@biab-dev/sdk 0.2.1 → 0.7.1

package/dist/auth-handler.js

@@ -0,0 +1,175 @@
+/**
+ * SDK auth handler — the file a tenant developer mounts on their own site
+ * to handle the WorkOS callback. Cookie lives on the tenant's domain so the
+ * tenant's SSR can read it via standard cookie APIs.
+ *
+ * Usage (Next.js App Router):
+ *
+ *   // app/api/biab-auth/[...biab]/route.ts
+ *   import { createAuthHandler } from "@biab-dev/sdk";
+ *
+ *   const handler = createAuthHandler({
+ *     baseUrl: process.env.BIAB_PACKAGE_API_BASE_URL!,
+ *     apiKey: process.env.BIAB_API_KEY!,
+ *     callbackUrl: "https://my-site.com/api/biab-auth/callback",
+ *   });
+ *
+ *   export const GET = handler.GET;
+ *   export const POST = handler.POST;
+ *
+ * Then drop <SignIn />, <SignUp />, <SignOut /> into your pages — they call
+ * `/api/biab-auth/sign-in?intent=sign-in` etc., which 302s through the WorkOS
+ * hosted page and back to `callbackUrl`. The handler exchanges the code,
+ * sets the session cookie, and redirects the user to `returnTo`.
+ */
+import { BiabDevClient, } from "./client";
+export const DEFAULT_AUTH_COOKIE_NAME = "biab_session";
+export const DEFAULT_AUTH_BASE_PATH = "/api/biab-auth";
+function buildSetCookie(name, value, opts) {
+    const parts = [`${name}=${value}`, "Path=/", "HttpOnly", "SameSite=Lax"];
+    parts.push("Secure");
+    if (opts.domain)
+        parts.push(`Domain=${opts.domain}`);
+    if (opts.clear) {
+        parts.push("Max-Age=0");
+    }
+    else if (opts.expiresAt) {
+        parts.push(`Expires=${opts.expiresAt.toUTCString()}`);
+    }
+    return parts.join("; ");
+}
+function readCookie(request, name) {
+    const header = request.headers.get("cookie");
+    if (!header)
+        return null;
+    for (const part of header.split(";")) {
+        const [k, ...rest] = part.trim().split("=");
+        if (k === name)
+            return rest.join("=");
+    }
+    return null;
+}
+/**
+ * `auth/start` expects `returnTo` as an absolute URL. Plain paths like `/` come
+ * from `defaultReturnTo` and from `<SignIn returnTo="/dashboard" />`.
+ */
+function absolutizeReturnTo(returnTo, requestUrl) {
+    try {
+        return new URL(returnTo, requestUrl).href;
+    }
+    catch {
+        return new URL("/", requestUrl).href;
+    }
+}
+function decodeReturnTo(state) {
+    if (!state)
+        return null;
+    try {
+        const decoded = Buffer.from(state, "base64url").toString("utf8");
+        const parsed = JSON.parse(decoded);
+        if (typeof parsed.returnTo === "string")
+            return parsed.returnTo;
+    }
+    catch {
+        /* ignore */
+    }
+    return null;
+}
+export function createAuthHandler(options) {
+    const cookieName = options.cookieName ?? DEFAULT_AUTH_COOKIE_NAME;
+    const basePath = (options.basePath ?? DEFAULT_AUTH_BASE_PATH).replace(/\/$/, "");
+    const defaultReturnTo = options.defaultReturnTo ?? "/";
+    const signOutReturnTo = options.signOutReturnTo ?? "/";
+    const client = new BiabDevClient({
+        baseUrl: options.baseUrl,
+        apiKey: options.apiKey,
+        ...(options.fetch ? { fetch: options.fetch } : {}),
+    });
+    async function handle(request) {
+        const url = new URL(request.url);
+        const subroute = url.pathname.startsWith(basePath)
+            ? url.pathname.slice(basePath.length).replace(/^\//, "")
+            : url.pathname;
+        // /sign-in?returnTo=... and /sign-up?returnTo=...
+        if (subroute === "sign-in" || subroute === "sign-up") {
+            const rawReturnTo = url.searchParams.get("returnTo") ?? defaultReturnTo;
+            const start = await client.auth.start({
+                intent: subroute === "sign-up" ? "sign-up" : "sign-in",
+                returnTo: absolutizeReturnTo(rawReturnTo, request.url),
+                redirectUri: options.callbackUrl,
+                loginHint: url.searchParams.get("loginHint") ?? undefined,
+            });
+            return Response.redirect(start.url, 302);
+        }
+        // /callback?code=...&state=...
