@neetru/sdk 3.8.1 → 3.9.1

package/dist/index.mjs

@@ -1,15 +1,15 @@
 import { jwtVerify, createRemoteJWKSet } from 'jose';
 import { openDB } from 'idb';
 
-var sr = Object.defineProperty;
+var ur = Object.defineProperty;
 var W = (n, e) => () => (n && (e = n(n = 0)), e);
-var ft = (n, e) => {
+var ht = (n, e) => {
   for (var t in e)
-    sr(n, t, { get: e[t], enumerable: true });
+    ur(n, t, { get: e[t], enumerable: true });
 };
 
 // src/errors.ts
-var c, $, C = W(() => {
+var c, $, A = W(() => {
   c = class n extends Error {
     code;
     status;
@@ -41,7 +41,7 @@ var c, $, C = W(() => {
 });
 
 // src/idempotency.ts
-function kt() {
+function Tt() {
   let n = typeof globalThis < "u" && "crypto" in globalThis ? globalThis.crypto : void 0;
   if (n && typeof n.randomUUID == "function")
     return n.randomUUID();
@@ -50,15 +50,15 @@ function kt() {
     "crypto.randomUUID not available in this runtime. SDK 3.0 requires Node \u226520 or modern browser/Edge."
   );
 }
-var St = W(() => {
-  C();
+var Rt = W(() => {
+  A();
 });
 
 // src/correlation.ts
-function Rt(n) {
-  return typeof n == "string" && n.length > 0 && n.length <= 128 && fr.test(n);
+function Ct(n) {
+  return typeof n == "string" && n.length > 0 && n.length <= 128 && _r.test(n);
 }
-function mr() {
+function br() {
   let n = globalThis.crypto;
   try {
     if (n && typeof n.randomUUID == "function") return n.randomUUID();
@@ -76,24 +76,24 @@ function mr() {
   let r = Array.from(e, (o) => o.toString(16).padStart(2, "0")).join("");
   return `${r.slice(0, 8)}-${r.slice(8, 12)}-${r.slice(12, 16)}-${r.slice(16, 20)}-${r.slice(20)}`;
 }
-function _e(n, e) {
+function be(n, e) {
   let t, r = {};
   for (let [i, s] of Object.entries(n)) {
-    if (i.toLowerCase() === Tt) {
-      Rt(s) && (t = s);
+    if (i.toLowerCase() === It) {
+      Ct(s) && (t = s);
       continue;
     }
     r[i] = s;
   }
-  let o = t ?? (Rt(e) ? e : void 0) ?? mr();
-  return r[Tt] = o, { headers: r, correlationId: o };
+  let o = t ?? (Ct(e) ? e : void 0) ?? br();
+  return r[It] = o, { headers: r, correlationId: o };
 }
-var Tt, fr, We = W(() => {
-  Tt = "x-correlation-id", fr = /^[A-Za-z0-9._:\-]+$/;
+var It, _r, $e = W(() => {
+  It = "x-correlation-id", _r = /^[A-Za-z0-9._:\-]+$/;
 });
 
 // src/server-only-key.ts
-function Q() {
+function J() {
   try {
     let n = globalThis.navigator;
     if (n && n.product === "ReactNative") return "react-native";
@@ -106,108 +106,108 @@ function Q() {
   }
   return null;
 }
-function It(n, e) {
-  let t = hr[n];
+function At(n, e) {
+  let t = vr[n];
   return (`${e ? `[Neetru SDK] Recusado: a credencial nrt_ do produto foi passada ao SDK rodando ${t}.` : `[Neetru SDK] ATEN\xC7\xC3O: a credencial nrt_ do produto est\xE1 sendo usada ${t}.`} Essa chave \xE9 S\xD3 DE SERVIDOR \u2014 quem abrir o DevTools (ou descompactar o app) copia a chave e fala com o Core como se fosse o seu produto. Como corrigir: o site/app chama a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio (Authorization: Bearer <access_token>); o backend do produto valida com verifyAccessToken() e usa o SDK com a chave (NEETRU_API_KEY, sem prefixo NEXT_PUBLIC_/EXPO_PUBLIC_). ` + (e ? "" : "Nesta vers\xE3o \xE9 s\xF3 um aviso; use strictServerOnlyKey: true para bloquear j\xE1. Na pr\xF3xima vers\xE3o MAJOR do SDK isso passa a falhar sempre.")).trim();
 }
-function At(n) {
+function Pt(n) {
   if (!n.hasApiKey) return;
-  let e = n.runtime === void 0 ? Q() : n.runtime;
+  let e = n.runtime === void 0 ? J() : n.runtime;
   if (e) {
     if (n.strict)
-      throw new c("server_only_key", It(e, true), void 0, void 0, e);
-    if (!Ct) {
-      Ct = true;
+      throw new c("server_only_key", At(e, true), void 0, void 0, e);
+    if (!Et) {
+      Et = true;
       try {
-        typeof console < "u" && typeof console.warn == "function" && console.warn(It(e, !1));
+        typeof console < "u" && typeof console.warn == "function" && console.warn(At(e, !1));
       } catch {
       }
     }
   }
 }
-var hr, Ct, be = W(() => {
-  C();
-  hr = {
+var vr, Et, ve = W(() => {
+  A();
+  vr = {
     browser: "no navegador",
     "react-native": "num app React Native"
   };
-  Ct = false;
+  Et = false;
 });
 
 // src/http.ts
-var ne = {};
-ft(ne, {
-  checkCoreVersionCompat: () => te,
+var re = {};
+ht(re, {
+  checkCoreVersionCompat: () => ne,
   httpRequest: () => S,
-  statusToCode: () => ve
+  statusToCode: () => we
 });
-function $e(n) {
+function Ve(n) {
   return n.split("+")[0] ?? n;
 }
-function yr(n, e) {
-  let t = $e(n).split(".").map(Number), r = $e(e).split(".").map(Number), o = Math.max(t.length, r.length);
+function kr(n, e) {
+  let t = Ve(n).split(".").map(Number), r = Ve(e).split(".").map(Number), o = Math.max(t.length, r.length);
   for (let i = 0; i < o; i++) {
     let s = t[i] ?? 0, a = r[i] ?? 0;
     if (s !== a) return s - a;
   }
   return 0;
 }
-function Ot() {
+function Ut() {
   try {
-    return "3.8.1";
+    return "3.9.1";
   } catch {
     return;
   }
 }
-function _r() {
-  let n = Ot();
+function Sr() {
+  let n = Ut();
   return n ? parseInt(n.split(".")[0] ?? "3", 10) : 3;
 }
-function te(n) {
+function ne(n) {
   if (!n) return;
-  let e = _r(), t = gr[e];
+  let e = Sr(), t = wr[e];
   if (!t) return;
-  let r = $e(n);
-  if (yr(r, t) < 0) {
+  let r = Ve(n);
+  if (kr(r, t) < 0) {
     let o = `${e}:${r}`;
-    Et.has(o) || (Et.add(o), console.warn(
+    Dt.has(o) || (Dt.add(o), console.warn(
       `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${n}" \xE9 anterior ao m\xEDnimo recomendado "${t}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
     ));
   }
 }
-function br() {
+function Tr() {
   let n = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
-  return Q() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + n + ")" : n;
+  return J() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + n + ")" : n;
 }
-function Pt(n) {
+function Nt(n) {
   let e = 200 * Math.pow(4, n), t = e * 0.2 * (Math.random() * 2 - 1);
   return Math.max(50, Math.round(e + t));
 }
-function Tr(n) {
+function Er(n) {
   if (!n) return null;
   let e = Number(n);
-  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), Dt);
+  if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), xt);
   let t = Date.parse(n);
   if (Number.isFinite(t)) {
     let r = t - Date.now();
-    if (r > 0) return Math.min(r, Dt);
+    if (r > 0) return Math.min(r, xt);
   }
   return null;
 }
-function Nt(n) {
+function Ot(n) {
   return new Promise((e) => setTimeout(e, n));
 }
-function ve(n) {
+function we(n) {
   return n === 401 ? "unauthorized" : n === 403 ? "forbidden" : n === 404 ? "not_found" : n === 409 ? "conflict" : n === 410 ? "gone" : n === 422 || n === 400 ? "validation_failed" : n === 429 ? "rate_limited" : n >= 500 ? "server_error" : "unknown";
 }
-function Rr(n, e, t) {
+function Pr(n, e, t) {
   let r = n.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, i = new URL(`${r}${o}`);
   if (t)
     for (let [s, a] of Object.entries(t))
       a !== void 0 && i.searchParams.set(s, String(a));
   return i.toString();
 }
-async function xt(n) {
+async function Lt(n) {
   let e = await n.text();
   if (e)
     try {
@@ -217,17 +217,17 @@ async function xt(n) {
     }
 }
 async function S(n, e) {
-  let t = e.method ?? "GET", r = Rr(n.baseUrl, e.path, e.query), o = kr.has(t) ? vr : wr, i = e.retries ?? o, { headers: s, correlationId: a } = _e(
+  let t = e.method ?? "GET", r = Pr(n.baseUrl, e.path, e.query), o = Cr.has(t) ? Rr : Ir, i = e.retries ?? o, { headers: s, correlationId: a } = be(
     { accept: "application/json", ...e.headers },
     e.correlationId
-  ), d = Ot();
+  ), d = Ut();
   if (d && (s["x-neetru-sdk-version"] = d), e.requireAuth) {
     if (!n.apiKey)
-      throw new c("missing_api_key", br());
+      throw new c("missing_api_key", Tr());
     s.authorization = `Bearer ${n.apiKey}`;
   }
   if (e.idempotencyKey) {
-    let f = typeof e.idempotencyKey == "string" ? e.idempotencyKey : kt();
+    let f = typeof e.idempotencyKey == "string" ? e.idempotencyKey : Tt();
     s["idempotency-key"] = f;
   }
   let p = e.body !== void 0 && t !== "GET" && t !== "DELETE" ? JSON.stringify(e.body) : void 0;
@@ -247,69 +247,69 @@ async function S(n, e) {
     p !== void 0 && (m.body = p);
     let h = u != null ? Math.max(1, Math.min(3e4, u - Date.now())) : 3e4;
     m.signal = AbortSignal.timeout(h);
-    let y;
+    let _;
     try {
-      y = await n.fetch(r, m);
-    } catch (b) {
-      let E = b instanceof DOMException && b.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${b instanceof Error ? b.message : "fetch failed"}`;
-      if (l = new c("network_error", E, void 0, void 0, void 0, a), f < i) {
-        let x = Pt(f);
+      _ = await n.fetch(r, m);
+    } catch (g) {
+      let C = g instanceof DOMException && g.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${g instanceof Error ? g.message : "fetch failed"}`;
+      if (l = new c("network_error", C, void 0, void 0, void 0, a), f < i) {
+        let x = Nt(f);
         if (u == null || Date.now() + x < u) {
-          await Nt(x);
+          await Ot(x);
           continue;
         }
       }
       throw l;
     }
-    let I = y.headers.get("x-request-id") ?? y.headers.get("x-correlation-id") ?? void 0;
-    if (y.ok) {
-      let b = y.headers.get("x-neetru-version");
-      return b && te(b), await xt(y);
+    let I = _.headers.get("x-request-id") ?? _.headers.get("x-correlation-id") ?? void 0;
+    if (_.ok) {
+      let g = _.headers.get("x-neetru-version");
+      return g && ne(g), await Lt(_);
     }
-    let w = await xt(y), k = ve(y.status), N = `HTTP ${y.status}`, g;
+    let w = await Lt(_), k = we(_.status), D = `HTTP ${_.status}`, y;
     if (w && typeof w == "object") {
-      let b = w.error;
-      typeof b == "string" ? N = b : b && typeof b == "object" ? (typeof b.code == "string" && (k = b.code), typeof b.message == "string" && (N = b.message), typeof b.reason == "string" && (g = b.reason)) : (typeof w.code == "string" && (k = w.code), typeof w.message == "string" && (N = w.message)), typeof w.reason == "string" && (g = w.reason);
+      let g = w.error;
+      typeof g == "string" ? D = g : g && typeof g == "object" ? (typeof g.code == "string" && (k = g.code), typeof g.message == "string" && (D = g.message), typeof g.reason == "string" && (y = g.reason)) : (typeof w.code == "string" && (k = w.code), typeof w.message == "string" && (D = w.message)), typeof w.reason == "string" && (y = w.reason);
     }
-    if (y.status === 410) {
-      let b = y.headers.get("x-neetru-replacement");
-      N === `HTTP ${y.status}` && (N = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), b && !N.includes(b) && (N += ` Substituto: ${b}.`);
+    if (_.status === 410) {
+      let g = _.headers.get("x-neetru-replacement");
+      D === `HTTP ${_.status}` && (D = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), g && !D.includes(g) && (D += ` Substituto: ${g}.`);
     }
-    let _ = new c(k, N, y.status, I, g, a);
-    if (l = _, Sr.has(k) && f < i) {
-      let E = Tr(y.headers.get("retry-after")) ?? Pt(f);
-      if (u == null || Date.now() + E < u) {
-        await Nt(E);
+    let b = new c(k, D, _.status, I, y, a);
+    if (l = b, Ar.has(k) && f < i) {
+      let C = Er(_.headers.get("retry-after")) ?? Nt(f);
+      if (u == null || Date.now() + C < u) {
+        await Ot(C);
         continue;
       }
     }
-    throw _;
+    throw b;
   }
   throw l ?? new c("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, a);
 }
-var gr, Et, vr, wr, kr, Sr, Dt, q = W(() => {
-  C();
-  St();
-  We();
-  be();
-  gr = {
+var wr, Dt, Rr, Ir, Cr, Ar, xt, F = W(() => {
+  A();
+  Rt();
+  $e();
+  ve();
+  wr = {
     // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
     // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
     3: "2026.05.1"
   };
-  Et = /* @__PURE__ */ new Set();
-  vr = 2, wr = 0, kr = /* @__PURE__ */ new Set(["GET", "HEAD"]), Sr = /* @__PURE__ */ new Set([
+  Dt = /* @__PURE__ */ new Set();
+  Rr = 2, Ir = 0, Cr = /* @__PURE__ */ new Set(["GET", "HEAD"]), Ar = /* @__PURE__ */ new Set([
     "rate_limited",
     "server_error",
     "network_error"
   ]);
-  Dt = 6e4;
+  xt = 6e4;
 });
 
 // src/db-errors.ts
-var qr, v, z = W(() => {
-  C();
-  qr = /* @__PURE__ */ new Set([
+var Vr, v, H = W(() => {
+  A();
+  Vr = /* @__PURE__ */ new Set([
     "db_unavailable",
     "db_conflict",
     "db_timeout"
@@ -327,16 +327,16 @@ var qr, v, z = W(() => {
      */
     dbId;
     constructor(e, t, r) {
-      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = qr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
+      super(e, t), this.name = "NeetruDbError", this.code = e, this.retryable = Vr.has(e), this.dbId = r, Object.setPrototypeOf(this, n.prototype);
     }
   };
 });
 
 // src/db/sql/resilient-pool.ts
-function De(n) {
-  return typeof n == "object" && n !== null && n[Xe] === true;
+function Ne(n) {
+  return typeof n == "object" && n !== null && n[Ze] === true;
 }
-function so(n) {
+function po(n) {
   let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
   if (e === "ECONNREFUSED" || e === "ETIMEDOUT" || e === "ENOTFOUND" || e === "EHOSTUNREACH" || e === "EAI_AGAIN")
     return true;
@@ -348,17 +348,17 @@ function so(n) {
   let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
   return r.length === 0 ? false : !!(r.includes("certificate expired") || r.includes("certificate has expired") || r.includes("cert_has_expired") || r.includes("alert certificate expired") || r.includes("err_ssl") || r.includes("sslv3 alert") || r.includes("tlsv1 alert") || r.includes("econnrefused") || r.includes("etimedout") || r.includes("enotfound") || r.includes("ehostunreach") || r.includes("getaddrinfo"));
 }
-function rn(n) {
+function sn(n) {
   let e = n && typeof n == "object" && "code" in n ? n.code : void 0;
-  if (typeof e == "string" && ao.has(e.toUpperCase()))
+  if (typeof e == "string" && fo.has(e.toUpperCase()))
     return true;
   let r = (n instanceof Error ? n.message : typeof n == "string" ? n : "").toLowerCase();
   return r.length === 0 ? false : r.includes("password authentication failed") || r.includes("sasl authentication failed");
 }
-function co(n) {
-  return so(n) || rn(n);
+function mo(n) {
+  return po(n) || sn(n);
 }
-function Ye(n) {
+function et(n) {
   let e = { current: n }, t = null, r = {
     __neetruSwapInner(l) {
       let u = e.current;
@@ -386,10 +386,10 @@ function Ye(n) {
       }
       return await o(l, e.current, f);
     }
-  })(), s = i("query", co), a = i("connect", rn), d = Object.create(Object.getPrototypeOf(n));
+  })(), s = i("query", mo), a = i("connect", sn), d = Object.create(Object.getPrototypeOf(n));
   return new Proxy(d, {
     get(l, u) {
-      if (u === Xe) return true;
+      if (u === Ze) return true;
       if (u === "__neetruSwapInner") return r.__neetruSwapInner;
       if (u === "__neetruGetInner") return r.__neetruGetInner;
       if (u === "__neetruSetReLease") return r.__neetruSetReLease;
@@ -405,16 +405,16 @@ function Ye(n) {
     }
   });
 }
-var Xe, ao, Ze = W(() => {
-  Xe = /* @__PURE__ */ Symbol.for("neetru.sdk.resilientPool");
-  ao = /* @__PURE__ */ new Set(["28P01", "28000"]);
+var Ze, fo, tt = W(() => {
+  Ze = /* @__PURE__ */ Symbol.for("neetru.sdk.resilientPool");
+  fo = /* @__PURE__ */ new Set(["28P01", "28000"]);
 });
 
 // src/db/sql/lease.ts
-function uo(n, e) {
+function go(n, e) {
   return n ? n.leaseId !== e.leaseId || n.credentialVersion !== e.credentialVersion || n.host !== e.host || n.port !== e.port || n.dbName !== e.dbName || n.user !== e.user || n.password !== e.password || n.sslca !== e.sslca || n.clientCert !== e.clientCert || n.clientKey !== e.clientKey : true;
 }
-function po(n) {
+function yo(n) {
   if (n instanceof v) return n;
   let e = n instanceof Error ? n.message : String(n), t = n instanceof Error ? n.code : void 0;
   return typeof t == "string" && (t === "ECONNREFUSED" || t === "ENOTFOUND" || t === "ETIMEDOUT") ? new v(
@@ -422,10 +422,10 @@ function po(n) {
     `Pool connection failed (${t}): ${e}`
   ) : e.includes("statement timeout") || e.includes("lock timeout") ? new v("db_timeout", `Query timeout: ${e}`) : e.includes("40001") || e.includes("40P01") || e.includes("deadlock") ? new v("db_conflict", `Transaction conflict: ${e}`) : e.includes("42501") || e.toLowerCase().includes("permission denied") ? new v("db_permission_denied", `Permission denied: ${e}`) : new v("db_unavailable", `Database error: ${e}`);
 }
-var lo, Z, se, on = W(() => {
-  z();
-  Ze();
-  lo = 0.8, Z = 3e4, se = class {
+var ho, ee, ae, an = W(() => {
+  H();
+  tt();
+  ho = 0.8, ee = 3e4, ae = class {
     /**
      * Lease atual. `null` no modo LAZY antes da 1ª query (o 1º lease é adiado —
      * ver `_ensureInitialLease`). Após a 1ª aquisição, sempre não-nulo.
@@ -465,7 +465,7 @@ var lo, Z, se, on = W(() => {
           isolationLevel: t.isolationLevel
         }) : await this._orm.transaction(e);
       } catch (r) {
-        throw po(r);
+        throw yo(r);
       }
     }
     async close() {
@@ -483,13 +483,13 @@ var lo, Z, se, on = W(() => {
      * usa `MIN_RENEWAL_DELAY_MS` como fallback seguro.
      */
     _calcRenewalDelayMs() {
-      if (!this._lease) return Z;
+      if (!this._lease) return ee;
       let e = Date.parse(this._lease.expiresAt);
-      if (!Number.isFinite(e)) return Z;
+      if (!Number.isFinite(e)) return ee;
       let t = this._deps.now(), r = e - t;
-      if (r <= 0) return Z;
-      let o = r * (1 - lo);
-      return Math.max(Z, Math.round(o));
+      if (r <= 0) return ee;
+      let o = r * (1 - ho);
+      return Math.max(ee, Math.round(o));
     }
     _scheduleRenewal() {
       if (this._closed) return;
@@ -516,8 +516,8 @@ var lo, Z, se, on = W(() => {
         } catch (t) {
           this._renewalTimer = setTimeout(() => {
             this._doRenew();
-          }, Z), console.warn(
-            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${Z}ms (o cert de cliente mTLS do lease expira ~15min ap\xF3s o \xFAltimo swap):`,
+          }, ee), console.warn(
+            `[SqlLeaseManager] renova\xE7\xE3o E emiss\xE3o de lease novo falharam; re-tentando em ${ee}ms (o cert de cliente mTLS do lease expira ~15min ap\xF3s o \xFAltimo swap):`,
             t instanceof Error ? t.message : t
           );
           return;
@@ -593,7 +593,7 @@ var lo, Z, se, on = W(() => {
           "SqlLeaseManager foi fechado \u2014 aquisi\xE7\xE3o de lease inicial abortada."
         );
       if (this._lease)
-        return De(this._pool) ? this._pool.__neetruGetInner() : this._pool;
+        return Ne(this._pool) ? this._pool.__neetruGetInner() : this._pool;
       if (this._initInFlight !== null) return this._initInFlight;
       let e = (async () => {
         let t;
@@ -611,7 +611,7 @@ var lo, Z, se, on = W(() => {
           let i = o instanceof Error ? o.message : String(o);
           throw new v("db_unavailable", `Falha ao abrir pool: ${i}`);
         }
-        return De(this._pool) ? this._pool.__neetruSwapInner(r).end().catch(() => {
+        return Ne(this._pool) ? this._pool.__neetruSwapInner(r).end().catch(() => {
         }) : this._pool = r, this._lease = t, this._scheduleRenewal(), r;
       })();
       this._initInFlight = e;
@@ -627,12 +627,12 @@ var lo, Z, se, on = W(() => {
      * Exposto como método protegido para testes.
      */
     async _swapPool(e) {
-      if (!uo(this._lease, e)) {
+      if (!go(this._lease, e)) {
         this._lease = e;
         return;
       }
       let t = this._deps.createPool(e);
-      if (De(this._pool)) {
+      if (Ne(this._pool)) {
         let i = this._pool.__neetruSwapInner(t);
         this._lease = e, i.end().catch(() => {
         });
@@ -654,29 +654,29 @@ var lo, Z, se, on = W(() => {
 });
 
