@fayz-ai/sdk 0.10.1 → 0.11.0

package/dist/lib/connector-oauth.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Sending a merchant to a partner's consent screen — written once.
+ *
+ * Every OAuth connector needs the same four moves: mint a runtime token, POST
+ * the app's own start endpoint, read a URL back, hand it to the hub to navigate
+ * to. Copied into each connector that is four chances to disagree about the
+ * path, the token, the tenant and the failure — and the failure is the one that
+ * matters, because a `startOAuth` this repo forgot to write is a Connect button
+ * that renders DISABLED with nothing on screen saying why. That is exactly how
+ * Bling shipped.
+ *
+ * So a connector declares one line:
+ *
+ *   startOAuth: fayzConnectorOAuth('bling')
+ *
+ * and everything below is shared. The platform side of the contract:
+ *
+ *   POST /api/public/projects/:projectId/oauth/:provider/start
+ *     Authorization: Bearer <runtime-data token>
+ *     { tenantId?, redirectTo }                            → 201 { url }
+ *
+ *   GET  /api/oauth/redirect/:provider                     → 302 to redirectTo
+ *     ?fayzConnector=<slug>&fayzConnectorStatus=connected|error
+ *     &fayzConnectorMessage=<slug from a closed set>
+ *
+ * The redirect half is read by `oauth-return.ts` in `@fayz-ai/admin`; nothing
+ * here has to know about it. The provider never gets a per-request
+ * `redirect_uri` — Bling ignores one outright and always uses what is registered
+ * on the app — so `redirectTo` travels inside the platform's signed state and
+ * comes back out at the end.
+ *
+ * A port and not a bare `fetch`, for the same reason the credential sink is one:
+ * WHICH Fayz project this app belongs to is a deployment fact. The app installs
+ * one starter at boot; installing none is a valid answer, and then the connect
+ * step refuses instead of quietly opening a consent screen for a project that
+ * cannot finish the flow.
+ */
+import type { FayzRuntimeTokenSource } from './credentials';
+/** The consent flow did not start. Carries a status when the platform answered. */
+export declare class ConnectorOAuthError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/** This app has nowhere to start a consent flow, so it refuses rather than guessing. */
+export declare class ConnectorOAuthStarterMissingError extends ConnectorOAuthError {
+    constructor();
+}
+export interface StartConnectorOAuthInput {
+    /**
+     * The `:provider` path segment — the platform catalogue's slug, which is what
+     * knows the client id, the consent host and the registered redirect.
+     */
+    provider: string;
+    /**
+     * Which connector definition this authorizes. Usually the same word as
+     * `provider`; they part when the implementation is named after us rather than
+     * after them (`plugbank` is the catalogue's `tecnospeed`).
+     */
+    connectorId: string;
+    /** Where the merchant lands when it is over — the page they left from, hash and all. */
+    redirectTo: string;
+    /** The organization being connected. A selector the platform re-checks; see the port doc. */
+    tenantId?: string;
+}
+/** Where a consent flow is started from. Supplied once at boot. */
+export interface ConnectorOAuthStarter {
+    start(input: StartConnectorOAuthInput): Promise<string>;
+}
+export declare function setConnectorOAuthStarter(starter: ConnectorOAuthStarter | null): void;
+/** Null when the app configured none — callers must refuse, never fall back. */
+export declare function getConnectorOAuthStarter(): ConnectorOAuthStarter | null;
+export interface FayzConnectorOAuthStarterOptions {
+    /** The Fayz project this app was published from. */
+    projectId: string;
+    /**
+     * A Fayz **runtime-data** token. Same requirement, and same reason, as the
+     * credential sink's: it is the only scheme on the public plane that carries
+     * tenant identity, and a publishable key names an app rather than a tenant.
+     * Resolved per call so a short-lived token can be refreshed.
