@foir/sdk 0.25.0 → 0.27.0

package/dist/data/index.d.ts

@@ -59,7 +59,7 @@ export { planFoirModelCall, planFoirNamespaceCall } from './document';
 export type { FoirCall, FoirDocumentPlan, FoirNamespaceCall, FoirNamespaceSelections, FoirRecordPath, FoirSelectionModel, FoirSelectionNamespace, FoirSelections, FoirSelectionSource, FoirSelectionUnions, } from './document';
 export { createFoirSubjectRegistry, recordFoirSubjects } from './subjects';
 export type { FoirSubject, FoirSubjectEntry, FoirSubjectOptions, FoirSubjectOrigin, FoirSubjectRegistry, } from './subjects';
-export type { CollabInfo, FileValue, FoirAccessGrant, FoirAccessLevel, FoirAccessSource, FoirAccessor, FoirCreateMyNoteArgs, FoirWriteNoteArgs, FoirUserNote, FoirUserNoteAttachment, FoirDegraded, FoirDepthBelow, FoirDepthLevel, FoirDeviceType, FoirGranteeKind, FoirJsonValue, FoirMyAccess, FoirMyNotesArgs, FoirMyNotesResult, FoirNoteConfig, FoirNoteSubjectType, FoirPlatformType, FoirRecordOwner, FoirResolveContext, FoirResourceAccess, FoirUnexpandedRecord, FoirUpdateManyPayload, FoirVisibility, GeoPoint, Image, ImageFormat, ImageVariant, ImageVariantSet, MediaValue, Passage, Prose, ProseSpan, RecordAncestor, Reference, Richtext, Video, } from './builtins';
+export type { CollabInfo, FileValue, FoirAccessGrant, FoirAccessLevel, FoirAccessSource, FoirAccessor, FoirCreateMyNoteArgs, FoirWriteNoteArgs, FoirUserNote, FoirUserNoteAttachment, FoirDegraded, FoirDepthBelow, FoirDepthLevel, FoirDeviceType, FoirGranteeKind, FoirJsonValue, FoirMyAccess, FoirMyNotesArgs, FoirMyNotesResult, FoirNoteConfig, FoirNoteReceipt, FoirNoteSubjectType, FoirPlatformType, FoirRecordOwner, FoirResolveContext, FoirResourceAccess, FoirUnexpandedRecord, FoirUpdateManyPayload, FoirVisibility, GeoPoint, Image, ImageFormat, ImageVariant, ImageVariantSet, MediaValue, Passage, Prose, ProseSpan, RecordAncestor, Reference, Richtext, Video, } from './builtins';
 /**
  * Pre-rename spellings. The `<Name>Block` wrappers and the `<Name>Value`
  * split are the same thing as the types above — an item IS its value — so each
@@ -81,5 +81,5 @@ export type { FoirConnection, FoirFieldsShape, FoirModelDefinition, FoirNamespac
 export type { FoirInclude, FoirModelOperation, FoirNamespaceOperation, FoirOmittableKey, FoirOpResult, FoirQuery, FoirRecordResult, FoirWriteResult, } from './selection';
 export { FoirDecimal, decimal } from './decimal';
 export type { FoirDecimalDivOptions, FoirDecimalInput, FoirDecimalRounding, } from './decimal';
-export { FoirRequestError, FoirAuthDowngradedError, FoirSessionExpiredError, FOIR_VISITOR_IP_HEADER, } from '../transport/foir-http';
-export type { FoirEnv, FoirGraphQLErrorItem, FoirTokenProvider, FoirAuthDowngrade, FoirVisitor, FoirVisitorSource, } from '../transport/foir-http';
+export { FoirRequestError, FoirAuthDowngradedError, FoirSessionExpiredError, FOIR_VISITOR_IP_HEADER, stepUpRequired, } from '../transport/foir-http';
+export type { FoirEnv, FoirGraphQLErrorItem, FoirTokenProvider, FoirAuthDowngrade, FoirStepUp, FoirVisitor, FoirVisitorSource, } from '../transport/foir-http';

