@iann29/rastro 0.1.0-alpha.9 → 0.2.0

package/dist/client/federation.d.ts

@@ -1,11 +1,34 @@
-import type { UserIdentity } from "convex/server";
+import type { GenericDataModel, GenericMutationCtx, UserIdentity } from "convex/server";
 import type { AnalyticsAuthorizationContext } from "./index.js";
 export declare const FEDERATED_ANALYTICS_CLAIMS: Readonly<{
     readonly connectionId: "rastro_connection_id";
     readonly organizationId: "rastro_organization_id";
     readonly permissions: "rastro_permissions";
+    readonly version: "rastro_connection_version";
+    readonly transferTo: "rastro_transfer_to";
+    /**
+     * Optional: the sites the token may read, a subset of the grant. A public
+     * link's token carries the sites the link was created for.
+     */
+    readonly siteIds: "rastro_site_ids";
 }>;
 export declare const FEDERATED_ANALYTICS_READ_PERMISSION = "analytics:read";
+/**
+ * The opt-in write scope. A token carries it only for organization owners and
+ * admins, and a host honors it only when its local grant lists it too: both
+ * sides must agree before any configuration function runs.
+ */
+export declare const FEDERATED_ANALYTICS_CONFIGURE_PERMISSION = "analytics:configure";
+/**
+ * The permission a public link's token carries instead of `analytics:read`.
+ * It reaches only the overview, the live visitors, the site summaries, the
+ * coverage and the connection status — never sessions, journeys, conversions
+ * or the configure scope — and a host honors it only when its local grant lists
+ * it, so a customer decides twice before a dashboard goes public. A host from
+ * before this permission rejects the token whole, which is the safe failure.
+ */
+export declare const FEDERATED_ANALYTICS_PUBLIC_PERMISSION = "analytics:public";
+export declare const FEDERATED_ANALYTICS_PERMISSIONS: readonly ["analytics:read", "analytics:configure", "analytics:public"];
 export declare const FEDERATED_ANALYTICS_ERROR_CODES: Readonly<{
     readonly UNAUTHENTICATED: "FEDERATION_UNAUTHENTICATED";
     readonly ISSUER_MISMATCH: "FEDERATION_ISSUER_MISMATCH";
@@ -13,6 +36,8 @@ export declare const FEDERATED_ANALYTICS_ERROR_CODES: Readonly<{
     readonly CONNECTION_DENIED: "FEDERATION_CONNECTION_DENIED";
     readonly INVALID_SCOPE: "FEDERATION_INVALID_SCOPE";
     readonly SITE_DENIED: "FEDERATION_SITE_DENIED";
+    readonly CONFIGURE_FORBIDDEN: "FEDERATION_CONFIGURE_FORBIDDEN";
+    readonly PUBLIC_FORBIDDEN: "FEDERATION_PUBLIC_FORBIDDEN";
 }>;
 /**
  * The protocol-v1 baseline every compatible host must serve. Newer hosts may
@@ -35,6 +60,42 @@ export declare const FEDERATED_ANALYTICS_REQUIRED_FUNCTIONS: Readonly<{
     readonly dataCoverage: "dataCoverage";
 }>;
 export declare const FEDERATED_ANALYTICS_REQUIRED_CAPABILITIES: readonly ["siteSummaries", "overview", "liveVisitors", "sessions", "sessionJourney", "conversions", "visitorJourney", "goals", "funnels", "affiliates", "dataCoverage"];
+/**
+ * The optional configuration surface behind the `configure` capability. Every
+ * function here requires the configure permission on the token and on the
+ * host's grant; a host that keeps its grants read-only never runs them.
+ */
+export declare const FEDERATED_ANALYTICS_CONFIGURE_FUNCTIONS: Readonly<{
+    readonly siteSettings: "siteSettings";
+    readonly updateSite: "updateSite";
+    readonly listGoals: "listGoals";
+    readonly upsertGoal: "upsertGoal";
+    readonly removeGoal: "removeGoal";
+    readonly listFunnels: "listFunnels";
+    readonly upsertFunnel: "upsertFunnel";
+    readonly removeFunnel: "removeFunnel";
+    readonly listAffiliates: "listAffiliates";
+    readonly upsertAffiliate: "upsertAffiliate";
+    readonly removeAffiliate: "removeAffiliate";
+    readonly retentionStatus: "retentionStatus";
+    readonly setRetentionPolicy: "setRetentionPolicy";
+    readonly disableRetentionPolicy: "disableRetentionPolicy";
+}>;
+/**
+ * The functions a public token may run: the aggregate overview (redacted of
+ * revenue, conversions, goals, campaigns and custom events), the live visitors
+ * (with the visitor identity replaced by the session id), the redacted site
+ * summaries, the coverage and the connection status. Everything else on the
+ * surface needs a reader's token.
