@neetru/sdk 3.8.1 → 3.9.1

package/dist/build-guard.mjs

@@ -1,149 +1,250 @@
-import * as u from 'fs';
-import * as a from 'path';
+import * as a from 'fs';
+import * as l from 'path';
 
 // src/build-guard.ts
-var l = class extends Error {
-  constructor(n) {
-    super(n), this.name = "NeetruBuildGuardError";
+var p = class extends Error {
+  constructor(t) {
+    super(t), this.name = "NeetruBuildGuardError";
   }
 };
-function p(e) {
+function g(e) {
   return e == null || e.trim() === "";
 }
 function k(e) {
   if (e.builtEnv !== "prod") return;
-  let n = [];
-  if (p(e.oidcClientId) && n.push("NEXT_PUBLIC_NEETRU_OIDC_CLIENT_ID"), p(e.productId) && n.push("NEXT_PUBLIC_NEETRU_PRODUCT_ID"), n.length === 0) return;
-  let t = n.length > 1;
-  throw new l(
+  let t = [];
+  if (g(e.oidcClientId) && t.push("NEXT_PUBLIC_NEETRU_OIDC_CLIENT_ID"), g(e.productId) && t.push("NEXT_PUBLIC_NEETRU_PRODUCT_ID"), t.length === 0) return;
+  let n = t.length > 1;
+  throw new p(
     [
       "[neetru-sdk] BUILD DE PRODU\xC7\xC3O ABORTADO (withNeetruBuildGuard).",
       "",
-      `Vari\xE1ve${t ? "is" : "l"} de ambiente obrigat\xF3ri${t ? "as" : "a"} ausente${t ? "s" : ""}/vazia${t ? "s" : ""} no build de produ\xE7\xE3o (NEXT_PUBLIC_NEETRU_ENV=prod):`,
-      ...n.map((r) => `  \u2022 ${r}`),
+      `Vari\xE1ve${n ? "is" : "l"} de ambiente obrigat\xF3ri${n ? "as" : "a"} ausente${n ? "s" : ""}/vazia${n ? "s" : ""} no build de produ\xE7\xE3o (NEXT_PUBLIC_NEETRU_ENV=prod):`,
+      ...t.map((r) => `  \u2022 ${r}`),
       "",
-      `Sem ${t ? "essas vari\xE1veis" : "essa vari\xE1vel"} o SDK n\xE3o consegue montar o client_id do login OIDC \u2014 o bot\xE3o "Entrar com Neetru" (NeetruLoginButton) N\xC3O redireciona e o login do produto quebra EM SIL\xCANCIO em produ\xE7\xE3o (incidente gestovendas 2026-09-06: workspace recriado perdeu a env var e shippou um build de prod com o client_id vazio).`,
+      `Sem ${n ? "essas vari\xE1veis" : "essa vari\xE1vel"} o SDK n\xE3o consegue montar o client_id do login OIDC \u2014 o bot\xE3o "Entrar com Neetru" (NeetruLoginButton) N\xC3O redireciona e o login do produto quebra EM SIL\xCANCIO em produ\xE7\xE3o (incidente gestovendas 2026-09-06: workspace recriado perdeu a env var e shippou um build de prod com o client_id vazio).`,
       "",
       "Como corrigir \u2014 defina no .env.production do produto (ou no ambiente do build de deploy):",
-      ...n.map((r) => `  ${r}=<valor real vindo do cat\xE1logo do produto no Core>`),
+      ...t.map((r) => `  ${r}=<valor real vindo do cat\xE1logo do produto no Core>`),
       "",
       "dev/workspace N\xC3O exigem essas vari\xE1veis (usam MockAuth/sandbox) \u2014 s\xF3 o build de produ\xE7\xE3o enfor\xE7a."
     ].join(`
 `)
   );
 }
-var f = ["pg", "drizzle-orm"], g = "*";
-function E(e) {
-  return Array.isArray(e) ? e.filter((n) => typeof n == "string") : [];
+var w = [
+  "script-src-elem",
+  "script-src",
+  "default-src"
+], E = /^\/(?:api|_next)(?:\/|$)/, m = /^'sha(?:256|384|512)-/;
+function N(e) {
+  let t = /* @__PURE__ */ new Map();
+  for (let n of e.split(";")) {
+    let r = n.trim().split(/\s+/).filter(Boolean);
+    if (r.length === 0) continue;
+    let o = r[0].toLowerCase();
+    t.has(o) || t.set(o, { raw: r.join(" "), sources: r.slice(1) });
+  }
+  return t;
+}
+function I(e, t) {
+  let n = t.filter((o) => {
+    let s = o.toLowerCase();
+    return s !== "'none'" && !m.test(s);
+  });
+  return n.some((o) => o.toLowerCase() === "'unsafe-inline'") || n.push("'unsafe-inline'"), n.length === 1 && n.unshift("'self'"), `${e === "default-src" ? "script-src" : e} ${n.join(" ")}`;
+}
+function C(e) {
+  let t = N(e), n = w.find((c) => t.has(c));
+  if (!n) return null;
+  let { raw: r, sources: o } = t.get(n), s = o.map((c) => c.toLowerCase());
+  if (s.some((c) => c.startsWith("'nonce-")) || s.includes("'strict-dynamic'")) return null;
+  let i = s.includes("'unsafe-inline'"), u = s.some((c) => m.test(c));
