@decartai/sdk 0.0.62 → 0.0.63

package/dist/realtime/client.d.ts

@@ -16,11 +16,6 @@ declare const realTimeClientInitialStateSchema: z.ZodObject<{
   image: z.ZodOptional<z.ZodUnion<readonly [z.ZodCustom<Blob, Blob>, z.ZodCustom<File, File>, z.ZodString]>>;
 }, z.core.$strip>;
 type OnRemoteStreamFn = (stream: MediaStream) => void;
-type OnStatusFn = (status: string) => void;
-type OnQueuePositionFn = (data: {
-  position: number;
-  queueSize: number;
-}) => void;
 type RealTimeClientInitialState = z.infer<typeof realTimeClientInitialStateSchema>;
 declare const realTimeClientConnectOptionsSchema: z.ZodObject<{
   model: z.ZodObject<{
@@ -30,7 +25,7 @@ declare const realTimeClientConnectOptionsSchema: z.ZodObject<{
     fps: z.ZodNumber;
     width: z.ZodNumber;
     height: z.ZodNumber;
-    inputSchema: z.ZodAny;
+    inputSchema: z.ZodOptional<z.ZodAny>;
   }, z.core.$strip>;
   onRemoteStream: z.ZodCustom<OnRemoteStreamFn, OnRemoteStreamFn>;
   initialState: z.ZodOptional<z.ZodObject<{
@@ -41,8 +36,6 @@ declare const realTimeClientConnectOptionsSchema: z.ZodObject<{
     image: z.ZodOptional<z.ZodUnion<readonly [z.ZodCustom<Blob, Blob>, z.ZodCustom<File, File>, z.ZodString]>>;
   }, z.core.$strip>>;
   customizeOffer: z.ZodOptional<z.ZodCustom<z.core.$InferInnerFunctionTypeAsync<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>, z.core.$InferInnerFunctionTypeAsync<z.core.$ZodFunctionArgs, z.core.$ZodFunctionOut>>>;
-  onStatus: z.ZodOptional<z.ZodCustom<OnStatusFn, OnStatusFn>>;
-  onQueuePosition: z.ZodOptional<z.ZodCustom<OnQueuePositionFn, OnQueuePositionFn>>;
 }, z.core.$strip>;
 type RealTimeClientConnectOptions = Omit<z.infer<typeof realTimeClientConnectOptionsSchema>, "model"> & {
   model: ModelDefinition | CustomModelDefinition;
@@ -53,11 +46,6 @@ type Events = {
   generationTick: {
     seconds: number;
   };
-  status: string;
-  queuePosition: {
-    position: number;
-    queueSize: number;
-  };
   diagnostic: DiagnosticEvent;
   stats: WebRTCStats;
 };

package/dist/realtime/client.js

@@ -57,9 +57,7 @@ const realTimeClientConnectOptionsSchema = z.object({
 	model: modelDefinitionSchema,
 	onRemoteStream: z.custom((val) => typeof val === "function", { message: "onRemoteStream must be a function" }),
 	initialState: realTimeClientInitialStateSchema.optional(),
-	customizeOffer: createAsyncFunctionSchema(z.function()).optional(),
-	onStatus: z.custom((val) => typeof val === "function", { message: "onStatus must be a function" }).optional(),
-	onQueuePosition: z.custom((val) => typeof val === "function", { message: "onQueuePosition must be a function" }).optional()
+	customizeOffer: createAsyncFunctionSchema(z.function()).optional()
 });
 const createRealTimeClient = (opts) => {
 	const { baseUrl, apiKey, integration, logger } = opts;
@@ -67,7 +65,7 @@ const createRealTimeClient = (opts) => {
 		const parsedOptions = realTimeClientConnectOptionsSchema.safeParse(options);
 		if (!parsedOptions.success) throw parsedOptions.error;
 		const isAvatarLive = options.model.name === "live_avatar" || options.model.name === "live-avatar";
-		const { onRemoteStream, initialState, onStatus, onQueuePosition } = parsedOptions.data;
+		const { onRemoteStream, initialState } = parsedOptions.data;
 		let audioStreamManager;
 		let inputStream;
 		if (isAvatarLive && !stream) {
@@ -157,19 +155,6 @@ const createRealTimeClient = (opts) => {
 				emitOrBuffer("generationTick", { seconds: msg.seconds });
 			};
 			manager.getWebsocketMessageEmitter().on("generationTick", tickListener);
-			const wsEmitter = manager.getWebsocketMessageEmitter();
-			wsEmitter.on("status", (msg) => {
-				emitOrBuffer("status", msg.status);
-				onStatus?.(msg.status);
-			});
-			wsEmitter.on("queuePosition", (msg) => {
-				const data = {
-					position: msg.position,
-					queueSize: msg.queue_size
-				};
-				emitOrBuffer("queuePosition", data);
-				onQueuePosition?.(data);
-			});
 			await manager.connect(inputStream);
 			const methods = realtimeMethods(manager, imageToBase64);
 			let statsCollector = null;