+ */
+export declare const FEDERATED_ANALYTICS_PUBLIC_FUNCTIONS: Readonly<{
+    readonly manifest: "manifest";
+    readonly connectionStatus: "connectionStatus";
+    readonly listSites: "listSites";
+    readonly overview: "overview";
+    readonly liveVisitors: "liveVisitors";
+    readonly dataCoverage: "dataCoverage";
+}>;
 export declare const FEDERATED_ANALYTICS_CONNECTOR_MANIFEST: Readonly<{
     readonly protocol: "amage-rastro-analytics";
     readonly protocolVersion: 1;
@@ -53,10 +114,24 @@ export declare const FEDERATED_ANALYTICS_CONNECTOR_MANIFEST: Readonly<{
         readonly funnelsReport: "funnelsReport";
         readonly affiliatesReport: "affiliatesReport";
         readonly dataCoverage: "dataCoverage";
+        readonly siteSettings: "siteSettings";
+        readonly updateSite: "updateSite";
+        readonly listGoals: "listGoals";
+        readonly upsertGoal: "upsertGoal";
+        readonly removeGoal: "removeGoal";
+        readonly listFunnels: "listFunnels";
+        readonly upsertFunnel: "upsertFunnel";
+        readonly removeFunnel: "removeFunnel";
+        readonly listAffiliates: "listAffiliates";
+        readonly upsertAffiliate: "upsertAffiliate";
+        readonly removeAffiliate: "removeAffiliate";
+        readonly retentionStatus: "retentionStatus";
+        readonly setRetentionPolicy: "setRetentionPolicy";
+        readonly disableRetentionPolicy: "disableRetentionPolicy";
         readonly vitalsReport: "vitalsReport";
         readonly siteMap: "siteMap";
     }>;
-    readonly capabilities: readonly ["siteSummaries", "overview", "liveVisitors", "sessions", "sessionJourney", "conversions", "visitorJourney", "goals", "funnels", "affiliates", "dataCoverage", "vitals", "siteMap"];
+    readonly capabilities: readonly ["siteSummaries", "overview", "liveVisitors", "sessions", "sessionJourney", "conversions", "visitorJourney", "goals", "funnels", "affiliates", "dataCoverage", "vitals", "siteMap", "localDays", "configure"];
     readonly limits: Readonly<{
         readonly maxSitesPerRequest: 10;
         readonly maxSitesPerConnection: 10;
@@ -66,12 +141,21 @@ export declare const FEDERATED_ANALYTICS_CONNECTOR_MANIFEST: Readonly<{
     }>;
 }>;
 export type FederatedAnalyticsErrorCode = (typeof FEDERATED_ANALYTICS_ERROR_CODES)[keyof typeof FEDERATED_ANALYTICS_ERROR_CODES];
-export type FederatedAnalyticsCapability = (typeof FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.capabilities)[number];
+export type FederatedAnalyticsCapability = (typeof FEDERATED_ANALYTICS_CONNECTOR_MANIFEST.capabilities)[number] | "transfer";
+export type FederatedAnalyticsPermission = (typeof FEDERATED_ANALYTICS_PERMISSIONS)[number];
 export type FederatedAnalyticsManifest = ReturnType<typeof createFederatedAnalyticsManifest>;
 export interface FederatedAnalyticsConnection {
     connectionId: string;
     organizationId: string;
+    /** Incremented on transfer, invalidating tokens even after a round trip. */
+    version?: number;
     siteIds: readonly string[];
+    /**
+     * What the host lets this connection do. Absent means read only; listing
+     * `analytics:configure` lets owners and admins of the dashboard organization
+     * manage goals, funnels, affiliates, site settings, and retention.
+     */
+    permissions?: readonly FederatedAnalyticsPermission[];
     revokedAt?: number;
 }
 export interface FederatedAnalyticsIdentity {
@@ -85,34 +169,72 @@ export interface FederatedSiteSummary {
     currency: string;
     timezone: string | null;
     cookieless: boolean;
+    /**
+     * The site's calendar days, when the host keeps them (alpha.11): the
+     * timezone its daily overview buckets follow and the instant from which
+     * they are complete. `null` for a site without a timezone, or whose zone
+     * never leaves UTC. Hosts before alpha.11 omit the field.