 // src/db/sql/sql-client.ts
-var fn = {};
-ft(fn, {
-  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => un,
-  DEFAULT_POOL_IDLE_MS: () => dn,
-  DEFAULT_POOL_MAX: () => ln,
-  LEASE_ENDPOINT: () => sn,
-  LEASE_RENEW_ENDPOINT: () => an,
-  createDrizzleHandle: () => go,
-  createHttpLeaseFetcher: () => cn,
-  createPgPool: () => ho,
-  createSqlClientFromConfig: () => _o,
-  createSqlClientWithDeps: () => pn,
-  resolvePoolTuning: () => tt
+var hn = {};
+ht(hn, {
+  DEFAULT_POOL_CONNECT_TIMEOUT_MS: () => fn,
+  DEFAULT_POOL_IDLE_MS: () => pn,
+  DEFAULT_POOL_MAX: () => un,
+  LEASE_ENDPOINT: () => cn,
+  LEASE_RENEW_ENDPOINT: () => ln,
+  createDrizzleHandle: () => wo,
+  createHttpLeaseFetcher: () => dn,
+  createPgPool: () => vo,
+  createSqlClientFromConfig: () => So,
+  createSqlClientWithDeps: () => mn,
+  resolvePoolTuning: () => rt
 });
-function fo(n) {
+function _o(n) {
   return n === "workspace" ? "staging" : n === "prod" ? "production" : "dev-local";
 }
-function cn(n) {
+function dn(n) {
   return async (e) => {
-    let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = !!e?.leaseId, o = r ? an : sn, i;
+    let { httpRequest: t } = await Promise.resolve().then(() => (F(), re)), r = !!e?.leaseId, o = r ? ln : cn, i;
     r ? i = { leaseId: e.leaseId } : (i = {
       productId: n.productId ?? "",
-      environment: fo(n.env ?? "prod")
+      environment: _o(n.env ?? "prod")
     }, e?.database !== void 0 && (i.database = e.database));
     let s;
     try {
@@ -702,10 +702,10 @@ function cn(n) {
         `Falha ao ${d} lease SQL: ${p}`
       );
     }
-    return mo(s);
+    return bo(s);
   };
 }
-function mo(n) {
+function bo(n) {
   if (!n || typeof n != "object")
     throw new v("db_unavailable", "Resposta de lease inv\xE1lida (n\xE3o \xE9 objeto).");
   let t = n.lease;
@@ -737,22 +737,22 @@ function mo(n) {
     expiresAt: o("expiresAt", "string")
   };
 }
-function et(n, e, t, r) {
+function nt(n, e, t, r) {
   let o = typeof process < "u" ? process.env?.[n] : void 0;
   if (o === void 0 || o.trim() === "") return e;
   let i = Number.parseInt(o.trim(), 10);
   return !Number.isFinite(i) || i < t || i > r ? e : i;
 }
-function tt() {
+function rt() {
   return {
     // Teto 100: bem abaixo do `max_client_conn = 500` do PgBouncer, com folga
     // para múltiplas instâncias do app dividirem o mesmo front-door.
-    max: et("NEETRU_DB_POOL_MAX", ln, 1, 100),
+    max: nt("NEETRU_DB_POOL_MAX", un, 1, 100),
     // Teto 15min = janela do cert; piso 1s.
-    idleTimeoutMillis: et("NEETRU_DB_POOL_IDLE_MS", dn, 1e3, 9e5),
-    connectionTimeoutMillis: et(
+    idleTimeoutMillis: nt("NEETRU_DB_POOL_IDLE_MS", pn, 1e3, 9e5),
+    connectionTimeoutMillis: nt(
       "NEETRU_DB_POOL_CONNECT_TIMEOUT_MS",
-      un,
+      fn,
       1e3,
       12e4
     ),
@@ -760,7 +760,7 @@ function tt() {
     keepAliveInitialDelayMillis: 1e4
   };
 }
-async function ho(n) {
+async function vo(n) {
   let { Pool: e } = await import(
     /* webpackIgnore: true */
     'pg'
@@ -777,17 +777,17 @@ async function ho(n) {
     user: n.user,
     password: n.password,
     ssl: t,
-    ...tt()
+    ...rt()
   });
 }
-async function go(n, e) {
+async function wo(n, e) {
   let { drizzle: t } = await import(
     /* webpackIgnore: true */
     'drizzle-orm/node-postgres'
   );
   return t(n, { schema: e });
 }
-function yo(n, e) {
+function ko(n, e) {
   let t = null, r = null, o = () => t ? Promise.resolve(t) : (r || (r = e().then((s) => (t = s, r = null, s)).catch((s) => {
     throw r = null, s;
   })), r), i = {
@@ -803,21 +803,21 @@ function yo(n, e) {
   };
   return n && Object.setPrototypeOf(i, n), i;
 }
-async function pn(n, e) {
+async function mn(n, e) {
   let t = e?.database !== void 0 ? { ...n, database: e.database } : n;
   if (t.lazy) {
-    let d = null, p = yo(t.poolPrototype ?? null, () => {
+    let d = null, p = ko(t.poolPrototype ?? null, () => {
       if (!d)
         throw new v("db_unavailable", "SQL client n\xE3o inicializado (manager ausente).");
       return d._ensureInitialLease();
-    }), l = Ye(p), u;
+    }), l = et(p), u;
     try {
       u = t.createDrizzle(l, t.schema);
     } catch (m) {
       let h = m instanceof Error ? m.message : String(m);
       throw new v("db_unavailable", `Falha ao criar handle Drizzle: ${h}`);
     }
-    let f = new se(null, l, u, t);
+    let f = new ae(null, l, u, t);
     return d = f, l.__neetruSetReLease(() => f._reactiveReLease()), f;
   }
   let r;
@@ -835,7 +835,7 @@ async function pn(n, e) {
     let p = d instanceof Error ? d.message : String(d);
     throw new v("db_unavailable", `Falha ao abrir pool: ${p}`);
   }
-  let i = Ye(o), s;
+  let i = et(o), s;
   try {
     s = t.createDrizzle(i, t.schema);
   } catch (d) {
@@ -844,11 +844,11 @@ async function pn(n, e) {
     let p = d instanceof Error ? d.message : String(d);
     throw new v("db_unavailable", `Falha ao criar handle Drizzle: ${p}`);
   }
-  let a = new se(r, i, s, t);
+  let a = new ae(r, i, s, t);
   return i.__neetruSetReLease(() => a._reactiveReLease()), a;
 }
-async function _o(n, e, t) {
-  let r = cn(n), o, i;
+async function So(n, e, t) {
+  let r = dn(n), o, i;
   try {
     o = await import(
       /* webpackIgnore: true */
@@ -864,7 +864,7 @@ async function _o(n, e, t) {
     );
   }
   let s = o.Pool ?? o.default?.Pool;
-  return pn(
+  return mn(
     {
       fetchLease: r,
       createPool: (p) => {
@@ -883,7 +883,7 @@ async function _o(n, e, t) {
           ssl: l,
           // Tuning centralizado (env-tunável) — ver resolvePoolTuning + auditoria
           // docs/_review/AUDITORIA_DB_CONN_PERF_2026-09-06.md no Core.
-          ...tt()
+          ...rt()
         });
       },
       createDrizzle: (p, l) => i.drizzle(p, { schema: l }),
@@ -899,36 +899,36 @@ async function _o(n, e, t) {
     t
   );
 }
-var sn, an, ln, dn, un, mn = W(() => {
-  z();
-  C();
-  on();
-  Ze();
-  sn = "/api/sdk/v1/db/lease", an = "/api/sdk/v1/db/lease/renew";
-  ln = 10, dn = 6e4, un = 1e4;
+var cn, ln, un, pn, fn, gn = W(() => {
+  H();
+  A();
+  an();
+  tt();
+  cn = "/api/sdk/v1/db/lease", ln = "/api/sdk/v1/db/lease/renew";
+  un = 10, pn = 6e4, fn = 1e4;
 });
-var mt = /* @__PURE__ */ new Map(), ee = 3600 * 1e3;
-function ye(n, e = ee) {
-  let t = Date.now(), r = mt.get(n);
+var gt = /* @__PURE__ */ new Map(), te = 3600 * 1e3;
+function _e(n, e = te) {
+  let t = Date.now(), r = gt.get(n);
   if (r && t - r.createdAt < e)
     return r.jwks;
   let o = createRemoteJWKSet(new URL(n));
-  return mt.set(n, { jwks: o, createdAt: t }), o;
+  return gt.set(n, { jwks: o, createdAt: t }), o;
 }
 
 // src/auth.ts
-C();
+A();
 
 // src/api-key.ts
-C();
-var ht = /^nrt_([A-Za-z0-9]+)_([A-Za-z0-9]+)$/;
-function gt(n) {
+A();
+var yt = /^nrt_([A-Za-z0-9]+)_([A-Za-z0-9]+)$/;
+function _t(n) {
   if (typeof n != "string" || n.length === 0)
     throw new c(
       "invalid_config",
       "apiKey is required (formato nrt_<keyId>_<secret>)"
     );
-  let e = ht.exec(n);
+  let e = yt.exec(n);
   if (!e)
     throw new c(
       "invalid_config",
@@ -936,22 +936,22 @@ function gt(n) {
     );
   return { keyId: e[1], secret: e[2] };
 }
-function yt(n) {
+function bt(n) {
   if (typeof n != "string" || n.length === 0) return null;
-  let e = ht.exec(n);
+  let e = yt.exec(n);
   return e ? { keyId: e[1], secret: e[2] } : null;
 }
 
 // src/base-url-allowlist.ts
-C();
-var _t = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), cr = ".neetru.com", lr = "neetru.com", dr = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
-function bt(n) {
-  return dr.test(n);
+A();
+var vt = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1"]), fr = ".neetru.com", mr = "neetru.com", hr = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?\.(test|localhost)$/;
+function wt(n) {
+  return hr.test(n);
 }
-function ur(n) {
+function gr(n) {
   return n.toLowerCase().replace(/\.+$/, "");
 }
-function vt(n, e = []) {
+function kt(n, e = []) {
   if (typeof n != "string" || n.length === 0)
     throw new c("invalid_config", "baseUrl is required");
   let t;
@@ -960,8 +960,8 @@ function vt(n, e = []) {
   } catch {
     throw new c("invalid_config", `baseUrl is not a valid URL: ${n}`);
   }
-  let r = t.protocol, o = ur(t.hostname);
-  if (pr())
+  let r = t.protocol, o = gr(t.hostname);
+  if (yr())
     return typeof console < "u" && console.warn(
       `[neetru-sdk] NEETRU_ALLOW_INSECURE_BASEURL=1 ativo. baseUrl=${n} aceito sem valida\xE7\xE3o.`
     ), n.replace(/\/+$/, "");
@@ -971,17 +971,17 @@ function vt(n, e = []) {
       `baseUrl protocol must be http: or https:, got ${r}`
     );
   if (r === "http:") {
-    if (!(_t.has(o) || bt(o)))
+    if (!(vt.has(o) || wt(o)))
       throw new c(
         "invalid_config",
         `baseUrl with http: only allowed for localhost/127.0.0.1/*.test/*.localhost. Got: ${o}. Use https: or set NEETRU_ALLOW_INSECURE_BASEURL=1 to bypass.`
       );
     return n.replace(/\/+$/, "");
   }
-  let i = o === lr || o.endsWith(cr), s = e.some((d) => {
+  let i = o === mr || o.endsWith(fr), s = e.some((d) => {
     let p = d.toLowerCase();
     return o === p || o.endsWith(`.${p}`);
-  }), a = _t.has(o) || bt(o);
+  }), a = vt.has(o) || wt(o);
   if (!i && !s && !a)
     throw new c(
       "invalid_config",
@@ -989,7 +989,7 @@ function vt(n, e = []) {
     );
   return n.replace(/\/+$/, "");
 }
-function pr() {
+function yr() {
   try {
     let e = globalThis.process?.env?.NEETRU_ALLOW_INSECURE_BASEURL;
     if (e === "1" || e === "true") return !0;
@@ -1004,12 +1004,12 @@ function pr() {
 }
 
 // src/types.ts
-var je = "https://api.neetru.com", wt = "http://localhost:9003";
+var We = "https://api.neetru.com", St = "http://localhost:9003";
 
 // src/catalog.ts
-C();
-q();
-function Lt(n) {
+A();
+F();
+function Mt(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "Catalog response item is not an object");
   let e = n;
@@ -1028,7 +1028,7 @@ function Lt(n) {
     return typeof r.amountCents == "number" && (o.amountCents = r.amountCents), Array.isArray(r.features) && r.features.every((i) => typeof i == "string") && (o.features = r.features), o;
   })), t;
 }
-function Ut(n) {
+function qt(n) {
   return {
     /**
      * Lista produtos publicados. Por default só `published=true`; staff
@@ -1045,7 +1045,7 @@ function Ut(n) {
           "Catalog list response missing products array"
         );
       return {
-        products: t.products.map(Lt),
+        products: t.products.map(Mt),
         fetchedAt: typeof t.fetchedAt == "string" ? t.fetchedAt : (/* @__PURE__ */ new Date()).toISOString()
       };
     },
@@ -1066,32 +1066,32 @@ function Ut(n) {
           "invalid_response",
           "Catalog get response missing product"
         );
-      return Lt(t.product);
+      return Mt(t.product);
     }
   };
 }
 
 // src/entitlements.ts
-C();
-var Ir = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
-function Mt() {
-  throw new c("validation_failed", Ir);
+A();
+var Dr = "client.entitlements.check()/checkDetailed() est\xE3o DEPRECADOS \u2014 apontavam para GET /api/v1/sdk/entitlements/check, um endpoint que o Core nunca escreve (sempre retornava not_subscribed). Use client.usage.check(resource, { productId, tenantId }) no lugar \u2014 mesmo resultado (allowed/reason/remaining/limit/behavior), endpoint real.";
+function Ft() {
+  throw new c("validation_failed", Dr);
 }
-function qt(n) {
+function jt(n) {
   return {
     /**
      * @deprecated Endpoint morto no Core — sempre retornava `not_subscribed`.
      * Lança `NeetruError`. Use `client.usage.check(resource, {productId, tenantId})`.
      */
     async check(e, t, r) {
-      Mt();
+      Ft();
     },
     /**
      * @deprecated Endpoint morto no Core — sempre retornava `not_subscribed`.
      * Lança `NeetruError`. Use `client.usage.check(resource, {productId, tenantId})`.
      */
     async checkDetailed(e, t, r) {
-      Mt();
+      Ft();
     },
     /** Test helper legado — no-op (não há mais cache). Mantido por compat. */
     __resetCache() {
@@ -1100,16 +1100,31 @@ function qt(n) {
 }
 
 // src/telemetry.ts
-C();
-q();
-var Ft = ["debug", "info", "warn", "error", "fatal"];
-function Cr() {
+A();
+F();
+
+// src/runtime-env.ts
+function Be() {
+  try {
+    if (typeof process < "u" && process.env)
+      return process.env.NODE_ENV === "production";
+  } catch {
+  }
+  return false;
+}
+function V(n) {
+  return n === "dev" && !Be();
+}
+
+// src/telemetry.ts
+var Wt = ["debug", "info", "warn", "error", "fatal"];
+function Nr() {
   return typeof globalThis < "u" && typeof globalThis.window < "u";
 }
-function jt() {
-  return Cr() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
+function $t() {
+  return Nr() ? { path: "/api/sdk/v1/telemetry/event/public", requireAuth: false } : { path: "/api/sdk/v1/telemetry/event", requireAuth: true };
 }
-function Ar(n) {
+function xr(n) {
   switch (n) {
     case "debug":
       return console.debug.bind(console);
@@ -1125,8 +1140,8 @@ function Ar(n) {
       return console.log.bind(console);
   }
 }
-var Er = 500, Pr = 50;
-function Wt(n) {
+var Or = 500, Lr = 50;
+function Vt(n) {
   let e = [], t = null, r = null;
   async function o() {
     if (e.length === 0) return;
@@ -1135,7 +1150,7 @@ function Wt(n) {
         try {
           let p = { name: d.name }, l = d.productSlug ?? n.productId;
           l && (p.productSlug = l), d.properties && typeof d.properties == "object" && (p.properties = d.properties), d.timestamp && (p.timestamp = d.timestamp);
-          let u = jt();
+          let u = $t();
           await S(n, {
             method: "POST",
             path: u.path,
@@ -1159,7 +1174,7 @@ function Wt(n) {
   function i() {
     t || (t = setTimeout(() => {
       o();
-    }, Er));
+    }, Or));
   }
   return {
     /**
@@ -1183,7 +1198,7 @@ function Wt(n) {
         throw new c("validation_failed", "event.name max 128 chars");
       let a = { name: s.name }, d = s.productSlug ?? n.productId;
       d && (a.productSlug = d), s.properties && typeof s.properties == "object" && (a.properties = s.properties), s.timestamp && (a.timestamp = s.timestamp);
-      let p = jt(), l = await S(n, {
+      let p = $t(), l = await S(n, {
         method: "POST",
         path: p.path,
         body: a,
@@ -1204,7 +1219,7 @@ function Wt(n) {
      * ```
      */
     track(s) {
-      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= Pr ? (t && (clearTimeout(t), t = null), o()) : i());
+      !s || typeof s != "object" || typeof s.name != "string" || s.name.length === 0 || s.name.length > 128 || (e.push(s), e.length >= Lr ? (t && (clearTimeout(t), t = null), o()) : i());
     },
     /**
      * Força flush imediato da queue de `track()`. Resolva antes de
@@ -1231,14 +1246,14 @@ function Wt(n) {
     async log(s) {
       if (!s || typeof s != "object")
         throw new c("validation_failed", "log input is required");
-      if (!Ft.includes(s.level))
-        throw new c("validation_failed", `level must be one of ${Ft.join(", ")}`);
+      if (!Wt.includes(s.level))
+        throw new c("validation_failed", `level must be one of ${Wt.join(", ")}`);
       if (typeof s.message != "string" || s.message.length === 0)
         throw new c("validation_failed", "message is required");
       if (s.message.length > 4e3)
         throw new c("validation_failed", "message max 4000 chars");
-      if (n.env === "dev")
-        return Ar(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
+      if (V(n.env))
+        return xr(s.level)(`[neetru-sdk] ${s.level}: ${s.message}`, s.metadata ?? {}), { ok: true, mode: "mock" };
       let a = {
         level: s.level,
         message: s.message
@@ -1274,22 +1289,22 @@ function Wt(n) {
 }
 
