@astralbeam/sdk 0.9.0 → 0.10.1

package/dist/api.d.ts

@@ -0,0 +1,333 @@
+//#region src/api/api.d.ts
+interface ApiRequestOptions extends RequestInit {
+  apiUrl?: string | undefined;
+  fetchClient?: typeof globalThis.fetch;
+}
+type ApiKeyOptions = ApiRequestOptions & {
+  apiKey: string;
+  astralBeamToken?: never;
+};
+type JwtOptions = ApiRequestOptions & {
+  astralBeamToken: string;
+  apiKey?: never;
+};
+type ApiOptions = ApiKeyOptions | JwtOptions;
+type FileOptions = ApiRequestOptions & {
+  apiKey?: never;
+  astralBeamToken?: never;
+};
+interface AstralBeamApiError extends Error {
+  name: "AstralBeamApiError";
+  status: number;
+  headers: Headers;
+  body?: AstralBeamApiError$1;
+}
+declare function isAstralBeamApiError(error: unknown): error is AstralBeamApiError;
+declare function astralBeamApiFetch<T>(path: string, options: ApiOptions): Promise<T>;
+declare function astralBeamJwtFetch<T>(path: string, options: JwtOptions): Promise<T>;
+declare function astralBeamChatFetch<_T>(path: string, options: JwtOptions): Promise<Response>;
+declare function astralBeamFileFetch<_T>(path: string, options?: FileOptions): Promise<Response>;
+//#endregion
+//#region src/api/generated/api.d.ts
+/**
+ * Customer-defined JSON object; keys are preserved.
+ */
+type TenantRecordEncodedMetadata = {
+  [key: string]: unknown;
+};
+/**
+ * Persisted Tenant; id is internal, external_id is the customer's exact identity.
+ */
+interface TenantRecordEncoded {
+  id: string;
+  external_id: string;
+  name: string | null;
+  /** Customer-defined JSON object; keys are preserved. */
+  metadata: TenantRecordEncodedMetadata;
+  created_at: string;
+  updated_at: string;
+}
+/**
+ * Live keyset page. Pass either non-null continuation value as the same-named request parameter.
+ */
+interface TenantPage {
+  items: TenantRecordEncoded[];
+  /** Pass as page_after to fetch the next page; null means no next page. */
+  page_after: string | null;
+  /** Pass as page_before to fetch the previous page; null means no previous page. */
+  page_before: string | null;
+}
+type AstralBeamApiErrorIssuesItem = {
+  path: string;
+  message: string;
+};
+interface AstralBeamApiError$1 {
+  type: string;
+  title: string;
+  status: number;
+  detail: string;
+  issues?: AstralBeamApiErrorIssuesItem[];
+}
+/**
+ * Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object.
+ */
+type CreateTenantInputMetadata = {
+  [key: string]: unknown;
+};
+interface CreateTenantInput {
+  /**
+   * Your stable external identity. Exact and case-sensitive; whitespace is preserved. Immutable after creation.
+   * @minLength 1
+   * @maxLength 255
+   */
+  external_id: string;
+  /** Defaults to null on creation. Send null to clear the name. */
+  name?: string | null;
+  /** Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object. */
+  metadata?: CreateTenantInputMetadata;
+}
+/**
+ * Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object.
+ */
+type UpdateTenantInputMetadata = {
+  [key: string]: unknown;
+};
+interface UpdateTenantInput {
+  /** Defaults to null on creation. Send null to clear the name. */
+  name?: string | null;
+  /** Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object. */
+  metadata?: UpdateTenantInputMetadata;
+}
+/**
+ * Customer-defined JSON object; keys are preserved.
+ */
+type TenantUserRecordEncodedMetadata = {
+  [key: string]: unknown;
+};
+/**
+ * Persisted TenantUser. Stored admin does not grant or revoke signed JWT authority.
+ */
+interface TenantUserRecordEncoded {
+  id: string;
+  external_id: string;
+  name: string | null;
+  /** Customer-defined JSON object; keys are preserved. */
+  metadata: TenantUserRecordEncodedMetadata;
+  created_at: string;
+  updated_at: string;
+  tenant_id: string;
+  admin: boolean;
+}
+/**
+ * Live keyset page in ascending ID order within one Tenant. Pass either non-null continuation value as the same-named request parameter.
+ */
+interface TenantUserPage {
+  items: TenantUserRecordEncoded[];
+  /** Pass as page_after to fetch the next page; null means no next page. */
+  page_after: string | null;
+  /** Pass as page_before to fetch the previous page; null means no previous page. */
+  page_before: string | null;
+}
+/**
+ * Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object.
+ */
+type CreateTenantUserInputMetadata = {
+  [key: string]: unknown;
+};
+interface CreateTenantUserInput {
+  /**
+   * Your stable external identity. Exact and case-sensitive; whitespace is preserved. Immutable after creation.
+   * @minLength 1
+   * @maxLength 255
+   */
+  external_id: string;
+  /** Defaults to null on creation. Send null to clear the name. */
+  name?: string | null;
+  /** Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object. */
+  metadata?: CreateTenantUserInputMetadata;
+  /** Defaults to false on creation. Stored admin does not change signed JWT authority. */
+  admin?: boolean;
+}
+/**
+ * Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object.
+ */
+type UpdateTenantUserInputMetadata = {
+  [key: string]: unknown;
+};
+interface UpdateTenantUserInput {
+  /** Defaults to null on creation. Send null to clear the name. */
+  name?: string | null;
+  /** Customer-defined JSON object; keys are preserved. Defaults to {} on creation. Updates replace the entire object. */
+  metadata?: UpdateTenantUserInputMetadata;
+  /** Defaults to false on creation. Stored admin does not change signed JWT authority. */
+  admin?: boolean;
+}
+type ChatRunInputForwardedProps = {
+  [key: string]: unknown;
+};
+/**
+ * Legacy mirror of forwardedProps sent by TanStack AI clients.
+ */
+type ChatRunInputData = {
+  [key: string]: unknown;
+};
+/**
+ * AG-UI RunAgentInput, validated by TanStack AI. Messages, tools, context, and resume entries follow AG-UI. forwardedProps accepts agentId and development-only debug. systemPrompt is rejected. Maximum request size: 32 MiB.
+ */
+interface ChatRunInput {
+  threadId: string;
+  runId: string;
+  messages: unknown[];
+  tools: unknown[];
+  context: unknown[];
+  forwardedProps?: ChatRunInputForwardedProps;
+  /** Legacy mirror of forwardedProps sent by TanStack AI clients. */
+  data?: ChatRunInputData;
+  state?: unknown;
+  parentRunId?: string;
+  resume?: unknown[];
+}
+type ChatConfigurationCapabilities = {
+  attachments: boolean;
+};
+interface ChatConfiguration {
+  capabilities: ChatConfigurationCapabilities;
+}
+type ListTenantsParams = {
+  /**
+   * Case-insensitive literal substring of name or external_id. Trimmed, blank means no search.
+   * @maxLength 255
+   * @pattern ^[^\u0000]*$
+   */
+  q?: string;
+  /**
+   * Exact, case-sensitive external ID; whitespace is preserved. Returns zero or one item.
+   * @minLength 1
+   * @maxLength 255
+   */
+  "filter[external_id]"?: string;
+  /**
+   * Positive integer, default 20. Values above 100 are accepted and capped. page_after and page_before are mutually exclusive.
+   * @minimum 1
+   */
+  page_size?: number;
+  /**
+   * @minLength 1
+   * @maxLength 2048
+   */
+  page_after?: string;
+  /**
+   * @minLength 1
+   * @maxLength 2048
+   */
+  page_before?: string;
+};
+type ListUsersForTenantParams = {
+  /**
+   * Case-insensitive literal substring of name or external_id. Trimmed, blank means no search.
+   * @maxLength 255
+   * @pattern ^[^\u0000]*$
+   */
+  q?: string;
+  /**
+   * Exact, case-sensitive external ID; whitespace is preserved. Returns zero or one item.
+   * @minLength 1
+   * @maxLength 255
+   */
+  "filter[external_id]"?: string;
+  /**
+   * Positive integer, default 20. Values above 100 are accepted and capped. page_after and page_before are mutually exclusive.
+   * @minimum 1
+   */
+  page_size?: number;
+  /**
+   * @minLength 1
+   * @maxLength 2048
+   */
+  page_after?: string;
+  /**
+   * @minLength 1
+   * @maxLength 2048
+   */
+  page_before?: string;
+  "filter[admin]"?: ListUsersForTenantFilterAdmin;
+};
+type ListUsersForTenantFilterAdmin = typeof ListUsersForTenantFilterAdmin[keyof typeof ListUsersForTenantFilterAdmin];
+declare const ListUsersForTenantFilterAdmin: {
+  readonly true: "true";
+  readonly false: "false";
+};
+type GetChatConfigParams = {
+  agentId?: string;
+};
+type GetChatFileParams = {
+  ticket: string;
+};
+declare const getListTenantsUrl: (params: ListTenantsParams) => string;
+/**
+ * List Tenants in internal ID order. q searches name or external ID as a case-insensitive literal substring. filter[external_id] adds an exact match. Organization keys and organization-management JWTs see their organization; admin tenant JWTs see only their signed Tenant. Keep filters unchanged when reusing cursors. Live listing, not a snapshot.
+ * @summary List Tenants
+ */
+declare const listTenants: (params: ListTenantsParams, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantPage>;
+declare const getCreateTenantUrl: () => string;
+/**
+ * Create a Tenant with an exact customer-provided external_id. Requires an organization API key or organization-management JWT with a current owner/developer role. An external_id already used in this organization returns 409; creation never upserts.
+ * @summary Create a Tenant
+ */
+declare const createTenant: (createTenantInput: CreateTenantInput, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantRecordEncoded>;
+declare const getGetTenantUrl: (id: string) => string;
+/**
+ * Get a Tenant by internal UUID, not external_id.
+ * @summary Get a Tenant
+ */
+declare const getTenant: (id: string, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantRecordEncoded>;
+declare const getUpdateTenantUrl: (id: string) => string;
+/**
+ * Update supplied name/metadata fields only. Requires an organization API key or organization-management JWT with a current owner/developer role. name:null clears the name; metadata replaces the object. Last-write-wins; no upsert.
+ * @summary Update a Tenant
+ */