+     */
+    localDays: {
+        timezone: string;
+        since: number;
+    } | null;
 }
 export interface FederatedAnalyticsConnectionStatus {
     status: "connected";
     protocolVersion: 1;
     capabilities: FederatedAnalyticsCapability[];
+    /** The permissions both the token and the host's grant agree on. */
+    permissions: FederatedAnalyticsPermission[];
     siteCount: number;
 }
+/** A resolved connection plus the permissions this request may act with. */
+export type AuthorizedFederatedAnalyticsConnection = FederatedAnalyticsConnection & {
+    effectivePermissions: FederatedAnalyticsPermission[];
+};
 export type ResolveFederatedAnalyticsConnection = (ctx: AnalyticsAuthorizationContext, identity: FederatedAnalyticsIdentity) => FederatedAnalyticsConnection | null | Promise<FederatedAnalyticsConnection | null>;
 export interface FederatedAnalyticsAuthorizerOptions {
     issuer: string;
     resolveConnection: ResolveFederatedAnalyticsConnection;
+    /** Opt in by atomically persisting both fields on the authoritative grant. */
+    transferConnection?: (ctx: GenericMutationCtx<GenericDataModel>, connection: {
+        connectionId: string;
+        organizationId: string;
+        version: number;
+    }) => Promise<void>;
 }
+export declare const federatedAnalyticsPermissionValidator: import("convex/values").VUnion<"analytics:configure" | "analytics:public" | "analytics:read", [import("convex/values").VLiteral<"analytics:read", "required">, import("convex/values").VLiteral<"analytics:configure", "required">, import("convex/values").VLiteral<"analytics:public", "required">], "required", never>;
 export declare const federatedAnalyticsManifestValidator: import("convex/values").VObject<{
-    capabilities: ("affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals")[];
+    capabilities: ("affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals")[];
     functions: {
         affiliatesReport: "affiliatesReport";
         connectionStatus: "connectionStatus";
         dataCoverage: "dataCoverage";
+        disableRetentionPolicy: "disableRetentionPolicy";
         funnelsReport: "funnelsReport";
         goalsReport: "goalsReport";
+        listAffiliates: "listAffiliates";
         listConversions: "listConversions";
+        listFunnels: "listFunnels";
+        listGoals: "listGoals";
         listSessions: "listSessions";
         listSites: "listSites";
         liveVisitors: "liveVisitors";
         manifest: "manifest";
         overview: "overview";
+        removeAffiliate: "removeAffiliate";
+        removeFunnel: "removeFunnel";
+        removeGoal: "removeGoal";
+        retentionStatus: "retentionStatus";
         sessionJourney: "sessionJourney";
+        setRetentionPolicy: "setRetentionPolicy";
         siteMap: "siteMap";
+        siteSettings: "siteSettings";
+        transferConnection?: "transferConnection" | undefined;
+        updateSite: "updateSite";
+        upsertAffiliate: "upsertAffiliate";
+        upsertFunnel: "upsertFunnel";
+        upsertGoal: "upsertGoal";
         visitorJourney: "visitorJourney";
         vitalsReport: "vitalsReport";
     };
@@ -134,16 +256,31 @@ export declare const federatedAnalyticsManifestValidator: import("convex/values"
         affiliatesReport: "affiliatesReport";
         connectionStatus: "connectionStatus";
         dataCoverage: "dataCoverage";
+        disableRetentionPolicy: "disableRetentionPolicy";
         funnelsReport: "funnelsReport";
         goalsReport: "goalsReport";
+        listAffiliates: "listAffiliates";
         listConversions: "listConversions";
+        listFunnels: "listFunnels";
+        listGoals: "listGoals";
         listSessions: "listSessions";
         listSites: "listSites";
         liveVisitors: "liveVisitors";
         manifest: "manifest";
         overview: "overview";
+        removeAffiliate: "removeAffiliate";
+        removeFunnel: "removeFunnel";
+        removeGoal: "removeGoal";
+        retentionStatus: "retentionStatus";
         sessionJourney: "sessionJourney";
+        setRetentionPolicy: "setRetentionPolicy";
         siteMap: "siteMap";
+        siteSettings: "siteSettings";
+        transferConnection?: "transferConnection" | undefined;
+        updateSite: "updateSite";
+        upsertAffiliate: "upsertAffiliate";
+        upsertFunnel: "upsertFunnel";
+        upsertGoal: "upsertGoal";
         visitorJourney: "visitorJourney";
         vitalsReport: "vitalsReport";
     }, {
@@ -162,8 +299,23 @@ export declare const federatedAnalyticsManifestValidator: import("convex/values"
         dataCoverage: import("convex/values").VLiteral<"dataCoverage", "required">;
         vitalsReport: import("convex/values").VLiteral<"vitalsReport", "required">;
         siteMap: import("convex/values").VLiteral<"siteMap", "required">;
-    }, "required", "affiliatesReport" | "connectionStatus" | "dataCoverage" | "funnelsReport" | "goalsReport" | "listConversions" | "listSessions" | "listSites" | "liveVisitors" | "manifest" | "overview" | "sessionJourney" | "siteMap" | "visitorJourney" | "vitalsReport">;
