@cosmoops/connect-sdk 0.20.0 → 0.21.0

package/CHANGELOG.md

@@ -3,8 +3,125 @@
 `@cosmoops/connect-sdk` follows semver, with the 0.x convention that **minor
 versions may carry breaking changes** and patch versions never do.
 
+## 0.21.0
+
+### Added
+
+- **`<ConnectOneTap />`** - a signed-out visitor who is already signed into
+  Connect is offered their account, and one tap signs them in **without leaving
+  the page**.
+
+  ```tsx
+  <ConnectProvider>
+    <App />
+    <ConnectOneTap />
+  </ConnectProvider>
+  ```
+
+  That is the whole integration. It needs no `clientId` in the browser and no
+  configuration: the bridge already knows the client, and now tells the page
+  where to ask on the `/session` read it was making anyway, so discovering One
+  Tap costs no extra request.
+
+  **What it replaces.** `silentSignIn` answers the same question - *is this
+  visitor already signed into Connect?* - by bouncing the browser to Connect
+  and back with `prompt=none`. That costs a visible full-page navigation on the
+  first load of **every** signed-out visit, shows the visitor nothing while it
+  happens, and gives them no way to decline. One Tap asks with a single
+  `fetch`, names the account before anything is signed, and completes with no
+  navigation at all. `silentSignIn` still works and is unchanged; prefer this.
+
+  **It only appears when it can help.** A visitor Connect does not recognise
+  sees nothing, ever - no prompt, no flicker, no redirect - so this is safe to
+  mount unconditionally, which `silentSignIn` never was.
+
+  **Requires your application to be same-site with Connect** - a
+  `cosmoops.com` subdomain. `SameSite` is judged on the registrable domain, so
+  the visitor's Connect cookie rides along from `crm.cosmoops.com` and from
+  nowhere else. Deployed off-site, the prompt simply never appears and
+  `ConnectLoginButton` behaves exactly as before. No third-party cookie is
+  involved at any point, so this works in every browser rather than only in
+  Chromium.
+
+  **Two prompts, because consent is not assumed.** A visitor who has authorised
+  your application before gets their name, email, workspace and photo. One who
+  has not gets an impersonal prompt whose tap leads to the real consent
+  screen - Connect releases no identifying detail at all until that has
+  happened once.
+
+  **Dismissal is remembered.** Closing the prompt buys 2 hours of quiet, then a
+  day, then a week; signing out buys a day. All in your own origin's
+  `localStorage`, and none of it leaves the browser.
+
+- **`readOneTapHint()` and `oneTapSignIn()` on `useConnect()`** - the two calls
+  `<ConnectOneTap />` is built from, for applications that want to draw the
+  prompt themselves. Both report expected outcomes as values rather than
+  throwing: `consent_required` and `interaction_required` mean "hand off to the
+  interactive screen", which is a hand-off, not an error to show anybody.
+
+- **`ConnectSession.oneTap`** - where the browser may ask Connect about the
+  visitor, or `null` when this deployment cannot run One Tap (no `clientId`, or
+  a session store with no `write`). Present on the signed-in and signed-out
+  branches alike, so no consumer has to test for key presence.
+
+### Security
+
+- The One Tap exchange is **PKCE-bound, and the verifier never reaches the
+  page**. Connect hands the authorization code to the browser, so unlike the
+  redirect flow the code alone must not be redeemable: `/one-tap/start` mints
+  the pair and keeps the verifier in an `HttpOnly`, `SameSite=Lax` cookie on
+  your own origin, and `/one-tap/complete` is the only thing that can spend it.
+  A code lifted out of the browser, or replayed cross-site, is worthless.
+
 ## 0.20.0
 
