@cadraos/sdk 0.1.7 → 0.1.8

package/README.md

@@ -1,6 +1,37 @@
 # @cadraos/sdk
 
-Official SDK for the AI SaaS platform - programmatic access to agents, skills, tools, and artifacts.
+Official SDK for the CadraOS platform - programmatic access to agents, skills, tools, and artifacts.
+
+> **Note**: For React chat components, use the new [@cadraos/react](https://www.npmjs.com/package/@cadraos/react) package.
+> The `@cadraos/sdk/chat` subpath is deprecated.
+
+## Deprecation Notice
+
+The `@cadraos/sdk/chat` subpath is **deprecated** and will be removed in a future version.
+
+**If you're using React chat components**, please migrate to `@cadraos/react`:
+
+```tsx
+// Before (deprecated)
+import { AgentChat, ChatConfigProvider } from '@cadraos/sdk/chat';
+import '@cadraos/sdk/chat/styles.css';
+
+// After (recommended)
+import '@cadraos/react/styles.css';
+import { CadraCopilot } from '@cadraos/react';
+
+function App() {
+  return (
+    <CadraCopilot
+      apiKey="cdr_live_xxx"
+      orgId={123}
+      agentId="agent-uuid"
+    />
+  );
+}
+```
+
+For full migration instructions, see the [migration guide](https://github.com/cadraos/cadra-sdk/blob/main/packages/react/MIGRATION.md).
 
 ## Installation
 
@@ -15,12 +46,12 @@ yarn add @cadraos/sdk
 ## Quick Start
 
 ```typescript
-import { AISaaSClient } from '@cadraos/sdk';
+import { CadraClient } from '@cadraos/sdk';
 
 // Initialize the client
-const client = new AISaaSClient({
-  apiKey: process.env.AISAAS_API_KEY!,
-  orgId: Number(process.env.AISAAS_ORG_ID),
+const client = new CadraClient({
+  apiKey: process.env.CADRA_API_KEY!,  // e.g., cdr_live_xxx
+  orgId: Number(process.env.CADRA_ORG_ID),
 });
 
 // List available agents
@@ -34,6 +65,8 @@ const execution = await client.agents.executeSync(agents[0].uuid, {
 console.log('Result:', execution.output);
 ```
 
+> **Note**: `AISaaSClient` is deprecated but still works as an alias for `CadraClient`.
+
 ## Authentication
 
 The SDK supports three authentication methods:

package/dist/chat/index.cjs

@@ -1,6 +1,7 @@
 'use strict';
 
