@newhomestar/sdk 0.8.16 → 0.8.18

package/dist/credentials.js

@@ -190,6 +190,54 @@ async function performTokenExchange(slug, params) {
 async function fetchCredentialsFromAuthServer(authBaseUrl, slug, bearerToken, forceRefresh = false) {
     const url = `${authBaseUrl}/api/integrations/${encodeURIComponent(slug)}/credentials`;
     console.log(`[nova-sdk] 🌐 Fetching credentials via HTTP: GET ${url}${forceRefresh ? " (force-refresh)" : ""}`);
+    // ── Outgoing bearer-token preview ──────────────────────────────────────────
+    // We log the JWT's structural claims (NOT the signature, NOT secrets) so we
+    // can correlate the SDK's outgoing token against what the auth server says
+    // it received on the other side. This is invaluable when diagnosing 401s
+    // from `resolveCredentialsViaServiceToken` (the relay path).
+    try {
+        const parts = bearerToken.split(".");
+        if (parts.length === 3) {
+            // base64url → JSON. atob handles base64; we normalize url-safe chars first.
+            const b64urlDecode = (s) => {
+                const b64 = s.replace(/-/g, "+").replace(/_/g, "/");
+                // Pad to a multiple of 4
+                const padded = b64 + "=".repeat((4 - (b64.length % 4)) % 4);
+                if (typeof Buffer !== "undefined") {
+                    return Buffer.from(padded, "base64").toString("utf8");
+                }
+                // Browser-safe fallback
+                // eslint-disable-next-line no-undef
+                return decodeURIComponent(escape(atob(padded)));
+            };
+            const header = JSON.parse(b64urlDecode(parts[0]));
+            const payload = JSON.parse(b64urlDecode(parts[1]));
+            console.log(`[nova-sdk] 🪪 Outgoing bearer header:`, {
+                alg: header.alg,
+                typ: header.typ,
+                kid: header.kid,
+            });
+            console.log(`[nova-sdk] 🪪 Outgoing bearer payload preview:`, {
+                iss: payload.iss,
+                aud: payload.aud,
+                sub: payload.sub,
+                client_id: payload.client_id,
+                scope: payload.scope,
+                service_name: payload.service_name,
+                exp: payload.exp,
+                iat: payload.iat,
+                secondsUntilExp: typeof payload.exp === "number"
+                    ? payload.exp - Math.floor(Date.now() / 1000)
+                    : null,
+            });
+        }
+        else {
+            console.log(`[nova-sdk] 🪪 Outgoing bearer is NOT a 3-part JWT (parts=${parts.length}, length=${bearerToken.length}). This is expected if the SDK is using INTERNAL_API_SECRET as a service token.`);
+        }
+    }
+    catch (decodeErr) {
+        console.warn(`[nova-sdk] ⚠️ Failed to decode outgoing bearer for preview:`, decodeErr instanceof Error ? decodeErr.message : String(decodeErr));
+    }
     const headers = {
         Authorization: `Bearer ${bearerToken}`,
         Accept: "application/json",

package/dist/events.js

@@ -257,9 +257,21 @@ export async function withServiceEventOutbox(db, reqOrCallback, maybeCallback) {
         for (const staged of stagedEmits) {
             // Pass the topic directly as event_slug — no decomposition needed.
             // The Events Service uses event_slug to look up the event_type and fan-out.
+            //
+            // Auto-derive entity_id from attributes.id when the producer's mapRow()
+            // puts the row's primary key there. This is the convention used across
+            // every Nova service route handler ({ id: row.id, ... }) and downstream
+            // consumers (integration write-back, decision logging) rely on entity_id
+            // to PATCH the correct row. Falls back to undefined when there is no
+            // string-typed `id` in the attributes (e.g. composite-key entities or
+            // system-level events).
+            const entityId = typeof staged.payload?.id === 'string'
+                ? staged.payload.id
+                : undefined;
             const fullPayload = {
                 event_slug: staged.topic,
                 source_service: serviceSlug ?? undefined,
+                entity_id: entityId,
                 attributes: staged.payload,
                 metadata: {
                     source: xSource,
@@ -582,9 +594,15 @@ export async function withWebhookEvent(db, opts, handler) {
             result = await handler(tx, emit);
             // ── 4. Write outbox rows for staged events ────────────────────────
             for (const staged of stagedEmits) {
+                // Auto-derive entity_id from attributes.id — see the matching
+                // comment in withServiceEventOutbox for rationale.
+                const entityId = typeof staged.payload?.id === 'string'
+                    ? staged.payload.id
+                    : undefined;
                 const fullPayload = {
                     event_slug: staged.topic,
                     source_service: serviceSlug ?? undefined,
+                    entity_id: entityId,
                     attributes: staged.payload,
                     metadata: { source: 'webhook' },
                 };

