@maximem/synap-js-sdk 0.4.1 → 0.4.3

package/dist/index.d.cts

@@ -299,6 +299,18 @@ declare class HttpTransport {
     currentCredentials(): Credentials;
     /** Write back identity resolved from `GET /api/v1/auth/whoami`. */
     updateCredentials(patch: Partial<Credentials>): void;
+    /**
+     * The instance's scoping mode, from whoami. Lives here rather than on the
+     * client because every interface factory already receives the transport,
+     * and it is per-client, so a module-level global would be wrong the moment a
+     * process holds two clients.
+     *
+     * undefined means the server did not report it, which is true of any
+     * deployment older than the field, and must mean "enforce nothing".
+     */
+    userContextIsolation: string | undefined;
+    /** Refuse a customer_id on a B2C instance, at the call site. */
+    checkCustomerId(customerId: unknown, where: string): void;
     setTimeouts(timeouts: Partial<TimeoutConfig>): void;
     /** `null` restores the default policy, matching Python's `retry_policy=None`. */
     setRetryPolicy(policy: Partial<RetryPolicy> | null): void;

package/dist/index.d.ts

@@ -299,6 +299,18 @@ declare class HttpTransport {
     currentCredentials(): Credentials;
     /** Write back identity resolved from `GET /api/v1/auth/whoami`. */
     updateCredentials(patch: Partial<Credentials>): void;
+    /**
+     * The instance's scoping mode, from whoami. Lives here rather than on the
+     * client because every interface factory already receives the transport,
+     * and it is per-client, so a module-level global would be wrong the moment a
+     * process holds two clients.
+     *
+     * undefined means the server did not report it, which is true of any
+     * deployment older than the field, and must mean "enforce nothing".
+     */
+    userContextIsolation: string | undefined;
+    /** Refuse a customer_id on a B2C instance, at the call site. */
+    checkCustomerId(customerId: unknown, where: string): void;
     setTimeouts(timeouts: Partial<TimeoutConfig>): void;
     /** `null` restores the default policy, matching Python's `retry_policy=None`. */
     setRetryPolicy(policy: Partial<RetryPolicy> | null): void;

package/dist/index.js

@@ -200,6 +200,16 @@ var Heartbeat = class {
   }
 };
 