package/dist/data.js

@@ -10,6 +10,15 @@ var MALFORMED_PRUNE_REASONS = /* @__PURE__ */ new Set([
   "subselections_on_scalar",
   "missing_subselections"
 ]);
+function stepUpRequired(error) {
+  if (!(error instanceof FoirRequestError)) return null;
+  for (const item of error.graphQLErrors ?? []) {
+    if (item.extensions?.code !== "STEP_UP_REQUIRED") continue;
+    const asked = item.extensions.stepUp;
+    if (asked === "second_factor" || asked === "sign_in_method") return asked;
+  }
+  return null;
+}
 var FoirRequestError = class extends Error {
   /** HTTP status code, when the request failed at the HTTP layer. */
   status;
@@ -2686,5 +2695,6 @@ export {
   planFoirModelCall,
   planFoirNamespaceCall,
   printSubscriptionDocument,
-  recordFoirSubjects
+  recordFoirSubjects,
+  stepUpRequired
 };

package/dist/next.js

@@ -1010,6 +1010,9 @@ var AUTH_OPS = {
   // names the organization it acts in (`orgId` or `orgUrl` below), and the
   // platform checks the caller stands there every time.
   myOrganizations: "myOrganizations",
+  // Where they may go: the organizations they are a member of, are invited
+  // to, may join, or asked to join. An organization switcher's choices.
+  myOrganizationChoices: "myOrganizationChoices",
   // Founding one. Present in a manifest only when the project opted in.
   registerOrganization: "registerOrganization",
   // External identity providers.

package/dist/placement/index.d.ts

@@ -113,6 +113,23 @@ export declare function placementFrameAncestors(origins: readonly string[]): str
 export declare class PlacementRefused extends Error {
     constructor(reason: string);
 }
+/** One error of a GraphQL answer, as Foir's API sends it. */
+export interface PlacementRequestError {
+    message: string;
+    path?: (string | number)[];
+    extensions?: Record<string, unknown>;
+}
+/**
+ * A request the page made on its token that Foir's API refused or failed.
+ * The message says each distinct refusal once: a read refused on a field is
+ * answered once per row, and one missing grant over five hundred rows would
+ * otherwise read five hundred times. `errors` keeps every one, with its path.
+ */
+export declare class PlacementRequestFailed extends Error {
+    readonly errors: PlacementRequestError[];
+    readonly status: number;
+    constructor(errors: PlacementRequestError[], status: number);
+}
 export interface ConnectPlacementOptions {
     /** Foir's API, e.g. `https://api.foir.dev`. */
     apiUrl: string;

package/dist/placement.js

@@ -41,6 +41,8 @@ var GRANT_TABLE = [
   ["authclients:write", "none", [], []],
   ["domains:read", "none", [], []],
   ["domains:write", "none", [], []],
+  ["loginpages:read", "none", [], []],
+  ["loginpages:write", "none", [], []],
   ["secrets:read", "none", [], []],
   ["secrets:list", "none", [], []],
   ["secrets:put", "none", [], []],
@@ -78,7 +80,7 @@ var GRANT_TABLE = [
   ["projects:read", "none", [], []],
   ["projects:write", "none", [], []],
   ["project:stand", "none", [], []],
-  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
+  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "loginpages:read", "loginpages:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
   ["projects:create", "none", [], []],
   ["projects:delete", "none", [], []],
   ["tenants:read", "none", [], []],
@@ -266,6 +268,17 @@ var PlacementRefused = class extends Error {
     this.name = "PlacementRefused";
   }
 };
+var PlacementRequestFailed = class extends Error {
+  errors;
+  status;
+  constructor(errors, status) {
+    const said = [...new Set(errors.map((e) => e.message))];
+    super(`[foir] placement request failed: ${said.length > 0 ? said.join("; ") : `HTTP ${status}`}`);
+    this.name = "PlacementRequestFailed";
+    this.errors = errors;
+    this.status = status;
+  }
+};
 function isHostMessage(data) {
   if (typeof data !== "object" || data === null) return false;
   const t = data.type;
@@ -325,8 +338,7 @@ function connectPlacement(options) {
         });
         const body = await res.json().catch(() => ({}));
         if (!res.ok || body.errors && body.errors.length > 0) {
-          const messages = body.errors?.map((e) => e.message).join("; ") || `HTTP ${res.status}`;
-          throw new Error(`[foir] placement request failed: ${messages}`);
+          throw new PlacementRequestFailed(body.errors ?? [], res.status);
         }
         return body.data;
       },
@@ -381,6 +393,7 @@ export {
   FOIR_CONSOLE_ORIGINS,
   PLACEMENT_MESSAGE,
   PlacementRefused,
+  PlacementRequestFailed,
   connectPlacement,
   placementFrameAncestors
 };

