@mitralab.io/platform-sdk 1.1.0-beta.2 → 1.1.0-beta.3

package/README.md

@@ -78,6 +78,30 @@ Authentication state is stored under `mitra_auth_{appId}`. Before each authentic
 
 The generated-application authentication flow is Google SSO. The old native `signIn` and `signUp` names fail locally with `UNSUPPORTED_AUTH_METHOD` because IAM has no email/password endpoints. Deprecated login bindings remain available only through the legacy reexports.
 
+### Signing in as a process
+
+Google and Microsoft SSO both need a person to complete a redirect. A process that runs on its own -
+a cron, a background collector, another service - signs in with an api key created in
+**Settings -> API keys**:
+
+```typescript
+const mitra = createClient({ appId, apiUrl, apiKey: process.env.MITRA_API_KEY })
+
+await mitra.auth.signInWithApiKey()
+```
+
+Which key to create depends on what the process does. A **Business** key reaches the published
+product: read and write records, run queries, execute functions and integrations. A **Developer**
+key adds authoring. An **Administrator** key belongs to a workspace rather than a product; the SDK
+issues this app's token from it, and the platform decides on that call what the key's owner
+actually reaches here, so the key never widens anyone's access.
+
+This session is not written to storage and carries no refresh token. The key does not expire and is
+revoked by deleting it, so renewing means signing in again rather than holding a second secret.
+
+**Server runtimes only.** In a browser the key would be served to every visitor inside the bundle,
+so the method refuses to run when a `window` exists.
+
 An embedded preview can adopt the app-scoped session it receives from the platform without exchanging it:
 
 ```typescript

package/dist/index.cjs

@@ -60,7 +60,7 @@ function stripTrailingSlashes(value) {
 }
 
 // src/client.ts
-var import_sdk_core9 = require("@mitralab.io/sdk-core");
+var import_sdk_core10 = require("@mitralab.io/sdk-core");
 
 // src/utils/http-client.ts
 var bearerCredentialPattern = /(Bearer\s+)\S+/gi;
@@ -396,10 +396,46 @@ function adoptLegacySession(session) {
 }
 
 // src/modules/auth.ts
-var import_sdk_core2 = require("@mitralab.io/sdk-core");
+var import_sdk_core3 = require("@mitralab.io/sdk-core");
 
-// src/modules/google-auth.ts
+// src/modules/api-key-auth.ts
 var import_sdk_core = require("@mitralab.io/sdk-core");
+async function withoutLeakingKey(apiKey, call) {
+  try {
+    return await call();
+  } catch (error) {
+    if (error instanceof MitraApiError && error.message.includes(apiKey)) {
+      throw new MitraApiError(error.message.split(apiKey).join("[REDACTED]"), error.status);
+    }
+    throw error;
+  }
+}
+function assertServerRuntime() {
+  if (globalThis.window !== void 0) {
+    throw new MitraApiError(
+      "Api key authentication runs only on a server. In a browser the key would be served to every visitor; sign in with Google or Microsoft instead.",
+      400
+    );
+  }
+}
+async function resolveApiKeySession(publicClient, appId, apiKey) {
+  return (0, import_sdk_core.resolveApiKeyToken)(
+    (path, init) => withoutLeakingKey(
+      apiKey,
+      () => publicClient.request(path, {
+        method: "POST",
+        ...init.body === void 0 ? {} : { body: init.body },
+        ...init.bearer === void 0 ? {} : { headers: { Authorization: `Bearer ${init.bearer}` } }
+      })
+    ),
+    appId,
+    apiKey,
+    coreErrors
+  );
+}
+
+// src/modules/google-auth.ts
+var import_sdk_core2 = require("@mitralab.io/sdk-core");
 var RESULT_TYPE = "mitra-oauth-result";
 var PROVIDER_LABELS = {
   google: "Google",
