@awesomate/platform-sdk 0.1.0

package/dist/cjs/index.d.ts

@@ -0,0 +1,9 @@
+export { PlatformClient, keyClass, uploadTo } from "./client.js";
+export type { PlatformClientConfig, AnswerStreamResult } from "./client.js";
+export { ServiceClient, countTenantSources, liveSourceTotals } from "./service.js";
+export type { ServiceClientConfig } from "./service.js";
+export { parseSSE, answerEvents, collectAnswer } from "./sse.js";
+export type { SSEMessage, CollectedAnswer } from "./sse.js";
+export { signServiceRequest, serviceHeaders, hmacSha256Hex } from "./sign.js";
+export type { FetchLike } from "./http.js";
+export * from "./types.js";

package/dist/cjs/index.js

@@ -0,0 +1,35 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hmacSha256Hex = exports.serviceHeaders = exports.signServiceRequest = exports.collectAnswer = exports.answerEvents = exports.parseSSE = exports.liveSourceTotals = exports.countTenantSources = exports.ServiceClient = exports.uploadTo = exports.keyClass = exports.PlatformClient = void 0;
+var client_js_1 = require("./client.js");
+Object.defineProperty(exports, "PlatformClient", { enumerable: true, get: function () { return client_js_1.PlatformClient; } });
+Object.defineProperty(exports, "keyClass", { enumerable: true, get: function () { return client_js_1.keyClass; } });
+Object.defineProperty(exports, "uploadTo", { enumerable: true, get: function () { return client_js_1.uploadTo; } });
+var service_js_1 = require("./service.js");
+Object.defineProperty(exports, "ServiceClient", { enumerable: true, get: function () { return service_js_1.ServiceClient; } });
+Object.defineProperty(exports, "countTenantSources", { enumerable: true, get: function () { return service_js_1.countTenantSources; } });
+Object.defineProperty(exports, "liveSourceTotals", { enumerable: true, get: function () { return service_js_1.liveSourceTotals; } });
+var sse_js_1 = require("./sse.js");
+Object.defineProperty(exports, "parseSSE", { enumerable: true, get: function () { return sse_js_1.parseSSE; } });
+Object.defineProperty(exports, "answerEvents", { enumerable: true, get: function () { return sse_js_1.answerEvents; } });
+Object.defineProperty(exports, "collectAnswer", { enumerable: true, get: function () { return sse_js_1.collectAnswer; } });
+var sign_js_1 = require("./sign.js");
+Object.defineProperty(exports, "signServiceRequest", { enumerable: true, get: function () { return sign_js_1.signServiceRequest; } });
+Object.defineProperty(exports, "serviceHeaders", { enumerable: true, get: function () { return sign_js_1.serviceHeaders; } });
+Object.defineProperty(exports, "hmacSha256Hex", { enumerable: true, get: function () { return sign_js_1.hmacSha256Hex; } });
+__exportStar(require("./types.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yCAAiE;AAAxD,2GAAA,cAAc,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAE3C,2CAAmF;AAA1E,2GAAA,aAAa,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAE5D,mCAAiE;AAAxD,kGAAA,QAAQ,OAAA;AAAE,sGAAA,YAAY,OAAA;AAAE,uGAAA,aAAa,OAAA;AAE9C,qCAA8E;AAArE,6GAAA,kBAAkB,OAAA;AAAE,yGAAA,cAAc,OAAA;AAAE,wGAAA,aAAa,OAAA;AAE1D,6CAA2B"}