+declare const updateTenant: (id: string, updateTenantInput: UpdateTenantInput, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantRecordEncoded>;
+declare const getListUsersForTenantUrl: (tenantId: string, params: ListUsersForTenantParams) => string;
+/**
+ * List users of one Tenant in internal ID order. q searches name or external ID as a case-insensitive literal substring. Exact filter[external_id] and filter[admin] combine with AND. No matching user returns an empty page; missing and out-of-scope Tenants return 404. Cursors cannot be reused for another Tenant or filter. Live listing, not a snapshot.
+ * @summary List TenantUsers
+ */
+declare const listUsersForTenant: (tenantId: string, params: ListUsersForTenantParams, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantUserPage>;
+declare const getCreateTenantUserUrl: (tenantId: string) => string;
+/**
+ * Create a TenantUser under the internal tenant_id path identifier, with a customer-provided tenant-local external_id. An external_id already used in this Tenant returns 409; the same external_id in another Tenant is allowed. Stored admin does not change signed JWT authority.
+ * @summary Create a TenantUser
+ */
+declare const createTenantUser: (tenantId: string, createTenantUserInput: CreateTenantUserInput, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantUserRecordEncoded>;
+declare const getGetTenantUserUrl: (tenantId: string, id: string) => string;
+/**
+ * Get a TenantUser by the internal tenant_id and id pair within the authorized scope. No identity upsert.
+ * @summary Get a TenantUser
+ */
+declare const getTenantUser: (tenantId: string, id: string, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantUserRecordEncoded>;
+declare const getUpdateTenantUserUrl: (tenantId: string, id: string) => string;
+/**
+ * Update supplied name/metadata/admin fields only. Stored admin does not grant or revoke JWT authority. name:null clears the name; metadata replaces the object.
+ * @summary Update a TenantUser
+ */
+declare const updateTenantUser: (tenantId: string, id: string, updateTenantUserInput: UpdateTenantUserInput, options: Parameters<typeof astralBeamApiFetch>[1]) => Promise<TenantUserRecordEncoded>;
+declare const getRunChatUrl: () => string;
+/**
+ * Stream an AG-UI agent run using a tenant user JWT. No admin claim required. HTTP failures before streaming use AstralBeamApiError. Once streaming starts, failures use RUN_ERROR events. Tool results continue in a subsequent request. Disconnecting cancels the run. Limited to 20 requests per minute per organization, tenant, and user.
+ * @summary Run chat
+ */
+declare const runChat: (chatRunInput: ChatRunInput, options: Parameters<typeof astralBeamChatFetch>[1]) => Promise<Response>;
+declare const getGetChatConfigUrl: (params: GetChatConfigParams) => string;
+/**
+ * Read the selected agent's attachment grant using a tenant user JWT. Omit agentId to use the organization's default agent. Client settings may narrow this grant, never widen it.
+ * @summary Get chat capabilities
+ */
+declare const getChatConfig: (params: GetChatConfigParams, options: Parameters<typeof astralBeamJwtFetch>[1]) => Promise<ChatConfiguration>;
+declare const getGetChatFileUrl: (params: GetChatFileParams) => string;
+/**
+ * Use the signed ticket returned when chat publishes an artifact. No bearer token is required. Returns the original bytes with a content-sniffed Content-Type and Content-Disposition filename. Invalid or expired tickets, a missing sandbox, and rejected artifact checks return 404. Provider or file-read failures return 500.
+ * @summary Download a chat artifact
+ */
+declare const getChatFile: (params: GetChatFileParams, options?: Parameters<typeof astralBeamFileFetch>[1]) => Promise<Response>;
+//#endregion
+export { type ApiKeyOptions, type ApiOptions, type ApiRequestOptions, AstralBeamApiError, type AstralBeamApiError$1 as AstralBeamApiErrorBody, AstralBeamApiErrorIssuesItem, ChatConfiguration, ChatConfigurationCapabilities, ChatRunInput, ChatRunInputData, ChatRunInputForwardedProps, CreateTenantInput, CreateTenantInputMetadata, CreateTenantUserInput, CreateTenantUserInputMetadata, type FileOptions, GetChatConfigParams, GetChatFileParams, type JwtOptions, ListTenantsParams, ListUsersForTenantFilterAdmin, ListUsersForTenantParams, TenantPage, TenantRecordEncoded, TenantRecordEncodedMetadata, TenantUserPage, TenantUserRecordEncoded, TenantUserRecordEncodedMetadata, UpdateTenantInput, UpdateTenantInputMetadata, UpdateTenantUserInput, UpdateTenantUserInputMetadata, createTenant, createTenantUser, getChatConfig, getChatFile, getCreateTenantUrl, getCreateTenantUserUrl, getGetChatConfigUrl, getGetChatFileUrl, getGetTenantUrl, getGetTenantUserUrl, getListTenantsUrl, getListUsersForTenantUrl, getRunChatUrl, getTenant, getTenantUser, getUpdateTenantUrl, getUpdateTenantUserUrl, isAstralBeamApiError, listTenants, listUsersForTenant, runChat, updateTenant, updateTenantUser };

