@mitralab.io/sdk-core 0.2.0-beta.0 → 0.2.0-beta.2

package/dist/index.js

@@ -783,24 +783,25 @@ function expectIntegrationTemplate(value, context, errors = defaultSdkCoreErrorF
     expectIntegrationLoginConfig(template.loginConfig, `${context} loginConfig`, errors);
   }
   expectIntegrationRequestConfig(template.requestConfig, `${context} requestConfig`, errors);
-  expectObjectArray(template.fieldsSchema, `${context} fieldsSchema`, errors).forEach(
-    (field, position) => {
-      const fieldContext = `${context} field ${position}`;
-      if (typeof field.key !== "string") invalidField(fieldContext, "key", errors);
-      if (typeof field.label !== "string") invalidField(fieldContext, "label", errors);
-      if (!isOneOf(field.type, ["url", "text", "secret"])) {
-        invalidField(fieldContext, "type", errors);
-      }
-      if (typeof field.required !== "boolean") invalidField(fieldContext, "required", errors);
-      if (!isNullableString(field.placeholder)) invalidField(fieldContext, "placeholder", errors);
-      if (!isNullableString(field.default)) invalidField(fieldContext, "default", errors);
-    }
-  );
+  expectIntegrationFieldsSchema(template.fieldsSchema, `${context} fieldsSchema`, errors);
   if (!isNullableString(template.documentationUrl)) {
     invalidField(context, "documentationUrl", errors);
   }
   return template;
 }
+function expectIntegrationFieldsSchema(value, context, errors) {
+  expectObjectArray(value, context, errors).forEach((field, position) => {
+    const fieldContext = `${context} field ${position}`;
+    if (typeof field.key !== "string") invalidField(fieldContext, "key", errors);
+    if (typeof field.label !== "string") invalidField(fieldContext, "label", errors);
+    if (!isOneOf(field.type, ["url", "text", "secret"])) {
+      invalidField(fieldContext, "type", errors);
+    }
+    if (typeof field.required !== "boolean") invalidField(fieldContext, "required", errors);
+    if (!isNullableString(field.placeholder)) invalidField(fieldContext, "placeholder", errors);
+    if (!isNullableString(field.default)) invalidField(fieldContext, "default", errors);
+  });
+}
 function expectIntegrationLoginConfig(value, context, errors) {
   const config = expectObject(value, context, errors);
   if (!isNullableString(config.url)) invalidField(context, "url", errors);
@@ -847,13 +848,33 @@ function expectIntegrationRequestConfig(value, context, errors) {
     });
   }
 }
+function expectInlineDefinition(config, context, errors) {
+  if (hasOwn(config, "fieldsSchemaInline") && config.fieldsSchemaInline !== null) {
+    expectIntegrationFieldsSchema(
+      config.fieldsSchemaInline,
+      `${context} fieldsSchemaInline`,
+      errors
+    );
+  }
+  if (hasOwn(config, "requestConfigInline") && config.requestConfigInline !== null) {
+    expectIntegrationRequestConfig(
+      config.requestConfigInline,
+      `${context} requestConfigInline`,
+      errors
+    );
+  }
+  if (hasOwn(config, "loginConfigInline") && config.loginConfigInline !== null) {
+    expectIntegrationLoginConfig(config.loginConfigInline, `${context} loginConfigInline`, errors);
+  }
+}
 function expectTemplateConfigSummary(value, context, errors = defaultSdkCoreErrorFactory) {
   const config = expectObject(value, context, errors);
   if (typeof config.id !== "string") invalidField(context, "id", errors);
   if (!isNullableString(config.appId)) invalidField(context, "appId", errors);
   if (!isNullableInteger(config.legacyId)) invalidField(context, "legacyId", errors);
-  if (typeof config.templateId !== "string") invalidField(context, "templateId", errors);
+  if (!isNullableString(config.templateId)) invalidField(context, "templateId", errors);
