@cosmoops/connect-sdk 0.3.0 → 0.7.0

package/dist/cjs/client/index.js

@@ -1,7 +1,8 @@
 "use client";
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolvePlanGroup = exports.groupPlansByTier = exports.ACTION_LABEL = exports.discountLabel = exports.annualSaving = exports.resolveAction = exports.monthlyOf = exports.formatPrice = exports.buildCheckoutUrl = exports.useConnectCheckout = exports.ConnectPlansPage = exports.ConnectUsageMeter = exports.useConnectFeature = exports.ConnectFeatureGate = exports.ConnectReadinessGate = exports.ConnectReadinessBanner = exports.resolveSubscriptionState = exports.ConnectSeatUsage = exports.ConnectTrialBanner = exports.ConnectSubscriptionCard = exports.ConnectNoSubscriptionCard = exports.ConnectSubscriptionGate = exports.ConnectSubscribeDialog = exports.ConnectPlans = exports.ConnectAppsGrid = exports.ConnectAccountSessions = exports.ConnectSignOutButton = exports.ConnectHomeButton = exports.ConnectProfileButton = exports.ConnectInvoicesButton = exports.ConnectManageSubscriptionButton = exports.ConnectUserMenu = exports.ConnectRegisterButton = exports.ConnectLoginButton = exports.ConnectLogo = exports.ConnectMark = exports.isConnectError = exports.ConnectError = exports.normalizePlanFeatures = exports.blockingBlockers = exports.CONNECT_APP_URL = exports.useConnectResource = exports.useConnectSessions = exports.useConnectAddonUsage = exports.useConnectApps = exports.useConnectPlans = exports.useConnectEntitlements = exports.useConnectUser = exports.useConnect = exports.ConnectProvider = void 0;
+exports.ConnectFeatureGate = exports.useConnectAccessGate = exports.ConnectAccessGate = exports.ConnectReadinessGate = exports.ConnectReadinessBanner = exports.resolveSubscriptionState = exports.ConnectSeatUsage = exports.ConnectTrialBanner = exports.ConnectSubscriptionCard = exports.ConnectNoSubscriptionCard = exports.ConnectSubscriptionGate = exports.ConnectSubscribeDialog = exports.ConnectPlans = exports.ConnectIntegrationsModal = exports.ConnectAppsGrid = exports.gateExemptPaths = exports.isNavItemActive = exports.resolveActivePath = exports.normalizePath = exports.flattenNav = exports.normalizeNav = exports.useActivePath = exports.ConnectSideNav = exports.ConnectAppShell = exports.ConnectAccountSessions = exports.ConnectSignOutButton = exports.ConnectHomeButton = exports.ConnectProfileButton = exports.ConnectInvoicesButton = exports.ConnectManageSubscriptionButton = exports.ConnectUserMenu = exports.ConnectRegisterButton = exports.ConnectLoginButton = exports.ConnectLogo = exports.ConnectMark = exports.isConnectError = exports.ConnectError = exports.normalizePlanFeatures = exports.blockingBlockers = exports.CONNECT_APP_URL = exports.useConnectResource = exports.useConnectIntegrations = exports.useConnectSessions = exports.useConnectAddonUsage = exports.useConnectApps = exports.useConnectPlans = exports.useConnectEntitlements = exports.useConnectUser = exports.useConnect = exports.ConnectProvider = void 0;
+exports.resolvePlanGroup = exports.groupPlansByTier = exports.ACTION_LABEL = exports.discountLabel = exports.annualSaving = exports.resolveAction = exports.monthlyOf = exports.formatPrice = exports.buildCheckoutUrl = exports.useConnectCheckout = exports.ConnectPlansPage = exports.ConnectUsageMeter = exports.useConnectFeature = void 0;
 /**
  * Browser half of `@cosmoops/connect-sdk` - React components and hooks.
  *
@@ -11,7 +12,7 @@ exports.resolvePlanGroup = exports.groupPlansByTier = exports.ACTION_LABEL = exp
  *
  * Styling is HeroUI v3 semantic tokens only (`accent`, `muted`, `surface`,
  * `separator`, ...), never a hardcoded colour - so these components inherit
- * whatever theme the host service platform already configured, and one theme
+ * whatever theme the host application platform already configured, and one theme
  * change lands identically in all of them.
