@agentforge-io/sdk-server 4.0.20 → 4.0.21

package/dist/index.d.ts

@@ -2,7 +2,7 @@ export { AgentForgeClient } from './client';
 export type { AgentForgeClientOptions, RequestOptions } from './client';
 export { AgentForgeError, AgentForgeAuthError, AgentForgeNotFoundError, AgentForgeNetworkError, } from './errors';
 export { TOOL_CALLBACK_HEADERS, ToolCallbackSignatureError, signToolCallbackPayload, verifyToolCallbackSignature, } from './webhooks';
-export type { AgentMe, AgentSummary, ApprovalCopyBundle, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, } from './types';
+export type { AgentMe, AgentSummary, ApprovalCopyBundle, ChatStreamChunk, ChatStreamEvent, ChatTokenRecord, ConnectorDefaultsResult, ConnectorDefaultsSource, ConnectorResourceItem, ConnectorStatus, ConnectorToolInfo, ConversationHistory, ConversationStatus, CreateAgentInput, CreateClickupTaskInput, CreateClickupTaskResult, ExternalToolSummary, IssueChatTokenInput, ListAgentsResult, ListConnectorResourcesResult, McpServerConfig, MessageRecord, MessageRole, PublicAppBranding, AppSelf, AppSelfConnector, AppSelfConnectors, RegisterToolInput, RegisterToolsInput, RegisterToolsResult, ToolCallbackPayload, ToolCallRecord, ToolPermission, ToolPermissionMode, TokenUsage, TenantSecretEntry, UpdateAgentInput, } from './types';
 export { AgentsResource } from './resources/agents';
 export { AppsResource } from './resources/apps';
 export { ChatResource } from './resources/chat';

package/dist/resources/apps.d.ts

@@ -1,5 +1,5 @@
 import type { AgentForgeClient } from '../client';
-import type { PublicAppBranding } from '../types';
+import type { PublicAppBranding, AppSelf, AppSelfConnectors } from '../types';
 export declare class AppsResource {
     private readonly client;
     constructor(client: AgentForgeClient);
@@ -20,18 +20,26 @@ export declare class AppsResource {
      */
     publicMetadata(publicKey: string): Promise<PublicAppBranding>;
     /**
-     * Metadata of the App this client authenticated AS (via `sk_live_` in
-     * `appSecret`). NOT YET AVAILABLE — the `sk_live_` guard resolves the App
-     * server-side, but no "self" endpoint returns it. Throws until the backend
-     * half of §6 lands, so callers get a clear signal instead of a 404.
+     * `GET /apps/me` — metadata of the App this client authenticated AS (via
+     * `sk_live_` in `appSecret`). Returns branding + status + credential
+     * prefixes only — never the plaintext secret or its hash.
+     *
+     * Requires the client to have an `appSecret`. A `pk_test_`/draft App's
+     * `sk_live_` is rejected upstream (403 `not_published`); a client with no
+     * `appSecret` gets 401.
+     *
+     * @example
+     *   const me = await af.apps.me();
+     *   if (me.status !== 'published') warnAuthorTheirAppIsDraft();
      */
-    me(): Promise<never>;
+    me(): Promise<AppSelf>;
     readonly connectors: {
         /**
-         * Connectors enabled for the authenticated App. NOT YET AVAILABLE — same
-         * reason as `me()`: needs a `sk_live_`-authenticated self endpoint that
-         * doesn't exist yet.
+         * `GET /apps/me/connectors` — connectors resolved for the App this client
+         * authenticated AS, with the same whitelist-vs-legacy `mode` the
+         * tenant-admin surface returns. Only `enabled` rows are actually usable
+         * by the App at runtime.
          */
-        list: () => Promise<never>;
+        list: () => Promise<AppSelfConnectors>;
     };
 }