+  return i && !u ? null : {
+    directiveName: n,
+    directive: r,
+    suggestion: I(n, o),
+    unsafeInlineIgnoredByHash: i && u
+  };
+}
+function S(e) {
+  if (!Array.isArray(e)) return [];
+  let t = [];
+  for (let n of e) {
+    if (!n || typeof n != "object") continue;
+    let { source: r, headers: o } = n, s = typeof r == "string" ? r : "";
+    if (!E.test(s) && Array.isArray(o))
+      for (let i of o) {
+        if (!i || typeof i != "object") continue;
+        let { key: u, value: c } = i;
+        if (!(typeof u != "string" || typeof c != "string") && u.trim().toLowerCase() === "content-security-policy")
+          for (let d of c.split(",")) {
+            let f = C(d);
+            f && t.push({ source: s, headerKey: u.trim(), ...f });
+          }
+      }
+  }
+  return t;
+}
+function _(e) {
+  if (typeof e != "string" || e.trim() === "") return false;
+  try {
+    return a.existsSync(l.join(e, "app")) || a.existsSync(l.join(e, "src", "app"));
+  } catch {
+    return false;
+  }
+}
+function b(e) {
+  let t = S(e);
+  if (t.length === 0) return;
+  let n = [
+    "[neetru-sdk] BUILD ABORTADO (withNeetruBuildGuard): a Content-Security-Policy do headers() do next.config bloqueia os scripts embutidos do App Router.",
+    "",
+    "O App Router p\xF5e <script> embutidos em toda p\xE1gina (self.__next_f.push, com o payload do React Server Components). Com a CSP abaixo o navegador bloqueia esses scripts, a hidrata\xE7\xE3o falha e o React desmonta a \xE1rvore: o servidor responde 200 com o HTML certo e a tela fica EM BRANCO (incidente Zelo 2026-10-22).",
+    "",
+    `Linha${t.length > 1 ? "s" : ""} a trocar no next.config:`
+  ];
+  throw t.forEach((r, o) => {
+    n.push(""), n.push(`${o + 1}) headers() \u2192 source "${r.source}" \u2192 ${r.headerKey}`), r.directiveName === "default-src" ? (n.push(`   a CSP n\xE3o tem script-src, ent\xE3o quem decide os scripts \xE9 o: ${r.directive}`), n.push(`   acrescente:  ${r.suggestion}`)) : (n.push(`   troque:  ${r.directive}`), n.push(`   por:     ${r.suggestion}`), r.unsafeInlineIgnoredByHash && n.push("   (com um hash 'sha\u2026-' na lista, o navegador ignora o 'unsafe-inline' \u2014 por isso o hash sai)"));
+  }), n.push(
+    "",
+    "Sem 'unsafe-inline': use nonce por requisi\xE7\xE3o \u2014 o middleware gera o nonce e manda a CSP com 'nonce-<valor>' 'strict-dynamic' (https://nextjs.org/docs/app/guides/content-security-policy). CSP com nonce ou 'strict-dynamic' passa nesta checagem."
+  ), new p(n.join(`
+`));
+}
+function R(e) {
+  if (_(process.cwd()))
+    try {
+      b(e);
+    } catch (t) {
+      if (t instanceof p && process.env.NODE_ENV === "development") {
+        typeof console < "u" && console.warn(t.message);
+        return;
+      }
+      throw t;
+    }
 }
-function _(e, n, t) {
-  let r = [], o = n;
+var y = ["pg", "drizzle-orm"], h = "*";
+function v(e) {
+  return Array.isArray(e) ? e.filter((t) => typeof t == "string") : [];
+}
+function T(e, t, n) {
+  let r = [], o = t;
   for (; ; ) {
     r.push(o);
-    let i = a.dirname(o);
-    if (i === o) break;
-    o = i;
+    let s = l.dirname(o);
+    if (s === o) break;
+    o = s;
   }
-  r.includes(t) || r.push(t);
-  for (let i of r) {
-    let s = a.join(i, "node_modules", e, "package.json");
+  r.includes(n) || r.push(n);
+  for (let s of r) {
+    let i = l.join(s, "node_modules", e, "package.json");
     try {
-      if (u.existsSync(s)) return s;
+      if (a.existsSync(i)) return i;
     } catch {
     }
   }
   return null;
 }
-function m(e) {
+function B(e) {
   if (typeof e != "string" || e.trim() === "") return [];
-  let n = /* @__PURE__ */ new Set(), t = /* @__PURE__ */ new Set(), r = (o, i) => {
-    if (n.has(o)) return;
-    n.add(o);
-    let s = _(o, i, e);
-    if (!s) return;
+  let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (o, s) => {
+    if (t.has(o)) return;
     t.add(o);
-    let d;