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/service.d.ts

@@ -0,0 +1,140 @@
+import type { FetchLike } from "./http.js";
+import type { AdminJobsPage, AliasDecisionBody, AliasesPage, CompleteUploadBody, CreateSourceBody, CreateUploadBody, Enqueued, EntityKind, LiveSourceTotals, MergeResult, MintKeyBody, MintedKey, PeoplePage, PersonDetail, PersonMeta, PersonPatchBody, PersonStatus, PlatformResult, PurgeJob, SourceSummary, SourcesPage, Tenant, TenantDetail, UploadTicket, UpsertTenantBody, UsageRow } from "./types.js";
+export interface ServiceClientConfig {
+    /** Service-channel base, e.g. `https://knowledge-admin.awesomate.ai`. */
+    adminUrl: string;
+    /** `amk_s_…` — held by the hub's api and worker only, never handed to a client. */
+    serviceKey: string;
+    hmacSecret: string;
+    timeoutMs?: number;
+    uploadTimeoutMs?: number;
+    fetchImpl?: FetchLike;
+    /** Clock for the signed timestamp (tests). */
+    now?: () => number;
+}
+/**
+ * Client for the hub-only service channel (`/v1/admin/*`). Every request carries
+ * `Authorization: Bearer amk_s_…`, `X-Awm-Timestamp`, `X-Awm-Signature` (HMAC over
+ * `<ts>.<rawBody>`) and, on mutations, `X-Awm-Idempotency-Key` (replays return the stored
+ * response). Same error contract as PlatformClient: never throws on the request path.
+ */
+export declare class ServiceClient {
+    private readonly adminUrl;
+    private readonly serviceKey;
+    private readonly hmacSecret;
+    private readonly timeoutMs;
+    private readonly uploadTimeoutMs;
+    private readonly fetchImpl;
+    private readonly now;
+    constructor(config: ServiceClientConfig);
+    isConfigured(): boolean;
+    private request;
+    private tenantPath;
+    /** `PUT /v1/admin/tenants/:id` — idempotent upsert. */
+    upsertTenant(tenantId: string, body: UpsertTenantBody, idempotencyKey: string): Promise<PlatformResult<{
+        tenant: Tenant;
+    }>>;
+    getTenant(tenantId: string): Promise<PlatformResult<TenantDetail>>;
+    mintKey(tenantId: string, body: MintKeyBody, idempotencyKey: string): Promise<PlatformResult<MintedKey>>;
+    revokeKey(tenantId: string, keyId: string, idempotencyKey: string): Promise<PlatformResult<void>>;
+    suspend(tenantId: string, idempotencyKey: string): Promise<PlatformResult<{
+        status: string;
+    }>>;
+    resume(tenantId: string, idempotencyKey: string): Promise<PlatformResult<{
+        status: string;
+    }>>;
+    patchConfig(tenantId: string, config: Record<string, unknown>, idempotencyKey: string): Promise<PlatformResult<{
+        tenant: Tenant;
+    }>>;
+    /** Short-lived `q` key for a test-chat pane — never persisted. Default TTL 15 min. */
+    mintTestChatKey(tenantId: string, opts?: {
+        name?: string;
+        ttlSeconds?: number;
+    }): Promise<PlatformResult<MintedKey>>;
+    purge(tenantId: string, idempotencyKey: string): Promise<PlatformResult<{
+        purge_job_id: string;
+    }>>;
+    getPurgeJob(purgeJobId: string): Promise<PlatformResult<PurgeJob>>;
+    /** Absolute daily counters; the range is capped at 62 days. */
+    listUsage(params: {
+        sinceDay: string;
+        untilDay?: string;
+    }): Promise<PlatformResult<UsageRow[]>>;
+    listJobs(tenantId: string, params?: {
+        status?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<PlatformResult<AdminJobsPage>>;
+    retryJob(tenantId: string, jobId: string, idempotencyKey: string): Promise<PlatformResult<Enqueued>>;
+    listSources(tenantId: string, params?: {
+        limit?: number;
+        cursor?: string;
+        kind?: string;
+        tag?: string;
