@pellux/goodvibes-sdk 0.18.49 → 0.18.51

package/dist/_internal/platform/core/orchestrator.d.ts

@@ -17,18 +17,58 @@ interface HookDispatcherLike {
 interface LowPrioritySystemMessageSink {
     low(message: string): void;
 }
+/**
+ * Options for constructing an {@link Orchestrator}.
+ *
+ * @example
+ * ```ts
+ * const orchestrator = new Orchestrator({
+ *   conversation,
+ *   getViewportHeight: () => window.innerHeight,
+ *   scrollToEnd: (vHeight) => scrollContainer.scrollTo({ top: vHeight }),
+ *   toolRegistry,
+ *   permissionManager,
+ *   getSystemPrompt: () => mySystemPrompt,
+ *   hookDispatcher,
+ *   flagManager,
+ *   requestRender: () => renderFn(),
+ *   runtimeBus,
+ *   services: { agentManager, wrfcController },
+ * });
+ * ```
+ */
+export interface OrchestratorOptions {
+    /** Manages the conversation message history. */
+    conversation: ConversationManager;
+    /** Returns the current viewport height in rows/px for scrolling calculations. */
+    getViewportHeight: () => number;
+    /** Scrolls the UI to the given viewport height after a turn. */
+    scrollToEnd: (vHeight: number) => void;
+    /** Registry of all available tools. */
+    toolRegistry: ToolRegistry;
+    /** Manages tool-use permission grants and denials. */
+    permissionManager: PermissionManager;
+    /** Returns the current system prompt text. Defaults to `() => ''`. */
+    getSystemPrompt?: () => string;
+    /** Optional hook dispatcher for lifecycle events. */
+    hookDispatcher?: HookDispatcherLike | null;
+    /** Optional feature flag manager. */
+    flagManager?: FeatureFlagManager | null;
+    /** Optional render request callback, called after state changes requiring a redraw. */
+    requestRender?: (() => void) | null;
+    /** Optional runtime event bus for cross-system event propagation. */
+    runtimeBus?: RuntimeEventBus | null;
+    /** Required runtime service dependencies. */
+    services: {
+        readonly agentManager: Pick<AgentManager, 'list' | 'spawn'>;
+        readonly wrfcController: Pick<WrfcController, 'listChains'>;
+    };
+}
 /**
  * Orchestrator - Manages LLM turn lifecycle with full tool-use loop.
  * Supports multi-turn agent loops: call LLM -> execute tools -> send results -> repeat.
  */
 export declare class Orchestrator {
-    private conversation;
-    private getViewportHeight;
-    private scrollToEnd;
-    private toolRegistry;
-    private permissionManager;
-    private getSystemPrompt;
-    private hookDispatcher;
     isThinking: boolean;
     thinkingFrame: number;
     usage: {
@@ -113,10 +153,34 @@ export declare class Orchestrator {
     private readonly requestRender;
     private systemMessageRouter;
     private readonly followUpRuntime;
-    constructor(conversation: ConversationManager, getViewportHeight: () => number, scrollToEnd: (vHeight: number) => void, toolRegistry: ToolRegistry, permissionManager: PermissionManager, getSystemPrompt: (() => string) | undefined, hookDispatcher: (HookDispatcherLike | null) | undefined, flagManager: (FeatureFlagManager | null) | undefined, requestRender: (() => void) | null | undefined, runtimeBus: (RuntimeEventBus | null) | undefined, services: {
-        readonly agentManager: Pick<AgentManager, 'list' | 'spawn'>;
-        readonly wrfcController: Pick<WrfcController, 'listChains'>;
-    });
+    private conversation;
+    private getViewportHeight;
+    private scrollToEnd;
+    private toolRegistry;
+    private permissionManager;
+    private getSystemPrompt;
+    private hookDispatcher;
+    /**
+     * Construct an Orchestrator using a named-options object.
+     *
+     * @example
+     * ```ts
+     * const orchestrator = new Orchestrator({
+     *   conversation,
+     *   getViewportHeight: () => terminalRows,
+     *   scrollToEnd: (vHeight) => ui.scrollToEnd(vHeight),
+     *   toolRegistry,
+     *   permissionManager,
+     *   getSystemPrompt: () => systemPrompt,
+     *   hookDispatcher,
+     *   flagManager,
+     *   requestRender: () => render(),
+     *   runtimeBus,
+     *   services: { agentManager, wrfcController },
+     * });
+     * ```
+     */
+    constructor(options: OrchestratorOptions);
     setCoreServices(services: OrchestratorCoreServices): void;
     /**
      * Attach an AcpManager and register the 'delegate' tool into the ToolRegistry.