 // src/usage.ts
-C();
-q();
+A();
+F();
 
 // src/validators.ts
-C();
-var $t = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
+A();
+var Bt = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
 function O(n, e) {
-  if (typeof e != "string" || !$t.test(e))
+  if (typeof e != "string" || !Bt.test(e))
     throw new c(
       "validation_failed",
-      `${n} must match ${$t.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
+      `${n} must match ${Bt.source} (lowercase alphanumeric, _, -; first char must be alphanumeric; max 63 chars)`
     );
 }
 
 // src/usage.ts
-function Vt(n) {
+function Kt(n) {
   return {
     /**
      * Reporta consumo metered de um resource. Hit no endpoint canônico
@@ -1377,10 +1392,10 @@ function Vt(n) {
 }
 
 // src/support.ts
-C();
-q();
-var Ve = ["low", "normal", "high", "urgent"], Dr = ["open", "pending", "resolved", "closed"], Bt = 50;
-function Kt(n) {
+A();
+F();
+var Ke = ["low", "normal", "high", "urgent"], Ur = ["open", "pending", "resolved", "closed"], zt = 50;
+function Ht(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "Ticket response is not an object");
   let e = n;
@@ -1391,8 +1406,8 @@ function Kt(n) {
     id: e.id,
     subject: typeof e.subject == "string" ? e.subject : "",
     message: typeof e.message == "string" ? e.message : "",
-    severity: Ve.includes(e.severity) ? e.severity : "normal",
-    status: Dr.includes(e.status) ? e.status : "open",
+    severity: Ke.includes(e.severity) ? e.severity : "normal",
+    status: Ur.includes(e.status) ? e.status : "open",
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
     updatedAt: typeof e.updatedAt == "string" ? e.updatedAt : void 0,
     productSlug: typeof e.productId == "string" ? e.productId : typeof e.productSlug == "string" ? e.productSlug : void 0,
@@ -1410,15 +1425,15 @@ function Kt(n) {
     satisfactionComment: typeof e.satisfactionComment == "string" ? e.satisfactionComment : null
   };
 }
-function we(n) {
+function ke(n) {
   if (!n || typeof n != "string")
     throw new c("validation_failed", "ticketId is required");
 }
-function zt(n) {
+function Qt(n) {
   if (typeof n == "string" && n.length > 2e3)
     throw new c("validation_failed", "comment max 2000 chars");
 }
-function Ht(n, ...e) {
+function Gt(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return O("productSlug", t), t;
@@ -1429,12 +1444,12 @@ function Ht(n, ...e) {
     "productId required (pass to input.productSlug or set on createNeetruClient)"
   );
 }
-var Nr = "X-Neetru-End-User-Token", xr = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", Or = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", Lr = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Ur = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
-function Gt(n) {
+var Mr = "X-Neetru-End-User-Token", qr = "Esta opera\xE7\xE3o de suporte exige um usu\xE1rio final logado: o Core s\xF3 mostra/altera os tickets do pr\xF3prio usu\xE1rio (header X-Neetru-End-User-Token com o id_token OIDC). Fa\xE7a login com client.auth.signIn() e tente de novo.", Fr = "O Core exige a identidade do usu\xE1rio final para esta opera\xE7\xE3o (403 end_user_token_required) e nenhum id_token foi aceito. Fa\xE7a login com client.auth.signIn() e tente de novo.", jr = "O Core recusou o token do usu\xE1rio final (401 invalid_end_user_token \u2014 sess\xE3o expirada, usu\xE1rio inativo ou token que n\xE3o \xE9 id_token) e a renova\xE7\xE3o autom\xE1tica n\xE3o resolveu. Fa\xE7a login novamente com client.auth.signIn() e tente de novo.", Wr = "O id_token do usu\xE1rio final foi emitido para o client OIDC de OUTRO produto (403 end_user_token_product_mismatch). Confira se o login (client.auth / clientId OIDC) e a apiKey/productId do createNeetruClient s\xE3o do MESMO produto.";
+function Jt(n) {
   if (n instanceof c && !(n instanceof $)) {
     if (n.code === "end_user_token_required")
       throw new $(
-        Or,
+        Fr,
         "end_user_token_required",
         n.status,
         n.requestId,
@@ -1442,7 +1457,7 @@ function Gt(n) {
       );
     if (n.code === "invalid_end_user_token")
       throw new $(
-        Lr,
+        jr,
         "invalid_end_user_token",
         n.status,
         n.requestId,
@@ -1451,7 +1466,7 @@ function Gt(n) {
     if (n.code === "end_user_token_product_mismatch")
       throw new c(
         "forbidden",
-        Ur,
+        Wr,
         n.status,
         n.requestId,
         "end_user_token_product_mismatch",
@@ -1460,10 +1475,10 @@ function Gt(n) {
   }
   throw n;
 }
-function Mr(n) {
+function $r(n) {
   return n instanceof c && n.code === "invalid_end_user_token";
 }
-function Qt(n, e = {}) {
+function Xt(n, e = {}) {
   async function t() {
     try {
       let a = await e.getEndUserToken?.();
@@ -1481,25 +1496,25 @@ function Qt(n, e = {}) {
     }
   }
   function o(a) {
-    return a ? { [Nr]: a } : {};
+    return a ? { [Mr]: a } : {};
   }
   async function i(a, d) {
     let p = await t();
     if (!p && a && await r() && (p = await t()), !p && a)
-      throw new $(xr, "no_signed_in_user");
+      throw new $(qr, "no_signed_in_user");
     try {
       return await d(o(p));
     } catch (l) {
-      if (p && Mr(l) && await r()) {
+      if (p && $r(l) && await r()) {
         let u = await t();
         if (u)
           try {
             return await d(o(u));
           } catch (f) {
-            Gt(f);
+            Jt(f);
           }
       }
-      Gt(l);
+      Jt(l);
     }
   }
   async function s(a, d = {}) {
@@ -1532,13 +1547,13 @@ function Qt(n, e = {}) {
         throw new c("validation_failed", "message is required");
       if (a.message.length > 1e4)
         throw new c("validation_failed", "message max 10000 chars");
-      if (a.severity && !Ve.includes(a.severity))
+      if (a.severity && !Ke.includes(a.severity))
         throw new c(
           "validation_failed",
-          `severity must be one of ${Ve.join(", ")}`
+          `severity must be one of ${Ke.join(", ")}`
         );
       let p = {
-        productId: Ht(n, a.productSlug),
+        productId: Gt(n, a.productSlug),
         subject: a.subject,
         message: a.message,
         severity: a.severity ?? "normal"
@@ -1555,7 +1570,7 @@ function Qt(n, e = {}) {
           headers: f
         })
       ), u = l && typeof l == "object" && "ticket" in l ? l.ticket : l;
-      return Kt(u);
+      return Ht(u);
     },
     /**
      * Lista tickets do customer no produto atual. `productSlug` no contexto.
@@ -1563,11 +1578,11 @@ function Qt(n, e = {}) {
      * Endpoint canonical: `GET /api/sdk/v1/support/tickets?productId=...`.
      */
     async listMyTickets(a) {
-      let d = Ht(n, a?.productSlug), p = a?.limit;
-      if (p !== void 0 && (!Number.isInteger(p) || p < 1 || p > Bt))
+      let d = Gt(n, a?.productSlug), p = a?.limit;
+      if (p !== void 0 && (!Number.isInteger(p) || p < 1 || p > zt))
         throw new c(
           "validation_failed",
-          `limit must be an integer 1-${Bt} (Core default 20)`
+          `limit must be an integer 1-${zt} (Core default 20)`
         );
       let l = await i(
         true,
@@ -1579,7 +1594,7 @@ function Qt(n, e = {}) {
           headers: f
         })
       );
-      return (Array.isArray(l) ? l : l && typeof l == "object" && "tickets" in l ? l.tickets ?? [] : []).map(Kt);
+      return (Array.isArray(l) ? l : l && typeof l == "object" && "tickets" in l ? l.tickets ?? [] : []).map(Ht);
     },
     /**
      * 3.4: marca a notificação de resolução como vista (`resolvedNotifiedAt`,
@@ -1587,7 +1602,7 @@ function Qt(n, e = {}) {
      * `POST /api/sdk/v1/support/tickets/{id}/resolved-seen`.
      */
     async markResolvedSeen(a) {
-      we(a), await s(
+      ke(a), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/resolved-seen`
       );
     },
@@ -1598,7 +1613,7 @@ function Qt(n, e = {}) {
      * `POST /api/sdk/v1/support/tickets/{id}/satisfaction-attempt`.
      */
     async recordSatisfactionAttempt(a) {
-      we(a), await s(
+      ke(a), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/satisfaction-attempt`,
         // Incrementa satisfactionAttempts += 1 no Core — sem idempotencyKey,
         // um retry de rede infla o contador (mesmo padrão de createTicket acima).
@@ -1612,9 +1627,9 @@ function Qt(n, e = {}) {
     async submitSatisfaction(a) {
       if (!a || typeof a != "object")
         throw new c("validation_failed", "input is required");
-      if (we(a.ticketId), a.rating !== null && a.rating !== void 0 && (!Number.isInteger(a.rating) || a.rating < 1 || a.rating > 5))
+      if (ke(a.ticketId), a.rating !== null && a.rating !== void 0 && (!Number.isInteger(a.rating) || a.rating < 1 || a.rating > 5))
         throw new c("validation_failed", "rating must be an integer 1-5 or null");
-      zt(a.comment), await s(
+      Qt(a.comment), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a.ticketId)}/satisfaction`,
         {
           body: {
@@ -1631,7 +1646,7 @@ function Qt(n, e = {}) {
      * `POST /api/sdk/v1/support/tickets/{id}/contest`.
      */
     async contestTicket(a, d) {
-      we(a), zt(d?.comment), await s(
+      ke(a), Qt(d?.comment), await s(
         `/api/sdk/v1/support/tickets/${encodeURIComponent(a)}/contest`,
         { body: { comment: d?.comment ?? void 0 } }
       );
@@ -1640,14 +1655,14 @@ function Qt(n, e = {}) {
 }
 
 // src/db/client-db.ts
-z();
+H();
 
 // src/db/offline/query-engine.ts
-function Jt(n) {
+function Yt(n) {
   return n == null ? 0 : typeof n == "number" ? 1 : typeof n == "string" ? 2 : typeof n == "boolean" ? 3 : 4;
 }
-function re(n, e) {
-  let t = Jt(n), r = Jt(e);
+function oe(n, e) {
+  let t = Yt(n), r = Yt(e);
   if (t !== r) return t - r;
   if (n == null) return 0;
   if (typeof n == "number" && typeof e == "number") return n - e;
@@ -1656,7 +1671,7 @@ function re(n, e) {
   let o = String(n), i = String(e);
   return o < i ? -1 : o > i ? 1 : 0;
 }
-function Be(n, e) {
+function ze(n, e) {
   let t = e.split("."), r = n;
   for (let o of t) {
     if (r == null || typeof r != "object")
@@ -1665,8 +1680,8 @@ function Be(n, e) {
   }
   return r;
 }
-function Fr(n, e) {
-  let t = Be(n, e.field);
+function Br(n, e) {
+  let t = ze(n, e.field);
   if (t === void 0) return false;
   let { op: r, value: o } = e;
   switch (r) {
@@ -1675,13 +1690,13 @@ function Fr(n, e) {
     case "!=":
       return t !== o;
     case "<":
-      return re(t, o) < 0;
+      return oe(t, o) < 0;
     case "<=":
-      return re(t, o) <= 0;
+      return oe(t, o) <= 0;
     case ">":
-      return re(t, o) > 0;
+      return oe(t, o) > 0;
     case ">=":
-      return re(t, o) >= 0;
+      return oe(t, o) >= 0;
     case "array-contains":
       return Array.isArray(t) && t.includes(o);
     case "in":
@@ -1696,24 +1711,24 @@ function Fr(n, e) {
       );
   }
 }
-function jr(n, e) {
-  return e.every((t) => Fr(n, t));
+function Kr(n, e) {
+  return e.every((t) => Br(n, t));
 }
-function Wr(n) {
+function zr(n) {
   return (e, t) => {
     if (n) {
-      let r = Be(e.data, n.field), o = Be(t.data, n.field), i = re(r, o);
+      let r = ze(e.data, n.field), o = ze(t.data, n.field), i = oe(r, o);
       if (i !== 0)
         return n.direction === "desc" ? -i : i;
     }
     return e.id < t.id ? -1 : e.id > t.id ? 1 : 0;
   };
 }
-function $r(n, e) {
+function Hr(n, e) {
   let t = n.findIndex((r) => r.id === e.docId);
   return t === -1 ? n : e.type === "startAfter" ? n.slice(t + 1) : n.slice(0, t);
 }
-var J = class n {
+var X = class n {
   /**
    * Avalia um `QueryDescriptor` contra um array de `OfflineDoc`.
    *
@@ -1727,9 +1742,9 @@ var J = class n {
   evaluate(e, t) {
     let r = e.filter((l) => !l.meta.deleted), o = t.where ?? [];
     o.length > 0 && (r = r.filter(
-      (l) => jr(l.data, o)
+      (l) => Kr(l.data, o)
     ));
-    let i = Wr(t.orderBy), s = [...r].sort(i), a = t.cursor ? $r(s, t.cursor) : s, d = Math.min(t.limit ?? 20, 500);
+    let i = zr(t.orderBy), s = [...r].sort(i), a = t.cursor ? Hr(s, t.cursor) : s, d = Math.min(t.limit ?? 20, 500);
     return {
       docs: a.slice(0, d).map((l) => ({ id: l.id, data: l.data })),
       // `incomplete` é sempre true aqui — o QueryEngine não sabe se o cache
@@ -1749,7 +1764,7 @@ var J = class n {
 };
 
 // src/db/offline/local-store.ts
-var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_meta", X = "conflict_log", Se = class {
+var Gr = 1, B = "documents", K = "mutations", ie = "query_cache", Se = "sync_meta", Y = "conflict_log", Te = class {
   db = null;
   dbName;
   constructor(e) {
@@ -1761,22 +1776,22 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Idempotente — chamadas subsequentes são no-ops se o banco já está aberto.
    */
   async open() {
-    this.db === null && (this.db = await openDB(this.dbName, Br, {
+    this.db === null && (this.db = await openDB(this.dbName, Gr, {
       upgrade(e) {
-        if (!e.objectStoreNames.contains(V)) {
-          let t = e.createObjectStore(V, {
+        if (!e.objectStoreNames.contains(B)) {
+          let t = e.createObjectStore(B, {
             keyPath: ["collection", "id"]
           });
           t.createIndex("by_collection", "collection"), t.createIndex("by_collection_state", ["collection", "meta.state"]), t.createIndex("by_updatedAtServer", "meta.updatedAtServer");
         }
-        if (!e.objectStoreNames.contains(B)) {
-          let t = e.createObjectStore(B, {
+        if (!e.objectStoreNames.contains(K)) {
+          let t = e.createObjectStore(K, {
             keyPath: "mutationId"
           });
           t.createIndex("by_seq", "seq"), t.createIndex("by_status", "status"), t.createIndex("by_doc", ["collection", "docId"]), t.createIndex("by_batch", "batchId");
         }
-        if (e.objectStoreNames.contains(oe) || e.createObjectStore(oe, { keyPath: "queryHash" }), e.objectStoreNames.contains(ke) || e.createObjectStore(ke, { keyPath: "key" }), !e.objectStoreNames.contains(X)) {
-          let t = e.createObjectStore(X, {
+        if (e.objectStoreNames.contains(ie) || e.createObjectStore(ie, { keyPath: "queryHash" }), e.objectStoreNames.contains(Se) || e.createObjectStore(Se, { keyPath: "key" }), !e.objectStoreNames.contains(Y)) {
+          let t = e.createObjectStore(Y, {
             keyPath: "id",
             autoIncrement: true
           });
@@ -1818,14 +1833,14 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Retorna tombstones (deleted: true) — o chamador decide se deve mostrá-los.
    */
   async getDoc(e, t) {
-    return await this.assertOpen().get(V, [e, t]) ?? null;
+    return await this.assertOpen().get(B, [e, t]) ?? null;
   }
   /**
    * Insere ou atualiza um documento na store `documents`.
    * O documento é identificado pelo keyPath composto `[collection, id]`.
    */
   async putDoc(e) {
-    await this.assertOpen().put(V, e);
+    await this.assertOpen().put(B, e);
   }
   /**
    * Marca um documento como tombstone (`deleted: true`).
@@ -1833,8 +1848,8 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * No-op se o documento não existir.
    */
   async deleteDoc(e, t) {
-    let r = this.assertOpen(), o = await r.get(V, [e, t]);
-    o && await r.put(V, {
+    let r = this.assertOpen(), o = await r.get(B, [e, t]);
+    o && await r.put(B, {
       ...o,
       meta: {
         ...o.meta,
@@ -1850,8 +1865,8 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * e delega a filtragem/ordenação/paginação ao QueryEngine (que opera em memória).
    */
   async listDocs(e, t) {
-    let o = await this.assertOpen().getAllFromIndex(V, "by_collection", e);
-    return J.evaluate(o, t);
+    let o = await this.assertOpen().getAllFromIndex(B, "by_collection", e);
+    return X.evaluate(o, t);
   }
   // ─── Sync meta (key-value) ──────────────────────────────────────────────────
   /**
@@ -1862,14 +1877,14 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    *   'lastFullResyncAt', 'leaderTabId'.
    */
   async getMeta(e) {
-    let r = await this.assertOpen().get(ke, e);
+    let r = await this.assertOpen().get(Se, e);
     return r ? r.value : null;
   }
   /**
    * Armazena ou atualiza um valor na store `sync_meta`.
    */
   async setMeta(e, t) {
-    await this.assertOpen().put(ke, { key: e, value: t });
+    await this.assertOpen().put(Se, { key: e, value: t });
   }
   // ─── Conflict log ───────────────────────────────────────────────────────────
   /**
@@ -1877,7 +1892,7 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * O `id` é autoIncrement — não deve ser fornecido pelo chamador.
    */
   async appendConflict(e) {
-    let r = await this.assertOpen().add(X, e);
+    let r = await this.assertOpen().add(Y, e);
     return { ...e, id: r };
   }
   /**
@@ -1885,15 +1900,15 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Filtra por `delivered` se a opção for fornecida.
    */
   async listConflicts(e) {
-    let r = await this.assertOpen().getAll(X);
+    let r = await this.assertOpen().getAll(Y);
     return e?.delivered !== void 0 ? r.filter((o) => o.delivered === e.delivered) : r;
   }
   /**
    * Marca um registro do `conflict_log` como entregue ao produto.
    */
   async markConflictDelivered(e) {
-    let t = this.assertOpen(), r = await t.get(X, e);
-    r && await t.put(X, { ...r, delivered: true });
+    let t = this.assertOpen(), r = await t.get(Y, e);
+    r && await t.put(Y, { ...r, delivered: true });
   }
   // ─── Mutations (acessores usados pelo MutationQueue) ────────────────────────
   /**
@@ -1901,13 +1916,13 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Key: `mutationId`.
    */
   async putMutation(e) {
-    await this.assertOpen().put(B, e);
+    await this.assertOpen().put(K, e);
   }
   /**
    * Retorna uma mutação pelo `mutationId`, ou `null` se não existir.
    */
   async getMutation(e) {
-    return await this.assertOpen().get(B, e) ?? null;
+    return await this.assertOpen().get(K, e) ?? null;
   }
   /**
    * Lista mutações com filtros opcionais.
@@ -1915,14 +1930,14 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    */
   async listMutations(e) {
     let t = this.assertOpen(), r;
-    return e?.status !== void 0 ? r = await t.getAllFromIndex(B, "by_status", e.status) : e?.collection !== void 0 && e.docId !== void 0 ? r = await t.getAllFromIndex(B, "by_doc", [e.collection, e.docId]) : r = await t.getAllFromIndex(B, "by_seq"), r.sort((o, i) => o.seq - i.seq);
+    return e?.status !== void 0 ? r = await t.getAllFromIndex(K, "by_status", e.status) : e?.collection !== void 0 && e.docId !== void 0 ? r = await t.getAllFromIndex(K, "by_doc", [e.collection, e.docId]) : r = await t.getAllFromIndex(K, "by_seq"), r.sort((o, i) => o.seq - i.seq);
   }
   /**
    * Remove uma mutação pelo `mutationId`.
    * No-op se não existir.
    */
   async deleteMutation(e) {
-    await this.assertOpen().delete(B, e);
+    await this.assertOpen().delete(K, e);
   }
   // ─── Collection discovery ────────────────────────────────────────────────────
   /**
@@ -1935,7 +1950,7 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * coletar os valores únicos de forma eficiente (sem carregar os docs completos).
    */
   async listCollections() {
-    let t = await this.assertOpen().getAllFromIndex(V, "by_collection"), r = /* @__PURE__ */ new Set();
+    let t = await this.assertOpen().getAllFromIndex(B, "by_collection"), r = /* @__PURE__ */ new Set();
     for (let o of t)
       r.add(o.collection);
     return Array.from(r);
@@ -1945,24 +1960,24 @@ var Br = 1, V = "documents", B = "mutations", oe = "query_cache", ke = "sync_met
    * Retorna a entrada de `query_cache` para um hash de query, ou `null`.
    */
   async getQueryCache(e) {
-    return await this.assertOpen().get(oe, e) ?? null;
+    return await this.assertOpen().get(ie, e) ?? null;
   }
   /**
    * Insere ou atualiza uma entrada de `query_cache`.
    */
   async putQueryCache(e) {
-    await this.assertOpen().put(oe, e);
+    await this.assertOpen().put(ie, e);
   }
   /**
    * Remove uma entrada de `query_cache` pelo queryHash.
    */
   async deleteQueryCache(e) {
-    await this.assertOpen().delete(oe, e);
+    await this.assertOpen().delete(ie, e);
   }
 };
 