+// src/scoping.ts
+var B2C_ISOLATION = "equals_customer";
+function checkCustomerId(isolation, customerId, where, instanceId) {
+  if (customerId === void 0 || customerId === null || customerId === "") return;
+  if (isolation !== B2C_ISOLATION) return;
+  throw new InvalidInputError(
+    `${where}: customer_id is not accepted on this instance${instanceId ? ` (${instanceId})` : ""}, which is B2C (user_context_isolation='${B2C_ISOLATION}'). Send user_id only; it is the whole identity, and the server files and reads your data under it. Received customer_id=${JSON.stringify(customerId)}.`
+  );
+}
+
 // src/transport/http.ts
 var DEFAULT_BASE_URL = "https://synap-cloud-prod.maximem.ai";
 var DEFAULT_TIMEOUTS = { connect: 5, read: 30, write: 10 };
@@ -253,6 +263,25 @@ var HttpTransport = class {
   updateCredentials(patch) {
     this.#credentials = { ...this.#credentials, ...patch };
   }
+  /**
+   * The instance's scoping mode, from whoami. Lives here rather than on the
+   * client because every interface factory already receives the transport,
+   * and it is per-client, so a module-level global would be wrong the moment a
+   * process holds two clients.
+   *
+   * undefined means the server did not report it, which is true of any
+   * deployment older than the field, and must mean "enforce nothing".
+   */
+  userContextIsolation = void 0;
+  /** Refuse a customer_id on a B2C instance, at the call site. */
+  checkCustomerId(customerId, where) {
+    checkCustomerId(
+      this.userContextIsolation,
+      customerId,
+      where,
+      this.#credentials.instanceId
+    );
+  }
   setTimeouts(timeouts) {
     this.timeouts = { ...this.timeouts, ...timeouts };
   }
@@ -527,6 +556,10 @@ function buildFetchRequest(scope, options) {
 }
 async function fetchContext(transport, scope, options = {}, hooks = {}) {
   const startedAt = Date.now();
+  transport.checkCustomerId(
+    opt(options, "customer_id", "customerId"),
+    `${scope}.context.fetch`
+  );
   const anticipated = hooks.beforeFetch?.(scope, options) ?? null;
   if (anticipated !== null) {
     hooks.onServedFromCache?.(scope, options, anticipated);
@@ -787,6 +820,8 @@ var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "error",
 function createMemoriesInterface(transport) {
   return {
     async create(options) {
+      const o2 = options;
+      transport.checkCustomerId(o2["customer_id"] ?? o2["customerId"], "memories.create");
       return transport.request("memories_create", { body: buildCreateBody(options) });
     },
     async batch_create(options) {
@@ -803,7 +838,7 @@ function createMemoriesInterface(transport) {
       const userId = options.user_id ?? options.userId;
       const customerId = options.customer_id ?? options.customerId;
       if (!userId) throw new InvalidInputError("user_id is required");
-      if (!customerId) throw new InvalidInputError("customer_id is required");
+      transport.checkCustomerId(customerId, "memories.create_from_file");
       const filePath = options.file_path ?? options.filePath;
       const sources = [filePath, options.file, options.text].filter((v) => v !== void 0);
       if (sources.length === 0) {
@@ -946,7 +981,6 @@ function buildRecordMessageBody(options) {
     throw new InvalidInputError("content is required");
   }
   if (!userId) throw new InvalidInputError("user_id is required");
-  if (!customerId) throw new InvalidInputError("customer_id is required");
   const body = {
     conversation_id: conversationId,
     role: options.role,
@@ -1051,6 +1085,10 @@ function createConversationNamespace(transport, subscribers = new CompactionSubs
   };
   return {
     async record_message(options) {
+      transport.checkCustomerId(
+        options["customer_id"] ?? options["customerId"],
+        "conversation.record_message"
+      );
       const body = buildRecordMessageBody(options);
       const result = await transport.request("conversations_messages", { body });
       onTurn({
@@ -1069,6 +1107,13 @@ function createConversationNamespace(transport, subscribers = new CompactionSubs
       if (!Array.isArray(messages) || messages.length === 0) {
         throw new InvalidInputError("messages must be a non-empty array");
       }
+      for (const m of messages) {
+        const mo = m;
+        transport.checkCustomerId(
+          mo["customer_id"] ?? mo["customerId"],
+          "conversation.record_messages_batch"
+        );
+      }
       const bodies = messages.map(buildRecordMessageBody);
       const result = await transport.request("conversations_messages_batch", {
         body: { messages: bodies }
@@ -1238,7 +1283,7 @@ function envPort() {
   return Number.isFinite(parsed) ? parsed : void 0;
 }
 function envTls() {
-  const raw = getEnv("SYNAP_GRPC_USE_TLS");
+  const raw = getEnv("SYNAP_GRPC_USE_TLS") ?? getEnv("SYNAP_GRPC_TLS");
   if (raw === void 0 || raw === "") return void 0;
   return !["0", "false", "no", "off"].includes(raw.trim().toLowerCase());
 }
@@ -2168,6 +2213,7 @@ var SynapClient = class {
   #fetchHooks;
   constructor(options = {}) {
     const credentials = resolveCredentials(options);
+    const resolvedBaseUrl = resolveBaseUrl(options);
     validateInstanceId(credentials.instanceId);
     const registryKey = buildRegistryKey(credentials.instanceId, credentials.apiKey);
     if (options._force_new !== true) {
@@ -2185,7 +2231,12 @@ var SynapClient = class {
     this.#registryKeys = options._force_new === true ? [] : [registryKey];
     this.#transport = new HttpTransport({
       credentials,
-      ...options.baseUrl !== void 0 ? { baseUrl: options.baseUrl } : {},
+      // SYNAP_BASE_URL is honoured, as Python does (sdk.py) and as the 0.3.x
+      // wrapper did. Ignoring it was a wrong-DESTINATION bug rather than a
+      // missing convenience: anyone pointing at a self-hosted or staging
+      // deployment through the environment would silently have started sending
+      // their data to production on upgrade.
+      ...resolvedBaseUrl !== void 0 ? { baseUrl: resolvedBaseUrl } : {},
       ...options.timeouts !== void 0 ? { timeouts: options.timeouts } : {},
       ...options.retryPolicy !== void 0 ? { retryPolicy: options.retryPolicy } : {},
       ...options.keepAlive !== void 0 ? { keepAlive: options.keepAlive } : {},
@@ -2371,6 +2422,8 @@ var SynapClient = class {
       const whoami = await this.#transport.request("whoami", {});
       const resolvedClientId = String(whoami["client_id"] ?? "");
       const resolvedInstanceId = String(whoami["instance_id"] ?? "");
+      const iso2 = whoami["user_context_isolation"];
+      this.#transport.userContextIsolation = typeof iso2 === "string" ? iso2 : void 0;
       this.#transport.updateCredentials({
         ...resolvedClientId !== "" && credentials.clientId === "" ? { clientId: resolvedClientId } : {},
         ...resolvedInstanceId !== "" && credentials.instanceId === "" ? { instanceId: resolvedInstanceId } : {}
@@ -2635,6 +2688,11 @@ function pick3(o2, snake, camel) {
   const a = o2[snake];
   return a !== void 0 ? a : o2[camel];
 }
+function resolveBaseUrl(options) {
+  if (options.baseUrl !== void 0) return options.baseUrl;
+  const fromEnv = getEnv("SYNAP_BASE_URL")?.trim();
+  return fromEnv !== void 0 && fromEnv !== "" ? fromEnv : void 0;
+}
 function resolveCredentials(options) {
   const apiKey = options.apiKey ?? getEnv("SYNAP_API_KEY");
   if (!apiKey) {