package/dist/_internal/platform/core/orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/core/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQpD,OAAO,EACL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAK9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAkBlE,OAAO,EASL,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AAQnC,iFAAiF;AACjF,UAAU,kBAAkB;IAC1B,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7C;AAMD,UAAU,4BAA4B;IACpC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;GAGG;AACH,qBAAa,YAAY;IAuFrB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,cAAc;IA5FjB,UAAU,UAAS;IACnB,aAAa,SAAK;IAClB,KAAK;;;;;MAAwD;IACpE;;;;OAIG;IACI,eAAe,SAAK;IAC3B,kGAAkG;IAC3F,sBAAsB,SAAK;IAClC,4FAA4F;IACrF,oBAAoB,SAAK;IAChC,yFAAyF;IAClF,qBAAqB,SAAK;IAC1B,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;KAAE,EAAE,CAAM;IAEtE,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,UAAU,CAA2B;IAC7C,wEAAwE;IACxE,OAAO,CAAC,qBAAqB,CAAK;IAClC,4EAA4E;IAC5E,OAAO,CAAC,WAAW,CAAS;IAC5B,4FAA4F;IAC5F,OAAO,CAAC,kBAAkB,CAAK;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAS;IAE7B,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAE1C;;;;;;;;;OASG;IACI,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAElD;;;OAGG;IACH,OAAO,CAAC,WAAW,CAAS;IAE5B,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAE/C,uEAAuE;IACvE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuC;IACpE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA+B;IAC1E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA0B;IAChE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAyB;IAE9D;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW,CAAmC;IAEtD;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;IAC3C,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;gBAGpD,YAAY,EAAE,mBAAmB,EACjC,iBAAiB,EAAE,MAAM,MAAM,EAC/B,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EACtC,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,GAAE,MAAM,MAAM,aAAW,EACxC,cAAc,GAAE,kBAAkB,GAAG,IAAI,aAAO,EACxD,WAAW,GAAE,kBAAkB,GAAG,IAAI,aAAO,EAC7C,aAAa,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,YAAO,EACzC,UAAU,GAAE,eAAe,GAAG,IAAI,aAAO,EACzC,QAAQ,EAAE;QACR,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;QAC5D,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;KAC7D;IAoCI,eAAe,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAOhE;;;OAGG;IACI,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAkE/C,UAAU,IAAI,MAAM;IAIpB,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI;IAIzE,2BAA2B,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI;IAIxE,uDAAuD;IAChD,KAAK,IAAI,IAAI;IAkBpB;;;;;OAKG;IACI,OAAO,IAAI,IAAI;IAgBtB;;;;;OAKG;IACU,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBlF,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;YAWN,OAAO;IAuOrB;;;;;;;;;;;;OAYG;YACW,2BAA2B;IAyBzC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoB7B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAK/B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,4BAA4B;YAetB,gBAAgB;CAU/B"}
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/core/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQpD,OAAO,EACL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAK9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAkBlE,OAAO,EASL,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AAQnC,iFAAiF;AACjF,UAAU,kBAAkB;IAC1B,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7C;AAMD,UAAU,4BAA4B;IACpC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,mBAAmB;IAClC,gDAAgD;IAChD,YAAY,EAAE,mBAAmB,CAAC;IAClC,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,gEAAgE;IAChE,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,uCAAuC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,sDAAsD;IACtD,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC;IAC/B,qDAAqD;IACrD,cAAc,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC3C,qCAAqC;IACrC,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,uFAAuF;IACvF,aAAa,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,qEAAqE;IACrE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,6CAA6C;IAC7C,QAAQ,EAAE;QACR,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;QAC5D,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;KAC7D,CAAC;CACH;AAED;;;GAGG;AACH,qBAAa,YAAY;IAChB,UAAU,UAAS;IACnB,aAAa,SAAK;IAClB,KAAK;;;;;MAAwD;IACpE;;;;OAIG;IACI,eAAe,SAAK;IAC3B,kGAAkG;IAC3F,sBAAsB,SAAK;IAClC,4FAA4F;IACrF,oBAAoB,SAAK;IAChC,yFAAyF;IAClF,qBAAqB,SAAK;IAC1B,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;KAAE,EAAE,CAAM;IAEtE,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,UAAU,CAA2B;IAC7C,wEAAwE;IACxE,OAAO,CAAC,qBAAqB,CAAK;IAClC,4EAA4E;IAC5E,OAAO,CAAC,WAAW,CAAS;IAC5B,4FAA4F;IAC5F,OAAO,CAAC,kBAAkB,CAAK;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAS;IAE7B,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAE1C;;;;;;;;;OASG;IACI,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAElD;;;OAGG;IACH,OAAO,CAAC,WAAW,CAAS;IAE5B,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAE/C,uEAAuE;IACvE,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuC;IACpE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA+B;IAC1E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA0B;IAChE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAyB;IAE9D;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW,CAAmC;IAEtD;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;IAC3C,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8B;IAE9D,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,iBAAiB,CAAe;IACxC,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,eAAe,CAAe;IACtC,OAAO,CAAC,cAAc,CAA4B;IAElD;;;;;;;;;;;;;;;;;;;OAmBG;gBACS,OAAO,EAAE,mBAAmB;IAuDjC,eAAe,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAOhE;;;OAGG;IACI,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAkE/C,UAAU,IAAI,MAAM;IAIpB,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI;IAIzE,2BAA2B,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI;IAIxE,uDAAuD;IAChD,KAAK,IAAI,IAAI;IAkBpB;;;;;OAKG;IACI,OAAO,IAAI,IAAI;IAgBtB;;;;;OAKG;IACU,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBlF,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;YAWN,OAAO;IAuOrB;;;;;;;;;;;;OAYG;YACW,2BAA2B;IAyBzC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoB7B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAK/B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,4BAA4B;YAetB,gBAAgB;CAU/B"}

