@hipnation-truth/sdk 0.25.2 → 0.26.0

package/dist/react.d.ts

@@ -1420,19 +1420,6 @@ declare class AttachmentsResource {
     }>;
 }
 
-/**
- * ConversationsResource — write methods that hang off a specific
- * conversation: notes, tasks, outbound messages.
- *
- * Replaces CommHub's `truthConversationApi.ts` raw-fetch wrappers so
- * the frontend goes through a typed SDK surface instead of building
- * URLs by hand.
- *
- * All methods proxy the matching oRPC procedures (`/conversations/*`)
- * via Truth's application-key auth. Errors surface as
- * `ConversationsError` with a status code so callers can distinguish
- * transport failures (status=0) from API rejections (status>=400).
- */
 /** Address a conversation by either Convex `_id` or the phonePair. */
 interface ConversationAddress {
     conversationId?: string;
@@ -1560,8 +1547,9 @@ declare class ConversationsResource {
     private static readonly REQUEST_TIMEOUT_MS;
     private readonly baseUrl;
     private readonly apiKey;
+    private readonly auth;
     private readonly convex;
-    constructor(apiBaseUrl: string, apiKey: string, convex?: convex_browser.ConvexHttpClient);
+    constructor(apiBaseUrl: string, apiKey: string, convex?: convex_browser.ConvexHttpClient, getAuthToken?: AuthTokenFetcher);
     /**
      * Mark a conversation read for the calling user (zeroes unreadCount,
      * stamps `lastReadAt`). Calls the public Convex `markRead` mutation
@@ -1748,7 +1736,8 @@ declare class MessagesResource {
  * EHR proxy resource — typed access to Truth's EHR proxy endpoints.
  *
  * Provides per-provider proxy methods so consumers never construct
- * proxy URLs manually.
+ * proxy URLs manually. Every request carries the application's
+ * `X-API-Key` — Truth's API gate rejects unauthenticated callers.
  *
  * @example
  * ```ts
@@ -1757,31 +1746,26 @@ declare class MessagesResource {
  * const hintPatient = await truth.ehr.hint.get('/provider/patients/456');
  * ```
  */
+
 declare class EhrProviderProxy {
     private readonly baseUrl;
     private readonly provider;
-    constructor(apiBaseUrl: string, provider: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, provider: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
+    private request;
     /**
      * GET request to the EHR proxy.
      * @param path — path relative to the provider root (e.g., "/patients/123/")
      * @param params — optional query parameters
      */
     get<T = unknown>(path: string, params?: Record<string, unknown>): Promise<T>;
-    /**
-     * POST request to the EHR proxy.
-     */
+    /** POST request to the EHR proxy. */
     post<T = unknown>(path: string, body?: unknown): Promise<T>;
-    /**
-     * PUT request to the EHR proxy.
-     */
+    /** PUT request to the EHR proxy. */
     put<T = unknown>(path: string, body?: unknown): Promise<T>;
-    /**
-     * PATCH request to the EHR proxy.
-     */
+    /** PATCH request to the EHR proxy. */
     patch<T = unknown>(path: string, body?: unknown): Promise<T>;
-    /**
-     * DELETE request to the EHR proxy.
-     */
+    /** DELETE request to the EHR proxy. */
     delete<T = unknown>(path: string): Promise<T>;
 }
 declare class EhrResource {
@@ -1789,7 +1773,7 @@ declare class EhrResource {
     readonly elation: EhrProviderProxy;
     /** Hint Health proxy */
     readonly hint: EhrProviderProxy;
-    constructor(apiBaseUrl: string);
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
 }
 
 /**

package/dist/react.js

@@ -624,6 +624,31 @@ var AttachmentsResource = class {
   }
 };
 
+// src/resources/rest-auth.ts
+function buildAuthHeaders(auth, options) {
+  return __async(this, null, function* () {
+    const headers = {
+      "X-API-Key": auth.apiKey
+    };
+    if ((options == null ? void 0 : options.accept) !== false) {
+      headers.Accept = "application/json";
+    }
+    if (options == null ? void 0 : options.json) {
+      headers["Content-Type"] = "application/json";
+    }
+    if (auth.getAuthToken) {
+      try {
+        const token = yield auth.getAuthToken();
+        if (token) {
+          headers.Authorization = `Bearer ${token}`;
+        }
+      } catch (e) {
+      }
+    }
+    return headers;
+  });
+}
+
 // src/resources/conversations.ts
 var ConversationsError = class extends Error {
   constructor(operation, status, message) {
@@ -736,9 +761,10 @@ var ConversationMessagesSubresource = class {
   }
 };
 var _ConversationsResource = class _ConversationsResource {
-  constructor(apiBaseUrl, apiKey, convex) {
+  constructor(apiBaseUrl, apiKey, convex, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
     this.convex = convex != null ? convex : null;
     const post = (path, body) => this.postRequest(path, body);
     const patch = (path, body) => this.patchRequest(path, body);
@@ -821,11 +847,7 @@ var _ConversationsResource = class _ConversationsResource {
       try {
         res = yield fetch(`${this.baseUrl}/api${path}`, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-            "X-API-Key": this.apiKey
-          },
+          headers: yield buildAuthHeaders(this.auth, { json: true }),
           body: JSON.stringify(body),
           signal: controller.signal
         });
@@ -867,11 +889,7 @@ var _ConversationsResource = class _ConversationsResource {
       try {
         res = yield fetch(`${this.baseUrl}/api${path}`, {
           method: "PATCH",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-            "X-API-Key": this.apiKey
-          },
+          headers: yield buildAuthHeaders(this.auth, { json: true }),
           body: JSON.stringify(body),
           signal: controller.signal
         });
@@ -1205,16 +1223,12 @@ var DialpadProxyError = class extends Error {
 