 // src/db/offline/memory-store.ts
-var Te = class {
+var Re = class {
   // store `documents` — key: `${collection}\0${id}`
   _docs = /* @__PURE__ */ new Map();
   // store `mutations` — key: mutationId
@@ -2010,7 +2025,7 @@ var Te = class {
     let r = Array.from(this._docs.values()).filter(
       (o) => o.collection === e
     );
-    return J.evaluate(r, t);
+    return X.evaluate(r, t);
   }
   // ─── Sync meta ──────────────────────────────────────────────────────────────
   async getMeta(e) {
@@ -2067,13 +2082,13 @@ var Te = class {
 };
 
 // src/db/offline/mutation-queue.ts
-function Ke() {
+function He() {
   return typeof crypto < "u" && typeof crypto.randomUUID == "function" ? crypto.randomUUID() : "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (n) => {
     let e = Math.random() * 16 | 0;
     return (n === "x" ? e : e & 3 | 8).toString(16);
   });
 }
-var Re = class {
+var Ie = class {
   store;
   /**
    * Ponteiro de sequência local.
@@ -2169,7 +2184,7 @@ var Re = class {
    * Atômico: a persistência final é uma única operação putMutation.
    */
   async enqueue(e) {
-    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, d = e.docId ?? (r === "add" ? Ke() : "");
+    let { collection: t, op: r, payload: o, baseVersion: i, batchId: s, upsert: a } = e, d = e.docId ?? (r === "add" ? He() : "");
     await this.syncSeq();
     let l = (await this.store.listMutations({ collection: t, docId: d })).filter((m) => m.status === "queued").sort((m, h) => h.seq - m.seq)[0];
     if (l !== void 0) {
@@ -2178,7 +2193,7 @@ var Re = class {
         if ("removed" in m)
           return await this.store.deleteMutation(l.mutationId), {
             seq: l.seq,
-            mutationId: Ke(),
+            mutationId: He(),
             collection: t,
             docId: d,
             op: "remove",
@@ -2196,7 +2211,7 @@ var Re = class {
     }
     let f = {
       seq: this.nextSeq(),
-      mutationId: Ke(),
+      mutationId: He(),
       collection: t,
       docId: d,
       op: r,
@@ -2309,55 +2324,55 @@ var Re = class {
 };
 
 // src/db/field-value.ts
-var ze = "__neetru__";
-function Kr() {
+var Qe = "__neetru__";
+function Jr() {
   return { __neetru__: "serverTimestamp" };
 }
-function zr(n) {
+function Xr(n) {
   if (typeof n != "number" || !Number.isFinite(n))
     throw new TypeError(
       `increment(n): n deve ser um n\xFAmero finito (recebido: ${String(n)}).`
     );
   return { __neetru__: "increment", operand: n };
 }
-function H(n) {
-  return typeof n == "object" && n !== null && ze in n && typeof n[ze] == "string";
+function Q(n) {
+  return typeof n == "object" && n !== null && Qe in n && typeof n[Qe] == "string";
 }
-function Xt(n) {
-  return H(n) && n.__neetru__ === "serverTimestamp";
+function Zt(n) {
+  return Q(n) && n.__neetru__ === "serverTimestamp";
 }
-function Yt(n) {
-  return H(n) && n.__neetru__ === "increment" && typeof n.operand == "number" && Number.isFinite(n.operand);
+function en(n) {
+  return Q(n) && n.__neetru__ === "increment" && typeof n.operand == "number" && Number.isFinite(n.operand);
 }
-function Hr(n, e) {
-  return Xt(n) ? Date.now() : Yt(n) ? (typeof e == "number" && Number.isFinite(e) ? e : 0) + n.operand : n;
+function Yr(n, e) {
+  return Zt(n) ? Date.now() : en(n) ? (typeof e == "number" && Number.isFinite(e) ? e : 0) + n.operand : n;
 }
 function G(n, e) {
   let t = false, r = {};
   for (let [o, i] of Object.entries(n))
-    H(i) ? (t = true, r[o] = Hr(i, e?.[o])) : r[o] = i;
+    Q(i) ? (t = true, r[o] = Yr(i, e?.[o])) : r[o] = i;
   return t ? r : n;
 }
-function He(n) {
+function Ge(n) {
   for (let e of Object.values(n))
-    if (H(e)) return true;
+    if (Q(e)) return true;
   return false;
 }
 
 // src/db/offline/sync-engine.ts
-var Gr = 8, Qr = 1e3, Jr = 300 * 1e3, Ge = "truncatedCollections";
-function Xr(n) {
-  return n !== null && He(n);
+var Zr = 8, eo = 1e3, to = 300 * 1e3, Je = "truncatedCollections";
+function no(n) {
+  return n !== null && Ge(n);
 }
-function Yr(n) {
+function ro(n) {
   if (n === null) return null;
-  if (!He(n)) return n;
+  if (!Ge(n)) return n;
   let e = {};
   for (let [t, r] of Object.entries(n))
-    H(r) || (e[t] = r);
+    Q(r) || (e[t] = r);
   return e;
 }
-var Ie = class {
+var Ce = class {
   _store;
   _queue;
   _resolver;
@@ -2551,13 +2566,13 @@ var Ie = class {
       }), s.push({ type: "removed", collection: e, doc: { id: t, data: a.data } }));
       return;
     }
-    let p = Yr(i.payload) ?? a?.data ?? {}, l = {
+    let p = ro(i.payload) ?? a?.data ?? {}, l = {
       collection: e,
       id: t,
       data: i.op === "update" ? { ...a?.data ?? {}, ...p } : (
         // add/set: se o payload tinha sentinels, o cache otimista (existing.data)
         // é a fonte de verdade até o pull; senão usa o payload literal.
-        Xr(i.payload) ? { ...a?.data ?? {}, ...p } : p
+        no(i.payload) ? { ...a?.data ?? {}, ...p } : p
       ),
       meta: {
         serverVersion: r,
@@ -2710,7 +2725,7 @@ var Ie = class {
    *   pending do doc no cache + registra `lastError`/dispara `onError`.
    */
   async _retryOrDeadLetter(e, t, r) {
-    if (e.attempts + 1 < Gr) {
+    if (e.attempts + 1 < Zr) {
       await this._queue.markRetry(e.mutationId, t);
       return;
     }
@@ -2751,7 +2766,7 @@ var Ie = class {
   }
   /** Backoff exponencial keyed em `attempts`, com teto `BACKOFF_CAP_MS`. */
   _backoffDelayMs(e) {
-    return Math.min(Qr * 2 ** (e - 1), Jr);
+    return Math.min(eo * 2 ** (e - 1), to);
   }
   // ─── FASE 2 — pull (reconciliar o cache) ─────────────────────────────────────
   /**
@@ -2784,7 +2799,7 @@ var Ie = class {
     let r = [];
     await this._applyServerDocs(t.docs, r, true);
     let o = t.truncatedCollections ?? [], i = new Set(o);
-    await this._store.setMeta(Ge, o);
+    await this._store.setMeta(Je, o);
     let s = new Set(
       t.docs.map((a) => `${a.collection}::${a.id}`)
     );
@@ -3003,10 +3018,10 @@ var Ie = class {
 };
 
 // src/db/offline/conflict-resolver.ts
-function Zt(n, e) {
+function tn(n, e) {
   return e === null ? false : n === null ? true : e > n;
 }
-var Ce = class n {
+var Ae = class n {
   /**
    * Resolve um conflito com base na operação da mutação (auto-dispatch).
    *
@@ -3040,7 +3055,7 @@ var Ce = class n {
         resolvedData: t.data,
         conflictRecord: null
       };
-    if (!Zt(
+    if (!tn(
       e.meta.updatedAtServer,
       t.meta.updatedAtServer
     ))
@@ -3087,7 +3102,7 @@ var Ce = class n {
     let i = t.data;
     if (e === null)
       return { outcome: "no_conflict", resolvedData: { ...i, ...r.payload ?? {} }, conflictRecord: null };
-    if (!Zt(
+    if (!tn(
       e.meta.updatedAtServer,
       t.meta.updatedAtServer
     ))
@@ -3165,10 +3180,10 @@ var Ce = class n {
 };
 
 // src/db/offline/change-bus.ts
-function Zr(n) {
+function oo(n) {
   return `${n.collection}::${n.doc.id}`;
 }
-var Ae = class {
+var Ee = class {
   /** Listeners filtrados por coleção. */
   _collectionListeners = /* @__PURE__ */ new Map();
   /** Listeners globais (todas as coleções). */
@@ -3213,7 +3228,7 @@ var Ae = class {
     if (e.length === 0) return;
     let t = /* @__PURE__ */ new Map();
     for (let i of e)
-      t.set(Zr(i), i);
+      t.set(oo(i), i);
     let r = Array.from(t.values()), o = /* @__PURE__ */ new Map();
     for (let i of r)
       o.has(i.collection) || o.set(i.collection, []), o.get(i.collection).push(i);
@@ -3252,7 +3267,7 @@ var Ae = class {
 };
 
 // src/db/offline/connectivity-monitor.ts
-var Ee = class {
+var Pe = class {
   _state;
   _listeners = /* @__PURE__ */ new Set();
   _nav;
@@ -3354,7 +3369,7 @@ var Ee = class {
 };
 
 // src/db/offline/tab-coordinator.ts
-var ie = class {
+var se = class {
   _lockName;
   _channelName;
   _lockManager;
@@ -3531,26 +3546,26 @@ var ie = class {
 };
 
 // src/db/collection-ref.ts
-z();
-function eo() {
+H();
+function io() {
   return typeof indexedDB > "u" || typeof window > "u";
 }
-var en = /^[a-z0-9][a-z0-9_-]{0,62}$/;
-function to(n) {
-  if (!en.test(n))
+var nn = /^[a-z0-9][a-z0-9_-]{0,62}$/;
+function so(n) {
+  if (!nn.test(n))
     throw new v(
       "db_invalid_query",
-      `Nome de cole\xE7\xE3o inv\xE1lido: "${n}". Deve seguir o padr\xE3o ${en}.`
+      `Nome de cole\xE7\xE3o inv\xE1lido: "${n}". Deve seguir o padr\xE3o ${nn}.`
     );
 }
-function Y(n, e = "id") {
+function Z(n, e = "id") {
   if (!n || typeof n != "string" || n.trim() === "")
     throw new v(
       "db_invalid_query",
       `${e} \xE9 obrigat\xF3rio e deve ser uma string n\xE3o-vazia.`
     );
 }
-function no(n) {
+function ao(n) {
   let e = {};
   if (n?.where && (e.where = n.where.map((t) => ({
     field: t.field,
@@ -3567,12 +3582,12 @@ function no(n) {
     }
   return e;
 }
-function ro(n, e) {
+function co(n, e) {
   if (n.length < e) return null;
   let t = n[n.length - 1];
   return t ? btoa(JSON.stringify({ type: "startAfter", docId: t.id })) : null;
 }
-var Qe = class {
+var Xe = class {
   constructor(e, t, r, o, i, s) {
     this._collection = e;
     this._store = t;
@@ -3614,7 +3629,7 @@ var Qe = class {
   }
   /** Constrói um DbListResult para a coleção com query opcional. */
   async _buildListResult(e) {
-    let t = no(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), d = ro(o.docs, r), p = await this._store.getMeta(Ge), l = Array.isArray(p) && p.includes(this._collection), u = !s || a.status === "offline" || l, f = i || a.lastSyncedAt === null || u;
+    let t = ao(e), r = t.limit ?? 20, o = await this._store.listDocs(this._collection, t), i = await this._hasPendingWrites(), s = this._isOnline(), a = this._engine.getSyncState(), d = co(o.docs, r), p = await this._store.getMeta(Je), l = Array.isArray(p) && p.includes(this._collection), u = !s || a.status === "offline" || l, f = i || a.lastSyncedAt === null || u;
     return {
       docs: o.docs.map((m) => ({ id: m.id, data: m.data })),
       nextCursor: d,
@@ -3627,7 +3642,7 @@ var Qe = class {
   }
   // ── CRUD ────────────────────────────────────────────────────────────────────
   async get(e) {
-    return Y(e), this._buildGetResult(e);
+    return Z(e), this._buildGetResult(e);
   }
   async list(e) {
     return this._buildListResult(e);
@@ -3660,7 +3675,7 @@ var Qe = class {
     }]), { ok: true, id: i };
   }
   async set(e, t) {
-    Y(e);
+    Z(e);
     let r = await this._store.getDoc(this._collection, e), o = t, i = G(o, void 0), s = await this._queue.enqueue({
       collection: this._collection,
       docId: e,
@@ -3689,7 +3704,7 @@ var Qe = class {
     }]), { ok: true };
   }
   async update(e, t, r) {
-    Y(e);
+    Z(e);
     let o = await this._store.getDoc(this._collection, e), i = t, s = o?.meta.deleted ? void 0 : o?.data, a = G(i, s), d = o?.meta.deleted ? { ...a } : { ...o?.data ?? {}, ...a }, p = await this._queue.enqueue({
       collection: this._collection,
       docId: e,
@@ -3723,7 +3738,7 @@ var Qe = class {
     }]), { ok: true };
   }
   async remove(e) {
-    Y(e);
+    Z(e);
     let t = await this._store.getDoc(this._collection, e);
     return !t || t.meta.deleted, await this._queue.enqueue({
       collection: this._collection,
@@ -3835,7 +3850,7 @@ var Qe = class {
   }
   // ── Realtime ─────────────────────────────────────────────────────────────────
   onDoc(e, t) {
-    return Y(e), this._buildGetResult(e).then((r) => {
+    return Z(e), this._buildGetResult(e).then((r) => {
       t(r ? r.docs[0]?.data ?? null : null);
     }).catch(() => t(null)), this._bus.subscribe(this._collection, (r) => {
       let o = r.find((i) => i.doc.id === e);
@@ -3894,7 +3909,7 @@ var Qe = class {
     };
   }
   doc(e) {
-    Y(e);
+    Z(e);
     let t = this;
     return {
       get id() {
@@ -3947,7 +3962,7 @@ var Qe = class {
       }
     };
   }
-}, Je = class {
+}, Ye = class {
   _store;
   _queue;
   _bus;
@@ -3957,7 +3972,7 @@ var Qe = class {
     this._store = e.store, this._queue = e.queue, this._bus = e.bus, this._engine = e.engine, this._connectivity = e.connectivity;
   }
   collection(e) {
-    return to(e), new Qe(
+    return so(e), new Xe(
       e,
       this._store,
       this._queue,
@@ -3986,10 +4001,10 @@ var Qe = class {
     return this._engine.onError(e);
   }
 };
-async function tn(n) {
-  let e = eo() ? new Te() : new Se(n.dbName);
+async function rn(n) {
+  let e = io() ? new Re() : new Te(n.dbName);
   await e.open();
-  let t = new Re(e), r = new Ce(), o = new Ae(), i = new Ee({
+  let t = new Ie(e), r = new Ae(), o = new Ee(), i = new Pe({
     // Se startOnline=false, injeta um navigator falso
     navigator: n.startOnline === false ? { onLine: false } : typeof navigator < "u" ? navigator : void 0
   }), s = n.singleTab ? (
@@ -3999,10 +4014,10 @@ async function tn(n) {
       onRoleChange: (d) => () => {
       }
     }
-  ) : new ie({
+  ) : new se({
     lockName: `neetru-offline:${n.dbName}`,
     channelName: `neetru-offline:${n.dbName}`
-  }), a = new Ie({
+  }), a = new Ce({
     store: e,
     queue: t,
     resolver: r,
@@ -4012,7 +4027,7 @@ async function tn(n) {
     connectivity: i,
     periodicSyncIntervalMs: n.periodicSyncIntervalMs ?? 300 * 1e3
   });
-  return i.start(), !n.singleTab && s instanceof ie && s.start(), new Je({
+  return i.start(), !n.singleTab && s instanceof se && s.start(), new Ye({
     store: e,
     queue: t,
     bus: o,
@@ -4022,11 +4037,11 @@ async function tn(n) {
 }
 
 // src/db/realtime/realtime-client.ts
-var oo = 0;
-function nn() {
-  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++oo}-${Math.random().toString(36).slice(2)}`;
+var lo = 0;
+function on() {
+  return typeof globalThis.crypto?.randomUUID == "function" ? globalThis.crypto.randomUUID() : `nrt-sub-${Date.now()}-${++lo}-${Math.random().toString(36).slice(2)}`;
 }
-var Pe = class {
+var De = class {
   // ── configuração ──────────────────────────────────────────────────────────
   _gatewayUrl;
   _wsFactory;
@@ -4064,7 +4079,7 @@ var Pe = class {
   _pendingFrames = [];
   // ── construtor ────────────────────────────────────────────────────────────
   constructor(e) {
-    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? io, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
+    this._gatewayUrl = e.gatewayUrl, this._wsFactory = e.webSocketFactory ?? uo, this._setTimeout = e.setTimeoutFn ?? globalThis.setTimeout.bind(globalThis), this._clearTimeout = e.clearTimeoutFn ?? globalThis.clearTimeout.bind(globalThis), this._backoffBaseMs = e.backoffBaseMs ?? 1e3, this._backoffMaxMs = e.backoffMaxMs ?? 3e4, this._heartbeatIntervalMs = e.heartbeatIntervalMs ?? 25e3, this._ticketProvider = e.ticketProvider, this._dbId = e.dbId, this._connect();
   }
   // ── API pública ───────────────────────────────────────────────────────────
   /**
@@ -4078,8 +4093,8 @@ var Pe = class {
    */
   subscribe(e, t, r) {
     if (this._closed)
-      return nn();
-    let o = nn();
+      return on();
+    let o = on();
     this._subscriptions.set(o, {
       subscriptionId: o,
       collection: e,
@@ -4343,7 +4358,7 @@ var Pe = class {
   _detachHandlers(e) {
     e.onopen = null, e.onmessage = null, e.onclose = null, e.onerror = null;
   }
-}, io = (n) => {
+}, uo = (n) => {
   if (typeof WebSocket > "u")
     throw new Error(
       "[NeetruRealtimeClient] WebSocket n\xE3o dispon\xEDvel neste ambiente. Injete uma implementa\xE7\xE3o via `webSocketFactory` nas op\xE7\xF5es."
@@ -4352,11 +4367,11 @@ var Pe = class {
 };
 
