@joai/sdk 8.0.0 → 9.0.1

package/README.md

@@ -0,0 +1,115 @@
+# @joai/sdk
+
+The React entry point contains reusable building blocks for editable content on client websites. The components stay domain-neutral: sites provide identifiers, copy, styling hooks, and rendered fields; the SDK owns session handoff and the editing lifecycle.
+
+## Managed content editor
+
+```tsx
+import { ManagedContentEditor } from '@joai/react'
+
+<ManagedContentEditor
+  config={{
+    contentId: 'content-id',
+    publicSlug: 'website-content',
+    sessionStorageKey: 'website-content-session',
+    team: 'team-slug',
+  }}
+  initialContent={content}
+  title="Inhalte bearbeiten"
+  labels={{
+    edit: 'Bearbeiten',
+    save: 'Entwurf speichern',
+    saving: 'Wird gespeichert …',
+    publish: 'Veröffentlichen',
+    publishing: 'Wird veröffentlicht …',
+    cancel: 'Abbrechen',
+    toolbar: 'Inhaltseditor',
+    unsaved: 'Nicht gespeicherte Änderungen',
+  }}
+  messages={{
+    conflict: 'Der Inhalt wurde zwischenzeitlich geändert. Deine Eingaben bleiben erhalten. Bitte prüfe sie und versuche es erneut.',
+    loadError: 'Der Inhalt konnte nicht geladen werden.',
+    publishError: 'Die Änderungen konnten nicht veröffentlicht werden.',
+    published: 'Die Änderungen wurden veröffentlicht.',
+    saveError: 'Der Entwurf konnte nicht gespeichert werden.',
+    saved: 'Der Entwurf wurde gespeichert.',
+    sessionExpired: 'Deine Sitzung ist abgelaufen.',
+    unsavedNavigation: 'Du hast nicht gespeicherte Änderungen. Seite wirklich verlassen?',
+  }}
+  imagePickerLabels={{
+    applyCrop: 'Zuschnitt übernehmen',
+    back: 'Zurück',
+    choose: 'Bild auswählen',
+    close: 'Schließen',
+    cropDescription: 'Passe Bildausschnitt und Zoom vor dem Hochladen an.',
+    cropTitle: 'Bild zuschneiden',
+    dimensionsTooLarge: 'Die Bildabmessungen sind zu groß.',
+    dimensionsTooSmall: 'Die Bildabmessungen sind zu klein.',
+    drop: 'Bild hier ablegen',
+    empty: 'Noch keine Bilder vorhanden.',
+    field: 'Bearbeitbares Bild',
+    invalidType: 'Bitte wähle eine Bilddatei.',
+    libraryDescription: 'Wähle ein vorhandenes Bild oder lade ein neues hoch.',
+    libraryTitle: 'Bildmediathek',
+    loadError: 'Bilder konnten nicht geladen werden.',
+    loading: 'Bilder werden geladen …',
+    positionHorizontal: 'Horizontale Position',
+    positionVertical: 'Vertikale Position',
+    processing: 'Bild wird vorbereitet …',
+    retry: 'Erneut versuchen',
+    tooLarge: 'Das Bild ist zu groß.',
+    upload: 'Bild hochladen',
+    uploadError: 'Das Bild konnte nicht hochgeladen werden.',
+    uploading: 'Wird hochgeladen …',
+    zoom: 'Zoom',
+  }}
+  reauthenticateLabel="Anmeldung erneuern"
+  sessionExpiredMessage="Deine Sitzung ist abgelaufen. Deine lokalen Änderungen bleiben erhalten."
+  confirmCancel={() => window.confirm('Nicht gespeicherte Änderungen verwerfen?')}
+  confirmLeave={() => window.confirm('Du hast nicht gespeicherte Änderungen. Seite wirklich verlassen?')}
+  confirmPublish={() => window.confirm('Änderungen jetzt veröffentlichen?')}
+>
+  {children}
+</ManagedContentEditor>
+```
+
+Use `EditableContent`, `EditableImage`, and `useContentValue` from `@joai/react` inside the editor. Pass server-fetched public content as `initialContent` to avoid a client-side loading state for visitors.