+    }): Promise<PlatformResult<SourcesPage>>;
+    /** Whole-library counts in one call — for "how much is in here", not for browsing.
+     *  404 on a platform that predates the route; `liveSourceTotals()` falls back to paging. */
+    sourceSummary(tenantId: string): Promise<PlatformResult<SourceSummary>>;
+    createSource(tenantId: string, body: CreateSourceBody, idempotencyKey: string): Promise<PlatformResult<Enqueued>>;
+    deleteSource(tenantId: string, sourceId: string, idempotencyKey: string): Promise<PlatformResult<{
+        job_id: string;
+    }>>;
+    createUpload(tenantId: string, body: CreateUploadBody, idempotencyKey: string): Promise<PlatformResult<UploadTicket>>;
+    completeUpload(tenantId: string, uploadId: string, body: CompleteUploadBody, idempotencyKey: string): Promise<PlatformResult<{
+        upload_id: string;
+        status: string;
+    }>>;
+    /**
+     * PUT the staged bytes to `put_url` EXACTLY as the platform returned it — presigned S3 or
+     * the platform's query-signed dev route. No service headers: the URL is the credential.
+     * A relative `put_url` (FsStore deployments) resolves against `adminUrl`.
+     */
+    uploadBytes(putUrl: string, body: BodyInit | ReadableStream<Uint8Array>, sizeBytes?: number): Promise<PlatformResult<void>>;
+    listPeople(tenantId: string, params?: {
+        status?: PersonStatus | "all";
+        limit?: number;
+        cursor?: string;
+    }): Promise<PlatformResult<PeoplePage>>;
+    getPerson(tenantId: string, personId: string): Promise<PlatformResult<PersonDetail>>;
+    /** Rename (`display_name`, 1–80 chars) or hide/unhide (`status`). The platform propagates a
+     *  rename into its facets and enqueues a resolve. */
+    patchPerson(tenantId: string, personId: string, body: PersonPatchBody, idempotencyKey: string): Promise<PlatformResult<{
+        person: PersonMeta;
+        relabelled: number;
+        job_id: string | null;
+    }>>;
+    mergePeople(tenantId: string, personId: string, body: {
+        into_person_id: string;
+    }, idempotencyKey: string): Promise<PlatformResult<MergeResult>>;
+    listAliasSuggestions(tenantId: string, params?: {
+        status?: "pending" | "accepted" | "rejected";
+        kind?: EntityKind;
+        limit?: number;
+        cursor?: string;
+    }): Promise<PlatformResult<AliasesPage>>;
+    decideAlias(tenantId: string, body: AliasDecisionBody, idempotencyKey: string): Promise<PlatformResult<{
+        alias: string;
+        entity_id: string | null;
+        job_id: string | null;
+    }>>;
+    /** 202 `{job_id, status:'queued', position}` when a resolve is enqueued; 200 `{job_id, status}`
+     *  when one is already queued|running for the tenant. */
+    resolveEntities(tenantId: string, idempotencyKey: string, body?: {
+        full?: boolean;
+        stub?: boolean;
+    }): Promise<PlatformResult<Enqueued>>;
+}
+/**
+ * The truthful "what is in this tenant" figure: the platform's summary route (one GROUP BY,
+ * exact at any size); on a platform that predates it, the paged count — capped, and flagged.
+ */
+export declare function liveSourceTotals(client: Pick<ServiceClient, "listSources" | "sourceSummary">, tenantId: string): Promise<PlatformResult<LiveSourceTotals>>;
+/**
+ * Live source count by paging the metadata list. Prefer `liveSourceTotals`, which uses the
+ * summary route when the platform serves it and falls back to this.
+ */
+export declare function countTenantSources(client: Pick<ServiceClient, "listSources">, tenantId: string): Promise<PlatformResult<{
+    total: number;
+    failed: number;
+    truncated: boolean;
+}>>;