+    let i = T(o, s, e);
+    if (!i) return;
+    n.add(o);
+    let u;
     try {
-      d = JSON.parse(u.readFileSync(s, "utf8"));
+      u = JSON.parse(a.readFileSync(i, "utf8"));
     } catch {
       return;
     }
     let c = {
-      ...d.dependencies ?? {},
-      ...d.optionalDependencies ?? {}
-    }, b = a.dirname(s);
-    for (let v of Object.keys(c)) r(v, b);
+      ...u.dependencies ?? {},
+      ...u.optionalDependencies ?? {}
+    }, d = l.dirname(i);
+    for (let f of Object.keys(c)) r(f, d);
   };
   try {
-    for (let o of f) r(o, e);
+    for (let o of y) r(o, e);
   } catch {
     return [];
   }
-  return [...t].sort();
+  return [...n].sort();
 }
-function N(e) {
-  return e.map((n) => `./node_modules/${n}/**`);
+function x(e) {
+  return e.map((t) => `./node_modules/${t}/**`);
 }
-function h(e) {
-  let n = E(e);
-  for (let t of f)
-    n.includes(t) || n.push(t);
-  return n;
+function A(e) {
+  let t = v(e);
+  for (let n of y)
+    t.includes(n) || t.push(n);
+  return t;
 }
-function I(e, n) {
-  let t = {};
+function O(e, t) {
+  let n = {};
   if (e && typeof e == "object" && !Array.isArray(e))
-    for (let [o, i] of Object.entries(e))
-      t[o] = E(i);
-  if (n.length === 0) return t;
-  let r = [...t[g] ?? []];
-  for (let o of n)
+    for (let [o, s] of Object.entries(e))
+      n[o] = v(s);
+  if (t.length === 0) return n;
+  let r = [...n[h] ?? []];
+  for (let o of t)
     r.includes(o) || r.push(o);
-  return t[g] = r, t;
+  return n[h] = r, n;
 }
-function T(e, n = {}) {
-  let t = e.webpack, r = [];
+function P(e, t = {}) {
+  let n = e.webpack, r = e.headers, o = [];
   try {
-    r = N(m(process.cwd()));
+    o = x(B(process.cwd()));
   } catch {
-    r = [];
+    o = [];
   }
   return {
     ...e,
     // `serverExternalPackages` é reforço (não o conserto do caso webpackIgnore);
     // o `outputFileTracingIncludes` computado é o que realmente inclui o closure.
-    serverExternalPackages: h(e.serverExternalPackages),
-    outputFileTracingIncludes: I(
+    serverExternalPackages: A(e.serverExternalPackages),
+    outputFileTracingIncludes: O(
       e.outputFileTracingIncludes,
-      r
+      o
     ),
-    webpack(o, i) {
-      let s = typeof t == "function" ? t(o, i) : o;
+    // CSP x App Router (incidente Zelo 2026-10-22): só embrulha quando o produto
+    // TEM `headers()`. Sem ele não há CSP do next.config a checar, e o config
+    // continua sem a chave (não inventa um `headers` que o Next não pediu).
+    ...typeof r == "function" ? {
+      async headers(...s) {
+        let i = await r.apply(this, s);
+        return R(i), i;
+      }
+    } : {},
+    webpack(s, i) {
+      let u = typeof n == "function" ? n(s, i) : s;
       if (!i.dev && i.isServer) {
-        let d = {
+        let c = {
           builtEnv: process.env.NEXT_PUBLIC_NEETRU_ENV ?? null,
           productId: process.env.NEXT_PUBLIC_NEETRU_PRODUCT_ID ?? null,
           oidcClientId: process.env.NEXT_PUBLIC_NEETRU_OIDC_CLIENT_ID ?? null,
           builtAt: (/* @__PURE__ */ new Date()).toISOString()
         };
         try {
-          let c = a.resolve(process.cwd(), n.outputDir ?? ".next");
-          u.mkdirSync(c, { recursive: !0 }), u.writeFileSync(
-            a.join(c, "neetru-build-manifest.json"),
-            JSON.stringify(d, null, 2),
+          let d = l.resolve(process.cwd(), t.outputDir ?? ".next");
+          a.mkdirSync(d, { recursive: !0 }), a.writeFileSync(
+            l.join(d, "neetru-build-manifest.json"),
+            JSON.stringify(c, null, 2),
             "utf8"
           );
-        } catch (c) {
+        } catch (d) {
           typeof console < "u" && console.warn(
             "[neetru-sdk] withNeetruBuildGuard: falha ao gravar neetru-build-manifest.json (ignorado, build segue):",
-            c
+            d
           );
         }
-        k(d);
+        k(c);
       }
-      return s;
+      return u;
     }
   };
 }
 