+        if (subroute === "callback") {
+            const code = url.searchParams.get("code");
+            if (!code) {
+                return new Response("Missing code", { status: 400 });
+            }
+            try {
+                const session = await client.auth.exchange({
+                    code,
+                    redirectUri: options.callbackUrl,
+                });
+                const returnTo = decodeReturnTo(url.searchParams.get("state")) ?? defaultReturnTo;
+                return new Response(null, {
+                    status: 302,
+                    headers: {
+                        Location: returnTo,
+                        "Set-Cookie": buildSetCookie(cookieName, session.sessionToken, {
+                            expiresAt: new Date(session.expiresAt),
+                            domain: options.cookieDomain,
+                        }),
+                    },
+                });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : "exchange failed";
+                return new Response(`Sign-in failed: ${message}`, { status: 400 });
+            }
+        }
+        // /sign-out
+        if (subroute === "sign-out") {
+            await client.auth.signOut().catch(() => undefined);
+            return new Response(null, {
+                status: 302,
+                headers: {
+                    Location: signOutReturnTo,
+                    "Set-Cookie": buildSetCookie(cookieName, "", {
+                        clear: true,
+                        domain: options.cookieDomain,
+                    }),
+                },
+            });
+        }
+        // /me — returns the current session (or null) as JSON, scoped to this cookie.
+        if (subroute === "me") {
+            const token = readCookie(request, cookieName);
+            if (!token) {
+                return Response.json(null);
+            }
+            const me = await client.auth
+                .me({ sessionToken: token })
+                .catch(() => null);
+            return Response.json(me);
+        }
+        return new Response("Not found", { status: 404 });
+    }
+    return { GET: handle, POST: handle };
+}
+/**
+ * Server-side helper for tenant SSR: read the current session from the cookie.
+ * Returns null when the user isn't signed in.
+ */
+export async function getTenantSession(input) {
+    if (!input.cookieValue)
+        return null;
+    const client = new BiabDevClient({
+        baseUrl: input.baseUrl,
+        apiKey: input.apiKey,
+        ...(input.fetch ? { fetch: input.fetch } : {}),
+    });
+    return client.auth.me({ sessionToken: input.cookieValue }).catch(() => null);
+}
+//# sourceMappingURL=auth-handler.js.map

package/dist/auth-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-handler.js","sourceRoot":"","sources":["../src/auth-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACN,aAAa,GAEb,MAAM,UAAU,CAAC;AAElB,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAuCvD,SAAS,cAAc,CACtB,IAAY,EACZ,KAAa,EACb,IAAgG;IAEhG,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAY;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IAC/D,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2B,CAAC;QAC7D,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,YAAY;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,OAAiC;IAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,wBAAwB,CAAC;IAClE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC,OAAO,CACpE,KAAK,EACL,EAAE,CACF,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IAEH,KAAK,UAAU,MAAM,CAAC,OAAgB;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YACjD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACxD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAEhB,kDAAkD;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACrC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACtD,QAAQ,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC;gBACtD,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;aACzD,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,+BAA+B;QAC/B,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC1C,IAAI;oBACJ,WAAW,EAAE,OAAO,CAAC,WAAW;iBAChC,CAAC,CAAC;gBACH,MAAM,QAAQ,GACb,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,CAAC;gBAClE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACzB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACR,QAAQ,EAAE,QAAQ;wBAClB,YAAY,EAAE,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE;4BAC9D,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