package/dist/cjs/service.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceClient = void 0;
+exports.liveSourceTotals = liveSourceTotals;
+exports.countTenantSources = countTenantSources;
+const client_js_1 = require("./client.js");
+const http_js_1 = require("./http.js");
+const sign_js_1 = require("./sign.js");
+/**
+ * Client for the hub-only service channel (`/v1/admin/*`). Every request carries
+ * `Authorization: Bearer amk_s_…`, `X-Awm-Timestamp`, `X-Awm-Signature` (HMAC over
+ * `<ts>.<rawBody>`) and, on mutations, `X-Awm-Idempotency-Key` (replays return the stored
+ * response). Same error contract as PlatformClient: never throws on the request path.
+ */
+class ServiceClient {
+    adminUrl;
+    serviceKey;
+    hmacSecret;
+    timeoutMs;
+    uploadTimeoutMs;
+    fetchImpl;
+    now;
+    constructor(config) {
+        this.adminUrl = (0, http_js_1.trimSlash)(config.adminUrl ?? "");
+        this.serviceKey = config.serviceKey ?? "";
+        this.hmacSecret = config.hmacSecret ?? "";
+        this.timeoutMs = config.timeoutMs ?? 10_000;
+        this.uploadTimeoutMs = config.uploadTimeoutMs ?? 10 * 60_000;
+        this.fetchImpl = config.fetchImpl ?? (0, http_js_1.defaultFetch)();
+        this.now = config.now ?? Date.now;
+    }
+    isConfigured() {
+        return Boolean(this.adminUrl && this.serviceKey && this.hmacSecret);
+    }
+    async request(method, path, body, idempotencyKey) {
+        if (!this.isConfigured())
+            return http_js_1.UNAVAILABLE;
+        const rawBody = body === undefined ? "" : JSON.stringify(body);
+        const headers = await (0, sign_js_1.serviceHeaders)({
+            serviceKey: this.serviceKey,
+            hmacSecret: this.hmacSecret,
+            rawBody,
+            idempotencyKey,
+            now: this.now,
+        });
+        if (body !== undefined)
+            headers["Content-Type"] = "application/json";
+        const d = (0, http_js_1.deadline)(this.timeoutMs);
+        try {
+            const res = await this.fetchImpl(`${this.adminUrl}${path}`, {
+                method,
+                headers,
+                body: body === undefined ? undefined : rawBody,
+                signal: d.signal,
+            });
+            return await (0, http_js_1.resultOf)(res);
+        }
+        catch {
+            return http_js_1.UNAVAILABLE;
+        }
+        finally {
+            d.done();
+        }
+    }
+    tenantPath(tenantId, rest = "") {
+        return `/v1/admin/tenants/${(0, http_js_1.enc)(tenantId)}${rest}`;
+    }
+    // --- tenants and keys ------------------------------------------------------------------
+    /** `PUT /v1/admin/tenants/:id` — idempotent upsert. */
+    upsertTenant(tenantId, body, idempotencyKey) {
+        return this.request("PUT", this.tenantPath(tenantId), body, idempotencyKey);
+    }
+    getTenant(tenantId) {
+        return this.request("GET", this.tenantPath(tenantId));
+    }
+    mintKey(tenantId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/keys"), body, idempotencyKey);
+    }
+    revokeKey(tenantId, keyId, idempotencyKey) {
+        return this.request("DELETE", this.tenantPath(tenantId, `/keys/${(0, http_js_1.enc)(keyId)}`), undefined, idempotencyKey);
+    }
+    suspend(tenantId, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/suspend"), {}, idempotencyKey);
+    }
+    resume(tenantId, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/resume"), {}, idempotencyKey);
+    }
+    patchConfig(tenantId, config, idempotencyKey) {
+        return this.request("PATCH", this.tenantPath(tenantId, "/config"), config, idempotencyKey);
+    }
+    /** Short-lived `q` key for a test-chat pane — never persisted. Default TTL 15 min. */
+    mintTestChatKey(tenantId, opts = {}) {
+        return this.mintKey(tenantId, { class: "q", name: opts.name ?? "hub: test chat", expires_in_s: opts.ttlSeconds ?? 900 }, `kt:${tenantId}:testchat:${this.now()}`);
+    }
+    // --- purge and usage -------------------------------------------------------------------
+    purge(tenantId, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/purge"), {}, idempotencyKey);
+    }
+    getPurgeJob(purgeJobId) {
+        return this.request("GET", `/v1/admin/purge-jobs/${(0, http_js_1.enc)(purgeJobId)}`);
+    }
+    /** Absolute daily counters; the range is capped at 62 days. */
+    listUsage(params) {
+        return this.request("GET", `/v1/admin/usage${(0, http_js_1.queryString)({ since_day: params.sinceDay, until_day: params.untilDay })}`);
+    }
+    // --- content, metadata only ------------------------------------------------------------
+    listJobs(tenantId, params = {}) {
+        return this.request("GET", this.tenantPath(tenantId, `/jobs${(0, http_js_1.queryString)(params)}`));
+    }
+    retryJob(tenantId, jobId, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, `/jobs/${(0, http_js_1.enc)(jobId)}/retry`), {}, idempotencyKey);
+    }
+    listSources(tenantId, params = {}) {
