@qoniai/qoni 0.7.0 → 0.8.0

package/dist/index.d.cts

@@ -138,11 +138,16 @@ interface UserRef {
 interface DelegateTokenBaseInput {
     /** Audit label for this delegation. Defaults to "sdk". */
     agent?: string;
+    /** Compatibility alias for agent. Supplying conflicting labels is an error. */
+    agentKey?: string;
     /** Fine-grained scopes. May be combined with `products`. */
     scopes?: readonly string[];
     /** Per-product authorization sugar — expands to the product's scope set. */
     products?: readonly QoniProductName[];
+    /** Integer seconds (60–86400), or a whole-number duration such as "15m". */
     expiresIn?: string | number;
+    /** Not supported: the delegation service does not enforce a deny policy. */
+    deniedScopes?: never;
     idempotencyKey?: string;
 }
 /**
@@ -156,11 +161,11 @@ type DelegateTokenSilentInput = DelegateTokenBaseInput & {
     state?: string;
 } & ({
     user: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId?: string;
 } | {
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId: string;
 });
 interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
@@ -168,7 +173,7 @@ interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
     redirectUri: string;
     state: string;
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id; optional for interactive authorization. */
     userId?: string;
 }
 type DelegateTokenInput = DelegateTokenSilentInput | DelegateTokenInteractiveInput;
@@ -1074,7 +1079,13 @@ type GenAuthUserDeleteBatchInput = GenAuthAdminTokenOverrideInput & {
 };
 declare function createGenAuthNamespace(transport: QoniTransport, options?: {
     adminTokenFor?: GenAuthAdminTokenProvider;
+    delegateTokenFor?: (input: DelegateTokenInput) => Promise<QoniResponse<DelegateAgentResponse>>;
 }): {
+    delegateAgent: {
+        (input: DelegateTokenSilentInput): Promise<DelegateTokenSilentResponse>;
+        (input: DelegateTokenInteractiveInput): Promise<InteractiveDelegationResponse>;
+        (input: DelegateTokenInput): Promise<DelegateAgentResponse>;
+    };
     userInfo: <T = unknown>(input: GenAuthAccessTokenInput) => Promise<QoniResponse<T>>;
     jwks: <T = unknown>() => Promise<QoniResponse<T>>;
     discovery: <T = unknown>() => Promise<QoniResponse<T>>;

package/dist/index.d.ts

@@ -138,11 +138,16 @@ interface UserRef {
 interface DelegateTokenBaseInput {
     /** Audit label for this delegation. Defaults to "sdk". */
     agent?: string;
+    /** Compatibility alias for agent. Supplying conflicting labels is an error. */
+    agentKey?: string;
     /** Fine-grained scopes. May be combined with `products`. */
     scopes?: readonly string[];
     /** Per-product authorization sugar — expands to the product's scope set. */
     products?: readonly QoniProductName[];
+    /** Integer seconds (60–86400), or a whole-number duration such as "15m". */
     expiresIn?: string | number;
+    /** Not supported: the delegation service does not enforce a deny policy. */
+    deniedScopes?: never;
     idempotencyKey?: string;
 }
 /**
@@ -156,11 +161,11 @@ type DelegateTokenSilentInput = DelegateTokenBaseInput & {
     state?: string;
 } & ({
     user: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId?: string;
 } | {
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id. A nonempty userId takes precedence. */
     userId: string;
 });
 interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
@@ -168,7 +173,7 @@ interface DelegateTokenInteractiveInput extends DelegateTokenBaseInput {
     redirectUri: string;
     state: string;
     user?: UserRef;
-    /** @deprecated Use user. */
+    /** Alternative to user.id; optional for interactive authorization. */
     userId?: string;
 }
 type DelegateTokenInput = DelegateTokenSilentInput | DelegateTokenInteractiveInput;
@@ -1074,7 +1079,13 @@ type GenAuthUserDeleteBatchInput = GenAuthAdminTokenOverrideInput & {
 };
 declare function createGenAuthNamespace(transport: QoniTransport, options?: {
     adminTokenFor?: GenAuthAdminTokenProvider;
+    delegateTokenFor?: (input: DelegateTokenInput) => Promise<QoniResponse<DelegateAgentResponse>>;
 }): {
+    delegateAgent: {
+        (input: DelegateTokenSilentInput): Promise<DelegateTokenSilentResponse>;
+        (input: DelegateTokenInteractiveInput): Promise<InteractiveDelegationResponse>;
+        (input: DelegateTokenInput): Promise<DelegateAgentResponse>;
+    };
     userInfo: <T = unknown>(input: GenAuthAccessTokenInput) => Promise<QoniResponse<T>>;
     jwks: <T = unknown>() => Promise<QoniResponse<T>>;
     discovery: <T = unknown>() => Promise<QoniResponse<T>>;

package/dist/index.js

@@ -1564,7 +1564,14 @@ function createQoniNamespace(_transport, delegateToken, completeDelegateToken) {
 
