@mitralab.io/platform-sdk 1.0.7 → 1.0.9

package/dist/index.js

@@ -1,31 +1,42 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  MitraApiError: () => MitraApiError,
-  createClient: () => createClient
-});
-module.exports = __toCommonJS(index_exports);
+// src/client.ts
+import { encodePathSegment, expectObject } from "@mitralab.io/sdk-core";
 
 // src/utils/http-client.ts
+var bearerCredentialPattern = /(Bearer\s+)\S+/gi;
+function redactText(value, currentToken) {
+  const withoutBearerCredentials = value.replace(bearerCredentialPattern, "$1[REDACTED]");
+  return currentToken ? withoutBearerCredentials.split(currentToken).join("[REDACTED]") : withoutBearerCredentials;
+}
+function redactDetails(value, currentToken) {
+  if (typeof value === "string") return redactText(value, currentToken);
+  if (Array.isArray(value)) return value.map((item) => redactDetails(item, currentToken));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, entry]) => [
+        redactText(key, currentToken),
+        redactDetails(entry, currentToken)
+      ])
+    );
+  }
+  return value;
+}
+function asErrorPayload(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  return value;
+}
+function optionalString(value) {
+  return typeof value === "string" ? value : void 0;
+}
+function buildRequestUrl(baseUrl, path, params) {
+  const url = `${baseUrl}${path}`;
+  if (!params) return url;
+  const searchParams = new URLSearchParams();
+  Object.entries(params).forEach(([key, value]) => {
+    if (value !== void 0) searchParams.append(key, String(value));
+  });
+  const queryString = searchParams.toString();
+  return queryString ? `${url}?${queryString}` : url;
+}
 var HttpClient = class {
   baseUrl;
   tokenGetter;
@@ -64,19 +75,7 @@ var HttpClient = class {
    */
   async request(path, options = {}) {
     const { method = "GET", body, headers = {}, params, isRetry } = options;
-    let url = `${this.baseUrl}${path}`;
-    if (params) {
-      const searchParams = new URLSearchParams();
-      Object.entries(params).forEach(([key, value]) => {
-        if (value !== void 0) {
-          searchParams.append(key, String(value));
-        }
-      });
-      const queryString = searchParams.toString();
-      if (queryString) {
-        url += `?${queryString}`;
-      }
-    }
+    const url = buildRequestUrl(this.baseUrl, path, params);
     const requestHeaders = {
       "Content-Type": "application/json",
       ...this.defaultHeaders,
@@ -89,8 +88,18 @@ var HttpClient = class {
     const response = await fetch(url, {
       method,
       headers: requestHeaders,
-      body: body ? JSON.stringify(body) : void 0
+      body: body ? JSON.stringify(body) : void 0,
+      redirect: "manual"
     });
+    if (response.redirected || response.type === "opaqueredirect") {
+      const error = new MitraApiError(
+        "Redirected responses are not allowed",
+        response.status,
+        "REDIRECT_NOT_ALLOWED"
+      );
+      this.onError?.(error);
+      throw error;
+    }
     if (!response.ok) {
       if (response.status === 401 && !isRetry && this.onUnauthorized) {
         const refreshed = await this.onUnauthorized();
@@ -99,11 +108,14 @@ var HttpClient = class {
         }
       }
       const errorBody = await response.json().catch(() => ({}));
+      const errorPayload = asErrorPayload(errorBody);
+      const rawMessage = optionalString(errorPayload.message);
+      const rawCode = optionalString(errorPayload.error_code);
       const error = new MitraApiError(
-        errorBody.message || `Request failed with status ${response.status}`,
+        redactText(rawMessage || `Request failed with status ${response.status}`, token),
         response.status,
-        errorBody.error_code,
-        errorBody
+        rawCode === void 0 ? void 0 : redactText(rawCode, token),
+        redactDetails(errorBody, token)
       );
       this.onError?.(error);
       throw error;
@@ -184,22 +196,31 @@ var MitraApiError = class extends Error {
   }
 };
 
