@apteva/web-sdk 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,14 +1,25 @@
 # Changelog
 
+## 0.2.0 — 2026-05-13
+
+**Breaking**: class + interface renamed from `Apteve*` to `Apteva*` (typo fix — org name is `apteva`, not `apteve`).
+
+- `ApteveClient` → `AptevaClient`
+- `ApteveError` → `AptevaError`
+- `ApteveClientOptions` → `AptevaClientOptions`
+
+Same public surface, same behavior. Anyone on 0.1.0 (if any) renames the imports and is good.
+
+
 ## 0.1.0 — 2026-05-13
 
 Initial release.
 
-- `ApteveClient` — base client with session-cookie + Bearer + `?api_key=` auth carriers, `credentials: include` for cross-origin cookie flow, configurable timeout, `onUnauthorized` hook.
+- `AptevaClient` — base client with session-cookie + Bearer + `?api_key=` auth carriers, `credentials: include` for cross-origin cookie flow, configurable timeout, `onUnauthorized` hook.
 - `client.auth` namespace — `register`, `login`, `logout`, `me`, `status`, `changePassword`, `listKeys`, `createKey`, `deleteKey`.
 - `client.app(name)` — typed handle for any installed app: `get/post/put/patch/del` for HTTP routes + `tool(name, args)` for MCP calls. Generic type parameter for response shape.
 - `unwrapMCP` — exposed standalone for callers that want to handle the JSON-RPC envelope themselves.
 - Window helpers — `readAptevaInjection`, `pickKioskKey`, `pickBaseURL` for UIs hosted as static apps on apteva-server itself.
 - `client.sseURL` + `client.app(...).mcpURL` builders for `EventSource` / `<iframe>` / external clients that can't go through `fetch`.
-- `ApteveError` with `.status`, `.body`, `.code`, `.isUnauthorized()`, `.isNotFound()`.
+- `AptevaError` with `.status`, `.body`, `.code`, `.isUnauthorized()`, `.isNotFound()`.
 - 43 tests covering carriers, auth, app HTTP/MCP, envelope unwrap, window helpers.

package/README.md

@@ -18,9 +18,9 @@ npm install @apteva/web-sdk
 ## Quick start
 
 ```ts
-import { ApteveClient } from "@apteva/web-sdk";
+import { AptevaClient } from "@apteva/web-sdk";
 
-const apteva = new ApteveClient({
+const apteva = new AptevaClient({
   baseURL: "https://agents.example.com",
   // Optional. Omit to rely on the session cookie (after auth.login).
   apiKey: process.env.NEXT_PUBLIC_APTEVA_KEY,
@@ -47,7 +47,7 @@ The SDK sends `credentials: "include"` on every request, so a session cookie set
 You can layer on an API key by setting `apiKey` in the constructor or calling `client.setApiKey(...)` at runtime. Bearer-wins-over-cookie on the wire.
 
 ```ts
-const apteva = new ApteveClient({
+const apteva = new AptevaClient({
   baseURL: "...",
   apiKey: "sk-...",     // optional
   onUnauthorized: () => router.push("/login"),  // fires once per 401
@@ -75,19 +75,19 @@ const result = await apteva.app("tables").tool<{ rows: Row[]; total: number }>(
 );
 ```
 
-If the MCP call returns a JSON-RPC error, the SDK throws `ApteveError(-1, message, code)` — same `catch` block as HTTP errors.
+If the MCP call returns a JSON-RPC error, the SDK throws `AptevaError(-1, message, code)` — same `catch` block as HTTP errors.
 
 For lower-level usage, `client.callTool(appName, toolName, args)` and the standalone `unwrapMCP(envelope)` are both exported.
 
 ## Error handling
 
-Every non-2xx response and every MCP error throws an `ApteveError`:
+Every non-2xx response and every MCP error throws an `AptevaError`:
 
 ```ts
 try {
   await apteva.app("crm").tool("contacts_get", { id: 999 });
 } catch (err) {
-  if (err instanceof ApteveError) {
+  if (err instanceof AptevaError) {
     if (err.isUnauthorized()) ...      // 401
     if (err.isNotFound()) ...          // 404
     if (err.status === -1) ...         // MCP-level error
@@ -96,16 +96,16 @@ try {
 }
 ```
 
-Network failures (no DNS, refused connection) surface as `ApteveError(0, "...")`. Timeouts surface as `ApteveError(0, "request timeout after Xms")`.
+Network failures (no DNS, refused connection) surface as `AptevaError(0, "...")`. Timeouts surface as `AptevaError(0, "request timeout after Xms")`.
 
 ## Hosted on apteva-server itself
 
 If your UI is installed as a `runtime.kind: static` app, apteva-server injects a config block. The SDK picks it up:
 
 ```ts
-import { ApteveClient, pickBaseURL, pickKioskKey } from "@apteva/web-sdk";
+import { AptevaClient, pickBaseURL, pickKioskKey } from "@apteva/web-sdk";
 