  */
 var provider_js_1 = require("./provider.js");
@@ -23,6 +24,7 @@ Object.defineProperty(exports, "useConnectPlans", { enumerable: true, get: funct
 Object.defineProperty(exports, "useConnectApps", { enumerable: true, get: function () { return provider_js_1.useConnectApps; } });
 Object.defineProperty(exports, "useConnectAddonUsage", { enumerable: true, get: function () { return provider_js_1.useConnectAddonUsage; } });
 Object.defineProperty(exports, "useConnectSessions", { enumerable: true, get: function () { return provider_js_1.useConnectSessions; } });
+Object.defineProperty(exports, "useConnectIntegrations", { enumerable: true, get: function () { return provider_js_1.useConnectIntegrations; } });
 Object.defineProperty(exports, "useConnectResource", { enumerable: true, get: function () { return provider_js_1.useConnectResource; } });
 Object.defineProperty(exports, "CONNECT_APP_URL", { enumerable: true, get: function () { return provider_js_1.CONNECT_APP_URL; } });
 // Re-exported from the root entry rather than kept there alone: it is a pure
@@ -52,8 +54,31 @@ Object.defineProperty(exports, "ConnectSignOutButton", { enumerable: true, get:
 // `ConnectUserMenu` was the only thing that could render it.
 var account_sessions_js_1 = require("./components/account-sessions.js");
 Object.defineProperty(exports, "ConnectAccountSessions", { enumerable: true, get: function () { return account_sessions_js_1.ConnectAccountSessions; } });
+// The frame the rest of these components live inside. Exported next to the
+// pieces it composes rather than in a section of its own - an integration
+// reaching for a sidebar wants to find the launcher and the account menu in
+// the same breath, since the shell already mounts both.
+var app_shell_js_1 = require("./components/app-shell.js");
+Object.defineProperty(exports, "ConnectAppShell", { enumerable: true, get: function () { return app_shell_js_1.ConnectAppShell; } });
+var side_nav_js_1 = require("./components/side-nav.js");
+Object.defineProperty(exports, "ConnectSideNav", { enumerable: true, get: function () { return side_nav_js_1.ConnectSideNav; } });
+var use_active_path_js_1 = require("./use-active-path.js");
+Object.defineProperty(exports, "useActivePath", { enumerable: true, get: function () { return use_active_path_js_1.useActivePath; } });
+// The nav model is plain data and pure functions - a host generating its nav
+// from its own route table needs the types, and `resolveActivePath` is the
+// same longest-prefix rule the sidebar highlights with, so a breadcrumb or a
+// page title derived from it cannot disagree with the rail.
+var nav_js_1 = require("./components/nav.js");
+Object.defineProperty(exports, "normalizeNav", { enumerable: true, get: function () { return nav_js_1.normalizeNav; } });
+Object.defineProperty(exports, "flattenNav", { enumerable: true, get: function () { return nav_js_1.flattenNav; } });
+Object.defineProperty(exports, "normalizePath", { enumerable: true, get: function () { return nav_js_1.normalizePath; } });
+Object.defineProperty(exports, "resolveActivePath", { enumerable: true, get: function () { return nav_js_1.resolveActivePath; } });
+Object.defineProperty(exports, "isNavItemActive", { enumerable: true, get: function () { return nav_js_1.isNavItemActive; } });
+Object.defineProperty(exports, "gateExemptPaths", { enumerable: true, get: function () { return nav_js_1.gateExemptPaths; } });
 var apps_grid_js_1 = require("./components/apps-grid.js");
 Object.defineProperty(exports, "ConnectAppsGrid", { enumerable: true, get: function () { return apps_grid_js_1.ConnectAppsGrid; } });
+var integrations_modal_js_1 = require("./components/integrations-modal.js");
+Object.defineProperty(exports, "ConnectIntegrationsModal", { enumerable: true, get: function () { return integrations_modal_js_1.ConnectIntegrationsModal; } });
 var plans_js_1 = require("./components/plans.js");
 Object.defineProperty(exports, "ConnectPlans", { enumerable: true, get: function () { return plans_js_1.ConnectPlans; } });
 var subscribe_dialog_js_1 = require("./components/subscribe-dialog.js");
@@ -73,6 +98,9 @@ Object.defineProperty(exports, "resolveSubscriptionState", { enumerable: true, g
 var readiness_js_1 = require("./components/readiness.js");
 Object.defineProperty(exports, "ConnectReadinessBanner", { enumerable: true, get: function () { return readiness_js_1.ConnectReadinessBanner; } });
 Object.defineProperty(exports, "ConnectReadinessGate", { enumerable: true, get: function () { return readiness_js_1.ConnectReadinessGate; } });
+var access_gate_js_1 = require("./components/access-gate.js");
+Object.defineProperty(exports, "ConnectAccessGate", { enumerable: true, get: function () { return access_gate_js_1.ConnectAccessGate; } });
+Object.defineProperty(exports, "useConnectAccessGate", { enumerable: true, get: function () { return access_gate_js_1.useConnectAccessGate; } });
 var feature_gate_js_1 = require("./components/feature-gate.js");
 Object.defineProperty(exports, "ConnectFeatureGate", { enumerable: true, get: function () { return feature_gate_js_1.ConnectFeatureGate; } });
 Object.defineProperty(exports, "useConnectFeature", { enumerable: true, get: function () { return feature_gate_js_1.useConnectFeature; } });

package/dist/cjs/client/mark.js

@@ -7,7 +7,7 @@ const jsx_runtime_1 = require("react/jsx-runtime");
  * The Connect mark - concentric rings on a solid accent badge.
