@astralbeam/sdk 0.9.0 → 0.11.0

package/dist/react.js

@@ -1,8 +1,87 @@
-import { C as DEFAULT_COLOR_SCHEME, n as CORE_OPTION_KEYS, r as createAstralBeamChat } from "./core-Eh2vyhUP.js";
+import { n as CORE_OPTION_KEYS, r as createAstralBeamChat } from "./core-xh4NLb1l.js";
+import { A as DEFAULT_COLOR_SCHEME } from "./api-DrKgAIBT.js";
 import { forwardRef, useEffect, useImperativeHandle, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { defineTool, mountAstralBeamChat, mountAstralBeamTenantList, mountAstralBeamTenantUserList } from "@astralbeam/sdk/client";
 import { createPortal } from "react-dom";
-import { defineTool, mountAstralBeamChat } from "@astralbeam/sdk/client";
-import { jsxs } from "react/jsx-runtime";
+//#region src/react/listings.tsx
+const AstralBeamTenantList = forwardRef(function AstralBeamTenantList({ className, style, ...options }, ref) {
+	return /* @__PURE__ */ jsx("div", {
+		ref: useListingMount(mountAstralBeamTenantList, options, ref),
+		className,
+		style
+	});
+});
+const AstralBeamTenantUserList = forwardRef(function AstralBeamTenantUserList({ className, style, ...options }, ref) {
+	return /* @__PURE__ */ jsx("div", {
+		ref: useListingMount(mountAstralBeamTenantUserList, options, ref),
+		className,
+		style
+	});
+});
+function useListingMount(mount, options, ref) {
+	const target = useRef(null);
+	const handle = useRef(null);
+	const { apiUrl, fetchAstralBeamToken, scope, tenantId, tenantExternalId, showAdmin, pageSize, title, showHeader, customCss, colorScheme, theme, onError, onTenantChange, onTenantSelect, onTenantUserSelect } = options;
+	const live = useMemo(() => ({
+		apiUrl,
+		fetchAstralBeamToken,
+		scope,
+		tenantId,
+		tenantExternalId,
+		showAdmin,
+		pageSize,
+		title,
+		showHeader,
+		customCss,
+		colorScheme,
+		theme,
+		onError,
+		onTenantChange,
+		onTenantSelect,
+		onTenantUserSelect
+	}), [
+		apiUrl,
+		fetchAstralBeamToken,
+		scope,
+		tenantId,
+		tenantExternalId,
+		showAdmin,
+		pageSize,
+		title,
+		showHeader,
+		customCss,
+		colorScheme,
+		theme,
+		onError,
+		onTenantChange,
+		onTenantSelect,
+		onTenantUserSelect
+	]);
+	const liveRef = useRef(live);
+	useEffect(() => {
+		liveRef.current = live;
+	});
+	useEffect(() => {
+		const mounted = mount(target.current, liveRef.current);
+		handle.current = mounted;
+		return () => {
+			handle.current = null;
+			mounted.unmount();
+		};
+	}, [mount]);
+	useEffect(() => {
+		handle.current?.update(live);
+	}, [live]);
+	useImperativeHandle(ref, () => ({
+		update: (next) => handle.current?.update(next),
+		refresh: () => handle.current?.refresh(),
+		reset: () => handle.current?.reset(),
+		unmount: () => handle.current?.unmount()
+	}), []);
+	return target;
+}
+//#endregion
 //#region src/react/index.tsx
 /** Declares a host widget; a Standard Schema `parameters` types (and validates) `render`'s props. */
 function defineWidget(widget) {
@@ -15,13 +94,19 @@ function defineWidget(widget) {
 * state stay live and nothing needs a remount.