+        return this.request("GET", this.tenantPath(tenantId, `/sources${(0, http_js_1.queryString)(params)}`));
+    }
+    /** Whole-library counts in one call — for "how much is in here", not for browsing.
+     *  404 on a platform that predates the route; `liveSourceTotals()` falls back to paging. */
+    sourceSummary(tenantId) {
+        return this.request("GET", this.tenantPath(tenantId, "/sources/summary"));
+    }
+    createSource(tenantId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/sources"), body, idempotencyKey);
+    }
+    deleteSource(tenantId, sourceId, idempotencyKey) {
+        return this.request("DELETE", this.tenantPath(tenantId, `/sources/${(0, http_js_1.enc)(sourceId)}`), undefined, idempotencyKey);
+    }
+    createUpload(tenantId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/uploads"), body, idempotencyKey);
+    }
+    completeUpload(tenantId, uploadId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, `/uploads/${(0, http_js_1.enc)(uploadId)}/complete`), body, idempotencyKey);
+    }
+    /**
+     * PUT the staged bytes to `put_url` EXACTLY as the platform returned it — presigned S3 or
+     * the platform's query-signed dev route. No service headers: the URL is the credential.
+     * A relative `put_url` (FsStore deployments) resolves against `adminUrl`.
+     */
+    uploadBytes(putUrl, body, sizeBytes) {
+        return (0, client_js_1.uploadTo)(this.fetchImpl, putUrl.startsWith("/") ? `${this.adminUrl}${putUrl}` : putUrl, body, sizeBytes, this.uploadTimeoutMs);
+    }
+    // --- people, aliases, entity resolution ------------------------------------------------
+    listPeople(tenantId, params = {}) {
+        return this.request("GET", this.tenantPath(tenantId, `/people${(0, http_js_1.queryString)(params)}`));
+    }
+    getPerson(tenantId, personId) {
+        return this.request("GET", this.tenantPath(tenantId, `/people/${(0, http_js_1.enc)(personId)}`));
+    }
+    /** Rename (`display_name`, 1–80 chars) or hide/unhide (`status`). The platform propagates a
+     *  rename into its facets and enqueues a resolve. */
+    patchPerson(tenantId, personId, body, idempotencyKey) {
+        return this.request("PATCH", this.tenantPath(tenantId, `/people/${(0, http_js_1.enc)(personId)}`), body, idempotencyKey);
+    }
+    mergePeople(tenantId, personId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, `/people/${(0, http_js_1.enc)(personId)}/merge`), body, idempotencyKey);
+    }
+    listAliasSuggestions(tenantId, params = {}) {
+        return this.request("GET", this.tenantPath(tenantId, `/entities/aliases${(0, http_js_1.queryString)(params)}`));
+    }
+    decideAlias(tenantId, body, idempotencyKey) {
+        return this.request("POST", this.tenantPath(tenantId, "/entities/aliases/decide"), body, idempotencyKey);
+    }
+    /** 202 `{job_id, status:'queued', position}` when a resolve is enqueued; 200 `{job_id, status}`
+     *  when one is already queued|running for the tenant. */
+    resolveEntities(tenantId, idempotencyKey, body = {}) {
+        return this.request("POST", this.tenantPath(tenantId, "/entities/resolve"), body, idempotencyKey);
+    }
+}
+exports.ServiceClient = ServiceClient;
+/**
+ * The truthful "what is in this tenant" figure: the platform's summary route (one GROUP BY,
+ * exact at any size); on a platform that predates it, the paged count — capped, and flagged.
+ */
+async function liveSourceTotals(client, tenantId) {
+    const summary = await client.sourceSummary(tenantId);
+    if (summary.ok) {
+        return {
+            ok: true,
+            status: 200,
+            data: {
+                total: Number(summary.data.total) || 0,
+                failed: Number(summary.data.failed_sources) || 0,
+                by_kind: summary.data.by_kind ?? {},
+                truncated: false,
+            },
+        };
+    }
+    if (!("status" in summary) || summary.status !== 404)
+        return summary;
+    const counted = await countTenantSources(client, tenantId);
+    if (!counted.ok)
+        return counted;
+    return { ok: true, status: 200, data: counted.data };
+}
+const SOURCE_COUNT_PAGE = 50;
+const SOURCE_COUNT_MAX_PAGES = 20;
+/**
+ * Live source count by paging the metadata list. Prefer `liveSourceTotals`, which uses the
+ * summary route when the platform serves it and falls back to this.
+ */
+async function countTenantSources(client, tenantId) {
+    let total = 0;
+    let failed = 0;
+    let cursor;
+    for (let page = 0; page < SOURCE_COUNT_MAX_PAGES; page++) {
+        const r = await client.listSources(tenantId, { limit: SOURCE_COUNT_PAGE, cursor });
+        if (!r.ok)
+            return r;
+        total += r.data.sources.length;
+        failed += r.data.sources.filter((s) => s.status === "failed").length;
+        if (!r.data.next_cursor)
+            return { ok: true, status: 200, data: { total, failed, truncated: false } };
+        cursor = r.data.next_cursor;
+    }
+    return { ok: true, status: 200, data: { total, failed, truncated: true } };
+}
+//# sourceMappingURL=service.js.map

