@introspection-sdk/introspection-node 0.5.4 → 0.5.6

package/dist/resources/runtimes.js

@@ -1,181 +1,15 @@
-import { NotFoundError } from "@introspection-sdk/types";
-import { cursorPaginate } from "../pagination.js";
+import { RuntimeHandle, RuntimesClient, attachRuntimes as attachSharedRuntimes, isUuid, } from "@introspection-sdk/http";
 import { Runner } from "../runner.js";
-const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-export function isUuid(value) {
-    return UUID_RE.test(value);
-}
-function toRunBody(opts) {
-    if (!opts)
-        return undefined;
-    const out = {};
-    if (opts.identity)
-        out.identity = opts.identity;
-    if (opts.ttl_seconds !== undefined)
-        out.ttl_seconds = opts.ttl_seconds;
-    if (opts.recipe_id !== undefined)
-        out.recipe_id = opts.recipe_id;
-    return out;
-}
-/**
- * Programmatic CRUD for `/v1/runtimes` on the CP. Mounted on the
- * IntrospectionClient as a callable hybrid (see `RuntimeHandleFactory`).
- */
-export class RuntimesApi {
-    http;
+export { RuntimeHandle, isUuid };
+export class RuntimesApi extends RuntimesClient {
     client;
     constructor(http, client) {
-        this.http = http;
-        this.client = client;
-    }
-    /**
-     * List runtimes matching `params`. `await` the result for the first
-     * page, or `for await` it to stream every runtime across pages (fetched
-     * lazily — `limit` sets the page size, `next` the starting cursor; stop
-     * early to stop fetching).
-     */
-    list(params) {
-        return cursorPaginate((next) => this.http.request({
-            method: "GET",
-            path: "/v1/runtimes",
-            query: { ...params, next },
-        }), params.next);
-    }
-    get(id, params) {
-        return this.http.request({
-            method: "GET",
-            path: `/v1/runtimes/${encodeURIComponent(id)}`,
-            query: params,
-        });
-    }
-    create(input) {
-        return this.http.request({
-            method: "POST",
-            path: "/v1/runtimes",
-            body: input,
-        });
-    }
-    update(id, input) {
-        return this.http.request({
-            method: "PATCH",
-            path: `/v1/runtimes/${encodeURIComponent(id)}`,
-            body: input,
-        });
-    }
-    delete(id) {
-        return this.http.request({
-            method: "DELETE",
-            path: `/v1/runtimes/${encodeURIComponent(id)}`,
-            expect: "empty",
-        });
-    }
-    /** Resolve a name to a runtime by querying `/v1/runtimes?name=…`. */
-    async resolveByName(name, projectId) {
-        for await (const r of this.list({
-            project_id: projectId,
-            name,
-            limit: 2,
-        })) {
-            if (r.name === name)
-                return r;
-        }
-        throw new NotFoundError({
-            message: `Runtime '${name}' not found${projectId ? ` in project ${projectId}` : ""}`,
-            status: 404,
-            code: "not_found",
-        });
-    }
-    /** POST `/v1/runtimes/{id}/run` and wrap the result in a `Runner`. */
-    async runById(id, opts) {
-        const spec = await this.http.request({
-            method: "POST",
-            path: `/v1/runtimes/${encodeURIComponent(id)}/run`,
-            body: toRunBody(opts) ?? {},
-        });
-        const source = {
-            kind: "runtime",
-            id,
-            options: opts,
-        };
-        return new Runner(this.client, source, spec);
-    }
-    async activateById(id, params) {
-        return this.http.request({
-            method: "POST",
-            path: `/v1/runtimes/${encodeURIComponent(id)}/activate`,
-            query: params,
-            body: {},
-        });
-    }
-}
-/**
- * Handle returned by `client.runtimes(idOrName)`. Resolves the underlying
- * runtime id lazily — if you pass a UUID, no extra lookup happens; if you
- * pass a name, the first call that needs the id will hit
- * `/v1/runtimes?name=…`.
- */
-export class RuntimeHandle {
-    api;
-    client;
-    idOrName;
-    resolvedId;
-    pinnedRecipeId;
-    constructor(api, client, idOrName, pinnedRecipeId = null) {
-        this.api = api;
+        super(http, (source, spec) => new Runner(this.client, source, spec));
         this.client = client;
-        this.idOrName = idOrName;
-        this.resolvedId = isUuid(idOrName) ? idOrName : null;
-        this.pinnedRecipeId = pinnedRecipeId;
-    }
-    async resolveId() {
-        if (this.resolvedId)
-            return this.resolvedId;
-        // The project is scoped by the API key server-side — no client-level
-        // project to thread through the name lookup.
-        const runtime = await this.api.resolveByName(this.idOrName);
-        this.resolvedId = runtime.id;
-        return runtime.id;
-    }
-    /**
-     * Pin to a specific recipe — canary a previous version. Subsequent
-     * `.run()` calls on the returned handle open a runner against the
-     * runtime row in this name whose `recipe_id` matches `recipe.id`
-     * (resolved server-side by CP).
-     *
-     * Returns a new child {@link RuntimeHandle}; the original handle is
-     * unaffected. Accepts a {@link Recipe} object (uses `.id`) or a
-     * recipe id string.
-     */
-    pin(recipe) {
-        const recipeId = typeof recipe === "string" ? recipe : recipe.id;
-        return new RuntimeHandle(this.api, this.client, this.idOrName, recipeId);
-    }
-    async run(opts) {
-        const id = await this.resolveId();
-        const merged = this.pinnedRecipeId !== null
-            ? { ...(opts ?? {}), recipe_id: this.pinnedRecipeId }
-            : opts;
-        return this.api.runById(id, merged);
-    }
-    async activate(params) {
-        const id = await this.resolveId();
-        return this.api.activateById(id, { project_id: params?.projectId });
     }
 }
 export function attachRuntimes(client, http) {
     const api = new RuntimesApi(http, client);
-    const factory = (idOrName) => new RuntimeHandle(api, client, idOrName);
-    // Mount the API methods on the factory function. Using bound copies so
-    // the methods can be invoked off the proxy without losing `this`.
-    const hybrid = factory;
-    hybrid.list = api.list.bind(api);
-    hybrid.get = api.get.bind(api);
-    hybrid.create = api.create.bind(api);
-    hybrid.update = api.update.bind(api);
-    hybrid.delete = api.delete.bind(api);
-    hybrid.resolveByName = api.resolveByName.bind(api);
-    hybrid.runById = api.runById.bind(api);
-    hybrid.activateById = api.activateById.bind(api);
-    return hybrid;
+    return attachSharedRuntimes(api);
 }
 //# sourceMappingURL=runtimes.js.map

