@getpara/shared 1.17.0 → 1.19.0

package/dist/cjs/types/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./assets.js"), exports);
 __exportStar(require("./auth.js"), exports);
+__exportStar(require("./modal.js"), exports);
 __exportStar(require("./otp.js"), exports);
 __exportStar(require("./params.js"), exports);
 __exportStar(require("./partner.js"), exports);

package/dist/cjs/types/modal.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthLayout = void 0;
+/**
+ * Modal layout primitives. Lives in @getpara/shared so both the SDK
+ * (modal rendering) and the partner config (`ModalConfig.authLayout`
+ * persisted in the developer portal) reference the same enum.
+ *
+ * The string values are the wire format — they appear in JSONB blobs
+ * stored on the partner record. Don't change them without a migration.
+ */
+var AuthLayout;
+(function (AuthLayout) {
+    AuthLayout["AUTH_FULL"] = "AUTH:FULL";
+    AuthLayout["AUTH_CONDENSED"] = "AUTH:CONDENSED";
+    AuthLayout["EXTERNAL_FULL"] = "EXTERNAL:FULL";
+    AuthLayout["EXTERNAL_CONDENSED"] = "EXTERNAL:CONDENSED";
+})(AuthLayout || (exports.AuthLayout = AuthLayout = {}));

package/dist/cjs/utils/deepEqual.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deepEqual = deepEqual;
+/**
+ * Minimal deep-equality check for plain-data structures (objects, arrays,
+ * primitives). Intended for guarding effects against re-set thrash from
+ * inline-object props (e.g. `<ParaProvider configOverrides={{ ... }} />`
+ * produces a fresh identity every render but typically stable values).
+ *
+ * Lives in @getpara/shared so frontend (react-sdk-lite provider effects)
+ * and any future server-side consumer share one implementation.
+ *
+ * Not intended for general-purpose use: doesn't handle Maps, Sets, Dates,
+ * RegExp, functions, or symbol-keyed properties. Caller must guarantee
+ * inputs are JSON-shaped.
+ */
+function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (a == null || b == null)
+        return a === b;
+    if (typeof a !== 'object' || typeof b !== 'object')
+        return false;
+    if (Array.isArray(a)) {
+        if (!Array.isArray(b) || a.length !== b.length)
+            return false;
+        for (let i = 0; i < a.length; i++) {
+            if (!deepEqual(a[i], b[i]))
+                return false;
+        }
+        return true;
+    }
+    if (Array.isArray(b))
+        return false;
+    const aKeys = Object.keys(a);
+    const bKeys = Object.keys(b);
+    if (aKeys.length !== bKeys.length)
+        return false;
+    for (const key of aKeys) {
+        if (!Object.prototype.hasOwnProperty.call(b, key))
+            return false;
+        if (!deepEqual(a[key], b[key]))
+            return false;
+    }
+    return true;
+}

package/dist/cjs/utils/index.js

@@ -458,4 +458,6 @@ function getNetworkFromChainId(chainId) {
     return chainId ? exports.NETWORK_METADATA.find(({ evmChainId: c }) => c?.toString() === chainId)?.internalId : undefined;
 }
 __exportStar(require("./assets.js"), exports);
+__exportStar(require("./deepEqual.js"), exports);
 __exportStar(require("./networks.js"), exports);
+__exportStar(require("./partnerConfig.js"), exports);