   if (typeof config.alias !== "string") invalidField(context, "alias", errors);
+  expectInlineDefinition(config, context, errors);
   if (config.status !== null && !isOneOf(config.status, ["unchecked", "connected", "error"])) {
     invalidField(context, "status", errors);
   }
@@ -3608,10 +3629,79 @@ var CoreAgentTaskSession = class {
     }
   }
 };
+
+// src/apiKeySession.ts
+var API_KEY_EXCHANGE_PATH = "/api/v1/auth/exchange";
+function appAccessTokenPath(appId) {
+  return `/api/v1/auth/apps/${encodeURIComponent(appId)}/access-token`;
+}
+function decodeTokenPayload(token) {
+  const segment = token.split(".")[1];
+  if (!segment || typeof globalThis.atob !== "function") return null;
+  try {
+    const base64 = segment.replaceAll("-", "+").replaceAll("_", "/");
+    const padded = base64 + "=".repeat((4 - base64.length % 4) % 4);
+    const decoded = JSON.parse(globalThis.atob(padded));
+    if (!decoded || typeof decoded !== "object" || Array.isArray(decoded)) return null;
+    return decoded;
+  } catch {
+    return null;
+  }
+}
+function readTokenAppId(token) {
+  const appId = decodeTokenPayload(token)?.app_id;
+  return typeof appId === "string" && appId ? appId : null;
+}
+function readTokenExpiry(token) {
+  const exp = decodeTokenPayload(token)?.exp;
+  return typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : null;
+}
+function tokenAuthorizesApp(token, appId) {
+  const payload = decodeTokenPayload(token);
+  if (!payload) return true;
+  return payload.app_id === appId;
+}
+function isWorkspaceSession(token) {
+  const payload = decodeTokenPayload(token);
+  return payload !== null && payload.app_id === void 0;
+}
+function readAccessToken(payload, operation, errors) {
+  const token = payload && typeof payload === "object" ? payload.accessToken : void 0;
+  if (typeof token !== "string" || !token.trim()) {
+    throw errors.invalidResponse(`The ${operation} response did not include an access token`);
+  }
+  return token;
+}
+async function resolveApiKeyToken(call, appId, apiKey, errors = defaultSdkCoreErrorFactory) {
+  if (!apiKey.trim()) {
+    throw errors.configuration("An api key is required to authenticate with an api key");
+  }
+  if (!appId.trim()) {
+    throw errors.configuration("An app id is required to authenticate with an api key");
+  }
+  const exchanged = readAccessToken(
+    await call(API_KEY_EXCHANGE_PATH, { body: { apiKey } }),
+    "api key exchange",
+    errors
+  );
+  if (tokenAuthorizesApp(exchanged, appId)) return exchanged;
+  if (!isWorkspaceSession(exchanged)) {
+    throw errors.configuration(
+      `This api key belongs to app ${readTokenAppId(exchanged) ?? "unknown"}, not to ${appId}. Create the key for this app, or use a workspace key.`
+    );
+  }
+  return readAccessToken(
+    await call(appAccessTokenPath(appId), { bearer: exchanged }),
+    "app token",
+    errors
+  );
+}
 export {
+  API_KEY_EXCHANGE_PATH,
   AgentTaskTurnError,
   SdkCoreConfigurationError,
   SdkCoreResponseError,
+  appAccessTokenPath,
   createAgentConnectionsModule,
   createAgentCredentialsModule,
   createAgentTaskSessionManager,
@@ -3647,6 +3737,11 @@ export {
   expectObjectArray,
   expectPage,
   expectStringArray,
+  isWorkspaceSession,
+  readTokenAppId,
+  readTokenExpiry,
+  resolveApiKeyToken,
   toAgentTimelineItem,
+  tokenAuthorizesApp,
   withAgentTaskSessions
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitralab.io/sdk-core",
-  "version": "0.2.0-beta.0",
+  "version": "0.2.0-beta.2",
   "description": "Environment-neutral contracts and modules shared by Mitra JavaScript SDKs",
   "type": "module",
   "sideEffects": false,