package/dist/_internal/platform/core/orchestrator.js

@@ -30,13 +30,6 @@ const THINKING_SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦'
  * Supports multi-turn agent loops: call LLM -> execute tools -> send results -> repeat.
  */
 export class Orchestrator {
-    conversation;
-    getViewportHeight;
-    scrollToEnd;
-    toolRegistry;
-    permissionManager;
-    getSystemPrompt;
-    hookDispatcher;
     isThinking = false;
     thinkingFrame = 0;
     usage = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
@@ -113,7 +106,35 @@ export class Orchestrator {
     requestRender;
     systemMessageRouter = null;
     followUpRuntime;
-    constructor(conversation, getViewportHeight, scrollToEnd, toolRegistry, permissionManager, getSystemPrompt = () => '', hookDispatcher = null, flagManager = null, requestRender = null, runtimeBus = null, services) {
+    conversation;
+    getViewportHeight;
+    scrollToEnd;
+    toolRegistry;
+    permissionManager;
+    getSystemPrompt;
+    hookDispatcher;
+    /**
+     * Construct an Orchestrator using a named-options object.
+     *
+     * @example
+     * ```ts
+     * const orchestrator = new Orchestrator({
+     *   conversation,
+     *   getViewportHeight: () => terminalRows,
+     *   scrollToEnd: (vHeight) => ui.scrollToEnd(vHeight),
+     *   toolRegistry,
+     *   permissionManager,
+     *   getSystemPrompt: () => systemPrompt,
+     *   hookDispatcher,
+     *   flagManager,
+     *   requestRender: () => render(),
+     *   runtimeBus,
+     *   services: { agentManager, wrfcController },
+     * });
+     * ```
+     */
+    constructor(options) {
+        const { conversation, getViewportHeight, scrollToEnd, toolRegistry, permissionManager, getSystemPrompt = () => '', hookDispatcher = null, flagManager = null, requestRender = null, runtimeBus = null, services, } = options;
         this.conversation = conversation;
         this.getViewportHeight = getViewportHeight;
         this.scrollToEnd = scrollToEnd;

package/dist/_internal/platform/runtime/auth/crypto-adapter.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Crypto adapter — runtime-neutral interface for PKCE and random-bytes
+ * operations used by oauth-core.ts.
+ *
+ * This file uses the Web Crypto API (globalThis.crypto), which is available
+ * in React Native (Hermes / JavaScriptCore), modern browsers, and Node >= 19.
+ *
+ * API:
+ *   createSha256Hash(input: string): Promise<string>  — returns base64url digest
+ *   randomBytesBase64url(n: number): string           — returns n random bytes as base64url
+ */
+/**
+ * Compute SHA-256 of `input` and return the result as a base64url string.
+ * Uses Web Crypto API — safe in React Native, browser, and modern Node.
+ */
+export declare function createSha256Hash(input: string): Promise<string>;
+/**
+ * Generate `n` cryptographically random bytes and return as base64url.
+ * Uses Web Crypto API — safe in React Native, browser, and modern Node.
+ */
+export declare function randomBytesBase64url(n: number): string;
+//# sourceMappingURL=crypto-adapter.d.ts.map

package/dist/_internal/platform/runtime/auth/crypto-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-adapter.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/auth/crypto-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAItD"}