-const apteva = new ApteveClient({
+const apteva = new AptevaClient({
   baseURL: pickBaseURL(),     // window.__APTEVA_APP__.api_base
   apiKey:  pickKioskKey(),    // ?api_key=... > install config > undefined
 });

package/dist/client.d.ts

@@ -1,11 +1,11 @@
-import type { ApteveClientOptions, AuthStatus, MCPCallResponse, User } from "./types.js";
-export declare class ApteveClient {
+import type { AptevaClientOptions, AuthStatus, MCPCallResponse, User } from "./types.js";
+export declare class AptevaClient {
     private readonly baseURL;
     private apiKey?;
     private readonly fetchImpl;
     private readonly onUnauthorized?;
     private readonly timeoutMs;
-    constructor(opts: ApteveClientOptions);
+    constructor(opts: AptevaClientOptions);
     setApiKey(key: string | undefined): void;
     getApiKey(): string | undefined;
     readonly auth: {

package/dist/client.js

@@ -1,6 +1,6 @@
-import { ApteveError } from "./errors.js";
+import { AptevaError } from "./errors.js";
 const DEFAULT_TIMEOUT_MS = 30_000;
-export class ApteveClient {
+export class AptevaClient {
     baseURL;
     apiKey;
     fetchImpl;
@@ -138,20 +138,20 @@ export class ApteveClient {
             if (timer)
                 clearTimeout(timer);
             if (err instanceof Error && err.name === "AbortError") {
-                throw new ApteveError(0, `request timeout after ${this.timeoutMs}ms`);
+                throw new AptevaError(0, `request timeout after ${this.timeoutMs}ms`);
             }
-            throw new ApteveError(0, err instanceof Error ? err.message : String(err));
+            throw new AptevaError(0, err instanceof Error ? err.message : String(err));
         }
         if (timer)
             clearTimeout(timer);
         if (res.status === 401) {
             this.onUnauthorized?.();
             const text = await readBody(res);
-            throw new ApteveError(401, text || "unauthorized");
+            throw new AptevaError(401, text || "unauthorized");
         }
         if (!res.ok) {
             const text = await readBody(res);
-            throw new ApteveError(res.status, text || res.statusText);
+            throw new AptevaError(res.status, text || res.statusText);
         }
         const ct = res.headers.get("Content-Type") ?? "";
         if (res.status === 204)
@@ -172,13 +172,13 @@ async function readBody(res) {
 }
 // Strip the MCP JSON-RPC envelope so callers see the tool's natural
 // return shape. Mirrors app-sdk/caller.go::CallAppResult. Three cases:
-//   1. envelope.error  → throw ApteveError(-1, message, code)
+//   1. envelope.error  → throw AptevaError(-1, message, code)
 //   2. envelope.result.content[0].text  → JSON.parse(text), return it
 //   3. envelope has neither (the platform already short-circuited an
 //      unwrapped response) → cast and return
 export function unwrapMCP(env) {
     if (env && env.error) {
-        throw new ApteveError(-1, env.error.message, env.error.code);
+        throw new AptevaError(-1, env.error.message, env.error.code);
     }
     const text = env?.result?.content?.[0]?.text;
     if (typeof text !== "string") {
@@ -188,7 +188,7 @@ export function unwrapMCP(env) {
         return JSON.parse(text);
     }
     catch (err) {
-        throw new ApteveError(-1, `MCP response was not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+        throw new AptevaError(-1, `MCP response was not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export declare class ApteveError extends Error {
+export declare class AptevaError extends Error {
     status: number;
     body: string;
     code?: number;

package/dist/errors.js

@@ -3,13 +3,13 @@
 // network/transport failures, or -1 for JSON-RPC errors that came
 // back inside a 200 envelope). body is the raw response body (text)
 // or the JSON-RPC error.message — whichever was available.
-export class ApteveError extends Error {
+export class AptevaError extends Error {
     status;
     body;
     code;
     constructor(status, body, code) {
         super(`HTTP ${status}: ${body}`);
-        this.name = "ApteveError";
+        this.name = "AptevaError";
         this.status = status;
         this.body = body;
         this.code = code;

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { ApteveClient, unwrapMCP } from "./client.js";
+export { AptevaClient, unwrapMCP } from "./client.js";
 export type { AppHandle } from "./client.js";
-export { ApteveError } from "./errors.js";
+export { AptevaError } from "./errors.js";
 export { readAptevaInjection, pickKioskKey, pickBaseURL, } from "./window.js";
-export type { ApteveClientOptions, AuthCarrier, AuthBranding, AuthStatus, AptevaAppInjection, MCPCallRequest, MCPCallResponse, User, } from "./types.js";
+export type { AptevaClientOptions, AuthCarrier, AuthBranding, AuthStatus, AptevaAppInjection, MCPCallRequest, MCPCallResponse, User, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,4 @@
-export { ApteveClient, unwrapMCP } from "./client.js";
-export { ApteveError } from "./errors.js";
+export { AptevaClient, unwrapMCP } from "./client.js";
+export { AptevaError } from "./errors.js";
 export { readAptevaInjection, pickKioskKey, pickBaseURL, } from "./window.js";
 //# sourceMappingURL=index.js.map

package/dist/types.d.ts

@@ -34,7 +34,7 @@ declare global {
     }
 }
 export type AuthCarrier = "cookie" | "apiKey";
-export interface ApteveClientOptions {
+export interface AptevaClientOptions {
     baseURL: string;
     apiKey?: string;
     fetch?: typeof fetch;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apteva/web-sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Browser SDK for apteva-server. Handles auth (session cookie + API key + ?api_key=), wraps the /api/apps/<name>/* HTTP and MCP proxy, normalizes the MCP JSON-RPC envelope, and surfaces window.__APTEVA_APP__ when the UI is hosted on apteva-server itself. Framework-agnostic.",
   "license": "MIT",
   "author": "Apteva",