+// src/core-errors.ts
+var coreErrors = {
+  configuration: (message) => new MitraApiError(message, 0, "INVALID_CONFIGURATION"),
+  invalidResponse: (message) => new MitraApiError(message, 200, "INVALID_RESPONSE")
+};
+
 // src/modules/auth.ts
+import { createAuthModule } from "@mitralab.io/sdk-core";
 var AuthModule = class {
   appId;
   _currentUser = null;
-  _accessToken = null;
-  _refreshToken = null;
+  #accessToken = null;
+  #refreshToken = null;
   refreshPromise = null;
   listeners = /* @__PURE__ */ new Set();
   storageKey;
   publicClient;
   authedClient;
+  currentUserApi;
   constructor(appId, iamBaseUrl) {
     this.appId = appId;
     this.storageKey = `mitra_auth_${appId}`;
     this.publicClient = new HttpClient({ baseUrl: iamBaseUrl, getToken: () => null });
-    this.authedClient = new HttpClient({ baseUrl: iamBaseUrl, getToken: () => this._accessToken });
+    this.authedClient = new HttpClient({ baseUrl: iamBaseUrl, getToken: () => this.#accessToken });
+    this.currentUserApi = createAuthModule(this.authedClient, coreErrors);
     this.loadFromStorage();
   }
   /** The currently authenticated user, or null. */
@@ -208,11 +229,11 @@ var AuthModule = class {
   }
   /** The current JWT access token, or null. */
   get accessToken() {
-    return this._accessToken;
+    return this.#accessToken;
   }
   /** Whether a user is currently authenticated (local check, not server-validated). */
   get isAuthenticated() {
-    return this._currentUser !== null && this._accessToken !== null;
+    return this._currentUser !== null && this.#accessToken !== null;
   }
   /**
    * Signs in a user with email and password.
@@ -237,9 +258,9 @@ var AuthModule = class {
       "/api/v1/auth/login",
       { ...credentials, appId: this.appId }
     );
-    this._accessToken = tokenResponse.accessToken;
-    this._refreshToken = tokenResponse.refreshToken;
-    const user = await this.authedClient.get("/api/v1/auth/me");
+    this.#accessToken = tokenResponse.accessToken;
+    this.#refreshToken = tokenResponse.refreshToken;
+    const user = await this.getCurrentUser();
     this.setAuthState(user, tokenResponse.accessToken, tokenResponse.refreshToken);
     return user;
   }
@@ -299,7 +320,7 @@ var AuthModule = class {
    * ```
    */
   async refreshSession() {
-    if (!this._refreshToken) return false;
+    if (!this.#refreshToken) return false;
     if (this.refreshPromise) return this.refreshPromise;
     this.refreshPromise = this.doRefresh();
     try {
@@ -323,9 +344,9 @@ var AuthModule = class {
    * ```
    */
   async me() {
-    if (!this._accessToken) return null;
+    if (!this.#accessToken) return null;
     try {
-      const user = await this.authedClient.get("/api/v1/auth/me");
+      const user = await this.getCurrentUser();
       this._currentUser = user;
       this.saveToStorage();
       this.notifyListeners();
@@ -366,7 +387,7 @@ var AuthModule = class {
    * ```
    */
   setToken(token, saveToStorage = true) {
-    this._accessToken = token;
+    this.#accessToken = token;
     if (saveToStorage) {
       this.saveToStorage();
     }
@@ -417,11 +438,11 @@ var AuthModule = class {
     try {
       const tokenResponse = await this.publicClient.post(
         "/api/v1/auth/refresh-token",
-        { refreshToken: this._refreshToken }
+        { refreshToken: this.#refreshToken }
       );
-      this._accessToken = tokenResponse.accessToken;
-      this._refreshToken = tokenResponse.refreshToken;
-      const user = await this.authedClient.get("/api/v1/auth/me");
+      this.#accessToken = tokenResponse.accessToken;
+      this.#refreshToken = tokenResponse.refreshToken;
+      const user = await this.getCurrentUser();
       this.setAuthState(user, tokenResponse.accessToken, tokenResponse.refreshToken);
       return true;
     } catch {
@@ -431,15 +452,19 @@ var AuthModule = class {
   }
   setAuthState(user, token, refreshToken) {
     this._currentUser = user;
-    this._accessToken = token;
-    this._refreshToken = refreshToken;
+    this.#accessToken = token;
+    this.#refreshToken = refreshToken;
     this.saveToStorage();
     this.notifyListeners();
   }
+  async getCurrentUser() {
+    const user = await this.currentUserApi.me();
+    return { ...user, tenantId: user.tenant.id };
+  }
   clearAuthState() {
     this._currentUser = null;
-    this._accessToken = null;
-    this._refreshToken = null;
+    this.#accessToken = null;
+    this.#refreshToken = null;
     this.removeFromStorage();
     this.notifyListeners();
   }
@@ -459,8 +484,8 @@ var AuthModule = class {
         this.storageKey,
         JSON.stringify({
           user: this._currentUser,
-          token: this._accessToken,
-          refreshToken: this._refreshToken
+          token: this.#accessToken,
+          refreshToken: this.#refreshToken
         })
       );
     } catch {
@@ -473,8 +498,8 @@ var AuthModule = class {
       if (stored) {
         const { user, token, refreshToken } = JSON.parse(stored);
         this._currentUser = user;
-        this._accessToken = token;
-        this._refreshToken = refreshToken ?? null;
+        this.#accessToken = token;
+        this.#refreshToken = refreshToken ?? null;
       }
     } catch {
       this.removeFromStorage();
@@ -490,208 +515,121 @@ var AuthModule = class {
 };
 