package/dist/cjs/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/service.ts"],"names":[],"mappings":";;;AAuRA,4CAqBC;AASD,gDAgBC;AArUD,2CAAuC;AACvC,uCAAuG;AAEvG,uCAA2C;AA6C3C;;;;;GAKG;AACH,MAAa,aAAa;IACP,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,eAAe,CAAS;IACxB,SAAS,CAAY;IACrB,GAAG,CAAe;IAEnC,YAAY,MAA2B;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAA,mBAAS,EAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,GAAG,MAAM,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAA,sBAAY,GAAE,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,CAAC;IAED,YAAY;QACV,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,cAAuB;QAC5F,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,qBAAW,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAA,wBAAc,EAAC;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO;YACP,cAAc;YACd,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,MAAM,CAAC,GAAG,IAAA,kBAAQ,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE;gBAC1D,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAC9C,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;YACH,OAAO,MAAM,IAAA,kBAAQ,EAAI,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,qBAAW,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,QAAgB,EAAE,IAAI,GAAG,EAAE;QAC5C,OAAO,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,0FAA0F;IAE1F,uDAAuD;IACvD,YAAY,CAAC,QAAgB,EAAE,IAAsB,EAAE,cAAsB;QAC3E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC9E,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,IAAiB,EAAE,cAAsB;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACxF,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,KAAa,EAAE,cAAsB;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,IAAA,aAAG,EAAC,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,cAAsB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,cAAsB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IACxF,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,MAA+B,EAAE,cAAsB;QACnF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7F,CAAC;IAED,sFAAsF;IACtF,eAAe,CAAC,QAAgB,EAAE,OAA+C,EAAE;QACjF,OAAO,IAAI,CAAC,OAAO,CACjB,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,gBAAgB,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE,EACzF,MAAM,QAAQ,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CACxC,CAAC;IACJ,CAAC;IAED,0FAA0F;IAE1F,KAAK,CAAC,QAAgB,EAAE,cAAsB;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IACvF,CAAC;IAED,WAAW,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,+DAA+D;IAC/D,SAAS,CAAC,MAA+C;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,IAAA,qBAAW,EAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,0FAA0F;IAE1F,QAAQ,CAAC,QAAgB,EAAE,SAA+D,EAAE;QAC1F,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAA,qBAAW,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,KAAa,EAAE,cAAsB;QAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,IAAA,aAAG,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IAC1G,CAAC;IAED,WAAW,CACT,QAAgB,EAChB,SAA2E,EAAE;QAE7E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,IAAA,qBAAW,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED;gGAC4F;IAC5F,aAAa,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,IAAsB,EAAE,cAAsB;QAC3E,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3F,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,QAAgB,EAAE,cAAsB;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACnH,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,IAAsB,EAAE,cAAsB;QAC3E,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3F,CAAC;IAED,cAAc,CACZ,QAAgB,EAChB,QAAgB,EAChB,IAAwB,EACxB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACrH,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,MAAc,EAAE,IAA2C,EAAE,SAAkB;QACzF,OAAO,IAAA,oBAAQ,EAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACxI,CAAC;IAED,0FAA0F;IAE1F,UAAU,CACR,QAAgB,EAChB,SAA6E,EAAE;QAE/E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,IAAA,qBAAW,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,QAAgB;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;IAED;yDACqD;IACrD,WAAW,CACT,QAAgB,EAChB,QAAgB,EAChB,IAAqB,EACrB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5G,CAAC;IAED,WAAW,CACT,QAAgB,EAChB,QAAgB,EAChB,IAAgC,EAChC,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,IAAA,aAAG,EAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACjH,CAAC;IAED,oBAAoB,CAClB,QAAgB,EAChB,SAA+G,EAAE;QAEjH,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,oBAAoB,IAAA,qBAAW,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IAED,WAAW,CACT,QAAgB,EAChB,IAAuB,EACvB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3G,CAAC;IAED;6DACyD;IACzD,eAAe,CACb,QAAgB,EAChB,cAAsB,EACtB,OAA2C,EAAE;QAE7C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACpG,CAAC;CACF;AA3ND,sCA2NC;AAED;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAA4D,EAC5D,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACtC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAChD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE;gBACnC,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAA0C,EAC1C,QAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAA0B,CAAC;IAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACrG,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7E,CAAC"}

