@businessdash/sdk 0.9.60 → 0.9.80

package/assets/biab-sw.js

@@ -0,0 +1,92 @@
+/**
+ * BusinessDash service worker.
+ *
+ * COPY THIS TO THE ROOT OF YOUR OWN SITE, e.g. `public/biab-sw.js`, so it is
+ * served from your domain. A push subscription belongs to an origin: a worker
+ * on someone else's domain — including ours — cannot receive your visitors'
+ * notifications.
+ *
+ * It must be served from the ROOT to control the whole site. A worker at
+ * `/assets/biab-sw.js` can only claim `/assets/` unless the response carries a
+ * `Service-Worker-Allowed` header, which is more setup than moving one file.
+ *
+ * Two responsibilities, and deliberately no `fetch` handler: adding one makes
+ * this a controlled-fetch worker with the whole cache lifecycle attached, and
+ * offline support should be a decision rather than a side effect of turning on
+ * notifications.
+ */
+
+self.addEventListener("install", () => {
+	// Take over immediately rather than waiting for every tab to close. A
+	// visitor who just granted permission expects it to work now, not after
+	// they next quit the browser.
+	self.skipWaiting();
+});
+
+self.addEventListener("activate", (event) => {
+	event.waitUntil(self.clients.claim());
+});
+
+self.addEventListener("push", (event) => {
+	if (!event.data) return;
+
+	let payload = {};
+	try {
+		payload = event.data.json();
+	} catch {
+		// A non-JSON payload is still worth showing. Browsers require a visible
+		// notification for every push — staying silent here spends the site's
+		// permission budget and can get the subscription revoked.
+		payload = { title: event.data.text() };
+	}
+
+	const title = payload.title || "Notification";
+	event.waitUntil(
+		Promise.all([
+			// Relay to any open tab so the page can render the notification in
+			// its OWN toast component. `@businessdash/sdk/notifications` picks
+			// this up; a site that does not use it ignores the message and gets
+			// the system notification alone, which is the old behaviour.
+			self.clients
+				.matchAll({ type: "window", includeUncontrolled: true })
+				.then((clients) => {
+					for (const client of clients) {
+						client.postMessage({ type: "businessdash:push", payload });
+					}
+				})
+				.catch(() => {
+					// A tab that went away mid-post is not an error worth
+					// failing the push over — the system notification below is
+					// the delivery that matters.
+				}),
+			self.registration.showNotification(title, {
+				body: payload.body || "",
+				icon: payload.icon,
+				badge: payload.badge,
+				// Same tag replaces rather than stacks — three updates about
+				// one order should be one notification, not three.
+				tag: payload.tag,
+				data: { url: payload.url, ...(payload.data || {}) },
+			}),
+		]),
+	);
+});
+
+self.addEventListener("notificationclick", (event) => {
+	event.notification.close();
+	const url = event.notification.data?.url;
+	if (!url) return;
+
+	event.waitUntil(
+		self.clients
+			.matchAll({ type: "window", includeUncontrolled: true })
+			.then((clients) => {
+				// Focus an existing tab on that URL rather than opening a fourth
+				// copy of the same page.
+				for (const client of clients) {
+					if (client.url === url && "focus" in client) return client.focus();
+				}
+				return self.clients.openWindow(url);
+			}),
+	);
+});