 */
 function useAstralBeamChat(options) {
-	const coreRef = useRef(null);
-	coreRef.current ??= createAstralBeamChat(options);
-	const core = coreRef.current;
+	const [core] = useState(() => createAstralBeamChat(options, true));
+	const watched = CORE_OPTION_KEYS.map((key) => options[key]);
+	const watchedRef = useRef(void 0);
 	useEffect(() => {
+		const previous = watchedRef.current;
+		watchedRef.current = watched;
+		if (previous?.every((value, index) => Object.is(value, watched[index]))) return;
 		core.updateOptions(options);
-	}, [core, ...CORE_OPTION_KEYS.map((key) => options[key])]);
-	useEffect(() => () => core.dispose(), [core]);
+	});
+	useEffect(() => {
+		core.start();
+		return () => core.dispose();
+	}, [core]);
 	return {
 		...useSyncExternalStore(core.subscribe, core.getState, core.getState),
 		sendMessage: core.sendMessage,
@@ -32,7 +117,7 @@ function useAstralBeamChat(options) {
 		core
 	};
 }
-const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, showHeader, header, empty, composerActions, emptyTitle, emptyDescription, apiUrl, fetchAstralBeamToken, tools, widgets = {}, colorScheme = DEFAULT_COLOR_SCHEME, theme, attachments, sandboxPanel, debug }, ref) {
+const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, showHeader, header, empty, composerActions, emptyTitle, emptyDescription, apiUrl, fetchAstralBeamToken, tools, widgets = {}, colorScheme = DEFAULT_COLOR_SCHEME, theme, customCss, attachments, sandboxPanel, debug }, ref) {
 	const targetRef = useRef(null);
 	const handleRef = useRef(null);
 	const [activeRenders, setActiveRenders] = useState(/* @__PURE__ */ new Map());
@@ -45,14 +130,18 @@ const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, show
 		toolsRef.current = tools;
 	});
 	const nextRenderKey = useRef(0);
-	const hostTools = useMemo(() => Object.fromEntries(Object.entries(tools ?? {}).map(([name, definition]) => [name, {
-		...definition,
-		execute: (input) => {
-			const current = toolsRef.current?.[name];
-			if (!current) throw new Error(`Tool "${name}" is no longer registered`);
-			return current.execute(input);
-		}
-	}])), [tools]);
+	const hostTools = useMemo(() => {
+		const adapted = {};
+		for (const [name, definition] of Object.entries(tools ?? {})) adapted[name] = {
+			...definition,
+			execute: (input) => {
+				const current = toolsRef.current?.[name];
+				if (!current) throw new Error(`Tool "${name}" is no longer registered`);
+				return current.execute(input);
+			}
+		};
+		return adapted;
+	}, [tools]);
 	const hostWidgets = useMemo(() => Object.fromEntries(Object.entries(widgets).map(([name, definition]) => [name, {
 		...definition,
 		render: (props, container) => {
@@ -106,6 +195,7 @@ const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, show
 		emptyDescription,
 		colorScheme,
 		theme,
+		customCss,
 		attachments,
 		sandboxPanel,
 		debug,
@@ -122,6 +212,7 @@ const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, show
 		emptyDescription,
 		colorScheme,
 		theme,
+		customCss,
 		attachments,
 		sandboxPanel,
 		debug,
@@ -130,7 +221,9 @@ const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, show
 		chromeSlots
 	]);
 	const liveRef = useRef(live);
-	liveRef.current = live;
+	useEffect(() => {
+		liveRef.current = live;
+	});
 	useEffect(() => {
 		if (!targetRef.current) return;
 		const handle = mountAstralBeamChat(targetRef.current, liveRef.current);
@@ -158,4 +251,4 @@ const AstralBeamChat = forwardRef(function AstralBeamChat({ agentId, title, show
 	});
 });
 //#endregion
-export { AstralBeamChat, defineTool, defineWidget, useAstralBeamChat };
+export { AstralBeamChat, AstralBeamTenantList, AstralBeamTenantUserList, defineTool, defineWidget, useAstralBeamChat };