;4BACtC,MAAM,EAAE,OAAO,CAAC,YAAY;yBAC5B,CAAC;qBACF;iBACD,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBACvE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;QACF,CAAC;QAED,YAAY;QACZ,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACzB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACR,QAAQ,EAAE,eAAe;oBACzB,YAAY,EAAE,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE;wBAC5C,KAAK,EAAE,IAAI;wBACX,MAAM,EAAE,OAAO,CAAC,YAAY;qBAC5B,CAAC;iBACF;aACD,CAAC,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI;iBAC1B,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;iBAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAKtC;IACA,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC"}

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import type { z } from "zod";
-import { type AuthIntrospectResponse, type CreateCollectionInput, type CreateCollectionResponse, type CreateEmailTemplateInput, type CreateEmailTemplateResponse, type CreateEmailTemplateVersionInput, type CreateEmailTemplateVersionResponse, type DashboardSessionResponse, type ExecuteActionInput, type ExecuteActionResponse, type FollowerEditInput, type FollowerEditResponse, type FollowerJoinInput, type FollowerJoinResponse, type FollowerLeaveInput, type FollowerLeaveResponse, type FollowerMeInput, type FollowerMeResponse, type GetCollectionResponse, type GetEmailTemplateResponse, type GetSiteMarketingPageResponse, type ListCollectionsResponse, type ListEmailTemplatesInput, type ListEmailTemplatesResponse, type ListRowsInput, type ListRowsResponse, type QueryRowsInput, type QueryRowsResponse, type SiteAssetInput, type UploadSiteAssetResponse, type UpsertRowInput, type UpsertRowResponse } from "./contracts";
+import { type AuthIntrospectResponse, type TenantAuthExchangeInput, type TenantAuthExchangeResponse, type TenantAuthMeResponse, type TenantAuthSignOutResponse, type TenantAuthStartInput, type TenantAuthStartResponse, type BlogSessionInput, type BlogSessionResponse, type CartSessionResponse, type ChatbotChatInput, type ChatbotChatResponse, type ChatbotConfig, type ChatbotConfigUpdateInput, type ChatbotSessionResponse, type CheckoutSessionInput, type CheckoutSessionResponse, type CreateCollectionInput, type CreateCollectionResponse, type CreateEmailTemplateInput, type CreateEmailTemplateResponse, type CreateEmailTemplateVersionInput, type CreateEmailTemplateVersionResponse, type CustomerPortalContextResponse, type CustomerPortalOtherOrgsResponse, type CustomerPortalProfile, type CustomerPortalUpdateProfileInput, type CustomerPortalUpdateProfileResponse, type DashboardSessionResponse, type ExecuteActionInput, type ExecuteActionResponse, type FollowerEditInput, type FollowerEditResponse, type FollowerJoinInput, type FollowerJoinResponse, type FollowerLeaveInput, type FollowerLeaveResponse, type FollowerMeInput, type FollowerMeResponse, type GetCollectionResponse, type GetEmailTemplateResponse, type GetSiteMarketingPageResponse, type ListCollectionsResponse, type ListEmailTemplatesInput, type ListEmailTemplatesResponse, type ListRowsInput, type ListRowsResponse, type QueryRowsInput, type QueryRowsResponse, type SiteAssetInput, type StorefrontSessionInput, type StorefrontSessionResponse, type UploadSiteAssetResponse, type UpsertRowInput, type UpsertRowResponse } from "./contracts";
 export type FetchLike = typeof fetch;
 /** Options for {@link BiabDevClient} / {@link createBiabDevClient}. */
 export type BiabDevClientOptions = {
@@ -14,6 +14,7 @@ type RequestOptions<T> = {
     query?: Record<string, string | number | boolean | undefined>;
     body?: unknown;
     responseSchema: z.ZodType<T, z.ZodTypeDef, unknown>;
+    headers?: HeadersInit;
 };
 /**
  * Typed client for the BIAB package HTTP API.
@@ -31,6 +32,20 @@ export declare class BiabDevClient {
     site(siteId: string): BiabDevSiteClient;
     get emailTemplates(): BiabDevEmailTemplatesClient;
     get dashboard(): BiabDevDashboardClient;
+    get storefront(): BiabDevStorefrontClient;
+    get cart(): BiabDevCartClient;
+    get checkout(): BiabDevCheckoutClient;
+    get blog(): BiabDevBlogClient;
+    get chatbot(): BiabDevChatbotClient;
+    get auth(): BiabDevAuthClient;
+    /**
+     * Customer-portal client. Pin to a specific WorkOS organization id so the
+     * caller never sees data from any other org (recommended). Omit
+     * `organizationId` to fall back to the user's currently-active session
+     * org — only use that on first-party hosts where the host already pins
+     * the org.
