@flow-industries/id 0.24.1 → 0.24.4

package/contracts/v1/sdk-exports.json

@@ -347,6 +347,11 @@
         "type": true,
         "value": false
       },
+      {
+        "name": "MarkNotificationsReadInput",
+        "type": true,
+        "value": false
+      },
       {
         "name": "matchScore",
         "type": false,
@@ -382,6 +387,31 @@
         "type": false,
         "value": true
       },
+      {
+        "name": "NotificationCounts",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NotificationEntry",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NotificationPage",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NotificationReadResult",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NotificationRefusal",
+        "type": true,
+        "value": false
+      },
       {
         "name": "openProfile",
         "type": false,

package/dist/sdk/browser-session-route.d.ts

@@ -1,6 +1,7 @@
 export declare function safeReturnTo(value: string, audience: string, sessionPath?: string): string | null;
 export declare function startBrowserSession(request: Request, audience: string, issuerUrl: string, body: {
     action: "login" | "account";
+    redirect?: boolean;
     returnTo?: string;
     signUp?: boolean;
     accessKeyHash?: string;

package/dist/sdk/browser-session-route.js

@@ -81,7 +81,17 @@ export async function startBrowserSession(request, audience, issuerUrl, body, ap
         const { handoff } = z
             .object({ handoff: z.string().regex(opaquePattern) })
             .parse(await response.json());
-        return reply({ accountUrl: `${issuerUrl}/account#handoff=${handoff}` });
+        const accountUrl = `${issuerUrl}/account#handoff=${handoff}`;
+        if (body.redirect)
+            return new Response(null, {
+                status: 303,
+                headers: {
+                    Location: accountUrl,
+                    "Cache-Control": "no-store",
+                    "Referrer-Policy": "no-referrer",
+                },
+            });
+        return reply({ accountUrl });
     }
     const returnTo = safeReturnTo(body.returnTo ?? "/", audience, new URL(request.url).pathname);
     if (!returnTo)

package/dist/sdk/client/create-flow.js

@@ -394,34 +394,12 @@ export function createFlow(options = {}) {
         });
     }
     function openAccount() {
-        const tab = window.open("about:blank", "_blank");
+        const url = new URL(sessionPath, window.location.origin);
+        url.searchParams.set("action", "account");
+        const tab = window.open(url.href, "_blank");
         if (!tab)
             return false;
         tab.opener = null;
-        tab.document.title = "Opening Flow ID";
-        tab.document.body.textContent = "Opening your Flow ID account…";
-        void fetch(sessionPath, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ action: "account" }),
-        })
-            .then(async (response) => {
-            if (!response.ok)
-                throw new Error("Account unavailable");
-            // SAFETY: the app session handler returns the SDK protocol response.
-            const result = (await response.json());
-            tab.location.replace(result.accountUrl);
-        })
-            .catch(() => {
-            tab.document.title = "Open Flow ID";
-            tab.document.body.textContent =
-                "Your app account could not be opened securely. Return to the app and try again, or open Flow ID and check the signed-in account before making changes. ";
-            const link = tab.document.createElement("a");
-            link.href = `${host}/account`;
-            link.textContent = "Open Flow ID";
-            link.rel = "noreferrer";
-            tab.document.body.appendChild(link);
-        });
         return true;
     }
     async function logout() {