package/dist/cjs/utils/partnerConfig.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mergePartnerAppConfig = mergePartnerAppConfig;
+/**
+ * Deep-merge N `Partial<PartnerAppConfig>` layers left-to-right.
+ * Later layers override earlier. Null/undefined values in later layers
+ * are treated as absent (do not clobber prior values).
+ *
+ * Arrays are replaced wholesale (not concatenated) — the later layer's
+ * array is the intended value, not an addition.
+ *
+ * Ordered to accept future ecosystem layer without signature changes:
+ *   mergePartnerAppConfig(defaults, organizationConfig, partnerConfig, sdkOverrides)
+ *
+ * Lives in @getpara/shared so server (`partnerConfigResolver`) and SDK
+ * (`core-sdk/utils/partnerConfig`) consume the same implementation —
+ * eliminates the prior duplication where the two sides could drift.
+ *
+ * FUTURE — ecosystem locking primitive (see integration plan §6).
+ * When the ecosystem layer ships, orgs will need to optionally force specific
+ * fields (e.g. enforce a brand color across all partners under an org).
+ * Intended evolution without reshaping callers:
+ *   - Change signature to accept `ConfigLayer = { values, locked?: string[] }` per layer.
+ *   - After the normal merge, do a second pass reapplying locked values in
+ *     layer order so an earlier (org) lock beats a later (partner) write.
+ *   - Add a `locked_fields` storage column (or equivalent) on organizations then.
+ * Deliberately not implemented yet — no storage, no UX spec, no callers exercise it.
+ */
+function mergePartnerAppConfig(...layers) {
+    const result = {};
+    for (const layer of layers) {
+        if (!layer)
+            continue;
+        deepMergeInto(result, layer);
+    }
+    return result;
+}
+function deepMergeInto(target, source) {
+    for (const key of Object.keys(source)) {
+        const nextValue = source[key];
+        if (nextValue === undefined || nextValue === null)
+            continue;
+        if (isPlainObject(nextValue)) {
+            // Recurse into a fresh target object rather than spreading `nextValue`.
+            // A spread would share references for any 2nd-level nested objects
+            // (e.g. themeConfig.cssOverrides), and a later merge step would mutate
+            // the upstream input layer through that shared reference.
+            if (!isPlainObject(target[key])) {
+                target[key] = {};
+            }
+            deepMergeInto(target[key], nextValue);
+        }
+        else if (Array.isArray(nextValue)) {
+            // Clone the array so the result and input layers don't share a reference —
+            // mutating result.externalWalletConfig.wallets must not bleed into the upstream layer.
+            // Replaces wholesale (not concatenated) — see mergePartnerAppConfig docblock.
+            target[key] = [...nextValue];
+        }
+        else {
+            target[key] = nextValue;
+        }
+    }
+}
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    if (Array.isArray(value))
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}

package/dist/esm/types/index.js

@@ -1,5 +1,6 @@
 export * from './assets.js';
 export * from './auth.js';
+export * from './modal.js';
 export * from './otp.js';
 export * from './params.js';
 export * from './partner.js';

package/dist/esm/types/modal.js

@@ -0,0 +1,15 @@
+/**
+ * Modal layout primitives. Lives in @getpara/shared so both the SDK
+ * (modal rendering) and the partner config (`ModalConfig.authLayout`
+ * persisted in the developer portal) reference the same enum.
+ *
+ * The string values are the wire format — they appear in JSONB blobs
+ * stored on the partner record. Don't change them without a migration.
+ */
+export var AuthLayout;
+(function (AuthLayout) {
+    AuthLayout["AUTH_FULL"] = "AUTH:FULL";
+    AuthLayout["AUTH_CONDENSED"] = "AUTH:CONDENSED";
+    AuthLayout["EXTERNAL_FULL"] = "EXTERNAL:FULL";
+    AuthLayout["EXTERNAL_CONDENSED"] = "EXTERNAL:CONDENSED";
+})(AuthLayout || (AuthLayout = {}));

package/dist/esm/utils/deepEqual.js

@@ -0,0 +1,43 @@
+/**
+ * Minimal deep-equality check for plain-data structures (objects, arrays,
+ * primitives). Intended for guarding effects against re-set thrash from
+ * inline-object props (e.g. `<ParaProvider configOverrides={{ ... }} />`
+ * produces a fresh identity every render but typically stable values).
+ *
+ * Lives in @getpara/shared so frontend (react-sdk-lite provider effects)
+ * and any future server-side consumer share one implementation.
+ *
+ * Not intended for general-purpose use: doesn't handle Maps, Sets, Dates,
+ * RegExp, functions, or symbol-keyed properties. Caller must guarantee
+ * inputs are JSON-shaped.
+ */
+export function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (a == null || b == null)
+        return a === b;
+    if (typeof a !== 'object' || typeof b !== 'object')
+        return false;
+    if (Array.isArray(a)) {
+        if (!Array.isArray(b) || a.length !== b.length)
+            return false;
+        for (let i = 0; i < a.length; i++) {
+            if (!deepEqual(a[i], b[i]))
+                return false;
+        }
+        return true;
+    }
+    if (Array.isArray(b))
+        return false;
+    const aKeys = Object.keys(a);
+    const bKeys = Object.keys(b);
+    if (aKeys.length !== bKeys.length)
+        return false;
+    for (const key of aKeys) {
+        if (!Object.prototype.hasOwnProperty.call(b, key))
+            return false;
+        if (!deepEqual(a[key], b[key]))
+            return false;
+    }
+    return true;
+}

