "POST",
         path: `/api/sdk/v1/notifications/${encodeURIComponent(e)}/read`,
@@ -5082,8 +5117,8 @@ function yn(n) {
       }), { ok: true };
     },
     async dismiss(e, t) {
-      if (!e) throw new l("validation_failed", "id obrigat\xF3rio");
-      let r = Te(n, t?.productId);
+      if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
+      let r = Re(n, t?.productId);
       return await v(n, {
         method: "POST",
         path: `/api/sdk/v1/notifications/${encodeURIComponent(e)}/dismiss`,
@@ -5093,11 +5128,11 @@ function yn(n) {
     }
   };
 }
-var Re = class {
+var Ie = class {
   notifications = /* @__PURE__ */ new Map();
   nextId = 1;
   async send(e) {
-    if (gn(e), e.fingerprint) {
+    if (bn(e), e.fingerprint) {
       let o = Date.now() - 864e5;
       for (let i of this.notifications.values())
         if ((i.metadata ?? {}).fingerprint === e.fingerprint && i.userId === e.userId && new Date(i.createdAt).getTime() > o)
@@ -5117,61 +5152,61 @@ var Re = class {
     return this.notifications.set(t, r), r;
   }
   async list(e, t) {
-    if (!e) throw new l("validation_failed", "userId obrigat\xF3rio");
+    if (!e) throw new c("validation_failed", "userId obrigat\xF3rio");
     let r = Math.min(Math.max(1, t?.limit ?? 50), 200);
     return [...this.notifications.values()].filter((o) => o.userId === e).filter((o) => t?.includeDismissed || !o.dismissedAt).filter((o) => !t?.onlyUnread || !o.readAt).sort((o, i) => i.createdAt.localeCompare(o.createdAt)).slice(0, r);
   }
   async markRead(e, t) {
     let r = this.notifications.get(e);
-    if (!r) throw new l("not_found", `Notification ${e} n\xE3o encontrada`);
+    if (!r) throw new c("not_found", `Notification ${e} n\xE3o encontrada`);
     return r.readAt || (r.readAt = (/* @__PURE__ */ new Date()).toISOString(), this.notifications.set(e, r)), { ok: true };
   }
   async dismiss(e, t) {
     let r = this.notifications.get(e);
-    if (!r) throw new l("not_found", `Notification ${e} n\xE3o encontrada`);
+    if (!r) throw new c("not_found", `Notification ${e} n\xE3o encontrada`);
     return r.dismissedAt || (r.dismissedAt = (/* @__PURE__ */ new Date()).toISOString(), this.notifications.set(e, r)), { ok: true };
   }
 };
 
 // src/ai.ts
-I();
-M();
-Me();
-var ho = "/api/sdk/v1/ai/chat", _n = 12e4, Ie = 32768, bn = 32, vn = 4194304, wn = 2048, go = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, yo = /^https:\/\/[^\s]+$/, _o = /* @__PURE__ */ new Set(["low", "high", "auto"]), bo = /* @__PURE__ */ new Set(["system", "user", "assistant"]), kn = 100, Sn = 128, Tn = 32768, Rn = 0, In = 2, Cn = 200, An = 20, En = 12 * 1024 * 1024, Pn = 5e4, Dn = 16, Nn = 500, vo = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), wo = /^[a-zA-Z0-9_-]+$/;
+C();
+F();
+qe();
+var So = "/api/sdk/v1/ai/chat", wn = 12e4, Ce = 32768, kn = 32, Sn = 4194304, Tn = 2048, To = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, Ro = /^https:\/\/[^\s]+$/, Io = /* @__PURE__ */ new Set(["low", "high", "auto"]), Co = /* @__PURE__ */ new Set(["system", "user", "assistant"]), Rn = 100, In = 128, Cn = 32768, An = 0, En = 2, Pn = 200, Dn = 20, Nn = 12 * 1024 * 1024, xn = 5e4, On = 16, Ln = 500, Ao = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), Eo = /^[a-zA-Z0-9_-]+$/;
 function k(n) {
-  throw new l("validation_failed", n);
+  throw new c("validation_failed", n);
 }
-function ko(n) {
+function Po(n) {
   if (n.length === 0 || n.length % 4 !== 0) return false;
   let e = n.endsWith("==") ? 2 : n.endsWith("=") ? 1 : 0;
   return !(e > 0 ? n.slice(0, n.length - e) : n).includes("=");
 }
-function So(n) {
+function Do(n) {
   let e = n.indexOf(",");
   if (e === -1) return 0;
   let t = n.slice(e + 1), r = t.endsWith("==") ? 2 : t.endsWith("=") ? 1 : 0;
   return Math.max(0, Math.floor(t.length * 3 / 4) - r);
 }
-function To(n) {
+function No(n) {
   let e = 0, t = 0, r = 0;
   for (let o of n) {
     let i = o?.content;
     if (Array.isArray(i))
       for (let s of i) {
-        if (e++, e > Cn)
-          return `ai: total content parts exceeds ${Cn} per request`;
+        if (e++, e > Pn)
+          return `ai: total content parts exceeds ${Pn} per request`;
         if (s && typeof s == "object" && s.type === "image_url") {
-          if (t++, t > An)
-            return `ai: total images exceeds ${An} per request`;
+          if (t++, t > Dn)
+            return `ai: total images exceeds ${Dn} per request`;
           let a = s.image_url?.url;
-          if (typeof a == "string" && a.startsWith("data:") && (r += So(a), r > En))
-            return `ai: aggregate image bytes exceeds ${En} per request`;
+          if (typeof a == "string" && a.startsWith("data:") && (r += Do(a), r > Nn))
+            return `ai: aggregate image bytes exceeds ${Nn} per request`;
         }
       }
   }
   return null;
 }
-function Ro(n) {
+function xo(n) {
   if (n === void 0) return null;
   if (n === null || typeof n != "object")
     return "ai: responseFormat json_schema.schema must be an object";
@@ -5182,11 +5217,11 @@ function Ro(n) {
     return "ai: responseFormat json_schema.schema is not serializable";
   }
   if (e === void 0) return "ai: responseFormat json_schema.schema is invalid";
-  if (e.length > Pn)
-    return `ai: responseFormat json_schema.schema exceeds ${Pn} serialized chars`;
+  if (e.length > xn)
+    return `ai: responseFormat json_schema.schema exceeds ${xn} serialized chars`;
   let t = 0, r = (o, i) => {
-    if (i > Dn)
-      return `ai: responseFormat json_schema.schema exceeds max depth ${Dn}`;
+    if (i > On)
+      return `ai: responseFormat json_schema.schema exceeds max depth ${On}`;
     if (Array.isArray(o)) {
       for (let s of o) {
         let a = r(s, i + 1);
@@ -5196,10 +5231,10 @@ function Ro(n) {
     }
     if (o && typeof o == "object")
       for (let s of Object.getOwnPropertyNames(o)) {
-        if (vo.has(s))
+        if (Ao.has(s))
           return `ai: responseFormat json_schema.schema has forbidden key: ${s}`;
-        if (t++, t > Nn)
-          return `ai: responseFormat json_schema.schema exceeds ${Nn} keys`;
+        if (t++, t > Ln)
+          return `ai: responseFormat json_schema.schema exceeds ${Ln} keys`;
         let a = r(o[s], i + 1);
         if (a) return a;
       }
@@ -5207,44 +5242,44 @@ function Ro(n) {
   };
   return r(n, 0);
 }
-function Io(n) {
+function Oo(n) {
   (typeof n != "string" || n.length === 0) && k("ai: image_url.url must be a non-empty string");
   let e = n;
   if (e.startsWith("data:")) {
-    e.length > vn && k(`ai: image_url.url (data:) exceeds ${vn} chars`), go.test(e) || k("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
+    e.length > Sn && k(`ai: image_url.url (data:) exceeds ${Sn} chars`), To.test(e) || k("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
     let t = e.slice(e.indexOf(",") + 1);
-    ko(t) || k("ai: image_url.url data: has invalid base64 (length/padding)");