-    capabilities: import("convex/values").VArray<("affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals")[], import("convex/values").VUnion<"affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals", [import("convex/values").VLiteral<"siteSummaries", "required">, import("convex/values").VLiteral<"overview", "required">, import("convex/values").VLiteral<"liveVisitors", "required">, import("convex/values").VLiteral<"sessions", "required">, import("convex/values").VLiteral<"sessionJourney", "required">, import("convex/values").VLiteral<"conversions", "required">, import("convex/values").VLiteral<"visitorJourney", "required">, import("convex/values").VLiteral<"goals", "required">, import("convex/values").VLiteral<"funnels", "required">, import("convex/values").VLiteral<"affiliates", "required">, import("convex/values").VLiteral<"dataCoverage", "required">, import("convex/values").VLiteral<"vitals", "required">, import("convex/values").VLiteral<"siteMap", "required">], "required", never>, "required">;
+        siteSettings: import("convex/values").VLiteral<"siteSettings", "required">;
+        updateSite: import("convex/values").VLiteral<"updateSite", "required">;
+        listGoals: import("convex/values").VLiteral<"listGoals", "required">;
+        upsertGoal: import("convex/values").VLiteral<"upsertGoal", "required">;
+        removeGoal: import("convex/values").VLiteral<"removeGoal", "required">;
+        listFunnels: import("convex/values").VLiteral<"listFunnels", "required">;
+        upsertFunnel: import("convex/values").VLiteral<"upsertFunnel", "required">;
+        removeFunnel: import("convex/values").VLiteral<"removeFunnel", "required">;
+        listAffiliates: import("convex/values").VLiteral<"listAffiliates", "required">;
+        upsertAffiliate: import("convex/values").VLiteral<"upsertAffiliate", "required">;
+        removeAffiliate: import("convex/values").VLiteral<"removeAffiliate", "required">;
+        retentionStatus: import("convex/values").VLiteral<"retentionStatus", "required">;
+        setRetentionPolicy: import("convex/values").VLiteral<"setRetentionPolicy", "required">;
+        disableRetentionPolicy: import("convex/values").VLiteral<"disableRetentionPolicy", "required">;
+        transferConnection: import("convex/values").VLiteral<"transferConnection" | undefined, "optional">;
+    }, "required", "affiliatesReport" | "connectionStatus" | "dataCoverage" | "disableRetentionPolicy" | "funnelsReport" | "goalsReport" | "listAffiliates" | "listConversions" | "listFunnels" | "listGoals" | "listSessions" | "listSites" | "liveVisitors" | "manifest" | "overview" | "removeAffiliate" | "removeFunnel" | "removeGoal" | "retentionStatus" | "sessionJourney" | "setRetentionPolicy" | "siteMap" | "siteSettings" | "transferConnection" | "updateSite" | "upsertAffiliate" | "upsertFunnel" | "upsertGoal" | "visitorJourney" | "vitalsReport">;
+    capabilities: import("convex/values").VArray<("affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals")[], import("convex/values").VUnion<"affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals", [import("convex/values").VLiteral<"siteSummaries", "required">, import("convex/values").VLiteral<"overview", "required">, import("convex/values").VLiteral<"liveVisitors", "required">, import("convex/values").VLiteral<"sessions", "required">, import("convex/values").VLiteral<"sessionJourney", "required">, import("convex/values").VLiteral<"conversions", "required">, import("convex/values").VLiteral<"visitorJourney", "required">, import("convex/values").VLiteral<"goals", "required">, import("convex/values").VLiteral<"funnels", "required">, import("convex/values").VLiteral<"affiliates", "required">, import("convex/values").VLiteral<"dataCoverage", "required">, import("convex/values").VLiteral<"vitals", "required">, import("convex/values").VLiteral<"siteMap", "required">, import("convex/values").VLiteral<"localDays", "required">, import("convex/values").VLiteral<"configure", "required">, import("convex/values").VLiteral<"transfer", "required">], "required", never>, "required">;
     limits: import("convex/values").VObject<{
         maxJourneyEvents: number;
         maxLiveVisitors: number;
@@ -177,21 +329,43 @@ export declare const federatedAnalyticsManifestValidator: import("convex/values"
         maxLiveVisitors: import("convex/values").VFloat64<number, "required">;
         maxJourneyEvents: import("convex/values").VFloat64<number, "required">;
     }, "required", "maxJourneyEvents" | "maxLiveVisitors" | "maxReportRangeDays" | "maxSitesPerConnection" | "maxSitesPerRequest">;
-}, "required", "capabilities" | "functions" | "functions.affiliatesReport" | "functions.connectionStatus" | "functions.dataCoverage" | "functions.funnelsReport" | "functions.goalsReport" | "functions.listConversions" | "functions.listSessions" | "functions.listSites" | "functions.liveVisitors" | "functions.manifest" | "functions.overview" | "functions.sessionJourney" | "functions.siteMap" | "functions.visitorJourney" | "functions.vitalsReport" | "limits" | "limits.maxJourneyEvents" | "limits.maxLiveVisitors" | "limits.maxReportRangeDays" | "limits.maxSitesPerConnection" | "limits.maxSitesPerRequest" | "moduleName" | "protocol" | "protocolVersion">;