 var react = require('react');
+var fetchEventSource = require('@microsoft/fetch-event-source');
 var jsxRuntime = require('react/jsx-runtime');
 var ReactMarkdown = require('react-markdown');
 var remarkGfm = require('remark-gfm');
@@ -2210,7 +2211,7 @@ function resolveClient(config) {
 }
 function resolveBaseUrl(config) {
   if (config.baseUrl) return config.baseUrl;
-  return "https://api.aisaas.com/v1";
+  return "https://api.cadra.io/v1";
 }
 async function getAuthHeaders(config) {
   const headers = {
@@ -2316,7 +2317,7 @@ function createDefaultAdapter(config) {
       };
     },
     // -------------------------------------------------------------------------
-    // Attachment Methods (raw fetch — AISaaSClient has no AttachmentsAPI yet)
+    // Attachment Methods (raw fetch — CadraClient has no AttachmentsAPI yet)
     // -------------------------------------------------------------------------
     async getUploadUrl(input) {
       return rawRequest(config, "POST", "/attachments/upload-url", {
@@ -2396,8 +2397,106 @@ function createDefaultAdapter(config) {
     // -------------------------------------------------------------------------
     // SSE Stream URL (legacy backward compat)
     // -------------------------------------------------------------------------
+    /**
+     * @deprecated Use subscribeToStream() instead. getStreamUrl() exposes
+     * API keys in URLs which are logged by browsers, proxies, and servers.
+     */
     getStreamUrl(executionId) {
+      if (typeof window !== "undefined" && process.env.NODE_ENV !== "production") {
+        const warnKey = "__cadra_getStreamUrl_deprecated__";
+        const win = window;
+        if (!win[warnKey]) {
+          win[warnKey] = true;
+          console.warn(
+            "[CadraOS SDK] getStreamUrl() is deprecated. Use subscribeToStream() instead which provides secure header-based auth. API keys in URLs are a security risk."
+          );
+        }
+      }
       return `${baseUrl}/agents/runs/${executionId}/stream`;
+    },
+    // -------------------------------------------------------------------------
+    // Secure SSE Streaming (Recommended)
+    // -------------------------------------------------------------------------
+    subscribeToStream(executionId, callbacks) {
+      const abortController = new AbortController();
+      const url = `${baseUrl}/api/v1/agents/runs/${executionId}/stream`;
+      const getHeaders = async () => {
+        const headers = {
+          Accept: "text/event-stream",
+          "Cache-Control": "no-cache"
+        };
+        if (config.apiKey) {
+          headers["Authorization"] = `Bearer ${config.apiKey}`;
+        } else if (config.token) {
+          headers["Authorization"] = `Bearer ${config.token}`;
+        } else if (config.tokenProvider) {
+          const token = await config.tokenProvider();
+          headers["Authorization"] = `Bearer ${token}`;
+        }
+        if (config.orgId !== void 0) {
+          headers["X-Org-Id"] = String(config.orgId);
+        }
+        return headers;
+      };
+      const terminalEvents = /* @__PURE__ */ new Set(["complete", "failed", "error"]);
+      (async () => {
+        try {
+          const headers = await getHeaders();
+          callbacks.onConnectionChange?.(true);
+          await fetchEventSource.fetchEventSource(url, {
+            method: "GET",
+            headers,
+            signal: abortController.signal,
+            openWhenHidden: true,
+            // Keep connection open even when tab is hidden
+            onopen: async (response) => {
+              if (!response.ok) {
+                const errorText = await response.text();
+                throw new Error(`SSE connection failed: ${response.status} - ${errorText}`);
+              }
+            },
+            onmessage: (ev) => {
+              if (!ev.event || ev.event === "") {
+                return;
+              }
+              let data;
+              try {
+                data = ev.data ? JSON.parse(ev.data) : {};
+              } catch {
+                data = ev.data;
+              }
+              const event = {
+                type: ev.event,
+                id: ev.id,
+                data
+              };
+              callbacks.onEvent(event);
+              if (terminalEvents.has(ev.event)) {
+                callbacks.onComplete?.();
+                abortController.abort();
+              }
+            },
+            onerror: (err) => {
+              callbacks.onConnectionChange?.(false);
+              callbacks.onError?.(err instanceof Error ? err : new Error(String(err)));
+              throw err;
+            },
+            onclose: () => {
+              callbacks.onConnectionChange?.(false);
+            }
+          });
+        } catch (err) {
+          if (err instanceof Error && err.name === "AbortError") {
+            return;
+          }
+          callbacks.onConnectionChange?.(false);
+          callbacks.onError?.(err instanceof Error ? err : new Error(String(err)));
+        }
+      })();
+      return () => {
+        abortController.abort();
+        callbacks.onConnectionChange?.(false);
+      };
     }
   };
 }
@@ -6083,6 +6182,39 @@ function TodoList({
   );
 }
 
+// src/chat/index.ts
+var DEPRECATION_WARNING = `
+[@cadraos/sdk/chat] DEPRECATION WARNING
+
+This module is deprecated and will be removed in a future version.
+Please migrate to @cadraos/react for:
+- Simpler setup with CadraCopilot
+- Better security (header-based SSE auth)
+- Scoped CSS that won't conflict with your app
+
+Migration steps:
+1. npm install @cadraos/react
+2. import '@cadraos/react/styles.css'
+3. Replace <AgentChat> with <CadraCopilot> or <CadraChat>
+
+See: https://github.com/cadraos/cadra-sdk/blob/main/packages/react/MIGRATION.md
+`;
+var hasWarned = false;
+function showDeprecationWarning() {
+  if (hasWarned) return;
+  hasWarned = true;
+  if (typeof process !== "undefined" && process.env?.NODE_ENV === "production") {
+    return;
+  }
+  if (typeof window === "undefined") {
+    return;
+  }
+  console.warn(DEPRECATION_WARNING);
+}
+if (typeof window !== "undefined") {
+  setTimeout(showDeprecationWarning, 0);
+}
+
 exports.AgentChat = AgentChat;
 exports.AlertCircleIcon = AlertCircleIcon;
 exports.AskUserPrompt = AskUserPrompt;