package/dist/esm/utils/index.js

@@ -439,4 +439,6 @@ export function getNetworkFromChainId(chainId) {
     return chainId ? NETWORK_METADATA.find(({ evmChainId: c }) => c?.toString() === chainId)?.internalId : undefined;
 }
 export * from './assets.js';
+export * from './deepEqual.js';
 export * from './networks.js';
+export * from './partnerConfig.js';

package/dist/esm/utils/partnerConfig.js

@@ -0,0 +1,68 @@
+/**
+ * Deep-merge N `Partial<PartnerAppConfig>` layers left-to-right.
+ * Later layers override earlier. Null/undefined values in later layers
+ * are treated as absent (do not clobber prior values).
+ *
+ * Arrays are replaced wholesale (not concatenated) — the later layer's
+ * array is the intended value, not an addition.
+ *
+ * Ordered to accept future ecosystem layer without signature changes:
+ *   mergePartnerAppConfig(defaults, organizationConfig, partnerConfig, sdkOverrides)
+ *
+ * Lives in @getpara/shared so server (`partnerConfigResolver`) and SDK
+ * (`core-sdk/utils/partnerConfig`) consume the same implementation —
+ * eliminates the prior duplication where the two sides could drift.
+ *
+ * FUTURE — ecosystem locking primitive (see integration plan §6).
+ * When the ecosystem layer ships, orgs will need to optionally force specific
+ * fields (e.g. enforce a brand color across all partners under an org).
+ * Intended evolution without reshaping callers:
+ *   - Change signature to accept `ConfigLayer = { values, locked?: string[] }` per layer.
+ *   - After the normal merge, do a second pass reapplying locked values in
+ *     layer order so an earlier (org) lock beats a later (partner) write.
+ *   - Add a `locked_fields` storage column (or equivalent) on organizations then.
+ * Deliberately not implemented yet — no storage, no UX spec, no callers exercise it.
+ */
+export function mergePartnerAppConfig(...layers) {
+    const result = {};
+    for (const layer of layers) {
+        if (!layer)
+            continue;
+        deepMergeInto(result, layer);
+    }
+    return result;
+}
+function deepMergeInto(target, source) {
+    for (const key of Object.keys(source)) {
+        const nextValue = source[key];
+        if (nextValue === undefined || nextValue === null)
+            continue;
+        if (isPlainObject(nextValue)) {
+            // Recurse into a fresh target object rather than spreading `nextValue`.
+            // A spread would share references for any 2nd-level nested objects
+            // (e.g. themeConfig.cssOverrides), and a later merge step would mutate
+            // the upstream input layer through that shared reference.
+            if (!isPlainObject(target[key])) {
+                target[key] = {};
+            }
+            deepMergeInto(target[key], nextValue);
+        }
+        else if (Array.isArray(nextValue)) {
+            // Clone the array so the result and input layers don't share a reference —
+            // mutating result.externalWalletConfig.wallets must not bleed into the upstream layer.
+            // Replaces wholesale (not concatenated) — see mergePartnerAppConfig docblock.
+            target[key] = [...nextValue];
+        }
+        else {
+            target[key] = nextValue;
+        }
+    }
+}
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    if (Array.isArray(value))
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}

package/dist/types/types/index.d.ts

@@ -1,5 +1,6 @@
 export * from './assets.js';
 export * from './auth.js';
+export * from './modal.js';
 export * from './otp.js';
 export * from './params.js';
 export * from './partner.js';

package/dist/types/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC"}

package/dist/types/types/modal.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Modal layout primitives. Lives in @getpara/shared so both the SDK
+ * (modal rendering) and the partner config (`ModalConfig.authLayout`
+ * persisted in the developer portal) reference the same enum.
+ *
+ * The string values are the wire format — they appear in JSONB blobs
+ * stored on the partner record. Don't change them without a migration.
+ */
+export declare enum AuthLayout {
+    AUTH_FULL = "AUTH:FULL",
+    AUTH_CONDENSED = "AUTH:CONDENSED",
+    EXTERNAL_FULL = "EXTERNAL:FULL",
+    EXTERNAL_CONDENSED = "EXTERNAL:CONDENSED"
+}
+export type TAuthLayout = `${AuthLayout}`;
+//# sourceMappingURL=modal.d.ts.map

