@clivly/sdk 0.4.0 → 0.7.0

package/README.md

@@ -18,15 +18,14 @@ npm install clivly
 Clivly's stable packages publish on npm's `latest` tag. Use `@next` only when
 you are intentionally validating a prerelease build.
 
-Add `drizzle-orm` when you use `clivly/drizzle` or `clivly/core/drizzle`, and
+Add `drizzle-orm` when you use `clivly/drizzle`, and
 `vite` when you use the Vite/TanStack Start plugin.
 
 ## Usage
 
 ```ts
-import { createClivlySDK } from "clivly/sdk";
+import { createClivlySDK, defineClivlyConfig } from "clivly/sdk";
 import { fromDrizzle } from "clivly/drizzle";
-import { defineClivlyConfig } from "clivly/core";
 import { db, participants, accounts } from "./db";
 
 // Declarative entity config — the non-deprecated source of truth. It maps your
@@ -48,7 +47,7 @@ const entities = defineClivlyConfig({
 });
 
 const clivly = createClivlySDK({
-  apiKey: process.env.CLIVLY_API_KEY!, // sk_live_… from Settings → API keys
+  apiKey: process.env.CLIVLY_SECRET_KEY!, // sk_live_… from Settings → API keys
   entities,
   source: {
     contacts: fromDrizzle(db, participants, { entity: "participants", cursorField: "updatedAt" }),
@@ -63,7 +62,7 @@ await clivly.start();      // heartbeat + backfill + interval delta sync
 
 // Optional: let Clivly's dashboard start a sync in this app.
 const remote = createClivlySDK({
-  apiKey: process.env.CLIVLY_API_KEY!,
+  apiKey: process.env.CLIVLY_SECRET_KEY!,
   entities,
   source: { /* … */ },
   syncTrigger: {
@@ -71,7 +70,6 @@ const remote = createClivlySDK({
     url: process.env.CLIVLY_SYNC_TRIGGER_URL,
     secret: process.env.CLIVLY_SYNC_TRIGGER_SECRET, // whsec_… from Integrations → Remote sync
   },
-  verifyToken: process.env.CLIVLY_VERIFY_TOKEN,
 });
 
 export async function POST(request: Request) {
@@ -170,7 +168,7 @@ serverless cold start**, so a fresh isolate would re-page the whole entity. Pass
 
 ```ts
 const clivly = createClivlySDK({
-  apiKey: process.env.CLIVLY_API_KEY!,
+  apiKey: process.env.CLIVLY_SECRET_KEY!,
   entities,
   source: { /* … */ },
   cursorStore: {

package/dist/chat-session.cjs

@@ -36,7 +36,7 @@ function originAllowed(origin, allowedOrigins) {
 	if (!origin) return false;
 	return allowedOrigins.includes(origin);
 }
-function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API_URL, fetchImpl = fetch }) {
+function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API_URL, fetchImpl = fetch, resolveUser }) {
 	const sessionUrl = `${normalizeApiUrl(apiUrl)}/clivly/widget/session`;
 	return async (request) => {
 		if (request.method !== "POST") return new Response(JSON.stringify({ error: "method_not_allowed" }), {
@@ -55,6 +55,12 @@ function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API
 			return jsonResponse({ error: "invalid_json" }, 400);
 		}
 		if (!isChatSessionRequestBody(body)) return jsonResponse({ error: "invalid_request" }, 400);
+		let hostUser = null;
+		if (resolveUser) try {
+			hostUser = await resolveUser(request);
+		} catch {
+			console.warn("[clivly] resolveUser threw; continuing without host identity");
+		}
 		try {
 			const upstream = await fetchImpl(sessionUrl, {
 				method: "POST",
@@ -67,7 +73,8 @@ function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API
 					widgetId: body.widgetId,
 					visitor: body.visitor,
 					visitorToken: body.visitorToken,
-					origin
+					origin,
+					...hostUser ? { hostUser } : {}
 				})
 			});
 			const responseBody = await upstream.text();