  *
  * Painted from `--accent` / `--accent-foreground`, the same HeroUI tokens the
- * host app themes, so the badge tracks whatever palette a service platform has
+ * host app themes, so the badge tracks whatever palette an application platform has
  * configured rather than carrying a hardcoded CosmoOps green into someone
  * else's brand.
  */

package/dist/cjs/client/provider.js

@@ -9,12 +9,15 @@ exports.useConnectEntitlements = useConnectEntitlements;
 exports.useConnectAddonUsage = useConnectAddonUsage;
 exports.useConnectPlans = useConnectPlans;
 exports.useConnectApps = useConnectApps;
+exports.useConnectIntegrations = useConnectIntegrations;
 exports.useConnectSessions = useConnectSessions;
 exports.useConnectResource = useConnectResource;
 const jsx_runtime_1 = require("react/jsx-runtime");
 const react_1 = require("react");
 exports.CONNECT_APP_URL = "https://connect.cosmoops.com";
 const ConnectContext = (0, react_1.createContext)(null);
+/** Marks that this tab has already spent its one silent attempt - see `ConnectProviderProps.silentSignIn`. */
+const SILENT_ATTEMPT_KEY = "connect_silent_attempted";
 /**
  * Wraps the part of your app that shows Connect UI.
  *
@@ -29,14 +32,44 @@ const ConnectContext = (0, react_1.createContext)(null);
  * </ConnectProvider>
  * ```
  */
-function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri, appUrl = exports.CONNECT_APP_URL, fetch: fetchImpl, children, }) {
+function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri, appUrl = exports.CONNECT_APP_URL, fetch: fetchImpl, silentSignIn = false, children, }) {
     // One state cell, not three. `isLoading` is *derived* from "no result yet"
     // rather than set - a `setIsLoading(true)` at the top of an effect is a
     // synchronous setState inside that effect, which cascades an extra render
     // and is what `react-hooks/set-state-in-effect` flags. Everything below
     // writes state only from an async callback.
     const [result, setResult] = (0, react_1.useState)(null);
-    const isLoading = result === null;
+    /**
+     * Whether this tab has already spent its one silent attempt, sampled once
+     * at mount.
+     *
+     * A lazy `useState` initializer rather than a read inside the render body:
+     * `sessionStorage` is external mutable state, and reading it during render
+     * is impure - with the React Compiler on, that is exactly the kind of thing
+     * that can be hoisted or memoized into the wrong answer. An initializer
+     * runs once, which is all this needs; the value only ever changes as this
+     * component navigates the page away.
+     *
+     * Safe on the server, where it reads `false`: `result` is `null` during SSR
+     * and first client render alike, so `isLoading` below is `true` on both
+     * regardless of this value, and hydration cannot diverge on it.
+     */
+    const [silentAttemptSpent] = (0, react_1.useState)(() => typeof window !== "undefined" && window.sessionStorage.getItem(SILENT_ATTEMPT_KEY) === "1");
+    /**
+     * A silent attempt is settled-signed-out *and* about to redirect. Reported
+     * as still-loading, which is the honest answer: the question "is this
+     * visitor signed in" has not been finally answered yet, and there is a
+     * navigation already on its way.
+     *
+     * Without this the provider publishes `signed out` for the one frame before
+     * the effect below fires, so every consumer paints its signed-out state -
+     * a "Sign in" button, the plan-picker gate - and then the page vanishes
+     * underneath it. Flashing a sales pitch at someone who is about to be
+     * silently signed in is the same bug `ConnectSubscriptionGate` exists to
+     * prevent, one layer down.