+}, "required", "capabilities" | "functions" | "functions.affiliatesReport" | "functions.connectionStatus" | "functions.dataCoverage" | "functions.disableRetentionPolicy" | "functions.funnelsReport" | "functions.goalsReport" | "functions.listAffiliates" | "functions.listConversions" | "functions.listFunnels" | "functions.listGoals" | "functions.listSessions" | "functions.listSites" | "functions.liveVisitors" | "functions.manifest" | "functions.overview" | "functions.removeAffiliate" | "functions.removeFunnel" | "functions.removeGoal" | "functions.retentionStatus" | "functions.sessionJourney" | "functions.setRetentionPolicy" | "functions.siteMap" | "functions.siteSettings" | "functions.transferConnection" | "functions.updateSite" | "functions.upsertAffiliate" | "functions.upsertFunnel" | "functions.upsertGoal" | "functions.visitorJourney" | "functions.vitalsReport" | "limits" | "limits.maxJourneyEvents" | "limits.maxLiveVisitors" | "limits.maxReportRangeDays" | "limits.maxSitesPerConnection" | "limits.maxSitesPerRequest" | "moduleName" | "protocol" | "protocolVersion">;
 export declare const federatedAnalyticsConnectionStatusValidator: import("convex/values").VObject<{
-    capabilities: ("affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals")[];
+    capabilities: ("affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals")[];
+    permissions: ("analytics:configure" | "analytics:public" | "analytics:read")[];
     protocolVersion: 1;
     siteCount: number;
     status: "connected";
 }, {
     status: import("convex/values").VLiteral<"connected", "required">;
     protocolVersion: import("convex/values").VLiteral<1, "required">;
-    capabilities: import("convex/values").VArray<("affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals")[], import("convex/values").VUnion<"affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals", [import("convex/values").VLiteral<"siteSummaries", "required">, import("convex/values").VLiteral<"overview", "required">, import("convex/values").VLiteral<"liveVisitors", "required">, import("convex/values").VLiteral<"sessions", "required">, import("convex/values").VLiteral<"sessionJourney", "required">, import("convex/values").VLiteral<"conversions", "required">, import("convex/values").VLiteral<"visitorJourney", "required">, import("convex/values").VLiteral<"goals", "required">, import("convex/values").VLiteral<"funnels", "required">, import("convex/values").VLiteral<"affiliates", "required">, import("convex/values").VLiteral<"dataCoverage", "required">, import("convex/values").VLiteral<"vitals", "required">, import("convex/values").VLiteral<"siteMap", "required">], "required", never>, "required">;
+    capabilities: import("convex/values").VArray<("affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals")[], import("convex/values").VUnion<"affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals", [import("convex/values").VLiteral<"siteSummaries", "required">, import("convex/values").VLiteral<"overview", "required">, import("convex/values").VLiteral<"liveVisitors", "required">, import("convex/values").VLiteral<"sessions", "required">, import("convex/values").VLiteral<"sessionJourney", "required">, import("convex/values").VLiteral<"conversions", "required">, import("convex/values").VLiteral<"visitorJourney", "required">, import("convex/values").VLiteral<"goals", "required">, import("convex/values").VLiteral<"funnels", "required">, import("convex/values").VLiteral<"affiliates", "required">, import("convex/values").VLiteral<"dataCoverage", "required">, import("convex/values").VLiteral<"vitals", "required">, import("convex/values").VLiteral<"siteMap", "required">, import("convex/values").VLiteral<"localDays", "required">, import("convex/values").VLiteral<"configure", "required">, import("convex/values").VLiteral<"transfer", "required">], "required", never>, "required">;
+    permissions: import("convex/values").VArray<("analytics:configure" | "analytics:public" | "analytics:read")[], import("convex/values").VUnion<"analytics:configure" | "analytics:public" | "analytics:read", [import("convex/values").VLiteral<"analytics:read", "required">, import("convex/values").VLiteral<"analytics:configure", "required">, import("convex/values").VLiteral<"analytics:public", "required">], "required", never>, "required">;
     siteCount: import("convex/values").VFloat64<number, "required">;
-}, "required", "capabilities" | "protocolVersion" | "siteCount" | "status">;
+}, "required", "capabilities" | "permissions" | "protocolVersion" | "siteCount" | "status">;
+/**
+ * The permissions a request may act with: those the token claims that the
+ * host's grant also lists. Reading needs no listing — a grant is a read grant
+ * by definition — so a token claiming `analytics:read` always reads, and the
+ * configure scope rides on it. A public token claims `analytics:public`
+ * instead of reading, and holds it only when the grant lists it.
+ */
+export declare function effectiveFederatedPermissions(claimed: readonly string[], connection: Pick<FederatedAnalyticsConnection, "permissions">): FederatedAnalyticsPermission[];
+/**
+ * Whether `effective` permissions reach an operation that needs `required`:
+ * `analytics:public` names an operation a public token may run, and a reader
+ * or a configurer reaches it too; `analytics:read` needs a reader.