+
+Configure each image field as a reusable, domain-neutral building block. Images are compressed to WebP at up to 2560 × 2560 pixels by default, while animated GIF and SVG files retain their original format. Cropping is opt-in per field:
+
+```tsx
+<EditableImage
+  field="heroImage"
+  label="Titelbild"
+  maxSourceBytes={40 * 1024 * 1024}
+  maxUploadBytes={5 * 1024 * 1024}
+  processing={{
+    crop: { aspectRatio: 16 / 9, outputWidth: 1920 },
+    compression: { maxWidth: 1920, maxHeight: 1080, mimeType: 'image/webp', quality: 0.84 },
+    dimensions: { minWidth: 1280, minHeight: 720, maxPixels: 50_000_000 },
+  }}
+/>
+```
+
+Set `compression: false` or `dimensions: false` to disable only that stage, or `processing={false}` to upload the original image without client-side decoding, validation, cropping, or compression.
+
+## Session storage
+
+`useContentSession` and `createSessionTokenStore` are exported for custom shells. A custom `SessionTokenStore` can be injected when a host needs a different persistence mechanism. The URL fragment containing the one-time handoff token is removed before it is exchanged and persisted.
+
+The managed editor automatically adds `platform=app` to its reauthentication return URL so JoAi returns a one-time handoff token. Override `reauthenticateUrl` only when a host has a dedicated login callback.
+
+`createContentDraftStore` uses `sessionStorage` by default. `ManagedContentEditor` wires it automatically so unsaved values survive refreshes and expired-session reauthentication without being shared across browser sessions.
+
+## Editing behavior
+
+- Cancel restores the currently loaded version.
+- Save is disabled when there are no local changes.
+- A dirty publish saves and publishes with one request.
+- Network failures keep local edits available for retry.
+- Refresh, close, and link/navigation attempts warn while edits are unsaved.
+- Editable text and image fields are visibly labelled in edit mode.
+- The image library supports loading, empty, error, byte/dimension validation, cropping, compression, keyboard, focus, and drag-and-drop states.
+- Expired authorization offers a sign-in action and restores locally persisted edits afterwards.
+- Version conflicts load the latest version while preserving local edits.
+- Public content cache entries are invalidated after authenticated mutations.

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as _$_joai_core0 from "@joai/core";
-import { Address, AddressCreatePayload, AddressInput, AddressType, AddressUpdatePayload, Affiliate, AffiliateTier, Agent, AgentActionHistoryEntry, AgentPrivate, AgentSettings, AgentTrustedActionRule, AiCostsResponse, Alert, ApiToken, AppEnv, AppIngestion, AppendKvEntryResult, AppointmentAvailability, AppointmentBooking, AppointmentPolicy, AppointmentPolicyUpsert, AppointmentRequest, Artifact, ArtifactCreatePayload, ArtifactDeliverPayload, ArtifactDelivery, ArtifactStatus, ArtifactType, ArtifactUpdatePayload, AuthUser, AuthUser as AuthUser$1, Automation, AutomationActionInput, AutomationAudiencePreview, AutomationCreatePayload, AutomationEnrollment, AutomationStats, AutomationUpdatePayload, Blueprint, BlueprintSettings, BrandBackend, BrandSiteConfig, BrandSourceConfig, CalendarStatus, Campaign, CampaignAudiencePreview, CampaignAudiencePreviewPayload, CampaignCreatePayload, CampaignRecipient, CampaignRecipientStatus, CampaignStats, CampaignUpdatePayload, Card, Cart, Cart