@band-ai/sdk 0.1.10 → 0.2.0

package/dist/{chunk-2BHHR6YW.js → chunk-4IAXZBXX.js}

@@ -3,13 +3,14 @@ import {
   buildSingleContextRegistrations,
   buildZodShape,
   resolveSingleRoomTools
-} from "./chunk-6RXWL6TC.js";
+} from "./chunk-NT7TBFX2.js";
 import {
+  MCP_SERVER_NAME,
   mcpToolNames
-} from "./chunk-MLROFDKR.js";
+} from "./chunk-RV76SKFT.js";
 
 // src/mcp/stdio.ts
-var ThenvoiMcpStdioServer = class {
+var BandMcpStdioServer = class {
   options;
   registrations;
   mcpServer = null;
@@ -38,7 +39,7 @@ var ThenvoiMcpStdioServer = class {
     const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
     const { z } = await import("zod");
     const mcpServer = new McpServer({
-      name: this.options.name ?? "thenvoi",
+      name: this.options.name ?? MCP_SERVER_NAME,
       version: "1.0.0"
     });
     registerTools(mcpServer, z, this.registrations);
@@ -68,13 +69,33 @@ function registerTools(mcpServer, z, registrations) {
   }
 }
 
+// src/mcp/auth.ts
+import { randomBytes, timingSafeEqual } from "crypto";
+function generateAuthToken() {
+  return randomBytes(32).toString("hex");
+}
+function isAuthorizedRequest(authorizationHeader, authToken) {
+  if (!authToken) {
+    return true;
+  }
+  if (!authorizationHeader) {
+    return false;
+  }
+  const expected = Buffer.from(`Bearer ${authToken}`);
+  const actual = Buffer.from(authorizationHeader);
+  if (expected.length !== actual.length) {
+    return false;
+  }
+  return timingSafeEqual(expected, actual);
+}
+
 // src/mcp/server.ts
 var PORT_RANGE_START = 5e4;
 var PORT_RANGE_END = 6e4;
 var MCP_SERVER_VERSION = "1.0.0";
 var SESSION_IDLE_TTL_MS = 15 * 60 * 1e3;
 var SESSION_SWEEP_INTERVAL_MS = 60 * 1e3;
-var ThenvoiMcpServer = class {
+var BandMcpServer = class {
   options;
   registrations;
   httpServer = null;
@@ -118,7 +139,7 @@ var ThenvoiMcpServer = class {
     const http = await import("http");
     const { randomUUID } = await import("crypto");
     const { z } = await import("zod");
-    const serverName = this.options.name ?? "thenvoi";
+    const serverName = this.options.name ?? MCP_SERVER_NAME;
     const app = express();
     app.use(express.json());
     app.get("/healthz", (_req, res) => {
@@ -126,6 +147,10 @@ var ThenvoiMcpServer = class {
     });
     const handleMcpRequest = async (req, res) => {
       try {
+        if (!isAuthorizedRequest(req.headers.authorization, this.options.authToken)) {
+          sendMcpError(res, 401, "Unauthorized");
+          return;
+        }
         const sessionId = getSessionIdHeader(req.headers["mcp-session-id"]);
         let session = sessionId ? this.sessions.get(sessionId) : void 0;
         if (!session) {
@@ -303,7 +328,7 @@ var PORT_RANGE_START2 = 5e4;
 var PORT_RANGE_END2 = 6e4;
 var SESSION_IDLE_TTL_MS2 = 15 * 60 * 1e3;
 var SESSION_SWEEP_INTERVAL_MS2 = 60 * 1e3;
-var ThenvoiMcpSseServer = class {
+var BandMcpSseServer = class {
   options;
   registrations;
   httpServer = null;
@@ -350,10 +375,14 @@ var ThenvoiMcpSseServer = class {
     app.get("/healthz", (_req, res) => {
       res.json({ status: "ok" });
     });
-    app.get("/sse", async (_req, res) => {
+    app.get("/sse", async (req, res) => {
+      if (!isAuthorizedRequest(req.headers.authorization, this.options.authToken)) {
+        res.status(401).send("Unauthorized");
+        return;
+      }
       const transport = new SSEServerTransport("/messages", res);
       const mcpServer = new McpServer({
-        name: this.options.name ?? "thenvoi",
+        name: this.options.name ?? MCP_SERVER_NAME,
         version: "1.0.0"
       });
       registerTools3(mcpServer, z, this.registrations);
@@ -375,6 +404,10 @@ var ThenvoiMcpSseServer = class {
       });
     });
     app.post("/messages", async (req, res) => {
+      if (!isAuthorizedRequest(req.headers.authorization, this.options.authToken)) {
+        res.status(401).send("Unauthorized");
+        return;
+      }
       const sessionId = typeof req.query.sessionId === "string" ? req.query.sessionId : null;
       if (!sessionId) {
         res.status(400).send("Missing sessionId");
@@ -488,15 +521,15 @@ function checkPort2(http, port) {
 }
 