 // src/modules/entities.ts
+import {
+  createEntitiesModule
+} from "@mitralab.io/sdk-core";
 var EntitiesModule = class _EntitiesModule {
-  httpClient;
-  dataSourceId;
-  tableProxies = /* @__PURE__ */ new Map();
-  constructor(httpClient, dataSourceId) {
+  constructor(httpClient, _dataSourceId) {
     this.httpClient = httpClient;
-    this.dataSourceId = dataSourceId;
+    this.core = createEntitiesModule(httpClient, coreErrors);
   }
+  core;
   static createProxy(httpClient, dataSourceId) {
     const instance = new _EntitiesModule(httpClient, dataSourceId);
     return new Proxy(instance, {
-      get: (target, prop) => {
-        if (prop in target) {
-          return target[prop];
+      get(target, property, receiver) {
+        if (typeof property !== "string" || property in target) {
+          return Reflect.get(target, property, receiver);
         }
-        return target.getTable(prop);
+        return target.getTable(property);
       }
     });
   }
-  setDataSourceId(dataSourceId) {
-    this.dataSourceId = dataSourceId;
-    this.tableProxies.clear();
+  /**
+   * Preserved for Platform SDK 1.x compatibility.
+   * Records now resolve the app from authenticated context instead of a data source path.
+   */
+  setDataSourceId(_dataSourceId) {
+    this.core = createEntitiesModule(this.httpClient, coreErrors);
   }
   getTable(tableName) {
-    if (!this.tableProxies.has(tableName)) {
-      this.tableProxies.set(tableName, this.createTableAccessor(tableName));
-    }
-    return this.tableProxies.get(tableName);
-  }
-  createTableAccessor(tableName) {
-    const basePath = `/api/v1/data-sources/${this.dataSourceId}/tables/${tableName}/records`;
-    return {
-      list: async (sortOrOptions, limit, skip, fields) => {
-        let params;
-        if (typeof sortOrOptions === "string" || sortOrOptions === void 0) {
-          params = {
-            sort: sortOrOptions,
-            limit,
-            skip,
-            fields: fields?.join(",")
-          };
-        } else {
-          params = {
-            sort: sortOrOptions.sort,
-            limit: sortOrOptions.limit,
-            skip: sortOrOptions.skip,
-            fields: sortOrOptions.fields?.join(",")
-          };
-        }
-        const response = await this.httpClient.get(basePath, params);
-        return response.data;
-      },
-      filter: async (query, sort, limit, skip, fields) => {
-        const params = {
-          q: JSON.stringify(query),
-          sort,
-          limit,
-          skip,
-          fields: fields?.join(",")
-        };
-        const response = await this.httpClient.get(basePath, params);
-        return response.data;
-      },
-      get: async (id) => {
-        return this.httpClient.get(`${basePath}/${id}`);
-      },
-      create: async (data) => {
-        return this.httpClient.post(basePath, data);
-      },
-      update: async (id, data) => {
-        return this.httpClient.put(`${basePath}/${id}`, data);
-      },
-      delete: async (id) => {
-        return this.httpClient.delete(`${basePath}/${id}`);
-      },
-      deleteMany: async (query) => {
-        return this.httpClient.delete(basePath, {
-          q: JSON.stringify(query)
-        });
-      },
-      bulkCreate: async (data) => {
-        return this.httpClient.post(`${basePath}/bulk`, data);
-      }
-    };
+    return this.core.getTable(tableName);
   }
 };
 
