@scalemule/nextjs 0.1.1 → 0.1.2

package/dist/index.mjs

@@ -2098,6 +2098,40 @@ var StorageService = class extends ServiceModule {
       return { data: null, error: { code: "upload_error", message, status: 0 } };
     }
   }
+  /**
+   * Upload a file as a private attachment (e.g. chat / DM attachment).
+   *
+   * Same browser→S3 pipeline as {@link upload}, but enforces:
+   *   - `is_public: false` — caller cannot opt out
+   *   - no client-side compression — preserve the original bytes
+   *   - fail-closed if storage returns `is_public: true` for any reason
+   *
+   * The shared primitive used by `@scalemule/chat`'s chat-attachment uploader
+   * and by `@scalemule/nextjs`'s `useMedia()` when an app's media policy is
+   * `fast_trusted`. Both packages call this method via `@scalemule/sdk` —
+   * `@scalemule/nextjs` does not depend on `@scalemule/chat`.
+   *
+   * See ADR-2026-04-26 (realtime-chat media pipeline) and
+   * docs/MEDIA-UPLOADS.md for the full pattern.
+   */
+  async uploadPrivate(file, options) {
+    const result = await this.upload(file, {
+      ...options,
+      isPublic: false,
+      skipCompression: true
+    });
+    if (result.data && result.data.is_public === true) {
+      return {
+        data: null,
+        error: {
+          code: "visibility_violation",
+          message: "Storage returned is_public=true for an uploadPrivate() call. This usually indicates a server-side bug or an admin override; the caller asked for a private upload.",
+          status: 0
+        }
+      };
+    }
+    return result;
+  }
   // --------------------------------------------------------------------------
   // Direct Upload (3-step with retry + stall)
   // --------------------------------------------------------------------------
@@ -3787,6 +3821,18 @@ var ChatService = class extends ServiceModule {
     return this.post(`/messages/${messageId}/reactions`, data, options);
   }
   // --------------------------------------------------------------------------
+  // Pins
+  // --------------------------------------------------------------------------
+  async pinMessage(messageId, options) {
+    return this.post(`/messages/${messageId}/pin`, void 0, options);
+  }
+  async unpinMessage(messageId, options) {
+    return this.del(`/messages/${messageId}/pin`, options);
+  }
+  async getPinnedMessages(conversationId, options) {
+    return this._get(`/conversations/${conversationId}/pins`, options);
+  }
+  // --------------------------------------------------------------------------
   // Typing & Read Receipts
   // --------------------------------------------------------------------------
   async sendTyping(conversationId, options) {
@@ -3997,15 +4043,80 @@ var BillingService = class extends ServiceModule {
     );
   }
   // --------------------------------------------------------------------------
-  // Customers
+  // Customers (legacy user-scoped — deprecated in favor of account-scoped)
   // --------------------------------------------------------------------------
+  /** @deprecated Use `getAccountCustomer({ account_id })`. Targets the user-scoped legacy endpoint. */
   async createCustomer(data, options) {
     return this.post("/customers", data, options);
   }
+  /** @deprecated Use `attachAccountPaymentMethod({ account_id }, ...)`. Targets the user-scoped legacy endpoint. */
   async addPaymentMethod(data, options) {
     return this.post("/payment-methods", data, options);
   }
   // --------------------------------------------------------------------------
+  // Account-Scoped Billing (v2 — ADR-2026-04-25)
+  //
+  // The customer/payment-method/invoice record set belongs to an `app_account`
+  // (typically a `customer_org`), not to a single user. These methods target
+  // the `/v1/billing/accounts/{account_id}/*` endpoints described in
+  // openapi/scalemule-money-billing-v1.yaml.
