@hipnation-truth/sdk 0.24.0 → 0.25.2

package/dist/react.d.ts

@@ -1257,12 +1257,26 @@ declare const ENVIRONMENTS: {
     readonly production: "production";
 };
 type Environment = (typeof ENVIRONMENTS)[keyof typeof ENVIRONMENTS];
+/**
+ * Fetches a user-identity JWT for Convex calls. Return the token from
+ * your identity provider's Clerk JWT template named "convex"
+ * (e.g. `getToken({ template: "convex" })` from `@clerk/expo`), or
+ * `null` when no user is signed in.
+ */
+type AuthTokenFetcher = () => Promise<string | null | undefined>;
 /**
  * Configuration for initializing a TruthClient.
  */
 interface TruthClientConfig {
     /** API key for authenticating with the Truth platform (e.g. "hn_live_...") */
     apiKey: string;
+    /**
+     * Per-call Clerk JWT fetcher for Convex data access. When provided,
+     * every Convex query/mutation/action carries the caller's identity;
+     * Convex deployments with `CLERK_AUTH_REQUIRED` enabled reject calls
+     * without it. Omit for service contexts that don't act as a user.
+     */
+    getAuthToken?: AuthTokenFetcher;
     /** Target environment */
     environment: Environment;
     /** Override the default Convex URL for data access */
@@ -2813,6 +2827,16 @@ interface TruthProviderProps {
     source?: string;
     sourceVersion?: string;
     tenantId?: string;
+    /**
+     * Per-call Clerk JWT fetcher (template "convex") identifying the
+     * signed-in user to Convex. Wire it to your identity provider, e.g.
+     * `useAuth().getToken({ template: "convex" })` from `@clerk/expo`.
+     * Applied to both the live websocket client (React hooks) and the
+     * shared `TruthClient` (resource methods). Identity changes are
+     * picked up without remounting — the latest fetcher is read through
+     * a ref on every call.
+     */
+    getAuthToken?: AuthTokenFetcher;
     /**
      * Synchronous encrypted KV mirror for durable offline reads, injected
      * by the consuming app (e.g. MMKV on `ch/`). Omit on web — the SDK
@@ -2830,7 +2854,7 @@ interface TruthProviderProps {
     offlineEnabled?: boolean;
     children: ReactNode;
 }
-declare function TruthProvider({ environment, convexUrl, apiBaseUrl, apiKey, source, sourceVersion, tenantId, offlineStore, offlineEnabled, children, }: TruthProviderProps): react.FunctionComponentElement<react.ProviderProps<TruthSdkContextValue | null>>;
+declare function TruthProvider({ environment, convexUrl, apiBaseUrl, apiKey, source, sourceVersion, tenantId, getAuthToken, offlineStore, offlineEnabled, children, }: TruthProviderProps): react.FunctionComponentElement<react.ProviderProps<TruthSdkContextValue | null>>;
 
 /**
  * React hooks for conversation reminders — bulk lookup keyed by

package/dist/react.js

@@ -4,8 +4,10 @@ var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __reflectGet = Reflect.get;
 var __pow = Math.pow;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __spreadValues = (a, b) => {
@@ -32,6 +34,7 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __superGet = (cls, obj, key) => __reflectGet(__getProtoOf(cls), key, obj);
 var __async = (__this, __arguments, generator) => {
   return new Promise((resolve, reject) => {
     var fulfilled = (value) => {
@@ -373,8 +376,53 @@ var import_react_query_persist_client = require("@tanstack/react-query-persist-c
 var import_react3 = require("convex/react");
 var import_react4 = require("react");
 