+    Po(t) || k("ai: image_url.url data: has invalid base64 (length/padding)");
     return;
   }
   if (e.startsWith("https://")) {
-    e.length > wn && k(`ai: image_url.url (https:) exceeds ${wn} chars`), yo.test(e) || k("ai: image_url.url https: is invalid");
+    e.length > Tn && k(`ai: image_url.url (https:) exceeds ${Tn} chars`), Ro.test(e) || k("ai: image_url.url https: is invalid");
     return;
   }
   k("ai: image_url.url must be a data:image/...;base64 or https:// URL (other schemes are rejected)");
 }
-function Co(n, e) {
+function Lo(n, e) {
   if (typeof n == "string") {
-    n.length === 0 && k("ai: message content string must be non-empty"), n.length > Ie && k(`ai: message content exceeds ${Ie} chars`);
+    n.length === 0 && k("ai: message content string must be non-empty"), n.length > Ce && k(`ai: message content exceeds ${Ce} chars`);
     return;
   }
-  (!Array.isArray(n) || n.length === 0) && k("ai: message content must be a non-empty string or array of parts"), n.length > bn && k(`ai: message content has more than ${bn} parts`);
+  (!Array.isArray(n) || n.length === 0) && k("ai: message content must be a non-empty string or array of parts"), n.length > kn && k(`ai: message content has more than ${kn} parts`);
   for (let t of n) {
     (!t || typeof t != "object") && k("ai: each content part must be an object");
     let r = t.type;
     if (r === "text") {
       let o = t.text;
-      (typeof o != "string" || o.length === 0) && k("ai: text part must have non-empty { text: string }"), o.length > Ie && k(`ai: text part exceeds ${Ie} chars`);
+      (typeof o != "string" || o.length === 0) && k("ai: text part must have non-empty { text: string }"), o.length > Ce && k(`ai: text part exceeds ${Ce} chars`);
     } else if (r === "image_url") {
       e !== "user" && k(`ai: image_url is only allowed in role 'user' messages (got '${e}')`);
       let o = t.image_url;
-      (!o || typeof o != "object") && k("ai: image_url part must have { image_url: { url } }"), Io(o.url);
+      (!o || typeof o != "object") && k("ai: image_url part must have { image_url: { url } }"), Oo(o.url);
       let i = o.detail;
-      i !== void 0 && (typeof i != "string" || !_o.has(i)) && k("ai: image_url.detail must be 'low' | 'high' | 'auto'");
+      i !== void 0 && (typeof i != "string" || !Io.has(i)) && k("ai: image_url.detail must be 'low' | 'high' | 'auto'");
     } else
       k("ai: content part type must be 'text' or 'image_url'");
   }
 }
-function Ao(n) {
+function Uo(n) {
   (!n || typeof n != "object") && k("ai: responseFormat must be an object");
   let e = n.type;
   if (!(e === "text" || e === "json_object")) {
@@ -5252,8 +5287,8 @@ function Ao(n) {
       let t = n.json_schema;
       (!t || typeof t != "object") && k("ai: responseFormat json_schema requires { json_schema: { name } }");
       let r = t, o = r.name;
-      if ((typeof o != "string" || o.length === 0) && k("ai: responseFormat json_schema.name is required"), o.length > 64 && k("ai: responseFormat json_schema.name exceeds 64 chars"), wo.test(o) || k("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && k("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && k("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && k("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
-        let i = Ro(r.schema);
+      if ((typeof o != "string" || o.length === 0) && k("ai: responseFormat json_schema.name is required"), o.length > 64 && k("ai: responseFormat json_schema.name exceeds 64 chars"), Eo.test(o) || k("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && k("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && k("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && k("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
+        let i = xo(r.schema);
         i && k(i);
       }
       return;
@@ -5261,35 +5296,35 @@ function Ao(n) {
     k("ai: responseFormat.type must be 'text' | 'json_object' | 'json_schema'");
   }
 }
-function xn(n, e, t) {
+function Un(n, e, t) {
   if (!e || typeof e != "object")
-    throw new l("validation_failed", "ai: options object is required");
+    throw new c("validation_failed", "ai: options object is required");
   if (typeof e.model != "string" || e.model.length === 0)
-    throw new l("validation_failed", "ai: model is required");
-  if (e.model.length > Sn)
-    throw new l("validation_failed", `ai: model exceeds ${Sn} chars`);
+    throw new c("validation_failed", "ai: model is required");
+  if (e.model.length > In)
+    throw new c("validation_failed", `ai: model exceeds ${In} chars`);
   if (!Array.isArray(e.messages) || e.messages.length === 0)
-    throw new l("validation_failed", "ai: messages must be a non-empty array");
-  if (e.messages.length > kn)
-    throw new l("validation_failed", `ai: messages exceeds ${kn} per request`);
+    throw new c("validation_failed", "ai: messages must be a non-empty array");
+  if (e.messages.length > Rn)
+    throw new c("validation_failed", `ai: messages exceeds ${Rn} per request`);
   for (let a of e.messages) {
-    if (!a || typeof a != "object" || typeof a.role != "string" || !bo.has(a.role))
-      throw new l(
+    if (!a || typeof a != "object" || typeof a.role != "string" || !Co.has(a.role))
+      throw new c(
         "validation_failed",
         "ai: each message role must be 'system' | 'user' | 'assistant'"
       );
-    Co(a.content, a.role);
+    Lo(a.content, a.role);
   }
-  let r = To(e.messages);
-  if (r) throw new l("validation_failed", r);
+  let r = No(e.messages);
+  if (r) throw new c("validation_failed", r);
   let o = e.productId ?? n.productId, i = e.tenantId ?? n.tenantId;
   if (!o)
-    throw new l(
+    throw new c(
       "validation_failed",
       "ai: productId required (pass to options or set on createNeetruClient)"
     );
   if (!i)
-    throw new l(
+    throw new c(
       "validation_failed",
       "ai: tenantId required (pass to options or set on createNeetruClient)"
     );
@@ -5302,24 +5337,24 @@ function xn(n, e, t) {
     stream: t
   };
   if (e.maxTokens !== void 0) {
-    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > Tn)
-      throw new l(
+    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > Cn)
+      throw new c(
         "validation_failed",
-        `ai: maxTokens must be a positive integer <= ${Tn}`
+        `ai: maxTokens must be a positive integer <= ${Cn}`
       );
     s.maxTokens = e.maxTokens;
   }
   if (e.temperature !== void 0) {
-    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < Rn || e.temperature > In)
-      throw new l(
+    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < An || e.temperature > En)
+      throw new c(
         "validation_failed",
-        `ai: temperature must be a finite number between ${Rn} and ${In}`
+        `ai: temperature must be a finite number between ${An} and ${En}`
       );
