@stackable-labs/embeddables 2.22.0 → 2.23.0

package/dist/embeddables/src/WidgetApp.d.ts

@@ -14,9 +14,10 @@ interface WidgetAppProps {
     colors?: WidgetColors;
     instanceId: string;
     customerId?: string;
-    customerEmail?: string;
     customerName?: string;
+    customerEmail?: string;
+    customerProvider?: string;
     snippetKey: string;
 }
-export declare const WidgetApp: ({ queryApiBase, apiBase, appId, theme, icon, iconUrl, position, offsetX, offsetY, colors, instanceId, customerId, customerEmail, customerName, snippetKey, }: WidgetAppProps) => import("react/jsx-runtime").JSX.Element;
+export declare const WidgetApp: ({ queryApiBase, apiBase, appId, theme, icon, iconUrl, position, offsetX, offsetY, colors, snippetKey, instanceId, customerId, customerName, customerEmail, customerProvider, }: WidgetAppProps) => import("react/jsx-runtime").JSX.Element;
 export {};

package/dist/embeddables/src/components/ExtensionSetup.d.ts

@@ -12,8 +12,9 @@ export interface ExtensionSetupProps {
     appId?: string;
     instanceId?: string;
     customerId?: string;
-    customerEmail?: string;
     customerName?: string;
+    customerEmail?: string;
+    customerProvider?: string;
     children: React.ReactNode;
 }
-export declare const ExtensionSetup: ({ instanceId, queryApiBase, apiBase, appId, children, customerId, customerEmail, customerName, }: ExtensionSetupProps) => import("react/jsx-runtime").JSX.Element | null;
+export declare const ExtensionSetup: ({ instanceId, queryApiBase, apiBase, appId, children, customerId, customerName, customerEmail, customerProvider, }: ExtensionSetupProps) => import("react/jsx-runtime").JSX.Element | null;

package/dist/embeddables/src/lib/identity-claims.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Host-side identity-claim filtering.
+ *
+ * When an extension's useExtendIdentity handler returns claims, the host
+ * filters the result per-extension against `manifest.identityClaims` before
+ * merging into `identityState.user.metadata` and forwarding to the JWT
+ * signing endpoint as `custom_claims`.
+ *
+ * Standard JWT claims (external_id, email, name) are exempt — they're part
+ * of the documented signing contract and may be overridden by any extension
+ * with `identity:extend` permission without explicit declaration.
+ *
+ * Undeclared custom keys are dropped with a console.warn so extension authors
+ * see the signal during local development and Studio preview.
+ */
+import { STANDARD_IDENTITY_CLAIM_KEYS } from '@stackable-labs/sdk-extension-contracts';
+/** Re-export so existing test imports from this module keep working. */
+export { STANDARD_IDENTITY_CLAIM_KEYS };
+/**
+ * Filter raw claims returned from a useExtendIdentity handler against the
+ * extension's manifest.identityClaims declaration.
+ *
+ * - Standard JWT claims (external_id, email, name) always allowed
+ * - Custom keys must be in `declared`
+ * - Undeclared keys dropped with a console.warn referencing the extension id
+ */
+export declare const filterByDeclaration: (raw: Record<string, unknown>, declared: Set<string>, extensionId: string) => Record<string, unknown>;