as Cart$1, CartLine, ChangelogEntry, Character, CheckoutSnapshot, CheckoutSnapshot as CheckoutSnapshot$1, CheckoutSnapshotRequest, CommissionAgreement, Configuration, Contact, ContactActivity, ContactCreatePayload, ContactFormData, ContactRelation, ContactRelationPayload, ContactRelationUpdatePayload, Content, ContentVersion, Contract, ContractCategoryName, ContractVersion, Coupon, CouponCondition, CouponRestrictedItem, CreateContentInput, CreateHookPayload, CreateHookPayload as CreateHookPayload$1, CreateInboundHookPayload, CreateInternalHookPayload, CreateKvFieldPayload, CreateWarpLinkedHookPayload, CreateWebHookPayload, Document, EarnResponse, Element, ElementSpec, ElementVariation, EmbedStatus, Entity, Flow, Fulfillment, FulfillmentLocation, FulfillmentLocation as FulfillmentLocation$1, FulfillmentMethod, GamificationData, Goal, GoalCreatePayload, GuestBuyer, GuestBuyer as GuestBuyer$1, Hook, Hook as Hook$1, HookSample, HookSample as HookSample$1, HookTrigger, HookTriggerCondition, HookTriggerInput, IAppResponse, IHttpService, IRequestOptions, Inquiry, InquiryType, Integration, IntegrationType, Intent, Item, ItemCreatePayload, ItemUpdatePayload, JsonValue, KvEntryPayload, KvField, KvFieldWithEntries, Link, LinkCreatePayload, LinkStats, LinkUpdatePayload, LinkVariation, LinkVariationBatchCreatePayload, LinkVariationCreatePayload, LoyaltyAccount, LoyaltyMember, LoyaltyProgram, LoyaltyPromotion, LoyaltyReward, LoyaltyTier, LoyaltyTransaction, McpToolCall, Media, MediaAspectRatio, Meeting, MeetingJoinInfo, MeetingSpeakerAssignment, MeetingSummary, Memory, Message, MetricSource, MetricsResult, Mission, MissionCreatePayload, Notification, NotificationChannel, NotificationSetting, OfficeSnapshot, Order, Order as Order$1, OrderContext, OrderPriceMode, OrderPriceMode as OrderPriceMode$1, OrderStatus, OrderStatus as OrderStatus$1, OrderType, PaginatedResponse, Pass, PatchContentInput, PaymentAccount, PaymentAccountOnboarding, PaymentProvider, Plan, PlanFeature, Product, Product as Product$1, ProductDetailSection, ProductRelation, ProductVariation, ProgramSettings, Project, ProjectExportResponse, ProjectInputAssistIntent, ProjectInputAssistResponse, ProjectMutation, ProjectOutputPreset, ProjectOutputType, ProjectStudioHistoryEntry, Proposal, ProposalAction, ProposalPollOption, PublicFormResults, PurchaseResult, RampProviderInfo, Reactions, RedeemResponse, Reminder, Return, ReturnStatus, Room, RoomKind, Segment, SegmentCountPayload, SegmentCountResult, SegmentCreatePayload, Service, SetKvEntryResult, SharedSocialPost, ShippingCarrierOption, ShippingRate, ShippingRate as