@flashbacktech/tsclient 0.4.67 → 0.4.69

package/dist/index.cjs

@@ -564,6 +564,49 @@ function normalizeGatewayToken(wire) {
     createdAt: wire.createdAt
   };
 }
+function normalizeAgentToken(wire) {
+  return {
+    id: wire.id,
+    sandboxId: wire.sandboxId ?? wire.repoId ?? "",
+    label: wire.label,
+    tokenPrefix: wire.tokenPrefix,
+    lastUsedAt: wire.lastUsedAt ?? void 0,
+    createdAt: wire.createdAt
+  };
+}
+
+// src/modules/credentials/AgentTokensClient.ts
+var AgentTokensClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  async list(sandboxId) {
+    const res = await this.http.get(
+      `/sandbox/${sandboxId}/agent-token`
+    );
+    const list = res.tokens ?? res.data ?? [];
+    return list.map(normalizeAgentToken);
+  }
+  /**
+   * create returns both the persisted token row and the plaintext bearer
+   * (`secret`). The bearer is shown only here; surface it to the user
+   * immediately. If they navigate away without copying, they must delete the
+   * token and create a new one.
+   */
+  async create(sandboxId, body) {
+    const res = await this.http.post(`/sandbox/${sandboxId}/agent-token`, { body });
+    if (!res.token || !res.secret) {
+      throw new Error("createAgentToken response missing token or secret.");
+    }
+    return {
+      token: normalizeAgentToken(res.token),
+      secret: res.secret
+    };
+  }
+  delete(sandboxId, tokenId) {
+    return this.http.delete(`/sandbox/${sandboxId}/agent-token/${tokenId}`);
+  }
+};
 
 // src/modules/credentials/GatewayTokensClient.ts
 var GatewayTokensClient = class {
@@ -624,6 +667,7 @@ var CredentialsClient = class {
     this.http = http;
     this.sandbox = new SandboxCredentialScope(http);
     this.gatewayTokens = new GatewayTokensClient(http);
+    this.agentTokens = new AgentTokensClient(http);
   }
   async list(query) {
     const res = await this.http.get(