+### Added
+
+- **`connect.channels` and `connect.calls`** - the phone numbers Connect has
+  assigned to your application, and the calls that arrived on them. Seven
+  endpoints that have been live on the API and reachable only by hand until
+  now.
+
+  ```ts
+  const { id } = await connect.channels.claim({ workspaceId });
+  await connect.channels.setRouting(id, { agent: "sales", afterHours: "voicemail" });
+
+  const { items } = await connect.calls.list({ channelId: id });
+  const { call, turns } = await connect.calls.get(items[0].id);
+  ```
+
+  **You never pick the number.** Inventory is a regulated asset bought under
+  Connect's carrier account, so `claim` takes a workspace and a kind and
+  Connect picks from a pool you cannot see - which is also why nothing here
+  exposes a carrier, a provider reference or a monthly rate. A workspace holds
+  exactly one number across every application it uses, and it is fixed for the
+  life of the engagement; only a Connect operator can unassign one. A `409`
+  means either "this workspace already has one" (fix the call) or "the pool is
+  empty right now" (retry - Connect is notified).
+
+  `setRouting`'s `destination` is an arbitrary JSON object Connect stores
+  verbatim and **never reads into**: which agent answers, business hours,
+  overflow and fallback are all your application's model. It replaces rather
+  than merges, and `clearRouting` is the only way to say "stop answering" -
+  overwriting a destination can only point the number somewhere else. Clearing
+  is idempotent and, unlike `setRouting`, is allowed on a suspended channel:
+  making a live number stop answering must never be the operation that is
+  unavailable.
+
+  `calls.list` filters on `channelId` and nothing else - each further filter
+  costs a Firestore composite index - and pages by cursor: **page until
+  `hasMore` is `false` rather than stopping on an empty `items`.**
+  `calls.get` adds the transcript, ordered by `sequence`, which is the sort to
+  trust since two turns can share a millisecond. `recordingFileId` and
+  `transcriptFileId` are Drive file ids readable with a `drive:read` key, and
+  are `null` until the carrier posts the audio - branch on `recordingStatus`
+  rather than reading `null` as a failure.
+
+  Scopes: `channels:read`, `channels:claim`, `channels:manage`, `calls:read`.
+  A channel or call belonging to another application answers `not_found`, not
+  `forbidden` - confirming it exists would make these reads an oracle for
+  enumerating another partner's ids.
+
 ### Changed
 
 - **The app launcher shows the whole catalogue, in two groups.**

package/README.md

@@ -343,6 +343,8 @@ try {
 | `billing` | `listPlans` · `getAddonUsage` · `consumeAddon` |
 | `drive` | `upload` · `getFileUrl` · `getPreviewUrl` |
 | `contacts` | `lookupByPhone` · `get` |
+| `channels` | `list` · `get` · `claim` · `setRouting` · `clearRouting` |
+| `calls` | `list` · `get` |
 | `scheduling` | `listEventTypes` · `findSlots` · `listBookings` · `createBooking` · `rescheduleBooking` · `cancelBooking` |
 | `ai` | `chat` · `extract` |
 | `otp` | `send` · `verify` |

package/dist/cjs/client/components/identity.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * How a person is rendered when there is no photo to render.
+ *
+ * Shared rather than copied because two surfaces showing *different* initials
+ * for the same account reads as a bug in the account, not in the component -
+ * and the One Tap prompt and the user menu are frequently on screen within
+ * seconds of each other.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initials = initials;
+/**
+ * Up to two letters standing for a person.
+ *
+ * Splits on the punctuation an email address uses as well as whitespace, so
+ * `priya.nair@acme.test` yields `PN` rather than `PR` - an account with no
+ * display name is exactly the case the fallback exists for, and taking the
+ * first two characters of a local part would make it useless there.
+ */
+function initials(name, email = null) {
+    const source = name?.trim() || email?.trim() || "";
+    const parts = source.split(/[\s@._-]+/).filter(Boolean);
+    return (parts.slice(0, 2).map((part) => part[0]).join("") || "?").toUpperCase();
+}