package/dist/types/types/modal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modal.d.ts","sourceRoot":"","sources":["../../../src/types/modal.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,oBAAY,UAAU;IACpB,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,MAAM,WAAW,GAAG,GAAG,UAAU,EAAE,CAAC"}

package/dist/types/types/partner.d.ts

@@ -2,7 +2,7 @@ import { BalancesConfig, OnRampAssets, OnRampProvider } from './assets';
 import { AuthMethod, SupportedAccountLinks } from './auth';
 import { DeliveryChannel } from './otp';
 import { SupportedWalletTypes } from './wallet';
-import { FarcasterConfig, ModalConfig, PartnerExternalWalletConfig, PartnerLinks, PartnerThemeConfig } from './partnerAppConfig';
+import { AuthConfig, FarcasterConfig, ModalConfig, PartnerExternalWalletConfig, PartnerLinks, PartnerThemeConfig } from './partnerAppConfig';
 export declare enum ThemeMode {
     LIGHT = "LIGHT",
     DARK = "DARK"
@@ -47,6 +47,7 @@ export interface IPartnerEntity {
     internationalPrimaryChannel?: DeliveryChannel;
     smsFallbackEnabled?: boolean;
     themeConfig?: PartnerThemeConfig | null;
+    authConfig?: AuthConfig | null;
     modalConfig?: ModalConfig | null;
     partnerLinks?: PartnerLinks | null;
     externalWalletConfig?: PartnerExternalWalletConfig | null;

package/dist/types/types/partner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"partner.d.ts","sourceRoot":"","sources":["../../../src/types/partner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EACL,eAAe,EACf,WAAW,EACX,2BAA2B,EAC3B,YAAY,EACZ,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAE5B,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAGD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,2BAA2B,CAAC,EAAE,eAAe,CAAC;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC1D,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAE3C,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE7C,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC"}
+{"version":3,"file":"partner.d.ts","sourceRoot":"","sources":["../../../src/types/partner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EACL,UAAU,EACV,eAAe,EACf,WAAW,EACX,2BAA2B,EAC3B,YAAY,EACZ,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAE5B,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAGD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,2BAA2B,CAAC,EAAE,eAAe,CAAC;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC1D,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAE3C,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE7C,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC"}