 // src/resources/ehr.ts
 var EhrProviderProxy = class {
-  constructor(apiBaseUrl, provider) {
+  constructor(apiBaseUrl, provider, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.provider = provider;
+    this.auth = { apiKey, getAuthToken };
   }
-  /**
-   * GET request to the EHR proxy.
-   * @param path — path relative to the provider root (e.g., "/patients/123/")
-   * @param params — optional query parameters
-   */
-  get(path, params) {
+  request(method, path, body, params) {
     return __async(this, null, function* () {
       const url = new URL(`/api/ehr/${this.provider}${path}`, this.baseUrl);
       if (params) {
@@ -1225,96 +1239,60 @@ var EhrProviderProxy = class {
         }
       }
       const response = yield fetch(url.toString(), {
-        method: "GET",
-        headers: { Accept: "application/json" }
+        method,
+        headers: yield buildAuthHeaders(this.auth, { json: body !== void 0 }),
+        body: body !== void 0 ? JSON.stringify(body) : void 0
       });
       if (!response.ok) {
-        throw new EhrProxyError(this.provider, "GET", path, response.status);
+        throw new EhrProxyError(this.provider, method, path, response.status);
       }
       return yield response.json();
     });
   }
   /**
-   * POST request to the EHR proxy.
+   * GET request to the EHR proxy.
+   * @param path — path relative to the provider root (e.g., "/patients/123/")
+   * @param params — optional query parameters
    */
+  get(path, params) {
+    return __async(this, null, function* () {
+      return this.request("GET", path, void 0, params);
+    });
+  }
+  /** POST request to the EHR proxy. */
   post(path, body) {
     return __async(this, null, function* () {
-      const url = `${this.baseUrl}/api/ehr/${this.provider}${path}`;
-      const response = yield fetch(url, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json"
-        },
-        body: body !== void 0 ? JSON.stringify(body) : void 0
-      });
-      if (!response.ok) {
-        throw new EhrProxyError(this.provider, "POST", path, response.status);
-      }
-      return yield response.json();
+      return this.request("POST", path, body);
     });
   }
-  /**
-   * PUT request to the EHR proxy.
-   */
+  /** PUT request to the EHR proxy. */
   put(path, body) {
     return __async(this, null, function* () {
-      const url = `${this.baseUrl}/api/ehr/${this.provider}${path}`;
-      const response = yield fetch(url, {
-        method: "PUT",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json"
-        },
-        body: body !== void 0 ? JSON.stringify(body) : void 0
-      });
-      if (!response.ok) {
-        throw new EhrProxyError(this.provider, "PUT", path, response.status);
-      }
-      return yield response.json();
+      return this.request("PUT", path, body);
     });
   }
-  /**
-   * PATCH request to the EHR proxy.
-   */
+  /** PATCH request to the EHR proxy. */
   patch(path, body) {
     return __async(this, null, function* () {
-      const url = `${this.baseUrl}/api/ehr/${this.provider}${path}`;
-      const response = yield fetch(url, {
-        method: "PATCH",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json"
-        },
-        body: body !== void 0 ? JSON.stringify(body) : void 0
-      });
-      if (!response.ok) {
-        throw new EhrProxyError(this.provider, "PATCH", path, response.status);
-      }
-      return yield response.json();
+      return this.request("PATCH", path, body);
     });
   }
-  /**
-   * DELETE request to the EHR proxy.
-   */
+  /** DELETE request to the EHR proxy. */
   delete(path) {
     return __async(this, null, function* () {
-      const url = `${this.baseUrl}/api/ehr/${this.provider}${path}`;
-      const response = yield fetch(url, {
-        method: "DELETE",
-        headers: { Accept: "application/json" }
-      });
-      if (!response.ok) {
-        throw new EhrProxyError(this.provider, "DELETE", path, response.status);
-      }
-      return yield response.json();
+      return this.request("DELETE", path);
     });
   }
 };
 var EhrResource = class {
-  constructor(apiBaseUrl) {
-    this.elation = new EhrProviderProxy(apiBaseUrl, "elation");
-    this.hint = new EhrProviderProxy(apiBaseUrl, "hint");
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
+    this.elation = new EhrProviderProxy(
+      apiBaseUrl,
+      "elation",
+      apiKey,
+      getAuthToken
+    );
+    this.hint = new EhrProviderProxy(apiBaseUrl, "hint", apiKey, getAuthToken);
   }
 };
 var EhrProxyError = class extends Error {
@@ -2265,7 +2243,7 @@ var TruthClient = class {
     const apiUrl = this.tracker.apiUrl;
     this.patients = new PatientResource(this.convex);
     this.appointments = new AppointmentResource(this.convex);
-    this.ehr = new EhrResource(apiUrl);
+    this.ehr = new EhrResource(apiUrl, config.apiKey, config.getAuthToken);
     this.messages = new MessagesResource(apiUrl, config.apiKey);
     this.reminders = new RemindersResource(this.convex);
     this.translation = new TranslationResource(apiUrl, config.apiKey);
@@ -2282,7 +2260,8 @@ var TruthClient = class {
     this.conversations = new ConversationsResource(
       apiUrl,
       config.apiKey,
-      this.convex
+      this.convex,
+      config.getAuthToken
     );
     this.userSettings = new UserSettingsResource(this.convex);
     this._serviceWorkerPath = (_h = config.serviceWorkerPath) != null ? _h : "/truth-sw.js";