     s.temperature = e.temperature;
   }
-  return e.responseFormat !== void 0 && (Ao(e.responseFormat), s.responseFormat = e.responseFormat), s;
+  return e.responseFormat !== void 0 && (Uo(e.responseFormat), s.responseFormat = e.responseFormat), s;
 }
-async function Mn(n) {
+async function jn(n) {
   try {
     let e = await n.text();
     return e ? JSON.parse(e) : void 0;
@@ -5327,48 +5362,48 @@ async function Mn(n) {
     return;
   }
 }
-function Eo(n, e) {
+function Mo(n, e) {
   let t = n.replace(/\/+$/, ""), r = e.startsWith("/") ? e : `/${e}`;
   return `${t}${r}`;
 }
-async function On(n, e, t, r) {
+async function Mn(n, e, t, r) {
   if (!n.apiKey)
-    throw new l(
+    throw new c(
       "missing_api_key",
       "ai requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
     );
-  let o = Eo(n.baseUrl, ho), { headers: i, correlationId: s } = ae({
+  let o = Mo(n.baseUrl, So), { headers: i, correlationId: s } = ce({
     "content-type": "application/json",
     accept: r ? "text/event-stream" : "application/json",
     authorization: `Bearer ${n.apiKey}`
   }), a = { method: "POST", headers: i, body: JSON.stringify(e) };
-  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(_n);
-  let c;
+  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(wn);
+  let l;
   try {
-    c = await n.fetch(o, a);
+    l = await n.fetch(o, a);
   } catch (p) {
-    let f = p instanceof DOMException && p.name === "TimeoutError" ? `Network error: timeout after ${_n / 1e3}s` : p instanceof DOMException && p.name === "AbortError" ? "Network error: request aborted" : `Network error: ${p instanceof Error ? p.message : "fetch failed"}`;
-    throw new l("network_error", f, void 0, void 0, void 0, s);
+    let f = p instanceof DOMException && p.name === "TimeoutError" ? `Network error: timeout after ${wn / 1e3}s` : p instanceof DOMException && p.name === "AbortError" ? "Network error: request aborted" : `Network error: ${p instanceof Error ? p.message : "fetch failed"}`;
+    throw new c("network_error", f, void 0, void 0, void 0, s);
   }
-  let d = c.headers.get("x-request-id") ?? c.headers.get("x-correlation-id") ?? void 0;
-  if (!c.ok) {
-    let p = await Mn(c), f = le(c.status), _ = `HTTP ${c.status}`;
+  let d = l.headers.get("x-request-id") ?? l.headers.get("x-correlation-id") ?? void 0;
+  if (!l.ok) {
+    let p = await jn(l), f = de(l.status), h = `HTTP ${l.status}`;
     if (p && typeof p == "object" && "error" in p) {
-      let b = p.error;
-      typeof b == "string" ? _ = b : b && typeof b == "object" && (typeof b.code == "string" && (f = b.code), typeof b.message == "string" && (_ = b.message));
+      let y = p.error;
+      typeof y == "string" ? h = y : y && typeof y == "object" && (typeof y.code == "string" && (f = y.code), typeof y.message == "string" && (h = y.message));
     }
-    throw new l(f, _, c.status, d, void 0, s);
+    throw new c(f, h, l.status, d, void 0, s);
   }
-  let u = c.headers.get("x-neetru-version");
-  return u && ce(u), c;
+  let u = l.headers.get("x-neetru-version");
+  return u && le(u), l;
 }
-function Ln(n) {
+function qn(n) {
   return {
     provider: n.headers.get("x-neetru-provider") ?? "",
     usageWarning: n.headers.get("x-neetru-ai-usage-warning") === "1"
   };
 }
-function Un(n) {
+function Fn(n) {
   let e = [];
   for (let r of n.split(`
 `)) {
@@ -5389,12 +5424,12 @@ function Un(n) {
     return null;
   }
 }
-function qn(n) {
+function $n(n) {
   return {
     async chat(e) {
-      let t = xn(n, e, false), r = await On(n, t, e.signal, false), { provider: o, usageWarning: i } = Ln(r), s = await Mn(r);
+      let t = Un(n, e, false), r = await Mn(n, t, e.signal, false), { provider: o, usageWarning: i } = qn(r), s = await jn(r);
       if (!s || s.ok !== true || !Array.isArray(s.choices))
-        throw new l("invalid_response", "ai.chat response missing ok/choices");
+        throw new c("invalid_response", "ai.chat response missing ok/choices");
       return {
         choices: s.choices,
         usage: s.usage ?? { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 },
@@ -5404,38 +5439,38 @@ function qn(n) {
       };
     },
     stream(e) {
-      let t = xn(n, e, true), r = On(n, t, e.signal, true), o = r.then(Ln);
+      let t = Un(n, e, true), r = Mn(n, t, e.signal, true), o = r.then(qn);
       o.catch(() => {
       });
       async function* i() {
         let a = (await r).body;
         if (!a)
-          throw new l("invalid_response", "ai.stream: response has no body");
-        let c = a.getReader(), d = new TextDecoder(), u = "";
+          throw new c("invalid_response", "ai.stream: response has no body");
+        let l = a.getReader(), d = new TextDecoder(), u = "";
         try {
           for (; ; ) {
-            let { done: f, value: _ } = await c.read();
+            let { done: f, value: h } = await l.read();
             if (f) break;
-            u += d.decode(_, { stream: !0 });
-            let b;
-            for (; (b = u.indexOf(`
+            u += d.decode(h, { stream: !0 });
+            let y;
+            for (; (y = u.indexOf(`
 
 `)) !== -1; ) {
-              let S = u.slice(0, b);
-              u = u.slice(b + 2);
-              let x = Un(S);
+              let T = u.slice(0, y);
+              u = u.slice(y + 2);
+              let x = Fn(T);
               if (x && "done" in x) return;
               x && "content" in x && (yield x.content);
             }
           }
           let p = u.trim();
           if (p) {
-            let f = Un(p);
+            let f = Fn(p);
             f && "content" in f && (yield f.content);
           }
         } finally {
           try {
-            c.releaseLock();
+            l.releaseLock();
           } catch {
           }
           try {
@@ -5453,20 +5488,8 @@ function qn(n) {
 }
 
 // src/mocks.ts
-I();
-
-// src/runtime-env.ts
-function Ce() {
-  try {
-    if (typeof process < "u" && process.env)
-      return process.env.NODE_ENV === "production";
-  } catch {
-  }
-  return false;
-}
-
-// src/mocks.ts
-var tt = Object.freeze({
+C();
+var rt = Object.freeze({
   uid: "dev-fixture-uid-0001",
   email: "dev@neetru.local",
   emailVerified: true,
@@ -5478,8 +5501,8 @@ var tt = Object.freeze({
   _listeners;
   _allowUnsignedDecode;
   constructor(e = null, t) {
-    if (this._user = e, this._listeners = /* @__PURE__ */ new Set(), this._allowUnsignedDecode = t?.allowUnsignedDecode ?? false, this._allowUnsignedDecode && Ce())
-      throw new l(
+    if (this._user = e, this._listeners = /* @__PURE__ */ new Set(), this._allowUnsignedDecode = t?.allowUnsignedDecode ?? false, this._allowUnsignedDecode && $e())
+      throw new c(
         "invalid_config",
         "MockAuth com allowUnsignedDecode=true \xE9 PROIBIDO em produ\xE7\xE3o (NODE_ENV=production): decodificar JWT sem verificar assinatura \xE9 bypass de autentica\xE7\xE3o. Este modo existe exclusivamente para testes."