+  // --------------------------------------------------------------------------
+  accountBase(accountId) {
+    return `/v1/billing/accounts/${encodeURIComponent(accountId)}`;
+  }
+  async getAccountCustomer(req, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/customer`, {
+      billing_mode: req.billing_mode
+    });
+    return this.client.get(path, options);
+  }
+  async listAccountPaymentMethods(req, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/payment-methods`, {
+      billing_mode: req.billing_mode
+    });
+    return this.client.get(path, options);
+  }
+  async attachAccountPaymentMethod(req, body, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/payment-methods`, {
+      billing_mode: req.billing_mode
+    });
+    return this.client.post(path, body, options);
+  }
+  async detachAccountPaymentMethod(req, paymentMethodId, options) {
+    const path = this.withQuery(
+      `${this.accountBase(req.account_id)}/payment-methods/${encodeURIComponent(paymentMethodId)}`,
+      { billing_mode: req.billing_mode }
+    );
+    return this.client.del(path, options);
+  }
+  async setDefaultAccountPaymentMethod(req, paymentMethodId, options) {
+    const path = this.withQuery(
+      `${this.accountBase(req.account_id)}/payment-methods/${encodeURIComponent(paymentMethodId)}/default`,
+      { billing_mode: req.billing_mode }
+    );
+    return this.client.put(path, void 0, options);
+  }
+  async listAccountInvoices(req, params, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/invoices`, {
+      billing_mode: req.billing_mode,
+      limit: params?.limit,
+      cursor: params?.cursor
+    });
+    return this.client.get(path, options);
+  }
+  async getAccountInvoice(req, invoiceId, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/invoices/${encodeURIComponent(invoiceId)}`, {
+      billing_mode: req.billing_mode
+    });
+    return this.client.get(path, options);
+  }
+  async createAccountPortalSession(req, body, options) {
+    const path = this.withQuery(`${this.accountBase(req.account_id)}/portal-session`, {
+      billing_mode: req.billing_mode
+    });
+    return this.client.post(path, body ?? {}, options);
+  }
+  // --------------------------------------------------------------------------
   // Subscriptions
   // --------------------------------------------------------------------------
   async subscribe(data, options) {
@@ -5166,8 +5277,14 @@ var SearchService = class extends ServiceModule {
 };
 var PHOTO_BREAKPOINTS = [36, 150, 320, 640, 1080];
 var PhotoService = class extends ServiceModule {
-  constructor() {
-    super(...arguments);
+  /**
+   * @param storage Required for {@link uploadViaStorage}. Wired up by the
+   *   top-level {@link ScaleMule} constructor — most call sites should not
+   *   instantiate `PhotoService` directly.
+   */
+  constructor(client, storage) {
+    super(client);
+    this.storage = storage;
     this.basePath = "/v1/photos";
   }
   async upload(file, uploadOptions, requestOptions) {
@@ -5307,6 +5424,87 @@ var PhotoService = class extends ServiceModule {
       }
     };
   }
+  /**
+   * Upload a file to storage (browser → S3 direct, private, uncompressed) and
+   * register it with the photo service so optimization + transform URLs work.
+   *
+   * The canonical chat-attachment / progressive-image upload primitive. Same
+   * presigned-direct-to-S3 path as `storage.uploadPrivate()`, plus a follow-up
+   * `photo.register()` call so `getTransformUrl()` / `getOptimalUrl()` return
+   * usable URLs.
+   *
+   * The returned `optimized_url_promise` resolves once the photo's
+   * `optimization_status` flips to `completed` (or once a 10s timeout fires;
+   * the caller can still use `getTransformUrl()` directly — the on-demand
+   * transform path produces a variant even before pre-rendered breakpoints
+   * are cached). Phase 3 of ADR-2026-04-26 replaces the poll with a realtime
+   * subscription.
+   *
+   * If `register()` fails after a successful storage upload (e.g. scan times
+   * out), the file is *not* lost: the returned `file_id` is still valid as a
+   * generic storage file. The SDK logs a warning and resolves
+   * `optimized_url_promise` to `null`.
+   */
+  async uploadViaStorage(file, uploadOptions, requestOptions) {
+    const uploadResult = await this.storage.uploadPrivate(file, {
+      filename: uploadOptions?.filename,
+      metadata: uploadOptions?.metadata,
+      onProgress: uploadOptions?.onProgress,
+      signal: uploadOptions?.signal
+    });
+    if (uploadResult.error || !uploadResult.data) {
+      return { data: null, error: uploadResult.error };
+    }
+    const fileInfo = uploadResult.data;
+    const fileId = fileInfo.id;
+    const originalViewUrl = fileInfo.url ?? null;
+    const registerResult = await this.register({ fileId, userId: uploadOptions?.userId }, requestOptions);
+    if (registerResult.error || !registerResult.data) {
+      console.warn(
+        "[scalemule-sdk] photo.register() failed after storage upload; optimized variants unavailable.",
+        registerResult.error
+      );
+      return {
+        data: {
+          file_id: fileId,
+          photo_id: null,
+          original_view_url: originalViewUrl,
+          optimized_url_promise: Promise.resolve(null)
+        },
+        error: null
+      };
+    }
+    const photoId = registerResult.data.id;
+    const optimizedUrlPromise = this.pollOptimizationComplete(photoId, requestOptions);
+    return {
+      data: {
+        file_id: fileId,
+        photo_id: photoId,
+        original_view_url: originalViewUrl,
+        optimized_url_promise: optimizedUrlPromise
+      },
+      error: null
+    };
+  }
+  /**
+   * Poll {@link get} until the photo's `optimization_status` is `completed`
+   * or the 10s timeout fires. Resolves to a usable transform URL on success;
+   * `null` on timeout (caller should fall back to {@link getTransformUrl}
+   * which uses the on-demand transform path).