package/dist/chat-session.d.cts

@@ -1,11 +1,5 @@
-import { c as CreateChatSessionHandlerOptions } from "./types-jMafEyTv.cjs";
-
+import { c as CreateChatSessionHandlerOptions } from "./types-DTaz5mLi.cjs";
 //#region src/chat-session.d.ts
-declare function createChatSessionHandler({
-  allowedOrigins,
-  apiKey,
-  apiUrl,
-  fetchImpl
-}: CreateChatSessionHandlerOptions): (request: Request) => Promise<Response>;
+declare function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl, fetchImpl, resolveUser }: CreateChatSessionHandlerOptions): (request: Request) => Promise<Response>;
 //#endregion
 export { createChatSessionHandler };

package/dist/chat-session.d.mts

@@ -1,11 +1,5 @@
-import { c as CreateChatSessionHandlerOptions } from "./types-B7wBCHRT.mjs";
-
+import { c as CreateChatSessionHandlerOptions } from "./types-DTaz5mLi.mjs";
 //#region src/chat-session.d.ts
-declare function createChatSessionHandler({
-  allowedOrigins,
-  apiKey,
-  apiUrl,
-  fetchImpl
-}: CreateChatSessionHandlerOptions): (request: Request) => Promise<Response>;
+declare function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl, fetchImpl, resolveUser }: CreateChatSessionHandlerOptions): (request: Request) => Promise<Response>;
 //#endregion
 export { createChatSessionHandler };

package/dist/chat-session.mjs

@@ -35,7 +35,7 @@ function originAllowed(origin, allowedOrigins) {
 	if (!origin) return false;
 	return allowedOrigins.includes(origin);
 }
-function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API_URL, fetchImpl = fetch }) {
+function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API_URL, fetchImpl = fetch, resolveUser }) {
 	const sessionUrl = `${normalizeApiUrl(apiUrl)}/clivly/widget/session`;
 	return async (request) => {
 		if (request.method !== "POST") return new Response(JSON.stringify({ error: "method_not_allowed" }), {
@@ -54,6 +54,12 @@ function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API
 			return jsonResponse({ error: "invalid_json" }, 400);
 		}
 		if (!isChatSessionRequestBody(body)) return jsonResponse({ error: "invalid_request" }, 400);
+		let hostUser = null;
+		if (resolveUser) try {
+			hostUser = await resolveUser(request);
+		} catch {
+			console.warn("[clivly] resolveUser threw; continuing without host identity");
+		}
 		try {
 			const upstream = await fetchImpl(sessionUrl, {
 				method: "POST",
@@ -66,7 +72,8 @@ function createChatSessionHandler({ allowedOrigins, apiKey, apiUrl = DEFAULT_API
 					widgetId: body.widgetId,
 					visitor: body.visitor,
 					visitorToken: body.visitorToken,
-					origin
+					origin,
+					...hostUser ? { hostUser } : {}
 				})
 			});
 			const responseBody = await upstream.text();

package/dist/drizzle.cjs

@@ -1,7 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_drizzle_meta = require("./drizzle-meta-iAu8w1hj.cjs");
+const require_drizzle_meta = require("./drizzle-meta-CdCs30q3.cjs");
 let drizzle_orm = require("drizzle-orm");
 let drizzle_orm_pg_core = require("drizzle-orm/pg-core");
+let _clivly_core_drizzle = require("@clivly/core/drizzle");
 //#region src/drizzle.ts
 function buildColumnsMeta(table) {
 	const columns = (0, drizzle_orm.getTableColumns)(table);
@@ -103,5 +104,11 @@ function drizzleIntrospector(db) {
 	};
 }
 //#endregion
+Object.defineProperty(exports, "discoverFromDrizzle", {
+	enumerable: true,
+	get: function() {
+		return _clivly_core_drizzle.discoverFromDrizzle;
+	}
+});
 exports.drizzleIntrospector = drizzleIntrospector;
 exports.fromDrizzle = fromDrizzle;

package/dist/drizzle.d.cts

@@ -1,6 +1,6 @@
-import { m as NamespaceIntrospector, p as SyncSource } from "./types-jMafEyTv.cjs";
+import { m as NamespaceIntrospector, p as SyncSource } from "./types-DTaz5mLi.cjs";
 import { Table } from "drizzle-orm";
-
+import { discoverFromDrizzle } from "@clivly/core/drizzle";
 //#region src/drizzle.d.ts
 interface DrizzleDb {
   select: (...args: any[]) => any;
@@ -25,4 +25,4 @@ declare function fromDrizzle(db: DrizzleDb, table: Table, opts: {
  */
 declare function drizzleIntrospector(db: unknown): NamespaceIntrospector;
 //#endregion
-export { drizzleIntrospector, fromDrizzle };
+export { discoverFromDrizzle, drizzleIntrospector, fromDrizzle };