 // src/db/client-db.ts
-var bo = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, Ne = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, hn = 200;
-function vo(n, e, t) {
-  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? wo(e.realtimeGatewayUrl, t, e) : yn(t);
+var To = (n) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}`, xe = (n, e) => `/api/sdk/v1/datastore/${encodeURIComponent(n)}/${encodeURIComponent(e)}`, yn = 200;
+function Ro(n, e, t) {
+  return e._transport ? e._transport : n === "firestore" && e.firestoreTransport ? e.firestoreTransport : n === "nosql-vm" && e.realtimeGatewayUrl ? Io(e.realtimeGatewayUrl, t, e) : bn(t);
 }
-function yn(n) {
+function bn(n) {
   return {
     async pushMutations(e) {
       if (!n)
@@ -4364,34 +4379,34 @@ function yn(n) {
           "db_unavailable",
           "[RestSyncTransport] config n\xE3o dispon\xEDvel \u2014 n\xE3o \xE9 poss\xEDvel enviar ao Core. Inicialize o transporte via createNeetruDb."
         );
-      let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = [], o = n.tenantId ?? n.productId, i = o ? { "x-neetru-tenant": o } : void 0;
+      let { httpRequest: t } = await Promise.resolve().then(() => (F(), re)), r = [], o = n.tenantId ?? n.productId, i = o ? { "x-neetru-tenant": o } : void 0;
       for (let s of e)
         try {
           let a;
           s.op === "add" ? a = await t(n, {
             method: "PUT",
-            path: Ne(s.collection, s.docId),
+            path: xe(s.collection, s.docId),
             body: { data: s.payload ?? {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : s.op === "set" ? a = await t(n, {
             method: "PUT",
-            path: Ne(s.collection, s.docId),
+            path: xe(s.collection, s.docId),
             body: { data: s.payload ?? {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : s.op === "update" ? a = await t(n, {
             method: "PATCH",
-            path: Ne(s.collection, s.docId),
+            path: xe(s.collection, s.docId),
             body: { data: s.payload ?? {}, ...s.upsert ? { upsert: !0 } : {} },
             requireAuth: !0,
             retries: 2,
             headers: i
           }) : a = await t(n, {
             method: "DELETE",
-            path: Ne(s.collection, s.docId),
+            path: xe(s.collection, s.docId),
             requireAuth: !0,
             retries: 2,
             headers: i
@@ -4428,13 +4443,13 @@ function yn(n) {
     async fullResync(e) {
       if (!n)
         return { docs: [], newWatermark: Date.now() };
-      let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne)), r = n.tenantId ?? n.productId, o = r ? { "x-neetru-tenant": r } : void 0, i = Date.now(), s = [], a = [];
+      let { httpRequest: t } = await Promise.resolve().then(() => (F(), re)), r = n.tenantId ?? n.productId, o = r ? { "x-neetru-tenant": r } : void 0, i = Date.now(), s = [], a = [];
       for (let d of e) {
         let p;
         try {
           p = await t(n, {
             method: "GET",
-            path: bo(d),
+            path: To(d),
             requireAuth: !0,
             retries: 2,
             headers: o,
@@ -4442,7 +4457,7 @@ function yn(n) {
             // TRUNCADAS — reportadas em `truncatedCollections` p/ o SyncEngine
             // (a) NÃO rodar deleção-por-ausência e (b) sinalizar
             // `DbListResult.truncated`. Paginação por cursor é tarefa Core (gated).
-            query: { limit: hn }
+            query: { limit: yn }
           });
         } catch (f) {
           let m = f instanceof Error ? f.message : String(f);
@@ -4452,26 +4467,26 @@ function yn(n) {
           );
         }
         let l = p, u = Array.isArray(l?.items) ? l.items : [];
-        u.length >= hn && a.push(d);
+        u.length >= yn && a.push(d);
         for (let f of u) {
           if (!f || typeof f != "object") continue;
           let m = f, h = typeof m.id == "string" ? m.id : null;
           if (!h) continue;
-          let { id: y, ...I } = m, w = i, k = I._updatedAt;
+          let { id: _, ...I } = m, w = i, k = I._updatedAt;
           if (typeof k == "number")
             w = k;
           else if (k !== null && typeof k == "object" && typeof k._seconds == "number")
             w = k._seconds * 1e3;
           else if (typeof k == "string") {
-            let g = Date.parse(k);
-            Number.isNaN(g) || (w = g);
+            let y = Date.parse(k);
+            Number.isNaN(y) || (w = y);
           }
-          let N = `rest_${h}_${w}`;
+          let D = `rest_${h}_${w}`;
           s.push({
             collection: d,
             id: h,
             data: I,
-            serverVersion: N,
+            serverVersion: D,
             serverTimestamp: w,
             deleted: false
           });
@@ -4481,10 +4496,10 @@ function yn(n) {
     }
   };
 }
-function wo(n, e, t) {
-  let r = yn(e), o = new Pe({
+function Io(n, e, t) {
+  let r = bn(e), o = new De({
     gatewayUrl: n,
-    ticketProvider: ko(e, t),
+    ticketProvider: Co(e, t),
     dbId: t.dbId,
     webSocketFactory: t._wsFactory
   });
@@ -4520,9 +4535,9 @@ function wo(n, e, t) {
     }
   };
 }
-function ko(n, e) {
+function Co(n, e) {
   return async () => {
-    let { httpRequest: t } = await Promise.resolve().then(() => (q(), ne));
+    let { httpRequest: t } = await Promise.resolve().then(() => (F(), re));
     return await t(n, {
       method: "POST",
       path: "/api/sdk/v1/db/realtime/ticket",
@@ -4535,21 +4550,21 @@ function ko(n, e) {
     });
   };
 }
-var gn = false;
-function So(n, e) {
-  gn || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (gn = true, console.warn(
+var _n = false;
+function Ao(n, e) {
+  _n || e.dbId && n.env !== "prod" && (typeof window > "u" || typeof console > "u" || typeof console.warn != "function" || (_n = true, console.warn(
     '[neetru/sdk] client.db recebeu `dbId` ("' + e.dbId + '") mas ele N\xC3O roteia nem escopa nada no servidor: as escritas do mundo Documentos (add/set/update/remove/list) SEMPRE caem no datastore gen\xE9rico do Core, escopado s\xF3 por tenant/produto (header x-neetru-tenant). `dbId` apenas nomeia o cache offline LOCAL (IndexedDB). ATEN\xC7\xC3O: usar dbIds distintos no MESMO tenant/produto N\xC3O isola os dados no servidor \u2014 eles se misturam (co-mingling). Veja o JSDoc de NeetruDbOptions.dbId.'
   )));
 }
-function nt(n, e = {}) {
-  So(n, e);
+function ot(n, e = {}) {
+  Ao(n, e);
   let t;
   e.transport !== void 0 ? t = e.transport : e.engine !== void 0 ? (console.warn(
     '[neetru/sdk] NeetruDbOptions.engine est\xE1 depreciado e ser\xE1 removido em v3.0. Use NeetruDbOptions.transport em vez de engine. Valores v\xE1lidos: "rest" | "firestore" | "nosql-vm". Nota: "engine" no SDK configura o TRANSPORTE (REST/Firestore/WebSocket), n\xE3o o storage engine do admin database (firestore-instance, cloud-sql-postgres, \u2026).'
   ), t = e.engine) : t = "rest";
-  let r = vo(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
+  let r = Ro(t, e, n), o = e.dbId ?? "default", i = e.dbName ?? `neetru-db__${n.productId ?? "sdk"}__${o}__${n.env}`, s = null, a = null;
   function d() {
-    return s || (s = tn({
+    return s || (s = rn({
       dbName: i,
       transport: r,
       singleTab: e.singleTab ?? n.env !== "prod"
@@ -4557,15 +4572,15 @@ function nt(n, e = {}) {
   }
   return {
     collection(p) {
-      return a ? a.collection(p) : To(p, d);
+      return a ? a.collection(p) : Eo(p, d);
     },
     async sql(p, l) {
-      if (n.env === "dev")
+      if (V(n.env))
         throw new v(
           "db_unavailable",
           "[SDK] db.sql() n\xE3o dispon\xEDvel em NEETRU_ENV=dev. Use `neetru dev` para subir o container Postgres local."
         );
-      return (await Promise.resolve().then(() => (mn(), fn))).createSqlClientFromConfig(n, p, l);
+      return (await Promise.resolve().then(() => (gn(), hn))).createSqlClientFromConfig(n, p, l);
     },
     get syncState() {
       return a?.syncState ?? {
@@ -4604,7 +4619,7 @@ function nt(n, e = {}) {
     }
   };
 }
-function To(n, e) {
+function Eo(n, e) {
   async function t() {
     return (await e()).collection(n);
   }
@@ -4683,9 +4698,9 @@ function To(n, e) {
 }
 
 // src/checkout.ts
-C();
-q();
-function rt(n, e) {
+A();
+F();
+function it(n, e) {
   let t = n?.accessToken || n?.idToken;
   if (!t || typeof t != "string")
     throw new c(
@@ -4694,7 +4709,7 @@ function rt(n, e) {
     );
   return { requireAuth: false, headers: { authorization: `Bearer ${t}` } };
 }
-function Ro(n) {
+function Po(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "checkout.start response is not an object");
   let e = n;
@@ -4710,7 +4725,7 @@ function Ro(n) {
     requiresKyc: e.requiresKyc === true
   };
 }
-function Io(n) {
+function Do(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "checkout.get response is not an object");
   let e = n, t = e.intent;
@@ -4732,20 +4747,20 @@ function Io(n) {
     isStale: e.isStale === true
   };
 }
-function Co() {
+function No() {
   try {
     return typeof globalThis < "u" && typeof globalThis.window < "u" && typeof globalThis.location < "u" && typeof globalThis.location.assign == "function";
   } catch {
     return false;
   }
 }
-function Ao(n) {
+function xo(n) {
   try {
     globalThis.location.assign(n);
   } catch {
   }
 }
-function Eo(n) {
+function Oo(n) {
   return {
     async start(e) {
       if (!e?.productId)
@@ -4760,7 +4775,7 @@ function Eo(n) {
         callbackUrl: e.callbackUrl
       };
       e.tenantType && (t.targetTenantType = e.tenantType), e.tenantId && (t.targetTenantId = e.tenantId);
-      let { requireAuth: r, headers: o } = rt(
+      let { requireAuth: r, headers: o } = it(
         { accessToken: e.accessToken, idToken: e.idToken },
         "start"
       ), i = await S(n, {
@@ -4770,13 +4785,13 @@ function Eo(n) {
         requireAuth: r,
         headers: o,
         idempotencyKey: true
-      }), s = Ro(i);
-      return e.autoRedirect !== false && Co() && Ao(s.redirectUrl), s;
+      }), s = Po(i);
+      return e.autoRedirect !== false && No() && xo(s.redirectUrl), s;
     },
     async get(e, t) {
       if (!e || typeof e != "string")
         throw new c("validation_failed", "checkout.get: intentId is required");
-      let { requireAuth: r, headers: o } = rt(
+      let { requireAuth: r, headers: o } = it(
         { accessToken: t?.accessToken, idToken: t?.idToken },
         "get"
       ), i = await S(n, {
@@ -4785,12 +4800,12 @@ function Eo(n) {
         requireAuth: r,
         headers: o
       });
-      return Io(i);
+      return Do(i);
     },
     async cancel(e, t) {
       if (!e || typeof e != "string")
         throw new c("validation_failed", "checkout.cancel: intentId is required");
-      let { requireAuth: r, headers: o } = rt(
+      let { requireAuth: r, headers: o } = it(
         { accessToken: t?.accessToken, idToken: t?.idToken },
         "cancel"
       );
@@ -4806,7 +4821,7 @@ function Eo(n) {
     }
   };
 }
-var xe = class {
+var Oe = class {
   intents = /* @__PURE__ */ new Map();
   async start(e) {
     if (!e?.productId)
@@ -4849,14 +4864,14 @@ var xe = class {
     return this.intents.set(e, { ...r, status: "cancelled" }), { ok: true, alreadyCancelled: o };
   }
 };
-function ot(n) {
-  return n.env === "dev" ? new xe() : Eo(n);
+function st(n) {
+  return V(n.env) ? new Oe() : Oo(n);
 }
 
 // src/webhooks.ts
-C();
-q();
-async function bn(n, e, t, r) {
+A();
+F();
+async function wn(n, e, t, r) {
   if (!e || !t) return false;
   let o = e.startsWith("sha256=") ? e.slice(7) : e;
   if (!/^[0-9a-f]+$/i.test(o)) return false;
@@ -4868,8 +4883,8 @@ async function bn(n, e, t, r) {
     );
   let s = new TextEncoder(), a = s.encode(t), d = typeof n == "string" ? s.encode(n) : n, p = d;
   if (r !== void 0) {
-    let y = s.encode(`${r}.`), I = new Uint8Array(y.length + d.length);
-    I.set(y, 0), I.set(d, y.length), p = I;
+    let _ = s.encode(`${r}.`), I = new Uint8Array(_.length + d.length);
+    I.set(_, 0), I.set(d, _.length), p = I;
   }
   let l = await i.importKey(
     "raw",
@@ -4881,14 +4896,14 @@ async function bn(n, e, t, r) {
     "HMAC",
     l,
     p
-  ), f = new Uint8Array(u), m = Do(o.toLowerCase());
+  ), f = new Uint8Array(u), m = Uo(o.toLowerCase());
   if (!m || m.length !== f.length) return false;
   let h = 0;
-  for (let y = 0; y < f.length; y++)
-    h |= f[y] ^ m[y];
+  for (let _ = 0; _ < f.length; _++)
+    h |= f[_] ^ m[_];
   return h === 0;
 }
-async function Po(n, e, t, r = {}) {
+async function Lo(n, e, t, r = {}) {
   let o = r.toleranceMs ?? 3e5, i = (u) => {
     if (typeof e.get == "function")
       return e.get(u);
@@ -4905,9 +4920,9 @@ async function Po(n, e, t, r = {}) {
   if (Math.abs(Date.now() - a) > o)
     return { ok: false, reason: "timestamp_expired" };
   let p = i("x-neetru-signature");
-  return await bn(n, p, t, s) ? { ok: true } : { ok: false, reason: "invalid_signature" };
+  return await wn(n, p, t, s) ? { ok: true } : { ok: false, reason: "invalid_signature" };
 }
-function Do(n) {
+function Uo(n) {
   if (n.length % 2 !== 0) return null;
   let e = new Uint8Array(n.length / 2);
   for (let t = 0; t < e.length; t++) {
@@ -4917,7 +4932,7 @@ function Do(n) {
   }
   return e;
 }
-var vn = [
+var kn = [
   "subscription.activated",
   "subscription.cancelled",
   "subscription.payment_failed",
@@ -4927,7 +4942,7 @@ var vn = [
   "account.reactivated",
   "support.ticket_replied"
 ];
-function _n(n) {
+function vn(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "Webhook response is not an object");
   let e = n;
@@ -4937,7 +4952,7 @@ function _n(n) {
     id: e.id,
     url: typeof e.url == "string" ? e.url : "",
     events: Array.isArray(e.events) ? e.events.filter(
-      (t) => vn.includes(t)
+      (t) => kn.includes(t)
     ) : [],
     hasSecret: e.hasSecret === true,
     status: e.status === "active" || e.status === "degraded" || e.status === "disabled" ? e.status : "active",
@@ -4946,7 +4961,7 @@ function _n(n) {
     createdAt: typeof e.createdAt == "string" ? e.createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
-function wn(n) {
+function Sn(n) {
   if (!n.url || typeof n.url != "string")
     throw new c("validation_failed", "url \xE9 obrigat\xF3ria");
   try {
@@ -4959,12 +4974,12 @@ function wn(n) {
   if (!Array.isArray(n.events) || n.events.length === 0)
     throw new c("validation_failed", "events deve ter pelo menos 1 evento");
   for (let e of n.events)
-    if (!vn.includes(e))
+    if (!kn.includes(e))
       throw new c("validation_failed", `evento desconhecido: ${e}`);
   if (n.secret !== void 0 && n.secret.length < 16)
     throw new c("validation_failed", "secret deve ter \u226516 chars (recomendado 32+)");
 }
-function Oe(n, ...e) {
+function Le(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return O("productId", t), t;
@@ -4975,11 +4990,11 @@ function Oe(n, ...e) {
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function it(n) {
+function at(n) {
   return {
     async register(e) {
-      wn(e);
-      let t = Oe(n, e.productId), r = await S(n, {
+      Sn(e);
+      let t = Le(n, e.productId), r = await S(n, {
         method: "POST",
         path: "/api/sdk/v1/webhooks",
         body: {
@@ -4995,20 +5010,20 @@ function it(n) {
         // dedup TTL 24h (mesmo padrão de usage.report/support.createTicket).
         idempotencyKey: true
       });
-      return _n(r);
+      return vn(r);
     },
     async list(e) {
-      let t = Oe(n, e?.productId), r = await S(n, {
+      let t = Le(n, e?.productId), r = await S(n, {
         method: "GET",
         path: "/api/sdk/v1/webhooks",
         query: { productId: t },
         requireAuth: true
       });
-      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(_n);
+      return (Array.isArray(r?.endpoints) ? r.endpoints : []).map(vn);
     },
     async unregister(e, t) {
       if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
-      let r = Oe(n, t?.productId);
+      let r = Le(n, t?.productId);
       return await S(n, {
         method: "DELETE",
         path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}`,
@@ -5018,7 +5033,7 @@ function it(n) {
     },
     async test(e, t) {
       if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
-      let r = Oe(n, t?.productId), o = await S(n, {
+      let r = Le(n, t?.productId), o = await S(n, {
         method: "POST",
         path: `/api/sdk/v1/webhooks/${encodeURIComponent(e)}/test`,
         query: { productId: r },
@@ -5037,11 +5052,11 @@ function it(n) {
     }
   };
 }
-var ae = class {
+var ce = class {
   endpoints = /* @__PURE__ */ new Map();
   nextId = 1;
   async register(e) {
-    wn(e);
+    Sn(e);
     let t = `mock_wh_${this.nextId++}`, r = {
       id: t,
       url: e.url,
@@ -5068,21 +5083,21 @@ var ae = class {
 };
 
 // src/notifications.ts
-C();
-q();
-var st = [
+A();
+F();
+var ct = [
   "info",
   "success",
   "warning",
   "error"
 ];
-function kn(n) {
+function Tn(n) {
   if (!n || typeof n != "object")
     throw new c("invalid_response", "Notification response is not an object");
   let e = n;
   if (typeof e.id != "string")
     throw new c("invalid_response", "Notification missing id");
-  let t = st.includes(e.severity) ? e.severity : "info";
+  let t = ct.includes(e.severity) ? e.severity : "info";
   return {
     id: e.id,
     userId: typeof e.userId == "string" ? e.userId : "",
@@ -5097,21 +5112,21 @@ function kn(n) {
     dismissedAt: typeof e.dismissedAt == "string" ? e.dismissedAt : void 0
   };
 }
-function Sn(n) {
+function Rn(n) {
   if (!n.userId) throw new c("validation_failed", "userId obrigat\xF3rio");
   if (!n.kind) throw new c("validation_failed", "kind obrigat\xF3rio");
   if (!n.title) throw new c("validation_failed", "title obrigat\xF3rio");
-  if (n.severity && !st.includes(n.severity))
+  if (n.severity && !ct.includes(n.severity))
     throw new c(
       "validation_failed",
-      `severity inv\xE1lida: ${n.severity} (use ${st.join("|")})`
+      `severity inv\xE1lida: ${n.severity} (use ${ct.join("|")})`
     );
   if (n.title.length > 200)
     throw new c("validation_failed", "title m\xE1x 200 chars");
   if (n.body && n.body.length > 2e3)
     throw new c("validation_failed", "body m\xE1x 2000 chars");
 }
-function Le(n, ...e) {
+function Ue(n, ...e) {
   for (let t of e)
     if (typeof t == "string" && t.length > 0)
       return O("productId", t), t;
@@ -5122,12 +5137,12 @@ function Le(n, ...e) {
     "productId required (pass to options/input or set on createNeetruClient)"
   );
 }
-function at(n) {
+function lt(n) {
   return {
     async send(e) {
-      Sn(e);
+      Rn(e);
       let r = {
-        productId: Le(n, e.productId),
+        productId: Ue(n, e.productId),
         userId: e.userId,
         kind: e.kind,
         title: e.title,
@@ -5141,12 +5156,12 @@ function at(n) {
         requireAuth: true,
         idempotencyKey: true
       });
-      return kn(o);
+      return Tn(o);
     },
     async list(e, t) {
       if (!e) throw new c("validation_failed", "userId obrigat\xF3rio");
       let o = {
-        productId: Le(n, t?.productId)
+        productId: Ue(n, t?.productId)
       };
       t?.includeDismissed && (o.includeDismissed = true), t?.onlyUnread && (o.onlyUnread = true), t?.limit && (o.limit = Math.min(Math.max(1, t.limit), 200));
       let i = await S(n, {
@@ -5155,11 +5170,11 @@ function at(n) {
         query: o,
         requireAuth: true
       });
-      return (Array.isArray(i?.notifications) ? i.notifications : []).map(kn);
+      return (Array.isArray(i?.notifications) ? i.notifications : []).map(Tn);
     },
     async markRead(e, t) {
       if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
-      let r = Le(n, t?.productId);
+      let r = Ue(n, t?.productId);
       return await S(n, {
         method: "POST",
         path: `/api/sdk/v1/notifications/${encodeURIComponent(e)}/read`,
@@ -5169,7 +5184,7 @@ function at(n) {
     },
     async dismiss(e, t) {
       if (!e) throw new c("validation_failed", "id obrigat\xF3rio");
-      let r = Le(n, t?.productId);
+      let r = Ue(n, t?.productId);
       return await S(n, {
         method: "POST",
         path: `/api/sdk/v1/notifications/${encodeURIComponent(e)}/dismiss`,
@@ -5179,11 +5194,11 @@ function at(n) {
     }
   };
 }
-var ce = class {
+var le = class {
   notifications = /* @__PURE__ */ new Map();
   nextId = 1;
   async send(e) {
-    if (Sn(e), e.fingerprint) {
+    if (Rn(e), e.fingerprint) {
       let o = Date.now() - 864e5;
       for (let i of this.notifications.values())
         if ((i.metadata ?? {}).fingerprint === e.fingerprint && i.userId === e.userId && new Date(i.createdAt).getTime() > o)
@@ -5220,44 +5235,44 @@ var ce = class {
 };
 
