@dashai/sdk 0.7.0 → 0.9.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, a as Client, T as TokenResolver } from './types-BLNQ1S1C.js';
-export { B as BaseInsert, b as BaseRow, c as BaseUpdate, D as Deps, F as FetchImpl, d as FileRef, e as FilterOps, f as FilterValue, L as ListOpts, P as Page, R as ReadOnlyTableClient, S as SlowQueryInfo, g as SortClause, h as SortDir, i as TableClient, W as Where } from './types-BLNQ1S1C.js';
+import { C as ClientConfig, a as Client, T as TokenResolver } from './types-DXsbCVkb.js';
+export { B as BaseInsert, b as BaseRow, c as BaseUpdate, d as DatahubClient, e as DatahubListResult, f as DatahubTableClient, D as Deps, F as FetchImpl, g as FileRef, h as FilterOps, i as FilterValue, L as ListOpts, P as Page, R as ReadOnlyTableClient, S as SlowQueryInfo, j as SortClause, k as SortDir, l as TableClient, W as Where } from './types-DXsbCVkb.js';
 export { C as ContractViolationError, a as DashwiseError, b as DashwiseErrorCode, D as DependencyContractError, F as ForbiddenError, J as JoinError, N as NetworkError, O as OperationNotAllowedByProviderError, P as ProviderTableMissingError, R as RowNotFoundError, T as TimeoutError, U as UnauthenticatedError, V as ValidationError, f as fromBackendEnvelope } from './errors-BV75u7b9.js';
 