package/dist/resources/runtimes.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimes.js","sourceRoot":"","sources":["../../src/resources/runtimes.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAa,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAqB,MAAM,cAAc,CAAC;AAEzD,MAAM,OAAO,GACX,iEAAiE,CAAC;AAEpE,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAYD,SAAS,SAAS,CAAC,IAAiB;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,WAAW;IAEH;IACA;IAFnB,YACmB,IAAgB,EAChB,MAA2B;QAD3B,SAAI,GAAJ,IAAI,CAAY;QAChB,WAAM,GAAN,MAAM,CAAqB;IAC3C,CAAC;IAEJ;;;;;OAKG;IACH,IAAI,CAAC,MAAyB;QAC5B,OAAO,cAAc,CACnB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,OAAO,CAAqB;YACpC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAwC;SACjE,CAAC,EACJ,MAAM,CAAC,IAAI,CACZ,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,EAAQ,EAAE,MAA6B;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;YAC9C,KAAK,EAAE,MAAiC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAoB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,EAAQ,EAAE,KAAoB;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;YAC9C,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,EAAQ;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAO;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;YAC9C,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,SAAgB;QAChD,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;YAC9B,UAAU,EAAE,SAAS;YACrB,IAAI;YACJ,KAAK,EAAE,CAAC;SACT,CAAC,EAAE,CAAC;YACH,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC;YACtB,OAAO,EAAE,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACpF,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,EAAQ,EAAE,IAAiB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAa;YAC/C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,MAAM;YAClD,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAiB;YAC3B,IAAI,EAAE,SAAS;YACf,EAAE;YACF,OAAO,EAAE,IAAI;SACd,CAAC;QACF,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,EAAQ,EACR,MAA8B;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,WAAW;YACvD,KAAK,EAAE,MAA6C;YACpD,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAKL;IACA;IACA;IANX,UAAU,CAAc;IACf,cAAc,CAAc;IAE7C,YACmB,GAAgB,EAChB,MAA2B,EAC3B,QAAgB,EACjC,iBAA8B,IAAI;QAHjB,QAAG,GAAH,GAAG,CAAa;QAChB,WAAM,GAAN,MAAM,CAAqB;QAC3B,aAAQ,GAAR,QAAQ,CAAQ;QAGjC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACH,GAAG,CAAC,MAAuB;QACzB,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAiB;QACzB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GACV,IAAI,CAAC,cAAc,KAAK,IAAI;YAC1B,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE;YACrD,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA6B;QAC1C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AASD,MAAM,UAAU,cAAc,CAC5B,MAA2B,EAC3B,IAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAyB,CAAC,QAAgB,EAAE,EAAE,CACzD,IAAI,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,MAAM,GAAG,OAA6C,CAAC;IAC7D,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"runtimes.js","sourceRoot":"","sources":["../../src/resources/runtimes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,cAAc,EACd,cAAc,IAAI,oBAAoB,EACtC,MAAM,GAEP,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAEjC,MAAM,OAAO,WAAY,SAAQ,cAAsB;IAGlC;IAFnB,YACE,IAAgB,EACC,MAA2B;QAE5C,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAFpD,WAAM,GAAN,MAAM,CAAqB;IAG9C,CAAC;CACF;AAID,MAAM,UAAU,cAAc,CAC5B,MAA2B,EAC3B,IAAgB;IAEhB,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,oBAAoB,CAAC,GAAG,CAAuC,CAAC;AACzE,CAAC"}