package/dist/drizzle.d.mts

@@ -1,6 +1,6 @@
-import { m as NamespaceIntrospector, p as SyncSource } from "./types-B7wBCHRT.mjs";
+import { m as NamespaceIntrospector, p as SyncSource } from "./types-DTaz5mLi.mjs";
 import { Table } from "drizzle-orm";
-
+import { discoverFromDrizzle } from "@clivly/core/drizzle";
 //#region src/drizzle.d.ts
 interface DrizzleDb {
   select: (...args: any[]) => any;
@@ -25,4 +25,4 @@ declare function fromDrizzle(db: DrizzleDb, table: Table, opts: {
  */
 declare function drizzleIntrospector(db: unknown): NamespaceIntrospector;
 //#endregion
-export { drizzleIntrospector, fromDrizzle };
+export { discoverFromDrizzle, drizzleIntrospector, fromDrizzle };

package/dist/drizzle.mjs

@@ -1,6 +1,7 @@
-import { t as DRIZZLE_META } from "./drizzle-meta-DMx_9nlj.mjs";
+import { t as DRIZZLE_META } from "./drizzle-meta-DNqzkREf.mjs";
 import { asc, getTableColumns, getTableName, sql } from "drizzle-orm";
 import { getTableConfig } from "drizzle-orm/pg-core";
+import { discoverFromDrizzle } from "@clivly/core/drizzle";
 //#region src/drizzle.ts
 function buildColumnsMeta(table) {
 	const columns = getTableColumns(table);
@@ -102,4 +103,4 @@ function drizzleIntrospector(db) {
 	};
 }
 //#endregion
-export { drizzleIntrospector, fromDrizzle };
+export { discoverFromDrizzle, drizzleIntrospector, fromDrizzle };

package/dist/index.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_drizzle_meta = require("./drizzle-meta-iAu8w1hj.cjs");
+const require_drizzle_meta = require("./drizzle-meta-CdCs30q3.cjs");
 const require_chat_session = require("./chat-session.cjs");
+let _clivly_core_entity_config = require("@clivly/core/entity-config");
 //#region src/custom-slug.ts
 const NON_ALNUM = /[^a-z0-9]+/g;
 const EDGE_HYPHENS = /(^-|-$)/g;
@@ -395,9 +396,7 @@ function observedTriggerUrl(req) {
 	const proto = forwardedProto || requestUrl.protocol.replace(":", "");
 	try {
 		return new URL(`${proto}://${host}${requestUrl.pathname}`).toString();
-	} catch {
-		return;
-	}
+	} catch {}
 }
 /**
 * Decide which trigger URL to report, in precedence order:
@@ -595,9 +594,7 @@ function connectReason(status) {
 async function resolveOrg(response) {
 	try {
 		return (await response.json())?.org;
-	} catch {
-		return;
-	}
+	} catch {}
 }
 function retryAfterMs(res) {
 	const header = res.headers.get("retry-after");
@@ -620,7 +617,8 @@ function createFetcher(retry) {
 			}
 			if (!(res === null || isRetryableStatus(res.status)) || attempt >= maxAttempts) return res;
 			const backoff = baseDelayMs * 2 ** (attempt - 1) + Math.random() * baseDelayMs;
-			await sleep(res ? retryAfterMs(res) ?? backoff : backoff);
+			const wait = res ? retryAfterMs(res) ?? backoff : backoff;
+			await sleep(wait);
 		}
 	};
 }
@@ -677,7 +675,7 @@ async function handlePreviewRequest(config, preview) {
 	if (!source) return jsonResponse({ error: `No configured source for table "${preview.sourceTable}"` }, 400);
 	const idField = source.idField ?? "id";
 	const filterColumns = preview.filter ? Object.keys(preview.filter).filter((k) => k !== "$raw") : [];
-	const needed = new Set([
+	const needed = /* @__PURE__ */ new Set([
 		idField,
 		...Object.values(preview.fieldMap),
 		...filterColumns
@@ -939,3 +937,9 @@ exports.ClivlyNetworkError = ClivlyNetworkError;
 exports.ClivlyRateLimitError = ClivlyRateLimitError;
 exports.createChatSessionHandler = require_chat_session.createChatSessionHandler;
 exports.createClivlySDK = createClivlySDK;
+Object.defineProperty(exports, "defineClivlyConfig", {
+	enumerable: true,
+	get: function() {
+		return _clivly_core_entity_config.defineClivlyConfig;
+	}
+});