+     */
+    const silentPending = silentSignIn && !silentAttemptSpent && result !== null && !result.session.user && !result.error;
+    const isLoading = result === null || silentPending;
     const session = result?.session ?? null;
     const error = result?.error ?? null;
     // One entry per path. Held in a ref, not state, because a cache write must
@@ -102,7 +135,7 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
             // error, so a Login button still renders rather than the UI hanging on
             // skeletons forever.
             setResult({
-                session: { user: null, subscription: null, serviceRole: null },
+                session: { user: null, subscription: null, applicationRole: null },
                 error: cause instanceof Error ? cause.message : "Could not reach Connect",
             });
         }
@@ -116,6 +149,21 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
         // eslint-disable-next-line react-hooks/set-state-in-effect
         void refresh();
     }, [refresh]);
+    (0, react_1.useEffect)(() => {
+        // `silentPending` already encodes settled-and-signed-out, no prior
+        // attempt, and no bridge error - a failed bridge read says nothing about
+        // whether Connect has a session, and bouncing the browser on a transient
+        // network failure would turn a recoverable error into a navigation nobody
+        // asked for.
+        if (!silentPending || typeof window === "undefined")
+            return;
+        // Written before navigating, not after: a navigation that begins before
+        // the marker lands leaves the tab unmarked and free to probe again on the
+        // way back, which is the loop this bounds.
+        window.sessionStorage.setItem(SILENT_ATTEMPT_KEY, "1");
+        const next = `${window.location.pathname}${window.location.search}`;
+        window.location.href = `${basePath}/signin?prompt=none&next=${encodeURIComponent(next)}`;
+    }, [silentPending, basePath]);
     const signIn = (0, react_1.useCallback)((options = {}) => {
         const url = new URL("/sso/authorize", appUrl);
         url.searchParams.set("client_id", clientId);
@@ -136,7 +184,7 @@ function ConnectProvider({ clientId = "", basePath = "/api/connect", redirectUri
             credentials: "same-origin",
         }).catch(() => { });
         cache.current.clear();
-        setResult({ session: { user: null, subscription: null, serviceRole: null }, error: null });
+        setResult({ session: { user: null, subscription: null, applicationRole: null }, error: null });
     }, [basePath, fetchImpl]);
     const value = (0, react_1.useMemo)(() => ({
         clientId,
@@ -183,24 +231,28 @@ function useConnectEntitlements() {
 /**
  * What is left of every consumable add-on on this workspace's subscription.
  *
- * The read half of `client.billing.consumeAddon` - a service that meters its
+ * The read half of `client.billing.consumeAddon` - an application that meters its
  * own end users had no way to show them what remained until this existed.
  * Empty `addons` means there is nothing to meter, which is not an error.
  */
 function useConnectAddonUsage() {
     return useConnectResource("/addons");
 }
-/** This service's plan catalog. */
+/** This application's plan catalog. */
 function useConnectPlans() {
     return useConnectResource("/plans");
 }
-/** The apps this organization can open. */
+/** The apps this workspace can open. */
 function useConnectApps() {
     return useConnectResource("/apps");
 }
+/** Enabled Composio-hosted toolkits and this workspace's connection status for each. */
+function useConnectIntegrations() {
+    return useConnectResource("/integrations");
+}
 /**
  * This Connect account's own login sessions - account-wide, not scoped to
- * this service, see `SessionsListResponse`'s doc comment. The component
+ * this application, see `SessionsListResponse`'s doc comment. The component
  * that calls this is also the one that must own any revoke actions and call
  * the returned `refetch()` afterward - see `mutateResource`'s doc comment
  * for why nothing does that automatically.

package/dist/cjs/client/use-active-path.js

@@ -0,0 +1,77 @@
+"use client";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useActivePath = useActivePath;
+const react_1 = require("react");
+const LOCATION_CHANGE = "connect:locationchange";
+let patched = false;
+/**
+ * Make `history.pushState`/`replaceState` announce themselves.
+ *
+ * Neither fires an event - `popstate` covers Back and Forward only - so a
+ * client-side router that pushes a new URL moves the address bar and tells
+ * nothing outside itself. Without this, a sidebar reading `location.pathname`
+ * highlights whatever route the page first loaded on and then never moves
+ * again.
+ *
+ * Both wrappers call through to the original first and return its result, so
+ * the patch is transparent to whatever router installed the navigation; it is
+ * applied at most once per document, and only when a `ConnectSideNav` is
+ * actually mounted without an `activePath`. Pass `activePath` (Next:
+ * `usePathname()`) and none of this runs at all - which is the recommended
+ * path for any app that has a router to ask.