package/dist/runner.d.ts

@@ -1,8 +1,5 @@
 import { type RunnerContext, type RunnerDeployment, type RunnerSpec, type RunRequest, type Uuid } from "@introspection-sdk/types";
-import { TasksApi } from "./runner-resources/tasks.js";
-import { FilesApi } from "./runner-resources/files.js";
-import { ConversationsApi } from "./runner-resources/conversations.js";
-import { SharesApi } from "./runner-resources/shares.js";
+import { ConversationsApi, FilesApi, SharesApi, TasksApi } from "@introspection-sdk/http";
 import type { IntrospectionClient } from "./client.js";
 /**
  * Where this Runner came from, so `refresh()` can call CP again with the

package/dist/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,IAAI,EACV,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,qBAAa,MAAM;IAYf,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAZzB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAS;IAGvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;gBAGR,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,YAAY,EACrC,IAAI,EAAE,UAAU;IAYlB,+CAA+C;IAC/C,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,oDAAoD;IACpD,IAAI,UAAU,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAE3C;IAED,0CAA0C;IAC1C,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,iCAAiC;IACjC,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,mEAAmE;IACnE,IAAI,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,CAErC;IAED,2CAA2C;IAC3C,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAID;;;;;;;;;OASG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B;;;;;;OAMG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,OAAO,CAAC,SAAS;IAUjB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,UAAU;YAUJ,gBAAgB;CAgB/B"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,IAAI,EACV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,CAAA;CAAE,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,qBAAa,MAAM;IAYf,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAZzB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAS;IAGvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;gBAGR,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,YAAY,EACrC,IAAI,EAAE,UAAU;IAYlB,+CAA+C;IAC/C,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,oDAAoD;IACpD,IAAI,UAAU,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAE3C;IAED,0CAA0C;IAC1C,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,iCAAiC;IACjC,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,mEAAmE;IACnE,IAAI,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,CAErC;IAED,2CAA2C;IAC3C,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAID;;;;;;;;;OASG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B;;;;;;OAMG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,OAAO,CAAC,SAAS;IAUjB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,UAAU;YAUJ,gBAAgB;CAgB/B"}

package/dist/runner.js

@@ -1,9 +1,6 @@
 import { RunnerExpiredError, } from "@introspection-sdk/types";
+import { ConversationsApi, FilesApi, SharesApi, TasksApi, } from "@introspection-sdk/http";
 import { HttpClient } from "./http.js";
-import { TasksApi } from "./runner-resources/tasks.js";
-import { FilesApi } from "./runner-resources/files.js";
-import { ConversationsApi } from "./runner-resources/conversations.js";
-import { SharesApi } from "./runner-resources/shares.js";
 /**
  * Live handle to a Data Plane sandbox. Holds the bearer JWT, the DP
  * endpoint URL, and the runtime/experiment context, and exposes the