package/dist/_internal/platform/runtime/auth/crypto-adapter.js

@@ -0,0 +1,40 @@
+/**
+ * Crypto adapter — runtime-neutral interface for PKCE and random-bytes
+ * operations used by oauth-core.ts.
+ *
+ * This file uses the Web Crypto API (globalThis.crypto), which is available
+ * in React Native (Hermes / JavaScriptCore), modern browsers, and Node >= 19.
+ *
+ * API:
+ *   createSha256Hash(input: string): Promise<string>  — returns base64url digest
+ *   randomBytesBase64url(n: number): string           — returns n random bytes as base64url
+ */
+/**
+ * Compute SHA-256 of `input` and return the result as a base64url string.
+ * Uses Web Crypto API — safe in React Native, browser, and modern Node.
+ */
+export async function createSha256Hash(input) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(input);
+    const hashBuffer = await globalThis.crypto.subtle.digest('SHA-256', data);
+    return uint8ArrayToBase64url(new Uint8Array(hashBuffer));
+}
+/**
+ * Generate `n` cryptographically random bytes and return as base64url.
+ * Uses Web Crypto API — safe in React Native, browser, and modern Node.
+ */
+export function randomBytesBase64url(n) {
+    const bytes = new Uint8Array(n);
+    globalThis.crypto.getRandomValues(bytes);
+    return uint8ArrayToBase64url(bytes);
+}
+function uint8ArrayToBase64url(bytes) {
+    let binary = '';
+    for (let i = 0; i < bytes.byteLength; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary)
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=/g, '');
+}

package/dist/_internal/platform/runtime/auth/oauth-core.d.ts

@@ -1,26 +1,15 @@
 import type { OAuthProviderConfig } from '../../config/subscriptions.js';
-export interface OAuthStartState {
-    readonly authorizationUrl: string;
-    readonly state: string;
-    readonly verifier: string;
-    readonly redirectUri: string;
-}
-export interface OAuthTokenPayload {
-    readonly accessToken: string;
-    readonly refreshToken?: string;
-    readonly tokenType: string;
-    readonly expiresAt?: number;
-    readonly scopes?: readonly string[];
-}
+import type { OAuthStartState, OAuthTokenPayload } from '../../auth/oauth-types.js';
+export type { OAuthStartState, OAuthTokenPayload } from '../../auth/oauth-types.js';
 export declare function createOAuthState(bytes?: number): string;
 export declare function createPkceVerifier(bytes?: number): string;
-export declare function createPkceChallenge(verifier: string): string;
+export declare function createPkceChallenge(verifier: string): Promise<string>;
 export declare function parseOAuthScopes(raw: unknown): readonly string[] | undefined;
 export declare function buildOAuthAuthorizationStart(config: OAuthProviderConfig, input?: {
     readonly state?: string;
     readonly verifier?: string;
     readonly redirectUri?: string;
-}): OAuthStartState;
+}): Promise<OAuthStartState>;
 export declare function exchangeOAuthAuthorizationCode(config: OAuthProviderConfig, input: {
     readonly code: string;
     readonly verifier: string;

package/dist/_internal/platform/runtime/auth/oauth-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-core.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/auth/oauth-core.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,wBAAgB,gBAAgB,CAAC,KAAK,SAAK,GAAG,MAAM,CAEnD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,SAAK,GAAG,MAAM,CAErD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAI5E;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,mBAAmB,EAC3B,KAAK,CAAC,EAAE;IACN,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B,GACA,eAAe,CA4BjB;AA4CD,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE;IACL,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAQ9E"}
+{"version":3,"file":"oauth-core.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/runtime/auth/oauth-core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGzE,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACpF,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEpF,wBAAgB,gBAAgB,CAAC,KAAK,SAAK,GAAG,MAAM,CAEnD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,SAAK,GAAG,MAAM,CAErD;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAI5E;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,mBAAmB,EAC3B,KAAK,CAAC,EAAE;IACN,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B,GACA,OAAO,CAAC,eAAe,CAAC,CA4B1B;AA4CD,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE;IACL,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAa9E"}