package/dist/push.js

@@ -1130,6 +1130,9 @@ var AUTH_OPS = {
   // names the organization it acts in (`orgId` or `orgUrl` below), and the
   // platform checks the caller stands there every time.
   myOrganizations: "myOrganizations",
+  // Where they may go: the organizations they are a member of, are invited
+  // to, may join, or asked to join. An organization switcher's choices.
+  myOrganizationChoices: "myOrganizationChoices",
   // Founding one. Present in a manifest only when the project opted in.
   registerOrganization: "registerOrganization",
   // External identity providers.

package/dist/react/FoirFeedback.d.ts

@@ -1,4 +1,4 @@
-import type { FoirUserNote, FoirSubject, FoirSubjectRegistry } from '../data';
+import type { FoirNoteReceipt, FoirUserNote, FoirSubject, FoirSubjectRegistry } from '../data';
 import { type FoirFeedbackClient } from './feedback-notes';
 export type { FoirFeedbackClient } from './feedback-notes';
 export interface FoirFeedbackProps {
@@ -41,12 +41,19 @@ export interface FoirFeedbackProps {
     /** Start with the panel open. Default false. */
     defaultOpen?: boolean;
     /**
-     * Called when the visitor has to sign in first. Given a handler, the widget
-     * renders a button that calls it; given none, it says so and stops.
+     * Called when the visitor has to sign in first: the project takes no notes
+     * from visitors who are not signed in. Given a handler, the widget renders a
+     * button that calls it; given none, it says so and stops.
      */
     onSignIn?: () => void;
-    /** Called with the note once it is written. */
+    /** Called with a signed-in user's note once it is written. */
     onSubmitted?: (note: FoirUserNote) => void;
+    /**
+     * Called with the receipt once a visitor who is not signed in has sent a
+     * note: its id and when it was written, which is all a visitor's note
+     * answers with.
+     */
+    onVisitorSubmitted?: (receipt: FoirNoteReceipt) => void;
     /**
      * Called with anything that failed. The widget also logs it — this is for
      * routing it into your own error reporting, not for making it visible.
@@ -59,4 +66,4 @@ export interface FoirFeedbackProps {
      */
     className?: string;
 }
-export declare function FoirFeedback({ client, subjects, subject, label, triggerLabel, title, placeholder, defaultOpen, onSignIn, onSubmitted, onError, className, }: FoirFeedbackProps): import("react/jsx-runtime").JSX.Element;
+export declare function FoirFeedback({ client, subjects, subject, label, triggerLabel, title, placeholder, defaultOpen, onSignIn, onSubmitted, onVisitorSubmitted, onError, className, }: FoirFeedbackProps): import("react/jsx-runtime").JSX.Element;