package/dist/cjs/client/components/one-tap-state.js

@@ -0,0 +1,96 @@
+"use strict";
+/**
+ * How long One Tap stays quiet, and why.
+ *
+ * A prompt that reappears on every page load after being closed is not a
+ * convenience, it is an interstitial. Two things silence it, both stored in the
+ * application's own `localStorage` - nothing here leaves the browser, and
+ * nothing here is a security control:
+ *
+ * - **Dismissal, escalating.** Closing it once is "not now"; closing it three
+ *   times is "stop asking". The backoff says that back.
+ * - **Signing out.** Someone who has just signed out of this application does
+ *   not want to be offered the same account back on the next render. That is a
+ *   different fact from a dismissal, so it does not consume a dismissal, but it
+ *   buys a day of quiet.
+ *
+ * Every access is wrapped: `localStorage` throws outright in some embedded and
+ * privacy-restricted contexts, and a prompt is never worth breaking a page for.
+ * A read that fails reads as "not suppressed", which is the same state a fresh
+ * browser is in.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oneTapSuppressed = oneTapSuppressed;
+exports.dismissOneTap = dismissOneTap;
+exports.suppressOneTapAfterSignOut = suppressOneTapAfterSignOut;
+exports.clearOneTapSuppression = clearOneTapSuppression;
+const STORAGE_KEY = "connect_one_tap";
+/** Escalating quiet after 1, 2, and 3-or-more dismissals. */
+const DISMISS_BACKOFF_MS = [2 * 60 * 60 * 1000, 24 * 60 * 60 * 1000, 7 * 24 * 60 * 60 * 1000];
+const SIGN_OUT_QUIET_MS = 24 * 60 * 60 * 1000;
+function read() {
+    const empty = { dismissals: 0, until: 0 };
+    if (typeof window === "undefined")
+        return empty;
+    try {
+        const raw = window.localStorage.getItem(STORAGE_KEY);
+        if (!raw)
+            return empty;
+        const parsed = JSON.parse(raw);
+        return {
+            dismissals: typeof parsed.dismissals === "number" ? parsed.dismissals : 0,
+            until: typeof parsed.until === "number" ? parsed.until : 0,
+        };
+    }
+    catch {
+        return empty;
+    }
+}
+function write(state) {
+    if (typeof window === "undefined")
+        return;
+    try {
+        window.localStorage.setItem(STORAGE_KEY, JSON.stringify(state));
+    }
+    catch {
+        // Storage is full, blocked, or unavailable. The prompt simply keeps its
+        // default behaviour rather than the page failing.
+    }
+}
+/**
+ * Whether the prompt may be shown at all.
+ *
+ * Read once when the component mounts, never during render: `localStorage` is
+ * external mutable state, and reading it in a render body is impure - with the
+ * React Compiler on, exactly the kind of thing that can be hoisted into the
+ * wrong answer. Same reasoning as `ConnectProvider`'s `silentAttemptSpent`.
+ */
+function oneTapSuppressed() {
+    return Date.now() < read().until;
+}
+/** Records a close, and escalates how long the next quiet period lasts. */
+function dismissOneTap() {
+    const { dismissals } = read();
+    const next = dismissals + 1;
+    const backoff = DISMISS_BACKOFF_MS[Math.min(next, DISMISS_BACKOFF_MS.length) - 1];
+    write({ dismissals: next, until: Date.now() + backoff });
+}
+/**
+ * Silences the prompt after an explicit sign-out, without spending a dismissal.
+ * Signing out is not a complaint about the prompt, so it must not push someone
+ * closer to the seven-day backoff.
+ */
+function suppressOneTapAfterSignOut() {
+    write({ dismissals: read().dismissals, until: Date.now() + SIGN_OUT_QUIET_MS });
+}
+/** Clears the record once a sign-in actually happens - the prompt did its job. */
+function clearOneTapSuppression() {
+    if (typeof window === "undefined")
+        return;
+    try {
+        window.localStorage.removeItem(STORAGE_KEY);
+    }
+    catch {
+        // See `write`.
+    }
+}