package/dist/cjs/sign.d.ts

@@ -0,0 +1,11 @@
+export declare function hmacSha256Hex(secret: string, message: string | Uint8Array): Promise<string>;
+/** `X-Awm-Signature` value for an outbound service-channel request. Empty body signs `"<ts>."`. */
+export declare function signServiceRequest(secret: string, timestamp: string, rawBody: string): Promise<string>;
+/** Headers the service channel requires on every request; mutations add the idempotency key. */
+export declare function serviceHeaders(opts: {
+    serviceKey: string;
+    hmacSecret: string;
+    rawBody: string;
+    idempotencyKey?: string;
+    now?: () => number;
+}): Promise<Record<string, string>>;

package/dist/cjs/sign.js

@@ -0,0 +1,41 @@
+"use strict";
+// Service-channel HMAC (docs/api-v1.md § Service channel): the platform verifies
+// hex(hmac_sha256(secret, `${timestamp}.${rawBody}`)) wrapped as `v1=<hex>`, ±5 min skew.
+// WebCrypto so the same code signs in Node ≥ 20 and in browsers; the hub's
+// fleet/lib/ingest-auth.ts computes the identical value with node:crypto.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hmacSha256Hex = hmacSha256Hex;
+exports.signServiceRequest = signServiceRequest;
+exports.serviceHeaders = serviceHeaders;
+const textEncoder = new TextEncoder();
+function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        throw new Error("@awesomate/platform-sdk: WebCrypto (crypto.subtle) is not available");
+    return s;
+}
+const toHex = (buf) => Array.from(new Uint8Array(buf), (b) => b.toString(16).padStart(2, "0")).join("");
+async function hmacSha256Hex(secret, message) {
+    const key = await subtle().importKey("raw", textEncoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, [
+        "sign",
+    ]);
+    const bytes = typeof message === "string" ? textEncoder.encode(message) : message;
+    return toHex(await subtle().sign("HMAC", key, bytes));
+}
+/** `X-Awm-Signature` value for an outbound service-channel request. Empty body signs `"<ts>."`. */
+async function signServiceRequest(secret, timestamp, rawBody) {
+    return `v1=${await hmacSha256Hex(secret, `${timestamp}.${rawBody}`)}`;
+}
+/** Headers the service channel requires on every request; mutations add the idempotency key. */
+async function serviceHeaders(opts) {
+    const timestamp = String((opts.now ?? Date.now)());
+    const headers = {
+        Authorization: `Bearer ${opts.serviceKey}`,
+        "X-Awm-Timestamp": timestamp,
+        "X-Awm-Signature": await signServiceRequest(opts.hmacSecret, timestamp, opts.rawBody),
+    };
+    if (opts.idempotencyKey)
+        headers["X-Awm-Idempotency-Key"] = opts.idempotencyKey.slice(0, 96);
+    return headers;
+}
+//# sourceMappingURL=sign.js.map

package/dist/cjs/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":";AAAA,iFAAiF;AACjF,0FAA0F;AAC1F,2EAA2E;AAC3E,0EAA0E;;AAa1E,sCAMC;AAGD,gDAEC;AAGD,wCAeC;AAxCD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,GAAgB,EAAU,EAAE,CACzC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE5E,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,OAA4B;IAC9E,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;QAChH,MAAM;KACP,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAClF,OAAO,KAAK,CAAC,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAqB,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,mGAAmG;AAC5F,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;IACzF,OAAO,MAAM,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,gGAAgG;AACzF,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,IAAI,CAAC,UAAU,EAAE;QAC1C,iBAAiB,EAAE,SAAS;QAC5B,iBAAiB,EAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;KACtF,CAAC;IACF,IAAI,IAAI,CAAC,cAAc;QAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cjs/sse.d.ts

@@ -0,0 +1,27 @@
+import type { AnswerMeta, AnswerStreamEvent } from "./types.js";
+export interface SSEMessage {
+    event: string;
+    data: string;
+    id?: string;
+}
+/**
+ * Parses a text/event-stream body into messages. Follows the WHATWG grammar: fields split on
+ * the first ":", one optional leading space stripped, multi-line `data:` joined with "\n",
+ * a blank line dispatches. `event` defaults to "message". Comments (":" lines) are dropped.
+ */
+export declare function parseSSE(body: ReadableStream<Uint8Array>): AsyncGenerator<SSEMessage>;
+/**
+ * Typed view of the platform's answer stream (`POST /v1/answer` or `/v1/agents/:id/chat` with
+ * `Accept: text/event-stream`): `sources` (candidates, before any text), `answer`/`reply`
+ * chunks that already passed the citation gate, `meta`, `done`. Unknown events are skipped so
+ * a client that only knows these keeps working when the platform adds more.
+ */
+export declare function answerEvents(body: ReadableStream<Uint8Array>): AsyncGenerator<AnswerStreamEvent>;
+export interface CollectedAnswer {
+    text: string;
+    sources: Array<Record<string, unknown>>;
+    meta: AnswerMeta | null;
+    error: string | null;
+}
+/** Drains an answer stream into its final text + meta, for callers that stream to nobody. */
+export declare function collectAnswer(body: ReadableStream<Uint8Array>): Promise<CollectedAnswer>;