package/dist/react/FoirProvider.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from 'react';
-import type { AuthProviderPublic, FoirAccess, FoirUser, FoirSessionConfig, SessionAdapter } from '../auth';
+import type { AuthProviderPublic, FoirAccess, FoirUser, FoirSessionConfig, HostedLoginOptions, SessionAdapter } from '../auth';
 import type { ProviderCallbackInput, ProviderLoginInput } from '../auth';
 import type { FoirEnv } from '../graphql/foir-request';
 /** Where the session hydration stands. */
@@ -53,9 +53,10 @@ export interface FoirContextValue {
     /**
      * In `hostedSession` mode, where to send the browser to sign in — sign-in is a
      * redirect to your Foir login domain, not an in-page form. Null in token mode,
-     * where you call {@link FoirContextValue.signIn} instead.
+     * where you call {@link FoirContextValue.signIn} instead. `options.org` names
+     * the organization the sign-in is for.
      */
-    hostedSignInUrl: ((returnTo?: string) => string) | null;
+    hostedSignInUrl: ((returnTo?: string, options?: HostedLoginOptions) => string) | null;
 }
 export interface FoirProviderProps {
     /** API config: `{ PLATFORM_API_URL, PLATFORM_API_KEY }` (a publishable key). */
@@ -151,5 +152,5 @@ export declare function useFoirAuth(): {
     refresh: () => Promise<boolean>;
     getToken: () => Promise<string | null>;
     getProviders: () => Promise<AuthProviderPublic[]>;
-    hostedSignInUrl: ((returnTo?: string) => string) | null;
+    hostedSignInUrl: ((returnTo?: string, options?: HostedLoginOptions) => string) | null;
 };

package/dist/react/feedback-notes.d.ts

@@ -7,7 +7,7 @@
  * shape (see `data/selection.ts`) — so every response here has to be read rather
  * than cast, and reading is the part worth testing on its own.
  */
-import type { FoirUserNote, FoirNoteConfig, FoirSubject } from '../data';
+import type { FoirUserNote, FoirNoteConfig, FoirNoteReceipt, FoirSubject } from '../data';
 import type { FoirScreenCapture } from '../media/screen-capture';
 /**
  * The client the widget needs, and no more of it.
@@ -15,9 +15,9 @@ import type { FoirScreenCapture } from '../media/screen-capture';
  * Structural rather than `FoirClient<S>`, for two reasons. `FoirClient` is
  * generic in the caller's generated schema, so naming it here would force the
  * component's props to be generic in a parameter nothing else reads. And what
- * the widget actually depends on is three root fields — narrowing to them means
- * a client whose key cannot reach `files` still satisfies this type, which is
- * the honest shape: a project with screenshots off never uploads anything.
+ * the widget actually depends on is a handful of root fields — narrowing to them
+ * means a client whose key cannot reach `files` still satisfies this type, which
+ * is the honest shape: a project with screenshots off never uploads anything.
  *
  * The signatures are the ones `foir types` emits for every namespace op —
  * `Record<string, unknown>` in, `unknown` out — so a real generated client
@@ -27,6 +27,14 @@ export interface FoirFeedbackClient {
     readonly ns: {
         readonly notes: {
             noteConfig(args?: Record<string, unknown>): Promise<unknown>;
+            /**
+             * The one note create, for a signed-in user and a visitor alike. Optional
+             * so a client typed before it still satisfies this; without it a
+             * signed-in user's note goes through `createMyNote`, and a visitor's
+             * cannot be sent.
+             */
+            writeNote?(args?: Record<string, unknown>): Promise<unknown>;
+            /** The older name of `writeNote` for a signed-in user. */
             createMyNote(args?: Record<string, unknown>): Promise<unknown>;
         };
         /**
@@ -77,6 +85,12 @@ export declare function classifyNotesFault(err: unknown): FoirFeedbackFault;
  * `screenshotsEnabled` to false. Defaulting would be the quiet version of a
  * project's setting being ignored: the offer would disappear from every surface
  * at once and the only symptom would be a missing button.
+ *
+ * `signedIn` and `anonymousAccepted` are read as the older contract when they
+ * are absent, which is not a guess: a data API without them answers only a
+ * signed-in user, and refuses everyone else. A generated module that predates
+ * them selects neither from a data API that has both, and the client's drift
+ * check names that module as the thing to regenerate.
  */
 export declare function readNoteConfig(client: FoirFeedbackClient): Promise<FoirNoteConfig>;
 /** What one submission carries. */
@@ -101,3 +115,23 @@ export interface FoirFeedbackSubmission {
  * they wrote ("as you can see in the screenshot") stops making sense.
  */
 export declare function submitFeedbackNote(client: FoirFeedbackClient, submission: FoirFeedbackSubmission): Promise<FoirUserNote>;
+/** What a visitor's submission carries. */
+export interface FoirVisitorSubmission {
+    /** What the note is about, as for a signed-in user's. */
+    subject: FoirSubject;
+    body: string;
+    /**
+     * Where the project's team may reply, as the visitor typed it. Sent only
+     * when it is not blank, and never verified by anyone.
+     */
+    contactEmail?: string;
+}
+/**
+ * Write a visitor's note, and hand back its receipt.
+ *
+ * It asks for the note's `id` and `createdAt` and nothing else, because that is
+ * all a visitor's note answers with: asked for more, the data API refuses the
+ * write before anything is written. And it takes no attachment, which a
+ * visitor's note cannot carry.
+ */
+export declare function submitVisitorNote(client: FoirFeedbackClient, submission: FoirVisitorSubmission): Promise<FoirNoteReceipt>;