package/dist/index.d.cts

@@ -1,6 +1,6 @@
-import { a as ClivlySDK, c as CreateChatSessionHandlerOptions, d as DoctorCheck, f as DoctorReport, i as ClivlyConnectResult, l as CursorStore, n as ChatWidgetVisitor, o as ClivlySDKConfig, r as ClivlyConnectReason, s as ClivlyUser, t as ChatSessionRequestBody, u as DiscoveredTable } from "./types-jMafEyTv.cjs";
+import { a as ClivlySDK, c as CreateChatSessionHandlerOptions, d as DoctorCheck, f as DoctorReport, i as ClivlyConnectResult, l as CursorStore, n as ChatWidgetVisitor, o as ClivlySDKConfig, r as ClivlyConnectReason, s as ClivlyUser, t as ChatSessionRequestBody, u as DiscoveredTable } from "./types-DTaz5mLi.cjs";
 import { createChatSessionHandler } from "./chat-session.cjs";
-
+import { ClivlyEntitiesConfig, defineClivlyConfig } from "@clivly/core/entity-config";
 //#region src/errors.d.ts
 declare class ClivlyError extends Error {
   /** HTTP status, or null when the request never completed (network error). */
@@ -31,4 +31,4 @@ declare class ClivlyNetworkError extends ClivlyError {}
  */
 declare function createClivlySDK(config: ClivlySDKConfig): ClivlySDK;
 //#endregion
-export { type ChatSessionRequestBody, type ChatWidgetVisitor, ClivlyAuthError, type ClivlyConnectReason, type ClivlyConnectResult, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, type ClivlySDK, type ClivlySDKConfig, type ClivlyUser, type CreateChatSessionHandlerOptions, type CursorStore, type DiscoveredTable, type DoctorCheck, type DoctorReport, createChatSessionHandler, createClivlySDK };
+export { type ChatSessionRequestBody, type ChatWidgetVisitor, ClivlyAuthError, type ClivlyConnectReason, type ClivlyConnectResult, type ClivlyEntitiesConfig, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, type ClivlySDK, type ClivlySDKConfig, type ClivlyUser, type CreateChatSessionHandlerOptions, type CursorStore, type DiscoveredTable, type DoctorCheck, type DoctorReport, createChatSessionHandler, createClivlySDK, defineClivlyConfig };

package/dist/index.d.mts

@@ -1,6 +1,6 @@
-import { a as ClivlySDK, c as CreateChatSessionHandlerOptions, d as DoctorCheck, f as DoctorReport, i as ClivlyConnectResult, l as CursorStore, n as ChatWidgetVisitor, o as ClivlySDKConfig, r as ClivlyConnectReason, s as ClivlyUser, t as ChatSessionRequestBody, u as DiscoveredTable } from "./types-B7wBCHRT.mjs";
+import { a as ClivlySDK, c as CreateChatSessionHandlerOptions, d as DoctorCheck, f as DoctorReport, i as ClivlyConnectResult, l as CursorStore, n as ChatWidgetVisitor, o as ClivlySDKConfig, r as ClivlyConnectReason, s as ClivlyUser, t as ChatSessionRequestBody, u as DiscoveredTable } from "./types-DTaz5mLi.mjs";
 import { createChatSessionHandler } from "./chat-session.mjs";
-
+import { ClivlyEntitiesConfig, defineClivlyConfig } from "@clivly/core/entity-config";
 //#region src/errors.d.ts
 declare class ClivlyError extends Error {
   /** HTTP status, or null when the request never completed (network error). */
@@ -31,4 +31,4 @@ declare class ClivlyNetworkError extends ClivlyError {}
  */
 declare function createClivlySDK(config: ClivlySDKConfig): ClivlySDK;
 //#endregion
-export { type ChatSessionRequestBody, type ChatWidgetVisitor, ClivlyAuthError, type ClivlyConnectReason, type ClivlyConnectResult, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, type ClivlySDK, type ClivlySDKConfig, type ClivlyUser, type CreateChatSessionHandlerOptions, type CursorStore, type DiscoveredTable, type DoctorCheck, type DoctorReport, createChatSessionHandler, createClivlySDK };
+export { type ChatSessionRequestBody, type ChatWidgetVisitor, ClivlyAuthError, type ClivlyConnectReason, type ClivlyConnectResult, type ClivlyEntitiesConfig, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, type ClivlySDK, type ClivlySDKConfig, type ClivlyUser, type CreateChatSessionHandlerOptions, type CursorStore, type DiscoveredTable, type DoctorCheck, type DoctorReport, createChatSessionHandler, createClivlySDK, defineClivlyConfig };