package/dist/account-core/index.d.ts

@@ -0,0 +1,126 @@
+/**
+ * `@businessdash/sdk/account` — headless customer session and followers.
+ *
+ * Two small controllers that were React-only (plus Solid) and had no reason to
+ * be: neither has any framework-specific logic.
+ *
+ * ## Session
+ *
+ * `createUserController` reads the auth handler's `/me` route with the session
+ * cookie. It never touches an API key — the handler the consumer mounts owns
+ * the credential, and this only asks it who is signed in.
+ *
+ * Sign-in, sign-up and sign-out are navigations, not requests, so they are
+ * plain functions over `buildAuthHref` rather than controller actions. Every
+ * one of them no-ops outside a browser instead of throwing, so an SSR render
+ * that touches them degrades rather than crashes.
+ *
+ * ## Followers
+ *
+ * `createFollowersController` wraps subscribe/unsubscribe with the local
+ * "this browser already subscribed" hint. The hint is a convenience for hiding
+ * a footer form without a round trip — it is NOT authority. `me()` is.
+ *
+ * @module
+ */
+import type { TenantAuthMeResponse } from "../contracts.js";
+export type UserStatus = "loading" | "signed-in" | "signed-out";
+export type UserSnapshot = {
+    status: UserStatus;
+    user: TenantAuthMeResponse | null;
+};
+export type UserController = {
+    snapshot(): UserSnapshot;
+    subscribe(callback: (snapshot: UserSnapshot) => void): () => void;
+    /** Read `/me`. Called once by `start()`; call again to re-check. */
+    refresh(): Promise<UserSnapshot>;
+    /** Kick off the first read. Bindings call this on mount. */
+    start(): void;
+    destroy(): void;
+};
+export type CreateUserControllerOptions = {
+    /** Where `createAuthHandler` is mounted. Defaults to `/api/biab-auth`. */
+    basePath?: string;
+    /** Injectable for tests; defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+};
+export declare function createUserController(options?: CreateUserControllerOptions): UserController;
+export type ProgrammaticAuthOptions = {
+    /** Where to send the customer afterwards. */
+    returnTo?: string;
+    /** Pre-fill the email on the hosted page (sign-in / sign-up only). */
+    loginHint?: string;
+    /** Override the auth-handler basePath. */
+    basePath?: string;
+};
+/** Href for the auth handler's sign-in route — render it in your own link. */
+export declare function signInHref(options?: ProgrammaticAuthOptions): string;
+/** Href for the auth handler's sign-up route. */
+export declare function signUpHref(options?: ProgrammaticAuthOptions): string;
+/** Href for the auth handler's sign-out route. */
+export declare function signOutHref(options?: {
+    basePath?: string;
+}): string;
+/** Navigate to sign-in. No-ops outside a browser. */
+export declare function signIn(options?: ProgrammaticAuthOptions): void;
+/** Navigate to sign-up. No-ops outside a browser. */
+export declare function signUp(options?: ProgrammaticAuthOptions): void;
+/** Navigate to sign-out. No-ops outside a browser. */
+export declare function signOut(options?: {
+    basePath?: string;
+}): void;
+export type FollowersCoreClient = {
+    followers: {
+        join(input: {
+            email: string;
+            name?: string;
+            source?: string;
+        }): Promise<unknown>;
+        leave(input: {
+            email: string;
+        }): Promise<unknown>;
+        me(input: {
+            email: string;
+        }): Promise<unknown>;
+        edit(input: {
+            email: string;
+            patch: {
+                name?: string;
+                source?: string;
+            };
+        }): Promise<unknown>;
+    };
+};
+export type FollowersSnapshot = {
+    /** This browser already subscribed. A hint for hiding a form, not authority. */
+    subscribedLocally: boolean;
+    /** The email this browser subscribed with, or `null`. */
+    localEmail: string | null;
+    isPending: boolean;
+    error: Error | null;
+};
+export type FollowersController = {
+    snapshot(): FollowersSnapshot;
+    subscribe(callback: (snapshot: FollowersSnapshot) => void): () => void;
+    join(input: {
+        email: string;
+        name?: string;
+        source?: string;
+    }): Promise<unknown>;
+    leave(email: string): Promise<unknown>;
+    /** Authoritative status for an email — unlike `subscribedLocally`. */
+    me(email: string): Promise<unknown>;
+    edit(email: string, patch: {
+        name?: string;
+        source?: string;
+    }): Promise<unknown>;
+    destroy(): void;
+};
+export type CreateFollowersControllerOptions = {
+    client: FollowersCoreClient;
+    /** Site id — namespaces the local hint so two sites don't share it. */
+    siteId: string;
+    onError?: (error: Error) => void;
+};
+export declare function createFollowersController(options: CreateFollowersControllerOptions): FollowersController;
+//# sourceMappingURL=index.d.ts.map