+ */
+export declare function federatedPermissionSatisfies(effective: readonly FederatedAnalyticsPermission[], required: FederatedAnalyticsPermission): boolean;
+/** A public link's token: it holds the public permission and cannot read. */
+export declare function isPublicFederatedAccess(effective: readonly FederatedAnalyticsPermission[]): boolean;
 export declare const federatedSiteSummaryValidator: import("convex/values").VObject<{
     cookieless: boolean;
     currency: string;
+    localDays: {
+        since: number;
+        timezone: string;
+    } | null;
     name: string;
     siteId: string;
     timezone: string | null;
@@ -201,8 +375,18 @@ export declare const federatedSiteSummaryValidator: import("convex/values").VObj
     currency: import("convex/values").VString<string, "required">;
     timezone: import("convex/values").VUnion<string | null, [import("convex/values").VString<string, "required">, import("convex/values").VNull<null, "required">], "required", never>;
     cookieless: import("convex/values").VBoolean<boolean, "required">;
-}, "required", "cookieless" | "currency" | "name" | "siteId" | "timezone">;
-export declare function createFederatedAnalyticsManifest(): {
+    localDays: import("convex/values").VUnion<{
+        since: number;
+        timezone: string;
+    } | null, [import("convex/values").VObject<{
+        since: number;
+        timezone: string;
+    }, {
+        timezone: import("convex/values").VString<string, "required">;
+        since: import("convex/values").VFloat64<number, "required">;
+    }, "required", "since" | "timezone">, import("convex/values").VNull<null, "required">], "required", "since" | "timezone">;
+}, "required", "cookieless" | "currency" | "localDays" | "localDays.since" | "localDays.timezone" | "name" | "siteId" | "timezone">;
+export declare function createFederatedAnalyticsManifest(transfer?: boolean): {
     protocol: "amage-rastro-analytics";
     protocolVersion: 1;
     moduleName: "rastroFederation";
@@ -220,10 +404,25 @@ export declare function createFederatedAnalyticsManifest(): {
         funnelsReport: "funnelsReport";
         affiliatesReport: "affiliatesReport";
         dataCoverage: "dataCoverage";
+        siteSettings: "siteSettings";
+        updateSite: "updateSite";
+        listGoals: "listGoals";
+        upsertGoal: "upsertGoal";
+        removeGoal: "removeGoal";
+        listFunnels: "listFunnels";
+        upsertFunnel: "upsertFunnel";
+        removeFunnel: "removeFunnel";
+        listAffiliates: "listAffiliates";
+        upsertAffiliate: "upsertAffiliate";
+        removeAffiliate: "removeAffiliate";
+        retentionStatus: "retentionStatus";
+        setRetentionPolicy: "setRetentionPolicy";
+        disableRetentionPolicy: "disableRetentionPolicy";
         vitalsReport: "vitalsReport";
         siteMap: "siteMap";
+        transferConnection?: "transferConnection" | undefined;
     };
-    capabilities: ("affiliates" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "visitorJourney" | "vitals")[];
+    capabilities: ("affiliates" | "configure" | "conversions" | "dataCoverage" | "funnels" | "goals" | "liveVisitors" | "localDays" | "overview" | "sessionJourney" | "sessions" | "siteMap" | "siteSummaries" | "transfer" | "visitorJourney" | "vitals")[];
     limits: {
         maxSitesPerRequest: 10;
         maxSitesPerConnection: 10;
@@ -232,5 +431,7 @@ export declare function createFederatedAnalyticsManifest(): {
