@graph8/sdk 0.7.2 → 0.12.0

package/README.md

@@ -70,7 +70,7 @@ const { data: listContacts } = await g8.lists.contacts(list.id);
 // Enrich a person
 const person = await g8.enrich.person({ email: 'jane@acme.com' });
 
-// Search 300M+ contacts
+// Search 700M+ contacts
 const leads = await g8.enrich.search([
   { field: 'seniority_level', operator: 'any_of', value: ['VP', 'Director'] },
   { field: 'company_industry', operator: 'contains', value: ['SaaS'] },
@@ -88,14 +88,6 @@ await g8.campaigns.launch(campaign.id);
 const signals = await g8.signals.company('acme.com');
 // { score: 87, intent: 'high', signals: ['pricing_page_3x', 'case_study'] }
 
-// Voice AI
-const call = await g8.voice.start({ agent: 'sales-discovery', contactId: 123 });
-const analysis = await g8.voice.analysis(call.id);
-
-// Landing pages
-const page = await g8.pages.clone('https://competitor.com/pricing');
-const { url } = await g8.pages.publish(page.id);
-
 // Webhook events (push model — verify each delivery server-side)
 app.post('/webhooks/graph8', (req, res) => {
   const event = g8.webhooks.constructEvent(
@@ -116,10 +108,25 @@ app.post('/webhooks/graph8', (req, res) => {
 import { G8Provider, useG8 } from '@graph8/sdk/react';
 
 // Layout
-<G8Provider writeKey="YOUR_WRITE_KEY"><App /></G8Provider>
-
-// Any component
-const { track, identify, visitors, copilot, calendar } = useG8();
+export const Layout = ({ children }: { children: React.ReactNode }) => (
+  <G8Provider writeKey="YOUR_WRITE_KEY">{children}</G8Provider>
+);
+
+// Any component. `useG8()` exposes the tracking calls, the progressive-form
+// helpers, and the raw client — reach the rest of the surface through `g8`.
+export const CTA = () => {
+  const { track, identify, page, reset, forms, g8 } = useG8();
+  return (
+    <button
+      onClick={() => {
+        track('cta_click', { placement: 'hero' });
+        g8.copilot.open({ greeting: 'How can I help?' });
+      }}
+    >
+      Talk to us
+    </button>
+  );
+};
 ```
 
 ## Full API Reference
@@ -213,7 +220,7 @@ const { track, identify, visitors, copilot, calendar } = useG8();
 | `g8.enrich.person(params)` | Look up a person (1 credit) |
 | `g8.enrich.company(params)` | Look up a company (1 credit) |
 | `g8.enrich.verifyEmail(email)` | Verify email (1 credit) |
-| `g8.enrich.search(filters)` | Search 300M+ contacts |
+| `g8.enrich.search(filters)` | Search 700M+ contacts |
 
 ### Sequences (API key)
 
@@ -229,7 +236,6 @@ const { track, identify, visitors, copilot, calendar } = useG8();
 | `g8.campaigns.list()` | List campaigns |
 | `g8.campaigns.create(config)` | Create campaign |
 | `g8.campaigns.launch(id)` | Launch campaign |
-| `g8.campaigns.stats(id)` | Get campaign stats |
 
 ### Signals (write key or API key)
 
@@ -238,41 +244,63 @@ const { track, identify, visitors, copilot, calendar } = useG8();
 | `g8.signals.company(domain)` | Get intent signals |
 | `g8.signals.stream(domains, cb)` | Stream signals (polls 30s) |
 
-### Analytics (API key)
+### Webhooks (API key)
 
 | Method | Description |
 |--------|-------------|
-| `g8.analytics.overview(config?)` | Dashboard metrics |
+| `g8.webhooks.constructEvent(body, sig, ts, secret, opts?)` | Verify a delivery's HMAC signature and return the parsed event (throws `WebhookSignatureError`) |
+| `g8.webhooks.knownEvents` | The known event-type catalog |
 
-### Integrations (API key)
+## App Platform
 
-| Method | Description |
-|--------|-------------|
-| `g8.integrations.list()` | List connected CRMs |
-| `g8.integrations.connect(provider)` | Connect CRM |
-| `g8.integrations.sync(provider)` | Trigger sync |
+Hosted apps do not carry a permanent org API key. Instead they **exchange** a
+longer-lived credential for a short-lived graph8 app token, and the client
+mints, refreshes, and attaches it for you. Both clients expose a token-bound
+`request()` that reaches the existing Developer API resources with the app
+token.
 
-### Voice AI (API key)
+### Browser (PropelAuth token exchange)
 
-| Method | Description |
-|--------|-------------|
-| `g8.voice.start(config)` | Start AI voice call |
-| `g8.voice.analysis(sessionId)` | Get call analysis |
+```typescript
+import { createGraph8AppClient } from '@graph8/sdk';
+
+// Exchange the signed-in user's PropelAuth token for a short-lived graph8 app
+// token. The client refreshes it on/near expiry and attaches
+// `Authorization: Bearer <app-token>` to every call — no API key in the browser.
+const appClient = createGraph8AppClient({
+  appId: 'dapp_your_app',
+  tenantOrgId: 'org_customer',
+  scopes: ['objects:read'],
+  getPropelAuthToken: () => localStorage.getItem('propelauth_token') ?? '',
+});
 
-### Landing Pages (API key)
+// Reach the existing resources with the app token via request():
+const { data: contacts } = await appClient.request<{ data: unknown[] }>(
+  '/api/v1/contacts',
+  { query: { limit: 10 } },
+);
+```
 
-| Method | Description |
-|--------|-------------|
-| `g8.pages.clone(url)` | Clone from URL |
-| `g8.pages.create(config)` | Create from template |
-| `g8.pages.publish(id)` | Publish to CDN |
+### Backend (service credentials)
 
-### Webhooks (API key)
+```typescript
+import { createGraph8ServiceClient } from '@graph8/sdk';
+
+// Exchange service client-credentials for a service token. Every call is pinned
+// to the one consented tenant via the `X-Target-Org-Id` header the client adds.
+const service = createGraph8ServiceClient({
+  clientId: process.env.G8_APP_CLIENT_ID,
+  clientSecret: process.env.G8_APP_CLIENT_SECRET,
+  tenantOrgId: 'org_customer',
+  scopes: ['objects:read', 'objects:write'],
+});
 
-| Method | Description |
-|--------|-------------|
-| `g8.webhooks.constructEvent(body, sig, ts, secret, opts?)` | Verify a delivery's HMAC signature and return the parsed event (throws `WebhookSignatureError`) |
-| `g8.webhooks.knownEvents` | The known event-type catalog |
+const { data: rows } = await service.request<{ data: unknown[] }>('/api/v1/contacts');
+```
+
+> The typed `apps` (control-plane) and `objects` (custom-object CRUD) resource
+> modules are deferred until their backend routes ship (M6-3 / M6-5). Until then,
+> reach the Developer API through the token-bound `request()` shown above.
 
 ## Auth Modes