+   */
+  async pollOptimizationComplete(photoId, requestOptions) {
+    const intervalMs = 250;
+    const maxAttempts = 40;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+      const result = await this.get(photoId, requestOptions);
+      const status = result.data?.optimization_status;
+      if (status === "completed") {
+        return this.getOptimalUrl(photoId, 1080);
+      }
+      await new Promise((r) => setTimeout(r, intervalMs));
+    }
+    return null;
+  }
   /** @deprecated Use upload() instead */
   async uploadPhoto(file, options) {
     return this.upload(file, options);
@@ -6138,7 +6336,7 @@ var ScaleMule = class {
     this.events = new EventsService(this._client);
     this.graph = new GraphService(this._client);
     this.functions = new FunctionsService(this._client);
-    this.photo = new PhotoService(this._client);
+    this.photo = new PhotoService(this._client, this.storage);
     this.flagContent = new FlagContentService(this._client);
     this.creatorMaker = new CreatorMakerService(this._client);
     this.compliance = new ComplianceService(this._client);
@@ -7223,6 +7421,8 @@ function ScaleMuleProvider({
       client,
       money,
       realtime: baseClient.realtime,
+      storage: baseClient.storage,
+      photo: baseClient.photo,
       user,
       setUser: handleSetUser,
       initializing,
@@ -8535,6 +8735,101 @@ function useContent(options = {}) {
     ]
   );
 }
+function useMedia() {
+  const { storage, photo } = useScaleMule();
+  const [uploading, setUploading] = useState(false);
+  const [error, setError] = useState(null);
+  const upload = useCallback(
+    async (file, options) => {
+      setUploading(true);
+      setError(null);
+      const isPublic = options?.is_public ?? false;
+      const mimeType = file.type || "application/octet-stream";
+      const sharedOpts = {
+        filename: options?.filename,
+        metadata: options?.metadata,
+        onProgress: options?.onProgress,
+        signal: options?.signal
+      };
+      try {
+        if (mimeType.startsWith("image/") && !options?.skipPhotoRegister && !isPublic) {
+          const r2 = await photo.uploadViaStorage(file, sharedOpts);
+          if (r2.error || !r2.data) {
+            throw r2.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
+          }
+          return {
+            file_id: r2.data.file_id,
+            photo_id: r2.data.photo_id,
+            original_view_url: r2.data.original_view_url,
+            optimized_url_promise: r2.data.optimized_url_promise,
+            hls_url_promise: Promise.resolve(null),
+            mime_type: mimeType,
+            is_public: false
+          };
+        }
+        if (mimeType.startsWith("image/") && isPublic) {
+          const r2 = await storage.upload(file, {
+            ...sharedOpts,
+            isPublic: true,
+            skipCompression: true
+          });
+          if (r2.error || !r2.data) {
+            throw r2.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
+          }
+          const f2 = r2.data;
+          return {
+            file_id: f2.id,
+            photo_id: null,
+            original_view_url: f2.url ?? null,
+            optimized_url_promise: Promise.resolve(null),
+            hls_url_promise: Promise.resolve(null),
+            mime_type: mimeType,
+            is_public: f2.is_public ?? true
+          };
+        }
+        const r = isPublic ? await storage.upload(file, { ...sharedOpts, isPublic: true, skipCompression: true }) : await storage.uploadPrivate(file, sharedOpts);
+        if (r.error || !r.data) {
+          throw r.error ?? { code: "upload_error", message: "Upload failed", status: 0 };
+        }
+        const f = r.data;
+        return {
+          file_id: f.id,
+          photo_id: null,
+          original_view_url: f.url ?? null,
+          optimized_url_promise: Promise.resolve(null),
+          hls_url_promise: Promise.resolve(null),
+          mime_type: mimeType,
+          is_public: f.is_public ?? isPublic
+        };
+      } catch (err) {
+        const e = err;
+        setError(e);
+        throw e;
+      } finally {
+        setUploading(false);
+      }
+    },
+    [storage, photo]
+  );
+  const cancelUpload = useCallback(
+    async (fileId) => {
+      setError(null);
+      try {
+        const r = await storage.delete(fileId);
+        if (r.error) {
+          if (r.error.status === 404) return;
