@graph8/sdk 0.7.2 → 0.12.0

package/dist/index.mjs

@@ -32,6 +32,21 @@ var createFormsClient = (writeKey, apiUrl) => {
 
 // src/utils.ts
 var isServer = typeof window === "undefined";
+var resolveAppBaseUrl = (apiBaseUrl) => {
+  try {
+    const url = new URL(apiBaseUrl);
+    if (url.hostname === "localhost" || url.hostname === "127.0.0.1") {
+      url.port = "3000";
+      return url.origin;
+    }
+    if (url.hostname.endsWith("graph8.com")) {
+      url.hostname = url.hostname.replace(/^be\./, "app.");
+      return url.origin;
+    }
+  } catch {
+  }
+  return apiBaseUrl;
+};
 
 // src/visitors.ts
 var DEFAULT_API2 = "https://be.graph8.com";
@@ -144,6 +159,7 @@ var createCopilotClient = (writeKey, apiUrl) => {
 var DEFAULT_API4 = "https://be.graph8.com";
 var createChatClient = (writeKey, apiUrl) => {
   const baseUrl = apiUrl || DEFAULT_API4;
+  const appUrl = resolveAppBaseUrl(baseUrl);
   const listeners = /* @__PURE__ */ new Map();
   let widgetEl = null;
   let ws = null;
@@ -158,7 +174,7 @@ var createChatClient = (writeKey, apiUrl) => {
       const position = config?.position || "bottom-right";
       const posStyle = position === "bottom-left" ? "left:16px;" : "right:16px;";
       const iframe = document.createElement("iframe");
-      iframe.src = `${baseUrl}/webchat/embed?write_key=${writeKey}&theme=${config?.theme || "auto"}`;
+      iframe.src = `${appUrl}/webchat/embed?write_key=${writeKey}&theme=${config?.theme || "auto"}`;
       iframe.style.cssText = `position:fixed;bottom:16px;${posStyle}width:380px;height:560px;border:none;border-radius:12px;box-shadow:0 8px 32px rgba(0,0,0,0.15);z-index:99997;`;
       iframe.id = "g8-chat-widget";
       document.body.appendChild(iframe);
@@ -283,6 +299,19 @@ var G8Error = class _G8Error extends Error {
 function isRetryableStatus(status) {
   return status === 429 || status >= 500 && status <= 599;
 }
+function isNonIdempotentMethod(method) {
+  const m = method.toUpperCase();
+  return m === "POST" || m === "PATCH";
+}
+function newIdempotencyKey() {
+  const c = globalThis.crypto;
+  if (c?.randomUUID) return c.randomUUID();
+  if (c?.getRandomValues) {
+    const bytes = c.getRandomValues(new Uint8Array(16));
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  return `g8-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+}
 function parseRetryAfter(header, nowMs = Date.now()) {
   if (!header) return null;
   const secs = Number(header);
@@ -349,7 +378,8 @@ async function request(baseUrl, path, apiKey, opts = {}) {
     Authorization: `Bearer ${apiKey}`,
     ...headers
   };
-  if (idempotencyKey) finalHeaders["Idempotency-Key"] = idempotencyKey;
+  const effectiveIdempotencyKey = idempotencyKey ?? (maxRetries > 0 && isNonIdempotentMethod(method) ? newIdempotencyKey() : void 0);
+  if (effectiveIdempotencyKey) finalHeaders["Idempotency-Key"] = effectiveIdempotencyKey;
   let attempt = 0;
   for (; ; ) {
     let resp;
@@ -427,7 +457,7 @@ var createEnrichClient = (apiKey, apiUrl) => {
       });
       return resp.data ?? resp;
     },
-    /** Search 300M+ contacts with filters. Credits charged per result. */
+    /** Search 700M+ contacts with filters. Credits charged per result. */
     async search(filters, page = 1, limit = 25) {
       const resp = await request(baseUrl, "/api/v1/search/contacts", apiKey, {
         method: "POST",
@@ -600,45 +630,23 @@ var createCampaignsClient = (apiKey, apiUrl) => {
       return resp.data ?? resp;
     },
     async launch(campaignId) {
-      await request(baseUrl, `/api/v1/campaigns/${campaignId}/launch`, apiKey, { method: "POST" });
-    },
-    async stats(campaignId) {
-      const resp = await request(baseUrl, `/api/v1/campaigns/${campaignId}/stats`, apiKey);
+      const resp = await request(
+        baseUrl,
+        `/api/v1/campaigns/${campaignId}/launch`,
+        apiKey,
+        { method: "POST" }
+      );
       return resp.data ?? resp;
     }
   };
 };
 