       );
@@ -5488,10 +5511,10 @@ var tt = Object.freeze({
     );
   }
   async signIn(e) {
-    return this._user || (this._user = { ...tt }), this._notify(), this._user;
+    return this._user || (this._user = { ...rt }), this._notify(), this._user;
   }
   async signOut() {
-    this._user = null, this._notify();
+    return this._user = null, this._notify(), { localSessionCleared: true, remoteRevocation: "skipped" };
   }
   getUser() {
     return this._user;
@@ -5520,9 +5543,9 @@ var tt = Object.freeze({
     if (this._verifyTokenOverride)
       return this._verifyTokenOverride(e);
     if (!e)
-      throw new l("token_invalid_signature", "Token inv\xE1lido: string vazia");
+      throw new c("token_invalid_signature", "Token inv\xE1lido: string vazia");
     if (!this._allowUnsignedDecode)
-      throw new l(
+      throw new c(
         "unauthorized",
         "MockAuth.verifyToken n\xE3o verifica assinaturas JWT e N\xC3O deve ser usado como security boundary em c\xF3digo deployado. Em testes, use new MockAuth(user, { allowUnsignedDecode: true }) para habilitar decodifica\xE7\xE3o sem assinatura, ou __mockVerifyToken(fn) para injetar resultado customizado."
       );
@@ -5548,7 +5571,7 @@ var tt = Object.freeze({
     } catch {
     }
     if (this._user) return this._user;
-    throw new l("token_invalid_signature", "Nenhum user mock dispon\xEDvel e JWT sem sub v\xE1lido");
+    throw new c("token_invalid_signature", "Nenhum user mock dispon\xEDvel e JWT sem sub v\xE1lido");
   }
   /**
    * Mock de `handleRedirectCallback` (Bug 2 / 3.1.3) — não há redirect real no
@@ -5626,14 +5649,14 @@ var tt = Object.freeze({
       tenantId: r?.tenantId,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     });
-    let c = this._quotas.get(e)?.limit ?? -1;
+    let l = this._quotas.get(e)?.limit ?? -1;
     return {
       ok: true,
       counterId: `mock_${e}`,
       value: s,
-      limit: c,
-      remaining: c < 0 ? -1 : Math.max(0, c - s),
-      status: c > 0 && s >= c ? "read_only_overlimit" : "ok"
+      limit: l,
+      remaining: l < 0 ? -1 : Math.max(0, l - s),
+      status: l > 0 && s >= l ? "read_only_overlimit" : "ok"
     };
   }
   async check(e, t) {
@@ -5675,10 +5698,10 @@ var tt = Object.freeze({
   _tickets = [];
   _ticketSeq = 0;
   async createTicket(e) {
-    if (!e?.subject) throw new l("validation_failed", "subject required");
-    if (!e?.message) throw new l("validation_failed", "message required");
+    if (!e?.subject) throw new c("validation_failed", "subject required");
+    if (!e?.message) throw new c("validation_failed", "message required");
     if (!e?.productSlug)
-      throw new l(
+      throw new c(
         "validation_failed",
         "productSlug required (3.0 breaking \u2014 pass to input or set on createNeetruClient)"
       );
@@ -5710,10 +5733,10 @@ var tt = Object.freeze({
   }
   _find(e) {
     if (!e || typeof e != "string")
-      throw new l("validation_failed", "ticketId is required");
+      throw new c("validation_failed", "ticketId is required");
     let t = this._tickets.find((r) => r.id === e);
     if (!t)
-      throw new l("not_found", `ticket ${e} not found`);
+      throw new c("not_found", `ticket ${e} not found`);
     return t;
   }
   /** 3.4: espelha `markResolvedSeen` — idempotente (só seta se ainda null). */
@@ -5729,18 +5752,18 @@ var tt = Object.freeze({
   /** 3.4: espelha `submitSatisfaction` — terminal, seta `satisfiedAt`. */
   async submitSatisfaction(e) {
     if (!e || typeof e != "object")
-      throw new l("validation_failed", "input is required");
+      throw new c("validation_failed", "input is required");
     if (e.rating !== null && e.rating !== void 0 && (!Number.isInteger(e.rating) || e.rating < 1 || e.rating > 5))
-      throw new l("validation_failed", "rating must be an integer 1-5 or null");
+      throw new c("validation_failed", "rating must be an integer 1-5 or null");
     if (typeof e.comment == "string" && e.comment.length > 2e3)
-      throw new l("validation_failed", "comment max 2000 chars");
+      throw new c("validation_failed", "comment max 2000 chars");
     let t = this._find(e.ticketId);
     t.satisfiedAt = (/* @__PURE__ */ new Date()).toISOString(), t.rating = e.rating ?? null, t.satisfactionComment = e.comment ?? null;
   }
   /** 3.4: espelha `contestTicket` — reabre e zera o ciclo de satisfação. */
   async contestTicket(e, t) {
     if (typeof t?.comment == "string" && t.comment.length > 2e3)
-      throw new l("validation_failed", "comment max 2000 chars");
+      throw new c("validation_failed", "comment max 2000 chars");
     let r = this._find(e);
     r.status = "open", r.resolvedAt = null, r.resolvedNotifiedAt = null, r.satisfactionAttempts = 0, r.lastSatisfactionAttemptAt = null, r.satisfiedAt = null, r.rating = null, r.satisfactionComment = null;
   }
@@ -5783,9 +5806,9 @@ var Ne = class {
   }
   async chat(e) {
     if (!e || typeof e.model != "string" || e.model.length === 0)
-      throw new l("validation_failed", "ai: model is required");
+      throw new c("validation_failed", "ai: model is required");
     if (!Array.isArray(e.messages) || e.messages.length === 0)
-      throw new l("validation_failed", "ai: messages must be a non-empty array");
+      throw new c("validation_failed", "ai: messages must be a non-empty array");
     this._calls.push({ model: e.model, messages: e.messages, stream: false });
     let t = this._reply(e), r = e.messages.reduce((i, s) => i + this._contentToText(s.content).length, 0), o = t.length;
     return {
@@ -5802,9 +5825,9 @@ var Ne = class {
   }
   stream(e) {
     if (!e || typeof e.model != "string" || e.model.length === 0)
-      throw new l("validation_failed", "ai: model is required");
+      throw new c("validation_failed", "ai: model is required");
     if (!Array.isArray(e.messages) || e.messages.length === 0)
-      throw new l("validation_failed", "ai: messages must be a non-empty array");
+      throw new c("validation_failed", "ai: messages must be a non-empty array");
     this._calls.push({ model: e.model, messages: e.messages, stream: true });
     let t = this._reply(e), r = t.match(/\S+\s*/g) ?? [t], o = Promise.resolve({ provider: "mock", usageWarning: false });
     async function* i() {
@@ -5818,47 +5841,68 @@ var Ne = class {
   }
 };
 
+// src/timeout.ts
+function Wn(n) {
+  let e = globalThis.AbortSignal;
+  if (typeof e?.timeout == "function")
+    return { signal: e.timeout(n), clear: () => {
+    } };
+  if (typeof globalThis.AbortController != "function")
+    return { signal: void 0, clear: () => {
+    } };
+  let t = new AbortController(), r = setTimeout(() => t.abort(), n);
+  return r.unref?.(), { signal: t.signal, clear: () => clearTimeout(r) };
+}
+function Bn(n, e, t) {
+  let r, o = new Promise((i) => {
+    r = setTimeout(() => i(t()), e), r.unref?.();
+  });
+  return Promise.race([n, o]).finally(() => {
+    r !== void 0 && clearTimeout(r);
+  });
+}
+
 // src/auth-pkce-shared.ts
-I();
-function Fn() {
+C();
+function Vn() {
   let n = globalThis.crypto;
   if (!n || typeof n.getRandomValues != "function" || !n.subtle)
-    throw new l(
+    throw new c(
       "runtime_unsupported",
       "auth.signIn requer WebCrypto (crypto.subtle) \u2014 indispon\xEDvel neste runtime. Use HTTPS (ou http://localhost) num browser moderno, ou instale um polyfill WebCrypto (ex: react-native-quick-crypto) em React Native."
