@productcraft/platform-auth 0.0.9 → 0.0.11

package/README.md

@@ -12,10 +12,10 @@ Server-side only. The SDK ships a Platform API Key in the `Authorization` header
 
 | If your goal is to … | Reach for |
 |---|---|
-| Authenticate **your own end-users** in a product you're building (Heimdall apps) | [`@productcraft/heimdall`](https://www.npmjs.com/package/@productcraft/heimdall) |
+| Authenticate **your own end-users** in a product you're building (Auth apps) | [`@productcraft/auth`](https://www.npmjs.com/package/@productcraft/auth) |
 | Authenticate **your team** into the ProductCraft console + manage workspaces | **this package** |
 
-The two are easy to confuse because both have "auth" in the name. Platform-Auth owns *the ProductCraft account you use to log into productcraft.co*. Heimdall owns *the end-users of products you build on the platform*. Distinct databases, distinct signing keys.
+The two are easy to confuse because both have "auth" in the name. Platform-Auth owns *the ProductCraft account you use to log into productcraft.co*. Auth owns *the end-users of products you build on the platform*. Distinct databases, distinct signing keys.
 
 ## Quick start
 
@@ -33,7 +33,7 @@ const { data } = await platformAuth.client.GET(
 );
 
 // data.policy   — flat array of IAM-style { effect, actions, resources } statements
-// data.services — string[] of enabled services (envoi / rally / agora / heimdall / …)
+// data.services — string[] of enabled services (mail / waitlist / social / auth / …)
 ```
 
 The `client` is an [`openapi-fetch`](https://openapi-ts.dev/openapi-fetch/) instance bound to `https://api.auth.productcraft.co` and your auth credential.
@@ -198,7 +198,7 @@ const { data: policy } = await platformAuth.client.POST(
       policy: [
         // Permission action prefixes rebranded (heimdall.* → auth.*, envoi.* → mail.*),
         // but resource-URN namespaces intentionally stay pcft:heimdall: / pcft:envoi: —
-        // the services still emit those resource prefixes.
+        // the services still emit the old resource prefixes.
         { effect: "allow", actions: ["auth.create", "auth.read", "auth.update"], resources: ["pcft:heimdall:app/*"] },
         { effect: "allow", actions: ["mail.read", "mail.send"], resources: ["*"] },
       ],
@@ -232,7 +232,7 @@ await platformAuth.client.PATCH(
 ### Service activation
 
 ```ts
-// Enable / disable a service for the workspace (envoi, rally, agora, heimdall, …)
+// Enable / disable a service for the workspace (mail, waitlist, social, auth, …)
 await platformAuth.client.PUT(
   "/v1/workspaces/{workspace_slug}/services/{service}",
   { params: { ... }, body: { enabled: true } },