@@ -410,7 +446,7 @@ var POPUP_HEIGHT = 600;
 var POPUP_TIMEOUT_MS = 5 * 60 * 1e3;
 var POPUP_CLOSED_POLL_MS = 500;
 function expectAuthTokenResponse(value) {
-  const response = (0, import_sdk_core.expectObject)(
+  const response = (0, import_sdk_core2.expectObject)(
     value,
     "Authentication token response",
     coreErrors
@@ -685,6 +721,7 @@ function isDefinitiveRefreshFailure(error) {
 }
 var AuthModule = class {
   appId;
+  defaultApiKey;
   _currentUser = null;
   #accessToken = null;
   #refreshToken = null;
@@ -705,6 +742,7 @@ var AuthModule = class {
     const apiUrl = stripTrailingSlashes(
       options.apiUrl ?? (trimmedIamBaseUrl.endsWith("/iam") ? trimmedIamBaseUrl.slice(0, -"/iam".length) : trimmedIamBaseUrl)
     );
+    this.defaultApiKey = options.apiKey;
     this.storageKey = `mitra_auth_${appId}`;
     this.publicClient = new HttpClient({ baseUrl: iamBaseUrl, getToken: () => null });
     this.authedClient = new HttpClient({
@@ -713,7 +751,7 @@ var AuthModule = class {
       beforeAuthenticatedRequest: () => this.ensureFreshSession().then(() => void 0),
       onUnauthorized: (requestToken) => this.handleUnauthorized(requestToken)
     });
-    this.currentUserApi = (0, import_sdk_core2.createAuthModule)(this.authedClient, coreErrors);
+    this.currentUserApi = (0, import_sdk_core3.createAuthModule)(this.authedClient, coreErrors);
     this.googleAuth = new GoogleAuthFlow({
       appId,
       apiUrl,
@@ -791,6 +829,51 @@ var AuthModule = class {
   async signInWithGoogle(options = {}) {
     return this.establishSession(await this.googleAuth.signIn(options));
   }
+  /**
+   * Signs in as a process, with an api key instead of a person's SSO session.
+   *
+   * Use this where nobody can complete a redirect: a cron, a background collector, another
+   * service. Create the key in Settings -> API keys. A Business key reaches the published
+   * product, a Developer key adds authoring, and an Administrator key belongs to a workspace -
+   * from that one the platform issues this app's token, deciding then and there what the key's
+   * owner actually reaches here.
+   *
+   * The session is not written to storage and carries no refresh token: the key does not
+   * expire and is revoked by deleting it, so renewing means signing in again.
+   *
+   * Server runtimes only. In a browser the key would ship inside the bundle, so this method
+   * refuses to run there.
+   *
+   * @param apiKey - The key to use. Defaults to `apiKey` from the client configuration.
+   * @returns The user the key belongs to.
+   *
+   * @example
+   * ```typescript
+   * const mitra = createClient({ appId, apiUrl, apiKey: process.env.MITRA_API_KEY });
+   * await mitra.auth.signInWithApiKey();
+   * ```
+   */
+  async signInWithApiKey(apiKey = this.defaultApiKey) {
+    assertServerRuntime();
+    if (!apiKey?.trim()) {
+      throw new MitraApiError(
+        "No api key was given. Pass one to signInWithApiKey, or set apiKey when creating the client.",
+        400
+      );
+    }
+    const token = await resolveApiKeySession(this.publicClient, this.appId, apiKey);
+    if (!this.belongsToConfiguredApp(token)) {
+      throw new MitraApiError("This api key does not reach the app this client is configured for.", 403);
+    }
+    this.invalidatePendingRefreshes();
+    this.#accessToken = token;
+    this.#refreshToken = null;
+    const user = await this.getCurrentUser();
+    this._currentUser = user;
+    this.notifySessionListeners();
+    this.notifyListeners();
+    return user;
+  }
   /**
    * Completes a Google redirect response from `#codeMitra` and `#stateMitra`.