package/dist/api.js

@@ -0,0 +1,2 @@
+import { C as updateTenantUser, S as updateTenant, T as isAstralBeamApiError, _ as getUpdateTenantUrl, a as getChatFile, b as listUsersForTenant, c as getGetChatConfigUrl, d as getGetTenantUserUrl, f as getListTenantsUrl, g as getTenantUser, h as getTenant, i as getChatConfig, l as getGetChatFileUrl, m as getRunChatUrl, n as createTenant, o as getCreateTenantUrl, p as getListUsersForTenantUrl, r as createTenantUser, s as getCreateTenantUserUrl, t as ListUsersForTenantFilterAdmin, u as getGetTenantUrl, v as getUpdateTenantUserUrl, x as runChat, y as listTenants } from "./api-CaNIR6Af.js";
+export { ListUsersForTenantFilterAdmin, createTenant, createTenantUser, getChatConfig, getChatFile, getCreateTenantUrl, getCreateTenantUserUrl, getGetChatConfigUrl, getGetChatFileUrl, getGetTenantUrl, getGetTenantUserUrl, getListTenantsUrl, getListUsersForTenantUrl, getRunChatUrl, getTenant, getTenantUser, getUpdateTenantUrl, getUpdateTenantUserUrl, isAstralBeamApiError, listTenants, listUsersForTenant, runChat, updateTenant, updateTenantUser };

