@caltra/server 0.1.0 → 0.2.0

package/README.md

@@ -13,6 +13,22 @@ const workspace = await caltra.workspaces.get({
 });
 ```
 
+Create an origin-bound client authorization for an authenticated product user without exposing the
+Caltra API key or client token to browser code:
+
+```ts
+const authorization = await caltra.clientAuthorizations.create({
+  origin: config.customerWebOrigin,
+  tenantUser: { externalId: user.id },
+  workspace: {
+    externalId: organization.id,
+    createIfMissing: { name: organization.name },
+  },
+});
+
+return { authorization_code: authorization.authorizationCode };
+```
+
 Without `createIfMissing`, `workspaces.get()` returns `null` when the external ID is unknown. With
 `createIfMissing`, concurrent calls converge on the same workspace for the API key's Caltra
 organization.

package/dist/client.d.ts

@@ -1,7 +1,9 @@
 import type { CaltraServerClientOptions } from "./types.js";
+import { CaltraClientAuthorizationsClient } from "./client_authorizations.js";
 import { CaltraWorkspacesClient } from "./workspaces.js";
 /** Provides authenticated, server-only access to Caltra resources without exposing the API key. */
 export declare class CaltraServerClient {
+    readonly clientAuthorizations: CaltraClientAuthorizationsClient;
     readonly workspaces: CaltraWorkspacesClient;
     constructor(options: CaltraServerClientOptions);
 }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,mGAAmG;AACnG,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;gBAEhC,OAAO,EAAE,yBAAyB;CAK/C"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,mGAAmG;AACnG,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;gBAEhC,OAAO,EAAE,yBAAyB;CAW/C"}

package/dist/client.js

@@ -1,11 +1,14 @@
+import { CaltraClientAuthorizationsClient } from "./client_authorizations.js";
 import { CaltraWorkspacesClient } from "./workspaces.js";
 /** Provides authenticated, server-only access to Caltra resources without exposing the API key. */
 export class CaltraServerClient {
+    clientAuthorizations;
     workspaces;
     constructor(options) {
         const apiUrl = (options.apiUrl ?? "https://api.caltra.dev").replace(/\/+$/, "");
         const fetchImplementation = options.fetch ?? globalThis.fetch.bind(globalThis);
         this.workspaces = new CaltraWorkspacesClient(options.apiKey, apiUrl, fetchImplementation);
+        this.clientAuthorizations = new CaltraClientAuthorizationsClient(options.apiKey, apiUrl, fetchImplementation, this.workspaces);
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,mGAAmG;AACnG,MAAM,OAAO,kBAAkB;IACpB,UAAU,CAAyB;IAE5C,YAAY,OAAkC;QAC5C,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC5F,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,mGAAmG;AACnG,MAAM,OAAO,kBAAkB;IACpB,oBAAoB,CAAmC;IACvD,UAAU,CAAyB;IAE5C,YAAY,OAAkC;QAC5C,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAC1F,IAAI,CAAC,oBAAoB,GAAG,IAAI,gCAAgC,CAC9D,OAAO,CAAC,MAAM,EACd,MAAM,EACN,mBAAmB,EACnB,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/client_authorizations.d.ts

@@ -0,0 +1,12 @@
+import type { CaltraClientAuthorization, CaltraClientAuthorizationCreate } from "./types.js";
+import type { CaltraWorkspacesClient } from "./workspaces.js";
+/** Creates origin-bound browser authorizations without exposing Caltra credentials to the browser. */
+export declare class CaltraClientAuthorizationsClient {
+    private readonly apiKey;
+    private readonly apiUrl;
+    private readonly fetchImplementation;
+    private readonly workspaces;
+    constructor(apiKey: string, apiUrl: string, fetchImplementation: typeof fetch, workspaces: CaltraWorkspacesClient);
+    create(input: CaltraClientAuthorizationCreate): Promise<CaltraClientAuthorization>;
+}
+//# sourceMappingURL=client_authorizations.d.ts.map

package/dist/client_authorizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client_authorizations.d.ts","sourceRoot":"","sources":["../src/client_authorizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAO9D,sGAAsG;AACtG,qBAAa,gCAAgC;IAEzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAHV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,OAAO,KAAK,EACjC,UAAU,EAAE,sBAAsB;IAG/C,MAAM,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAwBzF"}

package/dist/client_authorizations.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import { CaltraServerError } from "./error.js";
+const ClientAuthorizationSchema = z.object({
+    authorization_code: z.string().min(1),
+    expires_at: z.iso.datetime(),
+}).strict();