    *
@@ -1270,11 +1353,11 @@ var AuthModule = class {
 };
 
 // src/modules/entities.ts
-var import_sdk_core3 = require("@mitralab.io/sdk-core");
+var import_sdk_core4 = require("@mitralab.io/sdk-core");
 var EntitiesModule = class _EntitiesModule {
   constructor(httpClient, _dataSourceId) {
     this.httpClient = httpClient;
-    this.core = (0, import_sdk_core3.createEntitiesModule)(httpClient, coreErrors);
+    this.core = (0, import_sdk_core4.createEntitiesModule)(httpClient, coreErrors);
   }
   core;
   static createProxy(httpClient, dataSourceId) {
@@ -1293,7 +1376,7 @@ var EntitiesModule = class _EntitiesModule {
    * Records now resolve the app from authenticated context instead of a data source path.
    */
   setDataSourceId(_dataSourceId) {
-    this.core = (0, import_sdk_core3.createEntitiesModule)(this.httpClient, coreErrors);
+    this.core = (0, import_sdk_core4.createEntitiesModule)(this.httpClient, coreErrors);
   }
   getTable(tableName) {
     return this.core.getTable(tableName);
@@ -1301,11 +1384,11 @@ var EntitiesModule = class _EntitiesModule {
 };
 
 // src/modules/functions.ts
-var import_sdk_core4 = require("@mitralab.io/sdk-core");
+var import_sdk_core5 = require("@mitralab.io/sdk-core");
 var FunctionsModule = class {
   core;
   constructor(httpClient) {
-    this.core = (0, import_sdk_core4.createFunctionsModule)(
+    this.core = (0, import_sdk_core5.createFunctionsModule)(
       httpClient,
       { emptyInput: "omit-body", executeInvocationType: "sync" },
       coreErrors
@@ -1332,13 +1415,13 @@ var FunctionsModule = class {
 };
 
 // src/modules/integration.ts
-var import_sdk_core5 = require("@mitralab.io/sdk-core");
+var import_sdk_core6 = require("@mitralab.io/sdk-core");
 var IntegrationModule = class {
   core;
   configs;
   constructor(httpClient) {
-    this.core = (0, import_sdk_core5.createIntegrationModule)(httpClient, coreErrors);
-    this.configs = (0, import_sdk_core5.createIntegrationAdminModule)(httpClient, coreErrors);
+    this.core = (0, import_sdk_core6.createIntegrationModule)(httpClient, coreErrors);
+    this.configs = (0, import_sdk_core6.createIntegrationAdminModule)(httpClient, coreErrors);
   }
   /** Lists the current app's integration configs without exposing admin mutations. */
   list(options) {
@@ -1357,11 +1440,11 @@ var IntegrationModule = class {
 };
 
 // src/modules/queries.ts
-var import_sdk_core6 = require("@mitralab.io/sdk-core");
+var import_sdk_core7 = require("@mitralab.io/sdk-core");
 var QueriesModule = class {
   core;
   constructor(httpClient) {
-    this.core = (0, import_sdk_core6.createQueriesModule)(httpClient, coreErrors);
+    this.core = (0, import_sdk_core7.createQueriesModule)(httpClient, coreErrors);
   }
   /**
    * @deprecated Preserved for Platform SDK 1.x source compatibility. Data Manager now resolves
@@ -1375,7 +1458,7 @@ var QueriesModule = class {
 };
 
 // src/modules/agent-tasks.ts
-var import_sdk_core7 = require("@mitralab.io/sdk-core");
+var import_sdk_core8 = require("@mitralab.io/sdk-core");
 
 // src/modules/agent-session.ts
 var CONNECT_TIMEOUT_MS = 15e3;
@@ -1588,23 +1671,23 @@ var BrowserAgentTaskEventSource = class {
 
 // src/modules/agent-tasks.ts
 function createBrowserAgentTasksModule(httpClient, auth, apiUrl) {
-  const tasks = (0, import_sdk_core7.createAgentTasksModule)(httpClient, coreErrors);
-  const manager = (0, import_sdk_core7.createAgentTaskSessionManager)({
+  const tasks = (0, import_sdk_core8.createAgentTasksModule)(httpClient, coreErrors);