package/dist/sdk/client/index.d.ts

@@ -1,5 +1,5 @@
 export { defaultIdHost, isLocalHostname } from "../id-host";
-export type { AccessKeyOptions, ActionCatalogEntry, ActionCatalogResponse, ActionCurve, ActionEventRequest, ActionEventResponse, ActionSubjectRef, ActionSurface, ActionsApi, ActionTransitionKind, ActiveAction, ActiveActionResponse, ActiveSessionConflict, AdditionalSession, Address, CatalogFieldRef, ClockAnchor, ConnectCapabilities, ConnectResponse, CreateFlowOptions, CreateStudySubjectInput, CurrentAction, DialogHost, FinishActionRequest, FinishActionResponse, FinishedSummary, Flow, FlowCredential, FlowSessionState, FlowState, FlowUser, FlowWidgetHandle, FlowWidgetName, FocusApi, FocusPhase, FocusSessionEvent, FocusSessionState, ListStudySessionsOptions, ListStudySubjectsOptions, LoginOptions, MethodName, MountFlowWidgetOptions, MountProfileOptions, OpenProfileOptions, ProfileButtonHandle, ProfilePosition, RoomMemberEntry, Session, StartActionInput, StartActionResponse, StartActionResult, StartFocusRequest, StudyApi, StudyCatalog, StudyCategory, StudyCategoryTotals, StudyField, StudyRange, StudySearchHit, StudySessionEntry, StudySessionPage, StudySubject, StudySubjectList, StudySubjectRefusal, StudySubjectRemovalResponse, StudySubjectResponse, StudySubjectTotals, StudySummary, UpdateStudySubjectInput, UserActionSurface, XpEstimateContext, XpMode, } from "../types";
+export type { AccessKeyOptions, ActionCatalogEntry, ActionCatalogResponse, ActionCurve, ActionEventRequest, ActionEventResponse, ActionSubjectRef, ActionSurface, ActionsApi, ActionTransitionKind, ActiveAction, ActiveActionResponse, ActiveSessionConflict, AdditionalSession, Address, CatalogFieldRef, ClockAnchor, ConnectCapabilities, ConnectResponse, CreateFlowOptions, CreateStudySubjectInput, CurrentAction, DialogHost, FinishActionRequest, FinishActionResponse, FinishedSummary, Flow, FlowCredential, FlowSessionState, FlowState, FlowUser, FlowWidgetHandle, FlowWidgetName, FocusApi, FocusPhase, FocusSessionEvent, FocusSessionState, ListStudySessionsOptions, ListStudySubjectsOptions, LoginOptions, MarkNotificationsReadInput, MethodName, MountFlowWidgetOptions, MountProfileOptions, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, OpenProfileOptions, ProfileButtonHandle, ProfilePosition, RoomMemberEntry, Session, StartActionInput, StartActionResponse, StartActionResult, StartFocusRequest, StudyApi, StudyCatalog, StudyCategory, StudyCategoryTotals, StudyField, StudyRange, StudySearchHit, StudySessionEntry, StudySessionPage, StudySubject, StudySubjectList, StudySubjectRefusal, StudySubjectRemovalResponse, StudySubjectResponse, StudySubjectTotals, StudySummary, UpdateStudySubjectInput, UserActionSurface, XpEstimateContext, XpMode, } from "../types";
 export { consistencyCurve, estimateActionXp, FLOW_SCORE_MAX, flowMultiplier, } from "../xp/curve";
 export { ActionsRequestError, createActionsApi, isActiveSessionConflict, } from "./actions";
 export { createFlow, getFlow, requireFlow, resetFlow } from "./create-flow";

package/dist/sdk/client/profile-button.d.ts

@@ -1,3 +1,3 @@
 import type { MountProfileOptions, ProfileButtonHandle } from "../types";
-/** Mount a native account button that opens Flow ID in a normal browser tab. */
+/** Mount an account button that signs guests in or opens full-account settings. */
 export declare function createProfileButton(options: MountProfileOptions): ProfileButtonHandle;

package/dist/sdk/client/profile-button.js

@@ -6,7 +6,7 @@ const POSITION_STYLE = {
     "bottom-right": { bottom: "0", right: "0" },
     "bottom-left": { bottom: "0", left: "0" },
 };
-/** Mount a native account button that opens Flow ID in a normal browser tab. */
+/** Mount an account button that signs guests in or opens full-account settings. */
 export function createProfileButton(options) {
     if (!("document" in globalThis))
         return { setTheme() { }, destroy() { } };
@@ -81,7 +81,9 @@ export function createProfileButton(options) {
     function update(refresh = false) {
         const user = flow.getState().user;
         name.textContent = user?.username ?? "Flow ID";
-        button.setAttribute("aria-label", `Open ${user?.username ?? "your"} Flow ID account in a new tab`);
+        button.setAttribute("aria-label", !user || user.isGuest
+            ? "Sign in to Flow ID"
+            : `Open ${user.username} Flow ID account in a new tab`);
         const identityChanged = user?.id !== lastUser?.id ||
             user?.username !== lastUser?.username ||
             user?.isGuest !== lastUser?.isGuest;
@@ -92,8 +94,11 @@ export function createProfileButton(options) {
             avatar.textContent = user?.username.slice(0, 1).toUpperCase() ?? "F";
             lastUser = user;
         }
-        else if (!refresh || profileRequest)
+        else if (!refresh || profileRequest) {
+            // Same account: only an explicit refresh refetches, and never on top of
+            // a request already in flight.
             return;
+        }
         if (!user || user.isGuest)
             return;
         const controller = new AbortController();
@@ -137,6 +142,19 @@ export function createProfileButton(options) {
         });
     }
     button.addEventListener("click", () => {
+        const user = flow.getState().user;
+        if (!user || user.isGuest) {
+            if (button.disabled)
+                return;
+            button.disabled = true;
+            notice.textContent = "";
+            fallback.hidden = true;
+            void flow.login().catch(() => {
+                button.disabled = false;
+                notice.textContent = "Could not start sign-in. Try again.";
+            });
+            return;
+        }
         const opened = flow.openAccount();
         notice.textContent = opened
             ? ""