+     */
+    customerPortal(organizationId?: string): BiabDevCustomerPortalClient;
     introspect(): Promise<AuthIntrospectResponse>;
     request<T>(options: RequestOptions<T>): Promise<T>;
 }
@@ -116,6 +131,67 @@ export declare class BiabDevDashboardClient {
     constructor(client: BiabDevClient);
     createSession(): Promise<DashboardSessionResponse>;
 }
+export declare class BiabDevStorefrontClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    createSession(input?: StorefrontSessionInput): Promise<StorefrontSessionResponse>;
+}
+export declare class BiabDevCartClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    createSession(): Promise<CartSessionResponse>;
+}
+export declare class BiabDevCheckoutClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    createSession(input: CheckoutSessionInput): Promise<CheckoutSessionResponse>;
+}
+export declare class BiabDevBlogClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    createSession(input?: BlogSessionInput): Promise<BlogSessionResponse>;
+}
+export declare class BiabDevChatbotClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    /** Returns the iframe URL for `<Chatbot/>`. */
+    createSession(): Promise<ChatbotSessionResponse>;
+    /** Reads the org's persisted chatbot config (system prompt, KB, model). */
+    getConfig(): Promise<ChatbotConfig>;
+    /**
+     * Persists the org's chatbot config. Requires `chatbot:write` scope on the
+     * API key — typically only used by admin tools, not embedded widgets.
+     */
+    updateConfig(input: ChatbotConfigUpdateInput): Promise<ChatbotConfig>;
+    /**
+     * Headless chat — host owns the UI. Each request is fully org-scoped: the
+     * server runs the LLM with the org's saved system prompt + KB + model.
+     */
+    chat(input: ChatbotChatInput): Promise<ChatbotChatResponse>;
+}
+/**
+ * Reads the active customer-portal context (organization + user) and exposes
+ * profile mutations + a list of *only this user's* other customer
+ * relationships.
+ *
+ * @remarks
+ * **Privacy:** When `organizationId` is set, every request is pinned to that
+ * org via the `X-BIAB-Customer-Portal-Org` header. The server-side
+ * `customerPortalProcedure` will reject any access to a different org, so a
+ * customer browsing a Dominoes-branded site can never accidentally see Pizza
+ * Hut data even if their account is linked to both. This is the recommended
+ * mode for embedding the SDK on a tenant's site or app.
+ */
+export declare class BiabDevCustomerPortalClient {
+    private readonly client;
+    private readonly organizationId;
+    constructor(client: BiabDevClient, organizationId: string | null);
+    private headers;
+    context(): Promise<CustomerPortalContextResponse>;
+    getProfile(): Promise<CustomerPortalProfile>;
+    updateProfile(input: CustomerPortalUpdateProfileInput): Promise<CustomerPortalUpdateProfileResponse>;
+    myOtherCustomerOrgs(): Promise<CustomerPortalOtherOrgsResponse>;
+}
 /**
  * Creates a {@link BiabDevClient} for the given host `baseUrl` and package API key.
  *
@@ -124,5 +200,20 @@ export declare class BiabDevDashboardClient {
  * for production use yet. Prefer non-production environments until a stable major is published.
  */
 export declare function createBiabDevClient(options: BiabDevClientOptions): BiabDevClient;
+/**
+ * Per-tenant auth: WorkOS hosted sign-in/sign-up scoped to the org bound to
+ * the API key. Used by the SDK's `createAuthHandler` (server) and
+ * `<SignIn />` / `<SignUp />` / `<SignOut />` components (client).
