@gravity-rail/sdk 0.50.0 → 0.53.0

package/dist/{chunk-QRZVXPR4.js → chunk-6F4YJJKQ.js}

@@ -1,7 +1,7 @@
 import {
   ApiError,
   BaseApiClient
-} from "./chunk-TGL72KPS.js";
+} from "./chunk-GCN4OMYU.js";
 
 // src/api/abilities.ts
 var AbilitiesApi = class extends BaseApiClient {
@@ -967,7 +967,7 @@ var AuthApi = class extends BaseApiClient {
         isSignUp
       })
     });
-    if (!verifyResponse.requiresTwoFactor && verifyResponse.token) {
+    if (!verifyResponse.requiresTwoFactor && verifyResponse.token && verifyResponse.sessionKind !== "widget") {
       const completeResponse = await fetch(`/api/auth/complete`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -1056,6 +1056,18 @@ var AuthApi = class extends BaseApiClient {
       body: JSON.stringify({})
     });
   }
+  /**
+   * Mint a single-use realtime login token (`gr_wst_`) bound to one
+   * workspace, with this client's credential. A credential narrower than the
+   * full browser session (a Site session, a device, a widget session) mints
+   * this kind; it opens only that workspace's sockets. Call once per connect
+   * attempt.
+   */
+  async createWorkspaceRealtimeLoginToken(workspaceUuid) {
+    return this.fetch(`w/${workspaceUuid}/realtime/ws-token`, {
+      method: "POST"
+    });
+  }
   /** Get the organization and workspace mapping for a custom domain. */
   async getDomainMapping(customDomain) {
     return this.fetch(`s/mapping/${customDomain}`);
@@ -1096,7 +1108,7 @@ var AuthApi = class extends BaseApiClient {
       method: "POST",
       body: JSON.stringify({ email, code, organizationUuid })
     });
-    if (!verifyResponse.requiresTwoFactor && verifyResponse.token) {
+    if (!verifyResponse.requiresTwoFactor && verifyResponse.token && verifyResponse.sessionKind !== "widget") {
       const completeResponse = await fetch(`/api/auth/complete`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -7688,7 +7700,7 @@ var SitesApi = class extends BaseApiClient {
       method: "POST",
       body: JSON.stringify({ code, phoneNumber, email })
     });
-    if (!verifyResponse.requiresTwoFactor && verifyResponse.token) {
+    if (!verifyResponse.requiresTwoFactor && verifyResponse.token && verifyResponse.sessionKind !== "widget") {
       const completeResponse = await fetch(`/api/auth/complete`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -8939,7 +8951,7 @@ var WorkflowsApi = class extends BaseApiClient {
    * Classify the prompts of a Workflow's draft revision.
    *
    * A decision model reads each live Task with Workflow or Task instructions
-   * and reports which
+   * or an active outgoing Choice prompt and reports which
    * prompt classifications probably apply. Each call asks the model again.
    */
   async getWorkflowPromptClassifications(wid, workflowId) {
@@ -11998,6 +12010,7 @@ var WORKSPACE_METHOD_NAMES = [
   "createWorkflowNote",
   "createWorkflowOutboundVoiceChat",
   "createWorkspaceMember",
+  "createWorkspaceRealtimeLoginToken",
   "createWorkspaceSupportRequest",
   "deleteAbility",
   "deleteAgent",
@@ -13209,6 +13222,7 @@ function bindAuthMethods(target, auth, assignments) {
   target.requestCrossDomainToken = auth.requestCrossDomainToken.bind(auth);
   target.exchangeToken = auth.exchangeToken.bind(auth);
   target.createRealtimeLoginToken = auth.createRealtimeLoginToken.bind(auth);
+  target.createWorkspaceRealtimeLoginToken = auth.createWorkspaceRealtimeLoginToken.bind(auth);
   target.getDomainMapping = auth.getDomainMapping.bind(auth);
   target.createSignup = auth.createSignup.bind(auth);
   target.createAccount = auth.emailPasswordSignup.bind(auth);
@@ -14653,6 +14667,7 @@ var GravityRailClient = class {
   requestCrossDomainToken;
   exchangeToken;
   createRealtimeLoginToken;
+  createWorkspaceRealtimeLoginToken;
   getDomainMapping;
   createSignup;
   createAccount;
@@ -17123,4 +17138,4 @@ export {
   pathDraftFromStorage,
   pathDraftToStorage
 };
-//# sourceMappingURL=chunk-QRZVXPR4.js.map
+//# sourceMappingURL=chunk-6F4YJJKQ.js.map