package/dist/sdk/db/schema.d.ts

@@ -4053,6 +4053,166 @@ export declare const securityEvent: import("drizzle-orm/pg-core").PgTableWithCol
     };
     dialect: "pg";
 }>;
+export declare const notification: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "notification";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "user_id";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        type: import("drizzle-orm/pg-core").PgColumn<{
+            name: "type";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        subjectType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "subject_type";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        subjectId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "subject_id";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        occasion: import("drizzle-orm/pg-core").PgColumn<{
+            name: "occasion";
+            tableName: "notification";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "notification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        readAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "read_at";
+            tableName: "notification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        seenAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "seen_at";
+            tableName: "notification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
 export declare const accountErasure: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "account_erasure";
     schema: undefined;

package/dist/sdk/db/schema.js

@@ -692,6 +692,83 @@ export const securityEvent = pgTable("security_event", {
 }, (table) => [
     index("security_event_user_created_at_idx").on(table.userId, table.createdAt),
 ]);
+// The per-recipient notification index (AUTH-351): one address row per user per
+// thing they were told about, recording WHO was addressed, of WHAT type, about
+// WHICH referent and WHEN — and nothing a viewer reads. There is deliberately
+// no title, body, href or payload column: every rendered field is produced by
+// that type's resolver from the live source at read time, so a referent that
+// was deleted or cancelled, or that this viewer may no longer see, suppresses
+// the entry instead of rendering it. A row carrying a copy of the text would
+// outlive its source and keep showing what nobody may see any more, which is
+// the guarantee talk/server/inbox.ts gets for free from indexing on the
+// source's own table and auth's heterogeneous sources have to keep by
+// construction.
+//
+// Keyed on user.id (the JWT sub) so rows survive the in-place guest->full
+// upgrade, and cascade on user delete. Guests hold notifications like anyone
+// else — with no email and no linked Discord, in-app is the only channel that
+// can ever reach them.
+//
+// `subject_id` is null for a type addressed at the account rather than at a
+// row. `occasion` is the second address axis inside one subject: two notices
+// about the same referent that are genuinely different notices rather than a
+// retry of one (a room event's T-60, T-10 and start reminders all address the
+// same occurrence). It is an opaque address token, never content -- a resolver
+// still renders every field from the live source, and an empty string is the
+// default for a type that addresses a subject only once.
+//
+// `read_at` is set only by the mark-read route, `seen_at` by the panel-open
+// route, and a read row is always also seen, which is what lets one partial
+// index answer both counts.
+//
+// The three instants are `timestamp(3)`: a JS Date is millisecond-resolution,
+// so a column at Postgres's default microsecond resolution cannot be addressed
+// exactly by the keyset cursor or by a `before` echoed back from a response.
+// The default is `now() at time zone 'utc'` rather than plain `now()`, which a
+// naive column resolves through the session TimeZone -- drizzle reads a naive
+// column back as UTC in every case, so a non-UTC session would silently shift
+// every row against the app clock that every predicate here uses.
+export const notification = pgTable("notification", {
+    id: text("id").primaryKey(),
+    userId: text("user_id")
+        .notNull()
+        .references(() => user.id, { onDelete: "cascade" }),
+    type: text("type").notNull(),
+    subjectType: text("subject_type").notNull(),
+    subjectId: text("subject_id"),
+    occasion: text("occasion").notNull().default(""),
+    createdAt: timestamp("created_at", { precision: 3 })
+        .notNull()
+        .default(sql `(now() at time zone 'utc')`),
+    readAt: timestamp("read_at", { precision: 3 }),
+    seenAt: timestamp("seen_at", { precision: 3 }),
+}, (table) => [
+    // The keyset page: WHERE user_id = ? ORDER BY created_at DESC, id DESC,
+    // which is also the order the (created_at, id) cursor resumes from.
+    // Deliberately ASC, like security_event_user_created_at_idx: a DESC index
+    // is built NULLS LAST while a bare `ORDER BY ... DESC` asks for NULLS
+    // FIRST, so the pathkeys never match and the planner sorts instead of
+    // walking the index. Ascending, it serves the page as a backward scan.
+    index("notification_user_created_at_idx").on(table.userId, table.createdAt, table.id),
+    // The badge count — kept partial so it stays small no matter how much
+    // history a long-lived account accumulates. Unseen rows are a subset of
+    // unread ones (marking read also stamps seen), so this one index serves
+    // both numbers, and the panel-open stamp carries a read_at term for the
+    // same reason: `seen_at is null` on its own is not a predicate anything
+    // here can serve.
+    index("notification_user_unread_idx")
+        .on(table.userId, table.createdAt)
+        .where(sql `${table.readAt} is null`),
+    // Idempotency: a producer that retries a fan-out writes the same address
+    // twice and the second insert must be a no-op, never a duplicate entry.
+    // Indexed on coalesce() rather than on the column because Postgres treats
+    // NULLs as distinct, which would let an account-scoped type (null subject)
+    // duplicate freely; an empty string is not a valid id, so it can never
+    // collide with a real one. `occasion` is part of the key, so the three
+    // reminders one occurrence sends are three addresses while a retry of any
+    // one of them still collapses into the row it already wrote.
+    uniqueIndex("notification_user_type_subject_idx").on(table.userId, table.type, table.subjectType, sql `coalesce(${table.subjectId}, '')`, table.occasion),
+]);
 // The erasure ledger: one row per deleted account, appended in the same
 // transaction that deletes the user row (src/account-erasure.ts). `user_id` is
 // the sub every downstream service keyed its data on and is deliberately NOT a