package/dist/realtime/webrtc-connection.js

@@ -183,14 +183,6 @@ var WebRTCConnection = class {
 				this.websocketMessagesEmitter.emit("sessionId", msg);
 				return;
 			}
-			if (msg.type === "status") {
-				this.websocketMessagesEmitter.emit("status", msg);
-				return;
-			}
-			if (msg.type === "queue_position") {
-				this.websocketMessagesEmitter.emit("queuePosition", msg);
-				return;
-			}
 			if (!this.pc) return;
 			switch (msg.type) {
 				case "ready": {

package/dist/shared/model.js

@@ -172,7 +172,7 @@ const modelDefinitionSchema = z.object({
 	fps: z.number().min(1),
 	width: z.number().min(1),
 	height: z.number().min(1),
-	inputSchema: z.any()
+	inputSchema: z.any().optional()
 });
 const _models = {
 	realtime: {

package/dist/tokens/client.d.ts

@@ -9,6 +9,13 @@ type CreateTokenOptions = {
   expiresIn?: number;
   /** Restrict which models this token can access (max 20 items). */
   allowedModels?: (Model | (string & {}))[];
+  /**
+   * Restrict which web origins this token can be used from (max 20 items).
+   * Each entry must be a full origin including scheme, e.g. `https://example.com`.
+   * Enforced on realtime sessions by matching the WebSocket `Origin` header
+   * verbatim. Defense-in-depth — only effective for browser-based clients.
+   */
+  allowedOrigins?: string[];
   /** Operational limits for the token. */
   constraints?: {
     realtime?: {
@@ -19,9 +26,10 @@ type CreateTokenOptions = {
 type CreateTokenResponse = {
   apiKey: string;
   expiresAt: string;
-  /** Present when `allowedModels` was set on the request. */
+  /** Present when `allowedModels` and/or `allowedOrigins` were set on the request. */
   permissions?: {
-    models: (Model | (string & {}))[];
+    models?: (Model | (string & {}))[];
+    origins?: string[];
   } | null;
   /** Present when `constraints` was set on the request. */
   constraints?: {
@@ -45,10 +53,11 @@ type TokensClient = {
    * // With metadata:
    * const token = await client.tokens.create({ metadata: { role: "viewer" } });
    *
-   * // With expiry, model restrictions, and constraints:
+   * // With expiry, model restrictions, origin restrictions, and constraints:
    * const token = await client.tokens.create({
    *   expiresIn: 300,
    *   allowedModels: ["lucy-pro-v2v", "lucy-restyle-v2v"],
+   *   allowedOrigins: ["https://example.com"],
    *   constraints: { realtime: { maxSessionDuration: 120 } },
    * });
    * ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decartai/sdk",
-  "version": "0.0.62",
+  "version": "0.0.63",
   "description": "Decart's JavaScript SDK",
   "type": "module",
   "license": "MIT",