+ */
+export declare class BiabDevAuthClient {
+    private readonly client;
+    constructor(client: BiabDevClient);
+    start(input: TenantAuthStartInput): Promise<TenantAuthStartResponse>;
+    exchange(input: TenantAuthExchangeInput): Promise<TenantAuthExchangeResponse>;
+    me(input: {
+        sessionToken: string;
+    }): Promise<TenantAuthMeResponse>;
+    signOut(): Promise<TenantAuthSignOutResponse>;
+}
 export {};
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,EACN,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EAOvC,KAAK,wBAAwB,EAE7B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAG1B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EASvB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EAIjC,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAMrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAGtB,KAAK,cAAc,EAEnB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAItB,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,uEAAuE;AACvE,MAAM,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,cAAc,CAAC,EAAE,WAAW,CAAC;CAC7B,CAAC;AAEF,KAAK,cAAc,CAAC,CAAC,IAAI;IACxB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;CACpD,CAAC;AA8CF;;;;;;GAMG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;gBAE7C,OAAO,EAAE,oBAAoB;IAWzC,IAAI,CAAC,MAAM,EAAE,MAAM;IAInB,IAAI,cAAc,gCAEjB;IAED,IAAI,SAAS,2BAEZ;IAEK,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAQ7C,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAoCxD;AAED,qBAAa,iBAAiB;IAS5B,QAAQ,CAAC,MAAM,EAAE,aAAa;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM;IATxB,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;gBAG3C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;CASxB;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IAEtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAGhC;;;;OAIG;IACG,GAAG,CAAC,OAAO,SAAS,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAMlE;AAED,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,IAAI,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAOxC,MAAM,CACX,KAAK,EAAE,qBAAqB,GAC1B,OAAO,CAAC,wBAAwB,CAAC;IAW9B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAMvD;AAED,qBAAa,iBAAiB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,IAAI,CACT,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,aAAkB,GACvB,OAAO,CAAC,gBAAgB,CAAC;IAUtB,MAAM,CACX,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,cAAc,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAWvB,KAAK,CACV,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,cAAc,GACnB,OAAO,CAAC,iBAAiB,CAAC;CAU7B;AAED,qBAAa,mBAAmB;IAE9B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,MAAM,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAUrE;AAED,qBAAa,oBAAoB;IAE/B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,GAAG,CACR,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,kBAAoC,GACzC,OAAO,CAAC,qBAAqB,CAAC;CAUjC;AAED,qBAAa,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,IAAI,CACT,KAAK,GAAE,uBAA4B,GACjC,OAAO,CAAC,0BAA0B,CAAC;IAUhC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAO1D,MAAM,CACX,KAAK,EAAE,wBAAwB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAWjC,aAAa,CAClB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,+BAA+B,GACpC,OAAO,CAAC,kCAAkC,CAAC;CAU9C;AAED,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAGhC,OAAO,CAAC,UAAU;IAIZ,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY7D,EAAE,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYvD,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY7D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAWtE;AAED,qBAAa,sBAAsB;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,IAAI,OAAO,CAAC,wBAAwB,CAAC;CAOxD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,iBAEhE"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,EACN,KAAK,sBAAsB,EAE3B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAO5B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAGxB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,kCAAkC,EACvC,KAAK,6BAA6B,EAClC,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EAoBxC,KAAK,wBAAwB,EAE7B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAG1B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EASvB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EAIjC,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAMrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAGtB,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAI9B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAItB,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,uEAAuE;AACvE,MAAM,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,cAAc,CAAC,EAAE,WAAW,CAAC;CAC7B,CAAC;AAEF,KAAK,cAAc,CAAC,CAAC,IAAI;IACxB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AA8CF;;;;;;GAMG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;gBAE7C,OAAO,EAAE,oBAAoB;IAWzC,IAAI,CAAC,MAAM,EAAE,MAAM;IAInB,IAAI,cAAc,gCAEjB;IAED,IAAI,SAAS,2BAEZ;IAED,IAAI,UAAU,4BAEb;IAED,IAAI,IAAI,sBAEP;IAED,IAAI,QAAQ,0BAEX;IAED,IAAI,IAAI,sBAEP;IAED,IAAI,OAAO,yBAEV;IAED,IAAI,IAAI,sBAEP;IAED;;;;;;OAMG;IACH,cAAc,CAAC,cAAc,CAAC,EAAE,MAAM;IAIhC,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAQ7C,