package/dist/sdk/session-route.js

@@ -93,6 +93,14 @@ export async function handleSessionRequest(request, opts = {}) {
     }
     switch (request.method) {
         case "GET": {
+            if (callback.searchParams.get("action") === "account") {
+                try {
+                    return await startBrowserSession(request, audience, issuerUrl, { action: "account", redirect: true }, apiUrl);
+                }
+                catch {
+                    return json({ state: null }, 502);
+                }
+            }
             if (new URL(request.url).searchParams.get("refresh") === "1") {
                 const token = parseCookieHeader(request.headers.get("Cookie"))[cookieNamesFor(audience).refresh];
                 if (!token)

package/dist/sdk/settings/cosmetics.d.ts

@@ -67,6 +67,7 @@ export declare const CATALOG: Catalog;
  */
 export declare const STARTING_OUTFIT: {
     hair: string;
+    ears: string;
     hat: string;
     face: string;
     top: string;

package/dist/sdk/settings/cosmetics.js

@@ -16,6 +16,7 @@
  * promotes to a `cosmetic` table when non-engineers must edit it live.
  */
 import { isString } from "../json";
+import earItems from "./ear-items.json";
 import hairItems from "./hair-items.json";
 /**
  * Region pairs that physically overlap, declared once in ONE direction and
@@ -60,6 +61,7 @@ const OVERLAPS = (() => {
  */
 const SLOTS = {
     hair: { label: "Hair", required: true },
+    ears: { label: "Ears", required: true },
     hat: { label: "Headwear", required: false },
     face: { label: "Face", required: false },
     top: { label: "Top", required: true },
@@ -102,6 +104,13 @@ export function catalogOf(items) {
  * there names nothing the renderer can draw.
  */
 export const COSMETICS = [
+    ...earItems.map((item) => ({
+        ...item,
+        slot: "ears",
+        regions: item.id === "ears_original" ? [] : ["ears"],
+        hides: item.id === "ears_original" ? [] : ["ears"],
+        paintable: [],
+    })),
     ...hairItems.map((item) => ({
         ...item,
         slot: "hair",
@@ -193,6 +202,7 @@ export const CATALOG = catalogOf(COSMETICS);
  */
 export const STARTING_OUTFIT = {
     hair: "hair_original",
+    ears: "ears_original",
     hat: "",
     face: "",
     top: "hoodie",