 // src/ai.ts
-C();
-q();
-We();
-var No = "/api/sdk/v1/ai/chat", Tn = 12e4, Ue = 32768, Rn = 32, In = 4194304, Cn = 2048, xo = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, Oo = /^https:\/\/[^\s]+$/, Lo = /* @__PURE__ */ new Set(["low", "high", "auto"]), Uo = /* @__PURE__ */ new Set(["system", "user", "assistant"]), An = 100, En = 128, Pn = 32768, Dn = 0, Nn = 2, xn = 200, On = 20, Ln = 12 * 1024 * 1024, Un = 5e4, Mn = 16, qn = 500, Mo = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), qo = /^[a-zA-Z0-9_-]+$/;
+A();
+F();
+$e();
+var Mo = "/api/sdk/v1/ai/chat", In = 12e4, Me = 32768, Cn = 32, An = 4194304, En = 2048, qo = /^data:image\/(?:png|jpe?g|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/, Fo = /^https:\/\/[^\s]+$/, jo = /* @__PURE__ */ new Set(["low", "high", "auto"]), Wo = /* @__PURE__ */ new Set(["system", "user", "assistant"]), Pn = 100, Dn = 128, Nn = 32768, xn = 0, On = 2, Ln = 200, Un = 20, Mn = 12 * 1024 * 1024, qn = 5e4, Fn = 16, jn = 500, $o = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]), Vo = /^[a-zA-Z0-9_-]+$/;
 function R(n) {
   throw new c("validation_failed", n);
 }
-function Fo(n) {
+function Bo(n) {
   if (n.length === 0 || n.length % 4 !== 0) return false;
   let e = n.endsWith("==") ? 2 : n.endsWith("=") ? 1 : 0;
   return !(e > 0 ? n.slice(0, n.length - e) : n).includes("=");
 }
-function jo(n) {
+function Ko(n) {
   let e = n.indexOf(",");
   if (e === -1) return 0;
   let t = n.slice(e + 1), r = t.endsWith("==") ? 2 : t.endsWith("=") ? 1 : 0;
   return Math.max(0, Math.floor(t.length * 3 / 4) - r);
 }
-function Wo(n) {
+function zo(n) {
   let e = 0, t = 0, r = 0;
   for (let o of n) {
     let i = o?.content;
     if (Array.isArray(i))
       for (let s of i) {
-        if (e++, e > xn)
-          return `ai: total content parts exceeds ${xn} per request`;
+        if (e++, e > Ln)
+          return `ai: total content parts exceeds ${Ln} per request`;
         if (s && typeof s == "object" && s.type === "image_url") {
-          if (t++, t > On)
-            return `ai: total images exceeds ${On} per request`;
+          if (t++, t > Un)
+            return `ai: total images exceeds ${Un} per request`;
           let a = s.image_url?.url;
-          if (typeof a == "string" && a.startsWith("data:") && (r += jo(a), r > Ln))
-            return `ai: aggregate image bytes exceeds ${Ln} per request`;
+          if (typeof a == "string" && a.startsWith("data:") && (r += Ko(a), r > Mn))
+            return `ai: aggregate image bytes exceeds ${Mn} per request`;
         }
       }
   }
   return null;
 }
-function $o(n) {
+function Ho(n) {
   if (n === void 0) return null;
   if (n === null || typeof n != "object")
     return "ai: responseFormat json_schema.schema must be an object";
@@ -5268,11 +5283,11 @@ function $o(n) {
     return "ai: responseFormat json_schema.schema is not serializable";
   }
   if (e === void 0) return "ai: responseFormat json_schema.schema is invalid";
-  if (e.length > Un)
-    return `ai: responseFormat json_schema.schema exceeds ${Un} serialized chars`;
+  if (e.length > qn)
+    return `ai: responseFormat json_schema.schema exceeds ${qn} serialized chars`;
   let t = 0, r = (o, i) => {
-    if (i > Mn)
-      return `ai: responseFormat json_schema.schema exceeds max depth ${Mn}`;
+    if (i > Fn)
+      return `ai: responseFormat json_schema.schema exceeds max depth ${Fn}`;
     if (Array.isArray(o)) {
       for (let s of o) {
         let a = r(s, i + 1);
@@ -5282,10 +5297,10 @@ function $o(n) {
     }
     if (o && typeof o == "object")
       for (let s of Object.getOwnPropertyNames(o)) {
-        if (Mo.has(s))
+        if ($o.has(s))
           return `ai: responseFormat json_schema.schema has forbidden key: ${s}`;
-        if (t++, t > qn)
-          return `ai: responseFormat json_schema.schema exceeds ${qn} keys`;
+        if (t++, t > jn)
+          return `ai: responseFormat json_schema.schema exceeds ${jn} keys`;
         let a = r(o[s], i + 1);
         if (a) return a;
       }
@@ -5293,44 +5308,44 @@ function $o(n) {
   };
   return r(n, 0);
 }
-function Vo(n) {
+function Qo(n) {
   (typeof n != "string" || n.length === 0) && R("ai: image_url.url must be a non-empty string");
   let e = n;
   if (e.startsWith("data:")) {
-    e.length > In && R(`ai: image_url.url (data:) exceeds ${In} chars`), xo.test(e) || R("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
+    e.length > An && R(`ai: image_url.url (data:) exceeds ${An} chars`), qo.test(e) || R("ai: image_url.url data: must be data:image/<png|jpeg|jpg|gif|webp>;base64,<...>");
     let t = e.slice(e.indexOf(",") + 1);
-    Fo(t) || R("ai: image_url.url data: has invalid base64 (length/padding)");
+    Bo(t) || R("ai: image_url.url data: has invalid base64 (length/padding)");
     return;
   }
   if (e.startsWith("https://")) {
-    e.length > Cn && R(`ai: image_url.url (https:) exceeds ${Cn} chars`), Oo.test(e) || R("ai: image_url.url https: is invalid");
+    e.length > En && R(`ai: image_url.url (https:) exceeds ${En} chars`), Fo.test(e) || R("ai: image_url.url https: is invalid");
     return;
   }
   R("ai: image_url.url must be a data:image/...;base64 or https:// URL (other schemes are rejected)");
 }
-function Bo(n, e) {
+function Go(n, e) {
   if (typeof n == "string") {
-    n.length === 0 && R("ai: message content string must be non-empty"), n.length > Ue && R(`ai: message content exceeds ${Ue} chars`);
+    n.length === 0 && R("ai: message content string must be non-empty"), n.length > Me && R(`ai: message content exceeds ${Me} chars`);
     return;
   }
-  (!Array.isArray(n) || n.length === 0) && R("ai: message content must be a non-empty string or array of parts"), n.length > Rn && R(`ai: message content has more than ${Rn} parts`);
+  (!Array.isArray(n) || n.length === 0) && R("ai: message content must be a non-empty string or array of parts"), n.length > Cn && R(`ai: message content has more than ${Cn} parts`);
   for (let t of n) {
     (!t || typeof t != "object") && R("ai: each content part must be an object");
     let r = t.type;
     if (r === "text") {
       let o = t.text;
-      (typeof o != "string" || o.length === 0) && R("ai: text part must have non-empty { text: string }"), o.length > Ue && R(`ai: text part exceeds ${Ue} chars`);
+      (typeof o != "string" || o.length === 0) && R("ai: text part must have non-empty { text: string }"), o.length > Me && R(`ai: text part exceeds ${Me} chars`);
     } else if (r === "image_url") {
       e !== "user" && R(`ai: image_url is only allowed in role 'user' messages (got '${e}')`);
       let o = t.image_url;
-      (!o || typeof o != "object") && R("ai: image_url part must have { image_url: { url } }"), Vo(o.url);
+      (!o || typeof o != "object") && R("ai: image_url part must have { image_url: { url } }"), Qo(o.url);
       let i = o.detail;
-      i !== void 0 && (typeof i != "string" || !Lo.has(i)) && R("ai: image_url.detail must be 'low' | 'high' | 'auto'");
+      i !== void 0 && (typeof i != "string" || !jo.has(i)) && R("ai: image_url.detail must be 'low' | 'high' | 'auto'");
     } else
       R("ai: content part type must be 'text' or 'image_url'");
   }
 }
-function Ko(n) {
+function Jo(n) {
   (!n || typeof n != "object") && R("ai: responseFormat must be an object");
   let e = n.type;
   if (!(e === "text" || e === "json_object")) {
@@ -5338,8 +5353,8 @@ function Ko(n) {
       let t = n.json_schema;
       (!t || typeof t != "object") && R("ai: responseFormat json_schema requires { json_schema: { name } }");
       let r = t, o = r.name;
-      if ((typeof o != "string" || o.length === 0) && R("ai: responseFormat json_schema.name is required"), o.length > 64 && R("ai: responseFormat json_schema.name exceeds 64 chars"), qo.test(o) || R("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && R("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && R("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && R("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
-        let i = $o(r.schema);
+      if ((typeof o != "string" || o.length === 0) && R("ai: responseFormat json_schema.name is required"), o.length > 64 && R("ai: responseFormat json_schema.name exceeds 64 chars"), Vo.test(o) || R("ai: responseFormat json_schema.name must match a-zA-Z0-9_-"), r.description !== void 0 && (typeof r.description != "string" && R("ai: responseFormat json_schema.description must be a string"), r.description.length > 1e3 && R("ai: responseFormat json_schema.description exceeds 1000 chars")), r.strict !== void 0 && typeof r.strict != "boolean" && R("ai: responseFormat json_schema.strict must be a boolean"), r.schema !== void 0) {
+        let i = Ho(r.schema);
         i && R(i);
       }
       return;
@@ -5347,26 +5362,26 @@ function Ko(n) {
     R("ai: responseFormat.type must be 'text' | 'json_object' | 'json_schema'");
   }
 }
-function Fn(n, e, t) {
+function Wn(n, e, t) {
   if (!e || typeof e != "object")
     throw new c("validation_failed", "ai: options object is required");
   if (typeof e.model != "string" || e.model.length === 0)
     throw new c("validation_failed", "ai: model is required");
-  if (e.model.length > En)
-    throw new c("validation_failed", `ai: model exceeds ${En} chars`);
+  if (e.model.length > Dn)
+    throw new c("validation_failed", `ai: model exceeds ${Dn} chars`);
   if (!Array.isArray(e.messages) || e.messages.length === 0)
     throw new c("validation_failed", "ai: messages must be a non-empty array");
-  if (e.messages.length > An)
-    throw new c("validation_failed", `ai: messages exceeds ${An} per request`);
+  if (e.messages.length > Pn)
+    throw new c("validation_failed", `ai: messages exceeds ${Pn} per request`);
   for (let a of e.messages) {
-    if (!a || typeof a != "object" || typeof a.role != "string" || !Uo.has(a.role))
+    if (!a || typeof a != "object" || typeof a.role != "string" || !Wo.has(a.role))
       throw new c(
         "validation_failed",
         "ai: each message role must be 'system' | 'user' | 'assistant'"
       );
-    Bo(a.content, a.role);
+    Go(a.content, a.role);
   }
-  let r = Wo(e.messages);
+  let r = zo(e.messages);
   if (r) throw new c("validation_failed", r);
   let o = e.productId ?? n.productId, i = e.tenantId ?? n.tenantId;
   if (!o)
@@ -5388,24 +5403,24 @@ function Fn(n, e, t) {
     stream: t
   };
   if (e.maxTokens !== void 0) {
-    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > Pn)
+    if (!Number.isInteger(e.maxTokens) || e.maxTokens <= 0 || e.maxTokens > Nn)
       throw new c(
         "validation_failed",
-        `ai: maxTokens must be a positive integer <= ${Pn}`
+        `ai: maxTokens must be a positive integer <= ${Nn}`
       );
     s.maxTokens = e.maxTokens;
   }
   if (e.temperature !== void 0) {
-    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < Dn || e.temperature > Nn)
+    if (typeof e.temperature != "number" || !Number.isFinite(e.temperature) || e.temperature < xn || e.temperature > On)
       throw new c(
         "validation_failed",
-        `ai: temperature must be a finite number between ${Dn} and ${Nn}`
+        `ai: temperature must be a finite number between ${xn} and ${On}`
       );
     s.temperature = e.temperature;
   }
-  return e.responseFormat !== void 0 && (Ko(e.responseFormat), s.responseFormat = e.responseFormat), s;
+  return e.responseFormat !== void 0 && (Jo(e.responseFormat), s.responseFormat = e.responseFormat), s;
 }
-async function Vn(n) {
+async function Kn(n) {
   try {
     let e = await n.text();
     return e ? JSON.parse(e) : void 0;
@@ -5413,32 +5428,32 @@ async function Vn(n) {
     return;
   }
 }
-function zo(n, e) {
+function Xo(n, e) {
   let t = n.replace(/\/+$/, ""), r = e.startsWith("/") ? e : `/${e}`;
   return `${t}${r}`;
 }
-async function jn(n, e, t, r) {
+async function $n(n, e, t, r) {
   if (!n.apiKey)
     throw new c(
       "missing_api_key",
       "ai requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var."
     );
-  let o = zo(n.baseUrl, No), { headers: i, correlationId: s } = _e({
+  let o = Xo(n.baseUrl, Mo), { headers: i, correlationId: s } = be({
     "content-type": "application/json",
     accept: r ? "text/event-stream" : "application/json",
     authorization: `Bearer ${n.apiKey}`
   }), a = { method: "POST", headers: i, body: JSON.stringify(e) };
-  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(Tn);
+  r ? t && (a.signal = t) : a.signal = t ?? AbortSignal.timeout(In);
   let d;
   try {
     d = await n.fetch(o, a);
   } catch (u) {
-    let f = u instanceof DOMException && u.name === "TimeoutError" ? `Network error: timeout after ${Tn / 1e3}s` : u instanceof DOMException && u.name === "AbortError" ? "Network error: request aborted" : `Network error: ${u instanceof Error ? u.message : "fetch failed"}`;
+    let f = u instanceof DOMException && u.name === "TimeoutError" ? `Network error: timeout after ${In / 1e3}s` : u instanceof DOMException && u.name === "AbortError" ? "Network error: request aborted" : `Network error: ${u instanceof Error ? u.message : "fetch failed"}`;
     throw new c("network_error", f, void 0, void 0, void 0, s);
   }
   let p = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
   if (!d.ok) {
-    let u = await Vn(d), f = ve(d.status), m = `HTTP ${d.status}`;
+    let u = await Kn(d), f = we(d.status), m = `HTTP ${d.status}`;
     if (u && typeof u == "object" && "error" in u) {
       let h = u.error;
       typeof h == "string" ? m = h : h && typeof h == "object" && (typeof h.code == "string" && (f = h.code), typeof h.message == "string" && (m = h.message));
@@ -5446,15 +5461,15 @@ async function jn(n, e, t, r) {
     throw new c(f, m, d.status, p, void 0, s);
   }
   let l = d.headers.get("x-neetru-version");
-  return l && te(l), d;
+  return l && ne(l), d;
 }
-function Wn(n) {
+function Vn(n) {
   return {
     provider: n.headers.get("x-neetru-provider") ?? "",
     usageWarning: n.headers.get("x-neetru-ai-usage-warning") === "1"
   };
 }
-function $n(n) {
+function Bn(n) {
   let e = [];
   for (let r of n.split(`
 `)) {
@@ -5475,10 +5490,10 @@ function $n(n) {
     return null;
   }
 }
-function ct(n) {
+function dt(n) {
   return {
     async chat(e) {
-      let t = Fn(n, e, false), r = await jn(n, t, e.signal, false), { provider: o, usageWarning: i } = Wn(r), s = await Vn(r);
+      let t = Wn(n, e, false), r = await $n(n, t, e.signal, false), { provider: o, usageWarning: i } = Vn(r), s = await Kn(r);
       if (!s || s.ok !== true || !Array.isArray(s.choices))
         throw new c("invalid_response", "ai.chat response missing ok/choices");
       return {
@@ -5490,7 +5505,7 @@ function ct(n) {
       };
     },
     stream(e) {
-      let t = Fn(n, e, true), r = jn(n, t, e.signal, true), o = r.then(Wn);
+      let t = Wn(n, e, true), r = $n(n, t, e.signal, true), o = r.then(Vn);
       o.catch(() => {
       });
       async function* i() {
@@ -5507,16 +5522,16 @@ function ct(n) {
             for (; (h = l.indexOf(`
 
 `)) !== -1; ) {
-              let y = l.slice(0, h);
+              let _ = l.slice(0, h);
               l = l.slice(h + 2);
-              let I = $n(y);
+              let I = Bn(_);
               if (I && "done" in I) return;
               I && "content" in I && (yield I.content);
             }
           }
           let u = l.trim();
           if (u) {
-            let f = $n(u);
+            let f = Bn(u);
             f && "content" in f && (yield f.content);
           }
         } finally {
@@ -5539,20 +5554,8 @@ function ct(n) {
 }
 
 // src/mocks.ts
-z();
-C();
-
-// src/runtime-env.ts
-function Me() {
-  try {
-    if (typeof process < "u" && process.env)
-      return process.env.NODE_ENV === "production";
-  } catch {
-  }
-  return false;
-}
-
-// src/mocks.ts
+H();
+A();
 var qe = Object.freeze({
   uid: "dev-fixture-uid-0001",
   email: "dev@neetru.local",
@@ -5560,12 +5563,12 @@ var qe = Object.freeze({
   displayName: "Dev Fixture",
   isCustomer: true,
   isStaff: false
-}), le = class {
+}), de = class {
   _user;
   _listeners;
   _allowUnsignedDecode;
   constructor(e = null, t) {
-    if (this._user = e, this._listeners = /* @__PURE__ */ new Set(), this._allowUnsignedDecode = t?.allowUnsignedDecode ?? false, this._allowUnsignedDecode && Me())
+    if (this._user = e, this._listeners = /* @__PURE__ */ new Set(), this._allowUnsignedDecode = t?.allowUnsignedDecode ?? false, this._allowUnsignedDecode && Be())
       throw new c(
         "invalid_config",
         "MockAuth com allowUnsignedDecode=true \xE9 PROIBIDO em produ\xE7\xE3o (NODE_ENV=production): decodificar JWT sem verificar assinatura \xE9 bypass de autentica\xE7\xE3o. Este modo existe exclusivamente para testes."
@@ -5578,7 +5581,7 @@ var qe = Object.freeze({
     return this._user || (this._user = { ...qe }), this._notify(), this._user;
   }
   async signOut() {
-    this._user = null, this._notify();
+    return this._user = null, this._notify(), { localSessionCleared: true, remoteRevocation: "skipped" };
   }
   getUser() {
     return this._user;
@@ -5696,7 +5699,7 @@ var qe = Object.freeze({
       } catch {
       }
   }
-}, de = class {
+}, ue = class {
   _reports = [];
   _quotas;
   _counters = /* @__PURE__ */ new Map();
@@ -5758,7 +5761,7 @@ var qe = Object.freeze({
   __reset() {
     this._reports = [], this._quotas.clear(), this._counters.clear();
   }
-}, ue = class {
+}, pe = class {
   _tickets = [];
   _ticketSeq = 0;
   async createTicket(e) {
@@ -5835,7 +5838,7 @@ var qe = Object.freeze({
   __reset() {
     this._tickets = [], this._ticketSeq = 0;
   }
-}, pe = class {
+}, fe = class {
   _denied = /* @__PURE__ */ new Set();
   async check(e, t) {
     return !this._denied.has(`${e}:${t}`);
@@ -5857,7 +5860,7 @@ var qe = Object.freeze({
   __reset() {
     this._denied.clear();
   }
-}, lt = class {
+}, ut = class {
   _store = /* @__PURE__ */ new Map();
   _fixtures;
   constructor(e = {}) {
@@ -5923,9 +5926,9 @@ var qe = Object.freeze({
           (m) => l.where.every((h) => i(m, h))
         )), l?.orderBy) {
           let { field: m, direction: h } = l.orderBy;
-          u = u.slice().sort((y, I) => {
-            let w = y[m], k = I[m], N = w ?? "", g = k ?? "", _ = N < g ? -1 : N > g ? 1 : 0;
-            return h === "desc" ? -_ : _;
+          u = u.slice().sort((_, I) => {
+            let w = _[m], k = I[m], D = w ?? "", y = k ?? "", b = D < y ? -1 : D > y ? 1 : 0;
+            return h === "desc" ? -b : b;
           });
         }
         let f = l?.limit ?? 20;
@@ -6044,11 +6047,11 @@ var qe = Object.freeze({
       ), h = await f.PGlite.create();
       for (let w of r)
         await h.query(w);
-      let y = m.drizzle(h, { schema: e });
+      let _ = m.drizzle(h, { schema: e });
       return {
-        orm: y,
+        orm: _,
         async transaction(w, k) {
-          return await y.transaction(w);
+          return await _.transaction(w);
         },
         async close() {
           h.closed || await h.close();
@@ -6078,8 +6081,8 @@ var qe = Object.freeze({
     let d = s.adapters.createPg().Pool, p = new d(), l = p.query.bind(p);
     p.query = (f, ...m) => {
       if (f !== null && typeof f == "object") {
-        let y = f.types;
-        y !== null && typeof y == "object" && "getTypeParser" in y && delete y.getTypeParser;
+        let _ = f.types;
+        _ !== null && typeof _ == "object" && "getTypeParser" in _ && delete _.getTypeParser;
       }
       return l(f, ...m);
     };
@@ -6123,7 +6126,7 @@ var qe = Object.freeze({
   __reset() {
     this._store.clear();
   }
-}, fe = class {
+}, me = class {
   _calls = [];
   /** Extrai texto de um content string OU array multimodal (imagens ignoradas). */
   _contentToText(e) {
@@ -6170,9 +6173,30 @@ var qe = Object.freeze({
   }
 };
 