package/dist/cjs/client/components/one-tap.js

@@ -0,0 +1,106 @@
+"use client";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectOneTap = ConnectOneTap;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const lucide_react_1 = require("lucide-react");
+const react_2 = require("@heroui/react");
+const provider_js_1 = require("../provider.js");
+const mark_js_1 = require("../mark.js");
+const identity_js_1 = require("./identity.js");
+const motion_js_1 = require("./motion.js");
+const one_tap_state_js_1 = require("./one-tap-state.js");
+function ConnectOneTap({ onInteractiveSignIn, className = "" }) {
+    const { session, isLoading, signIn, readOneTapHint, oneTapSignIn } = (0, provider_js_1.useConnect)();
+    const [hint, setHint] = (0, react_1.useState)(null);
+    const [phase, setPhase] = (0, react_1.useState)("hidden");
+    /**
+     * Sampled once at mount rather than read during render, for the same reason
+     * `ConnectProvider` samples its silent-attempt marker that way: `localStorage`
+     * is external mutable state and reading it in a render body is impure.
+     * `false` on the server, which is correct - nothing renders until the hint
+     * has resolved on the client anyway.
+     */
+    const [suppressed] = (0, react_1.useState)(() => typeof window !== "undefined" && (0, one_tap_state_js_1.oneTapSuppressed)());
+    const signedOut = !isLoading && !session?.user;
+    const askable = signedOut && !suppressed && Boolean(session?.oneTap);
+    (0, react_1.useEffect)(() => {
+        if (!askable)
+            return;
+        // Nothing here is a synchronous `setState` in an effect: every write
+        // happens after awaiting the network. The flag is what stops a late answer
+        // landing on a component that has already unmounted.
+        let cancelled = false;
+        void readOneTapHint().then((answer) => {
+            if (cancelled)
+                return;
+            // A visitor Connect does not recognise is the common case and gets
+            // nothing - no prompt, no flicker, no trace that a question was asked.
+            if (!answer || answer.status !== "signed_in")
+                return;
+            setHint(answer);
+            setPhase("offered");
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [askable, readOneTapHint]);
+    const handoff = (0, react_1.useCallback)(() => {
+        setPhase("hidden");
+        if (onInteractiveSignIn)
+            onInteractiveSignIn();
+        else
+            signIn();
+    }, [onInteractiveSignIn, signIn]);
+    const accept = (0, react_1.useCallback)(async () => {
+        // A visitor who has never authorised this application cannot be signed in
+        // silently and Connect would refuse anyway, so the tap goes straight to the
+        // screen that can ask them properly.
+        if (!hint?.consented) {
+            handoff();
+            return;
+        }
+        setPhase("working");
+        const result = await oneTapSignIn();
+        if (result.ok) {
+            // The provider has already refreshed the session; this component
+            // disappears because `signedOut` is now false.
+            setPhase("hidden");
+            return;
+        }
+        // `consent_required` and `interaction_required` both mean a screen is
+        // genuinely needed. `login_required` means the Connect session went away
+        // between the hint and the tap. All three are handed to the interactive
+        // flow, which can explain itself; a rate limit or a transport failure just
+        // closes the prompt rather than blaming the visitor for tapping.
+        if (result.reason === "consent_required" ||
+            result.reason === "interaction_required" ||
+            result.reason === "login_required") {
+            handoff();
+            return;
+        }
+        setPhase("hidden");
+    }, [handoff, hint, oneTapSignIn]);
+    const dismiss = (0, react_1.useCallback)(() => {
+        (0, one_tap_state_js_1.dismissOneTap)();
+        setPhase("hidden");
+    }, []);
+    if (phase === "hidden" || !hint)
+        return null;
+    const displayName = hint.user?.displayName ?? hint.user?.email ?? null;
+    const applicationName = hint.application?.name;
+    const busy = phase === "working";
+    return ((0, jsx_runtime_1.jsx)(motion_js_1.MotionProvider, { children: (0, jsx_runtime_1.jsx)(motion_js_1.m.div, { initial: { opacity: 0, y: 12 }, animate: { opacity: 1, y: 0 }, transition: motion_js_1.ENTER, role: "dialog", "aria-label": applicationName ? `Continue to ${applicationName} with CosmoOps` : "Continue with CosmoOps", 
+            // Fixed, above ordinary content but below a modal: this is an offer,
+            // and it must never sit on top of something the visitor opened
+            // themselves.
+            className: `fixed inset-x-3 bottom-3 z-40 sm:inset-x-auto sm:right-4 sm:bottom-4 sm:w-80 ${className}`, onKeyDown: (event) => {
+                if (event.key === "Escape")
+                    dismiss();
+            }, children: (0, jsx_runtime_1.jsxs)(react_2.Card, { className: "p-4 shadow-lg", children: [(0, jsx_runtime_1.jsxs)("div", { className: "flex items-start gap-3", children: [hint.consented ? ((0, jsx_runtime_1.jsxs)(react_2.Avatar, { size: "md", color: "accent", variant: "soft", className: "shrink-0 rounded-full", children: [hint.user?.photoUrl && ((0, jsx_runtime_1.jsx)(react_2.Avatar.Image, { alt: displayName ?? "Your account", src: hint.user.photoUrl })), (0, jsx_runtime_1.jsx)(react_2.Avatar.Fallback, { children: (0, identity_js_1.initials)(hint.user?.displayName ?? null, hint.user?.email ?? null) })] })) : ((0, jsx_runtime_1.jsx)(mark_js_1.ConnectMark, { className: "mt-0.5 size-8 shrink-0" })), (0, jsx_runtime_1.jsxs)("div", { className: "min-w-0 flex-1", children: [(0, jsx_runtime_1.jsx)("p", { className: "truncate text-sm font-medium text-foreground", children: hint.consented ? `Continue as ${displayName ?? "your account"}` : "You're signed in to CosmoOps" }), (0, jsx_runtime_1.jsx)("p", { className: "truncate text-xs text-muted", children: hint.consented
+                                            ? [hint.user?.email, hint.workspace?.name].filter(Boolean).join(" · ")
+                                            : applicationName
+                                                ? `Continue to ${applicationName}`
+                                                : "Continue with your account" })] }), (0, jsx_runtime_1.jsx)(react_2.Button, { variant: "tertiary", size: "sm", isIconOnly: true, "aria-label": "Not now", onPress: dismiss, isDisabled: busy, children: (0, jsx_runtime_1.jsx)(lucide_react_1.X, { className: "size-4" }) })] }), (0, jsx_runtime_1.jsxs)(react_2.Button, { variant: "secondary", className: "mt-3 w-full", onPress: () => void accept(), isPending: busy, children: [(0, jsx_runtime_1.jsx)(mark_js_1.ConnectMark, { className: "size-4" }), busy ? "Signing you in…" : "Continue"] })] }) }) }));
+}

