@ateam-ai-mobile/core 0.1.1 → 0.1.2

package/dist/index.d.mts

@@ -80,6 +80,10 @@ interface AdasConfig {
     coreUrl: UrlSource;
     /** Voice service base URL (optional — only voice features need it). */
     voiceUrl?: UrlSource;
+    /** Consumer-auth base URL, e.g. https://consumer-auth.ateam-ai.com. Only
+     *  needed for `switchTenant()` (re-scoping the session to another tenant
+     *  the user belongs to). */
+    consumerAuthUrl?: UrlSource;
     tokenProvider: TokenProvider;
     /** Tenant slug — used for plugin URL resolution and voice, never sent as a
      *  header (the backend derives the tenant from the JWT). Pass a getter when
@@ -93,6 +97,24 @@ interface AdasConfig {
      *  survive app restarts. No-op when omitted (previews live in memory for
      *  the session only). @ateam-ai-mobile/ui ships an Expo/RN implementation. */
     attachmentCache?: AttachmentCache;
+    /** Called by `switchTenant()` with the freshly-minted session for the
+     *  target tenant. The host MUST persist it here (store the new JWT so
+     *  tokenProvider.getToken() returns it, and update the active tenant) —
+     *  the SDK never stores credentials. Awaited before the chat reconnects. */
+    onSession?: (session: AdasSession) => void | Promise<void>;
+}
+/** A tenant-scoped session minted by the platform (e.g. via switchTenant). */
+interface AdasSession {
+    jwt: string;
+    tenant: {
+        id: string;
+        name: string;
+    };
+    actor: {
+        id: string;
+        email: string | null;
+        roles: string[];
+    };
 }
 /** Register the SDK configuration. Call once at app start, before any other
  *  SDK API. Calling again replaces the config (e.g. env switch) — combine
@@ -103,6 +125,7 @@ declare function getConfig(): AdasConfig;
 declare function getCoreApiUrl(): string;
 declare function getCoreWsUrl(): string;
 declare function getVoiceApiUrl(): string;
+declare function getConsumerAuthApiUrl(): string;
 declare function getTenant(): string;
 declare function getUser(): AdasUser | null;
 declare function getToken(): string | null;
@@ -160,14 +183,26 @@ interface TenantMembership {
 /**
  * List the tenants the CURRENT user belongs to (GET /api/tenants/list).
  *
- * For consumer JWTs the backend resolves memberships by login identity
- * (google/apple oauth or embed id) across active tenants; builder JWTs get
- * their user-doc memberships. Returns [] when signed out or unknown.
- *
- * Note: switching tenant still requires a NEW JWT for that tenant (the
- * token is tenant-scoped) — the host owns that re-auth flow.
+ * The list is membership-scoped: for consumer JWTs the backend returns ONLY
+ * tenants where the user's login identity (google/apple oauth or embed id)
+ * has an active actor; builder JWTs get their user-doc memberships. It never
+ * leaks the full tenant list. Returns [] when signed out or unknown.
  */
 declare function listMyTenants(): Promise<TenantMembership[]>;
+/**
+ * Re-scope the whole session to another tenant the user already belongs to.
+ *
+ * The backend treats the JWT tenant claim as the sole source of truth, so
+ * switching = minting a fresh JWT for the target tenant's actor. The SDK
+ * owns the call (POST consumer-auth /platform/consumer/switch-tenant, authed
+ * by the current token); the HOST persists the new session via
+ * `config.onSession` (the SDK never stores credentials). The chat stream is
+ * then torn down and cleared so it reconnects against the new tenant.
+ *
+ * Requires `consumerAuthUrl` and `onSession` in the initAdas() config.
+ * Throws on any non-OK response (e.g. not a member of the target tenant).
+ */
+declare function switchTenant(targetTenantId: string): Promise<AdasSession>;
 
 interface ToolCall {
     name: string;
@@ -719,4 +754,4 @@ interface AcsKvStorage {
 }
 declare function setAcsCacheStorage(kv: AcsKvStorage | null): void;
 