package/dist/types/types/partnerAppConfig.d.ts

@@ -1,4 +1,7 @@
-import { BorderRadius } from './theme.js';
+import { AuthMethod, SupportedAccountLinks } from './auth.js';
+import { BalancesConfig } from './assets.js';
+import { TAuthLayout } from './modal.js';
+import { SupportedWalletTypes } from './wallet.js';
 /**
  * New theme shape introduced alongside existing `Theme`.
  * `Theme` (with CustomPalette, dark*Color, overlayBackground) stays available for consumers
@@ -12,22 +15,70 @@ export interface PartnerThemeConfig {
     foregroundMixRatio?: number;
     mode?: 'light' | 'dark';
     font?: string;
-    borderRadius?: BorderRadius;
+    borderRadius?: 'none' | 'sm' | 'md' | 'lg' | 'xl' | 'full';
     cssOverrides?: Record<string, string>;
 }
 /**
- * Phase 1 scope: fields that live in the new `modal_config` JSONB column.
- * Legacy modal-related fields (`supportedAuthMethods`, `supportedAccountLinks`,
- * `supportedWalletTypes`, `balancesConfig`) stay on their own partner columns.
- * Later phases may consolidate them here with a migration.
+ * Auth-flow configuration. Partner-driven; consumed by both the modal UI
+ * and direct SDK auth calls. Backed by the `partners.auth_config` JSONB
+ * column (added in Phase 3 by `splitModalConfigAddAuthConfig` migration —
+ * Phase 1 originally lumped these fields into `modal_config`).
+ *
+ * `supportedAuthMethods` is BW-compat: also persisted on the legacy
+ * `partners.supported_auth_methods` text[] column. Resolver synthesizes
+ * this field from the legacy column when the JSONB doesn't carry it.
+ * Mirrors how `theme_config` synthesizes from legacy color columns.
+ * Phase 7 drops the legacy column once all writers have migrated.
  */
-export interface ModalConfig {
-    twoFactorAuthEnabled?: boolean;
-    isGuestModeEnabled?: boolean;
+export interface AuthConfig {
     oAuthMethods?: string[];
     disableEmailLogin?: boolean;
     disablePhoneLogin?: boolean;
+    twoFactorAuthEnabled?: boolean;
+    isGuestModeEnabled?: boolean;
+    supportedAuthMethods?: AuthMethod[];
+}
+/**
+ * Modal-UI configuration. Narrowly scoped to behavior of the modal itself;
+ * auth-flow knobs live on `AuthConfig` (see comment above).
+ *
+ * `hideWallets` and `authLayout` are partner-level UX choices — one project =
+ * one wallet-terminology stance, one layout. They moved here from the legacy
+ * `ParaModalProps` React surface so partners can configure them in the
+ * developer portal (with future ecosystem-default support) instead of
+ * code-deploying.
+ *
+ * Phase 3 note: `hideWallets` and `authLayout` persist correctly today but the
+ * modal still renders from the legacy `ParaModalProps.{hideWallets, authLayout}`
+ * — these fields are dormant in 3.x. Phase 4 (ENG-6725) wires the modal to
+ * read from `paraCore.config.modalConfig` and lights them up.
+ */
+export interface ModalConfig {
     disableAddFundsPrompt?: boolean;
+    /**
+     * Whether to suppress wallet-related terminology and on-chain wallet
+     * displays in the modal. Partners with non-crypto-feeling UX flip this on.
+     *
+     * Dormant in 3.x — modal reads from `ParaModalProps.hideWallets` until
+     * Phase 4 wires consumption from `paraCore.config.modalConfig`.
+     */
+    hideWallets?: boolean;
+    /**
+     * How the modal orders the components on the main auth screen. Only the
+     * first method of each type (auth or external) is used.
+     * Default: `[AuthLayout.AUTH_FULL, AuthLayout.EXTERNAL_FULL]`
+     *
+     * Dormant in 3.x — modal reads from `ParaModalProps.authLayout` until
+     * Phase 4 wires consumption from `paraCore.config.modalConfig`.
+     */
+    authLayout?: TAuthLayout[];
+    /**
+     * Whether to suppress the partner logo (`partner.logoUrl`) inside the
+     * modal. Lets a partner upload a logo for use in Portal / Email without
+     * also showing it in the in-app modal — useful when the host app already
+     * renders its own branding around the modal.
+     */
+    hideLogo?: boolean;
 }
 export interface PartnerLinks {
     xUrl?: string;
@@ -38,9 +89,51 @@ export interface PartnerLinks {
 }
 export interface PartnerExternalWalletConfig {
     walletConnectProjectId?: string;
-    supportedChainIds?: number[];
+    /**
+     * EVM chain allowlist — numeric EIP-155 chain IDs (`1`, `137`, `8453`, …).
+     *
+     * **Persisted but not consumed by the SDK today.** No client-side filtering,
+     * no server-side enforcement at sign/broadcast. Reserved for the ecosystem
+     * phase, where real enforcement (filter `evmConnector.config.chains` before
+     * wagmi setup + REST API rejects requests on non-allowlisted chains) lands