package/dist/account-core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/account-core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAI5D,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,YAAY,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,IAAI,YAAY,CAAC;IACzB,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAClE,oEAAoE;IACpE,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,4DAA4D;IAC5D,KAAK,IAAI,IAAI,CAAC;IACd,OAAO,IAAI,IAAI,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACzB,CAAC;AAEF,wBAAgB,oBAAoB,CACnC,OAAO,GAAE,2BAAgC,GACvC,cAAc,CAoDhB;AAED,MAAM,MAAM,uBAAuB,GAAG;IACrC,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM,CAExE;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM,CAExE;AAED,kDAAkD;AAClD,wBAAgB,WAAW,CAAC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,CAEvE;AAED,qDAAqD;AACrD,wBAAgB,MAAM,CAAC,OAAO,GAAE,uBAA4B,GAAG,IAAI,CAGlE;AAED,qDAAqD;AACrD,wBAAgB,MAAM,CAAC,OAAO,GAAE,uBAA4B,GAAG,IAAI,CAGlE;AAED,sDAAsD;AACtD,wBAAgB,OAAO,CAAC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAGjE;AAID,MAAM,MAAM,mBAAmB,GAAG;IACjC,SAAS,EAAE;QACV,IAAI,CAAC,KAAK,EAAE;YACX,KAAK,EAAE,MAAM,CAAC;YACd,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,CAAC;SAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACrB,KAAK,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,EAAE,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE;YACX,KAAK,EAAE,MAAM,CAAC;YACd,KAAK,EAAE;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;SAC1C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACrB,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,gFAAgF;IAChF,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yDAAyD;IACzD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,IAAI,iBAAiB,CAAC;IAC9B,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,sEAAsE;IACtE,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CACH,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACvC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,IAAI,IAAI,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACjC,CAAC;AAEF,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,gCAAgC,GACvC,mBAAmB,CA6FrB"}

