@hipnation-truth/sdk 0.26.0 → 0.26.2

package/dist/react.d.ts

@@ -1383,8 +1383,9 @@ interface Attachment {
 declare class AttachmentsResource {
     private readonly baseUrl;
     private readonly apiKey;
+    private readonly auth;
     private readonly convex;
-    constructor(apiBaseUrl: string, apiKey: string, convexClient: ConvexHttpClient);
+    constructor(apiBaseUrl: string, apiKey: string, convexClient: ConvexHttpClient, getAuthToken?: AuthTokenFetcher);
     private post;
     createUploadUrl(input: CreateUploadUrlInput): Promise<CreateUploadUrlResult>;
     getDownloadUrl(s3Key: string, expiresIn?: number): Promise<GetDownloadUrlResult>;
@@ -1601,6 +1602,7 @@ declare class ConversationsResource {
  * const url = await truth.messages.dialpad.authenticateVoicemail(voicemailLink);
  * ```
  */
+
 interface SendSmsParams {
     from_number: string;
     to_number: string;
@@ -1635,7 +1637,8 @@ interface DialpadNumberInfo {
 declare class DialpadResource {
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     /**
      * Send an SMS or MMS message via Dialpad.
      */
@@ -1700,7 +1703,8 @@ declare class MessagesResource {
     readonly dialpad: DialpadResource;
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     /**
      * Get an authenticated URL for a Dialpad voicemail recording.
      *
@@ -1783,6 +1787,7 @@ declare class EhrResource {
  * OAuth token and the HTTP call so applications can drop Elation
  * credentials from their own config.
  */
+
 interface NonVisitNoteBullet {
     text: string;
     category?: string;
@@ -1827,7 +1832,8 @@ interface PushConversationToElationResult {
 declare class NotesResource {
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     /** 30s upstream timeout — Elation API has occasional slow hops; we
      *  don't want a pending mutation to hold the UI thread indefinitely. */
     private static readonly REQUEST_TIMEOUT_MS;
@@ -1857,6 +1863,7 @@ declare class NotesResource {
  * Client-side React usage lives in `@hipnation-truth/sdk/react` via
  * the `useNotifications` hook which mirrors `expo-notifications`.
  */
+
 type NotificationPlatform = "ios" | "android" | "web";
 interface RegisterDeviceInput {
     userId: string;
@@ -1967,7 +1974,8 @@ interface PushEventPayload {
 declare class NotificationsResource {
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     private post;
     private get;
     private delete;
@@ -2025,6 +2033,7 @@ declare class NotificationsResource {
  * X-API-Key. Replaces CommHub's getPatientDetails / getPatientBasicDetails
  * / getPatientMedicalDetails actions.
  */
+
 interface PatientDetailsInput {
     hintId?: string;
     elationId?: string;
@@ -2047,7 +2056,8 @@ interface PatientMedicalDetailsResult {
 declare class PatientDetailsResource {
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     private post;
     get(input: PatientDetailsInput): Promise<PatientDetailsResult>;
     getBasic(input: PatientDetailsInput): Promise<PatientBasicDetailsResult>;
@@ -2297,7 +2307,8 @@ interface TranslateBatchInput {
 declare class TranslationResource {
     private readonly baseUrl;
     private readonly apiKey;
-    constructor(apiBaseUrl: string, apiKey: string);
+    private readonly auth;
+    constructor(apiBaseUrl: string, apiKey: string, getAuthToken?: AuthTokenFetcher);
     private post;
     translate(input: TranslateTextInput): Promise<TranslationResult>;
     translateBatch(input: TranslateBatchInput): Promise<TranslationResult[]>;
@@ -2669,12 +2680,21 @@ declare class TruthClient {
     readonly userSettings: UserSettingsResource;
     private readonly convex;
     private readonly tracker;
+    private readonly _getAuthToken?;
     private _vapidPublicKey;
     private _webPushReady;
     private readonly _serviceWorkerPath;
     constructor(config: TruthClientConfig);
     get vapidPublicKey(): string | null;
     get webPushReady(): Promise<void> | null;
+    /**
+     * When a Clerk token fetcher is configured (publishable-key clients),
+     * the VAPID endpoint is auth-gated — calling it before the session has
+     * hydrated 401s and strands web-push in the "no key" path. Wait
+     * (briefly, bounded) for a token to become available first. No fetcher
+     * → resolve immediately (secret-key path is unaffected).
+     */
+    private waitForAuthToken;
     private initWebPush;
     /**
      * The resolved Truth API base URL for this environment.