+  const manager = (0, import_sdk_core8.createAgentTaskSessionManager)({
     tasks,
     eventSource: new BrowserAgentTaskEventSource(auth, apiUrl)
   });
-  return (0, import_sdk_core7.withAgentTaskSessions)(tasks, manager);
+  return (0, import_sdk_core8.withAgentTaskSessions)(tasks, manager);
 }
 
 // src/modules/agent-credentials.ts
-var import_sdk_core8 = require("@mitralab.io/sdk-core");
+var import_sdk_core9 = require("@mitralab.io/sdk-core");
 function requireProvider(provider, allowed, flow) {
   if (!allowed.includes(provider)) {
     throw new TypeError(`${flow} does not support provider ${provider}.`);
   }
 }
 function createBrowserAgentCredentialsModule(httpClient) {
-  const core = (0, import_sdk_core8.createAgentCredentialsModule)(httpClient, coreErrors);
+  const core = (0, import_sdk_core9.createAgentCredentialsModule)(httpClient, coreErrors);
   return {
     list: () => core.list(),
     listModels: (agentId) => core.listModels(agentId),
@@ -1637,7 +1720,7 @@ function createBrowserAgentCredentialsModule(httpClient) {
 
 // src/client.ts
 function expectAppInfoResponse(value) {
-  const response = (0, import_sdk_core9.expectObject)(
+  const response = (0, import_sdk_core10.expectObject)(
     value,
     "App info response",
     coreErrors
@@ -1658,7 +1741,7 @@ function expectAppInfoResponse(value) {
   };
 }
 function createClient(config) {
-  const { appId, apiUrl, authPageUrl, onError } = config;
+  const { appId, apiUrl, apiKey, authPageUrl, onError } = config;
   const gatewayUrl = stripTrailingSlashes(apiUrl);
   const iamUrl = `${gatewayUrl}/iam`;
   const dataManagerUrl = `${gatewayUrl}/data-manager`;
@@ -1666,7 +1749,7 @@ function createClient(config) {
   const integrationUrl = `${gatewayUrl}/integration`;
   const codeStudioUrl = `${gatewayUrl}/code-studio`;
   const copilotUrl = `${gatewayUrl}/copilot`;
-  const authModule = new AuthModule(appId, iamUrl, { apiUrl: gatewayUrl, authPageUrl });
+  const authModule = new AuthModule(appId, iamUrl, { apiUrl: gatewayUrl, authPageUrl, apiKey });
   const authSession = getAuthSessionPort(authModule);
   const onUnauthorized = (requestToken) => authSession.handleUnauthorized(requestToken);
   const beforeAuthenticatedRequest = () => authModule.ensureFreshSession().then(() => void 0);
@@ -1689,7 +1772,7 @@ function createClient(config) {
     defaultHeaders
   });
   const functionsModule = new FunctionsModule(functionsHttpClient);
-  const publicFunctionsModule = (0, import_sdk_core9.createPublicFunctionsModule)(
+  const publicFunctionsModule = (0, import_sdk_core10.createPublicFunctionsModule)(
     new HttpClient({ baseUrl: functionsUrl, getToken: () => null }),
     coreErrors
   );
@@ -1730,7 +1813,7 @@ function createClient(config) {
     });
     const appInfo = expectAppInfoResponse(
       await publicClient.get(
-        `/api/v1/apps/${(0, import_sdk_core9.encodePathSegment)(appId, "appId", coreErrors)}/info`
+        `/api/v1/apps/${(0, import_sdk_core10.encodePathSegment)(appId, "appId", coreErrors)}/info`
       )
     );
     if (appInfo.dataSourceId) {

package/dist/index.d.cts

@@ -216,6 +216,8 @@ type AuthStateChangeCallback = (user: User | null) => void;
 interface AuthModuleOptions {
     apiUrl?: string;
     authPageUrl?: string;
+    /** Default api key for `signInWithApiKey`, taken from the client configuration. */
+    apiKey?: string;
 }
 /**
  * Authentication module for managing user sessions.