package/dist/account-core/index.js

@@ -0,0 +1,191 @@
+/**
+ * `@businessdash/sdk/account` — headless customer session and followers.
+ *
+ * Two small controllers that were React-only (plus Solid) and had no reason to
+ * be: neither has any framework-specific logic.
+ *
+ * ## Session
+ *
+ * `createUserController` reads the auth handler's `/me` route with the session
+ * cookie. It never touches an API key — the handler the consumer mounts owns
+ * the credential, and this only asks it who is signed in.
+ *
+ * Sign-in, sign-up and sign-out are navigations, not requests, so they are
+ * plain functions over `buildAuthHref` rather than controller actions. Every
+ * one of them no-ops outside a browser instead of throwing, so an SSR render
+ * that touches them degrades rather than crashes.
+ *
+ * ## Followers
+ *
+ * `createFollowersController` wraps subscribe/unsubscribe with the local
+ * "this browser already subscribed" hint. The hint is a convenience for hiding
+ * a footer form without a round trip — it is NOT authority. `me()` is.
+ *
+ * @module
+ */
+import { buildAuthHref, clearLocalFollow, DEFAULT_AUTH_BASE_PATH, followerStoreKey, readLocalFollow, writeLocalFollow, } from "../auth-links.js";
+export function createUserController(options = {}) {
+    const basePath = (options.basePath ?? DEFAULT_AUTH_BASE_PATH).replace(/\/$/, "");
+    const doFetch = options.fetchImpl ?? globalThis.fetch;
+    let destroyed = false;
+    const subscribers = new Set();
+    let state = { status: "loading", user: null };
+    function notify() {
+        if (destroyed)
+            return;
+        for (const cb of subscribers)
+            cb(state);
+    }
+    async function refresh() {
+        if (destroyed)
+            return state;
+        try {
+            const res = await doFetch(`${basePath}/me`, { credentials: "include" });
+            const body = res.ok ? (await res.json()) : null;
+            if (destroyed)
+                return state;
+            state = body
+                ? { status: "signed-in", user: body }
+                : { status: "signed-out", user: null };
+        }
+        catch {
+            // A network failure is indistinguishable from "not signed in" from the
+            // page's point of view, and treating it as an error would leave every
+            // consumer writing the same fallback.
+            if (!destroyed)
+                state = { status: "signed-out", user: null };
+        }
+        notify();
+        return state;
+    }
+    return {
+        snapshot: () => state,
+        subscribe(callback) {
+            subscribers.add(callback);
+            return () => {
+                subscribers.delete(callback);
+            };
+        },
+        refresh,
+        start() {
+            void refresh();
+        },
+        destroy() {
+            destroyed = true;
+            subscribers.clear();
+        },
+    };
+}
+/** Href for the auth handler's sign-in route — render it in your own link. */
+export function signInHref(options = {}) {
+    return buildAuthHref("sign-in", options);
+}
+/** Href for the auth handler's sign-up route. */
+export function signUpHref(options = {}) {
+    return buildAuthHref("sign-up", options);
+}
+/** Href for the auth handler's sign-out route. */
+export function signOutHref(options = {}) {
+    return buildAuthHref("sign-out", options);
+}
+/** Navigate to sign-in. No-ops outside a browser. */
+export function signIn(options = {}) {
+    if (typeof window === "undefined")
+        return;
+    window.location.assign(signInHref(options));
+}
+/** Navigate to sign-up. No-ops outside a browser. */
+export function signUp(options = {}) {
+    if (typeof window === "undefined")
+        return;
+    window.location.assign(signUpHref(options));
+}
+/** Navigate to sign-out. No-ops outside a browser. */
+export function signOut(options = {}) {
+    if (typeof window === "undefined")
+        return;
+    window.location.assign(signOutHref(options));
+}
+export function createFollowersController(options) {
+    const { client, siteId, onError } = options;
+    const storeKey = followerStoreKey(siteId);
+    let destroyed = false;
+    const subscribers = new Set();
+    let local = readLocalFollow(storeKey);
+    let isPending = false;
+    let error = null;
+    let cached = null;
+    function snapshot() {
+        if (!cached) {
+            cached = {
+                subscribedLocally: local !== null,
+                localEmail: local?.email ?? null,
+                isPending,
+                error,
+            };
+        }
+        return cached;
+    }
+    function notify() {
+        if (destroyed)
+            return;
+        cached = null;
+        const next = snapshot();
+        for (const cb of subscribers)
+            cb(next);
+    }
+    async function run(work, fallback) {
+        isPending = true;
+        error = null;
+        notify();
+        try {
+            return await work();
+        }
+        catch (cause) {
+            const err = cause instanceof Error ? cause : new Error(fallback);
+            error = err;
+            onError?.(err);
+            throw err;
+        }
+        finally {
+            isPending = false;
+            notify();
+        }
+    }
+    return {
+        snapshot,
+        subscribe(callback) {
+            subscribers.add(callback);
+            return () => {