 // src/mcp/backends.ts
-async function createThenvoiMcpBackend(options) {
+async function createBandMcpBackend(options) {
   const registrationOptions = {
     enableMemoryTools: options.enableMemoryTools,
     enableContactTools: true,
     additionalTools: options.additionalTools
   };
   if (options.kind === "sdk") {
-    const { createThenvoiSdkMcpServer } = await import("./mcp-claude.js");
-    const server2 = createThenvoiSdkMcpServer({
+    const { createBandSdkMcpServer } = await import("./mcp-claude.js");
+    const server2 = createBandSdkMcpServer({
       getToolsForRoom: options.getToolsForRoom,
       multiRoom: options.multiRoom,
       enableMemoryTools: options.enableMemoryTools,
@@ -513,7 +546,7 @@ async function createThenvoiMcpBackend(options) {
   const registrations = options.multiRoom === false ? buildSingleContextRegistrations(resolvedTools, registrationOptions) : buildRoomScopedRegistrations(resolvedTools, registrationOptions);
   const allowedTools = mcpToolNames(new Set(registrations.map((registration) => registration.name)));
   if (options.kind === "stdio") {
-    const server2 = new ThenvoiMcpStdioServer({
+    const server2 = new BandMcpStdioServer({
       tools: resolvedTools,
       enableMemoryTools: options.enableMemoryTools,
       enableContactTools: true,
@@ -529,40 +562,45 @@ async function createThenvoiMcpBackend(options) {
       }
     };
   }
+  const authToken = generateAuthToken();
   if (options.kind === "sse") {
-    const server2 = new ThenvoiMcpSseServer({
+    const server2 = new BandMcpSseServer({
       tools: resolvedTools,
       enableMemoryTools: options.enableMemoryTools,
       enableContactTools: true,
-      additionalTools: options.additionalTools
+      additionalTools: options.additionalTools,
+      authToken
     });
     await server2.start();
     return {
       kind: "sse",
       server: server2,
       allowedTools,
+      authToken,
       stop: async () => {
         await server2.stop();
       }
     };
   }
-  const server = new ThenvoiMcpServer({
+  const server = new BandMcpServer({
     tools: resolvedTools,
     enableMemoryTools: options.enableMemoryTools,
     enableContactTools: true,
-    additionalTools: options.additionalTools
+    additionalTools: options.additionalTools,
+    authToken
   });
   await server.start();
   return {
     kind: "http",
     server,
     allowedTools,
+    authToken,
     stop: async () => {
       await server.stop();
     }
   };
 }
-function getThenvoiSdkMcpServerConfig(backend) {
+function getBandSdkMcpServerConfig(backend) {
   if (backend.kind !== "sdk") {
     throw new Error(`Expected sdk MCP backend, received ${backend.kind}`);
   }
@@ -570,9 +608,10 @@ function getThenvoiSdkMcpServerConfig(backend) {
 }
 
 export {
-  ThenvoiMcpStdioServer,
-  ThenvoiMcpServer,
-  ThenvoiMcpSseServer,
-  createThenvoiMcpBackend,
-  getThenvoiSdkMcpServerConfig
+  generateAuthToken,
+  BandMcpStdioServer,
+  BandMcpServer,
+  BandMcpSseServer,
+  createBandMcpBackend,
+  getBandSdkMcpServerConfig
 };

package/dist/{chunk-SG4WLD2H.js → chunk-EAI2M3WM.js}

@@ -9,7 +9,7 @@ import {
 import {
   UnsupportedFeatureError,
   ValidationError
-} from "./chunk-YR3BOQNW.js";
+} from "./chunk-JY75VSQK.js";
 
 // src/client/rest/pagination.ts
 var DEFAULT_PAGE_SIZE = 100;
@@ -187,6 +187,7 @@ function toNonNegativeInteger(value) {
 var DEFAULT_REQUEST_OPTIONS = {
   maxRetries: 3
 };
+var MESSAGE_SEND_MAX_RETRIES = 2;
 
 // src/client/rest/responseNormalization.ts
 function asMetadataMap(value) {
@@ -217,54 +218,16 @@ function normalizeContactRequestsResult(result) {
 }
 