+// src/timeout.ts
+function zn(n) {
+  let e = globalThis.AbortSignal;
+  if (typeof e?.timeout == "function")
+    return { signal: e.timeout(n), clear: () => {
+    } };
+  if (typeof globalThis.AbortController != "function")
+    return { signal: void 0, clear: () => {
+    } };
+  let t = new AbortController(), r = setTimeout(() => t.abort(), n);
+  return r.unref?.(), { signal: t.signal, clear: () => clearTimeout(r) };
+}
+function Hn(n, e, t) {
+  let r, o = new Promise((i) => {
+    r = setTimeout(() => i(t()), e), r.unref?.();
+  });
+  return Promise.race([n, o]).finally(() => {
+    r !== void 0 && clearTimeout(r);
+  });
+}
+
 // src/auth-pkce-shared.ts
-C();
-function Bn() {
+A();
+function Qn() {
   let n = globalThis.crypto;
   if (!n || typeof n.getRandomValues != "function" || !n.subtle)
     throw new c(
@@ -6181,36 +6205,36 @@ function Bn() {
     );
   return n;
 }
-function Kn(n) {
+function Gn(n) {
   let e = "";
   for (let r of n) e += String.fromCharCode(r);
   return (typeof btoa == "function" ? btoa(e) : Buffer.from(e, "binary").toString("base64")).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function Fe(n, e) {
   let t = new Uint8Array(e);
-  return n.getRandomValues(t), Kn(t);
+  return n.getRandomValues(t), Gn(t);
 }
-async function zn(n, e) {
+async function Jn(n, e) {
   let t = new TextEncoder().encode(e), r = await n.subtle.digest("SHA-256", t);
-  return Kn(new Uint8Array(r));
+  return Gn(new Uint8Array(r));
 }
-function me(n) {
+function he(n) {
   return (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.replace(/^https?:\/\/api\./, "https://auth.");
 }
-function Hn(n) {
+function Xn(n) {
   let e = n.oidcClientId;
-  if (!e && n.apiKey && (e = gt(n.apiKey).keyId), !e)
+  if (!e && n.apiKey && (e = _t(n.apiKey).keyId), !e)
     throw new c(
       "invalid_config",
       "auth OIDC requer `oidcClientId` (ou `apiKey`) configurado para montar o client_id."
     );
   return e;
 }
-function Gn(n) {
+function Yn(n) {
   let e = new URL("/api/v1/oauth/authorize", n.idpOrigin);
   return e.searchParams.set("response_type", "code"), e.searchParams.set("client_id", n.clientId), e.searchParams.set("redirect_uri", n.redirectUri), e.searchParams.set("scope", n.scope), e.searchParams.set("state", n.state), e.searchParams.set("nonce", n.nonce), e.searchParams.set("code_challenge", n.codeChallenge), e.searchParams.set("code_challenge_method", "S256"), e;
 }
-function dt(n) {
+function pt(n) {
   let e = n.split(".");
   if (e.length !== 3) return null;
   try {
@@ -6220,8 +6244,8 @@ function dt(n) {
     return null;
   }
 }
-function he(n) {
-  let e = dt(n);
+function ge(n) {
+  let e = pt(n);
   return !e || typeof e.sub != "string" || typeof e.exp == "number" && e.exp * 1e3 < Date.now() ? null : {
     uid: e.sub,
     email: typeof e.email == "string" ? e.email : "",
@@ -6234,9 +6258,9 @@ function he(n) {
     ...e
   };
 }
-var Ho = "/api/v1/oauth/revoke";
-async function Qn(n, e, t, r) {
-  let o = `${e}${Ho}`, i = true;
+var Yo = "/api/v1/oauth/revoke";
+async function Zn(n, e, t, r) {
+  let o = `${e}${Yo}`, i = true;
   for (let s of r) {
     if (!s.token) continue;
     let a = new URLSearchParams({
@@ -6260,17 +6284,17 @@ async function Qn(n, e, t, r) {
 }
 
 // src/auth.ts
-be();
+ve();
 
 // src/end-user-token.ts
-var Go = /* @__PURE__ */ new WeakMap();
-function Jn(n, e) {
-  Go.set(n, e);
+var Zo = /* @__PURE__ */ new WeakMap();
+function er(n, e) {
+  Zo.set(n, e);
 }
 
 // src/unsupported-db.ts
-C();
-var Qo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", Jo = /* @__PURE__ */ new Set([
+A();
+var ei = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O app n\xE3o acessa o banco do produto diretamente: chame a API do SEU produto (ex.: https://<produto>.neetru.com/api/v1) com o access_token do usu\xE1rio (Authorization: Bearer) \u2014 o backend do produto usa client.db no servidor. (At\xE9 a 3.7.x o db ca\xEDa em mem\xF3ria em sil\xEAncio e os dados sumiam ao fechar o app.)", ti = /* @__PURE__ */ new Set([
   "then",
   "toJSON",
   "valueOf",
@@ -6279,13 +6303,13 @@ var Qo = "[Neetru SDK] client.db n\xE3o est\xE1 dispon\xEDvel em React Native. O
   "asymmetricMatch",
   "nodeType"
 ]);
-function Xn() {
+function tr() {
   let n = () => {
-    throw new c("runtime_unsupported", Qo, void 0, void 0, "react-native");
+    throw new c("runtime_unsupported", ei, void 0, void 0, "react-native");
   }, e = {};
   return new Proxy(e, {
     get(t, r) {
-      if (!(typeof r == "symbol" || Jo.has(r)))
+      if (!(typeof r == "symbol" || ti.has(r)))
         return r === "toString" ? () => "[NeetruDb indispon\xEDvel em React Native]" : n;
     },
     set() {
@@ -6295,7 +6319,7 @@ function Xn() {
 }
 
 // src/auth.ts
-function Yo() {
+function ri() {
   try {
     let e = globalThis.process?.env?.NEETRU_API_KEY;
     return typeof e == "string" && e.length > 0 ? e : void 0;
@@ -6303,7 +6327,7 @@ function Yo() {
     return;
   }
 }
-function Zo(n) {
+function oi(n) {
   if (n) return n;
   try {
     let t = globalThis.process?.env?.NEETRU_ENV;
@@ -6317,8 +6341,8 @@ function Zo(n) {
   }
   return "prod";
 }
-var ei = ye;
-function ti(n) {
+var ii = _e;
+function si(n) {
   let e = n.sub ?? "", t = typeof n.email == "string" ? n.email : "";
   return {
     uid: e,
@@ -6333,8 +6357,8 @@ function ti(n) {
     ...n
   };
 }
-var ge = "neetru_oauth_tx";
-function ut(n) {
+var ye = "neetru_oauth_tx";
+function ft(n) {
   try {
     let e = globalThis.history;
     if (!e || typeof e.replaceState != "function") return;
@@ -6345,7 +6369,7 @@ function ut(n) {
   } catch {
   }
 }
-function ni(n) {
+function ai(n) {
   let e = "neetru_id_token", t = "neetru_refresh_token", r = /* @__PURE__ */ new Set(), o = null, i = null, s = null;
   function a() {
     try {
@@ -6363,21 +6387,21 @@ function ni(n) {
   }
   function p() {
     if (o) {
-      let b = o.exp;
-      return typeof b == "number" && b * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), l(), y(), null) : o;
+      let g = o.exp;
+      return typeof g == "number" && g * 1e3 < Date.now() ? (o = null, a()?.removeItem(e), l(), _(), null) : o;
     }
-    let g = a();
-    if (!g) return null;
-    let _ = g.getItem(e);
-    if (!_)
-      return y(), null;
-    let T = he(_);
-    return T ? (o = T, I(T), o) : (g.removeItem(e), y(), null);
+    let y = a();
+    if (!y) return null;
+    let b = y.getItem(e);
+    if (!b)
+      return _(), null;
+    let T = ge(b);
+    return T ? (o = T, I(T), o) : (y.removeItem(e), _(), null);
   }
   function l() {
-    for (let g of r)
+    for (let y of r)
       try {
-        g(o);
+        y(o);
       } catch {
       }
   }
@@ -6389,70 +6413,75 @@ function ni(n) {
   }
   function m() {
     o = null;
-    let g = a();
-    g?.removeItem(e), g?.removeItem(t), l();
+    let y = a();
+    y?.removeItem(e), y?.removeItem(t), l();
   }
   function h() {
-    return s || (s = (async () => {
-      let g = f();
-      if (!g) return false;
-      let _;
+    if (s) return s;
+    let y = false, b = (async () => {
+      let T = f();
+      if (!T) return false;
+      let g;
       try {
-        _ = w();
+        g = w();
       } catch {
         return false;
       }
-      let b = `${me(n.baseUrl)}/api/v1/oauth/token`, E = new URLSearchParams({
+      let x = `${he(n.baseUrl)}/api/v1/oauth/token`, L = new URLSearchParams({
         grant_type: "refresh_token",
-        refresh_token: g,
-        client_id: _
-      }), x;
+        refresh_token: T,
+        client_id: g
+      }), { signal: P, clear: q } = zn(15e3), E;
       try {
-        x = await n.fetch(b, {
+        E = await n.fetch(x, {
           method: "POST",
           headers: { "content-type": "application/x-www-form-urlencoded" },
-          body: E.toString()
+          body: L.toString(),
+          signal: P
         });
       } catch {
         return false;
+      } finally {
+        q();
       }
-      let D = null;
+      let U = null;
       try {
-        D = await x.json();
+        U = await E.json();
       } catch {
-        D = null;
+        U = null;
       }
-      if (!x.ok || typeof D?.error == "string") return false;
-      let A = D?.id_token;
-      if (typeof A != "string" || A.length === 0) return false;
-      let L = he(A);
-      if (!L) return false;
-      let P = a();
-      P?.setItem(e, A);
-      let M = D?.refresh_token;
-      return typeof M == "string" && M.length > 0 && P?.setItem(t, M), o = L, I(L), l(), true;
-    })().finally(() => {
+      if (!E.ok || typeof U?.error == "string") return false;
+      let M = U?.id_token;
+      if (typeof M != "string" || M.length === 0) return false;
+      let j = ge(M);
+      if (!j || y) return false;
+      let N = a();
+      N?.setItem(e, M);
+      let je = U?.refresh_token;
+      return typeof je == "string" && je.length > 0 && N?.setItem(t, je), o = j, I(j), l(), true;
+    })();
+    return s = Hn(b, 15e3, () => (y = true, false)).finally(() => {
       s = null;
-    }), s);
+    }), s;
   }
-  function y() {
-    f() && h().then((g) => {
-      g || m();
+  function _() {
+    f() && h().then((y) => {
+      y || m();
     });
   }
-  function I(g) {
+  function I(y) {
     u();
-    let _ = g.exp;
-    if (typeof _ != "number") return;
-    let T = _ * 1e3 - Date.now();
+    let b = y.exp;
+    if (typeof b != "number") return;
+    let T = b * 1e3 - Date.now();
     if (!(T <= 0)) {
       if (f()) {
-        let b = Math.min(T, Math.max(3e4, T * 0.2)), E = Math.max(1, T - b);
+        let g = Math.min(T, Math.max(3e4, T * 0.2)), C = Math.max(1, T - g);
         i = setTimeout(() => {
           i = null, h().then((x) => {
             x || m();
           });
-        }, E);
+        }, C);
         return;
       }
       i = setTimeout(() => {
@@ -6461,140 +6490,140 @@ function ni(n) {
     }
   }
   function w() {
-    return Hn(n);
+    return Xn(n);
   }
-  async function k(g) {
-    let _ = g ?? (typeof globalThis.location < "u" ? globalThis.location.href : void 0);
-    if (!_) return null;
+  async function k(y) {
+    let b = y ?? (typeof globalThis.location < "u" ? globalThis.location.href : void 0);
+    if (!b) return null;
     let T;
     try {
-      T = new URL(_);
+      T = new URL(b);
     } catch {
       return null;
     }
-    let b = T.searchParams, E = b.get("error");
-    if (E) {
-      let M = b.get("error_description") ?? E;
-      throw d()?.removeItem(ge), ut(T), new c(E, `OIDC authorize falhou: ${M}`);
+    let g = T.searchParams, C = g.get("error");
+    if (C) {
+      let U = g.get("error_description") ?? C;
+      throw d()?.removeItem(ye), ft(T), new c(C, `OIDC authorize falhou: ${U}`);
     }
-    let x = b.get("code");
+    let x = g.get("code");
     if (!x) return null;
-    let D = b.get("state"), A = d(), L = A?.getItem(ge) ?? null, P = null;
-    if (L)
+    let L = g.get("state"), P = d(), q = P?.getItem(ye) ?? null, E = null;
+    if (q)
       try {
-        P = JSON.parse(L);
+        E = JSON.parse(q);
       } catch {
-        P = null;
+        E = null;
       }
-    if (!P)
+    if (!E)
       throw new c(
         "oidc_state_mismatch",
         "Callback OIDC sem transa\xE7\xE3o pendente \u2014 `signIn` n\xE3o foi iniciado nesta sess\xE3o (ou j\xE1 consumido)."
       );
-    if (!D || D !== P.state)
-      throw A?.removeItem(ge), ut(T), new c(
+    if (!L || L !== E.state)
+      throw P?.removeItem(ye), ft(T), new c(
         "oidc_state_mismatch",
         "state do callback OIDC n\xE3o confere com o da transa\xE7\xE3o (poss\xEDvel CSRF)."
       );
-    return A?.removeItem(ge), ut(T), {
+    return P?.removeItem(ye), ft(T), {
       code: x,
-      codeVerifier: P.codeVerifier,
-      redirectUri: P.redirectUri,
-      nonce: P.nonce,
-      state: P.state,
-      postLoginRedirect: P.postLoginRedirect
+      codeVerifier: E.codeVerifier,
+      redirectUri: E.redirectUri,
+      nonce: E.nonce,
+      state: E.state,
+      postLoginRedirect: E.postLoginRedirect
     };
   }
-  async function N(g) {
-    let _ = await k(g);
-    if (!_) return null;
-    let T = w(), E = `${me(n.baseUrl)}/api/v1/oauth/token`, x = new URLSearchParams({
+  async function D(y) {
+    let b = await k(y);
+    if (!b) return null;
+    let T = w(), C = `${he(n.baseUrl)}/api/v1/oauth/token`, x = new URLSearchParams({
       grant_type: "authorization_code",
-      code: _.code,
-      redirect_uri: _.redirectUri,
+      code: b.code,
+      redirect_uri: b.redirectUri,
       client_id: T,
-      code_verifier: _.codeVerifier
-    }), D;
+      code_verifier: b.codeVerifier
+    }), L;
     try {
-      D = await n.fetch(E, {
+      L = await n.fetch(C, {
         method: "POST",
         headers: { "content-type": "application/x-www-form-urlencoded" },
         body: x.toString()
       });
-    } catch (U) {
+    } catch (N) {
       throw new c(
         "network_error",
-        `POST ${E} falhou (network): ${U?.message ?? String(U)}`
+        `POST ${C} falhou (network): ${N?.message ?? String(N)}`
       );
     }
-    let A = null;
+    let P = null;
     try {
-      A = await D.json();
+      P = await L.json();
     } catch {
-      A = null;
+      P = null;
     }
-    if (!D.ok || typeof A?.error == "string") {
-      let U = typeof A?.error_description == "string" && A.error_description || typeof A?.error == "string" && A.error || `HTTP ${D.status}`;
+    if (!L.ok || typeof P?.error == "string") {
+      let N = typeof P?.error_description == "string" && P.error_description || typeof P?.error == "string" && P.error || `HTTP ${L.status}`;
       throw new c(
         "token_exchange_failed",
-        `Troca do authorization_code por tokens falhou no /token: ${U}`,
-        D.status
+        `Troca do authorization_code por tokens falhou no /token: ${N}`,
+        L.status
       );
     }
-    let L = A?.id_token;
-    if (typeof L != "string" || L.length === 0)
+    let q = P?.id_token;
+    if (typeof q != "string" || q.length === 0)
       throw new c(
         "token_exchange_failed",
         "Resposta do /token sem `id_token` \u2014 o login n\xE3o pode ser completado.",
-        D.status
+        L.status
       );
-    let P = dt(L);
-    if (!P)
+    let E = pt(q);
+    if (!E)
       throw new c(
         "token_exchange_failed",
         "id_token retornado pelo /token \xE9 malformado (payload indecodific\xE1vel)."
       );
-    if (P.nonce !== _.nonce)
+    if (E.nonce !== b.nonce)
       throw new c(
         "oidc_nonce_mismatch",
         "nonce do id_token n\xE3o confere com o da transa\xE7\xE3o OIDC (poss\xEDvel replay). Token descartado."
       );
-    let M = he(L);
-    if (!M)
+    let U = ge(q);
+    if (!U)
       throw new c(
         "token_exchange_failed",
         "id_token retornado pelo /token n\xE3o tem `sub` ou j\xE1 est\xE1 expirado."
       );
-    let F = a();
-    F?.setItem(e, L);
-    let j = A?.refresh_token;
-    return typeof j == "string" && j.length > 0 && F?.setItem(t, j), o = M, I(M), l(), { user: M, postLoginRedirect: _.postLoginRedirect };
+    let M = a();
+    M?.setItem(e, q);
+    let j = P?.refresh_token;
+    return typeof j == "string" && j.length > 0 && M?.setItem(t, j), o = U, I(U), l(), { user: U, postLoginRedirect: b.postLoginRedirect };
   }
   return {
-    async signIn(g) {
+    async signIn(y) {
       if (typeof globalThis.location < "u" && typeof globalThis.location.assign == "function") {
-        let _ = Bn(), T = g?.redirectUri ?? globalThis.location.origin, b = g?.scope ?? "openid profile email", E = w(), x = Fe(_, 16), D = Fe(_, 16), A = Fe(_, 32), L = await zn(_, A), P = d();
-        if (!P)
+        let b = Qn(), T = y?.redirectUri ?? globalThis.location.origin, g = y?.scope ?? "openid profile email", C = w(), x = Fe(b, 16), L = Fe(b, 16), P = Fe(b, 32), q = await Jn(b, P), E = d();
+        if (!E)
           throw new c(
             "runtime_unsupported",
             "auth.signIn requer sessionStorage para guardar a transa\xE7\xE3o PKCE entre o redirect e o callback."
           );
-        let M = {
+        let U = {
           state: x,
-          nonce: D,
-          codeVerifier: A,
+          nonce: L,
+          codeVerifier: P,
           redirectUri: T,
-          postLoginRedirect: g?.postLoginRedirect
+          postLoginRedirect: y?.postLoginRedirect
         };
-        P.setItem(ge, JSON.stringify(M));
-        let F = me(n.baseUrl), j = Gn({
-          idpOrigin: F,
-          clientId: E,
+        E.setItem(ye, JSON.stringify(U));
+        let M = he(n.baseUrl), j = Yn({
+          idpOrigin: M,
+          clientId: C,
           redirectUri: T,
-          scope: b,
+          scope: g,
           state: x,
-          nonce: D,
-          codeChallenge: L
+          nonce: L,
+          codeChallenge: q
         });
         globalThis.location.assign(j.toString());
         return;
@@ -6605,78 +6634,90 @@ function ni(n) {
       );
     },
     handleRedirectCallback: k,
-    completeSignIn: N,
+    completeSignIn: D,
     // 3.7.0: exposto pro client.support renovar a sessão 1x num 401
     // invalid_end_user_token (mesma função do refresh proativo, com dedup).
     refreshTokens: h,
     getIdToken() {
-      let _ = a()?.getItem(e) ?? null;
-      return _ && he(_) ? _ : null;
+      let b = a()?.getItem(e) ?? null;
+      return b && ge(b) ? b : null;
     },
     async signOut() {
-      let g = a(), _ = g?.getItem(t) ?? null;
-      if (g && (g.removeItem(e), g.removeItem(t)), u(), o = null, _) {
-        let T = null;
+      let y = a(), b = y?.getItem(t) ?? null, T = true;
+      if (y)
+        for (let C of [e, t])
+          try {
+            y.removeItem(C);
+          } catch {
+            T = false;
+          }
+      u(), o = null;
+      let g = "skipped";
+      if (b) {
+        let C = null;
         try {
-          T = w();
+          C = w();
         } catch {
-          T = null;
+          C = null;
         }
-        !(T && await Qn(n.fetch, me(n.baseUrl), T, [
-          { token: _, hint: "refresh_token" }
-        ])) && typeof console < "u" && console.warn(
-          "[neetru-sdk] signOut: a revoga\xE7\xE3o do refresh_token no servidor n\xE3o foi confirmada. A sess\xE3o local foi encerrada, mas o refresh_token pode seguir v\xE1lido at\xE9 expirar."
+        C ? g = await Zn(
+          n.fetch,
+          he(n.baseUrl),
+          C,
+          [{ token: b, hint: "refresh_token" }]
+        ) ? "accepted" : "failed" : g = "not_configured", g !== "accepted" && typeof console < "u" && console.warn(
+          "[neetru-sdk] signOut: a revoga\xE7\xE3o do refresh_token no servidor n\xE3o foi confirmada (" + g + "). A sess\xE3o local foi encerrada, mas o refresh_token pode seguir v\xE1lido at\xE9 expirar. Trate o campo remoteRevocation do SignOutResult no produto."
         );
       }
-      l();
+      return l(), { localSessionCleared: T, remoteRevocation: g };
     },
     getUser() {
       return p();
     },
-    onAuthStateChanged(g) {
-      r.add(g);
+    onAuthStateChanged(y) {
+      r.add(y);
       try {
-        g(p());
+        y(p());
       } catch {
       }
       return () => {
-        r.delete(g);
+        r.delete(y);
       };
     },
-    async verifyToken(g, _) {
-      if (!g || typeof g != "string")
+    async verifyToken(y, b) {
+      if (!y || typeof y != "string")
         throw new c("token_invalid_signature", "token must be a non-empty string");
-      let b = (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.baseUrl.replace(/^https?:\/\/api\./, "https://auth."), E = b, x = `${b}/api/v1/oauth/.well-known/jwks`, D = _?.jwksCacheTtlMs ?? ee, A = _?.audience, L = yt(n.apiKey), P = A ?? n.oidcClientId ?? L?.keyId;
-      if (!P)
+      let g = (typeof globalThis.NEETRU_AUTH_URL == "string" ? globalThis.NEETRU_AUTH_URL : null) ?? n.baseUrl.replace(/^https?:\/\/api\./, "https://auth."), C = g, x = `${g}/api/v1/oauth/.well-known/jwks`, L = b?.jwksCacheTtlMs ?? te, P = b?.audience, q = bt(n.apiKey), E = P ?? n.oidcClientId ?? q?.keyId;
+      if (!E)
         throw new c(
           "invalid_config",
           "verifyToken requires an audience: provide oidcClientId/apiKey on the client or pass options.audience. Calling jwtVerify without an audience allows tokens issued for other OIDC clients to pass."
         );
-      let M = ei(x, D);
+      let U = ii(x, L);
       try {
-        let { payload: F } = await jwtVerify(g, M, {
-          issuer: E,
-          audience: P,
+        let { payload: M } = await jwtVerify(y, U, {
+          issuer: C,
+          audience: E,
           algorithms: ["RS256"]
         });
-        return ti(F);
-      } catch (F) {
-        let j = F?.code ?? F?.name ?? "", U = F?.message ?? String(F);
-        throw j === "ERR_JWT_EXPIRED" ? new c("token_expired", `Token expired: ${U}`) : j === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" ? new c("token_invalid_signature", `Token signature invalid: ${U}`) : j === "ERR_JWT_CLAIM_VALIDATION_FAILED" ? U.includes('"aud"') || U.includes("audience") ? new c("token_invalid_audience", `Token audience mismatch: ${U}`) : U.includes('"iss"') || U.includes("issuer") ? new c("token_invalid_issuer", `Token issuer mismatch: ${U}`) : new c("token_invalid_signature", `Token claim validation failed: ${U}`) : new c("token_invalid_signature", `Token verification failed: ${U}`);
+        return si(M);
+      } catch (M) {
+        let j = M?.code ?? M?.name ?? "", N = M?.message ?? String(M);
+        throw j === "ERR_JWT_EXPIRED" ? new c("token_expired", `Token expired: ${N}`) : j === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" ? new c("token_invalid_signature", `Token signature invalid: ${N}`) : j === "ERR_JWT_CLAIM_VALIDATION_FAILED" ? N.includes('"aud"') || N.includes("audience") ? new c("token_invalid_audience", `Token audience mismatch: ${N}`) : N.includes('"iss"') || N.includes("issuer") ? new c("token_invalid_issuer", `Token issuer mismatch: ${N}`) : new c("token_invalid_signature", `Token claim validation failed: ${N}`) : new c("token_invalid_signature", `Token verification failed: ${N}`);
       }
     }
   };
 }
-function Yn(n = {}) {
+function rr(n = {}) {
   let e = n.fetch ?? globalThis.fetch;
   if (typeof e != "function")
     throw new c(
       "invalid_config",
       "fetch is not available in this runtime. Pass `fetch` explicitly to createNeetruClient."
     );
-  let t = n.apiKey ?? Yo();
-  At({ hasApiKey: !!t, strict: n.strictServerOnlyKey === true });
-  let r = Zo(n.env), o = n.baseUrl ?? (r === "dev-local" ? wt : je), i = vt(o, n.allowedHosts ?? []), s = Object.freeze({
+  let t = n.apiKey ?? ri();
+  Pt({ hasApiKey: !!t, strict: n.strictServerOnlyKey === true });
+  let r = oi(n.env), o = n.baseUrl ?? (r === "dev-local" ? St : We), i = kt(o, n.allowedHosts ?? []), s = Object.freeze({
     apiKey: t,
     oidcClientId: n.oidcClientId,
     baseUrl: i,
@@ -6684,44 +6725,44 @@ function Yn(n = {}) {
     env: r,
     productId: n.productId,
     tenantId: n.tenantId
-  }), a = r === "dev" && !Me(), d = n.mocks?.auth ?? (a ? new le({ ...qe }) : ni(s)), p = n.mocks?.usage ?? (a ? new de() : Vt(s)), l = n.endUserAuth ?? d, u = n.mocks?.support ?? (a ? new ue() : Qt(s, {
+  }), a = V(r), d = n.mocks?.auth ?? (a ? new de({ ...qe }) : ai(s)), p = n.mocks?.usage ?? (a ? new ue() : Kt(s)), l = n.endUserAuth ?? d, u = n.mocks?.support ?? (a ? new pe() : Xt(s, {
     getEndUserToken: () => l.getIdToken(),
     // `refreshTokens` é opcional (MockAuth/mocks próprios omitem).
     refreshEndUserToken: (() => {
       let k = l.refreshTokens;
       return typeof k == "function" ? () => k.call(l) : void 0;
     })()
-  })), f = n.mocks?.entitlements ?? (a ? new pe() : qt()), m = n.mocks?.db ?? (Q() === "react-native" ? Xn() : nt(s, n.db)), h = n.mocks?.webhooks ?? (a ? new ae() : it(s)), y = n.mocks?.notifications ?? (a ? new ce() : at(s)), I = n.mocks?.ai ?? (a ? new fe() : ct(s)), w = Object.freeze({
+  })), f = n.mocks?.entitlements ?? (a ? new fe() : jt()), m = n.mocks?.db ?? (J() === "react-native" ? tr() : ot(s, n.db)), h = n.mocks?.webhooks ?? (a ? new ce() : at(s)), _ = n.mocks?.notifications ?? (a ? new le() : lt(s)), I = n.mocks?.ai ?? (a ? new me() : dt(s)), w = Object.freeze({
     config: s,
     auth: d,
-    catalog: Ut(s),
+    catalog: qt(s),
     entitlements: f,
-    telemetry: Wt(s),
+    telemetry: Vt(s),
     usage: p,
     support: u,
     db: m,
-    checkout: ot(s),
+    checkout: st(s),
     webhooks: h,
-    notifications: y,
+    notifications: _,
     ai: I
   });
-  return n.endUserAuth && Jn(w, n.endUserAuth), w;
+  return n.endUserAuth && er(w, n.endUserAuth), w;
 }
-var pt = /* @__PURE__ */ Symbol.for("@neetru/sdk:serverClient");
-function ri(n = {}) {
+var mt = /* @__PURE__ */ Symbol.for("@neetru/sdk:serverClient");
+function ci(n = {}) {
   let e = globalThis;
-  return e[pt] || (e[pt] = Yn(n)), e[pt];
+  return e[mt] || (e[mt] = rr(n)), e[mt];
 }
 