package/dist/react.js

@@ -1004,6 +1004,9 @@ var AUTH_OPS = {
   // names the organization it acts in (`orgId` or `orgUrl` below), and the
   // platform checks the caller stands there every time.
   myOrganizations: "myOrganizations",
+  // Where they may go: the organizations they are a member of, are invited
+  // to, may join, or asked to join. An organization switcher's choices.
+  myOrganizationChoices: "myOrganizationChoices",
   // Founding one. Present in a manifest only when the project opted in.
   registerOrganization: "registerOrganization",
   // External identity providers.
@@ -1248,6 +1251,8 @@ var GRANT_TABLE = [
   ["authclients:write", "none", [], []],
   ["domains:read", "none", [], []],
   ["domains:write", "none", [], []],
+  ["loginpages:read", "none", [], []],
+  ["loginpages:write", "none", [], []],
   ["secrets:read", "none", [], []],
   ["secrets:list", "none", [], []],
   ["secrets:put", "none", [], []],
@@ -1285,7 +1290,7 @@ var GRANT_TABLE = [
   ["projects:read", "none", [], []],
   ["projects:write", "none", [], []],
   ["project:stand", "none", [], []],
-  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
+  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "loginpages:read", "loginpages:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
   ["projects:create", "none", [], []],
   ["projects:delete", "none", [], []],
   ["tenants:read", "none", [], []],
@@ -1549,10 +1554,11 @@ function createFoirSessionClient(config) {
       forget();
       config.onSignOut?.();
     },
-    signInUrl(returnTo) {
+    signInUrl(returnTo, options = {}) {
       const dest = new URL(trimSlash(config.loginOrigin));
       const target = returnTo ?? (typeof window !== "undefined" ? window.location.href : void 0);
       if (target && target !== "/") dest.searchParams.set("returnTo", target);
+      if (options.org) dest.searchParams.set("org", options.org);
       return dest.toString();
     },
     subscribe(listener) {
@@ -1779,7 +1785,7 @@ function FoirProvider({
   }, [refresh, loadAccess, accessWasRead]);
   const getProviders = useCallback(() => getAuthProviders(envRef.current), []);
   const hostedSignInUrl = useMemo(
-    () => hosted ? (returnTo) => hosted.signInUrl(returnTo) : null,
+    () => hosted ? (returnTo, options) => hosted.signInUrl(returnTo, options) : null,
     [hosted]
   );
   const value = useMemo(
@@ -2243,7 +2249,14 @@ async function readNoteConfig(client) {
       "[foir] noteConfig answered without a boolean `screenshotsEnabled`. The widget reads it to decide whether to offer screenshot capture, and will not guess."
     );
   }
-  return { screenshotsEnabled };
+  const signedIn = result?.signedIn ?? true;
+  const anonymousAccepted = result?.anonymousAccepted ?? false;
+  if (typeof signedIn !== "boolean" || typeof anonymousAccepted !== "boolean") {
+    throw new Error(
+      "[foir] noteConfig answered `signedIn` or `anonymousAccepted` with something other than a boolean. The widget reads them to decide whether this visitor writes as themselves, and will not guess."
+    );
+  }
+  return { screenshotsEnabled, anonymousAccepted, signedIn };
 }
 async function submitFeedbackNote(client, submission) {
   const attachmentFileIds = [];
@@ -2252,14 +2265,42 @@ async function submitFeedbackNote(client, submission) {
       await uploadFeedbackAttachment(client, submission.screenshot, submission.fetch)
     );
   }
-  const args = {
+  const args = noteArgs(submission.subject, submission.body);
+  if (attachmentFileIds.length > 0) args.attachmentFileIds = attachmentFileIds;