package/dist/client.js

@@ -1 +1 @@
-import{c as e,t}from"./debug-66ETHfXh.js";function n(e){return e}function r(e){return e}function i(n,r){let i={...r},a=t(i.debug);a?.(`mount`,`mounting chat widget`,{agentId:i.agentId??`(organization default)`,title:i.title??`AstralBeam`,showHeader:i.showHeader??!0,emptyTitle:i.emptyTitle??`Ask the assistant`,emptyDescription:i.emptyDescription??`It can answer questions and act through this app's own tools and widgets.`,apiUrl:i.apiUrl??`https://app.astralbeam.ai/api`,authentication:`configured`,colorScheme:i.colorScheme??`system`,theme:i.theme,tools:Object.keys(i.tools??{}),widgets:Object.keys(i.widgets??{}),attachments:i.attachments??!0});let o=n.shadowRoot??n.attachShadow({mode:`open`}),s=document.createElement(`div`);s.className=e,s.style.height=`100%`,o.append(s);let c=matchMedia(`(prefers-color-scheme: dark)`),l=new Set,u=e=>{for(let e of l)s.style.removeProperty(e);l.clear();let t={...i.theme?.light,...e?i.theme?.dark:void 0};for(let[e,n]of Object.entries(t))e.startsWith(`--`)&&(s.style.setProperty(e,n),l.add(e))},d=()=>{let e=i.colorScheme??`system`,t=e===`dark`||e===`system`&&c.matches;s.classList.toggle(`dark`,t),u(t),a?.(`theme`,`color scheme "${e}" resolved to ${t?`dark`:`light`}`,{themeVariables:[...l]})};d(),c.addEventListener(`change`,d);let f=!1,p;return import(`./widget-DLUt14KM.js`).then(({renderChat:e})=>{a?.(`mount`,`chat chunk loaded`),f||(p=e(o,s,i))}),{update:e=>{i={...i,...e},a=t(i.debug),a?.(`mount`,`options updated`,{changed:Object.keys(e)}),d(),p?.update(i)},reset:()=>p?.reset(),stop:()=>p?.stop(),unmount:()=>{a?.(`mount`,`unmounting chat widget`),f=!0,c.removeEventListener(`change`,d),p?.dispose(),p=void 0,s.remove()}}}export{n as defineTool,r as defineWidget,i as mountAstralBeamChat};
+import{c as e,t}from"./debug-BSzSiibd.js";function n(e){return e}function r(e){return e}function i(n,r){let i={...r},a=t(i.debug);a?.(`mount`,`mounting chat widget`,{agentId:i.agentId??`(organization default)`,title:i.title??`AstralBeam`,showHeader:i.showHeader??!0,emptyTitle:i.emptyTitle??`Ask the assistant`,emptyDescription:i.emptyDescription??`It can answer questions and act through this app's own tools and widgets.`,apiUrl:i.apiUrl??`https://app.astralbeam.ai/api`,authentication:`configured`,colorScheme:i.colorScheme??`system`,theme:i.theme,tools:Object.keys(i.tools??{}),widgets:Object.keys(i.widgets??{}),attachments:i.attachments??!0});let o=n.shadowRoot??n.attachShadow({mode:`open`}),s=document.createElement(`div`);s.className=e,s.style.height=`100%`,o.append(s);let c=matchMedia(`(prefers-color-scheme: dark)`),l=new Set,u=e=>{for(let e of l)s.style.removeProperty(e);l.clear();let t={...i.theme?.light,...e?i.theme?.dark:void 0};for(let[e,n]of Object.entries(t))e.startsWith(`--`)&&(s.style.setProperty(e,n),l.add(e))},d=()=>{let e=i.colorScheme??`system`,t=e===`dark`||e===`system`&&c.matches;s.classList.toggle(`dark`,t),u(t),a?.(`theme`,`color scheme "${e}" resolved to ${t?`dark`:`light`}`,{themeVariables:[...l]})};d(),c.addEventListener(`change`,d);let f=!1,p;return import(`./widget-B6YT3G1i.js`).then(({renderChat:e})=>{a?.(`mount`,`chat chunk loaded`),f||(p=e(o,s,i))}),{update:e=>{i={...i,...e},a=t(i.debug),a?.(`mount`,`options updated`,{changed:Object.keys(e)}),d(),p?.update(i)},reset:()=>p?.reset(),stop:()=>p?.stop(),unmount:()=>{a?.(`mount`,`unmounting chat widget`),f=!0,c.removeEventListener(`change`,d),p?.dispose(),p=void 0,s.remove()}}}export{n as defineTool,r as defineWidget,i as mountAstralBeamChat};

