@reactor-team/js-sdk 2.0.0 → 2.0.1

package/README.md

@@ -11,24 +11,10 @@ There are two main ways to use the frontend SDK:
 
 ## Building the SDK
 
-Set up the environment variables:
-
-```bash
-cp .env.example .env
-```
-
-Then add your NPM_TOKEN to the .env file.
-
-Build the SDK:
-
 ```bash
 pnpm build
 ```
 
-## Publishing
-
-To publish the SDK:
+## Documentation
 
-```bash
-./publish_package.sh
-```
+- [Getting Started](https://docs.reactor.inc)

package/dist/index.d.mts

@@ -171,4 +171,17 @@ declare function useReactor<T>(selector: (state: ReactorStore) => T): T;
  */
 declare function useReactorMessage(handler: (message: any) => void): void;
 
-export { type Options, PROD_COORDINATOR_URL, Reactor, ReactorController, type ReactorControllerProps, type ReactorError, type ReactorEvent, ReactorProvider, type ReactorState$1 as ReactorState, type ReactorStatus, ReactorView, type ReactorViewProps, WebcamStream, useReactor, useReactorMessage, useReactorStore };
+/**
+ * ⚠️ INSECURE: Fetches a JWT token directly from the client.
+ *
+ * WARNING: This function exposes your API key in client-side code.
+ * Only use this for local development or testing purposes.
+ * In production, call /tokens from your server and pass the JWT to your frontend.
+ *
+ * @param apiKey - Your Reactor API key (will be exposed in client code!)
+ * @param coordinatorUrl - Optional coordinator URL, defaults to production
+ * @returns string containing the JWT token
+ */
+declare function fetchInsecureJwtToken(apiKey: string, coordinatorUrl?: string): Promise<string>;
+
+export { type Options, PROD_COORDINATOR_URL, Reactor, ReactorController, type ReactorControllerProps, type ReactorError, type ReactorEvent, ReactorProvider, type ReactorState$1 as ReactorState, type ReactorStatus, ReactorView, type ReactorViewProps, WebcamStream, fetchInsecureJwtToken, useReactor, useReactorMessage, useReactorStore };

package/dist/index.d.ts

@@ -171,4 +171,17 @@ declare function useReactor<T>(selector: (state: ReactorStore) => T): T;
  */
 declare function useReactorMessage(handler: (message: any) => void): void;
 
-export { type Options, PROD_COORDINATOR_URL, Reactor, ReactorController, type ReactorControllerProps, type ReactorError, type ReactorEvent, ReactorProvider, type ReactorState$1 as ReactorState, type ReactorStatus, ReactorView, type ReactorViewProps, WebcamStream, useReactor, useReactorMessage, useReactorStore };
+/**
+ * ⚠️ INSECURE: Fetches a JWT token directly from the client.
+ *
+ * WARNING: This function exposes your API key in client-side code.
+ * Only use this for local development or testing purposes.
+ * In production, call /tokens from your server and pass the JWT to your frontend.
+ *
+ * @param apiKey - Your Reactor API key (will be exposed in client code!)
+ * @param coordinatorUrl - Optional coordinator URL, defaults to production
+ * @returns string containing the JWT token
+ */
+declare function fetchInsecureJwtToken(apiKey: string, coordinatorUrl?: string): Promise<string>;
+
+export { type Options, PROD_COORDINATOR_URL, Reactor, ReactorController, type ReactorControllerProps, type ReactorError, type ReactorEvent, ReactorProvider, type ReactorState$1 as ReactorState, type ReactorStatus, ReactorView, type ReactorViewProps, WebcamStream, fetchInsecureJwtToken, useReactor, useReactorMessage, useReactorStore };

package/dist/index.js

@@ -85,6 +85,7 @@ __export(index_exports, {
   ReactorProvider: () => ReactorProvider,
   ReactorView: () => ReactorView,
   WebcamStream: () => WebcamStream,
+  fetchInsecureJwtToken: () => fetchInsecureJwtToken,
   useReactor: () => useReactor,
   useReactorMessage: () => useReactorMessage,
   useReactorStore: () => useReactorStore
@@ -2128,6 +2129,27 @@ function WebcamStream({
     }
   );
 }
+
+// src/utils/tokens.ts
+function fetchInsecureJwtToken(_0) {
+  return __async(this, arguments, function* (apiKey, coordinatorUrl = PROD_COORDINATOR_URL) {
+    console.warn(
+      "[Reactor] \u26A0\uFE0F SECURITY WARNING: fetchInsecureJwtToken() exposes your API key in client-side code. This should ONLY be used for local development or testing. In production, fetch tokens from your server instead."
+    );
+    const response = yield fetch(`${coordinatorUrl}/tokens`, {
+      method: "GET",
+      headers: {
+        "X-API-Key": apiKey
+      }
+    });
+    if (!response.ok) {
+      const error = yield response.text();
+      throw new Error(`Failed to create token: ${response.status} ${error}`);
+    }
+    const { jwt } = yield response.json();
+    return jwt;
+  });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   PROD_COORDINATOR_URL,
@@ -2136,6 +2158,7 @@ function WebcamStream({
   ReactorProvider,
   ReactorView,
   WebcamStream,
+  fetchInsecureJwtToken,
   useReactor,
   useReactorMessage,
   useReactorStore