+ */
+function patchHistory() {
+    if (patched || typeof window === "undefined" || typeof window.history === "undefined")
+        return;
+    patched = true;
+    for (const method of ["pushState", "replaceState"]) {
+        const original = window.history[method];
+        window.history[method] = function patchedHistoryMethod(...args) {
+            const result = original.apply(this, args);
+            window.dispatchEvent(new Event(LOCATION_CHANGE));
+            return result;
+        };
+    }
+}
+function subscribe(onStoreChange) {
+    patchHistory();
+    window.addEventListener("popstate", onStoreChange);
+    window.addEventListener(LOCATION_CHANGE, onStoreChange);
+    return () => {
+        window.removeEventListener("popstate", onStoreChange);
+        window.removeEventListener(LOCATION_CHANGE, onStoreChange);
+    };
+}
+function getSnapshot() {
+    return window.location.pathname;
+}
+/**
+ * The server never has a location, and guessing one is worse than having
+ * none: a guess that misses renders a *different* item highlighted on the
+ * server than on the client, which is a hydration mismatch. `""` matches no
+ * nav item, so the first paint has no highlight and the client's first commit
+ * adds it.
+ *
+ * Doubles as the snapshot when `activePath` *was* supplied - the value is
+ * discarded either way, and pairing it with `noopSubscribe` is what keeps a
+ * controlled shell from ever touching `history` or `window.location`.
+ */
+function emptySnapshot() {
+    return "";
+}
+function noopSubscribe() {
+    return () => { };
+}
+/**
+ * The current path, from `activePath` when given and from the browser
+ * otherwise.
+ *
+ * Exported because a host building its own shell out of `ConnectSideNav`
+ * needs the same fallback the shell uses.
+ */
+function useActivePath(activePath) {
+    const controlled = activePath !== undefined;
+    const live = (0, react_1.useSyncExternalStore)(controlled ? noopSubscribe : subscribe, controlled ? emptySnapshot : getSnapshot, emptySnapshot);
+    return activePath ?? live;
+}

package/dist/cjs/client/use-checkout.js

@@ -157,15 +157,15 @@ function buildCancelUrl({ appUrl, subscriptionId }) {
  * The Connect URL that completes a subscribe or a plan change.
  *
  * Both land on a modal Connect renders over the relevant page (an intercepted
- * parallel route - `app/@modal/(.)services/...` and
+ * parallel route - `app/@modal/(.)applications/...` and
  * `app/@modal/(.)billing/...`), so the customer arrives already looking at the
  * confirmation for the plan they picked here, not at a catalogue they have to
  * find it in again.
  */
-function buildCheckoutUrl({ appUrl, serviceId, planId, subscriptionId, coupon, }) {
+function buildCheckoutUrl({ appUrl, applicationId, planId, subscriptionId, coupon, }) {
     const path = subscriptionId
         ? `/billing/subscriptions/${encodeURIComponent(subscriptionId)}/change-plan/${encodeURIComponent(planId)}`
-        : `/services/${encodeURIComponent(serviceId)}/subscribe/${encodeURIComponent(planId)}`;
+        : `/applications/${encodeURIComponent(applicationId)}/subscribe/${encodeURIComponent(planId)}`;
     const url = new URL(path, appUrl);
     if (coupon?.trim())
         url.searchParams.set("coupon", coupon.trim());

package/dist/cjs/errors.js

@@ -3,10 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConnectError = void 0;
 exports.isConnectError = isConnectError;
 /**
- * Every failure the Connect service API can report, as one class.
+ * Every failure the Connect application API can report, as one class.
  *
  * The API speaks two error dialects and this collapses them: the
- * `/api/v1/service/*` endpoints use `{ error: { code, message } }`, while the
+ * `/api/v1/application/*` endpoints use `{ error: { code, message } }`, while the
  * three `/sso/*` ones use OAuth2's `{ error, error_description }` (RFC 6749
  * §5.2). Both land here with `code` populated, so integrating code branches on
  * one field either way.
@@ -45,7 +45,7 @@ class ConnectError extends Error {
      * Whether the user's Connect sign-in is over and they need to go back
      * through `identity.authorizeUrl()`. Collapses every session-side failure,
      * matching how the API reports them - unknown, expired, revoked, or issued
-     * to a different service all arrive as one `invalid_token`.
+     * to a different application all arrive as one `invalid_token`.
      */
     get isSessionExpired() {
         return this.code === "invalid_token";
@@ -59,7 +59,7 @@ class ConnectError extends Error {
      * guessing keys. These two are the exception: reaching them required
      * presenting a key whose hash matched, so you already hold it, and what you
      * need to know is that no retry and no scope change will fix this - the key
-     * has to be reissued from the service's Setup tab.