+     */
+    runtimeToken: FayzRuntimeTokenSource;
+    /** Fayz platform origin. Defaults to same-origin, which is what an app proxying `/api` wants. */
+    baseUrl?: string;
+    fetcher?: typeof fetch;
+}
+/**
+ * The starter backed by the Fayz platform. Installed once at boot, next to the
+ * credential sink:
+ *
+ *   const runtimeToken = createFayzRuntimeTokenSource({ projectId, supabase: getFayzSupabaseClientOptional })
+ *   setConnectorCredentialSink(createFayzConnectorCredentialSink({ projectId, runtimeToken }))
+ *   setConnectorOAuthStarter(createFayzConnectorOAuthStarter({ projectId, runtimeToken }))
+ */
+export declare function createFayzConnectorOAuthStarter(options: FayzConnectorOAuthStarterOptions): ConnectorOAuthStarter;
+/**
+ * Start a consent flow through the installed starter.
+ *
+ * `starter` is a test seam; pass `null` to assert there is none.
+ */
+export declare function startConnectorOAuth(input: StartConnectorOAuthInput & {
+    starter?: ConnectorOAuthStarter | null;
+}): Promise<string>;
+/**
+ * A connector's whole `startOAuth`, in one line.
+ *
+ *   startOAuth: fayzConnectorOAuth('bling')
+ *   startOAuth: fayzConnectorOAuth('plugbank', { provider: 'tecnospeed' })
+ *
+ * `provider` defaults to the connector id because for almost every connector
+ * the two are the same word, and a default that is right by construction is one
+ * fewer thing for the next connector to get wrong.
+ */
+export declare function fayzConnectorOAuth(connectorId: string, options?: {
+    provider?: string;
+}): (redirectTo?: string, context?: {
+    tenantId?: string;
+}) => Promise<string>;
+//# sourceMappingURL=connector-oauth.d.ts.map

package/dist/lib/connector-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-oauth.d.ts","sourceRoot":"","sources":["../../src/lib/connector-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAA2B,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAGpF,mFAAmF;AACnF,qBAAa,mBAAoB,SAAQ,KAAK;IAG1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED,wFAAwF;AACxF,qBAAa,iCAAkC,SAAQ,mBAAmB;;CAKzE;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACxD;AAID,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAEpF;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,IAAI,CAEvE;AAED,MAAM,WAAW,gCAAgC;IAC/C,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,YAAY,EAAE,sBAAsB,CAAA;IACpC,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CACvB;AAQD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,gCAAgC,GACxC,qBAAqB,CA2DvB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAAG;IAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;CAAE,GAC3E,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAW3E"}

package/dist/lib/credentials.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The credential sink — where a tenant's secret goes INSTEAD of into the app.
+ *
+ * A connector declares an "API Key" field, the hub renders it, and the obvious
+ * next move is to hand the typed value to the connector's own `saveConnection`.
+ * That move is the hole: connector-author code runs in the browser with a
+ * working Supabase client in scope, so "the connector promises not to persist
+ * it" is a convention, not a guarantee — and this repo broke it three times
+ * before anyone noticed. Dropping the columns did not close it either; the
+ * secret still reached the code that chose where to put it.
+ *
+ * So the secret never reaches that code. The hub splits the form and pushes the
+ * secret half here, to a holder outside the app: Fayz keeps it, and the data
+ * plane (an edge function, the agent runtime) will read it server-side per call
+ * — the redeem consumer is FAY-1389; nothing redeems yet.
+ *
+ * A port rather than a `fetch`, for the same reason `setPostalLookupProvider` is
+ * one: who holds the credential is a deployment fact, not a hub fact. An app
+ * supplies its sink once at boot. Supplying none is a valid answer — the hub
+ * then refuses to save, which is the only safe way to be unconfigured.
+ */
+/**
+ * How the tenant authorized. Mirrors `IntegrationAuthKind` in `@fayz-ai/core`,
+ * declared again here because `@fayz-ai/sdk` has no dependencies.
+ */
+export type ConnectorCredentialAuthKind = 'oauth' | 'api-key' | 'mtls';
+export interface StoreConnectorCredentialInput {
+    /** Connector the secret belongs to, e.g. 'plugbank'. */
+    connectorId: string;
+    /** Organization it is scoped to, when the app knows it; the holder may also derive it from the session. */
+    tenantId?: string;
+    /**
+     * How the connector authenticates, from its own `ConnectorDefinition`.