package/dist/index.mjs

@@ -1,5 +1,6 @@
-import { t as DRIZZLE_META } from "./drizzle-meta-DMx_9nlj.mjs";
+import { t as DRIZZLE_META } from "./drizzle-meta-DNqzkREf.mjs";
 import { createChatSessionHandler } from "./chat-session.mjs";
+import { defineClivlyConfig } from "@clivly/core/entity-config";
 //#region src/custom-slug.ts
 const NON_ALNUM = /[^a-z0-9]+/g;
 const EDGE_HYPHENS = /(^-|-$)/g;
@@ -394,9 +395,7 @@ function observedTriggerUrl(req) {
 	const proto = forwardedProto || requestUrl.protocol.replace(":", "");
 	try {
 		return new URL(`${proto}://${host}${requestUrl.pathname}`).toString();
-	} catch {
-		return;
-	}
+	} catch {}
 }
 /**
 * Decide which trigger URL to report, in precedence order:
@@ -594,9 +593,7 @@ function connectReason(status) {
 async function resolveOrg(response) {
 	try {
 		return (await response.json())?.org;
-	} catch {
-		return;
-	}
+	} catch {}
 }
 function retryAfterMs(res) {
 	const header = res.headers.get("retry-after");
@@ -619,7 +616,8 @@ function createFetcher(retry) {
 			}
 			if (!(res === null || isRetryableStatus(res.status)) || attempt >= maxAttempts) return res;
 			const backoff = baseDelayMs * 2 ** (attempt - 1) + Math.random() * baseDelayMs;
-			await sleep(res ? retryAfterMs(res) ?? backoff : backoff);
+			const wait = res ? retryAfterMs(res) ?? backoff : backoff;
+			await sleep(wait);
 		}
 	};
 }
@@ -676,7 +674,7 @@ async function handlePreviewRequest(config, preview) {
 	if (!source) return jsonResponse({ error: `No configured source for table "${preview.sourceTable}"` }, 400);
 	const idField = source.idField ?? "id";
 	const filterColumns = preview.filter ? Object.keys(preview.filter).filter((k) => k !== "$raw") : [];
-	const needed = new Set([
+	const needed = /* @__PURE__ */ new Set([
 		idField,
 		...Object.values(preview.fieldMap),
 		...filterColumns
@@ -932,4 +930,4 @@ function createClivlySDK(config) {
 	};
 }
 //#endregion
-export { ClivlyAuthError, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, createChatSessionHandler, createClivlySDK };
+export { ClivlyAuthError, ClivlyError, ClivlyNetworkError, ClivlyRateLimitError, createChatSessionHandler, createClivlySDK, defineClivlyConfig };