package/dist/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAMnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAYzD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,MAAM;IAYE;IACA;IAZX,IAAI,CAAa;IACjB,IAAI,CAAa;IACjB,MAAM,GAAG,KAAK,CAAC;IAEvB,uBAAuB;IACd,KAAK,CAAW;IAChB,KAAK,CAAW;IAChB,aAAa,CAAmB;IAChC,MAAM,CAAY;IAE3B,YACmB,MAA2B,EAC3B,MAAoB,EACrC,IAAgB;QAFC,WAAM,GAAN,MAAM,CAAqB;QAC3B,WAAM,GAAN,MAAM,CAAc;QAGrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,2BAA2B;IAE3B,+CAA+C;IAC/C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAU;QACZ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,0CAA0C;IAC1C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,iCAAiC;IACjC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,mEAAmE;IACnE,IAAI,OAAO;QACT,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,oBAAoB;IAEpB;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,qEAAqE;QACrE,wEAAwE;QACxE,qDAAqD;QACrD,wCAAwC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,oBAAoB;IAEZ,SAAS;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC7C,OAAO,IAAI,UAAU,CAAC;YACpB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ;YACrC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YAC9B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,IAAgB;QAClC,MAAM,KAAK,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,IAA0C,EAC9B,EAAE;YACd,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,GAAG,KAAK,EAClB,IAAyC,EACtB,EAAE;YACrB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAa;gBACpC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;gBAC9D,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAa;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;YACjE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAiB;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAMnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAYvC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,MAAM;IAYE;IACA;IAZX,IAAI,CAAa;IACjB,IAAI,CAAa;IACjB,MAAM,GAAG,KAAK,CAAC;IAEvB,uBAAuB;IACd,KAAK,CAAW;IAChB,KAAK,CAAW;IAChB,aAAa,CAAmB;IAChC,MAAM,CAAY;IAE3B,YACmB,MAA2B,EAC3B,MAAoB,EACrC,IAAgB;QAFC,WAAM,GAAN,MAAM,CAAqB;QAC3B,WAAM,GAAN,MAAM,CAAc;QAGrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,2BAA2B;IAE3B,+CAA+C;IAC/C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAU;QACZ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,0CAA0C;IAC1C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,iCAAiC;IACjC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;IAC9B,CAAC;IAED,mEAAmE;IACnE,IAAI,OAAO;QACT,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,oBAAoB;IAEpB;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,qEAAqE;QACrE,wEAAwE;QACxE,qDAAqD;QACrD,wCAAwC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,oBAAoB;IAEZ,SAAS;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC7C,OAAO,IAAI,UAAU,CAAC;YACpB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ;YACrC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YAC9B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,IAAgB;QAClC,MAAM,KAAK,GAAe,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,IAA0C,EAC9B,EAAE;YACd,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,GAAG,KAAK,EAClB,IAAyC,EACtB,EAAE;YACrB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAa;gBACpC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;gBAC9D,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAa;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM;YACjE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAiB;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@introspection-sdk/introspection-node",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "license": "Apache-2.0",
   "description": "Introspection observability SDK for Node.js",
   "engines": {
@@ -56,8 +56,8 @@
     "ai": "^6.0.206",
     "openai": "^6.42.0",
     "typescript": "5.9.3",
-    "@repo/typescript-config": "0.0.0",
-    "@repo/eslint-config": "0.0.0"
+    "@repo/eslint-config": "0.0.0",
+    "@repo/typescript-config": "0.0.0"
   },
   "peerDependencies": {
     "@openai/agents": ">=0.0.1",
@@ -139,10 +139,10 @@
     "@opentelemetry/api": "^1.9.1",
     "https-proxy-agent": "^7.0.6",
     "proxy-from-env": "^2.1.0",
-    "@introspection-sdk/http": "0.5.4",
-    "@introspection-sdk/types": "0.5.4",
-    "@introspection-sdk/introspection-pi": "0.5.4",
-    "@introspection-sdk/introspection-proxy": "0.5.4"
+    "@introspection-sdk/introspection-pi": "0.5.6",
+    "@introspection-sdk/http": "0.5.6",
+    "@introspection-sdk/types": "0.5.6",
+    "@introspection-sdk/introspection-proxy": "0.5.6"
   },
   "scripts": {
     "lint": "eslint . --max-warnings 0",