+  const { notes } = client.ns;
+  return readCreatedNote(
+    await (notes.writeNote ? notes.writeNote(args) : notes.createMyNote(args))
+  );
+}
+async function submitVisitorNote(client, submission) {
+  const { notes } = client.ns;
+  if (!notes.writeNote) {
+    throw new Error(
+      "[foir] this client has no `notes.writeNote`, which is the only create that takes a note from a visitor who is not signed in. Re-run `foir types`."
+    );
+  }
+  const args = noteArgs(submission.subject, submission.body);
+  const contactEmail = submission.contactEmail?.trim();
+  if (contactEmail) args.contactEmail = contactEmail;
+  args.pick = ["id", "createdAt"];
+  const result = await notes.writeNote(args);
+  if (!result || typeof result.id !== "string" || result.id === "") {
+    throw new Error(
+      "[foir] writeNote answered a visitor with no receipt. Nothing was saved \u2014 if it had been, the surface would have returned its id."
+    );
+  }
+  return {
+    id: result.id,
+    createdAt: typeof result.createdAt === "string" ? result.createdAt : ""
+  };
+}
+function noteArgs(subject, body) {
+  return {
     subjectType: "record",
-    subjectId: submission.subject.recordId,
-    subjectModelKey: submission.subject.modelKey,
-    body: submission.body
+    subjectId: subject.recordId,
+    subjectModelKey: subject.modelKey,
+    body
   };
-  if (attachmentFileIds.length > 0) args.attachmentFileIds = attachmentFileIds;
-  return readCreatedNote(await client.ns.notes.createMyNote(args));
 }
 async function uploadFeedbackAttachment(client, screenshot, fetchImpl = globalThis.fetch) {
   const files = client.ns.files;
@@ -2311,7 +2352,7 @@ function readCreatedNote(result) {
   const note = result;
   if (!note || typeof note.id !== "string" || note.id === "") {
     throw new Error(
-      "[foir] createMyNote answered with no note. Nothing was saved \u2014 if it had been, the surface would have returned it."
+      "[foir] writeNote answered with no note. Nothing was saved \u2014 if it had been, the surface would have returned it."
     );
   }
   return {
@@ -2361,6 +2402,8 @@ var COPY = {
   loading: "One moment\u2026",
   sendFailed: "Your feedback could not be sent. Please try again.",
   sent: "Thanks. Your feedback has been sent.",
+  reference: "Reference",
+  contactEmail: "Your email, if you would like a reply (optional)",
   send: "Send feedback",
   sending: "Sending\u2026",
   capture: "Add a screenshot",
@@ -2397,6 +2440,13 @@ var textareaStyle = {
   minHeight: 96,
   resize: "vertical"
 };
+var inputStyle2 = {
+  padding: "8px 10px",
+  borderRadius: 6,
+  border: "1px solid currentColor",
+  background: "transparent",
+  font: "inherit"
+};
 var headingStyle = { margin: 0, fontSize: 15, fontWeight: 600 };
 var subjectStyle = { margin: 0, fontSize: 13, opacity: 0.75 };
 var noteStyle = { margin: 0, fontSize: 13 };
@@ -2421,12 +2471,15 @@ function FoirFeedback({
   defaultOpen = false,
   onSignIn,
   onSubmitted,
+  onVisitorSubmitted,
   onError,
   className
 }) {
   const [open, setOpen] = useState4(defaultOpen);
   const [probe, setProbe] = useState4({ status: "loading" });
   const [body, setBody] = useState4("");
+  const [contactEmail, setContactEmail] = useState4("");
+  const [receipt, setReceipt] = useState4(null);
   const [screenshot, setScreenshot] = useState4(null);
   const [capturing, setCapturing] = useState4(false);
   const [busy, setBusy] = useState4(false);
@@ -2445,7 +2498,11 @@ function FoirFeedback({