-export { f as NEETRU_SQL_SERVER_EXTERNAL_PACKAGES, g as NEETRU_SQL_TRACE_INCLUDE_KEY, l as NeetruBuildGuardError, k as assertNeetruProdBuildEnv, I as mergeOutputFileTracingIncludes, h as mergeServerExternalPackages, m as resolveSqlRuntimeClosure, N as sqlClosureToTraceGlobs, T as withNeetruBuildGuard };
+export { y as NEETRU_SQL_SERVER_EXTERNAL_PACKAGES, h as NEETRU_SQL_TRACE_INCLUDE_KEY, p as NeetruBuildGuardError, b as assertNeetruCspAllowsAppRouterScripts, k as assertNeetruProdBuildEnv, S as findCspInlineScriptBlocks, _ as hasNextAppRouter, O as mergeOutputFileTracingIncludes, A as mergeServerExternalPackages, B as resolveSqlRuntimeClosure, x as sqlClosureToTraceGlobs, P as withNeetruBuildGuard };

package/dist/catalog.cjs

@@ -108,7 +108,7 @@ function G(t, e) {
 }
 function M() {
   try {
-    return "3.8.1";
+    return "3.9.1";
   } catch {
     return;
   }

package/dist/catalog.d.cts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, C as CatalogListOptions, n as CatalogListResponse, a9 as Product } from './types-yv3EDKg2.cjs';
+import { ai as ResolvedConfig, C as CatalogListOptions, n as CatalogListResponse, a9 as Product } from './types-Bl_4HROd.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';
 

package/dist/catalog.d.ts

@@ -1,4 +1,4 @@
-import { ah as ResolvedConfig, C as CatalogListOptions, n as CatalogListResponse, a9 as Product } from './types-BYPk_3HR.js';
+import { ai as ResolvedConfig, C as CatalogListOptions, n as CatalogListResponse, a9 as Product } from './types-Bqnsqvow.js';
 import 'drizzle-orm/node-postgres';
 import './errors.js';
 

package/dist/catalog.mjs

@@ -106,7 +106,7 @@ function G(t, e) {
 }
 function M() {
   try {
-    return "3.8.1";
+    return "3.9.1";
   } catch {
     return;
   }

package/dist/checkout.cjs

@@ -39,11 +39,11 @@ function E() {
 
 // src/correlation.ts
 var A = "x-correlation-id";
-var L = /^[A-Za-z0-9._:\-]+$/;
+var H = /^[A-Za-z0-9._:\-]+$/;
 function x(t) {
-  return typeof t == "string" && t.length > 0 && t.length <= 128 && L.test(t);
+  return typeof t == "string" && t.length > 0 && t.length <= 128 && H.test(t);
 }
-function H() {
+function B() {
   let t = globalThis.crypto;
   try {
     if (t && typeof t.randomUUID == "function") return t.randomUUID();
@@ -70,7 +70,7 @@ function N(t, e) {
     }
     r[a] = c;
   }
-  let o = n ?? (x(e) ? e : void 0) ?? H();
+  let o = n ?? (x(e) ? e : void 0) ?? B();
   return r[A] = o, { headers: r, correlationId: o };
 }
 