package/src/auth.ts

@@ -0,0 +1,236 @@
+/**
+ * Service-account (machine) authentication for the Control Plane.
+ *
+ * Mints a short-lived, project-scoped Introspection access token via the
+ * OAuth 2.0 `client_credentials` grant against CP `POST /v1/oauth/token`.
+ * This is the headless / CI counterpart to a long-lived API key: the
+ * confidential Application's `client_id` + `client_secret` stay server-side,
+ * and you re-mint when the token expires (no refresh token is issued).
+ *
+ * The minted `access_token` is an ordinary CP bearer token, so it drops
+ * straight into the existing client surface — pass it to
+ * {@link IntrospectionClient}, or use
+ * {@link IntrospectionClient.fromServiceAccount} to mint and construct in one
+ * call, and the usual `client.runtimes("name").run()` flow works unchanged.
+ */
+import { stripTrailingSlash, toApiError } from "@introspection-sdk/http";
+
+const DEFAULT_BASE_API_URL = "https://api.introspection.dev";
+const GRANT_TYPE_CLIENT_CREDENTIALS = "client_credentials";
+const GRANT_TYPE_TOKEN_EXCHANGE =
+  "urn:ietf:params:oauth:grant-type:token-exchange";
+const GRANT_TYPE_AUTHORIZATION_CODE = "authorization_code";
+const SUBJECT_TOKEN_TYPE_ID_TOKEN = "urn:ietf:params:oauth:token-type:id_token";
+
+function resolveBaseApiUrl(baseApiUrl?: string): string {
+  return stripTrailingSlash(
+    baseApiUrl ??
+      process.env.INTROSPECTION_BASE_API_URL ??
+      DEFAULT_BASE_API_URL,
+  );
+}
+
+function resolveFetch(custom?: typeof fetch): typeof fetch {
+  const fetchImpl = custom ?? globalThis.fetch;
+  if (!fetchImpl) {
+    throw new Error(
+      "global fetch is unavailable; pass `fetch` or run on Node 18+",
+    );
+  }
+  return fetchImpl;
+}
+
+async function postTokenForm(
+  baseApiUrl: string,
+  form: URLSearchParams,
+  fetchImpl: typeof fetch,
+): Promise<OAuthToken> {
+  const res = await fetchImpl(`${baseApiUrl}/v1/oauth/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: form.toString(),
+    cache: "no-store",
+  });
+  if (!res.ok) throw await toApiError(res);
+  return (await res.json()) as OAuthToken;
+}
+
+/**
+ * CP `POST /v1/oauth/token` response. No refresh token is issued for the
+ * machine grants — re-mint when it expires.
+ */
+export interface OAuthToken {
+  /** Project-scoped RS256 access token (`Authorization: Bearer …`). */
+  access_token: string;
+  /** Always `"Bearer"`. */
+  token_type: string;
+  /** Token lifetime in seconds. */
+  expires_in: number;
+  /** The granted (scope-capped) scope, when the CP returns one. */
+  scope: string | null;
+  /**
+   * Data Plane API base URL for the token's project, resolved by the CP the
+   * same way it is for the CLI login. `null` when the deployment can't be
+   * resolved; the caller then needs an explicit DP URL. Hand this to the
+   * browser SDK as `dpUrl` so the SPA connects without separate DP config.
+   */
+  dp_url: string | null;
+}
+
+export interface ServiceAccountTokenParams {
+  /** Confidential Application client id (`intro_app_…`). */
+  clientId: string;
+  /** Confidential Application client secret (`intro_sk_…`). */
+  clientSecret: string;
+  /**
+   * Project the token is scoped to. Required by the CP `client_credentials`
+   * grant — the minted token is project-scoped and the project must belong to
+   * the Application's organization.
+   */
+  projectId: string;
+  /**
+   * Optional space-separated scope. Capped server-side to the Application's
+   * `allowed_scopes`; omit to receive the Application's default scope.
+   */
+  scope?: string;
+  /**
+   * CP API base URL. Defaults to `INTROSPECTION_BASE_API_URL` or
+   * `https://api.introspection.dev`.
+   */
+  baseApiUrl?: string;
+  /** Custom `fetch` (for tests or non-standard runtimes). */
+  fetch?: typeof fetch;
+}
+
+/**
+ * Back-compat alias: the `client_credentials` response is the same shape as
+ * every other `/v1/oauth/token` response.
+ */
+export type ServiceAccountToken = OAuthToken;
+
+/**
+ * Mint a project-scoped CP access token from confidential service-account
+ * credentials. See {@link ServiceAccountTokenParams}.