package/package.json

@@ -1,64 +1,64 @@
-{
-  "name": "@newhomestar/sdk",
-  "version": "0.8.16",
-  "description": "Type-safe SDK for building Nova pipelines (workers & functions)",
-  "homepage": "https://github.com/newhomestar/nova-node-sdk#readme",
-  "bugs": {
-    "url": "https://github.com/newhomestar/nova-node-sdk/issues"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/newhomestar/nova-node-sdk.git"
-  },
-  "license": "ISC",
-  "author": "Christian Gomez",
-  "type": "module",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "exports": {
-    ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
-    },
-    "./next": {
-      "import": "./dist/next.js",
-      "types": "./dist/next.d.ts"
-    },
-    "./events": {
-      "import": "./dist/events.js",
-      "types": "./dist/events.d.ts"
-    },
-    "./connections": {
-      "import": "./dist/connections.js",
-      "types": "./dist/connections.d.ts"
-    }
-  },
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "tsc"
-  },
-  "dependencies": {
-    "@openfga/sdk": "^0.9.0",
-    "@orpc/openapi": "1.7.4",
-    "@orpc/server": "1.7.4",
-    "@supabase/supabase-js": "^2.39.0",
-    "body-parser": "^1.20.2",
-    "cors": "^2.8.6",
-    "dotenv": "^16.4.3",
-    "express": "^4.18.2",
-    "express-oauth2-jwt-bearer": "^1.7.4",
-    "undici": "^7.24.4",
-    "yaml": "^2.7.1"
-  },
-  "peerDependencies": {
-    "zod": ">=4.0.0"
-  },
-  "devDependencies": {
-    "@types/cors": "^2.8.19",
-    "@types/node": "^20.11.17",
-    "typescript": "^5.4.4",
-    "zod": "^4.3.0"
-  }
-}
+{
+  "name": "@newhomestar/sdk",
+  "version": "0.8.18",
+  "description": "Type-safe SDK for building Nova pipelines (workers & functions)",
+  "homepage": "https://github.com/newhomestar/nova-node-sdk#readme",
+  "bugs": {
+    "url": "https://github.com/newhomestar/nova-node-sdk/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/newhomestar/nova-node-sdk.git"
+  },
+  "license": "ISC",
+  "author": "Christian Gomez",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./next": {
+      "import": "./dist/next.js",
+      "types": "./dist/next.d.ts"
+    },
+    "./events": {
+      "import": "./dist/events.js",
+      "types": "./dist/events.d.ts"
+    },
+    "./connections": {
+      "import": "./dist/connections.js",
+      "types": "./dist/connections.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc"
+  },
+  "dependencies": {
+    "@openfga/sdk": "^0.9.0",
+    "@orpc/openapi": "1.7.4",
+    "@orpc/server": "1.7.4",
+    "@supabase/supabase-js": "^2.39.0",
+    "body-parser": "^1.20.2",
+    "cors": "^2.8.6",
+    "dotenv": "^16.4.3",
+    "express": "^4.18.2",
+    "express-oauth2-jwt-bearer": "^1.7.4",
+    "undici": "^7.24.4",
+    "yaml": "^2.7.1"
+  },
+  "peerDependencies": {
+    "zod": ">=4.0.0"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.19",
+    "@types/node": "^20.11.17",
+    "typescript": "^5.4.4",
+    "zod": "^4.3.0"
+  }
+}