         maxJourneyEvents: 500;
     };
 };
-export declare function createFederatedAnalyticsConnectionAuthorizer(options: FederatedAnalyticsAuthorizerOptions): (ctx: AnalyticsAuthorizationContext, requestedSiteIds?: readonly string[]) => Promise<FederatedAnalyticsConnection>;
+export declare function createFederatedAnalyticsConnectionAuthorizer(options: FederatedAnalyticsAuthorizerOptions): (ctx: AnalyticsAuthorizationContext, requestedSiteIds?: readonly string[], requiredPermission?: FederatedAnalyticsPermission) => Promise<AuthorizedFederatedAnalyticsConnection>;
+/** Only a server-issued, destination-bound intent may change a local grant. */
+export declare function transferFederatedAnalyticsConnection(ctx: GenericMutationCtx<GenericDataModel>, options: FederatedAnalyticsAuthorizerOptions): Promise<null>;
 //# sourceMappingURL=federation.d.ts.map

package/dist/client/federation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"federation.d.ts","sourceRoot":"","sources":["../../src/client/federation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAEhE,eAAO,MAAM,0BAA0B;2BACvB,sBAAsB;6BACpB,wBAAwB;0BAC3B,oBAAoB;EACxB,CAAC;AAEZ,eAAO,MAAM,mCAAmC,mBAAmB,CAAC;AAEpE,eAAO,MAAM,+BAA+B;8BACzB,4BAA4B;8BAC5B,4BAA4B;6BAC7B,2BAA2B;gCACxB,8BAA8B;4BAClC,0BAA0B;0BAC5B,wBAAwB;EAC5B,CAAC;AAGZ;;;;GAIG;AACH,eAAO,MAAM,sCAAsC;uBACvC,UAAU;+BACF,kBAAkB;wBACzB,WAAW;uBACZ,UAAU;2BACN,cAAc;2BACd,cAAc;6BACZ,gBAAgB;8BACf,iBAAiB;6BAClB,gBAAgB;0BACnB,aAAa;4BACX,eAAe;+BACZ,kBAAkB;2BACtB,cAAc;EACnB,CAAC;AACZ,eAAO,MAAM,yCAAyC,yKAY3C,CAAC;AAmBZ,eAAO,MAAM,sCAAsC;uBACvC,wBAAwB;8BACjB,CAAC;yBACN,kBAAkB;;2BAhDpB,UAAU;mCACF,kBAAkB;4BACzB,WAAW;2BACZ,UAAU;+BACN,cAAc;+BACd,cAAc;iCACZ,gBAAgB;kCACf,iBAAiB;iCAClB,gBAAgB;8BACnB,aAAa;gCACX,eAAe;mCACZ,kBAAkB;+BACtB,cAAc;+BAiBd,cAAc;0BACnB,SAAS;;;;;;;;;;EAsBT,CAAC;AAKZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,OAAO,+BAA+B,CAAC,CAAC;AACzF,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,sCAAsC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvE,MAAM,MAAM,0BAA0B,GAAG,UAAU,CACjD,OAAO,gCAAgC,CACxC,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,CAAC,CAAC;IACnB,YAAY,EAAE,4BAA4B,EAAE,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mCAAmC,GAAG,CAChD,GAAG,EAAE,6BAA6B,EAClC,QAAQ,EAAE,0BAA0B,KAElC,4BAA4B,GAC5B,IAAI,GACJ,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;AAEjD,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,mCAAmC,CAAC;CACxD;AAkBD,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+oBA+B9C,CAAC;AAEH,eAAO,MAAM,2CAA2C;;;;;;;;;;2EAKtD,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;0EAMxC,CAAC;AAEH,wBAAgB,gCAAgC;cA5HpC,wBAAwB;qBACjB,CAAC;gBACN,kBAAkB;;kBAhDpB,UAAU;0BACF,kBAAkB;mBACzB,WAAW;kBACZ,UAAU;sBACN,cAAc;sBACd,cAAc;wBACZ,gBAAgB;yBACf,iBAAiB;wBAClB,gBAAgB;qBACnB,aAAa;uBACX,eAAe;0BACZ,kBAAkB;sBACtB,cAAc;sBAiBd,cAAc;iBACnB,SAAS;;;;;;;;;;EAmJnB;AAED,wBAAgB,4CAA4C,CAC1D,OAAO,EAAE,mCAAmC,SAUrC,6BAA6B,qBACf,SAAS,MAAM,EAAE,KACnC,OAAO,CAAC,4BAA4B,CAAC,CA0EzC"}
