@sageion/node 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sageion
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,8 @@
-# Temporary Holding Version
+# @sageion/node
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The official Sageion SDK for Node.js backends.
+
+## Installation
+
+```bash
+npm install @sageion/node

package/index.js

@@ -0,0 +1,10 @@
+// backend/node/sageion-node/index.js
+const { encryptToken } = require('./lib/crypto');
+const { dispatchWebhook, dispatchWebhookAsync } = require('./lib/webhook');
+
+console.log("does it run anyway in dev wihtout running npk run dev??")
+module.exports = {
+  encryptToken,
+  dispatchWebhook,
+  dispatchWebhookAsync
+};

package/lib/crypto.js

@@ -0,0 +1,53 @@
+// backend/node/sageion-node/lib/crypto.js
+const crypto = require('node:crypto');
+
+/**
+ * Encrypts a plaintext JWT using Sageion's Public Key.
+ * 
+ * @param {string} plaintextToken - The JWT generated by your backend.
+ * @param {string} publicKeyPem - Your Sageion Public Key (from .env or file).
+ * @returns {string} The encrypted token to send to Sageion.
+ */
+function encryptToken(plaintextToken, publicKeyPem) {
+  if (!plaintextToken || typeof plaintextToken !== 'string') {
+    throw new Error('[Sageion SDK] plaintextToken must be a non-empty string');
+  }
+  if (!publicKeyPem) {
+    throw new Error('[Sageion SDK] publicKeyPem is required');
+  }
+
+  // Validate the PEM format early to give a helpful error
+  try {
+    crypto.createPublicKey(publicKeyPem);
+  } catch (err) {
+    throw new Error(`[Sageion SDK] Invalid Public Key PEM: ${err.message}`);
+  }
+
+  const aesKey = crypto.randomBytes(32);
+  const nonce = crypto.randomBytes(12);
+
+  const cipher = crypto.createCipheriv('aes-256-gcm', aesKey, nonce);
+  const ciphertext = Buffer.concat([
+    cipher.update(plaintextToken, 'utf8'),
+    cipher.final(),
+  ]);
+  const authTag = cipher.getAuthTag();
+  const ciphertextWithTag = Buffer.concat([ciphertext, authTag]);
+
+  const rsaWrappedKey = crypto.publicEncrypt(
+    {
+      key: publicKeyPem,
+      padding: crypto.constants.RSA_PKCS1_OAEP_PADDING,
+      oaepHash: 'sha256',
+    },
+    aesKey
+  );
+
+  return [
+    rsaWrappedKey.toString('base64'),
+    nonce.toString('base64'),
+    ciphertextWithTag.toString('base64'),
+  ].join('.');
+}
+
+module.exports = { encryptToken };

package/lib/webhook.js

@@ -0,0 +1,53 @@
+// backend/node/sageion-node/lib/webhook.js
+
+/**
+ * Dispatches a webhook back to Sageion.
+ * Uses native Node 18+ fetch.
+ * 
+ * @param {string} correlationId - The ID passed in the request headers.
+ * @param {number} statusCode - 200 (success/pause), 201 (created), 400 (bad request).
+ * @param {object} data - The payload.
+ * @param {object} options - { region: 'us', webhookUrl: '...' }
+ */
+async function dispatchWebhook(correlationId, statusCode, data = {}, options = {}) {
+  if (!correlationId) return; // Silent skip if no correlation ID
+
+  const region = (options.region || process.env.SAGEION_REGION || 'us').toLowerCase();
+  const url = options.webhookUrl || `https://${region}.autobot2.tezkit.com/dev/webhook/callback`;
+
+  const payload = {
+    correlation_id: correlationId,
+    data: { status_code: statusCode, ...data }
+  };
+
+  console.log(`\n[Sageion SDK] 🚀 Firing webhook to ${url}`);
+  console.log(`[Sageion SDK] 📦 correlation_id: ${correlationId}, status_code: ${statusCode}`);
+
+  try {
+    const response = await fetch(url, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(payload),
+    });
+
+    if (!response.ok) {
+      const text = await response.text();
+      console.error(`[Sageion SDK] ❌ Webhook failed: HTTP ${response.status} - ${text}`);
+    } else {
+      console.log(`[Sageion SDK] ✅ Webhook accepted (HTTP ${response.status})`);
+    }
+  } catch (error) {
+    console.error(`[Sageion SDK] ❌ Network error firing webhook:`, error.message);
+  }
+}
+
+/**
+ * Fire-and-forget wrapper for the webhook.
+ * Use this when you don't want to block your API response.
+ */
+function dispatchWebhookAsync(correlationId, statusCode, data = {}, options = {}) {
+  if (!correlationId) return;
+  setTimeout(() => dispatchWebhook(correlationId, statusCode, data, options), 0);
+}
+
+module.exports = { dispatchWebhook, dispatchWebhookAsync };

package/package.json

@@ -1,6 +1,29 @@
 {
   "name": "@sageion/node",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Official Sageion SDK for Node.js backends. Handles Webhook dispatch and Token encryption.",
+  "main": "index.js",
+  "files": [
+    "index.js",
+    "lib/"
+  ],
+  "scripts": {
+    "test": "node --test"
+  },
+  "keywords": [
+    "sageion",
+    "ai",
+    "agent",
+    "webhook",
+    "auth",
+    "crypto"
+  ],
+  "author": "Sageion",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
 }