package/dist/resources/apps.js

@@ -11,16 +11,15 @@
 //     `GET /apps/public/:publicKey` (AGF-070f-pk). Used for the
 //     frontend/widget case where only the public key is known.
 //   - `me()` / `connectors.list()` — self-metadata for the App the client
-//     authenticated AS (via `sk_live_` in `appSecret`). These need
-//     server-side "self" endpoints that DON'T EXIST YET (the guard resolves
-//     the App from `sk_live_`, but no controller returns it) — they throw a
-//     clear NotImplemented until the backend half lands, rather than silently
-//     hitting a 404. See the §6 note in the task ledger.
+//     authenticated AS (via `sk_live_` in `appSecret`). Backed by
+//     `GET /apps/me` and `GET /apps/me/connectors` (AGF-070 §6 backend).
+//     The client's `appSecret` is sent automatically on the
+//     `Authorization: Bearer` header, so the server's `ApiKeyGuard` resolves
+//     the calling App and returns ONLY that App — no id/tenant param needed.
 //
-// Auth: `publicMetadata` is unauthenticated (the endpoint is `@Public()`), so
-// it works even on a client constructed with only a `baseURL`-less-secret
-// path is N/A here — we call the raw endpoint directly. `me()`/`connectors`
-// will use the `sk_live_` (`appSecret`) auth once their endpoints exist.
+// Auth: `publicMetadata` is unauthenticated (the endpoint is `@Public()`).
+// `me()`/`connectors.list()` require the client to have been constructed with
+// `appSecret` (`sk_live_...`); without it the server answers 401.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppsResource = void 0;
 class AppsResource {
@@ -28,14 +27,13 @@ class AppsResource {
         this.client = client;
         this.connectors = {
             /**
-             * Connectors enabled for the authenticated App. NOT YET AVAILABLE — same
-             * reason as `me()`: needs a `sk_live_`-authenticated self endpoint that
-             * doesn't exist yet.
+             * `GET /apps/me/connectors` — connectors resolved for the App this client
+             * authenticated AS, with the same whitelist-vs-legacy `mode` the
+             * tenant-admin surface returns. Only `enabled` rows are actually usable
+             * by the App at runtime.
              */
             list: async () => {
-                throw new Error('AppsResource.connectors.list() is not available yet — needs a ' +
-                    "sk_live_-authenticated self endpoint (GET /apps/me/connectors) that hasn't " +
-                    'been implemented. See AGF-070 §6.');
+                return this.client.request('GET', '/apps/me/connectors');
             },
         };
     }
@@ -58,15 +56,20 @@ class AppsResource {
         return this.client.request('GET', `/apps/public/${encodeURIComponent(publicKey)}`);
     }
     /**
-     * Metadata of the App this client authenticated AS (via `sk_live_` in
-     * `appSecret`). NOT YET AVAILABLE — the `sk_live_` guard resolves the App
-     * server-side, but no "self" endpoint returns it. Throws until the backend
-     * half of §6 lands, so callers get a clear signal instead of a 404.
+     * `GET /apps/me` — metadata of the App this client authenticated AS (via
+     * `sk_live_` in `appSecret`). Returns branding + status + credential
+     * prefixes only — never the plaintext secret or its hash.
+     *
+     * Requires the client to have an `appSecret`. A `pk_test_`/draft App's
+     * `sk_live_` is rejected upstream (403 `not_published`); a client with no
+     * `appSecret` gets 401.
+     *
+     * @example
+     *   const me = await af.apps.me();
+     *   if (me.status !== 'published') warnAuthorTheirAppIsDraft();
      */
     async me() {
-        throw new Error('AppsResource.me() is not available yet — the server-side self endpoint ' +
-            "(GET /apps/me, authenticated by sk_live_) hasn't been implemented. " +
-            'Use publicMetadata(publicKey) for branding by public key in the meantime.');
+        return this.client.request('GET', '/apps/me');
     }
 }
 exports.AppsResource = AppsResource;

package/dist/types.d.ts

@@ -48,6 +48,42 @@ export interface PublicAppBranding {
     logoUrl: string | null;
     coverUrl: string | null;
 }
+export interface AppSelf {
+    id: string;
+    name: string;
+    description: string | null;
+    logoUrl: string | null;
+    coverUrl: string | null;
+    content: string | null;
+    status: 'draft' | 'published';
+    publicKey: string;
+    apiSecretPrefix: string;
+    publicKeyTest: string | null;
+    apiSecretTestPrefix: string | null;
+    revokedAt: string | null;
+    lastUsedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AppSelfConnector {
+    connectorId: string;
+    name: string;
+    iconUrl?: string;
+    /** Available to this App via the tenant's connected connectors. */
+    available: boolean;
+    /** Enabled for this App (whitelist row `enabled`, or `available` when the
+     *  App has no whitelist rows and falls back to legacy allow-all). */
+    enabled: boolean;
+    /** The App has a per-tool permission override for this connector. */
+    hasOverride: boolean;
+}
+export interface AppSelfConnectors {
+    /** `'whitelist'` — the App has >=1 explicit row; only `enabled` counts.
+     *  `'legacy'` — zero rows, every tenant-connected connector is implicitly
+     *  available. */
+    mode: 'whitelist' | 'legacy';
+    connectors: AppSelfConnector[];
+}
 export interface RegisterToolInput {
     name: string;
     description: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentforge-io/sdk-server",
-  "version": "4.0.20",
+  "version": "4.0.21",
   "description": "Server-side SDK for backend apps integrating with AgentForge platform. Auth via ChatToken or ak_live_ API key.",
   "license": "MIT",
   "main": "dist/index.js",