-// src/integrations.ts
-var DEFAULT_API9 = "https://be.graph8.com";
-var createIntegrationsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API9;
-  return {
-    async list() {
-      const resp = await request(baseUrl, "/api/v1/integrations", apiKey);
-      return resp.data ?? resp;
-    },
-    async connect(provider, config) {
-      await request(baseUrl, "/api/v1/integrations/connect", apiKey, {
-        method: "POST",
-        body: { provider, ...config }
-      });
-    },
-    async sync(provider, config) {
-      await request(baseUrl, "/api/v1/integrations/sync", apiKey, {
-        method: "POST",
-        body: { provider, ...config }
-      });
-    }
-  };
-};
-
 // src/signals.ts
-var DEFAULT_API10 = "https://be.graph8.com";
+var DEFAULT_API9 = "https://be.graph8.com";
 var createSignalsClient = (key, isApiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API10;
+  const baseUrl = apiUrl || DEFAULT_API9;
   const headers = () => isApiKey ? { "Content-Type": "application/json", "Authorization": `Bearer ${key}` } : { "Content-Type": "application/json", "X-Write-Key": key };
-  const endpoint = isApiKey ? "/api/v1/signals/company" : "/api/v1/public/signals/company";
+  const endpoint = "/api/v1/public/signals/company";
   return {
     /** Get intent signals for a specific company domain. */
     async company(domain) {
@@ -663,24 +671,10 @@ var createSignalsClient = (key, isApiKey, apiUrl) => {
   };
 };
 
-// src/analytics.ts
-var DEFAULT_API11 = "https://be.graph8.com";
-var createAnalyticsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API11;
-  return {
-    async overview(config) {
-      const resp = await request(baseUrl, "/api/v1/analytics/overview", apiKey, {
-        query: { period: config?.period }
-      });
-      return resp.data ?? resp;
-    }
-  };
-};
-
 // src/voice.ts
-var DEFAULT_API12 = "https://be.graph8.com";
+var DEFAULT_API10 = "https://be.graph8.com";
 var createVoiceClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API12;
+  const baseUrl = apiUrl || DEFAULT_API10;
   const listeners = /* @__PURE__ */ new Map();
   const dialer = {
     /** List parallel-dialer sessions with filters + pagination. */
@@ -813,31 +807,6 @@ var createVoiceClient = (apiKey, apiUrl) => {
     }
   };
   return {
-    /**
-     * Start an AI voice session.
-     * @deprecated Preview surface — for parallel-dialer flows use `voice.dialer.createSession()`.
-     */
-    async start(config) {
-      const resp = await request(
-        baseUrl,
-        "/api/v1/voice/sessions",
-        apiKey,
-        { method: "POST", body: config }
-      );
-      return resp.data ?? resp;
-    },
-    /**
-     * Get call analysis for a completed session.
-     * @deprecated Preview surface — for dialer-call grading use `voice.dialer.callGrading(roomName)`.
-     */
-    async analysis(sessionId) {
-      const resp = await request(
-        baseUrl,
-        `/api/v1/voice/sessions/${sessionId}/analysis`,
-        apiKey
-      );
-      return resp.data ?? resp;
-    },
     /** Listen for voice events. */
     on(event, callback) {
       if (!listeners.has(event)) listeners.set(event, []);
@@ -848,43 +817,9 @@ var createVoiceClient = (apiKey, apiUrl) => {
   };
 };
 