package/dist/server.d.ts

@@ -31,6 +31,20 @@ interface CreateAstralBeamTokenOptions<TTenantUser extends TenantUser = TenantUs
   readonly tenant: TTenant;
   readonly expiresInSeconds?: number | undefined;
 }
+interface CreateAstralBeamOrganizationTokenOptions {
+  readonly apiKey: string;
+  /** Host-authenticated email of an existing organization member, never browser-supplied identity. */
+  readonly email: string;
+  readonly organizationId: string;
+  readonly expiresInSeconds?: number | undefined;
+}
+/** Delegates a member's current database permissions. Does not restrict the API-key holder's authority. */
+declare function createAstralBeamOrganizationToken({
+  apiKey,
+  email,
+  organizationId,
+  expiresInSeconds
+}: CreateAstralBeamOrganizationTokenOptions): Promise<string>;
 /** Creates the short-lived bearer token returned by an application's server auth endpoint. */
 declare function createAstralBeamToken<TTenantUser extends TenantUser = TenantUser, TTenant extends Tenant = Tenant>({
   apiKey,
@@ -39,4 +53,4 @@ declare function createAstralBeamToken<TTenantUser extends TenantUser = TenantUs
   expiresInSeconds
 }: CreateAstralBeamTokenOptions<TTenantUser, TTenant>): Promise<string>;
 //#endregion
-export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, CreateAstralBeamTokenOptions, JsonMetadata, JsonValue, Tenant, TenantUser, createAstralBeamToken };
+export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, CreateAstralBeamOrganizationTokenOptions, CreateAstralBeamTokenOptions, JsonMetadata, JsonValue, Tenant, TenantUser, createAstralBeamOrganizationToken, createAstralBeamToken };

package/dist/server.js

@@ -1,27 +1,4 @@
-//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/buffer_utils.js
-const encoder = new TextEncoder();
-const decoder = new TextDecoder();
-new TextDecoder("utf-8", { fatal: true });
-function concat(...buffers) {
-	const size = buffers.reduce((acc, { length }) => acc + length, 0);
-	const buf = new Uint8Array(size);
-	let i = 0;
-	for (const buffer of buffers) {
-		buf.set(buffer, i);
-		i += buffer.length;
-	}
-	return buf;
-}
-function encode$1(string) {
-	const bytes = new Uint8Array(string.length);
-	for (let i = 0; i < string.length; i++) {
-		const code = string.charCodeAt(i);
-		if (code > 127) throw new TypeError("non-ASCII string encountered in encode()");
-		bytes[i] = code;
-	}
-	return bytes;
-}
-//#endregion
+import { a as isPublicJWK, c as encode, d as JWTInvalid, f as concat, i as isPrivateJWK, l as JOSENotSupported, m as encoder, n as isJWK, o as isSecretJWK, p as encode$1, r as isObject, s as decode, t as isDisjoint, u as JWSInvalid } from "./type_checks-C-WTHaWs.js";
 //#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/crypto_key.js
 const unusable = (name, prop = "algorithm.name") => /* @__PURE__ */ new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
 function checkUsage(key, usage) {
@@ -56,29 +33,6 @@ function message(msg, actual, ...types) {
 }
 const withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);
 //#endregion
-//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/util/errors.js
-var JOSEError = class extends Error {
-	static code = "ERR_JOSE_GENERIC";
-	code = "ERR_JOSE_GENERIC";
-	constructor(message, options) {
-		super(message, options);
-		this.name = this.constructor.name;
-		Error.captureStackTrace?.(this, this.constructor);
-	}
-};
-var JOSENotSupported = class extends JOSEError {
-	static code = "ERR_JOSE_NOT_SUPPORTED";
-	code = "ERR_JOSE_NOT_SUPPORTED";
-};
-var JWSInvalid = class extends JOSEError {
-	static code = "ERR_JWS_INVALID";
-	code = "ERR_JWS_INVALID";
-};
-var JWTInvalid = class extends JOSEError {