package/dist/{core-Eh2vyhUP.js → core-Dr2IDA6j.js}

@@ -1,19 +1,6 @@
+import { E as resolveApiUrl, T as isAstralBeamApiError, i as getChatConfig, m as getRunChatUrl, w as astralBeamChatFetch } from "./api-CaNIR6Af.js";
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
-/**
-* The chat API's URLs under an API base: the stream itself, the agent capability handshake,
-* and artifact downloads. Chat is one API under the base; others will sit beside it.
-*/
-function chatApiUrls(apiUrl) {
-	const chat = `${(apiUrl ?? "https://app.astralbeam.ai/api").replace(/\/+$/, "")}/v1/chat`;
-	return {
-		chat,
-		config: `${chat}/config`,
-		files: `${chat}/files`
-	};
-}
-/** Color scheme used when the mount options and the React prop give none. */
-const DEFAULT_COLOR_SCHEME = "system";
 //#endregion
 //#region node_modules/.deno/@tanstack+ai-client@0.28.0/node_modules/@tanstack/ai-client/dist/esm/response-stream.js
 var UnsupportedResponseStreamError = class extends Error {
@@ -8134,12 +8121,11 @@ function createAstralBeamChat(options) {
 	const resolveCapabilities = async () => {
 		const generation = ++capabilitiesGeneration;
 		try {
-			const url = new URL(chatApiUrls(live.apiUrl).config, globalThis.location?.href);
-			if (live.agentId) url.searchParams.set("agentId", live.agentId);
 			const token = await getValidChatAuthToken(authentication);
-			const response = await fetch(url, { headers: { authorization: `Bearer ${token}` } });
-			if (!response.ok) throw new Error(`The config request answered ${response.status}`);
-			const body = await response.json();
+			const body = await getChatConfig(live.agentId ? { agentId: live.agentId } : {}, {
+				apiUrl: live.apiUrl,
+				astralBeamToken: token
+			});
 			if (generation !== capabilitiesGeneration) return;
 			const attachments = body.capabilities?.attachments !== false;
 			update({ capabilities: { attachments } });
@@ -8198,15 +8184,29 @@ function createAstralBeamChat(options) {
 		...live.agentId ? { agentId: live.agentId } : {},
 		...live.debug ? { debug: true } : {}
 	});
-	const client = new ChatClient({
-		connection: fetchServerSentEvents(() => chatApiUrls(live.apiUrl).chat, async () => ({
-			headers: { authorization: `Bearer ${await getValidChatAuthToken(authentication)}` },
-			fetchClient: (input, init) => fetchAuthenticatedChat({
+	const connection = fetchServerSentEvents(() => resolveApiUrl(getRunChatUrl(), live.apiUrl), async () => {
+		const token = await getValidChatAuthToken(authentication);
+		return { fetchClient: (_input, init) => astralBeamChatFetch(getRunChatUrl(), {
+			...init,
+			apiUrl: live.apiUrl,
+			astralBeamToken: token,
+			fetchClient: (input, request) => fetchAuthenticatedChat({
 				...authentication,
 				input,
-				init
+				init: request
 			})
-		})),
+		}) };
+	});
+	const connect = connection.connect;
+	connection.connect = async function* (...args) {
+		try {
+			yield* connect(...args);
+		} catch (error) {
+			throw error instanceof Error && isAstralBeamApiError(error.cause) ? error.cause : error;
+		}
+	};
+	const client = new ChatClient({
+		connection,
 		tools: declareTools(),
 		forwardedProps: forwardedProps(),
 		onMessagesChange: (messages) => {
@@ -8323,4 +8323,4 @@ function defineTool(tool) {
 	return tool;
 }
 //#endregion
-export { DEFAULT_COLOR_SCHEME as C, SANDBOX_WRITE_FILE_TOOL as S, SANDBOX_LIST_FILES_TOOL as _, describeSandboxCommandRun as a, SANDBOX_RUN_COMMAND_TOOL as b, readSandboxCommandRun as c, hasPendingToolRun as d, isSettledToolCall as f, RENDER_WIDGET_TOOL as g, ASK_QUESTIONNAIRE_TOOL as h, collectSandboxActivity as i, readSandboxFileWrite as l, buildAgentTools as m, CORE_OPTION_KEYS as n, isSandboxTool as o, lastPartInProgress as p, createAstralBeamChat as r, readSandboxArtifact as s, defineTool as t, sandboxRefusal as u, SANDBOX_PUBLISH_ARTIFACT_TOOL as v, SANDBOX_STATUS_EVENT as x, SANDBOX_READ_FILE_TOOL as y };
+export { SANDBOX_WRITE_FILE_TOOL as S, SANDBOX_LIST_FILES_TOOL as _, describeSandboxCommandRun as a, SANDBOX_RUN_COMMAND_TOOL as b, readSandboxCommandRun as c, hasPendingToolRun as d, isSettledToolCall as f, RENDER_WIDGET_TOOL as g, ASK_QUESTIONNAIRE_TOOL as h, collectSandboxActivity as i, readSandboxFileWrite as l, buildAgentTools as m, CORE_OPTION_KEYS as n, isSandboxTool as o, lastPartInProgress as p, createAstralBeamChat as r, readSandboxArtifact as s, defineTool as t, sandboxRefusal as u, SANDBOX_PUBLISH_ARTIFACT_TOOL as v, SANDBOX_STATUS_EVENT as x, SANDBOX_READ_FILE_TOOL as y };