-// src/pages.ts
-var DEFAULT_API13 = "https://be.graph8.com";
-var createPagesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API13;
-  return {
-    /** Clone a landing page from any URL. */
-    async clone(url) {
-      const resp = await request(baseUrl, "/api/v1/landing-pages/clone-url", apiKey, {
-        method: "POST",
-        body: { url }
-      });
-      return resp.data ?? resp;
-    },
-    /** Create a landing page from a template. */
-    async create(config) {
-      const resp = await request(baseUrl, "/api/v1/landing-pages", apiKey, {
-        method: "POST",
-        body: config
-      });
-      return resp.data ?? resp;
-    },
-    /** Publish a landing page to CDN. */
-    async publish(pageId) {
-      const data = await request(
-        baseUrl,
-        `/api/v1/landing-pages/${pageId}/publish`,
-        apiKey,
-        { method: "POST" }
-      );
-      return { url: data.published_url || data.data?.published_url || "" };
-    }
-  };
-};
-
 // src/webhooks.ts
 import { createHmac, timingSafeEqual } from "crypto";
-var DEFAULT_API14 = "https://be.graph8.com";
+var DEFAULT_API11 = "https://be.graph8.com";
 var KNOWN_WEBHOOK_EVENTS = [
   "campaign.created",
   "campaign.updated",
@@ -902,7 +837,7 @@ var KNOWN_WEBHOOK_EVENTS = [
   "company_intelligence.completed",
   "audience.ready",
   "audience.failed",
-  "sequence.deployed",
+  "sequence.draft_created",
   "sequence.started",
   "sequence.paused",
   "sequence.completed",
@@ -965,7 +900,7 @@ function constructEvent(payload, signature, timestamp, secret, opts = {}) {
   }
 }
 var createWebhooksClient = (_apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API14;
+  const baseUrl = apiUrl || DEFAULT_API11;
   return {
     /** Base URL the webhook subscription API lives under. */
     baseUrl,
@@ -979,9 +914,9 @@ var createWebhooksClient = (_apiKey, apiUrl) => {
 };
 
 // src/contacts.ts
-var DEFAULT_API15 = "https://be.graph8.com";
+var DEFAULT_API12 = "https://be.graph8.com";
 var createContactsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API15;
+  const baseUrl = apiUrl || DEFAULT_API12;
   return {
     /** List contacts with optional filters. */
     async list(params = {}) {
@@ -1040,9 +975,9 @@ var createContactsClient = (apiKey, apiUrl) => {
 };
 
 // src/companies.ts
-var DEFAULT_API16 = "https://be.graph8.com";
+var DEFAULT_API13 = "https://be.graph8.com";
 var createCompaniesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API16;
+  const baseUrl = apiUrl || DEFAULT_API13;
   return {
     /** List companies with optional filters. */
     async list(params = {}) {
@@ -1088,9 +1023,9 @@ var createCompaniesClient = (apiKey, apiUrl) => {
 };
 
 // src/lists.ts
-var DEFAULT_API17 = "https://be.graph8.com";
+var DEFAULT_API14 = "https://be.graph8.com";
 var createListsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API17;
+  const baseUrl = apiUrl || DEFAULT_API14;
   return {
     /** List all lists. */
     async list(page = 1, limit = 50) {
@@ -1130,9 +1065,9 @@ var createListsClient = (apiKey, apiUrl) => {
 };
 
 // src/notes.ts
-var DEFAULT_API18 = "https://be.graph8.com";
+var DEFAULT_API15 = "https://be.graph8.com";
 var createNotesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API18;
+  const baseUrl = apiUrl || DEFAULT_API15;
   return {
     /** List all notes on a contact. */
     async list(contactId) {
@@ -1162,9 +1097,9 @@ var createNotesClient = (apiKey, apiUrl) => {
 };
 
 // src/tasks.ts
-var DEFAULT_API19 = "https://be.graph8.com";
+var DEFAULT_API16 = "https://be.graph8.com";
 var createTasksClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API19;
+  const baseUrl = apiUrl || DEFAULT_API16;
   return {
     /** List tasks on a single contact. Optional status filter ("open" | "completed"). */
     async listForContact(contactId, status) {
@@ -1200,9 +1135,9 @@ var createTasksClient = (apiKey, apiUrl) => {
 };
 
 // src/fields.ts
-var DEFAULT_API20 = "https://be.graph8.com";
+var DEFAULT_API17 = "https://be.graph8.com";
 var createFieldsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API20;
+  const baseUrl = apiUrl || DEFAULT_API17;
   return {
     /** List contact fields (base + custom). Pass listId to include list-specific custom fields. */
     async listContactFields(listId) {
@@ -1244,9 +1179,9 @@ var createFieldsClient = (apiKey, apiUrl) => {
 };
 
