@agentchainlabsai/sdk 0.0.0-stage → 0.2.0

package/dist/oauth.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Continue with AgentChain — authorize URL, code exchange, userinfo.
+ * PKCE S256 for public clients. No MCP surface.
+ */
+/** PKCE S256 pair: keep `codeVerifier` secret until {@link exchangeCode}; send `codeChallenge` in the authorize URL. */
+export declare function createPkcePair(): Promise<{
+    codeVerifier: string;
+    codeChallenge: string;
+    codeChallengeMethod: 'S256';
+}>;
+export type AuthorizeUrlInput = {
+    baseUrl: string;
+    clientId: string;
+    redirectUri: string;
+    scope?: string;
+    state?: string;
+    codeChallenge?: string;
+    codeChallengeMethod?: 'S256';
+};
+export declare function buildAuthorizeUrl(input: AuthorizeUrlInput): string;
+export type ExchangeCodeInput = {
+    baseUrl: string;
+    clientId: string;
+    clientSecret?: string;
+    code: string;
+    redirectUri: string;
+    codeVerifier?: string;
+};
+export declare function exchangeCode(input: ExchangeCodeInput): Promise<Record<string, unknown>>;
+export declare function userinfo(baseUrl: string, accessToken: string): Promise<Record<string, unknown>>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,wHAAwH;AACxH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,CAAC,CAM5H;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAalE;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkB7F;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQrG"}

package/dist/oauth.js

@@ -0,0 +1,66 @@
+/**
+ * Continue with AgentChain — authorize URL, code exchange, userinfo.
+ * PKCE S256 for public clients. No MCP surface.
+ */
+import { apiErrorFromResponse, fetchJson } from './http.js';
+function base64Url(bytes) {
+    let bin = '';
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** PKCE S256 pair: keep `codeVerifier` secret until {@link exchangeCode}; send `codeChallenge` in the authorize URL. */
+export async function createPkcePair() {
+    const verifierBytes = new Uint8Array(32);
+    crypto.getRandomValues(verifierBytes);
+    const codeVerifier = base64Url(verifierBytes);
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+    return { codeVerifier, codeChallenge: base64Url(new Uint8Array(digest)), codeChallengeMethod: 'S256' };
+}
+export function buildAuthorizeUrl(input) {
+    const base = input.baseUrl.replace(/\/$/, '');
+    const url = new URL(`${base}/api/oauth/agent/authorize`);
+    url.searchParams.set('client_id', input.clientId);
+    url.searchParams.set('redirect_uri', input.redirectUri);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('scope', input.scope ?? 'agent_id profile');
+    if (input.state)
+        url.searchParams.set('state', input.state);
+    if (input.codeChallenge) {
+        url.searchParams.set('code_challenge', input.codeChallenge);
+        url.searchParams.set('code_challenge_method', input.codeChallengeMethod ?? 'S256');
+    }
+    return url.toString();
+}
+export async function exchangeCode(input) {
+    const base = input.baseUrl.replace(/\/$/, '');
+    const body = new URLSearchParams({
+        grant_type: 'authorization_code',
+        code: input.code,
+        redirect_uri: input.redirectUri,
+        client_id: input.clientId,
+    });
+    if (input.clientSecret)
+        body.set('client_secret', input.clientSecret);
+    if (input.codeVerifier)
+        body.set('code_verifier', input.codeVerifier);
+    const { res, body: json } = await fetchJson(`${base}/api/oauth/agent/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded', Accept: 'application/json' },
+        body,
+    });
+    const out = json;
+    if (!res.ok)
+        throw apiErrorFromResponse(res, out, String(out.error_description || out.error || `HTTP ${res.status}`));
+    return out;
+}
+export async function userinfo(baseUrl, accessToken) {
+    const base = baseUrl.replace(/\/$/, '');
+    const { res, body: json } = await fetchJson(`${base}/api/oauth/agent/userinfo`, {
+        headers: { Authorization: `Bearer ${accessToken}`, Accept: 'application/json' },
+    });
+    const out = json;
+    if (!res.ok)
+        throw apiErrorFromResponse(res, out, String(out.error_description || out.error || `HTTP ${res.status}`));
+    return out;
+}