+     * alongside the dev-portal UI for editing it. Until then, do NOT add a
+     * client-side advisory warning — it overpromises (the field name reads as
+     * "supported", not "advisory") and cannot be relied on.
+     */
+    supportedEvmChainIds?: number[];
+    /**
+     * Cosmos chain allowlist — chain registry IDs (`cosmoshub-4`, `osmosis-1`,
+     * `juno-1`, …).
+     *
+     * **Persisted but not consumed by the SDK today.** Parallel to
+     * `supportedEvmChainIds`; same enforcement semantics (none). Lights up in
+     * the ecosystem phase. Cosmos chain IDs are strings — they don't fit the
+     * EVM `number[]` shape, which is why this is a separate field.
+     */
+    supportedCosmosChainIds?: string[];
+    /**
+     * Solana cluster allowlist — cluster names (`mainnet-beta`, `testnet`,
+     * `devnet`, or partner-custom labels for private clusters).
+     *
+     * **Persisted but not consumed by the SDK today.** Parallel to
+     * `supportedEvmChainIds`; same enforcement semantics (none). Lights up in
+     * the ecosystem phase. Solana doesn't have numeric chain IDs — clusters
+     * are the closest equivalent.
+     */
+    supportedSolanaClusters?: string[];
     wallets?: string[];
-    createLinkedEmbeddedForExternalWallets?: boolean;
+    /**
+     * External-wallet IDs that should also create a linked embedded wallet
+     * for the signed-in user (with the implicit signature-verification step).
+     * Use `'ALL'` to enable for every external wallet the user connects.
+     *
+     * Type was previously `boolean` — see migration
+     * `NormalizeCreateLinkedEmbeddedExternalWallets` which converts the
+     * legacy `true` values to `'ALL'` and removes `false` values. Aligned
+     * with the SDK prop type so partner config and per-instance overrides
+     * share one shape.
+     */
+    createLinkedEmbeddedForExternalWallets?: string[] | 'ALL';
     includeWalletVerification?: boolean;
     connectionOnly?: boolean;
 }
@@ -59,11 +152,53 @@ export interface FarcasterConfig {
  */
 export interface PartnerAppConfig {
     themeConfig?: PartnerThemeConfig | null;
+    authConfig?: AuthConfig | null;
     modalConfig?: ModalConfig | null;
     partnerLinks?: PartnerLinks | null;
     externalWalletConfig?: PartnerExternalWalletConfig | null;
     farcasterConfig?: FarcasterConfig | null;
     rpcUrl?: string | null;
     appName?: string;
+    /**
+     * Phase 3 — partner-authoritative posture/policy fields, lifted onto
+     * `PartnerAppConfig` so the SDK can read them via `paraCore.config`.
+     * Excluded from `SdkOverridableAppConfig`: SDK callers cannot override
+     * these at compile time (they're security/policy boundaries owned by
+     * the partner record). `supportedAuthMethods` lives on `AuthConfig`.
+     */
+    supportedWalletTypes?: SupportedWalletTypes;
+    supportedAccountLinks?: SupportedAccountLinks;
+    balancesConfig?: BalancesConfig;
 }
+/**
+ * Subset of `PartnerAppConfig` that SDK callers may override via
+ * `ConstructorOpts` or the React provider's `configOverrides` prop.
+ *
+ * Exclusions enforced at compile time. Each excluded field falls into one
+ * of three buckets:
+ *
+ *   1. Partner-authoritative (security/policy boundary the SDK cannot weaken):
+ *      - `supportedWalletTypes`, `supportedAccountLinks`, `balancesConfig`
+ *      - `authConfig.twoFactorAuthEnabled`, `authConfig.supportedAuthMethods`
+ *      - `externalWalletConfig.walletConnectProjectId`
+ *
+ *   2. 1:1 with the apikey/project — no per-instance override use case.
+ *      One project = one of these:
+ *      - `appName` — partner display name
+ *      - `partnerLinks.*` — homepage / social URLs (whole namespace)
+ *
+ *   3. Server-only consumer — only read by user-management (email
+ *      templates), SDK override would be a no-op:
+ *      - `farcasterConfig.*` — partner-side mini-app metadata
+ *
+ * (`themeConfig` is intentionally overridable: the modal can be embedded
+ * in different brand contexts under one apikey, so per-instance theme
+ * override is a legitimate use case. `rpcUrl` is also intentionally
+ * overridable for local-dev — pointing at Anvil/Foundry without
+ * polluting the partner record.)
+ */
+export type SdkOverridableAppConfig = Omit<PartnerAppConfig, 'supportedWalletTypes' | 'supportedAccountLinks' | 'balancesConfig' | 'farcasterConfig' | 'partnerLinks' | 'appName'> & {
+    authConfig?: Omit<AuthConfig, 'twoFactorAuthEnabled' | 'supportedAuthMethods'> | null;
+    externalWalletConfig?: Omit<PartnerExternalWalletConfig, 'walletConnectProjectId'> | null;
+};
 //# sourceMappingURL=partnerAppConfig.d.ts.map