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAqCxD;AAED,qBAAa,iBAAiB;IAS5B,QAAQ,CAAC,MAAM,EAAE,aAAa;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM;IATxB,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;gBAG3C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;CASxB;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IAEtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAGhC;;;;OAIG;IACG,GAAG,CAAC,OAAO,SAAS,GAAG,OAAO,CAAC,4BAA4B,CAAC;CAMlE;AAED,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,IAAI,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAOxC,MAAM,CACX,KAAK,EAAE,qBAAqB,GAC1B,OAAO,CAAC,wBAAwB,CAAC;IAW9B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAMvD;AAED,qBAAa,iBAAiB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,IAAI,CACT,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,aAAkB,GACvB,OAAO,CAAC,gBAAgB,CAAC;IAUtB,MAAM,CACX,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,cAAc,GACnB,OAAO,CAAC,iBAAiB,CAAC;IAWvB,KAAK,CACV,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,cAAc,GACnB,OAAO,CAAC,iBAAiB,CAAC;CAU7B;AAED,qBAAa,mBAAmB;IAE9B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,MAAM,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAUrE;AAED,qBAAa,oBAAoB;IAE/B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAG1B,GAAG,CACR,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,kBAAoC,GACzC,OAAO,CAAC,qBAAqB,CAAC;CAUjC;AAED,qBAAa,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,IAAI,CACT,KAAK,GAAE,uBAA4B,GACjC,OAAO,CAAC,0BAA0B,CAAC;IAUhC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAO1D,MAAM,CACX,KAAK,EAAE,wBAAwB,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAWjC,aAAa,CAClB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,+BAA+B,GACpC,OAAO,CAAC,kCAAkC,CAAC;CAU9C;AAED,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM;IAGhC,OAAO,CAAC,UAAU;IAIZ,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY7D,EAAE,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYvD,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY7D,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAWtE;AAED,qBAAa,sBAAsB;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,IAAI,OAAO,CAAC,wBAAwB,CAAC;CAOxD;AAED,qBAAa,uBAAuB;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,CAClB,KAAK,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC;CASrC;AAED,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC;CAOnD;AAED,qBAAa,qBAAqB;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,CAClB,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,uBAAuB,CAAC;CASnC;AAED,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,aAAa,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAS3E;AAED,qBAAa,oBAAoB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAElD,+CAA+C;IACzC,aAAa,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAQtD,2EAA2E;IACrE,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAQzC;;;OAGG;IACG,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC;IAU3E;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CASjE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA2B;IAEtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,MAAM,GAAG,IAAI;IAG/C,OAAO,CAAC,OAAO;IAMT,OAAO,IAAI,OAAO,CAAC,6BAA6B,CAAC;IAQjD,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAQ5C,aAAa,CAClB,KAAK,EAAE,gCAAgC,GACrC,OAAO,CAAC,mCAAmC,CAAC;IAWzC,mBAAmB,IAAI,OAAO,CAAC,+BAA+B,CAAC;CAOrE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,iBAEhE;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,aAAa;IAE5C,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAUpE,QAAQ,CACb,KAAK,EAAE,uBAAuB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IAUhC,EAAE,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASlE,OAAO,IAAI,OAAO,CAAC,yBAAyB,CAAC;CAOnD"}

package/dist/client.js

@@ -1,4 +1,4 @@
-import { authIntrospectResponseSchema, createCollectionInputSchema, createCollectionResponseSchema, createEmailTemplateInputSchema, createEmailTemplateResponseSchema, createEmailTemplateVersionInputSchema, createEmailTemplateVersionResponseSchema, dashboardSessionResponseSchema, executeActionInputSchema, executeActionResponseSchema, followerEditInputSchema, followerEditResponseSchema, followerJoinInputSchema, followerJoinResponseSchema, followerLeaveInputSchema, followerLeaveResponseSchema, followerMeInputSchema, followerMeResponseSchema, getCollectionResponseSchema, getEmailTemplateResponseSchema, getSiteMarketingPageResponseSchema, listCollectionsResponseSchema, listEmailTemplatesInputSchema, listEmailTemplatesResponseSchema, listRowsInputSchema, listRowsResponseSchema, queryRowsInputSchema, queryRowsResponseSchema, siteAssetInputSchema, uploadSiteAssetResponseSchema, upsertRowInputSchema, upsertRowResponseSchema, } from "./contracts";