package/dist/cjs/sse.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSSE = parseSSE;
+exports.answerEvents = answerEvents;
+exports.collectAnswer = collectAnswer;
+/**
+ * Parses a text/event-stream body into messages. Follows the WHATWG grammar: fields split on
+ * the first ":", one optional leading space stripped, multi-line `data:` joined with "\n",
+ * a blank line dispatches. `event` defaults to "message". Comments (":" lines) are dropped.
+ */
+async function* parseSSE(body) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let event = "";
+    let data = [];
+    let id;
+    const dispatch = () => {
+        if (data.length === 0 && !event)
+            return null;
+        const msg = { event: event || "message", data: data.join("\n") };
+        if (id !== undefined)
+            msg.id = id;
+        event = "";
+        data = [];
+        return msg;
+    };
+    const handleLine = (line) => {
+        if (line === "")
+            return dispatch();
+        if (line.startsWith(":"))
+            return null;
+        const colon = line.indexOf(":");
+        const field = colon === -1 ? line : line.slice(0, colon);
+        let value = colon === -1 ? "" : line.slice(colon + 1);
+        if (value.startsWith(" "))
+            value = value.slice(1);
+        if (field === "event")
+            event = value;
+        else if (field === "data")
+            data.push(value);
+        else if (field === "id")
+            id = value;
+        return null;
+    };
+    let eof = false;
+    try {
+        for (;;) {
+            const { value, done } = await reader.read();
+            buffer += done ? decoder.decode() : decoder.decode(value, { stream: true });
+            const lines = buffer.split(/\r\n|\r|\n/);
+            buffer = done ? "" : (lines.pop() ?? "");
+            for (const line of lines) {
+                const msg = handleLine(line);
+                if (msg)
+                    yield msg;
+            }
+            if (done) {
+                eof = true;
+                const tail = dispatch();
+                if (tail)
+                    yield tail;
+                return;
+            }
+        }
+    }
+    finally {
+        // A consumer that stops early (the platform's `done` event, a `break`) must release the
+        // connection, not just the lock — otherwise the body, and everything wired to it, stays open.
+        if (!eof)
+            await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+    }
+}
+const parseJson = (text, fallback) => {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return fallback;
+    }
+};
+/**
+ * Typed view of the platform's answer stream (`POST /v1/answer` or `/v1/agents/:id/chat` with
+ * `Accept: text/event-stream`): `sources` (candidates, before any text), `answer`/`reply`
+ * chunks that already passed the citation gate, `meta`, `done`. Unknown events are skipped so
+ * a client that only knows these keeps working when the platform adds more.
+ */
+async function* answerEvents(body) {
+    for await (const msg of parseSSE(body)) {
+        switch (msg.event) {
+            case "sources":
+                yield { event: "sources", sources: parseJson(msg.data, []) };
+                break;
+            case "answer":
+                yield { event: "answer", text: msg.data };
+                break;
+            case "reply":
+                yield { event: "reply", text: msg.data };
+                break;
+            case "meta":
+                yield { event: "meta", meta: parseJson(msg.data, { status: "error" }) };
+                break;
+            case "done":
+                yield { event: "done" };
+                return;
+            case "error":
+                yield { event: "error", message: parseJson(msg.data, {}).message ?? msg.data };
+                return;
+            default:
+                break;
+        }
+    }
+}
+/** Drains an answer stream into its final text + meta, for callers that stream to nobody. */
+async function collectAnswer(body) {
+    const out = { text: "", sources: [], meta: null, error: null };
+    for await (const e of answerEvents(body)) {
+        if (e.event === "sources")
+            out.sources = e.sources;
+        else if (e.event === "answer" || e.event === "reply")
+            out.text += e.text;
+        else if (e.event === "meta")
+            out.meta = e.meta;
+        else if (e.event === "error")
+            out.error = e.message;
+    }
+    return out;
+}
+//# sourceMappingURL=sse.js.map