+     *
+     * The holder needs it and the browser must not invent it, so it is threaded
+     * from the declaration rather than guessed from the shape of `secrets`.
+     * Optional because a holder may not care; the Fayz sink below defaults it.
+     */
+    authKind?: ConnectorCredentialAuthKind;
+    /** Declared field key → value. The only object the secret lives in, and it is not kept after the call. */
+    secrets: Record<string, string>;
+}
+/** What an app may keep in its own database once the secret is placed: a handle. */
+export interface ConnectorCredentialRef {
+    /** Opaque id the holder gave the credential. Never the credential. */
+    id: string;
+}
+export interface ConnectorCredentialSink {
+    store(input: StoreConnectorCredentialInput): Promise<ConnectorCredentialRef>;
+}
+export declare function setConnectorCredentialSink(sink: ConnectorCredentialSink | null): void;
+/** Null when the app configured none — callers must refuse, never fall back. */
+export declare function getConnectorCredentialSink(): ConnectorCredentialSink | null;
+/** The credential was not placed. Carries a status when the platform answered. */
+export declare class ConnectorCredentialSinkError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/**
+ * What the sink can tell a token source about the call it is authenticating.
+ *
+ * Only the tenant, and only as a SELECTOR: the runtime-token endpoint proves
+ * membership from the session and refuses anything outside it, so naming an org
+ * here narrows which of the caller's own organizations the token is for and can
+ * never widen it. Without this the source would have to re-derive the active
+ * org from a store it does not know about, in an app that may have several.
+ */
+export interface FayzRuntimeTokenRequest {
+    tenantId?: string;
+}
+export type FayzRuntimeTokenSource = string | ((request?: FayzRuntimeTokenRequest) => string | undefined | null | Promise<string | undefined | null>);
+export interface FayzConnectorCredentialSinkOptions {
+    /** The Fayz project this app was published from. */
+    projectId: string;
+    /**
+     * A Fayz **runtime-data** token — the only scheme this endpoint accepts,
+     * because it is the only one on the public plane that carries tenant identity.
+     * A publishable key names an APP, so it cannot say which tenant is connecting.
+     *
+     * Required, and resolved per call so a short-lived token can be refreshed.
+     * There is deliberately no fallback: a sink that cannot authenticate looks
+     * configured and is worse than none, so an empty token is a refusal, not a
+     * best-effort request.
+     */
+    runtimeToken: FayzRuntimeTokenSource;
+    /** Fayz platform origin. Defaults to same-origin, which is what an app proxying `/api` wants. */
+    baseUrl?: string;
+    fetcher?: typeof fetch;
+}
+/**
+ * A sink backed by the Fayz platform's connector-connection store.
+ *
+ * Write-only by construction: the response is a handle, and no method here can
+ * read a credential back — redemption is a separate endpoint that requires a
+ * second key a browser has no way to hold.
+ */
+export declare function createFayzConnectorCredentialSink(options: FayzConnectorCredentialSinkOptions): ConnectorCredentialSink;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/lib/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/lib/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;AAEtE,MAAM,WAAW,6BAA6B;IAC5C,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,2GAA2G;IAC3G,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,2BAA2B,CAAA;IACtC,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,oFAAoF;AACpF,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAA;CACX;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAC7E;AAID,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAErF;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,IAAI,uBAAuB,GAAG,IAAI,CAE3E;AAgCD,kFAAkF;AAClF,qBAAa,4BAA6B,SAAQ,KAAK;IAGnD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,CAAC,CACC,OAAO,CAAC,EAAE,uBAAuB,KAC9B,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAA;AAExE,MAAM,WAAW,kCAAkC;IACjD,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;;;OASG;IACH,YAAY,EAAE,sBAAsB,CAAA;IACpC,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CACvB;AAuDD;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,uBAAuB,CA6EzB"}

package/dist/lib/dedupe-fetch.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Request de-duplication at the transport boundary: while a GET is in flight,
+ * an identical GET joins it instead of opening a second connection.