package/dist/sdk/settings/ear-items.json

@@ -0,0 +1,37 @@
+[
+    {
+        "id": "ears_original",
+        "name": "Soft point",
+        "description": "Compact ears with gently tapered tips and a soft, rounded shape."
+    },
+    {
+        "id": "ears_small_round",
+        "name": "Small rounded",
+        "description": "Small rounded ears tucked close to the sides of the head."
+    },
+    {
+        "id": "ears_short_point",
+        "name": "Short pointed",
+        "description": "Compact pointed ears with a soft rim and a slight upward tilt."
+    },
+    {
+        "id": "ears_long_swept",
+        "name": "Elf ears",
+        "description": "Long pointed elf ears sweep outward and upward from the sides of the head."
+    },
+    {
+        "id": "ears_cat_upright",
+        "name": "Upright cat",
+        "description": "Two upright triangular cat ears with broad bases and inset centers."
+    },
+    {
+        "id": "ears_bear_round",
+        "name": "Rounded bear",
+        "description": "A pair of soft round bear ears perched on the top of the head."
+    },
+    {
+        "id": "ears_rabbit_upright",
+        "name": "Upright rabbit",
+        "description": "Tall upright rabbit ears with rounded tips and long inset centers."
+    }
+]

package/dist/sdk/settings/surfaces.js

@@ -15,13 +15,24 @@ export const NOTIFICATION_SETTINGS = [
         key: "room_events",
         group: "events",
         label: "Event reminders",
-        description: "How to be reminded about events you are interested in",
+        // Two honesty problems, both fixed in the wording rather than by widening
+        // the enum (offering email is AUTH-177). It used to promise "In the menu",
+        // a surface that did not exist and a delivery that never happened; and it
+        // read as per-person routing, which the Discord half is not — a room wired
+        // to Discord posts one announcement to its channel for everyone in it, and
+        // no per-user preference can suppress somebody else's room's post.
+        description: "How you hear about an event you marked Interested in. A room wired to Discord announces every event in its channel for everyone, whichever of these you pick.",
         type: "enum",
         default: "in_app",
+        // The stored values are load-bearing: they are in every user_settings blob
+        // and `in_app` is the channel name on the dispatch ledger.
         options: [
-            { value: "in_app", label: "In the menu" },
-            { value: "discord", label: "Discord" },
-            { value: "off", label: "Off" },
+            { value: "in_app", label: "In your Flow notifications" },
+            {
+                value: "discord",
+                label: "In the room's Discord — or here, if the room has none",
+            },
+            { value: "off", label: "Don't remind me" },
         ],
     },
 ];

package/dist/sdk/types/account-data.d.ts

@@ -231,6 +231,22 @@ export type AccountExportGameEvent = {
     reason: string | null;
     detail: RawRecord | null;
 };
+/**
+ * One in-app notification the account was addressed with. Deliberately the
+ * stored row and nothing more: the table holds no title, body or href, so an
+ * export cannot carry content the live source may since have withdrawn.
+ */
+export type AccountExportNotification = {
+    id: string;
+    type: string;
+    subjectType: string;
+    subjectId: string | null;
+    /** Which notice about that subject it was; empty for a once-only type. */
+    occasion: string;
+    createdAt: string;
+    readAt: string | null;
+    seenAt: string | null;
+};
 /** Where the rest of a person's Flow data lives, so one export names every
  * service that has to be asked. */
 export type AccountExportOtherService = {
@@ -273,6 +289,7 @@ export type AccountExport = {
     rooms: AccountExportRooms;
     roomEvents: AccountExportRoomEvents;
     gameEvents: AccountExportGameEvent[];
+    notifications: AccountExportNotification[];
     securityActivity: SecurityActivityEntry[];
     otherServices: AccountExportOtherService[];
     /** Dotted names of every collection that hit the row cap (newest rows kept). */

package/dist/sdk/types/auth.d.ts

@@ -175,3 +175,21 @@ export type AccountRegistration = {
     walletAddress: string | null;
     credential: FlowCredential | null;
 };
+export type AuthorizationTransaction = {
+    expiresAt: number;
+    accessKeyHash?: string;
+    credentialId?: string;
+    audience: string;
+    signUp: boolean;
+    guestToken?: string;
+    currentUser: {
+        id: string;
+        username: string;
+    } | null;
+};
+export type AuthPageBootstrap = {
+    config: AuthConfig;
+    transaction?: string;
+    context?: AuthorizationTransaction;
+    error?: string;
+};