package/dist/types/types/partnerAppConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"partnerAppConfig.d.ts","sourceRoot":"","sources":["../../../src/types/partnerAppConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,sCAAsC,CAAC,EAAE,OAAO,CAAC;IACjD,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC1D,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"partnerAppConfig.d.ts","sourceRoot":"","sources":["../../../src/types/partnerAppConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC;;;;;;;;OAQG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;;;;;OAUG;IACH,sCAAsC,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC1D,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,oBAAoB,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC1D,eAAe,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,gBAAgB,EAChB,sBAAsB,GAAG,uBAAuB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,SAAS,CACrH,GAAG;IACF,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,sBAAsB,GAAG,sBAAsB,CAAC,GAAG,IAAI,CAAC;IACtF,oBAAoB,CAAC,EAAE,IAAI,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,GAAG,IAAI,CAAC;CAC3F,CAAC"}

package/dist/types/utils/deepEqual.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Minimal deep-equality check for plain-data structures (objects, arrays,
+ * primitives). Intended for guarding effects against re-set thrash from
+ * inline-object props (e.g. `<ParaProvider configOverrides={{ ... }} />`
+ * produces a fresh identity every render but typically stable values).
+ *
+ * Lives in @getpara/shared so frontend (react-sdk-lite provider effects)
+ * and any future server-side consumer share one implementation.
+ *
+ * Not intended for general-purpose use: doesn't handle Maps, Sets, Dates,
+ * RegExp, functions, or symbol-keyed properties. Caller must guarantee
+ * inputs are JSON-shaped.
+ */
+export declare function deepEqual(a: unknown, b: unknown): boolean;
+//# sourceMappingURL=deepEqual.d.ts.map

package/dist/types/utils/deepEqual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepEqual.d.ts","sourceRoot":"","sources":["../../../src/utils/deepEqual.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAsBzD"}

package/dist/types/utils/index.d.ts

@@ -6,5 +6,7 @@ export declare const NETWORK_METADATA: (NetworkMetadata & {
 export declare function getChainId(network: TNetwork): `${number}` | undefined;
 export declare function getNetworkFromChainId(chainId?: string | undefined): TNetwork | undefined;
 export * from './assets.js';
+export * from './deepEqual.js';
 export * from './networks.js';
+export * from './partnerConfig.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,CAAC,eAAe,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAib7F,CAAC;AAEF,wBAAgB,UAAU,CAAC,OAAO,EAAE,QAAQ,GAAG,GAAG,MAAM,EAAE,GAAG,SAAS,CAErE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAExF;AAED,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,CAAC,eAAe,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAib7F,CAAC;AAEF,wBAAgB,UAAU,CAAC,OAAO,EAAE,QAAQ,GAAG,GAAG,MAAM,EAAE,GAAG,SAAS,CAErE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAExF;AAED,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC"}

package/dist/types/utils/partnerConfig.d.ts

@@ -0,0 +1,28 @@
+import type { PartnerAppConfig } from '../types/partnerAppConfig.js';
+/**
+ * Deep-merge N `Partial<PartnerAppConfig>` layers left-to-right.
+ * Later layers override earlier. Null/undefined values in later layers
+ * are treated as absent (do not clobber prior values).
+ *
+ * Arrays are replaced wholesale (not concatenated) — the later layer's
+ * array is the intended value, not an addition.
+ *
+ * Ordered to accept future ecosystem layer without signature changes:
+ *   mergePartnerAppConfig(defaults, organizationConfig, partnerConfig, sdkOverrides)
+ *
+ * Lives in @getpara/shared so server (`partnerConfigResolver`) and SDK
+ * (`core-sdk/utils/partnerConfig`) consume the same implementation —
+ * eliminates the prior duplication where the two sides could drift.
+ *
+ * FUTURE — ecosystem locking primitive (see integration plan §6).
+ * When the ecosystem layer ships, orgs will need to optionally force specific
+ * fields (e.g. enforce a brand color across all partners under an org).
+ * Intended evolution without reshaping callers:
+ *   - Change signature to accept `ConfigLayer = { values, locked?: string[] }` per layer.
+ *   - After the normal merge, do a second pass reapplying locked values in
+ *     layer order so an earlier (org) lock beats a later (partner) write.
+ *   - Add a `locked_fields` storage column (or equivalent) on organizations then.
+ * Deliberately not implemented yet — no storage, no UX spec, no callers exercise it.
+ */
+export declare function mergePartnerAppConfig(...layers: Array<Partial<PartnerAppConfig> | null | undefined>): PartnerAppConfig;
+//# sourceMappingURL=partnerConfig.d.ts.map

package/dist/types/utils/partnerConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partnerConfig.d.ts","sourceRoot":"","sources":["../../../src/utils/partnerConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,gBAAgB,CAOtH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getpara/shared",
-  "version": "1.17.0",
+  "version": "1.19.0",
   "description": "Shared types and utilities for Para applications",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",