+ *
+ * Above the transport it is already too late — by the time two components have
+ * called `list()`, there are two requests. Nothing is cached (the entry dies
+ * when the response settles), so this cannot serve stale data: the TTL cache in
+ * @fayz-ai/core decides whether to ask, this decides what one question costs.
+ */
+export interface DedupeFetchOptions {
+    /** Extra request headers that make two same-URL reads different. */
+    varyHeaders?: string[];
+    /** Called when a request joined one already in flight. For diagnostics. */
+    onCollapse?: (key: string) => void;
+}
+export interface DedupeStats {
+    /** Requests that never reached the network because they joined another. */
+    collapsed: number;
+    /** Requests currently in flight and joinable. */
+    inFlight: number;
+}
+export declare function getDedupeStats(): DedupeStats;
+/** Test seam — drops in-flight bookkeeping and the counter. */
+export declare function resetDedupeStats(): void;
+export declare function createDedupedFetch(baseFetch?: typeof fetch, options?: DedupeFetchOptions): typeof fetch;
+//# sourceMappingURL=dedupe-fetch.d.ts.map

package/dist/lib/dedupe-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedupe-fetch.d.ts","sourceRoot":"","sources":["../../src/lib/dedupe-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAYD,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,+DAA+D;AAC/D,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AAkBD,wBAAgB,kBAAkB,CAGhC,SAAS,GAAE,OAAO,KAAmC,EACrD,OAAO,GAAE,kBAAuB,GAC/B,OAAO,KAAK,CAsDd"}

package/dist/lib/platform-url.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Where the Fayz platform lives, from whatever the app happened to configure.
+ *
+ * Two spellings are already in the wild and they disagree by one segment:
+ * `VITE_FAYZ_API_BASE_URL` in a published app's env is written as
+ * `https://host/api` (that is what the agent broker client consumes), while the
+ * sink and the token source below build paths that start with `/api`. Taking
+ * either at face value produces `/api/api/public/...` in half the fleet, and a
+ * 404 at connect time reads as "the platform refused my credential".
+ *
+ * So the origin is normalised once, here, rather than in each caller: trailing
+ * slashes go, and a trailing `/api` is dropped because the paths add it back.
+ */
+export declare function fayzPlatformOrigin(baseUrl: string | undefined): string;
+//# sourceMappingURL=platform-url.d.ts.map

package/dist/lib/platform-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-url.d.ts","sourceRoot":"","sources":["../../src/lib/platform-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtE"}

package/dist/lib/runtime-token.d.ts

@@ -0,0 +1,104 @@
+/**
+ * The key the credential sink needs — minted once, in one place.
+ *
+ * `ConnectorCredentialSink` requires a Fayz runtime-data token and deliberately
+ * has no fallback, so until something hands it one the connect button refuses.
+ * The token exists: `POST /api/public/projects/:projectId/runtime-token` trades
+ * the app's OWN Supabase session for it. What did not exist is the client, and
+ * writing that `fetch` per app is how five apps end up with five cache policies
+ * and four of them without one.
+ *
+ * The exchange, as the platform actually implements it:
+ *
+ *   Authorization: Bearer <the app's Supabase access token>
+ *   body: { tenantId? }                            → 201
+ *   { token, tokenType: 'Bearer', expiresIn, projectId, tenantId }
+ *
+ * `tenantId` in the body is a SELECTOR, never an assertion. The platform
+ * verifies the session against the project's published JWKS, asks the app's own
+ * database which organizations that user belongs to, and refuses a `tenantId`
+ * outside that set; omitting it is resolved only when the answer is
+ * unambiguous. Naming a tenant here therefore cannot widen anything — which is
+ * why it is safe for the hub to pass the org the merchant is looking at.
+ *
+ * Fail-closed throughout: no session means no token means the sink refuses. A
+ * source that quietly resolved to an empty string would leave an app looking
+ * configured while every save fails, which is the failure that is hard to read.
+ */
+import type { FayzRuntimeTokenRequest } from './credentials';
+/** No token was minted. Carries a status when the platform answered. */
+export declare class FayzRuntimeTokenError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/**
+ * The slice of a Supabase client this module touches.