 // src/genauth.ts
 function createGenAuthNamespace(transport, options = {}) {
+  async function delegateAgent(input) {
+    if (!options.delegateTokenFor) {
+      throw new QoniValidationError("GenAuth delegateAgent requires a Qoni delegation provider");
+    }
+    return (await options.delegateTokenFor(input)).data;
+  }
   return {
+    delegateAgent,
     userInfo: (input) => transport.genauthJson("GET", "/oidc/me", input.accessToken),
     jwks: () => transport.genauthJson("GET", "/oidc/.well-known/jwks.json"),
     discovery: () => transport.genauthJson("GET", "/oidc/.well-known/openid-configuration"),
@@ -2200,7 +2207,8 @@ var Qoni = class {
       webAgentSSE: (...args) => this.webAgentSSE(...args)
     };
     this.genauth = createGenAuthNamespace(transport, {
-      adminTokenFor: () => this.genauthAdminTokenFor()
+      adminTokenFor: () => this.genauthAdminTokenFor(),
+      delegateTokenFor: (input) => this.delegateToken(input)
     });
     this.qoni = createQoniNamespace(
       transport,
@@ -2913,19 +2921,43 @@ function toRecord(value) {
 }
 function normalizeDelegateTokenInput(input) {
   const body = toRecord(input);
+  if (input.deniedScopes !== void 0) {
+    throw new QoniValidationError(
+      "delegateToken: deniedScopes is not supported by the delegation service. Do not rely on this field to prevent mailbox or browser actions."
+    );
+  }
+  if (input.agent !== void 0 && input.agentKey !== void 0 && input.agent !== input.agentKey) {
+    throw new QoniValidationError("delegateToken: agent and agentKey must identify the same Agent");
+  }
   if (!body.userId && isJsonObject(input.user) && typeof input.user.id === "string") {
     body.userId = input.user.id;
   }
   if (input.mode !== "interactive" && !body.userId) {
     throw new QoniValidationError(
-      'delegateToken: silent mode requires a user \u2014 pass `user: { id: <genauthUserId> }` (or the deprecated top-level `userId`). Interactive mode (`mode: "interactive"`) does not need one.'
+      'delegateToken: silent mode requires a user \u2014 pass `user: { id: <genauthUserId> }` (or the top-level `userId`). Interactive mode (`mode: "interactive"`) does not need one.'
     );
   }
-  body.agent = input.agent ?? "sdk";
+  body.agent = input.agent ?? input.agentKey ?? "sdk";
+  delete body.agentKey;
+  if (input.expiresIn !== void 0) body.expiresIn = delegationDurationSeconds(input.expiresIn);
   body.scopes = resolveDelegationScopes(input.scopes, input.products);
   delete body.products;
   return body;
 }
+function delegationDurationSeconds(value) {
+  let seconds = value;
+  if (typeof value === "string") {
+    const duration = /^(\d+)(s|m|h|d)?$/.exec(value);
+    const units = { s: 1, m: 60, h: 3600, d: 86400 };
+    seconds = duration ? Number(duration[1]) * units[duration[2] ?? "s"] : NaN;
+  }
+  if (typeof seconds !== "number" || !Number.isInteger(seconds) || seconds < 60 || seconds > 86400) {
+    throw new QoniValidationError(
+      'delegateToken: expiresIn must be 60\u201386400 integer seconds or a whole-number duration such as "15m"'
+    );
+  }
+  return seconds;
+}
 function resolveDelegationScopes(scopes, products) {
   const resolved = /* @__PURE__ */ new Set();
   for (const product of products ?? []) {
@@ -2949,6 +2981,11 @@ function resolveDelegationScopes(scopes, products) {
   return [...resolved];
 }
 function validateScopeFormat(scope) {
+  if (scope.startsWith("mailbox.") || scope === "web.search" || scope === "web.extract") {
+    throw new QoniValidationError(
+      `delegateToken: legacy action scope "${scope}" has no enforced mapping in this delegation service. It will not be expanded into broader product permissions.`
+    );
+  }
   if (KNOWN_SCOPES.includes(scope)) return;
   const prefixed = KNOWN_SCOPES.find((known) => known.endsWith(`.${scope}`) || known === `webagent.${scope}`);
   if (prefixed) {