@@ -90,7 +90,7 @@ function D() {
 }
 
 // src/http.ts
-var B = {
+var G = {
   // SDK major 3.x requer Core ≥ 2026.05.1 (suporte a X-Neetru-Version header,
   // runTransaction write-after-read, verifyWebhookRequest, webhooks 3.0+)
   3: "2026.05.1"
@@ -98,7 +98,7 @@ var B = {
 function b(t) {
   return t.split("+")[0] ?? t;
 }
-function G(t, e) {
+function F(t, e) {
   let n = b(t).split(".").map(Number), r = b(e).split(".").map(Number), o = Math.max(n.length, r.length);
   for (let a = 0; a < o; a++) {
     let c = n[a] ?? 0, u = r[a] ?? 0;
@@ -108,43 +108,43 @@ function G(t, e) {
 }
 function M() {
   try {
-    return "3.8.1";
+    return "3.9.1";
   } catch {
     return;
   }
 }
-function F() {
+function V() {
   let t = M();
   return t ? parseInt(t.split(".")[0] ?? "3", 10) : 3;
 }
-var U = /* @__PURE__ */ new Set();
-function V(t) {
+var O = /* @__PURE__ */ new Set();
+function z(t) {
   if (!t) return;
-  let e = F(), n = B[e];
+  let e = V(), n = G[e];
   if (!n) return;
   let r = b(t);
-  if (G(r, n) < 0) {
+  if (F(r, n) < 0) {
     let o = `${e}:${r}`;
-    U.has(o) || (U.add(o), console.warn(
+    O.has(o) || (O.add(o), console.warn(
       `[Neetru SDK] Aten\xE7\xE3o: Core vers\xE3o "${t}" \xE9 anterior ao m\xEDnimo recomendado "${n}" para SDK major ${e}. Alguns recursos podem n\xE3o funcionar corretamente. Atualize o Core para a vers\xE3o mais recente.`
     ));
   }
 }
-function z() {
+function X() {
   let t = "This operation requires an apiKey. Pass it to createNeetruClient({ apiKey }) or set NEETRU_API_KEY env var.";
   return D() ? "Esta opera\xE7\xE3o exige a credencial nrt_ do produto, que \xE9 S\xD3 DE SERVIDOR. No navegador/app, chame a API do seu produto (ex.: https://<produto>.neetru.com/api/v1) com o token do usu\xE1rio \u2014 o backend do produto faz esta chamada com o SDK e a chave. (" + t + ")" : t;
 }
-var X = 2, Y = 0, J = /* @__PURE__ */ new Set(["GET", "HEAD"]), W = /* @__PURE__ */ new Set([
+var Y = 2, J = 0, W = /* @__PURE__ */ new Set(["GET", "HEAD"]), Z = /* @__PURE__ */ new Set([
   "rate_limited",
   "server_error",
   "network_error"
 ]);
-function O(t) {
+function U(t) {
   let e = 200 * Math.pow(4, t), n = e * 0.2 * (Math.random() * 2 - 1);
   return Math.max(50, Math.round(e + n));
 }
 var q = 6e4;
-function Z(t) {
+function Q(t) {
   if (!t) return null;
   let e = Number(t);
   if (Number.isFinite(e) && e >= 0) return Math.min(Math.round(e * 1e3), q);
@@ -158,10 +158,10 @@ function Z(t) {
 function K(t) {
   return new Promise((e) => setTimeout(e, t));
 }
-function Q(t) {
+function ee(t) {
   return t === 401 ? "unauthorized" : t === 403 ? "forbidden" : t === 404 ? "not_found" : t === 409 ? "conflict" : t === 410 ? "gone" : t === 422 || t === 400 ? "validation_failed" : t === 429 ? "rate_limited" : t >= 500 ? "server_error" : "unknown";
 }
-function ee(t, e, n) {
+function te(t, e, n) {
   let r = t.replace(/\/+$/, ""), o = e.startsWith("/") ? e : `/${e}`, a = new URL(`${r}${o}`);
   if (n)
     for (let [c, u] of Object.entries(n))
@@ -177,14 +177,14 @@ async function P(t) {
       return;
     }
 }
-async function y(t, e) {
-  let n = e.method ?? "GET", r = ee(t.baseUrl, e.path, e.query), o = J.has(n) ? X : Y, a = e.retries ?? o, { headers: c, correlationId: u } = N(
+async function k(t, e) {
+  let n = e.method ?? "GET", r = te(t.baseUrl, e.path, e.query), o = W.has(n) ? Y : J, a = e.retries ?? o, { headers: c, correlationId: u } = N(