package/dist/relay-connect.d.ts

@@ -0,0 +1,73 @@
+export type RelayBrowserChallenge = {
+    method: 'browser';
+    challengeToken: string;
+    nonce: string;
+    difficulty: number;
+    /** Unix timestamp in seconds. */
+    expiresAt: number;
+};
+export type RelayWalletChallenge = {
+    method: 'wallet';
+    challengeToken: string;
+    message: string;
+    /** Unix timestamp in seconds. */
+    expiresAt: number;
+    ttlSeconds: number;
+};
+export type RelayConnectResponse = {
+    product: 'relay';
+    productVersion: string;
+    agentId: string;
+    did: string;
+    didAliases: string[];
+    apiKey?: string;
+    /** ISO-8601 expiry of the issued API key. */
+    apiKeyExpiresAt?: string;
+    /** False when connect authenticated an existing identity without minting a new key. */
+    issuedApiKey?: boolean;
+    presentation: {
+        token: string;
+        expiresAt: number;
+    };
+    isNewAccount?: boolean;
+    [key: string]: unknown;
+};
+/** Deterministic Node.js PoW solver for Relay browser-connect challenges. */
+export declare function solveRelayBrowserChallenge(challenge: RelayBrowserChallenge): string;
+export declare function requestRelayBrowserChallenge(baseUrl?: string): Promise<RelayBrowserChallenge>;
+export declare function connectRelayBrowser(baseUrl: string, params: {
+    challengeToken: string;
+    solution: string;
+    /** Explicit clickwrap/API consent is required for account creation. */
+    agreedToTerms: true;
+    from?: string;
+    cardUrl?: string;
+    issueKey?: boolean;
+    keyName?: string;
+}): Promise<RelayConnectResponse>;
+export declare function connectRelayWithSolver(solve: (challenge: RelayBrowserChallenge) => Promise<string>, options: {
+    baseUrl?: string;
+    agreedToTerms: true;
+    from?: string;
+    cardUrl?: string;
+}): Promise<RelayConnectResponse>;
+/** One-call Node.js Relay Connect flow: challenge, solve and issue credentials. */
+export declare function connectRelay(options: {
+    baseUrl?: string;
+    agreedToTerms: true;
+    from?: string;
+    cardUrl?: string;
+}): Promise<RelayConnectResponse>;
+export declare function requestRelayWalletChallenge(walletAddress: string, baseUrl?: string): Promise<RelayWalletChallenge>;
+export declare function connectRelayWallet(baseUrl: string, params: {
+    walletAddress: string;
+    challengeToken: string;
+    signature: string;
+    agreedToTerms?: boolean;
+    name?: string;
+    from?: string;
+    cardUrl?: string;
+    issueKey?: boolean;
+    keyName?: string;
+}): Promise<RelayConnectResponse>;
+//# sourceMappingURL=relay-connect.d.ts.map

package/dist/relay-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-connect.d.ts","sourceRoot":"","sources":["../src/relay-connect.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,SAAS,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,QAAQ,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAID,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,qBAAqB,GAAG,MAAM,CAUnF;AA0BD,wBAAgB,4BAA4B,CAC1C,OAAO,SAAmC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;IACN,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,aAAa,EAAE,IAAI,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GACA,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,CAAC,SAAS,EAAE,qBAAqB,KAAK,OAAO,CAAC,MAAM,CAAC,EAC5D,OAAO,EAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,IAAI,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GACA,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAC1B,OAAO,EAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,IAAI,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GACA,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAED,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,OAAO,SAAmC,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;IACN,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GACA,OAAO,CAAC,oBAAoB,CAAC,CAK/B"}

package/dist/relay-connect.js

@@ -0,0 +1,75 @@
+import { createHash } from 'node:crypto';
+const MAX_POW_ITERATIONS = 5_000_000;
+/** Deterministic Node.js PoW solver for Relay browser-connect challenges. */
+export function solveRelayBrowserChallenge(challenge) {
+    const prefix = '0'.repeat(challenge.difficulty);
+    for (let i = 0; i < MAX_POW_ITERATIONS; i += 1) {
+        const candidate = String(i);
+        const digest = createHash('sha256')
+            .update(`${challenge.nonce}:${candidate}`)
+            .digest('hex');
+        if (digest.startsWith(prefix))
+            return candidate;
+    }
+    throw new Error('Relay proof-of-work solution was not found within the safety limit');
+}
+function normalizeBase(baseUrl) {
+    return baseUrl.replace(/\/$/, '');
+}
+async function relayJson(baseUrl, path, body) {
+    const response = await fetch(`${normalizeBase(baseUrl)}${path}`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+    });
+    const text = await response.text();
+    let parsed;
+    try {
+        parsed = text ? JSON.parse(text) : {};
+    }
+    catch {
+        throw new Error(`Non-JSON response (${response.status}): ${text.slice(0, 200)}`);
+    }
+    if (!response.ok) {
+        const error = parsed;
+        throw new Error(error.error || error.code || `HTTP ${response.status}`);
+    }
+    return parsed;
+}
+export function requestRelayBrowserChallenge(baseUrl = 'https://www.agentchainlabs.com') {
+    return relayJson(baseUrl, '/api/v1/identity/connect/challenge', { method: 'browser' });
+}
+export function connectRelayBrowser(baseUrl, params) {
+    return relayJson(baseUrl, '/api/v1/identity/connect', {
+        method: 'browser',
+        ...params,
+    });
+}
+export async function connectRelayWithSolver(solve, options) {
+    const baseUrl = options.baseUrl ?? 'https://www.agentchainlabs.com';
+    const challenge = await requestRelayBrowserChallenge(baseUrl);
+    const solution = await solve(challenge);
+    return connectRelayBrowser(baseUrl, {
+        challengeToken: challenge.challengeToken,
+        solution,
+        agreedToTerms: options.agreedToTerms,
+        from: options.from,
+        cardUrl: options.cardUrl,
+    });
+}
+/** One-call Node.js Relay Connect flow: challenge, solve and issue credentials. */
+export function connectRelay(options) {
+    return connectRelayWithSolver(async (challenge) => solveRelayBrowserChallenge(challenge), options);
+}
+export function requestRelayWalletChallenge(walletAddress, baseUrl = 'https://www.agentchainlabs.com') {
+    return relayJson(baseUrl, '/api/v1/identity/connect/challenge', {
+        method: 'wallet',
+        walletAddress,
+    });
+}
+export function connectRelayWallet(baseUrl, params) {
+    return relayJson(baseUrl, '/api/v1/identity/connect', {
+        method: 'wallet',
+        ...params,
+    });
+}