 // src/client/rest/FernRestAdapter.ts
-function mergeOptions(options) {
+function mergeOptions(options, maxRetries) {
   return {
     ...DEFAULT_REQUEST_OPTIONS,
+    ...maxRetries !== void 0 ? { maxRetries } : {},
     ...options
   };
 }
-var AGENT_ME_RETRY_LIMIT = 4;
-var AGENT_ME_RETRY_BASE_DELAY_MS = 2e3;
-var MESSAGE_SEND_RETRY_LIMIT = 3;
-var MESSAGE_SEND_RETRY_BASE_DELAY_MS = 500;
 function asMetadataMap2(value) {
   return asOptionalRecord(value);
 }
-function extractHttpStatus(error) {
-  const record = asOptionalRecord(error);
-  if (!record) {
-    return void 0;
-  }
-  const response = asOptionalRecord(record.response);
-  const status = record.statusCode ?? record.status ?? response?.statusCode ?? response?.status;
-  return typeof status === "number" ? status : void 0;
-}
-function isFernRateLimitError(error) {
-  return extractHttpStatus(error) === 429;
-}
-async function sleep(ms) {
-  await new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
-}
-function computeRetryDelayMs(baseDelayMs, attempt) {
-  const backoff = baseDelayMs * 2 ** (attempt - 1);
-  const jitter = Math.floor(Math.random() * Math.max(1, Math.floor(backoff / 4)));
-  return backoff + jitter;
-}
-async function withRateLimitRetry(operation, options) {
-  let lastError;
-  for (let attempt = 1; attempt <= options.retryLimit; attempt += 1) {
-    try {
-      return await operation();
-    } catch (error) {
-      lastError = error;
-      if (!isFernRateLimitError(error) || attempt === options.retryLimit) {
-        throw error;
-      }
-      await sleep(computeRetryDelayMs(options.baseDelayMs, attempt));
-    }
-  }
-  throw lastError instanceof Error ? lastError : new Error("Rate-limit retry exhausted without a terminal error.");
-}
 function requireNonEmptyStringField(value, field, source) {
   if (typeof value !== "string" || value.trim().length === 0) {
     throw new Error(`Invalid ${source} response: expected non-empty string AgentIdentity.${field}`);
@@ -472,28 +435,21 @@ var FernRestAdapter = class {
     this.client = client;
   }
   async getAgentMe(options) {
-    return withRateLimitRetry(
-      async () => {
-        if (this.client.agentApiIdentity?.getAgentMe) {
-          const response = await this.client.agentApiIdentity.getAgentMe(mergeOptions(options));
-          return normalizeAgentIdentityEnvelope(response, "agentApiIdentity.getAgentMe");
-        }
-        const profileClient = this.client.myProfile ?? this.client.humanApiProfile;
-        if (!profileClient?.getMyProfile) {
-          throw new UnsupportedFeatureError(
-            "Fern client missing agentApiIdentity.getAgentMe or humanApiProfile.getMyProfile"
-          );
-        }
-        const profile = await profileClient.getMyProfile(mergeOptions(options));
-        return normalizeLegacyProfileIdentity(
-          normalizeLegacyProfileEnvelope(profile),
-          "profile.getMyProfile"
-        );
-      },
-      {
-        retryLimit: AGENT_ME_RETRY_LIMIT,
-        baseDelayMs: AGENT_ME_RETRY_BASE_DELAY_MS
-      }
+    const requestOptions = mergeOptions(options);
+    if (this.client.agentApiIdentity?.getAgentMe) {
+      const response = await this.client.agentApiIdentity.getAgentMe(requestOptions);
+      return normalizeAgentIdentityEnvelope(response, "agentApiIdentity.getAgentMe");
+    }
+    const profileClient = this.client.myProfile ?? this.client.humanApiProfile;
+    if (!profileClient?.getMyProfile) {
+      throw new UnsupportedFeatureError(
+        "Fern client missing agentApiIdentity.getAgentMe or humanApiProfile.getMyProfile"
+      );
+    }
+    const profile = await profileClient.getMyProfile(requestOptions);
+    return normalizeLegacyProfileIdentity(
+      normalizeLegacyProfileEnvelope(profile),
+      "profile.getMyProfile"
     );
   }
   async createChatMessage(chatId, message, options) {
@@ -501,45 +457,33 @@ var FernRestAdapter = class {
     if (!api) {
       throw new UnsupportedFeatureError("Fern client missing chat message creation endpoint");
     }
-    const response = await withRateLimitRetry(
-      async () => await api(
-        chatId,
-        {
-          message: {
-            content: message.content,
-            message_type: message.messageType,
-            metadata: message.metadata,
-            mentions: message.mentions
-          }
-        },
-        mergeOptions(options)
-      ),
+    const response = await api(
+      chatId,
       {
-        retryLimit: MESSAGE_SEND_RETRY_LIMIT,
-        baseDelayMs: MESSAGE_SEND_RETRY_BASE_DELAY_MS
-      }
+        message: {
+          content: message.content,
+          message_type: message.messageType,
+          metadata: message.metadata,
+          mentions: message.mentions
+        }
+      },
+      mergeOptions(options, MESSAGE_SEND_MAX_RETRIES)
     );
     return normalizeToolOperationResult(response);
   }
   async createChatEvent(chatId, event, options) {
     const createAgentChatEvent = this.client.agentApiEvents?.createAgentChatEvent?.bind(this.client.agentApiEvents);
     if (createAgentChatEvent) {
-      const response = await withRateLimitRetry(
-        async () => await createAgentChatEvent(
-          chatId,
-          {
-            event: {
-              content: event.content,
-              message_type: event.messageType,
-              metadata: event.metadata
-            }
-          },
-          mergeOptions(options)
-        ),
+      const response = await createAgentChatEvent(
+        chatId,
         {
-          retryLimit: MESSAGE_SEND_RETRY_LIMIT,
-          baseDelayMs: MESSAGE_SEND_RETRY_BASE_DELAY_MS
-        }
+          event: {
+            content: event.content,
+            message_type: event.messageType,
+            metadata: event.metadata
+          }
+        },
+        mergeOptions(options, MESSAGE_SEND_MAX_RETRIES)
       );
       return normalizeToolOperationResult(response);
     }