package/dist/{types-B7wBCHRT.d.mts → types-DTaz5mLi.d.cts}

@@ -1,5 +1,4 @@
 import { ClivlyEntitiesConfig } from "@clivly/core";
-
 //#region src/drizzle-meta.d.ts
 declare const DRIZZLE_META: "__clivly_drizzle_source_meta__";
 interface DrizzleSourceMeta {
@@ -85,9 +84,12 @@ interface ClivlySDKConfig {
    * above is unambiguous; nothing here is part of the supported API.
    */
   experimental?: {
-    /** Cloudflare Tunnel token — reserved for tunnel mode. Not wired up yet. */tunnelToken?: string; /** CRM write-back target — reserved. Not wired up yet. */
+    /** Cloudflare Tunnel token — reserved for tunnel mode. Not wired up yet. */
+    tunnelToken?: string;
+    /** CRM write-back target — reserved. Not wired up yet. */
     writeBack?: {
-      enabled?: boolean; /** Only crm_* tables are ever accepted; this narrows further. */
+      enabled?: boolean;
+      /** Only crm_* tables are ever accepted; this narrows further. */
       tables?: string[];
     };
   };
@@ -116,7 +118,9 @@ interface ClivlySDKConfig {
    * responses (e.g. 4xx other than 429) are returned immediately, not retried.
    */
   retry?: {
-    /** Total attempts including the first. Defaults to 3. Min 1. */maxAttempts?: number; /** Base backoff in ms (doubled each attempt). Defaults to 500. */
+    /** Total attempts including the first. Defaults to 3. Min 1. */
+    maxAttempts?: number;
+    /** Base backoff in ms (doubled each attempt). Defaults to 500. */
     baseDelayMs?: number;
   };
   /** Tables/columns to report for entity discovery + mapping. */
@@ -126,7 +130,8 @@ interface ClivlySDKConfig {
   source?: {
     contacts: SyncSource;
     companies?: SyncSource;
-    deals?: SyncSource; /** Org-defined custom objects to mirror. Each carries its object-type slug. */
+    deals?: SyncSource;
+    /** Org-defined custom objects to mirror. Each carries its object-type slug. */
     custom?: Array<SyncSource & {
       objectType: string;
     }>;
@@ -178,7 +183,9 @@ interface ClivlySDKConfig {
   /**
    * Shared secret Clivly Cloud presents (as `Authorization: Bearer <token>`) when
    * calling the `/clivly/auth/verify` endpoint. Required for the verify handler to
-   * authenticate the caller; without it the handler fails closed (HTTP 503).
+   * authenticate the caller; without it the handler fails closed (HTTP 503). No
+   * cloud consumer calls this endpoint yet — it is an inert primitive reserved for
+   * a future CRM/dashboard auth-passthrough.
    */
   verifyToken?: string;
 }
@@ -201,6 +208,13 @@ interface CreateChatSessionHandlerOptions {
   apiKey: string;
   apiUrl?: string;
   fetchImpl?: typeof fetch;
+  /**
+   * Optional host-auth hook. When provided, it runs on the incoming browser
+   * request (session cookies intact) and, on a non-null `ClivlyUser`, the host
+   * vouches for that verified identity to Clivly Cloud. Absent/null/throwing =
+   * the visitor stays self-reported. Never fails the session.
+   */
+  resolveUser?: (req: Request) => Promise<ClivlyUser | null> | ClivlyUser | null;
 }
 interface DoctorCheck {
   /** Human-readable outcome — what passed, or why it failed. */