@@ -233,6 +235,7 @@ interface AuthModuleOptions {
 declare class AuthModule {
     #private;
     private readonly appId;
+    private readonly defaultApiKey;
     private _currentUser;
     private sessionGeneration;
     private refreshFlight;
@@ -283,6 +286,31 @@ declare class AuthModule {
      * ```
      */
     signInWithGoogle(options?: GoogleSignInOptions): Promise<User>;
+    /**
+     * Signs in as a process, with an api key instead of a person's SSO session.
+     *
+     * Use this where nobody can complete a redirect: a cron, a background collector, another
+     * service. Create the key in Settings -> API keys. A Business key reaches the published
+     * product, a Developer key adds authoring, and an Administrator key belongs to a workspace -
+     * from that one the platform issues this app's token, deciding then and there what the key's
+     * owner actually reaches here.
+     *
+     * The session is not written to storage and carries no refresh token: the key does not
+     * expire and is revoked by deleting it, so renewing means signing in again.
+     *
+     * Server runtimes only. In a browser the key would ship inside the bundle, so this method
+     * refuses to run there.
+     *
+     * @param apiKey - The key to use. Defaults to `apiKey` from the client configuration.
+     * @returns The user the key belongs to.
+     *
+     * @example
+     * ```typescript
+     * const mitra = createClient({ appId, apiUrl, apiKey: process.env.MITRA_API_KEY });
+     * await mitra.auth.signInWithApiKey();
+     * ```
+     */
+    signInWithApiKey(apiKey?: string | undefined): Promise<User>;
     /**
      * Completes a Google redirect response from `#codeMitra` and `#stateMitra`.
      *
@@ -593,6 +621,11 @@ interface MitraClientConfig {
      * Found in the Mitra Code Studio dashboard.
      */
     appId: string;
+    /**
+     * Api key for server-side authentication, used by `auth.signInWithApiKey()`.
+     * Never set this in code that reaches a browser: it would ship in the bundle.
+     */
+    apiKey?: string;
     /**
      * Base URL for the Mitra API (Kong Gateway).
      * Injected automatically via `VITE_MITRA_API_URL` environment variable

package/dist/index.d.ts

@@ -216,6 +216,8 @@ type AuthStateChangeCallback = (user: User | null) => void;
 interface AuthModuleOptions {
     apiUrl?: string;
     authPageUrl?: string;
+    /** Default api key for `signInWithApiKey`, taken from the client configuration. */
+    apiKey?: string;
 }
 /**
  * Authentication module for managing user sessions.
@@ -233,6 +235,7 @@ interface AuthModuleOptions {
 declare class AuthModule {
     #private;
     private readonly appId;
+    private readonly defaultApiKey;
     private _currentUser;
     private sessionGeneration;
     private refreshFlight;
@@ -283,6 +286,31 @@ declare class AuthModule {
      * ```
      */
     signInWithGoogle(options?: GoogleSignInOptions): Promise<User>;
+    /**
+     * Signs in as a process, with an api key instead of a person's SSO session.
+     *
+     * Use this where nobody can complete a redirect: a cron, a background collector, another
+     * service. Create the key in Settings -> API keys. A Business key reaches the published
+     * product, a Developer key adds authoring, and an Administrator key belongs to a workspace -
+     * from that one the platform issues this app's token, deciding then and there what the key's
+     * owner actually reaches here.