package/dist/{chunk-YR3BOQNW.js → chunk-JY75VSQK.js}

@@ -1,29 +1,29 @@
 // src/core/errors.ts
-var ThenvoiSdkError = class extends Error {
+var BandSdkError = class extends Error {
   constructor(message, cause) {
     super(message, cause !== void 0 ? { cause } : void 0);
-    this.name = "ThenvoiSdkError";
+    this.name = "BandSdkError";
   }
 };
-var UnsupportedFeatureError = class extends ThenvoiSdkError {
+var UnsupportedFeatureError = class extends BandSdkError {
   constructor(message) {
     super(message);
     this.name = "UnsupportedFeatureError";
   }
 };
-var ValidationError = class extends ThenvoiSdkError {
+var ValidationError = class extends BandSdkError {
   constructor(message, cause) {
     super(message, cause);
     this.name = "ValidationError";
   }
 };
-var TransportError = class extends ThenvoiSdkError {
+var TransportError = class extends BandSdkError {
   constructor(message, cause) {
     super(message, cause);
     this.name = "TransportError";
   }
 };
-var RuntimeStateError = class extends ThenvoiSdkError {
+var RuntimeStateError = class extends BandSdkError {
   constructor(message) {
     super(message);
     this.name = "RuntimeStateError";
@@ -31,7 +31,7 @@ var RuntimeStateError = class extends ThenvoiSdkError {
 };
 
 export {
-  ThenvoiSdkError,
+  BandSdkError,
   UnsupportedFeatureError,
   ValidationError,
   TransportError,

package/dist/{chunk-RDM4TE4B.js → chunk-LBWKISBS.js}

@@ -57,6 +57,22 @@ function formatHistoryForLlm(messages, options) {
   const participants = options?.participants;
   return messages.filter((message) => String(message.id ?? "") !== excludeId).map((message) => formatMessageForLlm(message, participants));
 }
+function toParticipantRecord(fields) {
+  return {
+    id: fields.id,
+    name: fields.name ?? "unknown",
+    type: fields.type ?? "unknown",
+    handle: fields.handle ?? null
+  };
+}
+function toParticipantRecordFromRest(participant) {
+  return {
+    id: participant.id,
+    name: participant.name,
+    type: participant.type,
+    handle: participant.handle ?? null
+  };
+}
 function buildParticipantsMessage(participants) {
   if (participants.length === 0) {
     return "## Current Participants\nNo other participants in this room.";
@@ -72,7 +88,7 @@ function buildParticipantsMessage(participants) {
   }
   lines.push("");
   lines.push(
-    "IMPORTANT: In thenvoi_send_message mentions, always use the exact handle shown above (e.g. '@john' for users, '@john/weather-agent' for agents), NOT the display name. Handles are lowercase with no spaces."
+    "IMPORTANT: In band_send_message mentions, always use the exact handle shown above (e.g. '@john' for users, '@john/weather-agent' for agents), NOT the display name. Handles are lowercase with no spaces."
   );
   return lines.join("\n");
 }
@@ -86,5 +102,7 @@ export {
   replaceUuidMentions,
   formatMessageForLlm,
   formatHistoryForLlm,
+  toParticipantRecord,
+  toParticipantRecordFromRest,
   buildParticipantsMessage
 };