+/** Creates origin-bound browser authorizations without exposing Caltra credentials to the browser. */
+export class CaltraClientAuthorizationsClient {
+    apiKey;
+    apiUrl;
+    fetchImplementation;
+    workspaces;
+    constructor(apiKey, apiUrl, fetchImplementation, workspaces) {
+        this.apiKey = apiKey;
+        this.apiUrl = apiUrl;
+        this.fetchImplementation = fetchImplementation;
+        this.workspaces = workspaces;
+    }
+    async create(input) {
+        const workspace = await this.workspaces.get(input.workspace);
+        const headers = new Headers({ "content-type": "application/json" });
+        headers.set("authorization", `Bearer ${this.apiKey}`);
+        const response = await this.fetchImplementation(`${this.apiUrl}/server/v1/workspaces/${encodeURIComponent(workspace.id)}/client-authorizations`, {
+            body: JSON.stringify({
+                ...(input.agentIds ? { agent_ids: input.agentIds } : {}),
+                origin: input.origin,
+                tenant_user: { external_id: input.tenantUser.externalId },
+            }),
+            headers,
+            method: "POST",
+        });
+        if (!response.ok)
+            throw await CaltraServerError.fromResponse(response);
+        const authorization = ClientAuthorizationSchema.parse(await response.json());
+        return {
+            authorizationCode: authorization.authorization_code,
+            expiresAt: new Date(authorization.expires_at),
+            workspace,
+        };
+    }
+}
+//# sourceMappingURL=client_authorizations.js.map

package/dist/client_authorizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client_authorizations.js","sourceRoot":"","sources":["../src/client_authorizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAO/C,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,sGAAsG;AACtG,MAAM,OAAO,gCAAgC;IAExB;IACA;IACA;IACA;IAJnB,YACmB,MAAc,EACd,MAAc,EACd,mBAAiC,EACjC,UAAkC;QAHlC,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,wBAAmB,GAAnB,mBAAmB,CAAc;QACjC,eAAU,GAAV,UAAU,CAAwB;IAClD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAAsC;QACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC7C,GAAG,IAAI,CAAC,MAAM,yBAAyB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,wBAAwB,EAC/F;YACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE;aAC1D,CAAC;YACF,OAAO;YACP,MAAM,EAAE,MAAM;SACf,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,MAAM,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,OAAO;YACL,iBAAiB,EAAE,aAAa,CAAC,kBAAkB;YACnD,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAC7C,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { CaltraServerClient } from "./client.js";
+export { CaltraClientAuthorizationsClient } from "./client_authorizations.js";
 export { CaltraServerError } from "./error.js";
 export { CaltraWorkspacesClient } from "./workspaces.js";
-export type { CaltraServerClientOptions, CaltraServerProblem, CaltraServerWorkspace, CaltraWorkspaceCreateIfMissing, CaltraWorkspaceLookup, } from "./types.js";
+export type { CaltraClientAuthorization, CaltraClientAuthorizationCreate, CaltraServerClientOptions, CaltraServerProblem, CaltraServerWorkspace, CaltraWorkspaceCreateIfMissing, CaltraWorkspaceLookup, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export { CaltraServerClient } from "./client.js";
+export { CaltraClientAuthorizationsClient } from "./client_authorizations.js";
 export { CaltraServerError } from "./error.js";
 export { CaltraWorkspacesClient } from "./workspaces.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/types.d.ts

@@ -8,6 +8,19 @@ export interface CaltraServerWorkspace {
     id: string;
     name: string;
 }
+export interface CaltraClientAuthorizationCreate {
+    agentIds?: string[];
+    origin: string;
+    tenantUser: {
+        externalId: string;
+    };
+    workspace: CaltraWorkspaceCreateIfMissing;
+}
+export interface CaltraClientAuthorization {
+    authorizationCode: string;
+    expiresAt: Date;
+    workspace: CaltraServerWorkspace;
+}
 export interface CaltraServerProblem {
     code: string;
     detail: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,8BAA+B,SAAQ,qBAAqB;IAC3E,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,SAAS,EAAE,8BAA8B,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,qBAAqB,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,8BAA+B,SAAQ,qBAAqB;IAC3E,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caltra/server",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Server-side SDK for the Caltra Server API",
   "type": "module",
   "sideEffects": false,