+     *
+     * The session is not written to storage and carries no refresh token: the key does not
+     * expire and is revoked by deleting it, so renewing means signing in again.
+     *
+     * Server runtimes only. In a browser the key would ship inside the bundle, so this method
+     * refuses to run there.
+     *
+     * @param apiKey - The key to use. Defaults to `apiKey` from the client configuration.
+     * @returns The user the key belongs to.
+     *
+     * @example
+     * ```typescript
+     * const mitra = createClient({ appId, apiUrl, apiKey: process.env.MITRA_API_KEY });
+     * await mitra.auth.signInWithApiKey();
+     * ```
+     */
+    signInWithApiKey(apiKey?: string | undefined): Promise<User>;
     /**
      * Completes a Google redirect response from `#codeMitra` and `#stateMitra`.
      *
@@ -593,6 +621,11 @@ interface MitraClientConfig {
      * Found in the Mitra Code Studio dashboard.
      */
     appId: string;
+    /**
+     * Api key for server-side authentication, used by `auth.signInWithApiKey()`.
+     * Never set this in code that reaches a browser: it would ship in the bundle.
+     */
+    apiKey?: string;
     /**
      * Base URL for the Mitra API (Kong Gateway).
      * Injected automatically via `VITE_MITRA_API_URL` environment variable

package/dist/index.js

@@ -348,6 +348,42 @@ function adoptLegacySession(session) {
 // src/modules/auth.ts
 import { createAuthModule } from "@mitralab.io/sdk-core";
 
+// src/modules/api-key-auth.ts
+import { resolveApiKeyToken } from "@mitralab.io/sdk-core";
+async function withoutLeakingKey(apiKey, call) {
+  try {
+    return await call();
+  } catch (error) {
+    if (error instanceof MitraApiError && error.message.includes(apiKey)) {
+      throw new MitraApiError(error.message.split(apiKey).join("[REDACTED]"), error.status);
+    }
+    throw error;
+  }
+}
+function assertServerRuntime() {
+  if (globalThis.window !== void 0) {
+    throw new MitraApiError(
+      "Api key authentication runs only on a server. In a browser the key would be served to every visitor; sign in with Google or Microsoft instead.",
+      400
+    );
+  }
+}
+async function resolveApiKeySession(publicClient, appId, apiKey) {
+  return resolveApiKeyToken(
+    (path, init) => withoutLeakingKey(
+      apiKey,
+      () => publicClient.request(path, {
+        method: "POST",
+        ...init.body === void 0 ? {} : { body: init.body },
+        ...init.bearer === void 0 ? {} : { headers: { Authorization: `Bearer ${init.bearer}` } }
+      })
+    ),
+    appId,
+    apiKey,
+    coreErrors
+  );
+}
+
 // src/modules/google-auth.ts
 import { expectObject } from "@mitralab.io/sdk-core";
 var RESULT_TYPE = "mitra-oauth-result";
@@ -635,6 +671,7 @@ function isDefinitiveRefreshFailure(error) {
 }
 var AuthModule = class {
   appId;
+  defaultApiKey;
   _currentUser = null;
   #accessToken = null;
   #refreshToken = null;
@@ -655,6 +692,7 @@ var AuthModule = class {
     const apiUrl = stripTrailingSlashes(
       options.apiUrl ?? (trimmedIamBaseUrl.endsWith("/iam") ? trimmedIamBaseUrl.slice(0, -"/iam".length) : trimmedIamBaseUrl)
     );
+    this.defaultApiKey = options.apiKey;
     this.storageKey = `mitra_auth_${appId}`;
     this.publicClient = new HttpClient({ baseUrl: iamBaseUrl, getToken: () => null });
     this.authedClient = new HttpClient({
@@ -741,6 +779,51 @@ var AuthModule = class {
   async signInWithGoogle(options = {}) {
     return this.establishSession(await this.googleAuth.signIn(options));
   }
+  /**
+   * Signs in as a process, with an api key instead of a person's SSO session.