     );
   return n;
 }
-function jn(n) {
+function Kn(n) {
   let e = "";
   for (let r of n) e += String.fromCharCode(r);
   return (typeof btoa == "function" ? btoa(e) : Buffer.from(e, "binary").toString("base64")).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function xe(n, e) {
   let t = new Uint8Array(e);
-  return n.getRandomValues(t), jn(t);
+  return n.getRandomValues(t), Kn(t);
 }
-async function $n(n, e) {
+async function zn(n, e) {
   let t = new TextEncoder().encode(e), r = await n.subtle.digest("SHA-256", t);
-  return jn(new Uint8Array(r));
+  return Kn(new Uint8Array(r));
 }
-function oe(n) {
+function ie(n) {
   return (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.replace(/^https?:\/\/api\./, "https://auth.");
 }
-function Wn(n) {
+function Hn(n) {
   let e = n.oidcClientId;
-  if (!e && n.apiKey && (e = ct(n.apiKey).keyId), !e)
-    throw new l(
+  if (!e && n.apiKey && (e = dt(n.apiKey).keyId), !e)
+    throw new c(
       "invalid_config",
       "auth OIDC requer `oidcClientId` (ou `apiKey`) configurado para montar o client_id."
     );
   return e;
 }
-function Bn(n) {
+function Qn(n) {
   let e = new URL("/api/v1/oauth/authorize", n.idpOrigin);
   return e.searchParams.set("response_type", "code"), e.searchParams.set("client_id", n.clientId), e.searchParams.set("redirect_uri", n.redirectUri), e.searchParams.set("scope", n.scope), e.searchParams.set("state", n.state), e.searchParams.set("nonce", n.nonce), e.searchParams.set("code_challenge", n.codeChallenge), e.searchParams.set("code_challenge_method", "S256"), e;
 }
-function nt(n) {
+function ot(n) {
   let e = n.split(".");
   if (e.length !== 3) return null;
   try {
@@ -5868,8 +5912,8 @@ function nt(n) {
     return null;
   }
 }
-function ie(n) {
-  let e = nt(n);
+function se(n) {
+  let e = ot(n);
   return !e || typeof e.sub != "string" || typeof e.exp == "number" && e.exp * 1e3 < Date.now() ? null : {
     uid: e.sub,
     email: typeof e.email == "string" ? e.email : "",
@@ -5882,43 +5926,43 @@ function ie(n) {
     ...e
   };
 }
-var Po = "/api/v1/oauth/revoke";
-async function Vn(n, e, t, r) {
-  let o = `${e}${Po}`, i = true;
+var qo = "/api/v1/oauth/revoke";
+async function Gn(n, e, t, r) {
+  let o = `${e}${qo}`, i = true;
   for (let s of r) {
     if (!s.token) continue;
     let a = new URLSearchParams({
       token: s.token,
       token_type_hint: s.hint,
       client_id: t
-    }).toString(), c = false;
-    for (let d = 0; d < 2 && !c; d++)
+    }).toString(), l = false;
+    for (let d = 0; d < 2 && !l; d++)
       try {
-        if (c = (await n(o, {
+        if (l = (await n(o, {
           method: "POST",
           headers: { "content-type": "application/x-www-form-urlencoded" },
           body: a
-        })).ok, !c) break;
+        })).ok, !l) break;
       } catch {
         d === 0 && await new Promise((u) => setTimeout(u, 500));
       }
-    c || (i = false);
+    l || (i = false);
   }
   return i;
 }
 
 // src/auth.ts
-qe();
+Fe();
 
 // src/end-user-token.ts
-var Do = /* @__PURE__ */ new WeakMap();
-function Kn(n, e) {
-  Do.set(n, e);
+var Fo = /* @__PURE__ */ new WeakMap();
+function Jn(n, e) {
+  Fo.set(n, e);
 }
 
 // src/unsupported-db.ts
-I();
-var No = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", xo = /* @__PURE__ */ new Set([
+C();
+var jo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", $o = /* @__PURE__ */ new Set([
   "then",
   "toJSON",
   "valueOf",
@@ -5927,13 +5971,13 @@ var No = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O
   "asymmetricMatch",
   "nodeType"
 ]);
-function zn() {
+function Xn() {
   let n = () => {
-    throw new l("runtime_unsupported", No, void 0, void 0, "react-native");
+    throw new c("runtime_unsupported", jo, void 0, void 0, "react-native");
   }, e = {};
   return new Proxy(e, {
     get(t, r) {
-      if (!(typeof r == "symbol" || xo.has(r)))
+      if (!(typeof r == "symbol" || $o.has(r)))
         return r === "toString" ? () => "[NeetruDb indispon\xEDvel em React Native]" : n;
     },
     set() {
@@ -5943,7 +5987,7 @@ function zn() {
 }
 
 // src/auth.ts
-function Lo() {
+function Bo() {
   try {
     let e = globalThis.process?.env?.NEETRU_API_KEY;
     return typeof e == "string" && e.length > 0 ? e : void 0;
@@ -5951,7 +5995,7 @@ function Lo() {
     return;
   }
 }
-function Uo(n) {
+function Vo(n) {
   if (n) return n;
   try {
     let t = globalThis.process?.env?.NEETRU_ENV;
@@ -5965,11 +6009,11 @@ function Uo(n) {
   }
   return "prod";
 }
-var Mo = it;
-function ra() {
-  st();
+var Ko = at;
+function ga() {
+  ct();
 }
-function qo(n) {
+function zo(n) {
   let e = n.sub ?? "", t = typeof n.email == "string" ? n.email : "";
   return {
     uid: e,
@@ -5984,8 +6028,8 @@ function qo(n) {
     ...n
   };
 }
-var se = "neetru_oauth_tx";
-function rt(n) {
+var ae = "neetru_oauth_tx";
+function it(n) {
   try {
     let e = globalThis.history;
     if (!e || typeof e.replaceState != "function") return;
@@ -5996,7 +6040,7 @@ function rt(n) {
   } catch {
   }
 }
-function Fo(n) {
+function Ho(n) {
   let e = "neetru_id_token", t = "neetru_refresh_token", r = /* @__PURE__ */ new Set(), o = null, i = null, s = null;
   function a() {
     try {
@@ -6005,7 +6049,7 @@ function Fo(n) {
       return null;
     }
   }
-  function c() {
+  function l() {
     try {
       return typeof globalThis.sessionStorage < "u" ? globalThis.sessionStorage : null;
     } catch {
@@ -6014,21 +6058,21 @@ function Fo(n) {
   }
   function d() {
     if (o) {
-      let h = o.exp;
-      return typeof h == "number" && h * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), u(), S(), null) : o;
+      let m = o.exp;