package/dist/cjs/client/components/user-menu.js

@@ -14,6 +14,7 @@ const react_1 = require("@heroui/react");
 const lucide_react_1 = require("lucide-react");
 const provider_js_1 = require("../provider.js");
 const mark_js_1 = require("../mark.js");
+const identity_js_1 = require("./identity.js");
 const account_sessions_js_1 = require("./account-sessions.js");
 const motion_js_1 = require("./motion.js");
 const shell_context_js_1 = require("./shell-context.js");
@@ -23,11 +24,6 @@ const THEME_OPTIONS = [
     { value: "dark", label: "Dark", icon: lucide_react_1.Moon },
     { value: "system", label: "System", icon: lucide_react_1.Laptop },
 ];
-function initials(name, email) {
-    const source = name?.trim() || email?.trim() || "";
-    const parts = source.split(/[\s@._-]+/).filter(Boolean);
-    return (parts.slice(0, 2).map((part) => part[0]).join("") || "?").toUpperCase();
-}
 function openExternal(url) {
     window.open(url, "_blank", "noopener,noreferrer");
 }
@@ -73,7 +69,7 @@ function UserAvatar({ user, size, }) {
     // squircle sitting beside circular status dots reads as a rendering fault
     // rather than a choice. The root is `overflow-hidden`, so rounding it here
     // rounds the image and the fallback with it.
-    (0, jsx_runtime_1.jsxs)(react_1.Avatar, { size: size, color: "accent", variant: "soft", className: "rounded-full", children: [user.photoUrl && (0, jsx_runtime_1.jsx)(react_1.Avatar.Image, { alt: "", src: user.photoUrl }), (0, jsx_runtime_1.jsx)(react_1.Avatar.Fallback, { children: initials(user.displayName, user.email) })] }));
+    (0, jsx_runtime_1.jsxs)(react_1.Avatar, { size: size, color: "accent", variant: "soft", className: "rounded-full", children: [user.photoUrl && (0, jsx_runtime_1.jsx)(react_1.Avatar.Image, { alt: "", src: user.photoUrl }), (0, jsx_runtime_1.jsx)(react_1.Avatar.Fallback, { children: (0, identity_js_1.initials)(user.displayName, user.email) })] }));
 }
 /** `dispatch_admin` / `billing-viewer` -> `Dispatch admin`. */
 function humanizeRole(role) {