+     * has to be reissued from the application's Integration tab.
      *
      * Worth alerting on. It is the one failure that will not resolve itself and
      * takes down every call your integration makes.

package/dist/cjs/helpers.js

@@ -16,7 +16,7 @@ function blockingBlockers(readiness) {
  * Coerces either wire shape into `PlanFeature[]`.
  *
  * A bare key becomes `{ key, name: key, description: "" }` - the same
- * fallback the server applies for a plan older than its service's feature
+ * fallback the server applies for a plan older than its application's feature
  * catalog, so an un-upgraded Connect renders exactly what it always did
  * rather than a column of blanks.
  *

package/dist/cjs/index.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizePlanFeatures = exports.blockingBlockers = exports.isConnectError = exports.ConnectError = void 0;
 /**
  * `@cosmoops/connect-sdk` - the official client for the CosmoOps Connect
- * **service-partner API** (`/api/v1/service/*`).
+ * **application-partner API** (`/api/v1/application/*`).
  *
  * This root entry is the isomorphic surface: wire types, the error class, and
  * pure helpers. It pulls in neither Node-only code nor React, so it is safe to

package/dist/cjs/next/index.js

@@ -41,16 +41,22 @@ exports.createConnectHandlers = createConnectHandlers;
 exports.GET = handle;
 exports.POST = handle;
 exports.getConnectSession = getConnectSession;
+exports.requireConnectSession = requireConnectSession;
+const react_1 = require("react");
 const client_js_1 = require("../server/client.js");
 const handler_js_1 = require("../server/handler.js");
 /**
  * Plug-and-play wiring for Next.js.
  *
  * Everything below is server-side. Nothing here is *statically* imported from
- * `next`, so this module loads in App Router route handlers, the Node runtime
- * and the edge runtime alike - and needs no peer dependency. The one place
- * that does reach for `next/headers` does it behind a dynamic import, inside
- * the function that needs it, and says so when it isn't there.
+ * `next` itself, so this module loads in App Router route handlers, the Node
+ * runtime and the edge runtime alike without a `next` peer dependency. The
+ * one place that does reach for `next/headers` (or, in `requireConnectSession`,
+ * `next/navigation`) does it behind a dynamic import, inside the function that
+ * needs it, and says so when it isn't there. `react` is a real, static
+ * dependency though - `getConnectSession`'s automatic per-request memoization
+ * (below) is built on its `cache()`, which every App Router project already
+ * has.
  *
  * The whole integration is two files:
  *
@@ -76,7 +82,7 @@ const handler_js_1 = require("../server/handler.js");
  * | `CONNECT_SESSION_COOKIE` | no | session cookie name |
  *
  * Register `{your origin}/api/connect/callback` as a redirect URI in the
- * service's Setup tab. That is the only step this cannot do for you.
+ * application's Integration tab. That is the only step this cannot do for you.
  *
  * No `next.config.ts` changes needed either, including `transpilePackages`:
  * `dist/` is already ES2022 with `"use client"` hoisted to the top of every
@@ -227,6 +233,35 @@ async function requestFromHeaders() {
     const proto = incoming.get("x-forwarded-proto") ?? (host.startsWith("localhost") ? "http" : "https");
     return new Request(`${proto}://${host}/`, { headers: incoming });
 }
+async function readSession(request, options) {
+    const store = options.session ?? cookieSessionStore();
+    const token = await store.read(request);
+    if (!token)
+        return null;
+    try {
+        return await (options.client ?? connectClient()).identity.getUser(token);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The ambient case - no explicit `request`, default client, default cookie
+ * store - wrapped in React's `cache()` so every call in the same request
+ * shares one round trip to Connect. A layout reading the session for a nav
+ * avatar and the page beneath it reading it again for a role check hit this
+ * exact function; without the wrapper that's two live reads of the same
+ * answer.
+ *
+ * Deliberately its own zero-argument function rather than `cache()` wrapping
+ * `getConnectSession` directly - `cache()` keys on argument identity, and
+ * `getConnectSession`'s default `options = {}` is a fresh object on every
+ * call, so wrapping it as-is would never hit the cache for the very call
+ * pattern this exists to speed up.
+ */
+const cachedAmbientSession = (0, react_1.cache)(async () => {
+    return readSession(await requestFromHeaders(), {});
+});
 /**
  * The signed-in user for a Server Component, Route Handler or Server Action,
  * or `null`.