+      return typeof m == "number" && m * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), u(), T(), null) : o;
     }
-    let m = a();
-    if (!m) return null;
-    let g = m.getItem(e);
-    if (!g)
-      return S(), null;
-    let w = ie(g);
-    return w ? (o = w, x(w), o) : (m.removeItem(e), S(), null);
+    let g = a();
+    if (!g) return null;
+    let b = g.getItem(e);
+    if (!b)
+      return T(), null;
+    let w = se(b);
+    return w ? (o = w, x(w), o) : (g.removeItem(e), T(), null);
   }
   function u() {
-    for (let m of r)
+    for (let g of r)
       try {
-        m(o);
+        g(o);
       } catch {
       }
   }
@@ -6038,72 +6082,77 @@ function Fo(n) {
   function f() {
     return a()?.getItem(t) ?? null;
   }
-  function _() {
+  function h() {
     o = null;
-    let m = a();
-    m?.removeItem(e), m?.removeItem(t), u();
-  }
-  function b() {
-    return s || (s = (async () => {
-      let m = f();
-      if (!m) return false;
-      let g;
+    let g = a();
+    g?.removeItem(e), g?.removeItem(t), u();
+  }
+  function y() {
+    if (s) return s;
+    let g = false, b = (async () => {
+      let w = f();
+      if (!w) return false;
+      let m;
       try {
-        g = T();
+        m = R();
       } catch {
         return false;
       }
-      let h = `${oe(n.baseUrl)}/api/v1/oauth/token`, C = new URLSearchParams({
+      let D = `${ie(n.baseUrl)}/api/v1/oauth/token`, O = new URLSearchParams({
         grant_type: "refresh_token",
-        refresh_token: m,
-        client_id: g
-      }), D;
+        refresh_token: w,
+        client_id: m
+      }), { signal: A, clear: M } = Wn(15e3), I;
       try {
-        D = await n.fetch(h, {
+        I = await n.fetch(D, {
           method: "POST",
           headers: { "content-type": "application/x-www-form-urlencoded" },
-          body: C.toString()
+          body: O.toString(),
+          signal: A
         });
       } catch {
         return false;
+      } finally {
+        M();
       }
-      let E = null;
+      let L = null;
       try {
-        E = await D.json();
+        L = await I.json();
       } catch {
-        E = null;
+        L = null;
       }
-      if (!D.ok || typeof E?.error == "string") return false;
-      let R = E?.id_token;
-      if (typeof R != "string" || R.length === 0) return false;
-      let O = ie(R);
-      if (!O) return false;
-      let A = a();
-      A?.setItem(e, R);
-      let U = E?.refresh_token;
-      return typeof U == "string" && U.length > 0 && A?.setItem(t, U), o = O, x(O), u(), true;
-    })().finally(() => {
+      if (!I.ok || typeof L?.error == "string") return false;
+      let U = L?.id_token;
+      if (typeof U != "string" || U.length === 0) return false;
+      let q = se(U);
+      if (!q || g) return false;
+      let P = a();
+      P?.setItem(e, U);
+      let Le = L?.refresh_token;
+      return typeof Le == "string" && Le.length > 0 && P?.setItem(t, Le), o = q, x(q), u(), true;
+    })();
+    return s = Bn(b, 15e3, () => (g = true, false)).finally(() => {
       s = null;
-    }), s);
+    }), s;
   }
-  function S() {
-    f() && b().then((m) => {
-      m || _();
+  function T() {
+    f() && y().then((g) => {
+      g || h();
     });
   }
-  function x(m) {
+  function x(g) {
     p();
-    let g = m.exp;
-    if (typeof g != "number") return;
-    let w = g * 1e3 - Date.now();
+    let b = g.exp;
+    if (typeof b != "number") return;
+    let w = b * 1e3 - Date.now();
     if (!(w <= 0)) {
       if (f()) {
-        let h = Math.min(w, Math.max(3e4, w * 0.2)), C = Math.max(1, w - h);
+        let m = Math.min(w, Math.max(3e4, w * 0.2)), S = Math.max(1, w - m);
         i = setTimeout(() => {
-          i = null, b().then((D) => {
-            D || _();
+          i = null, y().then((D) => {
+            D || h();
           });
-        }, C);
+        }, S);
         return;
       }
       i = setTimeout(() => {
@@ -6111,223 +6160,235 @@ function Fo(n) {
       }, w + 1);
     }
   }
-  function T() {
-    return Wn(n);
+  function R() {
+    return Hn(n);
   }
-  async function P(m) {
-    let g = m ?? (typeof globalThis.location < "u" ? globalThis.location.href : void 0);
-    if (!g) return null;
+  async function E(g) {
+    let b = g ?? (typeof globalThis.location < "u" ? globalThis.location.href : void 0);
+    if (!b) return null;
     let w;
     try {
-      w = new URL(g);
+      w = new URL(b);
     } catch {
       return null;
     }
-    let h = w.searchParams, C = h.get("error");
-    if (C) {
-      let U = h.get("error_description") ?? C;
-      throw c()?.removeItem(se), rt(w), new l(C, `OIDC authorize falhou: ${U}`);
+    let m = w.searchParams, S = m.get("error");
+    if (S) {
+      let L = m.get("error_description") ?? S;
+      throw l()?.removeItem(ae), it(w), new c(S, `OIDC authorize falhou: ${L}`);
     }
-    let D = h.get("code");
+    let D = m.get("code");
     if (!D) return null;
-    let E = h.get("state"), R = c(), O = R?.getItem(se) ?? null, A = null;
-    if (O)
+    let O = m.get("state"), A = l(), M = A?.getItem(ae) ?? null, I = null;
+    if (M)
       try {
-        A = JSON.parse(O);
+        I = JSON.parse(M);
       } catch {
-        A = null;
+        I = null;
       }
-    if (!A)
-      throw new l(
+    if (!I)
+      throw new c(
         "oidc_state_mismatch",
         "Callback OIDC sem transa\xE7\xE3o pendente \u2014 `signIn` n\xE3o foi iniciado nesta sess\xE3o (ou j\xE1 consumido)."
       );
-    if (!E || E !== A.state)
-      throw R?.removeItem(se), rt(w), new l(
+    if (!O || O !== I.state)
+      throw A?.removeItem(ae), it(w), new c(
         "oidc_state_mismatch",
         "state do callback OIDC n\xE3o confere com o da transa\xE7\xE3o (poss\xEDvel CSRF)."