+import { authIntrospectResponseSchema, tenantAuthExchangeInputSchema, tenantAuthExchangeResponseSchema, tenantAuthMeResponseSchema, tenantAuthSignOutResponseSchema, tenantAuthStartInputSchema, tenantAuthStartResponseSchema, blogSessionInputSchema, blogSessionResponseSchema, cartSessionResponseSchema, chatbotChatInputSchema, chatbotChatResponseSchema, chatbotConfigSchema, chatbotConfigUpdateInputSchema, chatbotSessionResponseSchema, checkoutSessionInputSchema, checkoutSessionResponseSchema, createCollectionInputSchema, createCollectionResponseSchema, createEmailTemplateInputSchema, createEmailTemplateResponseSchema, createEmailTemplateVersionInputSchema, createEmailTemplateVersionResponseSchema, customerPortalContextResponseSchema, customerPortalOtherOrgsResponseSchema, customerPortalProfileSchema, customerPortalUpdateProfileInputSchema, customerPortalUpdateProfileResponseSchema, dashboardSessionResponseSchema, executeActionInputSchema, executeActionResponseSchema, followerEditInputSchema, followerEditResponseSchema, followerJoinInputSchema, followerJoinResponseSchema, followerLeaveInputSchema, followerLeaveResponseSchema, followerMeInputSchema, followerMeResponseSchema, getCollectionResponseSchema, getEmailTemplateResponseSchema, getSiteMarketingPageResponseSchema, listCollectionsResponseSchema, listEmailTemplatesInputSchema, listEmailTemplatesResponseSchema, listRowsInputSchema, listRowsResponseSchema, queryRowsInputSchema, queryRowsResponseSchema, siteAssetInputSchema, storefrontSessionInputSchema, storefrontSessionResponseSchema, uploadSiteAssetResponseSchema, upsertRowInputSchema, upsertRowResponseSchema, } from "./contracts";
 import { BiabApiError } from "./errors";
 function buildUrl(baseUrl, path, query) {
     /**
@@ -67,6 +67,34 @@ export class BiabDevClient {
     get dashboard() {
         return new BiabDevDashboardClient(this);
     }
+    get storefront() {
+        return new BiabDevStorefrontClient(this);
+    }
+    get cart() {
+        return new BiabDevCartClient(this);
+    }
+    get checkout() {
+        return new BiabDevCheckoutClient(this);
+    }
+    get blog() {
+        return new BiabDevBlogClient(this);
+    }
+    get chatbot() {
+        return new BiabDevChatbotClient(this);
+    }
+    get auth() {
+        return new BiabDevAuthClient(this);
+    }
+    /**
+     * Customer-portal client. Pin to a specific WorkOS organization id so the
+     * caller never sees data from any other org (recommended). Omit
+     * `organizationId` to fall back to the user's currently-active session
+     * org — only use that on first-party hosts where the host already pins
+     * the org.
+     */
+    customerPortal(organizationId) {
+        return new BiabDevCustomerPortalClient(this, organizationId ?? null);
+    }
     async introspect() {
         return this.request({
             method: "POST",
@@ -85,6 +113,7 @@ export class BiabDevClient {
                     ? {}
                     : { "Content-Type": "application/json" }),
                 ...(this.defaultHeaders ?? {}),
+                ...(options.headers ?? {}),
             },
         };
         if (options.body !== undefined) {
@@ -354,6 +383,169 @@ export class BiabDevDashboardClient {
         });
     }
 }
+export class BiabDevStorefrontClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async createSession(input) {
+        const body = storefrontSessionInputSchema.parse(input ?? undefined);
+        return this.client.request({
+            method: "POST",
+            path: "storefront/session",
+            body: body ?? {},
+            responseSchema: storefrontSessionResponseSchema,
+        });
+    }
+}
+export class BiabDevCartClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async createSession() {
+        return this.client.request({
+            method: "POST",
+            path: "cart/session",
+            responseSchema: cartSessionResponseSchema,
+        });
+    }
+}
+export class BiabDevCheckoutClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async createSession(input) {
+        const body = checkoutSessionInputSchema.parse(input);
+        return this.client.request({
+            method: "POST",
+            path: "checkout/session",
+            body,
+            responseSchema: checkoutSessionResponseSchema,
+        });
+    }
+}
+export class BiabDevBlogClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async createSession(input) {
+        const body = blogSessionInputSchema.parse(input ?? undefined);
+        return this.client.request({
+            method: "POST",
+            path: "blog/session",
+            body: body ?? {},
+            responseSchema: blogSessionResponseSchema,
+        });
+    }
+}
+export class BiabDevChatbotClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    /** Returns the iframe URL for `<Chatbot/>`. */
+    async createSession() {
+        return this.client.request({
+            method: "POST",
+            path: "chatbot/session",
+            responseSchema: chatbotSessionResponseSchema,
+        });
+    }
+    /** Reads the org's persisted chatbot config (system prompt, KB, model). */
+    async getConfig() {
+        return this.client.request({
+            method: "GET",
+            path: "chatbot/config",
+            responseSchema: chatbotConfigSchema,
+        });
+    }
+    /**
+     * Persists the org's chatbot config. Requires `chatbot:write` scope on the
+     * API key — typically only used by admin tools, not embedded widgets.