package/dist/_internal/platform/runtime/auth/oauth-core.js

@@ -1,12 +1,12 @@
-import { createHash, randomBytes } from 'node:crypto';
+import { createSha256Hash, randomBytesBase64url } from './crypto-adapter.js';
 export function createOAuthState(bytes = 24) {
-    return randomBytes(bytes).toString('base64url');
+    return randomBytesBase64url(bytes);
 }
 export function createPkceVerifier(bytes = 32) {
-    return randomBytes(bytes).toString('base64url');
+    return randomBytesBase64url(bytes);
 }
-export function createPkceChallenge(verifier) {
-    return createHash('sha256').update(verifier).digest('base64url');
+export async function createPkceChallenge(verifier) {
+    return createSha256Hash(verifier);
 }
 export function parseOAuthScopes(raw) {
     if (typeof raw !== 'string')
@@ -14,7 +14,7 @@ export function parseOAuthScopes(raw) {
     const scopes = raw.split(' ').map((value) => value.trim()).filter(Boolean);
     return scopes.length > 0 ? scopes : undefined;
 }
-export function buildOAuthAuthorizationStart(config, input) {
+export async function buildOAuthAuthorizationStart(config, input) {
     const state = input?.state ?? createOAuthState();
     const verifier = input?.verifier ?? createPkceVerifier();
     const redirectUri = input?.redirectUri ?? config.redirectUri;
@@ -30,7 +30,7 @@ export function buildOAuthAuthorizationStart(config, input) {
         url.searchParams.set('audience', config.audience);
     }
     if (config.usePkce ?? true) {
-        url.searchParams.set('code_challenge', createPkceChallenge(verifier));
+        url.searchParams.set('code_challenge', await createPkceChallenge(verifier));
         url.searchParams.set('code_challenge_method', 'S256');
     }
     for (const [key, value] of Object.entries(config.authParams ?? {})) {
@@ -109,11 +109,16 @@ export async function refreshOAuthAccessToken(config, refreshToken) {
     return exchangeOAuthRequest(config.tokenUrl, config.refreshRequestEncoding ?? config.tokenRequestEncoding ?? 'form', payload);
 }
 export function decodeJwtPayload(token) {
+    if (typeof atob !== 'function') {
+        throw new Error('decodeJwtPayload requires a global atob(); available in browsers, RN Hermes, and Node >= 16');
+    }
     const parts = token.split('.');
     if (parts.length < 2)
         return null;
     try {
-        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
+        // atob is universally available (browsers, React Native, modern Node)
+        const base64 = (parts[1]).replace(/-/g, '+').replace(/_/g, '/');
+        return JSON.parse(atob(base64));
     }
     catch {
         return null;

package/dist/_internal/platform/version.js

@@ -1,6 +1,6 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-let version = '0.18.49';
+let version = '0.18.51';
 try {
     const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', '..', 'package.json'), 'utf-8'));
     version = pkg.version ?? version;

package/dist/_internal/transport-realtime/domain-events.d.ts

@@ -14,5 +14,31 @@ export interface SerializedEventEnvelope<TEvent extends EventLike = EventLike> {
 export type DomainEventConnector<TDomain extends string, TEvent extends EventLike = EventLike> = (domain: TDomain, onEnvelope: (envelope: SerializedEventEnvelope<TEvent>) => void) => void | Promise<() => void>;
 export type DomainEvents<TDomain extends string, TEvent extends EventLike = EventLike> = RuntimeEventFeeds<TDomain, TEvent>;
 export declare function createRemoteDomainEvents<TDomain extends string, TEvent extends EventLike = EventLike>(domains: readonly TDomain[], connect: DomainEventConnector<TDomain, TEvent>): DomainEvents<TDomain, TEvent>;
+/**
+ * Returns a filtered view of the given domain events object where every
+ * callback only fires for events whose envelope `sessionId` equals the
+ * supplied value.
+ *
+ * All domain feeds and the `domain()` accessor are pre-filtered. The
+ * `domains` list is preserved unchanged.
+ *
+ * Unsubscribe handles returned by the filtered feeds propagate correctly
+ * to the underlying connection.
+ *
+ * @example
+ * const events = sdk.realtime.viaSse();
+ * // Without forSession — manual filter:
+ * events.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   if (e.sessionId !== mySessionId) return;
+ *   process.stdout.write(e.payload.content);
+ * });
+ *
+ * // With forSession — no filter needed:
+ * const sessionEvents = forSession(events, mySessionId);
+ * sessionEvents.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   process.stdout.write(e.payload.content);
+ * });
+ */
+export declare function forSession<TDomain extends string, TEvent extends EventLike = EventLike>(events: DomainEvents<TDomain, TEvent>, sessionId: string): DomainEvents<TDomain, TEvent>;
 export {};
 //# sourceMappingURL=domain-events.d.ts.map

package/dist/_internal/transport-realtime/domain-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-events.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/domain-events.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkD,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpH,KAAK,SAAS,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,CAC9B,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,CACF,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,CAAC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI,KAC5D,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;AAEhC,MAAM,MAAM,YAAY,CACtB,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAmIvC,wBAAgB,wBAAwB,CACtC,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,EAEpC,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,EAAE,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,GAC7C,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAK/B"}
+{"version":3,"file":"domain-events.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/domain-events.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkD,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpH,KAAK,SAAS,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,WAAW,uBAAuB,CAAC,MAAM,SAAS,SAAS,GAAG,SAAS;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,CAC9B,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,CACF,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,CAAC,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,IAAI,KAC5D,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;AAEhC,MAAM,MAAM,YAAY,CACtB,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,IAClC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAmIvC,wBAAgB,wBAAwB,CACtC,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,EAEpC,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,OAAO,EAAE,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,GAC7C,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAK/B;AAmCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,UAAU,CACxB,OAAO,SAAS,MAAM,EACtB,MAAM,SAAS,SAAS,GAAG,SAAS,EAEpC,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EACrC,SAAS,EAAE,MAAM,GAChB,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAY/B"}