package/dist/react.js

@@ -471,6 +471,31 @@ var AppointmentResource = class {
   }
 };
 
+// src/resources/rest-auth.ts
+function buildAuthHeaders(auth, options) {
+  return __async(this, null, function* () {
+    const headers = {
+      "X-API-Key": auth.apiKey
+    };
+    if ((options == null ? void 0 : options.accept) !== false) {
+      headers.Accept = "application/json";
+    }
+    if (options == null ? void 0 : options.json) {
+      headers["Content-Type"] = "application/json";
+    }
+    if (auth.getAuthToken) {
+      try {
+        const token = yield auth.getAuthToken();
+        if (token) {
+          headers.Authorization = `Bearer ${token}`;
+        }
+      } catch (e) {
+      }
+    }
+    return headers;
+  });
+}
+
 // src/resources/attachments.ts
 var AttachmentsError = class extends Error {
   constructor(operation, status, message) {
@@ -480,20 +505,17 @@ var AttachmentsError = class extends Error {
   }
 };
 var AttachmentsResource = class {
-  constructor(apiBaseUrl, apiKey, convexClient) {
+  constructor(apiBaseUrl, apiKey, convexClient, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
     this.convex = convexClient;
   }
   post(path, body) {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api${path}`, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify(body)
       });
       if (!res.ok) {
@@ -624,31 +646,6 @@ var AttachmentsResource = class {
   }
 };
 
-// src/resources/rest-auth.ts
-function buildAuthHeaders(auth, options) {
-  return __async(this, null, function* () {
-    const headers = {
-      "X-API-Key": auth.apiKey
-    };
-    if ((options == null ? void 0 : options.accept) !== false) {
-      headers.Accept = "application/json";
-    }
-    if (options == null ? void 0 : options.json) {
-      headers["Content-Type"] = "application/json";
-    }
-    if (auth.getAuthToken) {
-      try {
-        const token = yield auth.getAuthToken();
-        if (token) {
-          headers.Authorization = `Bearer ${token}`;
-        }
-      } catch (e) {
-      }
-    }
-    return headers;
-  });
-}
-
 // src/resources/conversations.ts
 var ConversationsError = class extends Error {
   constructor(operation, status, message) {
@@ -918,9 +915,10 @@ var ConversationsResource = _ConversationsResource;
 
 // src/resources/dialpad.ts
 var DialpadResource = class {
-  constructor(apiBaseUrl, apiKey) {
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   /**
    * Send an SMS or MMS message via Dialpad.
@@ -1061,10 +1059,7 @@ var DialpadResource = class {
       const url = `${this.baseUrl}/api/messages/dialpad/voicemail/authenticate`;
       const response = yield fetch(url, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true, accept: false }),
         body: JSON.stringify({ voicemail_link: voicemailLink })
       });
       const result = yield response.json();
@@ -1089,10 +1084,7 @@ var DialpadResource = class {
       }
       const response = yield fetch(url.toString(), {
         method: "GET",
-        headers: {
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        }
+        headers: yield buildAuthHeaders(this.auth)
       });
       if (!response.ok) {
         throw new DialpadProxyError("GET", path, response.status);
@@ -1105,11 +1097,7 @@ var DialpadResource = class {
       const url = `${this.baseUrl}/api/messages/dialpad${path}`;
       const response = yield fetch(url, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: body !== void 0 ? JSON.stringify(body) : void 0
       });
       if (!response.ok) {
@@ -1124,11 +1112,7 @@ var DialpadResource = class {
       const url = `${this.baseUrl}/api/messages/dialpad${path}`;
       const response = yield fetch(url, {
         method: "PUT",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: body !== void 0 ? JSON.stringify(body) : void 0
       });
       if (!response.ok) {
@@ -1142,10 +1126,11 @@ var DialpadResource = class {
   }
 };
 var MessagesResource = class {
-  constructor(apiBaseUrl, apiKey) {
-    this.dialpad = new DialpadResource(apiBaseUrl, apiKey);
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
+    this.dialpad = new DialpadResource(apiBaseUrl, apiKey, getAuthToken);
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   /**
    * Get an authenticated URL for a Dialpad voicemail recording.