     { accept: "application/json", ...e.headers },
     e.correlationId
-  ), C = M();
-  if (C && (c["x-neetru-sdk-version"] = C), e.requireAuth) {
+  ), v = M();
+  if (v && (c["x-neetru-sdk-version"] = v), e.requireAuth) {
     if (!t.apiKey)
-      throw new i("missing_api_key", z());
+      throw new i("missing_api_key", X());
     c.authorization = `Bearer ${t.apiKey}`;
   }
   if (e.idempotencyKey) {
@@ -206,15 +206,15 @@ async function y(t, e) {
       );
     let _ = { method: n, headers: c };
     I !== void 0 && (_.body = I);
-    let $ = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
-    _.signal = AbortSignal.timeout($);
+    let j = p != null ? Math.max(1, Math.min(3e4, p - Date.now())) : 3e4;
+    _.signal = AbortSignal.timeout(j);
     let d;
     try {
       d = await t.fetch(r, _);
     } catch (s) {
       let m = s instanceof DOMException && s.name === "TimeoutError" ? "Network error: timeout after 30s" : `Network error: ${s instanceof Error ? s.message : "fetch failed"}`;
       if (g = new i("network_error", m, void 0, void 0, void 0, u), f < a) {
-        let S = O(f);
+        let S = U(f);
         if (p == null || Date.now() + S < p) {
           await K(S);
           continue;
@@ -222,33 +222,46 @@ async function y(t, e) {
       }
       throw g;
     }
-    let j = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
+    let L = d.headers.get("x-request-id") ?? d.headers.get("x-correlation-id") ?? void 0;
     if (d.ok) {
       let s = d.headers.get("x-neetru-version");
-      return s && V(s), await P(d);
+      return s && z(s), await P(d);
     }
-    let l = await P(d), k = Q(d.status), h = `HTTP ${d.status}`, w;
+    let l = await P(d), y = ee(d.status), h = `HTTP ${d.status}`, w;
     if (l && typeof l == "object") {
       let s = l.error;
-      typeof s == "string" ? h = s : s && typeof s == "object" ? (typeof s.code == "string" && (k = s.code), typeof s.message == "string" && (h = s.message), typeof s.reason == "string" && (w = s.reason)) : (typeof l.code == "string" && (k = l.code), typeof l.message == "string" && (h = l.message)), typeof l.reason == "string" && (w = l.reason);
+      typeof s == "string" ? h = s : s && typeof s == "object" ? (typeof s.code == "string" && (y = s.code), typeof s.message == "string" && (h = s.message), typeof s.reason == "string" && (w = s.reason)) : (typeof l.code == "string" && (y = l.code), typeof l.message == "string" && (h = l.message)), typeof l.reason == "string" && (w = l.reason);
     }
     if (d.status === 410) {
       let s = d.headers.get("x-neetru-replacement");
       h === `HTTP ${d.status}` && (h = `Endpoint ${e.path} foi removido do Core (HTTP 410 Gone) \u2014 atualize o @neetru/sdk e migre para a API substituta.`), s && !h.includes(s) && (h += ` Substituto: ${s}.`);
     }
-    let v = new i(k, h, d.status, j, w, u);
-    if (g = v, W.has(k) && f < a) {
-      let m = Z(d.headers.get("retry-after")) ?? O(f);
+    let C = new i(y, h, d.status, L, w, u);
+    if (g = C, Z.has(y) && f < a) {
+      let m = Q(d.headers.get("retry-after")) ?? U(f);
       if (p == null || Date.now() + m < p) {
         await K(m);
         continue;
       }
     }
-    throw v;
+    throw C;
   }
   throw g ?? new i("unknown", "unexpected httpRequest exit", void 0, void 0, void 0, u);
 }
 