package/dist/cjs/client/index.js

@@ -1,9 +1,9 @@
 "use client";
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizePath = exports.flattenNav = exports.normalizeNav = exports.useActivePath = exports.ConnectSideNav = exports.ConnectSidebarNav = exports.RAIL_EXPANDED = exports.RAIL_COLLAPSED = exports.sidebarRowClass = exports.useConnectShell = exports.ConnectShellProvider = exports.ConnectSidebarRow = exports.ConnectSidebarFooter = exports.ConnectSidebarBody = exports.ConnectSidebarHeader = exports.ConnectSidebar = exports.AppShell = exports.ConnectAccountSessions = exports.ConnectSignOutButton = exports.ConnectHomeButton = exports.ConnectProfileButton = exports.ConnectInvoicesButton = exports.ConnectManageSubscriptionButton = exports.ConnectUserMenu = exports.ConnectProfileModal = exports.ConnectUserButton = exports.ConnectRegisterButton = exports.ConnectLoginButton = exports.ConnectLogo = exports.ConnectMark = exports.ConnectGrievanceNotice = exports.isConnectError = exports.ConnectError = exports.normalizePlanFeatures = exports.blockingBlockers = exports.CONNECT_APP_URL = exports.useConnectResource = exports.useConnectIntegrations = exports.useConnectSessions = exports.useConnectAddonUsage = exports.useConnectCompanyProfile = exports.useConnectApps = exports.useConnectPlans = exports.useConnectEntitlements = exports.useConnectPlatformAccess = exports.useConnectAudience = exports.useConnectWorkspaceType = exports.useConnectUser = exports.useConnect = exports.ConnectProvider = void 0;
-exports.annualSaving = exports.resolveAction = exports.monthlyOf = exports.formatPrice = exports.buildCheckoutUrl = exports.useConnectCheckout = exports.ConnectFilterTabs = exports.ConnectCursorPagination = exports.ConnectConfirmDialog = exports.ConnectLinkButton = exports.ConnectPlansPage = exports.ConnectUsageMeter = exports.ConnectPlatformGate = exports.ConnectWorkspaceTypeGate = exports.useConnectFeature = exports.ConnectFeatureGate = exports.useConnectAccessGate = exports.ConnectAccessGate = exports.ConnectReadinessGate = exports.ConnectReadinessBanner = exports.resolveSubscriptionState = exports.ConnectSeatUsage = exports.ConnectTrialBanner = exports.ConnectSubscriptionCard = exports.ConnectNoSubscriptionCard = exports.ConnectSubscriptionGate = exports.ConnectSubscribeDialog = exports.ConnectPlans = exports.ConnectIntegrationsModal = exports.AI_TONE_DOT = exports.AI_TONE_CHIP = exports.AI_EMPTY_VALUE = exports.aiStatusTone = exports.isNumericAiFormat = exports.formatAiValue = exports.AiSources = exports.AiSteps = exports.AiDetails = exports.AiTimeline = exports.AiMetrics = exports.AiChart = exports.AiTable = exports.ConnectAskAi = exports.ConnectAppsGrid = exports.isLinkableConnectScreen = exports.matchConnectScreen = exports.filterNavForAudience = exports.gateExemptPaths = exports.isNavItemActive = exports.resolveActivePath = void 0;
-exports.zonedInstant = exports.dayColumns = exports.layoutBookings = exports.useBookingActions = exports.useBookings = exports.useAvailableSlots = exports.useBookableEventTypes = exports.ConnectBookingDetail = exports.ConnectBookingDialog = exports.ConnectBookingCalendar = exports.useConnectWorkspaceMembers = exports.useConnectWorkspaces = exports.ConnectWorkspaceSwitcher = exports.resolvePlanGroup = exports.groupPlansByTier = exports.isFreePlan = exports.ACTION_LABEL = exports.discountLabel = void 0;