ShippingRate$1, ShippingZone, Shortcut, Site, SiteBrand, SiteType, Skill, SkillScopeValue, SocialAuthProvider, SocialBot, SocialPlatform, SocialPost, SocialPostConnection, SocialPostCreatePayload, SocialPostGenerateCaptionPayload, SocialPostGeneratedCaption, SocialPostPlatform, SocialPostStatus, SocialPostUpdatePayload, StampResponse, StoreAgent, StoreData, StorePriceTier, StorePurchaseResult, Subscription, Swarm, Tag, TagType, Task, TaxClass, Team, TeamAccessConfig, TeamCategory, TeamEarning, TeamEarningsBalance, TeamFeature, TeamFeatureUsage, TeamMember, TeamMeta, TeamOrderStats, TeamPayout, TeamPayoutAddress, TeamPrivate, TeamUsage, TerminalConnectionToken, TerminalPaymentIntent, ToggleKvFieldResult, TranslatableValue, Update, UpdateCreatePayload, UpdateRelation, UpdateStats, UpdateType, UpdateUpdatePayload, Upgrade, UpgradeStatus, UserPrivate, UserRole, UserSettings, VolumePrice, WarpBackend, WarpBackendStatus, WarpExecutionBackend, WebHookTriggerEvent, WorkspaceCloudFile, WorkspaceInfo, XIntegrationStatus } from "@joai/core";
+import { Address, AddressCreatePayload, AddressInput, AddressType, AddressUpdatePayload, Affiliate, AffiliateTier, Agent, AgentActionHistoryEntry, AgentPrivate, AgentSettings, AgentTrustedActionRule, AiCostsResponse, Alert, ApiToken, AppEnv, AppIngestion, AppendKvEntryResult, AppointmentAvailability, AppointmentBooking, AppointmentPolicy, AppointmentPolicyUpsert, AppointmentRequest, Artifact, ArtifactCreatePayload, ArtifactDeliverPayload, ArtifactDelivery, ArtifactDeliveryPreview, ArtifactStatus, ArtifactType, ArtifactUpdatePayload, AuthUser, AuthUser as AuthUser$1, Automation, AutomationActionInput, AutomationAudiencePreview, AutomationCreatePayload, AutomationEnrollment, AutomationStats, AutomationUpdatePayload, Blueprint, BlueprintSettings, BrandBackend, BrandSiteConfig, BrandSourceConfig, CalendarStatus, Campaign, CampaignAudiencePreview, CampaignAudiencePreviewPayload, CampaignCreatePayload, CampaignRecipient, CampaignRecipientStatus, CampaignStats, CampaignUpdatePayload, Card, Cart, Cart as Cart$1, CartLine, ChangelogEntry, Character, CheckoutSnapshot, CheckoutSnapshot as CheckoutSnapshot$1, CheckoutSnapshotRequest, CommissionAgreement, Configuration, Contact, ContactActivity, ContactCreatePayload, ContactFormData, ContactRelation, ContactRelationPayload, ContactRelationUpdatePayload, Content, ContentVersion, Contract, ContractCategoryName, ContractVersion, Coupon, CouponCondition, CouponRestrictedItem, CreateContentInput, CreateHookPayload, CreateHookPayload as CreateHookPayload$1, CreateInboundHookPayload, CreateInternalHookPayload, CreateKvFieldPayload, CreateWarpLinkedHookPayload, CreateWebHookPayload, Document, EarnResponse, Element, ElementSpec, ElementVariation, EmbedStatus, Entity, Flow, Fulfillment, FulfillmentLocation, FulfillmentLocation as FulfillmentLocation$1, FulfillmentMethod, GamificationData, Goal, GoalCreatePayload, GuestBuyer, GuestBuyer as GuestBuyer$1, Hook, Hook as Hook$1, HookSample, HookSample as HookSample$1, HookTrigger, HookTriggerCondition, HookTriggerInput, IAppResponse, IHttpService, IRequestOptions, Inquiry, InquiryType, Integration, IntegrationType, Intent, Item, ItemCreatePayload, ItemUpdatePayload, JsonValue, KvEntryPayload, KvField, KvFieldWithEntries, Link, LinkCreatePayload, LinkStats, LinkUpdatePayload, LinkVariation, LinkVariationBatchCreatePayload, LinkVariationCreatePayload, LoyaltyAccount, LoyaltyCollectPointInput, LoyaltyCollectResponse, LoyaltyJoinResponse, LoyaltyMember, LoyaltyProgram, LoyaltyPromotion, LoyaltyReward, LoyaltyTier, LoyaltyTransaction, LoyaltyWalletAccount, McpToolCall, Media, MediaAspectRatio, Meeting, MeetingJoinInfo, MeetingSpeakerAssignment, MeetingSummary, Memory, Message, MetricSource, MetricsResult, Mission, MissionCreatePayload, Notification, NotificationChannel, NotificationSetting, OfficeSnapshot, Order, Order