@@ -237,6 +272,9 @@ async function requestFromHeaders() {
  * if (!session) redirect("/api/connect/signin?next=/dashboard");
  * ```
  *
+ * `requireConnectSession()` below is that exact check in one call, for the
+ * common case of "redirect if signed out."
+ *
  * Pass a `Request` to use it somewhere `next/headers` does not exist - a
  * framework-agnostic handler, a test, a custom server. Both forms take the
  * same path afterwards; the argument is only how the cookie is found.
@@ -248,18 +286,61 @@ async function requestFromHeaders() {
  *
  * Returns `null` for every failure - an expired session and a missing one both
  * mean "not signed in", and a page guard should not need a try/catch.
+ *
+ * **Memoized per request for the plain, zero-argument call** - the shape
+ * every page, layout and Server Action actually uses - via React's `cache()`.
+ * Passing an explicit `request`, `client` or `session` bypasses the cache
+ * and always makes a live call: those are for tests and non-ambient
+ * callers, where a fresh read every time is the point, not an oversight.
  */
 async function getConnectSession(request, options = {}) {
-    const store = options.session ?? cookieSessionStore();
-    const token = await store.read(request ?? (await requestFromHeaders()));
-    if (!token)
-        return null;
-    try {
-        return await (options.client ?? connectClient()).identity.getUser(token);
-    }
-    catch {
-        return null;
-    }
+    if (!request && !options.client && !options.session)
+        return cachedAmbientSession();
+    return readSession(request ?? (await requestFromHeaders()), options);
+}
+/**
+ * `getConnectSession()`, minus the boilerplate of checking it and redirecting
+ * yourself:
+ *
+ * ```tsx
+ * // app/dashboard/page.tsx
+ * const session = await requireConnectSession();
+ * ```
+ *
+ * Redirects to `/signin` under the same `basePath` as `getConnectSession`'s
+ * default (`/api/connect`) when signed out - pass `signInPath` if you mounted
+ * the bridge somewhere else, and `next` to send the visitor back to where
+ * they were once they're signed in. Only sensible in a Server Component,
+ * Route Handler or Server Action, the same three places `redirect()` from
+ * `next/navigation` itself works.
+ *
+ * A thin wrapper, not a framework of its own - reach for `getConnectSession`
+ * plus your own check when "not signed in" isn't "redirect to sign-in"
+ * (an API route returning 401, say). Role and entitlement checks stay
+ * outside this function on purpose: `session.applicationRole.granted` and
+ * `connect.entitlements.*` are one line each on top of the session this
+ * already gives you, and where that line redirects (a plans page, a
+ * "forbidden" screen) is a decision only your app can make - see
+ * "Authentication & authorization" for the pattern.
+ */
+async function requireConnectSession(request, options = {}) {
+    const session = await getConnectSession(request, options);
+    if (session)
+        return session;
+    const signIn = options.signInPath ?? "/api/connect/signin";
+    return redirectTo(options.next ? `${signIn}?next=${encodeURIComponent(options.next)}` : signIn);
+}
+/**
+ * `next/navigation`'s `redirect()`, imported the same dynamic way as
+ * `next/headers` above and for the same reason: no static dependency on
+ * `next`'s own types at this package's build time. Typed by hand rather than
+ * imported, since that's the only way to erase them - `redirect()` itself is
+ * typed `never`, which is what lets `requireConnectSession` return here
+ * without its own `return` after the call.
+ */
+async function redirectTo(url) {
+    const { redirect } = (await Promise.resolve().then(() => __importStar(require("next/navigation"))));
+    return redirect(url);
 }
 var handler_js_2 = require("../server/handler.js");
 Object.defineProperty(exports, "createConnectHandler", { enumerable: true, get: function () { return handler_js_2.createConnectHandler; } });

package/dist/cjs/server/client.js

@@ -8,11 +8,13 @@ const billing_js_1 = require("./resources/billing.js");
 const drive_js_1 = require("./resources/drive.js");
 const entitlements_js_1 = require("./resources/entitlements.js");
 const identity_js_1 = require("./resources/identity.js");
+const integrations_js_1 = require("./resources/integrations.js");
 const logs_js_1 = require("./resources/logs.js");
+const analytics_js_1 = require("./resources/analytics.js");
 const otp_js_1 = require("./resources/otp.js");
 const sessions_js_1 = require("./resources/sessions.js");
 exports.DEFAULT_BASE_URL = "https://connect.cosmoops.com";
-const SERVICE_API_PREFIX = "/api/v1/service";
+const APPLICATION_API_PREFIX = "/api/v1/application";
 /**
  * Refuses to build a client in a browser.