+exports.flattenNav = exports.normalizeNav = exports.useActivePath = exports.ConnectSideNav = exports.ConnectSidebarNav = exports.RAIL_EXPANDED = exports.RAIL_COLLAPSED = exports.sidebarRowClass = exports.useConnectShell = exports.ConnectShellProvider = exports.ConnectSidebarRow = exports.ConnectSidebarFooter = exports.ConnectSidebarBody = exports.ConnectSidebarHeader = exports.ConnectSidebar = exports.AppShell = exports.ConnectAccountSessions = exports.ConnectSignOutButton = exports.ConnectHomeButton = exports.ConnectProfileButton = exports.ConnectInvoicesButton = exports.ConnectManageSubscriptionButton = exports.ConnectUserMenu = exports.ConnectProfileModal = exports.ConnectUserButton = exports.ConnectOneTap = exports.ConnectRegisterButton = exports.ConnectLoginButton = exports.ConnectLogo = exports.ConnectMark = exports.ConnectGrievanceNotice = exports.isConnectError = exports.ConnectError = exports.normalizePlanFeatures = exports.blockingBlockers = exports.CONNECT_APP_URL = exports.useConnectResource = exports.useConnectIntegrations = exports.useConnectSessions = exports.useConnectAddonUsage = exports.useConnectCompanyProfile = exports.useConnectApps = exports.useConnectPlans = exports.useConnectEntitlements = exports.useConnectPlatformAccess = exports.useConnectAudience = exports.useConnectWorkspaceType = exports.useConnectUser = exports.useConnect = exports.ConnectProvider = void 0;
+exports.resolveAction = exports.monthlyOf = exports.formatPrice = exports.buildCheckoutUrl = exports.useConnectCheckout = exports.ConnectFilterTabs = exports.ConnectCursorPagination = exports.ConnectConfirmDialog = exports.ConnectLinkButton = exports.ConnectPlansPage = exports.ConnectUsageMeter = exports.ConnectPlatformGate = exports.ConnectWorkspaceTypeGate = exports.useConnectFeature = exports.ConnectFeatureGate = exports.useConnectAccessGate = exports.ConnectAccessGate = exports.ConnectReadinessGate = exports.ConnectReadinessBanner = exports.resolveSubscriptionState = exports.ConnectSeatUsage = exports.ConnectTrialBanner = exports.ConnectSubscriptionCard = exports.ConnectNoSubscriptionCard = exports.ConnectSubscriptionGate = exports.ConnectSubscribeDialog = exports.ConnectPlans = exports.ConnectIntegrationsModal = exports.AI_TONE_DOT = exports.AI_TONE_CHIP = exports.AI_EMPTY_VALUE = exports.aiStatusTone = exports.isNumericAiFormat = exports.formatAiValue = exports.AiSources = exports.AiSteps = exports.AiDetails = exports.AiTimeline = exports.AiMetrics = exports.AiChart = exports.AiTable = exports.ConnectAskAi = exports.ConnectAppsGrid = exports.isLinkableConnectScreen = exports.matchConnectScreen = exports.filterNavForAudience = exports.gateExemptPaths = exports.isNavItemActive = exports.resolveActivePath = exports.normalizePath = void 0;
+exports.zonedInstant = exports.dayColumns = exports.layoutBookings = exports.useBookingActions = exports.useBookings = exports.useAvailableSlots = exports.useBookableEventTypes = exports.ConnectBookingDetail = exports.ConnectBookingDialog = exports.ConnectBookingCalendar = exports.useConnectWorkspaceMembers = exports.useConnectWorkspaces = exports.ConnectWorkspaceSwitcher = exports.resolvePlanGroup = exports.groupPlansByTier = exports.isFreePlan = exports.ACTION_LABEL = exports.discountLabel = exports.annualSaving = void 0;
 /**
  * Browser half of `@cosmoops/connect-sdk` - React components and hooks.
  *
@@ -50,6 +50,8 @@ Object.defineProperty(exports, "ConnectLogo", { enumerable: true, get: function
 var auth_buttons_js_1 = require("./components/auth-buttons.js");
 Object.defineProperty(exports, "ConnectLoginButton", { enumerable: true, get: function () { return auth_buttons_js_1.ConnectLoginButton; } });
 Object.defineProperty(exports, "ConnectRegisterButton", { enumerable: true, get: function () { return auth_buttons_js_1.ConnectRegisterButton; } });
+var one_tap_js_1 = require("./components/one-tap.js");
+Object.defineProperty(exports, "ConnectOneTap", { enumerable: true, get: function () { return one_tap_js_1.ConnectOneTap; } });
 var user_menu_js_1 = require("./components/user-menu.js");
 Object.defineProperty(exports, "ConnectUserButton", { enumerable: true, get: function () { return user_menu_js_1.ConnectUserButton; } });
 Object.defineProperty(exports, "ConnectProfileModal", { enumerable: true, get: function () { return user_menu_js_1.ConnectProfileModal; } });