+          throw r.error;
+        }
+      } catch (err) {
+        const e = err;
+        setError(e);
+        throw e;
+      }
+    },
+    [storage]
+  );
+  return { upload, cancelUpload, error, uploading };
+}
 
 // src/hooks/useMoney.ts
 var useMoney = useMoneyClient;
@@ -9761,6 +10056,10 @@ var STYLES = {
     fontSize: 13,
     color: "#dc2626"
   },
+  note: {
+    fontSize: 13,
+    color: "#475569"
+  },
   success: {
     fontSize: 14,
     fontWeight: 500,
@@ -9770,21 +10069,13 @@ var STYLES = {
 };
 var ALL_TYPES = ["bug_report", "feature_request", "improvement", "other"];
 function FeedbackWidget(props) {
-  const {
-    position = "bottom-right",
-    defaultType = "feature_request",
-    allowedTypes = ALL_TYPES,
-    triggerLabel = "Feedback",
-    theme = "auto",
-    className,
-    enableRating = true,
-    ratingLabel = "How would you rate your experience?",
-    onSubmitted
-  } = props;
   const sm = useScaleMule();
+  const { client } = sm;
   const { submit } = useFeedback({ enabled: false });
+  const [serverConfig, setServerConfig] = useState(null);
+  const [configLoaded, setConfigLoaded] = useState(false);
   const [open, setOpen] = useState(false);
-  const [type, setType] = useState(defaultType);
+  const [type, setType] = useState("feature_request");
   const [title, setTitle] = useState("");
   const [description, setDescription] = useState("");
   const [email, setEmail] = useState("");
@@ -9793,10 +10084,39 @@ function FeedbackWidget(props) {
   const [submitting, setSubmitting] = useState(false);
   const [errMsg, setErrMsg] = useState(null);
   const [done, setDone] = useState(false);
-  Boolean(sm.user || sm.user === void 0 ? false : false);
   const signedIn = Boolean(sm.user);
+  const resolvedAllowedTypes = props.allowedTypes ?? serverConfig?.allowed_types ?? ALL_TYPES;
+  const resolvedDefaultType = (props.defaultType && resolvedAllowedTypes.includes(props.defaultType) ? props.defaultType : resolvedAllowedTypes[0]) ?? "feature_request";
+  const resolvedPosition = props.position ?? serverConfig?.widget_position ?? "bottom-right";
+  const resolvedTheme = props.theme ?? serverConfig?.widget_theme ?? "auto";
+  const allowAnonymous = serverConfig?.allow_anonymous ?? true;
+  const anonymousBlocked = !signedIn && !allowAnonymous;
+  useEffect(() => {
+    let active = true;
+    client.get("/v1/feedback/widget-config").then((config) => {
+      if (active) setServerConfig(config);
+    }).catch(() => {
+      if (active) setServerConfig(null);
+    }).finally(() => {
+      if (active) setConfigLoaded(true);
+    });
+    return () => {
+      active = false;
+    };
+  }, [client]);
+  useEffect(() => {
+    setType(
+      (current) => resolvedAllowedTypes.includes(current) ? current : resolvedDefaultType
+    );
+  }, [resolvedAllowedTypes, resolvedDefaultType]);
+  if (!configLoaded) {
+    return null;
+  }
+  if (serverConfig && !serverConfig.enabled) {
+    return null;
+  }
   function reset() {
-    setType(defaultType);
+    setType(resolvedDefaultType);
     setTitle("");
     setDescription("");
     setEmail("");
@@ -9808,6 +10128,10 @@ function FeedbackWidget(props) {
   async function handleSubmit(e) {
     e.preventDefault();
     if (!title.trim() || !description.trim()) return;
+    if (anonymousBlocked) {
+      setErrMsg("Please sign in to send feedback for this app");
+      return;
+    }
     if (!signedIn && !email.trim()) {
       setErrMsg("email is required when not signed in");
       return;
@@ -9824,7 +10148,7 @@ function FeedbackWidget(props) {
         tags
       });
       setDone(true);
-      onSubmitted?.(item);
+      props.onSubmitted?.(item);
     } catch (err) {
       const message = err && typeof err === "object" && "message" in err ? String(err.message) : "Submit failed";
       setErrMsg(message);
@@ -9836,16 +10160,16 @@ function FeedbackWidget(props) {
     setOpen(false);
     setTimeout(reset, 200);
   }
-  const dark = theme === "dark" || theme === "auto" && typeof window !== "undefined" && window.matchMedia && window.matchMedia("(prefers-color-scheme: dark)").matches;
+  const dark = resolvedTheme === "dark" || resolvedTheme === "auto" && typeof window !== "undefined" && window.matchMedia && window.matchMedia("(prefers-color-scheme: dark)").matches;
   return /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsx(
       "button",
       {
         type: "button",