as Order$1, OrderContext, OrderPriceMode, OrderPriceMode as OrderPriceMode$1, OrderStatus, OrderStatus as OrderStatus$1, OrderType, PaginatedResponse, Pass, PatchContentInput, PaymentAccount, PaymentAccountOnboarding, PaymentProvider, Plan, PlanFeature, Product, Product as Product$1, ProductDetailSection, ProductRelation, ProductVariation, ProgramSettings, Project, ProjectExportResponse, ProjectInputAssistIntent, ProjectInputAssistResponse, ProjectMutation, ProjectOutputPreset, ProjectOutputType, ProjectStudioHistoryEntry, Proposal, ProposalAction, ProposalPollOption, PublicFormResults, PurchaseResult, RampProviderInfo, Reactions, RedeemResponse, Reminder, Return, ReturnStatus, Room, RoomKind, Segment, SegmentCountPayload, SegmentCountResult, SegmentCreatePayload, Service, SetKvEntryResult, SharedSocialPost, ShippingCarrierOption, ShippingRate, ShippingRate as ShippingRate$1, ShippingZone, Shortcut, Site, SiteBrand, SiteType, Skill, SkillScopeValue, SocialAuthProvider, SocialBot, SocialPlatform, SocialPost, SocialPostConnection, SocialPostCreatePayload, SocialPostGenerateCaptionPayload, SocialPostGeneratedCaption, SocialPostPlatform, SocialPostStatus, SocialPostUpdatePayload, StampResponse, StoreAgent, StoreData, StorePriceTier, StorePurchaseResult, Subscription, Swarm, Tag, TagType, Task, TaxClass, Team, TeamAccessConfig, TeamCategory, TeamEarning, TeamEarningsBalance, TeamFeature, TeamFeatureUsage, TeamMember, TeamMeta, TeamOrderStats, TeamPayout, TeamPayoutAddress, TeamPrivate, TeamUsage, TerminalConnectionToken, TerminalPaymentIntent, ToggleKvFieldResult, TranslatableValue, Update, UpdateCreatePayload, UpdateRelation, UpdateStats, UpdateType, UpdateUpdatePayload, Upgrade, UpgradeStatus, UserPrivate, UserRole, UserSettings, VolumePrice, WarpBackend, WarpBackendStatus, WarpExecutionBackend, WebHookTriggerEvent, WorkspaceCloudFile, WorkspaceInfo, XIntegrationStatus } from "@joai/core";
 import { WarpChainName, WarpClient, WarpLocale, WarpText, WarpWalletProvider } from "@joai/warps";
 
 //#region src/resources/agents.d.ts
@@ -135,10 +135,11 @@ declare class FulfillmentsResource {
 declare class ReturnsResource {
   private readonly http;
   constructor(http: IHttpService);
+  listForTeam(team?: string): Promise<_$_joai_core0.IAppResponse<Return[]>>;
   list(orderId: string, accessToken?: string): Promise<_$_joai_core0.IAppResponse<Return[]>>;
   create(orderId: string, data: {
     reason: string;
-    fulfillmentId?: number;
+    fulfillmentId?: string;
     items: {
       orderItemId: number;
       quantity: number;
@@ -1143,12 +1144,37 @@ declare class LinksResource {
 declare class LoyaltyResource {
   private readonly http;
   constructor(http: IHttpService);
+  /**
+   * Program of a team. Without `team` (staff, X-Team set): every collect point; daily ones include `codeToday` and
+   * `codeValidUntil` for signed-in team members (never for agent auth keys). With `team`: public / customer view, active
+   * points only and never today's code; a customer token adds `collected`, `collectedAt` and `nextAvailableAt`.
