@arinova-ai/spaces-sdk 0.1.4 → 0.1.6

package/README.md

@@ -1,24 +1,37 @@
-# @arinova/spaces-sdk
+# @arinova-ai/spaces-sdk
 
-OAuth PKCE SDK for Arinova Spaces — authenticate users without exposing secrets.
+SDK for building apps on Arinova — authentication, agent chat, and economy.
 
 ## Installation
 
 ```bash
-npm install @arinova/spaces-sdk
+npm install @arinova-ai/spaces-sdk
 ```
 
 ## Quick Start
 
+### Embedded in Arinova Chat (iframe)
+
 ```js
-import { Arinova } from "@arinova/spaces-sdk";
+import { Arinova } from "@arinova-ai/spaces-sdk";
+
+const arinova = new Arinova({ appId: "your-client-id" });
 
+// Automatically receives auth token from Arinova Chat via postMessage
+const { user, accessToken, agents } = await arinova.connect();
+console.log(user.name);    // "Ripple"
+console.log(agents);       // User's agents available in this space
+```
+
+### Standalone (external website)
+
+```js
 const arinova = new Arinova({ appId: "your-client-id" });
 
-// Trigger login (opens popup)
+// Opens popup for OAuth PKCE login
 const token = await arinova.login();
-console.log(token.user.name);       // "Alice"
-console.log(token.access_token);    // Bearer token for API calls
+console.log(token.user.name);
+console.log(token.access_token);
 ```
 
 ## Setup
@@ -27,7 +40,7 @@ console.log(token.access_token);    // Bearer token for API calls
 2. Copy the `Client ID` from the output
 3. No `client_secret` needed — all apps use PKCE
 
-## API
+## API Reference
 
 ### `new Arinova(config)`
 
@@ -38,23 +51,116 @@ console.log(token.access_token);    // Bearer token for API calls
 | `redirectUri` | `string` | `{origin}/callback` | OAuth callback URL |
 | `scope` | `string` | `"profile"` | OAuth scope |
 
-### `arinova.login(): Promise<TokenResponse>`
+---
 
-Opens a popup for user authorization (PKCE flow). Returns:
+### Authentication
 
-```ts
+#### `arinova.connect(options?): Promise<ConnectResult>`
+
+**Recommended for Spaces.** Auto-detects environment:
+- **Inside iframe** (Arinova Chat): receives auth via postMessage from parent window
+- **Outside iframe** (standalone): falls back to `login()` popup flow
+
+```js
+const { user, accessToken, agents } = await arinova.connect({ timeout: 10000 });
+```
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `timeout` | `number` | `5000` | Timeout in ms for postMessage (iframe mode) |
+
+Returns: `{ user: { id, name, email, image }, accessToken: string, agents: Agent[] }`
+
+#### `arinova.login(): Promise<TokenResponse>`
+
+Opens a popup for OAuth PKCE authorization. Falls back to redirect if popup is blocked.
+
+#### `arinova.handleCallback(): Promise<TokenResponse>`
+
+Call on your redirect_uri page to complete the OAuth flow (redirect mode).
+
+---
+
+### Agent Chat
+
+Chat with the user's AI agents. Supports streaming (SSE).
+
+#### `POST /api/v1/agents/{agentId}/chat`
+
+**Auth:** Bearer token (requires `agents` scope)
+
+**Request Body:**
+
+```json
 {
-  access_token: string;
-  token_type: "Bearer";
-  expires_in: 604800;  // 7 days
-  scope: "profile";
-  user: { id, name, email, image };
+  "agentId": "uuid",
+  "prompt": "Hello!",
+  "systemPrompt": "You are a brave adventurer's companion...",
+  "messages": [
+    { "role": "user", "content": "Let's go north" },
+    { "role": "assistant", "content": "We arrived at the dark forest..." }
+  ],
+  "context": {
+    "player": { "name": "Ripple", "level": 5, "hp": 120 },
+    "location": { "name": "Village Square", "exits": ["north", "south"] },
+    "inventory": ["Wooden Sword", "Health Potion x3"]
+  }
 }
 ```
 
-### `arinova.handleCallback(): Promise<TokenResponse>`
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `agentId` | `string` | Yes | The agent's UUID |
+| `prompt` | `string` | No* | Single user message |
+| `systemPrompt` | `string` | No | Overrides agent's default system prompt |
+| `messages` | `Array<{role, content}>` | No* | Multi-turn conversation history |
+| `context` | `object` | No | Game/app state, injected into system prompt as `[Context]` block |
+
+*Either `prompt` or `messages` must be provided.
+
+**Response:** Server-Sent Events (SSE)
+
+```
+data: {"type":"chunk","content":"Hello"}
+data: {"type":"chunk","content":" there!"}
+data: {"type":"done"}
+```
+
+**Usage Tips:**
+- `systemPrompt` = stable character/role definition (doesn't change often)
+- `context` = real-time app state (updated every request)
+- `messages` = conversation history (accumulated by your app)
+
+---
+
+### Economy
+
+#### `arinova.balance(): Promise<{ balance: number }>`
+
+Get the current user's coin balance.
+
+```js
+const { balance } = await arinova.balance();
+```
+
+#### `arinova.purchase(productId, amount, description?): Promise<PurchaseResponse>`
 
-Call on your redirect_uri page to complete the flow (for redirect mode instead of popup).
+Charge coins from the user's balance. Requires `economy` scope (via OAuth consent).
+
+```js
+const result = await arinova.purchase("health-potion", 50, "Bought Health Potion");
+console.log(result.transactionId, result.newBalance);
+```
+
+#### `arinova.transactions(limit?, offset?): Promise<TransactionsResponse>`
+
+Get the user's transaction history.
+
+```js
+const { transactions, total } = await arinova.transactions(20, 0);
+```
+
+---
 
 ## PKCE Flow
 
@@ -69,23 +175,3 @@ Call on your redirect_uri page to complete the flow (for redirect mode instead o
 - Path can differ (SDK uses `window.location.origin + /callback` by default)
 - Must use HTTPS in production
 - `http://localhost` is allowed for development
-
-## Example: Redirect Mode
-
-If popups are blocked, use redirect mode:
-
-```js
-// On login page:
-const arinova = new Arinova({
-  appId: "your-client-id",
-  redirectUri: "https://myapp.com/auth/callback",
-});
-arinova.login(); // Will redirect if popup is blocked
-
-// On callback page (/auth/callback):
-const arinova = new Arinova({
-  appId: "your-client-id",
-  redirectUri: "https://myapp.com/auth/callback",
-});
-const token = await arinova.handleCallback();
-```

package/dist/index.js

@@ -111,10 +111,12 @@ export class Arinova {
                 }
             }, timeout);
             const handler = (event) => {
+                console.log("[ARINOVA-SDK] message received", event.data?.type, { settled, hasPayload: !!event.data?.payload });
                 if (event.data?.type !== "arinova:auth")
                     return;
                 if (settled)
                     return;
+                console.log("[ARINOVA-SDK] arinova:auth matched, resolving connect()");
                 settled = true;
                 clearTimeout(timer);
                 window.removeEventListener("message", handler);
@@ -123,6 +125,7 @@ export class Arinova {
                 resolve(payload);
             };
             window.addEventListener("message", handler);
+            console.log("[ARINOVA-SDK] connect() listener registered, waiting for arinova:auth...");
         });
     }
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arinova-ai/spaces-sdk",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Arinova Spaces SDK — OAuth PKCE login for third-party apps",
   "type": "module",
   "main": "dist/index.js",