 // src/deals.ts
-var DEFAULT_API21 = "https://be.graph8.com";
+var DEFAULT_API18 = "https://be.graph8.com";
 var createDealsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API21;
+  const baseUrl = apiUrl || DEFAULT_API18;
   return {
     /** List all deal pipelines and their stages. */
     async pipelines() {
@@ -1290,9 +1225,9 @@ var createDealsClient = (apiKey, apiUrl) => {
 };
 
 // src/inbox.ts
-var DEFAULT_API22 = "https://be.graph8.com";
+var DEFAULT_API19 = "https://be.graph8.com";
 var createInboxClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API22;
+  const baseUrl = apiUrl || DEFAULT_API19;
   return {
     /** List inbox threads across email, SMS, and LinkedIn. */
     async list(params = {}) {
@@ -1345,9 +1280,9 @@ var createInboxClient = (apiKey, apiUrl) => {
 };
 
 // src/quotes.ts
-var DEFAULT_API23 = "https://be.graph8.com";
+var DEFAULT_API20 = "https://be.graph8.com";
 var createQuotesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API23;
+  const baseUrl = apiUrl || DEFAULT_API20;
   return {
     /** List quotes org-wide with optional filters and pagination. */
     async list(params = {}) {
@@ -1419,9 +1354,9 @@ var createQuotesClient = (apiKey, apiUrl) => {
 };
 
 // src/pipelines.ts
-var DEFAULT_API24 = "https://be.graph8.com";
+var DEFAULT_API21 = "https://be.graph8.com";
 var createPipelinesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API24;
+  const baseUrl = apiUrl || DEFAULT_API21;
   return {
     /** List all stage-checklist pipelines with stages, evidence, scripts. */
     async list() {
@@ -1503,9 +1438,9 @@ var createPipelinesClient = (apiKey, apiUrl) => {
 };
 
 // src/workflows.ts
-var DEFAULT_API25 = "https://be.graph8.com";
+var DEFAULT_API22 = "https://be.graph8.com";
 var createWorkflowsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API25;
+  const baseUrl = apiUrl || DEFAULT_API22;
   return {
     /** List workflows org-wide. */
     async list(params = {}) {
@@ -1621,9 +1556,9 @@ var createWorkflowsClient = (apiKey, apiUrl) => {
 };
 
 // src/skills.ts
-var DEFAULT_API26 = "https://be.graph8.com";
+var DEFAULT_API23 = "https://be.graph8.com";
 var createSkillsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API26;
+  const baseUrl = apiUrl || DEFAULT_API23;
   return {
     /** List skills. */
     async list(params = {}) {
@@ -1710,9 +1645,9 @@ var createSkillsClient = (apiKey, apiUrl) => {
 };
 
 // src/intent.ts
-var DEFAULT_API27 = "https://be.graph8.com";
+var DEFAULT_API24 = "https://be.graph8.com";
 var createIntentClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API27;
+  const baseUrl = apiUrl || DEFAULT_API24;
   const get = (path) => request(baseUrl, `/api/v1${path}`, apiKey);
   const post = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "POST", body });
   const del = (path) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "DELETE" });
@@ -1781,10 +1716,12 @@ var createIntentClient = (apiKey, apiUrl) => {
 };
 
 // src/studio.ts
-var DEFAULT_API28 = "https://be.graph8.com";
+var DEFAULT_API25 = "https://be.graph8.com";
 var createStudioClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API28;
+  const baseUrl = apiUrl || DEFAULT_API25;
   const get = (path, params = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { query: params });
+  const post = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "POST", body });
+  const patch = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "PATCH", body });
   return {
     /** Org-level Studio documents (brand_brief, value_props, messaging_house, etc.).
      * `include_content` defaults to true server-side, so each document includes
@@ -1807,14 +1744,38 @@ var createStudioClient = (apiKey, apiUrl) => {
     /** AI research reports (buyer psychology, competitive teardown, GTM channel, etc.). */
     async researchReports(params = {}) {
       return get("/research-reports", params);
+    },
+    /** Create an ICP manually (no AI scoring). Requires name + website_url. */
+    async createIcp(body) {
+      return post("/icps", body);
+    },
+    /** Update an ICP (partial - send only fields to change). */
+    async updateIcp(icpId, body) {
+      return patch(`/icps/${icpId}`, body);
+    },
+    /** Archive an ICP (soft delete - sets status to "archived"). */
+    async archiveIcp(icpId) {
+      return post(`/icps/${icpId}/archive`);
+    },
+    /** Create a buyer persona manually (no AI generation). Requires title + website_url. */
+    async createPersona(body) {
+      return post("/personas", body);
+    },
+    /** Update a persona (partial). Passing status "archived" is equivalent to archivePersona. */
+    async updatePersona(personaId, body) {
+      return patch(`/personas/${personaId}`, body);
+    },
+    /** Archive a persona (soft delete - sets status to "archived"). */
+    async archivePersona(personaId) {
+      return post(`/personas/${personaId}/archive`);
     }
   };
 };
 