-export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasUser, type AttachmentCache, type AttachmentPreview, type BufferedCommand, type DeleteResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type JobProgress, type Message, type MessageAttachment, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type RefreshOutcome, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, closeChatStream, colors, connectAcsWs, connectorCall, deleteArtifact, disconnectAcsWs, fontSize, getConfig, getCoreApiUrl, getCoreWsUrl, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, recordEvent, setAcsCacheStorage, setAcsReachabilityReporter, setHomeActionOrder, setOrder, spacing, unwrapMcpResult, useChatStore, useHomeActionsStore, useWidgetsStore };
+export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type BufferedCommand, type DeleteResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type JobProgress, type Message, type MessageAttachment, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type RefreshOutcome, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, closeChatStream, colors, connectAcsWs, connectorCall, deleteArtifact, disconnectAcsWs, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, recordEvent, setAcsCacheStorage, setAcsReachabilityReporter, setHomeActionOrder, setOrder, spacing, switchTenant, unwrapMcpResult, useChatStore, useHomeActionsStore, useWidgetsStore };

package/dist/index.d.ts

@@ -80,6 +80,10 @@ interface AdasConfig {
     coreUrl: UrlSource;
     /** Voice service base URL (optional — only voice features need it). */
     voiceUrl?: UrlSource;
+    /** Consumer-auth base URL, e.g. https://consumer-auth.ateam-ai.com. Only
+     *  needed for `switchTenant()` (re-scoping the session to another tenant
+     *  the user belongs to). */
+    consumerAuthUrl?: UrlSource;
     tokenProvider: TokenProvider;
     /** Tenant slug — used for plugin URL resolution and voice, never sent as a
      *  header (the backend derives the tenant from the JWT). Pass a getter when
@@ -93,6 +97,24 @@ interface AdasConfig {
      *  survive app restarts. No-op when omitted (previews live in memory for
      *  the session only). @ateam-ai-mobile/ui ships an Expo/RN implementation. */
     attachmentCache?: AttachmentCache;
+    /** Called by `switchTenant()` with the freshly-minted session for the
+     *  target tenant. The host MUST persist it here (store the new JWT so
+     *  tokenProvider.getToken() returns it, and update the active tenant) —
+     *  the SDK never stores credentials. Awaited before the chat reconnects. */
+    onSession?: (session: AdasSession) => void | Promise<void>;
+}
+/** A tenant-scoped session minted by the platform (e.g. via switchTenant). */
+interface AdasSession {
+    jwt: string;
+    tenant: {
+        id: string;
+        name: string;
+    };
+    actor: {
+        id: string;
+        email: string | null;
+        roles: string[];
+    };
 }
 /** Register the SDK configuration. Call once at app start, before any other
  *  SDK API. Calling again replaces the config (e.g. env switch) — combine
@@ -103,6 +125,7 @@ declare function getConfig(): AdasConfig;
 declare function getCoreApiUrl(): string;
 declare function getCoreWsUrl(): string;
 declare function getVoiceApiUrl(): string;
+declare function getConsumerAuthApiUrl(): string;
 declare function getTenant(): string;
 declare function getUser(): AdasUser | null;
 declare function getToken(): string | null;
@@ -160,14 +183,26 @@ interface TenantMembership {
 /**
  * List the tenants the CURRENT user belongs to (GET /api/tenants/list).
  *
- * For consumer JWTs the backend resolves memberships by login identity
- * (google/apple oauth or embed id) across active tenants; builder JWTs get
- * their user-doc memberships. Returns [] when signed out or unknown.
- *
- * Note: switching tenant still requires a NEW JWT for that tenant (the
- * token is tenant-scoped) — the host owns that re-auth flow.
+ * The list is membership-scoped: for consumer JWTs the backend returns ONLY
+ * tenants where the user's login identity (google/apple oauth or embed id)
+ * has an active actor; builder JWTs get their user-doc memberships. It never
+ * leaks the full tenant list. Returns [] when signed out or unknown.
  */
 declare function listMyTenants(): Promise<TenantMembership[]>;
+/**
+ * Re-scope the whole session to another tenant the user already belongs to.
+ *
+ * The backend treats the JWT tenant claim as the sole source of truth, so
+ * switching = minting a fresh JWT for the target tenant's actor. The SDK
+ * owns the call (POST consumer-auth /platform/consumer/switch-tenant, authed
+ * by the current token); the HOST persists the new session via
+ * `config.onSession` (the SDK never stores credentials). The chat stream is
+ * then torn down and cleared so it reconnects against the new tenant.
+ *
+ * Requires `consumerAuthUrl` and `onSession` in the initAdas() config.
+ * Throws on any non-OK response (e.g. not a member of the target tenant).
+ */
+declare function switchTenant(targetTenantId: string): Promise<AdasSession>;
 
 interface ToolCall {
     name: string;
@@ -719,4 +754,4 @@ interface AcsKvStorage {
 }
 declare function setAcsCacheStorage(kv: AcsKvStorage | null): void;
 