 // src/modules/functions.ts
+import {
+  createFunctionsModule
+} from "@mitralab.io/sdk-core";
 var FunctionsModule = class {
-  httpClient;
+  core;
   constructor(httpClient) {
-    this.httpClient = httpClient;
+    this.core = createFunctionsModule(httpClient, { emptyInput: "omit-body" }, coreErrors);
   }
   /**
-   * Executes a serverless function by ID.
-   *
-   * Triggers the function's current published version with the provided input.
-   *
-   * @param functionId - UUID of the function to execute.
-   * @param input - Input data to pass to the function.
-   * @returns The execution result with status, output, and metadata.
-   * @throws {MitraApiError} On function not found (404) or unauthorized (401).
-   *
-   * @example
-   * ```typescript
-   * const execution = await mitra.functions.execute('fn-id', { key: 'value' });
-   * console.log(execution.status, execution.output);
-   * ```
+   * Executes a Function using the Platform SDK 1.x server-default invocation semantics.
+   * The runtime SDK uses an explicit invocation header instead.
    */
   async execute(functionId, input) {
-    return this.httpClient.post(
-      `/api/v1/functions/${functionId}/execute`,
-      input ? { input } : void 0
-    );
+    const execution = await this.core.execute(functionId, input);
+    if (execution.input === null) {
+      throw coreErrors.invalidResponse(
+        "Function execution response has an invalid input field"
+      );
+    }
+    return { ...execution, input: execution.input };
   }
 };
 
 // src/modules/integration.ts
+import {
+  createIntegrationModule
+} from "@mitralab.io/sdk-core";
 var IntegrationModule = class {
-  httpClient;
+  core;
   constructor(httpClient) {
-    this.httpClient = httpClient;
+    this.core = createIntegrationModule(httpClient, coreErrors);
   }
-  /**
-   * Executes a pre-defined integration resource by ID.
-   *
-   * The resource's endpoint, method, and body are resolved server-side
-   * using the provided parameters. Only declared parameters can be passed.
-   *
-   * @param resourceId - UUID of the integration resource.
-   * @param params - Named parameters declared in the resource's params schema.
-   * @returns Proxy result with status, headers, body, and execution metadata.
-   * @throws {MitraApiError} On resource not found (404) or external API failure.
-   *
-   * @example
-   * ```typescript
-   * const result = await mitra.integration.executeResource('resource-id', {
-   *   descricao: 'Notebook',
-   *   limit: 10,
-   * });
-   * console.log(result.body);
-   * ```
-   */
-  async executeResource(resourceId, params) {
-    return this.httpClient.post(
-      `/api/v1/proxy/resources/${resourceId}/execute`,
-      { params }
-    );
+  executeResource(resourceId, params) {
+    return this.core.executeResource(resourceId, params);
   }
-  /**
-   * Executes a proxied HTTP request through an integration config.
-   *
-   * The Mitra server handles authentication and injects credentials automatically.
-   * Note: integrations configured with RESOURCE_ONLY mode will block direct proxy access.
-   *
-   * @param configId - UUID of the integration config.
-   * @param request - The HTTP request to proxy (method, endpoint, body, etc.).
-   * @returns Proxy result with status, headers, body, and execution metadata.
-   * @throws {MitraApiError} On config not found (404) or external API failure.
-   */
-  async execute(configId, request) {
-    return this.httpClient.post(
-      `/api/v1/proxy/template-configs/${configId}/execute`,
-      { ...request, source: "SDK" }
-    );
+  execute(configId, request) {
+    return this.core.execute(configId, request);
   }
 };
 
 // src/modules/queries.ts
+import {
+  createQueriesModule
+} from "@mitralab.io/sdk-core";
 var QueriesModule = class {
-  httpClient;
   dataSourceId = "";
+  core;
   constructor(httpClient) {
-    this.httpClient = httpClient;
+    this.core = createQueriesModule(httpClient, () => this.dataSourceId, coreErrors);
   }
-  /** @internal Called by client.init() to set the resolved data source. */
+  /** Called by `client.init()` to set the app's resolved data source. */
   setDataSourceId(dataSourceId) {
     this.dataSourceId = dataSourceId;
   }
-  /**
-   * Executes a named query.
-   *
-   * @param id - UUID of the custom query.
-   * @param parameters - Named parameters for the prepared statement.
-   * @returns Query result with rows and affected row count.
-   * @throws {MitraApiError} On query not found (404).
-   *
-   * @example
-   * ```typescript
-   * const result = await mitra.queries.execute('query-id', { status: 'active' });
-   * console.log(`Found ${result.rows.length} rows`);
-   * ```
-   */
   async execute(id, parameters) {
-    return this.httpClient.post(
-      `/api/v1/custom-queries/${id}/execute`,
-      { datasourceId: this.dataSourceId, parameters }
-    );
+    const result = await this.core.execute(id, parameters);
+    return { ...result, affectedRows: result.affectedRows ?? null };
   }
 };
 
