@ateam-ai-mobile/core 0.1.9 → 0.1.10

package/dist/index.d.mts

@@ -85,10 +85,9 @@ interface AdasConfig {
      *  the user belongs to). */
     consumerAuthUrl?: UrlSource;
     tokenProvider: TokenProvider;
-    /** Tenant slug — used for plugin URL resolution and voice, never sent as a
-     *  header (the backend derives the tenant from the JWT). Pass a getter when
-     *  the host resolves the tenant after startup (storage hydration, runtime
-     *  tenant switch). */
+    /** The host's tenant PICK — used only while signed out (e.g. the login
+     *  screen's chosen workspace). A signed-in session's tenant is always the
+     *  token's `tenant` claim, the one the backend acts on (getTenant()). */
     tenant?: string | (() => string);
     /** Current end user as known to the host. actorId is used as the chat
      *  reply context; without it, replies route to 'unknown'. */
@@ -126,6 +125,12 @@ declare function getCoreApiUrl(): string;
 declare function getCoreWsUrl(): string;
 declare function getVoiceApiUrl(): string;
 declare function getConsumerAuthApiUrl(): string;
+/** The tenant the app is scoped to. Signed in: the live token's `tenant` claim,
+ *  the same tenant every API call acts on, so a plugin URL, the voice session
+ *  and the header can never name a different workspace than the backend does
+ *  (2026-09-29: a stored pick still said 'ada' while the token said
+ *  ateam-mcp-test, and a plugin page 401'd). Signed out: the host's pick, or ''
+ *  when there is none — never a default tenant. */
 declare function getTenant(): string;
 declare function getUser(): AdasUser | null;
 declare function getToken(): string | null;
@@ -283,6 +288,10 @@ interface AuthSession {
 }
 declare function createAuthSession(deps: AuthSessionDeps): AuthSession;
 
+/** The tenant a signed-in session is scoped to: the token's `tenant` claim, the
+ *  same value the backend reads. Null for no token or a token without one. */
+declare function tenantFromToken(token: string | null | undefined): string | null;
+
 /**
  * SDK-owned push registration lifecycle (R7).
  *
@@ -1145,4 +1154,4 @@ interface AcsKvStorage {
 }
 declare function setAcsCacheStorage(kv: AcsKvStorage | null): void;
 
-export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasGateFlags, type AdasPhase, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type AuthSession, type AuthSessionDeps, type AuthSessionState, type BufferedCommand, type ConsumerCapabilityConfig, type ConsumerProviderConfig, type ConsumerSignInResult, type DeleteResult, type HandoffExchangeResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type InvitePreview, type JobProgress, type Message, type MessageAttachment, type OtpStartResult, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type PushBackend, type PushRegistration, type RefreshOutcome, type Session, type SessionEnv, type SessionPersistence, type SessionStatus, type SessionUser, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, type WorkspaceCapabilities, type WorkspaceSnapshot, type WorkspaceState, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, capabilityEnabled, closeChatStream, colors, connectAcsWs, connectorCall, createAuthSession, createPushRegistration, deleteArtifact, disconnectAcsWs, exchangeHandoff, fetchConsumerConfig, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getSession, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, isDevHost, joinWithApple, joinWithGoogle, linkChannelStart, linkChannelVerify, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, notifyAppForeground, onAppForeground, openJoinWithApple, openJoinWithGoogle, parseDeepLinkParam, parseHandoffCode, parseInviteCode, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, previewInvite, recordEvent, refreshToken, resolveAdasPhase, setAcsCacheStorage, setAcsReachabilityReporter, setClientDeclarationProvider, setHomeActionOrder, setOrder, signInWithApple, signInWithGoogle, spacing, switchTenant, unwrapMcpResult, useCapability, useChatStore, useHomeActionsStore, useWidgetsStore, useWorkspaceStore, userFromJwt };
+export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasGateFlags, type AdasPhase, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type AuthSession, type AuthSessionDeps, type AuthSessionState, type BufferedCommand, type ConsumerCapabilityConfig, type ConsumerProviderConfig, type ConsumerSignInResult, type DeleteResult, type HandoffExchangeResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type InvitePreview, type JobProgress, type Message, type MessageAttachment, type OtpStartResult, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type PushBackend, type PushRegistration, type RefreshOutcome, type Session, type SessionEnv, type SessionPersistence, type SessionStatus, type SessionUser, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, type WorkspaceCapabilities, type WorkspaceSnapshot, type WorkspaceState, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, capabilityEnabled, closeChatStream, colors, connectAcsWs, connectorCall, createAuthSession, createPushRegistration, deleteArtifact, disconnectAcsWs, exchangeHandoff, fetchConsumerConfig, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getSession, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, isDevHost, joinWithApple, joinWithGoogle, linkChannelStart, linkChannelVerify, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, notifyAppForeground, onAppForeground, openJoinWithApple, openJoinWithGoogle, parseDeepLinkParam, parseHandoffCode, parseInviteCode, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, previewInvite, recordEvent, refreshToken, resolveAdasPhase, setAcsCacheStorage, setAcsReachabilityReporter, setClientDeclarationProvider, setHomeActionOrder, setOrder, signInWithApple, signInWithGoogle, spacing, switchTenant, tenantFromToken, unwrapMcpResult, useCapability, useChatStore, useHomeActionsStore, useWidgetsStore, useWorkspaceStore, userFromJwt };