-// src/client.ts
+// src/auth-convex-client.ts
 var import_browser = require("convex/browser");
+var AuthAwareConvexHttpClient = class _AuthAwareConvexHttpClient extends import_browser.ConvexHttpClient {
+  constructor(address, getAuthToken) {
+    super(address);
+    this.getAuthToken = getAuthToken;
+  }
+  /**
+   * Pull a fresh token from the fetcher and apply it. A fetcher error
+   * keeps the previously-applied token rather than dropping auth
+   * mid-session.
+   */
+  syncAuth() {
+    return __async(this, null, function* () {
+      if (!this.getAuthToken) {
+        return;
+      }
+      try {
+        const token = yield this.getAuthToken();
+        if (token) {
+          this.setAuth(token);
+        } else {
+          this.clearAuth();
+        }
+      } catch (e) {
+      }
+    });
+  }
+  query(query, ...args) {
+    return __async(this, null, function* () {
+      yield this.syncAuth();
+      return __superGet(_AuthAwareConvexHttpClient.prototype, this, "query").call(this, query, ...args);
+    });
+  }
+  mutation(mutation, ...args) {
+    return __async(this, null, function* () {
+      yield this.syncAuth();
+      return __superGet(_AuthAwareConvexHttpClient.prototype, this, "mutation").call(this, mutation, ...args);
+    });
+  }
+  action(action, ...args) {
+    return __async(this, null, function* () {
+      yield this.syncAuth();
+      return __superGet(_AuthAwareConvexHttpClient.prototype, this, "action").call(this, action, ...args);
+    });
+  }
+};
 
 // src/resources/appointments.ts
 var AppointmentResource = class {
@@ -2203,7 +2251,7 @@ var TruthClient = class {
     this._webPushReady = null;
     var _a, _b, _c, _d, _e, _f, _g, _h;
     const convexUrl = (_b = (_a = config.convexUrl) != null ? _a : CONVEX_URLS[config.environment]) != null ? _b : CONVEX_URLS.local;
-    this.convex = new import_browser.ConvexHttpClient(convexUrl);
+    this.convex = new AuthAwareConvexHttpClient(convexUrl, config.getAuthToken);
     this.tracker = new Tracker({
       apiKey: config.apiKey,
       environment: config.environment,
@@ -2494,6 +2542,7 @@ function TruthProvider({
   source,
   sourceVersion,
   tenantId,
+  getAuthToken,
   offlineStore = NOOP_STORE,
   offlineEnabled = false,
   children
@@ -2503,6 +2552,26 @@ function TruthProvider({
   const resolvedApiBaseUrl = (_a = apiBaseUrl != null ? apiBaseUrl : readEnv("EXPO_PUBLIC_TRUTH_API_BASE_URL")) != null ? _a : resolveApiBaseUrl(environment);
   const resolvedApiKey = (_b = apiKey != null ? apiKey : readEnv("EXPO_PUBLIC_TRUTH_API_KEY")) != null ? _b : "";
   const convexClient = (0, import_react4.useMemo)(() => new import_react3.ConvexReactClient(url), [url]);
+  const getAuthTokenRef = (0, import_react4.useRef)(getAuthToken);
+  getAuthTokenRef.current = getAuthToken;
+  const hasAuthFetcher = Boolean(getAuthToken);
+  const stableGetAuthToken = (0, import_react4.useMemo)(
+    () => hasAuthFetcher ? () => __async(null, null, function* () {
+      var _a2, _b2;
+      return (_b2 = yield (_a2 = getAuthTokenRef.current) == null ? void 0 : _a2.call(getAuthTokenRef)) != null ? _b2 : null;
+    }) : void 0,
+    [hasAuthFetcher]
+  );
+  (0, import_react4.useEffect)(() => {
+    if (stableGetAuthToken) {
+      convexClient.setAuth(() => __async(null, null, function* () {
+        var _a2;
+        return (_a2 = yield stableGetAuthToken()) != null ? _a2 : null;
+      }));
+    } else {
+      convexClient.clearAuth();
+    }
+  }, [convexClient, stableGetAuthToken]);
   const convexQueryClient = (0, import_react4.useMemo)(
     () => new import_react_query3.ConvexQueryClient(convexClient),
     [convexClient]
@@ -2544,7 +2613,8 @@ function TruthProvider({
       source: source != null ? source : "unknown",
       sourceVersion: sourceVersion != null ? sourceVersion : "unknown",
       tenantId: tenantId != null ? tenantId : "",
-      autoInitServiceWorker: false
+      autoInitServiceWorker: false,
+      getAuthToken: stableGetAuthToken
     }),
     [
       url,
@@ -2553,7 +2623,8 @@ function TruthProvider({
       environment,
       source,
       sourceVersion,
-      tenantId
+      tenantId,
+      stableGetAuthToken
     ]
   );
   (0, import_react4.useEffect)(() => {