package/dist/index.d.cts

@@ -464,7 +464,7 @@ interface paths {
         };
         /**
          * Unified workspace audit feed (cursor-paginated)
-         * @description Merged audit timeline across the workspace surfaces. v1 covers `workspace_audit` (this service); per-app Heimdall and per-community Agora rows arrive in a follow-up. Response shape is stable from v1 — clients can build against it today.
+         * @description Merged audit timeline across the workspace surfaces. v1 covers `workspace_audit` (this service); per-app Auth and per-community Social rows arrive in a follow-up. Response shape is stable from v1 — clients can build against it today.
          */
         get: operations["WorkspaceAuditFeedController_listFeed"];
         put?: never;
@@ -762,7 +762,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
         };
         CallbackBodyDto: {
@@ -780,7 +780,7 @@ interface components {
             description?: string;
             /**
              * @description Human-readable PAK name (shown in the keys list).
-             * @example Production agora client
+             * @example Production social client
              */
             name: string;
             /**
@@ -830,12 +830,12 @@ interface components {
         CreateWorkspacePolicyDto: {
             /**
              * @description Optional human description. Pass `null` to clear an existing description on PATCH.
-             * @example Read-only access to all Envoi resources
+             * @example Read-only access to all Mail resources
              */
             description?: string | null;
             /**
              * @description Policy name (1-64 chars, alphanumeric + space/underscore/hyphen). Unique per workspace.
-             * @example envoi-readonly
+             * @example mail-readonly
              */
             name: string;
             /**
@@ -985,8 +985,8 @@ interface components {
             /**
              * @description Enabled services on this workspace.
              * @example [
-             *       "envoi",
-             *       "rally"
+             *       "mail",
+             *       "waitlist"
              *     ]
              */
             services: string[];
@@ -1005,8 +1005,8 @@ interface components {
             /**
              * @description Enabled services on this workspace.
              * @example [
-             *       "envoi",
-             *       "rally"
+             *       "mail",
+             *       "waitlist"
              *     ]
              */
             services: string[];
@@ -1082,7 +1082,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
             /** @description IAM-style policy statements bound to this managed policy. */
             policy: components["schemas"]["PolicyStatementDto"][];
@@ -1102,7 +1102,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
             /** @description IAM-style policy statements bound to this managed policy. */
             policy: components["schemas"]["PolicyStatementDto"][];
@@ -1155,7 +1155,7 @@ interface components {
         };
         PolicyStatementDto: {
             /**
-             * @description Action strings the statement applies to. Wildcards (e.g. `agora.*`, `*.read`, `*`) supported per `actionMatches` semantics.
+             * @description Action strings the statement applies to. Wildcards (e.g. `social.*`, `*.read`, `*`) supported per `actionMatches` semantics.
              * @example [
              *       "social.read",
              *       "social.list"
@@ -1391,12 +1391,12 @@ interface components {
         UpdateWorkspacePolicyDto: {
             /**
              * @description Optional human description. Pass `null` to clear an existing description on PATCH.
-             * @example Read-only access to all Envoi resources
+             * @example Read-only access to all Mail resources
              */
             description?: string | null;
             /**
              * @description Policy name (1-64 chars, alphanumeric + space/underscore/hyphen). Unique per workspace.
-             * @example envoi-readonly
+             * @example mail-readonly
              */
             name?: string;
             /**
@@ -1609,8 +1609,8 @@ interface components {
             /** Format: uuid */
             enabled_by: string | null;
             /**
-             * @description Service identifier (e.g. `envoi`, `rally`, `agora`, `heimdall`).
-             * @example envoi
+             * @description Service identifier (e.g. `mail`, `waitlist`, `social`, `auth`).
+             * @example mail
              */
             service: string;
             /** @description Per-service settings blob (service-specific shape). */
@@ -3235,7 +3235,7 @@ interface operations {
             };
             cookie?: never;
         };
-        /** @description Replaces the per-service settings jsonb entirely. The body is the settings object itself (no wrapper). Service-specific shape — e.g. envoi tracks default sender, agora tracks ranking weights. */
+        /** @description Replaces the per-service settings jsonb entirely. The body is the settings object itself (no wrapper). Service-specific shape — e.g. mail tracks default sender, social tracks ranking weights. */
         requestBody: {
             content: {
                 "application/json": {