package/dist/sdk/types/cosmetics.d.ts

@@ -81,7 +81,7 @@ export type CosmeticMaterial = (typeof COSMETIC_MATERIALS)[number];
  * that shrank whenever a slot emptied would churn the contract every time
  * content lands.
  */
-export type CosmeticSlot = "hat" | "hair" | "face" | "top" | "bottom" | "feet";
+export type CosmeticSlot = "hat" | "hair" | "ears" | "face" | "top" | "bottom" | "feet";
 /** One item in the catalog. */
 export interface CosmeticItem {
     id: string;

package/dist/sdk/types/events.d.ts

@@ -41,11 +41,14 @@ export interface AuthEventRecord {
     durationMs: number | null;
     traceId: string | null;
     /** Room-event scheduler fields: which series and dated instance a transition
-     * or dispatch was about, and for a dispatch, which reminder and how many
-     * subscribers it reached. */
+     * or dispatch was about, and for a dispatch, which reminder went out on
+     * which channel and how many rows it wrote. `channel` is explicit because
+     * the alternative was reading a `:discord` suffix off `dispatchKind`, which
+     * every consumer then has to parse to tell two channels apart. */
     roomEventId: string | null;
     occurrenceId: string | null;
     dispatchKind: string | null;
+    channel: string | null;
     recipients: number | null;
     /** Account-lifecycle fields: whether the account was a guest, and what an
      * erasure or export touched, as per-section row counts. */

package/dist/sdk/types/index.d.ts

@@ -1,7 +1,7 @@
-export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
+export type { AccountDeleteRequest, AccountDeleteResponse, AccountErasureCounts, AccountErasureEntry, AccountErasureFeed, AccountErasureResult, AccountExport, AccountExportAccount, AccountExportActionEvent, AccountExportActionSession, AccountExportAttendance, AccountExportAuthoredEvent, AccountExportCharacterStateTime, AccountExportFollow, AccountExportGameEvent, AccountExportNotification, AccountExportOtherService, AccountExportOwnedRoom, AccountExportPasskey, AccountExportRoomEvents, AccountExportRoomMembership, AccountExportRoomPlayerState, AccountExportRoomPresence, AccountExportRoomRestriction, AccountExportRoomSettings, AccountExportRooms, AccountExportRsvp, AccountExportSettingsSurface, AccountExportStudySubject, AccountExportXpGrant, AccountExportXpSummary, } from "./account-data";
 export type { ActionCurve, ActionEventRequest, ActionEventResponse, ActionsApi, ActiveActionState, FinishActionRequest, ListStudySessionsOptions, ListStudySubjectsOptions, StartActionInput, StartActionResult, StudyApi, StudySubjectResponse, UseActiveActionOptions, XpEstimateContext, } from "./actions";
 export type { AtprotoCompletion, AtprotoStartRequest, AtprotoStatus, } from "./atproto";
-export type { AccountRegistration, AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyEnrollment, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
+export type { AccountRegistration, AccountSession, AccountSessionsResponse, AdditionalSession, AuthConfig, AuthorizationTransaction, AuthPageBootstrap, AuthResponse, AuthResponseWithWebAuthn, BioNormalization, BioRejection, BioWriteRefusal, BioWriteResult, FlowCredential, FlowUser, PasskeyEnrollment, PasskeyPluginOptions, RevokeAllSessionsResponse, RevokeSessionResponse, SecurityActivityEntry, SecurityActivityResponse, SessionUser, VerifiedFlowJWT, VerifyOptions, WebAuthnSignature, } from "./auth";
 export type { BodyRegion, CosmeticItem, CosmeticMaterial, CosmeticPaint, CosmeticSlot, EquipConflict, EquippedCosmetic, EquippedCosmetics, EquipRegion, PaintSlot, SettingsConflict, } from "./cosmetics";
 export { BODY_REGIONS, COSMETIC_MATERIALS } from "./cosmetics";
 export type { AccountDataDownload, AccountDataIdentity, BoundaryError, DialogCustomFeatures, DialogCustomLabels, DialogError, DialogReferrer, DialogState, Loadable, ProfileData, ProfileIdentity, SignInWithEmailProps, SignUpProps, } from "./dialog";
@@ -11,6 +11,7 @@ export type { GameEventReport, GameLifecycleEventName, GameLifecycleFeedEvent, G
 export { GAME_LIFECYCLE_EVENT_NAMES } from "./game";
 export type { AccountProfileData } from "./landing";
 export type { Bridge, BridgeParameters, FlowAccount, FlowRemote, FlowRemoteConfig, FromWindowOptions, MessageResponse, Messenger, OneOf, Payload, QueuedRequest, ReadyOptions, RemoteFlowState, RemoteState, Schema, Storage, Topic, WithReady, } from "./messenger";
+export type { MarkNotificationsReadInput, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, } from "./notifications";
 export type { OtpVerificationFailure, OtpVerificationResult, VerificationAdapter, } from "./otp";
 export type { Call, ConnectCapabilities, ConnectResponse, MethodName, MethodParams, MethodResult, RestoreResponse, RpcRequest, SendCallsParams, SendCallsRequest, SendCallsResponse, SendTransactionParams, SendTransactionRequest, SendTransactionResponse, SignMessageRequest, SignMessageResponse, SignTypedDataRequest, SignTypedDataResponse, TransactionArgs, TypedData, TypedDataDomain, TypedDataField, } from "./protocol";
 export { isPersonalSignParams, isSendCallsParams, isSendTransactionParams, } from "./protocol";