+   */
   getProgram(params?: {
     team?: string;
   }): Promise<_$_joai_core0.IAppResponse<LoyaltyProgram>>;
+  /** Customer: join a team's program with the signed-in user's own contact. Idempotent. */
+  join(params: {
+    team: string;
+  }): Promise<_$_joai_core0.IAppResponse<LoyaltyJoinResponse>>;
+  /** Customer: all loyalty accounts of the signed-in user across teams. */
+  getWallet(): Promise<_$_joai_core0.IAppResponse<LoyaltyWalletAccount[]>>;
+  /** Customer: the signed-in user's own transactions on a team's program. */
+  getWalletHistory(params: {
+    team: string;
+    page?: number;
+  }): Promise<_$_joai_core0.IAppResponse<LoyaltyTransaction[]>>;
+  /** Customer: collect at a collect point. Joins the program if needed; replays return `already: true`. */
+  collect(params: {
+    team: string;
+    key: string;
+    code?: string;
+  }): Promise<_$_joai_core0.IAppResponse<LoyaltyCollectResponse>>;
+  /** Staff: update the program. `settings.collect_points` replaces the collect point list (see LoyaltyCollectPointInput). */
   updateProgram(data: {
     name?: string;
-    settings?: ProgramSettings;
+    settings?: ProgramSettings & {
+      collect_points?: LoyaltyCollectPointInput[];
+    };
   }): Promise<_$_joai_core0.IAppResponse<LoyaltyProgram>>;
   getRewards(): Promise<_$_joai_core0.IAppResponse<LoyaltyReward[]>>;
   createReward(data: {
@@ -1360,6 +1386,8 @@ declare class MessagesResource {
   generateAudio(messageId: string): Promise<_$_joai_core0.IAppResponse<{
     audioUrl: string;
   }>>;
+  attachMedia(messageId: string, file: File): Promise<_$_joai_core0.IAppResponse<Message>>;
+  completeMediaImport(messageId: string, file?: File | null): Promise<_$_joai_core0.IAppResponse<Message>>;
   storeFeedback(agent: string, message: string, positive: boolean, inquiry: Inquiry | null): Promise<_$_joai_core0.IAppResponse<void>>;
   toggleReaction(messageId: string, emoji: string): Promise<_$_joai_core0.IAppResponse<{
     reactions: Reactions | null;
@@ -1651,8 +1679,9 @@ declare class ServicesResource {
     taxClassId?: string | null;
     pricingModel?: string;
     settings?: Record<string, unknown> | null;
+    order?: number | null;
   }): Promise<_$_joai_core0.IAppResponse<Service>>;
-  update(id: string, data: Partial<Pick<Service, 'name' | 'price' | 'description' | 'active' | 'digital' | 'public' | 'bookable' | 'taxClassId'>> & {
+  update(id: string, data: Partial<Pick<Service, 'name' | 'price' | 'description' | 'active' | 'digital' | 'public' | 'bookable' | 'taxClassId' | 'order'>> & {
     durationMinutes?: number | null;
     settings?: Record<string, unknown> | null;
   }): Promise<_$_joai_core0.IAppResponse<Service>>;
@@ -1883,6 +1912,7 @@ declare class TeamsResource {
   }): Promise<_$_joai_core0.IAppResponse<void>>;
   inviteMember(teamSlug: string, email: string, role: UserRole): Promise<_$_joai_core0.IAppResponse<void>>;
   removeMember(teamSlug: string, memberId: string): Promise<_$_joai_core0.IAppResponse<void>>;
+  updateMemberRole(teamSlug: string, memberId: string, role: UserRole): Promise<_$_joai_core0.IAppResponse<void>>;
   listMembers(teamSlug: string): Promise<_$_joai_core0.IAppResponse<TeamMember[]>>;
   updateLogo(teamSlug: string, logo: string[]): Promise<_$_joai_core0.IAppResponse<TeamPrivate>>;
   updateCover(teamSlug: string, cover: string[]): Promise<_$_joai_core0.IAppResponse<TeamPrivate>>;
@@ -1922,6 +1952,7 @@ declare class ArtifactsResource {