 // src/meetings.ts
-var DEFAULT_API29 = "https://be.graph8.com";
+var DEFAULT_API26 = "https://be.graph8.com";
 var createMeetingsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API29;
+  const baseUrl = apiUrl || DEFAULT_API26;
   return {
     /** List meetings with optional filters. Returns summary rows without transcript / analysis. */
     async list(params = {}) {
@@ -1829,9 +1790,9 @@ var createMeetingsClient = (apiKey, apiUrl) => {
 };
 
 // src/audiences.ts
-var DEFAULT_API30 = "https://be.graph8.com";
+var DEFAULT_API27 = "https://be.graph8.com";
 var createAudiencesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API30;
+  const baseUrl = apiUrl || DEFAULT_API27;
   const base = "/api/v1/audience-syncs";
   return {
     /** List all audience syncs for the organization. */
@@ -1879,9 +1840,9 @@ var createAudiencesClient = (apiKey, apiUrl) => {
 };
 
 // src/search.ts
-var DEFAULT_API31 = "https://be.graph8.com";
+var DEFAULT_API28 = "https://be.graph8.com";
 var createSearchClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API31;
+  const baseUrl = apiUrl || DEFAULT_API28;
   const body = (p) => ({ filters: [], page: 1, limit: 25, ...p });
   return {
     /** Search open-data contacts by filter. */
@@ -1912,9 +1873,9 @@ var createSearchClient = (apiKey, apiUrl) => {
 };
 
 // src/agency.ts
-var DEFAULT_API32 = "https://be.graph8.com";
+var DEFAULT_API29 = "https://be.graph8.com";
 var createAgencyClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API32;
+  const baseUrl = apiUrl || DEFAULT_API29;
   return {
     /** Describe the agency credential: agency org + authorized client count. */
     async me() {
@@ -1929,9 +1890,9 @@ var createAgencyClient = (apiKey, apiUrl) => {
 };
 
 // src/marketplace.ts
-var DEFAULT_API33 = "https://be.graph8.com";
+var DEFAULT_API30 = "https://be.graph8.com";
 var createMarketplaceClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API33;
+  const baseUrl = apiUrl || DEFAULT_API30;
   const base = "/api/v1/marketplace";
   return {
     /** Your own marketplace SDR profile. */
@@ -1981,9 +1942,9 @@ var createMarketplaceClient = (apiKey, apiUrl) => {
 };
 
 // src/snippet.ts
-var DEFAULT_API34 = "https://be.graph8.com";
+var DEFAULT_API31 = "https://be.graph8.com";
 var createSnippetClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API34;
+  const baseUrl = apiUrl || DEFAULT_API31;
   return {
     /** Get your org's tracking snippet (write key + React/script-tag embeds + config). */
     async get() {
@@ -1995,7 +1956,7 @@ var createSnippetClient = (apiKey, apiUrl) => {
 