       );
-    return R?.removeItem(se), rt(w), {
+    return A?.removeItem(ae), it(w), {
       code: D,
-      codeVerifier: A.codeVerifier,
-      redirectUri: A.redirectUri,
-      nonce: A.nonce,
-      state: A.state,
-      postLoginRedirect: A.postLoginRedirect
+      codeVerifier: I.codeVerifier,
+      redirectUri: I.redirectUri,
+      nonce: I.nonce,
+      state: I.state,
+      postLoginRedirect: I.postLoginRedirect
     };
   }
-  async function q(m) {
-    let g = await P(m);
-    if (!g) return null;
-    let w = T(), C = `${oe(n.baseUrl)}/api/v1/oauth/token`, D = new URLSearchParams({
+  async function j(g) {
+    let b = await E(g);
+    if (!b) return null;
+    let w = R(), S = `${ie(n.baseUrl)}/api/v1/oauth/token`, D = new URLSearchParams({
       grant_type: "authorization_code",
-      code: g.code,
-      redirect_uri: g.redirectUri,
+      code: b.code,
+      redirect_uri: b.redirectUri,
       client_id: w,
-      code_verifier: g.codeVerifier
-    }), E;
+      code_verifier: b.codeVerifier
+    }), O;
     try {
-      E = await n.fetch(C, {
+      O = await n.fetch(S, {
         method: "POST",
         headers: { "content-type": "application/x-www-form-urlencoded" },
         body: D.toString()
       });
-    } catch (L) {
-      throw new l(
+    } catch (P) {
+      throw new c(
         "network_error",
-        `POST ${C} falhou (network): ${L?.message ?? String(L)}`
+        `POST ${S} falhou (network): ${P?.message ?? String(P)}`
       );
     }
-    let R = null;
+    let A = null;
     try {
-      R = await E.json();
+      A = await O.json();
     } catch {
-      R = null;
+      A = null;
     }
-    if (!E.ok || typeof R?.error == "string") {
-      let L = typeof R?.error_description == "string" && R.error_description || typeof R?.error == "string" && R.error || `HTTP ${E.status}`;
-      throw new l(
+    if (!O.ok || typeof A?.error == "string") {
+      let P = typeof A?.error_description == "string" && A.error_description || typeof A?.error == "string" && A.error || `HTTP ${O.status}`;
+      throw new c(
         "token_exchange_failed",
-        `Troca do authorization_code por tokens falhou no /token: ${L}`,
-        E.status
+        `Troca do authorization_code por tokens falhou no /token: ${P}`,
+        O.status
       );
     }
-    let O = R?.id_token;
-    if (typeof O != "string" || O.length === 0)
-      throw new l(
+    let M = A?.id_token;
+    if (typeof M != "string" || M.length === 0)
+      throw new c(
         "token_exchange_failed",
         "Resposta do /token sem `id_token` \u2014 o login n\xE3o pode ser completado.",
-        E.status
+        O.status
       );
-    let A = nt(O);
-    if (!A)
-      throw new l(
+    let I = ot(M);
+    if (!I)
+      throw new c(
         "token_exchange_failed",
         "id_token retornado pelo /token \xE9 malformado (payload indecodific\xE1vel)."
       );
-    if (A.nonce !== g.nonce)
-      throw new l(
+    if (I.nonce !== b.nonce)
+      throw new c(
         "oidc_nonce_mismatch",
         "nonce do id_token n\xE3o confere com o da transa\xE7\xE3o OIDC (poss\xEDvel replay). Token descartado."
       );
-    let U = ie(O);
-    if (!U)
-      throw new l(
+    let L = se(M);
+    if (!L)
+      throw new c(
         "token_exchange_failed",
         "id_token retornado pelo /token n\xE3o tem `sub` ou j\xE1 est\xE1 expirado."
       );
-    let F = a();
-    F?.setItem(e, O);
-    let j = R?.refresh_token;
-    return typeof j == "string" && j.length > 0 && F?.setItem(t, j), o = U, x(U), u(), { user: U, postLoginRedirect: g.postLoginRedirect };
+    let U = a();
+    U?.setItem(e, M);
+    let q = A?.refresh_token;
+    return typeof q == "string" && q.length > 0 && U?.setItem(t, q), o = L, x(L), u(), { user: L, postLoginRedirect: b.postLoginRedirect };
   }
   return {
-    async signIn(m) {
+    async signIn(g) {
       if (typeof globalThis.location < "u" && typeof globalThis.location.assign == "function") {
-        let g = Fn(), w = m?.redirectUri ?? globalThis.location.origin, h = m?.scope ?? "openid profile email", C = T(), D = xe(g, 16), E = xe(g, 16), R = xe(g, 32), O = await $n(g, R), A = c();
-        if (!A)
-          throw new l(
+        let b = Vn(), w = g?.redirectUri ?? globalThis.location.origin, m = g?.scope ?? "openid profile email", S = R(), D = xe(b, 16), O = xe(b, 16), A = xe(b, 32), M = await zn(b, A), I = l();
+        if (!I)
+          throw new c(
             "runtime_unsupported",
             "auth.signIn requer sessionStorage para guardar a transa\xE7\xE3o PKCE entre o redirect e o callback."
           );
-        let U = {
+        let L = {
           state: D,
-          nonce: E,
-          codeVerifier: R,
+          nonce: O,
+          codeVerifier: A,
           redirectUri: w,
-          postLoginRedirect: m?.postLoginRedirect
+          postLoginRedirect: g?.postLoginRedirect
         };
-        A.setItem(se, JSON.stringify(U));
-        let F = oe(n.baseUrl), j = Bn({
-          idpOrigin: F,
-          clientId: C,
+        I.setItem(ae, JSON.stringify(L));
+        let U = ie(n.baseUrl), q = Qn({
+          idpOrigin: U,
+          clientId: S,
           redirectUri: w,
-          scope: h,
+          scope: m,
           state: D,
-          nonce: E,
-          codeChallenge: O
+          nonce: O,
+          codeChallenge: M
         });
-        globalThis.location.assign(j.toString());
+        globalThis.location.assign(q.toString());
         return;
       }
-      throw new l(
+      throw new c(
         "invalid_config",
         "auth.signIn requires a browser context or mocks. Use NEETRU_ENV=dev or pass mocks.auth."
       );
     },
-    handleRedirectCallback: P,
-    completeSignIn: q,
+    handleRedirectCallback: E,
+    completeSignIn: j,
     // 3.7.0: exposto pro client.support renovar a sessão 1x num 401
     // invalid_end_user_token (mesma função do refresh proativo, com dedup).
-    refreshTokens: b,
+    refreshTokens: y,
     getIdToken() {
-      let g = a()?.getItem(e) ?? null;
-      return g && ie(g) ? g : null;
+      let b = a()?.getItem(e) ?? null;
+      return b && se(b) ? b : null;
     },
     async signOut() {
-      let m = a(), g = m?.getItem(t) ?? null;
-      if (m && (m.removeItem(e), m.removeItem(t)), p(), o = null, g) {
-        let w = null;
+      let g = a(), b = g?.getItem(t) ?? null, w = true;
+      if (g)
+        for (let S of [e, t])
+          try {
+            g.removeItem(S);
+          } catch {
+            w = false;
+          }
+      p(), o = null;
+      let m = "skipped";
+      if (b) {
+        let S = null;
         try {
-          w = T();
+          S = R();
         } catch {
-          w = null;
+          S = null;
         }
-        !(w && await Vn(n.fetch, oe(n.baseUrl), w, [
-          { token: g, hint: "refresh_token" }
-        ])) && typeof console < "u" && console.warn(
-          "[neetru-sdk] signOut: a revoga\xE7\xE3o do refresh_token no servidor n\xE3o foi confirmada. A sess\xE3o local foi encerrada, mas o refresh_token pode seguir v\xE1lido at\xE9 expirar."
+        S ? m = await Gn(
+          n.fetch,
+          ie(n.baseUrl),
+          S,
+          [{ token: b, hint: "refresh_token" }]
+        ) ? "accepted" : "failed" : m = "not_configured", m !== "accepted" && typeof console < "u" && console.warn(
+          "[neetru-sdk] signOut: a revoga\xE7\xE3o do refresh_token no servidor n\xE3o foi confirmada (" + m + "). A sess\xE3o local foi encerrada, mas o refresh_token pode seguir v\xE1lido at\xE9 expirar. Trate o campo remoteRevocation do SignOutResult no produto."