   update(id: string, payload: ArtifactUpdatePayload): Promise<_$_joai_core0.IAppResponse<Artifact>>;
   delete(id: string): Promise<_$_joai_core0.IAppResponse<void>>;
   deliver(payload: ArtifactDeliverPayload): Promise<_$_joai_core0.IAppResponse<ArtifactDelivery[]>>;
+  previewDelivery(payload: ArtifactDeliverPayload): Promise<_$_joai_core0.IAppResponse<ArtifactDeliveryPreview>>;
 }
 //#endregion
 //#region src/resources/campaigns.d.ts
@@ -2404,16 +2435,15 @@ type OpenPortalSessionOptions = {
   client: PortalClient;
   redirect: string;
   allowedOrigins: string[];
-  env?: AppEnv;
-  fetcher?: typeof fetch;
-  onNavigate?: (redirect: string) => void;
+  env?: AppEnv; /** @deprecated Unused — exchange happens via same-origin blade form after navigation. */
+  fetcher?: typeof fetch; /** Receives the API callback URL (with fragment token), not the final portal redirect. */
+  onNavigate?: (callbackUrl: string) => void;
 };
 declare const openPortalSession: ({
   client,
   redirect,
   allowedOrigins,
   env,
-  fetcher,
   onNavigate
 }: OpenPortalSessionOptions) => Promise<boolean>;
 //#endregion

package/dist/index.mjs

@@ -180,6 +180,9 @@ var ReturnsResource = class {
 	constructor(http) {
 		this.http = http;
 	}
+	listForTeam(team) {
+		return this.http.get("returns", team ? { headers: { "X-Team": team } } : void 0);
+	}
 	list(orderId, accessToken) {
 		return this.http.get(`orders/${orderId}/returns`, orderAccessHeaders$2(accessToken));
 	}
@@ -1736,10 +1739,33 @@ var LoyaltyResource = class {
 	constructor(http) {
 		this.http = http;
 	}
+	/**
+	* Program of a team. Without `team` (staff, X-Team set): every collect point; daily ones include `codeToday` and
+	* `codeValidUntil` for signed-in team members (never for agent auth keys). With `team`: public / customer view, active
+	* points only and never today's code; a customer token adds `collected`, `collectedAt` and `nextAvailableAt`.
+	*/
 	getProgram(params) {
 		const query = params?.team ? `?team=${encodeURIComponent(params.team)}` : "";
 		return this.http.get(`loyalty/program${query}`);
 	}
+	/** Customer: join a team's program with the signed-in user's own contact. Idempotent. */
+	join(params) {
+		return this.http.post("loyalty/join", { team: params.team });
+	}
+	/** Customer: all loyalty accounts of the signed-in user across teams. */
+	getWallet() {
+		return this.http.get("loyalty/wallet");
+	}
+	/** Customer: the signed-in user's own transactions on a team's program. */
+	getWalletHistory(params) {
+		const query = params.page ? `?page=${params.page}` : "";
+		return this.http.get(`loyalty/wallet/${encodeURIComponent(params.team)}/history${query}`);
+	}
+	/** Customer: collect at a collect point. Joins the program if needed; replays return `already: true`. */
+	collect(params) {
+		return this.http.post("loyalty/collect", params);
+	}
+	/** Staff: update the program. `settings.collect_points` replaces the collect point list (see LoyaltyCollectPointInput). */
 	updateProgram(data) {
 		return this.http.patch("loyalty/program", data);
 	}
@@ -2067,6 +2093,17 @@ var MessagesResource = class {
 	generateAudio(messageId) {
 		return this.http.post(`messages/${messageId}/audio`, {});
 	}
+	attachMedia(messageId, file) {
+		const form = new FormData();
+		form.append("file", file, file.name);
+		return this.http.post(`messages/${messageId}/media`, form, { isJson: false });
+	}
+	completeMediaImport(messageId, file) {