+ *
+ * Duck-typed because `@fayz-ai/sdk` has no dependencies and must not grow one:
+ * an app passes the client it already built (`getFayzSupabaseClientOptional()`
+ * in `@fayz-ai/admin`), and nothing here needs the other four hundred methods.
+ */
+export interface SupabaseSessionClientLike {
+    auth: {
+        getSession(): Promise<{
+            data: {
+                session: {
+                    access_token?: string | null;
+                } | null;
+            };
+        }>;
+    };
+}
+type Resolvable<T> = T | (() => T | Promise<T>);
+export interface FayzRuntimeTokenSourceOptions {
+    /** The Fayz project this app was published from. */
+    projectId: string;
+    /**
+     * The app's Supabase client, or a getter for one.
+     *
+     * A getter is the usual answer: the client is built when the app boots its
+     * backend, which is after the module that installs the sink has run. Reading
+     * it once at construction would pin `null` forever.
+     */
+    supabase?: Resolvable<SupabaseSessionClientLike | null | undefined>;
+    /**
+     * Or, for an app whose session does not come from supabase-js, the access
+     * token itself. Exactly one of `supabase` / `accessToken` is required.
+     */
+    accessToken?: Resolvable<string | null | undefined>;
+    /**
+     * Which organization to ask for when the caller names none. Still only a
+     * selector — see the header. Apps with one org per user can leave it unset.
+     */
+    tenantId?: Resolvable<string | null | undefined>;
+    /** Fayz platform origin. Defaults to same-origin, which is what an app proxying `/api` wants. */
+    baseUrl?: string;
+    fetcher?: typeof fetch;
+    /**
+     * How long before expiry a cached token stops being handed out. The token is
+     * short-lived (15 minutes today) and the request it authenticates is a POST
+     * that must not fail at the boundary, so the last stretch is not spent.
+     */
+    refreshLeadSeconds?: number;
+    /** Test seam. */
+    now?: () => number;
+}
+export interface FayzRuntimeTokenSourceHandle {
+    (request?: FayzRuntimeTokenRequest): Promise<string>;
+    /** Forget every cached token — after a sign-out, or an org switch that changed who is asking. */
+    invalidate(): void;
+}
+/**
+ * Trade the app's Supabase session for a Fayz runtime-data token, and keep it
+ * until shortly before it expires.
+ *
+ * The result is a function, so it drops straight into the sink:
+ *
+ *   setConnectorCredentialSink(createFayzConnectorCredentialSink({
+ *     projectId,
+ *     runtimeToken: createFayzRuntimeTokenSource({ projectId, supabase: getClient }),
+ *   }))
+ */
+export declare function createFayzRuntimeTokenSource(options: FayzRuntimeTokenSourceOptions): FayzRuntimeTokenSourceHandle;
+export {};
+//# sourceMappingURL=runtime-token.d.ts.map