+ *
+ * @example
+ * ```typescript
+ * const { access_token, dp_url } = await serviceAccountToken({
+ *   clientId: process.env.INTROSPECTION_SERVICE_ACCOUNT_CLIENT_ID!,
+ *   clientSecret: process.env.INTROSPECTION_SERVICE_ACCOUNT_CLIENT_SECRET!,
+ *   projectId: process.env.INTRO_PROJECT_ID!,
+ * });
+ * const client = new IntrospectionClient({ token: access_token });
+ * ```
+ */
+export async function serviceAccountToken(
+  params: ServiceAccountTokenParams,
+): Promise<OAuthToken> {
+  const form = new URLSearchParams({
+    grant_type: GRANT_TYPE_CLIENT_CREDENTIALS,
+    client_id: params.clientId,
+    client_secret: params.clientSecret,
+    project_id: params.projectId,
+  });
+  if (params.scope) form.set("scope", params.scope);
+  return postTokenForm(
+    resolveBaseApiUrl(params.baseApiUrl),
+    form,
+    resolveFetch(params.fetch),
+  );
+}
+
+export interface AuthorizationCodeParams {
+  /** The authorization code returned to the redirect URI. */
+  code: string;
+  /** Public SPA Application `client_id` (PKCE — no secret). */
+  clientId: string;
+  /** The redirect URI the code was issued for (must match the authorize call). */
+  redirectUri: string;
+  /** The PKCE `code_verifier` paired with the authorize-step challenge. */
+  codeVerifier: string;
+  /**
+   * CP API base URL. Defaults to `INTROSPECTION_BASE_API_URL` or
+   * `https://api.introspection.dev`.
+   */
+  baseApiUrl?: string;
+  /** Custom `fetch` (for tests or non-standard runtimes). */
+  fetch?: typeof fetch;
+}
+
+/**
+ * RFC 6749 / PKCE `authorization_code` exchange against CP
+ * `POST /v1/oauth/token`. Run it in your backend so the browser hosted-login
+ * flow does not hand-roll the token POST.
+ */
+export async function authorizationCodeToken(
+  params: AuthorizationCodeParams,
+): Promise<OAuthToken> {
+  const form = new URLSearchParams({
+    grant_type: GRANT_TYPE_AUTHORIZATION_CODE,
+    code: params.code,
+    client_id: params.clientId,
+    redirect_uri: params.redirectUri,
+    code_verifier: params.codeVerifier,
+  });
+  return postTokenForm(
+    resolveBaseApiUrl(params.baseApiUrl),
+    form,
+    resolveFetch(params.fetch),
+  );
+}
+
+export interface TokenExchangeParams {
+  /** The end user's subject token (e.g. a partner-IdP `id_token`). */
+  subjectToken: string;
+  /** The federated Application's `client_id` (public client — no secret). */
+  clientId: string;
+  /** Project the minted DP token is scoped to. */
+  projectId: string;
+  /**
+   * The subject token's type URI. Defaults to
+   * `urn:ietf:params:oauth:token-type:id_token`.
+   */
+  subjectTokenType?: string;
+  /** Optional space-separated scope, capped server-side. */
+  scope?: string;
+  /**
+   * CP API base URL. Defaults to `INTROSPECTION_BASE_API_URL` or
+   * `https://api.introspection.dev`.
+   */
+  baseApiUrl?: string;
+  /** Custom `fetch` (for tests or non-standard runtimes). */
+  fetch?: typeof fetch;
+}
+
+/**
+ * RFC 8693 token-exchange against CP `POST /v1/oauth/token`: trade an end
+ * user's partner-IdP token for a project-scoped DP access token for a
+ * `member_type=customer` member. Intended to run server-side in a broker (the
+ * subject token shouldn't be re-handled in the browser longer than needed).
+ *
+ * @example
+ * ```typescript
+ * const { access_token, dp_url } = await tokenExchange({
+ *   subjectToken: idTokenFromPartnerIdp,
+ *   clientId: process.env.FEDERATED_CLIENT_ID!,
+ *   projectId: process.env.INTRO_PROJECT_ID!,
+ * });
+ * ```
+ */
+export async function tokenExchange(
+  params: TokenExchangeParams,
+): Promise<OAuthToken> {
+  const form = new URLSearchParams({
+    grant_type: GRANT_TYPE_TOKEN_EXCHANGE,
+    subject_token: params.subjectToken,
+    subject_token_type: params.subjectTokenType ?? SUBJECT_TOKEN_TYPE_ID_TOKEN,
+    client_id: params.clientId,
+    project_id: params.projectId,
+  });
+  if (params.scope) form.set("scope", params.scope);
+  return postTokenForm(
+    resolveBaseApiUrl(params.baseApiUrl),
+    form,
+    resolveFetch(params.fetch),
+  );
+}