@@ -1164,11 +1149,7 @@ var MessagesResource = class {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api/conversations/voicemail/url`, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify({ voicemailLink })
       });
       if (!res.ok) {
@@ -1192,11 +1173,7 @@ var MessagesResource = class {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api/conversations/calls/end`, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify({ callId })
       });
       if (!res.ok) {
@@ -1317,9 +1294,10 @@ var NotesError = class extends Error {
   }
 };
 var _NotesResource = class _NotesResource {
-  constructor(apiBaseUrl, apiKey) {
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   post(path, body) {
     return __async(this, null, function* () {
@@ -1332,11 +1310,7 @@ var _NotesResource = class _NotesResource {
       try {
         res = yield fetch(`${this.baseUrl}/api${path}`, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-            "X-API-Key": this.apiKey
-          },
+          headers: yield buildAuthHeaders(this.auth, { json: true }),
           body: JSON.stringify(body),
           signal: controller.signal
         });
@@ -1397,19 +1371,16 @@ var NotificationsError = class extends Error {
   }
 };
 var NotificationsResource = class {
-  constructor(apiBaseUrl, apiKey) {
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   post(path, body) {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api${path}`, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify(body)
       });
       if (!res.ok) {
@@ -1427,10 +1398,7 @@ var NotificationsResource = class {
       }
       const res = yield fetch(url.toString(), {
         method: "GET",
-        headers: {
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        }
+        headers: yield buildAuthHeaders(this.auth)
       });
       if (!res.ok) {
         const text = yield res.text().catch(() => "");
@@ -1443,10 +1411,7 @@ var NotificationsResource = class {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api${path}`, {
         method: "DELETE",
-        headers: {
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        }
+        headers: yield buildAuthHeaders(this.auth)
       });
       if (!res.ok) {
         const text = yield res.text().catch(() => "");
@@ -1579,19 +1544,16 @@ var PatientDetailsError = class extends Error {
   }
 };
 var PatientDetailsResource = class {
-  constructor(apiBaseUrl, apiKey) {
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   post(path, body) {
     return __async(this, null, function* () {
       const res = yield fetch(`${this.baseUrl}/api${path}`, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify(body)
       });
       if (!res.ok) {
@@ -1913,20 +1875,17 @@ var TranslationError = class extends Error {
   }
 };
 var TranslationResource = class {
-  constructor(apiBaseUrl, apiKey) {
+  constructor(apiBaseUrl, apiKey, getAuthToken) {
     this.baseUrl = apiBaseUrl;
     this.apiKey = apiKey;
+    this.auth = { apiKey, getAuthToken };
   }
   post(path, body) {
     return __async(this, null, function* () {
       const url = `${this.baseUrl}/api${path}`;
       const res = yield fetch(url, {
         method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          "X-API-Key": this.apiKey
-        },
+        headers: yield buildAuthHeaders(this.auth, { json: true }),
         body: JSON.stringify(body)
       });
       if (!res.ok) {
@@ -2244,19 +2203,36 @@ var TruthClient = class {
     this.patients = new PatientResource(this.convex);
     this.appointments = new AppointmentResource(this.convex);
     this.ehr = new EhrResource(apiUrl, config.apiKey, config.getAuthToken);
-    this.messages = new MessagesResource(apiUrl, config.apiKey);
+    this.messages = new MessagesResource(
+      apiUrl,
+      config.apiKey,
+      config.getAuthToken
+    );
     this.reminders = new RemindersResource(this.convex);
-    this.translation = new TranslationResource(apiUrl, config.apiKey);
+    this.translation = new TranslationResource(
+      apiUrl,
+      config.apiKey,
+      config.getAuthToken
+    );
     this.tasks = new TasksResource(this.convex);
-    this.patientDetails = new PatientDetailsResource(apiUrl, config.apiKey);
+    this.patientDetails = new PatientDetailsResource(
+      apiUrl,
+      config.apiKey,
+      config.getAuthToken
+    );
     this.attachments = new AttachmentsResource(
       apiUrl,
       config.apiKey,
-      this.convex
+      this.convex,
+      config.getAuthToken
     );
-    this.notes = new NotesResource(apiUrl, config.apiKey);
+    this.notes = new NotesResource(apiUrl, config.apiKey, config.getAuthToken);
     this.physicians = new PhysiciansResource(this.convex);
-    this.notifications = new NotificationsResource(apiUrl, config.apiKey);
+    this.notifications = new NotificationsResource(
+      apiUrl,
+      config.apiKey,
+      config.getAuthToken
+    );
     this.conversations = new ConversationsResource(
       apiUrl,
       config.apiKey,
@@ -2264,6 +2240,7 @@ var TruthClient = class {
       config.getAuthToken
     );
     this.userSettings = new UserSettingsResource(this.convex);
+    this._getAuthToken = config.getAuthToken;
     this._serviceWorkerPath = (_h = config.serviceWorkerPath) != null ? _h : "/truth-sw.js";
     if (typeof window !== "undefined" && isWebPushSupported() && config.autoInitServiceWorker !== false) {
       this._webPushReady = this.initWebPush();
@@ -2275,9 +2252,33 @@ var TruthClient = class {
   get webPushReady() {
     return this._webPushReady;
   }
+  /**
+   * When a Clerk token fetcher is configured (publishable-key clients),
+   * the VAPID endpoint is auth-gated — calling it before the session has
+   * hydrated 401s and strands web-push in the "no key" path. Wait
+   * (briefly, bounded) for a token to become available first. No fetcher
+   * → resolve immediately (secret-key path is unaffected).
+   */
+  waitForAuthToken() {
+    return __async(this, null, function* () {
+      if (!this._getAuthToken) {
+        return;
+      }
+      for (let attempt = 0; attempt < 20; attempt++) {
+        try {
+          if (yield this._getAuthToken()) {
+            return;
+          }
+        } catch (e) {
+        }
+        yield new Promise((resolve) => setTimeout(resolve, 500));
+      }
+    });
+  }
   initWebPush() {
     return __async(this, null, function* () {
       try {
+        yield this.waitForAuthToken();
         const key = yield this.notifications.getVapidKey();
         if (!key) {
           return;