+   *
+   * Use this where nobody can complete a redirect: a cron, a background collector, another
+   * service. Create the key in Settings -> API keys. A Business key reaches the published
+   * product, a Developer key adds authoring, and an Administrator key belongs to a workspace -
+   * from that one the platform issues this app's token, deciding then and there what the key's
+   * owner actually reaches here.
+   *
+   * The session is not written to storage and carries no refresh token: the key does not
+   * expire and is revoked by deleting it, so renewing means signing in again.
+   *
+   * Server runtimes only. In a browser the key would ship inside the bundle, so this method
+   * refuses to run there.
+   *
+   * @param apiKey - The key to use. Defaults to `apiKey` from the client configuration.
+   * @returns The user the key belongs to.
+   *
+   * @example
+   * ```typescript
+   * const mitra = createClient({ appId, apiUrl, apiKey: process.env.MITRA_API_KEY });
+   * await mitra.auth.signInWithApiKey();
+   * ```
+   */
+  async signInWithApiKey(apiKey = this.defaultApiKey) {
+    assertServerRuntime();
+    if (!apiKey?.trim()) {
+      throw new MitraApiError(
+        "No api key was given. Pass one to signInWithApiKey, or set apiKey when creating the client.",
+        400
+      );
+    }
+    const token = await resolveApiKeySession(this.publicClient, this.appId, apiKey);
+    if (!this.belongsToConfiguredApp(token)) {
+      throw new MitraApiError("This api key does not reach the app this client is configured for.", 403);
+    }
+    this.invalidatePendingRefreshes();
+    this.#accessToken = token;
+    this.#refreshToken = null;
+    const user = await this.getCurrentUser();
+    this._currentUser = user;
+    this.notifySessionListeners();
+    this.notifyListeners();
+    return user;
+  }
   /**
    * Completes a Google redirect response from `#codeMitra` and `#stateMitra`.
    *
@@ -1623,7 +1706,7 @@ function expectAppInfoResponse(value) {
   };
 }
 function createClient(config) {
-  const { appId, apiUrl, authPageUrl, onError } = config;
+  const { appId, apiUrl, apiKey, authPageUrl, onError } = config;
   const gatewayUrl = stripTrailingSlashes(apiUrl);
   const iamUrl = `${gatewayUrl}/iam`;
   const dataManagerUrl = `${gatewayUrl}/data-manager`;
@@ -1631,7 +1714,7 @@ function createClient(config) {
   const integrationUrl = `${gatewayUrl}/integration`;
   const codeStudioUrl = `${gatewayUrl}/code-studio`;
   const copilotUrl = `${gatewayUrl}/copilot`;
-  const authModule = new AuthModule(appId, iamUrl, { apiUrl: gatewayUrl, authPageUrl });
+  const authModule = new AuthModule(appId, iamUrl, { apiUrl: gatewayUrl, authPageUrl, apiKey });
   const authSession = getAuthSessionPort(authModule);
   const onUnauthorized = (requestToken) => authSession.handleUnauthorized(requestToken);
   const beforeAuthenticatedRequest = () => authModule.ensureFreshSession().then(() => void 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitralab.io/platform-sdk",
-  "version": "1.1.0-beta.2",
+  "version": "1.1.0-beta.3",
   "description": "JavaScript/TypeScript SDK for building apps on the Mitra Platform",
   "type": "module",
   "sideEffects": false,
@@ -62,7 +62,7 @@
     "url": "https://github.com/mitralab-dev/mitra-platform-sdk/issues"
   },
   "dependencies": {
-    "@mitralab.io/sdk-core": "0.2.0-beta.1",
+    "@mitralab.io/sdk-core": "0.2.0-beta.2",
     "mitra-interactions-sdk": "1.0.60-beta.48"
   },
   "devDependencies": {