-	static code = "ERR_JWT_INVALID";
-	code = "ERR_JWT_INVALID";
-};
-//#endregion
 //#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/is_key_like.js
 const isCryptoKey = (key) => {
 	if (key?.[Symbol.toStringTag] === "CryptoKey") return true;
@@ -91,75 +45,6 @@ const isCryptoKey = (key) => {
 const isKeyObject = (key) => key?.[Symbol.toStringTag] === "KeyObject";
 const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);
 //#endregion
-//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/base64.js
-function encodeBase64(input) {
-	if (Uint8Array.prototype.toBase64) return input.toBase64();
-	const CHUNK_SIZE = 32768;
-	const arr = [];
-	for (let i = 0; i < input.length; i += CHUNK_SIZE) arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
-	return btoa(arr.join(""));
-}
-function decodeBase64(encoded) {
-	if (Uint8Array.fromBase64) return Uint8Array.fromBase64(encoded);
-	const binary = atob(encoded);
-	const bytes = new Uint8Array(binary.length);
-	for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
-	return bytes;
-}
-//#endregion
-//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/util/base64url.js
-const invalid = "The input to be decoded is not correctly encoded.";
-function decode(input) {
-	if (Uint8Array.fromBase64) try {
-		return Uint8Array.fromBase64(typeof input === "string" ? input : decoder.decode(input), { alphabet: "base64url" });
-	} catch (cause) {
-		throw new TypeError(invalid, { cause });
-	}
-	let encoded = input;
-	if (encoded instanceof Uint8Array) encoded = decoder.decode(encoded);
-	if (encoded.includes("+") || encoded.includes("/")) throw new TypeError(invalid);
-	encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
-	try {
-		return decodeBase64(encoded);
-	} catch {
-		throw new TypeError(invalid);
-	}
-}
-function encode(input) {
-	let unencoded = input;
-	if (typeof unencoded === "string") unencoded = encoder.encode(unencoded);
-	if (Uint8Array.prototype.toBase64) return unencoded.toBase64({
-		alphabet: "base64url",
-		omitPadding: true
-	});
-	return encodeBase64(unencoded).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-}
-//#endregion
-//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/type_checks.js
-function isObject(input) {
-	if (typeof input !== "object" || input === null || Object.prototype.toString.call(input) !== "[object Object]") return false;
-	const prototype = Object.getPrototypeOf(input);
-	if (prototype === null) return true;
-	let proto = prototype;
-	while (Object.getPrototypeOf(proto) !== null) proto = Object.getPrototypeOf(proto);
-	return prototype === proto;
-}
-function isDisjoint(...headers) {
-	const parameters = /* @__PURE__ */ new Set();
-	for (const header of headers) {
-		if (!header) continue;
-		for (const parameter of Object.keys(header)) {
-			if (parameters.has(parameter)) return false;
-			parameters.add(parameter);
-		}
-	}
-	return true;
-}
-const isJWK = (key) => isObject(key) && typeof key.kty === "string";
-const isPrivateJWK = (key) => key.kty !== "oct" && (key.kty === "AKP" && typeof key.priv === "string" || typeof key.d === "string");
-const isPublicJWK = (key) => key.kty !== "oct" && key.d === void 0 && key.priv === void 0;
-const isSecretJWK = (key) => key.kty === "oct" && typeof key.k === "string";
-//#endregion
 //#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/lib/helpers.js
 function assertNotSet(value, name) {
 	if (value) throw new TypeError(`${name} can only be called once`);
@@ -645,7 +530,7 @@ const CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS = 600;
 const CHAT_AUTH_TOKEN_MAX_BYTES = 16384;
 const IDENTITY_MAX_BYTES = 8192;
 const EXTERNAL_ID_MAX_LENGTH = 255;