 // src/core.ts
 var DEFAULT_HOST = "https://t.graph8.com";
-var DEFAULT_API35 = "https://be.graph8.com";
+var DEFAULT_API32 = "https://be.graph8.com";
 var G8 = class {
   constructor() {
     /** @internal */
@@ -2019,16 +1980,10 @@ var G8 = class {
     /** @internal */
     this._campaigns = null;
     /** @internal */
-    this._integrations = null;
-    /** @internal */
     this._signals = null;
     /** @internal */
-    this._analytics = null;
-    /** @internal */
     this._voice = null;
     /** @internal */
-    this._pages = null;
-    /** @internal */
     this._webhooks = null;
     /** @internal */
     this._contacts = null;
@@ -2084,7 +2039,7 @@ var G8 = class {
         debug: config.debug
       });
     }
-    const apiUrl = config.apiUrl || DEFAULT_API35;
+    const apiUrl = config.apiUrl || DEFAULT_API32;
     const writeKey = config.writeKey || "";
     const apiKey = config.apiKey || "";
     if (writeKey) {
@@ -2099,10 +2054,7 @@ var G8 = class {
       this._enrich = createEnrichClient(apiKey, apiUrl);
       this._sequences = createSequencesClient(apiKey, apiUrl);
       this._campaigns = createCampaignsClient(apiKey, apiUrl);
-      this._integrations = createIntegrationsClient(apiKey, apiUrl);
-      this._analytics = createAnalyticsClient(apiKey, apiUrl);
       this._voice = createVoiceClient(apiKey, apiUrl);
-      this._pages = createPagesClient(apiKey, apiUrl);
       this._webhooks = createWebhooksClient(apiKey, apiUrl);
       this._contacts = createContactsClient(apiKey, apiUrl);
       this._companies = createCompaniesClient(apiKey, apiUrl);
@@ -2185,31 +2137,16 @@ var G8 = class {
     this._assertKey("campaigns");
     return this._campaigns;
   }
-  /** CRM integrations (requires API key). */
-  get integrations() {
-    this._assertKey("integrations");
-    return this._integrations;
-  }
   /** Intent signals. */
   get signals() {
     this._assertInit();
     return this._signals;
   }
-  /** Analytics (requires API key). */
-  get analytics() {
-    this._assertKey("analytics");
-    return this._analytics;
-  }
   /** Voice AI (requires API key). */
   get voice() {
     this._assertKey("voice");
     return this._voice;
   }
-  /** Landing pages (requires API key). */
-  get pages() {
-    this._assertKey("pages");
-    return this._pages;
-  }
   /** Webhook event listeners (requires API key). */
   get webhooks() {
     this._assertKey("webhooks");
@@ -2330,12 +2267,181 @@ var G8 = class {
   }
 };
 var g8 = new G8();
+
+// src/appTokens.ts
+var DEFAULT_APP_API = "https://be.graph8.com";
+function createTokenManager(args) {
+  const now = args.now ?? (() => Date.now());
+  const skewMs = args.refreshSkewMs ?? 6e4;
+  let token = null;
+  let expiresAtMs = 0;
+  let inflight = null;
+  const doRefresh = async () => {
+    const resp = await args.refresh();
+    token = resp.access_token;
+    expiresAtMs = now() + Math.max(0, resp.expires_in) * 1e3;
+    return token;
+  };
+  return {
+    async getToken(force = false) {
+      const stillFresh = !force && token !== null && now() < expiresAtMs - skewMs;
+      if (stillFresh) return token;
+      if (!inflight) {
+        inflight = doRefresh().finally(() => {
+          inflight = null;
+        });
+      }
+      return inflight;
+    },
+    expiresAt() {
+      return expiresAtMs;
+    }
+  };
+}
+function createAppRequester(args) {
+  const { baseUrl, tokens, extraHeaders, fetchImpl, sleepImpl } = args;
+  const appRequest = async (path, opts = {}) => {
+    const headers = { ...extraHeaders ?? {}, ...opts.headers ?? {} };
+    const reqOpts = { ...opts, headers, fetchImpl, sleepImpl };
+    const token = await tokens.getToken();
+    try {
+      return await request(baseUrl, path, token, reqOpts);
+    } catch (err) {
+      if (err instanceof G8Error && err.status === 401) {
+        const fresh = await tokens.getToken(true);
+        return await request(baseUrl, path, fresh, reqOpts);