package/dist/sdk/types/notifications.d.ts

@@ -0,0 +1,65 @@
+/**
+ * In-app notifications — the shapes `/api/notifications` speaks (AUTH-351).
+ *
+ * A stored notification is an address row carrying no content, so every field
+ * of a {@link NotificationEntry} below is rendered at read time from the live
+ * source by that type's resolver. An entry therefore only exists while its
+ * referent does and while this viewer may still see it; nothing here is a copy
+ * of anything, and a client must not cache an entry as a durable record.
+ */
+/**
+ * One resolved notification, ready to render.
+ *
+ * `occurredAt` is the *source's* own instant (a reminder's occurrence start),
+ * which is what a panel formats relative time from — the server never bakes
+ * "in 10 minutes" into a polled response. `createdAt` is when the user was
+ * addressed, and it is what the page is ordered and paged on. `href` is a path
+ * inside the consuming app (`/events/<id>`), never an absolute URL: auth does
+ * not know which surface is rendering it.
+ */
+export interface NotificationEntry {
+    id: string;
+    type: string;
+    title: string;
+    body: string | null;
+    href: string | null;
+    /** A coarse family name the surface maps to its own icon set. */
+    icon: string;
+    occurredAt: string;
+    createdAt: string;
+    readAt: string | null;
+    seenAt: string | null;
+}
+/**
+ * Response of `GET /api/notifications`. A full page is returned whenever that
+ * many visible entries exist, so a suppressed row never eats a slot; feed
+ * `nextCursor` back as `?cursor=` until it is null.
+ */
+export interface NotificationPage {
+    notifications: NotificationEntry[];
+    nextCursor: string | null;
+}
+/**
+ * Response of `GET /api/notifications/unread-count`. `unseen` is the bell's
+ * badge, cleared by `POST /api/notifications/seen` when the panel opens; a
+ * list read writes nothing. `unread` is the per-entry styling count and is
+ * only cleared by `POST /api/notifications/read`. Both are counted over stored
+ * rows without resolving them, so either may count an entry that a list read
+ * would suppress.
+ */
+export interface NotificationCounts {
+    unread: number;
+    unseen: number;
+}
+/** Response of `POST /api/notifications/read`: rows this call changed, plus the fresh counts. */
+export interface NotificationReadResult extends NotificationCounts {
+    updated: number;
+}
+/** Body of `POST /api/notifications/read` — exactly one of the two. */
+export interface MarkNotificationsReadInput {
+    ids?: string[];
+    /** ISO instant; marks every notification addressed at or before it. */
+    before?: string;
+}
+/** Machine-readable refusal codes the notification routes answer with. */
+export type NotificationRefusal = "invalid_cursor";

package/dist/sdk/types/notifications.js

@@ -0,0 +1,9 @@
+/**
+ * In-app notifications — the shapes `/api/notifications` speaks (AUTH-351).
+ *
+ * A stored notification is an address row carrying no content, so every field
+ * of a {@link NotificationEntry} below is rendered at read time from the live
+ * source by that type's resolver. An entry therefore only exists while its
+ * referent does and while this viewer may still see it; nothing here is a copy
+ * of anything, and a client must not cache an entry as a durable record.
+ */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.24.1",
+  "version": "0.24.4",
   "license": "MIT",
   "repository": {
     "type": "git",