 // src/index.ts
-C();
-z();
-q();
+A();
+H();
+F();
 
 // src/access-token.ts
-C();
-var er = "https://auth.neetru.com", ii = "/api/v1/oauth/.well-known/jwks";
-function tr(n) {
+A();
+var ir = "https://auth.neetru.com", di = "/api/v1/oauth/.well-known/jwks";
+function sr(n) {
   let e = (Array.isArray(n) ? n : [n]).filter(
     (t) => typeof t == "string" && t.trim().length > 0
   );
@@ -6732,17 +6773,17 @@ function tr(n) {
     );
   return e;
 }
-var Zn = "O token apresentado n\xE3o \xE9 um access_token (parece um id_token). Mande o access_token no Authorization.";
-function K(n, e) {
+var or = "O token apresentado n\xE3o \xE9 um access_token (parece um id_token). Mande o access_token no Authorization.";
+function z(n, e) {
   return new c("token_invalid", n, 401, void 0, e);
 }
-async function nr(n, e) {
-  let t = tr(e?.audience);
+async function ar(n, e) {
+  let t = sr(e?.audience);
   if (typeof n != "string" || n.length === 0)
-    throw K("access_token ausente.", "missing_token");
+    throw z("access_token ausente.", "missing_token");
   if (n.split(".").length !== 3)
-    throw K("O token n\xE3o \xE9 um JWT (access_token OIDC esperado).", "not_a_jwt");
-  let r = (e.issuer ?? er).replace(/\/+$/, ""), o = e.jwksUrl ?? `${r}${ii}`, i = Math.min(Math.max(e.clockToleranceSec ?? 5, 0), 60), s = ye(o, e.jwksCacheTtlMs ?? ee), a;
+    throw z("O token n\xE3o \xE9 um JWT (access_token OIDC esperado).", "not_a_jwt");
+  let r = (e.issuer ?? ir).replace(/\/+$/, ""), o = e.jwksUrl ?? `${r}${di}`, i = Math.min(Math.max(e.clockToleranceSec ?? 5, 0), 60), s = _e(o, e.jwksCacheTtlMs ?? te), a;
   try {
     ({ payload: a } = await jwtVerify(n, s, {
       issuer: r,
@@ -6752,18 +6793,18 @@ async function nr(n, e) {
       requiredClaims: ["sub", "exp", "iat", "jti"]
     }));
   } catch (w) {
-    let k = w?.code ?? "", N = w?.message ?? String(w);
+    let k = w?.code ?? "", D = w?.message ?? String(w);
     if (k === "ERR_JWT_EXPIRED")
       throw new c("token_expired", "access_token expirado.", 401, void 0, "expired");
     if (k === "ERR_JWT_CLAIM_VALIDATION_FAILED") {
-      let _ = w?.claim;
-      throw _ === "aud" ? new c(
+      let b = w?.claim;
+      throw b === "aud" ? new c(
         "token_invalid_audience",
         "access_token emitido para um client OIDC que n\xE3o est\xE1 na lista desta API.",
         401,
         void 0,
         "audience"
-      ) : _ === "iss" ? new c("token_invalid_issuer", "access_token de outro emissor.", 401, void 0, "issuer") : _ === "jti" ? K(Zn, "not_access_token") : K(`Claim obrigat\xF3rio ausente ou inv\xE1lido no access_token (${_ ?? "desconhecido"}).`, "claims");
+      ) : b === "iss" ? new c("token_invalid_issuer", "access_token de outro emissor.", 401, void 0, "issuer") : b === "jti" ? z(or, "not_access_token") : z(`Claim obrigat\xF3rio ausente ou inv\xE1lido no access_token (${b ?? "desconhecido"}).`, "claims");
     }
     throw k === "ERR_JWS_SIGNATURE_VERIFICATION_FAILED" || k === "ERR_JWKS_NO_MATCHING_KEY" || k === "ERR_JOSE_ALG_NOT_ALLOWED" || k === "ERR_JWKS_MULTIPLE_MATCHING_KEYS" ? new c(
       "token_invalid_signature",
@@ -6771,21 +6812,21 @@ async function nr(n, e) {
       401,
       void 0,
       "signature"
-    ) : k === "ERR_JWKS_TIMEOUT" || k === "ERR_JOSE_GENERIC" && /JSON Web Key Set/i.test(N) || k === "" && w instanceof TypeError ? new c("network_error", `Falha ao obter o JWKS do Core: ${N}`, void 0, void 0, "jwks") : K(`access_token inv\xE1lido: ${N}`, "malformed");
+    ) : k === "ERR_JWKS_TIMEOUT" || k === "ERR_JOSE_GENERIC" && /JSON Web Key Set/i.test(D) || k === "" && w instanceof TypeError ? new c("network_error", `Falha ao obter o JWKS do Core: ${D}`, void 0, void 0, "jwks") : z(`access_token inv\xE1lido: ${D}`, "malformed");
   }
   let d = a.jti, p = a.scope, l = a.client_id;
   if (typeof d != "string" || d.length === 0 || typeof p != "string" || typeof l != "string")
-    throw K(Zn, "not_access_token");
+    throw z(or, "not_access_token");
   let u = a.aud, f = typeof u == "string" ? u : Array.isArray(u) && u.length === 1 ? u[0] : void 0;
   if (typeof f != "string" || f !== l)
-    throw K("access_token inconsistente: client_id difere do aud.", "client_id_mismatch");
+    throw z("access_token inconsistente: client_id difere do aud.", "client_id_mismatch");
   let m = typeof a.sub == "string" ? a.sub : "", h = m.startsWith("client:");
   if (!m || h && e.allowClientCredentials !== true)
-    throw K(
+    throw z(
       "access_token de m\xE1quina (client_credentials) n\xE3o representa um usu\xE1rio final.",
       "client_credentials"
     );
-  let y = p.split(" ").filter(Boolean), I = (e.requiredScopes ?? []).filter((w) => !y.includes(w));
+  let _ = p.split(" ").filter(Boolean), I = (e.requiredScopes ?? []).filter((w) => !_.includes(w));
   if (I.length > 0)
     throw new c(
       "insufficient_scope",
@@ -6798,7 +6839,7 @@ async function nr(n, e) {
     sub: m,
     clientId: l,
     audience: f,
-    scopes: y,
+    scopes: _,
     jti: d,
     issuedAt: a.iat,
     expiresAt: a.exp,
@@ -6806,7 +6847,7 @@ async function nr(n, e) {
     claims: a
   };
 }
-function rr(n, e) {
+function cr(n, e) {
   let t = e.toLowerCase(), r = n && typeof n == "object" && "headers" in n && n.headers ? n.headers : n;
   if (!r || typeof r != "object") return null;
   if (typeof r.get == "function")
@@ -6816,14 +6857,14 @@ function rr(n, e) {
       return Array.isArray(i) ? typeof i[0] == "string" ? i[0] : null : typeof i == "string" ? i : null;
   return null;
 }
-function or(n) {
-  let e = rr(n, "authorization");
+function lr(n) {
+  let e = cr(n, "authorization");
   if (!e) return null;
   let t = /^\s*Bearer\s+(\S+)\s*$/i.exec(e);
   return t ? t[1] : null;
 }
-function ir(n, e) {
-  let t = rr(n, "cookie");
+function dr(n, e) {
+  let t = cr(n, "cookie");
   if (!t) return null;
   for (let r of t.split(";")) {
     let o = r.indexOf("=");
@@ -6837,13 +6878,13 @@ function ir(n, e) {
   }
   return null;
 }
-async function si(n, e) {
-  tr(e?.audience);
-  let t = or(n);
+async function ui(n, e) {
+  sr(e?.audience);
+  let t = lr(n);
   if (t)
-    return { kind: "access_token", token: await nr(t, e) };
+    return { kind: "access_token", token: await ar(t, e) };
   if (e.cookie) {
-    let r = ir(n, e.cookie.name);
+    let r = dr(n, e.cookie.name);
     if (r) {
       let o = await e.cookie.verify(r);
       if (o != null) return { kind: "cookie", session: o };
@@ -6851,7 +6892,7 @@ async function si(n, e) {
   }
   return null;
 }
-function ai(n) {
+function pi(n) {
   if (n instanceof c) {
     if (n.code === "insufficient_scope")
       return {
@@ -6883,7 +6924,7 @@ function ai(n) {
 }
 
 // src/index.ts
-be();
-var Da = "3.8.1";
+ve();
+var Wa = "3.9.1";
 
-export { je as DEFAULT_BASE_URL, qe as DEV_FIXTURE_USER, fe as MockAi, le as MockAuth, xe as MockCheckout, lt as MockDb, pe as MockEntitlements, ce as MockNotifications, ue as MockSupport, de as MockUsage, ae as MockWebhooks, er as NEETRU_OIDC_ISSUER, ze as NEETRU_SENTINEL_KEY, $ as NeetruAuthRequiredError, v as NeetruDbError, c as NeetruError, Da as VERSION, ai as accessTokenErrorToHttp, si as authenticateProductRequest, te as checkCoreVersionCompat, ct as createAiNamespace, ot as createCheckoutNamespace, Yn as createNeetruClient, nt as createNeetruDb, at as createNotificationsNamespace, it as createWebhooksNamespace, Q as detectNonServerRuntime, ri as getServerNeetruClient, zr as increment, H as isFieldSentinel, Yt as isIncrementSentinel, Xt as isServerTimestampSentinel, or as readBearerToken, ir as readCookie, Kr as serverTimestamp, nr as verifyAccessToken, Po as verifyWebhookRequest, bn as verifyWebhookSignature };
+export { We as DEFAULT_BASE_URL, qe as DEV_FIXTURE_USER, me as MockAi, de as MockAuth, Oe as MockCheckout, ut as MockDb, fe as MockEntitlements, le as MockNotifications, pe as MockSupport, ue as MockUsage, ce as MockWebhooks, ir as NEETRU_OIDC_ISSUER, Qe as NEETRU_SENTINEL_KEY, $ as NeetruAuthRequiredError, v as NeetruDbError, c as NeetruError, Wa as VERSION, pi as accessTokenErrorToHttp, ui as authenticateProductRequest, ne as checkCoreVersionCompat, dt as createAiNamespace, st as createCheckoutNamespace, rr as createNeetruClient, ot as createNeetruDb, lt as createNotificationsNamespace, at as createWebhooksNamespace, J as detectNonServerRuntime, ci as getServerNeetruClient, Xr as increment, Q as isFieldSentinel, en as isIncrementSentinel, Zt as isServerTimestampSentinel, lr as readBearerToken, dr as readCookie, Jr as serverTimestamp, ar as verifyAccessToken, Lo as verifyWebhookRequest, wn as verifyWebhookSignature };