 /**
@@ -51,33 +51,64 @@ declare function createClient(config: ClientConfig): Client;
  * `createDevClient()` — `createClient()`'s zero-config sibling for local dev.
  *
  * Resolves `baseUrl`, `installationId`, and `getToken` from a layered
- * config chain so a developer who has run `dashwise login` can do:
+ * config chain so a developer who has run `dashwise login` (and, for the
+ * full local-dev experience, `dashwise init`) can do:
  *
  * ```ts
  * import { createDevClient } from '@dashai/sdk';
- * const client = createDevClient(); // just works
+ * const client = createDevClient({ moduleSlug: 'my-tasks' });
  * ```
  *
- * …without having to copy a token from `~/.config/dashwise/auth.json`
- * into a `.env.local` file by hand. The flow this enables is the
- * end-to-end "spin up a module in 30 seconds" path that the CLI's
- * `dashwise dev` command surfaces.
+ * …without copying tokens or installation ids around. The flow this
+ * enables is the end-to-end "two-command bootstrap" the CLI's
+ * `dashwise login` + `dashwise init` pair targets.
  *
  * ## Resolution chain
  *
  * For each field, the first non-empty source wins:
  *
- *   1. Explicit `overrides` argument (per-call escape hatch)
- *   2. `process.env.DASHWISE_API_URL` / `DASHWISE_API_TOKEN` /
- *      `DASHWISE_INSTALLATION_ID` (the existing env-var contract — still
- *      the right thing for CI, Docker, prod-like setups)
+ *   1. Explicit `overrides` argument (per-call escape hatch).
+ *   2. Environment variables — `DASHWISE_API_URL` / `DASHWISE_API_TOKEN`
+ *      / `DASHWISE_INSTALLATION_ID` / `DASHWISE_RUNTIME_TOKEN` (HH-CC-LDI-5).
+ *      Standard for CI, Docker, prod-like setups; also the path
+ *      `dashwise dev` uses to inject per-module credentials into the
+ *      Next.js child process.
  *   3. The CLI's saved config at `$XDG_CONFIG_HOME/dashwise/auth.json`
- *      (or platform default) — written by `dashwise login`
+ *      (or platform default) — written by `dashwise login` (top-level
+ *      `apiUrl` + `token`) and `dashwise init` (per-module entry under
+ *      `modules[slug]`).
+ *
+ * ## Per-module local-dev tokens (HH-CC-LDI-5)
+ *
+ * When `overrides.moduleSlug` is set, the SDK looks up the per-module
+ * entry in `auth.json`:
+ *
+ * ```jsonc
+ * {
+ *   "apiUrl": "http://localhost:3000",
+ *   "token": "dwc_...",                // CLI bearer (login)
+ *   "modules": {
+ *     "my-tasks": {
+ *       "runtimeToken": "<JWT>",       // long-lived runtime token (LDI-2)
+ *       "installationId": 4242,        // numeric install id (LDI-2)
+ *       "expiresAt": "2026-08-22T..."  // informational only
+ *     }
+ *   }
+ * }
+ * ```
+ *
+ * Per-module entries are written by `dashwise init` (HH-CC-LDI-6) when
+ * a developer provisions a local-dev install. The SDK prefers the
+ * `runtimeToken` over the legacy CLI bearer (`token`) when both
+ * exist, and sets `installationId` to the literal `'sandbox'` — the
+ * URL placeholder the backend's `RuntimeTokenGuard` accepts (the
+ * token resolves to the actual install on the server side).
  *
- * `installationId` falls back to the literal string `"local"` if none of
- * the above provide one — matches the dev-mode contract the backend
- * accepts (a stub installation that resolves to whatever workspace the
- * token is scoped to).
+ * If `moduleSlug` is unset, OR the named module isn't in the
+ * `modules` map, OR the entry lacks a `runtimeToken`, the resolver
+ * falls back to the legacy chain (`token` field + `'local'` install
+ * id, which the backend will reject — surfacing as a typed
+ * `UnauthenticatedError` on the first request).
  *
  * ## Safety rails
  *
@@ -119,6 +150,28 @@ interface CreateDevClientOptions extends Partial<Omit<ClientConfig, 'getToken'>>
      * attachment (rare — only useful for hitting public endpoints).
      */
     getToken?: TokenResolver;
+    /**
+     * HH-CC-LDI-5 — module slug for per-module runtime-token lookup.
+     *
+     * When set, `createDevClient` reads
+     * `~/.config/dashwise/auth.json#modules[<moduleSlug>]` looking for
+     * a `runtimeToken`. If found, that token is used as the bearer
+     * (overriding `DASHWISE_API_TOKEN` / file-level `token`) and the
+     * SDK sends `installationId='sandbox'` — the URL placeholder
+     * accepted by the backend's `RuntimeTokenGuard`. The runtime
+     * token itself binds to a specific install on the server side.
+     *
+     * If `moduleSlug` is unset or the entry is missing, the legacy
+     * resolution chain applies (CLI bearer + `'local'` installation
+     * id, which the backend will 401 — surfacing as a typed
+     * `UnauthenticatedError` on the first request).
+     *
+     * Typical usage: scaffolded modules read `module.json#module.slug`
+     * and pass it here. The CLI's `dashwise dev` command also exports
+     * it as the `DASHWISE_RUNTIME_TOKEN` env var so child processes
+     * (e.g. `next dev`) can authenticate without re-reading the file.
+     */
+    moduleSlug?: string;
 }
 /**
  * Resolve config from env + saved CLI file + overrides, then hand off