+     */
+    async updateConfig(input) {
+        const body = chatbotConfigUpdateInputSchema.parse(input);
+        return this.client.request({
+            method: "PATCH",
+            path: "chatbot/config",
+            body,
+            responseSchema: chatbotConfigSchema,
+        });
+    }
+    /**
+     * Headless chat — host owns the UI. Each request is fully org-scoped: the
+     * server runs the LLM with the org's saved system prompt + KB + model.
+     */
+    async chat(input) {
+        const body = chatbotChatInputSchema.parse(input);
+        return this.client.request({
+            method: "POST",
+            path: "chatbot/chat",
+            body,
+            responseSchema: chatbotChatResponseSchema,
+        });
+    }
+}
+/**
+ * Reads the active customer-portal context (organization + user) and exposes
+ * profile mutations + a list of *only this user's* other customer
+ * relationships.
+ *
+ * @remarks
+ * **Privacy:** When `organizationId` is set, every request is pinned to that
+ * org via the `X-BIAB-Customer-Portal-Org` header. The server-side
+ * `customerPortalProcedure` will reject any access to a different org, so a
+ * customer browsing a Dominoes-branded site can never accidentally see Pizza
+ * Hut data even if their account is linked to both. This is the recommended
+ * mode for embedding the SDK on a tenant's site or app.
+ */
+export class BiabDevCustomerPortalClient {
+    client;
+    organizationId;
+    constructor(client, organizationId) {
+        this.client = client;
+        this.organizationId = organizationId;
+    }
+    headers() {
+        return this.organizationId
+            ? { "X-BIAB-Customer-Portal-Org": this.organizationId }
+            : {};
+    }
+    async context() {
+        return this.client.request({
+            path: "customer-portal/context",
+            responseSchema: customerPortalContextResponseSchema,
+            headers: this.headers(),
+        });
+    }
+    async getProfile() {
+        return this.client.request({
+            path: "customer-portal/profile",
+            responseSchema: customerPortalProfileSchema,
+            headers: this.headers(),
+        });
+    }
+    async updateProfile(input) {
+        const body = customerPortalUpdateProfileInputSchema.parse(input);
+        return this.client.request({
+            method: "POST",
+            path: "customer-portal/profile",
+            body,
+            responseSchema: customerPortalUpdateProfileResponseSchema,
+            headers: this.headers(),
+        });
+    }
+    async myOtherCustomerOrgs() {
+        return this.client.request({
+            path: "customer-portal/other-orgs",
+            responseSchema: customerPortalOtherOrgsResponseSchema,
+            headers: this.headers(),
+        });
+    }
+}
 /**
  * Creates a {@link BiabDevClient} for the given host `baseUrl` and package API key.
  *
@@ -364,4 +556,48 @@ export class BiabDevDashboardClient {
 export function createBiabDevClient(options) {
     return new BiabDevClient(options);
 }
+/**
+ * Per-tenant auth: WorkOS hosted sign-in/sign-up scoped to the org bound to
+ * the API key. Used by the SDK's `createAuthHandler` (server) and
+ * `<SignIn />` / `<SignUp />` / `<SignOut />` components (client).
+ */
+export class BiabDevAuthClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async start(input) {
+        const body = tenantAuthStartInputSchema.parse(input);
+        return this.client.request({
+            method: "POST",
+            path: "auth/start",
+            body,
+            responseSchema: tenantAuthStartResponseSchema,
+        });
+    }
+    async exchange(input) {
+        const body = tenantAuthExchangeInputSchema.parse(input);
+        return this.client.request({
+            method: "POST",
+            path: "auth/exchange",
+            body,
+            responseSchema: tenantAuthExchangeResponseSchema,
+        });
+    }
+    async me(input) {
+        return this.client.request({
+            method: "GET",
+            path: "auth/me",
+            headers: { "x-biab-session": input.sessionToken },
+            responseSchema: tenantAuthMeResponseSchema,
+        });
+    }
+    async signOut() {
+        return this.client.request({
+            method: "POST",
+            path: "auth/sign-out",
+            responseSchema: tenantAuthSignOutResponseSchema,
+        });
+    }
+}
 //# sourceMappingURL=client.js.map