package/dist/_internal/transport-realtime/domain-events.js

@@ -114,3 +114,66 @@ function createRemoteDomainEventFeed(domain, connect) {
 export function createRemoteDomainEvents(domains, connect) {
     return createRuntimeEventFeeds(domains, (domain) => createRemoteDomainEventFeed(domain, connect));
 }
+/**
+ * Wraps an existing {@link RuntimeEventFeed} and returns a filtered feed whose
+ * callbacks only fire for envelopes whose `sessionId` matches the given value.
+ *
+ * Unsubscribe handles returned by `on` / `onEnvelope` on the filtered feed
+ * correctly remove the underlying listener from the original feed.
+ */
+function createFilteredFeed(feed, sessionId) {
+    return {
+        on(type, listener) {
+            return feed.onEnvelope(type, (envelope) => {
+                if (envelope.sessionId !== sessionId)
+                    return;
+                listener(envelope.payload);
+            });
+        },
+        onEnvelope(type, listener) {
+            return feed.onEnvelope(type, (envelope) => {
+                if (envelope.sessionId !== sessionId)
+                    return;
+                listener(envelope);
+            });
+        },
+    };
+}
+/**
+ * Returns a filtered view of the given domain events object where every
+ * callback only fires for events whose envelope `sessionId` equals the
+ * supplied value.
+ *
+ * All domain feeds and the `domain()` accessor are pre-filtered. The
+ * `domains` list is preserved unchanged.
+ *
+ * Unsubscribe handles returned by the filtered feeds propagate correctly
+ * to the underlying connection.
+ *
+ * @example
+ * const events = sdk.realtime.viaSse();
+ * // Without forSession — manual filter:
+ * events.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   if (e.sessionId !== mySessionId) return;
+ *   process.stdout.write(e.payload.content);
+ * });
+ *
+ * // With forSession — no filter needed:
+ * const sessionEvents = forSession(events, mySessionId);
+ * sessionEvents.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   process.stdout.write(e.payload.content);
+ * });
+ */
+export function forSession(events, sessionId) {
+    const filteredFeeds = {};
+    for (const domain of events.domains) {
+        filteredFeeds[domain] = createFilteredFeed(events[domain], sessionId);
+    }
+    return Object.freeze({
+        ...filteredFeeds,
+        domains: events.domains,
+        domain(d) {
+            return filteredFeeds[d];
+        },
+    });
+}

package/dist/_internal/transport-realtime/index.d.ts

@@ -1,6 +1,6 @@
 export type { DomainEventConnector, DomainEvents, SerializedEventEnvelope, } from './domain-events.js';
-export { createRemoteDomainEvents } from './domain-events.js';
+export { createRemoteDomainEvents, forSession } from './domain-events.js';
 export type { RemoteRuntimeEvents, SerializedRuntimeEnvelope } from './runtime-events.js';
-export { buildEventSourceUrl, buildWebSocketUrl, createEventSourceConnector, createRemoteRuntimeEvents, createWebSocketConnector, } from './runtime-events.js';
+export { buildEventSourceUrl, buildWebSocketUrl, createEventSourceConnector, createRemoteRuntimeEvents, createWebSocketConnector, forSessionRuntime, } from './runtime-events.js';
 export type { RuntimeEventConnectorOptions } from './runtime-events.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/_internal/transport-realtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1E,YAAY,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/_internal/transport-realtime/index.js

@@ -1,2 +1,2 @@
-export { createRemoteDomainEvents } from './domain-events.js';
-export { buildEventSourceUrl, buildWebSocketUrl, createEventSourceConnector, createRemoteRuntimeEvents, createWebSocketConnector, } from './runtime-events.js';
+export { createRemoteDomainEvents, forSession } from './domain-events.js';
+export { buildEventSourceUrl, buildWebSocketUrl, createEventSourceConnector, createRemoteRuntimeEvents, createWebSocketConnector, forSessionRuntime, } from './runtime-events.js';