package/dist/index.d.ts

@@ -464,7 +464,7 @@ interface paths {
         };
         /**
          * Unified workspace audit feed (cursor-paginated)
-         * @description Merged audit timeline across the workspace surfaces. v1 covers `workspace_audit` (this service); per-app Heimdall and per-community Agora rows arrive in a follow-up. Response shape is stable from v1 — clients can build against it today.
+         * @description Merged audit timeline across the workspace surfaces. v1 covers `workspace_audit` (this service); per-app Auth and per-community Social rows arrive in a follow-up. Response shape is stable from v1 — clients can build against it today.
          */
         get: operations["WorkspaceAuditFeedController_listFeed"];
         put?: never;
@@ -762,7 +762,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
         };
         CallbackBodyDto: {
@@ -780,7 +780,7 @@ interface components {
             description?: string;
             /**
              * @description Human-readable PAK name (shown in the keys list).
-             * @example Production agora client
+             * @example Production social client
              */
             name: string;
             /**
@@ -830,12 +830,12 @@ interface components {
         CreateWorkspacePolicyDto: {
             /**
              * @description Optional human description. Pass `null` to clear an existing description on PATCH.
-             * @example Read-only access to all Envoi resources
+             * @example Read-only access to all Mail resources
              */
             description?: string | null;
             /**
              * @description Policy name (1-64 chars, alphanumeric + space/underscore/hyphen). Unique per workspace.
-             * @example envoi-readonly
+             * @example mail-readonly
              */
             name: string;
             /**
@@ -985,8 +985,8 @@ interface components {
             /**
              * @description Enabled services on this workspace.
              * @example [
-             *       "envoi",
-             *       "rally"
+             *       "mail",
+             *       "waitlist"
              *     ]
              */
             services: string[];
@@ -1005,8 +1005,8 @@ interface components {
             /**
              * @description Enabled services on this workspace.
              * @example [
-             *       "envoi",
-             *       "rally"
+             *       "mail",
+             *       "waitlist"
              *     ]
              */
             services: string[];
@@ -1082,7 +1082,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
             /** @description IAM-style policy statements bound to this managed policy. */
             policy: components["schemas"]["PolicyStatementDto"][];
@@ -1102,7 +1102,7 @@ interface components {
             description: string | null;
             /** Format: uuid */
             id: string;
-            /** @example envoi-readonly */
+            /** @example mail-readonly */
             name: string;
             /** @description IAM-style policy statements bound to this managed policy. */
             policy: components["schemas"]["PolicyStatementDto"][];
@@ -1155,7 +1155,7 @@ interface components {
         };
         PolicyStatementDto: {
             /**
-             * @description Action strings the statement applies to. Wildcards (e.g. `agora.*`, `*.read`, `*`) supported per `actionMatches` semantics.
+             * @description Action strings the statement applies to. Wildcards (e.g. `social.*`, `*.read`, `*`) supported per `actionMatches` semantics.
              * @example [
              *       "social.read",
              *       "social.list"
@@ -1391,12 +1391,12 @@ interface components {
         UpdateWorkspacePolicyDto: {
             /**
              * @description Optional human description. Pass `null` to clear an existing description on PATCH.
-             * @example Read-only access to all Envoi resources
+             * @example Read-only access to all Mail resources
              */
             description?: string | null;
             /**
              * @description Policy name (1-64 chars, alphanumeric + space/underscore/hyphen). Unique per workspace.
-             * @example envoi-readonly
+             * @example mail-readonly
              */
             name?: string;
             /**
@@ -1609,8 +1609,8 @@ interface components {
             /** Format: uuid */
             enabled_by: string | null;
             /**
-             * @description Service identifier (e.g. `envoi`, `rally`, `agora`, `heimdall`).
-             * @example envoi
+             * @description Service identifier (e.g. `mail`, `waitlist`, `social`, `auth`).
+             * @example mail
              */
             service: string;
             /** @description Per-service settings blob (service-specific shape). */
@@ -3235,7 +3235,7 @@ interface operations {
             };
             cookie?: never;
         };
-        /** @description Replaces the per-service settings jsonb entirely. The body is the settings object itself (no wrapper). Service-specific shape — e.g. envoi tracks default sender, agora tracks ranking weights. */
+        /** @description Replaces the per-service settings jsonb entirely. The body is the settings object itself (no wrapper). Service-specific shape — e.g. mail tracks default sender, social tracks ranking weights. */
         requestBody: {
             content: {
                 "application/json": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productcraft/platform-auth",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "description": "PlatformUser auth, workspaces, members, invites, roles + IAM policies, API keys, service activation, and the introspect endpoint every ProductCraft backend uses to resolve permissions. Generated from the production OpenAPI spec.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -35,12 +35,11 @@
   },
   "homepage": "https://github.com/clauderanelagh/productcraft-node/tree/main/packages/platform-auth",
   "publishConfig": {
-    "access": "public",
-    "provenance": true
+    "access": "public"
   },
   "dependencies": {
     "openapi-fetch": "^0.13.0",
-    "@productcraft/core": "^0.0.5"
+    "@productcraft/core": "^0.1.0"
   },
   "scripts": {
     "build": "tsup"