package/dist/cjs/client/provider.js

@@ -20,6 +20,7 @@ exports.useConnectSessions = useConnectSessions;
 exports.useConnectResource = useConnectResource;
 const jsx_runtime_1 = require("react/jsx-runtime");
 const react_1 = require("react");
+const one_tap_state_js_1 = require("./components/one-tap-state.js");
 exports.CONNECT_APP_URL = "https://connect.cosmoops.com";
 const ConnectContext = (0, react_1.createContext)(null);
 /** Marks that this tab has already spent its one silent attempt - see `ConnectProviderProps.silentSignIn`. */
@@ -204,8 +205,91 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
             credentials: "same-origin",
         }).catch(() => { });
         cache.current.clear();
+        // Someone who just signed out must not be offered the same account back on
+        // the next render - see `suppressOneTapAfterSignOut`.
+        (0, one_tap_state_js_1.suppressOneTapAfterSignOut)();
         setResult({ session: { user: null, subscription: null, role: null, permissions: [], staff: false, audience: null }, error: null });
     }, [basePath, fetchImpl]);
+    /**
+     * Where Connect answers One Tap, taken from the session read rather than
+     * assembled here - the bridge knows the `client_id` and the browser need not.
+     */
+    const oneTapEndpoints = result?.session.oneTap ?? null;
+    const readOneTapHint = (0, react_1.useCallback)(async () => {
+        if (!oneTapEndpoints)
+            return null;
+        try {
+            // `credentials: "include"` because this is the one request in the SDK
+            // that leaves the application's own origin. It carries the visitor's
+            // Connect cookie only when the two are same-site; everywhere else it is
+            // simply sent without one and comes back `signed_out`.
+            const response = await (fetchImpl ?? globalThis.fetch)(oneTapEndpoints.hintUrl, {
+                credentials: "include",
+                headers: { accept: "application/json" },
+            });
+            if (!response.ok)
+                return null;
+            return (await response.json());
+        }
+        catch {
+            // Offline, blocked, or Connect is down. None of those is evidence about
+            // whether this visitor has a session, so the honest answer is silence.
+            return null;
+        }
+    }, [fetchImpl, oneTapEndpoints]);
+    const oneTapSignIn = (0, react_1.useCallback)(async () => {
+        if (!oneTapEndpoints)
+            return { ok: false, reason: "unavailable" };
+        try {
+            // 1. The bridge mints the PKCE pair and keeps the verifier in an
+            //    `HttpOnly` cookie on this origin.
+            const start = await mutateResource("/one-tap/start");
+            // 2. Connect mints a code against that challenge. The custom header is
+            //    what forces the preflight, so an origin this client has not
+            //    registered is refused before the request is ever sent.
+            const authorize = await (fetchImpl ?? globalThis.fetch)(oneTapEndpoints.authorizeUrl, {
+                method: "POST",
+                credentials: "include",
+                headers: {
+                    accept: "application/json",
+                    "content-type": "application/json",
+                    "x-connect-one-tap": "1",
+                },
+                body: JSON.stringify({
+                    redirect_uri: start.redirectUri,
+                    code_challenge: start.codeChallenge,
+                }),
+            });
+            const body = (await authorize.json().catch(() => null));
+            if (!authorize.ok || !body?.code) {
+                // Connect names the reason, and each one has a different next step -
+                // `consent_required` wants the interactive screen, `rate_limited` wants
+                // to be left alone. Anything unrecognised is reported as a plain
+                // failure rather than guessed at.
+                const reason = body?.error;
+                return {
+                    ok: false,
+                    reason: reason === "login_required" ||
+                        reason === "consent_required" ||
+                        reason === "interaction_required" ||
+                        reason === "rate_limited"
+                        ? reason
+                        : "failed",
+                };
+            }
+            // 3. The bridge exchanges the code with the verifier the page never saw,
+            //    and stores the session.
+            await mutateResource("/one-tap/complete", { code: body.code });
+            // The prompt was accepted, so whatever backoff earlier dismissals had
+            // accumulated is spent - it described reluctance that no longer holds.
+            (0, one_tap_state_js_1.clearOneTapSuppression)();
+            await refresh();
+            return { ok: true };
+        }
+        catch {
+            return { ok: false, reason: "failed" };
+        }
+    }, [fetchImpl, mutateResource, oneTapEndpoints, refresh]);
     const value = (0, react_1.useMemo)(() => ({
         clientId,
         appUrl,
@@ -219,6 +303,8 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
         mutateResource,
         invalidateResource,
         streamResource,
+        readOneTapHint,
+        oneTapSignIn,
     }), [
         clientId,
         appUrl,
@@ -232,6 +318,8 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
         mutateResource,
         invalidateResource,
         streamResource,
+        readOneTapHint,
+        oneTapSignIn,
     ]);
     return (0, jsx_runtime_1.jsx)(ConnectContext.Provider, { value: value, children: children });
 }

package/dist/cjs/server/client.js

@@ -8,6 +8,8 @@ const data_js_1 = require("./resources/data.js");
 const workspaces_js_1 = require("./resources/workspaces.js");
 const scheduling_js_1 = require("./resources/scheduling.js");
 const contacts_js_1 = require("./resources/contacts.js");
+const channels_js_1 = require("./resources/channels.js");
+const calls_js_1 = require("./resources/calls.js");
 const kv_js_1 = require("./resources/kv.js");
 const billing_js_1 = require("./resources/billing.js");
 const drive_js_1 = require("./resources/drive.js");
@@ -85,6 +87,10 @@ class ConnectClient {
     scheduling;
     /** Who a workspace already knows how to reach, by phone or by id. */
     contacts;
+    /** The phone numbers Connect has assigned to your application, and where each one routes. */
+    channels;
+    /** The calls that arrived on those channels, with their transcripts. */
+    calls;
     /** RAG chat and structured extraction. */
     ai;
     /** Your application's own document store - see `DataResource`. */
@@ -135,6 +141,8 @@ class ConnectClient {
         this.drive = new drive_js_1.DriveResource(transport);
         this.scheduling = new scheduling_js_1.SchedulingResource(transport);
         this.contacts = new contacts_js_1.ContactsResource(transport);
+        this.channels = new channels_js_1.ChannelsResource(transport);
+        this.calls = new calls_js_1.CallsResource(transport);
         this.ai = new ai_js_1.AiResource(transport);
         this.data = new data_js_1.DataResource(transport);
         this.kv = new kv_js_1.KvResource(transport);
@@ -150,4 +158,4 @@ class ConnectClient {
 }
 exports.ConnectClient = ConnectClient;
 /** Kept in step with `package.json` by `sdk.test.ts`. */
-exports.SDK_VERSION = "0.20.0";
+exports.SDK_VERSION = "0.21.0";