         onClick: () => setOpen(true),
-        className,
-        style: { ...STYLES.trigger, ...POSITION_STYLES[position] },
-        children: triggerLabel
+        className: props.className,
+        style: { ...STYLES.trigger, ...POSITION_STYLES[resolvedPosition] },
+        children: props.triggerLabel ?? "Feedback"
       }
     ),
     open && /* @__PURE__ */ jsx("div", { role: "dialog", "aria-modal": "true", style: STYLES.overlay, onClick: handleClose, children: /* @__PURE__ */ jsx(
@@ -9880,8 +10204,8 @@ function FeedbackWidget(props) {
               }
             )
           ] }),
-          enableRating && /* @__PURE__ */ jsxs("div", { children: [
-            /* @__PURE__ */ jsx("div", { style: STYLES.label, children: ratingLabel }),
+          props.enableRating !== false && /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("div", { style: STYLES.label, children: props.ratingLabel ?? "How would you rate your experience?" }),
             /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 4, marginTop: 4 }, children: [
               [1, 2, 3, 4, 5].map((n) => {
                 const active = (hoverRating ?? rating ?? 0) >= n;
@@ -9935,7 +10259,7 @@ function FeedbackWidget(props) {
                 style: STYLES.field,
                 value: type,
                 onChange: (e) => setType(e.target.value),
-                children: allowedTypes.map((t) => /* @__PURE__ */ jsx("option", { value: t, children: TYPE_LABELS[t] }, t))
+                children: resolvedAllowedTypes.map((t) => /* @__PURE__ */ jsx("option", { value: t, children: TYPE_LABELS[t] }, t))
               }
             )
           ] }),
@@ -9967,7 +10291,7 @@ function FeedbackWidget(props) {
               }
             )
           ] }),
-          !signedIn && /* @__PURE__ */ jsxs("label", { children: [
+          !signedIn && allowAnonymous && /* @__PURE__ */ jsxs("label", { children: [
             /* @__PURE__ */ jsx("div", { style: STYLES.label, children: "Email" }),
             /* @__PURE__ */ jsx(
               "input",
@@ -9981,10 +10305,19 @@ function FeedbackWidget(props) {
               }
             )
           ] }),
+          anonymousBlocked && /* @__PURE__ */ jsx("div", { style: STYLES.note, children: "This app only accepts feedback from signed-in users." }),
           errMsg && /* @__PURE__ */ jsx("div", { style: STYLES.error, children: errMsg }),
           /* @__PURE__ */ jsxs("div", { style: STYLES.rowEnd, children: [
             /* @__PURE__ */ jsx("button", { type: "button", style: STYLES.secondaryBtn, onClick: handleClose, children: "Cancel" }),
-            /* @__PURE__ */ jsx("button", { type: "submit", style: STYLES.primaryBtn, disabled: submitting, children: submitting ? "Sending\u2026" : "Send" })
+            /* @__PURE__ */ jsx(
+              "button",
+              {
+                type: "submit",
+                style: STYLES.primaryBtn,
+                disabled: submitting || anonymousBlocked,
+                children: submitting ? "Sending\u2026" : "Send"
+              }
+            )
           ] })
         ] })
       }
@@ -10283,4 +10616,4 @@ function createSafeLogger(prefix) {
   };
 }
 
-export { FeedbackWidget, ScaleMuleApiError, ScaleMuleClient2 as ScaleMuleClient, ScaleMuleProvider, composePhone, createClient, createSafeLogger, normalizePhone, phoneCountries, sanitizeForLog, useAnalytics, useAuth, useBilling, useContent, useFeatureFlags, useFeedback, useMoney, useMoneyClient, usePushNotifications, useRealtime, useScaleMule, useScaleMuleClient, useShare, useUser, validateForm, validators };
+export { FeedbackWidget, ScaleMuleApiError, ScaleMuleClient2 as ScaleMuleClient, ScaleMuleProvider, composePhone, createClient, createSafeLogger, normalizePhone, phoneCountries, sanitizeForLog, useAnalytics, useAuth, useBilling, useContent, useFeatureFlags, useFeedback, useMedia, useMoney, useMoneyClient, usePushNotifications, useRealtime, useScaleMule, useScaleMuleClient, useShare, useUser, validateForm, validators };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/nextjs",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "ScaleMule SDK for Next.js applications - authentication, storage, and user management",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@scalemule/money": "^0.0.1",
-    "@scalemule/sdk": "^0.0.36"
+    "@scalemule/sdk": "^0.0.38"
   },
   "peerDependencies": {
     "next": ">=14.0.0",