package/dist/index.d.ts

@@ -85,10 +85,9 @@ interface AdasConfig {
      *  the user belongs to). */
     consumerAuthUrl?: UrlSource;
     tokenProvider: TokenProvider;
-    /** Tenant slug — used for plugin URL resolution and voice, never sent as a
-     *  header (the backend derives the tenant from the JWT). Pass a getter when
-     *  the host resolves the tenant after startup (storage hydration, runtime
-     *  tenant switch). */
+    /** The host's tenant PICK — used only while signed out (e.g. the login
+     *  screen's chosen workspace). A signed-in session's tenant is always the
+     *  token's `tenant` claim, the one the backend acts on (getTenant()). */
     tenant?: string | (() => string);
     /** Current end user as known to the host. actorId is used as the chat
      *  reply context; without it, replies route to 'unknown'. */
@@ -126,6 +125,12 @@ declare function getCoreApiUrl(): string;
 declare function getCoreWsUrl(): string;
 declare function getVoiceApiUrl(): string;
 declare function getConsumerAuthApiUrl(): string;
+/** The tenant the app is scoped to. Signed in: the live token's `tenant` claim,
+ *  the same tenant every API call acts on, so a plugin URL, the voice session
+ *  and the header can never name a different workspace than the backend does
+ *  (2026-09-29: a stored pick still said 'ada' while the token said
+ *  ateam-mcp-test, and a plugin page 401'd). Signed out: the host's pick, or ''
+ *  when there is none — never a default tenant. */
 declare function getTenant(): string;
 declare function getUser(): AdasUser | null;
 declare function getToken(): string | null;
@@ -283,6 +288,10 @@ interface AuthSession {
 }
 declare function createAuthSession(deps: AuthSessionDeps): AuthSession;
 
+/** The tenant a signed-in session is scoped to: the token's `tenant` claim, the
+ *  same value the backend reads. Null for no token or a token without one. */
+declare function tenantFromToken(token: string | null | undefined): string | null;
+
 /**
  * SDK-owned push registration lifecycle (R7).
  *
@@ -1145,4 +1154,4 @@ interface AcsKvStorage {
 }
 declare function setAcsCacheStorage(kv: AcsKvStorage | null): void;
 