package/dist/index.js

@@ -343,7 +343,7 @@ function createHttp(config) {
   async function request(method, path, body) {
     const normalizedPath = `/${path.replace(LEADING_SLASH, "")}`;
     const url = normalizedPath.startsWith("/api/") ? `${config.baseUrl.replace(/\/+$/, "")}${normalizedPath}` : `${base}${normalizedPath}`;
-    const token = config.getToken ? await config.getToken() : null;
+    const token = (config.getToken ? await config.getToken() : null) ?? config.apiKey ?? null;
     const headers = { ...staticHeaders };
     if (body !== void 0) {
       headers["Content-Type"] = "application/json";
@@ -527,6 +527,7 @@ function createClient(config) {
     deps(providerSlug) {
       return makeDeps(transport, providerSlug);
     },
+    datahub: makeDatahubClient(transport),
     request(method, path, body) {
       return transport.request(method, path, body);
     },
@@ -591,6 +592,50 @@ function assertValidTableSlug2(slug) {
     );
   }
 }
+function makeDatahubClient(transport) {
+  return {
+    table(tableId) {
+      assertValidTableId(tableId);
+      const root = `/datahub/tables/${tableId}/rows`;
+      return {
+        async list(query) {
+          const qs = query ? new URLSearchParams(query).toString() : "";
+          const path = qs ? `${root}?${qs}` : root;
+          return transport.request("GET", path);
+        },
+        async get(rowId) {
+          return transport.request(
+            "GET",
+            `${root}/${rowId}`
+          );
+        },
+        async create(body) {
+          return transport.request("POST", root, body);
+        },
+        async update(rowId, body) {
+          return transport.request(
+            "PATCH",
+            `${root}/${rowId}`,
+            body
+          );
+        },
+        async delete(rowId) {
+          return transport.request(
+            "DELETE",
+            `${root}/${rowId}`
+          );
+        }
+      };
+    }
+  };
+}
+function assertValidTableId(tableId) {
+  if (!Number.isInteger(tableId) || tableId <= 0) {
+    throw new Error(
+      `@dashai/sdk: invalid Data Hub table id "${tableId}". Must be a positive integer.`
+    );
+  }
+}
 function makeTableClient(transport, tableSlug) {
   const root = `/db/${tableSlug}`;
   return {
@@ -640,8 +685,10 @@ function createDevClient(overrides = {}) {
       "@dashai/sdk: createDevClient() could not resolve a baseUrl. Pass `{ baseUrl }` explicitly, set `DASHWISE_API_URL`, or run `dashwise login` to create the CLI config file."
     );
   }
-  const installationId = overrides.installationId ?? readEnv("DASHWISE_INSTALLATION_ID") ?? "local";
-  const snapshotToken = readEnv("DASHWISE_API_TOKEN") ?? fileConfig?.token ?? null;
+  const moduleEntry = overrides.moduleSlug ? fileConfig?.modules?.[overrides.moduleSlug] : void 0;
+  const runtimeToken = readEnv("DASHWISE_RUNTIME_TOKEN") ?? moduleEntry?.runtimeToken ?? null;
+  const installationId = overrides.installationId ?? readEnv("DASHWISE_INSTALLATION_ID") ?? (runtimeToken !== null ? "sandbox" : "local");
+  const snapshotToken = runtimeToken ?? readEnv("DASHWISE_API_KEY") ?? readEnv("DASHWISE_API_TOKEN") ?? fileConfig?.token ?? null;
   const resolvedGetToken = overrides.getToken ?? (() => snapshotToken);
   return createClient({
     ...overrides,
@@ -692,11 +739,14 @@ function resolveConfigDir(path, os) {
 function isPlausibleFileShape(v) {
   if (!v || typeof v !== "object") return false;
   const o = v;
-  return (o.apiUrl === void 0 || typeof o.apiUrl === "string") && (o.token === void 0 || typeof o.token === "string");
+  const apiUrlOk = o.apiUrl === void 0 || typeof o.apiUrl === "string";
+  const tokenOk = o.token === void 0 || typeof o.token === "string";
+  const modulesOk = o.modules === void 0 || typeof o.modules === "object" && o.modules !== null;
+  return apiUrlOk && tokenOk && modulesOk;
 }
 
 // src/index.ts
-var VERSION = "0.7.0" ;
+var VERSION = "0.9.0" ;
 
 export { ContractViolationError, DashwiseError, DashwiseErrorCode, DependencyContractError, ForbiddenError, JoinError, NetworkError, OperationNotAllowedByProviderError, ProviderTableMissingError, RowNotFoundError, TimeoutError, UnauthenticatedError, VERSION, ValidationError, createClient, createDevClient, fromBackendEnvelope };
 //# sourceMappingURL=index.js.map