@itm-studio/partner-sdk 0.4.0 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itm-studio/partner-sdk",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "TypeScript SDK for the ITM Partner API — typed GraphQL client with zero introspection required",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/schema/partner.graphql

@@ -1612,7 +1612,160 @@ type PartnerMembershipTier {
   yearlyPrice: Int
 }
 
+# Login with ITM apps and headless partner login
+"""Whether a Login with ITM app can sign users in."""
+enum BrandAppStatus {
+  ACTIVE
+  DISABLED
+}
+
+enum ConsentChannel {
+  EMAIL
+  PUSH
+  SMS
+}
+
+enum ConsentPromptCategory {
+  CUSTOM
+  MARKETING
+  PRIVACY
+  TERMS
+}
+
+enum LoginCodeChannel {
+  CALL
+  EMAIL
+  SMS
+  WHATSAPP
+}
+
+"""
+A brand-owned Login with ITM application: a public OAuth/OIDC client that uses PKCE and has no secret.
+"""
+type BrandApp {
+  """Public OAuth client_id. It is not a secret."""
+  clientId: String!
+  createdAt: DateTime!
+
+  """
+  OpenID Connect issuer URL apps authenticate against; null when Login with ITM is not configured.
+  """
+  issuer: String
+  name: String!
+
+  """
+  Exact redirect URIs. All share one origin; that origin may call the token and userinfo endpoints and hand logins to ITM embeds.
+  """
+  redirectUris: [String!]!
+  status: BrandAppStatus!
+  uid: String!
+}
+
+input CreateBrandAppInput {
+  name: String!
+
+  """
+  Exact https redirect URIs (http is allowed only for localhost) on a single origin.
+  """
+  redirectUris: [String!]!
+}
+
+type CheckoutMarketingConsentPrompt {
+  bodyMarkdown: String
+  category: ConsentPromptCategory!
+  channels: [ConsentChannel!]!
+  labelMarkdown: String!
+  promptUid: String!
+  required: Boolean!
+  version: Int!
+}
+
+input CheckoutMarketingConsentInput {
+  accepted: Boolean!
+  language: String
+  pageUrl: String
+  referrerUrl: String
+  screenHeight: Int
+  screenWidth: Int
+  submittedAt: DateTime
+  timezone: String
+}
+
+"""
+Starts a headless Login with ITM sign-in from the brand's server: ITM sends a code that only verifyPartnerAppLogin accepts for this app and partner credential.
+"""
+input StartPartnerAppLoginInput {
+  """The app's public client ID."""
+  clientId: String!
+
+  """
+  The visitor's request details. ipAddress (the visitor's, not your server's) is required.
+  """
+  compliance: SubscriptionComplianceInput!
+
+  """Phone number or email address."""
+  identifier: String!
+}
+
+type PartnerAppLoginChallenge {
+  channel: LoginCodeChannel!
+  destinationHint: String
+
+  """
+  Show this text verbatim with the code field: it is what signing in shares.
+  """
+  disclosure: String!
+  expiresAt: DateTime!
+
+  """
+  Optional marketing opt-in. Render verbatim as an unchecked checkbox; signing in must not depend on it.
+  """
+  marketingConsentPrompt: CheckoutMarketingConsentPrompt!
+}
+
+input VerifyPartnerAppLoginInput {
+  clientId: String!
+  code: String!
+
+  """The visitor's request details. ipAddress is required."""
+  compliance: SubscriptionComplianceInput!
+
+  """
+  The identifier the code was sent to. Read it from your own session, not from the browser.
+  """
+  identifier: String!
+
+  """
+  Send only when the visitor ticked the opt-in (accepted: true; pageUrl here or in compliance). Omit it otherwise; omission never unsubscribes anyone.
+  """
+  marketingConsent: CheckoutMarketingConsentInput
+}
+
+type PartnerAppLoginProfile {
+  email: String
+  emailVerified: Boolean!
+  name: String
+  phoneNumber: String
+  phoneVerified: Boolean!
+}
+
+"""
+A completed headless sign-in. It is not a credential: keep your own session keyed by customerUid.
+"""
+type PartnerAppLogin {
+  """
+  The person's customer UID for your brand (getPartnerAudience customer uid).
+  """
+  customerUid: String!
+  profile: PartnerAppLoginProfile!
+}
+
 type Query {
+  """
+  The brand's Login with ITM apps (at most 20), oldest first. Deleted apps are omitted.
+  """
+  getPartnerBrandApps: [BrandApp!]!
+
   """List the authenticated partner brand's membership rows; PENDING is excluded by default."""
   getPartnerMembers(input: GetPartnerMembersInput): GetPartnerMembersResponse!
 
@@ -2180,6 +2333,26 @@ type CreatePartnerBrandSubscriptionResponse {
 # ─── Mutations ────────────────────────────────────────────────────────────────
 
 type Mutation {
+  """
+  Registers a Login with ITM app for the brand. A brand can have up to 20 apps.
+  """
+  createPartnerBrandApp(input: CreateBrandAppInput!): BrandApp!
+
+  """
+  Disables an app: new logins stop and its tokens and remembered consents are revoked immediately. A partner key cannot re-enable it; ask ITM.
+  """
+  disablePartnerBrandApp(appUid: String!): BrandApp!
+
+  """
+  Sends a Login with ITM code for the brand's own sign-in form. Call it from your server; the response is the same whether or not the person has an ITM account.
+  """
+  startPartnerAppLogin(input: StartPartnerAppLoginInput!): PartnerAppLoginChallenge!
+
+  """
+  Completes a headless sign-in: checks the code, adds the person to the brand's contacts and records an optional opt-in. Returns no ITM credential.
+  """
+  verifyPartnerAppLogin(input: VerifyPartnerAppLoginInput!): PartnerAppLogin!
+
   """Log a payment received off-site. Brand scope comes from the authenticated token or agent session. Amount is in ITM cents (major units times 100). Retain requestUid across retries."""
   createPartnerManualContribution(input: CreateManualContributionInput!): ContributionAdmin!