@simonpeacocks/peacockery-voice-client 0.1.0

package/README.md

@@ -0,0 +1,26 @@
+# Peacockery Voice TypeScript client
+
+The request and response types in `src/schema.ts` are generated from the service's checked-in `openapi.json`. The small runtime wrapper uses `openapi-fetch` and accepts either the `lab` or `production` environment.
+
+Install it from the private repository:
+
+```bash
+pnpm add '@chikingsley/peacockery-voice-client@github:chikingsley/peacockery-voice#main&path:/clients/typescript'
+```
+
+```ts
+import { createPeacockeryVoiceClient } from "@chikingsley/peacockery-voice-client";
+
+const voice = createPeacockeryVoiceClient({
+  apiKey: process.env.PEACOCKERY_VOICE_API_KEY!,
+  environment: "lab",
+});
+
+const { data, error } = await voice.GET("/v1/models");
+```
+
+For a device-bound child, pass `authorizationScheme: "DPoP"` and a platform proof provider. The callback receives the access token, HTTP method, canonical resource URI, and current server nonce; it returns one ES256 `dpop+jwt`. The wrapper automatically retries the first `use_dpop_nonce` challenge with a new proof. A trusted parent can also remain `Bearer` while supplying `dpopProof` to bind a newly minted child.
+
+Private-key creation and signing stay in platform code. On Apple hardware the intended provider uses a non-exportable Secure Enclave P-256 key; the generated client never serializes or persists that key.
+
+Run `pnpm run generate:sdk` from the repository root whenever the OpenAPI contract changes. Compiled JavaScript and declarations are checked in so a private Git installation does not need to execute package lifecycle scripts. Realtime WebSockets still use the protocol documented by `/v1/realtime`; `openapi-fetch` covers the HTTP surface.

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+import type { paths } from "./schema.js";
+export type { components, operations, paths } from "./schema.js";
+export declare const peacockeryVoiceBaseUrls: {
+    readonly lab: "https://voice-lab.peacockery.studio";
+    readonly production: "https://voice.peacockery.studio";
+};
+export type PeacockeryVoiceEnvironment = keyof typeof peacockeryVoiceBaseUrls;
+export interface PeacockeryVoiceDpopProofInput {
+    readonly accessToken: string;
+    readonly htm: string;
+    readonly htu: string;
+    readonly nonce?: string;
+}
+export type PeacockeryVoiceDpopProofProvider = (input: PeacockeryVoiceDpopProofInput) => Promise<string>;
+export interface PeacockeryVoiceClientOptions {
+    apiKey: string;
+    authorizationScheme?: "Bearer" | "DPoP";
+    baseUrl?: string;
+    dpopProof?: PeacockeryVoiceDpopProofProvider;
+    environment?: PeacockeryVoiceEnvironment;
+    fetch?: typeof globalThis.fetch;
+}
+export declare const createPeacockeryVoiceClient: (options: PeacockeryVoiceClientOptions) => import("openapi-fetch").Client<paths, `${string}/${string}`>;
+export type PeacockeryVoiceClient = ReturnType<typeof createPeacockeryVoiceClient>;

package/dist/index.js

@@ -0,0 +1,48 @@
+import createClient from "openapi-fetch";
+export const peacockeryVoiceBaseUrls = {
+    lab: "https://voice-lab.peacockery.studio",
+    production: "https://voice.peacockery.studio",
+};
+const dpopHtu = (requestUrl) => {
+    const url = new URL(requestUrl);
+    return `${url.origin}${url.pathname}`;
+};
+const authenticatedFetch = (options) => {
+    const scheme = options.authorizationScheme ?? "Bearer";
+    const fetchImplementation = options.fetch ?? globalThis.fetch;
+    if (scheme === "DPoP" && !options.dpopProof) {
+        throw new Error("DPoP authorization requires a proof provider");
+    }
+    let nonce;
+    return async (input, init) => {
+        const request = new Request(input, init);
+        const send = async () => {
+            const headers = new Headers(request.headers);
+            headers.set("Authorization", `${scheme} ${options.apiKey}`);
+            if (options.dpopProof) {
+                headers.set("DPoP", await options.dpopProof({
+                    accessToken: options.apiKey,
+                    htm: request.method,
+                    htu: dpopHtu(request.url),
+                    ...(nonce ? { nonce } : {}),
+                }));
+            }
+            return fetchImplementation(new Request(request.clone(), { headers }));
+        };
+        const response = await send();
+        const challengedNonce = response.headers.get("DPoP-Nonce")?.trim();
+        if (response.status !== 401 || !challengedNonce || !options.dpopProof) {
+            return response;
+        }
+        nonce = challengedNonce;
+        await response.body?.cancel();
+        return send();
+    };
+};
+export const createPeacockeryVoiceClient = (options) => {
+    const environment = options.environment ?? "production";
+    return createClient({
+        baseUrl: options.baseUrl ?? peacockeryVoiceBaseUrls[environment],
+        fetch: authenticatedFetch(options),
+    });
+};