+// src/runtime-env.ts
+function ne() {
+  try {
+    if (typeof process < "u" && process.env)
+      return process.env.NODE_ENV === "production";
+  } catch {
+  }
+  return false;
+}
+function $(t) {
+  return t === "dev" && !ne();
+}
+
 // src/checkout.ts
 function T(t, e) {
   let n = t?.accessToken || t?.idToken;
@@ -259,7 +272,7 @@ function T(t, e) {
     );
   return { requireAuth: false, headers: { authorization: `Bearer ${n}` } };
 }
-function te(t) {
+function re(t) {
   if (!t || typeof t != "object")
     throw new i("invalid_response", "checkout.start response is not an object");
   let e = t;
@@ -275,7 +288,7 @@ function te(t) {
     requiresKyc: e.requiresKyc === true
   };
 }
-function ne(t) {
+function oe(t) {
   if (!t || typeof t != "object")
     throw new i("invalid_response", "checkout.get response is not an object");
   let e = t, n = e.intent;
@@ -297,20 +310,20 @@ function ne(t) {
     isStale: e.isStale === true
   };
 }
-function re() {
+function ie() {
   try {
     return typeof globalThis < "u" && typeof globalThis.window < "u" && typeof globalThis.location < "u" && typeof globalThis.location.assign == "function";
   } catch {
     return false;
   }
 }
-function oe(t) {
+function se(t) {
   try {
     globalThis.location.assign(t);
   } catch {
   }
 }
-function ie(t) {
+function ae(t) {
   return {
     async start(e) {
       if (!e?.productId)
@@ -328,15 +341,15 @@ function ie(t) {
       let { requireAuth: r, headers: o } = T(
         { accessToken: e.accessToken, idToken: e.idToken },
         "start"
-      ), a = await y(t, {
+      ), a = await k(t, {
         method: "POST",
         path: "/api/v1/checkout/intents",
         body: n,
         requireAuth: r,
         headers: o,
         idempotencyKey: true
-      }), c = te(a);
-      return e.autoRedirect !== false && re() && oe(c.redirectUrl), c;
+      }), c = re(a);
+      return e.autoRedirect !== false && ie() && se(c.redirectUrl), c;
     },
     async get(e, n) {
       if (!e || typeof e != "string")
@@ -344,13 +357,13 @@ function ie(t) {
       let { requireAuth: r, headers: o } = T(
         { accessToken: n?.accessToken, idToken: n?.idToken },
         "get"
-      ), a = await y(t, {
+      ), a = await k(t, {
         method: "GET",
         path: `/api/v1/checkout/intents/${encodeURIComponent(e)}`,
         requireAuth: r,
         headers: o
       });
-      return ne(a);
+      return oe(a);
     },
     async cancel(e, n) {
       if (!e || typeof e != "string")
@@ -361,7 +374,7 @@ function ie(t) {
       );
       return {
         ok: true,
-        alreadyCancelled: (await y(t, {
+        alreadyCancelled: (await k(t, {
           method: "DELETE",
           path: `/api/v1/checkout/intents/${encodeURIComponent(e)}`,
           requireAuth: r,
@@ -414,9 +427,9 @@ var R = class {
     return this.intents.set(e, { ...r, status: "cancelled" }), { ok: true, alreadyCancelled: o };
   }
 };
-function Ie(t) {
-  return t.env === "dev" ? new R() : ie(t);
+function Te(t) {
+  return $(t.env) ? new R() : ae(t);
 }
 
 exports.MockCheckout = R;
-exports.createCheckoutNamespace = Ie;
+exports.createCheckoutNamespace = Te;

package/dist/checkout.d.cts

@@ -1,3 +1,3 @@
-export { o as CheckoutAuthOpts, p as CheckoutIntentInfo, q as CheckoutIntentStatus, r as CheckoutNamespace, s as CheckoutStartInput, t as CheckoutStartResult, u as CheckoutTenantType, T as MockCheckout, aL as createCheckoutNamespace } from './types-yv3EDKg2.cjs';
+export { o as CheckoutAuthOpts, p as CheckoutIntentInfo, q as CheckoutIntentStatus, r as CheckoutNamespace, s as CheckoutStartInput, t as CheckoutStartResult, u as CheckoutTenantType, T as MockCheckout, aN as createCheckoutNamespace } from './types-Bl_4HROd.cjs';
 import 'drizzle-orm/node-postgres';
 import './errors.cjs';