-export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasUser, type AttachmentCache, type AttachmentPreview, type BufferedCommand, type DeleteResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type JobProgress, type Message, type MessageAttachment, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type RefreshOutcome, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, closeChatStream, colors, connectAcsWs, connectorCall, deleteArtifact, disconnectAcsWs, fontSize, getConfig, getCoreApiUrl, getCoreWsUrl, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, recordEvent, setAcsCacheStorage, setAcsReachabilityReporter, setHomeActionOrder, setOrder, spacing, unwrapMcpResult, useChatStore, useHomeActionsStore, useWidgetsStore };
+export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type BufferedCommand, type DeleteResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type JobProgress, type Message, type MessageAttachment, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type RefreshOutcome, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, closeChatStream, colors, connectAcsWs, connectorCall, deleteArtifact, disconnectAcsWs, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, recordEvent, setAcsCacheStorage, setAcsReachabilityReporter, setHomeActionOrder, setOrder, spacing, switchTenant, unwrapMcpResult, useChatStore, useHomeActionsStore, useWidgetsStore };

package/dist/index.js

@@ -36,6 +36,7 @@ __export(index_exports, {
   disconnectAcsWs: () => disconnectAcsWs,
   fontSize: () => fontSize,
   getConfig: () => getConfig,
+  getConsumerAuthApiUrl: () => getConsumerAuthApiUrl,
   getCoreApiUrl: () => getCoreApiUrl,
   getCoreWsUrl: () => getCoreWsUrl,
   getTenant: () => getTenant,
@@ -61,6 +62,7 @@ __export(index_exports, {
   setHomeActionOrder: () => setHomeActionOrder,
   setOrder: () => setOrder,
   spacing: () => spacing,
+  switchTenant: () => switchTenant,
   unwrapMcpResult: () => unwrapMcpResult,
   useChatStore: () => useChatStore,
   useHomeActionsStore: () => useHomeActionsStore,
@@ -96,6 +98,11 @@ function getVoiceApiUrl() {
   if (!url) throw new Error("[adas] voiceUrl not configured");
   return resolveUrl(url);
 }
+function getConsumerAuthApiUrl() {
+  const url = getConfig().consumerAuthUrl;
+  if (!url) throw new Error("[adas] consumerAuthUrl not configured \u2014 required for switchTenant()");
+  return resolveUrl(url);
+}
 function getTenant() {
   const t = getConfig().tenant;
   return (typeof t === "function" ? t() : t) || "";
@@ -235,12 +242,6 @@ function unwrapMcpResult(result) {
   }
 }
 
-// src/api/tenants.ts
-async function listMyTenants() {
-  const data = await apiFetch("/api/tenants/list");
-  return data.ok && Array.isArray(data.tenants) ? data.tenants : [];
-}
-
 // src/chat/store.ts
 var import_zustand = require("zustand");
 
@@ -975,6 +976,41 @@ async function pollJob(jobId, token) {
   });
 }
 
+// src/api/tenants.ts
+async function listMyTenants() {
+  const data = await apiFetch("/api/tenants/list");
+  return data.ok && Array.isArray(data.tenants) ? data.tenants : [];
+}
+async function switchTenant(targetTenantId) {
+  const token = getToken();
+  if (!token) throw new Error("[adas] switchTenant: not signed in");
+  const res = await fetch(`${getConsumerAuthApiUrl()}/platform/consumer/switch-tenant`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({ target_tenant: targetTenantId })
+  });
+  const data = await res.json().catch(() => null);
+  if (!res.ok || !data?.ok || !data.jwt) {
+    throw new Error(data?.error || `switchTenant failed (${res.status})`);
+  }
+  const session = {
+    jwt: data.jwt,
+    tenant: data.tenant,
+    actor: data.actor
+  };
+  const onSession = getConfig().onSession;
+  if (!onSession) {
+    throw new Error("[adas] switchTenant: config.onSession is required to persist the new session");
+  }
+  await onSession(session);
+  closeChatStream();
+  useChatStore.getState().clearChat();
+  return session;
+}
+
 // src/theme/tokens.ts
 var colors = {
   dark: {
@@ -1666,6 +1702,7 @@ function disconnectAcsWs() {
   disconnectAcsWs,
   fontSize,
   getConfig,
+  getConsumerAuthApiUrl,
   getCoreApiUrl,
   getCoreWsUrl,
   getTenant,
@@ -1691,6 +1728,7 @@ function disconnectAcsWs() {
   setHomeActionOrder,
   setOrder,
   spacing,
+  switchTenant,
   unwrapMcpResult,
   useChatStore,
   useHomeActionsStore,