+                subscribers.delete(callback);
+            };
+        },
+        join(input) {
+            return run(async () => {
+                const res = await client.followers.join(input);
+                local = { email: input.email, at: Date.now() };
+                writeLocalFollow(storeKey, local);
+                return res;
+            }, "Could not subscribe.");
+        },
+        leave(email) {
+            return run(async () => {
+                const res = await client.followers.leave({ email });
+                clearLocalFollow(storeKey);
+                local = null;
+                return res;
+            }, "Could not unsubscribe.");
+        },
+        me(email) {
+            return run(() => client.followers.me({ email }), "Could not read status.");
+        },
+        edit(email, patch) {
+            return run(() => client.followers.edit({ email, patch }), "Could not update the subscription.");
+        },
+        destroy() {
+            destroyed = true;
+            subscribers.clear();
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/account-core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/account-core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EACN,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAEhB,eAAe,EACf,gBAAgB,GAChB,MAAM,kBAAkB,CAAC;AA6B1B,MAAM,UAAU,oBAAoB,CACnC,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC,OAAO,CACpE,KAAK,EACL,EAAE,CACF,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAEtD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,IAAI,KAAK,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE5D,SAAS,MAAM;QACd,IAAI,SAAS;YAAE,OAAO;QACtB,KAAK,MAAM,EAAE,IAAI,WAAW;YAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,OAAO;QACrB,IAAI,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,QAAQ,KAAK,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC5B,KAAK,GAAG,IAAI;gBACX,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;gBACrC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACR,uEAAuE;YACvE,sEAAsE;YACtE,sCAAsC;YACtC,IAAI,CAAC,SAAS;gBAAE,KAAK,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QACD,MAAM,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACN,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,SAAS,CAAC,QAAQ;YACjB,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE;gBACX,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC;QACH,CAAC;QACD,OAAO;QACP,KAAK;YACJ,KAAK,OAAO,EAAE,CAAC;QAChB,CAAC;QACD,OAAO;YACN,SAAS,GAAG,IAAI,CAAC;YACjB,WAAW,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACD,CAAC;AACH,CAAC;AAWD,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,UAAmC,EAAE;IAC/D,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,UAAmC,EAAE;IAC/D,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,UAAiC,EAAE;IAC9D,OAAO,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAAC,UAAmC,EAAE;IAC3D,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAAC,UAAmC,EAAE;IAC3D,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,OAAO,CAAC,UAAiC,EAAE;IAC1D,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAsDD,MAAM,UAAU,yBAAyB,CACxC,OAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC9D,IAAI,KAAK,GAAuB,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,MAAM,GAA6B,IAAI,CAAC;IAE5C,SAAS,QAAQ;QAChB,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,GAAG;gBACR,iBAAiB,EAAE,KAAK,KAAK,IAAI;gBACjC,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;gBAChC,SAAS;gBACT,KAAK;aACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,SAAS,MAAM;QACd,IAAI,SAAS;YAAE,OAAO;QACtB,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,KAAK,MAAM,EAAE,IAAI,WAAW;YAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,GAAG,CAAI,IAAsB,EAAE,QAAgB;QAC7D,SAAS,GAAG,IAAI,CAAC;QACjB,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,EAAE,CAAC;QACT,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,KAAK,GAAG,GAAG,CAAC;YACZ,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,GAAG,CAAC;QACX,CAAC;gBAAS,CAAC;YACV,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;IAED,OAAO;QACN,QAAQ;QACR,SAAS,CAAC,QAAQ;YACjB,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE;gBACX,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK;YACT,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/C,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC/C,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAClC,OAAO,GAAG,CAAC;YACZ,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,KAAK;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC3B,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO,GAAG,CAAC;YACZ,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC9B,CAAC;QAED,EAAE,CAAC,KAAK;YACP,OAAO,GAAG,CACT,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EACpC,wBAAwB,CACxB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,KAAK;YAChB,OAAO,GAAG,CACT,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAC7C,oCAAoC,CACpC,CAAC;QACH,CAAC;QAED,OAAO;YACN,SAAS,GAAG,IAAI,CAAC;YACjB,WAAW,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/account.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `@businessdash/sdk/account` — the framework-agnostic customer session and
+ * followers cores.
+ *
+ * Source-shipped bindings import through this public subpath, as they do for
+ * `forms`, `store`, `chat` and `blog`.
+ *
+ * @module
+ */
+export * from "./account-core/index.js";
+//# sourceMappingURL=account.d.ts.map