package/dist/_internal/transport-realtime/runtime-events.d.ts

@@ -7,6 +7,33 @@ type RuntimeEventRecord = {
 };
 export type SerializedRuntimeEnvelope<TEvent extends RuntimeEventRecord = RuntimeEventRecord> = SerializedEventEnvelope<TEvent>;
 export type RemoteRuntimeEvents<TEvent extends RuntimeEventRecord = RuntimeEventRecord> = DomainEvents<RuntimeEventDomain, TEvent>;
+/**
+ * Returns a filtered view of a {@link RemoteRuntimeEvents} object where every
+ * callback only fires for events whose envelope `sessionId` equals the given
+ * session identifier.
+ *
+ * This is a convenience wrapper around {@link forSession} scoped to the
+ * canonical runtime-event domains. Use it instead of manually checking
+ * `e.sessionId` in every callback.
+ *
+ * @example
+ * const events = sdk.realtime.viaSse();
+ * const session = await sdk.operator.sessions.create({ title: 'demo' });
+ * const sessionId = session.session.id;
+ *
+ * // Before forSession — repeated manual guard:
+ * events.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   if (e.sessionId !== sessionId) return;
+ *   process.stdout.write(e.payload.content);
+ * });
+ *
+ * // After forSession — clean, session-scoped subscription:
+ * const sessionEvents = forSessionRuntime(events, sessionId);
+ * sessionEvents.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   process.stdout.write(e.payload.content);
+ * });
+ */
+export { forSession as forSessionRuntime } from './domain-events.js';
 export interface RuntimeEventConnectorOptions {
     readonly reconnect?: StreamReconnectPolicy;
     readonly onError?: (error: unknown) => void;
@@ -17,5 +44,4 @@ export declare function buildEventSourceUrl(baseUrl: string, domain: RuntimeEven
 export declare function buildWebSocketUrl(baseUrl: string, domains: readonly RuntimeEventDomain[]): string;
 export declare function createEventSourceConnector(baseUrl: string, token: AuthTokenSource, fetchImpl: typeof fetch, options?: RuntimeEventConnectorOptions): DomainEventConnector<RuntimeEventDomain, AnyRuntimeEvent>;
 export declare function createWebSocketConnector(baseUrl: string, token: AuthTokenSource, WebSocketImpl: typeof WebSocket, options?: RuntimeEventConnectorOptions): DomainEventConnector<RuntimeEventDomain, AnyRuntimeEvent>;
-export {};
 //# sourceMappingURL=runtime-events.d.ts.map

package/dist/_internal/transport-realtime/runtime-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-events.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/runtime-events.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAsB,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EAA6D,MAAM,4BAA4B,CAAC;AAE/K,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAC;AAE5B,KAAK,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,MAAM,MAAM,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,IAC1F,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAElC,MAAM,MAAM,mBAAmB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,IACpF,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE3C,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,KAAK,eAAe,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAErE,wBAAgB,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,EAC9F,OAAO,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,GACxD,mBAAmB,CAAC,MAAM,CAAC,CAK7B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAIR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,kBAAkB,EAAE,GACrC,MAAM,CAQR;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,KAAK,EACvB,OAAO,GAAE,4BAAiC,GACzC,oBAAoB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAiB3D;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,OAAO,SAAS,EAC/B,OAAO,GAAE,4BAAiC,GACzC,oBAAoB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAuF3D"}
+{"version":3,"file":"runtime-events.d.ts","sourceRoot":"","sources":["../../../src/_internal/transport-realtime/runtime-events.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAsB,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EAA6D,MAAM,4BAA4B,CAAC;AAE/K,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAC;AAE5B,KAAK,kBAAkB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,MAAM,MAAM,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,IAC1F,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAElC,MAAM,MAAM,mBAAmB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,IACpF,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAErE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,KAAK,eAAe,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAErE,wBAAgB,yBAAyB,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,EAC9F,OAAO,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,CAAC,GACxD,mBAAmB,CAAC,MAAM,CAAC,CAK7B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAIR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,kBAAkB,EAAE,GACrC,MAAM,CAQR;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,EACtB,SAAS,EAAE,OAAO,KAAK,EACvB,OAAO,GAAE,4BAAiC,GACzC,oBAAoB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAiB3D;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,OAAO,SAAS,EAC/B,OAAO,GAAE,4BAAiC,GACzC,oBAAoB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAuF3D"}

package/dist/_internal/transport-realtime/runtime-events.js

@@ -4,6 +4,33 @@ import { RUNTIME_EVENT_DOMAINS } from '../contracts/index.js';
 import { normalizeAuthToken, openRawServerSentEventStream as openServerSentEventStream } from '../transport-http/index.js';
 import { buildUrl, normalizeBaseUrl } from '../transport-http/index.js';
 import { createRemoteDomainEvents, } from './domain-events.js';
+/**
+ * Returns a filtered view of a {@link RemoteRuntimeEvents} object where every
+ * callback only fires for events whose envelope `sessionId` equals the given
+ * session identifier.
+ *
+ * This is a convenience wrapper around {@link forSession} scoped to the
+ * canonical runtime-event domains. Use it instead of manually checking
+ * `e.sessionId` in every callback.
+ *
+ * @example
+ * const events = sdk.realtime.viaSse();
+ * const session = await sdk.operator.sessions.create({ title: 'demo' });
+ * const sessionId = session.session.id;
+ *
+ * // Before forSession — repeated manual guard:
+ * events.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   if (e.sessionId !== sessionId) return;
+ *   process.stdout.write(e.payload.content);
+ * });
+ *
+ * // After forSession — clean, session-scoped subscription:
+ * const sessionEvents = forSessionRuntime(events, sessionId);
+ * sessionEvents.turn.onEnvelope('STREAM_DELTA', (e) => {
+ *   process.stdout.write(e.payload.content);
+ * });
+ */
+export { forSession as forSessionRuntime } from './domain-events.js';
 export function createRemoteRuntimeEvents(connect) {
     return createRemoteDomainEvents(RUNTIME_EVENT_DOMAINS, connect);
 }