-const API_KEY_PATTERN = /^key_[0-9a-z-]{1,63}_[0-9a-z-]{1,63}_abo_[A-Za-z]{64}$/;
+const API_KEY_PATTERN = /^key_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}_[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}_abo_[A-Za-z]{64}$/;
 const TENANT_FIELDS = [
 	"id",
 	"name",
@@ -659,13 +544,13 @@ const TENANT_USER_FIELDS = [
 ];
 const textEncoder = new TextEncoder();
 function parseApiKey(apiKey) {
-	if (!API_KEY_PATTERN.test(apiKey)) throw new Error("apiKey must match key_<organization>_<key>_abo_<secret>");
+	if (!API_KEY_PATTERN.test(apiKey)) throw new Error("apiKey must match key_<organizationId>_<id>_abo_<secret>");
 	const separator = apiKey.lastIndexOf("_abo_");
 	const keyId = apiKey.slice(0, separator);
 	const keySecret = apiKey.slice(separator + 1);
 	return {
 		keyId,
-		organizationSlug: keyId.slice(4, keyId.indexOf("_", 4)),
+		organizationId: keyId.slice(4, keyId.indexOf("_", 4)),
 		keySecret
 	};
 }
@@ -704,10 +589,27 @@ async function signingKey(secret) {
 	const digest = await crypto.subtle.digest("SHA-256", textEncoder.encode(secret));
 	return textEncoder.encode(encode(new Uint8Array(digest)));
 }
+/** Delegates a member's current database permissions. Does not restrict the API-key holder's authority. */
+async function createAstralBeamOrganizationToken({ apiKey, email, organizationId, expiresInSeconds = 300 }) {
+	if (typeof email !== "string" || email.length > 320 || email.includes("\0") || !/^[^\s@]+@[^\s@]+$/.test(email)) throw new Error("email must be an email address of at most 320 characters");
+	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 600) throw new Error("organization auth tokens must live for 60-600 seconds");
+	const { keyId, organizationId: keyOrganizationId, keySecret } = parseApiKey(apiKey);
+	if (organizationId !== keyOrganizationId) throw new Error("organizationId must match the API key organization");
+	const now = Math.floor(Date.now() / 1e3);
+	return await new SignJWT({
+		ver: 1,
+		email,
+		organization_id: organizationId
+	}).setProtectedHeader({
+		alg: "HS256",
+		typ: "astralbeam-organization+jwt",
+		kid: keyId
+	}).setIssuer(organizationId).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
+}
 /** Creates the short-lived bearer token returned by an application's server auth endpoint. */
 async function createAstralBeamToken({ apiKey, user, tenant, expiresInSeconds = 300 }) {
 	if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 600) throw new Error("chat auth tokens must live for 60-600 seconds");
-	const { keyId, organizationSlug, keySecret } = parseApiKey(apiKey);
+	const { keyId, organizationId, keySecret } = parseApiKey(apiKey);
 	const identity = validatedIdentity(user, tenant);
 	const now = Math.floor(Date.now() / 1e3);
 	const token = await new SignJWT({
@@ -718,9 +620,9 @@ async function createAstralBeamToken({ apiKey, user, tenant, expiresInSeconds =
 		alg: "HS256",
 		typ: CHAT_AUTH_TOKEN_TYPE,
 		kid: keyId
-	}).setIssuer(organizationSlug).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
+	}).setIssuer(organizationId).setAudience(CHAT_AUTH_TOKEN_AUDIENCE).setIssuedAt(now).setExpirationTime(now + expiresInSeconds).sign(await signingKey(keySecret));
 	if (textEncoder.encode(token).byteLength > CHAT_AUTH_TOKEN_MAX_BYTES) throw new Error(`chat auth tokens must not exceed ${CHAT_AUTH_TOKEN_MAX_BYTES} bytes`);
 	return token;
 }
 //#endregion
-export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, createAstralBeamToken };
+export { CHAT_AUTH_TOKEN_AUDIENCE, CHAT_AUTH_TOKEN_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_MAX_LIFETIME_SECONDS, CHAT_AUTH_TOKEN_TYPE, CHAT_AUTH_TOKEN_VERSION, createAstralBeamOrganizationToken, createAstralBeamToken };