package/dist/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,cAAc,yBAAyB,CAAC"}

package/dist/account.js

@@ -0,0 +1,11 @@
+/**
+ * `@businessdash/sdk/account` — the framework-agnostic customer session and
+ * followers cores.
+ *
+ * Source-shipped bindings import through this public subpath, as they do for
+ * `forms`, `store`, `chat` and `blog`.
+ *
+ * @module
+ */
+export * from "./account-core/index.js";
+//# sourceMappingURL=account.js.map

package/dist/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,cAAc,yBAAyB,CAAC"}

package/dist/auth-handler.d.ts

@@ -79,13 +79,13 @@ export declare function getTenantSession(input: {
     siteOrigin?: string;
     fetch?: BiabDevClientOptions["fetch"];
 }): Promise<{
+    role: string | null;
     user: {
         email: string | null;
         id: string;
         firstName: string | null;
         lastName: string | null;
     };
-    role: string | null;
     organizationId: string;
 } | null>;
 export {};

package/dist/auth-links.d.ts

@@ -0,0 +1,33 @@
+/**
+ * URL construction for the tenant auth handler, shared by every binding.
+ *
+ * The handler (`createAuthHandler`) is the one server-side piece a consumer
+ * mounts; the sign-in / sign-up / sign-out surfaces in each framework are just
+ * links into it. Framework-free so a second binding doesn't fork the
+ * query-parameter contract.
+ *
+ * @module
+ */
+/** Where `createAuthHandler` is mounted unless the consumer says otherwise. */
+export declare const DEFAULT_AUTH_BASE_PATH = "/api/biab-auth";
+export type AuthHrefOptions = {
+    /** Where to send the user after auth completes. */
+    returnTo?: string | undefined;
+    /** Pre-fill the email field on the platform-hosted page. */
+    loginHint?: string | undefined;
+    /** Override the basePath the auth handler is mounted at. */
+    basePath?: string | undefined;
+};
+/** Build the href for one of the auth handler's routes. */
+export declare function buildAuthHref(subroute: "sign-in" | "sign-up" | "sign-out", options: AuthHrefOptions): string;
+/** Local-storage bookkeeping for the "this browser already subscribed" hint. */
+export type LocalFollow = {
+    email: string;
+    at: number;
+};
+export declare const FOLLOWER_STORE_PREFIX = "biab.followers.";
+export declare function followerStoreKey(siteId: string): string;
+export declare function readLocalFollow(key: string): LocalFollow | null;
+export declare function writeLocalFollow(key: string, value: LocalFollow): void;
+export declare function clearLocalFollow(key: string): void;
+//# sourceMappingURL=auth-links.d.ts.map

package/dist/auth-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-links.d.ts","sourceRoot":"","sources":["../src/auth-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,MAAM,MAAM,eAAe,GAAG;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,CAAC;AAEF,2DAA2D;AAC3D,wBAAgB,aAAa,CAC5B,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,EAC5C,OAAO,EAAE,eAAe,GACtB,MAAM,CAOR;AAED,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAY/D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAOtE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAOlD"}

package/dist/auth-links.js

@@ -0,0 +1,64 @@
+/**
+ * URL construction for the tenant auth handler, shared by every binding.
+ *
+ * The handler (`createAuthHandler`) is the one server-side piece a consumer
+ * mounts; the sign-in / sign-up / sign-out surfaces in each framework are just
+ * links into it. Framework-free so a second binding doesn't fork the
+ * query-parameter contract.
+ *
+ * @module
+ */
+/** Where `createAuthHandler` is mounted unless the consumer says otherwise. */
+export const DEFAULT_AUTH_BASE_PATH = "/api/biab-auth";
+/** Build the href for one of the auth handler's routes. */
+export function buildAuthHref(subroute, options) {
+    const base = (options.basePath ?? DEFAULT_AUTH_BASE_PATH).replace(/\/$/, "");
+    const params = new URLSearchParams();
+    if (options.returnTo)
+        params.set("returnTo", options.returnTo);
+    if (options.loginHint)
+        params.set("loginHint", options.loginHint);
+    const qs = params.toString();
+    return `${base}/${subroute}${qs ? `?${qs}` : ""}`;
+}
+export const FOLLOWER_STORE_PREFIX = "biab.followers.";
+export function followerStoreKey(siteId) {
+    return `${FOLLOWER_STORE_PREFIX}${siteId}`;
+}
+export function readLocalFollow(key) {
+    if (typeof window === "undefined")
+        return null;
+    try {
+        const raw = window.localStorage.getItem(key);
+        if (!raw)
+            return null;
+        const parsed = JSON.parse(raw);
+        return typeof parsed?.email === "string"
+            ? { email: parsed.email, at: Number(parsed.at) || 0 }
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeLocalFollow(key, value) {
+    if (typeof window === "undefined")
+        return;
+    try {
+        window.localStorage.setItem(key, JSON.stringify(value));
+    }
+    catch {
+        // storage disabled / quota — the local hint is best-effort.
+    }
+}
+export function clearLocalFollow(key) {
+    if (typeof window === "undefined")
+        return;
+    try {
+        window.localStorage.removeItem(key);
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=auth-links.js.map

package/dist/auth-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-links.js","sourceRoot":"","sources":["../src/auth-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAWvD,2DAA2D;AAC3D,MAAM,UAAU,aAAa,CAC5B,QAA4C,EAC5C,OAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,GAAG,IAAI,IAAI,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACnD,CAAC;AAKD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC9C,OAAO,GAAG,qBAAqB,GAAG,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,OAAO,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;YACrD,CAAC,CAAC,IAAI,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,KAAkB;IAC/D,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,IAAI,CAAC;QACJ,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,4DAA4D;IAC7D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC3C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,IAAI,CAAC;QACJ,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,SAAS;IACV,CAAC;AACF,CAAC"}