package/dist/auth.d.ts

@@ -1,6 +1,8 @@
 import type { OperatorMethodInput, OperatorMethodOutput } from './_internal/contracts/index.js';
 import type { AuthTokenResolver } from './_internal/transport-http/index.js';
 import type { OperatorSdk } from './_internal/operator/index.js';
+export { PermissionResolver, SessionManager, TokenStore, } from './_internal/platform/auth/index.js';
+export type { OAuthStartState, OAuthTokenPayload } from './_internal/platform/auth/oauth-types.js';
 export type GoodVibesCurrentAuth = OperatorMethodOutput<'control.auth.current'>;
 export type GoodVibesLoginInput = OperatorMethodInput<'control.auth.login'>;
 export type GoodVibesLoginOutput = OperatorMethodOutput<'control.auth.login'>;
@@ -16,12 +18,38 @@ export interface BrowserTokenStoreOptions {
 export interface GoodVibesAuthLoginOptions {
     readonly persistToken?: boolean;
 }
+/**
+ * The combined auth client attached to an SDK instance.
+ *
+ * This interface aggregates token storage and session management behind a
+ * single object for convenience. For focused single-responsibility access,
+ * use the split classes exported from this module:
+ * - Token persistence: `TokenStore`
+ * - Login / session lifecycle: `SessionManager`
+ * - OAuth 2.0 flows: `OAuthClient`
+ * - Role / scope checks: `PermissionResolver`
+ */
 export interface GoodVibesAuthClient {
     readonly writable: boolean;
     current(): Promise<GoodVibesCurrentAuth>;
     login(input: GoodVibesLoginInput, options?: GoodVibesAuthLoginOptions): Promise<GoodVibesLoginOutput>;
+    /**
+     * @deprecated Prefer `TokenStore.getToken()` for direct token access.
+     * `GoodVibesAuthClient.getToken()` remains supported and delegates to the
+     * same underlying store.
+     */
     getToken(): Promise<string | null>;
+    /**
+     * @deprecated Prefer `TokenStore.setToken()` for direct token mutation.
+     * `GoodVibesAuthClient.setToken()` remains supported and delegates to the
+     * same underlying store.
+     */
     setToken(token: string | null): Promise<void>;
+    /**
+     * @deprecated Prefer `TokenStore.clearToken()` for direct token mutation.
+     * `GoodVibesAuthClient.clearToken()` remains supported and delegates to the
+     * same underlying store.
+     */
     clearToken(): Promise<void>;
 }
 /**

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtG,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,GAAE,MAAM,GAAG,IAAW,GAAG,mBAAmB,CAa9F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,mBAAmB,CAmBnG;AAwBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,mBAAmB,GAAG,IAAI,EACtC,YAAY,CAAC,EAAE,iBAAiB,GAC/B,mBAAmB,CA0BrB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAOjE,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,UAAU,GACX,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAEnG,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtG;;;;OAIG;IACH,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,GAAE,MAAM,GAAG,IAAW,GAAG,mBAAmB,CAa9F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,mBAAmB,CAmBnG;AAwBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,mBAAmB,GAAG,IAAI,EACtC,YAAY,CAAC,EAAE,iBAAiB,GAC/B,mBAAmB,CA0BrB"}

package/dist/auth.js

@@ -1,4 +1,10 @@
 import { ConfigurationError } from './_internal/errors/index.js';
+// Re-export focused responsibility classes for consumers who prefer
+// narrower, single-concern APIs over the combined GoodVibesAuthClient facade.
+// NOTE: OAuthClient is intentionally NOT re-exported here. It depends on
+// node:crypto and is not safe in React Native / browser bundles.
+// Use @pellux/goodvibes-sdk/oauth for Node.js consumers who need OAuthClient.
+export { PermissionResolver, SessionManager, TokenStore, } from './_internal/platform/auth/index.js';
 function requireStorage(storage) {
     const resolved = storage ?? globalThis.localStorage;
     if (!resolved) {