  *
@@ -41,9 +43,9 @@ function assertNotBrowser() {
         "in browser code instead; it talks to your own origin and holds no credential.");
 }
 /**
- * The CosmoOps Connect service-partner API.
+ * The CosmoOps Connect application-partner API.
  *
- * Covers `/api/v1/service/*` and nothing else - the surface a service platform
+ * Covers `/api/v1/application/*` and nothing else - the surface an application platform
  * integrates against. Connect's internal API is not part of this package and
  * never will be.
  *
@@ -54,7 +56,7 @@ function assertNotBrowser() {
  * });
  *
  * const session = await connect.identity.exchangeCode({ code, redirectUri });
- * const { ready } = await connect.entitlements.getReadiness(session.user.organizationId);
+ * const { ready } = await connect.entitlements.getReadiness(session.user.workspaceId);
  * ```
  *
  * Every failure throws a `ConnectError` carrying a stable `code`. Nothing here
@@ -63,32 +65,36 @@ function assertNotBrowser() {
 class ConnectClient {
     /** "Login with Connect" - the OAuth2 handshake and the session after it. */
     identity;
-    /** What a signed-in member may do on your service. */
+    /** What a signed-in member may do on your application. */
     access;
-    /** The services an organization can open - for a launcher grid. */
+    /** The applications a workspace can open - for a launcher grid. */
     apps;
-    /** Whether a workspace may use your service, and on what plan. */
+    /** Whether a workspace may use your application, and on what plan. */
     entitlements;
     /** Your plan catalog, and metering usage against add-on balances. */
     billing;
-    /** Files in an organization's Drive. */
+    /** Files in a workspace's Drive. */
     drive;
     /** RAG chat and structured extraction. */
     ai;
     /** WhatsApp/SMS phone verification. */
     otp;
-    /** Feature events into the Console's audit log, filterable to your service. */
+    /** Feature events into the Console's audit log, filterable to your application. */
     logs;
-    /** This Connect account's own login sessions - account-wide, not scoped to this service. Requires the `sessions:manage` scope. */
+    /** Emit product events and read back this application's aggregated numbers. */
+    analytics;
+    /** This Connect account's own login sessions - account-wide, not scoped to this application. Requires the `sessions:manage` scope. */
     sessions;
+    /** Composio-hosted third-party connections (Google Calendar, Slack, ...) a workspace has connected. */
+    integrations;
     constructor(options) {
         assertNotBrowser();
         if (!options.apiKey) {
-            throw new TypeError("ConnectClient requires `apiKey` - the plaintext shown once in the Setup tab.");
+            throw new TypeError("ConnectClient requires `apiKey` - the plaintext shown once in the Integration tab.");
         }
         const appBaseUrl = (options.baseUrl ?? exports.DEFAULT_BASE_URL).replace(/\/+$/, "");
         const transport = {
-            baseUrl: `${appBaseUrl}${SERVICE_API_PREFIX}`,
+            baseUrl: `${appBaseUrl}${APPLICATION_API_PREFIX}`,
             apiKey: options.apiKey,
             timeoutMs: options.timeoutMs ?? 20_000,
             maxRetries: options.maxRetries ?? 2,
@@ -96,7 +102,7 @@ class ConnectClient {
             userAgent: `cosmoops-connect-sdk/${exports.SDK_VERSION}`,
         };
         // `authorizeUrl` points at the app, not the API prefix - it is a browser
-        // redirect, not a service call, so identity takes both.
+        // redirect, not an application call, so identity takes both.
         this.identity = new identity_js_1.IdentityResource(transport, options.clientId ?? null, appBaseUrl);
         this.access = new access_js_1.AccessResource(transport);
         this.apps = new apps_js_1.AppsResource(transport);
@@ -106,9 +112,11 @@ class ConnectClient {
         this.ai = new ai_js_1.AiResource(transport);
         this.otp = new otp_js_1.OtpResource(transport);
         this.logs = new logs_js_1.LogsResource(transport);
+        this.analytics = new analytics_js_1.AnalyticsResource(transport);
         this.sessions = new sessions_js_1.SessionsResource(transport, options.clientId ?? null);
+        this.integrations = new integrations_js_1.IntegrationsResource(transport);
     }
 }
 exports.ConnectClient = ConnectClient;
 /** Kept in step with `package.json` by `sdk.test.ts`. */
-exports.SDK_VERSION = "0.3.0";
+exports.SDK_VERSION = "0.7.0";