package/dist/core.js

@@ -1,2 +1,2 @@
-import { S as SANDBOX_WRITE_FILE_TOOL, _ as SANDBOX_LIST_FILES_TOOL, a as describeSandboxCommandRun, b as SANDBOX_RUN_COMMAND_TOOL, c as readSandboxCommandRun, d as hasPendingToolRun, f as isSettledToolCall, g as RENDER_WIDGET_TOOL, h as ASK_QUESTIONNAIRE_TOOL, i as collectSandboxActivity, l as readSandboxFileWrite, m as buildAgentTools, o as isSandboxTool, p as lastPartInProgress, r as createAstralBeamChat, s as readSandboxArtifact, t as defineTool, u as sandboxRefusal, v as SANDBOX_PUBLISH_ARTIFACT_TOOL, x as SANDBOX_STATUS_EVENT, y as SANDBOX_READ_FILE_TOOL } from "./core-Eh2vyhUP.js";
+import { S as SANDBOX_WRITE_FILE_TOOL, _ as SANDBOX_LIST_FILES_TOOL, a as describeSandboxCommandRun, b as SANDBOX_RUN_COMMAND_TOOL, c as readSandboxCommandRun, d as hasPendingToolRun, f as isSettledToolCall, g as RENDER_WIDGET_TOOL, h as ASK_QUESTIONNAIRE_TOOL, i as collectSandboxActivity, l as readSandboxFileWrite, m as buildAgentTools, o as isSandboxTool, p as lastPartInProgress, r as createAstralBeamChat, s as readSandboxArtifact, t as defineTool, u as sandboxRefusal, v as SANDBOX_PUBLISH_ARTIFACT_TOOL, x as SANDBOX_STATUS_EVENT, y as SANDBOX_READ_FILE_TOOL } from "./core-Dr2IDA6j.js";
 export { ASK_QUESTIONNAIRE_TOOL, RENDER_WIDGET_TOOL, SANDBOX_LIST_FILES_TOOL, SANDBOX_PUBLISH_ARTIFACT_TOOL, SANDBOX_READ_FILE_TOOL, SANDBOX_RUN_COMMAND_TOOL, SANDBOX_STATUS_EVENT, SANDBOX_WRITE_FILE_TOOL, buildAgentTools, collectSandboxActivity, createAstralBeamChat, defineTool, describeSandboxCommandRun, hasPendingToolRun, isSandboxTool, isSettledToolCall, lastPartInProgress, readSandboxArtifact, readSandboxCommandRun, readSandboxFileWrite, sandboxRefusal };

package/dist/debug-BSzSiibd.js

@@ -0,0 +1 @@
+const e=`AstralBeam`,t=`Ask the assistant`,n=`It can answer questions and act through this app's own tools and widgets.`,r=`https://app.astralbeam.ai/api`,i=`/api/astralbeam/token`,a=`system`,o=`astralbeam-root`,s=e=>`background:${e};color:#fff;border-radius:3px;padding:1px 5px`,c=`${s(`#7c3aed`)};font-weight:600`,l={mount:`#7c3aed`,auth:`#be185d`,theme:`#8b5cf6`,send:`#2563eb`,run:`#0891b2`,stream:`#0e7490`,text:`#16a34a`,reasoning:`#64748b`,tool:`#d97706`,widget:`#db2777`,attachment:`#0d9488`,sandbox:`#0369a1`,questionnaire:`#9333ea`,status:`#475569`,error:`#dc2626`};function u(e){if(e)return(e,t,n)=>{console.log(`%cAstralBeam%c ${new Date().toISOString().slice(11,19)} %c${e}%c ${t}`,c,`color:#94a3b8;font-weight:400`,s(l[e]),``,...n===void 0?[]:[n])}}export{n as a,o as c,a as i,r as n,t as o,i as r,e as s,u as t};

package/dist/react.js

@@ -1,4 +1,5 @@
-import { C as DEFAULT_COLOR_SCHEME, n as CORE_OPTION_KEYS, r as createAstralBeamChat } from "./core-Eh2vyhUP.js";
+import { n as CORE_OPTION_KEYS, r as createAstralBeamChat } from "./core-Dr2IDA6j.js";
+import { O as DEFAULT_COLOR_SCHEME } from "./api-CaNIR6Af.js";
 import { forwardRef, useEffect, useImperativeHandle, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { createPortal } from "react-dom";
 import { defineTool, mountAstralBeamChat } from "@astralbeam/sdk/client";

package/dist/server.d.ts

@@ -31,6 +31,20 @@ interface CreateAstralBeamTokenOptions<TTenantUser extends TenantUser = TenantUs
   readonly tenant: TTenant;
   readonly expiresInSeconds?: number | undefined;
 }
+interface CreateAstralBeamOrganizationTokenOptions {
+  readonly apiKey: string;
+  /** Host-authenticated email of an existing organization member, never browser-supplied identity. */
+  readonly email: string;
+  readonly organizationId: string;
+  readonly expiresInSeconds?: number | undefined;
+}
+/** Delegates a member's current database permissions. Does not restrict the API-key holder's authority. */
+declare function createAstralBeamOrganizationToken({
+  apiKey,
+  email,
+  organizationId,
+  expiresInSeconds
+}: CreateAstralBeamOrganizationTokenOptions): Promise<string>;
 /** Creates the short-lived bearer token returned by an application's server auth endpoint. */
 declare function createAstralBeamToken<TTenantUser extends TenantUser = TenantUser, TTenant extends Tenant = Tenant>({
   apiKey,
@@ -39,4 +53,4 @@ declare function createAstralBeamToken<TTenantUser extends TenantUser = TenantUs
   expiresInSeconds
 }: CreateAstralBeamTokenOptions<TTenantUser, TTenant>): Promise<string>;
 //#endregion
-export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, CreateAstralBeamTokenOptions, JsonMetadata, JsonValue, Tenant, TenantUser, createAstralBeamToken };
+export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, CreateAstralBeamOrganizationTokenOptions, CreateAstralBeamTokenOptions, JsonMetadata, JsonValue, Tenant, TenantUser, createAstralBeamOrganizationToken, createAstralBeamToken };