       try {
         const config = await readNoteConfig(client);
         if (!cancelled) {
-          setProbe({ status: "ready", screenshotsEnabled: config.screenshotsEnabled });
+          setProbe({
+            status: "ready",
+            screenshotsEnabled: config.screenshotsEnabled,
+            signedIn: config.signedIn
+          });
         }
       } catch (err) {
         if (cancelled) return;
@@ -2476,19 +2533,32 @@ function FoirFeedback({
   const onSubmit = async (event) => {
     event.preventDefault();
     const prose = body.trim();
-    if (!resolved || !prose || busy) return;
+    if (!resolved || !prose || busy || probe.status !== "ready") return;
     setBusy(true);
     setFailure(null);
     try {
-      const note = await submitFeedbackNote(client, {
-        subject: resolved,
-        body: prose,
-        screenshot
-      });
-      setBody("");
-      setScreenshot(null);
-      setSent(true);
-      onSubmitted?.(note);
+      if (probe.signedIn) {
+        const note = await submitFeedbackNote(client, {
+          subject: resolved,
+          body: prose,
+          screenshot
+        });
+        setBody("");
+        setScreenshot(null);
+        setSent(true);
+        onSubmitted?.(note);
+      } else {
+        const written = await submitVisitorNote(client, {
+          subject: resolved,
+          body: prose,
+          contactEmail
+        });
+        setBody("");
+        setContactEmail("");
+        setReceipt(written);
+        setSent(true);
+        onVisitorSubmitted?.(written);
+      }
     } catch (err) {
       const fault = classifyNotesFault(err);
       reportFault(fault, err, "sending feedback failed");
@@ -2504,6 +2574,7 @@ function FoirFeedback({
       return;
     }
     setSent(false);
+    setReceipt(null);
     setFailure(null);
     setOpen(true);
   };
@@ -2564,11 +2635,28 @@ function FoirFeedback({
                 disabled: busy,
                 onChange: (event) => {
                   setBody(event.target.value);
-                  if (sent) setSent(false);
+                  if (sent) {
+                    setSent(false);
+                    setReceipt(null);
+                  }
                 },
                 style: styled ? textareaStyle : void 0
               }
             ),
+            !probe.signedIn && /* @__PURE__ */ jsx5(
+              "input",
+              {
+                type: "email",
+                "data-foir-feedback-contact": true,
+                "aria-label": COPY.contactEmail,
+                placeholder: COPY.contactEmail,
+                autoComplete: "email",
+                value: contactEmail,
+                disabled: busy,
+                onChange: (event) => setContactEmail(event.target.value),
+                style: styled ? inputStyle2 : void 0
+              }
+            ),
             probe.screenshotsEnabled && isFoirScreenCaptureSupported() && /* @__PURE__ */ jsx5(Fragment2, { children: screenshot ? /* @__PURE__ */ jsxs4(Fragment2, { children: [
               /* @__PURE__ */ jsx5(
                 "img",
@@ -2611,6 +2699,11 @@ function FoirFeedback({
                 children: COPY.sent
               }
             ),
+            sent && !failure && receipt && /* @__PURE__ */ jsxs4("p", { "data-foir-feedback-receipt": true, style: styled ? subjectStyle : void 0, children: [
+              COPY.reference,
+              ": ",
+              receipt.id
+            ] }),
             /* @__PURE__ */ jsx5(
               "button",
               {