package/dist/lib/runtime-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-token.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAG5D,wEAAwE;AACxE,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE;QACJ,UAAU,IAAI,OAAO,CAAC;YAAE,IAAI,EAAE;gBAAE,OAAO,EAAE;oBAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;iBAAE,GAAG,IAAI,CAAA;aAAE,CAAA;SAAE,CAAC,CAAA;KACtF,CAAA;CACF;AAED,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;AAE/C,MAAM,WAAW,6BAA6B;IAC5C,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC,yBAAyB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACnE;;;OAGG;IACH,WAAW,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACnD;;;OAGG;IACH,QAAQ,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAChD,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,iBAAiB;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACpD,iGAAiG;IACjG,UAAU,IAAI,IAAI,CAAA;CACnB;AA8BD;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC,4BAA4B,CAqH9B"}

package/dist/release-channels.js

@@ -1,3 +1,3 @@
-export { fayzPackageVersionSets, resolveFayzPackageDependencies, resolveFayzPackageVersion, resolveFayzPackageVersions } from './chunk-KVMRRT3O.js';
+export { fayzPackageVersionSets, resolveFayzPackageDependencies, resolveFayzPackageVersion, resolveFayzPackageVersions } from './chunk-U7SC2YFQ.js';
 //# sourceMappingURL=release-channels.js.map
 //# sourceMappingURL=release-channels.js.map

package/dist/release-channels.json

@@ -1,103 +1,103 @@
 {
   "channels": {
     "stable": {
-      "@fayz-ai/sdk": "^0.10.1",
-      "@fayz-ai/admin": "^0.10.0",
-      "@fayz-ai/core": "^0.10.0",
-      "@fayz-ai/auth": "^0.10.0",
-      "@fayz-ai/ui": "^0.10.1",
-      "@fayz-ai/shop": "^0.10.0",
-      "@fayz-ai/storefront": "^0.10.0",
-      "@fayz-ai/portal": "^0.10.0",
-      "@fayz-ai/courses": "^0.10.0",
-      "@fayz-ai/db": "^0.10.0",
-      "@fayz-ai/plugin-agenda": "^0.9.1",
-      "@fayz-ai/plugin-auth": "^0.9.1",
-      "@fayz-ai/plugin-automations": "^0.9.1",
-      "@fayz-ai/plugin-blog": "^0.10.0",
-      "@fayz-ai/plugin-conversations": "^0.9.1",
-      "@fayz-ai/plugin-courses": "^0.9.1",
-      "@fayz-ai/plugin-crm": "^0.9.1",
-      "@fayz-ai/plugin-dashboard": "^0.9.1",
-      "@fayz-ai/plugin-financial": "^0.9.1",
-      "@fayz-ai/plugin-forms": "^0.9.1",
-      "@fayz-ai/plugin-inventory": "^0.9.1",
-      "@fayz-ai/plugin-marketing": "^0.9.1",
-      "@fayz-ai/plugin-menu": "^0.9.1",
-      "@fayz-ai/plugin-orders": "^0.9.1",
-      "@fayz-ai/plugin-payments": "^0.9.1",
-      "@fayz-ai/plugin-reports": "^0.9.1",
-      "@fayz-ai/plugin-reputation": "^0.9.1",
-      "@fayz-ai/plugin-shop": "^0.9.1",
-      "@fayz-ai/plugin-sites": "^0.9.1",
-      "@fayz-ai/plugin-tables": "^0.9.1",
-      "@fayz-ai/plugin-tasks": "^0.9.1"
+      "@fayz-ai/sdk": "^0.11.0",
+      "@fayz-ai/admin": "^0.11.0",
+      "@fayz-ai/core": "^0.11.0",
+      "@fayz-ai/auth": "^0.11.0",
+      "@fayz-ai/ui": "^0.11.0",
+      "@fayz-ai/shop": "^0.11.0",
+      "@fayz-ai/storefront": "^0.11.0",
+      "@fayz-ai/portal": "^0.11.0",
+      "@fayz-ai/courses": "^0.11.0",
+      "@fayz-ai/db": "^0.11.0",
+      "@fayz-ai/plugin-agenda": "^0.10.0",
