@getpara/core-sdk 3.0.0-alpha.1 → 3.1.0

package/dist/types/utils/partnerConfig.d.ts

@@ -0,0 +1,28 @@
+import { mergePartnerAppConfig } from '@getpara/user-management-client';
+import type { PartnerAppConfig, PartnerEntity } from '@getpara/user-management-client';
+export { mergePartnerAppConfig };
+/**
+ * Base defaults layer for `paraCore.config`. First argument to
+ * `mergePartnerAppConfig(defaults, partner, sdkOverrides)`.
+ *
+ * Empty today: there are no SDK-side config defaults. OAuth has no default
+ * allowlist — an unset `oAuthMethods` means "not configured", which the
+ * `assertConfigAllowed` gate treats as "allow any" (so the deprecated
+ * `oAuthMethods` prop keeps working) and the modal renders from the resolved
+ * config or the prop. Partners opt into an allowlist via the developer portal.
+ * Kept as a named const so the merge contract and any future defaults have a
+ * single home.
+ */
+export declare const DEFAULT_PARTNER_APP_CONFIG: Partial<PartnerAppConfig>;
+/**
+ * Extract the app-config layer from a partner entity returned by GET /:partnerId.
+ *
+ * The server already merges defaults ⊕ organization ⊕ partner before returning,
+ * so the entity's JSONB fields are the canonical resolved values. This function
+ * shapes them into a `PartnerAppConfig` for downstream merging with SDK overrides.
+ *
+ * If the JSONB columns are absent but legacy color/social columns are populated,
+ * synthesize equivalents so callers see a consistent shape during the transition.
+ * Compatibility shim drops at the major release (Phase 7).
+ */
+export declare function partnerToAppConfigLayer(partner: PartnerEntity): Partial<PartnerAppConfig>;

package/dist/types/utils/partnerConfigGating.d.ts

@@ -0,0 +1,48 @@
+import type { PartnerAppConfig } from '@getpara/user-management-client';
+/**
+ * Discriminated union describing a partner-config check the SDK wants to run
+ * before initiating an auth/wallet flow. `assertConfigAllowed` dispatches on
+ * `kind` and reads the relevant fields off the merged `PartnerAppConfig`.
+ */
+export type ConfigCheck = {
+    kind: 'email';
+} | {
+    kind: 'phone';
+} | {
+    kind: 'oauth';
+    method: string;
+} | {
+    kind: '2fa';
+} | {
+    kind: 'guest';
+};
+/**
+ * Throws a `PartnerConfigError` if `check` is disallowed by the resolved
+ * partner config.
+ *
+ * Wired in at the 9 SDK auth entry points (signUpOrLogIn,
+ * authenticateWithEmailOrPhone, authenticateWithOAuth, getOAuthUrl,
+ * verifyOAuth, setup2fa, verify2fa, enable2fa, createGuestWallets) so
+ * partner posture is enforced for direct SDK calls, not just the modal.
+ * resendVerificationCode is intentionally not gated — callers can only
+ * reach it after the initial auth gate has already fired.
+ *
+ * Pure helper: takes the merged config + check. No `ParaCore` reference,
+ * no I/O. Easy to unit-test.
+ *
+ * Unset means "not configured" — the gate stays permissive (legacy behavior,
+ * also what the deprecated `ParaModalProps` rely on, since those never reach
+ * the merged config). Enforcement only fires on an *explicit* partner choice:
+ * a `false` opt-in flag, a `true` disable flag, or a non-undefined OAuth
+ * allowlist. This keeps the migration non-breaking — restrictions take effect
+ * once a partner configures them in the developer portal, not before.
+ *
+ * Note: the merge is symmetric — SDK overrides can widen or narrow every
+ * auth-posture flag (`twoFactorAuthEnabled`, `isGuestModeEnabled`,
+ * `disableEmailLogin`, `disablePhoneLogin`), so an override may re-enable
+ * something the partner disabled. This gate runs on the post-merge config, so
+ * it reflects the override, not the raw partner record. A future partner-level
+ * "locked" flag (ecosystem lock primitive) would let a partner pin a value so
+ * the override is ignored; until then, overrides always win.
+ */
+export declare function assertConfigAllowed(config: PartnerAppConfig, check: ConfigCheck): void;

package/dist/types/utils/url.d.ts

@@ -1,10 +1,11 @@
 import { Ctx, Environment } from '../types/index.js';
 export declare function getPortalDomain(env: Environment, isE2E?: boolean, isLegacy?: boolean): string;
-export declare function getPortalBaseURL({ env, isE2E }: {
+export declare function getPortalBaseURL({ env, isE2E, portalUrlOverride }: {
     env: Environment;
     isE2E?: boolean;
+    portalUrlOverride?: string;
 }, useLocalIp?: boolean, isForWasm?: boolean, isLegacy?: boolean): string;
-export declare function getParaConnectDomain(env: Environment): "localhost" | "connect.sandbox.getpara.com" | "connect.beta.getpara.com" | "connect.getpara.com";
+export declare function getParaConnectDomain(env: Environment): "localhost" | "connect.sandbox.getpara.com" | "connect.getpara.com";
 export declare function getParaConnectBaseUrl({ env }: {
     env: Environment;
 }, useLocalIp?: boolean): string;

package/package.json

@@ -1,12 +1,23 @@
 {
   "name": "@getpara/core-sdk",
-  "version": "3.0.0-alpha.1",
+  "version": "3.1.0",
   "dependencies": {
     "@celo/utils": "^8.0.2",
     "@cosmjs/encoding": "^0.32.4",
     "@ethereumjs/util": "^9.1.0",
-    "@getpara/user-management-client": "3.0.0-alpha.1",
+    "@getpara/user-management-client": "3.1.0",
     "@noble/hashes": "^1.5.0",
+    "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/context-zone": "^2.7.1",
+    "@opentelemetry/core": "^2.7.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.215.0",
+    "@opentelemetry/instrumentation": "^0.215.0",
+    "@opentelemetry/instrumentation-fetch": "^0.215.0",
+    "@opentelemetry/instrumentation-xml-http-request": "^0.216.0",
+    "@opentelemetry/otlp-transformer": "^0.215.0",
+    "@opentelemetry/resources": "^2.7.0",
+    "@opentelemetry/sdk-trace-base": "^2.7.0",
+    "@opentelemetry/semantic-conventions": "^1.40.0",
     "axios": "^1.8.4",
     "base64url": "^3.0.1",
     "elliptic": "^6.6.1",
@@ -30,14 +41,14 @@
     "dist",
     "package.json"
   ],
-  "gitHead": "839d225579de67feb5be4da225d232290b2a2a04",
+  "gitHead": "e73f17cd7960fdfe62ff68a972b3461e47b21eb0",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "scripts": {
     "build": "rm -rf dist && node ./scripts/build.mjs && yarn build:types",
     "build:cjs": "rm -rf dist/cjs && tsc --module commonjs --outDir dist/cjs && printf '{\"type\":\"commonjs\"}' > dist/cjs/package.json",
     "build:esm": "rm -rf dist/esm && tsc --module es6 --outDir dist/esm && printf '{\"type\":\"module\",\"sideEffects\":false}' > dist/esm/package.json",
-    "build:types": "rm -rf dist/types && tsc --module es6 --declarationDir dist/types --emitDeclarationOnly --declaration",
+    "build:types": "rm -rf dist/types && tsc --module es2020 --declarationDir dist/types --emitDeclarationOnly --declaration",
     "old-build": "yarn build:cjs && yarn build:esm && yarn build:types; yarn post-build",
     "post-build": "./scripts/set-version.sh",
     "test": "vitest run --coverage"