package/dist/server/index.d.ts

@@ -12,5 +12,5 @@ export type { CallbackClient, CallbackResult } from './callback-client';
 export { createEventsClient, FoirEventCursorExpiredError, isFoirEventCursorExpired, FOIR_EVENTS_PATH, FOIR_EVENTS_SCOPE, FOIR_EVENTS_RETENTION_DAYS, } from './events-client';
 export type { FoirEvent, FoirEventActor, FoirEventPage, FoirEventRetention, FoirEventsClient, FoirEventsClientConfig, FoirEventsListParams, FoirEventsStreamParams, FoirEventsSubscribeParams, } from './events-client';
 export type { FoirSubscription, FoirSubscriptionHandlers } from '../data/ws-transport';
-export { FoirRequestError, FoirAuthDowngradedError, FoirSessionExpiredError, isFoirForbidden, isFoirNotFound, isFoirRateLimited, isFoirUnauthenticated, } from '../transport/foir-http';
+export { FoirRequestError, FoirAuthDowngradedError, FoirSessionExpiredError, isFoirForbidden, isFoirNotFound, isFoirRateLimited, isFoirUnauthenticated, stepUpRequired, } from '../transport/foir-http';
 export type { FoirErrorCode, FoirErrorExtensions, FoirGraphQLErrorItem, FoirAuthDowngrade, } from '../transport/foir-http';

package/dist/server.js

@@ -115,6 +115,8 @@ var GRANT_TABLE = [
   ["authclients:write", "none", [], []],
   ["domains:read", "none", [], []],
   ["domains:write", "none", [], []],
+  ["loginpages:read", "none", [], []],
+  ["loginpages:write", "none", [], []],
   ["secrets:read", "none", [], []],
   ["secrets:list", "none", [], []],
   ["secrets:put", "none", [], []],
@@ -152,7 +154,7 @@ var GRANT_TABLE = [
   ["projects:read", "none", [], []],
   ["projects:write", "none", [], []],
   ["project:stand", "none", [], []],
-  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
+  ["project:manage", "none", [], ["project:stand", "records:read.all", "records:create", "records:write.all", "records:delete.all", "records:publish.all", "records:attribute", "search:read", "embeddings:read", "embeddings:write", "schemas:read", "drafts:read", "files:read.all", "files:write.all", "files:delete.all", "users:read.all", "identities:read", "users:create", "identities:delete", "users:write.all", "users:setup", "users:delete.all", "notifications:read.all", "notifications:write.all", "notifications:consent", "pushcredentials:read", "pushcredentials:write", "notes:read.all", "notes:write.all", "notes:create", "approvals:read", "approvals:write", "rooms:read", "rooms:write", "presence:read", "operations:read", "operations:execute", "operations:write", "appconfig:read", "schedules:read", "schedules:write", "hooks:read", "hooks:write", "auth:login_with_foir", "authclients:read", "authclients:write", "domains:read", "domains:write", "loginpages:read", "loginpages:write", "secrets:read", "secrets:list", "secrets:put", "secrets:delete", "appsecrets:read", "appsecrets:list", "appsecrets:put", "appsecrets:delete", "usersecrets:read", "usersecrets:list", "usersecrets:put", "usersecrets:delete", "opsecrets:read", "opsecrets:write", "settings:read", "settings:write", "designtokens:read", "designtokens:write", "models:read", "models:write", "configs:read", "configs:write", "signinproviders:read", "signinproviders:write", "apps:read", "apps:write", "events:read", "targeting:debug", "visitors:forward", "apikeys:read", "apikeys:write", "organizations:read", "organizations:create", "organizations:delete", "organizations:write", "organizations:reach", "members:read", "members:write", "roles:read", "roles:write", "projects:read", "projects:write", "audit:read"]],
   ["projects:create", "none", [], []],
   ["projects:delete", "none", [], []],
   ["tenants:read", "none", [], []],
@@ -697,6 +699,15 @@ function continueRun(continuation) {
 }
 
 // src/transport/foir-http.ts
+function stepUpRequired(error) {
+  if (!(error instanceof FoirRequestError)) return null;
+  for (const item of error.graphQLErrors ?? []) {
+    if (item.extensions?.code !== "STEP_UP_REQUIRED") continue;
+    const asked = item.extensions.stepUp;
+    if (asked === "second_factor" || asked === "sign_in_method") return asked;
+  }
+  return null;
+}
 var FoirRequestError = class extends Error {
   /** HTTP status code, when the request failed at the HTTP layer. */
   status;
@@ -1750,6 +1761,7 @@ export {
   recordsReadModels,
   recordsWriteModels,
   requireScopedToken,
+  stepUpRequired,
   verifyScopedToken,
   verifyWebhookSignature
 };