+      }
+      throw err;
+    }
+  };
+  return appRequest;
+}
+async function exchangeBrowserToken(args) {
+  const propelToken = await Promise.resolve(args.getPropelAuthToken());
+  if (!propelToken) {
+    throw new G8Error({
+      message: "getPropelAuthToken() returned no token \u2014 cannot exchange a browser app session",
+      status: 401,
+      type: "app_token_invalid",
+      code: "app_token_invalid"
+    });
+  }
+  const resp = await request(
+    args.baseUrl,
+    "/api/v1/app-sessions/exchange",
+    propelToken,
+    {
+      method: "POST",
+      body: { app_id: args.appId, scopes: args.scopes ?? [] },
+      fetchImpl: args.fetchImpl,
+      sleepImpl: args.sleepImpl
+    }
+  );
+  return resp.data ?? resp;
+}
+async function exchangeServiceToken(args) {
+  const resp = await request(
+    args.baseUrl,
+    "/api/v1/service-token",
+    "",
+    {
+      method: "POST",
+      body: {
+        client_id: args.clientId,
+        client_secret: args.clientSecret,
+        scopes: args.scopes ?? [],
+        ttl_seconds: args.ttlSeconds ?? null
+      },
+      fetchImpl: args.fetchImpl,
+      sleepImpl: args.sleepImpl
+    }
+  );
+  return resp.data ?? resp;
+}
+
+// src/appClient.ts
+function createGraph8AppClient(config) {
+  if (typeof config?.getPropelAuthToken !== "function") {
+    throw new Error(
+      "createGraph8AppClient requires getPropelAuthToken() \u2014 a function returning the caller's PropelAuth token"
+    );
+  }
+  const asRecord = config;
+  if ("apiKey" in asRecord || "writeKey" in asRecord) {
+    throw new Error(
+      "createGraph8AppClient does not accept an org API key or write key in the browser \u2014 pass getPropelAuthToken() instead"
+    );
+  }
+  const baseUrl = config.apiUrl || DEFAULT_APP_API;
+  const tokens = createTokenManager({
+    now: config.now,
+    refreshSkewMs: config.refreshSkewMs,
+    refresh: () => exchangeBrowserToken({
+      baseUrl,
+      appId: config.appId,
+      scopes: config.scopes,
+      getPropelAuthToken: config.getPropelAuthToken,
+      fetchImpl: config.fetchImpl,
+      sleepImpl: config.sleepImpl
+    })
+  });
+  const req = createAppRequester({ baseUrl, tokens, fetchImpl: config.fetchImpl, sleepImpl: config.sleepImpl });
+  return {
+    appId: config.appId,
+    tenantOrgId: config.tenantOrgId,
+    request: req,
+    getAppToken: (force = false) => tokens.getToken(force)
+  };
+}
+function createGraph8ServiceClient(config) {
+  if (!config?.clientId || !config?.clientSecret) {
+    throw new Error("createGraph8ServiceClient requires clientId and clientSecret");
+  }
+  if (!config?.tenantOrgId) {
+    throw new Error(
+      "createGraph8ServiceClient requires tenantOrgId \u2014 the single consented client org this backend acts for"
+    );
+  }
+  const baseUrl = config.apiUrl || DEFAULT_APP_API;
+  const tokens = createTokenManager({
+    now: config.now,
+    refreshSkewMs: config.refreshSkewMs,
+    refresh: () => exchangeServiceToken({
+      baseUrl,
+      clientId: config.clientId,
+      clientSecret: config.clientSecret,
+      scopes: config.scopes,
+      ttlSeconds: config.ttlSeconds,
+      fetchImpl: config.fetchImpl,
+      sleepImpl: config.sleepImpl
+    })
+  });
+  const req = createAppRequester({
+    baseUrl,
+    tokens,
+    extraHeaders: { "X-Target-Org-Id": config.tenantOrgId },
+    fetchImpl: config.fetchImpl,
+    sleepImpl: config.sleepImpl
+  });
+  return {
+    tenantOrgId: config.tenantOrgId,
+    request: req,
+    getServiceToken: (force = false) => tokens.getToken(force)
+  };
+}
 export {
+  DEFAULT_APP_API,
   G8Error,
   KNOWN_WEBHOOK_EVENTS,
   WebhookSignatureError,
   backoffDelayMs,
   constructEvent,
+  createAppRequester,
+  createGraph8AppClient,
+  createGraph8ServiceClient,
+  createTokenManager,
+  exchangeBrowserToken,
+  exchangeServiceToken,
   g8,
   isRetryableStatus,
   paginate,