-export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasGateFlags, type AdasPhase, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type AuthSession, type AuthSessionDeps, type AuthSessionState, type BufferedCommand, type ConsumerCapabilityConfig, type ConsumerProviderConfig, type ConsumerSignInResult, type DeleteResult, type HandoffExchangeResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type InvitePreview, type JobProgress, type Message, type MessageAttachment, type OtpStartResult, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type PushBackend, type PushRegistration, type RefreshOutcome, type Session, type SessionEnv, type SessionPersistence, type SessionStatus, type SessionUser, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, type WorkspaceCapabilities, type WorkspaceSnapshot, type WorkspaceState, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, capabilityEnabled, closeChatStream, colors, connectAcsWs, connectorCall, createAuthSession, createPushRegistration, deleteArtifact, disconnectAcsWs, exchangeHandoff, fetchConsumerConfig, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getSession, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, isDevHost, joinWithApple, joinWithGoogle, linkChannelStart, linkChannelVerify, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, notifyAppForeground, onAppForeground, openJoinWithApple, openJoinWithGoogle, parseDeepLinkParam, parseHandoffCode, parseInviteCode, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, previewInvite, recordEvent, refreshToken, resolveAdasPhase, setAcsCacheStorage, setAcsReachabilityReporter, setClientDeclarationProvider, setHomeActionOrder, setOrder, signInWithApple, signInWithGoogle, spacing, switchTenant, unwrapMcpResult, useCapability, useChatStore, useHomeActionsStore, useWidgetsStore, useWorkspaceStore, userFromJwt };
+export { type AcsArtifact, type AcsDeleteReason, type AcsEvent, type AcsKvStorage, type AcsPatchReason, type AcsReachabilityReporter, type AcsSurface, type AdasConfig, type AdasGateFlags, type AdasPhase, type AdasSession, type AdasUser, type AttachmentCache, type AttachmentPreview, type AuthSession, type AuthSessionDeps, type AuthSessionState, type BufferedCommand, type ConsumerCapabilityConfig, type ConsumerProviderConfig, type ConsumerSignInResult, type DeleteResult, type HandoffExchangeResult, type HomeAction, type HomeActionLeaf, type HomeActionReason, type InvitePreview, type JobProgress, type Message, type MessageAttachment, type OtpStartResult, type OutgoingAttachment, type PatchResult, PluginCommandEmitter, type PushBackend, type PushRegistration, type RefreshOutcome, type Session, type SessionEnv, type SessionPersistence, type SessionStatus, type SessionUser, TABLE_BLOCK_CLOSE, TABLE_BLOCK_OPEN, type TenantMembership, type TokenProvider, type ToolCall, type UIAction, type WorkspaceCapabilities, type WorkspaceSnapshot, type WorkspaceState, ada, apiFetch, apiFetchRaw, blocksToText, borderRadius, capabilityEnabled, closeChatStream, colors, connectAcsWs, connectorCall, createAuthSession, createPushRegistration, deleteArtifact, disconnectAcsWs, exchangeHandoff, fetchConsumerConfig, fontSize, getConfig, getConsumerAuthApiUrl, getCoreApiUrl, getCoreWsUrl, getSession, getTenant, getToken, getUser, getVoiceApiUrl, initAdas, isAdasInitialized, isDevHost, joinWithApple, joinWithGoogle, linkChannelStart, linkChannelVerify, listHomeActions, listMadeForYou, listMyTenants, listSurface, mcpFetch, mcpToolCall, notifyAcsWsForeground, notifyAppForeground, onAppForeground, openJoinWithApple, openJoinWithGoogle, parseDeepLinkParam, parseHandoffCode, parseInviteCode, patchArtifact, patchHomeAction, pluginCommandEmitter, postCommandResult, previewInvite, recordEvent, refreshToken, resolveAdasPhase, setAcsCacheStorage, setAcsReachabilityReporter, setClientDeclarationProvider, setHomeActionOrder, setOrder, signInWithApple, signInWithGoogle, spacing, switchTenant, tenantFromToken, unwrapMcpResult, useCapability, useChatStore, useHomeActionsStore, useWidgetsStore, useWorkspaceStore, userFromJwt };

package/dist/index.js

@@ -87,6 +87,7 @@ __export(index_exports, {
   signInWithGoogle: () => signInWithGoogle,
   spacing: () => spacing,
   switchTenant: () => switchTenant,
+  tenantFromToken: () => tenantFromToken,
   unwrapMcpResult: () => unwrapMcpResult,
   useCapability: () => useCapability,
   useChatStore: () => useChatStore,
@@ -97,6 +98,25 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/jwt.ts
+function decodeJwtPayload(token) {
+  try {
+    const segs = token.split(".");
+    if (segs.length !== 3) return null;
+    const b64 = segs[1].replace(/-/g, "+").replace(/_/g, "/");
+    const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+    const json = typeof atob === "function" ? atob(padded) : Buffer.from(padded, "base64").toString("utf8");
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+}
+function tenantFromToken(token) {
+  if (!token) return null;
+  const t = decodeJwtPayload(token)?.tenant;
+  return typeof t === "string" && t ? t : null;
+}
+
 // src/config.ts
 var _config = null;
 function initAdas(config) {
@@ -131,6 +151,8 @@ function getConsumerAuthApiUrl() {
   return resolveUrl(url);
 }
 function getTenant() {
+  const token = getConfig().tokenProvider.getToken();
+  if (token) return tenantFromToken(token) || "";
   const t = getConfig().tenant;
   return (typeof t === "function" ? t() : t) || "";
 }
@@ -306,18 +328,6 @@ function getSession() {
 }
 
 // src/authSession.ts
-function decodeJwtPayload(token) {
-  try {
-    const segs = token.split(".");
-    if (segs.length !== 3) return null;
-    const b64 = segs[1].replace(/-/g, "+").replace(/_/g, "/");
-    const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
-    const json = typeof atob === "function" ? atob(padded) : Buffer.from(padded, "base64").toString("utf8");
-    return JSON.parse(json);
-  } catch {
-    return null;
-  }
-}
 function userFromJwt(token) {
   const claims = decodeJwtPayload(token);
   if (!claims?.sub) return null;
@@ -2242,6 +2252,7 @@ var borderRadius = {
   signInWithGoogle,
   spacing,
   switchTenant,
+  tenantFromToken,
   unwrapMcpResult,
   useCapability,
   useChatStore,