package/dist/{types-jMafEyTv.d.cts → types-DTaz5mLi.d.mts}

@@ -1,5 +1,4 @@
 import { ClivlyEntitiesConfig } from "@clivly/core";
-
 //#region src/drizzle-meta.d.ts
 declare const DRIZZLE_META: "__clivly_drizzle_source_meta__";
 interface DrizzleSourceMeta {
@@ -85,9 +84,12 @@ interface ClivlySDKConfig {
    * above is unambiguous; nothing here is part of the supported API.
    */
   experimental?: {
-    /** Cloudflare Tunnel token — reserved for tunnel mode. Not wired up yet. */tunnelToken?: string; /** CRM write-back target — reserved. Not wired up yet. */
+    /** Cloudflare Tunnel token — reserved for tunnel mode. Not wired up yet. */
+    tunnelToken?: string;
+    /** CRM write-back target — reserved. Not wired up yet. */
     writeBack?: {
-      enabled?: boolean; /** Only crm_* tables are ever accepted; this narrows further. */
+      enabled?: boolean;
+      /** Only crm_* tables are ever accepted; this narrows further. */
       tables?: string[];
     };
   };
@@ -116,7 +118,9 @@ interface ClivlySDKConfig {
    * responses (e.g. 4xx other than 429) are returned immediately, not retried.
    */
   retry?: {
-    /** Total attempts including the first. Defaults to 3. Min 1. */maxAttempts?: number; /** Base backoff in ms (doubled each attempt). Defaults to 500. */
+    /** Total attempts including the first. Defaults to 3. Min 1. */
+    maxAttempts?: number;
+    /** Base backoff in ms (doubled each attempt). Defaults to 500. */
     baseDelayMs?: number;
   };
   /** Tables/columns to report for entity discovery + mapping. */
@@ -126,7 +130,8 @@ interface ClivlySDKConfig {
   source?: {
     contacts: SyncSource;
     companies?: SyncSource;
-    deals?: SyncSource; /** Org-defined custom objects to mirror. Each carries its object-type slug. */
+    deals?: SyncSource;
+    /** Org-defined custom objects to mirror. Each carries its object-type slug. */
     custom?: Array<SyncSource & {
       objectType: string;
     }>;
@@ -178,7 +183,9 @@ interface ClivlySDKConfig {
   /**
    * Shared secret Clivly Cloud presents (as `Authorization: Bearer <token>`) when
    * calling the `/clivly/auth/verify` endpoint. Required for the verify handler to
-   * authenticate the caller; without it the handler fails closed (HTTP 503).
+   * authenticate the caller; without it the handler fails closed (HTTP 503). No
+   * cloud consumer calls this endpoint yet — it is an inert primitive reserved for
+   * a future CRM/dashboard auth-passthrough.
    */
   verifyToken?: string;
 }
@@ -201,6 +208,13 @@ interface CreateChatSessionHandlerOptions {
   apiKey: string;
   apiUrl?: string;
   fetchImpl?: typeof fetch;
+  /**
+   * Optional host-auth hook. When provided, it runs on the incoming browser
+   * request (session cookies intact) and, on a non-null `ClivlyUser`, the host
+   * vouches for that verified identity to Clivly Cloud. Absent/null/throwing =
+   * the visitor stays self-reported. Never fails the session.
+   */
+  resolveUser?: (req: Request) => Promise<ClivlyUser | null> | ClivlyUser | null;
 }
 interface DoctorCheck {
   /** Human-readable outcome — what passed, or why it failed. */

package/dist/vite.d.cts

@@ -1,6 +1,5 @@
-import { a as ClivlySDK } from "./types-jMafEyTv.cjs";
+import { a as ClivlySDK } from "./types-DTaz5mLi.cjs";
 import { Plugin } from "vite";
-
 //#region src/vite.d.ts
 interface ClivlyViteOptions {
   /** Log prefix for Clivly's boot lines. Defaults to "clivly". */

package/dist/vite.d.mts

@@ -1,6 +1,5 @@
-import { a as ClivlySDK } from "./types-B7wBCHRT.mjs";
+import { a as ClivlySDK } from "./types-DTaz5mLi.mjs";
 import { Plugin } from "vite";
-
 //#region src/vite.d.ts
 interface ClivlyViteOptions {
   /** Log prefix for Clivly's boot lines. Defaults to "clivly". */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clivly/sdk",
-  "version": "0.4.0",
+  "version": "0.7.0",
   "private": false,
   "type": "module",
   "description": "Clivly SDK — connect your app to Clivly Cloud (heartbeat, discovery, auth bridge).",
@@ -55,7 +55,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@clivly/core": "0.4.0"
+    "@clivly/core": "0.7.0"
   },
   "peerDependencies": {
     "drizzle-orm": ">=0.30",
@@ -72,11 +72,14 @@
   "devDependencies": {
     "@electric-sql/pglite": "^0.5.4",
     "drizzle-orm": "^0.45.2",
-    "tsdown": "^0.21.9",
+    "tsdown": "^0.22.14",
     "typescript": "^6",
     "vite": "^8.0.8",
     "vitest": "^3.2.0"
   },
+  "engines": {
+    "node": ">=22"
+  },
   "scripts": {
     "build": "tsdown",
     "check-types": "tsc --noEmit",