+      "@fayz-ai/plugin-auth": "^0.10.0",
+      "@fayz-ai/plugin-automations": "^0.10.0",
+      "@fayz-ai/plugin-blog": "^0.11.0",
+      "@fayz-ai/plugin-conversations": "^0.9.2",
+      "@fayz-ai/plugin-courses": "^0.10.0",
+      "@fayz-ai/plugin-crm": "^0.9.2",
+      "@fayz-ai/plugin-dashboard": "^0.9.2",
+      "@fayz-ai/plugin-financial": "^0.9.2",
+      "@fayz-ai/plugin-forms": "^0.9.2",
+      "@fayz-ai/plugin-inventory": "^0.9.2",
+      "@fayz-ai/plugin-marketing": "^0.10.0",
+      "@fayz-ai/plugin-menu": "^0.9.2",
+      "@fayz-ai/plugin-orders": "^0.9.2",
+      "@fayz-ai/plugin-payments": "^0.9.2",
+      "@fayz-ai/plugin-reports": "^0.10.0",
+      "@fayz-ai/plugin-reputation": "^0.9.2",
+      "@fayz-ai/plugin-shop": "^0.10.0",
+      "@fayz-ai/plugin-sites": "^0.9.2",
+      "@fayz-ai/plugin-tables": "^0.9.2",
+      "@fayz-ai/plugin-tasks": "^0.9.2"
     },
     "latest": {
-      "@fayz-ai/sdk": "^0.10.1",
-      "@fayz-ai/admin": "^0.10.0",
-      "@fayz-ai/core": "^0.10.0",
-      "@fayz-ai/auth": "^0.10.0",
-      "@fayz-ai/ui": "^0.10.1",
-      "@fayz-ai/shop": "^0.10.0",
-      "@fayz-ai/storefront": "^0.10.0",
-      "@fayz-ai/portal": "^0.10.0",
-      "@fayz-ai/courses": "^0.10.0",
-      "@fayz-ai/db": "^0.10.0",
-      "@fayz-ai/plugin-agenda": "^0.9.1",
-      "@fayz-ai/plugin-auth": "^0.9.1",
-      "@fayz-ai/plugin-automations": "^0.9.1",
-      "@fayz-ai/plugin-blog": "^0.10.0",
-      "@fayz-ai/plugin-conversations": "^0.9.1",
-      "@fayz-ai/plugin-courses": "^0.9.1",
-      "@fayz-ai/plugin-crm": "^0.9.1",
-      "@fayz-ai/plugin-dashboard": "^0.9.1",
-      "@fayz-ai/plugin-financial": "^0.9.1",
-      "@fayz-ai/plugin-forms": "^0.9.1",
-      "@fayz-ai/plugin-inventory": "^0.9.1",
-      "@fayz-ai/plugin-marketing": "^0.9.1",
-      "@fayz-ai/plugin-menu": "^0.9.1",
-      "@fayz-ai/plugin-orders": "^0.9.1",
-      "@fayz-ai/plugin-payments": "^0.9.1",
-      "@fayz-ai/plugin-reports": "^0.9.1",
-      "@fayz-ai/plugin-reputation": "^0.9.1",
-      "@fayz-ai/plugin-shop": "^0.9.1",
-      "@fayz-ai/plugin-sites": "^0.9.1",
-      "@fayz-ai/plugin-tables": "^0.9.1",
-      "@fayz-ai/plugin-tasks": "^0.9.1"
+      "@fayz-ai/sdk": "^0.11.0",
+      "@fayz-ai/admin": "^0.11.0",
+      "@fayz-ai/core": "^0.11.0",
+      "@fayz-ai/auth": "^0.11.0",
+      "@fayz-ai/ui": "^0.11.0",
+      "@fayz-ai/shop": "^0.11.0",
+      "@fayz-ai/storefront": "^0.11.0",
+      "@fayz-ai/portal": "^0.11.0",
+      "@fayz-ai/courses": "^0.11.0",
+      "@fayz-ai/db": "^0.11.0",
+      "@fayz-ai/plugin-agenda": "^0.10.0",
+      "@fayz-ai/plugin-auth": "^0.10.0",
+      "@fayz-ai/plugin-automations": "^0.10.0",
+      "@fayz-ai/plugin-blog": "^0.11.0",
+      "@fayz-ai/plugin-conversations": "^0.9.2",
+      "@fayz-ai/plugin-courses": "^0.10.0",
+      "@fayz-ai/plugin-crm": "^0.9.2",
+      "@fayz-ai/plugin-dashboard": "^0.9.2",
+      "@fayz-ai/plugin-financial": "^0.9.2",
+      "@fayz-ai/plugin-forms": "^0.9.2",
+      "@fayz-ai/plugin-inventory": "^0.9.2",