package/src/client.ts

@@ -15,6 +15,7 @@
 import type { AdvancedOptions } from "@introspection-sdk/types";
 import { logger as sdkLogger } from "./utils.js";
 import type { IntrospectionClientOptions } from "./types.js";
+import { serviceAccountToken, type ServiceAccountTokenParams } from "./auth.js";
 import { HttpClient } from "./http.js";
 import {
   attachRuntimes,
@@ -106,6 +107,43 @@ export class IntrospectionClient {
     sdkLogger.info(`IntrospectionClient initialized: api=${baseApiUrl}`);
   }
 
+  /**
+   * Authenticate as a confidential service account and return a ready
+   * client.
+   *
+   * Mints a short-lived, project-scoped CP access token via the
+   * `client_credentials` grant (see {@link serviceAccountToken}) and wires
+   * it in as the bearer token, so the runtime flow works exactly as it does
+   * with an API key:
+   *
+   * @example
+   * ```typescript
+   * const client = await IntrospectionClient.fromServiceAccount({
+   *   clientId: process.env.INTROSPECTION_SERVICE_ACCOUNT_CLIENT_ID!,
+   *   clientSecret: process.env.INTROSPECTION_SERVICE_ACCOUNT_CLIENT_SECRET!,
+   *   projectId: process.env.INTRO_PROJECT_ID!,
+   * });
+   *
+   * // Resolved fresh from the runtime name on every call.
+   * const runner = await client.runtimes("customer-agent").run({
+   *   identity: { user_id: "u_demo" },
+   * });
+   * ```
+   *
+   * The token is not auto-refreshed: it lives for `expires_in` seconds, so
+   * re-mint (call this again) for long-lived processes once it lapses.
+   */
+  static async fromServiceAccount(
+    params: ServiceAccountTokenParams & { serviceName?: string },
+  ): Promise<IntrospectionClient> {
+    const { access_token } = await serviceAccountToken(params);
+    return new IntrospectionClient({
+      token: access_token,
+      serviceName: params.serviceName,
+      advanced: { baseApiUrl: params.baseApiUrl, fetch: params.fetch },
+    });
+  }
+
   /** Close the underlying HTTP client. */
   async shutdown(): Promise<void> {
     // HttpClient has no persistent connections to close, but reserved

package/src/index.ts

@@ -12,6 +12,20 @@
 // REST client.
 export { IntrospectionClient } from "./client.js";
 
+// Machine / federated / hosted-login OAuth token helpers.
+export {
+  serviceAccountToken,
+  tokenExchange,
+  authorizationCodeToken,
+} from "./auth.js";
+export type {
+  ServiceAccountTokenParams,
+  ServiceAccountToken,
+  TokenExchangeParams,
+  AuthorizationCodeParams,
+  OAuthToken,
+} from "./auth.js";
+
 // Configuration / event types shared with the OTel surface.
 export type {
   AdvancedOptions,
@@ -22,15 +36,17 @@ export type {
 
 // Runner-bound REST namespaces (runner.tasks, runner.files,
 // runner.conversations) + HTTP/SSE.
-export { TasksApi, TaskRunsApi, RunHandle } from "./runner-resources/tasks.js";
-export type { StartParams } from "./runner-resources/tasks.js";
-export { FilesApi, FileVersionsApi } from "./runner-resources/files.js";
-export type { FileUploadBody } from "./runner-resources/files.js";
 export {
-  ConversationsApi,
   ConversationItemsApi,
-} from "./runner-resources/conversations.js";
-export { SharesApi } from "./runner-resources/shares.js";
+  ConversationsApi,
+  FileVersionsApi,
+  FilesApi,
+  RunHandle,
+  SharesApi,
+  TaskRunsApi,
+  TasksApi,
+} from "@introspection-sdk/http";
+export type { FileUploadBody, StartParams } from "@introspection-sdk/http";
 export { HttpClient } from "./http.js";
 export type { ResolvedApiConfig } from "./http.js";
 export { parseSse } from "./streaming.js";