+		if (!file) return this.http.post(`messages/${messageId}/media-import`, {});
+		const form = new FormData();
+		form.append("file", file, file.name);
+		return this.http.post(`messages/${messageId}/media-import`, form, { isJson: false });
+	}
 	storeFeedback(agent, message, positive, inquiry) {
 		return this.http.post("feedback", {
 			agent,
@@ -2688,6 +2725,12 @@ var TeamsResource = class {
 	removeMember(teamSlug, memberId) {
 		return this.http.post(`teams/${teamSlug}/members/remove`, { member: memberId });
 	}
+	updateMemberRole(teamSlug, memberId, role) {
+		return this.http.post(`teams/${teamSlug}/members/role`, {
+			member: memberId,
+			role
+		});
+	}
 	listMembers(teamSlug) {
 		return this.http.get(`teams/${teamSlug}/members`);
 	}
@@ -2771,6 +2814,9 @@ var ArtifactsResource = class {
 	deliver(payload) {
 		return this.http.post("artifacts/deliver", payload);
 	}
+	previewDelivery(payload) {
+		return this.http.post("artifacts/preview-delivery", payload);
+	}
 };
 //#endregion
 //#region src/resources/campaigns.ts
@@ -3340,7 +3386,7 @@ var MemoryCache = class {
 		this.store.clear();
 	}
 	bust(prefix) {
-		for (const key of this.store.keys()) if (key.startsWith(prefix)) this.store.delete(key);
+		for (const key of this.store.keys()) if (key.startsWith(prefix) || key.startsWith(`/${prefix}`)) this.store.delete(key);
 	}
 };
 //#endregion
@@ -3364,6 +3410,10 @@ const DEFAULTS = {
 	agents: 1e4,
 	rooms: 1e4
 };
+const RELATED_PREFIXES = {
+	content: ["contents"],
+	contents: ["content"]
+};
 function getTtl(url, ttlMap, defaultTtl) {
 	for (const [prefix, ttl] of Object.entries(ttlMap)) if (url.startsWith(prefix) || url.startsWith(`/${prefix}`)) return ttl;
 	return defaultTtl;
@@ -3451,6 +3501,7 @@ var CachedHttpService = class {
 	bust(prefix) {
 		this.cacheVersion++;
 		this.cache.bust(prefix);
+		for (const relatedPrefix of RELATED_PREFIXES[prefix] ?? []) this.cache.bust(relatedPrefix);
 	}
 };
 //#endregion
@@ -3611,19 +3662,18 @@ const completePortalSession = async (callbackUrl, fetcher = fetch) => {
 		return false;
 	}
 };
-const openPortalSession = async ({ client, redirect, allowedOrigins, env = "mainnet", fetcher = fetch, onNavigate }) => {
+const openPortalSession = async ({ client, redirect, allowedOrigins, env = "mainnet", onNavigate }) => {
 	if (!isAllowedRedirectUrl(redirect, allowedOrigins)) return false;
 	const response = await client.auth.createPortalSession(redirect);
 	const callbackUrl = sanitizePortalCallbackUrl(response.ok ? response.data?.url : null, env);
 	if (!callbackUrl) return false;
-	if (!await completePortalSession(callbackUrl, fetcher)) return false;
 	if (!isAllowedRedirectUrl(redirect, allowedOrigins)) return false;
 	if (onNavigate) {
-		onNavigate(redirect);
+		onNavigate(callbackUrl);
 		return true;
 	}
 	if (typeof window !== "undefined") {
-		window.location.assign(redirect);
+		window.location.assign(callbackUrl);
 		return true;
 	}
 	return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joai/sdk",
-  "version": "8.0.0",
+  "version": "9.0.1",
   "description": "JoAi public API SDK — build with your AI agents",
   "license": "MIT",
   "type": "module",
@@ -35,11 +35,11 @@
     "test": "jest --config jest.config.js"
   },
   "dependencies": {
-    "@joai/core": "^4.16.0",
+    "@joai/core": "^5.0.1",
     "@joai/warps": "*"
   },
   "peerDependencies": {
-    "@joai/core": "^4.16.0"
+    "@joai/core": "^5.0.1"
   },
   "devDependencies": {
     "tsdown": "^0.21.0",