+      "@fayz-ai/plugin-marketing": "^0.10.0",
+      "@fayz-ai/plugin-menu": "^0.9.2",
+      "@fayz-ai/plugin-orders": "^0.9.2",
+      "@fayz-ai/plugin-payments": "^0.9.2",
+      "@fayz-ai/plugin-reports": "^0.10.0",
+      "@fayz-ai/plugin-reputation": "^0.9.2",
+      "@fayz-ai/plugin-shop": "^0.10.0",
+      "@fayz-ai/plugin-sites": "^0.9.2",
+      "@fayz-ai/plugin-tables": "^0.9.2",
+      "@fayz-ai/plugin-tasks": "^0.9.2"
     },
     "preview": {
-      "@fayz-ai/sdk": "^0.10.1",
-      "@fayz-ai/admin": "^0.10.0",
-      "@fayz-ai/core": "^0.10.0",
-      "@fayz-ai/auth": "^0.10.0",
-      "@fayz-ai/ui": "^0.10.1",
-      "@fayz-ai/shop": "^0.10.0",
-      "@fayz-ai/storefront": "^0.10.0",
-      "@fayz-ai/portal": "^0.10.0",
-      "@fayz-ai/courses": "^0.10.0",
-      "@fayz-ai/db": "^0.10.0",
-      "@fayz-ai/plugin-agenda": "^0.9.1",
-      "@fayz-ai/plugin-auth": "^0.9.1",
-      "@fayz-ai/plugin-automations": "^0.9.1",
-      "@fayz-ai/plugin-blog": "^0.10.0",
-      "@fayz-ai/plugin-conversations": "^0.9.1",
-      "@fayz-ai/plugin-courses": "^0.9.1",
-      "@fayz-ai/plugin-crm": "^0.9.1",
-      "@fayz-ai/plugin-dashboard": "^0.9.1",
-      "@fayz-ai/plugin-financial": "^0.9.1",
-      "@fayz-ai/plugin-forms": "^0.9.1",
-      "@fayz-ai/plugin-inventory": "^0.9.1",
-      "@fayz-ai/plugin-marketing": "^0.9.1",
-      "@fayz-ai/plugin-menu": "^0.9.1",
-      "@fayz-ai/plugin-orders": "^0.9.1",
-      "@fayz-ai/plugin-payments": "^0.9.1",
-      "@fayz-ai/plugin-reports": "^0.9.1",
-      "@fayz-ai/plugin-reputation": "^0.9.1",
-      "@fayz-ai/plugin-shop": "^0.9.1",
-      "@fayz-ai/plugin-sites": "^0.9.1",
-      "@fayz-ai/plugin-tables": "^0.9.1",
-      "@fayz-ai/plugin-tasks": "^0.9.1"
+      "@fayz-ai/sdk": "^0.11.0",
+      "@fayz-ai/admin": "^0.11.0",
+      "@fayz-ai/core": "^0.11.0",
+      "@fayz-ai/auth": "^0.11.0",
+      "@fayz-ai/ui": "^0.11.0",
+      "@fayz-ai/shop": "^0.11.0",
+      "@fayz-ai/storefront": "^0.11.0",
+      "@fayz-ai/portal": "^0.11.0",
+      "@fayz-ai/courses": "^0.11.0",
+      "@fayz-ai/db": "^0.11.0",
+      "@fayz-ai/plugin-agenda": "^0.10.0",
+      "@fayz-ai/plugin-auth": "^0.10.0",
+      "@fayz-ai/plugin-automations": "^0.10.0",
+      "@fayz-ai/plugin-blog": "^0.11.0",
+      "@fayz-ai/plugin-conversations": "^0.9.2",
+      "@fayz-ai/plugin-courses": "^0.10.0",
+      "@fayz-ai/plugin-crm": "^0.9.2",
+      "@fayz-ai/plugin-dashboard": "^0.9.2",
+      "@fayz-ai/plugin-financial": "^0.9.2",
+      "@fayz-ai/plugin-forms": "^0.9.2",
+      "@fayz-ai/plugin-inventory": "^0.9.2",
+      "@fayz-ai/plugin-marketing": "^0.10.0",
+      "@fayz-ai/plugin-menu": "^0.9.2",
+      "@fayz-ai/plugin-orders": "^0.9.2",
+      "@fayz-ai/plugin-payments": "^0.9.2",
+      "@fayz-ai/plugin-reports": "^0.10.0",
+      "@fayz-ai/plugin-reputation": "^0.9.2",
+      "@fayz-ai/plugin-shop": "^0.10.0",
+      "@fayz-ai/plugin-sites": "^0.9.2",
+      "@fayz-ai/plugin-tables": "^0.9.2",
+      "@fayz-ai/plugin-tasks": "^0.9.2"
     }
   }
 }