package/dist/server.js

@@ -645,7 +645,7 @@ const CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS = 600;
 const CHAT_AUTH_TOKEN_MAX_BYTES = 16384;
 const IDENTITY_MAX_BYTES = 8192;
 const EXTERNAL_ID_MAX_LENGTH = 255;
-const API_KEY_PATTERN = /^key_[0-9a-z-]{1,63}_[0-9a-z-]{1,63}_abo_[A-Za-z]{64}$/;
+const API_KEY_PATTERN = /^key_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}_abo_[A-Za-z]{64}$/;
 const TENANT_FIELDS = [
 	"id",
 	"name",
@@ -659,13 +659,13 @@ const TENANT_USER_FIELDS = [
 ];
 const textEncoder = new TextEncoder();
 function parseApiKey(apiKey) {
-	if (!API_KEY_PATTERN.test(apiKey)) throw new Error("apiKey must match key_<organization>_<key>_abo_<secret>");
+	if (!API_KEY_PATTERN.test(apiKey)) throw new Error("apiKey must match key_<organizationId>_<id>_abo_<secret>");
 	const separator = apiKey.lastIndexOf("_abo_");
 	const keyId = apiKey.slice(0, separator);
 	const keySecret = apiKey.slice(separator + 1);
 	return {
 		keyId,
-		organizationSlug: keyId.slice(4, keyId.indexOf("_", 4)),
+		organizationId: keyId.slice(4, keyId.indexOf("_", 4)),
 		keySecret
 	};
 }
@@ -704,10 +704,27 @@ async function signingKey(secret) {
 	const digest = await crypto.subtle.digest("SHA-256", textEncoder.encode(secret));
 	return textEncoder.encode(encode(new Uint8Array(digest)));
 }
+/** Delegates a member's current database permissions. Does not restrict the API-key holder's authority. */
+async function createAstralBeamOrganizationToken({ apiKey, email, organizationId, expiresInSeconds = 300 }) {
+	if (typeof email !== "string" || email.length > 320 || email.includes("\0") || !/^[^\s@]+@[^\s@]+$/.test(email)) throw new Error("email must be an email address of at most 320 characters");
+	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 600) throw new Error("organization auth tokens must live for 60-600 seconds");
+	const { keyId, organizationId: keyOrganizationId, keySecret } = parseApiKey(apiKey);
+	if (organizationId !== keyOrganizationId) throw new Error("organizationId must match the API key organization");
+	const now = Math.floor(Date.now() / 1e3);
+	return await new SignJWT({
+		ver: 1,
+		email,
+		organization_id: organizationId
+	}).setProtectedHeader({
+		alg: "HS256",
+		typ: "astralbeam-organization+jwt",
+		kid: keyId
+	}).setIssuer(organizationId).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
+}
 /** Creates the short-lived bearer token returned by an application's server auth endpoint. */
 async function createAstralBeamToken({ apiKey, user, tenant, expiresInSeconds = 300 }) {
 	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 600) throw new Error("chat auth tokens must live for 60-600 seconds");
-	const { keyId, organizationSlug, keySecret } = parseApiKey(apiKey);
+	const { keyId, organizationId, keySecret } = parseApiKey(apiKey);
 	const identity = validatedIdentity(user, tenant);
 	const now = Math.floor(Date.now() / 1e3);
 	const token = await new SignJWT({
@@ -718,9 +735,9 @@ async function createAstralBeamToken({ apiKey, user, tenant, expiresInSeconds =
 		alg: "HS256",
 		typ: CHAT_AUTH_TOKEN_TYPE,
 		kid: keyId
-	}).setIssuer(organizationSlug).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
+	}).setIssuer(organizationId).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
 	if (textEncoder.encode(token).byteLength > CHAT_AUTH_TOKEN_MAX_BYTES) throw new Error(`chat auth tokens must not exceed ${CHAT_AUTH_TOKEN_MAX_BYTES} bytes`);
 	return token;
 }
 //#endregion
-export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, createAstralBeamToken };
+export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, createAstralBeamOrganizationToken, createAstralBeamToken };