+{"version":3,"file":"federation.d.ts","sourceRoot":"","sources":["../../src/client/federation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACb,MAAM,eAAe,CAAC;AAQvB,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AAEhE,eAAO,MAAM,0BAA0B;2BACvB,sBAAsB;6BACpB,wBAAwB;0BAC3B,oBAAoB;sBACxB,2BAA2B;yBACxB,oBAAoB;IAChC;;;OAGG;sBACM,iBAAiB;EACjB,CAAC;AAEZ,eAAO,MAAM,mCAAmC,mBAAmB,CAAC;AACpE;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,wBAAwB,CAAC;AAC9E;;;;;;;GAOG;AACH,eAAO,MAAM,qCAAqC,qBAAqB,CAAC;AACxE,eAAO,MAAM,+BAA+B,wEAIjC,CAAC;AAEZ,eAAO,MAAM,+BAA+B;8BACzB,4BAA4B;8BAC5B,4BAA4B;6BAC7B,2BAA2B;gCACxB,8BAA8B;4BAClC,0BAA0B;0BAC5B,wBAAwB;kCAChB,gCAAgC;+BACnC,6BAA6B;EACtC,CAAC;AAGZ;;;;GAIG;AACH,eAAO,MAAM,sCAAsC;uBACvC,UAAU;+BACF,kBAAkB;wBACzB,WAAW;uBACZ,UAAU;2BACN,cAAc;2BACd,cAAc;6BACZ,gBAAgB;8BACf,iBAAiB;6BAClB,gBAAgB;0BACnB,aAAa;4BACX,eAAe;+BACZ,kBAAkB;2BACtB,cAAc;EACnB,CAAC;AACZ,eAAO,MAAM,yCAAyC,yKAY3C,CAAC;AACZ;;;;GAIG;AACH,eAAO,MAAM,uCAAuC;2BACpC,cAAc;yBAChB,YAAY;wBACb,WAAW;yBACV,YAAY;yBACZ,YAAY;0BACX,aAAa;2BACZ,cAAc;2BACd,cAAc;6BACZ,gBAAgB;8BACf,iBAAiB;8BACjB,iBAAiB;8BACjB,iBAAiB;iCACd,oBAAoB;qCAChB,wBAAwB;EACvC,CAAC;AACZ;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC;uBACrC,UAAU;+BACF,kBAAkB;wBACzB,WAAW;uBACZ,UAAU;2BACN,cAAc;2BACd,cAAc;EACnB,CAAC;AAwBZ,eAAO,MAAM,sCAAsC;uBACvC,wBAAwB;8BACjB,CAAC;yBACN,kBAAkB;;2BAzFpB,UAAU;mCACF,kBAAkB;4BACzB,WAAW;2BACZ,UAAU;+BACN,cAAc;+BACd,cAAc;iCACZ,gBAAgB;kCACf,iBAAiB;iCAClB,gBAAgB;8BACnB,aAAa;gCACX,eAAe;mCACZ,kBAAkB;+BACtB,cAAc;+BAqBd,cAAc;6BAChB,YAAY;4BACb,WAAW;6BACV,YAAY;6BACZ,YAAY;8BACX,aAAa;+BACZ,cAAc;+BACd,cAAc;iCACZ,gBAAgB;kCACf,iBAAiB;kCACjB,iBAAiB;kCACjB,iBAAiB;qCACd,oBAAoB;yCAChB,wBAAwB;+BAmBlC,cAAc;0BACnB,SAAS;;;;;;;;;;EA2BT,CAAC;AAKZ,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,OAAO,+BAA+B,CAAC,CAAC;AACzF,MAAM,MAAM,4BAA4B,GACpC,CAAC,OAAO,sCAAsC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GACpE,UAAU,CAAC;AACf,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,0BAA0B,GAAG,UAAU,CACjD,OAAO,gCAAgC,CACxC,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,CAAC,CAAC;IACnB,YAAY,EAAE,4BAA4B,EAAE,CAAC;IAC7C,oEAAoE;IACpE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4EAA4E;AAC5E,MAAM,MAAM,sCAAsC,GAChD,4BAA4B,GAAG;IAC7B,oBAAoB,EAAE,4BAA4B,EAAE,CAAC;CACtD,CAAC;AAEJ,MAAM,MAAM,mCAAmC,GAAG,CAChD,GAAG,EAAE,6BAA6B,EAClC,QAAQ,EAAE,0BAA0B,KAElC,4BAA4B,GAC5B,IAAI,GACJ,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;AAEjD,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,mCAAmC,CAAC;IACvD,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,CACnB,GAAG,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,EACzC,UAAU,EAAE;QACV,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;KACjB,KACE,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAoBD,eAAO,MAAM,qCAAqC,2TAIjD,CAAC;AAEF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2jCA8C9C,CAAC;AAEH,eAAO,MAAM,2CAA2C;;;;;;;;;;;;2FAMtD,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,IAAI,CAAC,4BAA4B,EAAE,aAAa,CAAC,GAC5D,4BAA4B,EAAE,CAUhC;AAUD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,SAAS,4BAA4B,EAAE,EAClD,QAAQ,EAAE,4BAA4B,GACrC,OAAO,CAMT;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,4BAA4B,EAAE,GACjD,OAAO,CAKT;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;mIAUxC,CAAC;AAEH,wBAAgB,gCAAgC,CAAC,QAAQ,UAAQ;cAnPrD,wBAAwB;qBACjB,CAAC;gBACN,kBAAkB;;kBAzFpB,UAAU;0BACF,kBAAkB;mBACzB,WAAW;kBACZ,UAAU;sBACN,cAAc;sBACd,cAAc;wBACZ,gBAAgB;yBACf,iBAAiB;wBAClB,gBAAgB;qBACnB,aAAa;uBACX,eAAe;0BACZ,kBAAkB;sBACtB,cAAc;sBAqBd,cAAc;oBAChB,YAAY;mBACb,WAAW;oBACV,YAAY;oBACZ,YAAY;qBACX,aAAa;sBACZ,cAAc;sBACd,cAAc;wBACZ,gBAAgB;yBACf,iBAAiB;yBACjB,iBAAiB;yBACjB,iBAAiB;4BACd,oBAAoB;gCAChB,wBAAwB;sBAmBlC,cAAc;iBACnB,SAAS;;;;;;;;;;;EAuRnB;AAED,wBAAgB,4CAA4C,CAC1D,OAAO,EAAE,mCAAmC,SAUrC,6BAA6B,qBACf,SAAS,MAAM,EAAE,uBAChB,4BAA4B,KAC/C,OAAO,CAAC,sCAAsC,CAAC,CA8HnD;AAED,+EAA+E;AAC/E,wBAAsB,oCAAoC,CACxD,GAAG,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,EACzC,OAAO,EAAE,mCAAmC,iBAsE7C"}