         );
       }
-      u();
+      return u(), { localSessionCleared: w, remoteRevocation: m };
     },
     getUser() {
       return d();
     },
-    onAuthStateChanged(m) {
-      r.add(m);
+    onAuthStateChanged(g) {
+      r.add(g);
       try {
-        m(d());
+        g(d());
       } catch {
       }
       return () => {
-        r.delete(m);
+        r.delete(g);
       };
     },
-    async verifyToken(m, g) {
-      if (!m || typeof m != "string")
-        throw new l("token_invalid_signature", "token must be a non-empty string");
-      let h = (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.baseUrl.replace(/^https?:\/\/api\./, "https://auth."), C = h, D = `${h}/api/v1/oauth/.well-known/jwks`, E = g?.jwksCacheTtlMs ?? Ue, R = g?.audience, O = lt(n.apiKey), A = R ?? n.oidcClientId ?? O?.keyId;
-      if (!A)
-        throw new l(
+    async verifyToken(g, b) {
+      if (!g || typeof g != "string")
+        throw new c("token_invalid_signature", "token must be a non-empty string");
+      let m = (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.baseUrl.replace(/^https?:\/\/api\./, "https://auth."), S = m, D = `${m}/api/v1/oauth/.well-known/jwks`, O = b?.jwksCacheTtlMs ?? Me, A = b?.audience, M = ut(n.apiKey), I = A ?? n.oidcClientId ?? M?.keyId;
+      if (!I)
+        throw new c(
           "invalid_config",
           "verifyToken requires an audience: provide oidcClientId/apiKey on the client or pass options.audience. Calling jwtVerify without an audience allows tokens issued for other OIDC clients to pass."
         );
-      let U = Mo(D, E);
+      let L = Ko(D, O);
       try {
-        let { payload: F } = await jose.jwtVerify(m, U, {
-          issuer: C,
-          audience: A,
+        let { payload: U } = await jose.jwtVerify(g, L, {
+          issuer: S,
+          audience: I,
           algorithms: ["RS256"]
         });
-        return qo(F);
-      } catch (F) {
-        let j = F?.code ?? F?.name ?? "", L = F?.message ?? String(F);
-        throw j === "ERR_JWT_EXPIRED" ? new l("token_expired", `Token expired: ${L}`) : j === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" ? new l("token_invalid_signature", `Token signature invalid: ${L}`) : j === "ERR_JWT_CLAIM_VALIDATION_FAILED" ? L.includes('"aud"') || L.includes("audience") ? new l("token_invalid_audience", `Token audience mismatch: ${L}`) : L.includes('"iss"') || L.includes("issuer") ? new l("token_invalid_issuer", `Token issuer mismatch: ${L}`) : new l("token_invalid_signature", `Token claim validation failed: ${L}`) : new l("token_invalid_signature", `Token verification failed: ${L}`);
+        return zo(U);
+      } catch (U) {
+        let q = U?.code ?? U?.name ?? "", P = U?.message ?? String(U);
+        throw q === "ERR_JWT_EXPIRED" ? new c("token_expired", `Token expired: ${P}`) : q === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" ? new c("token_invalid_signature", `Token signature invalid: ${P}`) : q === "ERR_JWT_CLAIM_VALIDATION_FAILED" ? P.includes('"aud"') || P.includes("audience") ? new c("token_invalid_audience", `Token audience mismatch: ${P}`) : P.includes('"iss"') || P.includes("issuer") ? new c("token_invalid_issuer", `Token issuer mismatch: ${P}`) : new c("token_invalid_signature", `Token claim validation failed: ${P}`) : new c("token_invalid_signature", `Token verification failed: ${P}`);
       }
     }
   };
 }
-function jo(n = {}) {
+function Qo(n = {}) {
   let e = n.fetch ?? globalThis.fetch;
   if (typeof e != "function")
-    throw new l(
+    throw new c(
       "invalid_config",
       "fetch is not available in this runtime. Pass `fetch` explicitly to createNeetruClient."
     );
-  let t = n.apiKey ?? Lo();
-  wt({ hasApiKey: !!t, strict: n.strictServerOnlyKey === true });
-  let r = Uo(n.env), o = n.baseUrl ?? (r === "dev-local" ? mt : ft), i = pt(o, n.allowedHosts ?? []), s = Object.freeze({
+  let t = n.apiKey ?? Bo();
+  St({ hasApiKey: !!t, strict: n.strictServerOnlyKey === true });
+  let r = Vo(n.env), o = n.baseUrl ?? (r === "dev-local" ? gt : ht), i = mt(o, n.allowedHosts ?? []), s = Object.freeze({
     apiKey: t,
     oidcClientId: n.oidcClientId,
     baseUrl: i,
@@ -6335,39 +6396,39 @@ function jo(n = {}) {
     env: r,
     productId: n.productId,
     tenantId: n.tenantId
-  }), a = r === "dev" && !Ce(), c = n.mocks?.auth ?? (a ? new Ae({ ...tt }) : Fo(s)), d = n.mocks?.usage ?? (a ? new Ee() : Ut(s)), u = n.endUserAuth ?? c, p = n.mocks?.support ?? (a ? new Pe() : Wt(s, {
+  }), a = W(r), l = n.mocks?.auth ?? (a ? new Ae({ ...rt }) : Ho(s)), d = n.mocks?.usage ?? (a ? new Ee() : qt(s)), u = n.endUserAuth ?? l, p = n.mocks?.support ?? (a ? new Pe() : Vt(s, {
     getEndUserToken: () => u.getIdToken(),
     // `refreshTokens` é opcional (MockAuth/mocks próprios omitem).
     refreshEndUserToken: (() => {
-      let P = u.refreshTokens;
-      return typeof P == "function" ? () => P.call(u) : void 0;
+      let E = u.refreshTokens;
+      return typeof E == "function" ? () => E.call(u) : void 0;
     })()
-  })), f = n.mocks?.entitlements ?? (a ? new De() : Dt()), _ = n.mocks?.db ?? (X() === "react-native" ? zn() : ln(s, n.db)), b = n.mocks?.webhooks ?? (a ? new Se() : mn(s)), S = n.mocks?.notifications ?? (a ? new Re() : yn(s)), x = n.mocks?.ai ?? (a ? new Ne() : qn(s)), T = Object.freeze({
+  })), f = n.mocks?.entitlements ?? (a ? new De() : xt()), h = n.mocks?.db ?? (Y() === "react-native" ? Xn() : pn(s, n.db)), y = n.mocks?.webhooks ?? (a ? new Te() : yn(s)), T = n.mocks?.notifications ?? (a ? new Ie() : vn(s)), x = n.mocks?.ai ?? (a ? new Ne() : $n(s)), R = Object.freeze({
     config: s,
-    auth: c,
-    catalog: Et(s),
+    auth: l,
+    catalog: Dt(s),
     entitlements: f,
-    telemetry: Ot(s),
+    telemetry: Ut(s),
     usage: d,
     support: p,
-    db: _,
-    checkout: dn(s),
-    webhooks: b,
-    notifications: S,
+    db: h,
+    checkout: fn(s),
+    webhooks: y,
+    notifications: T,
     ai: x
   });
-  return n.endUserAuth && Kn(T, n.endUserAuth), T;
+  return n.endUserAuth && Jn(R, n.endUserAuth), R;
 }
 var Oe = /* @__PURE__ */ Symbol.for("@neetru/sdk:serverClient");
-function oa(n = {}) {
+function ya(n = {}) {
   let e = globalThis;
-  return e[Oe] || (e[Oe] = jo(n)), e[Oe];
+  return e[Oe] || (e[Oe] = Qo(n)), e[Oe];
 }
-function ia() {
+function _a() {
   delete globalThis[Oe];
 }
 
-exports.__resetJwksCacheForTests = ra;
-exports.__resetServerNeetruClientForTests = ia;
-exports.createNeetruClient = jo;
-exports.getServerNeetruClient = oa;
+exports.__resetJwksCacheForTests = ga;
+exports.__resetServerNeetruClientForTests = _a;
+exports.createNeetruClient = Qo;
+exports.getServerNeetruClient = ya;