 // src/client.ts
+function expectAppInfoResponse(value) {
+  const response = expectObject(
+    value,
+    "App info response",
+    coreErrors
+  );
+  if (typeof response.dataSourceId !== "string" || !response.dataSourceId.trim()) {
+    throw coreErrors.invalidResponse(
+      "App info response has an invalid dataSourceId field"
+    );
+  }
+  if (typeof response.allowSignup !== "boolean") {
+    throw coreErrors.invalidResponse(
+      "App info response has an invalid allowSignup field"
+    );
+  }
+  return {
+    dataSourceId: response.dataSourceId,
+    allowSignup: response.allowSignup
+  };
+}
 function createClient(config) {
   const { appId, apiUrl, onError } = config;
   const iamUrl = `${apiUrl}/iam`;
@@ -735,8 +673,10 @@ function createClient(config) {
       baseUrl: codeStudioUrl,
       getToken: () => null
     });
-    const appInfo = await publicClient.get(
-      `/api/v1/apps/${appId}/info`
+    const appInfo = expectAppInfoResponse(
+      await publicClient.get(
+        `/api/v1/apps/${encodePathSegment(appId, "appId", coreErrors)}/info`
+      )
     );
     entitiesModule.setDataSourceId(appInfo.dataSourceId);
     queriesModule.setDataSourceId(appInfo.dataSourceId);
@@ -756,8 +696,7 @@ function createClient(config) {
     config
   };
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
+export {
   MitraApiError,
   createClient
-});
+};

package/package.json

@@ -1,27 +1,46 @@
 {
   "name": "@mitralab.io/platform-sdk",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "JavaScript/TypeScript SDK for building apps on the Mitra Platform",
-  "main": "dist/index.js",
-  "module": "dist/index.mjs",
-  "types": "dist/index.d.ts",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.js"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
   ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
   "scripts": {
     "build": "tsup src/index.ts --format cjs,esm --dts --clean",
     "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
     "lint": "eslint src --ext .ts",
-    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --coverage",
     "test:watch": "vitest",
-    "prepublishOnly": "npm run build"
+    "check:package-types": "npx --yes @arethetypeswrong/cli@0.18.5 --pack .",
+    "pack:check": "npm pack --dry-run",
+    "smoke:package": "node scripts/smoke-package.mjs",
+    "check": "npm run lint && npm run typecheck && npm test && npm run build && npm run pack:check && npm run smoke:package",
+    "prepublishOnly": "npm run check && npm run check:package-types"
   },
   "keywords": [
     "mitra",
@@ -42,18 +61,27 @@
   "bugs": {
     "url": "https://github.com/mitralab-dev/mitra-platform-sdk/issues"
   },
+  "dependencies": {
+    "@mitralab.io/sdk-core": "^0.1.0"
+  },
   "devDependencies": {
-    "@types/node": "^25.3.0",
-    "@vitest/coverage-v8": "^4.1.2",
-    "eslint": "^10.0.1",
-    "tsup": "^8.0.1",
-    "typescript": "^6.0.2",
-    "vitest": "^4.1.2"
+    "@eslint/js": "^9.39.1",
+    "@types/node": "^22.15.0",
+    "@vitest/coverage-v8": "^3.2.4",
+    "eslint": "^9.39.1",
+    "globals": "^16.5.0",
+    "tsup": "^8.5.1",
+    "typescript": "~5.9.3",
+    "typescript-eslint": "~8.55.0",
+    "vite": "~6.4.3",
+    "vitest": "^3.2.4"
   },
   "engines": {
     "node": ">=18.0.0"
   },
   "overrides": {
-    "rollup": "^4.59.0"
+    "esbuild": "^0.25.0",
+    "rollup": "^4.59.0",
+    "test-exclude": "7.0.1"
   }
 }